2671 commits

Author	SHA1	Message	Date
Matthew Mosesohn	cc79125d3e	Update install.yml	2018-09-12 17:03:55 +03:00
k8s-ci-robot	a801e02cea	Merge pull request #3261 from mattymo/etcd_ssl_dir_perms ... Ensure etcd file permissions are correct when using vault	2018-09-12 01:10:26 -07:00
Zinin D.A	29c7775ea1	Monitor CoreDNS over svc	2018-09-12 10:24:15 +03:00
k8s-ci-robot	cbf099de4d	Merge pull request #3285 from mirwan/fix_netchecker_sa_when_psp ... Fix wrong sa name in crb when psp is enabled	2018-09-12 00:20:38 -07:00
k8s-ci-robot	c8630f46fd	Merge pull request #3286 from fritchie/master ... Change update strategy to RollingUpdate	2018-09-12 00:18:05 -07:00
Erwan Miran	af74d85b7d	Remove --insecure-bind-address when insecure-port=0	2018-09-12 08:22:11 +02:00
Chad Swenson	97e5f28537	Revert "Remove insecure-port and insecure-bind-address when possible"	2018-09-11 17:42:12 -05:00
Frank Ritchie	f42e0a4711	Change update strategy to RollingUpdate. ... When enable_network_policy is set to True with Calico 3 kubectl apply fails with the error: The Deployment "calico-kube-controllers" is invalid: spec.strategy.rollingUpdate: Forbidden: may not be specified when strategy type is 'Recreate' See https://github.com/kubernetes-incubator/kubespray/issues/3267 Changing the update strategy to RollingUpdate avoids this error.	2018-09-11 12:03:42 -04:00
Matthew Mosesohn	d91f9e14e6	Put back legacy support for calico ippools and bgp settings	2018-09-11 16:40:11 +03:00
Erwan Miran	e24b1220a0	Fix wrong sa name in crb when psp is enabled	2018-09-11 15:04:55 +02:00
k8s-ci-robot	0a720b35af	Merge pull request #3270 from riverzhang/fix-registry ... Add insecure_registry config to docker options	2018-09-10 04:28:52 -07:00
rongzhang	f557b54489	Add docker_ to values	2018-09-10 18:05:49 +08:00
Erwan Miran	04852ad753	Install Helm on all masters	2018-09-10 11:39:26 +02:00
Matthew Mosesohn	aaa9a4efac	Ensure vault file permissions are correct	2018-09-10 12:04:04 +03:00
rongzhang	0140cf71c8	Upgrade kubernetes to v1.11.3	2018-09-10 15:52:49 +08:00
rongzhang	51794e4c13	Deploying k8s clusters in a private environment	2018-09-09 11:06:00 +08:00
rongzhang	b249b06036	Move docker options to kubespray-defaults	2018-09-09 10:21:18 +08:00
rongzhang	20caaf9d1f	Delete gitignore file	2018-09-09 02:09:02 +08:00
rongzhang	c41ca22a78	Planning the configuration of docker parameters	2018-09-09 00:59:59 +08:00
georgejdli	b891d77679	add option to secure helm tiller with tls	2018-09-07 10:29:31 -05:00
k8s-ci-robot	5c2e9a5376	Merge pull request #3252 from mirwan/remove_insecure-bind-address_when_insecure-bind-port_is_0 ... Remove insecure-port and insecure-bind-address when possible	2018-09-07 07:41:21 -07:00
k8s-ci-robot	b3a689658b	Merge pull request #3255 from mlushpenko/calico_check ... Fix calico health checks	2018-09-07 07:39:20 -07:00
Takashi Okamoto	d182d4f979	absolute path for kubectl.	2018-09-07 09:33:43 -04:00
k8s-ci-robot	9c49e071d3	Merge pull request #3260 from riverzhang/discoverytimeout ... Add discovery_timeout to join configuration	2018-09-07 05:20:19 -07:00
rongzhang	0f63924ed4	Add discovery_timeout to join configuration ... https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha2#JoinConfiguration	2018-09-07 16:28:53 +08:00
mlushpenko	ea2c9d8f57	Fix yaml checks	2018-09-06 16:26:57 +02:00
mlushpenko	f958b32c83	Fix calico health checks	2018-09-06 15:57:21 +02:00
k8s-ci-robot	2faa8f1e37	Merge pull request #3254 from mattymo/calico_upgrade_tweaks ... Fix backward compatibility with calico 2.6	2018-09-06 06:20:52 -07:00
k8s-ci-robot	ab462d92b8	Merge pull request #3249 from mattymo/fix_missing_var_kube_proxy_nodeport ... Add missing variable kube_proxy_nodeport_addresses	2018-09-06 06:18:23 -07:00
k8s-ci-robot	27905bbddf	Merge pull request #3250 from mattymo/openstack_cacert ... Fix openstack cacert task	2018-09-06 06:15:59 -07:00
Matthew Mosesohn	dc3e317d20	Fix backward compatibility with calico 2.6	2018-09-06 15:54:20 +03:00
Erwan Miran	a5509fc2ce	Remove insecure-port and insecure-bind-address when possible	2018-09-06 13:46:09 +02:00
Matthew Mosesohn	b614a3504b	Fix openstack cacert task	2018-09-06 14:06:06 +03:00
Matthew Mosesohn	cd8e469b9c	Add missing variable kube_proxy_nodeport_addresses	2018-09-06 13:36:17 +03:00
Matthew Mosesohn	991b3dbe54	put back endif in kubelet rkt template	2018-09-06 13:21:22 +03:00
k8s-ci-robot	f5251f7d27	Merge pull request #3247 from mattymo/kubelet_rkt_Fix ... remove broken endifs in kubelet rkt mode	2018-09-06 02:49:35 -07:00
Matthew Mosesohn	faedfb6307	remove broken endifs in kubelet rkt mode	2018-09-06 11:59:25 +03:00
k8s-ci-robot	1940495817	Merge pull request #3246 from riverzhang/pause ... Upgrade pause image to 3.1	2018-09-06 00:48:05 -07:00
rongzhang	b979fb0116	Upgrade pause image to 3.1	2018-09-06 14:15:51 +08:00
Antoine Legrand	7e140e5f3c	Merge pull request #3122 from jbcraig/fix_cacert_feature ... resolve issues with new cacert feature	2018-09-05 23:31:53 +02:00
rongzhang	435e098751	Fix feature-gates	2018-09-05 22:55:51 +08:00
Antoine Legrand	055e80f846	Merge pull request #3244 from ant31/calico31 ... Reverts calico update to 3.2.0, fixes #3223	2018-09-05 11:45:22 +02:00
Antoine Legrand	15363530ae	Reverts calico update to 3.2.0, fixes #3223	2018-09-05 11:44:32 +02:00
Jeff Bornemann	83838b7fbc	Add new OCI cloud controls	2018-09-04 14:03:17 -04:00
Luis Nunez	6569180654	remove capitalize filter	2018-09-04 14:56:53 +02:00
k8s-ci-robot	ad33f71ac2	Merge pull request #3228 from mirwan/credentials_dir ... Introducing credentials_dir variable in order to be able to override it	2018-09-04 04:35:11 -07:00
k8s-ci-robot	50c6a98b15	Merge pull request #3229 from mirwan/docker_1806_ubuntu_under_bionic ... Docker 18.06 for ubuntu versions before bionic	2018-09-03 11:37:13 -07:00
Erwan Miran	a644b7c267	Introducing credentials_dir in order to be able to override it	2018-09-03 18:04:50 +02:00
Atoms	8c9588ab59	Add additional no proxy parameter for more customization	2018-09-03 17:09:58 +03:00
Erwan Miran	c0ce875743	change edge to 18.06 for ubuntu	2018-09-03 14:11:25 +02:00
Erwan Miran	a22d28e1c1	docker 18.06 for ubuntu version before bionic	2018-09-03 14:10:51 +02:00
k8s-ci-robot	c32145057d	Merge pull request #3178 from gitphill/patch-1 ... Add azure-container-registry-config for Azure	2018-09-03 05:06:01 -07:00
rboyapat	fbb98b0070	Fix the jinja expression for openstack_tenant_id (#3151) ... OS_PROJECT_ID is obsolete in keystone v3 and jinja expression doesn't set openstack_tenant_id as expected because of undefined env var. Fixed the expression.	2018-09-03 14:59:49 +03:00
k8s-ci-robot	db11394711	Merge pull request #3200 from pablodav/feature/k8s_win_v1.11 ... Required support to start working on windows node support	2018-09-03 04:51:23 -07:00
Matthew Mosesohn	fd57fde075	Always run helm init to allow for settings changes	2018-09-03 11:16:01 +03:00
Wong Hoi Sing Edison	9fc8f9a07d	ingress-nginx: Upgrade to 0.19.0 ... Upstream Changes: - ingress-nginx 0.19.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.19.0) Our Changes: - Sync templates with upstream changes	2018-09-03 08:00:08 +08:00
Pablo Estigarribia	7cbe3c2171	ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version ... ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version remove empty when line ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version force kubeadm upgrade due to failure without --force flag ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version added nodeSelector to have compatibility with hybrid cluster with win nodes, also fix for download with missing container type fixes in syntax and LF for newline in files fix on yamllint check ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version some cleanup for innecesary lines remove conditions for nodeselector	2018-09-02 12:47:06 -03:00
k8s-ci-robot	a47c9239e8	Merge pull request #3221 from alvistack/cephfs-provisioner-v2.1.0-k8s1.11 ... cephfs-provisioner: Upgrade to v2.1.0-k8s1.11	2018-09-02 04:16:17 -07:00
k8s-ci-robot	635ca1a0b8	Merge pull request #3220 from alvistack/coredns-1.2.2 ... coredns: Upgrade to v1.2.2	2018-09-02 04:13:53 -07:00
Wong Hoi Sing Edison	32fdfbcd5a	cephfs-provisioner: Upgrade to v2.1.0-k8s1.11 ... Upstream Changes: - cephfs-provisioner v2.1.0-k8s1.11 (https://github.com/kubernetes-incubator/external-storage/releases/tag/cephfs-provisioner-v2.1.0-k8s1.11) Our Changes: - Sync clusterrole and role with upstream changes	2018-09-02 11:51:28 +08:00
