mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-07-22 06:50:43 -04:00
kubernetes: always use lb for joining
The token given out by control-planes contains the node IP as an endpoint. Since during this stage the joining node is not connected to the WireGuard network, we cannot communicate node-to-node. Therefore, we need to hop over the load balancer again to have a src IP outside of the strict range.
This commit is contained in:
parent
4f32eefe90
commit
aae85f0c3c
1 changed files with 3 additions and 0 deletions
|
@ -209,6 +209,9 @@ func (k *KubeWrapper) JoinCluster(ctx context.Context, args *kubeadm.BootstrapTo
|
|||
return fmt.Errorf("retrieving own instance metadata: %w", err)
|
||||
}
|
||||
|
||||
// override join endpoint to go over lb
|
||||
args.APIServerEndpoint = net.JoinHostPort(loadBalancerHost, loadBalancerPort)
|
||||
|
||||
log.With(
|
||||
zap.String("nodeName", nodeName),
|
||||
zap.String("providerID", providerID),
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue