Create sysconfig mount for kubernetes controller mgr

Since the kubernetes controller manager has been moved to a separate
pod, that pod needs to have access to /etc/sysconfig/kube_openstack_config
in order for the kubernetes load balancer feature to work. The
kube_openstack_config file contains the Kubernetes load balancer
configuration as well as the OpenStack credentials for the Neutron
client.

Note that as an alternative to this proposed fix, we could instead
change the Magnum developer's documentation for using the kubernetes
external load balancer feature to suggest having the cluster administrator
set up the mount point dynamically.

Change-Id: I407f5c7ba2069906f7bdbc4abb1c7618fa1e08e8
Partial-Bug: #1524025
This commit is contained in:
Dane LeBlanc 2016-09-12 04:22:51 -04:00
parent 8e3c65e037
commit e8dc23c42e
2 changed files with 13 additions and 0 deletions

View File

@ -107,6 +107,9 @@ spec:
- mountPath: /etc/ssl/certs - mountPath: /etc/ssl/certs
name: ssl-certs-host name: ssl-certs-host
readOnly: true readOnly: true
- mountPath: /etc/sysconfig
name: sysconfig
readOnly: true
hostNetwork: true hostNetwork: true
volumes: volumes:
- hostPath: - hostPath:
@ -115,6 +118,9 @@ spec:
- hostPath: - hostPath:
path: /etc/ssl/certs path: /etc/ssl/certs
name: ssl-certs-host name: ssl-certs-host
- hostPath:
path: /etc/sysconfig
name: sysconfig
EOF EOF
} }

View File

@ -24,6 +24,7 @@ write_files:
KUBE_CERTS_PATH=/etc/kubernetes/ssl KUBE_CERTS_PATH=/etc/kubernetes/ssl
HOST_CERTS_PATH=/usr/share/ca-certificates HOST_CERTS_PATH=/usr/share/ca-certificates
SYSCONFIG_PATH=/etc/sysconfig
SERVICE_ACCOUNT_PRIVATE_KEY_FILE=${KUBE_CERTS_PATH}/apiserver-key.pem SERVICE_ACCOUNT_PRIVATE_KEY_FILE=${KUBE_CERTS_PATH}/apiserver-key.pem
ROOT_CA_FILE=${KUBE_CERTS_PATH}/ca.pem ROOT_CA_FILE=${KUBE_CERTS_PATH}/ca.pem
@ -67,6 +68,9 @@ write_files:
- mountPath: /etc/ssl/certs - mountPath: /etc/ssl/certs
name: ssl-certs-host name: ssl-certs-host
readOnly: true readOnly: true
- mountPath: /etc/sysconfig
name: sysconfig
readOnly: true
volumes: volumes:
- hostPath: - hostPath:
path: ${KUBE_CERTS_PATH} path: ${KUBE_CERTS_PATH}
@ -74,4 +78,7 @@ write_files:
- hostPath: - hostPath:
path: ${HOST_CERTS_PATH} path: ${HOST_CERTS_PATH}
name: ssl-certs-host name: ssl-certs-host
- hostPath:
path: ${SYSCONFIG_PATH}
name: sysconfig
EOF EOF