mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-12-15 16:09:39 -05:00
kubernetes: always use lb for joining
The token given out by control-planes contains the node IP as an endpoint. Since during this stage the joining node is not connected to the WireGuard network, we cannot communicate node-to-node. Therefore, we need to hop over the load balancer again to have a src IP outside of the strict range.
This commit is contained in:
parent
4f32eefe90
commit
aae85f0c3c
1 changed files with 3 additions and 0 deletions
|
|
@ -209,6 +209,9 @@ func (k *KubeWrapper) JoinCluster(ctx context.Context, args *kubeadm.BootstrapTo
|
||||||
return fmt.Errorf("retrieving own instance metadata: %w", err)
|
return fmt.Errorf("retrieving own instance metadata: %w", err)
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// override join endpoint to go over lb
|
||||||
|
args.APIServerEndpoint = net.JoinHostPort(loadBalancerHost, loadBalancerPort)
|
||||||
|
|
||||||
log.With(
|
log.With(
|
||||||
zap.String("nodeName", nodeName),
|
zap.String("nodeName", nodeName),
|
||||||
zap.String("providerID", providerID),
|
zap.String("providerID", providerID),
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue