-
Notifications
You must be signed in to change notification settings - Fork 369
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Implement bundle APIs and corresponding command in Antctl #694
Conversation
Thanks for your PR. The following commands are available:
These commands can only be run by members of the vmware-tanzu organization. |
52fa8c4
to
e232a65
Compare
e232a65
to
b54fc0b
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Haven't finished review yet
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A general question on the design - if the bundle lifecycle is decided by the client, should we do REST like API and support create, delete, and get (download) against a single path like: /support-bundles/, instead of a separate path for downloading under: /support-bundles/download/?
@tnqn @edwardbadboy
11804ac
to
be9f7f2
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Did not review all code yet, but two quick comments.
94db71f
to
c653212
Compare
@weiqiangt @tnqn : are we able to get this one in 0.7.0? |
ab9a364
to
bda9cf6
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for the update. I did not understand why there are two set of funcs for agent that implement the same functionalities. Could you check my question below?
bda9cf6
to
120926a
Compare
c22891f
to
39562f5
Compare
/test-all |
/test-all |
aeeb992
to
62aaaac
Compare
/test-all |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
some typos I must have missed in my first review, along with one question
otherwise code LGTM, I think all my previous comments were addressed
kubeconfig.APIPath = "/apis" | ||
kubeconfig.GroupVersion = &systemv1beta1.SchemeGroupVersion | ||
kubeconfig.NegotiatedSerializer = scheme.Codecs.WithoutConversion() | ||
kubeconfig.Insecure = true |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@tnqn @weiqiangt
A bit of a last-minute question, is this only needed for the self-signed certificate case?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm afraid not. There is no server verification function in Antctl for now.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If antctl talks to kube-apiserver, it should use the K8s CA cert set in kubeconfig to verify kube-apiserver, and kube-apiserver will then start a new HTTPS request against antrea-controller and use CABundle in APIServices to verify it.
But support bundle command goes to antrea-controller and antrea-agent directly, we can probably read antrea-ca ConfigMap to verify antrea-controller, but we don't publish antrea-agent's self-signed cert yet, so no way to verify them for now.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks a lot for the clarification @tnqn.
@weiqiangt / @tnqn do you think you could open an issue to track this? I don't know if you have a solution / long-term plan in mind already.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just created one #758.
Implement `antctl bundle` command for collecting bundle via CLI Signed-off-by: Weiqiang TANG <[email protected]>
62aaaac
to
1472d24
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
/test-all |
/test-e2e |
/test-conformance |
1 similar comment
/test-conformance |
/test-e2e |
/test-networkpolicy |
/test-conformance |
) - Add system.antrea.tanzu.vmware.com/v1beta1/bundles API on both agent APIServer and controller APIServer for generating support bundles. - Add system.antrea.tanzu.vmware.com/v1beta1/bundles/download for downloading bundles. - Add related unit tests and e2e tests. - An antctl command for collecting bundles. Resolves antrea-io#703. Signed-off-by: Weiqiang TANG <[email protected]>
- Add system.antrea.tanzu.vmware.com/v1beta1/bundles API on both agent APIServer and controller APIServer for generating support bundles. - Add system.antrea.tanzu.vmware.com/v1beta1/bundles/download for downloading bundles. - Add related unit tests and e2e tests. - An antctl command for collecting bundles. Resolves #703. Signed-off-by: Weiqiang TANG <[email protected]>
) - Add system.antrea.tanzu.vmware.com/v1beta1/bundles API on both agent APIServer and controller APIServer for generating support bundles. - Add system.antrea.tanzu.vmware.com/v1beta1/bundles/download for downloading bundles. - Add related unit tests and e2e tests. - An antctl command for collecting bundles. Resolves antrea-io#703. Signed-off-by: Weiqiang TANG <[email protected]>
) - Add system.antrea.tanzu.vmware.com/v1beta1/bundles API on both agent APIServer and controller APIServer for generating support bundles. - Add system.antrea.tanzu.vmware.com/v1beta1/bundles/download for downloading bundles. - Add related unit tests and e2e tests. - An antctl command for collecting bundles. Resolves antrea-io#703. Signed-off-by: Weiqiang TANG <[email protected]>
system.antrea.tanzu.vmware.com/v1beta1/bundles
APIon both agent APIServer and controller APIServer for
generating support bundles.
system.antrea.tanzu.vmware.com/v1beta1/bundles/download
for downloading bundles.
Resolves #703.
Signed-off-by: Weiqiang TANG [email protected]