Wong Hoi Sing Edison	df8b27c03c	coredns: Upgrade to v1.2.2 ... Upstream Changes: - coredns v1.2.2 (https://github.com/coredns/coredns/releases/tag/v1.2.2) NOTE: - coredns image for 1.2.0 and 1.2.1 had been removed from https://console.cloud.google.com/gcr/images/google-containers/GLOBAL/coredns	2018-09-02 11:37:21 +08:00
mlushpenko	8e95974930	Fix ports for kubeadm client and master configs for ha setups	2018-09-01 18:02:52 +02:00
k8s-ci-robot	13dda0e36e	Merge pull request #3207 from mirwan/fix_3206 ... Fix target hosts generation when /etc/hosts does not contain 127.0.0.1 or ::1	2018-08-31 17:50:56 -07:00
k8s-ci-robot	6e7100f283	Merge pull request #3208 from mirwan/etcd_ha_doc_n_cleaning ... Add documentation about having HA for etcd	2018-08-31 08:06:05 -07:00
Erwan Miran	059cd17b47	Fix target hosts generation when /etc/hosts does not contain 127.0.0.1 or ::1	2018-08-31 16:33:18 +02:00
k8s-ci-robot	fb7b3305dc	Merge pull request #3209 from mirwan/use_etcd_events_access_address ... etcd_events_access_address should be used for peer_url and client_url	2018-08-31 07:26:25 -07:00
Erwan Miran	81c3f2c971	etcd_events_access_address should be used for peer_url and client_url	2018-08-31 15:03:07 +02:00
Erwan Miran	82a28d6bb3	Add documentation about having HA for etcd	2018-08-31 14:40:25 +02:00
Antoine Legrand	22f9114630	update calico to 3.2.0	2018-08-31 13:45:08 +02:00
Antoine Legrand	f2f0cdd0ff	add arch vars for docker	2018-08-31 13:45:08 +02:00
Antoine Legrand	da06c8e5a9	etcd UNSUPPORTED for all arch	2018-08-31 13:45:08 +02:00
Antoine Legrand	2f1fe44762	update images to use arch	2018-08-31 13:45:08 +02:00
Antoine Legrand	19268ded23	Fix some arm64 errors	2018-08-31 13:45:08 +02:00
Antoine Legrand	f67933d2ac	add ETCD_UNSUPPORTED_ARCH=arm64 flag	2018-08-31 13:45:08 +02:00
Antoine Legrand	247b9e83d8	etcd arch-image	2018-08-31 13:45:08 +02:00
Antoine Legrand	9c2098b8fa	fix kubelet_max_pod assert	2018-08-31 13:45:08 +02:00
Antoine Legrand	48c0c8d854	Update dir list	2018-08-31 13:45:08 +02:00
rongzhang	2609ec0dc3	Fix copy etcd-ssl-ca failed	2018-08-31 15:06:03 +08:00
k8s-ci-robot	aafd034ab8	Merge pull request #3202 from riverzhang/fix-ipvs ... Fix ipvs by kubeadm v1alpha1	2018-08-30 13:26:02 -07:00
k8s-ci-robot	d14394c691	Merge pull request #3185 from mirwan/helm_install_docker_insecureport_0 ... Mount /root/.kube to helm container	2018-08-30 08:11:33 -07:00
rongzhang	16fc22a207	Fix ipvs by kubeadm v1alpha1	2018-08-30 23:04:57 +08:00
k8s-ci-robot	d9ea937493	Merge pull request #3187 from mirwan/kubeadm-config_syntax ... Fix kubeadm-config for audit-log-path and feature-gates	2018-08-30 06:55:43 -07:00
k8s-ci-robot	a96a0ee307	Merge pull request #3198 from riverzhang/fix-kubeadm-v1alpha1 ... Fix kubeadm v1alpha1 configure	2018-08-30 04:11:37 -07:00
k8s-ci-robot	f48468b83b	Merge pull request #3195 from mirwan/fix_psp_templates ... Fix some addons when PodSecurityPolicy is enabled	2018-08-30 03:37:52 -07:00
rongzhang	35e5adaf0a	Fix kubeadm v1alpha1 configure	2018-08-30 17:44:00 +08:00
k8s-ci-robot	a247c2c713	Merge pull request #3191 from fcgravalos/make-canal-mount-xtables-lock ... canal should mount xtables.lock to share the lock with other processe…	2018-08-29 08:57:32 -07:00
k8s-ci-robot	4feb62f6bf	Merge pull request #3193 from riverzhang/fix-lb-kubeadm ... Fix kubeadm lb	2018-08-29 04:22:40 -07:00
Fernando Crespo Grávalos	ac4ef719cc	canal should mount xtables.lock to share the lock with other processes like kube-proxy	2018-08-29 13:08:51 +02:00
Erwan Miran	ceb97e5809	Fix wrong syntax for jinja sub list extraction and addition of missing role template	2018-08-29 12:58:10 +02:00
k8s-ci-robot	3bfda55fca	Merge pull request #3061 from okamototk/crio ... cri-o support	2018-08-29 03:48:40 -07:00
rongzhang	9eade647e6	Fix kubeadm lb	2018-08-29 18:29:24 +08:00
Robin Elfrink	bbdd1c8f06	Add option to change the Tiller Deployment namespace.	2018-08-29 11:20:41 +02:00
k8s-ci-robot	f876c89081	Merge pull request #3189 from Arslanbekov/up-dashboard-version ... Up dashboard version to 1.10.0	2018-08-29 02:08:40 -07:00
Phill Garrett	1babbcca85	Fix elif azure statement	2018-08-28 15:43:03 +01:00
Takashi Okamoto	c0dfa72707	Separate RedHat specific vars for cri-o.	2018-08-28 13:36:14 +00:00
Arslanbekov Denis	fe1e758856	Up dashboard version to 1.10.0	2018-08-28 14:10:19 +03:00
Phill Garrett	f325d13082	Add azure-container-registry-config for Azure ... Seperated out KUBELET_CLOUDPROVIDER env var assignment when cloud_provider equals azure Appended azure-container-registry-config parameter	2018-08-28 10:23:25 +00:00
Erwan Miran	52ab54eeea	Fix missing quotes for audit-log-path and wrong placement of feature-gates	2018-08-28 09:05:57 +02:00
Takashi Okamoto	d407a590a6	container_manager variable to specify runtime.	2018-08-28 06:23:38 +00:00
Takashi Okamoto	5eb805f098	Change timeout for kubeadm 600s. ... * kubeadm timeout is too short and it may interrupt by timeout.	2018-08-28 04:51:38 +00:00
Takashi Okamoto	dfdcb56784	Delete all cri-o containers when execute reset.yml.	2018-08-28 02:25:33 +00:00
Takashi Okamoto	236f066635	kubeadm cri-o support.	2018-08-28 02:24:45 +00:00
Takashi Okamoto	5ab8a712d9	Add download_container flag to avoid docker pull when use cri-o.	2018-08-28 01:24:26 +00:00
Takashi Okamoto	cf7b9cfeef	Support crio in kubelet service.	2018-08-28 01:24:26 +00:00
Takashi Okamoto	6090af29e7	Add cri-o role.	2018-08-28 01:24:26 +00:00
Takashi Okamoto	359009bb05	Download etcd and hyperkube binary.	2018-08-28 01:24:26 +00:00
Takashi Okamoto	bdbfa4d403	Add ipvs support for kubeadm 1.10 or later.	2018-08-28 01:24:26 +00:00
Takashi Okamoto	6849788ebc	Fix copy ca cert and ca key for kubeadm.	2018-08-28 01:24:25 +00:00
Takashi Okamoto	ac639b2a17	Change kubeadm config to run etcd by kubeadm.	2018-08-28 01:24:25 +00:00
Takashi Okamoto	b18ed5922b	Add etcd default value in kubespray-default.	2018-08-28 01:24:25 +00:00
Erwan Miran	b395bb953f	Fix wrong when condition that ends up with jinja error when the content of /etc/hosts contains parenthesis	2018-08-27 21:20:57 +02:00
Erwan Miran	b652792a93	/root/.kube must to mounted in order for helm to read kubeconfig and not fallback to localhost:8080	2018-08-27 18:17:26 +02:00
k8s-ci-robot	7efe287c74	Merge pull request #2474 from mirwan/localhost_in_etc_hosts ... Localhost in hosts files should be updated (if necessary), not overriden	2018-08-27 06:25:43 -07:00
k8s-ci-robot	881b46f458	Merge pull request #3095 from mirwan/dnsmasq_template_rendering_filename ... Dnsmasq manifests should not have j2 extension but templates should	2018-08-27 02:51:43 -07:00
k8s-ci-robot	d43cd9a24c	Merge pull request #3104 from maxbrunet/hotfix/replace-local_actions ... Use delegate_to: localhost instead of local_action	2018-08-27 02:50:42 -07:00
guenhter	fff48d24ea	Replace the raw rsync command with the synchronize module	2018-08-27 10:00:21 +02:00
k8s-ci-robot	f4feb17629	Merge pull request #2958 from elementyang/etcd-pr ... change the way that getting etcd_member_name	2018-08-26 23:55:04 -07:00
Maxime Brunet	33135f2ada	k8s/preinstall: Turn AND condition into a list	2018-08-25 14:33:31 -04:00
k8s-ci-robot	d6f4d10075	Merge pull request #3153 from alvistack/remove-image_tag-suffix ... Remove *_image_tag suffix from ReplicaSet/Deployment	2018-08-25 04:42:19 -07:00
k8s-ci-robot	f97515352b	Merge pull request #3161 from nutellinoit/kube_proxy_nodeport_addresses ... --nodeport-addresses added on kube-proxy.manifest.j2 and on k8s-cluster.yml	2018-08-25 02:00:19 -07:00
Aivars Sterns	f7f58bf070	Merge pull request #3173 from msimonin/fix-3164 ... Fix createhome directory for adduser role	2018-08-24 16:34:57 +03:00
Erwan Miran	1432e511a2	same work with less lines	2018-08-24 14:06:07 +02:00
Vasilis Remmas	b61eb7d7f3	Add ETCD_QUOTA_BACKEND_BYTES environment variable	2018-08-24 12:17:34 +02:00
Aivars Sterns	1567a977c3	Revert "gen_certs_script: refactor using stdin (Ansible 2.4+)"	2018-08-24 12:35:31 +03:00
Samuele Chiocca	cb8be37f72	fix on v1alpha1	2018-08-24 11:19:06 +02:00
Samuele Chiocca	e5dd4e1e70	added on v1alpha1	2018-08-24 10:59:06 +02:00
Antoine Legrand	6d74a3db7a	Merge pull request #3163 from kubernetes-incubator/fix-docker-ubuntu1804 ... Fix docker apt-repo for Ubuntu18	2018-08-24 00:51:59 +02:00
ant31	1da5926a94	Use xenial repo for ubuntu18	2018-08-23 22:34:44 +00:00
Antoine Legrand	4882531c29	Merge pull request #3115 from oracle/oracle_oci_controller ... Cloud provider support for OCI (Oracle Cloud Infrastructure)	2018-08-23 18:22:45 +02:00
Antoine Legrand	f59b80b80b	Merge pull request #3147 from ishitatsuyuki/etcd-cleanup ... gen_certs_script: refactor using stdin (Ansible 2.4+)	2018-08-23 18:19:28 +02:00
rongzhang	7b61a0eff0	Fix kubeadm LB configure ... 1. join node add LB discoveryTokenAPIServers 2. kubeadm_config_api_fqdn support ipddress and domain_name	2018-08-23 22:22:34 +08:00
Aivars Sterns	23fd3461bc	calico upgrade to v3 (#3086) ... * calico upgrade to v3 * update calico_rr version * add missing file * change contents of main.yml as it was left old version * enable network policy by default * remove unneeded task * Fix kubelet calico settings * fix when statement * switch back to node-kubeconfig.yaml	2018-08-23 17:17:18 +03:00
msimonin	e22e15afda	Fix createhome directory for adduser role ... A typo in the adduser role prevents the createhome variable to be taken into account. Fix #3164	2018-08-23 08:55:11 +02:00
Rong Zhang	f453567cce	Merge pull request #3144 from riverzhang/fix-audit-log ... Fix install audit failed	2018-08-23 14:41:37 +08:00
Tatsuyuki Ishi	69786b2d16	gen_certs_script: refactor using stdin (Ansible 2.4+)	2018-08-23 11:19:17 +09:00
rongzhang	5a4352657d	Fix install audit failed ... 1.fix audit log not write 2.fix Parameter not recognized 3.delete kubedm futuregates auditing and use apiServerExtraArgs	2018-08-23 01:47:15 +08:00
Samuele Chiocca	f13bc796d9	added nodePortAddresses on kubeadm conf v1alpha2 (not present on v1alpha1)	2018-08-22 18:43:03 +02:00
Erwan Miran	a6a14e7f77	create the service account and roles even if the rbac is not enabled. it will just be ignored	2018-08-22 18:17:11 +02:00
Erwan Miran	80cfeea957	psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true	2018-08-22 18:16:13 +02:00
ant31	2c90208486	Fix docker apt-repo for Ubuntu18	2018-08-22 15:53:14 +00:00
Antoine Legrand	4eea7f7eb9	Merge pull request #3152 from johnzheng1975/cilium_1.2.0 ... new cilium stable version: 1.2.0	2018-08-22 17:11:42 +02:00
Samuele Chiocca	5d9908c2c3	--nodeport-addresses added on kube-proxy.manifest.j2 ... Changed author	2018-08-22 15:32:07 +02:00
Erwan Miran	a7b0c454db	Localhost in hosts files should be updated (if necessary), not overriden	2018-08-22 12:10:49 +02:00
Wong Hoi Sing Edison	c3b3572025	Always create service account even rbac_enabled = false	2018-08-22 11:41:29 +08:00
Wong Hoi Sing Edison	f897596844	Remove *_image_tag suffix from ReplicaSet/Deployment	2018-08-22 11:02:56 +08:00
john	6df71956c4	new cilium stable version: 1.2.0	2018-08-22 10:52:24 +08:00
Jeff Bornemann	94df70be98	Cloud provider support for OCI (Oracle Cloud Infrastructure) ... Signed-off-by: Jeff Bornemann <jeff.bornemann@oracle.com>	2018-08-21 17:36:42 -04:00
Mark Eisenblaetter	0c0a2138d9	allow '.' in hostnames ... we use FQDN as inventory_hostname	2018-08-21 08:24:33 +02:00
Jonathan Craig	5bf152886b	add support for openstack trust to cloud provider config	2018-08-20 12:51:25 -04:00
Andreas Krüger	497db69c9f	Merge pull request #3130 from riverzhang/add-control-plane ... Add kubeadm controlplaneEndpoint	2018-08-20 10:43:50 +02:00
Andreas Krüger	c7de737551	Merge pull request #3133 from mirwan/auditlog_to_stdout_w_kubeadm ... Audit log to stdout with kubeadm	2018-08-20 10:43:22 +02:00
Andreas Krüger	69749a5b7b	Merge pull request #3132 from mirwan/custom_audit_policy ... Custom audit policy	2018-08-20 10:42:38 +02:00
Andreas Krüger	b3e32c1393	Merge pull request #3094 from hedayat/master ... Add --dns-loop-detect to dnsmasq used in kube-dns	2018-08-20 09:27:15 +02:00
Erwan Miran	fc38b6d0ca	Ability to define custom audit polcy rules	2018-08-20 07:04:56 +02:00
Erwan Miran	c34900e569	Define apiserver flags directly instead of relying on auditPolicy section in order to have the ability to redirect audit log to stdout with kubeadm	2018-08-20 07:00:53 +02:00
Rong Zhang	855f2a55cb	Merge pull request #3135 from ishitatsuyuki/patch-1 ... Add bad hostname preflight check	2018-08-20 12:08:02 +08:00
Wong Hoi Sing Edison	71fdc257bc	cephfs-provisioner: Upgrade to v2.0.1-k8s1.11	2018-08-20 11:55:04 +08:00
Rong Zhang	fd16f77e20	Merge pull request #3017 from seungkyua/fix_kubeadm_client_conf ... Fix kubeadm client conf	2018-08-20 10:51:02 +08:00
Tatsuyuki Ishi	3eef8dc8d0	Add bad hostname preflight check ... Hostname must be a valid DNS name, which is checked as https://github.com/kubernetes/apimachinery/blob/master/pkg/util/validation/validation.go#L115 The situation I have encountered is that my hostname contained underscore which is disallowed and apiserver refused to start.	2018-08-20 09:09:00 +09:00
rongzhang	59176ebbb9	Add kubeadm controlplaneEndpoint ... Nginx LB(default) Other LB by kubeadm controlplane	2018-08-20 00:57:13 +08:00
rongzhang	b421d0ed5b	Fix install nss	2018-08-20 00:07:31 +08:00
rongzhang	35efc387c4	Fix pull dns image error	2018-08-19 22:47:17 +08:00
Rong Zhang	fb309ca446	Merge pull request #3128 from riverzhang/delete-kubeadm ... Remove unused configuration	2018-08-19 10:01:33 +08:00
Antoine Legrand	1d4f88eea8	Fix typo in image url	2018-08-19 01:30:54 +02:00
rongzhang	095ccef8bd	Remove unused configuration	2018-08-19 01:23:20 +08:00
Rong Zhang	0df969ad19	Merge pull request #3117 from mirwan/audit_usecases ... Audit support improvement	2018-08-19 01:13:22 +08:00
Antoine Legrand	3e5b6a5481	Merge pull request #3105 from mirwan/remove_cilium_device_at_reset_plus_move_network_to_network_plugin_roles ... Move network_plugin specific reset tasks to its role directory	2018-08-17 22:27:16 +02:00
Antoine Legrand	c36744e96d	Merge pull request #3120 from alvistack/cephfs-provisioner-v2.0.0-k8s1.11 ... cephfs-provisioner: Upgrade to v2.0.0-k8s1.11	2018-08-17 22:11:15 +02:00
Antoine Legrand	e51c5dc0a6	Merge pull request #3123 from mathieuherbert/until-restart-etcd ... add until option for etcd backup commands	2018-08-17 22:09:08 +02:00
Antoine Legrand	d297b82e82	Merge pull request #3126 from LuckySB/etcd_restart_on_update ... add etcd version to etcd environment file to trigger a reload	2018-08-17 22:05:34 +02:00
Erwan Miran	98b818bbaf	comply with ansible syntax consistency guideline	2018-08-17 16:37:33 +02:00
Antoine Legrand	26bf719a02	Merge branch 'master' into multi-arch-support	2018-08-17 16:35:50 +02:00
Antoine Legrand	7e37aa4aca	Merge pull request #2103 from xd007/docker_aarch64_pkg ... Update docker package info for aarch64	2018-08-17 16:26:56 +02:00
Sergey Bondarev	ce6854e726	add version to environment file ... Trigger reboot handler when version upgrade during update script	2018-08-17 17:25:35 +03:00
Antoine Legrand	ac49bbb336	Merge pull request #2168 from xd007/docker_arm64 ... fix docker opts incompatible running on aarch64 Redhat/Centos	2018-08-17 16:24:07 +02:00
Antoine Legrand	6c7eabb53b	Merge pull request #2001 from b0r1sp/patch-3 ... Quote false and yes, otherwise they'll be transformed to 'False', 'Yes'	2018-08-17 15:52:15 +02:00
Antoine Legrand	7a0f0126f7	Merge pull request #1295 from xuhuilong/master ... fix curl get calico status error ( error in tls version, centos 7.3 1611)	2018-08-17 14:29:01 +02:00
Mathieu Herbert	59d89a37cc	add until option for etcd backup commands	2018-08-17 11:05:57 +02:00
Wong Hoi Sing Edison	1a07c87af7	cephfs-provisioner: Upgrade to v2.0.0-k8s1.11 ... Upstream Changes: - cephfs-provisioner v2.0.0-k8s1.11 (https://github.com/kubernetes-incubator/external-storage/releases/tag/cephfs-provisioner-v2.0.0-k8s1.11) - Update ClusterRole Our Changes: - Fix typo in defaults/main.yml (rs -> deploy) - Manifests cleanup	2018-08-17 12:41:56 +08:00
Seungkyu Ahn	29894293eb	Fix kubeadm client conf ... Fix DiscoveryTokenCACertHashes key to discoveryTokenCACertHashes in kubeadm-client.conf	2018-08-17 04:40:08 +00:00
Jonathan Craig	4d783fff0d	resolve issues with new cacert feature	2018-08-16 23:31:21 -04:00
Erwan Miran	7f16b46ed5	Reset tasks specific to a network_plugin moved inside its role directory + Reset tasks specific to cilium	2018-08-16 17:34:33 +02:00
Antoine Legrand	58ee5f1cc9	Merge pull request #3089 from mattymo/cloudconfig ... Remove erroneous cloud-config task	2018-08-16 16:17:01 +02:00
Antoine Legrand	253dc4f606	Merge pull request #3114 from woopstar/coredns-1.2.0 ... Update CoreDNS to 1.2.0	2018-08-16 16:14:13 +02:00
Erwan Miran	54548d3b95	kubeadm mounts the hostpaths itself	2018-08-16 13:17:30 +02:00
Erwan Miran	58d4d65fab	minor variable fix and reuse + handle auditlog redirected to stdout	2018-08-16 12:51:09 +02:00
Rong Zhang	364ab2a6b7	Merge pull request #3113 from riverzhang/support-audit ... Support audit	2018-08-16 15:33:43 +08:00
rongzhang	2ffc1afe40	Support audit	2018-08-16 14:38:07 +08:00
