C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
6437 commits 17 branches 66 tags 141 MiB
Commit graph

625 commits

Author SHA1 Message Date
Alessio Greggi fa1d222eee
add support for EventRateLimit plugin configuration (#8711) 
* feat: add support for EventRateLimit admission plugin

* docs: add documentation about admission_control_config_file and EventRateLimit configuration
 2022-05-02 11:03:15 -07:00
Mathieu Parent e6c4330e4e
calico: vxlan is the default for calico_network_backend (#8750) 
Since https://github.com/kubernetes-sigs/kubespray/pull/8434
 2022-04-27 02:24:11 -07:00
Kenichi Omichi 1e827f9807
Update kata-containers.md (#8747) 
* kata container related options exist in k8s-cluster.yml,
  not k8s_cluster.yml

* https://github.com/kata-containers/runtime has been archived and
  https://github.com/kata-containers/kata-containers is used today.
 2022-04-26 07:06:53 -07:00
Cristian Calin 45262da726
[calico] call calico checks early on to prevent altering the cluster with bad configuration (#8707) 2022-04-14 01:08:46 -07:00
Mathieu Parent 996ef98b87
Add support for kube-vip (#8669) 
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
 2022-04-07 10:37:57 -07:00
Alessio Greggi bba91a7524
split kube_feature_gates variable for different kubernetes components (#8677) 
* feat: split kube_feature_gates variable for different kubernetes components

* docs: add kube_feaute_gates componet variables
 2022-04-05 05:39:37 -07:00
Kenichi Omichi 6cc9da6b0a
Update vagrant.md (#8663) 
To read it easily, this puts new lines.
 2022-03-31 00:07:00 -07:00
Cristian Calin ef29455652
[ansible] make ansible 5.x the new default version (#8660) 
* [ansible] make ansible 5.x the new default version and move different versions tested to nightly jobs

* [CI] jobs were missing proper ansible cleanup
 2022-03-29 15:36:11 -07:00
Cristian Calin dd2d95ecdf
[calico] don't enable ipip encapsulation by default and use vxlan in CI (#8434) 
* [calico] make vxlan encapsulation the default

* don't enable ipip encapsulation by default
* set calico_network_backend by default to vxlan
* update sample inventory and documentation

* [CI] pin default calico parameters for upgrade tests to ensure proper upgrade

* [CI] improve netchecker connectivity testing

* [CI] show logs for tests

* [calico] tweak task name

* [CI] Don't run the provisioner from vagrant since we run it in testcases_run.sh

* [CI] move kube-router tests to vagrant to avoid network connectivity issues during netchecker check

* service proxy mode still fails connectivity tests so keeping it manual mode

* [kube-router] account for containerd use-case
 2022-03-17 18:05:39 -07:00
Cristian Calin 394857b5ce
[docker] add support for cri-dockerd as a replacement for dockershim (#8623) 2022-03-16 16:28:11 -07:00
Tom Janson 2e925f82ef
Revert "Fix: typos in docs and comments (#7805)" (#8592) 
This reverts commit 417180246c.
 2022-03-02 11:57:13 -08:00
Tom Janson 3e8e64a3e5
fix typo / error regarding etcd and k8s_cluster groups (#8580) 
As far as I can tell this is simply a typo that has existed from the beginning. Having it this way around (`etcd` group as a child and thus subset of `k8s_cluster`) mirrors what is written in the preceeding sentence.
 2022-02-28 02:54:58 -08:00
Alex 36393d77d3
Encrypting Secret Data at Rest (#8574) 
* change default value for Encrypting Secret Data at Rest to secretbox, remove experimental flag and add documentation

* fix MD012/no-multiple-blanks
 2022-02-23 03:04:18 -08:00
Necatican Yıldırım e9c8913248
Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable (#8317) 
* Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable

Signed-off-by: necatican <necaticanyildirim@gmail.com>

* Add etcd kubeadm deployment documentation

Signed-off-by: necatican <necaticanyildirim@gmail.com>

* Refactor warning for the deprecated 'etcd_kubeadm_enabled' variable

Signed-off-by: necatican <necaticanyildirim@gmail.com>
 2022-02-22 08:53:16 -08:00
Mac Chaffee 0f73d87509
Allow pausing after upgrade but before uncordon (#8530) 
* Allow pausing after upgrade but before uncordon

