Feature gates not set for kube-proxy

[maciejaszek]

Environment:

• Cloud provider or hardware configuration:

Vagrant 2.2.9, AMD Ryzen 7 PRO 2700U, 32 GB RAM
$os ||= "ubuntu1804"
$vm_memory ||= 2048
$vm_cpus ||= 2
$num_instances ||= 3

• OS (printf "$(uname -srm)\n$(cat /etc/os-release)\n"):

Linux 5.8.15-201.fc32.x86_64 x86_64
NAME=Fedora
VERSION="32 (Thirty Two)"
ID=fedora
VERSION_ID=32
VERSION_CODENAME=""
PLATFORM_ID="platform:f32"
PRETTY_NAME="Fedora 32 (Thirty Two)"
ANSI_COLOR="0;34"
LOGO=fedora-logo-icon
CPE_NAME="cpe:/o:fedoraproject:fedora:32"
HOME_URL="https://fedoraproject.org/"
DOCUMENTATION_URL="https://docs.fedoraproject.org/en-US/fedora/f32/system-administrators-guide/"
SUPPORT_URL="https://fedoraproject.org/wiki/Communicating_and_getting_help"
BUG_REPORT_URL="https://bugzilla.redhat.com/"
REDHAT_BUGZILLA_PRODUCT="Fedora"
REDHAT_BUGZILLA_PRODUCT_VERSION=32
REDHAT_SUPPORT_PRODUCT="Fedora"
REDHAT_SUPPORT_PRODUCT_VERSION=32
PRIVACY_POLICY_URL="https://fedoraproject.org/wiki/Legal:PrivacyPolicy"

• Version of Ansible (ansible --version):
  ansible 2.9.14

• Version of Python (python --version):
  Python 3.8.6

Kubespray version (commit) (git rev-parse --short HEAD):
f2ef781

Network plugin used:
flannel

Full inventory with variables (ansible -i inventory/sample/inventory.ini all -m debug -a "var=hostvars[inventory_hostname]"):

Command used to invoke ansible:
vagrant up

Output of ansible run:

k8s-1                      : ok=648  changed=171  unreachable=0    failed=0    skipped=1002 rescued=0    ignored=0   
k8s-2                      : ok=432  changed=115  unreachable=0    failed=0    skipped=530  rescued=0    ignored=0   
k8s-3                      : ok=432  changed=115  unreachable=0    failed=0    skipped=530  rescued=0    ignored=0   
localhost                  : ok=1    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0

Anything else do we need to know:

kube_feature_gates:
    - ServiceTopology=true
    - EndpointSliceProxying=true

vagrant@k8s-1:~$ sudo ps ax | grep kube-apiserver
16703 ?        Ssl    0:48 kube-apiserver --advertise-address=13.67.49.101 --allow-privileged=true --anonymous-auth=True --apiserver-count=1 --authorization-mode=Node,RBAC --bind-address=0.0.0.0 --client-ca-file=/etc/kubernetes/ssl/ca.crt --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=False --enable-bootstrap-token-auth=true --endpoint-reconciler-type=lease --etcd-cafile=/etc/ssl/etcd/ssl/ca.pem --etcd-certfile=/etc/ssl/etcd/ssl/node-k8s-1.pem --etcd-keyfile=/etc/ssl/etcd/ssl/node-k8s-1-key.pem --etcd-servers=https://13.67.49.101:2379,https://13.67.49.102:2379,https://13.67.49.103:2379 --event-ttl=1h0m0s --feature-gates=ServiceTopology=true,EndpointSliceProxying=true --insecure-port=0 --kubelet-client-certificate=/etc/kubernetes/ssl/apiserver-kubelet-client.crt --kubelet-client-key=/etc/kubernetes/ssl/apiserver-kubelet-client.key --kubelet-preferred-address-types=InternalDNS,InternalIP,Hostname,ExternalDNS,ExternalIP --profiling=False --proxy-client-cert-file=/etc/kubernetes/ssl/front-proxy-client.crt --proxy-client-key-file=/etc/kubernetes/ssl/front-proxy-client.key --request-timeout=1m0s --requestheader-allowed-names=front-proxy-client --requestheader-client-ca-file=/etc/kubernetes/ssl/front-proxy-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6443 --service-account-key-file=/etc/kubernetes/ssl/sa.pub --service-cluster-ip-range=10.233.0.0/18 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/etc/kubernetes/ssl/apiserver.crt --tls-private-key-file=/etc/kubernetes/ssl/apiserver.key

vagrant@k8s-1:~$ sudo ps ax | grep kube-proxy
19425 ?        Ssl    0:00 /usr/local/bin/kube-proxy --config=/var/lib/kube-proxy/config.conf --hostname-override=k8s-1

kubeadm-config.yaml from k8s-1