5d6cf8ecd4
Until now, users were always asked to manually convert a component config to a version supported by kubeadm, if kubeadm is not supporting its version. This is true even for configs generated with older kubeadm versions, hence getting users to make manual conversions on kubeadm generated configs. This is not appropriate and user friendly, although, it tends to be the most common case. Hence, we sign kubeadm generated component configs stored in config maps with a SHA256 checksum. If a configs is loaded by kubeadm from a config map and has a valid signature it's considered "kubeadm generated" and if a version migration is required, this config is automatically discarded and a new one is generated. If there is no checksum or the checksum is not matching, the config is considered as "user supplied" and, if a version migration is required, kubeadm will bail out with an error, requiring manual config migration (as it's today). The behavior when supplying component configs on the kubeadm command line does not change. Kubeadm would still bail out with an error requiring migration if it can recognize their groups but not versions. Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
83 lines
3.5 KiB
Python
83 lines
3.5 KiB
Python
load("@io_bazel_rules_go//go:def.bzl", "go_library", "go_test")
|
|
|
|
go_library(
|
|
name = "go_default_library",
|
|
srcs = [
|
|
"checksums.go",
|
|
"configset.go",
|
|
"kubelet.go",
|
|
"kubeproxy.go",
|
|
"scheme.go",
|
|
"utils.go",
|
|
],
|
|
importpath = "k8s.io/kubernetes/cmd/kubeadm/app/componentconfigs",
|
|
visibility = ["//visibility:public"],
|
|
deps = [
|
|
"//cmd/kubeadm/app/apis/kubeadm:go_default_library",
|
|
"//cmd/kubeadm/app/apis/kubeadm/v1beta2:go_default_library",
|
|
"//cmd/kubeadm/app/constants:go_default_library",
|
|
"//cmd/kubeadm/app/features:go_default_library",
|
|
"//cmd/kubeadm/app/util:go_default_library",
|
|
"//cmd/kubeadm/app/util/apiclient:go_default_library",
|
|
"//cmd/kubeadm/app/util/initsystem:go_default_library",
|
|
"//staging/src/k8s.io/api/core/v1:go_default_library",
|
|
"//staging/src/k8s.io/apimachinery/pkg/api/errors:go_default_library",
|
|
"//staging/src/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
|
|
"//staging/src/k8s.io/apimachinery/pkg/runtime:go_default_library",
|
|
"//staging/src/k8s.io/apimachinery/pkg/runtime/schema:go_default_library",
|
|
"//staging/src/k8s.io/apimachinery/pkg/runtime/serializer:go_default_library",
|
|
"//staging/src/k8s.io/apimachinery/pkg/util/runtime:go_default_library",
|
|
"//staging/src/k8s.io/apimachinery/pkg/util/validation/field:go_default_library",
|
|
"//staging/src/k8s.io/apimachinery/pkg/util/version:go_default_library",
|
|
"//staging/src/k8s.io/client-go/kubernetes:go_default_library",
|
|
"//staging/src/k8s.io/kube-proxy/config/v1alpha1:go_default_library",
|
|
"//staging/src/k8s.io/kubelet/config/v1beta1:go_default_library",
|
|
"//vendor/github.com/pkg/errors:go_default_library",
|
|
"//vendor/k8s.io/klog/v2:go_default_library",
|
|
"//vendor/k8s.io/utils/exec:go_default_library",
|
|
"//vendor/k8s.io/utils/pointer:go_default_library",
|
|
],
|
|
)
|
|
|
|
go_test(
|
|
name = "go_default_test",
|
|
srcs = [
|
|
"checksums_test.go",
|
|
"configset_test.go",
|
|
"kubelet_test.go",
|
|
"kubeproxy_test.go",
|
|
],
|
|
embed = [":go_default_library"],
|
|
deps = [
|
|
"//cmd/kubeadm/app/apis/kubeadm:go_default_library",
|
|
"//cmd/kubeadm/app/apis/kubeadm/v1beta2:go_default_library",
|
|
"//cmd/kubeadm/app/constants:go_default_library",
|
|
"//cmd/kubeadm/app/features:go_default_library",
|
|
"//cmd/kubeadm/app/util:go_default_library",
|
|
"//staging/src/k8s.io/api/core/v1:go_default_library",
|
|
"//staging/src/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
|
|
"//staging/src/k8s.io/apimachinery/pkg/runtime:go_default_library",
|
|
"//staging/src/k8s.io/apimachinery/pkg/util/version:go_default_library",
|
|
"//staging/src/k8s.io/client-go/kubernetes/fake:go_default_library",
|
|
"//staging/src/k8s.io/component-base/config/v1alpha1:go_default_library",
|
|
"//staging/src/k8s.io/kube-proxy/config/v1alpha1:go_default_library",
|
|
"//staging/src/k8s.io/kubelet/config/v1beta1:go_default_library",
|
|
"//vendor/github.com/lithammer/dedent:go_default_library",
|
|
"//vendor/k8s.io/utils/pointer:go_default_library",
|
|
],
|
|
)
|
|
|
|
filegroup(
|
|
name = "package-srcs",
|
|
srcs = glob(["**"]),
|
|
tags = ["automanaged"],
|
|
visibility = ["//visibility:private"],
|
|
)
|
|
|
|
filegroup(
|
|
name = "all-srcs",
|
|
srcs = [":package-srcs"],
|
|
tags = ["automanaged"],
|
|
visibility = ["//visibility:public"],
|
|
)
|