Florent Monbillard
2c8bcc6722
Upgrade etcd to 3.3.12 ( #5718 )
...
* Upgrade etcd to 3.3.18
* Try with etcd 3.3.15 (kubeadm 1.16.7 default)
* Back to square one
* Try with 3.3.11
* Upgrade etcd to 3.3.18 (take 2)
* Try with 3.3.12
2020-03-11 08:25:38 -07:00
Fredrik Lönnegren
e257d92f41
Cilium updates ( #5438 )
...
* Add resources needed to deploy 1.6.4
* Use cilium v1.6.4
* Change deprecated option name
* Add update crd to clusterrole cilium
* Cilium 1.6.4 -> 1.6.5
* Make monitor-aggregation config configurable as a variable
* Change monitor-aggregation default none->medium
* Cilium 1.6.5 -> 1.6.6
* Update to 1.7.0
* v1.7.0->v1.7.1
2020-03-11 08:15:36 -07:00
Hugo Blom
f697338eec
[Openstack] Install Cinder-CSI before first node is schedulable again ( #5735 )
...
* install cinder-csi before upgrading nodes
* Only run the Cinder CSI when enabled
2020-03-11 06:31:36 -07:00
Etienne Champetier
e2ec7c76a4
containerd: bump to 1.2.13 ( #5727 )
...
https://github.com/containerd/containerd/releases/tag/v1.2.11
CVE-2019-16884 / CVE-2019-17596
https://github.com/containerd/containerd/releases/tag/v1.2.12
CVE-2019-19921 / CVE-2019-16884 / CVE-2019-11253
https://github.com/containerd/containerd/releases/tag/v1.2.13
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-03-11 05:39:36 -07:00
Lovro Seder
058d101bf9
Escape dots in jsonpath keys. ( #5600 )
...
+ use more secure `command` instead of `shell`
+ read-only command doesn't change state - make idempotent
+ multi-line long string
2020-03-11 05:17:36 -07:00
Hugo Blom
833794feef
[Openstack] Cleanup the old in-tree openstack cloud provider ( #5742 )
...
* Added playbook to migrate openstack cloud provider
* remove old cloud provider config
* Rewrite provisioned-by annotation on Cinder PVs
* update indents
Co-authored-by: Jonathan Süssemilch Poulain <jonathan@sofiero.net>
2020-03-11 05:13:36 -07:00
Hugo Blom
a3dedb68d1
[Openstack] Make it possible to apply the new cloud provider during upgrade ( #5707 )
...
* run external cloud provider setup during upgrade
* change name of taskt to better reflect what it does
* fix typo
2020-03-11 05:11:36 -07:00
Hugo Blom
4a463567ac
[Openstack] A guide on how to replace the in-tree cloudprovider with the external one ( #5741 )
...
* add documentation for how to upgrade to the new external cloud provider
* add migrate_openstack_provider playbook
* fix codeblock syntax highligth
* make docs for migrating cloud provider better
* update grammar
* fix typo
* Make sure the code is correct markdown
* remove Fenced code blocks
* fix markdown syntax
* remove extra lines and fix trailing spaces
2020-03-11 05:09:35 -07:00
Sergey
9f3ed7d855
change ignore_errors: to when: in assert tasks ( #5716 )
2020-03-10 08:09:36 -07:00
Sergey
221b429c24
move var preinstall_selinux_state: to roles/kubespray-defaults/defaults/main.yaml ( #5715 )
2020-03-10 07:45:35 -07:00
dependabot[bot]
b937d1cd9a
Bump ansible from 2.7.12 to 2.7.16 ( #5739 )
...
Bumps [ansible](https://github.com/ansible/ansible ) from 2.7.12 to 2.7.16.
- [Release notes](https://github.com/ansible/ansible/releases )
- [Commits](https://github.com/ansible/ansible/compare/v2.7.12...v2.7.16 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-03-09 06:31:34 -07:00
Vicenç Juan Tomàs Montserrat
986c46c2b6
Check ansible version >=2.7.8 in recover-control-plane.yml playbook ( #5724 )
2020-03-07 10:17:34 -08:00
Maxime Guyot
e029216566
Update security contacts ( #5719 )
2020-03-06 10:47:24 -08:00
roc
2d4595887d
Fix youtube url ( #5582 )
2020-03-06 02:13:22 -08:00
Jakub Husák
2beffe688a
Make etcdctl connect to localhost out of the box ( #5643 )
...
