douzeb
96f5d1ca87
Add c12s sample inventory and deploy script
2022-12-21 23:34:33 +01:00
douzeb
7cb7887234
increase max ansible version
2022-12-21 18:57:38 +01:00
yanggang
4728739597
follow containerd1.16.13 and 1.16.14 ( #9585 )
...
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
2022-12-21 00:35:28 -08:00
Kay Yan
fc0d58ff48
fix-missing-control-plane-taint ( #9592 )
2022-12-19 15:57:43 -08:00
janaurka
491e260d20
Feature/add flannel wireguard encryption backend as option ( #9583 )
...
* feat(): Add wireguard backend to flannel cni
As described in the flannel docs:
https://github.com/flannel-io/flannel/blob/master/Documentation/backends.md#wireguard
This does not support optional configuration methods like:
- setting a psk (will be autogenerated by default)
- chang listening ports
- change mode (defaults to 'separate')
- change PersistentKeepaliveInterval (defaults to 0)
* Add supported backends to flannel docs
* Fix markdown in docs
2022-12-18 15:39:43 -08:00
Kenichi Omichi
a132733b2d
Merge pull request #9581 from Xieql/fix-annotation-typo
...
Fix annotation typo
2022-12-17 11:03:05 +09:00
Kenichi Omichi
b377dbb96f
Merge pull request #9579 from HassanAbouelela/fix-kep-0030
...
Fix Broken KEP Link In Docs
2022-12-16 09:35:28 +09:00
Xieql
c4d753c931
Fix annotation typo
...
Signed-off-by: Xieql <xieqianglong@huawei.com>
2022-12-15 18:40:30 +08:00
Lukas Najman
ee3b7c5da5
Use the correct api version and resourcer type. The current values work but do not match the documentation, which can be confusing. ( #9575 )
2022-12-15 01:21:35 -08:00
Florian Ruynat
dcc267f6f4
Remove include task in play, deprecated in favor of import_playbook ( #9576 )
2022-12-15 01:13:35 -08:00
Robin Wallace
ccf60fc9ca
upcloud: Delete default reclaim policy ( #9574 )
2022-12-14 16:15:34 -08:00
Kay Yan
a38a3e7ddf
upgrade-calico-v3.24.5 ( #9580 )
2022-12-14 09:21:36 -08:00
Hassan Abouelela
beb4aa52ea
Fix Broken KEP Link In Docs
...
Fix a broken link to KEP 0030 in the dns-stack docs,
which has been merged into KEP 1024.
2022-12-14 13:54:05 +03:00
Aveline
f7d0fb9ab2
rename ansible groups to use _ instead of ( #9569 )
2022-12-13 21:19:34 -08:00
Book shu
ff331f4eba
support flannel dual stack ( #9564 )
2022-12-13 20:47:35 -08:00
JSpon
94eae6a8dc
adjust calico-kube-controller to use hostNetwork when using etcd as datastore ( #9573 )
2022-12-13 20:41:34 -08:00
yanggang
f8d6b54dbb
Add hashes for 1.25.5, 1.24.9, 1.23.15 and make v1.25.5 default ( #9557 )
...
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
2022-12-11 16:45:33 -08:00
emiran-orange
67c4f2d95e
Add XDG related Helm paths to be removed ( #9561 )
2022-12-10 03:59:40 -08:00
Mohamed Zaian
03fefa8933
[feat] Upgrade metrics server to v0.6.2 ( #9554 )
2022-12-10 03:55:40 -08:00
Fredrik Liv
c8ec77a734
[containerd] Add config for unpriviledged ports and icmp ( #9517 )
...
* [containerd] Add config for unpriviledged ports and icmp
* Updated to match true false variables of other setting
2022-12-09 06:16:12 -08:00
Chad Swenson
4f32f94a51
Fix drain rescue task when kube_override_hostname
is set ( #9556 )
...
This fixes a task failure in the rescue block that uncordons nodes after an unsuccessful drain. The issue occurs when `kube_override_hostname` is set and does not match `inventory_hostname`.
2022-12-08 16:02:11 -08:00
Chad Swenson
3dc384a17a
Allow containerd-common
to execute multiple times per play ( #9543 )
...
The `containerd-common` role is responsible for gathering OS specific variables from the vars directory of the roles that include or import it. `containerd-common` is imported via role dependency by a total of two roles, `container-engine/docker`, and `container-engine/containerd`.
containerd-common is needed by both the docker and containerd roles as a dependency when:
- containerd is selected as the container engine
- a docker install is detected and needs to be removed
- apt is the package manager
However, by default, roles can not be invoked more than once in the same play, unless `allow_duplicates: true` is set for that role. This results in the failure of the `containerd | Remove containerd repository` task, since only the docker vars will be loaded in the play, and `containerd_repo_info.repos`, normally populated by containerd/vars, is left empty.
This change sets `allow_duplicates: true` for `containerd-common` which fixes the currently failing containerd tasks if docker was detected and removed in the same play.
2022-12-08 15:58:18 -08:00
Samuel Liu
f1d0d1a9fe
[kube-ovn]: update version v1.10.7 ( #9527 )
...
* [kube-ovn]: update version
* update readme
2022-12-08 15:58:11 -08:00
Mohamed Zaian
c036a7d871
Disable 'Check that IP range is enough for the nodes' when calico is used ( #9491 )
2022-12-08 10:44:23 -08:00
yanggang
6e63f3d2b4
follow containerd1.16.12 ( #9551 )
...
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
2022-12-08 07:36:24 -08:00
yanggang
09748e80e9
support containerd 1.6.11 ( #9544 )
2022-12-06 19:08:37 -08:00
Brian King
44a4f356ba
Terraform Openstack: replace deprecated template provider with supported cloudinit provider ( #9536 )
2022-12-06 18:28:38 -08:00
Ugur Can Ozturk
a0f41bf82a
[metrics_server]: Enabled HA mode by adding 'metrics_server_replicas'… ( #9539 )
...
* [metrics_server]: Enabled HA mode by adding 'metrics_server_replicas' variable and adding podAntiAffinity rule
Signed-off-by: Ugur Can Ozturk <57688057+ugur99@users.noreply.github.com>
* [metrics_server]: added namespaces selector
Signed-off-by: Ugur Can Ozturk <57688057+ugur99@users.noreply.github.com>
Signed-off-by: Ugur Can Ozturk <57688057+ugur99@users.noreply.github.com>
2022-12-06 18:22:38 -08:00
Kay Yan
5ae3e2818b
add-yankay-to-approvers ( #9541 )
2022-12-05 09:09:04 -08:00
Douglas Landgraf
1a0b81ac64
reset: RedHat based distro with major version >=8 ( #9537 )
...
During the reset, restart network was not completing in distros
like RHEL/CentOS/AlmaLinux with major version higher than 8.
Example:
kubespray> ansible-playbook -i inventory/mydomain/hosts.yml reset.yml -b -v
fatal: [mynode]: FAILED! => {"changed": false, "msg": "Could not find the requested service network: host"}
Signed-off-by: Douglas Schilling Landgraf <dlandgra@redhat.com>
Signed-off-by: Douglas Schilling Landgraf <dlandgra@redhat.com>
2022-12-05 08:57:03 -08:00
ERIK
20d99886ca
Update etcd log-level parameter name ( #9540 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-12-05 01:05:03 -08:00
Kay Yan
b9fe301036
add-check-for-resolv-to-avoid-coredns-crash ( #9502 )
2022-12-01 22:37:54 -08:00
Wojciech Marusiak
b5844018f2
Corrected vsphere directory ( #9534 )
...
There is a wrong directory path to all.yml and vsphere.yml. The wrong directory is `inventory/sample/group_vars/all.yml` and `inventory/sample/group_vars/all/vsphere.yml` which should be `inventory/sample/group_vars/all/all.yml` and `inventory/sample/group_vars/all/vsphere.yml`.
2022-12-01 22:13:54 -08:00
Kay Yan
30508502d3
update-nginx-version ( #9506 )
2022-12-01 21:51:55 -08:00
Mohamed Zaian
bca601d377
[ingress-nginx] upgrade to 1.5.1 ( #9532 )
2022-12-01 21:45:54 -08:00
Mohamed Zaian
65191375b8
[etcd] make etcd 3.5.6 default ( #9520 )
2022-12-01 14:41:53 -08:00
ERIK
a534eb45ce
Update calico image tag ( #9529 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-12-01 03:18:27 -08:00
tu1h
e796f08184
update dashboard image repo to remove arch flag ( #9530 )
...
Signed-off-by: lihai.tu <lihai.tu@daocloud.io>
Signed-off-by: lihai.tu <lihai.tu@daocloud.io>
2022-12-01 01:42:26 -08:00
Kenichi Omichi
ed38d8d3a1
Add ingress-nginx check for updating README ( #9533 )
...
To detect the version mismatch.
2022-12-01 01:16:27 -08:00
Fredrik Liv
07ad5ecfce
[upcloud] Fixed issue where DNS would be blocked while using allowlist ( #9510 )
...
* [upcloud] Fixed issue where DNS would be blocked while using allowlist
* Missed one NTP rule
2022-11-30 21:36:26 -08:00
Kay Yan
4db5e663c3
fix-mistake-regex-for-resolv-conf ( #9523 )
2022-11-30 03:48:56 -08:00
rtsp
529faeea9e
[cert-manager] Upgrade to v1.10.1 ( #9512 )
2022-11-29 07:17:26 -08:00
ERIK
47510899c7
Update the number of nofile limits in containerd ( #9507 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-11-25 15:12:04 -08:00
Ayoub Ed-dafali
4cd949c7e1
Add missing zone input variable - Exoscale ( #9495 )
...
* Add missing zone input variable
* Fix terraform formatting
2022-11-24 16:30:04 -08:00
Kenichi Omichi
31d7e64073
Specify kubespray version for docker run ( #9519 )
...
When operating kubespray from kubespray image with docker run,
we need to checkout the specific kubespray version as the same as
the image, because the sample inventory contains kubernetes version
and the version of master branch could not be supported on the released
kubespray, for example.
2022-11-24 08:34:06 -08:00
蒋航
7c1ee142dd
update envoy image to v1.22.5 ( #9513 )
...
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
2022-11-23 19:26:05 -08:00
蒋航
25e86c5ca9
Update etcd image tag ( #9516 )
...
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
2022-11-23 18:22:04 -08:00
ERIK
c41dd92007
Clean up cilium-init image ( #9508 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-11-23 09:06:20 -08:00
ERIK
a564d89d46
Update the tag of cilium hubble related images ( #9509 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-11-21 20:14:14 -08:00
Kay Yan
6c6a6e85da
update-coredns-version ( #9503 )
2022-11-18 20:16:29 -08:00
Robin Wallace
ed0acd8027
[openstack cloud controller] bump to v1.25.3 ( #9500 )
2022-11-18 04:26:31 -08:00
ERIK
b9a690463d
Add docker support for openEuler linux ( #9498 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-11-17 18:18:30 -08:00
Kenichi Omichi
cbf4586c4c
Specify Quick mode for sonobuoy test ( #9499 )
...
The certified-conformance mode took 2+ hours and that was too long
by comparing Quick mode which was specified previously.
So this updates the mode to Quick again.
2022-11-16 21:54:39 -08:00
ERIK
c3986957c4
Update runsc checksum ( #9493 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-11-16 00:52:48 -08:00
ERIK
8795cf6494
Add support for the OpenEuler Linux ( #9494 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-11-16 00:48:49 -08:00
yanggang
80af8a5e79
upgrade containerd_version to 1.6.10 ( #9492 )
...
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
2022-11-15 03:58:41 -08:00
Kenichi Omichi
b60f65c1e8
Update sonobuoy version ( #9485 )
...
The latest version of sonobuoy is v0.56.11.
This updates the version to the latest.
As the file name, this makes it use certified-conformance mode
clearly for the latest version of sonobuoy.
2022-11-15 00:46:41 -08:00
Sergey Putko
943107115a
disable Centos Extras repo creation for OL9 ( #9483 )
...
Centos 9 doesn't exists, and Centos 9-stream also doesn't have extras repo.
2022-11-14 16:28:41 -08:00
Kenichi Omichi
ddbe9956e4
Fix pathes of offline tool on the doc ( #9486 )
...
If clicking the links, we faced NotFound page at the time.
This fixes the issue by specifying full pathes instead.
2022-11-14 01:27:57 -08:00
Kenichi Omichi
fdbcce3a5e
Update offline-environment.md ( #9481 )
...
This makes it more readable by explaining clearly what files are necessary
to be downloaded in advance from online environment.
2022-11-13 18:23:57 -08:00
Mohamed Zaian
f007c77641
[etcd] make etcd 3.5.5 default for k8s 1.23 , 1.24 ( #9482 )
2022-11-12 03:39:56 -08:00
yanggang
9439487219
Add hashes for 1.25.4, 1.24.8, 1.23.14 and make v1.25.4 default ( #9479 )
...
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
2022-11-10 20:00:09 -08:00
emiran-orange
df6da52195
Enable check mode in DNS Cleanup tasks ( #9472 )
2022-11-10 19:58:09 -08:00
cleverhu
6ca89c80af
fix error link kubernetes url ( #9475 )
...
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
2022-11-10 05:42:55 -08:00
Ilya Margolin
7fe0b87d83
Fix docs for node_labels ( #9471 )
2022-11-09 04:46:12 -08:00
ERIK
8a654b6955
Add cni bin when installing calico ( #9367 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-11-08 17:46:13 -08:00
Ilya Margolin
5a8cf824f6
[containerd] Simplify limiting number of open files per container ( #9319 )
...
by setting a default runtime spec with a patch for RLIMIT_NOFILE.
- Introduces containerd_base_runtime_spec_rlimit_nofile.
- Generates base_runtime_spec on-the-fly, to use the containerd version
of the node.
2022-11-08 06:44:32 -08:00
emiran-orange
5c25b57989
Ability to define options for DNS upstream servers ( #9311 )
...
* Ability to define options for DNS upstream servers
* Doc and sample inventory vars
2022-11-08 06:44:25 -08:00
Olivier Lemasle
5d1fe64bc8
Update local-volume-provisioner ( #9463 )
...
- Update and re-work the documentation:
- Update links
- Fix formatting (especially for lists)
- Remove documentation about `useAlphaApi`,
a flag only for k8s versions < v1.10
- Attempt to clarify the doc
- Update to version 1.5.0
- Remove PodSecurityPolicy (deprecated in k8s v1.21+)
- Update ClusterRole following upstream
(cf https://github.com/kubernetes-sigs/sig-storage-local-static-provisioner/pull/292 )
- Add nodeSelector to DaemonSet (following upstream)
2022-11-07 15:28:17 -08:00
Kenichi Omichi
a731e25778
Make vagrant-ubuntu20-flannel voting ( #9469 )
...
We made all vagrant jobs non-voting because those jobs were not stable.
However the setting allowed a pull request which broke vagrant jobs
completely merged into the master branch.
To avoid such situation, this makes one of vagrant jobs voting.
Let's see the stability of the job.
2022-11-07 00:08:16 -08:00
yanggang
0d6dc08578
upgrade argocd version 2.4.16 ( #9467 )
2022-11-06 18:04:16 -08:00
ERIK
40261fdf14
Fix iputils install failure in Kylin OS ( #9453 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-11-06 17:54:16 -08:00
Cyclinder
590b4aa240
adjust calico-kube-controller to non-hostnetwork pod ( #9465 )
...
Signed-off-by: cyclinder qifeng.guo@daocloud.io
Signed-off-by: cyclinder qifeng.guo@daocloud.io
2022-11-06 17:34:17 -08:00
ausias-armesto
2a696ddb34
Adding metrics server to use host network ( #9444 )
...
* Adding metrics server to use host network
* EXternalize value to a variable
2022-11-06 02:38:15 -08:00
lijin-union
d7f08d1b0c
remove the set_fact action which raise error in the CI ( #9462 )
2022-11-03 04:43:38 -07:00
Jiffs Maverick
4aa1ef28ea
Don't use coredns_server in dhclient.conf if nodelocaldns is enabled ( #9392 )
2022-11-03 02:45:36 -07:00
Fred Rolland
58faef6ff6
Flannel: fix init container image arch ( #9461 )
...
The install-cni-plugin image was not updated to the corresponding
arch when building the different DS.
Fixes issue #9460
Signed-off-by: Fred Rolland <frolland@nvidia.com>
Signed-off-by: Fred Rolland <frolland@nvidia.com>
2022-11-03 02:41:36 -07:00
cleverhu
34a52a7028
update cilium cli offline download url example ( #9458 )
...
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
2022-11-02 00:30:47 -07:00
yanggang
ce751cb89d
add variable condition snapshot in vSphere CSI ( #9429 )
2022-11-02 00:22:46 -07:00
cleverhu
5cf2883444
add retry for start calico kube controller ( #9450 )
...
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
2022-11-02 00:18:45 -07:00
charlychiu
6bff338bad
fix: hubble relay tls error ( #9457 )
2022-11-02 00:14:46 -07:00
Olivier Lemasle
c78862052c
Stop using python 'test' internal package ( #9454 )
...
`test` is is a internal Python package (see [doc]), and as such should not be
used here. It make tests fail in some environments.
[doc]: https://docs.python.org/3/library/test.html
2022-10-31 21:08:45 -07:00
William Turner
1f54cef71c
Add variable to set direct routing on flannel VXLAN ( #9438 )
2022-10-31 13:16:45 -07:00
yanggang
d00508105b
Removed PodSecurityPolicy from ingress-nginx ( #9448 )
2022-10-30 20:08:44 -07:00
lijin-union
c272421910
Add UOS linux support ( #9432 )
2022-10-30 17:16:43 -07:00
biqiang Wu
78624c5bcb
When using cilium CNI, install Cilium CLI ( #9436 )
...
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
2022-10-30 17:02:45 -07:00
biqiang Wu
c681435432
Add switch cilium_enable_bandwidth_manager ( #9441 )
...
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
2022-10-28 03:08:31 -07:00
杨刚
4d3f637684
Remove PodSecurityPolicies in Metallb for kubernetes 1.25 ( #9442 )
2022-10-27 21:46:30 -07:00
Olivier Lemasle
5e14398af4
Upgrade ruamel.yaml.clib to work with Python 3.11 ( #9426 )
...
ruamel.yaml.clib did not build with the upcoming Python 3.11.
Cf. https://sourceforge.net/p/ruamel-yaml-clib/tickets/9/
ruamel.yaml.clib==0.2.7 fixes the issue.
2022-10-26 19:52:33 -07:00
蒋航
990f87acc8
Update kube-vip to v0.5.5 ( #9437 )
...
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
2022-10-26 19:28:32 -07:00
William Turner
eeb376460d
Fix inconsistent handling of admission plugin list ( #9407 )
...
* Fix inconsistent handling of admission plugin list
* Adjust hardening doc with the normalized admission plugin list
* Add pre-check for admission plugins format change
* Ignore checking admission plugins value when variable is not defined
2022-10-26 00:28:37 -07:00
Kay Yan
ef707b3461
update-containerd-1.6.9 ( #9427 )
2022-10-25 16:34:37 -07:00
Mohamed Zaian
2af918132e
Update kubernetes dashboard to 2.7.0 (k8s 1.25 support) ( #9425 )
2022-10-24 18:32:36 -07:00
Mohamed Zaian
b9b654714e
[nerdctl] upgrade to version 1.0.0 ( #9424 )
2022-10-24 18:28:35 -07:00
Mohamed Zaian
fe399e0e0c
[etcd] add 3.5.5 hashes, make it default for k8s 1.25 ( #9419 )
2022-10-24 00:06:26 -07:00
杨刚
b192053e28
as argocd 2.4.15 is releasesd , update the version ( #9420 )
2022-10-23 20:34:24 -07:00
杨刚
a84271aa7e
etcd arch can support arm64 and amd64 ( #9421 )
2022-10-23 20:28:24 -07:00
Wouter Goedhart
1901b512d2
Make the port of kube-vip dynamic based on the kube_apiserver_port ( #9414 )
...
variable
Fix wrong referenced variable on bgp_peers
Fix bgp_peeras field to be a string
Set default value for bgp_peeras
2022-10-23 18:00:24 -07:00
ERIK
9fdda7eca8
Fix iputils install failure in Kylin OS ( #9416 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-10-21 04:53:51 -07:00
ERIK
a68ed897f0
Update kubelet checksum ( #9413 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-10-21 04:21:50 -07:00
Florian Ruynat
582ff96d19
Update docker version to 20.10.20 ( #9410 )
2022-10-20 18:45:15 -07:00
Kenichi Omichi
0374a55eb3
Specify securityContext for cert-manager ( #9404 )
...
On hardening environments, cert-manager pods could not be created
from the corresponding deployments. This adds the securityContext
to solve the issue.
2022-10-20 00:57:08 -07:00
Kay Yan
ccbe38f78c
make-kube-1.25-default ( #9364 )
2022-10-20 00:56:57 -07:00
Vladimir
958840da89
Add var for control initialDelaySeconds in nginx ingress probe ( #9405 )
...
Signed-off-by: Zemtsov Vladimir <vl.zemtsov@gmail.com>
Signed-off-by: Zemtsov Vladimir <vl.zemtsov@gmail.com>
2022-10-19 21:20:56 -07:00
Cristian Calin
1530411218
use cri-o from upstream instead of kubic/OBS ( #9374 )
...
* [cri-o] use cri-o from upstream instead of kubic/OBS
* [cri-o] add proper molecule coverage
* [skopeo] download skopeo from upstream build
* [cri-o] clean up legacy deployments
* disable cri-o per-distribution variables
2022-10-19 05:47:05 -07:00
Kenichi Omichi
e5ec0f18c0
Add packet_ubuntu20-calico-aio-hardening ( #9359 )
...
To verify the hardening method works always.
The configuration comes from docs/hardening.md
Fix yaml format of hardening.yml
Add condition to skip 040 test for hardening
2022-10-19 05:35:04 -07:00
Mohamed Zaian
0f44e8c812
[ingress-nginx] upgrade to 1.4.0 ( #9403 )
2022-10-18 16:53:00 -07:00
Kay Yan
1cc0f3c8c9
mirror-for-china
2022-10-18 09:17:42 +02:00
Maxime Leroy
d9c39c274e
fix(defaults): wrong cri_socket path for containerd ( #9401 )
2022-10-18 00:15:18 -07:00
Kenichi Omichi
c38fb866b7
Update securityContext of netchecker ( #9398 )
...
To run netchecker with necessary privilege,
this updates the securityContext.
2022-10-17 19:11:18 -07:00
Mohamed Zaian
5ad1d9db5e
[kubernetes] Add hashes for 1.25.3, 1.24.7, 1.23.13 and make v1.24.7 default ( #9397 )
2022-10-17 05:59:07 -07:00
Kay Yan
32f3d92d6b
Remove PodSecurityPolicies in Calico ( #9395 )
2022-10-17 05:51:07 -07:00
Kenichi Omichi
72b45eec2e
Use agnhost instead of busybox for network test ( #9390 )
...
busybox container requires a root permission for ping.
For testing hardening method at CI, we need to switch to another image
which doesn't require the root permission for network testing.
On kubernetes/kubernetes repo, we are using agnhost which doesn't
require it. So this makes the test use aghhost image.
In addition, this updates the test manifest to specify securityContext
without any privilege.
2022-10-14 06:10:46 -07:00
Cristian Calin
23716b0eff
don't define kubeadm_patches by default ( #9372 )
2022-10-14 01:20:46 -07:00
Kay Yan
859df84b45
remove-psp-in-flannel ( #9365 )
2022-10-14 00:16:47 -07:00
Kay Yan
131bd933a6
Fix ensure ping package error in fedora CoreOS & Flatcar ( #9370 )
...
* fix-ensure-package-in-coreos
* clean blank line
2022-10-13 16:54:46 -07:00
Unai Arríen
52904ee6ad
Avoid MetalLB speaker image download when MetalLB speaker is disabled ( #9248 )
...
* Avoid MetalLB speaker image download when metallb_speaker_enabled is set to
* Move metallb_speaker_enabled var to allow outside metalLB role references
* Move metallb_speaker_enabled var to allow outside metalLB role references
* Improve metallb_speaker_enabled default values
2022-10-13 16:50:47 -07:00
Kay Yan
e3339fe3d8
update_calico_doc_for_the_ChecksumOffloadBroken ( #9388 )
2022-10-13 01:13:00 -07:00
ghostloda
547ef747da
fix helm install with password authentication ( #9343 )
2022-10-12 23:55:01 -07:00
Kenichi Omichi
63b27ea067
Fix YAML format in hardening.md ( #9387 )
...
When trying to add a hardening CI job by copying configuration from
hardening.md, yamllint CI job deleted invalid format.
This fixes it for maintaining the CI job.
2022-10-12 23:49:01 -07:00
ERIK
bc5881b70a
Add the cilium hubble images to download role ( #9376 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-10-12 23:45:00 -07:00
Kenichi Omichi
f4b95d42a6
Add note for containerd oom_score ( #9384 )
...
When we saw 0 as the default value of containerd_oom_score, we had
a question why the value was not -999.
This adds the note to explain it.
2022-10-11 21:49:00 -07:00
Unai Arríen
ef76a578a4
Change dns upstream condition for nodelocaldns ( #9378 )
2022-10-11 00:47:02 -07:00
Piotr Kowalczyk
3b99d24ceb
Fix: install calico-kube-controller on kdd ( #9358 )
...
* Fix: install policy controller on kdd too
* Remove the calico_policy_version condition altogether
* Install policy controller both on canal and calico under same condition
2022-10-10 19:45:01 -07:00
Kay Yan
4701abff4c
upgrade-api-version-for-PodDisruptionBudget ( #9369 )
2022-10-10 17:51:02 -07:00
Joe Siponen
717b8daafe
Download coredns image to all hosts in k8s_cluster ( #9316 )
...
Coredns image must be available everywhere as it
may be rescheduled to a non-control-plane-node.
2022-10-08 05:03:19 -07:00
Kevin Huang
c346e46022
fix(cinder-csi-nodeplugin): Remove the pods-cloud-data volume ( #9362 )
2022-10-08 01:23:19 -07:00
Kenichi Omichi
24632ae81b
Add check_typo job ( #9361 )
...
To block merging pull requests which contain typo automatically.
2022-10-07 02:21:53 -07:00
JSpon
befde271eb
Use hostname override in post-remove role, just as pre-remove role does ( #9360 )
2022-10-06 15:03:52 -07:00
Huang Chen-Yi
d689f57c94
Features/support kubeadm patches v1beta3 ( #9326 )
...
* Support kubeadm patches in v1beta3
* Update kubeadm patches sample files in inventory
* Fix pre-commit syntax
* Set kubeadm_patches enabled to false in sample inventory
2022-10-06 00:39:52 -07:00
William Turner
ad3f503c0c
Fix default value for kubelet_secure_addresses ( #9355 )
2022-10-06 00:35:51 -07:00
Kay Yan
ae6c780af6
add-Kubean ( #9352 )
2022-10-04 06:26:23 -07:00
Eugene Artemenko
8b9cd3959a
Add possibility to skip adding load balancer name in the hosts file ( #9331 )
2022-10-04 06:26:16 -07:00
Emin AKTAS
dffeab320e
feat: add a paramater to disable host nameservers ( #9357 )
...
Signed-off-by: eminaktas <eminaktas34@gmail.com>
Signed-off-by: eminaktas <eminaktas34@gmail.com>
2022-10-04 06:22:17 -07:00
Kay Yan
999586a110
sysctl_additional ( #9351 )
2022-10-02 23:06:14 -07:00
Kenichi Omichi
f8d5487f8e
Remove versions from setting-up-your-first-cluster ( #9353 )
...
We are maintaining version info on the README.md, and it is not
necessary to maintain that on setting-up-your-first-cluster.md
2022-09-30 06:02:29 -07:00
Hugo Blom
4189008245
Try fix issue where ports doesn't get an ip assigned ( #9345 )
...
Co-authored-by: Jonathan Süssemilch Poulain <jonathan@sofiero.net>
2022-09-30 00:48:29 -07:00
Kay Yan
44115d7d7a
support-kube-1.25 ( #9260 )
...
Co-authored-by: Rene Luria <rene.luria@infomaniak.com>
2022-09-29 23:34:30 -07:00
Florian Ruynat
841e2f44c0
Remove references to 1.22 ( #9342 )
2022-09-28 14:10:29 -07:00
Hugo Blom
a8e4984cf7
Add missing permissions to openstack cc ( #9335 )
...
Add missing permissions to Openstack cloud controller to make sure controller runs as intended
2022-09-27 22:19:35 -07:00
Hugo Blom
49196c2ec4
[Openstack] Add bastion_allowed_ports to allow custom security group rules on bastion node ( #9336 )
...
* make it possible to configure bastion remote ips
* Update README.md
2022-09-27 22:03:35 -07:00
Rene Luria
3646dc0bd2
fix: remove trailing backslash and yaml indent ( #9339 )
...
* fix: remove trailing backslash
* fixed indent in cilium config template
2022-09-27 19:45:35 -07:00
Alex
694de1d67b
update README to reference docker v2.20.0 tag ( #9334 )
2022-09-27 19:41:36 -07:00
biqiang Wu
31caab5f92
Fix: The Hubble certificate is faulty because the cluster name is hard coded ( #9340 )
...
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
2022-09-27 05:57:52 -07:00
ERIK
472996c8b3
update pause image version ( #9337 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-09-27 00:49:52 -07:00
Shelming.Song
d62c67a5f5
allow user to set env: FELIX_MTUIFACEPATTERN in calico-node.yml ( #9330 )
2022-09-26 21:57:45 -07:00
Federico Cucinella
e486151aea
cloud-provider-openstack: upgrade 1.22.0 to 1.23.4 ( #9332 )
2022-09-26 17:35:46 -07:00
Florian Ruynat
9c407e667d
Update kubespray version following release ( #9333 )
2022-09-26 17:31:46 -07:00
Ho Kim
18efdc2c51
Fix typos in calico ( #9327 )
2022-09-26 00:11:44 -07:00
Zhong Jianxin
6dff39344b
preinstall: Add nodelocaldns to supersede_nameserver if enabled ( #9282 )
...
When a machine that use dhclient and resolvconf reboots, this will make /etc/resolv.conf
remain close to the one before reboot
2022-09-25 20:19:44 -07:00
Robin Wallace
c4de3df492
upcloud csi driver: bump version to v0.3.3 ( #9317 )
2022-09-24 13:18:04 -07:00
Ilya Margolin
f2e11f088b
Hotfix containerd restart ( #9322 )
2022-09-24 13:14:04 -07:00
Victor Morales
782f0511b9
Define ostree variable for runc ( #9321 )
...
The ostree variable is not defined previously raising an error when
the runtime tries to read it.
2022-09-24 13:00:11 -07:00
Kevin Huang
fa093ee609
feat(docs/openstack.md): Put Additional step needed when using calico or kube-router in own section ( #9320 )
2022-09-24 13:00:04 -07:00
Samuel Liu
612bcc4bb8
add liupeng0518 to approvers list ( #9313 )
2022-09-24 12:52:05 -07:00
Florian Ruynat
4ad67acedd
Move back vsphere csi to kube-system ns ( #9312 )
2022-09-23 10:46:26 -07:00
Kei Kori
467dc19cbd
support removing options in resolvconf with tab separator ( #9304 )
2022-09-23 10:42:27 -07:00
Ilya Margolin
726711513f
[containerd] Allow configuring base_runtime_spec per containerd runtime ( #9302 )
...
and supply a default runtime spec.
2022-09-23 10:38:27 -07:00
Emin AKTAS
9468642269
feat: allows users to have more control on DNS ( #9270 )
...
Signed-off-by: eminaktas <eminaktas34@gmail.com>
Signed-off-by: eminaktas <eminaktas34@gmail.com>
2022-09-23 10:28:26 -07:00
Samuel Liu
d387d4811f
replace createhome ( #9314 )
2022-09-23 00:26:39 -07:00
Kay Yan
1b3c2dab2e
add_max_concurrent_in_coredns ( #9307 )
2022-09-22 04:27:03 -07:00
Mohamed Zaian
76573bf293
[kubernetes] Add hashes for 1.24.6, 1.22.15, 1.23.12 and make v1.24.6 default ( #9308 )
2022-09-22 04:13:03 -07:00
Kay Yan
5d3326b93f
add-ping-package ( #9284 )
2022-09-21 23:55:05 -07:00
Mohamed Zaian
68dac4e181
[flannel] update to v1.19.2 & make it default ( #9296 )
2022-09-21 23:51:04 -07:00
Ilya Margolin
262c96ec0b
Remove duplication in template ( #9301 )
...
by concatenating default and additional runtimes
2022-09-21 08:33:15 -07:00
Mohamed Zaian
2acdc33aa1
[helm] upgrade to 3.9.4 ( #9298 )
2022-09-20 04:37:20 -07:00
Krystian Młynek
8acd33d0df
Calico: add wireguard support for Rocky Linux 9 ( #9287 )
2022-09-20 00:29:20 -07:00
pingrulkin
a2e23c1a71
vsphere-csi: add nodeAffinity to daemonset ( #9293 )
2022-09-19 17:47:22 -07:00
rtsp
1b5cc175b9
[cert-manager] Upgrade to v1.9.1 ( #9295 )
2022-09-19 17:43:22 -07:00
Mohamed Zaian
a71da25b57
[argocd] update argocd to v2.4.12 ( #9297 )
2022-09-19 17:37:22 -07:00
Vadim
5ac614f97d
fix duplicate field in ingress-nginx template ( #9285 )
2022-09-19 03:03:22 -07:00
ErmalKristo
b8b8b82ff4
Adds support for multiple architectures to yq ( #9288 )
2022-09-19 02:14:38 -07:00
Necatican Yıldırım
7da3dbcb39
Cilium 1.12 Upgrade ( #9225 )
...
* Drop support for Cilium < 1.10
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* Synchronize Cilium templates for 1.11.7
Signed-off-by: necatican <contact@necatican.com>
* Set Cilium v1.12.1 as the default version
Signed-off-by: necatican <contact@necatican.com>
Signed-off-by: necatican <necaticanyildirim@gmail.com>
Signed-off-by: necatican <contact@necatican.com>
2022-09-19 02:14:31 -07:00
Mohamed Zaian
680293e79c
[kubernetes] Add hashes for 1.24.5, 1.22.14, 1.23.11 and make v1.24.5 default ( #9286 )
2022-09-19 02:10:31 -07:00
Mahdi Abbasi
023b16349e
Add variable for the vsphere-csi namespace ( #9278 )
2022-09-15 02:01:23 -07:00
lijin-union
c4976437a8
Fix typos in docs ( #9276 )
2022-09-15 00:09:22 -07:00
Kay Yan
97ca2f3c78
add-timezone-support ( #9263 )
2022-09-14 21:11:22 -07:00
niesel
e76385e7cd
Update offline.yml ( #9274 )
...
Change "ubuntu_repo" to "debian_repo" for containerd_debian_repo_base_url and containerd_debian_repo_gpgkey
2022-09-13 16:55:01 -07:00
ERIK
7c2fb227f4
Add LimitMEMLOCK parameter configuration in containerd.service ( #9269 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-09-13 02:51:06 -07:00
ghostloda
08bfa0b18f
Upgrade ingress nginx webhook to 1.3.0 ( #9271 )
2022-09-13 01:47:05 -07:00
Ho Kim
952cad8d63
Remove mutual exclusivity in calico: NAT and router mode ( #9255 )
...
* Add optional NAT support in calico router mode
* Add a blank line in front of lists
* Remove mutual exclusivity: NAT and router mode
* Ignore router mode from NAT
* Update calico doc
2022-09-13 00:19:07 -07:00
rptaylor
5bce39abf8
add optional parameter extra_groups for k8s_nodes ( #9211 )
2022-09-13 00:13:08 -07:00
cleverhu
fc57c0b27e
fix number node name can't be added ( #9266 )
...
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
2022-09-13 00:09:05 -07:00
Samuel Liu
dd4bc5fbfe
[etcd] Sometimes, we do not need to run etcd role on all nodes. ( #9173 )
...
* WIP: sometimes,we not run etcd
* fix ansible lint
* like calico(kdd) cni, no need run etcd
2022-09-09 01:29:22 -07:00
Mohamed Zaian
d2a7434c67
[ingress-nginx] upgrade to 1.3.1 ( #9264 )
2022-09-09 00:37:23 -07:00
Kenichi Omichi
5fa885b150
Remove unused cri_dockerd_enabled configuration ( #9259 )
...
Since the commit fad296616c
cri_dockerd_enabled
has not been used. But the packet_ubuntu22-aio-docker.yml still contains
the configuration and causes confusions.
This removes the configuration for cleanup.
2022-09-08 00:06:05 -07:00
ghostloda
f3fb758f0c
Remove useless file ( #9258 )
2022-09-07 17:10:49 -07:00
Krystian Młynek
6386ec029c
add retries for restart of kube-apiserver ( #9256 )
...
* add retries for restart of kube-apiserver
* change var name
2022-09-07 16:48:49 -07:00
Ho Kim
ad7cefa352
Ignore deleting nodes that are not in cluster ( #9244 )
2022-09-05 19:50:54 -07:00
Ho Kim
09d9bc910e
Fix typos in calico comments ( #9254 )
2022-09-05 18:46:54 -07:00
Kay Yan
e2f1f8d69d
add-Rocky-9-support ( #9212 )
2022-09-04 16:54:36 -07:00
Michael Schmitz
be2bfd867c
Add Support for Rewrite Plugin to CoreDNS/NodelocalDNS ( #9245 )
2022-09-03 16:16:35 -07:00
lou-lan
133a7a0e1b
Add featureDetectOverride configration of calico ( #9249 )
2022-09-02 04:58:05 -07:00
ERIK
efb47edb9f
Update kubespray version to v2.19.1 ( #9241 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-09-01 23:36:05 -07:00
Kay Yan
36bec19a84
add-yankay-to-reviewers ( #9247 )
2022-09-01 03:47:05 -07:00
Cristian Calin
6db6c8678c
disable kubelet_authorization_mode_webhook by default ( #9238 )
2022-08-31 04:53:00 -07:00
Florian Ruynat
5603f9f374
Update security contacts file ( #9235 )
2022-08-30 22:43:00 -07:00
蒋航
7ebb8c3f2e
make calico installation more stable ( #9227 )
...
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
2022-08-30 21:13:01 -07:00
Alessio Greggi
acb6f243fd
feat: add kubelet systemd service hardening option ( #9194 )
...
* feat: add kubelet systemd service hardening option
* refactor: move variable name to kubelet_secure_addresses
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
* docs: add diagram about kubelet_secure_addresses variable
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
2022-08-30 11:18:55 -07:00
tasekida
220f149299
Fix abort because calicoctl.sh is not a full path ( #9217 )
2022-08-30 08:07:02 -07:00
Florian Ruynat
1baabb3c05
Fix cloud_init files for different distros ( #9232 )
2022-08-30 08:03:02 -07:00
Florian Ruynat
617b17ad46
Fix kube_ovn_hw_offload value ( #9218 )
2022-08-30 03:21:01 -07:00
lijin-union
8af86e4c1e
Fix typo.
2022-08-30 11:30:57 +02:00
kakkotetsu
9dc9a670a5
add runc v1.1.4 ( #9230 )
2022-08-30 02:01:01 -07:00
Kay Yan
b46ddf35fc
kube-vip shoud fail if kube_proxy_strict_arp is false in arp mod ( #9223 )
...
* fix-kube-vip-strict-arp
* fix-kube-vip-strict-arp
2022-08-30 00:21:02 -07:00
Chad Swenson
de762400ad
Fixes for calico_datastore: etcd ( #9228 )
...
It seems that PR #8839 broke `calico_datastore: etcd` when it removed ipamconfig support for etcd mode.
This PR fixes some failing tasks when `calico_datastore == etcd`, but it does not restore ipamconfig support for calico in etcd mode. If someone wants to restore ipamconfig support for `calico_datastore: etcd` please submit a follow up PR for that.
2022-08-29 22:41:00 -07:00
Cristian Calin
e60ece2b5e
[CI] remove opensuse Leap from molecule test blocking CI ( #9229 )
2022-08-29 11:44:49 -07:00
Cristian Calin
e6976a54e1
add pre-commit hook to facilitate local testing ( #9158 )
...
* add pre-commit hook configuration
* add tmp.md to .gitignore
* describe the use of pre-commit hook in CONTRIBUTING.md
* fix docs/integration.md errors identified by markdownlint
* fix docs/<file>.md errors identified by markdownlint
* docs/azure-csi.md
* docs/azure.md
* docs/bootstrap-os.md
* docs/calico.md
* docs/debian.md
* docs/fcos.md
* docs/vagrant.md
* docs/gcp-lb.md
* docs/kubernetes-apps/registry.md
* docs/setting-up-your-first-cluster.md
* docs/vagrant.md
* docs/vars.md
* fix contrib/<file>.md errors identified by markdownlint
2022-08-24 06:54:03 -07:00
Krystian Młynek
64daaf1887
cri-dockerd: add restart of docker.service ( #9205 )
...
* cri-dockerd: add restart of docker.service
* remove enabling of cri-dockerd.socket
2022-08-24 05:50:02 -07:00
Sergey
1c75ec9ec1
do not run etcd role in scale.yml playbook when etcd installed by kubeadm ( #9210 )
2022-08-24 00:16:24 -07:00
Shelming.Song
c8a61ec98c
optimize the format of evictionHard in kubelet-config.yaml template ( #9204 )
2022-08-23 01:55:24 -07:00
Bishal das
aeeae76750
Update vars.md ( #9172 )
2022-08-22 23:31:24 -07:00
Shelming.Song
30b062fd43
fix one bug in docs/nodes ( #9203 )
2022-08-22 23:17:23 -07:00
Pavel Chekin
8f899a1101
Fix containerd (<1.7) configuration for insecure registries ( #9207 )
...
For the following configuration
```
containerd_insecure_registries:
docker.io:
- dockerhubcache.example.com
```
the rendered /etc/containerd/config.toml contains
```
[plugins."io.containerd.grpc.v1.cri".registry.configs."docker.io".tls]
insecure_skip_verify = true
```
but it needs to be
```
[plugins."io.containerd.grpc.v1.cri".registry.configs."dockerhubcache.example.com".tls]
insecure_skip_verify = true
```
2022-08-22 23:13:23 -07:00
Mostafa Ghadimi
386c739d5b
🌱 Enable cri-dockerd service ( #9201 )
...
* 🌱 Enable cri-dockerd service
* 🔨 Fix the task name in order to pass the CI tests
2022-08-22 07:17:43 -07:00
Bishal das
fddff783c8
Update vsphere-csi.md ( #9170 )
2022-08-22 07:13:43 -07:00
Tristan
bbd1161147
9035: Make Cilium rolling-restart delay/timeout configurable ( #9176 )
...
See #9035
2022-08-22 02:37:44 -07:00
Mohamed Zaian
ab938602a9
[kubernetes] Add hashes for 1.24.4, 1.22.13, 1.23.10 and make v1.24.4 default ( #9191 )
2022-08-21 23:11:44 -07:00
Ho Kim
e31890806c
Add 'avoid-buggy-ips' support of MetalLB ( #9166 )
2022-08-18 21:49:51 -07:00
Tomas Zvala
30c77ea4c1
Add the option to enable default Pod Security Configuration ( #9017 )
...
* Add the option to enable default Pod Security Configuration
Enable Pod Security in all namespaces by default with the option to
exempt some namespaces. Without the change only namespaces explicitly
configured will receive the admission plugin treatment.
* Fix the PR according to code review comments
* Revert the latest changes
- leave the empty file when kube_pod_security_use_default, but add comment explaining the empty file
- don't attempt magic at conditionally adding PodSecurity to kube_apiserver_admission_plugins_needs_configuration
2022-08-18 01:16:36 -07:00
GreatLazyMan
175cdba9b1
Add 'flush ip6tables' task in reset role ( #9168 )
...
* Add 'flush ip6tables' task in reset role
If enable_dual_stack_networks is set to true and ip6 is defined,ip6tables will be created. But when reset the kubernetes cluster, kubespray doesn't flush ip6tables.
* [CI] fix molecule tests on opensuse by upgrading to 15.4 (#9175 )
* [CI] fix molecule tests on opensuse by upgrading to 15.4
* [opensuse] use correct python crytography package name depending on distribution version
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
2022-08-18 01:12:37 -07:00
Thearas
ea29cd0890
add list nodes rules to cilium-operator clusterrole ( #9178 )
2022-08-18 01:02:36 -07:00
maxgio92
68653c31c0
docs(kube-vip): fix broken links ( #9165 )
...
Signed-off-by: Massimiliano Giovagnoli <me@maxgio.it>
Signed-off-by: Massimiliano Giovagnoli <me@maxgio.it>
2022-08-18 00:56:55 -07:00
Ho Kim
be5fdab3aa
Disable DNSStubListener for Flatcar Linux ( #9160 )
...
* Disable DNSStubListener for Flatcar Linux
* Fix missing "Flatcar" condition of os_family
2022-08-18 00:56:49 -07:00
Robin Ramquist
f4daf5856e
Subnet setup order fix & Number of master nodes syntax fix ( #9159 )
...
* Subnet setup order fix & Number of master nodes syntax fix
* Mistake fix!
* Formatting
2022-08-18 00:56:43 -07:00
Piotr Kowalczyk
49d869f662
Fix CSI drivers issues on Azure ( #9153 )
...
* Include missing azuredisk rbac manifest
* Remove missing azure csi manifest
* Remove invalid reference mount to waagent settings
* Use cloud-config secret instead of /etc/kubernetes/cloud_config file
2022-08-18 00:56:36 -07:00
Samuel Liu
b36bb9115a
[calico] calico rr supports multiple groups ( #9134 )
...
* update calico rr
* fix bgppeer conf
* fix yamllint
* fix ansible lint
* fix calico deploy
* fix yamllint
* fix some typo
2022-08-18 00:52:37 -07:00
ERIK
9ad2d24ad8
Add unsafe_show_logs switch ( #9164 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-08-16 18:52:48 -07:00
Kay Yan
0088fe0ab7
add-tar-in-common-package ( #9184 )
2022-08-16 05:17:18 -07:00
Mohamed Zaian
ab93b17a7e
[containerd] upgrade to 1.6.8 , add hashes, containerd now supports ppc64le from v1.6.7 ( #9181 )
2022-08-16 05:17:07 -07:00
Jin Li
9f1b980844
Update dashboard to 2.6.1 ( #9185 )
2022-08-16 04:57:08 -07:00
Alessio Greggi
86d05ac180
fix: remove condition for user creation ( #9125 )
...
This condition blocks the creation of the `etcd` user in certain conditions.
Specifically, when you have a `etcd_deployment_type: kubeadm` and `kube_owner: root`.
Being the `root` user already present on the system, this will not be a problem (due to the idempotency of ansible).
2022-08-15 23:55:07 -07:00
Peter Pan
bf6fcf6347
Upgrade nerdctl from 0.20.0 to 0.22.2 ( #9180 )
2022-08-15 22:39:07 -07:00
Cristian Calin
b9e4e27195
[CI] fix molecule tests on opensuse by upgrading to 15.4 ( #9175 )
...
* [CI] fix molecule tests on opensuse by upgrading to 15.4
* [opensuse] use correct python crytography package name depending on distribution version
2022-08-14 19:02:13 -07:00
Cristian Calin
8585134db4
when ingress-nginx is deployes without a class, we need to use 'ingress-controller-leader' resource instead of the default 'ingress-controller-leader-nginx' ( #9156 )
2022-08-09 04:52:50 -07:00
Kenichi Omichi
7e862939db
Add kube-vip check to check_readme_versions.sh ( #9155 )
...
To check the kube-vip version between readme.md and the default value
on the role, this updates check_readme_versions.sh
2022-08-06 08:26:20 -07:00
Kay Yan
0d3bd69a17
add-kube-vip-in-readme ( #9149 )
2022-08-05 08:13:47 -07:00
emiran-orange
2b97b661d8
Move old etcd backup removal after etcd restart ( #9147 )
2022-08-05 08:09:59 -07:00
emiran-orange
24f12b024d
Argument jsonpath must be single-quoted in "See if node is schedulable" task ( #9146 )
2022-08-05 08:09:47 -07:00
Florian Ruynat
f7d363dc96
Fix crio version in README ( #9148 )
2022-08-04 08:53:46 -07:00
ERIK
47050003a0
Add docker support for Kylin V10 ( #9144 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-08-03 15:03:46 -07:00
Florian Ruynat
4df6e35270
Move oracle7-canal to centos7-canal
2022-08-02 16:55:52 -07:00
Florian Ruynat
307f598bc8
Move flannel to etcd datastore
2022-08-02 16:55:52 -07:00
Florian Ruynat
eb10249a75
Align canal templates with calico official ones (k8s datastore)
2022-08-02 16:55:52 -07:00
Marco Fortina
b4318e9967
Update to latest local path provisioner version ( #9132 )
2022-08-01 14:56:28 -07:00
Marco Fortina
c53561c9a0
Update to latest registry version ( #9133 )
2022-08-01 14:52:28 -07:00
ERIK
f2f9f1d377
Add kylin OS support ( #9078 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-08-01 10:44:29 -07:00
Boris Barnier
4487a374b1
Update Kube-router version to 1.5.1 ( #9136 )
...
https://github.com/cloudnativelabs/kube-router/releases/tag/v1.5.1
2022-08-01 00:16:28 -07:00
Aveline
06f8368ce6
Fix Hetzner CCM cluster-cidr ( #9127 )
2022-07-30 20:18:27 -07:00
Mohamed Zaian
5b976a8d80
[calico] add hashes for v3.22.4 & v3.21.6 ( #9129 )
2022-07-30 20:14:38 -07:00
Samuel Liu
e73803c72c
pid reserved must be str ( #9124 )
2022-07-30 20:14:27 -07:00
rtsp
b3876142d2
[cert-manager] Upgrade to v1.9.0 ( #9117 )
2022-07-29 00:11:11 -07:00
Mohamed Zaian
9f11946f8a
[argocd] update argocd to v2.4.7 ( #9105 )
2022-07-27 09:32:29 -07:00
Kenichi Omichi
9c28f61dbd
Enable shellcheck for contrib/ ( #9122 )
...
Today we have many contributions to contrib/offline/ and some PRs
contained invalid coding style for those scripts.
This enables shellcheck to make such invalid coding style easily.
2022-07-26 23:32:32 -07:00
Ader Fu
09291bbdd2
Use a variable for roles of remove-node/post-remove ( #9096 )
...
Signed-off-by: ydFu <ader.ydfu@gmail.com>
2022-07-26 10:51:09 -07:00
Florian Ruynat
7fa6314791
Add ignore_assert_error to ubuntu20 etcd ha job ( #9108 )
2022-07-26 10:45:09 -07:00
Mohamed Zaian
65d95d767a
[helm] upgrade to 3.9.2 ( #9115 )
2022-07-26 10:41:09 -07:00
Denis Khachyan
8306adb102
update cilium to v1.11.7 ( #9119 )
2022-07-26 10:33:11 -07:00
ERIK
4b3db07cdb
Fix calicoctl version to v3.23.3 ( #9121 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-07-26 10:29:10 -07:00
gssjl2008
c24a3a3b15
Keep the style consistent ( #9116 )
2022-07-24 23:46:59 -07:00
Mohamed Zaian
aca6be3adf
[calico] add v3.23.3 and make it default ( #9112 )
2022-07-22 00:01:39 -07:00
rptaylor
9617532561
git ignore .terraform.lock.hcl anywhere ( #9109 )
2022-07-21 23:07:38 -07:00
Florian Ruynat
ff5e487e32
Add retries to api servers response
2022-07-21 23:03:38 -07:00
Florian Ruynat
9c51ac5157
Switch fedora36se to 35 and 35docker to 36
2022-07-21 23:03:38 -07:00
Florian Ruynat
07eab539a6
Add Fedora 36 support and CI, remove Fedora 34 (eol)
2022-07-21 23:03:38 -07:00
Florian Ruynat
a608a048ad
Update kube-ovn to v1.9.7
2022-07-21 23:03:38 -07:00
Mohamed Zaian
0cfa03fa8a
[flannel] update to v1.18.1 & make it default ( #9104 )
2022-07-21 00:19:55 -07:00
忘尘
6525461d97
Add reset tasks specific to calico network_plugin ( #9103 )
2022-07-19 13:15:27 -07:00
Kay Yan
f592fa1235
add kube-vip sans ( #9099 )
2022-07-19 13:11:28 -07:00
Cyclinder
2e1863af78
feat: change default blockSize for calico ( #9055 )
...
Signed-off-by: cyclinder qifeng.guo@daocloud.io
2022-07-19 13:05:27 -07:00
Kay Yan
2a282711df
update-loadbalancers-versions ( #9100 )
2022-07-19 13:01:28 -07:00
Mohamed Zaian
91073d7379
[kubernetes] make v1.24.3 default ( #9101 )
2022-07-19 02:58:06 -07:00
Alessio Greggi
3ce5458f32
hardening: Add SeccompDefault
admission plugin for kubelet ( #9074 )
...
* docs(hardening): add SeccompDefault admission plugin to kubelet feature gates
* fix(kubelet-config): enable config through kubelet_feature_gates
* feat(kubelet): add kubelet_seccomp_default variable
2022-07-19 00:50:07 -07:00
Marco Fortina
98c194735c
[kubernetes] add hashes for v1.22.12, v1.23.9 & v1.24.3 ( #9092 )
2022-07-19 00:30:19 -07:00
pil57852
626ea64f66
9052 crio add dpkg hold ( #9075 )
...
* Update main.yaml
* remove version in dpkg_selection name
* make lint happy
* Fix typo
* add comment / remove useless contition
* remove dpkg hold in reset tasks
2022-07-19 00:30:07 -07:00
Ajarmar
0d32c0d92b
[upcloud] Add firewall default deny policy and port allowlisting ( #9058 )
2022-07-19 00:18:06 -07:00
Mohamed Zaian
ce04fdde72
[ingress-nginx] upgrade to 1.3.0 ( #9088 )
...
* This release removes support for Kubernetes v1.19.0
* This release adds support for Kubernetes v1.24.0
* Starting with this release, we will need permissions on the coordination.k8s.io/leases resource for leaderelection lock
2022-07-14 18:46:25 -07:00
ERIK
4ed3c85a88
Fix calicoctl checksums for v3.23.2 ( #9087 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-07-13 14:02:57 -07:00
Peter Pan
14063b023c
Extend DNS memory limit. 170Mi tents to OOM ( #9084 )
2022-07-13 00:03:37 -07:00
yjqg6666
3d32f0e953
[ #9067 ] archive offline-files and support env-var NO_HTTP_SERVER to skip nginx-running ( #9068 )
2022-07-12 00:24:52 -07:00
Samuel Liu
d821bed2ea
Fix some typo ( #9056 )
...
* fix ingress controller task name
* fix calico word
* add check typo
2022-07-11 09:49:48 -07:00
ERIK
058e05df41
Add cri-dockerd url for offline.yml ( #9079 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-07-11 06:45:49 -07:00
Mohamed Zaian
a7ba7cdcd5
[calico] add v3.23.2 and make it default ( #9041 )
2022-07-08 10:41:48 -07:00
Kenichi Omichi
c01656b1e3
Allow "openSUSE Tumbleweed" to be run ( #9072 )
...
The commit 1ce2f04
tried to merge multiple SUSE OS checks including
"openSUSE Leap" and "openSUSE Tumbleweed" into a single SUSE, but
that was a perfect change.
Then the commit c16efc9
tried to fix it for "openSUSE Leap", but it
didn't take care of "openSUSE Tumbleweed".
Then this adds "openSUSE Tumbleweed" to the OS check.
2022-07-08 04:55:47 -07:00
Emin AKTAS
5071529a74
feat: upgrade cilium and add default variables ( #9065 )
...
Signed-off-by: eminaktas <eminaktas34@gmail.com>
Signed-off-by: Emin Aktas <emin.aktas@trendyol.com>
2022-07-07 10:35:34 -07:00
yasintahaerol
6d543b830a
Fix vcloud-csi bug related to #9046 ( #9066 )
...
* Fix vcloud-csi bug related to #9046
Signed-off-by: yasintahaerol <yasintahaerol@gmail.com>
* add supervisor-fss-namespace=kube-system flag to vsphere-csi-controller-deployment
Signed-off-by: yasintahaerol <yasintahaerol@gmail.com>
2022-07-07 10:31:35 -07:00
Cyclinder
e6154998fd
fix calico tunl0 routes test ( #9061 )
...
Signed-off-by: cyclinder qifeng.guo@daocloud.io
2022-07-06 04:52:49 -07:00
rptaylor
01c6239043
increase ansible fact_caching_timeout ( #9059 )
2022-07-06 01:04:51 -07:00
Emin AKTAS
4607ac2e93
fix(vsphere-csi): remove namespace env variable and set namespace as kube-system ( #9046 )
...
Signed-off-by: eminaktas <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
2022-07-06 01:00:50 -07:00
Kay Yan
9ca5632582
fix-docker-option-in-centos-arm64 ( #9047 )
2022-07-05 08:26:47 -07:00
Mohamed Zaian
51195212b4
[argocd] update argocd to v2.4.3 ( #9050 )
2022-07-05 08:22:47 -07:00
Kenichi Omichi
7414409aa0
Add target components on check_readme_versions.sh ( #9045 )
...
This adds target components on check_readme_versions.sh after
merging https://github.com/kubernetes-sigs/kubespray/pull/9044
In addition, this fixes typo on check_readme_versions.sh
This adds `foo_version` variables for some components because
check_readme_versions.sh verifies the corresponding version for
`<component name>_version` from main.yml. This change also makes
consistency in the main.yml. In long-term, we will be able to
remove the existing `foo_image_tag` variables, but that is not now
for backwards compatibility for users.
2022-07-05 08:02:47 -07:00
Kay Yan
adfd77f11d
add-test-for-kubeadm-etcd-deployment ( #9007 )
2022-07-05 07:58:47 -07:00
Kenichi Omichi
f3ea8cf45e
Add Rocky Linux 8 support for vagrant ( #8905 )
...
To test Kubespray on Rocky Linux 8 with vagrant, this adds it to
the Vagrantfile.
2022-07-05 07:50:47 -07:00
h9-HSFRQDH
3bb9542606
Adding support for node & pod pid limit ( #9038 )
2022-07-05 00:20:48 -07:00
Kay Yan
1d0b3829ed
remove-etcd-unsupported-arch ( #9049 )
2022-07-04 05:39:24 -07:00
Samuel Liu
a5d7178bf8
[docs] update supported components ( #9044 )
2022-06-29 23:50:07 -07:00
Calin Cristian Andrei
cbef8ea407
[etcd] drop hashes for 3.5.2
2022-06-29 09:44:06 -07:00
Calin Cristian Andrei
2ff4ae1f08
[etcd] drop hashes for 3.5.1
2022-06-29 09:44:06 -07:00
Calin Cristian Andrei
edf7f53f76
[etcd] add etcd 3.5.4 and make it the default for 1.24.x
2022-06-29 09:44:06 -07:00
Samuel Liu
f58816c33c
[krew] update krew ( #9043 )
2022-06-29 09:02:06 -07:00
忘尘
1562a9c2ec
add missing verbs ( #9032 )
2022-06-29 00:18:05 -07:00
Kenichi Omichi
6cd243f14e
Add component version check for README.md ( #9042 )
...
During code-review, reviwers needed to take care of README.md also
should be updated when the pull request updated component versions.
This adds the corresponding check to reduce reviwer's burden.
2022-06-29 00:14:05 -07:00
Kay Yan
4b03f6c20f
add-managed-ntp-support ( #9027 )
2022-06-28 13:15:34 -07:00
boeto
d0a2ba37e8
update deprecated syntax ( #9040 )
...
* `ansible.builtin.include` removed in version 2.16
Read the `ansible.builtin.include DEPRECATED` doc:
https://docs.ansible.com/ansible/latest/collections/ansible/builtin/include_module.html#deprecated
* Update integration.md
2022-06-28 13:11:34 -07:00
Samuel Liu
e8ccbebd6f
add ingress nginx webhook ( #9033 )
...
* add ingress nginx webhook
* fix ingress nginx template
2022-06-28 11:55:35 -07:00
Kay Yan
d4de9d096f
fix-the-issue-of-miss-the-etcd-user ( #9016 )
2022-06-28 09:13:58 -07:00
Tom Stian Berget
e1f06dd406
Add support for the updated (startup|liveness|readiness)Probe.Port numbers in Cilium ( #9031 )
2022-06-27 11:00:59 -07:00
rptaylor
6f82cf12f5
let containerd_default_runtime be undefined by default ( #9026 )
2022-06-27 10:56:59 -07:00
Calin Cristian Andrei
ca8080a695
[crun] drop old crun versions 1.2 and 1.3
2022-06-27 10:36:59 -07:00
Calin Cristian Andrei
55d14090d0
[crun] add 1.4.5 and make it the default
2022-06-27 10:36:59 -07:00
rtsp
da8498bb6f
[cert-manager] Upgrade to v1.8.2 ( #9029 )
2022-06-24 23:50:58 -07:00
orange-llajeanne
b33896844e
apply calico bgp peer definition task to all nodes, but delegate to ( #8974 )
...
first control plane node
2022-06-24 19:42:57 -07:00
Calin Cristian Andrei
ca212c08de
[runc] drop hashes for 1.0.2 and 1.0.3
2022-06-23 09:23:43 -07:00
Calin Cristian Andrei
784439dccf
[runc] make 1.1.3 the new default
2022-06-23 09:23:43 -07:00
Calin Cristian Andrei
d818c1c6d9
[runc] add hashes for 1.1.3
2022-06-23 09:23:43 -07:00
Calin Cristian Andrei
b9384ad913
[runc] add hashes for 1.1.2
2022-06-23 09:23:43 -07:00
Cristian Calin
76b0cbcb4e
bump pause container to 3.6 ( #9024 )
...
* [pod-infra] bump pod infra container version to 3.6
* [cri-dockerd] align pod infra container image with other CRIs
2022-06-23 01:43:44 -07:00
Florian Ruynat
6bf3306401
Fixed concatenate str & int in auto_renew_certificates_systemd_calendar var ( #8979 )
2022-06-22 11:55:43 -07:00
Robin Wallace
bf477c24d3
Chnage from deprecated variable
2022-06-22 00:37:44 -07:00
Robin Wallace
79f6cd774a
create snapshot-controller only if needed
2022-06-22 00:37:44 -07:00
Cyclinder
c3c9a42502
support multus multi-architecture installation ( #9012 )
...
Signed-off-by: cyclinder qifeng.guo@daocloud.io
2022-06-21 10:56:26 -07:00
ERIK
4a92b7221a
add manage offline files script ( #8956 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-06-21 03:49:43 -07:00
Sébastien Masset
9d5d945bdb
[MASTER] Add missing configuration for extra tolerations ( #8908 )
...
* Added new configuration item for extra tolerations in policy controllers
Signed-off-by: Sébastien Masset <smt.masset@gmail.com>
* Added new configuration item for extra tolerations in DNS autoscaler
Signed-off-by: Sébastien Masset <smt.masset@gmail.com>
* Aligned existing handling of extra DNS tolerations
Signed-off-by: Sébastien Masset <smt.masset@gmail.com>
2022-06-20 01:36:06 -07:00
Christoffer Anselm
475ce05979
Fix kubectl download for v1.23.8 amd64 ( #9002 )
...
kubectl_checksums for amd64 v1.23.8 was missing the last digit
2022-06-20 01:28:06 -07:00
Samuel
57d7029317
ansible_maxversion_exclusive ( #8919 )
2022-06-20 01:24:06 -07:00
Mohamed Zaian
e4fe679916
[kubernetes] make v1.24.2 default
2022-06-17 11:08:33 -07:00
Mohamed Zaian
123632f5ed
[kubernetes] add hashes for v1.22.11, v1.23.8 & v1.24.2
2022-06-17 11:08:33 -07:00
Calin Cristian Andrei
56d83c931b
[CI] use debian-11 image with more disk space to ensure successful upgrade tests
2022-06-17 08:00:32 -07:00
Calin Cristian Andrei
a22ae6143a
[CI] ensure upgrade tests cover defaults (containerd currently)
2022-06-17 08:00:32 -07:00
Calin Cristian Andrei
a1ec0571b2
[nerdctl] upgrade to 0.20.0
2022-06-17 08:00:32 -07:00
Calin Cristian Andrei
2db39d4856
[containerd] add hashes for 1.5.12, 1.5.13, 1.6.5 and 1.6.6 and make 1.6.6 the new default
2022-06-17 08:00:32 -07:00
Citrullin
e7729daefc
Add assertion for IPv6 in verify settings
...
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
2022-06-17 10:36:43 +02:00
Alessio Greggi
97b4d79ed5
feat: make kubernetes owner parametrized ( #8952 )
...
* feat: make kubernetes owner parametrized
* docs: update hardening guide with configuration for CIS 1.1.19
* fix: set etcd data directory permissions to be compliant to CIS 1.1.12
2022-06-17 01:34:32 -07:00
Kay Yan
890fad389d
suggest-to-use-nft-in-centos8 ( #8987 )
2022-06-17 01:30:32 -07:00
Kay Yan
0c203ece2d
fix-broken-link-in-readme
2022-06-17 09:29:45 +02:00
Florian Ruynat
9e7f89d2a2
Remove forgotten 1.21 references
2022-06-16 08:55:38 +02:00
Calin Cristian Andrei
24c8ba832a
[kubernetes] drop support for configuring insecure apiserver
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
c2700266b0
[download] fix dependencies for downloads
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
2cd8c51a07
[kubeadm] use v1beta3 configuration version
...
* extra admission controls now don't have a version in their file names
eventratelimit.v1beta2.yaml.j2 -> eventratelimit.yaml.j2
* cri_socket variable includes the unix:// prefix to be conformat with
upstream
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
589823bdc1
[CI] remove docker stand-alone molecule test
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
5dc8be9aa2
[CI] kube 1.24 requires at least 1775Mi of memory, might as well leave the default of 2048
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
fad296616c
[docker] use cri-dockerd instead of dockershim for any kubernetes version deployed with docker as the container_manager
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
ec01b40e85
[cri_dockerd] upgrade cri_dockerd to 0.2.2 for 1.24 compatibility
...
* use new artifact release name
* enable cri-dockerd dual setack support if enable_dual_stack_networks
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
2de5c4821c
[calico] clean up workarounds for older versions
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
9efe145688
[calico] make 3.23.1 the default and drop 3.20.x and 3.19.x
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
51bc64fb35
[cri-o] support cri-o 1.24 with kube 1.24
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
6380483e8b
[kubeconfig] generate admin kube config from /etc/kubernetes/admin.conf instead of the workaround of using kubeadm init phase kubeadm admin which fails with cri-dockerd
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
ae1dcb031f
[kubernetes] drop pre 1.22.0 workarounds
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
9535a41187
[kubernetes] make 1.22.0 the minimum version
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
47495c336b
[kubernetes] drop hashes for 1.21.x
2022-06-15 00:57:20 -07:00
Calin Cristian Andrei
d69d4a8303
[kubernetes] make 1.24.1 the new default
2022-06-15 00:57:20 -07:00
Kay Yan
ab4d590547
add-ubuntu2204-in-readme
2022-06-15 09:51:59 +02:00
Kay Yan
85271fc2e5
add-ci-for-ubuntu2204 ( #8958 )
2022-06-15 00:47:19 -07:00
蒋航
f6159c5677
Update Dockerfile base image ( #8975 )
...
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
2022-06-14 15:15:36 -07:00
rtsp
668b9b026c
[cert-manager] Upgrade to v1.8.1 ( #8976 )
2022-06-14 15:11:34 -07:00
Viktor Jacynycz
77de7cb785
Expose calico-typha metrics port ( #8855 )
2022-06-14 07:17:33 -07:00
Dickson Tung
e5d6c042a9
Fix regex for replacing http_proxy ( #8957 )
2022-06-14 07:07:34 -07:00
Ho Kim
3ae397019c
Add arm64 Flatcar OS's pypy bootstrapping ( #8959 )
...
- Upgrade pypy's python version to `3.9`
- Upgrade pypy`s version to `7.3.9`
2022-06-14 07:03:35 -07:00
Ho Kim
7d3e59cf2e
Remove unneeded socat installation for Flatcar ( #8970 )
2022-06-14 02:23:34 -07:00
orange-llajeanne
4eb83bb7f6
fixes for docker reset ( #8966 )
2022-06-14 02:15:34 -07:00
Florian Ruynat
1429ba9a07
Update docker version to 20.10.17 ( #8965 )
2022-06-14 02:11:33 -07:00
Ho Kim
889454f2bc
Fix typo in calico check ( #8969 )
2022-06-13 14:10:12 -07:00
orange-llajeanne
2fba94c5e5
fix a typo in the "matallb_auto_assign" variable name ( #8949 )
...
* fix a typo in the "matallb_auto_assign" variable name
* add metallb check to fail when deprecated "matallb_auto_assign" variable is defined
2022-06-13 09:40:12 -07:00
Kay Yan
4726a110fc
remove-support-for-ansible-2.9-2.10 ( #8951 )
2022-06-10 03:35:47 -07:00
Steffen Becker
6b43d6aff2
Proposed fix to Issue 8667 ( #8944 )
...
Proposed fix to Issue 8667
Proposed fix to Issue 8667
2022-06-09 23:37:46 -07:00
Kenichi Omichi
024a3ee551
Replace callback_whitelist with callbacks_enabled ( #8759 )
...
When running molecule jobs, we saw the folloing warning message:
[DEPRECATION WARNING]: [defaults]callback_whitelist option, normalizing names
to new standard, use callbacks_enabled instead. This feature will be removed
from ansible-core in version 2.15. Deprecation warnings can be disabled by
setting deprecation_warnings=False in ansible.cfg.
callbacks_enabled has been added since Ansible 2.11 and Kubespray is using
Ansible 2.12 at master branch. So we can use callbacks_enabled safely to
avoid the warning message.
2022-06-09 13:15:45 -07:00
Kenichi Omichi
cd7381d8de
Drop Ansible support for v2.9 and v2.10 ( #8925 )
...
Ansible v2.9 and v2.10 are EOL as [1].
This drops those version supports by following the upstream Ansible.
This sets use_ssh_args true always because that is required to use
ssh_args on ansible.cfg on Ansible v2.11 or later[2].
ansible_ssh_host is replaced with ansible_host because ansible_ssh_host
has been deprecated already and cenots7 jobs were failed due to the
deprecated ansible_ssh_host.
[1]: https://docs.ansible.com/ansible/devel/reference_appendices/release_and_maintenance.html#ansible-core-changelogs
[2]: https://docs.ansible.com/ansible/latest/collections/ansible/posix/synchronize_module.html#parameter-use_ssh_args
2022-06-09 07:07:42 -07:00
Mathieu Parent
f53764f949
calicoctl repo has been merged in calico ( #8920 )
2022-06-09 07:01:42 -07:00
Kenichi Omichi
57c3aa4560
Merge pull request #8943 from ErikJiang/update-etcd-download-url
...
update etcd download url in offline.yml
2022-06-08 08:09:48 -07:00
Mohamed Zaian
bb530da5c2
[registry] Switch registry to use registry.k8s.io
...
Please see the conversation here: https://groups.google.com/a/kubernetes.io/g/dev/c/DYZYNQ_A6_c
2022-06-08 14:12:22 +02:00
Ilya Margolin
cc6cbfbe71
Allow disabling calico CNI logs with calico_cni_log_file_path ( #8921 )
...
* Allow disabling calico CNI logs with calico_cni_log_file_path
Calico CNI logs up to 1G if it log a lot with current default settings:
log_file_max_size 100 Max file size in MB log files can reach before they are rotated.
log_file_max_age 30 Max age in days that old log files will be kept on the host before they are removed.
log_file_max_count 10 Max number of rotated log files allowed on the host before they are cleaned up.
See https://projectcalico.docs.tigera.io/reference/cni-plugin/configuration#logging
To save disk space, make the path configurable and allow disabling this log by setting
`calico_cni_log_file_path: false`
* Fix markdown
* Update roles/network_plugin/canal/templates/cni-canal.conflist.j2
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
2022-06-07 09:22:56 -07:00
bo.jiang
6f556f5451
update etcd download url in offline.yml
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-06-07 22:45:28 +08:00
Kenichi Omichi
9074bd297b
Update RELEASE.md ( #8937 )
...
If opening https://groups.google.com/g/kubernetes-dev we can see the
following message:
As of January 2, 2022, this group will be sunset in favor of dev@kubernetes.io .
So this replaces kubernetes-dev@googlegroups.com with the new one.
In addition, this adds actual steps to know how to create container images easily.
2022-06-06 23:55:49 -07:00
mahjonp
8030e6f76c
fix 8893#issuecomment-1147154353 ( #8933 )
...
Signed-off-by: mahjonp <junpeng.man@gmail.com>
2022-06-06 12:40:21 -07:00
ERIK
27bd7fd737
update kubespray image tag in readme to v2.19.0 ( #8934 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-06-06 10:24:21 -07:00
Ho Kim
77f436fa39
Fix: set fallback value of kubelet ip6 ( #8858 ) ( #8926 )
...
* Fix: set fallback value of kubelet ip6 (#8858 )
* Prune the spurious comma in the end of kubelet_address
- Update `roles/kubernetes/node/defaults/main.yml`
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
* Fix: set fallback value of kubelet ip6 (#8858 )
- Apply the lint: 132606368e
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
2022-06-06 10:08:21 -07:00
Kenichi Omichi
814760ba25
Use blocks for macvlan tasks for each distribution ( #8918 )
...
For the code readability, this adds blocks for each distribution.
2022-06-06 07:50:24 -07:00
zhougw
14c0f368b6
the KUESPRAYDIR defined but never used ( #8930 )
...
* fix dir error
* the command line should align
2022-06-06 07:42:23 -07:00
Boris Barnier
0761659a43
Update Kube-router version to 1.5.0 ( #8928 )
...
https://github.com/cloudnativelabs/kube-router/releases/tag/v1.5.0
2022-06-06 07:38:34 -07:00
vanyasvl
a4f752fb02
Add subjectAltName to calico-apiserver certificate ( #8907 )
...
* Add AltName to calico-apiserver certificate
* fix support for centos7 openssl
2022-06-06 07:38:23 -07:00
Mohamed Zaian
b2346cdaec
[feat] Upgrade metrics server to v0.6.1 ( #8909 )
...
* Metrics Server now requires access to nodes/metrics RBAC resource instead of nodes/stats. See: https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.6.0
* Minimize rbac permissions.
2022-06-06 07:34:37 -07:00
Thearas
01ca7293f5
support reserve ephemeral-storage ( #8895 )
2022-06-06 07:34:26 -07:00
Florian Ruynat
4dfce51ded
Update dashboard to 2.6.0 (k8s 1.24 support) ( #8906 )
2022-06-06 16:47:33 +03:00
Kenichi Omichi
f82ed24c03
Update KUBESPRAY_VERSION ( #8922 )
...
As a step of release process, this updates KUBESPRAY_VERSION.
Thank you so much for creating and pushing container images of
the new version floryut !
2022-06-05 22:08:20 +03:00
rtsp
1f65e6d3b5
[ingress-nginx] upgrade to 1.2.1 ( #8904 )
2022-06-01 00:23:10 -07:00
Kenichi Omichi
9bf7aaf6cd
Update RELEASE.md ( #8884 )
...
This updates RELEASE.md file to understand the release process
easily based on hands-on experience.
2022-06-01 00:23:03 -07:00
Max Gautier
5512465b34
Revert "Set exact user for Kubelet services" ( #8872 )
...
This reverts commit e375678674
.
The workaround of explicitly specifying root for the kubelet unit was
for pulling images from private registry. Kubernetes now have a
dedicated mechanism with imagePullSecret.
2022-06-01 00:19:02 -07:00
Chris Ricker
2f30ab558a
Add 1.24 mappings for etcd and snapshot_controller ( #8903 )
...
Map appropriate versions of etcd and snapshot_controller containers with
k8s 1.24
2022-06-01 00:09:02 -07:00
Daniil Muidinov
5c136ae3af
[calico] add 3.22.3 and 3.23.1 ( #8897 )
...
* [calico]
* add 3.22.3 and 3.23.1
* set 3.22.3 default
* fix download crd for calico 3.22.3 and upper
* update calico README.md
2022-05-31 13:27:23 -07:00
mahjonp
c927da00e0
Support cilium ip-masq-agent configuration ( #8893 )
...
* fix deploy Cilium with eBPF-based Masquerading failed
Signed-off-by: mahjonp <junpeng.man@gmail.com>
* forget to add the enable-ip-masq-agent flag
Signed-off-by: mahjonp <junpeng.man@gmail.com>
2022-05-31 09:26:53 -07:00
Samuel Liu
1600fd9082
clean up tags ( #8880 )
2022-05-31 07:52:53 -07:00
Samuel Liu
14acd124bc
fix containerd images downalod bugs ( #8894 )
2022-05-31 00:22:53 -07:00
rtsp
e3cbbfb9ed
[kubernetes] make 1.23.7 the new default ( #8888 )
2022-05-29 17:08:51 -07:00
rtsp
5f21e0b58b
Update components version in README.md ( #8886 )
2022-05-29 14:10:51 -07:00
Alessio Greggi
d22204a59f
docs: add hardening guide ( #8868 )
2022-05-29 12:36:50 -07:00
ERIK
90289b8502
add arch var in dockerfile ( #8875 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-05-29 12:32:51 -07:00
Mohamed Zaian
78aacee21b
[kubernetes] add hashes for 1.24.1 and other versions. ( #8876 )
...
* [kubernetes] add hashes for 1.24.1 and other versions.
versions: v1.21.13, v1.22.10, v1.23.7 & v1.24.1
* [kubernetes] make v1.23.7 default1
2022-05-27 12:00:42 -07:00
Gleb Galkin
f47aca3558
Added |bool for rhel_enable_repos ( #8871 )
2022-05-26 18:51:55 -07:00
Kenichi Omichi
73fc70dbe8
Delete kube_version v1.20- related code ( #8869 )
...
Current Kubespray supports the Kubernetes version 1.21 or upper with
`kube_version_min_required: v1.21.0`
Then kube_version v1.20- related code is not used at all.
This deletes those code for cleanup.
2022-05-25 21:31:22 -07:00
Kenichi Omichi
dc2a18e436
Merge pull request #8815 from simplekube-ro/dont_clobber_calico
...
[calico] don't clobber calico options set by the user
2022-05-24 10:25:48 -07:00
Thearas
82590eb087
fix remove docker-ce.repo
failed ( #8856 )
2022-05-24 05:44:06 -07:00
Ross Kusler
4c97ce747c
Adding support for the kube-router flag --cluster-asn flag ( #8837 )
2022-05-23 16:39:10 -07:00
Samuel Liu
ebbc5ed0ce
add liupeng0518 to reviewers ( #8853 )
2022-05-23 21:42:14 +03:00
Necatican Yıldırım
dc1af5a9c5
[etcd] Add support for setting the request size limit ( #8849 )
...
* [etcd] Add extra documentation for `etcd_memory_limit` and `etcd_quota_backend_bytes`
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* [etcd] Add support for setting ETCD_MAX_REQUEST_BYTES
Signed-off-by: necatican <necaticanyildirim@gmail.com>
2022-05-23 09:36:03 -07:00
irizzant
85bd1eea27
fix(calico): add missing "get" verb ( #8847 )
...
Signed-off-by: irizzant <i.rizzante@gmail.com>
2022-05-21 01:20:00 -07:00
Necatican Yıldırım
2b151c6aa2
cni-plugins: upgrade to 1.1.1 ( #8852 )
...
Signed-off-by: necatican <necaticanyildirim@gmail.com>
2022-05-21 11:14:16 +03:00
David Louks
93fe3e06ef
Add support for including annotations on aws-ebs-csi-controller ( #8779 )
...
* Add support for including annotations on aws-ebs-csi-controller
* update comment to specify role arn
2022-05-20 15:00:00 -07:00
Tamas Pasztor
9d3a894991
Possible remove ippools from cni config ( #8845 )
...
* Possible remove ippools from cni config
* Typo
* Update roles/network_plugin/calico/templates/cni-calico.conflist.j2
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
* Update cni-calico.conflist.j2
Incorrectly deleted calico forwarding content.
* Update roles/network_plugin/calico/templates/cni-calico.conflist.j2
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
2022-05-19 23:45:13 -07:00
Kenichi Omichi
0e6b727e53
Update docs for using venv ( #8842 )
...
Due many patterns of Linux distributions, it is difficult to install
ansible dependencies as system-wide stably.
Apart of Kubespray doc[1] recommends to use venv to avoid such issue,
and this applies venv usage to the other parts of the doc.
[1]: https://github.com/kubernetes-sigs/kubespray/blob/master/docs/setting-up-your-first-cluster.md#set-up-kubespray
2022-05-19 23:39:12 -07:00
Andrey
e42a01f203
Fixed systemd-networkd restart for ubuntu 22.04, when using reset.yml ( #8841 )
...
* Fixed systemd-networkd restart for ubuntu 22.04
* fixed systemd-networkd restart for all Ubuntu
2022-05-20 09:34:53 +03:00
Samuel Liu
a28b58dbd0
[calico]use ipamconfig instead of calico ipam command ( #8839 )
...
* use ipamconfig instead of calico ipam command
* fix ansible lint
2022-05-19 11:13:20 -07:00
orange-llajeanne
a26a9ee14f
set apparmor_enabled in netchecker task ( #8844 )
2022-05-19 10:49:21 -07:00
Kenichi Omichi
c09fcd4f92
Skip gathering facts when reset_nodes is false ( #8843 )
...
The doc[1] explains we need to specify
"-e reset_nodes=false -e allow_ungraceful_removal=true"
to delete offline node. However the task "Gather facts"
tried to gather facts of offline node also and the task
was failed.
This adds a condition to skip gathering facts when reset_nodes
is false on remove-node.yml.
[1]: https://github.com/kubernetes-sigs/kubespray/blob/master/docs/nodes.md#3-remove-an-old-node-with-remove-nodeyml
2022-05-19 01:04:07 -07:00
Samuel Liu
593359ec77
fix kube-ovn image ( #8838 )
2022-05-18 08:36:53 -07:00
Maxime Guyot
34ec4d5d40
Move woopstar to emeritus approver ( #8809 )
2022-05-18 02:36:53 -07:00
Kay Yan
3d8f3bc0b7
Fix the invalid kube vip manifest ( #8831 )
...
* add Feature synchronized time checking
* fix-invalid-kube-vip-manifest
2022-05-17 23:48:55 -07:00
Samuel Liu
eea7bb7692
only need run this once ( #8833 )
...
calicoctl ipam xx
calicoctl apply xx
2022-05-17 09:52:27 -07:00
Cristian Calin
3a89e31dee
[ansible] update ansible and cryptography requirements to work on ubuntu 22.04 ( #8826 )
2022-05-16 11:14:17 -07:00
Cristian Calin
0c504e4984
[docs] document support for ansible versions ( #8827 )
...
drop note about not supporting ansible 2.9 since we still cover it in
nightly CI
2022-05-16 00:50:17 -07:00
Kenichi Omichi
0bf070c33b
doc: write how to use kata-container for pods ( #8817 )
...
kata-container is not used by default even if enabling kata_containers_enabled.
This updates the doc for writing how to do that.
2022-05-13 23:15:18 -07:00
Cyclinder
dc8ad78206
fix: incorrect condition type ( #8822 )
...
Signed-off-by: cyclinder qifeng.guo@daocloud.io
2022-05-13 14:09:56 -07:00
ERIK
48e938660d
Allow replacement of address prefixes for all images ( #8764 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2022-05-13 09:23:14 +03:00
Mohamed Zaian
632d457f78
[ingress-nginx] upgrade to 1.2.0 ( #8814 )
2022-05-12 09:07:14 -07:00
Calin Cristian Andrei
569a319ff5
[calico] don't clobber user set bgp configuration options that are not managed by kubespray
2022-05-12 15:50:38 +00:00
Calin Cristian Andrei
47812ec002
[calico] don't clobber user set ippool options that are not managed by kubespray
2022-05-12 15:50:05 +00:00
Calin Cristian Andrei
c27dee57ea
[calico] don't clobber user set felixconfig options that are not managed by kubespray
2022-05-12 15:49:24 +00:00
weizhoublue
b289f533b3
get wrong server name of coredns ( #8811 )
...
Signed-off-by: weizhou.lan@daocloud.io <weizhou.lan@daocloud.io>
2022-05-12 08:33:14 -07:00
Cyclinder
3eb0a4071a
set default value of name to "k8s-pod-network" ( #8813 )
...
Signed-off-by: cyclinder qifeng.guo@daocloud.io
2022-05-12 08:29:14 -07:00
Oogy
5684610a55
Support metallb peer password ( #8792 )
...
* support metallb peer password
* add MetalLB BGP password example
2022-05-11 21:39:15 -07:00
Samuel Liu
f26f544ff6
[kube-ovn]: update kube-ovn version and sync some feature ( #8790 )
...
* [kube-ovn]: some feature
kube-ovn vlan mode
ipv6/ipv4 dual stack
...
* remove unused env
* fix readinessprobe
2022-05-11 21:35:15 -07:00
Ajarmar
b9e5b0cb53
UpCloud server plan, firewall, load balancer integration ( #8758 )
...
* [upcloud] add option to use preconfigured cpu/mem plan
* [upcloud] add option to use firewall rules for API server/SSH access
* [upcloud] add option to use managed load balancer
2022-05-11 10:15:03 -07:00
Necatican Yıldırım
13443b05a6
Overhaul Cilium manifests to match the newer versions ( #8717 )
...
* [cilium] Separate templates for cilium, cilium-operator, and hubble installations
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* [cilium] Update cilium-operator templates
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* [cilium] Allow using custom args and mounting extra volumes for the Cilium Operator
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* [cilium] Update the cilium configmap to filter out the deprecated variables, and add the new variables
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* [cilium] Add an option to use Wireguard encryption on Cilium 1.10 and up
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* [cilium] Update cilium-agent templates
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* [cilium] Bump Cilium version to 1.11.3
Signed-off-by: necatican <necaticanyildirim@gmail.com>
2022-05-11 06:23:04 -07:00
Andrew Zagorodnuk
e70c00a0fe
fix: Waiting until Volumes will be detached from the node on graceful node removal ( #8739 )
2022-05-10 09:57:43 -07:00
spaced
bb67b654c5
local volume provisioner should not run on control plane nodes by default ( #8805 )
2022-05-10 19:04:24 +03:00
Kenichi Omichi
aef25819bc
nit: Add offline note for kube-* images ( #8718 )
2022-05-10 06:41:44 -07:00
weizhoublue
1d96f465f4
arm64 support of cilium ( #8803 )
...
when cilium v1.10 , it is ok to support arm64
https://cilium.io/blog/2021/05/20/cilium-110
Signed-off-by: weizhou.lan@daocloud.io <weizhou.lan@daocloud.io>
2022-05-10 02:55:43 -07:00
emiran-orange
8f618ab408
Fix condition on kata_containers_version/kube_version when kata_containers_enabled is false ( #8804 )
2022-05-09 14:56:32 -07:00
Hugo Blom
5296d7ef9c
Added playbook to wait for cloud-init to finish ( #8799 )
2022-05-09 10:49:19 -07:00
Robin Wallace
b715500b48
csi: bump upcloud csi driver ( #8784 )
2022-05-09 10:43:19 -07:00
Alessio Greggi
37a5271f5a
feat: add variables to manage makeIPTablesUtilChains and streamingConnectionIdleTimeout kubelet parameters ( #8796 )
2022-05-09 09:25:19 -07:00
Robin Wallace
42fc71fafa
[PodSecurityPolicy] Move the install of psp ( #8744 )
2022-05-09 09:21:19 -07:00
Victor Morales
02b6e4833a
Update Kata Containers runtime ( #8797 )
...
* Update Kata containers binary to 2.4.1 version
* Update overhead kata runtime values
* Fix kata-qemu default values in CRI-O
2022-05-08 17:01:18 -07:00
Andy
323a111362
[kubelet] set correct resolv.conf for Ubuntu 22.04 ( #8795 )
2022-05-06 16:31:04 -07:00
Alessio Greggi
e7df4d3dd9
add support for service-account-lookup
parameter ( #8781 )
...
* feat: add variable to manage service-account-lookup on kube-apiserver
* docs: add documentation about service-account-lookup variable
2022-05-06 00:39:07 -07:00
David Louks
3e52a0db95
Add optional setting for ca data in auth webhook ( #8777 )
...
* Add optional setting for ca data in auth webhook
* add webhook token auth variables to sample inventory
2022-05-05 14:52:43 -07:00
Cristian Calin
94484873d1
[containerd] add 1.6.4 which is needed for kubernetes 1.24.0 and make it the default ( #8791 )
2022-05-05 14:10:43 -07:00
Elif Akyıldırım
0d6ea85167
Assert that IP range is enough for the nodes ( #8720 )
...
* Assert that IP range is enough for the nodes
Co-authored-by: Necatican Yıldırım <necaticanyildirim@gmail.com>
* Fixed whitespace
* Fixed errors
* Fixed errors
Co-authored-by: Necatican Yıldırım <necaticanyildirim@gmail.com>
2022-05-05 08:48:20 -07:00
Florian Ruynat
674ec92224
Add crictl 1.24 for new k8s version ( #8787 )
2022-05-05 08:40:22 -07:00
Victor Morales
e7e5037a86
Add a container_manager validation ( #8785 )
2022-05-04 23:58:19 -07:00
Kenichi Omichi
fbcf426240
Drop containerd 1.4 support ( #8780 )
...
The version 1.4 of containerd has been End of Life since March 3, 2022
as https://containerd.io/releases/#support-horizon
It is nice to drop the support from Kubespray also to follow containerd.
2022-05-04 23:02:20 -07:00
Mohamed Zaian
2301554e98
[kubernetes] add hashes for 1.24.0 ( #8783 )
2022-05-04 22:58:21 -07:00
Calin Cristian Andrei
5bc35002ba
[remove-etcd-node] fix json path query
2022-05-04 06:35:51 -07:00
Calin Cristian Andrei
9143810a4d
[CI] add remove node job
2022-05-04 06:35:51 -07:00
Calin Cristian Andrei
8f118fb619
[reset] fix task inclusion logic for network plugin
2022-05-04 06:35:51 -07:00
Calin Cristian Andrei
1113460b68
[cri-o] molecule switch from ubuntu 18 to ubuntu 20
2022-05-04 14:46:17 +02:00
Florian Ruynat
74c7e009b7
Move flannel to kubespray/quay for CI ( #8774 )
2022-05-04 00:11:30 -07:00
Lubos Mercl
c20ab7d987
add fix for GCP CSI driver ( #8616 )
...
Signed-off-by: Lubos Mercl <lubos.mercl@gmail.com>
2022-05-03 08:55:56 -07:00
Robin Wallace
fe66121287
[Openstack] master foreach and fixes ( #8709 )
...
* [openstack] fix for new network modules
* [openstack] for-each master nodes
2022-05-03 08:51:56 -07:00
Cristian Calin
9605bbaa67
[nerdctl] upgrade to 0.19.0 ( #8772 )
2022-05-03 05:39:56 -07:00
Cristian Calin
b7ce6a9f79
[ansible] upgrade to 5.7 ( #8771 )
2022-05-03 01:29:55 -07:00
Kenichi Omichi
c04a73c11a
Update containerd version to 1.6.3 ( #8770 )
...
containerd version 1.6.3 has been released as [1]
This adds the checksums and makes Kubespray use it.
[1]: https://github.com/containerd/containerd/releases/tag/v1.6.3
2022-05-02 22:43:55 -07:00
Kenichi Omichi
f184725c5f
Use ansible 2.12 for testcases_prepare ( #8763 )
...
tests/requirements.txt links to tests/requirements-2.12.txt, so
Kubespray uses ansible 2.12 by default for testing. However we
forgot to update testcases_prepare.sh to use ansible 2.12.
This updates testcases_prepare to use ansible 2.12.
2022-05-02 11:34:31 -07:00
bilalcaliskan
26a0b0f1e8
chore(flannel): change flannel repository and upgrade image version ( #8740 )
...
* chore: change flannel repository and upgrade image version
* docs: upgrade flanneld version
2022-05-02 11:29:14 -07:00
Alessio Greggi
fa1d222eee
add support for EventRateLimit
plugin configuration ( #8711 )
...
* feat: add support for EventRateLimit admission plugin
* docs: add documentation about admission_control_config_file and EventRateLimit configuration
2022-05-02 11:03:15 -07:00
Cristian Calin
56cf163a23
[kubernetes] actually make 1.23.6 the default ( #8767 )
2022-05-02 00:43:14 -07:00
Mohamed Zaian
afcedf6d77
Pull master, Rebase, add changes again ( #8745 )
2022-05-02 00:39:14 -07:00
Chris Ricker
21fc197ee0
Ensure containerd service unmasking ( #8726 )
...
* Force containerd service unmasking
Force systemd to unmask and start service when adding containerd service
* Eliminate restart and move unmasking step
Switch to start instead of restart
Move unmasking to restart handler
* Add unmasking to similar container runtimes
* Add missing service names
2022-04-29 08:39:14 -07:00
Calin Cristian Andrei
fcb4c8fb61
[kubernetes] make 1.23.6 the new default
2022-04-29 07:57:13 -07:00
Calin Cristian Andrei
b6e2c56ae6
[kubernetes] add hashes for 1.21.12
2022-04-29 07:57:13 -07:00
Calin Cristian Andrei
b005985d4e
[kubernetes] add hashes for 1.23.6
2022-04-29 07:57:13 -07:00
Samuel Liu
1294fd5730
check calico ipv6 ( #8738 )
...
* check calico ipv6
* just check ipip mode for ipv6
2022-04-29 00:35:13 -07:00
Cristian Calin
835fd86a08
[CI] split molecule testes to run in parallel ( #8756 )
...
* add parametrization to molecule_run.sh
* [CI] split molecule tests to allow parallelization of work
2022-04-29 00:09:12 -07:00
Mohamed Zaian
b7004d72c5
[kubernetes] add hashes for 1.22.9 ( #8746 )
...
* [kubernetes] add hashes for 1.22.9
2022-04-28 16:10:50 +03:00
Kenichi Omichi
eb566ca626
Remove aufs-tools from Ubuntu requirement ( #8754 )
...
aufs-tools was required for docker.io package originally,
but Kubespray installs docker-ce package instead today.
In addition, Ubuntu 20.04 doesn't provide aufs-tools as [1].
Then this removes aufs-tools from Ubuntu requirement.
[1]: https://bugs.launchpad.net/ubuntu/+source/aufs-tools/+bug/1947004
2022-04-27 23:04:55 -07:00
Cristian Calin
aa12f1c56b
[CI] fix packet_ubuntu20-calico-etcd-kubeadm-upgrade-ha job ( #8752 )
2022-04-27 12:39:36 -07:00
Cristian Calin
6cc5b38a2e
[terraform] use modern day equinix metal provider ( #8748 )
...
* [terraform] use modern day equinix metal provider
* [CI] ensure packet job tests metal
2022-04-27 10:34:13 -07:00
Mathieu Parent
e6c4330e4e
calico: vxlan is the default for calico_network_backend ( #8750 )
...
Since https://github.com/kubernetes-sigs/kubespray/pull/8434
2022-04-27 02:24:11 -07:00
Kenichi Omichi
1e827f9807
Update kata-containers.md ( #8747 )
...
* kata container related options exist in k8s-cluster.yml,
not k8s_cluster.yml
* https://github.com/kata-containers/runtime has been archived and
https://github.com/kata-containers/kata-containers is used today.
2022-04-26 07:06:53 -07:00
Olle Larsson
a4f26dc8f3
[terraform/openstack] add safespring to provider list ( #8735 )
2022-04-25 04:43:39 -07:00
Mulugeta Ayalew Tamiru
3f065918d9
Update verbs for volumeattachments resource ( #8731 )
...
* Update verbs for volumeattachments resource
Update verbs for volumeattachments resource so that the kubelet can create volumeattachments and mount volumes when deploying Kubernetes on VMware vSphere.
* Update verbs for volumeattachments resource
Update verbs for volumeattachments resource to match upstream
* Update vsphere-csi-controller-rbac.yml.j2
2022-04-22 00:04:13 -07:00
Cristian Calin
2c2d4513ac
[helm] upgrade to 3.8.2 ( #8723 )
2022-04-18 12:51:50 -07:00
zhengtianbao
937e64d296
Update flannel use install-cni-plugin to fit upstream ( #8714 )
...
* Update flannel use install-cni-plugin to fit upstream
* Replace flannel cni repo
* Remove download flannel binary
2022-04-18 09:44:41 -07:00
Cristian Calin
3261d26181
[etcd] ensure etcd is properly upgraded when managed by kubeadm ( #8722 )
...
* [etcd] ensure etcd is properly upgraded when managed by kubeadm
* [CI] add periodic job to test upgrade of etcd managed by kubeadm
2022-04-17 10:32:41 -07:00
Mathieu Parent
c98a0a448f
metallb: Add images to downloads ( #8715 )
...
For offline mode
2022-04-14 10:06:46 -07:00
Mohamed Zaian
7e7218f5ce
etcd: add etcd v3.5.3 for kubernetes 1.21+ ( #8712 )
...
* As per this issue https://github.com/kubernetes-sigs/kubespray/pull/8664 I propose to make etcd v.3.5.3 default for any kubernetes version which uses 3.5.x since that 3.5.[0-2] not recommended for production.
2022-04-14 05:48:46 -07:00
Cristian Calin
45262da726
[calico] call calico checks early on to prevent altering the cluster with bad configuration ( #8707 )
2022-04-14 01:08:46 -07:00
Florian Ruynat
aef5f1e139
Add tz to kubespray image
2022-04-13 08:22:45 +02:00
SOPHAL HONG
3d4baea01c
Add tag to AWS VPC subnets for automatic subnet discovery by load balancers or ingress controllers ( #8705 )
2022-04-12 10:05:23 -07:00
Julien Le Fur
30306d6ec7
Enable external CA mode for control-plane deployment ( #8620 )
2022-04-12 05:47:23 -07:00
Robin Wallace
d7254eead6
UpCloud integration ( #8653 )
...
* [upcloud] add upcloud csi-driver
* Option to use ansible_host as api ip for kubueconfig
2022-04-11 15:13:23 -07:00
Anthony Bible
9dced7133c
Fixes for Hetzner terraform and Hetzner Cloud ( #8702 )
...
* - add ability to specify the network_zone in hetzner terraform
- Export the network id from hetzner terraform the the generated inventory.ini
* - Add with_networks variable to allow different deployments of hcloud controller manager
- Add network id to hcloud controller secret (added via the inventory)
- Don't include extra_args if it's not set
2022-04-11 10:26:06 -07:00
Kenichi Omichi
c2fb1a0747
Add VAGRANT_ANSIBLE_TAGS for normal deployment ( #8697 )
...
Current ansible.tags 'facts' is for skipping actual Kubespray deployment
at vagrant CI because the deployment takes much time. However the static
'facts' skips the deployment for normal usage of vagrant also.
That causes confusions.
This adds VAGRANT_ANSIBLE_TAGS to skip the deployment for vagrant CI.
2022-04-08 23:58:04 -07:00
Thomas Eberle
00a4d2d3c4
Removed quotation of nerdctl_extra_flags. ( #8695 )
...
The quotations in the variable nerdctl_extra_flags are not required for the `nerdctl_image_pull_command` and throw the following error when executing the cluster-playbook with `container_insecure_registries` set:
unknown flag: --insecure-registry\\\"
This happens as the complete nerdctl_image_pull_command string variable gets split into an array string for the cmd task. The escaped quotation doesn't get escaped properly and is added to the cmd-string array as part of the command. This leads to a wrong written insecure-registry flag, which throws this error.
2022-04-08 08:02:43 -07:00
Samuel Liu
424ef3b3f9
[calico] add calico apiserver ( #8690 )
...
* [calico] add calico apiserver
* fix yamllint
* remove addext argument
* Configure API server with the CA bundle
* add check kdd
2022-04-08 00:02:42 -07:00
Mathieu Parent
996ef98b87
Add support for kube-vip ( #8669 )
...
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
2022-04-07 10:37:57 -07:00
Unai Arríen
19d5a1c7c3
Ensure all Kubelet required kernel values are configured when enabling protectKernelDefaults ( #8692 )
2022-04-07 08:33:59 -07:00
rtsp
0481dd946f
[cert-manager] Upgrade to v1.8.0 ( #8688 )
2022-04-06 00:52:57 -07:00
cyril-corbon
29109575f5
fix: reset docker was not removing docker properly ( #8680 )
...
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2022-04-05 21:36:55 -07:00
emiran-orange
3782573ede
Single quotes are missing in jsonpath argument of kubectl get node ( #8683 )
2022-04-05 09:45:38 -07:00
Alessio Greggi
bba91a7524
split kube_feature_gates variable for different kubernetes components ( #8677 )
...
* feat: split kube_feature_gates variable for different kubernetes components
* docs: add kube_feaute_gates componet variables
2022-04-05 05:39:37 -07:00
Cristian Calin
b67cadf743
[crun] upgrade to 1.4.4 ( #8675 )
2022-04-04 23:57:36 -07:00
cyril-corbon
56dda4392c
[validate-container-engine] check if kubelet is present was not working ( #8679 )
...
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2022-04-04 09:34:12 -07:00
Cristian Calin
34fec09ff1
[containerd] upgrade versions to address CVE-2022-24769 ( #8671 )
...
* [containerd] add hashes for 1.5.11
* [containerd] add hashes for 1.6.2
* [containerd] make 1.6.2 the new default
2022-04-04 05:30:11 -07:00
Cristian Calin
cefd1339fc
[vsphere_csi] update to 2.5.1 and make external_vsphere_version 7.0u1 by default ( #8676 )
2022-04-04 01:08:11 -07:00
Cristian Calin
b915376194
[runc] upgrade to 1.1.1 ( #8674 )
2022-04-04 00:42:23 -07:00
Cristian Calin
455cc6ff75
[nerdctl] upgrade to 0.18.0 ( #8672 )
2022-04-04 00:42:11 -07:00
Cristian Calin
cc9c376d0f
[validate-container-engine] add facts tag to tasks needed for vagrant jobs ( #8678 )
2022-04-04 00:32:11 -07:00
Kenichi Omichi
018611f829
Fix quotation of nerdctl_extra_flags ( #8668 )
...
Due to missing quotation of nerdctl_extra_flags, ansible-playbook was failed:
Using module file /usr/local/lib/python3.6/dist-packages/ansible/modules/command.py
Pipelining is enabled.
[..]
File "/usr/lib/python3.8/shlex.py", line 191, in read_token
raise ValueError("No closing quotation")
This fixes the issue.
T-Eberle investigated the issue and found the solution.
Thank you T-Eberle!
2022-04-02 10:56:09 -07:00
cyril-corbon
1781eab21f
fix: uninstall contailer engine if service is running ( #8662 )
2022-04-01 09:20:46 -07:00
190ikp
78b05d0ffc
fix disk controller type in Vagrantfile ( #8656 )
2022-03-31 10:51:01 -07:00
Florian Ruynat
1c0df78278
Add ETCD_EXPERIMENTAL_INITIAL_CORRUPT_CHECK flag to etcd config ( #8664 )
2022-03-31 08:17:01 -07:00
Kenichi Omichi
6cc9da6b0a
Update vagrant.md ( #8663 )
...
To read it easily, this puts new lines.
2022-03-31 00:07:00 -07:00
Florian Ruynat
6af9cae0a5
Add missing 2.10 ansible test ( #8665 )
2022-03-30 08:12:27 -07:00
Cristian Calin
ef29455652
[ansible] make ansible 5.x the new default version ( #8660 )
...
* [ansible] make ansible 5.x the new default version and move different versions tested to nightly jobs
* [CI] jobs were missing proper ansible cleanup
2022-03-29 15:36:11 -07:00
Kenichi Omichi
503ab0f722
Run 0100-dhclient-hooks if dhcpclient is enabled ( #8658 )
...
If running Kubespray on static IP environments, a task was failed like:
TASK [kubernetes/preinstall : Configure dhclient hooks for resolv.conf (RH-only)]
fatal: [ak8s2]: FAILED! => {
"changed": false, "checksum": "..",
"msg": "Destination directory /etc/dhcp/dhclient.d does not exist"}
This adds a check for dhclientconffile for running 0100-dhclient-hooks to
run the task only if dhcpclient is enabled.
2022-03-29 00:11:11 -07:00
Christian Rohmann
90883e76af
terrform/openstack: Fix templating of ansible_ssh_common_args in no_floating.yml if used as TF module ( #8646 )
...
* terraform/openstack: Use path.module for ansible_bastion_template.txt
This extends on #7643 by not using path.root, but switching to path.module
to allow use of the terraform code as a module itself. This change then keeps
all calls to the template file stable even for that use-case.
* terraform/openstack: Make sed calls fail on errors
By using a single call with two replacements to use of sed will create proper exit codes
and allowing for errors to be recognized by terraform.
2022-03-29 00:07:11 -07:00
Cristian Calin
113de8381c
[ansible] add support for ansible 5 (ansible-core 2.12) ( #8512 )
2022-03-28 08:49:22 -07:00
Calin Cristian Andrei
652f2edbe1
[etcd] add 0 hash for arm v3.5.2 to prevent deployment failures
2022-03-28 08:40:30 +02:00
rtsp
a67e36703f
Update cert-manager to v1.7.2 ( #8648 )
2022-03-26 04:53:22 -07:00
Samuel Liu
73c6943402
fix vagrant parameter ( #8650 )
2022-03-25 18:57:58 -07:00
Florian Ruynat
d46817d690
Remove centos7 molecule while opensuse mirror is flaky
2022-03-25 16:57:58 -07:00
Florian Ruynat
97cb64c62d
Remove k8s module for ns creation
2022-03-25 16:57:58 -07:00
Florian Ruynat
3f70241fb7
Update kubernetes image to 2.18.1
2022-03-25 16:57:58 -07:00
Maciej Wereski
21b71b38a3
Vagrantfile: add var to set ansible verbosity level ( #8639 )
...
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2022-03-22 06:11:44 -07:00
Erwan Miran
b2f9442aba
Have ingress_controller and external_provisioner in upgrade-cluster.yml ( #8640 )
2022-03-22 05:43:43 -07:00
Cristian Calin
fa9f85c7e9
[sysctl] set fs.may_detach_mounts=1 even when CRIs don't set it themselves ( #8635 )
2022-03-21 17:36:13 -07:00
Fredrik Liv
ffa285c2e7
Fixed cluster roles for openstack cloud controller ( #8638 )
2022-03-21 06:19:21 -07:00
Kenichi Omichi
7b1dc600d5
Fix the condition of drain on pre-remove task ( #8634 )
...
When running cluster.yml for new machines what containerd is already
install but Kubernetes cluster were not installed before, the task
"remove-node | List nodes" is failed like
"changed": false,
"cmd": [
"/usr/local/bin/kubectl", "--kubeconfig",
"/etc/kubernetes/admin.conf", "get", "nodes", "-o",
"go-template={{ range .items }}{{ .metadata.name }}
{{ "\n" }}{{ end }}"
],
..
"stderr": "error: stat /etc/kubernetes/admin.conf: no such file or directory",
That was due to lack to check the existing Kubernetes cluster exists
or not before running "kubectl drain" command.
This adds the check to avoid the issue.
2022-03-21 01:39:10 -07:00
Cristian Calin
5e67ebeb9e
[container image] use focal (ubuntu 20.04) base image for our docker builds ( #8631 )
2022-03-18 09:58:41 -07:00
Fredrik Liv
af7066d33c
Updated openstack cloud controller version to v1.22.0 ( #8629 )
...
* Updated openstack cloud controller version to match kubernetes version
* Rolled back file structure change
2022-03-18 01:47:16 -07:00
Cristian Calin
dd2d95ecdf
[calico] don't enable ipip encapsulation by default and use vxlan in CI ( #8434 )
...
* [calico] make vxlan encapsulation the default
* don't enable ipip encapsulation by default
* set calico_network_backend by default to vxlan
* update sample inventory and documentation
* [CI] pin default calico parameters for upgrade tests to ensure proper upgrade
* [CI] improve netchecker connectivity testing
* [CI] show logs for tests
* [calico] tweak task name
* [CI] Don't run the provisioner from vagrant since we run it in testcases_run.sh
* [CI] move kube-router tests to vagrant to avoid network connectivity issues during netchecker check
* service proxy mode still fails connectivity tests so keeping it manual mode
* [kube-router] account for containerd use-case
2022-03-17 18:05:39 -07:00
Sergey
a86d9bd8e8
do not remove package in validate container engine role when Fedora CoreOS distr ( #8626 )
2022-03-17 06:49:20 -07:00
Calin Cristian Andrei
21b1516d80
[kubernetes] add hashes for 1.21.11
2022-03-17 05:03:20 -07:00
Calin Cristian Andrei
4c15038194
[kubernetes] add hashes for 1.22.8
2022-03-17 05:03:20 -07:00
Calin Cristian Andrei
538f9df5cc
[kubernetes] make 1.23.5 the default
2022-03-17 05:03:20 -07:00
Calin Cristian Andrei
efb0412b63
[kubernetes] add hashes for 1.23.5
2022-03-17 05:03:20 -07:00
Qasim Mehmood
5a486a5cca
Calico: Fix Wireguard support for CentOS Stream 9/RHEL 9 Beta ( #8625 )
2022-03-17 04:11:20 -07:00
Cristian Calin
394857b5ce
[docker] add support for cri-dockerd as a replacement for dockershim ( #8623 )
2022-03-16 16:28:11 -07:00
Cristian Calin
5043517cfb
[containerd] avoid cleanup of /usr/bin on ostree distributions ( #8624 )
2022-03-15 13:47:48 -07:00
Max Gautier
307d122a84
Helm-apps role for installing helm charts ( #8347 )
...
* Sketch of helm-apps role interface
* helm-apps: Early implementation and settings
* helm-apps: Fix README.md example playbook
* fixup! Sketch of helm-apps role interface
* Make the argument specs more explicit
* Remove exposed options from hardcoded default
* Simplify example playbook in README.md
- Define directly the roles parameters
- Add an example of option override for one chart only
* Use release instead of charts
Make explicit that the role is mananing releases, not charts.
Simplify parameters naming
2022-03-14 08:29:58 -07:00
onock
d444a2fb83
[systemd-resolved] Fix DNS configuration according to docs/dns-stack.md and during reset of cluster ( #8560 ) ( #8561 )
2022-03-14 02:08:22 -07:00
Kenichi Omichi
fb7c56e3d3
Add unit test for print_hostnames of inventory.py ( #8558 )
...
This adds a unit test for the function.
2022-03-12 23:40:23 -08:00
spaced
2b79be68e7
fix typo and duplicated declaration of ingressclasses ( #8591 )
2022-03-12 23:36:23 -08:00
Mac Chaffee
512d5e3348
Restart etcd if the etcd version changes ( #8556 )
...
Signed-off-by: Mac Chaffee <me@macchaffee.com>
2022-03-11 18:08:23 -08:00
Unai Arríen
4b6892ece9
Add epoch to docker-ce and docker-ce-cli packages to ensure docker up… ( #8618 )
...
* Add epoch to docker-ce and docker-ce-cli packages to ensure docker upgrade
* Split container-engine redhat vars to support legacy RHEL 7 version management
* Support ansible_distribution_major_version when disvering vars with ansible_os_family
2022-03-11 02:45:07 -08:00
Toni Tauro
5a49ac52f9
feat(calico): add configurable ipam strictaffinity ( #8581 )
...
Signed-off-by: Toni Tauro <toni.tauro@adfinis.com>
2022-03-07 22:58:33 -08:00
Cristian Calin
db1e30e4fc
[calico] add 3.22.1 ( #8612 )
2022-03-07 22:54:34 -08:00
Cristian Calin
b4a61370c8
[cri-o] add cri-0 1.23.x ( #8599 )
2022-03-07 05:39:07 -08:00
kakkotetsu
58b2f39ce5
add IPv6 listen directive to nginx if enable_dual_stack_networks ( #8596 )
2022-03-07 05:39:00 -08:00
Tom Janson
56d882abed
Clarify confirmation prompt ( #8589 )
...
Entering any value causes the play to proceed, e.g., entering "no<Enter>". (This is simply how Ansible's pause module behaves.)
2022-03-07 05:38:54 -08:00
Takuya Murakami
39acb2b84d
Update ansible-lint to 5.4.0 ( #8607 ) ( #8608 )
...
* Update ansible-lint to 5.4.0 (#8607 )
It seems that the Rich version 11.0.0 has a breaking change.
So need to update ansible-lint to 5.3.2 or later.
* Fix for ansible-lint no-changed-when rule (#8607 )
2022-03-07 05:35:55 -08:00
Branko Mijuskovic
3ccba08983
Fix crio_packages for Rocky8 ( #8594 )
2022-03-07 05:29:05 -08:00
Mohamed Zaian
632aa764e6
etcd: add etcd v3.5.1 for kubernetes 1.22+ ( #8588 )
...
* There is an issue with etcd v3.5.0 where it resurrects ancient members see: https://github.com/etcd-io/etcd/issues/13196
This issue is clearly fixed in etcd v3.5.2
* Just keep the checksums
2022-03-07 05:28:54 -08:00
Cristian Calin
f6342b6cf4
[crun] upgrade to 1.4.3 ( #8598 )
2022-03-04 08:22:52 -08:00
Cristian Calin
471585dcd5
[containerd]: upgrade versions to fix CVE-2022-23648 ( #8597 )
...
* [containerd] add hashes for 1.6.1
* [contained] make 1.6.1 the default
* [containerd] add hashes for 1.5.10
* [containerd] add hashes for 1.4.13
* [nerdct] bump to 0.17.1
2022-03-03 14:51:16 -08:00
Maciej Wereski
51821a811f
MetalLB: update to v0.12.1 ( #8593 )
...
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2022-03-03 08:49:48 -08:00
Mathieu Parent
299a9ae7ba
terraform/gcp: Add ingress_whitelist ( #8590 )
...
Also, do not create unneeded resources (target pools are charged and should
only be created when needed).
2022-03-02 16:52:46 -08:00
Cristian Calin
bf7a506f79
[containerd] Upgrade containerd to 1.6.0 and re-enable arm64 architecture with default options ( #8555 )
...
* [containerd] add checksums for 1.6.0
* [containerd] promote 1.6.0 as the new default
* [runc] promote 1.1.0 as the new default to allow arm deployments out of the box
* [nerdctl] bump to 0.17.0 to align with containerd 1.6.0
* [reset] allow crictl stopp and rmp commands to fail
2022-03-02 15:27:13 -08:00
Tom Janson
2e925f82ef
Revert "Fix: typos in docs and comments ( #7805 )" ( #8592 )
...
This reverts commit 417180246c
.
2022-03-02 11:57:13 -08:00
Tom Janson
ddef7e1139
missing "check_mode: no"s for several read-only tasks ( #8584 )
...
this is not complete -- there are almost certainly more instances of
this issue
2022-03-02 09:29:14 -08:00
cyril-corbon
672e47a7eb
feat: check & uninstall container engine ( #8439 )
...
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2022-02-28 10:59:46 -08:00
Tom Janson
3e8e64a3e5
fix typo / error regarding etcd and k8s_cluster groups ( #8580 )
...
As far as I can tell this is simply a typo that has existed from the beginning. Having it this way around (`etcd` group as a child and thus subset of `k8s_cluster`) mirrors what is written in the preceeding sentence.
2022-02-28 02:54:58 -08:00
Mac Chaffee
b554246502
Fix host DNS config 1) being edited too soon and 2) not working with NM ( #8575 )
...
Signed-off-by: Mac Chaffee <me@macchaffee.com>
2022-02-26 10:29:23 -08:00
SOPHAL HONG
6d683c98a3
[Terraform-AWS] Replace CLB with NLB ( #8578 )
2022-02-24 23:53:54 -08:00
Nicolas Goudry
ee079f4740
fix(coredns): make sure to keep coredns repository namespace ( #8572 )
...
fix: regex
fix: wrong regex_replace usage
2022-02-24 01:01:33 -08:00
Cristian Calin
a090038d02
[CI] add ara to collect CI job logs ( #8545 )
2022-02-23 07:36:19 -08:00
Florian Ruynat
4f1499bd23
Fixup remaining etcd_kubeadm_enabled variables ( #8576 )
2022-02-23 06:46:18 -08:00
Alex
36393d77d3
Encrypting Secret Data at Rest ( #8574 )
...
* change default value for Encrypting Secret Data at Rest to secretbox, remove experimental flag and add documentation
* fix MD012/no-multiple-blanks
2022-02-23 03:04:18 -08:00
Ilya Margolin
e053ee4272
Check all places with check_mode: no
for side effects ( #8573 )
...
and fix the one with side effect.
Also removes `notify` from this task as the task has `changed_when: false`
and notify is not going to fire.
2022-02-23 01:20:18 -08:00
jayonlau
1d46c07307
Cleanup crictl configuration file ( #8569 )
2022-02-23 00:58:19 -08:00
Ilya Margolin
f9b5e448c1
Prevent removing etcd member when running in check mode ( #8570 )
2022-02-22 23:34:18 -08:00
kakkotetsu
3effb008c9
improve validation conditions for MetalLB BGP Peers ( #8568 )
2022-02-22 23:12:18 -08:00
cyril-corbon
a088f492f4
chore: remove addon-resizer ( #8566 )
...
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2022-02-22 09:51:16 -08:00
Necatican Yıldırım
e9c8913248
Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable ( #8317 )
...
* Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* Add etcd kubeadm deployment documentation
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* Refactor warning for the deprecated 'etcd_kubeadm_enabled' variable
Signed-off-by: necatican <necaticanyildirim@gmail.com>
2022-02-22 08:53:16 -08:00
Florian Ruynat
b9a27c91da
Update kubernetes dashboard to 2.5.0
2022-02-21 03:54:11 -08:00
Florian Ruynat
d4f654275b
Set default kubernetes version to 1.23.4
2022-02-21 03:54:11 -08:00
Florian Ruynat
f6eb4c749d
Add kubernetes hashes for 1.23.4/1.22.7/1.21.10
2022-02-21 03:54:11 -08:00
cyril-corbon
418fc00718
fix: kube-dns service deletion ( #8565 )
...
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2022-02-21 02:48:11 -08:00
Florian Ruynat
2537177929
Fix amazon docker version ( #8564 )
2022-02-18 23:50:11 -08:00
Sander Klein
9af719bf99
This fixes the etcd node removal. ( #8526 )
...
Since we are already on an etcd node while executing the commands, there
is no need to find out an etcd IP because it is on localhost.
2022-02-18 07:20:23 -08:00
Vitaliy D
9e020b252e
Configure Etcd container_manager explicitly ( #8521 )
...
* Configure Etcd container_manager explicitly
* Add explanation for the Etcd container_manager variable
* Remove redundant space in etcd vars
2022-02-18 00:50:23 -08:00
Kenichi Omichi
cc45e365ae
Fix print_hostnames of inventory.py ( #8554 )
...
When trying to run print_hostnames of inventory.py, it outputs the following
error:
$ CONFIG_FILE=./test-hosts.yaml python3 ./inventory.py print_hostnames
Traceback (most recent call last):
File "./inventory.py", line 472, in <module>
sys.exit(main())
File "./inventory.py", line 467, in main
KubesprayInventory(argv, CONFIG_FILE)
File "./inventory.py", line 92, in __init__
self.parse_command(changed_hosts[0], changed_hosts[1:])
File "./inventory.py", line 415, in parse_command
self.print_hostnames()
File "./inventory.py", line 455, in print_hostnames
print(' '.join(self.yaml_config['all']['hosts'].keys()))
KeyError: 'all'
because it is missed to load a hosts config file before printing hostnames.
This fixes the issue.
2022-02-17 13:57:03 -08:00
Mac Chaffee
97c667f67c
Fix etcd_events not getting upgraded in upgrade-cluster.yml ( #8550 )
...
Signed-off-by: Mac Chaffee <me@macchaffee.com>
2022-02-17 08:03:38 -08:00
Cristian Calin
063fc525b1
nerdctl: upgrade to 0.16.1 ( #8539 )
2022-02-16 02:04:37 -08:00
Mac Chaffee
0f73d87509
Allow pausing after upgrade but before uncordon ( #8530 )
...
* Allow pausing after upgrade but before uncordon
* Expand docs for upgrade pausing vars
Signed-off-by: Mac Chaffee <me@macchaffee.com>
2022-02-15 16:39:02 -08:00
Cristian Calin
402e85ad6e
[calico] upgrade release checksums ( #8544 )
...
* [calico] upgrade 3.19.x to 3.19.4
* [calico] upgrade 3.20.x to 3.20.4
* [calico] upgrade 3.21.x to 3.21.4 and make it the default
* [calico] add 3.22.0 checksums
* [calico] account for path changes in calico 3.21.4 crd archive and above
2022-02-15 16:35:02 -08:00
Tony Fouchard
1d635e04e4
Allow to specify a source address for metallb peerings, and target only some nodes using node selectors ( #8534 )
2022-02-15 13:57:19 -08:00
kakkotetsu
98d5d0cdd5
add support for Dual Stack node InternalIP ( #8542 )
2022-02-15 00:28:02 -08:00
Mathieu Parent
31d4a38f09
terraform/gcp: Allow to change extra disk types ( #8524 )
2022-02-15 00:22:02 -08:00
kakkotetsu
1ebe456f2d
add support for Calico IP6_AUTODETECTION_METHOD ( #8541 )
2022-02-14 17:26:14 -08:00
Cristian Calin
c6e5314fab
implement download mirrors support ( #8474 )
...
* [download] add mechanism to support mirrors
* [calico] support alternate download url
2022-02-14 13:19:32 -08:00
SOPHAL HONG
a6a79883b7
Fix: Error when creating subnets more than AZ ( #8516 )
2022-02-14 13:12:30 -08:00
Takuya Murakami
b02e68222f
feat(offline): Improve generate_list.sh to generate offline file list using ansible ( #8537 ) ( #8538 )
...
Use jinja2 template and ansible to expand variables.
2022-02-13 23:19:28 -08:00
Takuya Murakami
da8522af64
docs: Update offline-environment.md for containerd ( #8520 ) ( #8523 )
...
* Add containerd/runc/nerdctl download url
* Add insecure registries configuration for containerd
2022-02-09 08:08:18 -08:00
Tom Stian Berget
84b93090a8
Change Cilium setting identity_allocation_mode to cilium_identity_allocation_mode ( #8519 )
...
* Change Cilium identity_allocation_mode to cilium_identity_allocation_mode
* Change inventory sample
2022-02-08 14:04:35 -08:00
Byeonggon Lee
5695c892d0
Fix wrong port name in metallb.yml.j2 ( #8510 )
2022-02-07 09:43:45 -08:00
DenisKa
696101a910
Fixed mitogen.yml ( #8508 )
...
Fixed the problem when call ansible-playbook contrib/mitogen/mitogen.yml
"The error was: 'dict object' has no attribute 'section'"
What type of PR is this?
/kind bug
What this PR does / why we need it:
Which issue(s) this PR fixes:
Fixes #
Special notes for your reviewer:
Does this PR introduce a user-facing change?:
2022-02-07 01:39:43 -08:00
Sander Klein
54dfe73d24
Add bastion support to remove-node.yml ( #8504 )
...
Somehow bastion support for remove-node.yml was missing.
This commit adds it.
2022-02-04 23:50:50 -08:00
Krystian Młynek
87928baa31
CRI-O: fix unqualified-search registries ( #8496 )
2022-02-04 23:46:50 -08:00
mgiessing
6a4fd33a03
Added ppc64le support ( #8505 )
...
* Added ppc64le support
* Fixed linting errors
2022-02-04 00:14:00 -08:00
cyril-corbon
790448f48b
feat: update cert-manager to 1.7.0 ( #8491 )
...
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2022-02-03 17:24:00 -08:00
Cristian Calin
7759494c85
[terraform][openstack] allow disabling port_security at port level ( #8455 )
...
Use openstack_networking_port_v2 and openstack_networking_floatingip_associate_v2
to attach floating ips. This gives us more flexibility on disabling port security
when binding instances directly on provider networks in private cloud scenario.
2022-02-02 08:50:22 -08:00
Ilya Margolin
aed187e56c
Fix kubelet_kubelet_cgroups_cgroupfs ( #8500 )
...
If kubelet is run with systemd (as it always is when using kubespray),
it starts in systemd's /system.slice/kubelet.service cgroup.
This commit prevents a creation and usage of a second unrelated cgroup.
2022-02-02 00:50:22 -08:00
Julio H Morimoto
eac799f589
Amend documentation for docker to containerd migration ( #8477 )
...
* Amend PR https://github.com/kubernetes-sigs/kubespray/pull/8471 with missing inventory configuration.
Signed-off-by: Julio Morimoto <julio@morimoto.net.br>
* Amend PR https://github.com/kubernetes-sigs/kubespray/pull/8471 with missing inventory configuration.
Signed-off-by: Julio Morimoto <julio@morimoto.net.br>
2022-02-02 00:46:22 -08:00
Cristian Calin
5ecb07b59a
[nerdctl] upgrade to 0.16.0 ( #8484 )
...
* [nerdctl] upgrade nerdctl to 0.16.0
* [nerdctl] add configuration file
2022-02-01 15:11:48 -08:00
Cristian Calin
ff621fb7f1
[ingress-nginx] upgrade to 1.1.1 ( #8490 )
2022-02-01 09:50:11 -08:00
Mathieu Parent
958bca8800
terraform/gcp: Do not create unused subnetworks and Upgrade to latest google provider ( #8497 )
...
* terraform/gcp: Do not create unused subnetworks
By default terraform creates a subnetwork in each 39 regions
* terraform/gcp: Upgrade to latest google provider
... where "one of source_tags, source_ranges, or source_service_accounts must be defined"
2022-02-01 09:14:11 -08:00
Michael Schmitz
eacd55fbca
Use sysctl_file_path variable for all sysctl_file locations ( #8395 )
...
* Use sysctl_file_path variable for all sysctl_file locations
* Add sysctl_file_path variable to kubespay-defaults
* Remove previously used sysctl file locations if present
* Use explicit filename in roles/kubernetes/node/defaults/main.yml
* Defaults: use explicit value
2022-02-01 08:12:10 -08:00
Cristian Calin
0e2ab5c273
[misc] add cristicalin to approvers list ( #8494 )
2022-02-01 08:08:11 -08:00
Cristian Calin
c47634290e
[helm] upgrade to 3.8.0 ( #8489 )
2022-02-01 06:34:12 -08:00
Tristan
92d612c3e0
8487: Allow override of default CoreDNS zone cache ( #8488 )
...
Using the coredns_cluster_zone_cache_block variable
2022-02-01 00:48:18 -08:00
Ilya Margolin
2bbe5732b7
Add node label to etcd metrics ( #8475 )
...
targetRef on endpoints surfaces as
__meta_kubernetes_endpoint_address_target_kind/__meta_kubernetes_endpoint_address_target_name
in prometheus and gets converted to the label `node` by
prometheus-operator
2022-01-31 06:08:23 -08:00
Samuel Liu
e6e7fbc25f
fix reset containerd_storage_dir undefined ( #8478 )
...
* fix reset containerd_storage_dir
* add env to kubespray-defaults
2022-01-31 05:46:23 -08:00
Ilya Margolin
7d4d554436
Document host_resolvconf as default value for resolvconf_mode ( #8493 )
...
refs #8247
2022-01-31 03:12:24 -08:00
cyril-corbon
d31db847b7
feat: update local path to v0.0.21 ( #8492 )
2022-01-31 01:08:24 -08:00
Mathieu Parent
3562d3378b
terraform/gcp: Allow to use preemptible VM instances ( #8480 )
2022-01-31 00:30:24 -08:00
Calin Cristian Andrei
ababcd5481
[kube] make 1.23.3 the new default
2022-01-31 00:22:24 -08:00
Calin Cristian Andrei
7caffde0b6
[kube] add 1.23.3 hashes
2022-01-31 00:22:24 -08:00
Cristian Calin
c40b43de01
[mitogent] update to 0.3.2 ( #8470 )
2022-01-27 08:36:59 -08:00
Julio H Morimoto
b0eb5650da
Provide initial guidelines for a container engine migration (docker-2-containerd), with special emphasis on the fact that the procedure is still not officially supported. ( #8471 )
...
Follow up from https://github.com/kubernetes-sigs/kubespray/issues/8431 .
Signed-off-by: Julio Morimoto <julio@morimoto.net.br>
2022-01-27 01:40:10 -08:00
华忠啊
52f221f976
Adaptive Kube-ovn ( #8454 )
2022-01-27 01:08:10 -08:00
Cristian Calin
26a5948d2a
[reset] remove containerd storage during reset ( #8469 )
2022-01-26 05:10:01 -08:00
ceesios
d86a3b962c
Proposing fixes for contrib/terraform/vsphere/ #8436 ( #8441 )
...
* fixes issues in vSphere Terraform contrib. #8436
* fix formatting
* add variables to the main module and document changes
* add missing newline
2022-01-25 05:24:30 -08:00
Mathieu Parent
d64b341b38
Update terraform GCP to Ubuntu 20.04 (latest LTS) ( #8463 )
...
* Fix terraform Warning
Version constraints inside provider configuration blocks are deprecated
Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.
* Fix terraform Warning: Quoted references are deprecated
* terraform: Update GCP Ubuntu to latest LTS
2022-01-25 01:22:30 -08:00
Florian Ruynat
d580014c66
Fix CI for Fedora (followup) + OpenSUSE Leap (update to 15.3) ( #8407 )
...
* Fix fedora jobs - followup
* Update OpenSUSE Leap to 15.3
* Fix cilium version in README + update minor 1.11.1
2022-01-24 23:24:30 -08:00
Calin Cristian Andrei
be9a1f80c1
[kube] make 1.23.2 the default version
2022-01-24 11:59:33 -08:00
Calin Cristian Andrei
73ff3b0d3b
[kubernetes] add hashes for 1.23.2, 1.22.6 and 1.21.9
2022-01-24 11:59:33 -08:00
cyril-corbon
9fce9ca42a
feat: upgrade azuredisk csi to v1.10.0 ( #8432 )
...
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2022-01-24 00:41:56 -08:00
Cristian Calin
f1adb734e3
[cri-tools] add hashes for 1.23.0 ( #8442 )
2022-01-24 00:21:56 -08:00
cyril-corbon
575e0ca457
feat: add eviction hard to kubelet config ( #8421 )
...
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2022-01-24 00:13:57 -08:00
Alex
69f088bb82
add hash-values for runc v1.1.0 - first upstream runc version for multi-arch ( #8447 )
2022-01-23 23:51:57 -08:00
Cristian Calin
ef34f5fe7d
[calico] switch default iptables backend detection to Auto ( #8429 )
2022-01-23 23:47:57 -08:00
Victor Morales
e88aa7c96b
Add youki runtime support ( #8411 )
2022-01-21 14:01:07 -08:00
Johann Schley
38d129a0b6
add external hcloud cloud controller manager ( #8440 )
2022-01-20 12:31:09 -08:00
onock
392815d97c
[cert-manager] Fix missing RBAC rules for ClusterRole cert-manager-cainjector kubernetes-sigs#8104. ( #8444 )
2022-01-20 12:17:09 -08:00
Pav K
6e2e61012a
Docs - Removed incorrect info on calico_rr. ( #8437 )
2022-01-17 02:55:30 -08:00
rtsp
e791089466
cert-manager: Fix incorrect leader election namespace lead to insufficient permission ( #8433 )
2022-01-17 02:37:29 -08:00
Cristian Calin
418f12f62a
[calico] drop 3.18.x and make 3.21.x the new default ( #8426 )
2022-01-17 02:29:29 -08:00
Necatican Yıldırım
caff539ccd
Add identity_allocation_mode support for Cilium ( #8430 )
...
Co-authored-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
Signed-off-by: necatican <necaticanyildirim@gmail.com>
Co-authored-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
2022-01-16 09:29:28 -08:00
Kenichi Omichi
c0d1bb1a5c
Remove subnet from router on tf-elastx_cleanup ( #8425 )
...
The tf-elastx_cleanup test job was failed with error message:
Port xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx cannot be deleted
directly via the port API: has device owner network:router_interface.
That means necessary to remove a subnet from the router before
deleting the port.
This adds a method to removes a subnet from the router automatically.
2022-01-15 00:50:15 -08:00
Cristian Calin
ea44d64511
[contrib] terraform openstack: allow disabling port security ( #8410 )
2022-01-14 12:58:32 -08:00
Samuel Liu
1a69f8c3ad
parameterized snaphot controller namespaces ( #8305 )
...
* Parameterized snaphot controller namespaces
* add ns yml
* add docs
* namespace
2022-01-14 12:58:26 -08:00
rtsp
ccd3180a69
cert-manager: Allow to change leader election namespace for GKE Autopilot support ( #8424 )
...
More information:
- kubernetes-sigs/kubespray#8393
- jetstack/cert-manager#4102
- jetstack/cert-manager#3717
2022-01-14 12:54:26 -08:00
cyril-corbon
01dcbc18ac
feat: upgrade metallb to v0.11.0 ( #8420 )
...
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2022-01-14 05:22:28 -08:00
Florian Ruynat
7c67ec4976
Fix kubectl call before installing it ( #8412 )
2022-01-12 23:12:29 -08:00
Mathieu Parent
43d128362f
Document image_command_tool and image_command_tool_on_localhost ( #8409 )
...
Signed-off-by: Mathieu Parent <mathieu.parent@insee.fr>
2022-01-11 15:35:24 -08:00
Cristian Calin
1337c9c244
[csi-snapshotter] upgrade to 5.0 ( #8403 )
2022-01-11 09:14:33 -08:00
cyril-corbon
86953b2ac4
fix: add tolerations / affinity to cert-manager ( #8389 )
...
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2022-01-11 09:14:26 -08:00
moss2k13
135c9b29a7
contrib: add cloud-init support for terraform vms ( #8394 )
...
* contrib: add cloud-init support for terraform vms
This change enables instance customization via cloud-init,
for example: additional CA certs, custom SSH access etc.
* contrib: update docs for terraform cloud-init
* contrib: disable yamllint in cloud-init
require-starting-space rule breaks cloud-init header
* contrib: documenation formatting
* yamllint: disable comments related checks
* docs: markdown formatting
2022-01-11 05:23:16 -08:00
Tovin Seven
e0d67367ed
Update installation doc with vagrant ( #8406 )
2022-01-11 05:19:17 -08:00
Florian Ruynat
d007132655
Fix Fedora CI following ipset version in kube-proxy for k8s 1.23 ( #8397 )
2022-01-11 05:01:17 -08:00
Mathieu Parent
cfd9873bbc
Allow to choose container manager commands ( #8380 )
...
This allow to workaround #8375 by using image_command_tool=crictl
when containerd_registries is used for containerd.
Also changes image_info_command_on_localhost for docker to return digests.
2022-01-11 01:13:16 -08:00
Samuel Liu
b2b95cc8f9
fix 0090-etchosts ( #7634 )
2022-01-11 01:03:16 -08:00
Kenichi Omichi
73c889eb10
Fix failures of ansible-lint ( #8401 )
...
This fixes the following types of failures:
- empty-string-compare
- literal-compare
- risky-file-permissions
- risky-shell-pipe
- var-spacing
In addition, this changes .gitlab-ci/lint.yml to block the same issue
by using the same method at Kubespray CI.
2022-01-11 00:45:16 -08:00
Victor Morales
642725efe7
Bump containerd version to 1.5.9 ( #8402 )
2022-01-11 00:05:16 -08:00
Cristian Calin
29aafff2ce
etcd: add 3.5.1 for kubernetes 1.23+ ( #8320 )
2022-01-10 22:45:15 -08:00
forselli-stratio
df425ac143
Fix etcd certificates reference to support etcd_kubeadm_enabled:true ( #7766 )
...
* Fix etcd certificates reference to support etcd_kubeadm_enabled:true
* Add retries to ETCD Join Member task
* Fix etcd certificates reference when etcd_kubeadm_enabled:true
* Fix conflicts
2022-01-10 15:24:25 -08:00
Unai Arríen
57a1d18db3
Improve first_kube_control_plane variable management to avoid installation failures due to variable overlapping ( #8388 )
2022-01-10 01:35:19 -08:00
rtsp
aa4a3d7afd
Fix container engine still installed on dedicated etcd node even if etcd_deployment_type: host
( #8386 )
2022-01-10 01:35:12 -08:00
Alex
06ad5525b8
replace runc 1.0.3 arm64 hash with 0 ( #8391 )
2022-01-10 01:31:13 -08:00
Kenichi Omichi
f80fd24a55
Fix risky-file-permissions ( #8370 )
...
When running ansible-lint directly, we can see a lot of warning
message like
risky-file-permissions File permissions unset or incorrect
This fixes the warning messages.
2022-01-09 01:51:12 -08:00
Kenichi Omichi
51bd9bee0d
Move containerd_version to defaults/main.yml ( #8379 )
...
All container image versions were defined in download/defaults/main.yml
except containerd.
The inconsistency caused the offline script(generate_list.sh) could not
output the URL of containerd image.
This moves the definition into a valid file.
In addition, this adds host_os to generate_list.sh for downloading
krew from a valid URL.
2022-01-09 01:47:12 -08:00
Victor Morales
52266406f8
Bump cert-manager version to v1.6.1 ( #8377 )
2022-01-07 16:45:34 -08:00
cyril-corbon
cd601c77c7
feat: upgrade metrics server to v0.5.2 ( #8338 )
...
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2022-01-07 08:18:33 -08:00
Florian Ruynat
6abae713f7
Update helm / kube-router and coredns ( #8382 )
...
* Update kube-router to 1.4.0
* Update Helm to 3.7.2
* Up coredns to 1.8.6 when k8s is 1.23.x
2022-01-06 12:14:27 -08:00
Alex
1312f92a8d
adding 0 checksum for kata_containers_version on arm(64) ( #8383 )
2022-01-06 12:08:27 -08:00
Unai Arríen
92abf26d29
Ensure taint configuration for secondary control-plane nodes ( #8363 )
2022-01-05 23:56:28 -08:00
Mathieu Parent
c11e4ba9a7
Add missing example offline nerdctl_download_url ( #8373 )
2022-01-05 10:23:48 -08:00
Mathieu Parent
7ae00947f5
Avoid yanked ruamel.yaml.clib version ( #8372 )
...
See https://pypi.org/project/ruamel.yaml.clib/#history
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
2022-01-05 08:06:41 -08:00
Bart Sloeserwij
59f62473c9
Update configuration of registries in cri-o ( #7852 )
...
* Update configuration of registries in cri-o
* Update docs to match new registry configuration
2022-01-05 07:36:40 -08:00
Unai Arríen
8fbd08d027
Fix DNS configuration when using resolvconf_mode='host_resolvconf' during scale ( #23 ) ( #8361 )
2022-01-05 03:06:33 -08:00
Choi Yongbeom
dda557ed23
Update config.toml.j2 ( #8340 )
...
* Update config.toml.j2
i think this commit code is not completed works
exam registry address : a.com:5000
insecure registry must be http://a.com:5000
but this code add insecure a.com:5000 (without http://)
If there is no http, containerd accesses with https even if insecure_skip_verify = true
solution is code edit
* Update config.toml.j2
* Update containerd.yml
* Update containerd.yml
* Update containerd.yml
* Update config.toml.j2
2022-01-05 02:56:33 -08:00
Max Gautier
cb54eb40ce
Use a variable for standardizing kubectl invocation ( #8329 )
...
* Add kubectl variable
* Replace kubectl usage by kubectl variable in roles
* Remove redundant --kubeconfig on kubectl usage
* Replace unecessary shell usage with command
2022-01-05 02:26:32 -08:00
Cristian Calin
3eab1129b9
CI: Replace CentOS 8 with AlmaLinux 8 before CentOS 8 EOL end of 2021 ( #8297 )
2022-01-05 02:20:33 -08:00
Choi Yongbeom
24f1402a14
nerdctl insecure registry config ( #8339 )
...
* Update prep_download.yml
nerdctl insecure registry config
* Update prep_download.yml
* Update prep_download.yml
apply conversations advice
* Update prep_download.yml
* Update prep_download.yml
* Update prep_download.yml
* Update prep_download.yml
* Update prep_download.yml
* Update prep_download.yml
* Update main.yml
* Update main.yml
* Update prep_download.yml
* Update prep_download.yml
2022-01-05 01:14:33 -08:00
Necatican Yıldırım
bf00550388
Upgrade Cilium to 1.11.0 ( #8354 )
...
* Remove kvstore args from Cilium DaemonSet
Co-authored-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* Bump Cilium to 1.11.0
Co-authored-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
Signed-off-by: necatican <necaticanyildirim@gmail.com>
Co-authored-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
2022-01-05 00:36:32 -08:00
Kenichi Omichi
78c83a8f26
Update containerd doc ( #8369 )
...
This is a follow-up change for https://github.com/kubernetes-sigs/kubespray/pull/7911
2022-01-05 00:32:33 -08:00
Nguyễn Trung
e72f8e0412
Update node about container_manager variable ( #7911 )
...
I was deploy my cluster with separate etcd cluster and not intersect with kube_control_plane or kube_node. And I want to run etcd cluster in docker but still used containerd to make container runtime for all other nodes. Therefore, I was added note to this doc for everyone
Thank !
2022-01-04 14:29:20 -08:00
Florian Ruynat
6136fa7c49
Update Kubernetes version to 1.23.1
2022-01-04 10:25:00 -08:00
Florian Ruynat
8d2b4ed4a9
Move min k8s version to 1.21
2022-01-04 10:25:00 -08:00
Florian Ruynat
9e9b177674
Update kubespray_version following release
2022-01-04 10:25:00 -08:00
Cristian Calin
4c4c83f0a1
crun update to 1.4 ( #8330 )
...
* [crun] update crun to 1.4
* [crun] drop pre-1.x versions
2022-01-04 08:30:53 -08:00
Unai Arríen
0e98814732
Configure PriorityClassName for MetalLB deployment ( #8362 )
2022-01-04 08:20:52 -08:00
Max Gautier
92f25bf267
Simplify usage of pre-remove role ( #8334 )
...
- Use builtin task scheduling of ansible (same task on each host)
instead of manual looping on master
Benefits:
- One less play in remove-node.yml playbook
- Parralel node drain
- Drain parameters (timeout, grace period, retries,
allow_ungraceful_removal) can be adjusted separately for each node
with ansible variables
2022-01-04 07:10:53 -08:00
Romain ALBON
63a53c79d0
Fix - Search root filesystem device ( #8366 )
2022-01-04 06:48:52 -08:00
Florian Ruynat
2f9a8c04dc
Add nginx_image_repo to mirrored image on quay ( #8364 )
2022-01-03 10:03:00 -08:00
Choi Yongbeom
8c67f42689
Update offline.yml ( #8358 )
...
[cni-plugins] upgrade to stable 1.0.1 (#8331 ) using flannel cni add flannel_cni_download_url
flannel_cni_download_url offline doc update
2022-01-03 09:58:59 -08:00
Florian Ruynat
783a51e9ac
Fix README version for cni/flannel ( #8359 )
2022-01-03 03:42:59 -08:00
Florian Ruynat
841c61aaa1
Revert "Fix external lb error ( #8299 )" ( #8360 )
...
This reverts commit 4f2e4524b8
.
2022-01-03 01:37:00 -08:00
Samuel Liu
157942a462
fix resolved config ( #8351 )
2022-01-03 00:06:59 -08:00
jbpratt
e88a27790c
fix spelling error ( #8342 )
2022-01-02 23:55:00 -08:00
Cristian Calin
ed3932b7d5
[cni-plugins] upgrade to stable 1.0.1 ( #8331 )
...
* [cni-plugins] upgrade to stable 1.0.1
* [flannel] use binary from dedicated project
2021-12-23 23:16:15 -08:00
emiran-orange
2b5c185826
calico_pool_blocksize must be cast as well in assertion when defined ( #8321 )
...
* calico_pool_blocksize must be cast as string in assertion when defined
* Cast as int rather than string
2021-12-23 00:58:37 -08:00
zemkogabor
996ecca78b
Glusterfs daemonset readiness and liveness params. #8307 ( #8309 )
2021-12-23 00:32:37 -08:00
zhengtianbao
c3c128352f
Remove registry-proxy ( #8327 )
2021-12-21 23:55:35 -08:00
zhengtianbao
02a89543d6
registry: add ingress support ( #8311 )
2021-12-21 10:20:46 -08:00
Cristian Calin
c1954ff918
Support deploying kubernetes 1.23 ( #8323 )
...
* Ensure entries for 1.23 are added for supported_versions vars
* cri-o: add support for kubernetes 1.23 but still use cri-o 1.22
* kubescheduler-config: diferentiate config versions based on kube_version
2021-12-21 01:38:46 -08:00
Kenichi Omichi
b49ae8c21d
Delete "kubeadm alpha certs" code ( #8322 )
...
"kubeadm alpha certs" command has been promoted to "kubeadm certs" command,
and "kubeadm alpha certs" has been deprecated since Kubernetes v1.20 as [1].
In addition, Kubespray supports Kubernetes v1.20+.
This delete the deprecated command for cleanup.
[1]: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#deprecation
2021-12-20 12:53:33 -08:00
Calin Cristian Andrei
1a7b4435f3
Bump default version of kubernetes to 1.22.5
2021-12-20 08:56:56 -08:00
Calin Cristian Andrei
ff5ca5f7f8
add temp location to .gitignore
2021-12-20 08:56:56 -08:00
Calin Cristian Andrei
db0e458217
Kubernetes: add hashes for v1.23.1, v1.23.0, v1.22.5, v1.21.8 and v1.20.14
2021-12-20 08:56:56 -08:00
Nicolas MASSE
f01f7c54aa
Add support for CRI-O user namespaces ( #8268 )
...
* add support for cri-o user namespaces
* comply with yamllint rules
2021-12-20 06:37:25 -08:00
kakkotetsu
c59407f105
add support for Calico BGPPeer sourceAddress ( #8306 )
2021-12-20 01:51:25 -08:00
Cristian Calin
fdc5d7458f
Upgrade to nerdctl 0.15.0 and some fixes ( #8315 )
...
* nerdctl: move to 0.15.0
* nerdctl: reduce verbosity when pulling images
* download: use proxy environment when using nerdctl to download containers
2021-12-20 00:33:26 -08:00
Antoine Gatineau
6aafb9b2d4
fix bad indentation ( #8314 )
2021-12-17 07:36:29 -08:00
Samuel Liu
aa9ad1ed60
clean files for kube-ovn ( #8310 )
2021-12-15 23:39:19 -08:00
zhengtianbao
aa9b8453a0
registry: service add clusterIP, nodePort, loadBalancer support ( #8291 )
...
* registry: service add clusterIP, nodePort, loadBalancer support
* modify camelcase name to underscore
* Add registry service type compatibility check
2021-12-15 00:18:19 -08:00
Cristian Calin
4daa824b3c
CI: fix test name debian10-aio was a 2 instance default ( #8286 )
...
* CI: fix test name debian10-aio was a 2 instance default
* CI: Fix running ubuntu20-aio-docker
* CI: Fix running ubuntu18-aio-docker
2021-12-13 14:50:25 -08:00
singeleaf
4f2e4524b8
Fix external lb error ( #8299 )
2021-12-13 14:46:27 -08:00
Xudong Zhang
8ac510e4d6
sample containerd: containerd_runtimes is removed ( #8301 )
...
(#8213 ) split containerd_runtimes to containerd_runc_runtime and
containerd_additional_runtimes
2021-12-13 14:42:25 -08:00
Marat Talipov
4f27c763af
containerd insecure registry support ( #8298 )
2021-12-13 00:41:58 -08:00
Cristian Calin
0e969c0b72
vSphere-CSI: update to 2.4.0 ( #8295 )
2021-12-10 11:07:23 -08:00
Steven Reitsma
b396801e28
Update Cinder CSI to v1.22 ( #8296 )
2021-12-10 10:49:11 -08:00
Cristian Calin
682c8a59c2
containerd: change default resolvconf_mode to host_resolvconf ( #8247 )
...
* containerd: change default resolvconf_mode to host_resolvconf
* Wait for kube-apiserver to come back after pod refresh
* Handle resolv.conf gracefully
* Retain currently configured DNS entries to ensure we don't break the resolvers
* Suse uses wickedd for network management so no dhcp hooks
* Molecule: increase ansible timeout
* CI: Increase ansible timeout to 120s for Packet jobs
2021-12-09 14:09:06 -08:00
Florian Ruynat
5a25de37ef
Revert "remove no longer present etcd nodes from APIEndpoints list in kubeadm-config configmap ( #8244 )" ( #8287 )
...
This reverts commit dc767c14b9
.
2021-12-09 08:24:16 -08:00
Kenichi Omichi
bdb923df4a
Add oomichi to approvers ( #8284 )
...
For taking more responsibility on Kubespray project, this adds
oomichi to the list of approvers.
2021-12-09 00:40:10 -08:00
zhengtianbao
4ef2cf4c28
Registry add TLS and authentication support ( #8229 )
...
* Add registry TLS support
* Add registry configmap and htpasswd auth
2021-12-07 08:32:00 -08:00
Cristian Calin
990ca38d21
Kata-Containers: add 2.3.0 ( #8276 )
...
* Kata-Containers: add checksums for 2.3.0
* Kata-Containers: version 2.3.0 requires kubernetes 1.22.0+
2021-12-07 08:18:08 -08:00
Cristian Calin
c7e430573f
Calico: upgrade 3.21.x to 3.21.2 ( #8275 )
2021-12-07 08:18:01 -08:00
Cristian Calin
a328b64464
runc: upgrade to v1.0.3 ( #8274 )
2021-12-07 06:10:02 -08:00
zhengtianbao
a16d427536
Set etcd-events listen port to 2383 ( #8232 )
2021-12-07 00:28:01 -08:00
Cristian Calin
c98a07825b
Use cgroupsv2 where available (fedora) ( #8237 )
...
* Containerd: use cgroupsv2 where available (fedora)
* Docker: use cgroupsv2 where available (fedora)
* cri-o: use cgroupsv2 where available (fedora)
2021-12-06 11:19:33 -08:00
Samuel Liu
a98ca6fcf3
Update loadbalancers versions ( #8272 )
...
* Update loadbalancers versions
* fix haproxy_config_dir mode
2021-12-06 09:40:32 -08:00
Samuel Liu
4550f8c50f
calico_flexvol ( #8273 )
2021-12-06 05:00:32 -08:00
toplordsaito
9afca43807
change dns upstream condition for coredns ( #8263 )
...
upstream_dns_servers should change corefile config even resolvconf_mode=docker_dns
2021-12-06 02:46:32 -08:00
Alvaro Campesino
27ab364df5
Improve control plane scale flow ( #13 ) ( #7989 )
...
* Improve control plane scale flow (#13 )
* Added version 1.20.10 of K8s
* Setting first_kube_control_plane to a existing one
* Setting first_kube_control_plane to a existing one
* change first_kube_master for first_kube_control_plane
* Ansible-lint changes
2021-12-06 00:16:32 -08:00
Hanna Bledai
615216f397
Fix if bind-address is not set to 0.0.0.0 ( #8262 )
...
* if bind-address is not set to 0.0.0.0
* Update docs and left comments
* fix yamllist check: remove space
2021-12-05 23:58:32 -08:00
Kenichi Omichi
46b1b7ab34
Fix k8scsi/csi-resizer repo ( #8270 )
...
If trying to pull k8scsi/csi-resizer image from gcr.io, we face the error
like:
$ docker pull gcr.io/k8scsi/csi-resizer:v1.0.0
Error response from daemon: Head https://gcr.io/v2/k8scsi/csi-resizer/
manifests/v1.0.0: unknown: Project 'project:k8scsi' not found or deleted.
$
We can pull the image from quay.io instead.
This fixes the issue.
2021-12-05 23:42:32 -08:00
Alvaro Campesino
30d9882851
Add nodelocaldns only if it is enabled ( #7731 )
2021-12-03 20:36:31 -08:00
Cristian Calin
dfdebda0b6
Calico: remove duplicate values for CALICO_DISABLE_FILE_LOGGING and FELIX_DEFAULTENDPOINTTOHOSTACTION ( #8269 )
2021-12-03 20:32:31 -08:00
Cristian Calin
9d8a83314b
containerd: add hashes for 1.5.8 and 1.4.12 and make 1.5.8 the new default ( #8239 )
...
* containerd: add hashes for 1.5.8 and 1.4.12 and make 1.5.8 the new default
* containerd: make nerdctl mandatory for container_manager = containerd
* nerdctl: bump to version 0.14.0
* containerd: use nerdctl for image manipulation
* OpenSuSE: install basic nerdctl dependencies
2021-12-03 12:20:35 -08:00
Florian Ruynat
e19ce27352
Remove ovn4nfv support ( #8265 )
2021-12-03 11:56:35 -08:00
Cristian Calin
4d711691d0
Fix calico crd archive checksums ( #8266 )
...
v3.20.3 and v3.21.1 were re-released with new checksums
2021-12-03 04:56:27 -08:00
Samuel Liu
ee0f1e9d58
Update etcd-servers for apiserver ( #8253 )
2021-12-03 00:28:27 -08:00
Cristian Calin
a24162f596
CI: upgrade vagrant to 2.2.19 ( #8264 )
2021-12-02 13:23:44 -08:00
Florian Ruynat
e82443241b
Move opensuse CI to docker and fix ubuntu16 containerd version for docker ( #8257 )
2021-12-02 08:01:34 -08:00
Cristian Calin
9f052702e5
containerd: add support for suse distributions ( #8261 )
2021-12-02 07:51:33 -08:00
Florian Ruynat
b38382a68f
Move cri-o default package to 1.22 ( #8258 )
2021-12-02 06:21:34 -08:00
zhengtianbao
785324827c
Set ingress-nginx default terminationGracePeriodSeconds to 5 min ( #8252 )
...
* set ingress-nginx default terminationGracePeriodSeconds to 5 min for the drain of connection
* Add ingress_nginx_termination_grace_period_seconds at sample inventory
2021-12-02 03:23:33 -08:00
Cristian Calin
31c7b6747b
Calico: add dependencies for 3.21.x ( #8250 )
2021-12-02 01:17:33 -08:00
Alvaro Campesino
dc767c14b9
remove no longer present etcd nodes from APIEndpoints list in kubeadm-config configmap ( #8244 )
2021-12-01 07:17:15 -08:00
Florian Ruynat
30ec03259d
Remove fedora33 - eol ( #8246 )
2021-11-30 15:53:17 -08:00
Robin Wallace
38c12288f1
Add option for boot volume type for k8s node ( #8256 )
2021-11-30 12:59:01 -08:00
Florian Ruynat
0e22a90579
Update docker to 20.10.11 with containerd 1.4.12 ( #8255 )
2021-11-30 11:49:01 -08:00
Samuel Liu
0cdf75d41a
add macOS .DS_Store to ignore ( #8251 )
2021-11-30 01:10:56 -08:00
mircyb
3c6fa6e583
offline install using containerd runtime ( #8254 )
...
install containerd on centos need to binary download it
but offline.yml has no that value
binary download url default in
roles/download/defaults/main.yml:runc_download_url: "https://github.com/opencontainers/runc/releases/download/ {{ runc_version }}/runc.{{ image_arch }}"
roles/download/defaults/main.yml:containerd_download_url: "https://github.com/containerd/containerd/releases/download/v {{ containerd_version }}/containerd-{{ containerd_version }}-linux-{{ image_arch }}.tar.gz"
if i use default offlie.yml, it's error from task download files
because runc,containerd down url is none offline
i want fix this
just add 2 new line
2021-11-30 01:06:56 -08:00
Cristian Calin
ee882fa462
Add capability to use swap, requires Kube 1.22 ( #8241 )
...
* Alpha-NodeSwap: allow nodes to use swap
* CI: Add Fedora 35 with experimental swap job
2021-11-30 00:52:56 -08:00
Cristian Calin
3431ed9857
containerd: properly pull images with containerd specific tools ( #8245 )
2021-11-30 00:48:56 -08:00
Florian Ruynat
279808b44e
Update minor version for kata/cilium/kube-router/helm
2021-11-29 23:06:56 -08:00
Florian Ruynat
2fd529a993
Update Kubernetes version to v1.22.4
2021-11-29 23:06:56 -08:00
Florian Ruynat
1f6f79c91e
Update kubernetes hashes with 1.22.4/1.21.7/1.20.13
2021-11-29 23:06:56 -08:00
Cristian Calin
52ee5d0fff
Various documentation updates ( #8243 )
...
* Docs: update CONTRIBUTING.md
* Docs: clean up outdated roadmap and point to github issues instead
* Docs: update note on kubelet_cgroup_driver
* Docs: update kata containers docs with note about cgroup driver
* Docs: note about CI specific overrides
2021-11-29 15:05:21 -08:00
Cristian Calin
2f44b40d68
OEL7: Fix CentOS7 Extras for OEL7 ( #8219 )
...
* OEL7: Fix CentOS7 Extras for OEL7
* Molecule: add logs collection for jobs
2021-11-29 13:39:21 -08:00
Cristian Calin
20157254c3
Update calico versions ( #8238 )
...
* Calico: Bump 3.20.x to 3.20.3
* Calico: Bump 3.18.x to 3.18.6
* Calico: add calico 3.21.1 hashes
2021-11-29 01:15:22 -08:00
IKRozhkov
09c17ba581
add Gather facts to remove-node.yml ( #8231 )
2021-11-29 01:01:22 -08:00
Florian Ruynat
a5f88e14d0
Cleanup tests ( #8234 )
...
* Add Fedora 35 image, support and CI
* Cleanup tests and allow_failure for vagrant
2021-11-26 09:00:51 -08:00
Cristian Calin
e78bda65fe
Defaults: replace docker with containerd as our default container_manager ( #8175 )
...
* Defaults: replace docker with containerd as our default container_manager
* CI: Use docker for download_localhost test
* Defaults: with container_manager=containerd we need etcd_deployment_type=host
* CI: Run weave jobs with docker
* CI: Vagrant don't download_force_cache
* CI: Fix upgrade tests
* should run compatible with old settings, this means docker
* we need to run with a distro that has at least modern containerd,
this means move from debian9 to debian10 to allow `containerd_version`
to match between 2.17 and master
2021-11-25 06:54:33 -08:00
khatrig
3ea496013f
Create reset.yml ( #8227 )
2021-11-24 09:44:20 -08:00
ishizuka
7e1873d927
DeprecationWarning occurs when indentfirst=None is specified in coredns-config.yml.j2 ( #8224 )
2021-11-24 08:56:21 -08:00
Olle Larsson
fe0810aff9
Add option to set different server group policy for etcd, node, and master server ( #8046 )
2021-11-22 02:53:09 -08:00
zhengtianbao
e35a87e3eb
Update registry template ( #8198 )
...
* Add registry replica setting
* Add registry liveness and readiness probe
* Set the security context for registry
* Add registry pvc access mode option
* registry add replica requirement check
* docs: add registry replicas setting note
* Update docs/kubernetes-apps/registry.md
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
2021-11-22 02:45:09 -08:00
zhengtianbao
a6fcf2e066
Enable experimental modules when rpm-ostree version >= 2021.9 ( #8202 )
...
* Enable experimental modules when rpm-ostree version >= 2021.9
* cleanup code
2021-11-22 02:29:09 -08:00
Karthikeya Viswanath
25316825b1
docs: remove basic auth reference in getting-started ( #7823 )
2021-11-19 14:49:23 -08:00
Cristian Calin
c74e1c9db3
CI: use images from quay.io to prevent being throttled by docker hub ( #8209 )
...
* CI: use netchecker images from quay to prevent throttling
* Molecule: use hello-world image from quay.io
2021-11-19 13:23:40 -08:00
Florian Ruynat
be9de6b9d9
Fix debian 9 check for apt cache update ( #8215 )
2021-11-19 09:02:51 -08:00
Pasquale Toscano
fe8c843cc8
Fix typo in Containerd configuration ( #8206 )
2021-11-19 08:40:53 -08:00
Febrian Setianto
f48ae18630
Use Pre-existing Floating IP for Bastion ( #8214 )
...
* use pre-existing floating IP for bastion
* document bastion_fips in readme
2021-11-19 07:58:52 -08:00
Łukasz Żułnowski
83e0b786d4
Fix wrong baseurl for centos extra repo for Oracle Linux ( #8208 )
2021-11-18 23:44:51 -08:00
Cristian Calin
acd5185ad4
Fix fedora reset ( #8205 )
...
* Reset: Fedora uses NetworkManager
* CI: test reset on fedora
2021-11-18 16:46:51 -08:00
Mathieu Parent
0263c649f4
Allow to scrape etcd metrics using a service ( #8203 )
...
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
2021-11-17 23:53:01 -08:00
Florian Ruynat
8176e9155b
Add cristicalin as an official reviewer ( #8201 )
2021-11-16 14:02:45 -08:00
Lubos Mercl
424163c7d3
add gce support ( #8179 )
...
Author: lmercl <lubos.mercl@gmail.com>
Date: Wed Nov 10 15:30:04 2021 +0000
fix markdown
2021-11-16 08:58:28 -08:00
IKRozhkov
2c87170ccf
Allow setting 'auto-assign' property to 'false' for default IP pool (Metallb addon) ( #8193 )
...
* add metallb auto-assign property for main IP range & update addons.yml for sample inventory
* add new line at the end of file roles\kubernetes-apps\metallb\defaults\main.yml
* set default value for matallb_auto_assign = true
2021-11-16 05:06:27 -08:00
zhengtianbao
02322c46de
Remove helm duplicate check ( #8196 )
2021-11-15 12:50:48 -08:00
Cristian Calin
28b5281c45
Python: bring back python 2.7 support for ansible 2.9 in supported EL distributions ( #8192 )
2021-11-15 08:06:48 -08:00
EDGsheryl
4d79a55904
Remove extra parameter kube_proxy_remove ( #8158 )
...
Signed-off-by: EDGsheryl <edgsheryl@gmail.com>
2021-11-15 00:02:48 -08:00
Samuel Liu
027cbefb87
change krew uri to krew_download_url ( #8190 )
2021-11-14 12:08:47 -08:00
zhengtianbao
a08d82d94e
calico add support for container ip forwarding setting ( #8184 )
2021-11-12 19:06:46 -08:00
zhengtianbao
5f1456337b
Fix krew auto completion command not found at lower version ( #8185 )
2021-11-12 17:04:46 -08:00
Lars Larsson
6eeb4883af
Fixes various issues in vSphere Terraform code ( #8178 )
...
* Fixes various issues in vSphere Terraform code
Provided to address various shortcomings and to fix the following
issue in upstream Kubespray:
https://github.com/kubernetes-sigs/kubespray/issues/8176
* Resolves Terraform formatting issues
* Sets default prefix to human-readable name
* Documents new default prefix in README
2021-11-12 11:40:29 -08:00
Ajarmar
b5a5478a8a
Added tolerations for cinder-csi-nodeplugin DaemonSet ( #8137 )
2021-11-11 11:48:07 -08:00
Cristian Calin
0d0468e127
Exercise multiple ansible versions in CI ( #8172 )
...
* Ansible: separate requirements files for supported ansible versions
* Ansible: allow using ansible 2.11
* CI: Exercise Ansible 2.9 and Ansible 2.11 in a basic AIO CI job
* CI: Allow running a reset test outside of idempotency tests and running it in stage1
* CI: move ubuntu18-calico-aio job to stage2 and relay only on ubuntu20 with the variously supported ansible versions for stage1
* CI: add capability to install collections or roles from ansible-galaxy to mitigate missing behavior in older ansible versions
2021-11-10 16:11:50 -08:00
Cristian Calin
b7ae4a2cfd
Kata-Containers: Fix kata-containers runtime ( #8068 )
...
* Kata-containes: Fix for ubuntu and centos sometimes kata containers fail to start because of access errors to /dev/vhost-vsock and /dev/vhost-net
* Kata-containers: use similar testing strategy as gvisor
* Kata-Containers: adjust values for 2.2.0 defaults
Make CI tests actually pass
* Kata-Containers: bump to 2.2.2 to fix sandbox_cgroup_only issue
2021-11-09 10:01:48 -08:00
Cristian Calin
039205560a
nodelocaldns: allow a secondary pod for nodelocaldns for local-HA ( #8100 )
...
* nodelocaldns: allow a secondary pod for nodelocaldns for local-HA
* CI: add job to test nodelocaldns secondary
2021-11-09 09:57:47 -08:00
Cristian Calin
801268d5c1
containerd: upgrade versions 1.4.11 and 1.5.7 and make 1.4.11 the default ( #8129 )
2021-11-09 06:59:47 -08:00
zhengtianbao
46c536d261
Add krew auto completion ( #8171 )
2021-11-09 02:43:39 -08:00
Cristian Calin
4a8757161e
Docker: replace the use of containerd_version with docker_containerd_version to avoid causing conflicts when bumping containerd_version ( #8130 )
2021-11-08 15:56:49 -08:00
zhengtianbao
65540c5771
krew: update to v0.4.2 ( #8168 )
...
krew release urls changed since v0.4.2, clearly OS type and arch inside the filename.
from:
https://github.com/kubernetes-sigs/krew/releases/download/v0.4.1/krew.tar.gz
to:
https://github.com/kubernetes-sigs/krew/releases/download/v0.4.2/krew-linux_amd64.tar.gz
define `host_os` like `host_architecture` determine which OS is krew
installed at.
2021-11-08 02:54:59 -08:00
Max Gautier
6c1ab24981
Limit kubectl delete node to k8s nodes ( #8101 )
...
* Limit kubectl delete node to k8s nodes
This avoids the use of `kubectl delete node` when removing etcd nodes
which are not part of the cluser (separate etcd)
* Take errors into account when deleting node
There should not be error now that we're limiting the deletion to nodes
actually in the cluster
* Retrying on error
2021-11-08 02:22:58 -08:00
Hyojun Jeon
61c2ae5549
Add vxlanEnabled spec in FelixConfiguration ( #8167 )
2021-11-08 00:06:52 -08:00
zhengtianbao
04711d3b00
Replace path_join to support Ansible 2.9 ( #8160 )
2021-11-08 00:00:52 -08:00
Kenichi Omichi
cb7c30a4f1
Fix cloud_provider check ( #8164 )
...
This fixes the preinstall check for cloud_provider option based on
inventory/sample/group_vars/all/all.yml
2021-11-07 23:48:52 -08:00
Álvaro Torres Cogollo
8922c45556
Added ArgoCD kubernetes-app ( #7895 )
...
* Added ArgoCD kubernetes-app
* Update argocd_version to latest
2021-11-07 02:22:51 -08:00
Emin AKTAS
58390c79d0
Bump crun version 1.2 to 1.3 ( #8162 )
...
Signed-off-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
Co-authored-by: Necatican Yıldırım <necaticanyildirim@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
Co-authored-by: Necatican Yıldırım <necaticanyildirim@gmail.com>
2021-11-06 02:26:50 -07:00
Antoine Gatineau
b7eb1cf936
cert-manager: add trusted internal ca when configured ( #8135 )
...
* cert-manager: add trusted internal ca when configured
* wrong check for inventory variable
* Update documentation
2021-11-05 09:43:52 -07:00
Pasquale Toscano
6e5b9e0ebf
Fix Kubelet and Containerd when using cgroupfs as cgroup driver ( #8123 )
2021-11-05 07:59:54 -07:00
Marcus Fenner
c94291558d
Fix containerd install for fcos ( #8107 )
...
* Fix containerd install for fcos
* rm orphaned runc and containerd binaries
2021-11-05 07:53:53 -07:00
Cristian Calin
8d553f7e91
Mitogen: deprecate the use of mitogen and remove coverage from CI ( #8147 )
2021-11-05 00:57:52 -07:00
Cristian Calin
a0be7f0e26
heketi: fix deployment logic that was broken by the ansible 3.4 upgrade ( #8118 )
2021-11-04 13:10:23 -07:00
Florian Ruynat
1c3d082b8d
fix calico crds hashes for 3.20.2 ( #8157 )
2021-11-04 10:38:04 -07:00
Cristian Calin
2ed211ba15
Fix-CI: python was upgraded in CI to 3.10 and pathlib is now included in python base making this dependency break the CI ( #8153 )
2021-11-03 12:52:32 -07:00
Florian Ruynat
1161326b54
Add unzip to dockerfile, used in CI
2021-11-02 11:53:41 -07:00
Florian Ruynat
d473a6d442
Update kubespray version following 2.17.x release
2021-11-02 11:53:41 -07:00
Erkan Zileli
8d82033bff
fix(doc): update typo ( #8148 )
...
I guess `kubernetes-the-hard-way` should be `kubernetes-the-kubespray-way` because of recently created network name is `kubernetes-the-kubespray-way`.
2021-11-02 01:16:58 -07:00
zhengtianbao
9d4cdb7b02
Ensure addon-resizer 1.8.11 only effective at arch amd64. ( #8144 )
...
* Ensure addon-resizer 1.8.11 only effective at arch amd64.
k8s.gcr.io/addon-resizer:1.8.11 returns the amd64 image which is not executable at arm64.
Disable addon-resizer when the platform is not amd64.
When metrics-server upgrade and use addon-resizer:2.3, then revert this
commit and `image_arch` will determine the `addon_resizer_image_tag`.
* Add metrics_server_resizer architectures check
2021-11-01 08:21:19 -07:00
Florian Ruynat
b353e062c7
Update default k8s version to 1.22.3
2021-10-29 10:43:44 -07:00
Florian Ruynat
d8f9b9b61f
Update hashes for version v1.20.12/v1.21.6/v1.22.3
2021-10-29 10:43:44 -07:00
Sergey
0b441ade2c
nginx ingress controller should watch kind:ingress without class ( #8128 )
2021-10-28 11:48:59 -07:00
Krystian Młynek
6f6fad5a16
Calico: add missing verbs in ClusterRole ( #8136 )
2021-10-28 11:11:01 -07:00
brainfair
465ffa3c9f
Weave: add extra_args for weave-npc ( #8140 )
...
* add weave_npc_extra_args in template
* add defaults weave_npc_extra_args
* add sample for weave_npc_extra_args
2021-10-28 08:58:27 -07:00
vatech_seungjin
539c9e0d99
added hirsute in restart network ( #8134 )
...
restarting network in ubuntu 21.04 fails and checked the restart menu and found that hirsute was missing in the argument : )
2021-10-27 15:19:10 -07:00
irizzant
649f962ac6
Metrics-server Deployment has incongruencies in resources requests/limits ( #8088 )
...
* fix(metrics-server): update defaults
* fix(metrics-server): typo error
2021-10-27 15:15:11 -07:00
Gheorghe Isak
16bdb3fe51
set check_mode to false ( #8133 )
2021-10-26 19:36:37 -07:00
Sébastien Masset
7c3369e1b9
Fixed default DNS min replica for single node clusters ( #8112 )
2021-10-26 16:03:46 -07:00
Florian Ruynat
9eacde212f
Fix quorum check when recovering broken etcd cluster ( #8126 )
2021-10-26 15:23:09 -07:00
Florian Ruynat
331647f4ab
Remove deprecated Ambassador ingress code ( #8086 )
2021-10-26 15:19:09 -07:00
Mohamed Zaian
c2d4822c38
nginx-ingress: bump up version to 1.0.4 in the README ( #8124 )
...
* nginx-ingress: bump to 1.0.4
* Disable builtin ssl_session_cache solving the problem with OpenSSL consuming memory.
* Print warning only instead of error if no IngressClass permission is available.
* nginx-ingress: bump to 1.0.4 in the README
2021-10-25 03:38:23 -07:00
Cristian Calin
3c30be1320
cert-manager: update docs to reflect 1.5.x links ( #8117 )
2021-10-25 03:14:23 -07:00
Mohamed Zaian
d8d01bf5aa
nginx-ingress: bump to 1.0.4 ( #8114 )
...
* Disable builtin ssl_session_cache solving the problem with OpenSSL consuming memory.
* Print warning only instead of error if no IngressClass permission is available.
2021-10-24 15:34:22 -07:00
Julio H Morimoto
d42b7228c2
Convert numbers to string for calico's inventory check. ( #8120 )
...
Fix https://github.com/kubernetes-sigs/kubespray/issues/8119
Signed-off-by: Julio Morimoto <julio@morimoto.net.br>
2021-10-24 11:42:21 -07:00
Damian Szeluga
4db057e9c2
Allow changing metallb default pool name ( #8111 )
2021-10-22 09:38:39 -07:00
Cristian Calin
ea8e2fc651
containerd: download containerd from upstream instead of using distro specific packages ( #7970 )
...
* Containerd: download containerd from upstream instead of using distro specific packages
split runc download to separate role
make bootstrap-os role deploy container-selinux and seccomp libraries
clean up package manager provided containerd
move variables to docker role that are no longer common with containerd
* Containerd: make molecule testing more relevant
* replace ubuntu18 with ubuntu20
* add centos8 and debian11 to molecule tests
* run kubernetes/preinstall role to ensure relevancy
of test including dependency packages
* CI: adjust test scenarios for downloaded containerd
2021-10-20 08:47:58 -07:00
Utku Özdemir
10c30ea5b1
Add fallback to node drain using --disable-eviction flag ( #8094 )
...
* Add fallback to node drain using --disable-eviction flag
Signed-off-by: Utku Ozdemir <uoz@protonmail.com>
* Move drain fallback tasks to separate file
Signed-off-by: Utku Ozdemir <uoz@protonmail.com>
* Add delegate_facts to fix the drain fallback
Signed-off-by: Utku Ozdemir <uoz@protonmail.com>
* Fix ansible-lint error
Signed-off-by: Utku Ozdemir <uoz@protonmail.com>
* Move drain fallback into block
Signed-off-by: Utku Ozdemir <uoz@protonmail.com>
2021-10-20 00:51:58 -07:00
jayonlau
84b56d23a4
Add jayonlau to reviewers ( #8083 )
2021-10-19 17:49:57 -07:00
Kenichi Omichi
19d07a4f2e
Fix ownership related to Calico ( #8072 )
...
kube-bench scan outputs warning related to Calico like:
* text: "Ensure that the Container Network Interface file
permissions are set to 644 or more restrictive (Manual)"
* text: "Ensure that the Container Network Interface file
ownership is set to root:root (Manual)"
This fixes these warnings.
2021-10-19 17:35:57 -07:00
Cristian Calin
6a5b87dda4
netchecker: update images to 1.2.2 from Mirantis ( #8074 )
...
* netchecker: update images to 1.2.2 from Mirantis which is slightly less ancinet than the l23networks images
* Netchecker: use local etcd instead of kubernetes v1beta1 crds which are no longer suported by kube 1.22+
2021-10-19 10:17:04 -07:00
Omar Aloraini
6aac59394e
Rocky Linux support ( #8095 )
...
* Add Rocky as a known OS
* Make sure Rocky includes bootstrap-centos.yml
* Update docs with Rocky Linux
* Rocky Linux wireguard and EPEL
* Rocky Linux in the list of supported distributions
2021-10-19 08:29:04 -07:00
Florian Ruynat
f147163b24
Up dashboard version to 2.4.0 - fix forgotten kubeovn version ( #8085 )
2021-10-15 05:40:54 -07:00
Florian Ruynat
16bf3549c1
Update kube-ovn to 1.8.1
2021-10-14 19:42:54 -07:00
Florian Ruynat
b912dafd7a
Update multus to 3.8.0
2021-10-14 19:42:54 -07:00
efrikin
8b3481f511
Add molecule tests for roles ( #8080 )
...
* Add molecule tests for bastion-ssh-config
* Add molecule tests for adduser
* Update .gitignore
2021-10-14 18:46:54 -07:00
Olivier Levitt
7019c2685d
Increase cpu limit to prevent throttling ( #8076 )
2021-10-14 11:03:36 -07:00
Mohamed Zaian
d18cc38586
Replcae deprecated --delete-local-data in pre-remove/pre-upgrade tasks ( #8081 )
2021-10-14 02:25:19 -07:00
Cristian Calin
cee481f63d
cert-manager: upgrade to 1.5.4 ( #8069 )
...
* cert-manager: update to 1.5.4
* cert-manager: remove outdated guidelines on creating an initial ClusterIssuer
2021-10-12 09:17:47 -07:00
Max Gautier
e4c8c7188e
etcd: deploy container engine if needed ( #7532 )
...
If the etcd cluster is separate and the etcd_deployment_type is "host",
there is no need for a container engine on the etcd nodes
Do not rely on a 'default(true)' filter, but define a proper default in
kubespray-defaults depending on etcd deployment method and if internal
or external etcd is used
2021-10-12 00:31:47 -07:00
rtsp
6c004efd5f
cert_manager: Remove deprecated ClusterIssuer and its Secret ( #8064 )
2021-10-11 09:40:40 -07:00
Necatican Yıldırım
1a57780a75
Add kubeadm_join_phases_skip variable ( #8067 )
...
* Add kubeadm_join_phases_skip variable
* Update kubeadm_join_phases_skip comment
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
* Add kubeadm_join_phases_skip_default variable to follow the same logic with kubeadm_init_phases_skip
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
2021-10-11 09:36:41 -07:00
Maciej Wereski
ce25e4aa21
MetalLB: update to v0.10.3 ( #8071 )
...
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2021-10-11 08:54:40 -07:00
Rene Luria
ef4044b62f
csi_driver / cinder: implement rescan-on-resize variable via ( #8057 )
...
cinder_csi_rescan_on_resize
2021-10-11 02:14:40 -07:00
Florian Ruynat
9ffe5940fe
Remove TF 0.14/0.15 support - Add TF 1.x support only ( #8062 )
2021-10-08 09:01:06 -07:00
Florian Ruynat
c8d9afce1a
Update a bunch of tools ( #8061 )
2021-10-08 09:00:59 -07:00
Florian Ruynat
285983a555
Update docker version to 20.10.9 - CVE fixes ( #8060 )
2021-10-08 08:56:58 -07:00
Cristian Calin
ab4356aa69
Calico: bump default version to 3.20.2 ( #8058 )
2021-10-07 12:59:33 -07:00
Fredrik Liv
e87d4e9ce3
Added terraform script for Hetzner cloud ( #8053 )
2021-10-07 10:11:46 -07:00
Maxim Pogozhiy
5fcf047191
local-volume-provisioner quay.io -> k8s.gcr.io ( #8054 )
2021-10-06 17:08:41 -07:00
Florian Ruynat
c68fb81aa7
Clarify documentation for integration.md ( #8049 )
2021-10-06 16:44:41 -07:00
Rene Luria
e707f78899
After upgrade, allow cilium to be back before uncordoning ( #7978 )
...
* After upgrade, allow cilium to be back before uncordoning
* add eol
* use kube_config_dir variable
resolves https://github.com/kubernetes-sigs/kubespray/pull/7978#discussion_r721685549
2021-10-05 12:56:58 -07:00
Ilya Margolin
41e0ca3f85
Move kube_feature_gates to kubelet config ( #8048 )
...
to remove deprecation warning:
> Flag --feature-gates has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag.
2021-10-05 06:07:10 -07:00
Orhun Parmaksız
c5c10067ed
Update kubespray version to 2.17.x in first cluster guide ( #8043 )
2021-10-04 00:09:07 -07:00
Iago Santos
43958614e3
Fix kubespray flatcar ansible_os_family and ansible_distribution ( #8029 )
...
Closes https://github.com/kubernetes-sigs/kubespray/issues/8028
Signed-off-by: Iago Santos <iago.santos.pardo@adfinis.com>
2021-10-01 09:11:23 -07:00
rtsp
af04906b51
Ensure apparmor is installed ( #8036 )
...
Kubespray deployment failed when using containerd backend on nodes that apparmor was not installed or previously removed. This PR ensure apparmor is installed by adding it into required_pkgs var.
2021-09-29 23:52:08 -07:00
Cristian Calin
c7e17688b9
gVisor: bump release to 20210921 version ( #8015 )
...
* gVisor: bump release to 20210921 version
* gVisor: drop support for 20210518.0 version
2021-09-29 11:35:20 -07:00
Olivier Lemasle
ac76840c5d
Upgrade ruamel.yaml.clib to work with Python 3.10 ( #8034 )
...
ruamel.yaml.clib did not build with the upcoming Python 3.10.
Cf. https://sourceforge.net/p/ruamel-yaml-clib/tickets/5/
ruamel.yaml.clib==0.2.4 fixes the issue. It does not work
with Python 3.7 (cf https://sourceforge.net/p/ruamel-yaml-clib/tickets/6/ )
but currently Kubespray requires Python >= 3.9.
2021-09-29 07:04:49 -07:00
Peter Pan
f5885d05ea
In CentOS 8.x Docker install Step: remove podman when existing ( #8016 )
2021-09-29 06:32:48 -07:00
Nicolas Goudry
af949cd967
Fix invalid documentation links ( #7692 )
...
* Fix invalid link to Ansible documentation
* Fix invalid link to mitogen doc page
* Fix invalid link to calico doc page
* Fix all invalid links to doc pages
2021-09-28 09:58:43 -07:00
Frank Filippone
eee2eb11d8
Update weave template to match source for 2.8.1 ( #8013 )
2021-09-28 09:16:43 -07:00
Kenichi Omichi
8d3961edbe
Add metrics_server_resizer option ( #8018 )
...
The addon-resizer container can reduce resource limits of cpu and
memory of metrics-server container in the pod, and that caused
OOMKilled.
In addition, the original metrics-server manifest doesn't contain
the addon-resizer container as [1].
So this adds metrics_server_resizer option to control the addon-resizer
container deployment and the default value is false to make it stable
for most environments.
[1]: 527679e5e8/manifests/base/deployment.yaml
2021-09-28 00:02:42 -07:00
Marcos Lorenzo
4c5328fd1f
Determine root filesistem device and partition before running growpart ( #8024 )
2021-09-27 23:58:42 -07:00
David Louks
1472528f6d
check if 'plugins' key exists in calico_cni_config object ( #7717 )
...
* check if 'plugins' key exists in calico_cni_config object
* fix whitespace linting error
* fixed when list indentation
2021-09-27 11:04:20 -07:00
Victor Morales
9416c9aa86
Enable stable and edge Docker CLI versions ( #8019 )
2021-09-27 10:44:19 -07:00
Kenichi Omichi
da92c7e215
Add proxy for subscription-manager ( #8012 )
...
If using proxy, it is necessary to configure it before running
"subscription-manager status" command.
This adds the step.
2021-09-27 08:47:35 -07:00
Kenichi Omichi
d27cf375af
Remove allowPrivilegeEscalation from metrics-server ( #8014 )
...
"allowPrivilegeEscalation: false" blocks deploying metrics-server
on CentOS7. In addition, the original metrics-server manifest doesn't
contain it as [1]. This removes it.
[1]: 527679e5e8/manifests/base/deployment.yaml
2021-09-27 08:43:36 -07:00
Victor Morales
432a312a35
Enable stable and edge containerd versions ( #8020 )
2021-09-27 08:11:35 -07:00
Cristian Calin
3a6230af6b
Kata-Containers: update versions 2.2.0 (default) and 2.1.1 ( #8017 )
...
* Kata-Containers: add 2.2.0 hashes and make default
* Kata-Containers: replace 2.1.0 with bugfix version 2.1.1
* Kata-Containers: move to q35 a more modern VM architecture as 'pc' is removed in 2.2.0
2021-09-27 08:07:35 -07:00
Florian Ruynat
ecd267854b
Move ovn4nvf crd from v1beta1 to v1 ( #8006 )
2021-09-27 01:18:22 -07:00
Hugo Blom
ac846667b7
Check if openstack application credentials are empty since they always exists ( #8021 )
2021-09-27 01:14:22 -07:00
Cristian Calin
33146b9481
CI: Add Calico eBPF in HA mode test ( #7710 )
...
* Sample-Inventory: add sample for calico_bpf_enabled
* Calico-Doc: note about CONFIG_NET_SCHED for eBPF support
* CI: Add Calico eBPF in HA mode test
2021-09-24 09:57:23 -07:00
rtsp
4bace2491d
Ensure apparmor is installed ( #8011 )
...
Kubespray deployment failed when using containerd backend on nodes that apparmor was not installed or previously removed. This PR ensure apparmor is installed by adding it into required_pkgs var.
2021-09-24 07:55:23 -07:00
Kenichi Omichi
469b3ec525
Add definition check of disable_service_firewall ( #7995 )
...
When not specifying disable_service_firewall, the task is failed.
This adds the definition check.
2021-09-24 02:31:23 -07:00
Maxim Pogozhiy
22017b7ff0
kube-router 1.3.0 -> 1.3.1 ( #8007 )
2021-09-23 13:42:55 -07:00
Florian Ruynat
88c11b5946
Revert "etcd: enable v2 api only if needed ( #8001 )" ( #8008 )
...
This reverts commit c0e1211abe
.
2021-09-23 10:43:14 -07:00
Kenichi Omichi
843252c968
Use kube_config_dir for kubeconfig ( #7996 )
...
The path of kubeconfig should be configurable, and its default value
is /etc/kubernetes/admin.conf. Most paths of the file are configurable
but some were not. This make those configurable.
2021-09-23 10:19:13 -07:00
Eric Lake
ddea79f0f0
Issue 8004: Fix typha prometheus ( #8005 )
...
The typha prometheus settings were in the `volumeMounts` section of the
spec and not in the `envs` section. This was cauing the deployment to
fail because it was looking for a volumeMount.
```
failed: [controller-001.a2.da.dev.logdna.net] (item=calico-typha.yml) => {"ansible_loop_var": "item", "changed": false, "item": {"ansible_loop_var": "item", "changed": true, "checksum": "598ac79530749e8e2110793b53fc49ac208e7130", "dest": "/etc/kubernetes/calico-typha.yml", "diff": [], "failed": false, "gid": 0, "group": "root", "invocation": {"module_args": {"_original_basename": "calico-typha.yml.j2", "attributes": null, "backup": false, "checksum": "598ac79530749e8e2110793b53fc49ac208e7130", "content": null, "delimiter": null, "dest": "/etc/kubernetes/calico-typha.yml", "directory_mode": null, "follow": false, "force": true, "group": null, "local_follow": null, "mode": null, "owner": null, "regexp": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/core/.ansible/tmp/ansible-tmp-1632349768.56-75434-32452975679246/source", "unsafe_writes": null, "validate": null}}, "item": {"file": "calico-typha.yml", "name": "calico", "type": "typha"}, "md5sum": "53c00ac7f562cf9ecbbfd27899ea066d", "mode": "0644", "owner": "root", "size": 5378, "src": "/home/core/.ansible/tmp/ansible-tmp-1632349768.56-75434-32452975679246/source", "state": "file", "uid": 0}, "msg": "error running kubectl (/opt/bin/kubectl --namespace=kube-system apply --force --filename=/etc/kubernetes/calico-typha.yml) command (rc=1), out='service/calico-typha unchanged\n', err='error: error validating \"/etc/kubernetes/calico-typha.yml\": error validating data: [ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[2]): unknown field \"value\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[2]): missing required field \"mountPath\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[3]): unknown field \"value\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[3]): missing required field \"mountPath\" in io.k8s.api.core.v1.VolumeMount]; if you choose to ignore these errors, turn validation off with --validate=false\n'"}
```
2021-09-23 08:37:22 -07:00
Max Gautier
c0e1211abe
etcd: enable v2 api only if needed ( #8001 )
...
* etcd: enable v2 api only if needed
Only enable v2 API if we have a consumer (flannel)
This reduce the exposed surface for etcd.
* Fix bad group name
2021-09-22 12:36:32 -07:00
Florian Ruynat
c8d7f000c9
Remove k8s hooks for versions prior to 1.20 ( #7998 )
2021-09-22 10:32:01 -07:00
Léopold Jacquot
598f178054
Fix cilium operator metrics activation ( #8000 )
2021-09-22 10:00:02 -07:00
Florian Ruynat
6f8b24f367
Allow failure in cert manager job
2021-09-22 09:50:01 -07:00
Florian Ruynat
5d1b34bdcd
Move min k8s version to 1.20
2021-09-22 09:50:01 -07:00
Florian Ruynat
8efde799e1
Update kubernetes version to 1.22.2
2021-09-22 09:50:01 -07:00
Florian Ruynat
96b61a5f53
Update KUBE_VERSION in gitlab-ci following release
2021-09-22 09:50:01 -07:00
Cristian Calin
a517a8db01
Drop chech for kubelet_shutdown_grace_period ( #7993 )
...
and kubelet_shutdown_grace_period_critical_pods as ansible cannot do
sane time interval calculations
2021-09-21 18:34:00 -07:00
Wang Zhen
2211504790
Fix k8s-certs-renew cp path ( #7992 )
...
Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>
2021-09-21 00:36:22 -07:00
Cristian Calin
fb8662ec19
Calico: update versions 3.20.1, 3.19.3 ( #7984 )
...
* make Calico 3.20.1 the default version
* drop Calico 3.17.x support
2021-09-20 17:40:23 -07:00
Cristian Calin
6f7911264f
Calico: make calico_min_version check relevant ( #7939 )
...
* Calico: make calico_min_version check relevant
* Calico: only check currently installed version against the oldest supported version by the previous release
2021-09-20 07:58:09 -07:00
Cristian Calin
ae44aff330
Calico: increase calico node probe timeouts and allow tunning ( #7981 )
2021-09-17 16:08:07 -07:00
Florian Ruynat
b83e8b020a
Fix default version ( #7977 )
2021-09-17 07:31:00 -07:00
Hari Hud
30cd91dc6b
Add option to kubeadm upgrade command to control certificates renewal during control plane upgrade ( #7976 )
...
* Add option to kubeadm upgrade command to control certificates renewal during control plane upgrade
* Remove training whitespace
2021-09-17 04:31:00 -07:00
Florian Ruynat
09af3ab074
Set Kubernetes default version to 1.21.5
2021-09-17 00:39:02 -07:00
Florian Ruynat
f2fa9c3b31
Update hashes with new versions
2021-09-17 00:39:02 -07:00
Florian Ruynat
30a7dfa4f8
Fix ubuntu16/centos8 CI jobs ( #7972 )
2021-09-16 23:39:01 -07:00
Samuel Liu
62ab477838
remove kube_proxy_conntrack_max var ( #7971 )
2021-09-15 08:22:31 -07:00
Ray Terrill
1edb7d771f
Modify connection_strings_etcd to only return etcd nodes ( #7966 )
...
Modify connection_strings_etcd to only return etcd nodes - not master nodes - since this results in duplicate hosts in the generated Ansible inventory and is unnecessary.
2021-09-15 00:58:40 -07:00
rtsp
f8a57f7598
Fix iptables missing on Debian 11 if APT::Install-Recommends=0 ( #7964 )
...
On Debian 11, `ipset` just recommend `iptables` so on the system that apt is configured with `APT::Install-Recommends "0";` iptables will not install automatically.
2021-09-14 08:19:09 -07:00
andrew.k
85d18fc107
add node-based upgrade ( #7785 )
2021-09-13 23:59:07 -07:00
Fredrik Liv
aa00c1d91a
Updated UpCloud terraform script to use private network and dynamic ( #7779 )
...
additional disks
2021-09-10 13:55:21 -07:00
Vladimir Masarik
a5a88e41af
Fix: adding new ips with inventory builder ( #7577 ) ( #7583 )
...
* Fix: adding new ips with inventory builder (#7577 )
* moved conflig loading logic
to after checking whether the config
should be loaded, and added check for
whether the config should be loaded
* added check for removing nodes from config
if the user wants to remove a node, we
need to load the config
* Fix tox errors
2021-09-10 12:21:22 -07:00
Bryan Hundven
35c928798d
Fix missing file mode (risky-file-permissions) ( #7959 )
...
* Fix missing file mode (risky-file-permissions)
Found this using ansible-lint.
Signed-off-by: Bryan Hundven <bryanhundven@gmail.com>
* Fix another missing file mode (risky-file-permissions)
This one fixes `/etc/crio/config.json`
Signed-off-by: Bryan Hundven <bryanhundven@gmail.com>
2021-09-09 23:35:59 -07:00
jhchong92
83f64a7ff9
Bugfix/cinder csi cloud config template ( #7955 )
...
* Fix invalid condition for username and password inclusion
* Use length filter to test variable conditions
2021-09-09 10:04:11 -07:00
Florian Ruynat
60853fa682
Update kube-ovn to 1.7.2
2021-09-09 08:14:10 -07:00
Florian Ruynat
b66356be65
Update cilium to 1.9.10
2021-09-09 08:14:10 -07:00
jhchong92
efae2dbad6
Update snapshot-controller repository and image versions ( #7957 )
2021-09-09 08:10:11 -07:00
Florian Ruynat
a7b56a616d
Fix README for containerd/calico/certmanager/nginx ( #7950 )
2021-09-08 16:56:10 -07:00
jhchong92
bd8b8916a8
Remove invalid spec - deployment.spec.serviceName ( #7949 )
2021-09-08 13:05:56 -07:00
jhchong92
57063b6828
Replace incorrect {% end %} tags with {% endif %} in csi_crd templates ( #7947 )
2021-09-08 12:59:57 -07:00
Ole Mathias Aa. Heggem
69b67a293a
Calico: Add kube_service_addresses_ipv6 to serviceClusterIPs ( #7889 ) ( #7944 )
...
Add IPv6 Service Addresses to BGP advertisement when
calico_advertise_cluster_ips is true.
2021-09-08 00:37:20 -07:00
Cristian Calin
d57ddf0be8
Feature DynamicKubeletConfig is deprecated in 1.22 and will not move to GA ( #7938 )
...
* Feature DynamicKubeletConfig is deprecated in 1.22 and will not move to GA
* Add check for dynamic_kubelet_configuration with kube >= 1.22
2021-09-07 10:47:16 -07:00
Cristian Calin
43e7e2d663
nginx-ingress: bump to 1.0.0 to support kube 1.22 ( #7942 )
2021-09-06 04:50:36 -07:00
Cristian Calin
d355b43dce
ContainerD: bump containerd version to 1.4.9 ( #7940 )
2021-09-06 04:50:29 -07:00
Cristian Calin
5d52025266
crictl: add hashes for 1.22 ( #7936 )
2021-09-06 04:46:29 -07:00
Cristian Calin
db470f8529
Update CSI snaphotter and make it independent ( #7943 )
...
* CSI: update CSI snapshot CRDs
* CSI: update snapshot controller tag version with kubernetes specific versions
* CSI: allow enabling csi_snapshot_controller independent of Cinder CSI
* CSI: Align csi-snapshot-controller with upstream and use a Deployment instead of a StatefulSet
2021-09-06 04:24:29 -07:00
Florian Ruynat
c8f3d88288
Retry vagrant and periodic packet jobs too
2021-09-06 02:58:29 -07:00
Florian Ruynat
b54cf5bd0a
Add git to kubespray image
2021-09-06 02:58:29 -07:00
Florian Ruynat
7e4b176323
Update Ansible tags in documentation ( #7933 )
2021-09-02 10:08:58 -07:00
kranthi guttikonda
81bf4f9304
cri-o registry auth support ( #7837 )
...
* cri-o registry auth support
* yaml lint for comments
* crio_registry_auth from registry_auth
* crio_registry_auth as defaults
2021-09-01 10:20:59 -07:00
Maciej Wereski
e1967b0700
MetalLB: keep nodeSelector in one place ( #7931 )
...
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2021-09-01 09:05:00 -07:00
Olivier Lemasle
507091ec8b
Replace cluster_name by dns_domain ( #7923 )
...
`cluster_name` defaults to `dns_domain` value (see [here][1] and [here][2])
but they could have different values.
`dns_domain` should be used here instead of `cluster_name` because the DNS
resolution is configured to use `dns_domain`.
[1]: 0ef7af76bc/roles/kubespray-defaults/defaults/main.yaml (L104)
[2]: 1afdb05ea9/inventory/sample/group_vars/k8s_cluster/k8s-cluster.yml (L196)
2021-09-01 08:18:59 -07:00
Florian Ruynat
c7529270ff
Fix CI script for Terraform >0.15 ( #7928 )
2021-09-01 04:30:59 -07:00
Maciej Wereski
48ceca4919
MetalLB: update to v0.10.2 ( #7925 )
...
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2021-09-01 03:00:59 -07:00
Florian Ruynat
0171c71de0
Update Terraform 0.14 to .11, remove 0.13 jobs and add 0.15
2021-08-31 16:32:59 -07:00
Florian Ruynat
46d0df394f
Add one retry to packet_pr jobs
2021-08-31 16:32:59 -07:00
Florian Ruynat
207d3e7b4e
Add Debian-11 image and CI ( #7919 )
2021-08-31 14:02:22 -07:00
Cristian Calin
426ad81db0
Calico: replace hashes for latest 3.17 and 3.18 to the .5 minor versions ( #7924 )
2021-08-31 13:38:21 -07:00
Olivier Lemasle
497d2ca306
Fix Calico's FelixConfiguration when "IP in IP" is disabled ( #7926 )
...
When using Calico with:
- `calico_network_backend: vxlan`,
- `calico_ipip_mode: "Never"`,
- `calico_vxlan_mode: "Always"`,
the `FelixConfiguration` object has `ipipEnabled: true`, when it should be false:
This is caused by an error in the `| bool` conversion in the install task:
when `calico_ipip_mode` is `Never`,
`{{ calico_ipip_mode != 'Never' | bool }}` evaluates to `true`:
2021-08-31 13:14:21 -07:00
Calvin Park
9d3888a756
During pre-upgrade add a flag to always cordon ( #7892 )
...
* During pre-upgrade add a flag to always cordon
* empty
* empty
* empty
* Better default val
2021-08-30 10:56:09 -07:00
rtsp
c8e090c17f
Add preliminary Debian 11 (bullseye) support ( #7853 )
...
- Use python3-apt instead because python-apt was removed in Debian 11
- Add gnupg (fix "container-engine/containerd : ensure containerd repository public key is installed" task failed)
- Remove aufs-tools
Signed-off-by: rtsp <git@rtsp.us>
2021-08-30 09:53:06 -07:00
Florian Ruynat
77a74adedd
Bump centos8 CI job memory to 3go and remove mitogen for fedora CI ( #7921 )
2021-08-30 08:25:13 -07:00
Florian Ruynat
1ccf32e08f
Update docker to 20.10.8 ( #7918 )
2021-08-30 08:25:06 -07:00
Florian Ruynat
b5aced20e1
Update Kubernetes version to 1.21.4
2021-08-30 08:17:05 -07:00
Florian Ruynat
17af348be8
Add bunch of Kubernetes versions missing
2021-08-30 08:17:05 -07:00
Cristian Calin
1afdb05ea9
Fedora and RHEL use etc_t and the convention is <type_name>_t ( #7891 )
...
* Fedora and RHEL use etc_t and the convention is <type_name>_t
* Docs: specify all values for preinstall_selinux_state
* CI: Add Fedora 34 with SELinux in enforcing mode
2021-08-27 14:20:53 -07:00
Olivier Clavel
425b6741c6
Fix failed image build on pip installing ansible ( #7862 )
...
Related pip bug: https://stackoverflow.com/questions/68687029/unable-to-build-kubespray-container-from-dockerfile
Proposed workaround in comment: https://github.com/pypa/pip/issues/10219#issuecomment-887337037
Setting LANG only prior to launching pip fixes the issue with a successful build
2021-08-26 07:47:23 -07:00
Léopold Jacquot
d635961120
Add Infomaniak to compatible public clouds list ( #7910 )
2021-08-26 06:47:24 -07:00
Hari Hud
d5b865da4d
Update etcd without rotating etcd certs ( #7907 )
2021-08-26 00:21:23 -07:00
Sergey
89993e4833
fix error metrics server capabilities name ( #7905 )
2021-08-25 12:06:15 -07:00
jayonlau
6b5da84014
Clean up extra spaces last one ( #7904 )
...
Although these errors are not important, they affect the code specification.
2021-08-25 12:06:09 -07:00
Cristian Calin
1c3d33e146
Calico: 3.20.0 policy update to allow access to endpointslices ( #7899 )
2021-08-25 12:06:01 -07:00
Pratik Raj
71af4b4a85
chore : use --no-cache-dir flag to pip in dockerfiles to save space ( #7898 )
...
using --no-cache-dir flag in pip install ,make sure downloaded packages
by pip don't cached on system . This is a best practice which make sure
to fetch from repo instead of using local cached one . Further , in case
of Docker Containers , by restricting caching , we can reduce image size.
In term of stats , it depends upon the number of python packages
multiplied by their respective size . e.g for heavy packages with a lot
of dependencies it reduce a lot by don't caching pip packages.
Further , more detail information can be found at
https://medium.com/sciforce/strategies-of-docker-images-optimization-2ca9cc5719b6
Signed-off-by: Pratik Raj <rajpratik71@gmail.com>
2021-08-25 12:05:55 -07:00
Sergey
c49dd50ef3
add tags: always to all included sevice playbook ( #7906 )
2021-08-25 12:01:54 -07:00
Cristian Calin
f66c49bf42
Calico: replace version 3.19.1 with 3.19.2 and set as default ( #7867 )
...
Bump calico version to 3.19.2 due to adding 3.20.0 earlier
2021-08-25 07:32:41 -07:00
rtsp
4c9d7dedb3
addons/cert_manager: retries until webhook pods has been created ( #7850 )
...
Fix task 'Cert Manager | Wait for Webhook pods become ready' failed due to webhook pods don't exist yet by using `retries..until` trick like kubernetes-sigs/kubespray#7842
This fix should be removed in the future if the kubernetes/kubernetes#83242 is resolved.
Signed-off-by: rtsp <git@rtsp.us>
2021-08-25 07:16:41 -07:00
Sergey
5336943a8c
add cilium_operator_api_serve_addr to cilium operator config ( #7901 )
2021-08-24 03:49:13 -07:00
Baargav
9dfade5641
Update nodes.md ( #7902 )
2021-08-24 02:43:14 -07:00
Samuel
a040e521b4
feat(containerd): auth support ( #7868 )
...
* feat(containerd): auth support
* fix(registry-auth): rename variable
2021-08-23 06:40:00 -07:00
Hrittik Roy
dad4b26c6f
Update Azure.md ( #7880 )
2021-08-20 20:23:58 -07:00
Cristian Calin
0ac364dfae
Calico: use --allow-version-mismatch in calicoctl.sh to allow upgrades ( #7873 )
2021-08-20 14:30:48 -07:00
rtsp
dfd35892f2
docs/cert_manager.md: Update docs for K8s v1.22 ( #7877 )
2021-08-19 18:31:24 -07:00
rtsp
79166496f3
debian: Fix test failed after bullseye release ( #7888 )
2021-08-19 15:37:24 -07:00
Victor Morales
c7d12cddec
Ensure python main function return values ( #7860 )
...
The main functions are wrapped by a sys.exit function which expects and
argument. The curent implementation isn't returning values in all cases.
This change ensures main functions return a value in all cases.
2021-08-19 06:51:24 -07:00
Frank Ritchie
1f09229740
Update cilium to 1.9.9 ( #7871 )
...
Now that 1.10 is out this is to make 1.9.9 the default. I am running
this version successfully.
2021-08-16 13:34:22 -07:00
Victor Morales
c2d4700571
Remove unused python imports ( #7859 )
2021-08-13 13:35:32 -07:00
Léopold Jacquot
c06896a352
Update metrics-server to 0.5.0 ( #7864 )
2021-08-12 08:19:48 -07:00
Cristian Calin
c119620f7c
Calico: add v3.20.0 hashes ( #7855 )
2021-08-11 07:50:46 -07:00
Daniil Muidinov
7f309bb092
fix parameters for module replace in 0060-resolvconf ( #7858 )
2021-08-10 17:13:26 -07:00
Eugene Artemenko
e2b67b5700
Add suport of Vsphere CSI driver 2.2.X versions ( #7848 )
2021-08-09 08:19:38 -07:00
rtsp
82a9064d8d
addons/cert_manager: fix kubernetes-sigs#7085 by adding retries..until ( #7842 )
...
Fix task 'Cert Manager | Apply ClusterIssuer manifest' failed due to service/endpoints updating delayed even though the wekhook pod status is ready.
Signed-off-by: rtsp <git@rtsp.us>
2021-08-09 08:19:31 -07:00
Victor Morales
a70fab2249
Bump crun to 0.21 version ( #7854 )
2021-08-09 08:11:31 -07:00
Shubham Deshmukh
86b45fce6a
Remove environment variable in remove-node play ( #7729 )
2021-08-02 04:29:21 -07:00
Smita Srivastava
31a5a4e808
retry to fetch binary if it fails first time ( #7839 )
2021-07-30 00:17:38 -07:00
Vitaliy D
5db86f4c2b
Update vSphere CPI ( #7838 )
...
Changes:
* ClusterRole updated according to the latest manifests from
https://github.com/kubernetes/cloud-provider-vsphere
* vSphere CPI/CSI default versions bumped and
tested successfully on K8S 1.21.1
* vSphere documentation updated
Signed-off-by: Vitaliy D <vi7alya@gmail.com>
2021-07-29 18:17:37 -07:00
Kenichi Omichi
20c284c276
doc: Update 'Kubespray vs Kubeadm' ( #7834 )
...
non-kubeadm mode has been removed since ddffdb63bf
2.5 years ago. The non-kubeadm makes unnecessary confusion today, then
this updates the documentation.
2021-07-28 03:15:34 -07:00
Markus Opolka
befc6cd650
Update MetalLB documentation ( #7833 )
...
- Added a hint about the kube_proxy_strict_arp configuration, which is required for MetalLB to work
- See also https://github.com/kubernetes-sigs/kubespray/pull/5180/files
2021-07-27 08:46:45 -07:00
Maxime Guyot
97d95775a5
Disable OVH CI until voucher situation is cleared up ( #7824 )
2021-07-26 06:16:33 -07:00
Kenichi Omichi
8f44cd35d8
Fix how to get image ID on offline deployment ( #7808 )
...
Previously IDs of container images were gotten from tar files of container
images but that way was wrong. If multiple json files are contained in a
tar file, the script got multiple IDs and tried to pass these IDs on
`docker tag` command. Then the command was failed.
This updates the script to get image IDs from `docker image inspect` command
to fix this issue.
In addition, this adds a check a registry container exists already or not
before deploying registry container to avoid a container conflict failure.
2021-07-26 00:56:33 -07:00
AnatomicJC
627a06e30d
CRI-O: Install libseccomp2 from backports on Debian 10 ( #7816 )
...
* CRI-O: Install libseccomp2 from backports on Debian 10
libseccomp2 is a required dependency of cri-o-runc package
The one provided in Debian 10 repositories is outdated
* 7816: Remove useless when condition
As this condition is handled by block
2021-07-23 07:07:16 -07:00
Samuel
bfebcfa2c5
fix(misc): contrib/terraform/aws ( #7818 )
...
* fix(misc): terraform/aws
- handles deployment with a single availability zone
- handles deployment with more than two availability zone
- handles etcd collocation with control-plane nodes (`aws_etcd_num=0`)
- allows to set a bastion instances count (`aws_bastion_num`)
- allows to set bastion/etcd/control-plane/workers rootfs volume size
- removes variables from terraform.tfvars that were not re-used
- adds .terraform.lock.hcl to .gitignore
- changes/updates base image from ubuntu-18.03 to debian-10
tested by a few coworkers of mine, and myself: thanks for the outstanding
work, on both those terraform samples and kubespray playbooks.
I did not test ubuntu deployments, I could still swap from buster to
focal. LMK.
* fix(gitlab-ci)
AFAIU, terraform.tfvars indentation should be fixed for / no diff
returned running `terraform fmt -check -diff`
https://gitlab.com/kargo-ci/kubernetes-sigs-kubespray/-/jobs/1445622114
2021-07-23 02:43:16 -07:00
Kenichi Omichi
56e230863a
Separate gvisor_download_url for runsc and shim ( #7760 )
...
To download necessary files in advance for offline deployment,
we can see all file URLs with contrib/offline/generate_list.sh
Most URLs are downloadable, but gvisor's one is not because the
URL is a part of full URLs for gvisor.
To download gvisor's files from the URLs directory, this separates
into two URLs for runsc and the shim.
2021-07-22 07:51:51 -07:00
Kenichi Omichi
e5ee47408e
Allow failure on tf-elax_ubuntu18-calico ( #7814 )
...
tf-elax_ubuntu18-calico is so flake today. The test job is failed
due to SSH connectivity check error after deploying virtual machines
which are used for Kubernetes nodes.
This allows failure on the job to see the test situation without
pull request merger failures.
2021-07-22 07:47:52 -07:00
cola-zero
f21a707e99
Add containerd on Flatcar Container Linux ( #7681 )
2021-07-21 06:28:07 -07:00
Florian Ruynat
0ef7af76bc
Fixup label for oracle linux bootstrap
2021-07-20 01:29:31 -07:00
Florian Ruynat
18666b3e2d
Update multus to 3.7.2 (and move to ghcr.io)
2021-07-20 01:29:31 -07:00
Florian Ruynat
ed87386d7b
Set default k8s version to 1.21.3
2021-07-20 01:29:31 -07:00
Florian Ruynat
1ad9b33b08
Add hashes for k8s 1.20.8/.9 and 1.19.12/.13 and 1.21.3
2021-07-20 01:29:31 -07:00
Florian Ruynat
000b4565c2
Fix erroneous ansible args
2021-07-20 01:29:31 -07:00
Florian Ruynat
eda75fc706
Update kube-router to 1.3.0
2021-07-20 01:29:31 -07:00
Florian Ruynat
6583add63a
Update flannel to 0.14.0 (moved from coreos repo to flannel-io)
2021-07-20 01:29:31 -07:00
Florian Ruynat
441ad841cc
Use dashboard 2.3.1 image
2021-07-20 01:29:31 -07:00
Florian Ruynat
6511c5dd7a
Set Helm default version to 3.6.3
2021-07-20 01:29:31 -07:00
Florian Ruynat
d5cbb19b39
Update kube-ovn to 1.7.1
2021-07-20 01:29:31 -07:00
Kenichi Omichi
b0fcc1ad1d
Add error handling for registorying images ( #7787 )
...
When running the script, I faced the following error but it was
difficult to know the root problem due to lack of error handling.
docker tag" requires exactly 2 arguments.
See 'docker tag --help'.
Usage: docker tag SOURCE_IMAGE[:TAG] TARGET_IMAGE[:TAG]
Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE
To investigate such errors easily, this adds an error handling.
2021-07-18 17:58:51 -07:00
Atsushi Nukariya
417180246c
Fix: typos in docs and comments ( #7805 )
2021-07-16 18:58:50 -07:00
cleveritcz
1892562614
Updated README ( #7800 )
2021-07-16 06:38:08 -07:00
Karthikeya Viswanath
22b128dfd2
fix: update metallb docs url ( #7802 )
2021-07-16 03:38:08 -07:00
Fredrik Liv
802fb8b591
Add application credentials support for cinder ( #7799 )
...
* csi-driver: Added possibility to use application credentials for cinder
* external-cloud-controller: Added env vars for openstack application credentials
2021-07-15 00:56:48 -07:00
spaced
c2cf0d9945
add containerd on fedora CoreOS ( #7794 )
...
* set selinux type t_etc if selinux state is enforcing
* workaround with update repo is no longer needed
remove comments about failing playbook
* grubby is not available in distros using ostree
* remove docker support because removed in fcos
update install script example with live rootfs
* do not call grubby on ostree based distro
* update docs enabling containerd on fedora coreos
2021-07-15 00:00:48 -07:00
왕영주 (Youngju Wang)
3b3ccac212
Update README.md ( #7784 )
...
Update README for control_plane's external volume type variable
2021-07-13 22:52:26 -07:00
jayonlau
e61a9077f4
Clean up extra spaces about configuration-qemu.toml.j2 ( #7795 )
...
Clean up extra spaces, although these errors are not important, they affect the code specification.
2021-07-13 06:38:34 -07:00
Jennings Zhang
59ce9f9b87
Set image version to v2.16.0 ( #7792 )
2021-07-13 06:34:36 -07:00
spaced
bf54dc082b
set selinux type t_etc if selinux state is enforcing ( #7791 )
2021-07-13 06:34:29 -07:00
cleveritcz
3ff7bc1f64
Added k8s 1.21.2 ( #7789 )
2021-07-13 06:26:29 -07:00
Cristian Calin
7516fe142f
Move to Ansible 3.4.0 ( #7672 )
...
* Ansible: move to Ansible 3.4.0 which uses ansible-base 2.10.10
* Docs: add a note about ansible upgrade post 2.9.x
* CI: ensure ansible is removed before ansible 3.x is installed to avoid pip failures
* Ansible: use newer ansible-lint
* Fix ansible-lint 5.0.11 found issues
* syntax issues
* risky-file-permissions
* var-naming
* role-name
* molecule tests
* Mitogen: use 0.3.0rc1 which adds support for ansible 2.10+
* Pin ansible-base to 2.10.11 to get package fix on RHEL8
2021-07-12 00:00:47 -07:00
Sébastien Huss
b0e4c375a7
Allow cri-o offline install ( #7777 )
2021-07-09 20:52:45 -07:00
Florian Ruynat
d1388d69d0
Fix tests following python change ( #7775 )
...
* Fix ansible detection for python3 and ubuntu
* Fix oracle missing centos-extras repo for containerd/docker dependencies
2021-07-08 18:52:53 -07:00
jayonlau
a3149a41f1
Clean up extra spaces ( #7783 )
...
Clean up extra spaces, although these errors are not important, they affect the code specification.
2021-07-08 14:56:53 -07:00
jayonlau
823bd9118e
Clean up extra spaces of kubespray-aws-inventory.py ( #7774 )
...
Clean up extra spaces, although these errors are not important, they affect the code specification.
2021-07-08 01:32:53 -07:00
Arian van Putten
394afc957b
Update vars.md to remove mention of string syntax of node_labels ( #7776 )
...
* Update vars.md to remove mention of string syntax of node_labels
Fixes https://github.com/kubernetes-sigs/kubespray/issues/6215
* Try fix makrdown linting
* Update docs/vars.md
2021-07-07 14:20:22 -07:00
andrew.k
63e92d719a
Clarify first master replace ( #7761 )
...
* Update nodes.md
* fix syntax
* fix syntax - part 2
* replace master with kube_control_plane
* return etcd-master
2021-07-07 13:42:23 -07:00
Julien Carpentier
9b87131b19
Fix Operating Systems menu for Amazon Linux 2 ( #7772 )
2021-07-05 01:30:55 -07:00
Kenichi Omichi
4a15994da0
Update link for kubepsray project ( #7758 )
...
https://github.com/kubernetes-incubator/kubespray is an old link,
this updates the link.
2021-07-05 01:12:55 -07:00
Shinerrs
d0fb537448
Ubuntu changed package name python-apt to python3-apt ( #7769 )
...
* replaced deprecated python package with python3 package
* removed the version due to duplication
2021-07-02 06:56:13 -07:00
jayonlau
59cf1770bc
Clean up residual files about /usr/libexec ( #7756 )
...
When reset, need to clean up directory /usr/libexec.
2021-07-01 02:13:54 -07:00
Kenichi Omichi
b77f207512
Docs: Replace master with control plane ( #7767 )
...
This replaces master with "control plane" in Kubespray docs
because of [1].
[1]: https://github.com/kubernetes/enhancements/blob/master/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md#motivation
2021-07-01 00:55:55 -07:00
Sergey
b46a69f5e1
add python requirement ruamel.yaml.clib==0.2.2 to keep python 2.7 compatible ( #7754 )
2021-06-30 08:19:04 -07:00
Vadim
0aaba5ea30
added destination filename to cp command ( #7764 )
2021-06-30 08:13:03 -07:00
Cristian Calin
bd6d810d0a
nodelocaldns: allow binding metrics address to host IP ( #7748 )
2021-06-29 05:28:41 -07:00
jayonlau
e3850fbbbc
Extra spaces of macvlan ( #7752 )
...
Although these errors are not important, they affect the code specification.
2021-06-28 02:13:25 -07:00
Cristian Calin
05d864c913
Calico Docs: clarify the algorithm to calculate calico_veth_mtu ( #7749 )
...
* Claico Docs: clarify the algorithm to calculate calico_veth_mtu
* Update sample calico_veth_mtu
2021-06-27 23:59:25 -07:00
Cristian Calin
a3e34f589a
Enable Graceful Node Shutdown for Kubernetes >= 1.21.0 ( #7746 )
...
* Enable Graceful Node Shutdown for Kubernetes >= 1.21.0
* Add sample graceful shutdown parameters
2021-06-27 23:53:25 -07:00
Cristian Calin
a2cf6816ce
Calico wireguard ( #7638 )
...
* Calico: add Wireguard support
* CI: Add Calico Wireguard scenario
2021-06-25 03:22:45 -07:00
Dmitry Pichugin
7b3bc54cc3
[KS-0] - added forgotten bracket in README.md ( #7727 )
2021-06-25 03:10:45 -07:00
jayonlau
cda88e6770
Clean up extra spaces ( #7744 )
...
I recently reviewed the code, although these errors are not important, they affect the code specification.
2021-06-25 01:44:46 -07:00
rptaylor
70f1abbc18
fix broken link in doc ( #7736 )
...
* fix broken link in doc
* Revert "fix broken link in doc"
This reverts commit b427d1f57f
.
* move metallb doc to right place, fixing broken link
2021-06-25 01:34:45 -07:00
jayonlau
bbcafb5d7b
Clean up residual files about modules-load.d ( #7737 )
...
When reset, need to clean up files kube_proxy-ipvs.conf and kubespray-br_netfilter.conf.
2021-06-25 00:32:45 -07:00
Simon Kollberg
d7039ef707
Openstack cwd ( #7643 )
...
* terraform/openstack: Use path.root for ansible_bastion_template.txt
The path.root variable points to the root module path. Using this
instead of a relative path makes less assumptions about the current
working directory.
* terraform/openstack: Add group_vars_path variable
Previously, the group_vars path was assumed to be in CWD. The
default value for the group_vars_path variable is still relative
to CWD and thus should be backwards compatible if unset.
2021-06-25 00:26:45 -07:00
Hamed Bahadorzadeh
271be92b02
Update kubernetes-reliability.md ( #7724 )
...
It's a minor change, I just corrected `–` char to `-`.
2021-06-21 10:36:51 -07:00
Id2ndR
a31baf3c16
Fix deployment without openstack cacert ( #7723 )
...
* fix group name
* fix external-openstack-cloud-config secret
* don't add ca.cert in the secret if not defined
2021-06-21 05:38:50 -07:00
jayonlau
e83728897b
Clean up residual files ( #7722 )
...
* Clean up residual files
When reset, you need to clean up to the kerw directory.
* Update main.yml
2021-06-21 05:34:50 -07:00
Cristian Calin
282a27a07c
gVisor: initial support for gVisor container runtime ( #7661 )
...
* Docker/Containerd: move downloads urls to containerd-common
* gVisor: initial support for gVisor container runtime
2021-06-21 05:18:51 -07:00
Sergey
3fe6dbb65c
fix image pull url for coredns v1.8.0 ( #7702 )
2021-06-16 17:00:19 -07:00
flix444
7547e6a272
Ubuntu 21.04 changed packagename python-apt in python3-apt ( #7715 )
2021-06-16 13:58:00 -07:00
Cristian Calin
1928dafc7e
Revert to conmon location override for Redhat and Fedora ( #7701 )
2021-06-16 09:07:59 -07:00
Samuel Liu
0cbc0f4119
merge apps roles ( #7688 )
2021-06-16 08:10:07 -07:00
Florian Ruynat
e77b9bf3ee
Update kube-ovn to 1.7.0 ( #7686 )
2021-06-16 08:10:00 -07:00
Samuel Liu
7f7e83a4d9
fix local-path-provisioner helper image repo ( #7703 )
2021-06-16 08:06:00 -07:00
Marko Kohtala
85fe716d46
Drop "Server" from crio repo URL ( #7698 ) ( #7699 )
...
$releasever can be 7Server, but there is no such CentOS path on
download.opensuse.org.
Use ansible_distribution_major_version instead of $releasever.
2021-06-11 05:10:59 -07:00
Kenichi Omichi
85ff3eb8be
Update the version of local_volume_provisioner ( #7684 )
...
As [1], v2.4.0 has been released already for local_volume_provisioner.
This updates the version.
[1]: https://github.com/kubernetes-sigs/sig-storage-local-static-provisioner/tags
2021-06-11 04:36:59 -07:00
Florian Ruynat
e55c359cf9
Updage docker packages to 20.10.7 ( #7685 )
2021-06-11 04:32:59 -07:00
Kenichi Omichi
8d7327c188
Remove old groups from test inventory ( #7656 )
...
We have released v2.16 of Kubespray already, so we can remove those
old groups from the test inventory as the TODO says.
2021-06-09 02:45:48 -07:00
Yiğit Altunay
ca731dca95
readme invalid k8s_cluster.yml, the create file k8s-cluster.yml ( #7677 )
2021-06-07 10:26:56 -07:00
Kasakaze
d66da21726
make sure serviceaccounts/token is only in the metadata stage ( #7679 )
2021-06-07 08:38:40 -07:00
forselli-stratio
1069b05e68
Improve scale flow and documentation ( #7610 )
...
* Improve scale flow
* Add confirmation prompt again
2021-06-07 05:02:40 -07:00
Cristian Calin
ec0c0d4a28
Calico enable support for eBPF ( #7618 )
...
* Calico: align manifests with upstream
* allow enabling typha prometheus metrics
* Calico: enable eBPF support
* manage the kubernetes-services-endpoint configmap
* Calico: document the use of eBPF dataplane
* Calico: improve checks before deployment
* enforce disabling kube-proxy when using eBPF dataplane
* ensure calico_version is supported
2021-06-07 04:58:39 -07:00
jiriproX
1739b27231
Replace yum module with package module ( #7621 )
2021-06-05 04:16:39 -07:00
Sergey
d9d29af87f
update containerd to version 1.4.6 ( #7674 )
2021-06-03 10:55:38 -07:00
Cristian Calin
7036b704b3
Replace Kata 1.x with Kata 2.x ( #7670 )
...
* Kata: add Kata 2.x checksums and adjust download urls for 2.x
* Kata: drop 1.x version which is no longer supported
* Kata: set default version 2.1.0
2021-06-02 00:50:41 -07:00
Florian Ruynat
54cda80018
Fix debian docker available version ( #7668 )
2021-06-01 20:58:39 -07:00
rptaylor
b46e751573
protect against TypeError in case of NoneType ( #7659 )
2021-06-01 08:24:27 -07:00
Cristian Calin
6a2ea94b39
Docs improvements ( #7660 )
...
* Docs: update sidebar
* Docs: move registry documentation into docs/
* Docs: move rbd_provisioner documentation into docs/
* Docs: move cephfs_provisioner into docs/
* Docs: move local_volume_provisioner documentation into docs/
* Docs: move ambassador.md to docs/ingress_controller/
* Docs: move metallb.md to docs/ingress_controller/
* Docs: move ingress_nginx documentation into docs/
* Docs: move alb_ingress_controller documentation into docs/
* Docs: merge ambassador documentation into docs/ingress_controller/
* Docs: move cert_manager documentation into docs/
* Docs: move bootstrap-os documentation into docs/
* Docs: update file locations in sidebar
2021-06-01 07:30:27 -07:00
Cedric Hnyda
4674b03661
Add cinder_csi_ignore_volume_az ( #7624 )
...
Signed-off-by: Cedric Hnyda <cedric.hnyda@itera.io>
2021-06-01 07:10:27 -07:00
Guangwen Feng
e2f1964389
Fix typo ( #7665 )
...
Signed-off-by: Guangwen Feng <fenggw-fnst@cn.fujitsu.com>
2021-06-01 00:34:27 -07:00
kongxs
922de32290
spelling mistakes ( #7664 )
...
Signed-off-by: kjinan <2008kongxiangsheng@163.com>
2021-05-31 05:46:26 -07:00
Florian Ruynat
7896bc7831
Add Fedora 33 image and CI, remove Fedora 31 (EOL) + update docker packages ( #7657 )
...
* Update docker package to 20.10.6
* Add Fedora 33 image and CI, remove Fedora 31 (EOL)
2021-05-28 08:04:25 -07:00
AnatomicJC
da07459bd6
Update crun 0.19 checksum ( #7655 )
...
Checksum of crun 0.19 is not correct, this commit fixes it
2021-05-27 15:20:23 -07:00
Fredrik Liv
3ca205446e
Added possibility to specify vSphere credentials via env variables ( #7646 )
...
* Added possibility to specify vSphere credentials via env variables
* Removed excessive spacing
2021-05-27 12:02:30 -07:00
forselli-stratio
eff1931283
Add retries to 'Set label for route reflector' task ( #7645 )
2021-05-27 12:02:23 -07:00
Marques Johansson
3a37a49690
Packet renamed ( #7653 )
...
* Packet->Equinix Metal rename #6901
Updates throughout to reflect #6901 renaming for Packet to Equinix Metal.
* Rename Packet to Equinix Metal throughout the project #6901
Packet is renamed to Equinix Metal in more contexts including
documentation links. The Terraform provider used is still the Packet
provider. The environment variables and configuration options still
refer to the Packet name.
Signed-off-by: Marques Johansson <mjohansson@equinix.com>
Co-authored-by: Edward Vielmetti <ed@packet.net>
2021-05-27 11:58:24 -07:00
Florian Ruynat
fd8ae54fa7
Docker default version is now 20.10
2021-05-27 11:18:24 -07:00
Florian Ruynat
79fdee3979
Bump crio to default 1.21
2021-05-27 11:18:24 -07:00
Florian Ruynat
a754c0d476
Kubernetes now use CoreDNS 1.8.0
2021-05-27 11:18:24 -07:00
Florian Ruynat
7208169db3
Update kubernetes version to 1.21.1
2021-05-27 11:18:24 -07:00
Florian Ruynat
94dac10be7
Update KUBE_VERSION in gitlab-ci following release ( #7647 )
2021-05-26 09:11:29 -07:00
sangheee
d5fcbcd89f
Update nodes.md ( #7649 )
2021-05-26 09:07:21 -07:00
Cristian Calin
7b5d43cc00
Calico: upgrade 3.18 to 3.18.4 ( #7648 )
2021-05-26 05:51:21 -07:00
Cristian Calin
c5ccedb694
store openstack external cloud controller ca.cert in a k8s secret instead of the host filesystem ( #7603 )
2021-05-26 00:35:21 -07:00
Cristian Calin
858b29f425
Calico: add support for v3.19.1 ( #7630 )
...
* Calico: add v3.19.1 hashes
* enable liveness probe for calico-kube-controllers
3.19.1
* Calico: drop support for v3.16.x
* Calico: promote v3.18.3 as default
2021-05-25 13:40:50 -07:00
efrikin
7db76f8809
Add nodeSelctor for other services and node labels before CNI setup ( #7613 )
2021-05-25 13:40:43 -07:00
Florian Ruynat
bcf695913f
Fix Oracle yum disabled repository file after EPEL install ( #7639 )
2021-05-25 08:30:23 -07:00
Catblade
23cd1d41fb
Minor spelling edits ( #7640 )
...
Minor spelling edits. Was reading your documentation.
2021-05-24 23:48:22 -07:00
rptaylor
62f5369237
Remove warning about Docker-only support ( #7626 )
2021-05-20 00:01:05 -07:00
Fatih Sarhan
59fc17f4e3
Override the default value of containerd's root, state, and oom_score ( #7622 )
...
* Override the default value of containerd's root, state, and oom_score configurations
* Add tests data for containerd_storage_dir, containerd_state_dir and containerd_oom_score variables
2021-05-19 08:24:53 -07:00
rptaylor
26c1d42fff
add note on download_localhost ( #7623 )
...
It can be counterintuitive for the downloaded files to show up on local host when download_localhost is false, this explains the reason.
2021-05-19 05:04:51 -07:00
Florian Ruynat
c1aa755a3c
Fix missing broken_etcd filter in recover control plane task ( #7619 )
2021-05-18 10:29:04 -07:00
Kenichi Omichi
b3d9f2b4a2
Add contrib playbook to disable service firewall ( #7431 )
...
Basically we need to make necessary TCP/UDP ports open.
However the necessary ports are so many, and sometimes it is difficult
to figure out that is due to firewall issues or not if facing deployment
issues.
To distinguish a root problem on such situation, this adds contrib
playbook to disable the service firewall for Kubespray development
and test.
2021-05-18 06:45:30 -07:00
Pavel Martynov
29c2fbdbc1
Fix cloud_resolver type from str to list (issue #7605 ) ( #7606 )
2021-05-18 06:41:30 -07:00
Pavel Martynov
4b9f98f933
Fix pull_by_digest variable type to boolean instead of str ( #7612 )
2021-05-18 06:29:31 -07:00
Cristian Calin
e9870b8d25
add support for using ansible 2.10.x for deploying kubespray ( #7600 )
...
* add support for using ansible 2.10.x for deploying kubespray
* move dns-autoscaler-clusterrole{binding}.yml to files/ folder
* note that ansible 2.10 is now experimentally supported
* coredns: move files to templates like before #4341
2021-05-18 05:39:31 -07:00
Muzi Li
e0c74fa082
Update nerdctl version to 0.8.1 ( #7617 )
2021-05-17 11:07:30 -07:00
Cristian Calin
5b93a97281
remove experimental note about CentOS 8 and derivatives ( #7615 )
2021-05-16 12:07:59 -07:00
Florian Ruynat
bdf74c6749
Set default version to 1.20.7
2021-05-14 09:48:06 -07:00
Florian Ruynat
d6f9a8d752
Update hashes with 1.21.1/1.20.7/1.19.11
2021-05-14 09:48:06 -07:00
Cristian Calin
e357d8678c
update README about supported OSes ( #7608 )
2021-05-14 00:06:05 -07:00
tkob
b1b407a0b4
Replace map in Terraform scripts with tomap ( #7576 ) ( #7578 )
...
* Replace map in Terraform scripts with tomap (#7576 )
* Fix Terraform linter warnings (#7576 )
2021-05-12 07:34:17 -07:00
Sergey
6c3d1649a6
fixed MarkupSafe version to 1.1.1 ( #7607 )
2021-05-12 06:52:17 -07:00
Cristian Calin
14cf3e138b
Support Calico advertisement of MetalLB LoadBalancer IPs ( #7593 )
...
* add initial MetalLB docs
* metallb allow disabling the deployment of the metallb speaker
* calico>=3.18 allow using calico to advertise service loadbalancer IPs
* Document the use of MetalLB and Calico
* clean MetalLB docs
2021-05-12 05:22:17 -07:00
emiran-orange
afbabebfd5
Enables Calico serviceAccount token monitoring and update of /etc/cni/net.d/calico-kubeconfig if need be. ( #7586 )
...
Since K8S 1.21, BoundServiceAccountTokenVolume feature gate is in beta stage, thus activated by default (anyone who follows CSI guidelines has enabled AllAlpha and faced the issue before 1.21).
With this feature, SA tokens are regenerated every hour.
As a consequence for Calico CNI, token in /etc/cni/net.d/calico-kubeconfig copied from /var/run/secrets/kubernetes.io/serviceaccount in install-cni initContainer expires after one hour and any pod creation fails due to unauthorization.
Calico pods need to be restarted so that /etc/cni/net.d/calico-kubeconfig is updated with the new SA token.
2021-05-11 08:47:36 -07:00
Cristian Calin
8c0a2741ae
allow overriding calico peers names and avoid ipv6 naming issues ( #7591 )
2021-05-11 07:05:36 -07:00
muzi502
1d078e1119
Add script for generate download files and images list ( #7561 )
...
Fix coredns image repo and tag typo for #7570
2021-05-11 00:39:36 -07:00
Cristian Calin
d90baa8601
add containerd support for Amazon Linux 2 ( #7595 )
2021-05-10 19:25:36 -07:00
muzi502
d5660cd37c
Fix reset cluster task failed ( #7597 )
2021-05-10 17:25:36 -07:00
Cristian Calin
63cec45597
Add Amazon to the check for supported distributions ( #7589 )
2021-05-10 16:17:36 -07:00
Hari Hud
f07e24db8f
Cleanup duplicate task in etcd role ( #7598 )
...
* Remove the duplicate task in etcd role
* Remove inessential delegate_to
2021-05-10 16:11:36 -07:00
Cristian Calin
5d5be3e96a
bump calico 3.18 to v3.18.3 ( #7592 )
2021-05-10 00:34:51 -07:00
Hari Hud
6e7649360f
Ignore error when ipvsadm utility not found on node ( #7587 )
2021-05-07 13:37:04 -07:00
Cedric Hnyda
1dd38721b3
Add external_openstack_enable_ingress_hostname option for openstack ( #7572 )
...
Signed-off-by: Cedric Hnyda <cedric.hnyda@itera.io>
2021-05-04 00:33:11 -07:00
Eugene Artemenko
6a001e4971
Add suport of Vsphere CSI driver 2.X versions ( #7480 )
2021-05-04 00:05:11 -07:00
Samuel Liu
96e6a6ac3f
Add krew support ( #7464 )
...
* Add krew support
* Add reset for krew
* Update install krew(local)
* ansible lint
* yamllint
* fix krew default vars
* fix kubectl_localhost mode
* replace include
* fix e206
2021-05-03 07:16:03 -07:00
bac-w
2556eb2733
Upgrade cilium role ( #7521 )
...
* Upgrade cilium roles
* Del old test result
* Add hubble ui examples
* Refactor hubble metrics
* Markdown fix pipeline errors
* yamllint check and fix
* refactor install from https://github.com/kubernetes-sigs/kubespray/pull/7520
* Docs syntax change (fix)
* Cilium set default 1.8.9
* Update cilium version in Readme
2021-04-30 08:09:59 -07:00
Florian Ruynat
d29ea386d6
Fix issue with api token wait check not working ( #7566 )
2021-04-30 07:47:59 -07:00
MRoci
a0ee569091
change coredns image name to coredns/coredns
and prefix v
to tag ( #7570 )
...
follow new naming conventions for gcr's coredns image.
starting from 1.21 kubeadm assumes it to be `coredns/coredns`:
this causes the kubeadm deployment being unable to pull image, beacuse `v`
was also added in image tag, until the role `kubernetes-apps` ovverides
it with the old name, which is only compatible with <=1.7.
Backward comptability with kubeadm <=1.20 is mantained checking
kubernetes version and falling back to old names (`coredns:1.xx`) when
the version is less than 1.21
2021-04-30 07:43:58 -07:00
holmesb
3f4eb9be08
Fixes issue #7573 - Made Calico permissions compatible with v3.18.x (see https://github.com/projectcalico/calico/issues/4557 ). Specifically, granted watch to custom resources blockaffinities, ipamblocks & ipamhandles ( #7575 )
2021-04-30 07:25:59 -07:00
muzi502
5ea2d1eb67
Add image_arch in flannel image tag ( #7560 )
...
* Add image_arch variable when download flannel image
* Fix flannel image tag typo with image arch
2021-04-29 17:51:57 -07:00
Florian Ruynat
ffc38a2237
Fix busybox for tests to reduce dockerhub calls ( #7571 )
2021-04-29 17:39:57 -07:00
Cristian Calin
360aff4a57
Rename ansible groups to use _ instead of - ( #7552 )
...
* rename ansible groups to use _ instead of -
k8s-cluster -> k8s_cluster
k8s-node -> k8s_node
calico-rr -> calico_rr
no-floating -> no_floating
Note: kube-node,k8s-cluster groups in upgrade CI
need clean-up after v2.16 is tagged
* ensure old groups are mapped to the new ones
2021-04-29 05:20:50 -07:00
Sergey
d26191373a
add default empty value for etc_hosts_localhosts_dict_target ( #7567 )
2021-04-28 11:34:50 -07:00
Cristian Calin
4c06aa98b5
crio: add supported versions 1.20 and 1.21 and align default with k8s version ( #7562 )
...
* crio: add supported versions 1.20 and 1.21 and align default with k8s version
* cri-o: drop versions 1.17 and 1.18 from version matrix
* update note on cri-o version alignment
2021-04-28 11:30:51 -07:00
muzi502
1b267b6599
Fix calico-kube-controller becomes Error for canal ( #7564 )
2021-04-28 11:26:52 -07:00
Cristian Calin
dd6efb73f7
Calico new versions v3.17.4 and v3.18.2 ( #7563 )
...
* calico: upgrade from v3.17.3 to v3.17.4
* calico: upgrade from v3.18.1 to v3.18.2
2021-04-28 08:22:50 -07:00
Samuel Liu
dfeed1c1a4
Modify the commented config info ( #7558 )
2021-04-27 15:45:28 -07:00
harihud
0071e3c99c
Update main.yml ( #7557 )
2021-04-27 15:41:27 -07:00
muzi502
0feec14b15
Update Dockerfile for reduce image size ( #7556 )
...
* Update Dockerfile for reduce image size
* Remove KUBE_VERSION form Dockerfile
2021-04-26 23:33:37 -07:00
faruryo
975f84494c
Fix calico-kube-controller becomes Error ( #7548 )
...
Change mode so that calico-kube-controllers can be read because it was changed to run as non-root
https://github.com/projectcalico/kube-controllers/pull/566
2021-04-26 15:37:03 -07:00
Florian Ruynat
7c86734d2e
Add cri-o 1.20/1.21 ( #7544 )
2021-04-26 09:21:16 -07:00
Cristian Calin
8665e1de87
Fix cri-o support for Oracle and AlmaLinux ( #7541 )
2021-04-26 09:11:02 -07:00
Florian Ruynat
c16efc9ab8
Fix Opensuse not working with ansible_distribution ( #7551 )
2021-04-26 08:37:02 -07:00
muzi502
324c95d37f
Fix some docs.ansible.com url typo ( #7550 )
2021-04-26 08:33:02 -07:00
muzi502
69806e0a46
Add nerdctl cli tool for containerd user ( #7500 )
...
* Add nerdctl cli tool for containerd user
* Add nerdctl enable option
* Add nerdctl enable option and update nerdctl version to 0.8.0
2021-04-25 23:47:01 -07:00
Cristian Calin
ad15a4b755
Bump calico versions ( #7543 )
...
* add calico 3.16.10 hashes
* drop old calico version 3.16.9
2021-04-24 12:37:01 -07:00
Cristian Calin
002a4b03a4
Drop calico 3.15 ( #7545 )
...
* calico: drop support for version 3.15
* drop check for calico version >= 3.3, we are at 3.16 minimum now
* we moved to calico 3.16+ so we can default to /opt/cni/bin/install
2021-04-23 23:43:14 -07:00
muzi502
96476430a3
Update cni-plugins and kubernetes version in README.md ( #7540 )
2021-04-22 23:54:02 -07:00
Cristian Calin
73db44b00c
Initial AlmaLinux support ( #7538 )
...
* AlmaLinux: ansible>2.9.19 is needed to know about AlmaLinux
* AlmaLinux: identify as a centos derrivative
* AlmaLinux: add AlmaLinux to checks for CentOS
* Use ansible_os_family to compare family and not distribution
2021-04-22 23:50:03 -07:00
Florian Ruynat
b32d25942d
Minor update to cni-plugins and kube-router
2021-04-22 06:47:42 -07:00
Florian Ruynat
fce705a92b
Helm minor update to 3.5.4
2021-04-22 06:47:42 -07:00
Florian Ruynat
6164c90f70
Update kube-ovn to 1.6.2
2021-04-22 06:47:42 -07:00
Cristian Calin
e036b899a3
update calico default version in README.md ( #7537 )
2021-04-22 06:41:41 -07:00
Samuel Liu
8c7b90ebbf
add ingress controller class ( #7522 )
2021-04-22 00:22:38 -07:00
Ian Martin
38d9d2ea0e
Ambassador can watch multiple namespaces ( #7516 )
...
* Ambassador can watch multiple namespaces
* update variable name per PR review
2021-04-22 00:22:31 -07:00
Cristian Calin
384d30b675
add support for configuring cri-o pids_limit ( #7525 )
2021-04-21 10:55:51 -07:00
Cristian Calin
add61868c6
Add Calico v3.17.3 and v3.18.1 ( #7524 )
...
* add hashes for calico v3.17.3
* add hashes for claico v3.18.1
* bump default calico version to v3.17.3
* calico crds are missing yaml separator breaking kdd
2021-04-21 10:45:51 -07:00
Florian Ruynat
b599f3084f
Fix OpenStack StyleGuide rule H216 (On by default in latest version) ( #7535 )
...
ref: b921c4de51
2021-04-21 09:04:11 -07:00
Xachman
a7493e26e1
add enablerepo: amzn2extra-docker for docker install on aws 2 ( #7507 )
2021-04-21 07:24:10 -07:00
Kenichi Omichi
ae3a1d7c01
Fix keepcache values of yum_repository ( #7506 )
...
As the official document[1], the parameter keepcache should be
'0' or '1' as string. To avoid the following warning message,
this fixes the parameter value:
[WARNING]: The value False (type bool) in a string field was
converted to u'False' (type string). If this does not look
like what you expect, quote the entire value to ensure it
does not change.
https://docs.ansible.com/ansible/latest/collections/ansible/builtin/yum_repository_module.html
2021-04-21 07:20:11 -07:00
Mathieu Parent
e39e3d5c26
Fix OpenId Connect example prefixes ( #7527 )
...
Fixes "mapping values are not allowed in this context
2021-04-20 17:32:10 -07:00
holmesb
1e7d48846a
Fixes issue #7528 - allow configuring CALICO_STARTUP_LOGLEVEL via a new variable: calico_node_startup_loglevel ( #7530 )
...
Signed-off-by: Brendan Holmes <5072156+holmesb@users.noreply.github.com>
2021-04-20 15:37:42 -07:00
Florian Ruynat
6001edeecd
Cleanup hashes and 1.18 hooks ( #7534 )
2021-04-20 15:34:33 -07:00
Frank Ritchie
ce0b7834ff
Refactor cilium_ipsec_enabled check ( #7520 )
...
This is a followup to
https://github.com/kubernetes-sigs/kubespray/pull/7413
Although the code worked there was a desire for a better solution.
Hopefully people will be happy with this alternative.
2021-04-19 02:06:36 -07:00
Cristian Klein
3ac92689f0
exoscale: Rework EIP access from workers ( #7337 )
...
Context: Load-balancing in Exoscale is performed by associating many
workers with the same EIP. This works, however, the workers cannot access
themselves via the EIP, which is needed at least for cert-managers
"self-test".
Problem: The old iptables based workaround felt fragile and disappointed
me at least once.
New solution: Add the EIP to a loopback interface on each worker.
2021-04-16 03:22:22 -07:00
Florian Ruynat
1c0836946f
Update default Kubernetes version to 1.20.6
2021-04-15 22:26:22 -07:00
Florian Ruynat
bccbe323b7
Add new kubernetes hashes (1.19.10, 1.20.6)
2021-04-15 22:26:22 -07:00
Samuel Liu
d73249a793
Add bash-completion package ( #7510 )
2021-04-15 08:33:50 -07:00
Florian Ruynat
cd9a03f86c
Update some docker defaults ( #7499 )
2021-04-14 15:13:07 -07:00
muzi502
b47c21c683
Remove some bash completion file when reset cluster ( #7502 )
2021-04-14 11:07:09 -07:00
Florian Ruynat
6de5303e3f
Fix sample inventory (offline template) ( #7498 )
2021-04-14 03:28:43 -07:00
Krystian Młynek
2a2fb68b2f
Add missing proxy environment in crio_repo.yml ( #7492 )
2021-04-13 01:20:51 -07:00
Samuel Liu
844ebb7838
fix offline mode ( #7493 )
...
* fix offline mode
* add offline messages
2021-04-13 00:46:50 -07:00
Etienne Champetier
332cc1cd58
Check if python netaddr and recent enough jinja are installed ( #7486 )
...
CentOS 7 provides up to date Ansible with really old jinja version
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-04-13 00:43:01 -07:00
Peter Zhang
e7ce83016e
correct a wrong word ( #7484 )
...
* correct a wrong word
* correct a wrong word
2021-04-13 00:42:50 -07:00
Etienne Champetier
bf6a39eb84
Add auto_renew_certificates_systemd_calendar ( #7490 )
...
This allow to configure when K8S certificates renewal runs
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-04-12 09:47:45 -07:00
Florian Ruynat
42382e2cde
Update Terraform/Vagrant + increase tf_ovh retries ( #7477 )
2021-04-12 09:47:39 -07:00
Zachary Chang
f8e4650791
Fix typo ( #7489 )
2021-04-12 09:43:38 -07:00
Etienne Champetier
e444b3c140
Regenerate apiserver.crt on all control-plane nodes ( #7463 )
...
We were regenerating only the cert of the first node
While at it speed up the check step
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-04-12 09:17:38 -07:00
emiran-orange
d56ac216f4
Use kubeadm_feature_gates instead of kube_feature_gates to leverage kubeadm feature gates and not to interfere with k8s components feature gates ( #7447 )
2021-04-12 01:05:59 -07:00
Zhong Jianxin
420a412234
Add containerd_extra_args ( #7461 )
...
* Add containerd_extra_args
This is useful for custom containerd config, e.g. auth
Signed-off-by: Zhong Jianxin <azuwis@gmail.com>
* Make containerd config.toml mode 0640
It may contain sensitive information like password
Signed-off-by: Zhong Jianxin <azuwis@gmail.com>
2021-04-12 01:02:00 -07:00
Samuel Liu
90c643f3ab
format ansible output ( #7482 )
2021-04-11 00:37:59 -07:00
Mathieu Parent
1d4e380231
Remove containerd_runtimes var in k8s-cluster.yml ( #7476 )
...
Also set in all/containerd.yml
2021-04-09 10:25:17 -07:00
Florian Ruynat
6d293ba899
Update hashes with 1.21.0 ( #7478 )
2021-04-09 08:05:05 -07:00
Florian Ruynat
aa086e5407
Remove dead code from kubeadm-etcd ( #7470 )
2021-04-09 01:10:47 -07:00
Sergey
cce0940e1f
add CI test for auto_renew_certificates ( #7472 )
...
* add CI test for auto_renew_certificates
* change timer value
fix typo error in rotate cert script
2021-04-09 00:42:47 -07:00
Florian Ruynat
daed3e5b6a
Use v2.15.1 as base image for CI ( #7466 )
2021-04-08 12:28:02 -07:00
Samuel Liu
e2a7f3e2ab
remove-node roles: fix kubectl absolute path ( #7469 )
...
* kubelet absolute path
* kubelet absolute path
2021-04-08 12:24:02 -07:00
Kenichi Omichi
5a351b4b00
Add condition for audit_webhook_mode batch ( #7444 )
...
According to the document[1], audit-webhook-batch-max-size and
audit-webhook-batch-max-wait are used only in the batch mode.
This adds a condition to avoid unnecessary writting on the config.
[1]: https://kubernetes.io/docs/tasks/debug-application-cluster/audit/#batching
2021-04-08 07:52:56 -07:00
Frank Ritchie
6f2abbf79c
Move cilium kvstore settings to configmap ( #7462 )
...
This PR is to move the cilium kvstore options to the configmap
rather than specifying them in the deployment as args. This
is not technically necessary but keeping all the options in
one place is probably not a bad idea.
Tested with cilium 1.9.5.
2021-04-08 07:32:56 -07:00
Florian Ruynat
bef1e628ac
Fix issue with 'latest' in containerd version ( #7459 )
2021-04-07 08:33:53 -07:00
Samuel Liu
7340a163a4
fix scale ( #7449 )
2021-04-07 01:35:53 -07:00
Frank Ritchie
a6622b176b
Update cilium_ipsec_enabled check ( #7413 )
...
When attempting a fresh install without cilium_ipsec_enabled I ran
into the following error:
failed: [k8m01] (item={'name': 'cilium', 'file': 'cilium-secret.yml', 'type': 'secret', 'when': 'cilium_ipsec_enabled'}) =>
{"ansible_loop_var": "item", "changed": false, "item": {"file": "cilium-secret.yml", "name": "cilium", "type": "secret",
"when": "cilium_ipsec_enabled"},"msg": "AnsibleUndefinedVariable: 'cilium_ipsec_key' is undefined"}
Moving the when condition from the item level to the task level solved
the issue.
2021-04-06 06:17:33 -07:00
Maciej Wereski
771a5e26bb
Add KubeSchedulerConfiguration for k8s 1.19 and up ( #7351 )
...
* Add KubeSchedulerConfiguration for k8s 1.19 and up
With release of version 1.19.0 of kubernetes KubeSchedulerConfiguration
was graduated to beta. It allows to extend different stages of
scheduling with profiles. Such effect is achieved by using plugins and
extensions.
This patch adds KubeSchedulerConfiguration for versions 1.19 and later.
Configuration is set to k8s defaults or to kubespray vars. Moving those
defaults to new vars will be done in following patch.
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
* KubeSchedulerConfiguration: add defaults
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2021-04-06 00:35:35 -07:00
Necatican Yıldırım
be278f9dba
Add documentation for audit webhook variables ( #7434 )
...
* Add documentation for audit webhook variables
* Enclose the value of audit_webhook_server_url in a codeblock
* Add default value for audit_webhook_batch_max_wait
2021-04-05 13:51:19 -07:00
Florian Ruynat
6479e26904
Replace deprecated 'with_dict' with 'loop' ( #7442 )
2021-04-05 13:45:19 -07:00
Florian Ruynat
1c7053c9d8
Fix CI template for etcd recover jobs (kube-master rename) ( #7441 )
2021-04-05 13:41:19 -07:00
Maxime Lavandier
596d0289f8
Remove calico-rr from local inventory hosts file ( #7439 )
2021-04-05 05:24:12 -07:00
Samuel Liu
7df7054bdc
remove local lb privileged ( #7437 )
2021-04-05 05:22:14 -07:00
dsy3502
5377aac936
fix typo ( #7436 )
2021-04-05 01:20:19 -07:00
Necatican Yıldırım
ceb6c172ad
Crun v0.19 support ( #7433 )
...
* Add support for crun v0.19
* Change default crun version to v0.19
2021-04-05 01:20:13 -07:00
Samuel Liu
7f52c1d3a2
reset roles need flush iptables:raw ( #7426 )
2021-04-05 01:16:13 -07:00
Kenichi Omichi
af1e16b934
Remove old note related to offline installation ( #7429 )
...
The PR https://github.com/kubernetes-sigs/kubespray/pull/6927 has been
merged and the issue https://github.com/kubernetes-sigs/kubespray/issues/6233
was fixed.
This removes unnecessary note for the above PR.
2021-04-02 09:48:11 -07:00
Daniil Muidinov
2257181ca8
Set containerd version to 1.4.4 ( #7398 )
...
* Set containerd version to 1.4.3
* Set containerd version to 1.4.4
Co-authored-by: Barry Melbourne <9964974+bmelbourne@users.noreply.github.com>
2021-04-01 23:20:11 -07:00
orange-llajeanne
7e75d48cc4
local provisioner 'useNodeNameOnly' option can be configured ( #7421 )
2021-04-01 16:54:11 -07:00
Pasquale Toscano
6330db89a7
Update KataContainers to 1.12.1 ( #7427 )
2021-04-01 08:55:21 -07:00
Frank Ritchie
f05d6b3711
Add cilium_ipam_mode variable ( #7418 )
...
Starting with Cilium v1.9 the default ipam mode has changed to "Cluster
Scope". See:
https://docs.cilium.io/en/v1.9/concepts/networking/ipam/
With this ipam mode Cilium handles assigning subnets to nodes to use
for pod ip addresses. The default Kubespray deploy uses the Kube
Controller Manager for this (the --allocate-node-cidrs
kube-controller-manager flag is set). This makes the proper ipam mode
for kubespray using cilium v1.9+ "kubernetes".
Tested with Cilium 1.9.5.
This PR also mounts the cilium-config ConfigMap for this variable
to be read properly.
In the future we can probably remove the kvstore and kvstore-opt
Cilium Operator args since they can be in the ConfigMap. I will tackle
that after this merges.
2021-04-01 07:33:22 -07:00
Helmut Januschka
cce9d3125d
Update k8s-certs-renew.sh.j2 ( #7422 )
...
fix undefinedElse
2021-03-31 00:00:58 -07:00
Etienne Champetier
e381ce57e2
Remove left over nodes_to_drain ( #7412 )
...
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-29 16:17:56 -07:00
Fernando
5dbce6a2bd
add support for custom calico port ( #7419 )
2021-03-29 08:38:45 -07:00
Frank Ritchie
5b0e88339a
Update cilium-operator clusterrole ( #7416 )
...
When upgrading cilium from 1.8.8 to 1.9.5 I ran into the following
error:
level=error msg="Unable to update CRD" error="customresourcedefinitions.apiextensions.k8s.io
\"ciliumnodes.cilium.io\" is forbidden: User \"system:serviceaccount:kube-system:cilium-operator\"
cannot update resource \"customresourcedefinitions\" in API group \"apiextensions.k8s.io\" at the
cluster scope" name=CiliumNode/v2 subsys=k8s
The fix was to add the update verb to the clusterrole. I also added
create to match the clusterrole created by the cilium helm chart.
2021-03-29 00:04:51 -07:00
Samuel Liu
db43891f2b
remove unused handlers in cilium roles ( #7414 )
2021-03-29 00:04:44 -07:00
Terry
f72063e7c2
Remove DNSSEC config management in bootstrap-debian.yml ( #7408 )
...
DNSSEC is off by default on ubuntu/bionic64 (18.04) as per resolved.conf(5).
These tasks are artefacts of obsolete infra configuration, and no longer needed.
Further removing these tasks resolves the issue that the tasks always reports
'changed' and bounces systemd-resolved unneccesarily, even if there was no
actual modification of /etc/systemd/resolved.conf.
2021-03-29 00:00:45 -07:00
Etienne Champetier
36a3a78952
Fix remove-node by removing jq usage ( #7405 )
...
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-26 08:48:43 -07:00
Etienne Champetier
2d1597bf10
Fix k8s-certs-renew for k8s < 1.20 ( #7410 )
...
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-26 08:44:44 -07:00
Anthony Rabbito
edfa3e9b14
Correct Jinja Syntax for etcd-unsupported-arch ( #6919 )
...
`-%` causes `etcd-unsupported-arch: arm64` to print on COL 1 instead of
COL 6.
Signed-off-by: anthr76 <hello@anthonyrabbito.com>
2021-03-26 02:10:43 -07:00
Kaleb Elwert
6fa3565dac
Allow connecting to bastion via non-standard SSH port ( #7396 )
...
* Allow connecting to bastion via non-standard port
* Fix bastion connection when ansible_port is not provided
2021-03-26 00:48:43 -07:00
rptaylor
7dec8e5caa
specify runAsGroup, allow safe sysctls by default ( #7399 )
2021-03-25 08:03:30 -07:00
Kenichi Omichi
49abf6007a
Add cryptography installation ( #7404 )
...
To avoid ModuleNotFoundError due to no module named 'setuptools_rust',
this adds cryptography installation to requirements.txt.
Created by jfc-evs originally as https://github.com/kubernetes-sigs/kubespray/pull/7264
2021-03-25 05:15:29 -07:00
Etienne Champetier
f0cdf71ccb
Remove vault ( #7400 )
...
* Remove contrib/vault
This is marked as broken since 2018 / 3dcb914607
This still reference apiserver.pem, not used since ddffdb63bf
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
* Finish nuking vault from the codebase
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-24 09:26:08 -07:00
Boris Barnier
8655b92e93
Set Kube-router version to 1.2.0 ( #7402 )
...
See: `https://github.com/cloudnativelabs/kube-router/releases/tag/v1.2.0 `
2021-03-24 09:22:07 -07:00
Jacky Wu
e1c6992c55
fix: correct hardcoded macvlan template, use var macvlan_interface. ( #7401 )
2021-03-24 01:46:06 -07:00
Kenichi Omichi
486b223e01
Replace kube-master with kube_control_plane ( #7256 )
...
This replaces kube-master with kube_control_plane because of [1]:
The Kubernetes project is moving away from wording that is
considered offensive. A new working group WG Naming was created
to track this work, and the word "master" was declared as offensive.
A proposal was formalized for replacing the word "master" with
"control plane". This means it should be removed from source code,
documentation, and user-facing configuration from Kubernetes and
its sub-projects.
NOTE: The reason why this changes it to kube_control_plane not
kube-control-plane is for valid group names on ansible.
[1]: https://github.com/kubernetes/enhancements/blob/master/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md#motivation
2021-03-23 17:26:05 -07:00
Qasim Sarfraz
d53fd29e34
Add support for cilium ipsec ( #7342 )
...
* Add support for cilium ipsec
* Fix typo for bpffs
2021-03-23 13:46:06 -07:00
Maciej Wereski
4f89bfac48
MetalLB: bump to v0.9.6 ( #7397 )
...
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2021-03-23 13:42:06 -07:00
p53
5fee96b404
Fix cinder cert permissions ( #7384 )
...
* Fix permissions of cinder cert
* Change runuser for external_cloud_controller to kube user with id 999, part of 999 - kube-cert group
2021-03-23 11:03:37 -07:00
Samuel Liu
12873f916b
download_file for kata ( #7393 )
2021-03-23 01:39:36 -07:00
Etienne Champetier
efa180392b
Auto renew control plane certificates ( #7358 )
...
While at it remove force_certificate_regeneration
This boolean only forced the renewal of the apiserver certs
Either manually use k8s-certs-renew.sh or set auto_renew_certificates
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-22 11:22:48 -07:00
Florian Ruynat
6d9ed398e3
Set default k8s version to 1.20.5
2021-03-19 10:04:34 -07:00
Florian Ruynat
6d3dbb43a4
Update hashes for 1.20.5/1.19.9/1.18.17
2021-03-19 10:04:34 -07:00
Necatican Yıldırım
811f546ea6
Download crun using download_file.yml ( #7370 )
...
* Add crun download_url and checksum
* Change versioning format to crun native versioning
* Download crun using download_file.yml
* Get crun version from download defaults
* Delegate crun binary copy task to crun role
2021-03-19 08:40:33 -07:00
Florian Ruynat
ead8a4e4de
Fix calico crds missing 3.16.9 ( #7386 )
2021-03-19 06:58:34 -07:00
Florian Ruynat
05f132c136
Update CNI (calico, kubeovn, multus) and Helm
2021-03-18 17:20:36 -07:00
Florian Ruynat
5f2c8ac38f
Update nodelocaldns to 1.17.1
2021-03-18 17:20:36 -07:00
Florian Ruynat
14511053aa
Update docker to 20.10.5
2021-03-18 17:20:36 -07:00
LuciferInLove
8353532a09
Added experimental cri-o support for Amazon Linux 2 ( #7353 )
...
* Added experimental cri-o support for Amazon Linux 2
* Fixed dependencies order
2021-03-18 17:16:37 -07:00
Erwan Miran
1c62af0c95
Download Calico KDD CRDs ( #7372 )
...
* Download Calico KDD CRDs
* Replace kustomize with lineinfile and use ansible assemble module
* Replace find+lineinfile by sed in shell module to avoid nested loop
* add condition on sed
* use block for kdd tasks + remove supernumerary kdd manifest apply in start "Start Calico resources"
2021-03-18 17:06:36 -07:00
Mikael Johansson
f103ac7640
Change default OCCM internal and public networks variables to empty lists ( #7380 )
...
Signed-off-by: Mikael Johansson <mik.json@gmail.com>
2021-03-18 16:52:36 -07:00
Samuel Liu
274e06a48d
add etcd max snapshot and wals ( #7382 )
2021-03-18 16:48:36 -07:00
zhangshj-inspur
a39f306184
correct a wrong word ( #7383 )
2021-03-18 00:55:19 -07:00
Maciej Wereski
69d11daef6
Upgrade openSUSE Leap to 15.2 ( #7331 )
...
15.1 has reached EOL on 2021-02-02.
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2021-03-17 09:12:56 -07:00
Etienne Champetier
057e8b4358
Fixup one more missing kubespray-defaults ( #7375 )
...
"The error was: 'proxy_disable_env' is undefined\n\nThe error appears to
be in '<censored>scale.yml': line 72, column 7"
Fixes 067db686f6
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-15 07:09:05 -07:00
Florian Ruynat
18c0e54e4f
Add most_recent = true while retrieving the latest image ( #7376 )
2021-03-15 07:05:06 -07:00
Kenichi Omichi
85007fa9a7
Update upgrades.md ( #7361 )
...
upgrades.md explains how to do upgrade from v1.4.3 to v1.4.6 as an
example. The versions are a little old, and the doc readers would
have a concern the upgrade works fine or not.
This updates versions after verifying the way works fine by hands.
2021-03-15 03:59:05 -07:00
Ewnetu Bayuh Lakew
5c5bf41afe
Terraform support for UpCloud ( #7360 )
...
* terraform support for UpCloud
* terraform support for UpCloud
* terraform support for UpCloud
* terraform support for UpCloud
* terraform support for UpCloud
* terraform support for UpCloud
* terraform support for UpCloud
* Updates to README.md and main.tf files
* formatting and updating readme
* added a .terraform_validate CI job
* fixed format issue
* added sample inventory
* added symbolic link to group_vars
* added missing tf variables and minor fixes
* added text formatting
* minor formatting fixes
2021-03-15 01:41:04 -07:00
Robin Opletal
5dba53a223
Fix dynamic inventory link ( #7367 )
2021-03-11 06:46:22 -08:00
Victor Morales
2bcd9eb9e9
Bump crun to 0.18 version ( #7364 )
2021-03-11 00:00:24 -08:00
Lennart Jern
5a54db2f3c
Check for dummy kernel module ( #7348 )
...
The dummy module is needed for nodelocaldns.
2021-03-09 08:07:00 -08:00
Sergey Mikhaltsov
b47542b003
disable gather_facts for correctly work via bastion ( #7265 )
2021-03-09 01:47:00 -08:00
Etienne Champetier
14b63ede8c
Fixup kubelet.conf to point to kubelet-client-current.pem ( #7347 )
...
c9c0c01de0
only fix the problem for new clusters
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-08 23:55:00 -08:00
Maciej
b07c5966a6
ansible and jinja2 updates ( #7357 )
...
* Update ansible to v2.9.18
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
* Update jinja2 to v2.11.3
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2021-03-08 11:42:59 -08:00
François Hernandez
c7db72e1da
Add nodeselector and tolerations for metallb ( #7334 )
...
* add nodeselector and tolerations for metallb
* remove unnecessary commented lines in metallb template
* set default speaker toleration to match original manifest
2021-03-08 07:57:42 -08:00
Victor Morales
dc5df57c26
Add privileged_without_host_devices support ( #7343 )
...
When privileged is enabled for a container, all the `/dev/*` block
devices from the host are mounted into the guest. The
`privileged_without_host_devices` flag prevents host devices from
being passed to privileged containers.
More information:
* https://github.com/containerd/cri/pull/1225
* 1d0f68156b
2021-03-08 00:17:44 -08:00
Etienne Champetier
a9c97e5253
Delete misnammed kubeadm-version.yml
...
The important action in kubeadm-version.yml is the templating of the configuration,
not finding / setting the version
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-04 23:42:22 -08:00
Etienne Champetier
53e5ef6b4e
Always backup both certs and kubeconfig
...
There are no reasons not to backup during upgrade
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-04 23:42:22 -08:00
Etienne Champetier
8800b5c01d
Remove rotate_tokens logic
...
kubeadm never rotates sa.key/sa.pub, so there is no need to delete tokens/restart pods
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-04 23:42:22 -08:00
Etienne Champetier
280036fad6
Remove admin.conf removal
...
kubeadm is the default for a long time now,
and admin.conf is created by it, so let kubeadm handle it
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-04 23:42:22 -08:00
Etienne Champetier
a6e1f5ece9
Remove useless call to 'kubeadm version'
...
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-04 23:42:22 -08:00
Etienne Champetier
fedd671d68
Remove pre kubeadm cert migration tasks
...
apiserver.pem is not used since ddffdb63bf
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-04 23:42:22 -08:00
Du9L.com
b7c22659e3
kubeadm-config.v1beta2.yaml.j2: etcd log level arg ( #7339 )
...
According to [etcd's docs](https://etcd.io/docs/v3.4.0/op-guide/configuration/#--log-package-levels ), argument 'log-package-levels' should not contain underscores.
2021-03-03 11:39:50 -08:00
Etienne Champetier
c9c0c01de0
Stop using kubeadm to update server in kubeconfigs ( #7338 )
...
Using `kubeadm init phase kubeconfig all` breaks kubelet client certificate rotation
as we are missing `kubeadm init phase kubelet-finalize all` to point to `kubelet-client-current.pem`
kubeconfig format is stable so let's just use lineinfile,
this will avoid other future breakage
This revert to the logic before 6fe2248314
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-03 09:39:20 -08:00
Etienne Champetier
e442b1d2b9
Add kube-ipvs0/nodelocaldns to NetworkManager unmanaged-devices ( #7315 )
...
On CentOS 8 they seem to be ignored by default, but better be extra safe
This also make it easy to exclude other network plugin interfaces
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-03-03 07:27:20 -08:00
yydzhou
e9f4ff227e
fix master node taint removal bug ( #7336 )
...
code improvement
2021-03-03 05:35:20 -08:00
Florian Ruynat
668bbe0528
Update Kubernetes dashboard and metrics-server
2021-03-02 08:33:19 -08:00
Florian Ruynat
e045a45e48
Update docker & docker-cli to 20.10.4
2021-03-02 08:33:19 -08:00
Sergey
2c9fc18903
template crun manifest ( #7305 )
...
add missing else to if inline
2021-03-02 01:57:19 -08:00
Emil
d4eecac108
add option to use calico with azure when using calico in vxlan ( #7300 )
2021-03-02 01:03:19 -08:00
Kenichi Omichi
ef351e0234
Update dashboard_enabled on sample ( #7316 )
...
Since https://github.com/kubernetes-sigs/kubespray/pull/6804
dashboard_enabled has been false by default.
However we forgot to update it on sample inventory and it made
confusion.
This updates the sample inventory.
2021-03-02 00:59:19 -08:00
Florian Ruynat
05adeed1fa
Fix recover-control-plane undefined 'proxy_disable_env' variable ( #7326 )
2021-03-01 13:38:16 -08:00
stress-t
15f1b19136
Fix: added string to bool conversion for use_localhost_as_kube api load balancer ( #7324 )
2021-03-01 11:53:36 -08:00
wangxf
154fa45422
fix: the filename </etc/vault> is Duplicate in the reset role. ( #7313 )
2021-03-01 11:53:25 -08:00
Florian Ruynat
e35becebf8
Move centos7-crio CI job to centos8 ( #7327 )
2021-03-01 09:57:26 -08:00
Viktor
bdd36c2d34
Update default exoscale master with more RAM ( #7328 )
...
The default master size for exoscale is 2cpu and 2GB ram.
I have found this to be too low, so this increases it to
2cpu and 4GB ram.
2021-03-01 09:41:25 -08:00
Jakub Krzywda
0a0156c946
Vsphere ( #7306 )
...
* Add terraform scripts for vSphere
* Fixup: Add terraform scripts for vSphere
* Add inventory generation
* Use machines var to provide IPs
* Add README file
* Add default.tfvars file
* Fix newlines at the end of files
* Remove master.count and worker.count variables
* Fixup cloud-init formatting
* Fixes after initial review
* Add warning about disabled DHCP
* Fixes after second review
* Add sample-inventory
2021-02-26 04:20:15 -08:00
Florian Ruynat
100d9333ca
Add configmaps to local-path-provisioner CR ( #7323 )
2021-02-25 16:22:17 -08:00
Sergey Mikhaltsov
a4cc416511
use external_openstack_lbaas_use_octavia for template openstack-cloud… ( #7298 )
...
* use external_openstack_lbaas_use_octavia for template openstack-cloud-config
* Delete external_openstack_lbaas_use_octavia from default values. Added description and default values of variables to docs
* markdown fix
* make this simple
* set external_openstack_lbaas_use_octavia in default values
* duplicated variable in doc
2021-02-25 11:25:25 -08:00
Kenichi Omichi
2ea5793782
Replace KUBE_MASTERS with KUBE_CONTROL_HOSTS ( #7257 )
...
This replaces KUBE_MASTERS with KUBE_CONTROL_HOSTS because of [1]:
```
The Kubernetes project is moving away from wording that is
considered offensive. A new working group WG Naming was created
to track this work, and the word "master" was declared as offensive.
A proposal was formalized for replacing the word "master" with
"control plane". This means it should be removed from source code,
documentation, and user-facing configuration from Kubernetes and
its sub-projects.
```
[1]: https://github.com/kubernetes/enhancements/blob/master/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md#motivation
2021-02-23 10:00:03 -08:00
Kenichi Omichi
0ddf915027
Update Ansible to v2.9.17 ( #7291 )
...
This updates Ansible version to the latest stable version 2.9.17.
2021-02-23 09:54:03 -08:00
Etienne Champetier
067db686f6
Fix proxy usage when *_PROXY are present in environment ( #7309 )
...
Since a790935d02
all proxy users
should be properly configured
Now when you have *_PROXY vars in your environment it can leads to failure
if NO_PROXY is not correct, or to persistent configuration changes
as seen with kubeadm in 1c5391dda7
Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere
at the play level, and override at the task level when needed
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-23 09:44:02 -08:00
Etienne Champetier
ed2b4b805e
Fix reset when using containerd ( #7308 )
...
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-22 12:44:03 -08:00
Hugo Blom
8375aa72e2
[Openstack] Update Cinder CSI driver to v1.20.0 ( #7280 )
...
* update Cinder CSI to v1.19.0
* Update Cinder CSI to v1.20
2021-02-22 10:09:42 -08:00
Florian Ruynat
6334e4bd84
Set Kubernetes default version to 1.20.4
2021-02-22 08:45:42 -08:00
Florian Ruynat
86ce8aac85
Add hashes for Kubernetes 1.18.16/1.19.8/1.20.4
2021-02-22 08:45:42 -08:00
Florian Ruynat
de46f86137
Minor update to cilium and calico
2021-02-22 08:45:42 -08:00
FedericoHeichou
5616b08229
Adding else in the inline if-expression ( #7292 )
...
Fix "AnsibleUndefinedVariable: the inline if-expression on line xx evaluated to false and no else section was defined."
2021-02-20 02:05:41 -08:00
Hugo Blom
8682a57ea3
use image id instad of name ( #7293 )
2021-02-19 09:16:25 -08:00
Etienne Champetier
662a37ab4f
Fix "api is up" check ( #7295 )
...
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-19 09:12:25 -08:00
Sergey
42947c9840
return the ability to update calico from 3.x.x version ( #7290 )
...
version check fixed
2021-02-17 00:07:06 -08:00
Etienne Champetier
3749729d5a
Remove calico-upgrade leftovers ( #7282 )
...
This is dead code since 28073c76ac
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-16 11:24:58 -08:00
Etienne Champetier
fb8b075110
facts.yaml: reduce the number of setup calls by ~7x ( #7286 )
...
Before this commit, we were gathering:
1 !all
7 network
7 hardware
After we are gathering:
1 !all
1 network
1 hardware
ansible_distribution_major_version is gathered by '!all'
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-16 09:34:58 -08:00
Etienne Champetier
1c5391dda7
Ensure kubeadm doesn't use proxy ( #7275 )
...
* Move proxy_env to kubespray-defaults/defaults
There is no reasons to use set_facts here
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
* Ensure kubeadm doesn't use proxy
*_proxy variables might be present in the environment (/etc/environment, bash profile, ...)
When this is the case we end up with those proxy configuration in /etc/kubernetes/manifests/kube-*.yaml manifests
We cannot unset env variables, but kubeadm is nice enough to ignore empty vars
93d288e2a4/cmd/kubeadm/app/util/env.go (L27)
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-16 08:44:58 -08:00
Hugo Blom
f2d10e9465
allow users to set image_uuid instead of name, this allows the use of openstack community images ( #7283 )
2021-02-16 07:05:06 -08:00
stress-t
796d3fb975
Improving PR 6473 ( #7259 )
2021-02-16 05:19:05 -08:00
Etienne Champetier
5c04bdd52b
Fixup cri-o metacopy mount options ( #7287 )
...
Ubuntu 18.04 crio package ships with 'mountopt = "nodev,metacopy=on"'
even if GA kernel is 4.15 (HWE Kernel can be more recent)
Fedora package ships without metacopy=on
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-15 20:51:07 -08:00
Hugo Blom
17143dbc51
write openstack controller manifests with correct perms ( #7284 )
2021-02-15 00:53:05 -08:00
Hugo Blom
1c8bba36db
make sure worker rules is applied on workers ( #7279 )
2021-02-12 12:43:05 -08:00
Etienne Champetier
95b329b64d
bootstrap-os: match on os-release ID / VARIANT_ID ( #7269 )
...
This fixes deployment with CentOS 8 Streams and make detection more reliable
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-11 08:14:16 -08:00
Etienne Champetier
de1d9df787
Only use stat get_checksum: yes when needed ( #7270 )
...
By default Ansible stat module compute checksum, list extended attributes and find mime type
To find all stat invocations that really use one of those:
git grep -F stat. | grep -vE 'stat.(islnk|exists|lnk_source|writeable)'
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2021-02-10 05:36:59 -08:00
Cristian Calin
6450207713
add containerd.io to dpkg_selection ( #7273 )
...
`containerd.io` is the companion package of `docker-ce` and is the
proper package name. This is needed to avoid apt upgrade/dist-upgrade
from breaking kubernetes.
2021-02-10 04:48:59 -08:00
Florian Ruynat
edc4bb4a49
Update kube-ovn to 1.6.0 ( #7240 )
2021-02-10 02:25:01 -08:00
Sergey
a21ee33180
fix typo error in role ingress-nginx ( #7272 )
2021-02-09 07:53:13 -08:00
Takashi IIGUNI
bcaa31ae33
fix: Restart network doesn't work on Fedora CoreOS ( #7271 )
...
Running remove-node.yml tasks for clean up cluster on Fedora CoreOS.
The task failed to restart network daemon (task name: "reset | Restart network").
Fedora CoreOS is essentially using NetworkManager, but this task returns network.
Signed-off-by: Takashi IIGUNI <iiguni.tks@gmail.com>
2021-02-09 06:35:04 -08:00
David Louks
0cc1726781
Remove deletion of coredns deployment. ( #7211 )
...
* Add unique annotation on coredns deployment and only remove existing deployment if annotation is missing.
* Ignore errors when gathering coredns deployment details to handle case where it doesn't exist yet
* Remove run_once, deletegate_to and add to when statement
2021-02-09 06:02:40 -08:00
David Louks
aad78840a0
Updated etcd cert check tasks to detect when new cert gen is required ( #7219 )
...
* Added force_etcd_cert_refresh var to maintain existing functionality. Broke out etcd node cert syncing from member and admin cert sync logic. Now first etcd will sync node certs to other etcd members on every run to keep all etcds up to date after adding additional worker nodes to the cluster
* Updated etcd cert check tasks to better detect when new certificates need to be generated
* Move usage of force_etcd_cert_refresh var to gen_certs fact set
* Force etcd cert generation per server if force_etcd_cert_refresh is set to true
* Include gathering of node certs even if k8s-cluster member and in etcd group.
* Removed run_once due to when statement
2021-02-09 01:53:22 -08:00
Vyacheslav
e3ab665e90
Update main.yml ( #7267 )
...
````
TASK [bootstrap-os : Enable RHEL 8 repos] ***************************************************************************************************************************************************************************************************
fatal: [node6]: FAILED! => {"changed": false, "msg": "This system has no repositories available through subscriptions"}
fatal: [node7]: FAILED! => {"changed": false, "msg": "This system has no repositories available through subscriptions"}
fatal: [node1]: FAILED! => {"changed": false, "msg": "This system has no repositories available through subscriptions"}
root@node1:/kubespray# cat /etc/os-release
NAME="Ubuntu"
VERSION="18.04.5 LTS (Bionic Beaver)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 18.04.5 LTS"
VERSION_ID="18.04"
HOME_URL="https://www.ubuntu.com/ "
SUPPORT_URL="https://help.ubuntu.com/ "
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/ "
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy "
VERSION_CODENAME=bionic
UBUNTU_CODENAME=bionic
root@node1:/kubespray#
```
2021-02-08 10:25:37 -08:00
Geonju Kim
1a91792e7c
Change the owner of /etc/crictl.yaml
to root
( #7254 )
2021-02-05 09:28:53 -08:00
Mathieu Parent
670c37b428
Update Helm version to 3.5.2 ( #7248 )
...
Helm v3.5.2 is a security (patch) release. Users are strongly
recommended to update to this release. It fixes two security issues in
upstream dependencies and one security issue in the Helm codebase.
See https://github.com/helm/helm/releases/tag/v3.5.2
2021-02-05 08:16:52 -08:00
Arian van Putten
040dacd5cd
roles/docker: Make repokey fingerprint overrideable ( #7247 )
...
This makes the docker role work the same as the containerd role.
Being able to override this is needed when you have your own debian
repository. E.g. when performing an airgapped installation
2021-02-05 07:44:52 -08:00
Maciej
59541de437
Vagrantfile: always recreate inventory symlink ( #7245 )
...
Fixes 7244
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2021-02-05 00:50:52 -08:00
petruha
fc8551bcba
Run containerd related tasks on OracleLinux. ( #7250 )
2021-02-05 00:46:52 -08:00
Matt Calvert
c2c97c36bc
Add in tests for Calico with dual-stack networking
2021-02-05 00:04:52 -08:00
Matt Calvert
211fdde742
Add IPv6 libvirt details to the Vagrantfile
2021-02-05 00:04:52 -08:00
Matt Calvert
366cbb3e6f
Ensure we gather IPv6 facts
2021-02-05 00:04:52 -08:00
Matt Calvert
a318624fad
Auto-add IPv6DualStack featureGate
...
When enable_dual_stack_networks is set, we need to make sure
IPv6DualStack=true is set too, otherwise we end up with
a broken cluster.
2021-02-05 00:04:52 -08:00
Matt Calvert
3cf5981146
Switch to use upstream kube_feature_gates logic
2021-02-05 00:04:52 -08:00
Matt Calvert
4cc065e66d
Changes to support Dual Stack networking
2021-02-05 00:04:52 -08:00
Florian Ruynat
ba731ed145
Update docker packages to 19.03.15 and 20.10.3 ( #7243 )
2021-02-04 13:20:53 -08:00
Cristian Klein
b77460ec34
contrib/terraform/exoscale: Rework SSH public keys ( #7242 )
...
* contrib/terraform/exoscale: Rework SSH public keys
Exoscale has a few limitations with `exoscale_ssh_keypair` resources.
Creating several clusters with these scripts may lead to an error like:
```
Error: API error ParamError 431 (InvalidParameterValueException 4350): The key pair "lj-sc-ssh-key" already has this fingerprint
```
This patch reworks handling of SSH public keys. Specifically, we rely on
the more cloud-agnostic way of configuring SSH public keys via
`cloud-init`.
* contrib/terraform/exoscale: terraform fmt
* contrib/terraform/exoscale: Add terraform validate
* contrib/terraform/exoscale: Inline public SSH keys
The Terraform scripts need to install some SSH key, so that Kubespray
(i.e., the "Ansible part") can take over. Initially, we pointed the
Terraform scripts to `~/.ssh/id_rsa.pub`. This proved to be suboptimal:
Operators sharing responbility for a cluster risk unnecessarily replacing resources.
Therefore, it has been determined that it's best to inline the public
SSH keys. The chosen variable `ssh_public_keys` provides some uniformity
with `contrib/azurerm`.
* Fix Terraform Exoscale test
* Fix Terraform 0.14 test
2021-02-03 07:32:28 -08:00
forselli-stratio
88bee6c68e
Fix ansible calico route reflector tasks in calico role ( #7224 )
...
* Fix calico-rr tasks
* revert stdin only when it's already a string
2021-02-03 07:22:29 -08:00
Sebastian Schmid
1f84d6344b
local-path-provisioner change default version to v0.0.19 and update config template ( #7238 )
...
* update local-path-storage config template to version v0.0.19
* changes local_path_provisioner image tag to v0.0.19
* removes copy paste example from rancher local-path-provisioner repo
2021-02-03 06:50:28 -08:00
Kenichi Omichi
699fbd64ab
Move recover_control_plane/master to control-plane ( #7236 )
...
According to the following recommendation, this moves the directory
to control-plane:
The Kubernetes project is moving away from wording that is considered
offensive. A new working group WG Naming was created to track this work,
and the word "master" was declared as offensive. A proposal was formalized
for replacing the word "master" with "control plane".
2021-02-03 02:06:29 -08:00
Maciej
b42bf39fb7
MetalLB: bump to v0.9.5 ( #7241 )
...
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2021-02-03 01:02:28 -08:00
Lennart Jern
5368d51d63
Mention docker image in readme ( #7239 )
2021-02-02 09:16:28 -08:00
Kenichi Omichi
c5db012c9a
Move kubernetes/master to kubernetes/control-plane ( #7218 )
...
This is a small step to replace "master" with "control-plane" in
Kubespray project.
2021-02-01 07:15:49 -08:00
Sander Cornelissen
b70d986bfa
Ensure when use_oracle_public_repo is set to false the public Oracle Linux yum repos are not set ( #7228 )
2021-01-29 03:59:41 -08:00
Felix Breuer
973628fc1b
FIX: Bastion undefined variable ( #7227 )
...
Fixes the following error when using Bastion Node with the sample config.
```
fatal: [bastion]: FAILED! => {"msg": "The task includes an option with an undefined variable. The error was: 'dict object' has no attribute 'bastion'\n\nThe error appears to be in '/home/felix/inovex/kubespray/roles/bastion-ssh-config/tasks/main.yml': line 2, column 3, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n---\n- name: set bastion host IP\n ^ here\n"}
```
2021-01-28 10:07:37 -08:00
Robin Elfrink
91fea7c956
Fix unintended SIGPIPEs. ( #7214 )
2021-01-27 01:07:40 -08:00
David Louks
d378d789cf
Add retries to drain during upgrade. Allow leaving nodes cordoned after drain failure. Allow continuing upgrade if drain fails. ( #7206 )
2021-01-26 11:10:31 -08:00
Florian Ruynat
9007d6621a
Update nginx, minor weave and misc CI tools (vagrant/terraform) ( #7215 )
2021-01-26 08:22:34 -08:00
Ryler Hockenbury
774ec49396
Update azure cloud config ( #7208 )
...
* Allow configureable vni and port for flannel overlay
* additional options for azure cloud config
2021-01-26 07:24:35 -08:00
Jorik Jonker
bba55faae8
calico: fix NetworkManager check ( #7169 )
...
Previous check for presence of NM assumed "systemctl show
NetworkManager" would exit with a nonzero status code, which seems not
the case anymore with recent Flatcar Container Linux.
This new check also checks the activeness of network manager, as
`is-active` implies presence.
Signed-off-by Jorik Jonker <jorik@kippendief.biz>
2021-01-25 23:52:34 -08:00
Etienne Champetier
8f2b0772f9
containerd,docker: stop installing extras repo on CentOS/RHEL ( #7203 )
...
This was introduced in 143e2272ff
Extra repo is enabled by default in CentOS, and is not the right repo for EL8
Instead of adding a CentOS repo to RHEL, enable the needed RHEL repos with rhsm_repository
For RHEL 7, we need the "extras" repo for container-selinux
For RHEL 8, we need the "appstream" repo for container-selinux, ipvsadm and socat
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-25 03:12:54 -08:00
Samuel Liu
1a409dc7ae
Add download bin tasks ( #7131 )
...
* Add downlaod bin tasks
* Add tags never and etcd
* yamllint
2021-01-22 20:41:39 -08:00
Fredrik Liv
404ea0270e
Added terraform support for Exoscale ( #7141 )
...
* Added terraform support for Exoscale
* Fixed markdown lint error on exoscale terraform
2021-01-22 20:37:39 -08:00
Florian Ruynat
ef939dee74
Add missing 'ingress-controller' tag to alb ( #7204 )
2021-01-22 19:11:39 -08:00
Etienne Champetier
f1576eabb1
Calico: fixup check when ipipMode / vxlanMode is not present ( #7195 )
...
calicoctl.sh get ipPool default-pool -o json
{
"kind": "IPPool",
"apiVersion": "projectcalico.org/v3",
"metadata": {
"name": "default-pool",
...
},
"spec": {
"cidr": "10.233.64.0/18",
"ipipMode": "Always",
"natOutgoing": true,
"blockSize": 24,
"nodeSelector": "all()"
}
}
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-21 20:39:26 -08:00
Etienne Champetier
49c4345c9a
preinstall: etcd group might not exists ( #7202 )
...
fixes 8c1821228d
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-21 14:31:02 -08:00
Maxime Guyot
f94182f77d
Add cleanup of openstack network ports in CI ( #7201 )
2021-01-21 12:51:02 -08:00
Florian Ruynat
222a77dfe7
Change node-role.kubernetes.io from master to control-plane ( #7183 )
2021-01-21 08:13:03 -08:00
Andrea Zonca
24ceee134e
Document the terraform option master_allowed_ports
( #7196 )
...
Implemented in #6547
2021-01-21 07:55:06 -08:00
Rick Haan
04c8a73889
Check kube-apiserver up on all masters before upgrade ( #7193 )
...
Only checking the kubernetes api on the first master when upgrading is not enough.
Each master needs to be checked before it's upgrade.
Signed-off-by: Rick Haan <rickhaan94@gmail.com>
2021-01-20 01:42:03 -08:00
Florian Ruynat
9a75501152
Promote node.k8s.io API groups from v1beta1 to v1
2021-01-19 08:57:45 -08:00
Florian Ruynat
f6fbbc17a4
Cleanup old checks for k8s 1.18 ( #7192 )
2021-01-19 08:43:45 -08:00
Florian Ruynat
15dc3868c3
Update Weave to 2.8.0 ( #7181 )
2021-01-19 08:35:48 -08:00
takmori_tech
2525d7aff8
Update main.yml ( #7175 )
...
Fix issue #7129 . Calico image tags support multiarch on quay.io.
2021-01-19 05:59:46 -08:00
Etienne Champetier
a5d2137ed9
containerd: ensure containerd is really started and enabled
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-19 05:55:45 -08:00
Etienne Champetier
a8e51e686e
containerd,docker: use apt_repository instead of action
...
yum_repository expect really different params, so nothing to factor here
Ubuntu is not an ansible_os_family, the OS family for Ubuntu is Debian
Check for ansible_pkg_mgr == apt
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-19 05:55:45 -08:00
Etienne Champetier
a2429ef64d
containerd,docker: use apt_key instead of action
...
we don't need rpm_key, so nothing to factor here
Ubuntu is not an ansible_os_family, the OS family for Ubuntu is Debian
Check for ansible_pkg_mgr == apt
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-19 05:55:45 -08:00
Etienne Champetier
1b88678cf3
containerd: use package instead of action
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-19 05:55:45 -08:00
Etienne Champetier
0e96852159
docker: use package instead of action, cleanup
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-19 05:55:45 -08:00
Etienne Champetier
19a61d838f
containerd: use copy to set apt pin
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-19 05:55:45 -08:00
Etienne Champetier
4eec302e86
preinstall: use package instead of action, use state: present
...
Before this commit we were upgrading base os packages on each run
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-19 05:55:45 -08:00
Etienne Champetier
f3885aa589
docker: stop using apt force
...
Here the desciption from Ansible docs
Corresponds to the --force-yes to apt-get and implies allow_unauthenticated: yes
This option will disable checking both the packages' signatures and the certificates of the web servers they are downloaded from.
This option *is not* the equivalent of passing the -f flag to apt-get on the command line
**This is a destructive operation with the potential to destroy your system, and it should almost never be used.** Please also see man apt-get for more information.
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-19 05:55:45 -08:00
Florian Ruynat
b493c81ce8
Update metrics-server to 0.4.1 ( #7188 )
2021-01-19 05:45:44 -08:00
Florian Ruynat
9ef62194c3
Update bunch of dependencies ( #7187 )
2021-01-19 05:41:45 -08:00
Florian Ruynat
91ee4aa542
Decrease docker dependency ( #7172 )
2021-01-18 01:41:44 -08:00
Sergey
e3caff833c
Add prompt to upgrade node or delay before upgrade ( #7168 )
...
* Add prompt to upgrade node or delay before upgrade
* add docs
2021-01-17 23:53:43 -08:00
Sergey
b2995e4ec4
Adding other masters sequentially, not in parallel ( #7166 )
2021-01-15 17:19:43 -08:00
David Louks
ccd3aeebbc
Remove ignore_errors from drain tasks and enable retires ( #7151 )
...
* Remove ignore_errors from drain tasks and enable retires
* Fix lint error by checking if stdout length is not 0, ie string is not empty.
2021-01-15 13:17:43 -08:00
Florian Ruynat
7a033a1d55
Add hashes and update default K8S version to 1.20.2 ( #7171 )
2021-01-15 12:43:09 -08:00
Maxime Guyot
1652d8bf4b
Use Kubespray v2.15.0 as base image for CI ( #7165 )
2021-01-15 08:25:52 -08:00
Guangwen Feng
c85f275bdb
Fix typo ( #7164 )
...
Signed-off-by: Guangwen Feng <fenggw-fnst@cn.fujitsu.com>
2021-01-15 02:19:52 -08:00
Florian Ruynat
a923f4e7c0
Update kube_version_min_required and cleanup hashes for release ( #7160 )
2021-01-15 00:33:51 -08:00
Etienne Champetier
82af8e455e
docker: remove old versions
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-14 09:39:05 -08:00
Etienne Champetier
1baee488ab
containerd: remove duplicate package pining task
...
Leave it with the install instead of the repo config
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-14 09:39:05 -08:00
Etienne Champetier
7433b70d95
docker: remove kernel check
...
Only CentOS 7 uses Linux 3.10, all other OSs have more recent kernels
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-14 09:39:05 -08:00
Etienne Champetier
de6c71a426
docker: remove dockerproject repo reference
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-14 09:39:05 -08:00
Etienne Champetier
16a34548ea
docker: remove checks for docker 1.12
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-14 09:39:05 -08:00
Etienne Champetier
b2f3ab77cd
docker: remove some old debug code
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-14 09:39:05 -08:00
Etienne Champetier
b2f6ed7dee
docker: remove obsoletes=0 in yum.conf
...
This was introduced in ef7f5edbb3
obsoletes=0 is not present in the official repo config
https://download.docker.com/linux/centos/docker-ce.repo
so it might not be needed for some time
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-14 09:39:05 -08:00
Etienne Champetier
09e34d29cd
containerd: remove docker_yum_conf / yum_conf
...
leftover from 1945499e2f
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-14 09:39:05 -08:00
Etienne Champetier
667a6981ea
preinstall: remove credentials folder move
...
This was introduced in 3004791c64
,
so since 2018 everyone should be upgraded ;)
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-14 09:39:05 -08:00
Etienne Champetier
cf1d9f5612
preinstall: remove old Fedora task
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-14 09:39:05 -08:00
Etienne Champetier
55b03a41b2
containerd-common,containerd,docker: remove ubuntu arch specific vars
...
By removing ancient version we don't need arch specific vars
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-14 09:39:05 -08:00
Florian Ruynat
81b4ffa6b4
Add Fedora 33 CI, remove Fedora 31 ( #7072 )
2021-01-14 08:27:05 -08:00
Etienne Champetier
8c1821228d
preinstall: fixup etcd_deployment_type check ( #7152 )
...
fixes 8331939aed
Thanks to Tomas Vanderka / karlism / LuckySB
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-14 06:53:05 -08:00
Etienne Champetier
9c5c1a09a1
test-infra: update CentOS images ( #7134 )
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-14 05:25:04 -08:00
Florian Ruynat
09fa99fdc6
Update hashes and set default version to 1.19.7 ( #7150 )
2021-01-13 14:57:02 -08:00
Etienne Champetier
8331939aed
preinstall: check etcd_deployment_type ( #7149 )
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-13 14:19:03 -08:00
Sergey
02213d6e07
change nodeSelector label from deprecated beta.kubernetes.io/os and arch to kubernetes.io prefix ( #7138 )
2021-01-13 13:55:02 -08:00
Wang Zhen
387df0ee1f
Remove unnecessary condition check when updating server field in kube-proxy kubeconfig ( #7145 )
2021-01-13 09:50:37 -08:00
Florian Ruynat
b59035df06
change nginx default HTTPS protocol from "SSLv2" to "TLSv1.2 TLSv1.3" ( #7144 )
2021-01-13 08:34:36 -08:00
Mateusz Piotrowski
5517e62c86
Fix and document environment variable KUBE_MASTERS ( #7127 )
...
This variable was added as KUBE_MASTERS_MASTERS. That's probably a typo.
Remove the redundant `_MASTERS` suffix. Also, document the variable in the
help message.
2021-01-11 11:34:24 -08:00
Gregor Krmelj
5dca5225dc
update docs main menu with CRI section ( #7132 )
2021-01-11 09:07:05 -08:00
Kenichi Omichi
c005c90746
Remove unnecessary failed_when ( #7120 )
...
TASK [Generate a list of information about the images on a node]
registers list of container images to docker_images.
Then the next TASK [Set pull_required if the desired image is not
yet loaded] does based on expecting images are registered.
However sometimes the first TASK was failed as [1] but the failure
is ignored due to failed_when:false and it makes another issue.
This removes this unnecessary failed_when to detect the failure
at the point.
In addition, this removes no_log:true also because the output doesn't
contain any sensitive data and now it just makes debugging difficult.
[1]: https://gitlab.com/kargo-ci/kubernetes-sigs-kubespray/-/jobs/934714534#L2953
2021-01-11 08:49:10 -08:00
Etienne Champetier
8bdd0bb82f
Require 2.9.0 <= Ansible version < 2.10.0 ( #7130 )
...
We have multiple breakage report with Ansible 2.10+ in https://github.com/kubernetes-sigs/kubespray/issues/6762
README.md already recommended 2.9+
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-11 07:49:11 -08:00
Etienne Champetier
a790935d02
Only setup *_PROXY env variables where needed ( #7095 )
...
no_proxy is a pain to get right, and having proxy variables present causes issues
(k8s components get proxy configuration after upgrade, see #7100 )
It's better to only configure what require proxy:
- the runtime (containerd/docker/crio)
- the package manager + apt_key
- the download tasks
Tested with the following clusters
- 4 CentOS 8 nodes
- 1 Ubuntu 20.04 node
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-11 07:21:08 -08:00
Gregor Krmelj
1fcbbd3b9d
Update containerd documentation with etcd change ( #7126 )
...
* update containerd documentation with etcd change
* update conterind docs
2021-01-11 06:39:08 -08:00
Cristian Klein
b9077d3ea2
Add ping_access_ip; allows to disable ping test ( #7020 )
...
In some environments, it might not be possible to ping the IP address
of the nodes, e.g., because ICMP echo is blocked.
This commit allows kubespray to be configured to disable the ping
check, while performing all other checks.
2021-01-11 06:15:08 -08:00
Gregor Krmelj
1d7d84540f
update ansible dependecy ( #7128 )
...
This solves the error "Service is in unknown state" when creating a new Kubernetes installation.
See: https://github.com/ansible/ansible/issues/71528
2021-01-11 01:39:06 -08:00
Igor Vuk
6f471d1c5e
Typo fix: kuberntes -> kubernetes ( #7125 )
2021-01-10 12:19:06 -08:00
Etienne Champetier
ff95292435
calico: fix warnings ( #7121 )
...
TASK [network_plugin/calico : Calico | Configure calico network pool] **********
task path: /builds/kargo-ci/kubernetes-sigs-kubespray/roles/network_plugin/calico/tasks/install.yml:138
Friday 08 January 2021 17:10:12 +0000 (0:00:01.521) 0:11:36.885 ********
[WARNING]: The value {'kind': 'IPPool', 'apiVersion': 'projectcalico.org/v3',
'metadata': {'name': 'default-pool'}, 'spec': {'blockSize': 24, 'cidr':
'10.233.64.0/18', 'ipipMode': 'Always', 'vxlanMode': 'Never', 'natOutgoing':
True}} (type dict) in a string field was converted to "{'kind': 'IPPool',
'apiVersion': 'projectcalico.org/v3', 'metadata': {'name': 'default-pool'},
'spec': {'blockSize': 24, 'cidr': '10.233.64.0/18', 'ipipMode': 'Always',
'vxlanMode': 'Never', 'natOutgoing': True}}" (type string). If this does not
look like what you expect, quote the entire value to ensure it does not change.
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-08 16:01:05 -08:00
Florian Ruynat
e8a8a7b8cc
Update sample to 3 master node ( #7117 )
2021-01-08 09:14:54 -08:00
holmesb
b0ad8ec023
Fixed issue #7112. Created new API Server vars that replace defunct Controller Manager one ( #7114 )
...
Signed-off-by: Brendan Holmes <5072156+holmesb@users.noreply.github.com>
2021-01-08 07:20:53 -08:00
Etienne Champetier
ab2bfd7f8c
Proxy small fixes ( #7102 )
...
* Improve how we set 'proxy=' in yum.conf or dnf.conf
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* Fixup spaces in no_proxy
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* Add svc,svc.{{ dns_domain }} to no_proxy
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-07 10:50:53 -08:00
Etienne Champetier
29f1c40580
Ignore all .git* for mardownlint ( #7109 )
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-07 10:16:53 -08:00
Kenichi Omichi
2585e72a30
Fix mardownlint failures of offline ( #7108 )
...
This fixes the following failures:
./contrib/offline/README.md:14:1 MD014/commands-show-output Dollar signs used before commands without showing output [Context: "$ ./manage-offline-container-i..."]
./contrib/offline/README.md:20:1 MD014/commands-show-output Dollar signs used before commands without showing output [Context: "$ ./manage-offline-container-i..."]
2021-01-06 23:45:45 -08:00
Florian Ruynat
837fca1368
Add docker 20.10 to available packages ( #7106 )
2021-01-06 09:23:51 -08:00
Florian Ruynat
0c995c1ea7
Remove last 1.19.5 references ( #7107 )
2021-01-06 08:43:51 -08:00
Kenichi Omichi
ad244ab744
Add manage-offline-container-images.sh ( #7024 )
...
One challenge of offline deployment was how to collect necessary
container images as a preparation. This adds a script to solve it.
2021-01-06 08:05:52 -08:00
flix444
308ceee46c
Valuating conditional (need_https_proxy.rc != 0) fail if http_proxy set and skip_http_proxy_on_os_packages is true ( #7078 )
...
* Remove because of empty need_http_proxy.rc if http/https_proxy and skip_http_proxy_on_os_packages=true is set
* Modify sample for debian and centos skip_http_proxy
* Modify sample for debian and centos skip_http_proxy
2021-01-05 18:49:51 -08:00
Florian Ruynat
e0195da80d
Allow containerd root and state path to be configured ( #7098 )
2021-01-05 07:13:58 -08:00
Etienne Champetier
b02f40b392
Improve reset.yml ( #7094 )
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-05 07:09:59 -08:00
Etienne Champetier
c0fe32c4ec
Add repo name for Fedora ( #7093 )
...
This fixes 1945499e2f
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-04 10:39:57 -08:00
Etienne Champetier
e9f93a1de9
Remove libseccomp install tasks ( #7074 )
...
All packages have proper dependencies in latest versions
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-04 09:17:57 -08:00
Etienne Champetier
c14388629a
calico: check if inventory settings match cluster settings ( #6969 )
...
If some settings were changed from the default but not commited into an inventory repo,
we risk breaking the cluster / cause downtime, so add some extra checks
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-01-04 09:07:56 -08:00
seowon
3c1f84a9e9
[fix] change result conditions ( #6973 )
2020-12-30 07:15:49 -08:00
Kenichi Omichi
398a995798
Fix markdownlint failures under ./roles/ ( #7089 )
...
This fixes markdownlint failures under roles/
2020-12-30 05:07:49 -08:00
Kenichi Omichi
dc86b2063a
Fix markdown failures on contrib/terraform ( #7082 )
...
This fixes markdown failures on contrib/terraform.
2020-12-25 12:10:27 -08:00
Fredrik Liv
bbab1013c5
Added gcp terraform support ( #6974 )
...
* Added gcp terraform support
* Added http/https firewall rule
* Ignoring lifecycle changes for attached disks on the google_compute_instance
2020-12-24 09:16:26 -08:00
Etienne Champetier
1945499e2f
Disable docker-ce yum repo by default / cleanups ( #7080 )
...
Upgrading docker / containerd without adapting the configuration might break the node,
so disable docker-ce repo by default.
We are already using dpkg hold for Debian.
All containerd.io packages provide /usr/bin/runc, so no need to check
yum_conf was never used for containerd
module_hotfixes should not be needed with the EL8 repo
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-12-23 13:12:26 -08:00
Florian Ruynat
c971debd15
Fix crictl with Docker ( #7081 )
2020-12-23 08:28:26 -08:00
Teo Klestrup Röijezon
161c7e9fce
Blacklist Calico's VXLAN interface from NetworkManager ( #7037 )
...
See https://github.com/projectcalico/calico/issues/3271
Otherwise Calico can get into a fight with NM about who "owns" the vxlan.calico
interface, breaking all pod traffic.
2020-12-23 08:24:27 -08:00
Cristian Klein
fd3ebc13f7
Fix terraform0.13 errors ( #7077 )
...
* [terraform/aws] Fix Terraform >=0.13 warnings
Terraform >=0.13 gives the following warning:
```
Warning: Interpolation-only expressions are deprecated
```
The fix was tested as follows:
```
rm -rf .terraform && terraform0.12.26 init && terraform0.12.26 validate
rm -rf .terraform && terraform0.13.5 init && terraform0.13.5 validate
rm -rf .terraform && terraform0.14.3 init && terraform0.14.3 validate
```
which gave no errors nor warnings.
* [terraform/openstack] Fixes for Terraform >=0.13
Terraform >=0.13 gives the following error:
```
Error: Failed to install providers
Could not find required providers, but found possible alternatives:
hashicorp/openstack -> terraform-provider-openstack/openstack
```
This patch fixes these errors.
This fix was tested as follows:
```
rm -rf .terraform && terraform0.12.26 init && terraform0.12.26 validate
rm -rf .terraform && terraform0.13.5 init && terraform0.13.5 validate
rm -rf .terraform && terraform0.14.3 init && terraform0.14.3 validate
```
which gave no errors nor warnings for Terraform 0.13.5 and Terraform
0.14.3. Unfortunately, 0.12.x gives a harmless warning, but
with 0.14.3 out the door, I guess we need to move on.
* [terraform/packet] Fixes for Terraform >=0.13
This fix was tested as follows:
```
export PACKET_AUTH_TOKEN=blah-blah
rm -rf .terraform && terraform0.12.26 init && terraform0.12.26 validate
rm -rf .terraform && terraform0.13.5 init && terraform0.13.5 validate
rm -rf .terraform && terraform0.14.3 init && terraform0.14.3 validate
```
Errors are gone, but warnings still remain. It is impossible to please
all three versions of Terraform.
* Add tests for Terraform >=0.13
2020-12-23 05:08:26 -08:00
marcosfsch
9db4b949f2
Fedora CoreOS fixes ( #7010 )
...
* Fedora CoreOS: Fix for ethtool pre-installed
Fix error in rpm-ostree when ethtool is already insatlled (FCOS >= 32.20201104.3.0)
* Fedora CoreOS: Fix connection lost
Fedora CoreOS: Ignore connection lost due to reboot and continues the playbook
2020-12-23 00:22:25 -08:00
Kenichi Omichi
5b5726bdd4
Improve markdownlint for contrib/network-storage ( #7079 )
...
This fixes markdownlint failures under contrib/network-storage and
contrib/vault.
2020-12-23 00:00:26 -08:00
Kenichi Omichi
1347bb2e4b
Improve markdownlint coverage ( #7075 )
...
Now markdownlint covers ./README.md and md files under ./docs only.
However we have a lot of md files under different directories also.
This enables markdownlint for other md files also.
2020-12-22 04:44:26 -08:00
Florian Ruynat
286191ecb7
Update nginx & cilium version ( #7073 )
2020-12-21 07:22:25 -08:00
Sergey
096bcdd078
Download once for crio ( #6998 )
...
* download run once feature for CRI-O
* fix typo
* fix test
2020-12-21 01:54:25 -08:00
Etienne Champetier
7d7739e031
Calico: fix node ip subnet detection ( #7065 )
...
We are currently setting the IP variable to hostIP,
Before https://github.com/projectcalico/node/pull/593 (not yet released)
Calico interpret that as hostIP/32
Using 'can-reach' we get the future behavior
This fixes vxlan and IPIP CrossSubnet modes
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-12-21 00:58:25 -08:00
Florent Monbillard
3470810709
Remove kube_version in downloads role ( #7066 )
2020-12-19 14:38:26 -08:00
François Travais
98b43bb24f
Removes apps tags from apps meta dependencies ( #7041 )
...
Signed-off-by: François Travais <francois@travais.fr>
2020-12-19 08:14:25 -08:00
Kenichi Omichi
275c54e810
Wait for available API token in a new namespace ( #7045 )
...
Just after creating a namespace, the corresponding token could not be
created and sometimes the pod creation might be failed.
This adds check of the token in the new namespace to make this test
case stable.
2020-12-19 04:54:24 -08:00
Florent Monbillard
9a05037352
SHAs for 1.19.6, 1.18.14, 1.18.13, 1.17.16 and 1.17.15 ( #7063 )
...
* SHAs for 1.19.6, 1.18.14, 1.18.13, 1.17.16 and 1.17.15
* Fix etcd version in README
* Bump kube_version to 1.19.6
2020-12-18 15:42:24 -08:00
Noam
143f9c78be
fix MASSIVE_SCALE_THRESHOLD env paramter ( #7054 )
2020-12-18 08:50:25 -08:00
Dmitry Chusovitin
75f0aaf4a1
Fixed waiting for scheduler and controller manager ( #6893 )
2020-12-18 07:38:25 -08:00
Sergey
c36df6a78b
fix typo in containerd doc ( #7057 )
2020-12-18 00:34:24 -08:00
Catblade
10a6bd67de
Calico: update files to handle multi-asn bgp peering conditions. ( #6971 )
...
* update files to handle multi-asn bgp peering conditions.
* put back in the serviceClusterIPs. Bad merge.
* remove extraneous environment var.
* update files as discussed with mirwan
* update titles.
* add not in.
* add a conditional for using bgp to advertise cluster ips.
Co-authored-by: marlow-h <mweston@habana.ai>
2020-12-17 22:54:25 -08:00
Cedric Hnyda
db17ba54b4
Add cluster-name to external-openstack-cloud-controller-manager ( #7055 )
...
If cluster-name is not set, the default value "kubernetes" is used.
The loadbalancees created by Kubernetes follow the format:
kube_service_clusterName_serviceNamespace_serviceName
If 2 clusters create a loadbalancer for the same service in the same
namespace, they will share the same non-working loadbalancer.
Signed-off-by: Cedric Hnyda <cedric.hnyda@itera.io>
2020-12-17 08:23:09 -08:00
Florian Ruynat
c2f64a52da
Update dashboard to 2.1.0 and metrics-scraper to 1.0.6 ( #7050 )
2020-12-17 07:29:09 -08:00
Kenichi Omichi
0b81c6a6c4
Fix to use ansible-lint instead of ansible-lint.sh ( #7047 )
...
tests/scripts/ansible-lint.sh was written on the doc, but there was
not such file actually. We can use ansible-lint command to check
ansible yml files without any options.
This updates to use the command.
2020-12-17 07:21:09 -08:00
Florian Ruynat
36bd4cdc43
Update cni plugin to 0.9.0 ( #7049 )
2020-12-17 07:17:09 -08:00
bac-w
87eea16d7b
Fix config containerd template ( #7051 )
2020-12-17 07:13:09 -08:00
Kenichi Omichi
0aa6d3d4bc
Replace non-ascii with ascii ( #7044 )
...
When opening the main.yaml, vi cannot show the string correctly
due to non-ascii string. This replaces it.
2020-12-16 23:43:09 -08:00
Kenichi Omichi
43dbff938e
Exclude .git/ from shellcheck ( #7048 )
...
If a branch name contains '.sh', current shellcheck checks the branch
file under .git/ and outputs error because the format is not shell
script one.
This makes shellcheck exclude files under .git/ to avoid this issue.
2020-12-16 15:51:09 -08:00
bozzo
54aebb92fd
Set Kube-Router version to v1.1.1 ( #7022 )
2020-12-16 13:58:31 -08:00
Daniel Abbatt
f0c7649158
Update ambassador.md ( #7023 )
...
Typo
2020-12-16 07:04:21 -08:00
Anthony Rabbito
93445b4dbc
Update hashes and set default version to 1.19.5 ( #7012 )
...
* Update hashes and set default version to 1.19.5
Signed-off-by: anthr76 <hello@anthonyrabbito.com>
* Reorder hashes
1.19.5 hashes should be near 1.19.x
* Added back blank line
2020-12-16 01:42:20 -08:00
Florian Ruynat
aeaa876d57
Move some approvers to emeritus status ( #6966 )
2020-12-10 01:40:54 -08:00
Sylvain Desbureaux
9c1e08249d
change |
to is
( #6991 )
...
Since ansible 2.9 search cannot be used as filter after a pipe but after `is`
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2020-12-09 07:26:50 -08:00
Kenichi Omichi
33a60fe919
Fix warning of mkdir usage ( #6951 )
...
This fixes the following warning:
[kubernetes/client : Generate admin kubeconfig with external api endpoint]
[WARNING]: Consider using the file module with state=directory rather than
running 'mkdir'. If you need to use command because file is insufficient
you can
2020-12-09 07:14:51 -08:00
Sergey
85982dc8e9
add support crio version for varios k8s vers ( #7003 )
...
* add support crio version for various k8s vers
* regexp in pkg versions
2020-12-09 01:22:50 -08:00
Hannes Körber
dbe02d398a
etcd: Fix permissions of /etc/ssl/etcd/ssl ( #6908 )
2020-12-09 00:48:49 -08:00
Kenichi Omichi
e022e2e13c
Fix URL of offline container images ( #7005 )
...
When clicking the link, we faced NotFound error page of the github.com.
This fixes the link to avoid that.
2020-12-09 00:16:50 -08:00
emiran-orange
7084d38767
Fix ETCD_CIPHER_SUITES shell var assignment ( #7002 )
2020-12-08 13:23:34 -08:00
Etienne Champetier
00e0f3bd2b
Fix nf_conntrack_ipv4 modprobe ( #6988 )
...
RedHat 8.3 merged nf_conntrack_ipv4 in nf_conntrack but still advertise 4.18
so just try to modprobe and decide depending on the success
Also nf_conntrack is a dependency of ip_vs, so no need to care about it
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-12-07 18:17:11 -08:00
Samuel Liu
cd7212453e
Add etcd tls cipher suites ( #7001 )
...
* Add etcd tls cipher suites
* yamllint
2020-12-07 18:13:10 -08:00
Sergey
a69f2b09da
download run once feature for containerd ( #6997 )
2020-12-07 01:09:25 -08:00
Hans Feldt
878fe80ca3
add and use common crictl role ( #6978 )
2020-12-05 09:43:25 -08:00
Sander Klein
8331c1f858
Hold the docker-ce-cli ( #6995 )
...
This will make sure an upgrade doesn't upgrade the docker cli.
2020-12-04 18:21:25 -08:00
Florian Ruynat
f4a69d2827
Update docker to 19.03.14 and containerd to 1.3.9 ( #6980 )
2020-12-03 16:33:25 -08:00
Sergey
ed6cef85d8
add crio registry mirror support ( #6977 )
...
* add crio registry mirror support
* mdlint fix
2020-12-03 13:57:25 -08:00
OwenTuz
d315f73080
Ensure libseccomp is installed before starting containerd on CentOS 8 ( #6922 )
...
* Ensure libseccomp is installed before starting containerd on CentOS 8
* Simplify libseccomp install on CentOS 8
- Uses `package` module
- Replaces complex version check with 'state: latest'. The version must
be > 2.3 when using with cri-o.
- Removes unnecessary `not is_ostree` condition as CentOS 8 does not use
ostree
2020-12-03 13:43:26 -08:00
Sergey
06ec5393d7
up vagrant box to fedora/33-cloud-base in cri-o molecule tests ( #6992 )
2020-12-03 11:25:26 -08:00
Christoph Stäbler
1a491fc10c
Update hashes and set default to 1.19.4 ( #6903 )
2020-12-03 06:34:59 -08:00
Pasquale Toscano
488db81e36
Add pasqualet to approvers ( #6976 )
2020-12-03 00:58:59 -08:00
Emerson Ford
f377d9f057
Set etcd_.*_addresses to use etcd_[events_]access_address instead of access_ip ( #6936 )
2020-12-02 13:55:00 -08:00
Florian Ruynat
db4e942b0d
Remove hyperkube from codebase ( #6965 )
2020-12-02 13:50:59 -08:00
Etienne Champetier
68b96bdf1a
Helm v3 only ( #6846 )
...
* Fix etcd download dest
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* Only support Helm v3, cleanup install
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-12-02 00:20:50 -08:00
Victor Morales
4f7a760a94
Add crun support ( #6864 )
...
Signed-off-by: Victor Morales <v.morales@samsung.com>
2020-12-01 11:00:50 -08:00
OwenTuz
da5077fa5f
Vagrantfile: Fix incorrect references to 'rhel' variable as 'redhat' ( #6967 )
2020-12-01 01:22:50 -08:00
Pasquale Toscano
f1231bb97d
Add molecule for Kata Containers with Containerd ( #6905 )
2020-11-30 23:34:49 -08:00
Hans Feldt
80eb1ad936
fix ansible password authentication ( #6907 )
...
* copying ssh key no longer required, works with password auth
* use copy module instead of synchronize (which requires sshpass)
* less tasks and always changed tasks
2020-11-30 15:12:50 -08:00
Danilo Riecken P. de Morais
cc5303e1c8
Add test for Fedora CoreOS before creating Docker service file ( #6940 )
2020-11-30 09:20:49 -08:00
Barry Melbourne
f6a5948f58
Upgrade Jetstack Cert-Manager v1.0.4 ( #6937 )
2020-11-30 06:52:50 -08:00
Florian Ruynat
f6eed8091e
Remove contiv related files ( #6964 )
2020-11-30 06:48:50 -08:00
Sergey
4a8a52bad9
containerd docker hub registry mirror support ( #6962 )
...
* containerd docker hub registry mirror support
* add docs
* fix typo
* fix yamllint
* fix indent in sample
and ansible-playbook param in testcases_run
* fix md
* mv common vars to tests/common/_docker_hub_registry_mirror.yml
* checkout vars to upgrade tests
2020-11-30 00:22:49 -08:00
Dmitry Chusovitin
c09aabab0c
Remove executable bit from yaml and j2 files ( #6894 )
2020-11-29 20:18:48 -08:00
Bas van den Brink
d47ba2b2ef
Disable CRI-O restart by Multus ( #6930 )
2020-11-28 08:52:47 -08:00
Bas van den Brink
17fb1ceed8
Allow airgapped CRI-O installation ( #6927 )
2020-11-28 08:38:47 -08:00
Clicia Scarlet
97ff67e54a
Fix yaml syntax error when use multilines in dns_etchosts ( #6960 )
2020-11-28 08:32:47 -08:00
Alexander D. Kanevskiy
d4204a42fd
Fix crictl paths and some of docker paths ( #6961 )
...
If crictl (and docker) binaries are deployed to the directories
that are not in standard PATH (e.g. /usr/local/bin), it is required
to specify full path to the binaries.
2020-11-28 08:30:47 -08:00
Kenichi Omichi
c6f6940459
Fix warning of "Enable ip forwarding" ( #6953 )
...
The task outputs the following warning:
TASK [kubernetes/preinstall : Enable ip forwarding]
[WARNING]: The value 1 (type int) in a string field was converted
to u'1' (type string). If this does not look like what you expect,
quote the entire value to ensure it does not change.
2020-11-27 03:54:49 -08:00
Sergey
d739a6bb2f
add Google proxy-mirror-cache for docker hub to CI tests ( #6957 )
2020-11-27 03:24:48 -08:00
Pratik Raj
0982c66051
fix: added boto3 as dependency required by kubespray-aws-inventory.py ( #6890 )
...
Added "boto3" as dependency in "requirements.txt" which is required by "kubespray-aws-inventory.py".
Signed-off-by: Pratik raj <rajpratik71@gmail.com>
2020-11-26 15:06:19 -08:00
Florian Ruynat
d40701463f
Update kube-ovn to 1.5.2 ( #6610 )
2020-11-26 09:34:19 -08:00
Florian Ruynat
405692d793
Switch some image from dockerhub to k8s.gcr (also increase pkg retries) ( #6955 )
2020-11-26 08:46:19 -08:00
Bas van den Brink
7938748d77
Allow configuring container log limits for Kubelet ( #6933 )
2020-11-26 00:32:19 -08:00
Etienne Champetier
e909f84966
Bump nodelocaldns to 1.16.0 ( #6916 )
...
This new version uses the same base image as kube-proxy
(k8s.gcr.io/build-image/debian-iptables)
This allow to automatically pick iptables-legacy or iptables-nft,
and be compatible with RHEL/CentOS 8
https://github.com/kubernetes/dns/pull/367
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-11-25 17:10:19 -08:00
Andrii
8a153ed38e
Add serviceExternalIPs option for calico installation ( #6928 )
2020-11-25 05:34:39 -08:00
Barry Melbourne
eb16986f32
Add RHEL support subscription registration ( #6572 )
2020-11-24 08:33:00 -08:00
Lee Spottiswood
bd801de236
bump calico version to 3.16.5 ( #6944 )
2020-11-24 02:49:01 -08:00
ZouYu
9c3bcd48ee
Some typos in docs ( #6923 )
...
Signed-off-by: zouyu <zouy.fnst@cn.fujitsu.com>
2020-11-23 12:49:00 -08:00
Hans Feldt
ee23b947aa
fix flake8 errors in Kubespray CI - tox-inventory-builder ( #6910 )
...
* fix flake8 errors in Kubespray CI - tox-inventory-builder
* Invalidate CRI-O kubic repo's cache
Signed-off-by: Victor Morales <v.morales@samsung.com>
* add support to configure pkg install retries
and use in CI job tf-ovh_ubuntu18-calico (due to it failing often)
* Switch Calico, Cilium and MetalLB image repos to Quay.io
Co-authored-by: Victor Morales <v.morales@samsung.com>
Co-authored-by: Barry Melbourne <9964974+bmelbourne@users.noreply.github.com>
2020-11-22 23:47:35 -08:00
Joel Seguillon
0f7341bdde
Update kubevirt Centos7 from 1809 to 2003 ( #6823 )
2020-11-14 12:25:04 -08:00
Sascha Marcel Schmidt
602b5aaf01
add warning about current state of heketi ( #6888 )
2020-11-13 00:06:23 -08:00
Hans Feldt
70bbb3e280
calico: avoid POD restart during initial deploy ( #6886 )
...
calico PODs are first started and then in a handler killed and
restarted for no reason, nothing has changed.
By using the existing variable 'calico_cni_config' (only defined when
calico has already started) the restart can be skipped.
2020-11-13 00:02:23 -08:00
Sebastian P
a27eebb225
Fix hash of pypy3.6-v7.3.2-linux64 archive. ( #6897 )
...
The previous hash was still that of v7.3.1, see https://www.pypy.org/download.html for the hash of the current release.
2020-11-11 09:20:27 -08:00
Hugo Blom
1b0326f773
do not apply floating IP's before router port is created ( #6887 )
2020-11-06 00:16:50 -08:00
Mikael Johansson
93a1693040
Update BGPPeer CRD to match v3.16 of Calico ( #6881 )
2020-11-05 11:14:51 -08:00
Hugo Blom
df7ed24389
[Openstack] Add security groups not managed by terraform ( #6865 )
...
* add custom sec groups
* make sure groups are applied only when created
* fix spacing
2020-11-05 05:30:54 -08:00
Hans Feldt
544aa00c17
install etcdctl to host when etcd deployment type is kubeadm ( #6857 )
...
* create a wrapper script with pki options
* supports all kubespray managed container engines
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
2020-11-04 00:20:04 -08:00
Hans Feldt
fc22453618
crio: avoid extra restart after install and upgrade ( #6882 )
...
Package upgrade restarts crio. By creating/updating config first,
an extra restart can be avoided.
2020-11-03 08:54:03 -08:00
David Medinets
fefcb8c9f8
Allow the eventRecordQPS setting to be set. ( #6880 )
...
* Allow the eventRecordQPS setting to be set.
The eventRecordQPS parameter controls rate limiting for event recording. When zero, unlimited events can cause denial-of-service situations. For my situation, I don't need more than a setting of "5". This change allows me to configure the setting before creating the cluster.
* Allow the eventRecordQPS setting to be set.
The default settings (see types.go) is five. So, this change does not affect the cluster provisioning. However, it does allow for the setting to be changed.
2020-11-03 00:42:15 -08:00
Victor Morales
9cf5dd0291
Use cgroup v1 in Fedora +31 ( #6862 )
...
Fedora 31 uses Cgroups v2 by default. This change by passes the kernel
parameter systemd.unified_cgroup_hierarchy=0.
Signed-off-by: Victor Morales <v.morales@samsung.com>
2020-11-02 06:32:53 -08:00
Kenichi Omichi
7a1f033c1d
Update helm stable repo ( #6867 )
...
As https://helm.sh/blog/new-location-stable-incubator-charts/
helm stable repo is changed to https://charts.helm.sh/stable
In addition, if using helm v3.4.0+ the old stable repo installation
is failed.
So this updates the stable repo to avoid such error.
2020-10-31 09:54:51 -07:00
David Medinets
4a5acad414
Fix missing spaces in section heading. ( #6868 )
...
When https://kubespray.io/#/docs/comparisons is generated, having the link in the heading creates the following HTML. When displayed there is no space between "vs" and the link. I simply moved the link into the following paragraph.
```
<h2 id="kubespray-vs-kops"><a href="#/docs/comparisons?id=kubespray-vs-kops" data-id="kubespray-vs-kops" class="anchor"><span>Kubespray vs </span></a><a href="https://github.com/kubernetes/kops " target="_blank" rel="noopener">Kops</a></h2>
```
2020-10-29 10:29:54 -07:00
Florian Ruynat
227e96469c
Minor update Calico and Cilium ( #6871 )
2020-10-29 07:14:59 -07:00
Michal Skalski
c93fa6effe
Handle dns_mode set to 'none' in generate nameservers task ( #6825 )
...
When dns_mode was set to 'none' the coredns_server became an empty
string and invalid operation of adding string to list was executed.
2020-10-29 01:04:58 -07:00
David Medinets
102fb94524
Notes About Server In admin.conf ( #6854 )
...
* Add note about changing private IP in admin.conf.
When I run kubespray, a load balancer is created which should be used instead of the ip of the controller node.
* Procedure to find load balancer and update admin.conf
When I run kubespray, a load balancer is used instead of the private ip of the controller.
2020-10-28 18:30:59 -07:00
Mikhail Snetkov
c25d624524
Register missing outputs in role "remove-node" ( #6856 )
2020-10-28 12:55:56 -07:00
David Medinets
12ab8b7af3
update version of ingress-nginx controller in docs. ( #6855 )
...
* update version of ingress-nginx controller.
Change tag from controller-v0.34.0 to controller-v0.40.2 to use newest tag.
* Update docs about aws deploy templates.
In the yaml templates, there is no mention of idle timeouts. This is why I removed the documentation about it. This might be a mistake. Please verify this. I don't know enough to verify it myself.
* Change label when checking version.
When checking for `app.kubernetes.io/name=ingress-nginx`, a completed pod was selected which is not helpful when trying to `exec`. Changing the label selects the running controller pod.
* put back the information about ELB Idle Timeouts.
When I removed the information, I had overlooked that it was mentioned in the L7 yaml file. Thanks.
2020-10-28 11:05:57 -07:00
axelgobletbdr
097bec473c
fixed bug in etcd retention where backups are not sorted by date ( #6860 )
...
* fixed bug in etcd retention where backups are not sorted by date
* added directory filter to find command
2020-10-28 09:09:57 -07:00
Hans Feldt
d36b5d7d55
Install cri-o with package version ( #6853 )
...
and thereby support upgrade from e.g. 1.18.x to 1.19.y
Included OSes:
- Centos7/8
- Ubuntu18/20
New variables for overriding by default installed packages:
- centos_crio_packages
- ubuntu_crio_packages
2020-10-26 08:35:02 -07:00
axelgobletbdr
4b858b6466
Fixes 6621 etcd backup directory is consuming much rootfs disk space ( #6836 )
...
* added an ansible var to manage retention of etcd backups
* refactord ls/grep into find in etcd backup removal command
2020-10-23 07:09:57 -07:00
Victor Morales
e03e3c4582
Add Kata Containers support to CRI-O runtime ( #6830 )
...
* Enable Kata Containers for CRI-O runtime
Kata Containers is an OCI runtime where containers are run inside
lightweight VMs. This runtime has been enabled for containerd runtime
thru the kata_containers_enabled variable. This change enables Kata
Containers to CRI-O container runtime.
Signed-off-by: Victor Morales <v.morales@samsung.com>
* Set appropiate conmon_cgroup when crio_cgroup_manager is 'cgroupfs'
* Set manage_ns_lifecycle=true when KataContainers is enabed
* Add preinstall check for katacontainers
Signed-off-by: Victor Morales <v.morales@samsung.com>
Co-authored-by: Pasquale Toscano <pasqualetoscano90@gmail.com>
2020-10-23 03:07:46 -07:00
Florian Ruynat
91f1edbdd4
Update k8s-dns-node-cache to 1.15.16 ( #6852 )
2020-10-22 10:29:36 -07:00
Maciej
c6e2a4ebd8
Set feature gates in kube-proxy ConfigMap ( #6851 )
...
Command line flags aren't added to kube-proxy which results in missing
feature gates set in this component. Add appropriate setting to
ConfigMap instead.
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2020-10-22 03:39:34 -07:00
Hans Feldt
3eefb5f2ad
fix scaling in kubeadm etcd mode ( #6822 )
...
'ansible.vars.hostvars.HostVarsVars object' has no attribute 'kubeadm_upload_cert'
kubeadm_upload_cert will never be found as a hostvar for the first
master since the task is executed for a worker.
Fix by executing the upload task for the first master and register
the needed key. After that, workers can read hostvars for the master
Var kubeadm_etcd_refresh_cert_key removed since it no longer has
any use.
