Repository navigation
Conversation
…nalIP kube-proxy answers the node's InternalIP itself, so the tests never went through ServiceLB, which masquerades every other address. The new servicelb upgrade test and the unit tests cover Traefik binding the host's ports.
…t's address k3s ServiceLB masquerades, so behind it every request came from its pod whenever traffic arrived on an address other than the node's InternalIP.
…es the pod With host ports the old pod stops before its replacement exists, so a slow or refused pull would leave nothing serving. Failed kubectl lookups now stop the install instead of being read as answers.
Contributor
Author
|
Folded into #731, which carries these commits with the k3s Gateway API change so they merge together. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Traefik binds the host's ports itself instead of sitting behind k3s ServiceLB, which masquerades every request to its own pod address whenever traffic arrives on an address other than the node's InternalIP (k3s on a VPN or private node IP). Refs #717.
install_traefiksetshostPortfrom HTTP_PORT/HTTPS_PORT, and rollouts replace the pod in placemove_traefik_to_host_portsmoves it onto the ports (update.sh, dev.sh)retire_ingress_nginxonly waits for a LoadBalancer address right after a handover