Skip to content

Spike: Expose catalogd service off cluster #1765

Open
0 of 1 issue completed
Open
0 of 1 issue completed
@ankitathomas

Description

@ankitathomas

epic: #1424

Investigate methods for exposing catalogd service off cluster for querying for kubectl-operator. Potential options include:

  • kubectl port-forward : requires permissions to set up the port-forward connection (Enhance RBAC model to separate pod creation and port-forwarding kubernetes/kubernetes#110999 (comment), bind local port),
  • proxy : access the service at http://<kubernetes_master_address>/api/v1/namespaces/<namespace_name>/services/<service_name>/proxy - requires service/proxy permissions, no client authentication for external access to catalogd
  • Expose service with a nodeport : Create the catalogd service with a nodeport, requires local port reservation by default with catalogd, and for the kubectl plugin to discover the local port assignment (present on service as externalIPs, ports.nodePort).
  • kubernetes Gateway or Ingress : requires either the Gateway API addon or a third party ingress controller, OLM cannot make assumptions that a gateway/ingress controller will be running on every cluster.

If choosing a hybrid approach, follow-on work is required to also add ability to toggle on or off different methods, and also to automatically choose a method depending on the information provided by the currently running catalogd controller

Sub-issues

Metadata

Metadata

Assignees

Labels

epic/kubectl-operator-pluginlifecycle/staleDenotes an issue or PR has remained open with no activity and has become stale.v1.xIssues related to OLMv1 features that come after 1.0

Type

No type

Projects

Status

No status

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions