C12s/c12s-kubespray

Author	SHA1	Message	Date
忘尘	1562a9c2ec	add missing verbs (#9032 )	2022-06-29 00:18:05 -07:00
Kay Yan	4b03f6c20f	add-managed-ntp-support (#9027 )	2022-06-28 13:15:34 -07:00
Samuel Liu	e8ccbebd6f	add ingress nginx webhook (#9033 ) * add ingress nginx webhook * fix ingress nginx template	2022-06-28 11:55:35 -07:00
Kay Yan	d4de9d096f	fix-the-issue-of-miss-the-etcd-user (#9016 )	2022-06-28 09:13:58 -07:00
Tom Stian Berget	e1f06dd406	Add support for the updated (startup\|liveness\|readiness)Probe.Port numbers in Cilium (#9031 )	2022-06-27 11:00:59 -07:00
rptaylor	6f82cf12f5	let containerd_default_runtime be undefined by default (#9026 )	2022-06-27 10:56:59 -07:00
Calin Cristian Andrei	ca8080a695	[crun] drop old crun versions 1.2 and 1.3	2022-06-27 10:36:59 -07:00
Calin Cristian Andrei	55d14090d0	[crun] add 1.4.5 and make it the default	2022-06-27 10:36:59 -07:00
rtsp	da8498bb6f	[cert-manager] Upgrade to v1.8.2 (#9029 )	2022-06-24 23:50:58 -07:00
orange-llajeanne	b33896844e	apply calico bgp peer definition task to all nodes, but delegate to (#8974 ) first control plane node	2022-06-24 19:42:57 -07:00
Calin Cristian Andrei	ca212c08de	[runc] drop hashes for 1.0.2 and 1.0.3	2022-06-23 09:23:43 -07:00
Calin Cristian Andrei	784439dccf	[runc] make 1.1.3 the new default	2022-06-23 09:23:43 -07:00
Calin Cristian Andrei	d818c1c6d9	[runc] add hashes for 1.1.3	2022-06-23 09:23:43 -07:00
Calin Cristian Andrei	b9384ad913	[runc] add hashes for 1.1.2	2022-06-23 09:23:43 -07:00
Cristian Calin	76b0cbcb4e	bump pause container to 3.6 (#9024 ) * [pod-infra] bump pod infra container version to 3.6 * [cri-dockerd] align pod infra container image with other CRIs	2022-06-23 01:43:44 -07:00
Florian Ruynat	6bf3306401	Fixed concatenate str & int in auto_renew_certificates_systemd_calendar var (#8979 )	2022-06-22 11:55:43 -07:00
Robin Wallace	79f6cd774a	create snapshot-controller only if needed	2022-06-22 00:37:44 -07:00
Cyclinder	c3c9a42502	support multus multi-architecture installation (#9012 ) Signed-off-by: cyclinder qifeng.guo@daocloud.io	2022-06-21 10:56:26 -07:00
Sébastien Masset	9d5d945bdb	[MASTER] Add missing configuration for extra tolerations (#8908 ) * Added new configuration item for extra tolerations in policy controllers Signed-off-by: Sébastien Masset <smt.masset@gmail.com> * Added new configuration item for extra tolerations in DNS autoscaler Signed-off-by: Sébastien Masset <smt.masset@gmail.com> * Aligned existing handling of extra DNS tolerations Signed-off-by: Sébastien Masset <smt.masset@gmail.com>	2022-06-20 01:36:06 -07:00
Christoffer Anselm	475ce05979	Fix kubectl download for v1.23.8 amd64 (#9002 ) kubectl_checksums for amd64 v1.23.8 was missing the last digit	2022-06-20 01:28:06 -07:00
Mohamed Zaian	e4fe679916	[kubernetes] make v1.24.2 default	2022-06-17 11:08:33 -07:00
Mohamed Zaian	123632f5ed	[kubernetes] add hashes for v1.22.11, v1.23.8 & v1.24.2	2022-06-17 11:08:33 -07:00
Calin Cristian Andrei	a1ec0571b2	[nerdctl] upgrade to 0.20.0	2022-06-17 08:00:32 -07:00
Calin Cristian Andrei	2db39d4856	[containerd] add hashes for 1.5.12, 1.5.13, 1.6.5 and 1.6.6 and make 1.6.6 the new default	2022-06-17 08:00:32 -07:00
Citrullin	e7729daefc	Add assertion for IPv6 in verify settings Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>	2022-06-17 10:36:43 +02:00
Alessio Greggi	97b4d79ed5	feat: make kubernetes owner parametrized (#8952 ) * feat: make kubernetes owner parametrized * docs: update hardening guide with configuration for CIS 1.1.19 * fix: set etcd data directory permissions to be compliant to CIS 1.1.12	2022-06-17 01:34:32 -07:00
Florian Ruynat	9e7f89d2a2	Remove forgotten 1.21 references	2022-06-16 08:55:38 +02:00
Calin Cristian Andrei	24c8ba832a	[kubernetes] drop support for configuring insecure apiserver	2022-06-15 00:57:20 -07:00
Calin Cristian Andrei	c2700266b0	[download] fix dependencies for downloads	2022-06-15 00:57:20 -07:00
Calin Cristian Andrei	2cd8c51a07	[kubeadm] use v1beta3 configuration version * extra admission controls now don't have a version in their file names eventratelimit.v1beta2.yaml.j2 -> eventratelimit.yaml.j2 * cri_socket variable includes the unix:// prefix to be conformat with upstream	2022-06-15 00:57:20 -07:00
Calin Cristian Andrei	589823bdc1	[CI] remove docker stand-alone molecule test	2022-06-15 00:57:20 -07:00
Calin Cristian Andrei	fad296616c	[docker] use cri-dockerd instead of dockershim for any kubernetes version deployed with docker as the container_manager	2022-06-15 00:57:20 -07:00
Calin Cristian Andrei	ec01b40e85	[cri_dockerd] upgrade cri_dockerd to 0.2.2 for 1.24 compatibility * use new artifact release name * enable cri-dockerd dual setack support if enable_dual_stack_networks	2022-06-15 00:57:20 -07:00
Calin Cristian Andrei	2de5c4821c	[calico] clean up workarounds for older versions	2022-06-15 00:57:20 -07:00
Calin Cristian Andrei	9efe145688	[calico] make 3.23.1 the default and drop 3.20.x and 3.19.x	2022-06-15 00:57:20 -07:00
Calin Cristian Andrei	51bc64fb35	[cri-o] support cri-o 1.24 with kube 1.24	2022-06-15 00:57:20 -07:00
Calin Cristian Andrei	6380483e8b	[kubeconfig] generate admin kube config from /etc/kubernetes/admin.conf instead of the workaround of using kubeadm init phase kubeadm admin which fails with cri-dockerd	2022-06-15 00:57:20 -07:00
Calin Cristian Andrei	ae1dcb031f	[kubernetes] drop pre 1.22.0 workarounds	2022-06-15 00:57:20 -07:00
Calin Cristian Andrei	9535a41187	[kubernetes] make 1.22.0 the minimum version	2022-06-15 00:57:20 -07:00
Calin Cristian Andrei	47495c336b	[kubernetes] drop hashes for 1.21.x	2022-06-15 00:57:20 -07:00
Calin Cristian Andrei	d69d4a8303	[kubernetes] make 1.24.1 the new default	2022-06-15 00:57:20 -07:00
rtsp	668b9b026c	[cert-manager] Upgrade to v1.8.1 (#8976 )	2022-06-14 15:11:34 -07:00
Viktor Jacynycz	77de7cb785	Expose calico-typha metrics port (#8855 )	2022-06-14 07:17:33 -07:00
Dickson Tung	e5d6c042a9	Fix regex for replacing http_proxy (#8957 )	2022-06-14 07:07:34 -07:00
Ho Kim	3ae397019c	Add arm64 Flatcar OS's pypy bootstrapping (#8959 ) - Upgrade pypy's python version to `3.9` - Upgrade pypy`s version to `7.3.9`	2022-06-14 07:03:35 -07:00
Ho Kim	7d3e59cf2e	Remove unneeded socat installation for Flatcar (#8970 )	2022-06-14 02:23:34 -07:00
orange-llajeanne	4eb83bb7f6	fixes for docker reset (#8966 )	2022-06-14 02:15:34 -07:00
Florian Ruynat	1429ba9a07	Update docker version to 20.10.17 (#8965 )	2022-06-14 02:11:33 -07:00
Ho Kim	889454f2bc	Fix typo in calico check (#8969 )	2022-06-13 14:10:12 -07:00
orange-llajeanne	2fba94c5e5	fix a typo in the "matallb_auto_assign" variable name (#8949 ) * fix a typo in the "matallb_auto_assign" variable name * add metallb check to fail when deprecated "matallb_auto_assign" variable is defined	2022-06-13 09:40:12 -07:00
Steffen Becker	6b43d6aff2	Proposed fix to Issue 8667 (#8944 ) Proposed fix to Issue 8667 Proposed fix to Issue 8667	2022-06-09 23:37:46 -07:00
Kenichi Omichi	024a3ee551	Replace callback_whitelist with callbacks_enabled (#8759 ) When running molecule jobs, we saw the folloing warning message: [DEPRECATION WARNING]: [defaults]callback_whitelist option, normalizing names to new standard, use callbacks_enabled instead. This feature will be removed from ansible-core in version 2.15. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. callbacks_enabled has been added since Ansible 2.11 and Kubespray is using Ansible 2.12 at master branch. So we can use callbacks_enabled safely to avoid the warning message.	2022-06-09 13:15:45 -07:00
Kenichi Omichi	cd7381d8de	Drop Ansible support for v2.9 and v2.10 (#8925 ) Ansible v2.9 and v2.10 are EOL as [1]. This drops those version supports by following the upstream Ansible. This sets use_ssh_args true always because that is required to use ssh_args on ansible.cfg on Ansible v2.11 or later[2]. ansible_ssh_host is replaced with ansible_host because ansible_ssh_host has been deprecated already and cenots7 jobs were failed due to the deprecated ansible_ssh_host. [1]: https://docs.ansible.com/ansible/devel/reference_appendices/release_and_maintenance.html#ansible-core-changelogs [2]: https://docs.ansible.com/ansible/latest/collections/ansible/posix/synchronize_module.html#parameter-use_ssh_args	2022-06-09 07:07:42 -07:00
Mathieu Parent	f53764f949	calicoctl repo has been merged in calico (#8920 )	2022-06-09 07:01:42 -07:00
Mohamed Zaian	bb530da5c2	[registry] Switch registry to use registry.k8s.io Please see the conversation here: https://groups.google.com/a/kubernetes.io/g/dev/c/DYZYNQ_A6_c	2022-06-08 14:12:22 +02:00
Ilya Margolin	cc6cbfbe71	Allow disabling calico CNI logs with calico_cni_log_file_path (#8921 ) * Allow disabling calico CNI logs with calico_cni_log_file_path Calico CNI logs up to 1G if it log a lot with current default settings: log_file_max_size 100 Max file size in MB log files can reach before they are rotated. log_file_max_age 30 Max age in days that old log files will be kept on the host before they are removed. log_file_max_count 10 Max number of rotated log files allowed on the host before they are cleaned up. See https://projectcalico.docs.tigera.io/reference/cni-plugin/configuration#logging To save disk space, make the path configurable and allow disabling this log by setting `calico_cni_log_file_path: false` * Fix markdown * Update roles/network_plugin/canal/templates/cni-canal.conflist.j2 Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com> Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>	2022-06-07 09:22:56 -07:00
mahjonp	8030e6f76c	fix 8893#issuecomment-1147154353 (#8933 ) Signed-off-by: mahjonp <junpeng.man@gmail.com>	2022-06-06 12:40:21 -07:00
Ho Kim	77f436fa39	Fix: set fallback value of kubelet ip6 (#8858 ) (#8926 ) * Fix: set fallback value of kubelet ip6 (#8858) * Prune the spurious comma in the end of kubelet_address - Update `roles/kubernetes/node/defaults/main.yml` Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com> * Fix: set fallback value of kubelet ip6 (#8858) - Apply the lint: `132606368e` Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>	2022-06-06 10:08:21 -07:00
Kenichi Omichi	814760ba25	Use blocks for macvlan tasks for each distribution (#8918 ) For the code readability, this adds blocks for each distribution.	2022-06-06 07:50:24 -07:00
Boris Barnier	0761659a43	Update Kube-router version to 1.5.0 (#8928 ) https://github.com/cloudnativelabs/kube-router/releases/tag/v1.5.0	2022-06-06 07:38:34 -07:00
vanyasvl	a4f752fb02	Add subjectAltName to calico-apiserver certificate (#8907 ) * Add AltName to calico-apiserver certificate * fix support for centos7 openssl	2022-06-06 07:38:23 -07:00
Mohamed Zaian	b2346cdaec	[feat] Upgrade metrics server to v0.6.1 (#8909 ) * Metrics Server now requires access to nodes/metrics RBAC resource instead of nodes/stats. See: https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.6.0 * Minimize rbac permissions.	2022-06-06 07:34:37 -07:00
Thearas	01ca7293f5	support reserve ephemeral-storage (#8895 )	2022-06-06 07:34:26 -07:00
Florian Ruynat	4dfce51ded	Update dashboard to 2.6.0 (k8s 1.24 support) (#8906 )	2022-06-06 16:47:33 +03:00
rtsp	1f65e6d3b5	[ingress-nginx] upgrade to 1.2.1 (#8904 )	2022-06-01 00:23:10 -07:00
Max Gautier	5512465b34	Revert "Set exact user for Kubelet services" (#8872 ) This reverts commit `e375678674`. The workaround of explicitly specifying root for the kubelet unit was for pulling images from private registry. Kubernetes now have a dedicated mechanism with imagePullSecret.	2022-06-01 00:19:02 -07:00
Chris Ricker	2f30ab558a	Add 1.24 mappings for etcd and snapshot_controller (#8903 ) Map appropriate versions of etcd and snapshot_controller containers with k8s 1.24	2022-06-01 00:09:02 -07:00
Daniil Muidinov	5c136ae3af	[calico] add 3.22.3 and 3.23.1 (#8897 ) * [calico] * add 3.22.3 and 3.23.1 * set 3.22.3 default * fix download crd for calico 3.22.3 and upper * update calico README.md	2022-05-31 13:27:23 -07:00
mahjonp	c927da00e0	Support cilium ip-masq-agent configuration (#8893 ) * fix deploy Cilium with eBPF-based Masquerading failed Signed-off-by: mahjonp <junpeng.man@gmail.com> * forget to add the enable-ip-masq-agent flag Signed-off-by: mahjonp <junpeng.man@gmail.com>	2022-05-31 09:26:53 -07:00
Samuel Liu	1600fd9082	clean up tags (#8880 )	2022-05-31 07:52:53 -07:00
Samuel Liu	14acd124bc	fix containerd images downalod bugs (#8894 )	2022-05-31 00:22:53 -07:00
Mohamed Zaian	78aacee21b	[kubernetes] add hashes for 1.24.1 and other versions. (#8876 ) * [kubernetes] add hashes for 1.24.1 and other versions. versions: v1.21.13, v1.22.10, v1.23.7 & v1.24.1 * [kubernetes] make v1.23.7 default1	2022-05-27 12:00:42 -07:00
Gleb Galkin	f47aca3558	Added \|bool for rhel_enable_repos (#8871 )	2022-05-26 18:51:55 -07:00
Kenichi Omichi	73fc70dbe8	Delete kube_version v1.20- related code (#8869 ) Current Kubespray supports the Kubernetes version 1.21 or upper with `kube_version_min_required: v1.21.0` Then kube_version v1.20- related code is not used at all. This deletes those code for cleanup.	2022-05-25 21:31:22 -07:00
Kenichi Omichi	dc2a18e436	Merge pull request #8815 from simplekube-ro/dont_clobber_calico [calico] don't clobber calico options set by the user	2022-05-24 10:25:48 -07:00
Thearas	82590eb087	fix remove `docker-ce.repo` failed (#8856 )	2022-05-24 05:44:06 -07:00
Ross Kusler	4c97ce747c	Adding support for the kube-router flag --cluster-asn flag (#8837 )	2022-05-23 16:39:10 -07:00
Necatican Yıldırım	dc1af5a9c5	[etcd] Add support for setting the request size limit (#8849 ) * [etcd] Add extra documentation for `etcd_memory_limit` and `etcd_quota_backend_bytes` Signed-off-by: necatican <necaticanyildirim@gmail.com> * [etcd] Add support for setting ETCD_MAX_REQUEST_BYTES Signed-off-by: necatican <necaticanyildirim@gmail.com>	2022-05-23 09:36:03 -07:00
irizzant	85bd1eea27	fix(calico): add missing "get" verb (#8847 ) Signed-off-by: irizzant <i.rizzante@gmail.com>	2022-05-21 01:20:00 -07:00
Necatican Yıldırım	2b151c6aa2	cni-plugins: upgrade to 1.1.1 (#8852 ) Signed-off-by: necatican <necaticanyildirim@gmail.com>	2022-05-21 11:14:16 +03:00
David Louks	93fe3e06ef	Add support for including annotations on aws-ebs-csi-controller (#8779 ) * Add support for including annotations on aws-ebs-csi-controller * update comment to specify role arn	2022-05-20 15:00:00 -07:00
Tamas Pasztor	9d3a894991	Possible remove ippools from cni config (#8845 ) * Possible remove ippools from cni config * Typo * Update roles/network_plugin/calico/templates/cni-calico.conflist.j2 Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com> * Update cni-calico.conflist.j2 Incorrectly deleted calico forwarding content. * Update roles/network_plugin/calico/templates/cni-calico.conflist.j2 Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com> Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>	2022-05-19 23:45:13 -07:00
Andrey	e42a01f203	Fixed systemd-networkd restart for ubuntu 22.04, when using reset.yml (#8841 ) * Fixed systemd-networkd restart for ubuntu 22.04 * fixed systemd-networkd restart for all Ubuntu	2022-05-20 09:34:53 +03:00
Samuel Liu	a28b58dbd0	[calico]use ipamconfig instead of calico ipam command (#8839 ) * use ipamconfig instead of calico ipam command * fix ansible lint	2022-05-19 11:13:20 -07:00
orange-llajeanne	a26a9ee14f	set apparmor_enabled in netchecker task (#8844 )	2022-05-19 10:49:21 -07:00
Samuel Liu	593359ec77	fix kube-ovn image (#8838 )	2022-05-18 08:36:53 -07:00
Kay Yan	3d8f3bc0b7	Fix the invalid kube vip manifest (#8831 ) * add Feature synchronized time checking * fix-invalid-kube-vip-manifest	2022-05-17 23:48:55 -07:00
Samuel Liu	eea7bb7692	only need run this once (#8833 ) calicoctl ipam xx calicoctl apply xx	2022-05-17 09:52:27 -07:00
Mohamed Zaian	632d457f78	[ingress-nginx] upgrade to 1.2.0 (#8814 )	2022-05-12 09:07:14 -07:00
Calin Cristian Andrei	569a319ff5	[calico] don't clobber user set bgp configuration options that are not managed by kubespray	2022-05-12 15:50:38 +00:00
Calin Cristian Andrei	47812ec002	[calico] don't clobber user set ippool options that are not managed by kubespray	2022-05-12 15:50:05 +00:00
Calin Cristian Andrei	c27dee57ea	[calico] don't clobber user set felixconfig options that are not managed by kubespray	2022-05-12 15:49:24 +00:00
weizhoublue	b289f533b3	get wrong server name of coredns (#8811 ) Signed-off-by: weizhou.lan@daocloud.io <weizhou.lan@daocloud.io>	2022-05-12 08:33:14 -07:00
Cyclinder	3eb0a4071a	set default value of name to "k8s-pod-network" (#8813 ) Signed-off-by: cyclinder qifeng.guo@daocloud.io	2022-05-12 08:29:14 -07:00
Oogy	5684610a55	Support metallb peer password (#8792 ) * support metallb peer password * add MetalLB BGP password example	2022-05-11 21:39:15 -07:00
Samuel Liu	f26f544ff6	[kube-ovn]: update kube-ovn version and sync some feature (#8790 ) * [kube-ovn]: some feature kube-ovn vlan mode ipv6/ipv4 dual stack ... * remove unused env * fix readinessprobe	2022-05-11 21:35:15 -07:00
Necatican Yıldırım	13443b05a6	Overhaul Cilium manifests to match the newer versions (#8717 ) * [cilium] Separate templates for cilium, cilium-operator, and hubble installations Signed-off-by: necatican <necaticanyildirim@gmail.com> * [cilium] Update cilium-operator templates Signed-off-by: necatican <necaticanyildirim@gmail.com> * [cilium] Allow using custom args and mounting extra volumes for the Cilium Operator Signed-off-by: necatican <necaticanyildirim@gmail.com> * [cilium] Update the cilium configmap to filter out the deprecated variables, and add the new variables Signed-off-by: necatican <necaticanyildirim@gmail.com> * [cilium] Add an option to use Wireguard encryption on Cilium 1.10 and up Signed-off-by: necatican <necaticanyildirim@gmail.com> * [cilium] Update cilium-agent templates Signed-off-by: necatican <necaticanyildirim@gmail.com> * [cilium] Bump Cilium version to 1.11.3 Signed-off-by: necatican <necaticanyildirim@gmail.com>	2022-05-11 06:23:04 -07:00
Andrew Zagorodnuk	e70c00a0fe	fix: Waiting until Volumes will be detached from the node on graceful node removal (#8739 )	2022-05-10 09:57:43 -07:00
spaced	bb67b654c5	local volume provisioner should not run on control plane nodes by default (#8805 )	2022-05-10 19:04:24 +03:00
emiran-orange	8f618ab408	Fix condition on kata_containers_version/kube_version when kata_containers_enabled is false (#8804 )	2022-05-09 14:56:32 -07:00
Robin Wallace	b715500b48	csi: bump upcloud csi driver (#8784 )	2022-05-09 10:43:19 -07:00
Alessio Greggi	37a5271f5a	feat: add variables to manage makeIPTablesUtilChains and streamingConnectionIdleTimeout kubelet parameters (#8796 )	2022-05-09 09:25:19 -07:00
Robin Wallace	42fc71fafa	[PodSecurityPolicy] Move the install of psp (#8744 )	2022-05-09 09:21:19 -07:00
Victor Morales	02b6e4833a	Update Kata Containers runtime (#8797 ) * Update Kata containers binary to 2.4.1 version * Update overhead kata runtime values * Fix kata-qemu default values in CRI-O	2022-05-08 17:01:18 -07:00
Andy	323a111362	[kubelet] set correct resolv.conf for Ubuntu 22.04 (#8795 )	2022-05-06 16:31:04 -07:00
Alessio Greggi	e7df4d3dd9	add support for `service-account-lookup` parameter (#8781 ) * feat: add variable to manage service-account-lookup on kube-apiserver * docs: add documentation about service-account-lookup variable	2022-05-06 00:39:07 -07:00
David Louks	3e52a0db95	Add optional setting for ca data in auth webhook (#8777 ) * Add optional setting for ca data in auth webhook * add webhook token auth variables to sample inventory	2022-05-05 14:52:43 -07:00
Cristian Calin	94484873d1	[containerd] add 1.6.4 which is needed for kubernetes 1.24.0 and make it the default (#8791 )	2022-05-05 14:10:43 -07:00
Elif Akyıldırım	0d6ea85167	Assert that IP range is enough for the nodes (#8720 ) * Assert that IP range is enough for the nodes Co-authored-by: Necatican Yıldırım <necaticanyildirim@gmail.com> * Fixed whitespace * Fixed errors * Fixed errors Co-authored-by: Necatican Yıldırım <necaticanyildirim@gmail.com>	2022-05-05 08:48:20 -07:00
Florian Ruynat	674ec92224	Add crictl 1.24 for new k8s version (#8787 )	2022-05-05 08:40:22 -07:00
Victor Morales	e7e5037a86	Add a container_manager validation (#8785 )	2022-05-04 23:58:19 -07:00
Kenichi Omichi	fbcf426240	Drop containerd 1.4 support (#8780 ) The version 1.4 of containerd has been End of Life since March 3, 2022 as https://containerd.io/releases/#support-horizon It is nice to drop the support from Kubespray also to follow containerd.	2022-05-04 23:02:20 -07:00
Mohamed Zaian	2301554e98	[kubernetes] add hashes for 1.24.0 (#8783 )	2022-05-04 22:58:21 -07:00
Calin Cristian Andrei	5bc35002ba	[remove-etcd-node] fix json path query	2022-05-04 06:35:51 -07:00
Calin Cristian Andrei	8f118fb619	[reset] fix task inclusion logic for network plugin	2022-05-04 06:35:51 -07:00
Calin Cristian Andrei	1113460b68	[cri-o] molecule switch from ubuntu 18 to ubuntu 20	2022-05-04 14:46:17 +02:00
Lubos Mercl	c20ab7d987	add fix for GCP CSI driver (#8616 ) Signed-off-by: Lubos Mercl <lubos.mercl@gmail.com>	2022-05-03 08:55:56 -07:00
Cristian Calin	9605bbaa67	[nerdctl] upgrade to 0.19.0 (#8772 )	2022-05-03 05:39:56 -07:00
Kenichi Omichi	c04a73c11a	Update containerd version to 1.6.3 (#8770 ) containerd version 1.6.3 has been released as [1] This adds the checksums and makes Kubespray use it. [1]: https://github.com/containerd/containerd/releases/tag/v1.6.3	2022-05-02 22:43:55 -07:00
bilalcaliskan	26a0b0f1e8	chore(flannel): change flannel repository and upgrade image version (#8740 ) * chore: change flannel repository and upgrade image version * docs: upgrade flanneld version	2022-05-02 11:29:14 -07:00
Alessio Greggi	fa1d222eee	add support for `EventRateLimit` plugin configuration (#8711 ) * feat: add support for EventRateLimit admission plugin * docs: add documentation about admission_control_config_file and EventRateLimit configuration	2022-05-02 11:03:15 -07:00
Cristian Calin	56cf163a23	[kubernetes] actually make 1.23.6 the default (#8767 )	2022-05-02 00:43:14 -07:00
Mohamed Zaian	afcedf6d77	Pull master, Rebase, add changes again (#8745 )	2022-05-02 00:39:14 -07:00
Chris Ricker	21fc197ee0	Ensure containerd service unmasking (#8726 ) * Force containerd service unmasking Force systemd to unmask and start service when adding containerd service * Eliminate restart and move unmasking step Switch to start instead of restart Move unmasking to restart handler * Add unmasking to similar container runtimes * Add missing service names	2022-04-29 08:39:14 -07:00
Calin Cristian Andrei	b6e2c56ae6	[kubernetes] add hashes for 1.21.12	2022-04-29 07:57:13 -07:00
Calin Cristian Andrei	b005985d4e	[kubernetes] add hashes for 1.23.6	2022-04-29 07:57:13 -07:00
Samuel Liu	1294fd5730	check calico ipv6 (#8738 ) * check calico ipv6 * just check ipip mode for ipv6	2022-04-29 00:35:13 -07:00
Mohamed Zaian	b7004d72c5	[kubernetes] add hashes for 1.22.9 (#8746 ) * [kubernetes] add hashes for 1.22.9	2022-04-28 16:10:50 +03:00
Kenichi Omichi	eb566ca626	Remove aufs-tools from Ubuntu requirement (#8754 ) aufs-tools was required for docker.io package originally, but Kubespray installs docker-ce package instead today. In addition, Ubuntu 20.04 doesn't provide aufs-tools as [1]. Then this removes aufs-tools from Ubuntu requirement. [1]: https://bugs.launchpad.net/ubuntu/+source/aufs-tools/+bug/1947004	2022-04-27 23:04:55 -07:00
Mulugeta Ayalew Tamiru	3f065918d9	Update verbs for volumeattachments resource (#8731 ) * Update verbs for volumeattachments resource Update verbs for volumeattachments resource so that the kubelet can create volumeattachments and mount volumes when deploying Kubernetes on VMware vSphere. * Update verbs for volumeattachments resource Update verbs for volumeattachments resource to match upstream * Update vsphere-csi-controller-rbac.yml.j2	2022-04-22 00:04:13 -07:00
Cristian Calin	2c2d4513ac	[helm] upgrade to 3.8.2 (#8723 )	2022-04-18 12:51:50 -07:00
zhengtianbao	937e64d296	Update flannel use install-cni-plugin to fit upstream (#8714 ) * Update flannel use install-cni-plugin to fit upstream * Replace flannel cni repo * Remove download flannel binary	2022-04-18 09:44:41 -07:00
Cristian Calin	3261d26181	[etcd] ensure etcd is properly upgraded when managed by kubeadm (#8722 ) * [etcd] ensure etcd is properly upgraded when managed by kubeadm * [CI] add periodic job to test upgrade of etcd managed by kubeadm	2022-04-17 10:32:41 -07:00
Mathieu Parent	c98a0a448f	metallb: Add images to downloads (#8715 ) For offline mode	2022-04-14 10:06:46 -07:00
Mohamed Zaian	7e7218f5ce	etcd: add etcd v3.5.3 for kubernetes 1.21+ (#8712 ) * As per this issue https://github.com/kubernetes-sigs/kubespray/pull/8664 I propose to make etcd v.3.5.3 default for any kubernetes version which uses 3.5.x since that 3.5.[0-2] not recommended for production.	2022-04-14 05:48:46 -07:00
Cristian Calin	45262da726	[calico] call calico checks early on to prevent altering the cluster with bad configuration (#8707 )	2022-04-14 01:08:46 -07:00
Julien Le Fur	30306d6ec7	Enable external CA mode for control-plane deployment (#8620 )	2022-04-12 05:47:23 -07:00
Robin Wallace	d7254eead6	UpCloud integration (#8653 ) * [upcloud] add upcloud csi-driver * Option to use ansible_host as api ip for kubueconfig	2022-04-11 15:13:23 -07:00
Anthony Bible	9dced7133c	Fixes for Hetzner terraform and Hetzner Cloud (#8702 ) * - add ability to specify the network_zone in hetzner terraform - Export the network id from hetzner terraform the the generated inventory.ini * - Add with_networks variable to allow different deployments of hcloud controller manager - Add network id to hcloud controller secret (added via the inventory) - Don't include extra_args if it's not set	2022-04-11 10:26:06 -07:00
Thomas Eberle	00a4d2d3c4	Removed quotation of nerdctl_extra_flags. (#8695 ) The quotations in the variable nerdctl_extra_flags are not required for the `nerdctl_image_pull_command` and throw the following error when executing the cluster-playbook with `container_insecure_registries` set: unknown flag: --insecure-registry\\\" This happens as the complete nerdctl_image_pull_command string variable gets split into an array string for the cmd task. The escaped quotation doesn't get escaped properly and is added to the cmd-string array as part of the command. This leads to a wrong written insecure-registry flag, which throws this error.	2022-04-08 08:02:43 -07:00
Samuel Liu	424ef3b3f9	[calico] add calico apiserver (#8690 ) * [calico] add calico apiserver * fix yamllint * remove addext argument * Configure API server with the CA bundle * add check kdd	2022-04-08 00:02:42 -07:00
Mathieu Parent	996ef98b87	Add support for kube-vip (#8669 ) Signed-off-by: Mathieu Parent <math.parent@gmail.com>	2022-04-07 10:37:57 -07:00
Unai Arríen	19d5a1c7c3	Ensure all Kubelet required kernel values are configured when enabling protectKernelDefaults (#8692 )	2022-04-07 08:33:59 -07:00
rtsp	0481dd946f	[cert-manager] Upgrade to v1.8.0 (#8688 )	2022-04-06 00:52:57 -07:00
cyril-corbon	29109575f5	fix: reset docker was not removing docker properly (#8680 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-04-05 21:36:55 -07:00
emiran-orange	3782573ede	Single quotes are missing in jsonpath argument of kubectl get node (#8683 )	2022-04-05 09:45:38 -07:00
Alessio Greggi	bba91a7524	split kube_feature_gates variable for different kubernetes components (#8677 ) * feat: split kube_feature_gates variable for different kubernetes components * docs: add kube_feaute_gates componet variables	2022-04-05 05:39:37 -07:00
Cristian Calin	b67cadf743	[crun] upgrade to 1.4.4 (#8675 )	2022-04-04 23:57:36 -07:00
cyril-corbon	56dda4392c	[validate-container-engine] check if kubelet is present was not working (#8679 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-04-04 09:34:12 -07:00
Cristian Calin	34fec09ff1	[containerd] upgrade versions to address CVE-2022-24769 (#8671 ) * [containerd] add hashes for 1.5.11 * [containerd] add hashes for 1.6.2 * [containerd] make 1.6.2 the new default	2022-04-04 05:30:11 -07:00
Cristian Calin	cefd1339fc	[vsphere_csi] update to 2.5.1 and make external_vsphere_version 7.0u1 by default (#8676 )	2022-04-04 01:08:11 -07:00
Cristian Calin	b915376194	[runc] upgrade to 1.1.1 (#8674 )	2022-04-04 00:42:23 -07:00
Cristian Calin	455cc6ff75	[nerdctl] upgrade to 0.18.0 (#8672 )	2022-04-04 00:42:11 -07:00
Cristian Calin	cc9c376d0f	[validate-container-engine] add facts tag to tasks needed for vagrant jobs (#8678 )	2022-04-04 00:32:11 -07:00
Kenichi Omichi	018611f829	Fix quotation of nerdctl_extra_flags (#8668 ) Due to missing quotation of nerdctl_extra_flags, ansible-playbook was failed: Using module file /usr/local/lib/python3.6/dist-packages/ansible/modules/command.py Pipelining is enabled. [..] File "/usr/lib/python3.8/shlex.py", line 191, in read_token raise ValueError("No closing quotation") This fixes the issue. T-Eberle investigated the issue and found the solution. Thank you T-Eberle!	2022-04-02 10:56:09 -07:00
cyril-corbon	1781eab21f	fix: uninstall contailer engine if service is running (#8662 )	2022-04-01 09:20:46 -07:00
Florian Ruynat	1c0df78278	Add ETCD_EXPERIMENTAL_INITIAL_CORRUPT_CHECK flag to etcd config (#8664 )	2022-03-31 08:17:01 -07:00
Kenichi Omichi	503ab0f722	Run 0100-dhclient-hooks if dhcpclient is enabled (#8658 ) If running Kubespray on static IP environments, a task was failed like: TASK [kubernetes/preinstall : Configure dhclient hooks for resolv.conf (RH-only)] fatal: [ak8s2]: FAILED! => { "changed": false, "checksum": "..", "msg": "Destination directory /etc/dhcp/dhclient.d does not exist"} This adds a check for dhclientconffile for running 0100-dhclient-hooks to run the task only if dhcpclient is enabled.	2022-03-29 00:11:11 -07:00
Calin Cristian Andrei	652f2edbe1	[etcd] add 0 hash for arm v3.5.2 to prevent deployment failures	2022-03-28 08:40:30 +02:00
rtsp	a67e36703f	Update cert-manager to v1.7.2 (#8648 )	2022-03-26 04:53:22 -07:00
Florian Ruynat	d46817d690	Remove centos7 molecule while opensuse mirror is flaky	2022-03-25 16:57:58 -07:00
Cristian Calin	fa9f85c7e9	[sysctl] set fs.may_detach_mounts=1 even when CRIs don't set it themselves (#8635 )	2022-03-21 17:36:13 -07:00
Fredrik Liv	ffa285c2e7	Fixed cluster roles for openstack cloud controller (#8638 )	2022-03-21 06:19:21 -07:00
Kenichi Omichi	7b1dc600d5	Fix the condition of drain on pre-remove task (#8634 ) When running cluster.yml for new machines what containerd is already install but Kubernetes cluster were not installed before, the task "remove-node \| List nodes" is failed like "changed": false, "cmd": [ "/usr/local/bin/kubectl", "--kubeconfig", "/etc/kubernetes/admin.conf", "get", "nodes", "-o", "go-template={{ range .items }}{{ .metadata.name }} {{ "\n" }}{{ end }}" ], .. "stderr": "error: stat /etc/kubernetes/admin.conf: no such file or directory", That was due to lack to check the existing Kubernetes cluster exists or not before running "kubectl drain" command. This adds the check to avoid the issue.	2022-03-21 01:39:10 -07:00
Fredrik Liv	af7066d33c	Updated openstack cloud controller version to v1.22.0 (#8629 ) * Updated openstack cloud controller version to match kubernetes version * Rolled back file structure change	2022-03-18 01:47:16 -07:00
Cristian Calin	dd2d95ecdf	[calico] don't enable ipip encapsulation by default and use vxlan in CI (#8434 ) * [calico] make vxlan encapsulation the default * don't enable ipip encapsulation by default * set calico_network_backend by default to vxlan * update sample inventory and documentation * [CI] pin default calico parameters for upgrade tests to ensure proper upgrade * [CI] improve netchecker connectivity testing * [CI] show logs for tests * [calico] tweak task name * [CI] Don't run the provisioner from vagrant since we run it in testcases_run.sh * [CI] move kube-router tests to vagrant to avoid network connectivity issues during netchecker check * service proxy mode still fails connectivity tests so keeping it manual mode * [kube-router] account for containerd use-case	2022-03-17 18:05:39 -07:00
Sergey	a86d9bd8e8	do not remove package in validate container engine role when Fedora CoreOS distr (#8626 )	2022-03-17 06:49:20 -07:00
Calin Cristian Andrei	21b1516d80	[kubernetes] add hashes for 1.21.11	2022-03-17 05:03:20 -07:00
Calin Cristian Andrei	4c15038194	[kubernetes] add hashes for 1.22.8	2022-03-17 05:03:20 -07:00
Calin Cristian Andrei	538f9df5cc	[kubernetes] make 1.23.5 the default	2022-03-17 05:03:20 -07:00
Calin Cristian Andrei	efb0412b63	[kubernetes] add hashes for 1.23.5	2022-03-17 05:03:20 -07:00
Qasim Mehmood	5a486a5cca	Calico: Fix Wireguard support for CentOS Stream 9/RHEL 9 Beta (#8625 )	2022-03-17 04:11:20 -07:00
Cristian Calin	394857b5ce	[docker] add support for cri-dockerd as a replacement for dockershim (#8623 )	2022-03-16 16:28:11 -07:00
Cristian Calin	5043517cfb	[containerd] avoid cleanup of /usr/bin on ostree distributions (#8624 )	2022-03-15 13:47:48 -07:00
Max Gautier	307d122a84	Helm-apps role for installing helm charts (#8347 ) * Sketch of helm-apps role interface * helm-apps: Early implementation and settings * helm-apps: Fix README.md example playbook * fixup! Sketch of helm-apps role interface * Make the argument specs more explicit * Remove exposed options from hardcoded default * Simplify example playbook in README.md - Define directly the roles parameters - Add an example of option override for one chart only * Use release instead of charts Make explicit that the role is mananing releases, not charts. Simplify parameters naming	2022-03-14 08:29:58 -07:00
onock	d444a2fb83	[systemd-resolved] Fix DNS configuration according to docs/dns-stack.md and during reset of cluster (#8560 ) (#8561 )	2022-03-14 02:08:22 -07:00
spaced	2b79be68e7	fix typo and duplicated declaration of ingressclasses (#8591 )	2022-03-12 23:36:23 -08:00
Mac Chaffee	512d5e3348	Restart etcd if the etcd version changes (#8556 ) Signed-off-by: Mac Chaffee <me@macchaffee.com>	2022-03-11 18:08:23 -08:00
Unai Arríen	4b6892ece9	Add epoch to docker-ce and docker-ce-cli packages to ensure docker up… (#8618 ) * Add epoch to docker-ce and docker-ce-cli packages to ensure docker upgrade * Split container-engine redhat vars to support legacy RHEL 7 version management * Support ansible_distribution_major_version when disvering vars with ansible_os_family	2022-03-11 02:45:07 -08:00
Toni Tauro	5a49ac52f9	feat(calico): add configurable ipam strictaffinity (#8581 ) Signed-off-by: Toni Tauro <toni.tauro@adfinis.com>	2022-03-07 22:58:33 -08:00
