C12s/c12s-kubespray

Author	SHA1	Message	Date
Calin Cristian Andrei	fad296616c	[docker] use cri-dockerd instead of dockershim for any kubernetes version deployed with docker as the container_manager	2022-06-15 00:57:20 -07:00
Kay Yan	85271fc2e5	add-ci-for-ubuntu2204 (#8958 )	2022-06-15 00:47:19 -07:00
Kenichi Omichi	cd7381d8de	Drop Ansible support for v2.9 and v2.10 (#8925 ) Ansible v2.9 and v2.10 are EOL as [1]. This drops those version supports by following the upstream Ansible. This sets use_ssh_args true always because that is required to use ssh_args on ansible.cfg on Ansible v2.11 or later[2]. ansible_ssh_host is replaced with ansible_host because ansible_ssh_host has been deprecated already and cenots7 jobs were failed due to the deprecated ansible_ssh_host. [1]: https://docs.ansible.com/ansible/devel/reference_appendices/release_and_maintenance.html#ansible-core-changelogs [2]: https://docs.ansible.com/ansible/latest/collections/ansible/posix/synchronize_module.html#parameter-use_ssh_args	2022-06-09 07:07:42 -07:00
Ilya Margolin	cc6cbfbe71	Allow disabling calico CNI logs with calico_cni_log_file_path (#8921 ) * Allow disabling calico CNI logs with calico_cni_log_file_path Calico CNI logs up to 1G if it log a lot with current default settings: log_file_max_size 100 Max file size in MB log files can reach before they are rotated. log_file_max_age 30 Max age in days that old log files will be kept on the host before they are removed. log_file_max_count 10 Max number of rotated log files allowed on the host before they are cleaned up. See https://projectcalico.docs.tigera.io/reference/cni-plugin/configuration#logging To save disk space, make the path configurable and allow disabling this log by setting `calico_cni_log_file_path: false` * Fix markdown * Update roles/network_plugin/canal/templates/cni-canal.conflist.j2 Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com> Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>	2022-06-07 09:22:56 -07:00
zhougw	14c0f368b6	the KUESPRAYDIR defined but never used (#8930 ) * fix dir error * the command line should align	2022-06-06 07:42:23 -07:00
Alessio Greggi	d22204a59f	docs: add hardening guide (#8868 )	2022-05-29 12:36:50 -07:00
Kenichi Omichi	0e6b727e53	Update docs for using venv (#8842 ) Due many patterns of Linux distributions, it is difficult to install ansible dependencies as system-wide stably. Apart of Kubespray doc[1] recommends to use venv to avoid such issue, and this applies venv usage to the other parts of the doc. [1]: https://github.com/kubernetes-sigs/kubespray/blob/master/docs/setting-up-your-first-cluster.md#set-up-kubespray	2022-05-19 23:39:12 -07:00
Cristian Calin	0c504e4984	[docs] document support for ansible versions (#8827 ) drop note about not supporting ansible 2.9 since we still cover it in nightly CI	2022-05-16 00:50:17 -07:00
Kenichi Omichi	0bf070c33b	doc: write how to use kata-container for pods (#8817 ) kata-container is not used by default even if enabling kata_containers_enabled. This updates the doc for writing how to do that.	2022-05-13 23:15:18 -07:00
Oogy	5684610a55	Support metallb peer password (#8792 ) * support metallb peer password * add MetalLB BGP password example	2022-05-11 21:39:15 -07:00
Necatican Yıldırım	13443b05a6	Overhaul Cilium manifests to match the newer versions (#8717 ) * [cilium] Separate templates for cilium, cilium-operator, and hubble installations Signed-off-by: necatican <necaticanyildirim@gmail.com> * [cilium] Update cilium-operator templates Signed-off-by: necatican <necaticanyildirim@gmail.com> * [cilium] Allow using custom args and mounting extra volumes for the Cilium Operator Signed-off-by: necatican <necaticanyildirim@gmail.com> * [cilium] Update the cilium configmap to filter out the deprecated variables, and add the new variables Signed-off-by: necatican <necaticanyildirim@gmail.com> * [cilium] Add an option to use Wireguard encryption on Cilium 1.10 and up Signed-off-by: necatican <necaticanyildirim@gmail.com> * [cilium] Update cilium-agent templates Signed-off-by: necatican <necaticanyildirim@gmail.com> * [cilium] Bump Cilium version to 1.11.3 Signed-off-by: necatican <necaticanyildirim@gmail.com>	2022-05-11 06:23:04 -07:00
