Expose ports and apps when running in public clouds

charms/worker/k8s/src/charm.py

@@ -25,6 +25,7 @@
 from pathlib import Path
 from time import sleep
 from typing import Dict, Optional
+from urllib.parse import urlparse
 
 import charms.contextual_status as status
 import ops
@@ -444,6 +445,7 @@ def _reconcile(self, event):
  self._apply_node_labels()
  if self.is_control_plane:
  self._copy_internal_kubeconfig()
+ self._expose_ports()
 
  @on_error(
  ops.WaitingStatus("Cluster not yet ready"),
@@ -528,6 +530,13 @@ def _copy_internal_kubeconfig(self):
  KUBECONFIG.parent.mkdir(parents=True, exist_ok=True)
  KUBECONFIG.write_bytes(self._internal_kubeconfig.read_bytes())
 
+ def _expose_ports(self):
+ """Expose ports for public clouds to access api endpoints."""
+ log.info("Exposing api ports")
+ content = yaml.safe_load(KUBECONFIG.read_text())
+ endpoint = urlparse(content["clusters"][0]["cluster"]["server"])
+ self.unit.open_port("tcp", endpoint.port)
+
  def _get_external_kubeconfig(self, event: ops.ActionEvent):
  """Retrieve a public kubeconfig via a charm action.
 

tests/integration/test-bundle.yaml

@@ -10,6 +10,7 @@ applications:
  charm: k8s
  channel: latest/edge
  num_units: 3
+ expose: true
  k8s-worker:
  charm: k8s-worker
  channel: latest/edge