* Make etcdctl connect to localhost out of the box
* etcdctl envs: use admin-.pem instead of member-.pem
2020-03-06 02:05:23 -08:00
Kubernetes Prow Robot
66408a87ee
Refactor download role ( #5697 )
...
* download file
* download containers
* fix push image to nodes
* pull if none image on host
* fix
* improve docker image tag checks.
do not pull already cached images
* rebase fix merge conflict
* add support download_run_once when upgrade and scale cluster
add some test with download_run_once
* set default values to temp flag for every download cycle
* add save,load abilty for containerd and crio when download_run_once=true
* return redefine image save/load command to set_docker_image_facts.yml
* move set command to set_container_facts
* ctr in containerd_bin_dir
* fix order of ctr image export arguments
* temporary disable download_run_once for containerd and crio
due https://github.com/containerd/containerd/issues/4075
* remove unused files
* fix strict yaml linter warning and errors
* refactor logical conditions to pull and cache container images
* remove comment due lint check
* document role
* remove image_load_on_localhost, because cached images are always loaded to docker on remote sites
* remove XXX from debug output
2020-03-05 07:31:39 -08:00
Kubernetes Prow Robot
62b418cd16
Use 'k8s.gcr.io' instead of 'gcr.io/google-containers' ( #5709 )
...
Ref: kubernetes/kubeadm/issues/2051
See: https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/kubernetes-sig-release/ew-k9PEBckQ/T7dFepHdCAAJ
Signed-off-by: Nguyen Hai Truong <truongnh@vn.fujitsu.com>
2020-03-05 05:44:37 -08:00
Kubernetes Prow Robot
5361cc075d
Use the v2.12.3 docker image for CI ( #5712 )
2020-03-05 05:40:37 -08:00
Kubernetes Prow Robot
be12164290
Add option and defaults to configure metrics exporting in containerd ( #5466 )
...
* Add metrics exporting in containerd config
* Add containerd.yml with containerd configuration example to the sample group_vars
2020-03-04 14:46:38 -08:00
Arthur Outhenin-Chalandre
588896712e
Fix kube-router config generation ( #5531 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-03-04 02:11:47 -08:00
Steven Reitsma
6221b94fdf
Fix variable naming bug in OpenStack CCM ( #5702 )
2020-03-03 06:45:38 -08:00
Steven Reitsma
efef80f67b
Add support for HA deployment of OpenStack Cinder CSI plugin ( #5691 )
2020-03-03 06:33:38 -08:00
Hugo Blom
0c1a0ab966
implement max-volumes for cinder csi ( #5666 )
2020-03-02 03:30:43 -08:00
Sergey
678ed5ced5
fix upgrade procedure when in playbook ( #5695 )
...
exists role kubernetes/preinstall and not exists role container-engine
error 'yum_repo_dir' is undefined
2020-02-28 01:56:38 -08:00
Lovro Seder
7f87ce0362
Upgrade container-engine after draining ( #5601 )
...
* Run 'container-engine' after drain.
Move possibly disruptive role 'container-engine' to run after the node
is drained.
As that role have to be run on non-cluster nodes as well (etcd and
calico-rr), and those nodes are not drained, add play for that case.
* Check if api is up before upgrade.
If container engine is restarted in previous role, api controller can
take some time to start. This check ensures api is up before upgrade.
2020-02-27 11:47:28 -08:00
Steven Reitsma
d1acf7f192
Add additional configuration options to external Openstack CCM ( #5661 )
...
- Add support for manage-security-groups flag
- Add support for internal-lb flag
2020-02-26 13:03:19 -08:00
Hugo Blom
171d2ce59c
Implement topology support for Cinder CSI ( #5667 )
...
* make cinder csi topology aware
* change feature description do better reflect whats being done
* remove sameas true since it isn't required
2020-02-26 05:12:25 -08:00
Nguyen Hai Truong
c6170eb79d
docs: fix some typos ( #5618 )
...
Although it is spelling mistakes, it might make affect while reading.
Signed-off-by: Nguyen Hai Truong <truongnh@vn.fujitsu.com>
2020-02-26 04:46:28 -08:00
Moritz Graf
d2c44dd4df
Modifying Ansible filter 'failed' according to Ansible 2.5 porting guide ( #5678 )
2020-02-26 00:18:26 -08:00
Qingkun Li
9b7090ca1d
add mangle table in the iptable flush task ( #5672 )
...
When kube-router is used as cni, rules might be added to the mangle table
to support external IPs. Therefore, mangle table should be flushed during
reset as well.
2020-02-26 00:04:26 -08:00
Sergey
ee8e88b111
Require a complete inventory with all variables in the bugreport ( #5655 )
2020-02-25 23:58:25 -08:00
Hugo Blom
a901b1f0d7
convert volumes to dynamic blocks, openstack ( #5673 )
2020-02-24 01:20:49 -08:00
Victor Morales
82efd95901
Remove dockerproject_.+_repo_.+ variables ( #5662 )
...
This 38688a4486
2020-02-22 13:28:47 -08:00
Hoat Le
4c803d579b
@ #5008 | Local path provisioner boolean annotation is rendered incorrectly and not applied ( #5669 )
2020-02-22 07:08:47 -08:00
keyboardfann
b34ec6c46b
Enhance ha document ( #5664 )
...
* Fix HAproxy config to avoid client offered only unsupported versions error
* Add HAproxy SSL check interval
* Fix ha mode document markdown
2020-02-22 07:04:47 -08:00
Javeria Khan
6368c626c5
Ignore assertion comparison for kube_network_node_prefix when using calico ( #5632 )
...
* Fix incorrect assertion comparison for kube_network_node_prefix
* Ignore assertion comparison for kube_network_node_prefix when using calico
* Adding more var docs description for kube_network_node_prefix
* Fixing trailing whitespaces
2020-02-20 00:39:03 -08:00
Erwan Miran
a5445d9c5c
Add stable repo on all masters with helm 3.x.x ( #5659 )
2020-02-19 14:05:46 -08:00
Adrien Gooris
da86457cda
remove unused var 'kube_apiserver_admission_control' ( #5648 ) ( #5651 )
2020-02-19 05:08:25 -08:00
Lovro Seder
eb00693325
Do not display skipped hosts/tasks. ( #5620 )
...
Replace deprecated callback plugin `skippy` with `default`, which
also supports ignoring skipped hosts.
2020-02-19 02:38:25 -08:00
Chad Swenson
a15a0b5eb9
Make calico iptables lock timeout configurable ( #5658 )
...
Adds `calico_iptables_lock_timeout_secs` variable to calico DS yaml.
2020-02-19 02:28:25 -08:00
Ali Sanhaji
646fd5f47b
External OpenStack Cloud Controller Manager implementation ( #5491 )
...
* External OpenStack Cloud Controller Manager implementation
* Adding controller image tag
* Minor fixes
* Restructuring the external cloud controller to work with KubeADM
2020-02-18 04:47:28 -08:00
rptaylor
277b347604
add az_list_node variable to specify different AZs for kubelets ( #5413 )
...
* rebase and add az_list_node variable to specify different AZs for kubelets
* fix missing variable name change
2020-02-18 04:29:27 -08:00
Sergey
12bc634ec3
helm default version 3.1.0 ( #5634 )
...
* helm default version 3.1.0
* fix newline
try to retest2
2020-02-18 03:21:29 -08:00
Jin Hase
769e54d8f5
Fix a typo in integration.md ( #5616 )
2020-02-18 02:29:29 -08:00
MarkusTeufelberger
ad50bc4ccb
Cache facts for 2 hours ( #5633 )
...
Sets a 2 hour timeout value for facts caching.
2020-02-18 01:31:28 -08:00
Sylvain Chateau
0ca7aa126b
added "Flatcar", "Flatcar Container Linux by Kinvolk" for all coreOS role ( #5607 )
2020-02-18 00:15:29 -08:00
Woohyung Han
d0d9967457
Fix to Vagrant config.rb apply correctly ( #5525 )
2020-02-18 00:13:28 -08:00
Manuel Cintron
b51b52ac0e
Fixing and issue where if the pids in the orphan list no longer exist then all systemd child processes would be killed. ( #5636 )
2020-02-17 09:33:29 -08:00
Sergey
36c1f32ef9
remove legacy docker repo in kubernetes/preinstall before any packages installed ( #5640 )
2020-02-17 08:59:28 -08:00
Steven Reitsma
fa245ffdd5
Fix some minor issues with the Cinder CSI plugin ( #5561 )
...
Add Cinder images to download role
2020-02-17 03:47:28 -08:00
