C12s/c12s-kubespray

Author	SHA1	Message	Date
cyril-corbon	418fc00718	fix: kube-dns service deletion (#8565 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-02-21 02:48:11 -08:00
Florian Ruynat	2537177929	Fix amazon docker version (#8564 )	2022-02-18 23:50:11 -08:00
Sander Klein	9af719bf99	This fixes the etcd node removal. (#8526 ) Since we are already on an etcd node while executing the commands, there is no need to find out an etcd IP because it is on localhost.	2022-02-18 07:20:23 -08:00
Cristian Calin	063fc525b1	nerdctl: upgrade to 0.16.1 (#8539 )	2022-02-16 02:04:37 -08:00
Mac Chaffee	0f73d87509	Allow pausing after upgrade but before uncordon (#8530 ) * Allow pausing after upgrade but before uncordon * Expand docs for upgrade pausing vars Signed-off-by: Mac Chaffee <me@macchaffee.com>	2022-02-15 16:39:02 -08:00
Cristian Calin	402e85ad6e	[calico] upgrade release checksums (#8544 ) * [calico] upgrade 3.19.x to 3.19.4 * [calico] upgrade 3.20.x to 3.20.4 * [calico] upgrade 3.21.x to 3.21.4 and make it the default * [calico] add 3.22.0 checksums * [calico] account for path changes in calico 3.21.4 crd archive and above	2022-02-15 16:35:02 -08:00
Tony Fouchard	1d635e04e4	Allow to specify a source address for metallb peerings, and target only some nodes using node selectors (#8534 )	2022-02-15 13:57:19 -08:00
kakkotetsu	98d5d0cdd5	add support for Dual Stack node InternalIP (#8542 )	2022-02-15 00:28:02 -08:00
kakkotetsu	1ebe456f2d	add support for Calico IP6_AUTODETECTION_METHOD (#8541 )	2022-02-14 17:26:14 -08:00
Cristian Calin	c6e5314fab	implement download mirrors support (#8474 ) * [download] add mechanism to support mirrors * [calico] support alternate download url	2022-02-14 13:19:32 -08:00
Tom Stian Berget	84b93090a8	Change Cilium setting identity_allocation_mode to cilium_identity_allocation_mode (#8519 ) * Change Cilium identity_allocation_mode to cilium_identity_allocation_mode * Change inventory sample	2022-02-08 14:04:35 -08:00
Byeonggon Lee	5695c892d0	Fix wrong port name in metallb.yml.j2 (#8510 )	2022-02-07 09:43:45 -08:00
Krystian Młynek	87928baa31	CRI-O: fix unqualified-search registries (#8496 )	2022-02-04 23:46:50 -08:00
mgiessing	6a4fd33a03	Added ppc64le support (#8505 ) * Added ppc64le support * Fixed linting errors	2022-02-04 00:14:00 -08:00
cyril-corbon	790448f48b	feat: update cert-manager to 1.7.0 (#8491 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-02-03 17:24:00 -08:00
Ilya Margolin	aed187e56c	Fix kubelet_kubelet_cgroups_cgroupfs (#8500 ) If kubelet is run with systemd (as it always is when using kubespray), it starts in systemd's /system.slice/kubelet.service cgroup. This commit prevents a creation and usage of a second unrelated cgroup.	2022-02-02 00:50:22 -08:00
Cristian Calin	5ecb07b59a	[nerdctl] upgrade to 0.16.0 (#8484 ) * [nerdctl] upgrade nerdctl to 0.16.0 * [nerdctl] add configuration file	2022-02-01 15:11:48 -08:00
Cristian Calin	ff621fb7f1	[ingress-nginx] upgrade to 1.1.1 (#8490 )	2022-02-01 09:50:11 -08:00
Michael Schmitz	eacd55fbca	Use sysctl_file_path variable for all sysctl_file locations (#8395 ) * Use sysctl_file_path variable for all sysctl_file locations * Add sysctl_file_path variable to kubespay-defaults * Remove previously used sysctl file locations if present * Use explicit filename in roles/kubernetes/node/defaults/main.yml * Defaults: use explicit value	2022-02-01 08:12:10 -08:00
Cristian Calin	c47634290e	[helm] upgrade to 3.8.0 (#8489 )	2022-02-01 06:34:12 -08:00
Tristan	92d612c3e0	8487: Allow override of default CoreDNS zone cache (#8488 ) Using the coredns_cluster_zone_cache_block variable	2022-02-01 00:48:18 -08:00
Ilya Margolin	2bbe5732b7	Add node label to etcd metrics (#8475 ) targetRef on endpoints surfaces as __meta_kubernetes_endpoint_address_target_kind/__meta_kubernetes_endpoint_address_target_name in prometheus and gets converted to the label `node` by prometheus-operator	2022-01-31 06:08:23 -08:00
Samuel Liu	e6e7fbc25f	fix reset containerd_storage_dir undefined (#8478 ) * fix reset containerd_storage_dir * add env to kubespray-defaults	2022-01-31 05:46:23 -08:00
Ilya Margolin	7d4d554436	Document host_resolvconf as default value for resolvconf_mode (#8493 ) refs #8247	2022-01-31 03:12:24 -08:00
cyril-corbon	d31db847b7	feat: update local path to v0.0.21 (#8492 )	2022-01-31 01:08:24 -08:00
Calin Cristian Andrei	ababcd5481	[kube] make 1.23.3 the new default	2022-01-31 00:22:24 -08:00
Calin Cristian Andrei	7caffde0b6	[kube] add 1.23.3 hashes	2022-01-31 00:22:24 -08:00
华忠啊	52f221f976	Adaptive Kube-ovn (#8454 )	2022-01-27 01:08:10 -08:00
Cristian Calin	26a5948d2a	[reset] remove containerd storage during reset (#8469 )	2022-01-26 05:10:01 -08:00
Florian Ruynat	d580014c66	Fix CI for Fedora (followup) + OpenSUSE Leap (update to 15.3) (#8407 ) * Fix fedora jobs - followup * Update OpenSUSE Leap to 15.3 * Fix cilium version in README + update minor 1.11.1	2022-01-24 23:24:30 -08:00
Calin Cristian Andrei	be9a1f80c1	[kube] make 1.23.2 the default version	2022-01-24 11:59:33 -08:00
Calin Cristian Andrei	73ff3b0d3b	[kubernetes] add hashes for 1.23.2, 1.22.6 and 1.21.9	2022-01-24 11:59:33 -08:00
cyril-corbon	9fce9ca42a	feat: upgrade azuredisk csi to v1.10.0 (#8432 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-01-24 00:41:56 -08:00
Cristian Calin	f1adb734e3	[cri-tools] add hashes for 1.23.0 (#8442 )	2022-01-24 00:21:56 -08:00
cyril-corbon	575e0ca457	feat: add eviction hard to kubelet config (#8421 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-01-24 00:13:57 -08:00
Alex	69f088bb82	add hash-values for runc v1.1.0 - first upstream runc version for multi-arch (#8447 )	2022-01-23 23:51:57 -08:00
Cristian Calin	ef34f5fe7d	[calico] switch default iptables backend detection to Auto (#8429 )	2022-01-23 23:47:57 -08:00
Victor Morales	e88aa7c96b	Add youki runtime support (#8411 )	2022-01-21 14:01:07 -08:00
Johann Schley	38d129a0b6	add external hcloud cloud controller manager (#8440 )	2022-01-20 12:31:09 -08:00
onock	392815d97c	[cert-manager] Fix missing RBAC rules for ClusterRole cert-manager-cainjector kubernetes-sigs#8104. (#8444 )	2022-01-20 12:17:09 -08:00
rtsp	e791089466	cert-manager: Fix incorrect leader election namespace lead to insufficient permission (#8433 )	2022-01-17 02:37:29 -08:00
Cristian Calin	418f12f62a	[calico] drop 3.18.x and make 3.21.x the new default (#8426 )	2022-01-17 02:29:29 -08:00
Necatican Yıldırım	caff539ccd	Add identity_allocation_mode support for Cilium (#8430 ) Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com> Signed-off-by: necatican <necaticanyildirim@gmail.com> Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>	2022-01-16 09:29:28 -08:00
Samuel Liu	1a69f8c3ad	parameterized snaphot controller namespaces (#8305 ) * Parameterized snaphot controller namespaces * add ns yml * add docs * namespace	2022-01-14 12:58:26 -08:00
rtsp	ccd3180a69	cert-manager: Allow to change leader election namespace for GKE Autopilot support (#8424 ) More information: - kubernetes-sigs/kubespray#8393 - jetstack/cert-manager#4102 - jetstack/cert-manager#3717	2022-01-14 12:54:26 -08:00
cyril-corbon	01dcbc18ac	feat: upgrade metallb to v0.11.0 (#8420 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-01-14 05:22:28 -08:00
Florian Ruynat	7c67ec4976	Fix kubectl call before installing it (#8412 )	2022-01-12 23:12:29 -08:00
Cristian Calin	1337c9c244	[csi-snapshotter] upgrade to 5.0 (#8403 )	2022-01-11 09:14:33 -08:00
cyril-corbon	86953b2ac4	fix: add tolerations / affinity to cert-manager (#8389 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-01-11 09:14:26 -08:00
Mathieu Parent	cfd9873bbc	Allow to choose container manager commands (#8380 ) This allow to workaround #8375 by using image_command_tool=crictl when containerd_registries is used for containerd. Also changes image_info_command_on_localhost for docker to return digests.	2022-01-11 01:13:16 -08:00
Samuel Liu	b2b95cc8f9	fix 0090-etchosts (#7634 )	2022-01-11 01:03:16 -08:00
Kenichi Omichi	73c889eb10	Fix failures of ansible-lint (#8401 ) This fixes the following types of failures: - empty-string-compare - literal-compare - risky-file-permissions - risky-shell-pipe - var-spacing In addition, this changes .gitlab-ci/lint.yml to block the same issue by using the same method at Kubespray CI.	2022-01-11 00:45:16 -08:00
Victor Morales	642725efe7	Bump containerd version to 1.5.9 (#8402 )	2022-01-11 00:05:16 -08:00
Cristian Calin	29aafff2ce	etcd: add 3.5.1 for kubernetes 1.23+ (#8320 )	2022-01-10 22:45:15 -08:00
forselli-stratio	df425ac143	Fix etcd certificates reference to support etcd_kubeadm_enabled:true (#7766 ) * Fix etcd certificates reference to support etcd_kubeadm_enabled:true * Add retries to ETCD Join Member task * Fix etcd certificates reference when etcd_kubeadm_enabled:true * Fix conflicts	2022-01-10 15:24:25 -08:00
Unai Arríen	57a1d18db3	Improve first_kube_control_plane variable management to avoid installation failures due to variable overlapping (#8388 )	2022-01-10 01:35:19 -08:00
rtsp	aa4a3d7afd	Fix container engine still installed on dedicated etcd node even if `etcd_deployment_type: host` (#8386 )	2022-01-10 01:35:12 -08:00
Alex	06ad5525b8	replace runc 1.0.3 arm64 hash with 0 (#8391 )	2022-01-10 01:31:13 -08:00
Kenichi Omichi	f80fd24a55	Fix risky-file-permissions (#8370 ) When running ansible-lint directly, we can see a lot of warning message like risky-file-permissions File permissions unset or incorrect This fixes the warning messages.	2022-01-09 01:51:12 -08:00
Kenichi Omichi	51bd9bee0d	Move containerd_version to defaults/main.yml (#8379 ) All container image versions were defined in download/defaults/main.yml except containerd. The inconsistency caused the offline script(generate_list.sh) could not output the URL of containerd image. This moves the definition into a valid file. In addition, this adds host_os to generate_list.sh for downloading krew from a valid URL.	2022-01-09 01:47:12 -08:00
Victor Morales	52266406f8	Bump cert-manager version to v1.6.1 (#8377 )	2022-01-07 16:45:34 -08:00
cyril-corbon	cd601c77c7	feat: upgrade metrics server to v0.5.2 (#8338 ) Signed-off-by: Cyril Corbon <corboncyril@gmail.com>	2022-01-07 08:18:33 -08:00
Florian Ruynat	6abae713f7	Update helm / kube-router and coredns (#8382 ) * Update kube-router to 1.4.0 * Update Helm to 3.7.2 * Up coredns to 1.8.6 when k8s is 1.23.x	2022-01-06 12:14:27 -08:00
Alex	1312f92a8d	adding 0 checksum for kata_containers_version on arm(64) (#8383 )	2022-01-06 12:08:27 -08:00
Unai Arríen	92abf26d29	Ensure taint configuration for secondary control-plane nodes (#8363 )	2022-01-05 23:56:28 -08:00
Bart Sloeserwij	59f62473c9	Update configuration of registries in cri-o (#7852 ) * Update configuration of registries in cri-o * Update docs to match new registry configuration	2022-01-05 07:36:40 -08:00
Choi Yongbeom	dda557ed23	Update config.toml.j2 (#8340 ) * Update config.toml.j2 i think this commit code is not completed works exam registry address : a.com:5000 insecure registry must be http://a.com:5000 but this code add insecure a.com:5000 (without http://) If there is no http, containerd accesses with https even if insecure_skip_verify = true solution is code edit * Update config.toml.j2 * Update containerd.yml * Update containerd.yml * Update containerd.yml * Update config.toml.j2	2022-01-05 02:56:33 -08:00
Max Gautier	cb54eb40ce	Use a variable for standardizing kubectl invocation (#8329 ) * Add kubectl variable * Replace kubectl usage by kubectl variable in roles * Remove redundant --kubeconfig on kubectl usage * Replace unecessary shell usage with command	2022-01-05 02:26:32 -08:00
Cristian Calin	3eab1129b9	CI: Replace CentOS 8 with AlmaLinux 8 before CentOS 8 EOL end of 2021 (#8297 )	2022-01-05 02:20:33 -08:00
Choi Yongbeom	24f1402a14	nerdctl insecure registry config (#8339 ) * Update prep_download.yml nerdctl insecure registry config * Update prep_download.yml * Update prep_download.yml apply conversations advice * Update prep_download.yml * Update prep_download.yml * Update prep_download.yml * Update prep_download.yml * Update prep_download.yml * Update prep_download.yml * Update main.yml * Update main.yml * Update prep_download.yml * Update prep_download.yml	2022-01-05 01:14:33 -08:00
Necatican Yıldırım	bf00550388	Upgrade Cilium to 1.11.0 (#8354 ) * Remove kvstore args from Cilium DaemonSet Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com> Signed-off-by: necatican <necaticanyildirim@gmail.com> * Bump Cilium to 1.11.0 Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com> Signed-off-by: necatican <necaticanyildirim@gmail.com> Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>	2022-01-05 00:36:32 -08:00
Florian Ruynat	6136fa7c49	Update Kubernetes version to 1.23.1	2022-01-04 10:25:00 -08:00
Florian Ruynat	8d2b4ed4a9	Move min k8s version to 1.21	2022-01-04 10:25:00 -08:00
Cristian Calin	4c4c83f0a1	crun update to 1.4 (#8330 ) * [crun] update crun to 1.4 * [crun] drop pre-1.x versions	2022-01-04 08:30:53 -08:00
Unai Arríen	0e98814732	Configure PriorityClassName for MetalLB deployment (#8362 )	2022-01-04 08:20:52 -08:00
Max Gautier	92f25bf267	Simplify usage of pre-remove role (#8334 ) - Use builtin task scheduling of ansible (same task on each host) instead of manual looping on master Benefits: - One less play in remove-node.yml playbook - Parralel node drain - Drain parameters (timeout, grace period, retries, allow_ungraceful_removal) can be adjusted separately for each node with ansible variables	2022-01-04 07:10:53 -08:00
Romain ALBON	63a53c79d0	Fix - Search root filesystem device (#8366 )	2022-01-04 06:48:52 -08:00
Florian Ruynat	841c61aaa1	Revert "Fix external lb error (#8299 )" (#8360 ) This reverts commit `4f2e4524b8`.	2022-01-03 01:37:00 -08:00
Samuel Liu	157942a462	fix resolved config (#8351 )	2022-01-03 00:06:59 -08:00
jbpratt	e88a27790c	fix spelling error (#8342 )	2022-01-02 23:55:00 -08:00
Cristian Calin	ed3932b7d5	[cni-plugins] upgrade to stable 1.0.1 (#8331 ) * [cni-plugins] upgrade to stable 1.0.1 * [flannel] use binary from dedicated project	2021-12-23 23:16:15 -08:00
emiran-orange	2b5c185826	calico_pool_blocksize must be cast as well in assertion when defined (#8321 ) * calico_pool_blocksize must be cast as string in assertion when defined * Cast as int rather than string	2021-12-23 00:58:37 -08:00
zhengtianbao	c3c128352f	Remove registry-proxy (#8327 )	2021-12-21 23:55:35 -08:00
zhengtianbao	02a89543d6	registry: add ingress support (#8311 )	2021-12-21 10:20:46 -08:00
Cristian Calin	c1954ff918	Support deploying kubernetes 1.23 (#8323 ) * Ensure entries for 1.23 are added for supported_versions vars * cri-o: add support for kubernetes 1.23 but still use cri-o 1.22 * kubescheduler-config: diferentiate config versions based on kube_version	2021-12-21 01:38:46 -08:00
Kenichi Omichi	b49ae8c21d	Delete "kubeadm alpha certs" code (#8322 ) "kubeadm alpha certs" command has been promoted to "kubeadm certs" command, and "kubeadm alpha certs" has been deprecated since Kubernetes v1.20 as [1]. In addition, Kubespray supports Kubernetes v1.20+. This delete the deprecated command for cleanup. [1]: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#deprecation	2021-12-20 12:53:33 -08:00
Calin Cristian Andrei	1a7b4435f3	Bump default version of kubernetes to 1.22.5	2021-12-20 08:56:56 -08:00
Calin Cristian Andrei	db0e458217	Kubernetes: add hashes for v1.23.1, v1.23.0, v1.22.5, v1.21.8 and v1.20.14	2021-12-20 08:56:56 -08:00
Nicolas MASSE	f01f7c54aa	Add support for CRI-O user namespaces (#8268 ) * add support for cri-o user namespaces * comply with yamllint rules	2021-12-20 06:37:25 -08:00
kakkotetsu	c59407f105	add support for Calico BGPPeer sourceAddress (#8306 )	2021-12-20 01:51:25 -08:00
Cristian Calin	fdc5d7458f	Upgrade to nerdctl 0.15.0 and some fixes (#8315 ) * nerdctl: move to 0.15.0 * nerdctl: reduce verbosity when pulling images * download: use proxy environment when using nerdctl to download containers	2021-12-20 00:33:26 -08:00
Antoine Gatineau	6aafb9b2d4	fix bad indentation (#8314 )	2021-12-17 07:36:29 -08:00
Samuel Liu	aa9ad1ed60	clean files for kube-ovn (#8310 )	2021-12-15 23:39:19 -08:00
zhengtianbao	aa9b8453a0	registry: service add clusterIP, nodePort, loadBalancer support (#8291 ) * registry: service add clusterIP, nodePort, loadBalancer support * modify camelcase name to underscore * Add registry service type compatibility check	2021-12-15 00:18:19 -08:00
singeleaf	4f2e4524b8	Fix external lb error (#8299 )	2021-12-13 14:46:27 -08:00
Marat Talipov	4f27c763af	containerd insecure registry support (#8298 )	2021-12-13 00:41:58 -08:00
Cristian Calin	0e969c0b72	vSphere-CSI: update to 2.4.0 (#8295 )	2021-12-10 11:07:23 -08:00
Steven Reitsma	b396801e28	Update Cinder CSI to v1.22 (#8296 )	2021-12-10 10:49:11 -08:00
Cristian Calin	682c8a59c2	containerd: change default resolvconf_mode to host_resolvconf (#8247 ) * containerd: change default resolvconf_mode to host_resolvconf * Wait for kube-apiserver to come back after pod refresh * Handle resolv.conf gracefully * Retain currently configured DNS entries to ensure we don't break the resolvers * Suse uses wickedd for network management so no dhcp hooks * Molecule: increase ansible timeout * CI: Increase ansible timeout to 120s for Packet jobs	2021-12-09 14:09:06 -08:00
Florian Ruynat	5a25de37ef	Revert "remove no longer present etcd nodes from APIEndpoints list in kubeadm-config configmap (#8244 )" (#8287 ) This reverts commit `dc767c14b9`.	2021-12-09 08:24:16 -08:00
zhengtianbao	4ef2cf4c28	Registry add TLS and authentication support (#8229 ) * Add registry TLS support * Add registry configmap and htpasswd auth	2021-12-07 08:32:00 -08:00
Cristian Calin	990ca38d21	Kata-Containers: add 2.3.0 (#8276 ) * Kata-Containers: add checksums for 2.3.0 * Kata-Containers: version 2.3.0 requires kubernetes 1.22.0+	2021-12-07 08:18:08 -08:00
Cristian Calin	c7e430573f	Calico: upgrade 3.21.x to 3.21.2 (#8275 )	2021-12-07 08:18:01 -08:00
Cristian Calin	a328b64464	runc: upgrade to v1.0.3 (#8274 )	2021-12-07 06:10:02 -08:00
zhengtianbao	a16d427536	Set etcd-events listen port to 2383 (#8232 )	2021-12-07 00:28:01 -08:00
Cristian Calin	c98a07825b	Use cgroupsv2 where available (fedora) (#8237 ) * Containerd: use cgroupsv2 where available (fedora) * Docker: use cgroupsv2 where available (fedora) * cri-o: use cgroupsv2 where available (fedora)	2021-12-06 11:19:33 -08:00
Samuel Liu	a98ca6fcf3	Update loadbalancers versions (#8272 ) * Update loadbalancers versions * fix haproxy_config_dir mode	2021-12-06 09:40:32 -08:00
Samuel Liu	4550f8c50f	calico_flexvol (#8273 )	2021-12-06 05:00:32 -08:00
toplordsaito	9afca43807	change dns upstream condition for coredns (#8263 ) upstream_dns_servers should change corefile config even resolvconf_mode=docker_dns	2021-12-06 02:46:32 -08:00
Alvaro Campesino	27ab364df5	Improve control plane scale flow (#13 ) (#7989 ) * Improve control plane scale flow (#13) * Added version 1.20.10 of K8s * Setting first_kube_control_plane to a existing one * Setting first_kube_control_plane to a existing one * change first_kube_master for first_kube_control_plane * Ansible-lint changes	2021-12-06 00:16:32 -08:00
Hanna Bledai	615216f397	Fix if bind-address is not set to 0.0.0.0 (#8262 ) * if bind-address is not set to 0.0.0.0 * Update docs and left comments * fix yamllist check: remove space	2021-12-05 23:58:32 -08:00
Kenichi Omichi	46b1b7ab34	Fix k8scsi/csi-resizer repo (#8270 ) If trying to pull k8scsi/csi-resizer image from gcr.io, we face the error like: $ docker pull gcr.io/k8scsi/csi-resizer:v1.0.0 Error response from daemon: Head https://gcr.io/v2/k8scsi/csi-resizer/ manifests/v1.0.0: unknown: Project 'project:k8scsi' not found or deleted. $ We can pull the image from quay.io instead. This fixes the issue.	2021-12-05 23:42:32 -08:00
Alvaro Campesino	30d9882851	Add nodelocaldns only if it is enabled (#7731 )	2021-12-03 20:36:31 -08:00
Cristian Calin	dfdebda0b6	Calico: remove duplicate values for CALICO_DISABLE_FILE_LOGGING and FELIX_DEFAULTENDPOINTTOHOSTACTION (#8269 )	2021-12-03 20:32:31 -08:00
Cristian Calin	9d8a83314b	containerd: add hashes for 1.5.8 and 1.4.12 and make 1.5.8 the new default (#8239 ) * containerd: add hashes for 1.5.8 and 1.4.12 and make 1.5.8 the new default * containerd: make nerdctl mandatory for container_manager = containerd * nerdctl: bump to version 0.14.0 * containerd: use nerdctl for image manipulation * OpenSuSE: install basic nerdctl dependencies	2021-12-03 12:20:35 -08:00
Florian Ruynat	e19ce27352	Remove ovn4nfv support (#8265 )	2021-12-03 11:56:35 -08:00
Cristian Calin	4d711691d0	Fix calico crd archive checksums (#8266 ) v3.20.3 and v3.21.1 were re-released with new checksums	2021-12-03 04:56:27 -08:00
Samuel Liu	ee0f1e9d58	Update etcd-servers for apiserver (#8253 )	2021-12-03 00:28:27 -08:00
Cristian Calin	9f052702e5	containerd: add support for suse distributions (#8261 )	2021-12-02 07:51:33 -08:00
Florian Ruynat	b38382a68f	Move cri-o default package to 1.22 (#8258 )	2021-12-02 06:21:34 -08:00
zhengtianbao	785324827c	Set ingress-nginx default terminationGracePeriodSeconds to 5 min (#8252 ) * set ingress-nginx default terminationGracePeriodSeconds to 5 min for the drain of connection * Add ingress_nginx_termination_grace_period_seconds at sample inventory	2021-12-02 03:23:33 -08:00
Cristian Calin	31c7b6747b	Calico: add dependencies for 3.21.x (#8250 )	2021-12-02 01:17:33 -08:00
Alvaro Campesino	dc767c14b9	remove no longer present etcd nodes from APIEndpoints list in kubeadm-config configmap (#8244 )	2021-12-01 07:17:15 -08:00
Florian Ruynat	30ec03259d	Remove fedora33 - eol (#8246 )	2021-11-30 15:53:17 -08:00
Florian Ruynat	0e22a90579	Update docker to 20.10.11 with containerd 1.4.12 (#8255 )	2021-11-30 11:49:01 -08:00
Cristian Calin	ee882fa462	Add capability to use swap, requires Kube 1.22 (#8241 ) * Alpha-NodeSwap: allow nodes to use swap * CI: Add Fedora 35 with experimental swap job	2021-11-30 00:52:56 -08:00
Cristian Calin	3431ed9857	containerd: properly pull images with containerd specific tools (#8245 )	2021-11-30 00:48:56 -08:00
Florian Ruynat	279808b44e	Update minor version for kata/cilium/kube-router/helm	2021-11-29 23:06:56 -08:00
Florian Ruynat	2fd529a993	Update Kubernetes version to v1.22.4	2021-11-29 23:06:56 -08:00
Florian Ruynat	1f6f79c91e	Update kubernetes hashes with 1.22.4/1.21.7/1.20.13	2021-11-29 23:06:56 -08:00
Cristian Calin	2f44b40d68	OEL7: Fix CentOS7 Extras for OEL7 (#8219 ) * OEL7: Fix CentOS7 Extras for OEL7 * Molecule: add logs collection for jobs	2021-11-29 13:39:21 -08:00
Cristian Calin	20157254c3	Update calico versions (#8238 ) * Calico: Bump 3.20.x to 3.20.3 * Calico: Bump 3.18.x to 3.18.6 * Calico: add calico 3.21.1 hashes	2021-11-29 01:15:22 -08:00
Florian Ruynat	a5f88e14d0	Cleanup tests (#8234 ) * Add Fedora 35 image, support and CI * Cleanup tests and allow_failure for vagrant	2021-11-26 09:00:51 -08:00
Cristian Calin	e78bda65fe	Defaults: replace docker with containerd as our default container_manager (#8175 ) * Defaults: replace docker with containerd as our default container_manager * CI: Use docker for download_localhost test * Defaults: with container_manager=containerd we need etcd_deployment_type=host * CI: Run weave jobs with docker * CI: Vagrant don't download_force_cache * CI: Fix upgrade tests * should run compatible with old settings, this means docker * we need to run with a distro that has at least modern containerd, this means move from debian9 to debian10 to allow `containerd_version` to match between 2.17 and master	2021-11-25 06:54:33 -08:00
khatrig	3ea496013f	Create reset.yml (#8227 )	2021-11-24 09:44:20 -08:00
ishizuka	7e1873d927	DeprecationWarning occurs when indentfirst=None is specified in coredns-config.yml.j2 (#8224 )	2021-11-24 08:56:21 -08:00
zhengtianbao	e35a87e3eb	Update registry template (#8198 ) * Add registry replica setting * Add registry liveness and readiness probe * Set the security context for registry * Add registry pvc access mode option * registry add replica requirement check * docs: add registry replicas setting note * Update docs/kubernetes-apps/registry.md Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com> Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>	2021-11-22 02:45:09 -08:00
zhengtianbao	a6fcf2e066	Enable experimental modules when rpm-ostree version >= 2021.9 (#8202 ) * Enable experimental modules when rpm-ostree version >= 2021.9 * cleanup code	2021-11-22 02:29:09 -08:00
Cristian Calin	c74e1c9db3	CI: use images from quay.io to prevent being throttled by docker hub (#8209 ) * CI: use netchecker images from quay to prevent throttling * Molecule: use hello-world image from quay.io	2021-11-19 13:23:40 -08:00
Florian Ruynat	be9de6b9d9	Fix debian 9 check for apt cache update (#8215 )	2021-11-19 09:02:51 -08:00
Pasquale Toscano	fe8c843cc8	Fix typo in Containerd configuration (#8206 )	2021-11-19 08:40:53 -08:00
Łukasz Żułnowski	83e0b786d4	Fix wrong baseurl for centos extra repo for Oracle Linux (#8208 )	2021-11-18 23:44:51 -08:00
Cristian Calin	acd5185ad4	Fix fedora reset (#8205 ) * Reset: Fedora uses NetworkManager * CI: test reset on fedora	2021-11-18 16:46:51 -08:00
Mathieu Parent	0263c649f4	Allow to scrape etcd metrics using a service (#8203 ) Signed-off-by: Mathieu Parent <math.parent@gmail.com>	2021-11-17 23:53:01 -08:00
Lubos Mercl	424163c7d3	add gce support (#8179 ) Author: lmercl <lubos.mercl@gmail.com> Date: Wed Nov 10 15:30:04 2021 +0000 fix markdown	2021-11-16 08:58:28 -08:00
IKRozhkov	2c87170ccf	Allow setting 'auto-assign' property to 'false' for default IP pool (Metallb addon) (#8193 ) * add metallb auto-assign property for main IP range & update addons.yml for sample inventory * add new line at the end of file roles\kubernetes-apps\metallb\defaults\main.yml * set default value for matallb_auto_assign = true	2021-11-16 05:06:27 -08:00
zhengtianbao	02322c46de	Remove helm duplicate check (#8196 )	2021-11-15 12:50:48 -08:00
EDGsheryl	4d79a55904	Remove extra parameter kube_proxy_remove (#8158 ) Signed-off-by: EDGsheryl <edgsheryl@gmail.com>	2021-11-15 00:02:48 -08:00
Samuel Liu	027cbefb87	change krew uri to krew_download_url (#8190 )	2021-11-14 12:08:47 -08:00
zhengtianbao	a08d82d94e	calico add support for container ip forwarding setting (#8184 )	2021-11-12 19:06:46 -08:00
zhengtianbao	5f1456337b	Fix krew auto completion command not found at lower version (#8185 )	2021-11-12 17:04:46 -08:00
Ajarmar	b5a5478a8a	Added tolerations for cinder-csi-nodeplugin DaemonSet (#8137 )	2021-11-11 11:48:07 -08:00
Cristian Calin	b7ae4a2cfd	Kata-Containers: Fix kata-containers runtime (#8068 ) * Kata-containes: Fix for ubuntu and centos sometimes kata containers fail to start because of access errors to /dev/vhost-vsock and /dev/vhost-net * Kata-containers: use similar testing strategy as gvisor * Kata-Containers: adjust values for 2.2.0 defaults Make CI tests actually pass * Kata-Containers: bump to 2.2.2 to fix sandbox_cgroup_only issue	2021-11-09 10:01:48 -08:00
Cristian Calin	039205560a	nodelocaldns: allow a secondary pod for nodelocaldns for local-HA (#8100 ) * nodelocaldns: allow a secondary pod for nodelocaldns for local-HA * CI: add job to test nodelocaldns secondary	2021-11-09 09:57:47 -08:00
Cristian Calin	801268d5c1	containerd: upgrade versions 1.4.11 and 1.5.7 and make 1.4.11 the default (#8129 )	2021-11-09 06:59:47 -08:00
zhengtianbao	46c536d261	Add krew auto completion (#8171 )	2021-11-09 02:43:39 -08:00
Cristian Calin	4a8757161e	Docker: replace the use of containerd_version with docker_containerd_version to avoid causing conflicts when bumping containerd_version (#8130 )	2021-11-08 15:56:49 -08:00
zhengtianbao	65540c5771	krew: update to v0.4.2 (#8168 ) krew release urls changed since v0.4.2, clearly OS type and arch inside the filename. from: https://github.com/kubernetes-sigs/krew/releases/download/v0.4.1/krew.tar.gz to: https://github.com/kubernetes-sigs/krew/releases/download/v0.4.2/krew-linux_amd64.tar.gz define `host_os` like `host_architecture` determine which OS is krew installed at.	2021-11-08 02:54:59 -08:00
Max Gautier	6c1ab24981	Limit kubectl delete node to k8s nodes (#8101 ) * Limit kubectl delete node to k8s nodes This avoids the use of `kubectl delete node` when removing etcd nodes which are not part of the cluser (separate etcd) * Take errors into account when deleting node There should not be error now that we're limiting the deletion to nodes actually in the cluster * Retrying on error	2021-11-08 02:22:58 -08:00
Hyojun Jeon	61c2ae5549	Add vxlanEnabled spec in FelixConfiguration (#8167 )	2021-11-08 00:06:52 -08:00
zhengtianbao	04711d3b00	Replace path_join to support Ansible 2.9 (#8160 )	2021-11-08 00:00:52 -08:00
Kenichi Omichi	cb7c30a4f1	Fix cloud_provider check (#8164 ) This fixes the preinstall check for cloud_provider option based on inventory/sample/group_vars/all/all.yml	2021-11-07 23:48:52 -08:00
Álvaro Torres Cogollo	8922c45556	Added ArgoCD kubernetes-app (#7895 ) * Added ArgoCD kubernetes-app * Update argocd_version to latest	2021-11-07 02:22:51 -08:00
Emin AKTAS	58390c79d0	Bump crun version 1.2 to 1.3 (#8162 ) Signed-off-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com> Co-authored-by: Necatican Yıldırım <necaticanyildirim@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com> Co-authored-by: Necatican Yıldırım <necaticanyildirim@gmail.com>	2021-11-06 02:26:50 -07:00
Antoine Gatineau	b7eb1cf936	cert-manager: add trusted internal ca when configured (#8135 ) * cert-manager: add trusted internal ca when configured * wrong check for inventory variable * Update documentation	2021-11-05 09:43:52 -07:00
Pasquale Toscano	6e5b9e0ebf	Fix Kubelet and Containerd when using cgroupfs as cgroup driver (#8123 )	2021-11-05 07:59:54 -07:00
Marcus Fenner	c94291558d	Fix containerd install for fcos (#8107 ) * Fix containerd install for fcos * rm orphaned runc and containerd binaries	2021-11-05 07:53:53 -07:00
Florian Ruynat	1c3d082b8d	fix calico crds hashes for 3.20.2 (#8157 )	2021-11-04 10:38:04 -07:00
zhengtianbao	9d4cdb7b02	Ensure addon-resizer 1.8.11 only effective at arch amd64. (#8144 ) * Ensure addon-resizer 1.8.11 only effective at arch amd64. k8s.gcr.io/addon-resizer:1.8.11 returns the amd64 image which is not executable at arm64. Disable addon-resizer when the platform is not amd64. When metrics-server upgrade and use addon-resizer:2.3, then revert this commit and `image_arch` will determine the `addon_resizer_image_tag`. * Add metrics_server_resizer architectures check	2021-11-01 08:21:19 -07:00
Florian Ruynat	b353e062c7	Update default k8s version to 1.22.3	2021-10-29 10:43:44 -07:00
Florian Ruynat	d8f9b9b61f	Update hashes for version v1.20.12/v1.21.6/v1.22.3	2021-10-29 10:43:44 -07:00
Sergey	0b441ade2c	nginx ingress controller should watch kind:ingress without class (#8128 )	2021-10-28 11:48:59 -07:00
Krystian Młynek	6f6fad5a16	Calico: add missing verbs in ClusterRole (#8136 )	2021-10-28 11:11:01 -07:00
brainfair	465ffa3c9f	Weave: add extra_args for weave-npc (#8140 ) * add weave_npc_extra_args in template * add defaults weave_npc_extra_args * add sample for weave_npc_extra_args	2021-10-28 08:58:27 -07:00
vatech_seungjin	539c9e0d99	added hirsute in restart network (#8134 ) restarting network in ubuntu 21.04 fails and checked the restart menu and found that hirsute was missing in the argument : )	2021-10-27 15:19:10 -07:00
irizzant	649f962ac6	Metrics-server Deployment has incongruencies in resources requests/limits (#8088 ) * fix(metrics-server): update defaults * fix(metrics-server): typo error	2021-10-27 15:15:11 -07:00
Gheorghe Isak	16bdb3fe51	set check_mode to false (#8133 )	2021-10-26 19:36:37 -07:00
Sébastien Masset	7c3369e1b9	Fixed default DNS min replica for single node clusters (#8112 )	2021-10-26 16:03:46 -07:00
Florian Ruynat	9eacde212f	Fix quorum check when recovering broken etcd cluster (#8126 )	2021-10-26 15:23:09 -07:00
Florian Ruynat	331647f4ab	Remove deprecated Ambassador ingress code (#8086 )	2021-10-26 15:19:09 -07:00
Mohamed Zaian	d8d01bf5aa	nginx-ingress: bump to 1.0.4 (#8114 ) * Disable builtin ssl_session_cache solving the problem with OpenSSL consuming memory. * Print warning only instead of error if no IngressClass permission is available.	2021-10-24 15:34:22 -07:00
Julio H Morimoto	d42b7228c2	Convert numbers to string for calico's inventory check. (#8120 ) Fix https://github.com/kubernetes-sigs/kubespray/issues/8119 Signed-off-by: Julio Morimoto <julio@morimoto.net.br>	2021-10-24 11:42:21 -07:00
Damian Szeluga	4db057e9c2	Allow changing metallb default pool name (#8111 )	2021-10-22 09:38:39 -07:00
Cristian Calin	ea8e2fc651	containerd: download containerd from upstream instead of using distro specific packages (#7970 ) * Containerd: download containerd from upstream instead of using distro specific packages split runc download to separate role make bootstrap-os role deploy container-selinux and seccomp libraries clean up package manager provided containerd move variables to docker role that are no longer common with containerd * Containerd: make molecule testing more relevant * replace ubuntu18 with ubuntu20 * add centos8 and debian11 to molecule tests * run kubernetes/preinstall role to ensure relevancy of test including dependency packages * CI: adjust test scenarios for downloaded containerd	2021-10-20 08:47:58 -07:00
Utku Özdemir	10c30ea5b1	Add fallback to node drain using --disable-eviction flag (#8094 ) * Add fallback to node drain using --disable-eviction flag Signed-off-by: Utku Ozdemir <uoz@protonmail.com> * Move drain fallback tasks to separate file Signed-off-by: Utku Ozdemir <uoz@protonmail.com> * Add delegate_facts to fix the drain fallback Signed-off-by: Utku Ozdemir <uoz@protonmail.com> * Fix ansible-lint error Signed-off-by: Utku Ozdemir <uoz@protonmail.com> * Move drain fallback into block Signed-off-by: Utku Ozdemir <uoz@protonmail.com>	2021-10-20 00:51:58 -07:00
Kenichi Omichi	19d07a4f2e	Fix ownership related to Calico (#8072 ) kube-bench scan outputs warning related to Calico like: * text: "Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)" * text: "Ensure that the Container Network Interface file ownership is set to root:root (Manual)" This fixes these warnings.	2021-10-19 17:35:57 -07:00
Cristian Calin	6a5b87dda4	netchecker: update images to 1.2.2 from Mirantis (#8074 ) * netchecker: update images to 1.2.2 from Mirantis which is slightly less ancinet than the l23networks images * Netchecker: use local etcd instead of kubernetes v1beta1 crds which are no longer suported by kube 1.22+	2021-10-19 10:17:04 -07:00
Omar Aloraini	6aac59394e	Rocky Linux support (#8095 ) * Add Rocky as a known OS * Make sure Rocky includes bootstrap-centos.yml * Update docs with Rocky Linux * Rocky Linux wireguard and EPEL * Rocky Linux in the list of supported distributions	2021-10-19 08:29:04 -07:00
Florian Ruynat	f147163b24	Up dashboard version to 2.4.0 - fix forgotten kubeovn version (#8085 )	2021-10-15 05:40:54 -07:00
Florian Ruynat	16bf3549c1	Update kube-ovn to 1.8.1	2021-10-14 19:42:54 -07:00
Florian Ruynat	b912dafd7a	Update multus to 3.8.0	2021-10-14 19:42:54 -07:00
efrikin	8b3481f511	Add molecule tests for roles (#8080 ) * Add molecule tests for bastion-ssh-config * Add molecule tests for adduser * Update .gitignore	2021-10-14 18:46:54 -07:00
Olivier Levitt	7019c2685d	Increase cpu limit to prevent throttling (#8076 )	2021-10-14 11:03:36 -07:00
Mohamed Zaian	d18cc38586	Replcae deprecated --delete-local-data in pre-remove/pre-upgrade tasks (#8081 )	2021-10-14 02:25:19 -07:00
Cristian Calin	cee481f63d	cert-manager: upgrade to 1.5.4 (#8069 ) * cert-manager: update to 1.5.4 * cert-manager: remove outdated guidelines on creating an initial ClusterIssuer	2021-10-12 09:17:47 -07:00
Max Gautier	e4c8c7188e	etcd: deploy container engine if needed (#7532 ) If the etcd cluster is separate and the etcd_deployment_type is "host", there is no need for a container engine on the etcd nodes Do not rely on a 'default(true)' filter, but define a proper default in kubespray-defaults depending on etcd deployment method and if internal or external etcd is used	2021-10-12 00:31:47 -07:00
rtsp	6c004efd5f	cert_manager: Remove deprecated ClusterIssuer and its Secret (#8064 )	2021-10-11 09:40:40 -07:00
Necatican Yıldırım	1a57780a75	Add kubeadm_join_phases_skip variable (#8067 ) * Add kubeadm_join_phases_skip variable * Update kubeadm_join_phases_skip comment Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com> * Add kubeadm_join_phases_skip_default variable to follow the same logic with kubeadm_init_phases_skip Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>	2021-10-11 09:36:41 -07:00
Maciej Wereski	ce25e4aa21	MetalLB: update to v0.10.3 (#8071 ) Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>	2021-10-11 08:54:40 -07:00
Rene Luria	ef4044b62f	csi_driver / cinder: implement rescan-on-resize variable via (#8057 ) cinder_csi_rescan_on_resize	2021-10-11 02:14:40 -07:00
Florian Ruynat	c8d9afce1a	Update a bunch of tools (#8061 )	2021-10-08 09:00:59 -07:00
Florian Ruynat	285983a555	Update docker version to 20.10.9 - CVE fixes (#8060 )	2021-10-08 08:56:58 -07:00
Cristian Calin	ab4356aa69	Calico: bump default version to 3.20.2 (#8058 )	2021-10-07 12:59:33 -07:00
Maxim Pogozhiy	5fcf047191	local-volume-provisioner quay.io -> k8s.gcr.io (#8054 )	2021-10-06 17:08:41 -07:00
Rene Luria	e707f78899	After upgrade, allow cilium to be back before uncordoning (#7978 ) * After upgrade, allow cilium to be back before uncordoning * add eol * use kube_config_dir variable resolves https://github.com/kubernetes-sigs/kubespray/pull/7978#discussion_r721685549	2021-10-05 12:56:58 -07:00
Ilya Margolin	41e0ca3f85	Move kube_feature_gates to kubelet config (#8048 ) to remove deprecation warning: > Flag --feature-gates has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag.	2021-10-05 06:07:10 -07:00
Iago Santos	43958614e3	Fix kubespray flatcar ansible_os_family and ansible_distribution (#8029 ) Closes https://github.com/kubernetes-sigs/kubespray/issues/8028 Signed-off-by: Iago Santos <iago.santos.pardo@adfinis.com>	2021-10-01 09:11:23 -07:00
rtsp	af04906b51	Ensure apparmor is installed (#8036 ) Kubespray deployment failed when using containerd backend on nodes that apparmor was not installed or previously removed. This PR ensure apparmor is installed by adding it into required_pkgs var.	2021-09-29 23:52:08 -07:00
Cristian Calin	c7e17688b9	gVisor: bump release to 20210921 version (#8015 ) * gVisor: bump release to 20210921 version * gVisor: drop support for 20210518.0 version	2021-09-29 11:35:20 -07:00
Peter Pan	f5885d05ea	In CentOS 8.x Docker install Step: remove podman when existing (#8016 )	2021-09-29 06:32:48 -07:00
Frank Filippone	eee2eb11d8	Update weave template to match source for 2.8.1 (#8013 )	2021-09-28 09:16:43 -07:00
Kenichi Omichi	8d3961edbe	Add metrics_server_resizer option (#8018 ) The addon-resizer container can reduce resource limits of cpu and memory of metrics-server container in the pod, and that caused OOMKilled. In addition, the original metrics-server manifest doesn't contain the addon-resizer container as [1]. So this adds metrics_server_resizer option to control the addon-resizer container deployment and the default value is false to make it stable for most environments. [1]: `527679e5e8/manifests/base/deployment.yaml`	2021-09-28 00:02:42 -07:00
Marcos Lorenzo	4c5328fd1f	Determine root filesistem device and partition before running growpart (#8024 )	2021-09-27 23:58:42 -07:00
David Louks	1472528f6d	check if 'plugins' key exists in calico_cni_config object (#7717 ) * check if 'plugins' key exists in calico_cni_config object * fix whitespace linting error * fixed when list indentation	2021-09-27 11:04:20 -07:00
Victor Morales	9416c9aa86	Enable stable and edge Docker CLI versions (#8019 )	2021-09-27 10:44:19 -07:00
Kenichi Omichi	da92c7e215	Add proxy for subscription-manager (#8012 ) If using proxy, it is necessary to configure it before running "subscription-manager status" command. This adds the step.	2021-09-27 08:47:35 -07:00
Kenichi Omichi	d27cf375af	Remove allowPrivilegeEscalation from metrics-server (#8014 ) "allowPrivilegeEscalation: false" blocks deploying metrics-server on CentOS7. In addition, the original metrics-server manifest doesn't contain it as [1]. This removes it. [1]: `527679e5e8/manifests/base/deployment.yaml`	2021-09-27 08:43:36 -07:00
Victor Morales	432a312a35	Enable stable and edge containerd versions (#8020 )	2021-09-27 08:11:35 -07:00
Cristian Calin	3a6230af6b	Kata-Containers: update versions 2.2.0 (default) and 2.1.1 (#8017 ) * Kata-Containers: add 2.2.0 hashes and make default * Kata-Containers: replace 2.1.0 with bugfix version 2.1.1 * Kata-Containers: move to q35 a more modern VM architecture as 'pc' is removed in 2.2.0	2021-09-27 08:07:35 -07:00
Florian Ruynat	ecd267854b	Move ovn4nvf crd from v1beta1 to v1 (#8006 )	2021-09-27 01:18:22 -07:00
Hugo Blom	ac846667b7	Check if openstack application credentials are empty since they always exists (#8021 )	2021-09-27 01:14:22 -07:00
rtsp	4bace2491d	Ensure apparmor is installed (#8011 ) Kubespray deployment failed when using containerd backend on nodes that apparmor was not installed or previously removed. This PR ensure apparmor is installed by adding it into required_pkgs var.	2021-09-24 07:55:23 -07:00
Maxim Pogozhiy	22017b7ff0	kube-router 1.3.0 -> 1.3.1 (#8007 )	2021-09-23 13:42:55 -07:00
Florian Ruynat	88c11b5946	Revert "etcd: enable v2 api only if needed (#8001 )" (#8008 ) This reverts commit `c0e1211abe`.	2021-09-23 10:43:14 -07:00
Kenichi Omichi	843252c968	Use kube_config_dir for kubeconfig (#7996 ) The path of kubeconfig should be configurable, and its default value is /etc/kubernetes/admin.conf. Most paths of the file are configurable but some were not. This make those configurable.	2021-09-23 10:19:13 -07:00
Eric Lake	ddea79f0f0	Issue 8004: Fix typha prometheus (#8005 ) The typha prometheus settings were in the `volumeMounts` section of the spec and not in the `envs` section. This was cauing the deployment to fail because it was looking for a volumeMount. ``` failed: [controller-001.a2.da.dev.logdna.net] (item=calico-typha.yml) => {"ansible_loop_var": "item", "changed": false, "item": {"ansible_loop_var": "item", "changed": true, "checksum": "598ac79530749e8e2110793b53fc49ac208e7130", "dest": "/etc/kubernetes/calico-typha.yml", "diff": [], "failed": false, "gid": 0, "group": "root", "invocation": {"module_args": {"_original_basename": "calico-typha.yml.j2", "attributes": null, "backup": false, "checksum": "598ac79530749e8e2110793b53fc49ac208e7130", "content": null, "delimiter": null, "dest": "/etc/kubernetes/calico-typha.yml", "directory_mode": null, "follow": false, "force": true, "group": null, "local_follow": null, "mode": null, "owner": null, "regexp": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/core/.ansible/tmp/ansible-tmp-1632349768.56-75434-32452975679246/source", "unsafe_writes": null, "validate": null}}, "item": {"file": "calico-typha.yml", "name": "calico", "type": "typha"}, "md5sum": "53c00ac7f562cf9ecbbfd27899ea066d", "mode": "0644", "owner": "root", "size": 5378, "src": "/home/core/.ansible/tmp/ansible-tmp-1632349768.56-75434-32452975679246/source", "state": "file", "uid": 0}, "msg": "error running kubectl (/opt/bin/kubectl --namespace=kube-system apply --force --filename=/etc/kubernetes/calico-typha.yml) command (rc=1), out='service/calico-typha unchanged\n', err='error: error validating \"/etc/kubernetes/calico-typha.yml\": error validating data: [ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[2]): unknown field \"value\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[2]): missing required field \"mountPath\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[3]): unknown field \"value\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[3]): missing required field \"mountPath\" in io.k8s.api.core.v1.VolumeMount]; if you choose to ignore these errors, turn validation off with --validate=false\n'"} ```	2021-09-23 08:37:22 -07:00
