From 1814b0c49500bebd6460ce4fc8ec43784e94d131 Mon Sep 17 00:00:00 2001
From: Peter Hornyack <peterhornyack@google.com>
Date: Thu, 28 Mar 2019 17:12:32 -0700
Subject: [PATCH] Disable GCE agent address management on Windows nodes.

With this metadata key set, "GCEWindowsAgent: GCE address manager
status: disabled" will appear in the VM's serial port output during
boot.

Tested:
PROJECT=${CLOUDSDK_CORE_PROJECT} KUBE_GCE_ENABLE_IP_ALIASES=true NUM_WINDOWS_NODES=2 NUM_NODES=2 KUBERNETES_NODE_PLATFORM=windows go run ./hack/e2e.go -- --up
cluster/gce/windows/smoke-test.sh

cat > iis.yaml <<EOF
apiVersion: v1
kind: Pod
metadata:
  name: iis
  labels:
    app: iis
spec:
  containers:
  - image: mcr.microsoft.com/windows/servercore/iis
    imagePullPolicy: IfNotPresent
    name: iis-server
    ports:
    - containerPort: 80
      protocol: TCP
  nodeSelector:
    beta.kubernetes.io/os: windows
  tolerations:
  - effect: NoSchedule
    key: node.kubernetes.io/os
    operator: Equal
    value: windows1809
EOF

kubectl create -f iis.yaml
kubectl expose pod iis --type=LoadBalancer --name=iis
kubectl get services
curl http://<service external IP address>
---
 cluster/gce/windows/node-helper.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/cluster/gce/windows/node-helper.sh b/cluster/gce/windows/node-helper.sh
index 82a5fb985e8..1f62911c0e5 100755
--- a/cluster/gce/windows/node-helper.sh
+++ b/cluster/gce/windows/node-helper.sh
@@ -36,6 +36,10 @@ function get-windows-node-instance-metadata-from-file {
 function get-windows-node-instance-metadata {
   local metadata=""
   metadata+="k8s-version=${KUBE_VERSION:-v1.13.2},"
+  # Prevent the GCE Windows agent from managing IP addresses, since kube-proxy
+  # and these cluster setup scripts should take care of everything. See
+  # https://github.com/kubernetes/kubernetes/issues/75561.
+  metadata+="disable-address-manager=true,"
   metadata+="serial-port-enable=1,"
   # This enables logging the serial port output.
   # https://cloud.google.com/compute/docs/instances/viewing-serial-port-output