Wong Hoi Sing Edison	18612b3501	cert-manager: Upgrade to 0.4.1 ... Upstream Changes: - cert-manager 0.4.1 (https://github.com/jetstack/cert-manager/releases/tag/v0.4.1) Our Changes: - Better templates sync with upstream manifests - Remove fancy resources requests/limits customization	2018-08-16 08:47:01 +08:00
Andreas Kruger	9da5d67728	Update CoreDNS to 1.2.0	2018-08-15 13:39:05 +02:00
Wong Hoi Sing Edison	bd413e36a3	ingress-nginx: Upgrade to 0.18.0 ... Upstream Changes: - ingress-nginx 0.18.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.18.0)	2018-08-15 11:40:42 +08:00
Chad Swenson	2c5781ace1	Merge pull request #2932 from wiremind/efk-fluentd-no-nodeselector ... fluentd daemonset: do not set old nodeSelector.	2018-08-14 13:48:30 -05:00
JohnZheng	b50b3430be	Disable locksmithd on CoreOS if coreos_auto_upgrade set to false (#3088) ... * Disable locksmithd on CoreOS if coreos_auto_upgrade set to false * change when format to support multiple-condition	2018-08-14 13:42:16 -05:00
Chad Swenson	0e3518f2ca	Merge pull request #2871 from fritchie/lptolerate ... Local volume provisioner: tolerate NoSchedule	2018-08-14 13:39:57 -05:00
Chad Swenson	3a85a2f81c	Merge pull request #3080 from mirwan/netchecker_template_rendering_filename ... Netchecker manifests should not have j2 extension	2018-08-14 13:24:16 -05:00
Chad Swenson	5dbfa0384e	Merge pull request #3101 from chenhonggc/uninstall_old_versions_of_docker ... Uninstall old versions of Docker	2018-08-14 11:32:23 -05:00
rongzhang	48b6128814	Upgrade coredns to 1.1.3	2018-08-15 00:05:55 +08:00
Maxime Brunet	70b28288a3	Use delegate_to: localhost instead of local_action ... Allow to use `ansible_become: true` (#2969) And set it to `false` for `localhost` with an `host_var`	2018-08-14 10:08:43 -04:00
Rong Zhang	a11e1eba9e	Upgrade kubernetes to V1.11.x (#3078) ... Upgrade Kubernetes to V1.11.2 The kubeadm configuration file version has been upgraded from v1alpha1 to v1alpha2 Add bootstrap kubeadm-config.yaml with external etcd	2018-08-14 15:13:44 +03:00
Chen Hong	2dfa928c90	Uninstall old versions of Docker	2018-08-14 17:48:30 +08:00
Erwan Miran	d3c0fe1fcb	Templates (even without actual templating inside) should have j2 extension but should not be rendered with j2 extension	2018-08-13 09:51:26 +02:00
Hedayat Vatankhah	c0221c2e72	Add --dns-loop-detect to dnsmasq used in kube-dns ... It prevents DNS loops when host's DNS server is a localhost DNS server, or when DNS server of cluster is also added as an upstream DNS server	2018-08-12 20:36:33 +04:30
mauromedda	9cef20187c	Add the path to kubectl binary ... The post-remove action fails during the kubectl delete node action because with rc: 2, command not found. The kubectl is not in the system PATH and the full path to the binary is required	2018-08-12 10:50:50 +02:00
Anton Fayzrahmanov	95f1e4634a	local-volume-provisioner: use mountPropagation HostToContainer and version bump (#3081) ... * Update local-volume-provisioner-ds.yml.j2 After v1.10.2 default mountPropagation is "None" * local_volume_provisioner version bump v2.1.0 uses the beta nodeAffinity API by default which is available starting 1.10 * Update local-volume-provisioner-ds.yml.j2 MY_NAMESPACE env * Update README.md Raw block devices docs.	2018-08-10 17:14:34 +03:00
Matthew Mosesohn	581a30fdec	Remove erroneous cloud-config task	2018-08-10 15:59:18 +03:00
Andreas Krüger	d8e77600e2	Merge pull request #3066 from luisyonaldo/fix-conditional ... fix bad conditional	2018-08-10 10:38:52 +02:00
Cédric de Saint Martin	e3dcd96301	kubedns & kubedns-autoscaler: Stick to master nodes. (#2909) ... * kubedns & kubedns-autoscaler: Stick to master nodes. - Tolerate only master nodes and not any NoSchedule taint - Pods are on different nodes - Pods are required to be on a master node. * kubedns: use soft nodeAffinity. Prefer to be on a master node, don't require. * coredns: Stick to (different) master nodes. - Pods are on different nodes - Pods are preferred to be on a master node.	2018-08-09 10:42:53 -05:00
Chad Swenson	001cae5894	Merge pull request #3028 from Kami-no/cilium ... cilium v1.1.2	2018-08-09 10:35:29 -05:00
Erwan Miran	494ff9522b	j2 extension should only be used for template filename, not target file on remote host	2018-08-09 11:29:45 +02:00
Luis Nuñez	fd380615a0	fix bad conditional	2018-08-09 10:20:45 +02:00
Rong Zhang	039180b2ca	Merge pull request #3022 from alvistack/weave-2.4.0 ... weave: Upgrade to 2.4.0	2018-08-09 15:01:05 +08:00
Zinin D.A	22b89edbbc	cilium v1.1.2 ... Update all configs to current upstream state. Add more resources (unable to pass tests now)...	2018-08-08 22:42:50 +03:00
Rong Zhang	94ae945bea	Merge pull request #2904 from mirwan/var_lib_kubelet_should_not_be_unmounted_when_having_its_own_partition ... Only subdirectories in /var/lib/kubelet should be unmounted at reset time	2018-08-08 15:00:54 +08:00
Rong Zhang	5c039d87aa	Merge pull request #3054 from reverson/1.10-admission ... Add support for admission controllers in 1.10 and above	2018-08-08 14:32:11 +08:00
Rong Zhang	08dfb7b59f	Merge pull request #3073 from riverzhang/delete-istio ... Remove istio support	2018-08-08 13:00:57 +08:00
rongzhang	ea6af449a8	Remove istio support ... Use helm install or support in future	2018-08-08 11:10:09 +08:00
Mathieu Herbert	d285565475	Add tags for coredns and kubedns	2018-08-07 20:55:38 +02:00
Robert Everson	4eadf3228e	Only add admission plugins if defined	2018-08-07 11:25:03 -07:00
Robert Everson	99c5aa5a02	Use k8s default plugin list	2018-08-07 11:25:03 -07:00
Robert Everson	6ed65d762b	Separate out plugins into 2 variables	2018-08-07 11:25:03 -07:00
Robert Everson	ac18f6cf8b	Add support for admission controllers in 1.10 and above	2018-08-07 11:25:03 -07:00
Rong Zhang	e71f261935	Merge pull request #3068 from riverzhang/swap ... Enable swap	2018-08-07 21:29:41 +08:00
rongzhang	b902602d16	Enable swap	2018-08-07 21:13:12 +08:00
Wong Hoi Sing Edison	538cb3b1bd	weave: Upgrade to 2.4.0 ... Upstream Changes: - weave 2.4.0 (https://github.com/weaveworks/weave/releases/tag/v2.4.0) - Support `externalTrafficPolicy: Local` (https://github.com/weaveworks/weave/issues/2924) - Make the ipset list size bigger (https://github.com/weaveworks/weave/pull/3305) - Break out of kube rm-peers loop if nothing changes (https://github.com/weaveworks/weave/pull/3317) Our Changes: - Revamp weave-net.yml.j2 with upstream changes - Add more variables for customization - Replace WEAVE_PASSWORD with k8s secret - Remove hard-corded seed mode support, in favor of variables customization	2018-08-07 18:34:51 +08:00
Wong Hoi Sing Edison	17e335c6a7	ingress-nginx: Upgrade to 0.17.1 ... Upstream Changes: - ingress-nginx 0.17.1 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.17.1) - Remove duplicated `securityContext` (https://github.com/kubernetes/ingress-nginx/pull/2705) - Remove --publish-service flag, in favor of DaemonSet + hostPort Close #2998 Close #2999	2018-08-07 18:31:08 +08:00
Rong Zhang	280d6cac1a	Merge pull request #2997 from alvistack/cert-manager-0.4.0 ... cert-manager: Upgrade to 0.4.0	2018-08-07 18:00:46 +08:00
Rong Zhang	c288ffc55d	Merge pull request #2342 from southquist/add-ca-cert ... allow for setting the cacert on openstack cloud provider	2018-08-07 17:46:01 +08:00
Rong Zhang	9075dbdd3c	Merge pull request #2875 from bradbeam/movault ... Adding cluster_name to api cert alt name for vault	2018-08-07 17:36:04 +08:00
Rong Zhang	7850bce254	Merge pull request #2994 from DBLaci/master ... dashboard_token_ttl option override possibility with default	2018-08-07 17:16:25 +08:00
Rong Zhang	3d19e03294	Merge pull request #3015 from podnov/kube_proxy_healthz_bind_address ... Variablize kube_proxy_healthz_bind_address	2018-08-07 17:10:33 +08:00
Rong Zhang	b1f8bfdf7c	Merge pull request #3055 from reverson/17.09-docker ... Add support for docker 17.09	2018-08-07 16:57:50 +08:00
Wong Hoi Sing Edison	0f400a113c	cert-manager: Upgrade to 0.4.0 ... Upstream Changes: - cert-manager 0.4.0 (https://github.com/jetstack/cert-manager/releases/tag/v0.4.0)	2018-08-07 14:29:28 +08:00
Aleksey Shirokih	e8447e3d71	Service file binary place mismatch ... According to cluster/binary.yml vault binary will be placed to `{{ bin_dir }}` and according to `inventory/sample/group_vars/all.yml` that is `inventory/sample/group_vars/all.yml`	2018-08-06 14:44:13 +03:00
rongzhang	ac644ed049	Fix yaml roles error	2018-08-05 18:48:07 +08:00
Rong Zhang	453fea1977	Merge pull request #3034 from cornelius-keller/library_fix ... fix missing libraries on newer coreos versions	2018-08-05 12:54:03 +08:00
