arzarif
6b71229d3f
Resolve issues associated with Calico deployment in policy-only mode. ( #3392 )
2018-09-27 03:31:14 -07:00
刘旭
145e5c8943
use copy and slurp module ( #3313 )
2018-09-27 02:12:02 -07:00
Victor Palma
dced082e5f
fixes roles/docker/vars/ubuntu-bionic.yml points to xenial ( #3395 )
...
* fixes : #3387
2018-09-27 01:08:39 -07:00
Tupin Laurent
408faac3c9
Pip is required for vault #3376 ( #3378 )
...
* Change execution order for pip
* Remove spaces
2018-09-26 00:28:54 -07:00
Tupin Laurent
cd4a606cb1
UI is required for vault #3376 ( #3377 )
2018-09-26 00:27:38 -07:00
Kuldip Madnani
36898a2c39
Adding pod priority for all the components. ( #3361 )
...
* Changes to assign pod priority to kube components.
* Removed the boolean flag pod_priority_assignment
* Created new priorityclass k8s-cluster-critical
* Created new priorityclass k8s-cluster-critical
* Fixed the trailing spaces
* Fixed the trailing spaces
* Added kube version check while creating Priority Class k8s-cluster-critical
* Moved k8s-cluster-critical.yml
* Moved k8s-cluster-critical.yml to kube_config_dir
2018-09-25 07:50:22 -07:00
Andreas Krüger
d6ebe8c3e7
Sync manifests with kubeadm ( #3383 )
2018-09-24 02:17:18 -07:00
Rui Cao
02de35cfc3
Fix some typos ( #3382 )
...
Signed-off-by: Rui Cao <ruicao@alauda.io>
2018-09-23 06:33:17 -07:00
Sergey Magidovich
2197330727
Add check that kube-master, kube-node and etcd groups are not empty.
2018-09-21 17:02:53 +03:00
Anatoly Rugalev
8f85ea89fa
Added download_validate_certs
option which allows to disables SSL validation for file downloads
2018-09-21 11:51:17 +02:00
k8s-ci-robot
51a5f54fc4
Merge pull request #3335 from AtzeDeVries/fix/ubuntu-xenial-resolv-conf
...
Fix/ubuntu xenial resolv conf
2018-09-20 23:16:11 -07:00
Chris Randles
a1d6078d46
remove /var/lib/cni directory
2018-09-20 15:36:25 -04:00
k8s-ci-robot
7fd87b95cf
Merge pull request #3368 from woopstar/fedora_fix_1
...
Fix CI issue (Fedora task introduce new lookup plugin)
2018-09-20 08:16:22 -07:00
Rajitha Perera
e3d562bcdb
Support for AWS cloud-config ( #1465 )
...
* Support for AWS cloud-config
* Update docs
* Fix version incompatibilities
* Do not use shorthand `default`
* Add new cloud config variable, roleArn
2018-09-20 16:31:28 +02:00
Andreas Kruger
442e6e55b6
Fix CI issue with Fedora
2018-09-20 15:45:15 +02:00
rongzhang
4d1055f5d5
Remove some useless files
2018-09-20 20:24:06 +08:00
k8s-ci-robot
68acdd71f1
Merge pull request #3172 from Atoms/additional-proxy
...
Add additional no proxy parameter for more customization
2018-09-20 03:26:29 -07:00
k8s-ci-robot
62b1ea2b48
Merge pull request #3360 from gabibbo97/master
...
Support Fedora 28
2018-09-20 02:22:53 -07:00
Andreas Kruger
09b67c1ad5
Remove EFK from Kubespray
2018-09-20 10:44:17 +02:00
k8s-ci-robot
8512cc5cca
Merge pull request #3280 from wozniakjan/openstack/openstack_cacert
...
Check `openstack_cacert` for empty string
2018-09-19 22:42:37 -07:00
k8s-ci-robot
3a65c66a3e
Merge pull request #3355 from wwt/rr-v3
...
Uses etcdv3 for calico 3 rr_v4 resources
2018-09-19 22:35:02 -07:00
Giacomo Longo
492b3e525d
Support Fedora 28
2018-09-19 20:11:07 +02:00
Kevin Schuck
639010b3df
Uses environment vars for etcd cert paths
2018-09-19 12:32:16 -05:00
k8s-ci-robot
34d1f0bff2
Merge pull request #3351 from woopstar/kubeadm_token_basic_auth_fix
...
Mount basic auth or token auth dirs to support it on kubeadm deployments
2018-09-19 07:50:43 -07:00
Jan Wozniak
a330b281e8
Check openstack_cacert
for empty string
2018-09-19 16:37:24 +02:00
Kevin Schuck
6f9f80acee
Uses etcdv3 for calico 3 rr_v4 resources
2018-09-19 09:22:52 -05:00
k8s-ci-robot
a8a62afd74
Merge pull request #3304 from kubernetes-incubator/gpu2
...
Add support for GPU accelerator
2018-09-19 07:12:32 -07:00
k8s-ci-robot
7fa682bdd5
Merge pull request #3342 from okamototk/fix_path_for_kubeadm_join
...
Add kubelet path for kubeadm.
2018-09-19 06:17:47 -07:00
Aivars Sterns
34019291b8
Merge pull request #3143 from jbcraig/add_os_trust_id
...
add support for openstack trust to cloud provider config
2018-09-19 16:07:03 +03:00
Antoine Legrand
08179018d4
Merge branch 'master' into gpu2
2018-09-19 15:02:51 +02:00
k8s-ci-robot
b796226869
Merge pull request #3325 from firaxis/configurable_felix_healthhost
...
Make Felix healthhost configurable
2018-09-19 06:02:29 -07:00
k8s-ci-robot
39c567de47
Merge pull request #3307 from kaarolch/upgrade_docs
...
Calico version verification before cluster upgrade begin.
2018-09-19 05:15:55 -07:00
k8s-ci-robot
da4cc74498
Merge pull request #3340 from wwt/master
...
Fixes Calico 3.x BGPPeer resources
2018-09-19 04:43:35 -07:00
Andreas Kruger
cac485756b
Mount basic auth or token auth dirs to support it on kubeadm deployments
2018-09-19 13:21:58 +02:00
Andreas Kruger
c058e7a5ec
Remove audit again from Kubeadm 1.10.x. Write mounts not supported untill 1.11
2018-09-19 13:15:14 +02:00
Andreas Kruger
e0ddabc463
Add support for kubelet_node_custom_flags
2018-09-19 12:58:06 +02:00
Andreas Kruger
940d2fdbb1
Add missing enforce-node-allocatable to kubelet for kubeadm deployments
2018-09-19 11:54:34 +02:00
Andreas Kruger
1c999b2a61
Move kube_kubeadm_controller_extra_args to controllerManagerExtraArgs section. It was placed in controllerManagerExtraVolumes
2018-09-19 11:24:19 +02:00
Andreas Kruger
8e37841a2e
Add audit support to v1alpha1 of Kubeadm
2018-09-19 11:01:30 +02:00
Andreas Kruger
8d1c0c469c
Added missing enable-aggregator-routing option
2018-09-19 10:58:46 +02:00
Andreas Kruger
26d7380c2e
Sync manifests from non-kubeadm to kubeadm deploy
2018-09-19 10:01:45 +02:00
Takashi Okamoto
95703fb6f2
Add kubelet path for kubeadm.
2018-09-19 03:04:03 +00:00
Karol Chrapek
0121bce9e5
Instead of doc update, change the verify step
2018-09-18 22:13:15 +02:00
Kevin Schuck
fb1678d425
Ensures BGPPeer resource names are unique
2018-09-18 10:48:30 -05:00
Alex Yakovenko
884053aaa7
Make Felix healthhost configurable
2018-09-18 15:48:29 +03:00
k8s-ci-robot
3d27007750
Merge pull request #3329 from riverzhang/checksum
...
Keep list of k8s checksums for hyperkube and kubeadm
2018-09-18 02:42:59 -07:00
AtzeDeVries
4cbd97667d
Merge remote-tracking branch 'upstream/master' into fix/ubuntu-xenial-resolv-conf
2018-09-18 09:51:46 +02:00
k8s-ci-robot
2730c90dcd
Merge pull request #3320 from riverzhang/kubelet
...
Support dynamic kubelet config
2018-09-18 00:16:04 -07:00
rongzhang
09a1bcb30b
Keep list of k8s checksums for hyperkube and kubeadm
...
Keep a list of checksums for kubeadm and hyperkube downloads.
Makes it easier to switch version
2018-09-18 15:05:17 +08:00
rongzhang
77e08ba204
Support dynamic kubelet config
...
https://kubernetes.io/blog/2018/07/11/dynamic-kubelet-configuration/
2018-09-18 08:44:39 +08:00
Kevin Schuck
d3adf09bde
Fixes BGPPeer resource for calico >= 3.0.0
2018-09-17 15:22:28 -05:00
Erwan Miran
afa2a5f1c4
enhanced reset for contiv
2018-09-17 16:46:19 +02:00
Erwan Miran
bcaf2f9ea3
contiv 1.2.1
2018-09-17 16:45:05 +02:00
k8s-ci-robot
d16b562b18
Merge pull request #3316 from mattymo/tiller_override_fix
...
Fix tiller override command
2018-09-17 05:12:05 -07:00
k8s-ci-robot
0538f8a70d
Merge pull request #3290 from riverzhang/fix-upgrade
...
Fix upgrade k8s
2018-09-17 04:26:47 -07:00
k8s-ci-robot
1a426ada3c
Merge pull request #3324 from alvistack/cert-manager-v0.5.0
...
cert-manager: Upgrade to 0.5.0
2018-09-17 04:20:56 -07:00
Wong Hoi Sing Edison
a544e54578
weave: Upgrade to 2.4.1
...
Upstream Changes:
- weave 2.4.1 (https://github.com/weaveworks/weave/releases/tag/v2.4.1 )
Our Changes:
- Templates sync with upstream manifests
2018-09-17 17:09:19 +08:00
Wong Hoi Sing Edison
f34a6699ef
cert-manager: Upgrade to 0.5.0
...
Upstream Changes:
- cert-manager 0.5.0 (https://github.com/jetstack/cert-manager/releases/tag/v0.5.0 )
Our Changes:
- Templates sync with upstream manifests
2018-09-17 16:58:04 +08:00
AtzeDeVries
482857611a
added extra var for ubuntu 18 netplan resolv
2018-09-17 09:01:55 +02:00
AtzeDeVries
8d8bbc294a
fix for resolvconf in ubuntu18
2018-09-17 09:00:55 +02:00
k8s-ci-robot
7f91f6e034
Merge pull request #3287 from Kami-no/coredns_metrics
...
Monitor CoreDNS over svc
2018-09-16 23:39:59 -07:00
rongzhang
84c4c7dc82
Use synchronize module
2018-09-16 20:36:44 +08:00
rongzhang
1d4aa7abcc
Fix upgrade k8s
2018-09-16 10:35:12 +08:00
Matthew Mosesohn
fe35c32c62
Fix tiller override command
2018-09-15 16:35:19 +03:00
Rong Zhang
aa0da221e9
Merge pull request #2880 from hfinucane/rh7-paths
...
Fix #2261 by supporting Red Hat's limited PATH
2018-09-15 19:27:22 +08:00
k8s-ci-robot
f1403493df
Merge pull request #3296 from rabi/fix_cilium_crio
...
Add volume and volumeMount for crio-socket
2018-09-15 03:23:02 -07:00
k8s-ci-robot
36901d8394
Merge pull request #3309 from ant31/fix_download_file
...
Fix download file
2018-09-15 03:18:23 -07:00
k8s-ci-robot
e6a2e34dd1
Merge pull request #3315 from riverzhang/upgrade-kubedns
...
Upgrade kubedns to 1.14.11
2018-09-15 02:08:20 -07:00
rongzhang
934d92f09c
Upgrade kubedns to 1.14.11
2018-09-15 15:22:38 +08:00
k8s-ci-robot
5e59541faa
Merge pull request #3258 from okamototk/fix_kubectl_path
...
absolute path for kubectl.
2018-09-13 14:38:20 -07:00
Antoine Legrand
d94b7fd57c
Don't download binary if docker is selected
2018-09-13 22:06:51 +02:00
k8s-ci-robot
9964ba77ee
Merge pull request #3305 from mattymo/fixup_upgrade
...
Fixes for upgrade mode
2018-09-13 12:57:23 -07:00
k8s-ci-robot
153661cc47
Merge pull request #3284 from mattymo/more_calico_legacy
...
Put back legacy support for calico ippools and bgp settings
2018-09-13 09:25:26 -07:00
Matthew Mosesohn
8becd905b8
Fixes for upgrade mode
...
