{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/29037","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/29037/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/29037/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/29037/events","html_url":"https://github.com/kubernetes/kubernetes/pull/29037","id":165895175,"number":29037,"title":"Add support for kube-up.sh to deploy Calico network policy to GCI masters","user":{"login":"matthewdupre","id":9053570,"avatar_url":"https://avatars.githubusercontent.com/u/9053570?v=3","gravatar_id":"","url":"https://api.github.com/users/matthewdupre","html_url":"https://github.com/matthewdupre","followers_url":"https://api.github.com/users/matthewdupre/followers","following_url":"https://api.github.com/users/matthewdupre/following{/other_user}","gists_url":"https://api.github.com/users/matthewdupre/gists{/gist_id}","starred_url":"https://api.github.com/users/matthewdupre/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/matthewdupre/subscriptions","organizations_url":"https://api.github.com/users/matthewdupre/orgs","repos_url":"https://api.github.com/users/matthewdupre/repos","events_url":"https://api.github.com/users/matthewdupre/events{/privacy}","received_events_url":"https://api.github.com/users/matthewdupre/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/cla:%20yes","name":"cla: yes","color":"bfe5bf"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/do-not-merge","name":"do-not-merge","color":"e11d21"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/release-note-label-needed","name":"release-note-label-needed","color":"db5a64"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/size/L","name":"size/L","color":"ee9900"}],"state":"open","locked":false,"assignee":{"login":"zmerlynn","id":4942464,"avatar_url":"https://avatars.githubusercontent.com/u/4942464?v=3","gravatar_id":"","url":"https://api.github.com/users/zmerlynn","html_url":"https://github.com/zmerlynn","followers_url":"https://api.github.com/users/zmerlynn/followers","following_url":"https://api.github.com/users/zmerlynn/following{/other_user}","gists_url":"https://api.github.com/users/zmerlynn/gists{/gist_id}","starred_url":"https://api.github.com/users/zmerlynn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zmerlynn/subscriptions","organizations_url":"https://api.github.com/users/zmerlynn/orgs","repos_url":"https://api.github.com/users/zmerlynn/repos","events_url":"https://api.github.com/users/zmerlynn/events{/privacy}","received_events_url":"https://api.github.com/users/zmerlynn/received_events","type":"User","site_admin":false},"assignees":[{"login":"zmerlynn","id":4942464,"avatar_url":"https://avatars.githubusercontent.com/u/4942464?v=3","gravatar_id":"","url":"https://api.github.com/users/zmerlynn","html_url":"https://github.com/zmerlynn","followers_url":"https://api.github.com/users/zmerlynn/followers","following_url":"https://api.github.com/users/zmerlynn/following{/other_user}","gists_url":"https://api.github.com/users/zmerlynn/gists{/gist_id}","starred_url":"https://api.github.com/users/zmerlynn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zmerlynn/subscriptions","organizations_url":"https://api.github.com/users/zmerlynn/orgs","repos_url":"https://api.github.com/users/zmerlynn/repos","events_url":"https://api.github.com/users/zmerlynn/events{/privacy}","received_events_url":"https://api.github.com/users/zmerlynn/received_events","type":"User","site_admin":false}],"milestone":null,"comments":13,"created_at":"2016-07-15T23:31:31Z","updated_at":"2016-08-03T23:30:07Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/kubernetes/kubernetes/pulls/29037","html_url":"https://github.com/kubernetes/kubernetes/pull/29037","diff_url":"https://github.com/kubernetes/kubernetes/pull/29037.diff","patch_url":"https://github.com/kubernetes/kubernetes/pull/29037.patch"},"body":"Also remove requirement for calicoctl from Debian / salt installed nodes and clean it up a little by deploying calico-node with a manifest rather than calicoctl.  This also makes it more reliable by retrying properly.\r\n\r\nHow to use:\r\n```\r\nmake quick-release\r\nNETWORK_POLICY_PROVIDER=calico cluster/kube-up.sh\r\n```\r\n\r\nOne place where I was uncertain:\r\n- CPU allocations (on the master particularly, where there's very little spare capacity).  I took some from etcd, but if there's a better way to decide this, I'm happy to change it."},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/237406904","html_url":"https://github.com/kubernetes/kubernetes/pull/29037#issuecomment-237406904","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/29037","id":237406904,"user":{"login":"caseydavenport","id":1944093,"avatar_url":"https://avatars.githubusercontent.com/u/1944093?v=3","gravatar_id":"","url":"https://api.github.com/users/caseydavenport","html_url":"https://github.com/caseydavenport","followers_url":"https://api.github.com/users/caseydavenport/followers","following_url":"https://api.github.com/users/caseydavenport/following{/other_user}","gists_url":"https://api.github.com/users/caseydavenport/gists{/gist_id}","starred_url":"https://api.github.com/users/caseydavenport/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/caseydavenport/subscriptions","organizations_url":"https://api.github.com/users/caseydavenport/orgs","repos_url":"https://api.github.com/users/caseydavenport/repos","events_url":"https://api.github.com/users/caseydavenport/events{/privacy}","received_events_url":"https://api.github.com/users/caseydavenport/received_events","type":"User","site_admin":false},"created_at":"2016-08-03T23:30:07Z","updated_at":"2016-08-03T23:30:07Z","body":"@mikedanese \r\n\r\n>The optimal deployment would be a daemonset for the node agent that uses the kubernetes API to store state. It's really the only way to reduce deployment of calico across all kubernetes clusters to a single command, and I think that's what we should strive for. Last time I talked with you guys, you mentioned that this was planned? How far off is that? kube-flannel does this which is merging int flannel proper as an alternativly subnet managers. It removes the dependency on etcd or flannel server.\r\n\r\nYes! This is something I've been looking into recently.  Actually installing the Calico pieces using a DaemonSet is relatively straightforward.  I've got a prototype working but it's still a little bit fragile.  The problem of course is `etcd`.  \r\n\r\n> use the apiserver :)\r\n\r\nWe've looked into modifying Calico to use the k8s API as a replacement for `etcd`, and it may be something we do but it's going to take a bit of effort to make that happen so probably won't be available in the near future.  As a pragmatic short-term solution, I think running etcd on top of k8s can get us that \"one-click install\" behavior.\r\n\r\n> this primarily happens during initial deployment, which doesn't sound like too big of an issue.\r\n\r\nYep, I agree. I'm not too worried about transient startup conditions.\r\n\r\n> You can use a service account. Credentials to the apiserver are injected to all pods by default. If you are already using the go client (?) then it's a couple lines of code change to switch to InClusterConfig.\r\n\r\nYep, the policy controller can already do this.\r\n\r\n"}}
{"actor":{"display_login":"caseydavenport"}}