cornelius-keller	4b5cb1185f	fix missing libraries on newer coreos versions	2018-08-03 15:29:05 +02:00
Robert Everson	275cdc1ce3	Add support for docker 17.09	2018-08-02 11:35:16 -07:00
DBLaci	d43f09081e	Merge pull request #1 from kubernetes-incubator/master ... Follow upstream	2018-08-01 16:34:10 +02:00
woosley.xu	72074f283b	set local for growpart part 2	2018-07-31 06:56:09 +08:00
woosley.xu	a5db3dbea9	set locale for growpart	2018-07-31 06:52:56 +08:00
Alexandre Ardhuin	9b349a9049	Fix label of registry in README	2018-07-27 11:42:21 +02:00
Seungkyu Ahn	0366600b45	Remove double slash ... Even without this PR, the operation works well. However, it is better to use a single slash rather than a double slash in the path.	2018-07-20 07:34:33 +00:00
Evan Zeimet	6a4ce96b7d	Variablize kube_proxy_healthz_bind_address ... This fixes #3014	2018-07-19 14:19:09 -05:00
DBLaci	b61c64a8ea	token-ttl default value is int in seconds	2018-07-19 12:15:47 +02:00
Takashi Okamoto	37ccf7e405	Fixed kubectl path.	2018-07-13 15:32:08 +00:00
DBLaci	cb91003cea	dashboard_token_ttl option override possibility with default	2018-07-13 15:26:18 +02:00
Matthew Mosesohn	97e0de7e29	Fix vault file owner issues and k8s apiserver cert creation (#2985) ... apiserver cert should be created only once	2018-07-11 14:58:02 +03:00
Rong Zhang	cf445fd4fe	Merge pull request #2930 from alvistack/ingress-nginx-0.16.1 ... ingress-nginx: Upgrade to 0.16.2	2018-07-10 14:42:37 +08:00
Aivars Sterns	72f053d9bb	Merge pull request #2972 from mattymo/force_cni_cp ... Force copy cni files	2018-07-10 09:40:10 +03:00
Wong Hoi Sing Edison	a0defefb3f	ingress-nginx: Upgrade to 0.16.2 ... ingress-nginx 0.16.2 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.16.2) This patch simplify ingress-nginx deployment by default deploy on master, with customizable options; on the other hand, remove the additional Ansible group "kube-ingress" and its k8s node label injection. Reference to https://kubernetes.io/docs/concepts/services-networking/ingress/#prerequisites: GCE/Google Kubernetes Engine deploys an ingress controller on the master. By changing `ingress_nginx_nodeselector` plus custom k8s node label, user could customize the DaemonSet deployment target. If `ingress_nginx_nodeselector` is empty, will deploy DaemonSet on every k8s node.	2018-07-10 12:26:06 +08:00
Wong Hoi Sing Edison	62b1166911	cert-manager: Upgrade to 0.3.2 ... Upstream Changes: - cert-manager 0.3.2 (https://github.com/jetstack/cert-manager/releases/tag/v0.3.2) Our Changes: - Remove legacy addon dir, manifests and namespace before upgrade	2018-07-10 08:48:44 +08:00
Rong Zhang	810596c6d8	Merge pull request #2974 from alvistack/cephfs-provisioner-1.1.0-k8s1.10 ... cephfs-provisioner: Upgrade to 1.1.0-k8s1.10	2018-07-09 13:53:07 +08:00
Rong Zhang	a488d55c2c	Merge pull request #2975 from daohoangson/remove_force_disable_kube_basic_auth ... Remove step that disables `kube_basic_auth`.	2018-07-08 21:18:36 +08:00
Alexandru Bogdan Pica	e63bc65a9d	Fix 2976 ... Fix failure when the container attribute is not set for a download	2018-07-08 13:36:47 +03:00
Dao Hoang Son	d306c9708c	Remove step that force disable kube_basic_auth. ... The referenced issue (https://github.com/kubernetes/kubeadm/issues/441) has already been fixed.	2018-07-08 16:57:43 +07:00
Wong Hoi Sing Edison	6a65345ef3	cephfs-provisioner: Upgrade to 1.1.0-k8s1.10 ... Upstream Changes: - Update CEPH_VERSION to mimic (https://github.com/kubernetes-incubator/external-storage/pull/841) Our Changes: - Using image from official repo which contain latest changes (https://quay.io/repository/external_storage/cephfs-provisioner)	2018-07-08 00:37:08 +08:00
Matthew Mosesohn	1a3b9dd864	Force copy cni files	2018-07-06 16:39:42 +03:00
elementyang	8fee1ab102	change create to apply	2018-07-06 19:36:19 +08:00
Matthew Mosesohn	5c617c5a8b	Add tags to deploy components by --tags option (#2960) ... * Add tags for cert serial tasks This will help facilitate tag-based deployment of specific components. * fixup kubernetes node	2018-07-06 09:12:13 +03:00
Matthew Mosesohn	0b939a495b	Improve vault etcd initialization check (#2959)	2018-07-05 12:27:45 +03:00
elementyang	5a4f07adca	change the way of getting etcd_member_name	2018-07-05 00:06:37 +08:00
Aivars Sterns	4092f96dd8	Merge pull request #2946 from Miouge1/remove-pid-predicate ... CheckNodePIDPressure is not supported in v1.10	2018-07-04 18:30:19 +03:00
elementyang	effd27a5f6	change the way that getting etcd_member_name	2018-07-03 22:02:44 +08:00
Rong Zhang	77c870b7d0	Merge pull request #2951 from alvistack/cephfs-provisioner-06fddbe2 ... cephfs-provisioner: Upgrade to 06fddbe2	2018-07-03 19:36:42 +08:00
Rong Zhang	32a6ca4fd6	Merge pull request #2948 from qeqar/remove-node-limit ... move node selection from --limit to --extra-vars=node<nodename>"	2018-07-03 18:41:57 +08:00
Wong Hoi Sing Edison	728024e8ff	cephfs-provisioner: Upgrade to 06fddbe2 ... - cephfs-provisioner 06fddbe2 (https://github.com/kubernetes-incubator/external-storage/tree/06fddbe2/ceph/cephfs) Noteable changes from upstream: - Added storage class parameters to specify a root path within the backing cephfs and, optionally, use deterministic directory and user names (https://github.com/kubernetes-incubator/external-storage/pull/696) - Support capacity (https://github.com/kubernetes-incubator/external-storage/pull/770) - Enable metrics server (https://github.com/kubernetes-incubator/external-storage/pull/797) Other noteable changes: - Clean up legacy manifests file naming - Remove legacy manifests, namespace and storageclass before upgrade - `cephfs_provisioner_monitors` simplified as string - Default to new deterministic naming - Add `reclaimPolicy` support in StorageClass With legacy non-deterministic naming style (where $UUID are generated ramdonly): - cephfs_provisioner_claim_root: /volumes/kubernetes - cephfs_provisioner_deterministic_names: false - Generated CephFS volume: /volumes/kubernetes/kubernetes-dynamic-pvc-$UUID - Generated CephFS user: kubernetes-dynamic-user-$UUID With new default deterministic naming style (where $NAMESPACE and $PVC are predictable): - cephfs_provisioner_claim_root: /volumes - cephfs_provisioner_deterministic_names: true - Generated CephFS volume: /volumes/$NAMESPACE/$PVC - Generated CephFS user: k8s.$NAMESPACE.$PVC	2018-07-03 10:15:24 +08:00
Mark Eisenblaetter	b548f6f320	move node selection from --limit to --extra-vars=node<nodename>"	2018-07-02 20:04:36 +02:00
Nicolas Trangez	8bcad4f5ef	Fix coreos_dual -> coredns_dual typo ... See: e40368ae2b	2018-07-02 17:19:35 +02:00
Rong Zhang	31e6c44b07	Merge pull request #2924 from elementyang/make-ssl-etcd-pr ... fix the time of ca files are changed in make-ssl-etcd	2018-07-02 20:44:20 +08:00
Matthew Mosesohn	77c910c1c3	Fixup vault etcd check (#2938) ... * Fixup vault etcd * Update main.yml	2018-07-02 15:37:37 +03:00
Matthew Mosesohn	c20196f9a0	Remove modprobe binary from kubelet rkt deployment (#2917)	2018-07-02 15:37:24 +03:00
Rong Zhang	f6a15b1829	Merge pull request #2918 from elementyang/fix-pr ... fix add etcd_events_access_address	2018-06-30 11:55:38 +08:00
elementyang	7c22def422	add etcd_events_access_address	2018-06-30 07:32:29 +08:00
Rong Zhang	87e49f0055	Merge pull request #2921 from elementyang/index-out-of-range-pr ... fix template index out of range for pull images	2018-06-30 00:53:53 +08:00
Matthew Mosesohn	a36e3fbec3	Add rkt gc task (#2945)	2018-06-29 19:53:21 +03:00
Miouge1	2a279e30b0	CheckNodePIDPressure is not supported in v1.10	2018-06-28 20:10:38 +02:00
southquist	c685dc493f	allow for setting the cacert on openstack cloud provider	2018-06-28 16:00:13 +02:00
Andreas Krüger	e24f888bc4	Merge pull request #2923 from bradbeam/vaultrkt ... Adding uuidfile for rkt based vault to properly cleanup after itself	2018-06-27 11:18:39 +02:00
Cédric de Saint Martin	a260412c7e	fluentd daemonset: do not set arbitrary nodeSelector.	2018-06-25 15:19:56 +02:00
neith00	a643f72d93	No need to install rkt on CoreOS	2018-06-25 09:38:24 +02:00
Aivars Sterns	73a2a18006	Merge pull request #2795 from gfkse/baremetal-override-calico-hostname ... Make Calico nodename overridable on bare metal	2018-06-25 08:45:09 +03:00
Rong Zhang	2ef05fb3b7	Merge pull request #2763 from ameukam/update_efk_stack ... Update efk stack	2018-06-24 19:01:32 +08:00
Rong Zhang	e06d02365e	Merge pull request #2338 from southquist/template-openstack-storage-class ... allow for configurable openstack storage class	2018-06-24 18:42:29 +08:00
