{"action":"created","issue":{"url":"https://api.github.com/repos/kubespray/kargo/issues/512","repository_url":"https://api.github.com/repos/kubespray/kargo","labels_url":"https://api.github.com/repos/kubespray/kargo/issues/512/labels{/name}","comments_url":"https://api.github.com/repos/kubespray/kargo/issues/512/comments","events_url":"https://api.github.com/repos/kubespray/kargo/issues/512/events","html_url":"https://github.com/kubespray/kargo/issues/512","id":179270361,"number":512,"title":"Use traefik as a load balancer for apiserver","user":{"login":"mattymo","id":1229061,"avatar_url":"https://avatars.githubusercontent.com/u/1229061?v=3","gravatar_id":"","url":"https://api.github.com/users/mattymo","html_url":"https://github.com/mattymo","followers_url":"https://api.github.com/users/mattymo/followers","following_url":"https://api.github.com/users/mattymo/following{/other_user}","gists_url":"https://api.github.com/users/mattymo/gists{/gist_id}","starred_url":"https://api.github.com/users/mattymo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mattymo/subscriptions","organizations_url":"https://api.github.com/users/mattymo/orgs","repos_url":"https://api.github.com/users/mattymo/repos","events_url":"https://api.github.com/users/mattymo/events{/privacy}","received_events_url":"https://api.github.com/users/mattymo/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubespray/kargo/labels/feature","name":"feature","color":"84b6eb"}],"state":"open","locked":false,"assignee":{"login":"mattymo","id":1229061,"avatar_url":"https://avatars.githubusercontent.com/u/1229061?v=3","gravatar_id":"","url":"https://api.github.com/users/mattymo","html_url":"https://github.com/mattymo","followers_url":"https://api.github.com/users/mattymo/followers","following_url":"https://api.github.com/users/mattymo/following{/other_user}","gists_url":"https://api.github.com/users/mattymo/gists{/gist_id}","starred_url":"https://api.github.com/users/mattymo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mattymo/subscriptions","organizations_url":"https://api.github.com/users/mattymo/orgs","repos_url":"https://api.github.com/users/mattymo/repos","events_url":"https://api.github.com/users/mattymo/events{/privacy}","received_events_url":"https://api.github.com/users/mattymo/received_events","type":"User","site_admin":false},"assignees":[{"login":"mattymo","id":1229061,"avatar_url":"https://avatars.githubusercontent.com/u/1229061?v=3","gravatar_id":"","url":"https://api.github.com/users/mattymo","html_url":"https://github.com/mattymo","followers_url":"https://api.github.com/users/mattymo/followers","following_url":"https://api.github.com/users/mattymo/following{/other_user}","gists_url":"https://api.github.com/users/mattymo/gists{/gist_id}","starred_url":"https://api.github.com/users/mattymo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mattymo/subscriptions","organizations_url":"https://api.github.com/users/mattymo/orgs","repos_url":"https://api.github.com/users/mattymo/repos","events_url":"https://api.github.com/users/mattymo/events{/privacy}","received_events_url":"https://api.github.com/users/mattymo/received_events","type":"User","site_admin":false}],"milestone":null,"comments":4,"created_at":"2016-09-26T16:05:29Z","updated_at":"2016-09-28T12:06:55Z","closed_at":null,"body":"We should be able to use traefik as a static pod on non-master nodes to proxy apiserver requests\r\n\r\nETCD tree looks like this:\r\n```/traefik/backends/backend1/servers/server1/url:http://10.90.0.2:8080\r\n/traefik/backends/backend1/servers/server1/weight:1\r\n/traefik/backends/backend1/servers/server2/url:http://10.90.0.3:8080\r\n/traefik/backends/backend1/servers/server2/weight:1\r\n/traefik/backends/backend1/servers/server3/url:http://10.90.0.4:8080\r\n/traefik/backends/backend1/servers/server3/weight:1\r\n/traefik/frontends/frontend1/entryPoints:http\r\n/traefik/frontends/frontend1/backend:backend1\r\n/traefik/frontends/frontend1/priority:0\r\n/traefik/frontends/frontend1/entrypoints:http\r\n```\r\n\r\ntraefik conf file looks like:\r\n```\r\n[entryPoints]\r\n  [entryPoints.http]\r\n  address = \":80\"\r\n# Still doesn't work right\r\n#  [entryPoints.https]\r\n#  address = \":443\"\r\n#    [entryPoints.https.tls]\r\n#      [[entryPoints.https.tls.certificates]]\r\n#      CertFile = \"/ssl/apiserver.pem\"\r\n#      KeyFile = \"/ssl/apiserver-key.pem\"\r\n[etcd]\r\nendpoint = \"{{ etcd_endpoint }}\"\r\nwatch = true\r\nprefix = \"/traefik\"\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/kubespray/kargo/issues/comments/250148257","html_url":"https://github.com/kubespray/kargo/issues/512#issuecomment-250148257","issue_url":"https://api.github.com/repos/kubespray/kargo/issues/512","id":250148257,"user":{"login":"mattymo","id":1229061,"avatar_url":"https://avatars.githubusercontent.com/u/1229061?v=3","gravatar_id":"","url":"https://api.github.com/users/mattymo","html_url":"https://github.com/mattymo","followers_url":"https://api.github.com/users/mattymo/followers","following_url":"https://api.github.com/users/mattymo/following{/other_user}","gists_url":"https://api.github.com/users/mattymo/gists{/gist_id}","starred_url":"https://api.github.com/users/mattymo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mattymo/subscriptions","organizations_url":"https://api.github.com/users/mattymo/orgs","repos_url":"https://api.github.com/users/mattymo/repos","events_url":"https://api.github.com/users/mattymo/events{/privacy}","received_events_url":"https://api.github.com/users/mattymo/received_events","type":"User","site_admin":false},"created_at":"2016-09-28T12:06:55Z","updated_at":"2016-09-28T12:06:55Z","body":"For what it's worth, we already do A/A with 2 masters pointing to localhost. Let's sneak in this quorum read option in a separate patch first. It will be trivial to pass CI.\r\n\r\nSetting `loadbalancer_apiserver_localhost:true` is probably what I wanted initially.\r\n\r\nThe open question here is should we disable kube-apiserver from listening on 8080 so that we can enable the proxy on that port on master nodes?"}}
{"actor":{"display_login":"mattymo"}}