* Expand docs for upgrade pausing vars

Signed-off-by: Mac Chaffee <me@macchaffee.com>
 2022-02-15 16:39:02 -08:00
kakkotetsu 98d5d0cdd5
add support for Dual Stack node InternalIP (#8542) 2022-02-15 00:28:02 -08:00
Takuya Murakami da8522af64
docs: Update offline-environment.md for containerd (#8520) (#8523) 
* Add containerd/runc/nerdctl download url
* Add insecure registries configuration for containerd
 2022-02-09 08:08:18 -08:00
Krystian Młynek 87928baa31
CRI-O: fix unqualified-search registries (#8496) 2022-02-04 23:46:50 -08:00
Julio H Morimoto eac799f589
Amend documentation for docker to containerd migration (#8477) 
* Amend PR https://github.com/kubernetes-sigs/kubespray/pull/8471 with missing inventory configuration.

Signed-off-by: Julio Morimoto <julio@morimoto.net.br>

* Amend PR https://github.com/kubernetes-sigs/kubespray/pull/8471 with missing inventory configuration.

Signed-off-by: Julio Morimoto <julio@morimoto.net.br>
 2022-02-02 00:46:22 -08:00
Tristan 92d612c3e0
8487: Allow override of default CoreDNS zone cache (#8488) 
Using the coredns_cluster_zone_cache_block variable
 2022-02-01 00:48:18 -08:00
Ilya Margolin 7d4d554436
Document host_resolvconf as default value for resolvconf_mode (#8493) 
refs #8247
 2022-01-31 03:12:24 -08:00
Cristian Calin c40b43de01
[mitogent] update to 0.3.2 (#8470) 2022-01-27 08:36:59 -08:00
Julio H Morimoto b0eb5650da
Provide initial guidelines for a container engine migration (docker-2-containerd), with special emphasis on the fact that the procedure is still not officially supported. (#8471) 
Follow up from https://github.com/kubernetes-sigs/kubespray/issues/8431.

Signed-off-by: Julio Morimoto <julio@morimoto.net.br>
 2022-01-27 01:40:10 -08:00
Florian Ruynat d580014c66
Fix CI for Fedora (followup) + OpenSUSE Leap (update to 15.3) (#8407) 
* Fix fedora jobs - followup

* Update OpenSUSE Leap to 15.3

* Fix cilium version in README + update minor 1.11.1
 2022-01-24 23:24:30 -08:00
Victor Morales e88aa7c96b
Add youki runtime support (#8411) 2022-01-21 14:01:07 -08:00
Pav K 6e2e61012a
Docs - Removed incorrect info on calico_rr. (#8437) 2022-01-17 02:55:30 -08:00
Necatican Yıldırım caff539ccd
Add identity_allocation_mode support for Cilium (#8430) 
Co-authored-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
Signed-off-by: necatican <necaticanyildirim@gmail.com>

Co-authored-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
 2022-01-16 09:29:28 -08:00
Mathieu Parent 43d128362f
Document image_command_tool and image_command_tool_on_localhost (#8409) 
Signed-off-by: Mathieu Parent <mathieu.parent@insee.fr>
 2022-01-11 15:35:24 -08:00
Tovin Seven e0d67367ed
Update installation doc with vagrant (#8406) 2022-01-11 05:19:17 -08:00
Bart Sloeserwij 59f62473c9
Update configuration of registries in cri-o (#7852) 
* Update configuration of registries in cri-o

* Update docs to match new registry configuration
 2022-01-05 07:36:40 -08:00
Cristian Calin 3eab1129b9
CI: Replace CentOS 8 with AlmaLinux 8 before CentOS 8 EOL end of 2021 (#8297) 2022-01-05 02:20:33 -08:00
Kenichi Omichi 78c83a8f26
Update containerd doc (#8369) 
This is a follow-up change for https://github.com/kubernetes-sigs/kubespray/pull/7911
 2022-01-05 00:32:33 -08:00
Nguyễn Trung e72f8e0412
Update node about container_manager variable (#7911) 
I was deploy my cluster with separate etcd cluster and not intersect with kube_control_plane or kube_node. And I want to run etcd cluster in docker but still used containerd to make container runtime for all other nodes. Therefore, I was added note to this doc for everyone 