elementyang	d6f2dbc723	fix the time of ca files are changed in make-ssl-etcd	2018-06-24 13:05:43 +08:00
Brad Beam	20dba8b388	Adding uuidfile for rkt based vault to properly cleanup after itself	2018-06-23 15:14:40 -05:00
Rong Zhang	f624ba47fb	Merge pull request #2922 from riverzhang/remove-node ... Add run_once to remove-node	2018-06-23 15:09:16 +08:00
rongzhang	94aa062d51	Add run_once to remove-node	2018-06-23 07:05:24 +00:00
elementyang	c0935e161b	fix template index out of range for pull images	2018-06-23 05:32:44 +08:00
elementyang	70fbc01cc1	fix etcd_events_access_addresses	2018-06-23 00:04:19 +08:00
Yumo Yang	6c2f169ea2	update test-pr2 (#2911)	2018-06-22 13:22:26 +03:00
Rong Zhang	1aee6ec371	Merge pull request #2903 from riverzhang/swap ... Add manage swap on the worker node	2018-06-21 22:20:23 +08:00
Erwan Miran	d3fdfee211	Only subdirectories in /var/lib/kubelet should be unmounted	2018-06-21 11:50:02 +02:00
rongzhang	3232e2743e	Add manage swap on the worker node	2018-06-21 08:15:01 +00:00
Andreas Krüger	cbb959151c	Merge pull request #2737 from Miouge1/update-scheduler ... Update kube-scheduler policy	2018-06-19 14:53:22 +02:00
Andreas Krüger	c3d8b131db	Merge pull request #2801 from dvazar/bugfix/undefined__network_plugin__variable ... Fixed "network_plugin" variable	2018-06-19 10:01:06 +02:00
Andreas Krüger	236d1a448d	Merge pull request #2898 from kubernetes-incubator/default_true_authtoken ... Enable by default the kubelet token auth	2018-06-19 09:56:32 +02:00
Matthew Mosesohn	61e97251a5	Improve variable handling for disabling etcd events cluster	2018-06-18 16:58:29 +03:00
Antoine Legrand	c192a01b20	Enable by default the kubelet token auth	2018-06-18 14:20:05 +02:00
Henry Finucane	3ad9e9c5eb	Fix #2261 by supporting Red Hat's limited PATH ... Red Hat has this theory that binaries in sbin are too dangerous to be on the default path, but we need them anyway. RH7 has /sbin and /usr/sbin as symlinks, so that is no longer important. I'm adding it to the `PATH` instead of making the path to `modinfo` absolute because I am worried about breaking support for other distributions.	2018-06-15 12:49:22 -07:00
Julien Mailleret	6aaaf4a272	Limit the maximum number of revisions saved per helm release (#2894) ... * Limit the maximum number of revisions saved per helm release	2018-06-15 12:50:18 +02:00
Andreas Krüger	cd64f41524	Merge pull request #2844 from chechiachang/fix-inconsistent-variable-in-task-name-and-msg ... Fix inconsistent variables in task name and task message	2018-06-15 09:19:31 +02:00
Andreas Krüger	df279b1ff6	Merge pull request #2890 from drekle/bugfix/dns-domain-incorrect-for-coredns ... CoreDNS uses cluster_name instead of dns_domain	2018-06-15 09:06:11 +02:00
Andreas Krüger	6ac601fd2d	Merge pull request #2876 from neith00/docker_iptables ... parametrized iptables options for docker daemon	2018-06-14 22:23:27 +02:00
Andreas Krüger	3a569c9dcb	Merge pull request #2750 from w-leads/feature/add-vmname-to-vcp-config ... Add vm_name option to vsphere cloud provider config	2018-06-14 22:22:34 +02:00
neith00	f2f1e7f9d1	parametrized iptables options for docker daemon	2018-06-14 12:16:16 +02:00
Rong Zhang	0686b8452e	Merge pull request #2860 from alvistack/cert-manager-0.3.0 ... cert-manager: Upgrade to v0.3.0	2018-06-14 10:35:23 +08:00
Derek Lemon	1e98e8444e	Using dns domain instead of cluster name for coredns, incase they differ	2018-06-13 18:52:35 +00:00
Wong Hoi Sing Edison	291dd1aca8	Fixup #2545, cephfs-provisioner: Individual Namespace for Add-on	2018-06-13 21:52:58 +08:00
Wong Hoi Sing Edison	38da0adead	cert-manager: Upgrade to v0.3.0	2018-06-13 21:47:44 +08:00
Rong Zhang	81b3343796	Merge pull request #2857 from alvistack/ingress-nginx-0.15.0 ... ingress-nginx: Upgrade to 0.15.0	2018-06-13 21:16:17 +08:00
Brad Beam	3d819a6edd	Adding cluster_name to api cert alt name for vault	2018-06-12 14:15:07 -05:00
rongzhang	20bd656975	Reconfigure kube-proxy to access kube-apiserver via the LB(kubeadm)	2018-06-12 12:53:50 +00:00
Frank Ritchie	cfe939ff08	Tolerate NoSchedule by default	2018-06-11 20:10:13 -04:00
Wong Hoi Sing Edison	9f245dd9b2	ingress-nginx: Upgrade to 0.15.0	2018-06-08 16:05:15 +08:00
Rong Zhang	10c9fe96b0	Merge pull request #2859 from riverzhang/nginx ... Fix nginx-proxy HA when kubeadm enable	2018-06-08 01:10:01 +08:00
Rong Zhang	42b24616ac	Merge pull request #2856 from alvistack/kubernetes-1.10.4 ... Upgrade Kubernetes to 10.0.4 and etcd to 3.2.18	2018-06-07 23:54:03 +08:00
rongzhang	f9ccb93825	Fix nginx-proxy HA when kubeadm enable	2018-06-07 14:27:19 +00:00
Aivars Sterns	daeea75fbb	Merge pull request #2835 from oracle/bm_fix-apiserver-access-ip ... roles/kubernetes/client: kubeconfig template should use access_ip	2018-06-07 11:50:57 +03:00
Wong Hoi Sing Edison	0ad0202e8f	Upgrade Kubernetes to 10.0.4 and etcd to 3.2.18	2018-06-07 16:20:29 +08:00
Brad Beam	1f02cc70f1	Merge pull request #2825 from dshuvar/dshuvar/docker-options.conf ... Changed /etc/systemd/system/docker.service.d/docker-options.conf file for successful parsing mount aguments	2018-06-06 12:56:18 -05:00
Brad Beam	fe010504aa	Merge pull request #2851 from bradbeam/vaultnotify ... Adding wait for vault up handler in service restart	2018-06-06 12:49:03 -05:00
Brad Beam	63a458063b	Adding missing rkt template for etcd-events	2018-06-06 10:43:30 -05:00
Brad Beam	a8715f9f0f	Adding wait for vault up handler in service restart	2018-06-06 10:40:27 -05:00
Matthew Mosesohn	59be578842	Revert "wip pr for improved cert sync" (#2849)	2018-06-06 17:22:25 +03:00
Aivars Sterns	cb0a257349	Merge pull request #2819 from oleh-ozimok/fix-cidr-assert ... Fix enough network address space assert	2018-06-06 07:32:16 +03:00
Di Xu	1081f620d2	add support for non-amd64 arch gcr.io images ... Currently all the gcr.io images used in kubespray can only run on x86. Also gcr.io has not fully support multi-arch docker images. Add extra var "image_arch" (default is amd64) to support running other platforms, like arm64. Change-Id: I8e1c9af533c021cb96ade291a1ce58773b40e271	2018-06-05 17:29:02 +08:00
David Chang	e1cfe83825	Fix inconsistent variables in task name and task message	2018-06-05 16:45:02 +08:00
Di Xu	6019a84fb3	Update docker package info for aarch64 ... Missing corresponding package docker-engine on aarch64, use docker instead. Change-Id: If5df58337746a81752b5d477e0473600eaee8381	2018-06-05 16:30:28 +08:00
Di Xu	f4d762bb95	fix docker opts incompatible running on aarch64 Redhat/Centos ... On Aarch64, the default cgroup driver for docker is systemd instead of cgroupfs. Should conform kubelet to use systemd as cgroup driver as well to keep it consistent with docker. Without this change, below exception will be raised. /usr/bin/docker-current: Error response from daemon: shim error: docker-runc not installed on system. Change-Id: Id496ec9eaac6580e4da2f3ef1a386c9abc2a5129	2018-06-05 16:17:16 +08:00
Aivars Sterns	69ea28e187	Merge pull request #2827 from mattymo/testpr ... wip pr for improved cert sync	2018-06-04 12:43:00 +03:00
Ben Meier	2f5a9e180c	kubernetes/client: kubeconfig template should use the access_ip for the chosen master node	2018-06-04 09:51:05 +01:00
Dmitry	f912a4ece5	Fix compare AnsibleUnsafeText with int (#2828)	2018-06-04 11:34:10 +03:00
Rong Zhang	d1e66f9cc8	Add label to kubelet env for kubeadm deploy cluster (#2841)	2018-06-04 11:26:47 +03:00
Aivars Sterns	b67cf74c5e	Merge pull request #2823 from scality/dashboard_in_cluster_info ... Dashboard in cluster info	2018-05-31 15:48:25 +03:00
Erwan Miran	11d87ecc37	removed surnumerary definition of contiv_etcd_init_image_* (already in download role)	2018-05-31 00:02:11 +02:00
Matthew Mosesohn	7433348aae	wip pr for improved cert sync	2018-05-30 12:15:11 +03:00
Erwan Miran	3673ed6262	include contiv_etcd_init_image to downloads role	2018-05-29 17:05:33 +02:00
Dmitrii Shuvar	16f860bbc2	Update docker-options.conf.j2 ... Changed /etc/systemd/system/docker.service.d/docker-options.conf file for successful parsing mount aguments try fix ci error previous commit	2018-05-29 12:40:33 +03:00
dshuvar	d973ecf5cc	fix error message: '[/etc/systemd/system/docker.service.d/docker-options.conf:3] Failed to parse mount flag , ignoring.'	2018-05-28 18:23:15 +03:00
Julien Girardin	f88cd27686	Add dashboard url as part of kubectl cluster-info output	2018-05-28 11:46:11 +02:00
Erwan Miran	2a4fc70e1c	contiv-etcd-init image as default instead hardcoded	2018-05-28 11:11:18 +02:00
Oleg Ozimok	38f7ba2584	Fix enough network address space assert	2018-05-27 18:01:17 +03:00
dvazar	b3f9cae820	fixed a check unknown networks (cilium & contiv)	2018-05-22 16:43:19 +07:00
Andreas Krüger	a67bdff28c	Merge pull request #2743 from mrostecki/opensuse-tumbleweed-openssl ... opensuse: Fix OpenSSL package name	2018-05-22 11:21:04 +02:00
Andreas Krüger	e3c8b230a0	Merge pull request #2806 from Miouge1/no-kpm ... Remove KPM support	2018-05-22 11:17:52 +02:00
Miouge1	095d33bc51	Remove KPM support	2018-05-21 22:28:08 +02:00
Mikhail Vasilenko	821966b319	Update Helm version to 2.9.1	2018-05-21 17:36:51 +03:00
dvazar	4b8daa22f6	Fixes #2800	2018-05-19 00:57:09 +07:00
Andreas Krüger	e60a63ea51	Merge pull request #2577 from woopstar/etcd-fix-4 ... Makeover of etcd- and etcd-cluster setup.	2018-05-16 20:49:54 +02:00
Andreas Krüger	a2a7bcd43d	Merge pull request #2786 from cruwe/cjr-assert-maximum-pods-on-node-cidr ... assert that number of pods on node does not exceed CIDR address range	2018-05-16 19:57:43 +02:00
Christopher J. Ruwe	c1bc4615fe	assert that number of pods on node does not exceed CIDR address range ... The number of pods on a given node is determined by the --max-pods=k directive. When the address space is exhausted, no more pods can be scheduled even if from the --max-pods-perspective, the node still has capacity. The special case that a pod is scheduled and uses the node IP in the host network namespace is too "soft" to derive a guarantee. Comparing kubelet_max_pods with kube_network_node_prefix when given allows to assert that pod limits match the CIDR address space.	2018-05-16 11:55:46 +00:00
Aivars Sterns	eba486f229	add posibility to provide different yum repository directory (#2787)	2018-05-16 13:56:04 +03:00
Andreas Krüger	4ac79993e2	Merge pull request #2666 from AnatolyRugalev/master ... Added MountFlags variable to docker options	2018-05-16 09:34:34 +02:00
Matthew Mosesohn	7c93e71801	Upgrade k8s to 1.10.2 (#2748) ... * Upgrade k8s to 1.10.2 Bumped etcd version to 3.2.16 as recommended * Add ipvs fix for v1.10 * change flannel addons test to ha	2018-05-15 16:00:29 +03:00
Andreas Krüger	1be399ab7b	Merge pull request #2772 from cruwe/cjr-correct-perms-on-kubeconfig ... make admin.conf -> .kube/config non-executable	2018-05-15 13:26:33 +02:00
Anatoly Rugalev	eae4fa040a	Added docker_mount_flags option (fixes #2624)	2018-05-15 11:57:18 +02:00
Christopher J. Ruwe	73800ef111	make certificates non-executable	2018-05-15 07:54:32 +00:00
rongzhang	742a8782dd	Bump kube-dns to 1.14.10 ... Upgrade kube-dns to 1.14.10 https://github.com/kubernetes/kubernetes/tree/master/cluster/addons/dns	2018-05-15 03:29:10 +00:00
Arnaud Meukam	cd7c58e8d3	correct some indentation issues in the fluentd daemonset.	2018-05-14 19:56:18 +02:00
Daniel Mohr	476b14b06e	Make Calico nodename overridable on bare metal ... Signed-off-by: Daniel Mohr <daniel.mohr@supercrunch.io>	2018-05-14 14:13:51 +02:00
Christopher J. Ruwe	49d106f615	make admin.conf -> .kube/config non-executable ... Almost certainly, the .kube/config file (YAML) should not be executable.	2018-05-14 09:29:48 +00:00
Miouge1	ad48606e4e	Restart scheduler when policy changes	2018-05-14 10:09:30 +02:00
Arnaud Meukam	c75da43f22	add missing field in fluentd	2018-05-13 21:39:27 +02:00
Arnaud Meukam	65f14f636d	remove support of other CRI runtimes than Docker in the efk stack	2018-05-13 18:37:36 +02:00
Arnaud Meukam	363627d9f8	serviceName added in elasticsearch. Required when a Statefulset is used	2018-05-13 14:23:37 +02:00
Arnaud Meukam	7950a49e28	update fluentd deployment and configmap	2018-05-11 18:56:14 +02:00
Arnaud Meukam	698da78768	update kibana docker image	2018-05-11 18:36:50 +02:00
Arnaud Meukam	ba320e918d	update elasticsearch image	2018-05-11 18:22:44 +02:00
Matthew Mosesohn	07cc981971	refactor vault role (#2733) ... * Move front-proxy-client certs back to kube mount We want the same CA for all k8s certs * Refactor vault to use a third party module The module adds idempotency and reduces some of the repetitive logic in the vault role Requires ansible-modules-hashivault on ansible node and hvac on the vault hosts themselves Add upgrade test scenario Remove bootstrap-os tags from tasks * fix upgrade issues * improve unseal logic * specify ca and fix etcd check * Fix initialization check bump machine size	2018-05-11 19:11:38 +03:00
woopstar	7df5edef52	Fix path for pip and python	2018-05-11 16:01:52 +02:00
Cédric de Saint Martin	7507031cb1	CoreOS bootstrap: set bin_dir and PATH for pip.	2018-05-08 22:20:58 +02:00
Ryo Nishikawa	51a9379d3c	Add vm_name option to vsphere cloud provider config	2018-05-08 12:23:58 -07:00
Andreas Krüger	d73d60c9b0	Merge pull request #2600 from maximegaillard/master ... Add Openstack tenant name	2018-05-08 12:03:01 +02:00
Andreas Krüger	004b4a0436	Merge pull request #2729 from Ashon/issues/fix-python-compat ... Use 'items()' for python compatibility	2018-05-08 12:02:28 +02:00
Andreas Krüger	67ce8925e4	Merge pull request #2742 from woopstar/coredns-update ... Update CoreDNS to version 1.1.2	2018-05-08 12:01:42 +02:00
Michal Rostecki	066016cd3e	opensuse: Fix OpenSSL package name ... OpenSSL 1.1 package in openSUSE Tumbleweed is named openssl-1_1, not openssl-1_1_0.	2018-05-08 10:03:30 +02:00
Andreas Krüger	28d6eb6af1	Merge pull request #2644 from cp3hu/master ... Fix apiserver manifest and kubelet for kube version < 1.9	2018-05-08 09:22:36 +02:00
woopstar	1a47a9b850	Update CoreDNS to version 1.1.2	2018-05-08 09:14:01 +02:00
Miouge1	70e0998a70	Update kube-scheduler policy	2018-05-03 21:56:51 +02:00
Chad Swenson	595e96ebf1	Merge pull request #2693 from romaindequidt/sync-certs-tasks-fix ... sync certs tasks (fix #2596 #2667)	2018-05-02 12:17:23 -05:00
woopstar	4c81cd2a71	Merge branch 'master' of https://github.com/kubernetes-incubator/kubespray into etcd-fix-4	2018-05-02 14:45:58 +02:00
Andreas Kruger	32a8ea8094	Fix wrong var used	2018-05-02 12:44:05 +02:00
ashon	fb465f8b4b	Use 'items()' for python compatibility	2018-05-01 16:55:50 +09:00
Wong Hoi Sing Edison	3501eb6916	ingress-nginx: Upgrade to 0.14.0	2018-05-01 15:42:07 +08:00
Maxime Gaillard	00db751646	Add Openstack tenant name	2018-05-01 09:21:37 +02:00
Tomasz Majchrowski	59789ae02a	ISSUE-2706: Provide consistent usage of supplementary_addresses_in_ssl_keys across vault and script mode (#2707)	2018-04-30 14:48:17 +03:00
Andreas Krüger	414e420bd2	Merge pull request #2701 from desaintmartin/netchecker-update ... Update netchecker to v1.2.2.	2018-04-30 10:55:18 +02:00
Andreas Krüger	03de4c0806	Merge pull request #2695 from suzutan/add-oidc-prefix-args ... Add oidc-user-prefix and oidc-group-prefix args	2018-04-30 09:17:02 +02:00
Andreas Krüger	4fb8e6d455	Merge pull request #2653 from kidk/fixed-incorrect-mem-tag ... Replaced 'mem' with 'memory/ in elasticsearch and kibana deployment	2018-04-30 09:14:15 +02:00
mirwan	06cdb260f6	labelvalue must be formatted to handle non string values (#2722)	2018-04-29 19:02:14 +03:00
mirwan	c3c5817af6	sysctl file should be in defaults so that it can be overriden (#2475) ... * sysctl file should be in defaults so that it can be overriden * Change sysctl_file_path to be consistent with roles/kubernetes/preinstall/defaults/main.yml	2018-04-27 18:50:58 +03:00
Markos Chandras	9168c71359	Revert "Revert "Add openSUSE support" (#2697)" (#2699) ... This reverts commit 51f4e6585a.	2018-04-26 12:52:06 +03:00
Matthew Mosesohn	1a14f1ecc1	Fix vol format for local volume provisioner in rkt (#2698)	2018-04-24 20:32:08 +03:00
Cédric de Saint Martin	44cb126e7d	Update netchecker to v1.2.2. ... Using official image from mirantis at dockerhub.	2018-04-24 09:13:56 +02:00
Matthew Mosesohn	51f4e6585a	Revert "Add openSUSE support" (#2697)	2018-04-23 14:28:24 +03:00
Suzuka Asagiri	f81e6d2ccf	Add oidc-user-prefix and oidc-group-prefix args	2018-04-23 12:23:59 +09:00
Romain DEQUIDT	80dd230a65	sync certs tasks (fix #2596 #2667)	2018-04-22 10:00:31 +02:00
Paul Montero	75950344fb	run_once pre_upgrade tasks which are executing in localhost	2018-04-19 11:38:13 -05:00
Matthew Mosesohn	0945eb990a	Make it possible to skip docker role as a var (#2686)	2018-04-19 16:47:20 +03:00
Andreas Krüger	a498cc223b	Merge pull request #2673 from hswong3i/cephfs-provisioner-a71a49d4 ... cephfs-provisioner: Upgrade to a71a49d4	2018-04-19 11:39:10 +02:00
Andreas Krüger	9707aa8091	Merge pull request #2677 from woopstar/bootstrap-fix-1 ... Properly check need_pip, always run pip to check if needed	2018-04-19 09:23:26 +02:00
Spencer Smith	49c6bf8fa6	support custom env vars for etcd	2018-04-18 14:03:24 -04:00
