Skip to content
This repository has been archived by the owner on Dec 5, 2017. It is now read-only.

expose kube-proxy ports range via dcos config flags #791

Open
jdef opened this issue Feb 18, 2016 · 3 comments
Open

expose kube-proxy ports range via dcos config flags #791

jdef opened this issue Feb 18, 2016 · 3 comments

Comments

@jdef
Copy link

jdef commented Feb 18, 2016

kube-proxy accepts a port range from which proxied ports are allocated from. we need to enable this flag via scheduler config and in k8s/dcos packaging

@jdef
Copy link
Author

jdef commented Feb 20, 2016

this is very useful for customers that want to statically allocate a port range for use by kubernetes (node ports, proxy ports, etc)

@jdef jdef modified the milestone: v0.7.3 Feb 20, 2016
@jdef
Copy link
Author

jdef commented Feb 21, 2016

clarification: the kube proxy port range is not for node ports, but for ports allocated by the userspace proxy impl of kube-proxy. the stock k8s implementation uses port 0 to allocate userspace proxy ports from the ephemeral port pool.

in cases where users want to control the port range that the userspace proxy allocates from (read: they don't use the ephemeral pool) then they can provide a custom port range for this. allocating such a range via mesos offers (assuming NO ip-per-container support) is error prone at best: kube-proxy becomes launchable on a slave IFF the entire userspace proxy port range is available.

i'm lowering the priority of this for the following reasons:

  • kube-proxy may be run in iptables mode, which doesn't need to allocate any additional "proxy" ports
  • the default implementation of kube-proxy's userspace mode allocates ports from the ephemeral pool
  • mesos user's should have already configured their mesos slaves with resource port ranges that avoid overlap with the host/OS's ephemeral port range

@jdef
Copy link
Author

jdef commented Feb 21, 2016

#257

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant