github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-09-19 17:16:12 +00:00
Code Issues Projects Releases Wiki Activity

Enable metadata concealment for tests

Browse Source
This commit is contained in:
Isaac Hollander McCreery
2017-10-12 14:36:38 -07:00
parent f1b17e8896
commit 3ee03fd033
5 changed files with 20 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
cluster/gce/config-test.sh
View File

@@ -204,9 +204,12 @@ if [[ ${NETWORK_POLICY_PROVIDER:-} == "calico" ]]; then
NODE_LABELS="$NODE_LABELS,projectcalico.org/ds-ready=true"
fi
# Apply the right node label if metadata proxy is on.
if [[ ${ENABLE_METADATA_PROXY:-} == "simple" ]]; then
NODE_LABELS="${NODE_LABELS},beta.kubernetes.io/metadata-proxy-ready=true"
# Enable metadata concealment by firewalling pod traffic to the metadata server
# and run a proxy daemonset on nodes.
ENABLE_METADATA_CONCEALMENT="${ENABLE_METADATA_CONCEALMENT:-true}" # true, false
# Apply the right node label if metadata concealment is on.
if [[ ${ENABLE_METADATA_CONCEALMENT:-} == "true" ]]; then
NODE_LABELS="${NODE_LABELS},beta.kubernetes.io/metadata-proxy-ready=true"
fi
# Optional: Enable node logging.