Samuel Vandamme	296b92dbd4	Replaced 'mem' with 'memory/ in elasticsearch and kibana deployment	2018-04-18 11:25:29 +02:00
Andreas Krüger	b2756d148a	Merge pull request #2671 from hswong3i/cert-manager-0.2.4 ... cert-manager: Upgrade to v0.2.4	2018-04-18 10:17:39 +02:00
woopstar	756af57787	Properly check need_pip, always run pip to check if needed ... pip was always being downloaded on subsequent runs, This PR always runs the pip command, and checks the rc of it before downloading pip Fix in favor of #2582	2018-04-18 10:15:46 +02:00
Andreas Krüger	cb7096f2ec	Merge pull request #2672 from hswong3i/ingress-nginx-0.13.0 ... ingress-nginx: Upgrade to 0.13.0	2018-04-18 10:10:13 +02:00
Wong Hoi Sing Edison	d435e17681	cephfs-provisioner: Upgrade to a71a49d4	2018-04-17 13:41:34 +08:00
Wong Hoi Sing Edison	23e9737b85	ingress-nginx: Upgrade to 0.13.0	2018-04-17 12:19:44 +08:00
Wong Hoi Sing Edison	54beb27eaa	cert-manager: Upgrade to v0.2.4	2018-04-17 12:08:10 +08:00
Wong Hoi Sing Edison	7968437a65	Weave: Upgrade to 2.3.0	2018-04-17 08:51:24 +08:00
Aivars Sterns	4b4786f75d	Merge pull request #2381 from vikas027/inventory_fixes ... Replaced ansible_ssh_host with ansible_host in sample inventory file and fixed usage of bastion	2018-04-16 10:06:19 +03:00
Matthew Mosesohn	02cd5418c2	Weave limits (#2660) ... * Raise limits for weave * Adjust weave limits	2018-04-15 18:32:49 +03:00
Matthew Mosesohn	49e3665d96	Remove prometheus operator from Kubespray (#2658) ... Kubespray should not install any helm charts. This is a task that a user should do on his/her own through ansible or another tool. It opens the door to wrapping installation of any helm chart.	2018-04-13 18:53:39 +03:00
Matthew Mosesohn	e95ba800ea	Define local volume provisioner dirs in defaults (#2656)	2018-04-13 17:23:10 +03:00
Aivars Sterns	5d9bb300d7	Merge pull request #2646 from Atoms/fix-sync-container ... move when condition to main.yml	2018-04-13 09:10:21 +03:00
Matthew Mosesohn	f73717ea35	Mount local volume provisioner dirs for containerized kubelet (#2648)	2018-04-12 22:55:13 +03:00
Aivars Sterns	1967963702	Merge pull request #2380 from hwoarang/add-opensuse-support ... Add openSUSE support	2018-04-12 20:28:50 +03:00
Chad Swenson	d87b6fd9f3	Use dedicated front-proxy-ca for front-proxy-client	2018-04-12 11:03:22 -05:00
Chad Swenson	a6a47dbc96	Merge pull request #2617 from bradbeam/savaultcert ... Adding missing service-account certificate for vault	2018-04-12 11:02:24 -05:00
Matthew Mosesohn	61791bbb3d	Remove condition for docker pull when using download delegate	2018-04-12 19:01:13 +03:00
Aivars Sterns	298c6cb790	Merge pull request #2633 from grebois/patch-3 ... Enabling MutatingAdmissionWebhook for Istio Automatic sidecar injection	2018-04-12 11:53:58 +03:00
Matthew Mosesohn	3fa7468d54	Copy ca-key.pem to etcd and kube-masters accordingly	2018-04-12 10:17:54 +03:00
Markos Chandras	02bf742e15	roles: rkt: Add support for SUSE distributions ... The RPM file that's provided by upstream can be used for SUSE distributions as well. Moreover we simplify the playbook to use the 'package' module to install packages across different distros. Link: https://github.com/rkt/rkt/pull/3904	2018-04-11 20:55:20 +01:00
Markos Chandras	d07f75b389	roles: kubernetes: secrets: Add SUSE support ... Add path for certificate location for SUSE distributions. Also make sure the 'update-ca-certificates' command is executed on SUSE hosts as well.	2018-04-11 20:55:02 +01:00
Markos Chandras	2d34781259	roles: etcd: Add support for SUSE distributions ... Add path for certificate location for SUSE distributions. Also make sure the 'update-ca-certificates' command is executed on SUSE hosts as well.	2018-04-11 20:53:43 +01:00
Markos Chandras	cdb63a8c49	roles: docker: Ensure service is started if docker is already installed ... If the 'docker' package is already installed, then the handlers will not run and the service will not be (re-)started. As such, lets make sure that the service is started even if the packages are already installed.	2018-04-11 17:46:14 +01:00
Markos Chandras	44a0626fc8	roles: docker: Add support for SUSE distributions ... Add support for installing Docker on SUSE distributions. The Docker repository at https://yum.dockerproject.org/repo/main/ does not support recent openSUSE distributions so the only alternative is to use the packages from the distro repositories. This however renders the 'docker_version' Ansible variable useless on SUSE.	2018-04-11 17:46:14 +01:00
Nirmoy Das	45eac53ec7	roles: kubernetes: preinstall: Install openssl-1.1.0 on Tumbleweed ... The openssl package on Tumbleweed is actually a virtual package covering openssl-1.0.0 and openssl-1.1.0 implementations. It defaults to 1.1.0 so when trying to install it and openssl-1.0.0 is installed, zypper fails with conflicts. As such, lets explicitly pull the package that we need which also updates the virtual one. Co-authored-by: Markos Chandras <mchandras@suse.de>	2018-04-11 17:46:14 +01:00
Markos Chandras	e42203a13e	roles: kubernetes: preinstall: Add SUSE support ... Add support for installing package dependencies and refreshing metadata on SUSE distributions Co-authored-by: Nirmoy Das <ndas@suse.de>	2018-04-11 17:46:14 +01:00
Nirmoy Das	4ba25326ed	roles: bootstrap-os: Use 'hostname' command on Tumbleweed ... openSUSE Tumbleweed is having the same problems with CoreOS when it comes to using the hostname ansible module (#1588, #1600) so we need to apply a similar workaround. Co-authored-by: Markos Chandras <mchandras@suse.de> Link: http://bugzilla.opensuse.org/show_bug.cgi?id=997614	2018-04-11 17:46:14 +01:00
Markos Chandras	dca4777347	roles: bootstrap-os: Add support for SUSE distributions ... Install some required packages when running on SUSE distributions.	2018-04-11 17:46:14 +01:00
Atoms	6c954df636	move when condition to main.yml	2018-04-11 12:05:33 +03:00
Christian Phu	3535c29e59	Fix apiserver manifest for kube version < 1.9	2018-04-10 18:17:56 +02:00
Marcelo Grebois	88765f62e6	Updating order ... https://kubernetes.io/docs/admin/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use	2018-04-10 17:17:39 +02:00
Robin Skahjem-Eriksen	0f35e17e23	Fix new envvar for setting openstack_tenant_id (#2641) ... Changed from OS_PROJECT_ID to OS_PROJECT_NAME.	2018-04-10 17:23:31 +03:00
Brad Beam	77b3f9bb97	Removing default for volume-plugins mountpoint (#2618) ... All checks test if this is defined meaning there is no way to undefine it.	2018-04-10 17:19:25 +03:00
Matthew Mosesohn	45f15bf753	Revert "Fix new envvar for setting openstack_tenant_id" (#2640)	2018-04-10 14:37:24 +03:00
Aivars Sterns	913cc5a9af	Merge pull request #2639 from ironhouzi/openstack_tenant_id_fix ... Fix new envvar for setting openstack_tenant_id	2018-04-10 14:35:28 +03:00
Aivars Sterns	a46acfcdd8	Merge pull request #2627 from mattymo/no_more_do_do ... Remove jinja2 dependency of do	2018-04-10 14:32:29 +03:00
Robin Skahjem-Eriksen	0c0f6b755d	Fix new envvar for setting openstack_tenant_id ... Changed from OS_PROJECT_ID to OS_PROJECT_NAME.	2018-04-10 13:30:48 +02:00
Vikas Kumar	94eb18b3d9	Replaced ansible_ssh_host with ansible_host in sample inventory file as the former is deprecated since Ansible v2.0 ... Fixed the reference of ansible_user in kubespray-defaults role References: - http://docs.ansible.com/ansible/latest/intro_inventory.html	2018-04-10 15:21:40 +10:00
Marcelo Grebois	4c12b273ac	Enabling MutatingAdmissionWebhook for Istio Automatic sidecar injection ... https://istio.io/docs/setup/kubernetes/sidecar-injection.html#automatic-sidecar-injection	2018-04-09 12:49:05 +02:00
Atoms	b68854f79d	fix kubectl download location and kubectl.sh helper owner/group remove	2018-04-09 13:19:26 +03:00
Matthew Mosesohn	f954bc0a5a	Remove jinja2 dependency of do ... While `do` looks cleaner, forcing this extra option in ansible.cfg seems to be more invasive. It would be better to keep the traditional approach of `set dummy = ` instead.	2018-04-09 12:27:53 +03:00
rongzhang	66b61866cd	Fix check docker error for atomic ... Fix issues #2611	2018-04-08 17:53:16 +08:00
Brad Beam	dfc46f02d7	Adding missing service-account certificate for vault ... Missed in #2554	2018-04-06 15:29:52 -05:00
Daniel Hoherd	ca40d51bc6	Fix typos (no logic changes)	2018-04-05 15:54:58 -07:00
Chen Hong	973e7372b4	content: |	2018-04-04 23:05:27 +08:00
Chen Hong	b54e091886	Persist ip_vs modules	2018-04-04 18:18:51 +08:00
Andreas Krüger	6c220e4e4b	Merge pull request #2495 from holmsten/rotate-provisioner-token ... Rotate local-volume-provisioner token	2018-04-04 10:21:12 +02:00