weizhoublue	1d96f465f4	arm64 support of cilium (#8803 ) when cilium v1.10 , it is ok to support arm64 https://cilium.io/blog/2021/05/20/cilium-110 Signed-off-by: weizhou.lan@daocloud.io <weizhou.lan@daocloud.io>	2022-05-10 02:55:43 -07:00
Alessio Greggi	37a5271f5a	feat: add variables to manage makeIPTablesUtilChains and streamingConnectionIdleTimeout kubelet parameters (#8796 )	2022-05-09 09:25:19 -07:00
Alessio Greggi	e7df4d3dd9	add support for `service-account-lookup` parameter (#8781 ) * feat: add variable to manage service-account-lookup on kube-apiserver * docs: add documentation about service-account-lookup variable	2022-05-06 00:39:07 -07:00
Alessio Greggi	fa1d222eee	add support for `EventRateLimit` plugin configuration (#8711 ) * feat: add support for EventRateLimit admission plugin * docs: add documentation about admission_control_config_file and EventRateLimit configuration	2022-05-02 11:03:15 -07:00
Mathieu Parent	e6c4330e4e	calico: vxlan is the default for calico_network_backend (#8750 ) Since https://github.com/kubernetes-sigs/kubespray/pull/8434	2022-04-27 02:24:11 -07:00
Kenichi Omichi	1e827f9807	Update kata-containers.md (#8747 ) * kata container related options exist in k8s-cluster.yml, not k8s_cluster.yml * https://github.com/kata-containers/runtime has been archived and https://github.com/kata-containers/kata-containers is used today.	2022-04-26 07:06:53 -07:00
Cristian Calin	45262da726	[calico] call calico checks early on to prevent altering the cluster with bad configuration (#8707 )	2022-04-14 01:08:46 -07:00
Mathieu Parent	996ef98b87	Add support for kube-vip (#8669 ) Signed-off-by: Mathieu Parent <math.parent@gmail.com>	2022-04-07 10:37:57 -07:00
Alessio Greggi	bba91a7524	split kube_feature_gates variable for different kubernetes components (#8677 ) * feat: split kube_feature_gates variable for different kubernetes components * docs: add kube_feaute_gates componet variables	2022-04-05 05:39:37 -07:00
Kenichi Omichi	6cc9da6b0a	Update vagrant.md (#8663 ) To read it easily, this puts new lines.	2022-03-31 00:07:00 -07:00
Cristian Calin	ef29455652	[ansible] make ansible 5.x the new default version (#8660 ) * [ansible] make ansible 5.x the new default version and move different versions tested to nightly jobs * [CI] jobs were missing proper ansible cleanup	2022-03-29 15:36:11 -07:00
Cristian Calin	dd2d95ecdf	[calico] don't enable ipip encapsulation by default and use vxlan in CI (#8434 ) * [calico] make vxlan encapsulation the default * don't enable ipip encapsulation by default * set calico_network_backend by default to vxlan * update sample inventory and documentation * [CI] pin default calico parameters for upgrade tests to ensure proper upgrade * [CI] improve netchecker connectivity testing * [CI] show logs for tests * [calico] tweak task name * [CI] Don't run the provisioner from vagrant since we run it in testcases_run.sh * [CI] move kube-router tests to vagrant to avoid network connectivity issues during netchecker check * service proxy mode still fails connectivity tests so keeping it manual mode * [kube-router] account for containerd use-case	2022-03-17 18:05:39 -07:00
Cristian Calin	394857b5ce	[docker] add support for cri-dockerd as a replacement for dockershim (#8623 )	2022-03-16 16:28:11 -07:00
Tom Janson	2e925f82ef	Revert "Fix: typos in docs and comments (#7805 )" (#8592 ) This reverts commit `417180246c`.	2022-03-02 11:57:13 -08:00
Tom Janson	3e8e64a3e5	fix typo / error regarding etcd and k8s_cluster groups (#8580 ) As far as I can tell this is simply a typo that has existed from the beginning. Having it this way around (`etcd` group as a child and thus subset of `k8s_cluster`) mirrors what is written in the preceeding sentence.	2022-02-28 02:54:58 -08:00
Alex	36393d77d3	Encrypting Secret Data at Rest (#8574 ) * change default value for Encrypting Secret Data at Rest to secretbox, remove experimental flag and add documentation * fix MD012/no-multiple-blanks	2022-02-23 03:04:18 -08:00
Necatican Yıldırım	e9c8913248	Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable (#8317 ) * Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable Signed-off-by: necatican <necaticanyildirim@gmail.com> * Add etcd kubeadm deployment documentation Signed-off-by: necatican <necaticanyildirim@gmail.com> * Refactor warning for the deprecated 'etcd_kubeadm_enabled' variable Signed-off-by: necatican <necaticanyildirim@gmail.com>	2022-02-22 08:53:16 -08:00
Mac Chaffee	0f73d87509	Allow pausing after upgrade but before uncordon (#8530 ) * Allow pausing after upgrade but before uncordon * Expand docs for upgrade pausing vars Signed-off-by: Mac Chaffee <me@macchaffee.com>	2022-02-15 16:39:02 -08:00
kakkotetsu	98d5d0cdd5	add support for Dual Stack node InternalIP (#8542 )	2022-02-15 00:28:02 -08:00
Takuya Murakami	da8522af64	docs: Update offline-environment.md for containerd (#8520 ) (#8523 ) * Add containerd/runc/nerdctl download url * Add insecure registries configuration for containerd	2022-02-09 08:08:18 -08:00
Krystian Młynek	87928baa31	CRI-O: fix unqualified-search registries (#8496 )	2022-02-04 23:46:50 -08:00
Julio H Morimoto	eac799f589	Amend documentation for docker to containerd migration (#8477 ) * Amend PR https://github.com/kubernetes-sigs/kubespray/pull/8471 with missing inventory configuration. Signed-off-by: Julio Morimoto <julio@morimoto.net.br> * Amend PR https://github.com/kubernetes-sigs/kubespray/pull/8471 with missing inventory configuration. Signed-off-by: Julio Morimoto <julio@morimoto.net.br>	2022-02-02 00:46:22 -08:00
Tristan	92d612c3e0	8487: Allow override of default CoreDNS zone cache (#8488 ) Using the coredns_cluster_zone_cache_block variable	2022-02-01 00:48:18 -08:00
Ilya Margolin	7d4d554436	Document host_resolvconf as default value for resolvconf_mode (#8493 ) refs #8247	2022-01-31 03:12:24 -08:00
Cristian Calin	c40b43de01	[mitogent] update to 0.3.2 (#8470 )	2022-01-27 08:36:59 -08:00
Julio H Morimoto	b0eb5650da	Provide initial guidelines for a container engine migration (docker-2-containerd), with special emphasis on the fact that the procedure is still not officially supported. (#8471 ) Follow up from https://github.com/kubernetes-sigs/kubespray/issues/8431. Signed-off-by: Julio Morimoto <julio@morimoto.net.br>	2022-01-27 01:40:10 -08:00
Florian Ruynat	d580014c66	Fix CI for Fedora (followup) + OpenSUSE Leap (update to 15.3) (#8407 ) * Fix fedora jobs - followup * Update OpenSUSE Leap to 15.3 * Fix cilium version in README + update minor 1.11.1	2022-01-24 23:24:30 -08:00
Victor Morales	e88aa7c96b	Add youki runtime support (#8411 )	2022-01-21 14:01:07 -08:00
Pav K	6e2e61012a	Docs - Removed incorrect info on calico_rr. (#8437 )	2022-01-17 02:55:30 -08:00
Necatican Yıldırım	caff539ccd	Add identity_allocation_mode support for Cilium (#8430 ) Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com> Signed-off-by: necatican <necaticanyildirim@gmail.com> Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>	2022-01-16 09:29:28 -08:00
Mathieu Parent	43d128362f	Document image_command_tool and image_command_tool_on_localhost (#8409 ) Signed-off-by: Mathieu Parent <mathieu.parent@insee.fr>	2022-01-11 15:35:24 -08:00
Tovin Seven	e0d67367ed	Update installation doc with vagrant (#8406 )	2022-01-11 05:19:17 -08:00
Bart Sloeserwij	59f62473c9	Update configuration of registries in cri-o (#7852 ) * Update configuration of registries in cri-o * Update docs to match new registry configuration	2022-01-05 07:36:40 -08:00
Cristian Calin	3eab1129b9	CI: Replace CentOS 8 with AlmaLinux 8 before CentOS 8 EOL end of 2021 (#8297 )	2022-01-05 02:20:33 -08:00
Kenichi Omichi	78c83a8f26	Update containerd doc (#8369 ) This is a follow-up change for https://github.com/kubernetes-sigs/kubespray/pull/7911	2022-01-05 00:32:33 -08:00
Nguyễn Trung	e72f8e0412	Update node about container_manager variable (#7911 ) I was deploy my cluster with separate etcd cluster and not intersect with kube_control_plane or kube_node. And I want to run etcd cluster in docker but still used containerd to make container runtime for all other nodes. Therefore, I was added note to this doc for everyone Thank !	2022-01-04 14:29:20 -08:00
Nicolas MASSE	f01f7c54aa	Add support for CRI-O user namespaces (#8268 ) * add support for cri-o user namespaces * comply with yamllint rules	2021-12-20 06:37:25 -08:00
kakkotetsu	c59407f105	add support for Calico BGPPeer sourceAddress (#8306 )	2021-12-20 01:51:25 -08:00
Hanna Bledai	615216f397	Fix if bind-address is not set to 0.0.0.0 (#8262 ) * if bind-address is not set to 0.0.0.0 * Update docs and left comments * fix yamllist check: remove space	2021-12-05 23:58:32 -08:00

1 2 3 4 5 ...

639 commits