Production-Grade Container Scheduling and Management
Go to file
Clayton Coleman 44493de195
Only rotate certificates in the background
The certificate manager originally had a "block on startup" rotation
behavior to ensure at least one rotation happened on startup. However,
since rotation may not succeed within the first time window the code was
changed to simply print the error rather than return it. This meant that
the blocking rotation has no purpose - it cannot cause the kubelet to
fail, and it *does* block the kubelet from starting static pods before
the api server becomes available.

The current block behavior causes a bootstrapped kubelet that is also
set to run static pods to wait several minutes before actually launching
the static pods, which means self-hosted masters using static pods have
a pointless delay on startup.

Since blocking rotation has no benefit and can't actually fail startup,
this commit removes the blocking behavior and simplifies the code at the
same time. The goroutine for rotation now completely owns the deadline,
the shouldRotate() method is removed, and the method that sets
rotationDeadline now returns it. We also explicitly guard against a
negative sleep interval and omit the message.

Should have no impact on bootstrapping except the removal of a long
delay on startup before static pods start.

Also add a guard condition where if the current cert in the store is
expired, we fall back to the bootstrap cert initially (we use the
bootstrap cert to communicate with the server). This is consistent with
when we don't have a cert yet.
2018-01-28 17:48:17 -05:00
.github
api Merge pull request #57938 from dims/add-binary-configmap 2018-01-26 04:34:33 -08:00
build fix make quick-verify 2018-01-27 11:26:11 +08:00
cluster Merge pull request #58845 from jingax10/ip_aliases_fix 2018-01-26 17:01:08 -08:00
cmd Merge pull request #58644 from yguo0905/webhooks 2018-01-26 15:58:27 -08:00
docs Merge pull request #57938 from dims/add-binary-configmap 2018-01-26 04:34:33 -08:00
examples Remove apiVersion from scheduler extender example configuration 2018-01-18 14:41:53 -08:00
Godeps godep: vendor gopkg.in/square/go-jose.v2/jwt 2018-01-23 14:47:25 -08:00
hack Merge pull request #58783 from cblecker/verify-junit 2018-01-26 10:19:33 -08:00
logo
pkg Only rotate certificates in the background 2018-01-28 17:48:17 -05:00
plugin Merge pull request #58485 from k82cn/k8s_58471 2018-01-26 12:23:00 -08:00
staging Only rotate certificates in the background 2018-01-28 17:48:17 -05:00
test Merge pull request #58900 from Random-Liu/fix-psp-test 2018-01-26 21:00:38 -08:00
third_party Add brackets and quotes where needed 2018-01-26 15:11:53 -08:00
translations Generate bindata.go and k8s.mo 2018-01-20 01:56:49 +00:00
vendor godep: vendor gopkg.in/square/go-jose.v2/jwt 2018-01-23 14:47:25 -08:00
.bazelrc
.generated_files
.gitattributes
.gitignore
.kazelcfg.json
BUILD.bazel
CHANGELOG-1.2.md
CHANGELOG-1.3.md
CHANGELOG-1.4.md Revert k8s.gcr.io vanity domain 2017-12-22 14:36:16 -08:00
CHANGELOG-1.5.md Revert k8s.gcr.io vanity domain 2017-12-22 14:36:16 -08:00
CHANGELOG-1.6.md Revert k8s.gcr.io vanity domain 2017-12-22 14:36:16 -08:00
CHANGELOG-1.7.md Update CHANGELOG-1.7.md for v1.7.12. 2017-12-29 13:42:49 +01:00
CHANGELOG-1.8.md CHANGELOG: feature flag is "AdvancedAuditing" not "AdvancedAudit" 2018-01-18 14:19:39 -08:00
CHANGELOG-1.9.md Update CHANGELOG-1.9.md for v1.9.2. 2018-01-18 13:46:38 -06:00
CHANGELOG-1.10.md Update CHANGELOG-1.10.md for v1.10.0-alpha.2. 2018-01-26 14:24:30 -05:00
CHANGELOG.md Update release note links for 1.10 2018-01-17 22:45:12 +01:00
code-of-conduct.md Update code-of-conduct.md 2017-12-20 13:33:36 -05:00
CONTRIBUTING.md
labels.yaml
LICENSE
Makefile
Makefile.generated_files
OWNERS
OWNERS_ALIASES fabiano no longer a thing 2017-12-19 16:37:12 -02:00
README.md
SUPPORT.md
WORKSPACE

Kubernetes

Submit Queue Widget GoDoc Widget CII Best Practices


Kubernetes is an open source system for managing containerized applications across multiple hosts, providing basic mechanisms for deployment, maintenance, and scaling of applications.

Kubernetes builds upon a decade and a half of experience at Google running production workloads at scale using a system called Borg, combined with best-of-breed ideas and practices from the community.

Kubernetes is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Kubernetes plays a role, read the CNCF announcement.


To start using Kubernetes

See our documentation on kubernetes.io.

Try our interactive tutorial.

Take a free course on Scalable Microservices with Kubernetes.

To start developing Kubernetes

The community repository hosts all information about building Kubernetes from source, how to contribute code and documentation, who to contact about what, etc.

If you want to build Kubernetes right away there are two options:

You have a working Go environment.
$ go get -d k8s.io/kubernetes
$ cd $GOPATH/src/k8s.io/kubernetes
$ make
You have a working Docker environment.
$ git clone https://github.com/kubernetes/kubernetes
$ cd kubernetes
$ make quick-release

For the full story, head over to the developer's documentation.

Support

If you need support, start with the troubleshooting guide and work your way through the process that we've outlined.

That said, if you have questions, reach out to us one way or another.

Analytics