Cristian Calin	db1e30e4fc	[calico] add 3.22.1 (#8612 )	2022-03-07 22:54:34 -08:00
Cristian Calin	b4a61370c8	[cri-o] add cri-0 1.23.x (#8599 )	2022-03-07 05:39:07 -08:00
kakkotetsu	58b2f39ce5	add IPv6 listen directive to nginx if enable_dual_stack_networks (#8596 )	2022-03-07 05:39:00 -08:00
Tom Janson	56d882abed	Clarify confirmation prompt (#8589 ) Entering any value causes the play to proceed, e.g., entering "no<Enter>". (This is simply how Ansible's pause module behaves.)	2022-03-07 05:38:54 -08:00
Takuya Murakami	39acb2b84d	Update ansible-lint to 5.4.0 (#8607 ) (#8608 ) * Update ansible-lint to 5.4.0 (#8607) It seems that the Rich version 11.0.0 has a breaking change. So need to update ansible-lint to 5.3.2 or later. * Fix for ansible-lint no-changed-when rule (#8607)	2022-03-07 05:35:55 -08:00
Branko Mijuskovic	3ccba08983	Fix crio_packages for Rocky8 (#8594 )	2022-03-07 05:29:05 -08:00
Mohamed Zaian	632aa764e6	etcd: add etcd v3.5.1 for kubernetes 1.22+ (#8588 ) * There is an issue with etcd v3.5.0 where it resurrects ancient members see: https://github.com/etcd-io/etcd/issues/13196 This issue is clearly fixed in etcd v3.5.2 * Just keep the checksums	2022-03-07 05:28:54 -08:00
Cristian Calin	f6342b6cf4	[crun] upgrade to 1.4.3 (#8598 )	2022-03-04 08:22:52 -08:00
Cristian Calin	471585dcd5	[containerd]: upgrade versions to fix CVE-2022-23648 (#8597 ) * [containerd] add hashes for 1.6.1 * [contained] make 1.6.1 the default * [containerd] add hashes for 1.5.10 * [containerd] add hashes for 1.4.13 * [nerdct] bump to 0.17.1	2022-03-03 14:51:16 -08:00
Maciej Wereski	51821a811f	MetalLB: update to v0.12.1 (#8593 ) Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>	2022-03-03 08:49:48 -08:00
Cristian Calin	bf7a506f79	[containerd] Upgrade containerd to 1.6.0 and re-enable arm64 architecture with default options (#8555 ) * [containerd] add checksums for 1.6.0 * [containerd] promote 1.6.0 as the new default * [runc] promote 1.1.0 as the new default to allow arm deployments out of the box * [nerdctl] bump to 0.17.0 to align with containerd 1.6.0 * [reset] allow crictl stopp and rmp commands to fail	2022-03-02 15:27:13 -08:00
Tom Janson	2e925f82ef	Revert "Fix: typos in docs and comments (#7805 )" (#8592 ) This reverts commit `417180246c`.	2022-03-02 11:57:13 -08:00
Tom Janson	ddef7e1139	missing "check_mode: no"s for several read-only tasks (#8584 ) this is not complete -- there are almost certainly more instances of this issue	2022-03-02 09:29:14 -08:00
cyril-corbon	672e47a7eb	feat: check & uninstall container engine (#8439 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-02-28 10:59:46 -08:00
Mac Chaffee	b554246502	Fix host DNS config 1) being edited too soon and 2) not working with NM (#8575 ) Signed-off-by: Mac Chaffee <me@macchaffee.com>	2022-02-26 10:29:23 -08:00
Nicolas Goudry	ee079f4740	fix(coredns): make sure to keep coredns repository namespace (#8572 ) fix: regex fix: wrong regex_replace usage	2022-02-24 01:01:33 -08:00
Florian Ruynat	4f1499bd23	Fixup remaining etcd_kubeadm_enabled variables (#8576 )	2022-02-23 06:46:18 -08:00
Alex	36393d77d3	Encrypting Secret Data at Rest (#8574 ) * change default value for Encrypting Secret Data at Rest to secretbox, remove experimental flag and add documentation * fix MD012/no-multiple-blanks	2022-02-23 03:04:18 -08:00
Ilya Margolin	e053ee4272	Check all places with `check_mode: no` for side effects (#8573 ) and fix the one with side effect. Also removes `notify` from this task as the task has `changed_when: false` and notify is not going to fire.	2022-02-23 01:20:18 -08:00
jayonlau	1d46c07307	Cleanup crictl configuration file (#8569 )	2022-02-23 00:58:19 -08:00
Ilya Margolin	f9b5e448c1	Prevent removing etcd member when running in check mode (#8570 )	2022-02-22 23:34:18 -08:00
kakkotetsu	3effb008c9	improve validation conditions for MetalLB BGP Peers (#8568 )	2022-02-22 23:12:18 -08:00
cyril-corbon	a088f492f4	chore: remove addon-resizer (#8566 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-02-22 09:51:16 -08:00
Necatican Yıldırım	e9c8913248	Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable (#8317 ) * Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable Signed-off-by: necatican <necaticanyildirim@gmail.com> * Add etcd kubeadm deployment documentation Signed-off-by: necatican <necaticanyildirim@gmail.com> * Refactor warning for the deprecated 'etcd_kubeadm_enabled' variable Signed-off-by: necatican <necaticanyildirim@gmail.com>	2022-02-22 08:53:16 -08:00
Florian Ruynat	b9a27c91da	Update kubernetes dashboard to 2.5.0	2022-02-21 03:54:11 -08:00
Florian Ruynat	d4f654275b	Set default kubernetes version to 1.23.4	2022-02-21 03:54:11 -08:00
Florian Ruynat	f6eb4c749d	Add kubernetes hashes for 1.23.4/1.22.7/1.21.10	2022-02-21 03:54:11 -08:00
cyril-corbon	418fc00718	fix: kube-dns service deletion (#8565 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-02-21 02:48:11 -08:00
Florian Ruynat	2537177929	Fix amazon docker version (#8564 )	2022-02-18 23:50:11 -08:00
Sander Klein	9af719bf99	This fixes the etcd node removal. (#8526 ) Since we are already on an etcd node while executing the commands, there is no need to find out an etcd IP because it is on localhost.	2022-02-18 07:20:23 -08:00
Cristian Calin	063fc525b1	nerdctl: upgrade to 0.16.1 (#8539 )	2022-02-16 02:04:37 -08:00
Mac Chaffee	0f73d87509	Allow pausing after upgrade but before uncordon (#8530 ) * Allow pausing after upgrade but before uncordon * Expand docs for upgrade pausing vars Signed-off-by: Mac Chaffee <me@macchaffee.com>	2022-02-15 16:39:02 -08:00
Cristian Calin	402e85ad6e	[calico] upgrade release checksums (#8544 ) * [calico] upgrade 3.19.x to 3.19.4 * [calico] upgrade 3.20.x to 3.20.4 * [calico] upgrade 3.21.x to 3.21.4 and make it the default * [calico] add 3.22.0 checksums * [calico] account for path changes in calico 3.21.4 crd archive and above	2022-02-15 16:35:02 -08:00
Tony Fouchard	1d635e04e4	Allow to specify a source address for metallb peerings, and target only some nodes using node selectors (#8534 )	2022-02-15 13:57:19 -08:00
kakkotetsu	98d5d0cdd5	add support for Dual Stack node InternalIP (#8542 )	2022-02-15 00:28:02 -08:00
kakkotetsu	1ebe456f2d	add support for Calico IP6_AUTODETECTION_METHOD (#8541 )	2022-02-14 17:26:14 -08:00
Cristian Calin	c6e5314fab	implement download mirrors support (#8474 ) * [download] add mechanism to support mirrors * [calico] support alternate download url	2022-02-14 13:19:32 -08:00
Tom Stian Berget	84b93090a8	Change Cilium setting identity_allocation_mode to cilium_identity_allocation_mode (#8519 ) * Change Cilium identity_allocation_mode to cilium_identity_allocation_mode * Change inventory sample	2022-02-08 14:04:35 -08:00
Byeonggon Lee	5695c892d0	Fix wrong port name in metallb.yml.j2 (#8510 )	2022-02-07 09:43:45 -08:00
Krystian Młynek	87928baa31	CRI-O: fix unqualified-search registries (#8496 )	2022-02-04 23:46:50 -08:00
mgiessing	6a4fd33a03	Added ppc64le support (#8505 ) * Added ppc64le support * Fixed linting errors	2022-02-04 00:14:00 -08:00
cyril-corbon	790448f48b	feat: update cert-manager to 1.7.0 (#8491 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-02-03 17:24:00 -08:00
Ilya Margolin	aed187e56c	Fix kubelet_kubelet_cgroups_cgroupfs (#8500 ) If kubelet is run with systemd (as it always is when using kubespray), it starts in systemd's /system.slice/kubelet.service cgroup. This commit prevents a creation and usage of a second unrelated cgroup.	2022-02-02 00:50:22 -08:00
Cristian Calin	5ecb07b59a	[nerdctl] upgrade to 0.16.0 (#8484 ) * [nerdctl] upgrade nerdctl to 0.16.0 * [nerdctl] add configuration file	2022-02-01 15:11:48 -08:00
Cristian Calin	ff621fb7f1	[ingress-nginx] upgrade to 1.1.1 (#8490 )	2022-02-01 09:50:11 -08:00
Michael Schmitz	eacd55fbca	Use sysctl_file_path variable for all sysctl_file locations (#8395 ) * Use sysctl_file_path variable for all sysctl_file locations * Add sysctl_file_path variable to kubespay-defaults * Remove previously used sysctl file locations if present * Use explicit filename in roles/kubernetes/node/defaults/main.yml * Defaults: use explicit value	2022-02-01 08:12:10 -08:00
Cristian Calin	c47634290e	[helm] upgrade to 3.8.0 (#8489 )	2022-02-01 06:34:12 -08:00
Tristan	92d612c3e0	8487: Allow override of default CoreDNS zone cache (#8488 ) Using the coredns_cluster_zone_cache_block variable	2022-02-01 00:48:18 -08:00
Ilya Margolin	2bbe5732b7	Add node label to etcd metrics (#8475 ) targetRef on endpoints surfaces as __meta_kubernetes_endpoint_address_target_kind/__meta_kubernetes_endpoint_address_target_name in prometheus and gets converted to the label `node` by prometheus-operator	2022-01-31 06:08:23 -08:00
Samuel Liu	e6e7fbc25f	fix reset containerd_storage_dir undefined (#8478 ) * fix reset containerd_storage_dir * add env to kubespray-defaults	2022-01-31 05:46:23 -08:00
Ilya Margolin	7d4d554436	Document host_resolvconf as default value for resolvconf_mode (#8493 ) refs #8247	2022-01-31 03:12:24 -08:00
cyril-corbon	d31db847b7	feat: update local path to v0.0.21 (#8492 )	2022-01-31 01:08:24 -08:00
Calin Cristian Andrei	ababcd5481	[kube] make 1.23.3 the new default	2022-01-31 00:22:24 -08:00
Calin Cristian Andrei	7caffde0b6	[kube] add 1.23.3 hashes	2022-01-31 00:22:24 -08:00
华忠啊	52f221f976	Adaptive Kube-ovn (#8454 )	2022-01-27 01:08:10 -08:00
Cristian Calin	26a5948d2a	[reset] remove containerd storage during reset (#8469 )	2022-01-26 05:10:01 -08:00
Florian Ruynat	d580014c66	Fix CI for Fedora (followup) + OpenSUSE Leap (update to 15.3) (#8407 ) * Fix fedora jobs - followup * Update OpenSUSE Leap to 15.3 * Fix cilium version in README + update minor 1.11.1	2022-01-24 23:24:30 -08:00
Calin Cristian Andrei	be9a1f80c1	[kube] make 1.23.2 the default version	2022-01-24 11:59:33 -08:00
Calin Cristian Andrei	73ff3b0d3b	[kubernetes] add hashes for 1.23.2, 1.22.6 and 1.21.9	2022-01-24 11:59:33 -08:00
cyril-corbon	9fce9ca42a	feat: upgrade azuredisk csi to v1.10.0 (#8432 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-01-24 00:41:56 -08:00
Cristian Calin	f1adb734e3	[cri-tools] add hashes for 1.23.0 (#8442 )	2022-01-24 00:21:56 -08:00
cyril-corbon	575e0ca457	feat: add eviction hard to kubelet config (#8421 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-01-24 00:13:57 -08:00
Alex	69f088bb82	add hash-values for runc v1.1.0 - first upstream runc version for multi-arch (#8447 )	2022-01-23 23:51:57 -08:00
Cristian Calin	ef34f5fe7d	[calico] switch default iptables backend detection to Auto (#8429 )	2022-01-23 23:47:57 -08:00
Victor Morales	e88aa7c96b	Add youki runtime support (#8411 )	2022-01-21 14:01:07 -08:00
Johann Schley	38d129a0b6	add external hcloud cloud controller manager (#8440 )	2022-01-20 12:31:09 -08:00
onock	392815d97c	[cert-manager] Fix missing RBAC rules for ClusterRole cert-manager-cainjector kubernetes-sigs#8104. (#8444 )	2022-01-20 12:17:09 -08:00
rtsp	e791089466	cert-manager: Fix incorrect leader election namespace lead to insufficient permission (#8433 )	2022-01-17 02:37:29 -08:00
Cristian Calin	418f12f62a	[calico] drop 3.18.x and make 3.21.x the new default (#8426 )	2022-01-17 02:29:29 -08:00
Necatican Yıldırım	caff539ccd	Add identity_allocation_mode support for Cilium (#8430 ) Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com> Signed-off-by: necatican <necaticanyildirim@gmail.com> Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>	2022-01-16 09:29:28 -08:00

... 3 4 5 6 7 ...

4583 commits