Thank !
 2022-01-04 14:29:20 -08:00
Nicolas MASSE f01f7c54aa
Add support for CRI-O user namespaces (#8268) 
* add support for cri-o user namespaces

* comply with yamllint rules
 2021-12-20 06:37:25 -08:00
kakkotetsu c59407f105
add support for Calico BGPPeer sourceAddress (#8306) 2021-12-20 01:51:25 -08:00
Hanna Bledai 615216f397
Fix if bind-address is not set to 0.0.0.0 (#8262) 
* if bind-address is not set to 0.0.0.0

* Update docs and left comments

* fix yamllist check: remove space
 2021-12-05 23:58:32 -08:00
Florian Ruynat e19ce27352
Remove ovn4nfv support (#8265) 2021-12-03 11:56:35 -08:00
Florian Ruynat e82443241b
Move opensuse CI to docker and fix ubuntu16 containerd version for docker (#8257) 2021-12-02 08:01:34 -08:00
Florian Ruynat b38382a68f
Move cri-o default package to 1.22 (#8258) 2021-12-02 06:21:34 -08:00
Florian Ruynat 30ec03259d
Remove fedora33 - eol (#8246) 2021-11-30 15:53:17 -08:00
Cristian Calin ee882fa462
Add capability to use swap, requires Kube 1.22 (#8241) 
* Alpha-NodeSwap: allow nodes to use swap

* CI: Add Fedora 35 with experimental swap job
 2021-11-30 00:52:56 -08:00
Cristian Calin 52ee5d0fff
Various documentation updates (#8243) 
* Docs: update CONTRIBUTING.md

* Docs: clean up outdated roadmap and point to github issues instead

* Docs: update note on kubelet_cgroup_driver

* Docs: update kata containers docs with note about cgroup driver

* Docs: note about CI specific overrides
 2021-11-29 15:05:21 -08:00
Florian Ruynat a5f88e14d0
Cleanup tests (#8234) 
* Add Fedora 35 image, support and CI

* Cleanup tests and allow_failure for vagrant
 2021-11-26 09:00:51 -08:00
Cristian Calin e78bda65fe
Defaults: replace docker with containerd as our default container_manager (#8175) 
* Defaults: replace docker with containerd as our default container_manager

* CI: Use docker for download_localhost test

* Defaults: with container_manager=containerd we need etcd_deployment_type=host

* CI: Run weave jobs with docker

* CI: Vagrant don't download_force_cache

* CI: Fix upgrade tests

* should run compatible with old settings, this means docker
* we need to run with a distro that has at least modern containerd,
  this means move from debian9 to debian10 to allow `containerd_version`
  to match between 2.17 and master
 2021-11-25 06:54:33 -08:00
zhengtianbao e35a87e3eb
Update registry template (#8198) 
* Add registry replica setting

* Add registry liveness and readiness probe

* Set the security context for registry

* Add registry pvc access mode option

* registry add replica requirement check

* docs: add registry replicas setting note

* Update docs/kubernetes-apps/registry.md

Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>

Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
 2021-11-22 02:45:09 -08:00
Karthikeya Viswanath 25316825b1
docs: remove basic auth reference in getting-started (#7823) 2021-11-19 14:49:23 -08:00
Mathieu Parent 0263c649f4
Allow to scrape etcd metrics using a service (#8203) 
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
 2021-11-17 23:53:01 -08:00
Lubos Mercl 424163c7d3
add gce support (#8179) 
Author:    lmercl <lubos.mercl@gmail.com>
Date:      Wed Nov 10 15:30:04 2021 +0000

fix markdown
 2021-11-16 08:58:28 -08:00
EDGsheryl 4d79a55904
Remove extra parameter kube_proxy_remove (#8158) 
Signed-off-by: EDGsheryl <edgsheryl@gmail.com>
 2021-11-15 00:02:48 -08:00
Cristian Calin 039205560a
nodelocaldns: allow a secondary pod for nodelocaldns for local-HA (#8100) 
* nodelocaldns: allow a secondary pod for nodelocaldns for local-HA

* CI: add job to test nodelocaldns secondary
 2021-11-09 09:57:47 -08:00