Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

optionally create a router when deploying the controller #108

Open
qrkourier opened this issue Jun 7, 2023 · 7 comments
Open

optionally create a router when deploying the controller #108

qrkourier opened this issue Jun 7, 2023 · 7 comments
Assignees

Comments

@qrkourier
Copy link
Member

It's highly likely that a controller deployment is immediately followed by a router deployment. We can simplify and facilitate this by automatically provisioning a router in the Ziti mgmt API and storing the token as a K8s secret.

The implementation will involve Helm hooks and simple shell scripts to be executed by the resulting Job resources that are scheduled during life cycle events.

@qrkourier qrkourier self-assigned this Jun 7, 2023
@qrkourier
Copy link
Member Author

The first change is for the controller chart to create the router in Ziti, but the router chart can also be improved as part of this. It can accept a new value that is the name of the existing K8s secret where the token is saved. That way it's unnecessary to fetch the token and feed it to the router chart.

@qrkourier
Copy link
Member Author

The point of this issue is to simplify the process of getting a Ziti network running in K8s by eliminating these orchestration steps:

  1. fetch Ziti admin password
  2. login to Ziti
  3. create router and save token
  4. fetch token
  5. supply token to router chart

@dariuszSki
Copy link
Contributor

yes, if the router will be deployed on the same cluster, then I would make sense to add an option to create a router if needed

@qrkourier
Copy link
Member Author

I'm still planning to work on this soon.

@qrkourier
Copy link
Member Author

This is still needed to support a more compact deployment scenario where a default router makes sense.

@qrkourier
Copy link
Member Author

I'm clawing my way back to this and still think it's an obvious way to simplify k8s bootstrapping.

@qrkourier
Copy link
Member Author

This avoids Terraforming/Ansible the mgmt API to create the router and is relevant to the "ziti-stack" chart idea (umbrella chart for controller+cert-manager+trust-manager+router w/ optional node proxy daemonset, sidecar injector, etc.)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants