feat: Update bind address for k8s components (#197)

* feat: Update bind address for k8s components * Allow kube-proxy traffic --------- Co-authored-by: okozachenko1203 <okozachenko1203@users.noreply.github.com> Co-authored-by: Mohammed Naser <mnaser@vexxhost.com>
vexxhost · May 30, 2024 · 4b1f5d8 · 4b1f5d8
1 parent 570bbf0
commit 4b1f5d8
Show file tree

Hide file tree

Showing 5 changed files with 40 additions and 0 deletions.
diff --git a/magnum_cluster_api/files/__init__.py b/magnum_cluster_api/files/__init__.py
diff --git a/magnum_cluster_api/files/run/__init__.py b/magnum_cluster_api/files/run/__init__.py
diff --git a/magnum_cluster_api/files/run/kubeadm/__init__.py b/magnum_cluster_api/files/run/kubeadm/__init__.py
diff --git a/magnum_cluster_api/files/run/kubeadm/configure-kube-proxy.sh b/magnum_cluster_api/files/run/kubeadm/configure-kube-proxy.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+# SPDX-License-Identifier: Apache-2.0
+
+set -o pipefail
+set -o errexit
+set -o nounset
+
+if grep -q "KubeProxyConfiguration" /run/kubeadm/kubeadm.yaml; then
+    exit 0
+fi
+
+cat <<EOF >> /run/kubeadm/kubeadm.yaml
+---
+apiVersion: kubeproxy.config.k8s.io/v1alpha1
+kind: KubeProxyConfiguration
+metricsBindAddress: "0.0.0.0:10249"
+EOF
diff --git a/magnum_cluster_api/resources.py b/magnum_cluster_api/resources.py
@@ -13,6 +13,7 @@
 # under the License.
 
 import glob
+import importlib.resources
 import json
 import os
 import textwrap
@@ -603,14 +604,23 @@ def get_object(self) -> objects.KubeadmControlPlaneTemplate:
                                             }
                                         ],
                                     },
+                                    "etcd": {
+                                        "local": {
+                                            "extraArgs": {
+                                                "listen-metrics-urls": "http://0.0.0.0:2381",
+                                            },
+                                        },
+                                    },
                                     "controllerManager": {
                                         "extraArgs": {
+                                            "bind-address": "0.0.0.0",
                                             "cloud-provider": "external",
                                             "profiling": "false",
                                         },
                                     },
                                     "scheduler": {
                                         "extraArgs": {
+                                            "bind-address": "0.0.0.0",
                                             "profiling": "false",
                                         },
                                     },
@@ -631,6 +641,18 @@ def get_object(self) -> objects.KubeadmControlPlaneTemplate:
                                         ),
                                         "encoding": "base64",
                                     },
+                                    {
+                                        "path": "/run/kubeadm/configure-kube-proxy.sh",
+                                        "permissions": "0755",
+                                        "content": base64.encode_as_text(
+                                            importlib.resources.files(
+                                                "magnum_cluster_api.files.run.kubeadm"
+                                            )
+                                            .joinpath("configure-kube-proxy.sh")
+                                            .read_text()
+                                        ),
+                                        "encoding": "base64",
+                                    },
                                 ],
                                 "initConfiguration": {
                                     "nodeRegistration": {