-
Notifications
You must be signed in to change notification settings - Fork 39.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
federation: Adding namespaces API #26298
federation: Adding namespaces API #26298
Conversation
This is required if we want to support NamespaceLifecycle AdmissionControl. But at almost all the places, we set To support NamespaceLifecycle we need this change. So I think for 1.3, we can just say that we do not support these Admission Controls. We will support them in 1.4. In that case we can just hold this PR till 1.4. Else, we can merge this PR and I can send a similar one for ResourceQuota and others. @kubernetes/sig-cluster-federation @quinton-hoole thoughts? |
Discussed this with @quinton-hoole and decided its fine to hold this till 1.4 |
@nikhiljindal Now that #26142 is merged can we get this one merged as well for 1.3? I think we will need this to create federated services, at least if we want them namespaced. |
@madhusudancs As described in #26298 (comment), this is not strictly required for creating namespaced services. This change is required only if the --admission-control flag on apiserver includes NamespaceLifecycle (default value is AlwaysAdmit). We dont need this change if we are not supporting any other admission control than AlwaysAdmit in 1.3. |
@nikhiljindal Thanks for that clarification again and the patience. I didn't understand your previous comment correctly. Tried without --admission-control=NamespaceLifecycle and I am able to create services. |
Automatic merge from submit-queue federation: Update the list of supported admission controls Ref kubernetes#26298 (comment) In 1.3, we are going to support only AlwaysAdmit and AlwaysDeny admission controls. Updating the documentation accordingly. @kubernetes/sig-cluster-federation
I don't understand how you're making services without namespaces... On Tue, May 31, 2016 at 6:42 AM, Madhusudan.C.S notifications@github.com
|
@lavalamp We are creating the federated service shards with namespaces, i.e. the shards of the federated service that gets created in the Kubernetes clusters have a namespace. What @nikhiljindal and I are referring to here is the namespace in Ubernetes. To make it more concrete here is what is happening right now:
federation-apiserver accepts this, service controller watches this service (and the namespace is still associated with the service object) and does:
|
Yeah, I understand what you're doing. I'm saying you must have performed On Thu, Jun 2, 2016 at 10:02 PM, Madhusudan.C.S notifications@github.com
|
@lavalamp - if admission control is not running on that server for |
@derekwaynecarr Sorry I did not understand you. Who are "they"? I discussed this with @lavalamp. We are not doing any black magic in federation-apiserver to be able to use that path. Also note that while federation-apiserver will only support AlwaysAdmit admission control, the underlying k8s clusters still have the standard admission control. |
I have not tracked federation-server closely as of late, but I thought we were planning on supporting a unified namespace? If so, would you not need the namespace lifecycle handler? I suspect I need to get up to spped more on the federation-server, been too heads down looking at other issues. |
@nikhiljindal when this lands, we should modify the e2e framework:
|
6de2c4f
to
521e8e8
Compare
Rebased |
e3048d6
to
9479eda
Compare
9479eda
to
6f9409c
Compare
Fixed boilerplate and moved client changes to 1.4 clientset from 1.3 clientset. |
All tests pass! |
@nikhiljindal Have you confirmed that the federation e2e tests still pass? See comment from @colhom above. I don't see any e2e test updates in this PR? |
"services/status": serviceStatusStorage, | ||
"services": serviceStore, | ||
"services/status": serviceStatusStorage, | ||
"namespaces": namespaceStorage, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nit: can we make namespaceStorage
consistent with serviceStore
here (or vice verse). i.e. either Store or Storage, not both.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed
Other than the above comment LGTM. The non-autogenerated portion of this PR is extremely small, as far as I can tell, and LGTM. |
@nikhiljindal feel free to apply the label once you have addressed the nit and the e2e comments. |
6f9409c
to
48658ad
Compare
Thanks @quinton-hoole Can update the framework as per @colhom's suggestion in a separate PR. |
GCE e2e build/test passed for commit 48658ad. |
Automatic merge from submit-queue |
@nikhiljindal PR needs rebase |
Automatic merge from submit-queue federation: Adding namespaces API Adding namespaces API to federation-apiserver and updating the federation client to include namespaces -------------------------- Original description: This adds the namespaces API to federation-apiserver. The first commit is kubernetes#26142.
Automatic merge from submit-queue federation: Update the list of supported admission controls Ref kubernetes/kubernetes#26298 (comment) In 1.3, we are going to support only AlwaysAdmit and AlwaysDeny admission controls. Updating the documentation accordingly. @kubernetes/sig-cluster-federation
Adding namespaces API to federation-apiserver and updating the federation client to include namespaces
Original description:
This adds the namespaces API to federation-apiserver.
The first commit is #26142.