Hugo Blom
f7aea8ed89
update oidc to contain quotes ( #5406 )
2019-12-05 00:24:32 -08:00
Maxime Guyot
a9b67d586b
Add markdown CI ( #5380 )
2019-12-04 07:22:57 -08:00
Maxime Guyot
b1fbead531
Update to TF v0.12.12 ( #5267 )
2019-12-04 07:20:58 -08:00
Maxime Guyot
b06826e88a
Fix OpenSUSE support ( #5370 )
2019-12-04 05:16:57 -08:00
Matthew Mosesohn
57fef8f75e
Allow customizing kubelet healthz port and bind addr ( #5403 )
...
Change-Id: I1634ba2d2d3337243ffcdea86750003a559f2576
2019-12-03 11:56:58 -08:00
Matthew Mosesohn
f599a4a859
force other resolvers to be secondary when using systemd-resolved ( #5391 )
...
Change-Id: I33d46c7e0c5374467e22c5a652b282d1703dea85
2019-12-02 08:41:04 -08:00
Matthew Mosesohn
e44b0727d5
Allow inventory_builder to add nodes with hostname ( #5398 )
...
Change-Id: Ifd7dd7ce8778f4f1be2016cae8d74452173b5312
2019-12-02 08:13:04 -08:00
Matthew Mosesohn
18cee65c4b
Add support for k8s v1.17.0-rc.1, remove hyperkube ( #5378 )
...
Change-Id: I3fff04f0211cd9c2e8235acaf51c3aa98abc8bb7
2019-11-28 05:41:03 -08:00
zhanwang
f779cb93d6
update URL for Gluster Getting Started Guide ( #5390 )
...
update URL for Gluster Getting Started Guide
2019-11-28 00:45:03 -08:00
Yujun Zhang
aec5080a47
kubernetes/masters: fix task name in kubeadm setup ( #5377 )
2019-11-27 06:05:20 -08:00
Anton Fayzrahmanov
80418a44d5
CoreDNS deployment extra tolerations ( #5364 )
...
* Add extra tolerations for coredns
* dns_extra_tolerations option
* dns_extra_tolerations
* missing starting space in comment
2019-11-27 05:49:21 -08:00
Florian Ruynat
257c20f39e
add 1.16.3 checksums and set new version as default ( #5384 )
2019-11-27 01:29:20 -08:00
xieyanker
050de3ab7b
update fedora atomic download url ( #5357 )
2019-11-26 07:53:10 -08:00
Aaron Crickenberger
f1498d4b53
fix OWNERS file ( #5359 )
...
Initially this was to fix a mis-indented approvers key. However, it turns
out that 'oilbeater' is not a member of kubernetes-sigs nor
kubernetes-incubator (the org this repo was migrated from). Thus this
OWNERS file is failing prow's validation check.
As a workaround I've opted to move them to emeritus_approver, which
isn't valiated and can be used as a hint for other approvers in this
repo
2019-11-25 17:59:11 -08:00
Etienne Champetier
18d19d9ed4
containerd: update to 1.2.10 ( #5341 )
...
Lot's of bugs and security fixes:
https://github.com/containerd/containerd/releases/tag/v1.2.10
CVE-2019-16884 / CVE-2019-16276
https://github.com/containerd/containerd/releases/tag/v1.2.9
CVE-2019-9512 / CVE-2019-9514 / CVE-2019-9515
https://github.com/containerd/containerd/releases/tag/v1.2.8
CVE-2019-9512 / CVE-2019-9514
https://github.com/containerd/containerd/releases/tag/v1.2.7
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2019-11-22 00:09:29 -08:00
Matthew Mosesohn
61d7d1459a
Purge inactive reviewers. Promote miouge1 to approver ( #5365 )
...
Change-Id: I92b94ed9be85d47717e24a6099b4b22066717d02
2019-11-21 11:03:29 -08:00
Michael Shen
6924c6e5a3
[FIX] fix match because trim removes leading/trailing whitespace ( #5356 )
2019-11-19 22:35:18 -08:00
Matthew Mosesohn
85c851f519
scale down coredns on each master during graceful upgrade ( #5344 )
...
This fixes the scenario where masters are upgraded one at a time
and coredns gets improperly scaled back up to 2 replicas.
Change-Id: I7cc9283f40efcfd61b5813c89a5805c95d901567
2019-11-18 00:13:41 -08:00
Yumo Yang
5cd7d1a3c9
modify host.yml in README.md ( #5338 )
2019-11-17 18:15:40 -08:00
Matthew Mosesohn
8b67159239
Do not run kubeadm upgrade on first deploy ( #5339 )
...
Change-Id: I68a962a9dd28c83ef07eaeaf53eb98287f38bca9
2019-11-14 02:05:34 -08:00
LuciferInLove
4f70da2731
Added Amazon Linux 2 support for deploying with docker ( #5301 )
2019-11-11 07:05:41 -08:00
Matthew Mosesohn
db5040e6ea
Set certs and files with kubeadm token to mode 0640 ( #5325 )
...
Change-Id: I298496e55a6889c158b2085fcadeda5e679a873e
2019-11-11 05:41:41 -08:00
Jacopo Secchiero
97764921ed
Fix calico name resolution ( #5291 )
2019-11-11 04:01:41 -08:00
Michée lengronne
a6853cb79d
library files added to setup.cfg ( #5274 )
...
It hopefully ensures the usability of Kubespray as pip.
2019-11-11 03:59:41 -08:00
Bjoern Teipel
8c15db53b2
Fix helm for Kubernetes 1.16.2 ( #5332 )
...
Since upgrading k8s beyond 1.16.0 version, helm init does
no longer work with helm < 2.16.0 due to
https://github.com/helm/helm/issues/6374
This PR closes issue #5331
2019-11-11 03:53:41 -08:00
Julien Pervillé
0200138a5d
Pass ingress_nginx_extra_args
when deploying the nginx-ingress addon ( #5321 )
2019-11-11 03:51:40 -08:00
Florent Monbillard
14af98ebdc
Respect cri-tool supported version matrix ( #5241 )
...
| Kubernetes Version | cri-tools Version |
|--------------------|-------------------|
| 1.16.x | v1.16.0 |
| 1.15.X | v1.15.0 |
| 1.14.X | v1.14.0 |
| 1.13.X | v1.13.0 |
| 1.12.X | v1.12.0 |
| 1.11.X | v1.11.1 |
- Upgrade to cri-tools 1.16.1
- Add checksums for cri-tools 1.16.1
2019-11-11 03:45:42 -08:00
YichenWong
8a5434419b
fix useradd etcd ( #5281 )
2019-11-11 03:27:41 -08:00
Quentin Gliech
8a406be48a
Fix indentation in cilium-ds.yml template ( #5305 )
2019-11-11 03:25:41 -08:00
Johannes Scheuermann
feac802456
Remove default docker_options from sample ( #5287 )
2019-11-11 03:23:40 -08:00
Junho Suh
076f254a67
Add cilium_tunnel_mode variable to the cilium config ( #5295 )
2019-11-11 03:19:42 -08:00
holmesb
bc3a8a0039
Fixes issue #5299 ( #5300 )
2019-11-11 03:13:41 -08:00
Dmitry Chusovitin
45d151a69d
containerd installation on Debian ( #5326 )
2019-11-11 02:41:41 -08:00
Matthew Mosesohn
bd014c409b
Skip coredns image when evaluating kubeadm images ( #5327 )
...
It will be enabled correctly in downloads
Change-Id: Ief0b7aa2a8ee2ba6a6849820802f8542584b2c04
Related-story: PRODX-1171
2019-11-09 00:51:39 -08:00
Michael Shen
08421aad3d
[FIX] fix incorrect link to downloads documentation ( #5319 )
2019-11-07 03:50:42 -08:00
Matthew Mosesohn
1c25ed669c
Remove unnecessary and risky reload network for resolvconf propagation ( #5322 )
...
Change-Id: I54d706f7941b4b86c4c6cd45340295577155b884
2019-11-06 10:11:52 -08:00
Matthew Mosesohn
a005d19f6f
Enable systemd-resolved DNS resolution mode ( #5318 )
...
Change-Id: If3e253a40782e03cde7fc4a91493517ae31fda17
2019-11-06 03:33:52 -08:00
Matthew Mosesohn
471589f1f4
Scale down coredns created by kubeadm upgrade to 0 replicas ( #5308 )
...
Change-Id: I128b0f9c1acbb956d9a6c4e5510b45a36e296af7
2019-11-05 03:34:38 -08:00
Ali Sanhaji
b0ee1f6cc6
Deploy Cinder CSI driver to provision volumes over OpenStack ( #5184 )
...
* Deploy Cinder CSI driver to provision volumes over OpenStack
* Deploy Cinder CSI StorageClass
* Cinder CSI doc
2019-11-01 00:59:24 -07:00
Pierre Ozoux
79128dcd6b
Removes repetition. ( #5310 )
2019-10-30 06:12:53 -07:00
Samina Fu
dd7e1469e9
Fix typo of docs/dns-stack ( #5307 )
2019-10-30 02:00:55 -07:00
Matthew Mosesohn
186ec13579
Fix incorrect suggestion to enable old k8s apis ( #5292 )
...
Change-Id: If965cc6aa0daaca232dcf2ca0efd649aa097497f
2019-10-30 01:58:53 -07:00
Matthew Mosesohn
2c4e6b65d7
Raise delay and retry for rotate tokens ( #5304 )
...
Change-Id: I87844b43b9a18064e7a99567ce57c1ca1ffcc4a8
2019-10-30 01:56:52 -07:00
Eric Lake
108a6297e9
Terraform dynamic inventory 0.12.12 ( #5298 )
...
* Update parsing of terraform state file for 0.12.12
* Resource does not seem to have a module element but instead has
provider
* Return the boolean right way if it is already a bool since a bool does
not have an lower method
* Remove the setting of ansible_ssh_user to root for all Packet
Not all servers in packet are accessed as root by default. CoreOS
systems use the `core` user. Removing this allows the user to specify
the remote user with an extra_var or in an ansible.cfg file.
* Default to root user for packet devices except on CoreOS
* Update TF_VERSION for packet in tf-validate-packet
Update TV_VERSION to 0.12.12 for gitlab-ci tf-validate-packet tests
* convert packet terraform files to TV_VERSION 4
* initalize terraform before copying the variable file to the top level dir
2019-10-29 00:02:42 -07:00
Matthew Mosesohn
94d4ce5a6f
Retry cleaning up calico-node container ( #5302 )
...
Change-Id: Iad27b107860213759c7ae51f0891d7e5e7c6d96b
2019-10-28 05:11:25 -07:00
Matthew Mosesohn
81da231b1e
Set cluster DNS in kubeadm config for kubelet dynamic config ( #5293 )
...
Change-Id: I23116efefe8626d361d1904fc6fb8448f66cf3c5
2019-10-25 02:23:40 -07:00
Ludovic Muller
1a87dcd9b9
readme: update url to the Kubernetes documentation page for Kubespray ( #5294 )
2019-10-24 22:39:39 -07:00
Matthew Mosesohn
a1fff30bd9
Generate TLS certs for calico typha ( #5258 )
...
* Generate TLS certs for calico typha
Change-Id: I3883f49c124c52d0fc5b900ca2b44e4e2ed0d707
* Add group vars note
Change-Id: I63550dfef616e884efdbd42010a90b2c04c5eb69
2019-10-17 07:02:38 -07:00
Sergey
81d57fe658
set calico_datastore default value in role kubespray-default ( #5259 )
2019-10-17 05:58:38 -07:00
Sergey
3118437e10
check on all cluster node - kubelet_max_pods <= (2 ** (32 - kube_network_node_prefix | int)) - 2 ( #5279 )
2019-10-17 05:48:38 -07:00