Max Gautier	c0e1211abe	etcd: enable v2 api only if needed (#8001 ) * etcd: enable v2 api only if needed Only enable v2 API if we have a consumer (flannel) This reduce the exposed surface for etcd. * Fix bad group name	2021-09-22 12:36:32 -07:00
Florian Ruynat	c8d7f000c9	Remove k8s hooks for versions prior to 1.20 (#7998 )	2021-09-22 10:32:01 -07:00
Léopold Jacquot	598f178054	Fix cilium operator metrics activation (#8000 )	2021-09-22 10:00:02 -07:00
Florian Ruynat	5d1b34bdcd	Move min k8s version to 1.20	2021-09-22 09:50:01 -07:00
Florian Ruynat	8efde799e1	Update kubernetes version to 1.22.2	2021-09-22 09:50:01 -07:00
Cristian Calin	a517a8db01	Drop chech for kubelet_shutdown_grace_period (#7993 ) and kubelet_shutdown_grace_period_critical_pods as ansible cannot do sane time interval calculations	2021-09-21 18:34:00 -07:00
Wang Zhen	2211504790	Fix k8s-certs-renew cp path (#7992 ) Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>	2021-09-21 00:36:22 -07:00
Cristian Calin	fb8662ec19	Calico: update versions 3.20.1, 3.19.3 (#7984 ) * make Calico 3.20.1 the default version * drop Calico 3.17.x support	2021-09-20 17:40:23 -07:00
Cristian Calin	6f7911264f	Calico: make calico_min_version check relevant (#7939 ) * Calico: make calico_min_version check relevant * Calico: only check currently installed version against the oldest supported version by the previous release	2021-09-20 07:58:09 -07:00
Cristian Calin	ae44aff330	Calico: increase calico node probe timeouts and allow tunning (#7981 )	2021-09-17 16:08:07 -07:00
Florian Ruynat	b83e8b020a	Fix default version (#7977 )	2021-09-17 07:31:00 -07:00
Hari Hud	30cd91dc6b	Add option to kubeadm upgrade command to control certificates renewal during control plane upgrade (#7976 ) * Add option to kubeadm upgrade command to control certificates renewal during control plane upgrade * Remove training whitespace	2021-09-17 04:31:00 -07:00
Florian Ruynat	f2fa9c3b31	Update hashes with new versions	2021-09-17 00:39:02 -07:00
Florian Ruynat	30a7dfa4f8	Fix ubuntu16/centos8 CI jobs (#7972 )	2021-09-16 23:39:01 -07:00
Samuel Liu	62ab477838	remove kube_proxy_conntrack_max var (#7971 )	2021-09-15 08:22:31 -07:00
rtsp	f8a57f7598	Fix iptables missing on Debian 11 if APT::Install-Recommends=0 (#7964 ) On Debian 11, `ipset` just recommend `iptables` so on the system that apt is configured with `APT::Install-Recommends "0";` iptables will not install automatically.	2021-09-14 08:19:09 -07:00
Bryan Hundven	35c928798d	Fix missing file mode (risky-file-permissions) (#7959 ) * Fix missing file mode (risky-file-permissions) Found this using ansible-lint. Signed-off-by: Bryan Hundven <bryanhundven@gmail.com> * Fix another missing file mode (risky-file-permissions) This one fixes `/etc/crio/config.json` Signed-off-by: Bryan Hundven <bryanhundven@gmail.com>	2021-09-09 23:35:59 -07:00
jhchong92	83f64a7ff9	Bugfix/cinder csi cloud config template (#7955 ) * Fix invalid condition for username and password inclusion * Use length filter to test variable conditions	2021-09-09 10:04:11 -07:00
Florian Ruynat	60853fa682	Update kube-ovn to 1.7.2	2021-09-09 08:14:10 -07:00
Florian Ruynat	b66356be65	Update cilium to 1.9.10	2021-09-09 08:14:10 -07:00
jhchong92	efae2dbad6	Update snapshot-controller repository and image versions (#7957 )	2021-09-09 08:10:11 -07:00
jhchong92	bd8b8916a8	Remove invalid spec - deployment.spec.serviceName (#7949 )	2021-09-08 13:05:56 -07:00
jhchong92	57063b6828	Replace incorrect {% end %} tags with {% endif %} in csi_crd templates (#7947 )	2021-09-08 12:59:57 -07:00
Ole Mathias Aa. Heggem	69b67a293a	Calico: Add kube_service_addresses_ipv6 to serviceClusterIPs (#7889 ) (#7944 ) Add IPv6 Service Addresses to BGP advertisement when calico_advertise_cluster_ips is true.	2021-09-08 00:37:20 -07:00
Cristian Calin	d57ddf0be8	Feature DynamicKubeletConfig is deprecated in 1.22 and will not move to GA (#7938 ) * Feature DynamicKubeletConfig is deprecated in 1.22 and will not move to GA * Add check for dynamic_kubelet_configuration with kube >= 1.22	2021-09-07 10:47:16 -07:00
Cristian Calin	43e7e2d663	nginx-ingress: bump to 1.0.0 to support kube 1.22 (#7942 )	2021-09-06 04:50:36 -07:00
Cristian Calin	d355b43dce	ContainerD: bump containerd version to 1.4.9 (#7940 )	2021-09-06 04:50:29 -07:00
Cristian Calin	5d52025266	crictl: add hashes for 1.22 (#7936 )	2021-09-06 04:46:29 -07:00
Cristian Calin	db470f8529	Update CSI snaphotter and make it independent (#7943 ) * CSI: update CSI snapshot CRDs * CSI: update snapshot controller tag version with kubernetes specific versions * CSI: allow enabling csi_snapshot_controller independent of Cinder CSI * CSI: Align csi-snapshot-controller with upstream and use a Deployment instead of a StatefulSet	2021-09-06 04:24:29 -07:00
kranthi guttikonda	81bf4f9304	cri-o registry auth support (#7837 ) * cri-o registry auth support * yaml lint for comments * crio_registry_auth from registry_auth * crio_registry_auth as defaults	2021-09-01 10:20:59 -07:00
Maciej Wereski	e1967b0700	MetalLB: keep nodeSelector in one place (#7931 ) Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>	2021-09-01 09:05:00 -07:00
Olivier Lemasle	507091ec8b	Replace cluster_name by dns_domain (#7923 ) `cluster_name` defaults to `dns_domain` value (see [here][1] and [here][2]) but they could have different values. `dns_domain` should be used here instead of `cluster_name` because the DNS resolution is configured to use `dns_domain`. [1]: `0ef7af76bc/roles/kubespray-defaults/defaults/main.yaml (L104)` [2]: `1afdb05ea9/inventory/sample/group_vars/k8s_cluster/k8s-cluster.yml (L196)`	2021-09-01 08:18:59 -07:00
Maciej Wereski	48ceca4919	MetalLB: update to v0.10.2 (#7925 ) Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>	2021-09-01 03:00:59 -07:00
Cristian Calin	426ad81db0	Calico: replace hashes for latest 3.17 and 3.18 to the .5 minor versions (#7924 )	2021-08-31 13:38:21 -07:00
Olivier Lemasle	497d2ca306	Fix Calico's FelixConfiguration when "IP in IP" is disabled (#7926 ) When using Calico with: - `calico_network_backend: vxlan`, - `calico_ipip_mode: "Never"`, - `calico_vxlan_mode: "Always"`, the `FelixConfiguration` object has `ipipEnabled: true`, when it should be false: This is caused by an error in the `\| bool` conversion in the install task: when `calico_ipip_mode` is `Never`, `{{ calico_ipip_mode != 'Never' \| bool }}` evaluates to `true`:	2021-08-31 13:14:21 -07:00
Calvin Park	9d3888a756	During pre-upgrade add a flag to always cordon (#7892 ) * During pre-upgrade add a flag to always cordon * empty * empty * empty * Better default val	2021-08-30 10:56:09 -07:00
rtsp	c8e090c17f	Add preliminary Debian 11 (bullseye) support (#7853 ) - Use python3-apt instead because python-apt was removed in Debian 11 - Add gnupg (fix "container-engine/containerd : ensure containerd repository public key is installed" task failed) - Remove aufs-tools Signed-off-by: rtsp <git@rtsp.us>	2021-08-30 09:53:06 -07:00
Florian Ruynat	1ccf32e08f	Update docker to 20.10.8 (#7918 )	2021-08-30 08:25:06 -07:00
Florian Ruynat	17af348be8	Add bunch of Kubernetes versions missing	2021-08-30 08:17:05 -07:00
Cristian Calin	1afdb05ea9	Fedora and RHEL use etc_t and the convention is <type_name>_t (#7891 ) * Fedora and RHEL use etc_t and the convention is <type_name>_t * Docs: specify all values for preinstall_selinux_state * CI: Add Fedora 34 with SELinux in enforcing mode	2021-08-27 14:20:53 -07:00
Sergey	89993e4833	fix error metrics server capabilities name (#7905 )	2021-08-25 12:06:15 -07:00
Cristian Calin	1c3d33e146	Calico: 3.20.0 policy update to allow access to endpointslices (#7899 )	2021-08-25 12:06:01 -07:00
Cristian Calin	f66c49bf42	Calico: replace version 3.19.1 with 3.19.2 and set as default (#7867 ) Bump calico version to 3.19.2 due to adding 3.20.0 earlier	2021-08-25 07:32:41 -07:00
rtsp	4c9d7dedb3	addons/cert_manager: retries until webhook pods has been created (#7850 ) Fix task 'Cert Manager \| Wait for Webhook pods become ready' failed due to webhook pods don't exist yet by using `retries..until` trick like kubernetes-sigs/kubespray#7842 This fix should be removed in the future if the kubernetes/kubernetes#83242 is resolved. Signed-off-by: rtsp <git@rtsp.us>	2021-08-25 07:16:41 -07:00
Sergey	5336943a8c	add cilium_operator_api_serve_addr to cilium operator config (#7901 )	2021-08-24 03:49:13 -07:00
Samuel	a040e521b4	feat(containerd): auth support (#7868 ) * feat(containerd): auth support * fix(registry-auth): rename variable	2021-08-23 06:40:00 -07:00
Cristian Calin	0ac364dfae	Calico: use --allow-version-mismatch in calicoctl.sh to allow upgrades (#7873 )	2021-08-20 14:30:48 -07:00
rtsp	79166496f3	debian: Fix test failed after bullseye release (#7888 )	2021-08-19 15:37:24 -07:00
Frank Ritchie	1f09229740	Update cilium to 1.9.9 (#7871 ) Now that 1.10 is out this is to make 1.9.9 the default. I am running this version successfully.	2021-08-16 13:34:22 -07:00
Léopold Jacquot	c06896a352	Update metrics-server to 0.5.0 (#7864 )	2021-08-12 08:19:48 -07:00
Cristian Calin	c119620f7c	Calico: add v3.20.0 hashes (#7855 )	2021-08-11 07:50:46 -07:00
Daniil Muidinov	7f309bb092	fix parameters for module replace in 0060-resolvconf (#7858 )	2021-08-10 17:13:26 -07:00
Eugene Artemenko	e2b67b5700	Add suport of Vsphere CSI driver 2.2.X versions (#7848 )	2021-08-09 08:19:38 -07:00
rtsp	82a9064d8d	addons/cert_manager: fix kubernetes-sigs#7085 by adding retries..until (#7842 ) Fix task 'Cert Manager \| Apply ClusterIssuer manifest' failed due to service/endpoints updating delayed even though the wekhook pod status is ready. Signed-off-by: rtsp <git@rtsp.us>	2021-08-09 08:19:31 -07:00
Victor Morales	a70fab2249	Bump crun to 0.21 version (#7854 )	2021-08-09 08:11:31 -07:00
Smita Srivastava	31a5a4e808	retry to fetch binary if it fails first time (#7839 )	2021-07-30 00:17:38 -07:00
Vitaliy D	5db86f4c2b	Update vSphere CPI (#7838 ) Changes: * ClusterRole updated according to the latest manifests from https://github.com/kubernetes/cloud-provider-vsphere * vSphere CPI/CSI default versions bumped and tested successfully on K8S 1.21.1 * vSphere documentation updated Signed-off-by: Vitaliy D <vi7alya@gmail.com>	2021-07-29 18:17:37 -07:00
AnatomicJC	627a06e30d	CRI-O: Install libseccomp2 from backports on Debian 10 (#7816 ) * CRI-O: Install libseccomp2 from backports on Debian 10 libseccomp2 is a required dependency of cri-o-runc package The one provided in Debian 10 repositories is outdated * 7816: Remove useless when condition As this condition is handled by block	2021-07-23 07:07:16 -07:00
Kenichi Omichi	56e230863a	Separate gvisor_download_url for runsc and shim (#7760 ) To download necessary files in advance for offline deployment, we can see all file URLs with contrib/offline/generate_list.sh Most URLs are downloadable, but gvisor's one is not because the URL is a part of full URLs for gvisor. To download gvisor's files from the URLs directory, this separates into two URLs for runsc and the shim.	2021-07-22 07:51:51 -07:00
cola-zero	f21a707e99	Add containerd on Flatcar Container Linux (#7681 )	2021-07-21 06:28:07 -07:00
Florian Ruynat	0ef7af76bc	Fixup label for oracle linux bootstrap	2021-07-20 01:29:31 -07:00
Florian Ruynat	18666b3e2d	Update multus to 3.7.2 (and move to ghcr.io)	2021-07-20 01:29:31 -07:00
Florian Ruynat	ed87386d7b	Set default k8s version to 1.21.3	2021-07-20 01:29:31 -07:00
Florian Ruynat	1ad9b33b08	Add hashes for k8s 1.20.8/.9 and 1.19.12/.13 and 1.21.3	2021-07-20 01:29:31 -07:00
Florian Ruynat	000b4565c2	Fix erroneous ansible args	2021-07-20 01:29:31 -07:00
Florian Ruynat	eda75fc706	Update kube-router to 1.3.0	2021-07-20 01:29:31 -07:00
Florian Ruynat	6583add63a	Update flannel to 0.14.0 (moved from coreos repo to flannel-io)	2021-07-20 01:29:31 -07:00
Florian Ruynat	441ad841cc	Use dashboard 2.3.1 image	2021-07-20 01:29:31 -07:00
Florian Ruynat	6511c5dd7a	Set Helm default version to 3.6.3	2021-07-20 01:29:31 -07:00
Florian Ruynat	d5cbb19b39	Update kube-ovn to 1.7.1	2021-07-20 01:29:31 -07:00
Atsushi Nukariya	417180246c	Fix: typos in docs and comments (#7805 )	2021-07-16 18:58:50 -07:00
Fredrik Liv	802fb8b591	Add application credentials support for cinder (#7799 ) * csi-driver: Added possibility to use application credentials for cinder * external-cloud-controller: Added env vars for openstack application credentials	2021-07-15 00:56:48 -07:00
spaced	c2cf0d9945	add containerd on fedora CoreOS (#7794 ) * set selinux type t_etc if selinux state is enforcing * workaround with update repo is no longer needed remove comments about failing playbook * grubby is not available in distros using ostree * remove docker support because removed in fcos update install script example with live rootfs * do not call grubby on ostree based distro * update docs enabling containerd on fedora coreos	2021-07-15 00:00:48 -07:00
jayonlau	e61a9077f4	Clean up extra spaces about configuration-qemu.toml.j2 (#7795 ) Clean up extra spaces, although these errors are not important, they affect the code specification.	2021-07-13 06:38:34 -07:00
spaced	bf54dc082b	set selinux type t_etc if selinux state is enforcing (#7791 )	2021-07-13 06:34:29 -07:00
cleveritcz	3ff7bc1f64	Added k8s 1.21.2 (#7789 )	2021-07-13 06:26:29 -07:00
Cristian Calin	7516fe142f	Move to Ansible 3.4.0 (#7672 ) * Ansible: move to Ansible 3.4.0 which uses ansible-base 2.10.10 * Docs: add a note about ansible upgrade post 2.9.x * CI: ensure ansible is removed before ansible 3.x is installed to avoid pip failures * Ansible: use newer ansible-lint * Fix ansible-lint 5.0.11 found issues * syntax issues * risky-file-permissions * var-naming * role-name * molecule tests * Mitogen: use 0.3.0rc1 which adds support for ansible 2.10+ * Pin ansible-base to 2.10.11 to get package fix on RHEL8	2021-07-12 00:00:47 -07:00
Sébastien Huss	b0e4c375a7	Allow cri-o offline install (#7777 )	2021-07-09 20:52:45 -07:00
Florian Ruynat	d1388d69d0	Fix tests following python change (#7775 ) * Fix ansible detection for python3 and ubuntu * Fix oracle missing centos-extras repo for containerd/docker dependencies	2021-07-08 18:52:53 -07:00
Shinerrs	d0fb537448	Ubuntu changed package name python-apt to python3-apt (#7769 ) * replaced deprecated python package with python3 package * removed the version due to duplication	2021-07-02 06:56:13 -07:00
jayonlau	59cf1770bc	Clean up residual files about /usr/libexec (#7756 ) When reset, need to clean up directory /usr/libexec.	2021-07-01 02:13:54 -07:00
Vadim	0aaba5ea30	added destination filename to cp command (#7764 )	2021-06-30 08:13:03 -07:00
Cristian Calin	bd6d810d0a	nodelocaldns: allow binding metrics address to host IP (#7748 )	2021-06-29 05:28:41 -07:00
jayonlau	e3850fbbbc	Extra spaces of macvlan (#7752 ) Although these errors are not important, they affect the code specification.	2021-06-28 02:13:25 -07:00
Cristian Calin	a3e34f589a	Enable Graceful Node Shutdown for Kubernetes >= 1.21.0 (#7746 ) * Enable Graceful Node Shutdown for Kubernetes >= 1.21.0 * Add sample graceful shutdown parameters	2021-06-27 23:53:25 -07:00
Cristian Calin	a2cf6816ce	Calico wireguard (#7638 ) * Calico: add Wireguard support * CI: Add Calico Wireguard scenario	2021-06-25 03:22:45 -07:00
jayonlau	bbcafb5d7b	Clean up residual files about modules-load.d (#7737 ) When reset, need to clean up files kube_proxy-ipvs.conf and kubespray-br_netfilter.conf.	2021-06-25 00:32:45 -07:00
Id2ndR	a31baf3c16	Fix deployment without openstack cacert (#7723 ) * fix group name * fix external-openstack-cloud-config secret * don't add ca.cert in the secret if not defined	2021-06-21 05:38:50 -07:00
jayonlau	e83728897b	Clean up residual files (#7722 ) * Clean up residual files When reset, you need to clean up to the kerw directory. * Update main.yml	2021-06-21 05:34:50 -07:00
Cristian Calin	282a27a07c	gVisor: initial support for gVisor container runtime (#7661 ) * Docker/Containerd: move downloads urls to containerd-common * gVisor: initial support for gVisor container runtime	2021-06-21 05:18:51 -07:00
Sergey	3fe6dbb65c	fix image pull url for coredns v1.8.0 (#7702 )	2021-06-16 17:00:19 -07:00
flix444	7547e6a272	Ubuntu 21.04 changed packagename python-apt in python3-apt (#7715 )	2021-06-16 13:58:00 -07:00
Cristian Calin	1928dafc7e	Revert to conmon location override for Redhat and Fedora (#7701 )	2021-06-16 09:07:59 -07:00
Florian Ruynat	e77b9bf3ee	Update kube-ovn to 1.7.0 (#7686 )	2021-06-16 08:10:00 -07:00
Samuel Liu	7f7e83a4d9	fix local-path-provisioner helper image repo (#7703 )	2021-06-16 08:06:00 -07:00
Marko Kohtala	85fe716d46	Drop "Server" from crio repo URL (#7698 ) (#7699 ) $releasever can be 7Server, but there is no such CentOS path on download.opensuse.org. Use ansible_distribution_major_version instead of $releasever.	2021-06-11 05:10:59 -07:00
Kenichi Omichi	85ff3eb8be	Update the version of local_volume_provisioner (#7684 ) As [1], v2.4.0 has been released already for local_volume_provisioner. This updates the version. [1]: https://github.com/kubernetes-sigs/sig-storage-local-static-provisioner/tags	2021-06-11 04:36:59 -07:00
Florian Ruynat	e55c359cf9	Updage docker packages to 20.10.7 (#7685 )	2021-06-11 04:32:59 -07:00
Kasakaze	d66da21726	make sure serviceaccounts/token is only in the metadata stage (#7679 )	2021-06-07 08:38:40 -07:00
forselli-stratio	1069b05e68	Improve scale flow and documentation (#7610 ) * Improve scale flow * Add confirmation prompt again	2021-06-07 05:02:40 -07:00
Cristian Calin	ec0c0d4a28	Calico enable support for eBPF (#7618 ) * Calico: align manifests with upstream * allow enabling typha prometheus metrics * Calico: enable eBPF support * manage the kubernetes-services-endpoint configmap * Calico: document the use of eBPF dataplane * Calico: improve checks before deployment * enforce disabling kube-proxy when using eBPF dataplane * ensure calico_version is supported	2021-06-07 04:58:39 -07:00
jiriproX	1739b27231	Replace yum module with package module (#7621 )	2021-06-05 04:16:39 -07:00
Sergey	d9d29af87f	update containerd to version 1.4.6 (#7674 )	2021-06-03 10:55:38 -07:00
Cristian Calin	7036b704b3	Replace Kata 1.x with Kata 2.x (#7670 ) * Kata: add Kata 2.x checksums and adjust download urls for 2.x * Kata: drop 1.x version which is no longer supported * Kata: set default version 2.1.0	2021-06-02 00:50:41 -07:00
Florian Ruynat	54cda80018	Fix debian docker available version (#7668 )	2021-06-01 20:58:39 -07:00
Cristian Calin	6a2ea94b39	Docs improvements (#7660 ) * Docs: update sidebar * Docs: move registry documentation into docs/ * Docs: move rbd_provisioner documentation into docs/ * Docs: move cephfs_provisioner into docs/ * Docs: move local_volume_provisioner documentation into docs/ * Docs: move ambassador.md to docs/ingress_controller/ * Docs: move metallb.md to docs/ingress_controller/ * Docs: move ingress_nginx documentation into docs/ * Docs: move alb_ingress_controller documentation into docs/ * Docs: merge ambassador documentation into docs/ingress_controller/ * Docs: move cert_manager documentation into docs/ * Docs: move bootstrap-os documentation into docs/ * Docs: update file locations in sidebar	2021-06-01 07:30:27 -07:00
Cedric Hnyda	4674b03661	Add cinder_csi_ignore_volume_az (#7624 ) Signed-off-by: Cedric Hnyda <cedric.hnyda@itera.io>	2021-06-01 07:10:27 -07:00
kongxs	922de32290	spelling mistakes (#7664 ) Signed-off-by: kjinan <2008kongxiangsheng@163.com>	2021-05-31 05:46:26 -07:00
Florian Ruynat	7896bc7831	Add Fedora 33 image and CI, remove Fedora 31 (EOL) + update docker packages (#7657 ) * Update docker package to 20.10.6 * Add Fedora 33 image and CI, remove Fedora 31 (EOL)	2021-05-28 08:04:25 -07:00
AnatomicJC	da07459bd6	Update crun 0.19 checksum (#7655 ) Checksum of crun 0.19 is not correct, this commit fixes it	2021-05-27 15:20:23 -07:00
Fredrik Liv	3ca205446e	Added possibility to specify vSphere credentials via env variables (#7646 ) * Added possibility to specify vSphere credentials via env variables * Removed excessive spacing	2021-05-27 12:02:30 -07:00
forselli-stratio	eff1931283	Add retries to 'Set label for route reflector' task (#7645 )	2021-05-27 12:02:23 -07:00
Florian Ruynat	fd8ae54fa7	Docker default version is now 20.10	2021-05-27 11:18:24 -07:00
Florian Ruynat	79fdee3979	Bump crio to default 1.21	2021-05-27 11:18:24 -07:00
Florian Ruynat	a754c0d476	Kubernetes now use CoreDNS 1.8.0	2021-05-27 11:18:24 -07:00
Florian Ruynat	7208169db3	Update kubernetes version to 1.21.1	2021-05-27 11:18:24 -07:00
Cristian Calin	7b5d43cc00	Calico: upgrade 3.18 to 3.18.4 (#7648 )	2021-05-26 05:51:21 -07:00
Cristian Calin	c5ccedb694	store openstack external cloud controller ca.cert in a k8s secret instead of the host filesystem (#7603 )	2021-05-26 00:35:21 -07:00
Cristian Calin	858b29f425	Calico: add support for v3.19.1 (#7630 ) * Calico: add v3.19.1 hashes * enable liveness probe for calico-kube-controllers 3.19.1 * Calico: drop support for v3.16.x * Calico: promote v3.18.3 as default	2021-05-25 13:40:50 -07:00
efrikin	7db76f8809	Add nodeSelctor for other services and node labels before CNI setup (#7613 )	2021-05-25 13:40:43 -07:00
Florian Ruynat	bcf695913f	Fix Oracle yum disabled repository file after EPEL install (#7639 )	2021-05-25 08:30:23 -07:00
Fatih Sarhan	59fc17f4e3	Override the default value of containerd's root, state, and oom_score (#7622 ) * Override the default value of containerd's root, state, and oom_score configurations * Add tests data for containerd_storage_dir, containerd_state_dir and containerd_oom_score variables	2021-05-19 08:24:53 -07:00
Florian Ruynat	c1aa755a3c	Fix missing broken_etcd filter in recover control plane task (#7619 )	2021-05-18 10:29:04 -07:00
Pavel Martynov	29c2fbdbc1	Fix cloud_resolver type from str to list (issue #7605 ) (#7606 )	2021-05-18 06:41:30 -07:00
Pavel Martynov	4b9f98f933	Fix pull_by_digest variable type to boolean instead of str (#7612 )	2021-05-18 06:29:31 -07:00
Cristian Calin	e9870b8d25	add support for using ansible 2.10.x for deploying kubespray (#7600 ) * add support for using ansible 2.10.x for deploying kubespray * move dns-autoscaler-clusterrole{binding}.yml to files/ folder * note that ansible 2.10 is now experimentally supported * coredns: move files to templates like before #4341	2021-05-18 05:39:31 -07:00
Muzi Li	e0c74fa082	Update nerdctl version to 0.8.1 (#7617 )	2021-05-17 11:07:30 -07:00
Florian Ruynat	bdf74c6749	Set default version to 1.20.7	2021-05-14 09:48:06 -07:00
Florian Ruynat	d6f9a8d752	Update hashes with 1.21.1/1.20.7/1.19.11	2021-05-14 09:48:06 -07:00
Cristian Calin	14cf3e138b	Support Calico advertisement of MetalLB LoadBalancer IPs (#7593 ) * add initial MetalLB docs * metallb allow disabling the deployment of the metallb speaker * calico>=3.18 allow using calico to advertise service loadbalancer IPs * Document the use of MetalLB and Calico * clean MetalLB docs	2021-05-12 05:22:17 -07:00
emiran-orange	afbabebfd5	Enables Calico serviceAccount token monitoring and update of /etc/cni/net.d/calico-kubeconfig if need be. (#7586 ) Since K8S 1.21, BoundServiceAccountTokenVolume feature gate is in beta stage, thus activated by default (anyone who follows CSI guidelines has enabled AllAlpha and faced the issue before 1.21). With this feature, SA tokens are regenerated every hour. As a consequence for Calico CNI, token in /etc/cni/net.d/calico-kubeconfig copied from /var/run/secrets/kubernetes.io/serviceaccount in install-cni initContainer expires after one hour and any pod creation fails due to unauthorization. Calico pods need to be restarted so that /etc/cni/net.d/calico-kubeconfig is updated with the new SA token.	2021-05-11 08:47:36 -07:00
Cristian Calin	8c0a2741ae	allow overriding calico peers names and avoid ipv6 naming issues (#7591 )	2021-05-11 07:05:36 -07:00
Cristian Calin	d90baa8601	add containerd support for Amazon Linux 2 (#7595 )	2021-05-10 19:25:36 -07:00
muzi502	d5660cd37c	Fix reset cluster task failed (#7597 )	2021-05-10 17:25:36 -07:00
Cristian Calin	63cec45597	Add Amazon to the check for supported distributions (#7589 )	2021-05-10 16:17:36 -07:00
Hari Hud	f07e24db8f	Cleanup duplicate task in etcd role (#7598 ) * Remove the duplicate task in etcd role * Remove inessential delegate_to	2021-05-10 16:11:36 -07:00
Cristian Calin	5d5be3e96a	bump calico 3.18 to v3.18.3 (#7592 )	2021-05-10 00:34:51 -07:00
Hari Hud	6e7649360f	Ignore error when ipvsadm utility not found on node (#7587 )	2021-05-07 13:37:04 -07:00
Cedric Hnyda	1dd38721b3	Add external_openstack_enable_ingress_hostname option for openstack (#7572 ) Signed-off-by: Cedric Hnyda <cedric.hnyda@itera.io>	2021-05-04 00:33:11 -07:00
Eugene Artemenko	6a001e4971	Add suport of Vsphere CSI driver 2.X versions (#7480 )	2021-05-04 00:05:11 -07:00
Samuel Liu	96e6a6ac3f	Add krew support (#7464 ) * Add krew support * Add reset for krew * Update install krew(local) * ansible lint * yamllint * fix krew default vars * fix kubectl_localhost mode * replace include * fix e206	2021-05-03 07:16:03 -07:00
bac-w	2556eb2733	Upgrade cilium role (#7521 ) * Upgrade cilium roles * Del old test result * Add hubble ui examples * Refactor hubble metrics * Markdown fix pipeline errors * yamllint check and fix * refactor install from https://github.com/kubernetes-sigs/kubespray/pull/7520 * Docs syntax change (fix) * Cilium set default 1.8.9 * Update cilium version in Readme	2021-04-30 08:09:59 -07:00
MRoci	a0ee569091	change coredns image name to `coredns/coredns` and prefix `v` to tag (#7570 ) follow new naming conventions for gcr's coredns image. starting from 1.21 kubeadm assumes it to be `coredns/coredns`: this causes the kubeadm deployment being unable to pull image, beacuse `v` was also added in image tag, until the role `kubernetes-apps` ovverides it with the old name, which is only compatible with <=1.7. Backward comptability with kubeadm <=1.20 is mantained checking kubernetes version and falling back to old names (`coredns:1.xx`) when the version is less than 1.21	2021-04-30 07:43:58 -07:00
holmesb	3f4eb9be08	Fixes issue #7573 - Made Calico permissions compatible with v3.18.x (see https://github.com/projectcalico/calico/issues/4557 ). Specifically, granted watch to custom resources blockaffinities, ipamblocks & ipamhandles (#7575 )	2021-04-30 07:25:59 -07:00
muzi502	5ea2d1eb67	Add image_arch in flannel image tag (#7560 ) * Add image_arch variable when download flannel image * Fix flannel image tag typo with image arch	2021-04-29 17:51:57 -07:00
Florian Ruynat	ffc38a2237	Fix busybox for tests to reduce dockerhub calls (#7571 )	2021-04-29 17:39:57 -07:00
Cristian Calin	360aff4a57	Rename ansible groups to use _ instead of - (#7552 ) * rename ansible groups to use _ instead of - k8s-cluster -> k8s_cluster k8s-node -> k8s_node calico-rr -> calico_rr no-floating -> no_floating Note: kube-node,k8s-cluster groups in upgrade CI need clean-up after v2.16 is tagged * ensure old groups are mapped to the new ones	2021-04-29 05:20:50 -07:00
Sergey	d26191373a	add default empty value for etc_hosts_localhosts_dict_target (#7567 )	2021-04-28 11:34:50 -07:00
Cristian Calin	4c06aa98b5	crio: add supported versions 1.20 and 1.21 and align default with k8s version (#7562 ) * crio: add supported versions 1.20 and 1.21 and align default with k8s version * cri-o: drop versions 1.17 and 1.18 from version matrix * update note on cri-o version alignment	2021-04-28 11:30:51 -07:00
muzi502	1b267b6599	Fix calico-kube-controller becomes Error for canal (#7564 )	2021-04-28 11:26:52 -07:00
Cristian Calin	dd6efb73f7	Calico new versions v3.17.4 and v3.18.2 (#7563 ) * calico: upgrade from v3.17.3 to v3.17.4 * calico: upgrade from v3.18.1 to v3.18.2	2021-04-28 08:22:50 -07:00
harihud	0071e3c99c	Update main.yml (#7557 )	2021-04-27 15:41:27 -07:00
faruryo	975f84494c	Fix calico-kube-controller becomes Error (#7548 ) Change mode so that calico-kube-controllers can be read because it was changed to run as non-root https://github.com/projectcalico/kube-controllers/pull/566	2021-04-26 15:37:03 -07:00
Florian Ruynat	7c86734d2e	Add cri-o 1.20/1.21 (#7544 )	2021-04-26 09:21:16 -07:00
Cristian Calin	8665e1de87	Fix cri-o support for Oracle and AlmaLinux (#7541 )	2021-04-26 09:11:02 -07:00
Florian Ruynat	c16efc9ab8	Fix Opensuse not working with ansible_distribution (#7551 )	2021-04-26 08:37:02 -07:00
muzi502	69806e0a46	Add nerdctl cli tool for containerd user (#7500 ) * Add nerdctl cli tool for containerd user * Add nerdctl enable option * Add nerdctl enable option and update nerdctl version to 0.8.0	2021-04-25 23:47:01 -07:00
Cristian Calin	ad15a4b755	Bump calico versions (#7543 ) * add calico 3.16.10 hashes * drop old calico version 3.16.9	2021-04-24 12:37:01 -07:00
Cristian Calin	002a4b03a4	Drop calico 3.15 (#7545 ) * calico: drop support for version 3.15 * drop check for calico version >= 3.3, we are at 3.16 minimum now * we moved to calico 3.16+ so we can default to /opt/cni/bin/install	2021-04-23 23:43:14 -07:00
Cristian Calin	73db44b00c	Initial AlmaLinux support (#7538 ) * AlmaLinux: ansible>2.9.19 is needed to know about AlmaLinux * AlmaLinux: identify as a centos derrivative * AlmaLinux: add AlmaLinux to checks for CentOS * Use ansible_os_family to compare family and not distribution	2021-04-22 23:50:03 -07:00
Florian Ruynat	b32d25942d	Minor update to cni-plugins and kube-router	2021-04-22 06:47:42 -07:00
Florian Ruynat	fce705a92b	Helm minor update to 3.5.4	2021-04-22 06:47:42 -07:00
Florian Ruynat	6164c90f70	Update kube-ovn to 1.6.2	2021-04-22 06:47:42 -07:00
Samuel Liu	8c7b90ebbf	add ingress controller class (#7522 )	2021-04-22 00:22:38 -07:00
Ian Martin	38d9d2ea0e	Ambassador can watch multiple namespaces (#7516 ) * Ambassador can watch multiple namespaces * update variable name per PR review	2021-04-22 00:22:31 -07:00
Cristian Calin	384d30b675	add support for configuring cri-o pids_limit (#7525 )	2021-04-21 10:55:51 -07:00
Cristian Calin	add61868c6	Add Calico v3.17.3 and v3.18.1 (#7524 ) * add hashes for calico v3.17.3 * add hashes for claico v3.18.1 * bump default calico version to v3.17.3 * calico crds are missing yaml separator breaking kdd	2021-04-21 10:45:51 -07:00
Xachman	a7493e26e1	add enablerepo: amzn2extra-docker for docker install on aws 2 (#7507 )	2021-04-21 07:24:10 -07:00
Kenichi Omichi	ae3a1d7c01	Fix keepcache values of yum_repository (#7506 ) As the official document[1], the parameter keepcache should be '0' or '1' as string. To avoid the following warning message, this fixes the parameter value: [WARNING]: The value False (type bool) in a string field was converted to u'False' (type string). If this does not look like what you expect, quote the entire value to ensure it does not change. https://docs.ansible.com/ansible/latest/collections/ansible/builtin/yum_repository_module.html	2021-04-21 07:20:11 -07:00
Mathieu Parent	e39e3d5c26	Fix OpenId Connect example prefixes (#7527 ) Fixes "mapping values are not allowed in this context	2021-04-20 17:32:10 -07:00
holmesb	1e7d48846a	Fixes issue #7528 - allow configuring CALICO_STARTUP_LOGLEVEL via a new variable: calico_node_startup_loglevel (#7530 ) Signed-off-by: Brendan Holmes <5072156+holmesb@users.noreply.github.com>	2021-04-20 15:37:42 -07:00
Florian Ruynat	6001edeecd	Cleanup hashes and 1.18 hooks (#7534 )	2021-04-20 15:34:33 -07:00
Frank Ritchie	ce0b7834ff	Refactor cilium_ipsec_enabled check (#7520 ) This is a followup to https://github.com/kubernetes-sigs/kubespray/pull/7413 Although the code worked there was a desire for a better solution. Hopefully people will be happy with this alternative.	2021-04-19 02:06:36 -07:00
Florian Ruynat	1c0836946f	Update default Kubernetes version to 1.20.6	2021-04-15 22:26:22 -07:00
Florian Ruynat	bccbe323b7	Add new kubernetes hashes (1.19.10, 1.20.6)	2021-04-15 22:26:22 -07:00
Samuel Liu	d73249a793	Add bash-completion package (#7510 )	2021-04-15 08:33:50 -07:00
Florian Ruynat	cd9a03f86c	Update some docker defaults (#7499 )	2021-04-14 15:13:07 -07:00
muzi502	b47c21c683	Remove some bash completion file when reset cluster (#7502 )	2021-04-14 11:07:09 -07:00
Krystian Młynek	2a2fb68b2f	Add missing proxy environment in crio_repo.yml (#7492 )	2021-04-13 01:20:51 -07:00
Etienne Champetier	bf6a39eb84	Add auto_renew_certificates_systemd_calendar (#7490 ) This allow to configure when K8S certificates renewal runs Signed-off-by: Etienne Champetier <e.champetier@ateme.com>	2021-04-12 09:47:45 -07:00
Etienne Champetier	e444b3c140	Regenerate apiserver.crt on all control-plane nodes (#7463 ) We were regenerating only the cert of the first node While at it speed up the check step Signed-off-by: Etienne Champetier <e.champetier@ateme.com>	2021-04-12 09:17:38 -07:00
emiran-orange	d56ac216f4	Use kubeadm_feature_gates instead of kube_feature_gates to leverage kubeadm feature gates and not to interfere with k8s components feature gates (#7447 )	2021-04-12 01:05:59 -07:00
Zhong Jianxin	420a412234	Add containerd_extra_args (#7461 ) * Add containerd_extra_args This is useful for custom containerd config, e.g. auth Signed-off-by: Zhong Jianxin <azuwis@gmail.com> * Make containerd config.toml mode 0640 It may contain sensitive information like password Signed-off-by: Zhong Jianxin <azuwis@gmail.com>	2021-04-12 01:02:00 -07:00
Samuel Liu	90c643f3ab	format ansible output (#7482 )	2021-04-11 00:37:59 -07:00
Florian Ruynat	6d293ba899	Update hashes with 1.21.0 (#7478 )	2021-04-09 08:05:05 -07:00
Florian Ruynat	aa086e5407	Remove dead code from kubeadm-etcd (#7470 )	2021-04-09 01:10:47 -07:00
Sergey	cce0940e1f	add CI test for auto_renew_certificates (#7472 ) * add CI test for auto_renew_certificates * change timer value fix typo error in rotate cert script	2021-04-09 00:42:47 -07:00
Samuel Liu	e2a7f3e2ab	remove-node roles: fix kubectl absolute path (#7469 ) * kubelet absolute path * kubelet absolute path	2021-04-08 12:24:02 -07:00
Kenichi Omichi	5a351b4b00	Add condition for audit_webhook_mode batch (#7444 ) According to the document[1], audit-webhook-batch-max-size and audit-webhook-batch-max-wait are used only in the batch mode. This adds a condition to avoid unnecessary writting on the config. [1]: https://kubernetes.io/docs/tasks/debug-application-cluster/audit/#batching	2021-04-08 07:52:56 -07:00
Frank Ritchie	6f2abbf79c	Move cilium kvstore settings to configmap (#7462 ) This PR is to move the cilium kvstore options to the configmap rather than specifying them in the deployment as args. This is not technically necessary but keeping all the options in one place is probably not a bad idea. Tested with cilium 1.9.5.	2021-04-08 07:32:56 -07:00
Florian Ruynat	bef1e628ac	Fix issue with 'latest' in containerd version (#7459 )	2021-04-07 08:33:53 -07:00
Frank Ritchie	a6622b176b	Update cilium_ipsec_enabled check (#7413 ) When attempting a fresh install without cilium_ipsec_enabled I ran into the following error: failed: [k8m01] (item={'name': 'cilium', 'file': 'cilium-secret.yml', 'type': 'secret', 'when': 'cilium_ipsec_enabled'}) => {"ansible_loop_var": "item", "changed": false, "item": {"file": "cilium-secret.yml", "name": "cilium", "type": "secret", "when": "cilium_ipsec_enabled"},"msg": "AnsibleUndefinedVariable: 'cilium_ipsec_key' is undefined"} Moving the when condition from the item level to the task level solved the issue.	2021-04-06 06:17:33 -07:00
Maciej Wereski	771a5e26bb	Add KubeSchedulerConfiguration for k8s 1.19 and up (#7351 ) * Add KubeSchedulerConfiguration for k8s 1.19 and up With release of version 1.19.0 of kubernetes KubeSchedulerConfiguration was graduated to beta. It allows to extend different stages of scheduling with profiles. Such effect is achieved by using plugins and extensions. This patch adds KubeSchedulerConfiguration for versions 1.19 and later. Configuration is set to k8s defaults or to kubespray vars. Moving those defaults to new vars will be done in following patch. Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com> * KubeSchedulerConfiguration: add defaults Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>	2021-04-06 00:35:35 -07:00
Florian Ruynat	6479e26904	Replace deprecated 'with_dict' with 'loop' (#7442 )	2021-04-05 13:45:19 -07:00
Samuel Liu	7df7054bdc	remove local lb privileged (#7437 )	2021-04-05 05:22:14 -07:00
Necatican Yıldırım	ceb6c172ad	Crun v0.19 support (#7433 ) * Add support for crun v0.19 * Change default crun version to v0.19	2021-04-05 01:20:13 -07:00
Samuel Liu	7f52c1d3a2	reset roles need flush iptables:raw (#7426 )	2021-04-05 01:16:13 -07:00
Daniil Muidinov	2257181ca8	Set containerd version to 1.4.4 (#7398 ) * Set containerd version to 1.4.3 * Set containerd version to 1.4.4 Co-authored-by: Barry Melbourne <9964974+bmelbourne@users.noreply.github.com>	2021-04-01 23:20:11 -07:00
orange-llajeanne	7e75d48cc4	local provisioner 'useNodeNameOnly' option can be configured (#7421 )	2021-04-01 16:54:11 -07:00
Pasquale Toscano	6330db89a7	Update KataContainers to 1.12.1 (#7427 )	2021-04-01 08:55:21 -07:00
Frank Ritchie	f05d6b3711	Add cilium_ipam_mode variable (#7418 ) Starting with Cilium v1.9 the default ipam mode has changed to "Cluster Scope". See: https://docs.cilium.io/en/v1.9/concepts/networking/ipam/ With this ipam mode Cilium handles assigning subnets to nodes to use for pod ip addresses. The default Kubespray deploy uses the Kube Controller Manager for this (the --allocate-node-cidrs kube-controller-manager flag is set). This makes the proper ipam mode for kubespray using cilium v1.9+ "kubernetes". Tested with Cilium 1.9.5. This PR also mounts the cilium-config ConfigMap for this variable to be read properly. In the future we can probably remove the kvstore and kvstore-opt Cilium Operator args since they can be in the ConfigMap. I will tackle that after this merges.	2021-04-01 07:33:22 -07:00
Helmut Januschka	cce9d3125d	Update k8s-certs-renew.sh.j2 (#7422 ) fix undefinedElse	2021-03-31 00:00:58 -07:00
Etienne Champetier	e381ce57e2	Remove left over nodes_to_drain (#7412 ) Signed-off-by: Etienne Champetier <e.champetier@ateme.com>	2021-03-29 16:17:56 -07:00
Fernando	5dbce6a2bd	add support for custom calico port (#7419 )	2021-03-29 08:38:45 -07:00
Frank Ritchie	5b0e88339a	Update cilium-operator clusterrole (#7416 ) When upgrading cilium from 1.8.8 to 1.9.5 I ran into the following error: level=error msg="Unable to update CRD" error="customresourcedefinitions.apiextensions.k8s.io \"ciliumnodes.cilium.io\" is forbidden: User \"system:serviceaccount:kube-system:cilium-operator\" cannot update resource \"customresourcedefinitions\" in API group \"apiextensions.k8s.io\" at the cluster scope" name=CiliumNode/v2 subsys=k8s The fix was to add the update verb to the clusterrole. I also added create to match the clusterrole created by the cilium helm chart.	2021-03-29 00:04:51 -07:00
Samuel Liu	db43891f2b	remove unused handlers in cilium roles (#7414 )	2021-03-29 00:04:44 -07:00
Terry	f72063e7c2	Remove DNSSEC config management in bootstrap-debian.yml (#7408 ) DNSSEC is off by default on ubuntu/bionic64 (18.04) as per resolved.conf(5). These tasks are artefacts of obsolete infra configuration, and no longer needed. Further removing these tasks resolves the issue that the tasks always reports 'changed' and bounces systemd-resolved unneccesarily, even if there was no actual modification of /etc/systemd/resolved.conf.	2021-03-29 00:00:45 -07:00
Etienne Champetier	36a3a78952	Fix remove-node by removing jq usage (#7405 ) Signed-off-by: Etienne Champetier <e.champetier@ateme.com>	2021-03-26 08:48:43 -07:00
Etienne Champetier	2d1597bf10	Fix k8s-certs-renew for k8s < 1.20 (#7410 ) Signed-off-by: Etienne Champetier <e.champetier@ateme.com>	2021-03-26 08:44:44 -07:00
Anthony Rabbito	edfa3e9b14	Correct Jinja Syntax for etcd-unsupported-arch (#6919 ) `-%` causes `etcd-unsupported-arch: arm64` to print on COL 1 instead of COL 6. Signed-off-by: anthr76 <hello@anthonyrabbito.com>	2021-03-26 02:10:43 -07:00
Kaleb Elwert	6fa3565dac	Allow connecting to bastion via non-standard SSH port (#7396 ) * Allow connecting to bastion via non-standard port * Fix bastion connection when ansible_port is not provided	2021-03-26 00:48:43 -07:00
rptaylor	7dec8e5caa	specify runAsGroup, allow safe sysctls by default (#7399 )	2021-03-25 08:03:30 -07:00
Etienne Champetier	f0cdf71ccb	Remove vault (#7400 ) * Remove contrib/vault This is marked as broken since 2018 / `3dcb914607` This still reference apiserver.pem, not used since `ddffdb63bf` Signed-off-by: Etienne Champetier <e.champetier@ateme.com> * Finish nuking vault from the codebase Signed-off-by: Etienne Champetier <e.champetier@ateme.com>	2021-03-24 09:26:08 -07:00
Boris Barnier	8655b92e93	Set Kube-router version to 1.2.0 (#7402 ) See: `https://github.com/cloudnativelabs/kube-router/releases/tag/v1.2.0`	2021-03-24 09:22:07 -07:00
Jacky Wu	e1c6992c55	fix: correct hardcoded macvlan template, use var macvlan_interface. (#7401 )	2021-03-24 01:46:06 -07:00
Kenichi Omichi	486b223e01	Replace kube-master with kube_control_plane (#7256 ) This replaces kube-master with kube_control_plane because of [1]: The Kubernetes project is moving away from wording that is considered offensive. A new working group WG Naming was created to track this work, and the word "master" was declared as offensive. A proposal was formalized for replacing the word "master" with "control plane". This means it should be removed from source code, documentation, and user-facing configuration from Kubernetes and its sub-projects. NOTE: The reason why this changes it to kube_control_plane not kube-control-plane is for valid group names on ansible. [1]: https://github.com/kubernetes/enhancements/blob/master/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md#motivation	2021-03-23 17:26:05 -07:00
Qasim Sarfraz	d53fd29e34	Add support for cilium ipsec (#7342 ) * Add support for cilium ipsec * Fix typo for bpffs	2021-03-23 13:46:06 -07:00
Maciej Wereski	4f89bfac48	MetalLB: bump to v0.9.6 (#7397 ) Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>	2021-03-23 13:42:06 -07:00
p53	5fee96b404	Fix cinder cert permissions (#7384 ) * Fix permissions of cinder cert * Change runuser for external_cloud_controller to kube user with id 999, part of 999 - kube-cert group	2021-03-23 11:03:37 -07:00
Samuel Liu	12873f916b	download_file for kata (#7393 )	2021-03-23 01:39:36 -07:00
Etienne Champetier	efa180392b	Auto renew control plane certificates (#7358 ) While at it remove force_certificate_regeneration This boolean only forced the renewal of the apiserver certs Either manually use k8s-certs-renew.sh or set auto_renew_certificates Signed-off-by: Etienne Champetier <e.champetier@ateme.com>	2021-03-22 11:22:48 -07:00
Florian Ruynat	6d9ed398e3	Set default k8s version to 1.20.5	2021-03-19 10:04:34 -07:00
Florian Ruynat	6d3dbb43a4	Update hashes for 1.20.5/1.19.9/1.18.17	2021-03-19 10:04:34 -07:00
Necatican Yıldırım	811f546ea6	Download crun using download_file.yml (#7370 ) * Add crun download_url and checksum * Change versioning format to crun native versioning * Download crun using download_file.yml * Get crun version from download defaults * Delegate crun binary copy task to crun role	2021-03-19 08:40:33 -07:00

... 7 8 9 10 11 ...

4576 commits