danehans

// SetDefaults_ProxyConfiguration assigns default values for the Proxy
func SetDefaults_ProxyConfiguration(obj *MasterConfiguration) {
	if obj.KubeProxy.Config == nil {
		obj.KubeProxy.Config = &kubeproxyconfigv1alpha1.KubeProxyConfiguration{}
	}
	if obj.KubeProxy.Config.ClusterCIDR == "" && obj.Networking.PodSubnet != "" {
		obj.KubeProxy.Config.ClusterCIDR = obj.Networking.PodSubnet
	}

	if obj.KubeProxy.Config.ClientConnection.KubeConfigFile == "" {

danehans

// Here are the steps I took to update a standard dind deploy to use kubenet.
// Requires: https://github.com/kubernetes/kubernetes/pull/56245

$ sudo -E docker exec -it kube-master /bin/bash

# apt-get update && apt-get install -y vim
Hit:1 https://apt.dockerproject.org/repo ubuntu-xenial InRelease
Hit:2 http://archive.ubuntu.com/ubuntu xenial InRelease
<SNIP>

danehans

Initializer Pod & Config:
  https://goo.gl/aAHEaG
Initializer Logs:
  https://goo.gl/VVaM9a
Pod Details with Sidecar:
  https://goo.gl/kmfY6g
Envoy Runtime Config Details:
  https://goo.gl/1idW7R
Sidecar Runtime Configuration:
  https://goo.gl/6JNEiT

danehans

$ sudo -E ../../github.com/Mirantis/kubeadm-dind-cluster/gce-setup-local.sh 
Password:
++ uname
+ '[' Darwin = Darwin ']'
++++ readlinkf ../../github.com/Mirantis/kubeadm-dind-cluster/gce-setup-local.sh
++++ perl -MCwd -e 'print Cwd::abs_path shift' ../../github.com/Mirantis/kubeadm-dind-cluster/gce-setup-local.sh
+++ dirname /Users/daneyonhansen/code/go/src/github.com/Mirantis/kubeadm-dind-cluster/gce-setup-local.sh
++ cd /Users/daneyonhansen/code/go/src/github.com/Mirantis/kubeadm-dind-cluster
++ pwd
+ DIND_ROOT=/Users/daneyonhansen/code/go/src/github.com/Mirantis/kubeadm-dind-cluster

danehans

root@kube-master:/# cat /lib/systemd/system/kubelet.service
[Unit]
Description=kubelet: The Kubernetes Node Agent
Documentation=http://kubernetes.io/docs/

[Service]
Environment="KUBELET_KUBECONFIG_ARGS=--kubeconfig=/etc/kubernetes/kubelet.conf --require-kubeconfig=true"
Environment="KUBELET_FEATURE_ARGS= --feature-gates=DynamicKubeletConfig=true"
Environment="KUBELET_SYSTEM_PODS_ARGS=--pod-manifest-path=/etc/kubernetes/manifests --allow-privileged=true"
Environment="KUBELET_NETWORK_ARGS=--network-plugin=cni --cni-conf-dir=/etc/cni/net.d --cni-bin-dir=/opt/cni/bin"

danehans

$ sudo -E build/make-clean.sh
Password:
+++ [1020 11:49:16] Verifying Prerequisites....
+++ [1020 11:49:17] Keeping container kube-build-data-f0510dd6c7-5-v1.9.1-1
+++ [1020 11:49:17] Keeping container kube-node-1
+++ [1020 11:49:17] Keeping container kube-master
+++ [1020 11:49:17] Keeping container kube-build-data-c8faea261f-5-v1.9.1-1
+++ [1020 11:49:17] Keeping container kube-build-data-f0510dd6c7-5-v1.9.1-1
+++ [1020 11:49:17] Keeping container kube-node-1
+++ [1020 11:49:18] Keeping container kube-master

danehans

# journalctl -u kubelet --no-pager
-- Logs begin at Thu 2017-10-19 21:29:44 UTC, end at Thu 2017-10-19 21:50:42 UTC. --
Oct 19 21:30:02 kube-master systemd[1]: Started kubelet: The Kubernetes Node Agent.
Oct 19 21:30:02 kube-master hyperkube[790]: Flag --require-kubeconfig has been deprecated, You no longer need to use --require-kubeconfig. This will be removed in a future version. Providing --kubeconfig enables API server mode, omitting --kubeconfig enables standalone mode unless --require-kubeconfig=true is also set. In the latter case, the legacy default kubeconfig path will be used until --require-kubeconfig is removed.
Oct 19 21:30:02 kube-master hyperkube[790]: I1019 21:30:02.879791     790 server.go:182] Version: v1.9.0-alpha.1.1415+1e152dba527878
Oct 19 21:30:02 kube-master hyperkube[790]: I1019 21:30:02.879902     790 feature_gate.go:220] feature gates: &{{} map[DynamicKubeletConfig:true]}
Oct 19 21:30:02 kube-master hyperkube[790]: W1019 21:30:02.880073     790 server.go:280] --require-kubeconfig is

danehans

# Configuration for metric instances
apiVersion: "config.istio.io/v1alpha2"
kind: metric
metadata:
  name: doublerequestcount
  namespace: istio-system
spec:
  value: "2" # count each request twice
  dimensions:
    source: source.service | "unknown"

danehans

// Note: 10.192.0.2 is the kube-master dind0 ip address. dind0 is equivalent to eth0 on other systems.
kube-master:/# cat /etc/kubeadm.conf 
apiVersion: kubeadm.k8s.io/v1alpha1
kind: MasterConfiguration
unifiedControlPlaneImage: mirantis/hypokube:final
networking:
  podSubnet: "10.244.0.0/16"
apiServerExtraArgs:
  etcd-servers: "http://kube-master:2379"
  insecure-bind-address: "0.0.0.0"

danehans

Istio Deployment Guide

This guide provides instructions for deploying Istio to Google Compute Engine (GCE) using kubeadm-dind-cluster (dind).

Requirements

Setup a GCE account and follow the quick-start guide to get your GCE developer environment setup. The dind gce-setup script requires application default credentials. Export your GCE application default credentials:

export GOOGLE_APPLICATION_CREDENTIALS=/path/to/my/gce/default/application/credentials.json