-
Notifications
You must be signed in to change notification settings - Fork 39.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Change default clusterCIDRs from /16 to /14 in GCE configs allowing 1000 Node clusters by default. #25350
Conversation
@@ -49,7 +49,7 @@ CLUSTER_NAME="${CLUSTER_NAME:-${INSTANCE_PREFIX}}" | |||
MASTER_NAME="${INSTANCE_PREFIX}-master" | |||
MASTER_TAG="${INSTANCE_PREFIX}-master" | |||
NODE_TAG="${INSTANCE_PREFIX}-minion" | |||
CLUSTER_IP_RANGE="${CLUSTER_IP_RANGE:-10.245.0.0/16}" | |||
CLUSTER_IP_RANGE="${CLUSTER_IP_RANGE:-10.245.0.0/14}" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is the same as 10.244.0.0/14
. If you want test to remain a distinct range from regular clusters we should change this to 10.248.0.0/14
.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I completely missed it. Do we actually care?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In theory someone can run tests on the same GCE network as their main cluster. (They have to override the NETWORK
, obviously.)
At the very least, the code should use the canonical address of 10.244.0.0./14
, but I tend to agree with @roberthbailey
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'd prefer that we change it to 10.248.0.0/16
so that it maintains the current intent of having a separate range for test/non-test by default.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Changed to 180
@wojtek-t -- release note? |
GCE e2e build/test passed for commit 5dc3d50. |
LGTM, but please add a release note. |
It would be nice to know the why. Are legacy clusters with a /16 at risk? Etc. |
@therc - depends on the size. We'll start respecting CIDRs soon, which means that /16 clusters would be able to handle only 255 Nodes. |
@roberthbailey I commented on #19242 back in January. :-) What I meant is that it's not obvious from the PR (or the docs as they exist now) why the change is needed, let alone labelled P0, etc. Even if I keep getting mails for the other issue, I hadn't connected the dots until gmarek and you commented. Thanks! |
@therc - sorry for that. We're going to communicate this change publicly before it goes live. |
@roberthbailey - changed the PR title to make a better release note. PTAL. |
lgtm |
@k8s-bot test this [submit-queue is verifying that this PR is safe to merge] |
GCE e2e build/test passed for commit 5dc3d50. |
Automatic merge from submit-queue |
…elector [release-3.11] Bug 1760807: UPSTREAM: <carry>: Enforce label selector validation in scheduler podAffinity Origin-commit: dc045cb38e8a8a12314fe7e4a1f00edf214a7cf8
cc @thockin @roberthbailey @wojtek-t @zmerlynn @davidopp