doc: remove federation tests in example and some federation content. (#19581)
This commit is contained in:
@@ -265,15 +265,6 @@ work properly owing to a known issue with Alpine.
|
|||||||
Check [here](https://github.com/kubernetes/kubernetes/issues/30215)
|
Check [here](https://github.com/kubernetes/kubernetes/issues/30215)
|
||||||
for more information.
|
for more information.
|
||||||
|
|
||||||
## Kubernetes Federation (Multiple Zone support)
|
|
||||||
|
|
||||||
Release 1.3 introduced Cluster Federation support for multi-site Kubernetes
|
|
||||||
installations. This required some minor (backward-compatible) changes to the
|
|
||||||
way the Kubernetes cluster DNS server processes DNS queries, to facilitate
|
|
||||||
the lookup of federated services (which span multiple Kubernetes clusters).
|
|
||||||
See the [Cluster Federation Administrators' Guide](/docs/concepts/cluster-administration/federation/)
|
|
||||||
for more details on Cluster Federation and multi-site support.
|
|
||||||
|
|
||||||
## References
|
## References
|
||||||
|
|
||||||
- [DNS for Services and Pods](/docs/concepts/services-networking/dns-pod-service/)
|
- [DNS for Services and Pods](/docs/concepts/services-networking/dns-pod-service/)
|
||||||
|
|||||||
@@ -34,8 +34,6 @@ import (
|
|||||||
utilfeature "k8s.io/apiserver/pkg/util/feature"
|
utilfeature "k8s.io/apiserver/pkg/util/feature"
|
||||||
"k8s.io/kubernetes/pkg/api/legacyscheme"
|
"k8s.io/kubernetes/pkg/api/legacyscheme"
|
||||||
"k8s.io/kubernetes/pkg/api/testapi"
|
"k8s.io/kubernetes/pkg/api/testapi"
|
||||||
"k8s.io/kubernetes/pkg/apis/admissionregistration"
|
|
||||||
ar_validation "k8s.io/kubernetes/pkg/apis/admissionregistration/validation"
|
|
||||||
"k8s.io/kubernetes/pkg/apis/apps"
|
"k8s.io/kubernetes/pkg/apis/apps"
|
||||||
apps_validation "k8s.io/kubernetes/pkg/apis/apps/validation"
|
apps_validation "k8s.io/kubernetes/pkg/apis/apps/validation"
|
||||||
"k8s.io/kubernetes/pkg/apis/autoscaling"
|
"k8s.io/kubernetes/pkg/apis/autoscaling"
|
||||||
@@ -434,12 +432,6 @@ func TestExampleObjectSchemas(t *testing.T) {
|
|||||||
"node-problem-detector-configmap": {&apps.DaemonSet{}},
|
"node-problem-detector-configmap": {&apps.DaemonSet{}},
|
||||||
"termination": {&api.Pod{}},
|
"termination": {&api.Pod{}},
|
||||||
},
|
},
|
||||||
"federation": {
|
|
||||||
"policy-engine-deployment": {&apps.Deployment{}},
|
|
||||||
"policy-engine-service": {&api.Service{}},
|
|
||||||
"replicaset-example-policy": {&apps.ReplicaSet{}},
|
|
||||||
"scheduling-policy-admission": {&api.ConfigMap{}},
|
|
||||||
},
|
|
||||||
"podpreset": {
|
"podpreset": {
|
||||||
"allow-db": {&settings.PodPreset{}},
|
"allow-db": {&settings.PodPreset{}},
|
||||||
"allow-db-merged": {&api.Pod{}},
|
"allow-db-merged": {&api.Pod{}},
|
||||||
@@ -525,9 +517,9 @@ func TestExampleObjectSchemas(t *testing.T) {
|
|||||||
"redis": {&api.Pod{}},
|
"redis": {&api.Pod{}},
|
||||||
},
|
},
|
||||||
"policy": {
|
"policy": {
|
||||||
"privileged-psp": {&policy.PodSecurityPolicy{}},
|
"privileged-psp": {&policy.PodSecurityPolicy{}},
|
||||||
"restricted-psp": {&policy.PodSecurityPolicy{}},
|
"restricted-psp": {&policy.PodSecurityPolicy{}},
|
||||||
"example-psp": {&policy.PodSecurityPolicy{}},
|
"example-psp": {&policy.PodSecurityPolicy{}},
|
||||||
"zookeeper-pod-disruption-budget-maxunavailable": {&policy.PodDisruptionBudget{}},
|
"zookeeper-pod-disruption-budget-maxunavailable": {&policy.PodDisruptionBudget{}},
|
||||||
"zookeeper-pod-disruption-budget-minunavailable": {&policy.PodDisruptionBudget{}},
|
"zookeeper-pod-disruption-budget-minunavailable": {&policy.PodDisruptionBudget{}},
|
||||||
},
|
},
|
||||||
|
|||||||
@@ -1,37 +0,0 @@
|
|||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: opa
|
|
||||||
name: opa
|
|
||||||
namespace: federation-system
|
|
||||||
spec:
|
|
||||||
replicas: 1
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: opa
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: opa
|
|
||||||
name: opa
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: opa
|
|
||||||
image: openpolicyagent/opa:0.4.10
|
|
||||||
args:
|
|
||||||
- "run"
|
|
||||||
- "--server"
|
|
||||||
- name: kube-mgmt
|
|
||||||
image: openpolicyagent/kube-mgmt:0.2
|
|
||||||
args:
|
|
||||||
- "-kubeconfig=/srv/kubernetes/kubeconfig"
|
|
||||||
- "-cluster=federation/v1beta1/clusters"
|
|
||||||
volumeMounts:
|
|
||||||
- name: federation-kubeconfig
|
|
||||||
mountPath: /srv/kubernetes
|
|
||||||
readOnly: true
|
|
||||||
volumes:
|
|
||||||
- name: federation-kubeconfig
|
|
||||||
secret:
|
|
||||||
secretName: federation-controller-manager-kubeconfig
|
|
||||||
@@ -1,13 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: opa
|
|
||||||
namespace: federation-system
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
app: opa
|
|
||||||
ports:
|
|
||||||
- name: http
|
|
||||||
protocol: TCP
|
|
||||||
port: 8181
|
|
||||||
targetPort: 8181
|
|
||||||
@@ -1,21 +0,0 @@
|
|||||||
apiVersion: apps/v1
|
|
||||||
kind: ReplicaSet
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: nginx-pci
|
|
||||||
name: nginx-pci
|
|
||||||
annotations:
|
|
||||||
requires-pci: "true"
|
|
||||||
spec:
|
|
||||||
replicas: 3
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: nginx-pci
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: nginx-pci
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- image: nginx
|
|
||||||
name: nginx-pci
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: ConfigMap
|
|
||||||
metadata:
|
|
||||||
name: admission
|
|
||||||
namespace: federation-system
|
|
||||||
data:
|
|
||||||
config.yml: |
|
|
||||||
apiVersion: apiserver.k8s.io/v1alpha1
|
|
||||||
kind: AdmissionConfiguration
|
|
||||||
plugins:
|
|
||||||
- name: SchedulingPolicy
|
|
||||||
path: /etc/kubernetes/admission/scheduling-policy-config.yml
|
|
||||||
scheduling-policy-config.yml: |
|
|
||||||
kubeconfig: /etc/kubernetes/admission/opa-kubeconfig
|
|
||||||
opa-kubeconfig: |
|
|
||||||
clusters:
|
|
||||||
- name: opa-api
|
|
||||||
cluster:
|
|
||||||
server: http://opa.federation-system.svc.cluster.local:8181/v0/data/kubernetes/placement
|
|
||||||
users:
|
|
||||||
- name: scheduling-policy
|
|
||||||
user:
|
|
||||||
token: deadbeefsecret
|
|
||||||
contexts:
|
|
||||||
- name: default
|
|
||||||
context:
|
|
||||||
cluster: opa-api
|
|
||||||
user: scheduling-policy
|
|
||||||
current-context: default
|
|
||||||
Reference in New Issue
Block a user