Uses correct flag for draining with a pod selector
Verifies minimum kubectl version for compatibility
2018-09-13 18:42:01 +03:00
Matthew Mosesohn
c83350e597
refactor to base on calico_version
2018-09-13 18:05:10 +03:00
k8s-ci-robot
ffbe9e7fd8
Merge pull request #1973 from guenhter/rsync-cmd-to-synchronize
...
Replace the raw rsync command with the synchronize module
2018-09-13 03:12:05 -07:00
AtzeDeVries
91b02c057e
Add support for GPU accelerator
2018-09-13 11:53:11 +02:00
Matthew Mosesohn
55d76ea3d8
Update install.yml
2018-09-13 12:04:53 +03:00
rabi
1df0b67ec1
Add volume and volumeMount for crio-socket
...
This commit fixes #3295
2018-09-13 14:34:44 +05:30
k8s-ci-robot
218e527363
Merge pull request #3243 from mirwan/helm_binary_should_be_installed_on_all_masters
...
Install Helm client on all masters
2018-09-13 00:39:36 -07:00
k8s-ci-robot
27fc391f71
Merge pull request #3291 from mirwan/remove_insecure-bind-address_when_insecure_port_is_0
...
Remove --insecure-bind-address when insecure-port=0
2018-09-13 00:34:39 -07:00
Matthew Mosesohn
1091e82327
Update install.yml
2018-09-12 22:15:46 +03:00
k8s-ci-robot
a5cc8537f9
Merge pull request #3283 from mattymo/more_upgrade_options
...
Extra options for upgrade mode
2018-09-12 10:50:33 -07:00
Matthew Mosesohn
d692737a13
Extra options for upgrade mode
...
Optionally do not drain nodes by setting drain_nodes to false
Optionally set a labelselector to target which pods should be drained.
2018-09-12 17:05:41 +03:00
Matthew Mosesohn
cc79125d3e
Update install.yml
2018-09-12 17:03:55 +03:00
k8s-ci-robot
a801e02cea
Merge pull request #3261 from mattymo/etcd_ssl_dir_perms
...
Ensure etcd file permissions are correct when using vault
2018-09-12 01:10:26 -07:00
Zinin D.A
29c7775ea1
Monitor CoreDNS over svc
2018-09-12 10:24:15 +03:00
k8s-ci-robot
cbf099de4d
Merge pull request #3285 from mirwan/fix_netchecker_sa_when_psp
...
Fix wrong sa name in crb when psp is enabled
2018-09-12 00:20:38 -07:00
k8s-ci-robot
c8630f46fd
Merge pull request #3286 from fritchie/master
...
Change update strategy to RollingUpdate
2018-09-12 00:18:05 -07:00
Erwan Miran
af74d85b7d
Remove --insecure-bind-address when insecure-port=0
2018-09-12 08:22:11 +02:00
Chad Swenson
97e5f28537
Revert "Remove insecure-port and insecure-bind-address when possible"
2018-09-11 17:42:12 -05:00
Frank Ritchie
f42e0a4711
Change update strategy to RollingUpdate.
...
When enable_network_policy is set to True with Calico 3 kubectl
apply fails with the error:
The Deployment "calico-kube-controllers" is invalid:
spec.strategy.rollingUpdate: Forbidden: may not be specified when
strategy type is 'Recreate'
See
https://github.com/kubernetes-incubator/kubespray/issues/3267
Changing the update strategy to RollingUpdate avoids this error.
2018-09-11 12:03:42 -04:00
Matthew Mosesohn
d91f9e14e6
Put back legacy support for calico ippools and bgp settings
2018-09-11 16:40:11 +03:00
Erwan Miran
e24b1220a0
Fix wrong sa name in crb when psp is enabled
2018-09-11 15:04:55 +02:00
k8s-ci-robot
0a720b35af
Merge pull request #3270 from riverzhang/fix-registry
...
Add insecure_registry config to docker options
2018-09-10 04:28:52 -07:00
rongzhang
f557b54489
Add docker_
to values
2018-09-10 18:05:49 +08:00
Erwan Miran
04852ad753
Install Helm on all masters
2018-09-10 11:39:26 +02:00
Matthew Mosesohn
aaa9a4efac
Ensure vault file permissions are correct
2018-09-10 12:04:04 +03:00
rongzhang
0140cf71c8
Upgrade kubernetes to v1.11.3
2018-09-10 15:52:49 +08:00
rongzhang
51794e4c13
Deploying k8s clusters in a private environment
2018-09-09 11:06:00 +08:00