Allow kube-proxy traffic

vexxhost · May 30, 2024 · f7b781d · f7b781d
1 parent 3e90676
commit f7b781d
Show file tree

Hide file tree

Showing 5 changed files with 31 additions and 0 deletions.
diff --git a/magnum_cluster_api/files/__init__.py b/magnum_cluster_api/files/__init__.py
diff --git a/magnum_cluster_api/files/run/__init__.py b/magnum_cluster_api/files/run/__init__.py
diff --git a/magnum_cluster_api/files/run/kubeadm/__init__.py b/magnum_cluster_api/files/run/kubeadm/__init__.py
diff --git a/magnum_cluster_api/files/run/kubeadm/configure-kube-proxy.sh b/magnum_cluster_api/files/run/kubeadm/configure-kube-proxy.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+# SPDX-License-Identifier: Apache-2.0
+
+set -o pipefail
+set -o errexit
+set -o nounset
+
+if grep -q "KubeProxyConfiguration" /run/kubeadm/kubeadm.yaml; then
+    exit 0
+fi
+
+cat <<EOF >> /run/kubeadm/kubeadm.yaml
+---
+apiVersion: kubeproxy.config.k8s.io/v1alpha1
+kind: KubeProxyConfiguration
+metricsBindAddress: "0.0.0.0:10249"
+EOF
diff --git a/magnum_cluster_api/resources.py b/magnum_cluster_api/resources.py
@@ -13,6 +13,7 @@
 # under the License.
 
 import glob
+import importlib.resources
 import json
 import os
 import textwrap
@@ -640,6 +641,18 @@ def get_object(self) -> objects.KubeadmControlPlaneTemplate:
                                         ),
                                         "encoding": "base64",
                                     },
+                                    {
+                                        "path": "/run/kubeadm/configure-kube-proxy.sh",
+                                        "permissions": "0755",
+                                        "content": base64.encode_as_text(
+                                            importlib.resources.files(
+                                                "magnum_cluster_api.files.run.kubeadm"
+                                            )
+                                            .joinpath("configure-kube-proxy.sh")
+                                            .read_text()
+                                        ),
+                                        "encoding": "base64",
+                                    },
                                 ],
                                 "initConfiguration": {
                                     "nodeRegistration": {