Andreas Krüger
5e0249ae7c
Add HAProxy as internal loadbalancer ( #4480 )
2019-04-10 05:56:18 -07:00
Maxime Guyot
353afa7cb0
Fix ipip: false in calico v3 ( #4473 )
2019-04-10 05:50:15 -07:00
Neven Miculinic
a30ad1e5a5
Added generic CNI network plugin ( #4322 )
...
* Added generic CNI network plugin
* Added CNI network plugin documentation
* added necessary fix
2019-04-10 04:16:15 -07:00
Robert Neumann
586ad89d50
Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels ( #4320 )
...
* Fix the file path for all.yml and k8s-cluster.yml
* Fix --node-labels namespace error "unknown labels specified"
* Update templates and configs kubelet node-labels
2019-04-10 04:14:12 -07:00
Sidharth Anupkrishnan
6caa639243
Update CoreDNS label as specified in the kubernetes coredns repository ( #3920 )
2019-04-10 04:12:13 -07:00
MarkusTeufelberger
d2a1ac3b0c
Add Ansible-lint CI step ( #4411 )
...
* Add ansible-lint as gitlab-ci step
* Fix jinja2 syntax in include_tasks that breaks ansible-lint
* Use a block scalar to get around gitlab quoting/escaping rules
* Run ansible-lint in verbose mode in CI
2019-04-10 02:04:16 -07:00
André R. de Miranda
097806dfe8
Added tag kube-proxy ( #4272 )
...
Signed-off-by: André R. de Miranda <andre@miranda.work>
2019-04-09 05:25:06 -07:00
Abdulaziz AlMalki
7cdf1fd388
quote values for kube_oidc_groups_prefix and kube_oidc_username_prefix values to accept colon, e.g oidc: ( #4305 )
...
This will fix error: error converting YAML to JSON: yaml: line 36: mapping values are not allowed in this context
Signed-off-by: Abdulaziz AlMalki <almalki.a@gmail.com>
2019-04-09 05:23:06 -07:00
Andreas Krüger
aa162b0d5d
Update kube-router to 0.2.5 ( #4469 )
2019-04-09 03:37:04 -07:00
Maxime Guyot
b15f3e182d
add default routing to canal and disable bird checks ( #4468 )
...
Co-Author: Paweł Skrzyński
2019-04-09 02:45:07 -07:00
Andreas Krüger
4d39c1856e
Fix jinja filters ( #4470 )
2019-04-09 02:19:06 -07:00
Maxime Guyot
913fed0089
kubeadmn init: add 'until' to make 'retries' effective ( #4464 )
...
an 'until' clause is required or 'retries' is ignored
(see note @ https://docs.ansible.com/ansible/latest/user_guide/playbooks_loops.html#do-until-loops )
2019-04-09 00:21:04 -07:00
Markos Chandras
12c6b5c3eb
openSUSE: Use Leap 15.0 instead of 42.3 ( #4442 )
...
* Vagrantfile: Bump openSUSE to Leap 15.0
* roles: container-engine: Add 'containerd' package for openSUSE
The 'containerd' package contains the docker-containerd and
docker-containerd-shim binaries. We also need to ensure that the latest
version is installed since an older version may already be present (eg GCE
images)
* Remove docker log-opts for opensuse
* roles: bootstrap-os: Use lowercase 'o' for openSUSE
OpenSUSE is not a valid family name. The correct one is openSUSE
* roles: bootstrap-os: Update zypper cache before first installation
The zypper cache may be outdated so ensure that it's fully updated
before we try and install the bootstrap packages.
2019-04-09 00:17:05 -07:00
rptaylor
f52584a715
robust handling of API server SANs ( #4435 )
...
* robust handling of API server SANs
* use apiserver_loadbalancer_domain_name if it is defined, according to PR 3977
2019-04-08 08:10:35 -07:00
Erwan Miran
09bbdadcee
remove nodelocaldns iface on reset ( #4460 )
2019-04-08 02:26:25 -07:00
Xinghong Fang
d711a0c83f
[nodelocaldns] expand tolerations on the daemonset ( #4451 )
2019-04-08 02:24:26 -07:00
Andreas Krüger
d18ad63e49
Update nginx to 1.15. Update manifest and performance optimize ( #4458 )
2019-04-08 02:02:29 -07:00
Maxime Guyot
8947614d97
Upgrade to etcd v3.2.26 ( #4444 )
2019-04-08 00:34:25 -07:00
Victor Morales
7e4f4a96fc
Replace iteritems() to items() in Jinja2 templates ( #4437 )
...
The iteritems() dictionary's method has been removed in Python3. Using
this method in Jinja2 templates limits the execution to Python2 which
will be deprecated in 2020[1]. This change replaces that method for
the items() method as it's suggested in the official website[2].
[1] https://pythonclock.org/
[2] https://docs.ansible.com/ansible/latest/user_guide/playbooks_python_version.html#dict-iteritems
2019-04-08 00:32:26 -07:00
MarkusTeufelberger
301a371efe
Update pypy3 on CoreOS to 7.0.0 ( #4456 )
2019-04-08 00:28:24 -07:00
Maxime Guyot
1a6df84c7a
Upgrade to Helm 2.13.1 ( #4445 )
2019-04-07 07:04:25 -07:00
Maxime Guyot
8ad74404c9
Remove bash-completion ( #4431 )
2019-04-05 01:23:22 -07:00
Maxime Guyot
1ce2f04f47
allow Suse OS family ( #4430 )
2019-04-04 03:02:51 -07:00
Xavi
20b12751af
add Cinder allowVolumeExpansion option ( #4415 )
2019-04-04 02:36:50 -07:00
Maxime Guyot
adca353fe9
Use docker.io for calico ( #4253 )
2019-04-04 01:20:49 -07:00
Andreas Krüger
7a72e567d5
Update CoreDNS to 1.4.0 ( #4422 )
...
* Update CoreDNS to 1.4.0
* Update readme to reflect CoreDNS update
2019-04-04 00:40:50 -07:00
Andreas Krüger
3c050be0b0
Update nodelocaldns cache settings ( #4423 )
2019-04-04 00:38:51 -07:00
Andreas Krüger
41e684eb5a
Update DNS Autoscaler to 1.4.0 ( #4425 )
...
* Update DNS Autoscaler
* Update downloads too
* Fix yamllint
* Fix yamllint
2019-04-04 00:36:51 -07:00
Sergey
55890e1b82
keep compatibility as it was before ( #4268 )
2019-04-03 01:39:42 -07:00
Sergey
1e524c68d5
remove our config if docker start failed ( #4260 )
2019-04-03 01:37:44 -07:00
Sergey
740d8b0a26
enable kubelet client certificate rotation ( #4081 )
...
* enable kubelet client certificate rotation
* change to variable kubelet_rotate_certificates
2019-04-03 01:35:44 -07:00
Gautam Divgi
a8dd69cf17
Fixed cleanup-docker-orphans.sh to use docker-containerd-shim and containerd-shim ( #4418 )
2019-04-02 09:11:21 -07:00
Matthew Mosesohn
4fe2aa6bf7
Use install_cni init container for cni copy for calico/canal ( #4416 )
2019-04-02 03:32:36 -07:00
Chad Swenson
5d5c9cab19
Speed up old docker package removal ( #4408 )
...
Both the `yum` and `apt` modules support a list as input, this allows us avoid the slower `with_items` approach, which can take a long time with a large count of cluster nodes.
2019-04-01 15:08:35 -07:00
Matthew Mosesohn
5f12b7aedf
Remove kubedns and dnsmasq. Move dns_late phase after apps ( #4406 )
...
Both kubedns and dnsmasq modes are long not maintained.
We should run dns_late steps at the end because sshd
makes DNS lookups during Ansible run and has 2s timeouts
for each failed lookup trying to connect to coredns before
it is ready.
2019-04-01 12:32:34 -07:00
Bort Verwilst
d71590bbd0
add 1.14.0 checksum, remove 1.11.* checksums ( #4401 )
2019-04-01 07:16:33 -07:00
ml
483f1d2ca0
Calico felix - Fix jinja2 boolean condition ( #4348 )
...
* Fix jinja2 boolean condition
* Convert all felix variable to booleans instead.
2019-03-29 16:07:09 -07:00
Dmitry Chepurovskiy
0440e45d65
Fix supplementary_addresses rendering error ( #4403 )
2019-03-29 00:26:13 -07:00
Stefan Prietl
2fb27c8521
Use static files in KubeDNS templating task ( #4379 )
...
This commit adapts the "Lay Down KubeDNS Template" task to use the static
files moved by pull request [1]
[1] https://github.com/kubernetes-sigs/kubespray/pull/4341
2019-03-28 06:26:43 -07:00
Qasim Sarfraz
f17f4ff963
Fix bootsrap-os role, failing to create remote_tmp ( #4384 )
...
* Fix bootsrap-os role, failing to create remote_tmp
* use ansible_remote_tmp hostvar
2019-03-28 06:24:43 -07:00
Sergey
e9c34fe038
Default values for variable dns_servers and dns_domain are set in two files: ( #3999 )
...
values from inventory in roles/kubespray-defaults/defaults/main.yml
hardcoded values in roles/container-engine/defaults/main.yml
dns_servers set empty in roles/container-engine/defaults/main.yml and skydns_server not set in docker_dns_servers variables
also set default value for manual_dns_serve
another variables in roles/container-engine/defaults not need to set
2019-03-28 06:22:44 -07:00
Dmitry Chepurovskiy
669ab10c17
Added livenessProbe for local nginx apiserver proxy liveness probe ( #4222 )
...
* Added configurable local apiserver proxy liveness probe
* Enable API LB healthcheck by default
* Fix template spacing and moved healthz location to nginx http section
* Fix healthcheck listen address to allow kubelet request healthcheck
2019-03-28 06:20:46 -07:00
Qasim Sarfraz
0a3cf1a087
Fix CA cert environment variable for ectd v3 ( #4381 )
2019-03-28 00:18:43 -07:00
Bart Verwilst
0efa3e6392
Upgrade to k8s 1.13.5
2019-03-27 11:16:21 +01:00
Matthew Mosesohn
6d7f3c4405
Reduce jinja2 filters in coredns templates ( #4390 )
2019-03-26 11:09:17 -07:00
Etienne
d0ae316934
Use proxy_env with kubeadm phase commands ( #4325 )
2019-03-26 03:03:19 -07:00
Matthew Mosesohn
b7fd462944
Fix support for ansible 2.7.9 ( #4375 )
2019-03-20 11:29:42 -07:00
Matthew Mosesohn
ec08303f82
Revert "Fix #4237 : update kube cert path ( #4354 )" ( #4369 )
...
This reverts commit ea7a6f1cf1
.
This change modified the certs dir for Kubernetes, but did not move the directories for existing clusters.
2019-03-20 05:56:57 -07:00
Dmitry Chepurovskiy
ea7a6f1cf1
Fix #4237 : update kube cert path ( #4354 )
2019-03-17 23:55:11 -07:00
Matthew Mosesohn
150a969cf4
Forcefully delete pods when necessary ( #4328 )
...
Pods on down/unresponsive nodes can't be deleted without
--force --grace-period=0.
Fixes #4314
2019-03-14 07:45:46 -07:00