2020-10-21 07:32:32 -07:00
Hans Feldt
04b19359cb
allow non existing etcd group ( #6797 )
...
When using kubeadm managed etcd, configuring an etcd group can now
be skipped.
2020-10-21 07:32:20 -07:00
Maxime Guyot
f2ef781efd
Add tag for test-infra images and docker logout ( #6848 )
2020-10-21 04:08:20 -07:00
Florian Ruynat
60b0fb3e88
Update hashes and set default version to 1.19.3 ( #6841 )
2020-10-21 00:58:20 -07:00
wand3r3r
f323d70c0f
Adding option to disable globally applying a proxy to etc/yum.conf ( #6828 )
...
* Adding option to disable gloablly applying a proxy to etc/yum.conf
* Change made to proxy_yum_globaly basedon reviewer feedback
* fix trailing spaces in ymllint
2020-10-20 23:22:19 -07:00
Etienne Champetier
03f316e7a2
Fix proxy and module_hotfixes ( #6837 )
...
This fixes the Containerd + EL8 case that was missed in 7d1ab3374e
On CentOS 8 with proxy ansible render inline `proxy` and `module_hotfixes` options.
For example:
```
proxy=http://127.0.0.1:3128module_hotfixes=True
```
But expected result:
```
proxy=http://127.0.0.1:3128
module_hotfixes=True
```
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-10-19 23:06:07 -07:00
David Louks
79b7f0d592
Use existing variable for tiller service account name ( #6829 )
...
* Use existing variable for tiller service account name
* keep crb as tiller
2020-10-19 03:04:13 -07:00
Florent Monbillard
d25aebdaf5
Upgrade Flannel to 0.13.0 ( #6826 )
2020-10-15 10:50:22 -07:00
Matt Calvert
1454ba4a9e
Disable audio device mapping for VirtualBox VMs ( #6811 )
...
I can't see any reason why audio devices would be needed, and it can cause issues with the host audio
2020-10-13 10:30:26 -07:00
Hans Feldt
4781df587c
bump crio version to 1.19 ( #6758 )
...
* bump crio version to 1.19
* crio package name has changed for debian/ubuntu
* crio upgrade does not work, see #6757
* update crio info in docs
2020-10-13 02:08:26 -07:00
Sergey
e49330d6ee
change owner to root for bin_dir directory ( #6814 )
2020-10-12 18:13:22 -07:00
Samuel Liu
dbe6eb20c8
Modify imagepullpolicy ( #6816 )
2020-10-12 17:45:22 -07:00
yelhouti
8bec5beb4b
fix: add tags for set facts nodelocaldns ( #6813 )
2020-10-12 16:47:21 -07:00
Hans Feldt
e6effb8245
Make reset work for crio ( #6812 )
...
crio refuses to delete pods when cni is unavailable which is the
case e.g. using calico with kdd datastore. See:
https://github.com/cri-o/cri-o/issues/4084
Fix by deleting storage associated with containers. Stop and disable
crio service so switching container runtime can be done.
2020-10-12 15:47:22 -07:00
Bogdan Peste
5e32655830
Added option to force apiserver and respective client certificate to … ( #6403 )
...
* Added option to force apiserver and respective client certificate to be regenerated without necessarily needing to bump the K8S cluster version
* Removed extra blank line
2020-10-12 06:02:48 -07:00
Hans Feldt
270f91e577
cleanup kubelet_deployment_type ( #6815 )
...
No longer used/supported
2020-10-12 00:04:47 -07:00
rptaylor
07858e8f71
allow pre-existing floating IPs to be specified with k8s_master_fips ( #6755 )
...
k8s_master_no_etcd_fips should not be input var
2020-10-11 23:54:47 -07:00
holmesb
4cb5a4f609
Fix line-spacing in no_proxy.yml ( #6810 )
...
Signed-off-by: holmesb <5072156+holmesb@users.noreply.github.com>
2020-10-11 08:50:47 -07:00
Nikita Velgin
cb57c3c916
Fix handler naming issue for Kubeadm | kubelet ( #6803 )
...
Handlers with the same name (Kubeadm | restart kubelet) leads to incorrect playbook execution. As a result, after completing the tasks, kubelet does not restart. This PR fix this behavior
2020-10-11 08:26:47 -07:00
Hans Feldt
92b1166dd0
Disable dashboard by default ( #6804 )
...
Users should opt in for features and not opt out.
2020-10-11 08:06:47 -07:00
Kenichi Omichi
e6c28982dd
Chmod kubeconfig to avoid group-readable ( #6800 )
...
After upgrading to newer Kubernetes(v1.17 at least), kubectl command
shows the following warning message:
WARNING: Kubernetes configuration file is group-readable.
This is insecure. Location: /home/foo/.kube/config
The kubeconfig was copied from {{ artifacts_dir }}/admin.conf with
kubeconfig_localhost feature. It is better to set valid file mode
at getting it on Kubespray.
2020-10-09 01:39:08 -07:00
Florian Ruynat
64f69718fb
Update bunch of dependencies ( #6801 )
2020-10-09 01:35:06 -07:00
holmesb
1301e69c7d
If no_proxy_exclude_workers is true, workers will be excluded from the no_proxy variable. This prevents docker engine restarting when scaling workers. ( #6520 )
...
Signed-off-by: holmesb <5072156+holmesb@users.noreply.github.com>
2020-10-09 01:15:07 -07:00
Hans Feldt
99b8f0902e
crio: ensure service is started and enabled ( #6753 )
2020-10-07 00:10:42 -07:00
Sergey
6a4d322a7c
Do not install etcd and etcdctl on master with scale.yml playbook. ( #6798 )
...
Remove task with install etcdctl from etcd role when etcd_kubeadm_enabled=true
2020-10-06 07:04:20 -07:00
rafal-jan
9d7f358d4b
Fix csi-snapshotter timeout option. Fix ebs-external-attacher-role ClusterRole. ( #6776 )
2020-10-06 06:44:21 -07:00
bozzo
b1bb5a4796
Fix cinder & external_openstack cacert deployment ( #6745 )
...
The CA cert was only deployed on master nodes
2020-10-06 05:34:21 -07:00
5-sigma
f8ae086334
Added Comment line above checksum section to add clarification about Kubespray's version support and testing ( #6785 )
2020-10-06 05:30:21 -07:00
Florian Ruynat
c49bda7319
Update nginx ingress controller to 0.40.1 ( #6786 )
2020-10-06 05:10:21 -07:00
Florian Ruynat
aa9022d638
Use v2.14.1 as base image for CI ( #6773 )
2020-10-06 04:44:20 -07:00
Kenichi Omichi
2994ba33ac
Add oomichi to reviewers ( #6796 )
2020-10-06 00:12:19 -07:00
Bob Killen
87c0f135dc
Update triage/support label references to kind/support ( #6792 )
...
The label triage/support has been reclassified as kind/support. The
kind/* family of labels makes more logical sense, as they describe the
"kind" of thing an issue or PR is.
For more information, see the announcement email:
https://groups.google.com/g/kubernetes-dev/c/YcaJpsjjLKw/m/i15cLLx5CAAJ
2020-10-05 14:38:20 -07:00
Florian Ruynat
a687013fbe
Update kube-router to 1.1.0 ( #6793 )
2020-10-05 13:46:20 -07:00
Hans Feldt
b0097fd0c1
harden reset to work in more cases ( #6781 )
...
reset playbook fails and does not continue cleanup after for
example a host reboot with kubelet stopped/disabled
2020-10-05 12:55:21 -07:00
Joren Zandstra
9729b6b75a
Add extra arguments variables for openstack and vsphere cloud controller manager daemonsets ( #6783 )
2020-10-02 10:14:48 -07:00
Florian Ruynat
58959ae82f
Update cilium with minor fix for CVE ( #6784 )
2020-10-02 10:02:48 -07:00
Matt Calvert
4ffc106c58
Add plugins/mitogen
to .gitignore
( #6774 )
...
If the `mitogen.yml` playbook is run, it installs Mitogen in this path, causing Git to believe there to 500+ changes. This simply excludes that external module from git
2020-10-01 16:03:21 -07:00
Victor Morales
a374301570
Remove arch from flannel image tag ( #6765 )
...
The 0d0cc8cf9c
change creates several
DaemonSets to cover the Flannel CNI installation for different CPU
architectures. This change removes the unnecessary architecture value
from the docker tag value.
Signed-off-by: Victor Morales <v.morales@samsung.com>
2020-09-30 14:16:54 -07:00
dlandtwing
bc8e16fc69
nginx ingress: fix yaml for multiple nodeselectors ( #6768 )
...
In case multiple nodeselectors are specified in ingress_nginx_nodeselector, the generated daemonset yaml template for nginx is invalid due to missing indentation starting with the second nodeselector
2020-09-30 07:23:26 -07:00
Florian Ruynat
947162452d
Forgotten debian10 test during nightly tests ( #6769 )
2020-09-30 07:19:26 -07:00
petruha
7a730d42dd
Add bin_dir to PATH environment. ( #6764 )
2020-09-29 06:35:27 -07:00
Kenichi Omichi
109391031b
Add error msg for check of local ip ( #6761 )
...
When stopping at the check of "Stop if ip var does not match local ips"
the error message is like:
fatal: [single-k8s]: FAILED! => {
"assertion": "ip in ansible_all_ipv4_addresses",
"changed": false,
"evaluated_to": false,
"msg": "Assertion failed"
}
That doesn't contain actual IP addresses and it is difficult to understand
what was wrong. This adds the error message which contain actual IP addresses
to investigate the issue if happens.
2020-09-29 06:29:27 -07:00
Mateusz Adamek
aba63f0f9a
Added support for dynamic tags in AWS and Azure. ( #6752 )
...
* Added support for dynamic tags in AWS and Azure.
* Added examples of dynamic tags configuration.
2020-09-26 10:50:48 -07:00
Lennart Weller
e67886bf9d
add leader election timeouts and durations to available parameters ( #6691 )
2020-09-25 08:21:11 -07:00
Florian Ruynat
c2ac3b51c1
Update containerd to 1.3.7 - add fedora32/centos8 containerd packages ( #6749 )
2020-09-25 08:15:11 -07:00
emiran-orange
081a9e7bd8
/opt/cni/bin/install not before calico 3.16 ( #6738 )
2020-09-25 06:15:11 -07:00
Florian Ruynat
55d8ed093a
Add centos8 docker repo ( #6747 )
2020-09-25 06:11:11 -07:00
axelgobletbdr
77149e5d89
Fixes #6740 : Allow disabling reverse DNS lookups in coredns ( #6741 )
...
* created variable to enable/disable reverse dns lookups in coredns
* fixed linting-error in dns-stack.md
2020-09-25 02:33:11 -07:00
orange-llajeanne
28839f6b71
remove duplicate audit-policy-file argument in kubeadm configuration ( #6734 )
2020-09-24 09:26:06 -07:00
Florian Ruynat
49bcf91aaf
Allow period ci jobs to fail ( #6737 )
2020-09-24 09:22:06 -07:00
Hans Feldt
28073c76ac
Calico upgrade path validation and old version cleanup ( #6733 )
...
* calico: add constant calico_min_version_required
and verify current deployed version against it.
* calico: remove upgrade support with data migration
The tool was used pre v3.0.0 and is no longer needed.
* calico: remove old version support from tasks
* calico: remove old ver support from policy ctrl
* calico: remove old ver support from node
* canal: remove old ver support
* remove unused calicoctl download checksums
calico_min_version_required is the oldest version that can be installed
Older versions can be removed.
2020-09-24 09:04:06 -07:00
Mike Williams
50e8a52c74
Handle calico-rr nodes as workers so they get upgraded too ( #6447 )
...
* Handle calico-rr nodes as workers so they get upgraded too
* calico-rr nodes run 'calico and external cloud provider' too
2020-09-24 04:38:05 -07:00
Marco Martínez
5c448b6896
Add retries to update calico-rr data in etcd through calicoctl ( #6505 )
...
* Add retries to update calico-rr data in etcd through calicoctl
* Update update-node yaml syntax
* Add comment to clarify ansible block loop
* Remove trailing space
2020-09-24 03:24:05 -07:00
Sergey
c0fd5b2e84
remove variable 'etcd_ionice', because ionice removed from container image etcd:v3.4.x ( #6735 )
2020-09-23 12:34:05 -07:00
Hans Feldt
6141b98bf8
calico: default to using kdd datastore ( #6693 )
...
If already deployed, get current datastore from CNI config file
2020-09-23 08:38:09 -07:00
Florian Ruynat
2eae207435
Update docker packages to 19.03.13 + add docker f32 ( #6712 )
2020-09-23 08:32:19 -07:00
Florian Ruynat
9a8e4381be
Fix snapshot.storage apiVersion ( #6711 )
2020-09-23 08:32:10 -07:00
lukasz bielinski
5f034330c5
properly generate extravolumes in kubeadmconfig for centos ( #6708 )
2020-09-23 01:20:09 -07:00
Wang Zhen
edea63511d
Fix reserved memory unit in kubelet configuration ( #6725 )
...
* Fix reserved memory unit in kubelet configuration
Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>
* Move systemReserved default values from template
Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>
2020-09-22 15:20:09 -07:00
Florent Monbillard
80df4f8b01
Fix unintended SIGPIPE ( #6721 )
2020-09-22 11:14:42 -07:00
Florent Monbillard
68118c2653
Expose offline install overrides in inventory ( #6728 )
...
* Expose offline install overrides in inventory
* Remove not recommended warning
2020-09-22 07:14:48 -07:00
David Louks
1e79dcfcaa
Added ability to set calico vxlan vni and port. defaults to calico's … ( #6678 )
...
* Added ability to set calico vxlan vni and port. defaults to calico's documented defaults.
* Check if calico_network_backend is defined prior to checking value
* Removed calico hidden defaults for vxlan port and vni
* Fixed FELIX_VXLANVNI typo
2020-09-22 01:04:48 -07:00
David Medinets
1805e95b69
Change health check from TCP to HTTPS ( #6487 )
...
I kept seeing `TLS handshake error from 10.250.250.158:63770: EOF` from two IP addresses that correlate to my ELB. Changing the health check from TCP to HTTPS stopped the errors from being generated.
2020-09-22 00:56:47 -07:00
Victor Morales
0d0cc8cf9c
Add multi architeture support to flannel ( #6166 )
...
Signed-off-by: Victor Morales <v.morales@samsung.com>
2020-09-22 00:44:47 -07:00
Florent Monbillard
5bd937ece0
Remove pypi repo and pip extra flags ( #6729 )
2020-09-21 13:27:51 -07:00
Mateus Caruccio
8908a70c19
Fails if kubeadm_version do not matches kubernetes version ( #6302 )
2020-09-21 07:20:32 -07:00
Marc-Antoine
5ec2467268
Add external_openstack_lbaas_provider setting for occm ( #6566 )
...
* Add external_openstack_lbaas_provider setting for occm
* Integrate with existing lbaas_provider block
* Refactor lbaas_provider config template block
* Remove external_openstack_lbaas_use_octavia from sample inventory
2020-09-21 07:04:32 -07:00
orange-llajeanne
e489e70031
add new variable allowing additionnal audit webhook server options ( #6726 )
2020-09-21 06:44:32 -07:00
Florian Ruynat
05c9169c70
Fix example value for etcd_quota_backend_bytes ( #6724 )
2020-09-21 05:42:31 -07:00
David Louks
bd49c993de
Added support for setting tiller_service_account and tiller_replicas ( #6696 )
...
* Added support for setting tiller_service_account and tiller_replicas
* Specify helm 2 version to ensure we have a test path that still hits helm 2 code
* Moved tiller_service_account to defaults.yml. Fixed is tiller_replicas defined check.
2020-09-20 23:52:30 -07:00
Florent Monbillard
5989680967
Make sure node_ip is set if node is in etcd group ( #6719 )
2020-09-18 17:14:27 -07:00
Maxime Guyot
e1265b2e7b
Fix order of OS CI cleanup ( #6714 )
2020-09-18 16:20:28 -07:00
Maxime Guyot
1721460dcd
Remove vagrant.deb from docker image ( #6717 )
2020-09-18 14:48:27 -07:00
Maxime Guyot
861bf967a7
Move floruyt to approver ( #6713 )
2020-09-18 11:24:46 -07:00
Maxime Guyot
09b8314057
Add support for periodic CI ( #6715 )
2020-09-18 08:08:46 -07:00
Florian Ruynat
151b142d30
Ignore pause from kubeadm config images list ( #6689 )
2020-09-18 07:32:46 -07:00
Florian Ruynat
b7c4136702
Ignore error in check mode when disabling swap ( #6703 )
2020-09-18 07:26:46 -07:00
David Wattier
e666fe5a8d
flannel image arch specific tag ( #6685 )
2020-09-18 02:12:54 -07:00
Sebastian
9ce34be217
Added missing permissions for operator. ( #6683 )
...
Related commit: 976337b750
2020-09-18 02:12:45 -07:00
Florian Ruynat
79226d0870
Add Kubernetes hashes 1.19.2/1.18.9/1.17.12 and set default ( #6698 )
2020-09-17 11:12:45 -07:00
Maxime Guyot
686316b390
Cleanup virsh volumes in Vagrant CI ( #6688 )
2020-09-17 08:04:45 -07:00
Hans Feldt
6da385de9d
Use "kubeadm join" to join masters to control plane ( #6661 )
...
Remove configuration variable kubeadm_control_plane
2020-09-17 04:34:45 -07:00
Hans Feldt
0cc5e3ef03
Remove workaround with kube_proxy_remove ( #6512 )
...
* kube-proxy never gets deployed so need to remove it
2020-09-17 04:30:45 -07:00
Florent Monbillard
47194c1fe4
fix incorrect documentation of use_access_ip ( #6674 )
...
It was documented as if it were an Ansible variable, but it is a Terraform variable.
This also means the colon syntax was incorrect. TF variables are assigned with an equals sign.
Co-authored-by: rptaylor <rptaylor@uvic.ca>
2020-09-17 02:48:45 -07:00
David Louks
3bf40d5db9
make metallb image repos configurable ( #6671 ) ( #6672 )
...
* Make metallb image repos configurable
* Moved metallb image repo definitions to download role defaults
* Removed comment. These are set in download defaults
2020-09-17 02:45:13 -07:00
Samuel Liu
a9e11623cd
fix remove node ( #6666 )
2020-09-17 02:45:05 -07:00
Lukas Grossar
a870dd368e
Allow configuration of nodelabels in local_volume_provisioner ( #6620 )
2020-09-17 02:44:58 -07:00
Barry Melbourne
b6b26c710f
Add support for Calico CNI host-local IPAM plugin ( #6580 )
2020-09-17 02:44:46 -07:00
Florian Ruynat
705ad84ce7
Update third party librairies and tools ( #6669 )
2020-09-17 02:36:46 -07:00
Pasquale Toscano
04932f496f
Updated KataContainers version to 1.11.3 ( #6694 )
2020-09-17 02:32:45 -07:00
Florian Ruynat
dffbd58671
Move from widehat.opensuse to download.opensuse for crio centos ( #6682 )
2020-09-15 06:28:07 -07:00
Florian Ruynat
152e0162a9
Update api version, deprecated in 1.19 ( #6656 )
2020-09-11 15:12:09 -07:00
Florian Ruynat
2fa7faa75a
Update etcd to 3.4.13 ( #6658 )
2020-09-11 12:32:09 -07:00
Maxime Guyot
12f514f752
Update dockerfile for v1.19.1 ( #6668 )
2020-09-11 05:48:14 -07:00
Samuel Liu
e2886f37a2
yamllint: ignore .git dir ( #6667 )
2020-09-11 02:06:14 -07:00
w33dw0r7d
03dff09b8a
fix kubelet_flexvolumes_plugins_dir undefined ( #6645 )
2020-09-11 00:34:14 -07:00
Florian Ruynat
a556f8f2bf
Remove deprecated (and removed in 1.19) flag and function --basic-auth-file ( #6655 )
2020-09-11 00:30:14 -07:00
Florian Ruynat
1765c9125a
Update CoreDNS to 1.7.0 ( #6657 )
2020-09-10 15:48:14 -07:00
Florian Ruynat
ab28192d50
Update various dependencies following 1.19 release ( #6660 )
2020-09-10 11:07:45 -07:00
Florian Ruynat
ad15721677
Add Kubernetes 1.19.1 hashes and set default ( #6654 )
2020-09-10 10:43:46 -07:00
Hans Feldt
a2d4dbeee4
crio: use system default for storage driver by default ( #6637 )
...
After host reboot kubelet and crio goes into a loop and no container is started.
storage_driver in crio.conf overrides system defaults in etc/containers/storage.conf
/etc/containers/storage.conf is installed by package containers-common dependency
installed from cri-o (centos7) and contains "overlay".
Hosts already configured with overlay2 should be reconfigured and the
/var/lib/containers content removed.
2020-09-10 05:29:45 -07:00
Florian Ruynat
1712ba1198
Add iptables_backend to weave options ( #6639 )
2020-09-10 03:49:52 -07:00
Mikael Johansson
040dda37ed
Add comment clarifying network allocation and sizes ( #6607 )
...
* Add comment from roles/kubespray-defaults/defaults/main.yaml clarifying network allocation and sizes
Signed-off-by: Mikael Johansson <mik.json@gmail.com>
* Rewrite of the comment and added new examples
Signed-off-by: Mikael Johansson <mik.json@gmail.com>
2020-09-10 03:49:44 -07:00
holmesb
a99ba3bb16
Allowing resource management of metrics-server container. Will allow fine-tuning of resource allocation and solving throttling issues. Setting defaults as per the current request & limit allocation: cpu: 43m, memory 55Mi for both limits & requests. ( #6652 )
...
Signed-off-by: Brendan Holmes <holmesb@users.noreply.github.com>
Co-authored-by: Brendan Holmes <holmesb@users.noreply.github.com>
2020-09-10 03:46:02 -07:00
Florian Ruynat
05ff4a527d
Fix a bunch of failed quality rules ( #6646 )
2020-09-10 03:45:54 -07:00
Florian Ruynat
ae5328c500
Update calico to 3.16.1 ( #6644 )
2020-09-10 03:45:46 -07:00
spaced
34ff39e654
NetworkManager lists must be separated by , ( #6643 )
2020-09-10 03:41:44 -07:00
Florian Ruynat
8e3915f5bf
Set ansible_python_interpreter to python3 on debian (fix error with mitogen) ( #6633 )
2020-09-08 15:37:52 -07:00
Maxime Guyot
6019a1006c
Use v2.14.0 as base image for CI ( #6636 )
2020-09-08 11:31:03 -07:00
Maxime Guyot
a1f04e9869
Cleanup v1.16 hashes ( #6635 )
2020-09-08 01:51:43 -07:00
Maxime Guyot
961149b865
Update kube_version_min_required for 2.14 release ( #6634 )
2020-09-07 23:59:43 -07:00
Barry Melbourne
597c810ef0
Resolve Vagrant etcd unhealthy cluster error ( #6630 )
2020-09-07 12:09:41 -07:00
spaced
2de6a5676d
Fedora coreos networkmanager global dns and bootstrapping fix ( #6577 )
...
* remove podman cni plugin
* configure networkamanger global dns
* allow installation of python3-libselinux by disabling update repo temporary
* remove ipv4 section because it is not a valid configuration
2020-09-07 02:27:41 -07:00
Florian Ruynat
050578da94
Update Cilium to 1.8.3 ( #6629 )
2020-09-07 02:11:49 -07:00
Florent Monbillard
5a437add01
Fix upgrade playbook name ( #6625 )
...
* Fix upgrade playbook name
* Fix my fix :)
2020-09-07 02:11:42 -07:00
Florian Ruynat
6fc73e3038
Add Kubernetes 1.16.15 hashes ( #6624 )
2020-09-07 01:23:41 -07:00
Florian Ruynat
d97e9b9e50
Fix oracle linux repo ( #6627 )
2020-09-07 01:15:41 -07:00
Florian Ruynat
fa0eb11bf4
Update kubernetes dashboard ( #6623 )
2020-09-04 05:29:41 -07:00
Julien Pervillé
f660c29348
Declare port 10254 in nginx ingress pod template ( #6609 )
2020-09-04 04:54:11 -07:00
Hans Feldt
6613895de0
remove kubelet startup warnings for non docker container runtime ( #6605 )
...
Removes these startup warnings:
Warning: For remote container runtime, --pod-infra-container-image is ignored in kubelet, which should be set in that remote runtime instead
Using "/var/run/crio/crio.sock" as endpoint is deprecated, please consider using full url format "unix:///var/run/crio/crio.sock".
2020-09-04 04:54:04 -07:00
Hans Feldt
803d52ffce
kubernetes: remove unused variables ( #6601 )
2020-09-04 04:53:56 -07:00
tasekida
fc61f8d52e
Update cert manager to 0.16.1 ( #6600 )
...
* Update cert manager to 0.16.1
* Update cert manager to 0.16.1
Co-authored-by: Barry Melbourne <9964974+bmelbourne@users.noreply.github.com>
2020-09-04 04:53:48 -07:00
Maxim Pogozhiy
0553814b4f
Add selectable dns policy for kube-router ( #6586 )
2020-09-04 04:53:41 -07:00
Florian Ruynat
f1566cb8c2
Add protectKernelDefaults option (default true) to kubelet config file ( #6611 )
2020-09-03 07:41:41 -07:00
Lovro Seder
c1ba8e1b3a
Rotate kubelet server certificate. ( #6453 )
...
* Rotate kubelet server certificate.
* CI test kubelet server cert rotation
* Approve kubelet serving certificates in tests.
2020-09-03 07:25:41 -07:00
Hugo Blom
2ff7ab8d40
Add snapshot-controller for CSI drivers and snapshot CRDs, add a default volumesnapshotclass when running cinder CSI ( #6537 )
...
* add snapshot-controller and v1beta1 snapshot api
* fix typo
* udpate manifest to v1beta1
* update
* update manifests
* fix spelling
* wait until crd is applied
* fix missing info in kube module
* revert snapshotclass
* add snapshot crds before applying the csi driver
* add crds, missed them in last commit
* use pull policy from kubespray
2020-09-03 04:01:43 -07:00
Hans Feldt
93698a8f73
Calico: update crds to v1 and cr ( #6360 )
...
* Update CustomResourceDefinition for kubecontrollersconfigurations.crd.projectcalico.org to v1
* Align ClusterRole for kube-controllers with upstream (calico)
2020-09-03 00:51:40 -07:00
Maxime Guyot
6245587dc8
Fix E306 in roles/network_plugin ( #6516 )
...
Signed-off-by: Miouge1 <maxime@root314.com>
2020-09-02 23:55:40 -07:00
Florian Ruynat
2faf53b039
Check node_ip is defined when removing etcd node ( #6603 )
2020-09-01 01:05:58 -07:00
Florian Ruynat
e0b1787740
Use crictl 1.19.0 for k8s 1.19.x ( #6598 )
2020-09-01 01:05:50 -07:00
Florian Ruynat
9849dba5d3
Update cni plugins with minor fix ( #6592 )
2020-08-31 05:16:21 -07:00
Barry Melbourne
03c9c091f2
Docker: Set Cgroup driver by default to systemd ( #6563 )
...
* Set Docker Cgroup driver to systemd
* Add docker_cgroup_driver in Docker defaults
2020-08-31 04:56:20 -07:00
Marc-Antoine
5a8b68a429
Add support for openstack application credentials ( #6534 )
...
* Add support for openstack application credentials
* Add some lines for readability
* Update external_openstack_tenant_id check
Do not check external_openstack_tenant_id when application credentials are defined
* Add check for external_openstack_domain_id
* Fix typo
2020-08-31 03:30:28 -07:00
Maxime Guyot
34d88ea6d9
Fix Ansible-lint E303 ( #6409 )
2020-08-31 03:30:20 -07:00
Florian Ruynat
0665b45e61
Update nginx ingress to 0.35.0 ( #6599 )
2020-08-31 03:24:21 -07:00
Maxime Guyot
648fcf3a2e
Fix E306 in roles/etcd ( #6515 )
2020-08-31 03:20:20 -07:00
Barry Melbourne
058438a25d
Remove support for CoreOS Container Linux ( #6576 )
2020-08-28 02:28:53 -07:00
Maxime Guyot
6e938a3106
Fix E306 in other roles ( #6517 )
2020-08-28 01:20:53 -07:00
Florian Ruynat
2f93d62aa5
Update nginx ingress to 0.34.1 ( #6571 )
2020-08-27 10:15:53 -07:00
Florian Ruynat
8ba3d7ec75
Add Kubernetes 1.19 hashes ( #6593 )
2020-08-27 09:45:53 -07:00
Hans Feldt
9e2d282709
cri-o: add variable to configure unsecure pull ( #6568 )
...
By default do not allow "unqualified" (without a registry) images
because it is considered unsecure and subject to mitm attacks.
To enable insecure pull configure for example:
crio_registries:
- "docker.io"
- "quay.io"
2020-08-27 09:09:53 -07:00
Florian Ruynat
706c7cb4f1
etcd should not fail when adding an already existing member ( #6587 )
2020-08-27 02:33:01 -07:00
Florian Ruynat
5884eeb606
Remove ethtool workaround, issue is now fixed ( #6579 )
2020-08-27 02:29:01 -07:00
Florian Ruynat
e7ee19bd66
Update bunch of dependencies with minor fixes ( #6570 )
2020-08-27 02:25:01 -07:00
Hugo Blom
2f8fc92182
make it possible to open additional ports on master nodes ( #6547 )
2020-08-27 02:07:13 -07:00
nic0las
f59d3fc4a3
Deviceroutesourceaddress ( #6508 )
...
* add FELIX_DEVICEROUTESOURCEADDRESS calico option
* add calico_use_default_route_src_ipaddr option
add calico_use_default_route_src_ipaddr option to use FELIX_DEVICEROUTESOURCEADDRESS calico option
* Update k8s-net-calico.yml
2020-08-27 02:07:01 -07:00
Barry Melbourne
8e2bae0f2a
Fix Ansible Lint warnings (No such file or directory) ( #6581 )
2020-08-26 23:19:10 -07:00
Arthur Outhenin-Chalandre
e6dae03a0d
Add cilium hubble server in config ( #6575 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-26 23:19:02 -07:00
Arthur Outhenin-Chalandre
2f2ed116f7
Improve metallb template for bgp peers ( #6574 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-26 23:15:03 -07:00
Kuralamudhan Ramakrishnan
e91c6a7bd1
update the ovn4nfv-k8s-plugin image version to v1.1.0 ( #6531 )
...
Signed-off-by: Kuralamudhan Ramakrishnan <kuralamudhan.ramakrishnan@intel.com>
2020-08-26 23:11:03 -07:00
Florian Ruynat
1ff95e85f4
Rollback coredns, should not have been updated before 1.19 ( #6573 )
2020-08-26 03:30:03 -07:00
Sulochan Acharya
36924b63dc
Allow webhook authorization ( #6502 )
2020-08-24 06:29:41 -07:00
Florian Ruynat
0c80d3d9fa
Add proxy_env calculation to reset.yml ( #6558 )
2020-08-21 02:03:46 -07:00
jeanfabrice
411510cbe6
Use proper openssl command to differentiate between host and ip in API certificate check ( #6392 )
...
* Use proper openssl command to differentiate between host and ip in current certificate check
* fixup! Use proper openssl command to differentiate between host and ip in current certificate check
2020-08-21 02:03:39 -07:00
Florian Ruynat
6e2b8a5750
Add timeout to Get current version of calico cluster version, again ( #6493 )
2020-08-21 00:13:51 -07:00
Lars
ca66a96d0a
make pre-remove node draining a failable task ( #6442 )
...
and add configuration to allow ungraceful removal
2020-08-21 00:13:39 -07:00
Marc-Antoine
0c09ec5d13
Bump Openstack cloud controller image verison to 1.18.2 ( #6562 )
2020-08-21 00:10:03 -07:00
*=0=1=4=*
a8e2110b2d
#6552 Update extras_rh_repo_base_url ( #6556 )
2020-08-21 00:09:55 -07:00
Christian Strack
250541d29d
Use proper pypy download url in bootstrap script ( #6555 )
...
The bootstrap-os role uses a bootstrap script to provision a
python interpreter on flatcar and container os hosts. As the
pypy project switched to another hoster, the download url changed.
If applied this will use the new proper pypy download url in bootstrap script
2020-08-21 00:09:47 -07:00
Florian Ruynat
142b9e1eff
Update k8s hashes and set default version to 1.18.8 ( #6532 )
2020-08-21 00:09:39 -07:00
Svendegroote91
f204212963
Add docs for 'setting up your first cluster' ( #6544 )
2020-08-21 00:05:40 -07:00
Michal Petko
91ae87fa60
Fix setting node label if kube_override_hostname is defined ( #6557 )
2020-08-20 06:23:30 -07:00
Maxime Guyot
85646c96ad
Add docs about CI setup ( #6397 )
2020-08-20 04:37:23 -07:00
tasekida
d6456d13c2
Update coredns to 1.7.0 ( #6538 )
2020-08-20 04:33:44 -07:00
Florian Ruynat
98f7485303
Update weave to 2.7.0 + minor update to Cilium ( #6501 )
2020-08-20 04:33:36 -07:00
Samuel Liu
a42d811420
fix scale playbook ( #6482 )
2020-08-20 04:33:23 -07:00
Barry Melbourne
bf6fdce339
Fix cert-manager E305 ansible-lint error ( #6549 )
2020-08-20 04:25:45 -07:00
Bernard Landon
fa378f09c3
Edited pre-upgrade task to uncordon a node failing to drain ( #6546 )
2020-08-20 04:25:36 -07:00
Florian Ruynat
d9d11e2291
Update sonobuoy dependency ( #6536 )
2020-08-20 04:25:23 -07:00
Florian Ruynat
73b2683697
Allow hosts with hyphen in name ( #6529 )
2020-08-18 00:53:30 -07:00
holmesb
d8a749fd27
Update apiserver-audit-policy.yaml.j2 ( #6526 )
2020-08-18 00:49:37 -07:00
rptaylor
f2d2d080f6
add master_volume_type variable ( #6524 )
2020-08-18 00:49:29 -07:00
Florian Ruynat
78ceef6b15
Remove unused variable ( #6522 )
2020-08-18 00:45:29 -07:00
Arthur Outhenin-Chalandre
ca8e59fa85
Add new cilium options for native routing ( #6519 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-18 00:39:42 -07:00
Bernard Landon
b0210567aa
Fixed Kubespray container-engine/docker role to populate docker.service ( #6518 )
2020-08-18 00:39:30 -07:00
Arthur Outhenin-Chalandre
33ec13293b
Fix cilium_deploy_additionally with kubeadm etcd ( #6514 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-18 00:35:36 -07:00
Arthur Outhenin-Chalandre
bedb411d06
improve Cilium metrics support ( #6513 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-18 00:35:29 -07:00
Erwan Miran
ef3e98807e
tlsminversion and tlsciphersuites kubelet ( #6490 )
2020-08-13 02:48:13 -07:00
Alvaro
49158dbe40
Minor Ambassador docs updates ( #6503 )
...
Signed-off-by: Alvaro Saurin <alvaro.saurin@gmail.com>
2020-08-06 08:37:42 -07:00
Arthur Outhenin-Chalandre
35682b5228
Fix cilium strict kube proxy replacement in HA ( #6473 )
...
* Update the cilium svc proxy test to HA mode
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Fix cilium strict kube-proxy in HA
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add a single global endpoint variable
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add cilium docs about kube-proxy replacement
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Fix issues in docs
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-06 00:14:55 -07:00
Barry Melbourne
9cc70e9e70
Upgrade JetStack Cert-Manager to v0.15.2 ( #6414 )
...
* Upgrade JetStack Cert-Manager to v0.15.2
* Add README.md table of contents
2020-08-05 23:26:55 -07:00
Maxime Guyot
50598d9d47
Fix E306 in tests/ ( #6495 )
2020-08-05 13:22:55 -07:00
Maxime Guyot
fc23f37af7
Fix E306 in roles/kubernetes ( #6500 )
2020-08-05 07:56:28 -07:00
Sulochan Acharya
bfe143808f
Allows tls verify skip on webhook auth url ( #6472 )
2020-08-05 05:02:29 -07:00
Maxime Guyot
91742055e0
Fix E306 in scripts/ ( #6496 )
2020-08-05 01:56:28 -07:00
נυαη נυαηѕση
6c41f64a98
Correct sample inventory to pass yamllint ( #6499 )
...
Nit alert. Sample inventory throws an error when processed
by yamllint. The default line is currently commented out.
However, when uncommenting it our linters fail.
2020-08-05 01:52:48 -07:00
Mike Williams
e72dbf3dfc
Option for MetalLB to talk BGP ( #6383 )
...
* Option for MetalLB to talk BGP
* Check for BGP peers when metallb_protocol is bgp
* README clarification
* Commented values as documentation only in the sample inventory
* layer 2 or BGP, not both
2020-08-05 01:52:40 -07:00
Kevin Klopfenstein
c3b78c3255
bootstrap-os for remove-node ( #6154 )
2020-08-05 01:52:28 -07:00
Maxime Guyot
fb666c44b3
Quoted type constraints are deprecated ( #6497 )
2020-08-05 01:32:28 -07:00
Maxime Guyot
58b5bf7886
Update base image to v2.13.3 ( #6494 )
2020-08-05 01:28:29 -07:00
bozzo
cc70200a07
Fix Flexvolume mount in Openstack Controller ( #6480 )
2020-08-04 05:28:35 -07:00
Florent Monbillard
ffbd98fec6
Remove hvac dependency ( #6476 )
2020-08-04 05:28:28 -07:00
Steven Reitsma
f3c17361da
Create a PodDisruptionBudget for the Cinder CSI controllerplugin ( #6385 )
2020-08-04 05:28:19 -07:00
Victor Morales
bdf0238328
Upgrade molecule to v3 ( #6468 )
...
Signed-off-by: Victor Morales <v.morales@samsung.com>
2020-08-04 05:24:19 -07:00
Florent Monbillard
39b907cdfb
Remove workaround for kubeadm upgrade ( #6478 )
...
https://github.com/kubernetes/kubeadm/issues/1498 was closed
2020-08-03 01:17:40 -07:00
Florian Ruynat
24a7878e7c
Update kube-router to 1.0.1 and kube-ovn to 1.3.0 ( #6479 )
2020-08-01 00:34:04 -07:00
Konstantin Lebedev
2364a84579
fix src for audit webhook config yaml ( #6470 )
2020-08-01 00:33:56 -07:00
Hans Feldt
c6e5be91e9
crio: align template crio.conf with upstream ( #6432 )
...
* log level by default increased to 'info'
* cgroup manager by default set to 'systemd'
* stream port (used by kubelet) bound to 127.0.0.1 for security reasons
* metrics can be enabled and port specified
2020-08-01 00:33:48 -07:00
fulii
ce22c0e6a4
Add option to configure IPVS timeouts in kube-proxy configration manifest. ( #6396 )
2020-08-01 00:33:40 -07:00
Maxime Lavandier
bd60df97aa
Fix download calico policy condition ( #6474 )
2020-08-01 00:29:48 -07:00
Cristian Chiru
94df580674
Moved docker_dns_options to defaults so it can be overridden ( #6394 )
...
* Moved docker_dns_options to defaults so it can be overridden
* Fixed yaml indentation and markdown
* Moved docker_dns_search_domains to defaults
2020-08-01 00:29:41 -07:00
Kuralamudhan Ramakrishnan
90e5f8ffe1
adding ovn4nfv in kubespray ( #6381 )
...
Signed-off-by: Kuralamudhan Ramakrishnan <kuralamudhan.ramakrishnan@intel.com>
2020-07-31 07:33:08 -07:00
Florian Ruynat
bf6168fca8
Move fedora30 jobs to fedora32 ( #6426 )
2020-07-30 23:31:07 -07:00
Florian Ruynat
a78e861a89
Fix test if openstack_cacert is a base64 string ( #6421 )
2020-07-30 13:15:17 -07:00
Arthur Outhenin-Chalandre
3550e3c145
Adding kube-proxy-replacement support in cilium ( #6334 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-30 02:46:31 -07:00
Vladimir Masarik
8425c2363b
Replaced a broken link ( #6467 )
2020-07-30 00:58:31 -07:00
Samuel Liu
15ec44901d
azure csi typo ( #6469 )
2020-07-30 00:52:31 -07:00
Florent Monbillard
924cc11af6
Upgrade to kubernetes 1.18.6 ( #6405 )
...
- Add 1.17.9 and 1.16.13 SHAs
2020-07-29 14:54:09 -07:00
Alvaro
0fa5a252b9
Documentation for Ingress ( #6378 )
...
Signed-off-by: Alvaro Saurin <alvaro.saurin@gmail.com>
2020-07-29 06:55:47 -07:00
Maxime Guyot
fe46349786
Fix ansible-lint E301 for commands fetching data ( #6465 )
2020-07-28 08:39:47 -07:00
Lovro Seder
96a2b386f2
Fix shellcheck url ( #6462 )
2020-07-28 05:57:08 -07:00
Maxime Guyot
214e08f8c9
Fix ansible-lint E305 ( #6459 )
2020-07-28 01:39:08 -07:00
Maxime Guyot
8bd3b50e31
Fix ansible-lint E404 ( #6417 )
2020-07-28 01:21:08 -07:00
Maxime Guyot
b8c4bd200e
Update README.md and openstack.md ( #6455 )
2020-07-27 07:44:17 -07:00
Maxime Guyot
e70f27dd79
Add noqa and disable .ansible-lint global exclusions ( #6410 )
2020-07-27 06:24:17 -07:00
Florian Ruynat
b680cdd0e4
Move healthz check to secure ports ( #6446 )
2020-07-27 00:26:17 -07:00
Florian Ruynat
c9f63e5016
Update multus version & crio conf ( #6444 )
2020-07-26 23:36:16 -07:00
Florian Ruynat
d8a197ca51
Fix remove etcd broken with etcdctl_api 3 ( #6448 )
2020-07-26 23:32:29 -07:00
Hugo Blom
1f9841f609
update cinder csi manifests ( #6434 )
2020-07-26 23:32:17 -07:00
Florian Ruynat
aa21edeb53
Update docker package to 19.03.12 ( #6439 )
2020-07-22 09:26:06 -07:00
nniehoff
eb69f126de
* add proxy_env definition to remove_node.yml resolving #6430 ( #6431 )
2020-07-22 00:28:05 -07:00
Michal Skalski
70edccf7e0
Newer version of Local Path Provisioner in samples ( #6437 )
...
To make it less confusing for users who uncommented whole block of
local path provisioner [1] the samples should point at least to
version 0.0.3 which supports helper image [2] configured by
local_path_provisioner_helper_image_repo variable. As 0.0.3 is a bit old
samples could point to current newest release 0.0.14.
[1] 45a177e2a0 (commitcomment-38625688)
[2] 315d67fa8c
2020-07-22 00:08:11 -07:00
Konstantin Lebedev
4b80a7f6fe
Felix configuration via extraenvs of calico node ( #6433 )
2020-07-22 00:08:04 -07:00
Michael Sheinberg
e06e6895da
Remove dbus-tools from coreos bootstrap ( #6428 )
...
Trying to layer this package on Fedora 32 causes the install to crash
and furthermore it looks like the original bug linked to in the comment
has been resolved for Fedora 31
2020-07-22 00:04:04 -07:00
Florian Ruynat
50fc82acdc
Minor update to Cilium and Calico ( #6438 )
2020-07-21 23:58:33 -07:00
Igor Vuk
ea67bb6e41
Fix typo: Modprode -> Modprobe ( #6429 )
2020-07-21 23:58:25 -07:00
Minjong Kim
b19f2e2d3d
Update the calico_veth_mtu setting to affect IP-in-IP users ( #6419 )
...
* Update calico_veth_mtu to FELIX_IPINIP variable
calico_veth_mtu is specified in the configuration, but since it only works for wireguard, modify it to work for IP-in-IP users.
* Update template with more cleaner expression
2020-07-21 23:58:18 -07:00
chenguoquan1024
9c48f666ec
change /etc/ssl/etcd to etcd_config_dir param ( #6408 )
...
* change /etc/ssl/etcd to etcd_config_dir param
* add use etcd_events_data_dir param
2020-07-21 23:58:05 -07:00
Kenichi Omichi
4990eec4a2
Replace Openstack with OpenStack ( #6413 )
...
The official word is OpenStack, not Openstack as [1].
This replaces it with OpenStack in the docs.
[1]: https://www.openstack.org/
2020-07-21 23:54:05 -07:00
Florent Monbillard
bf8c8976dd
Upgrade etcd to 3.4.3 ( #5998 )
2020-07-20 07:26:51 -07:00
Konstantin Lebedev
a7ec0ed587
add audit webhook support ( #6317 )
...
* add audit webhook support
* use generic name auditsink
2020-07-20 01:32:54 -07:00
Arthur Outhenin-Chalandre
1a1fe99669
Add a way to deploy cilium alongside another CNI ( #6373 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-17 05:57:01 -07:00
Maxime Guyot
8818073ff3
Cleanup old build-cephfs-provisioner.yml playbook ( #6418 )
2020-07-17 04:15:00 -07:00
Maxime Guyot
b35e6558bc
Always enable GitLab CI artifacts for cluster-dump ( #6412 )
2020-07-16 13:45:00 -07:00
Florian Ruynat
5e22574402
Remove allow-release-candidate-upgrades already include in experimental-upgrades flag ( #6349 )
2020-07-15 00:26:37 -07:00
chenguoquan1024
e1873ab872
add calico-node selinux ( #6359 )
2020-07-15 00:22:38 -07:00
Kenichi Omichi
29312a3ec0
Add oomichi to reviwers of MetalLB addon ( #6393 )
...
I'd like to review PRs related to metallb addon as possible to make
it better, and it would be easy to track related PRs if becoming the
reviewer.
2020-07-14 20:44:37 -07:00
Qasim Sarfraz
feeb701c13
Respect kube_override_hostname during removal/upgrade ( #6347 )
...
* respect kube_override_hostname during removal/upgrade
* Use hostvars in loop
2020-07-13 07:18:40 -07:00
Daniel Schade
b347aefd61
Fixed fedora modular repos activation for fcos ( #6300 )
...
* Enable fedora modular repos for fcos #6299
* Fixed fedora modular repos activation for fcos #6300
2020-07-13 07:18:32 -07:00
Arthur Outhenin-Chalandre
abfa1636e4
Fix kube-proxy post deployment removal ( #5554 )
...
* Fix kube-proxy removal
* Fix unwanted skipped task for kube-proxy
* Fix kube_proxy_remove default
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add test for kube-router svc proxy
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-13 07:12:33 -07:00
Steven Reitsma
deca5ec903
Remove old csi-attacher flag and fix RBAC for Cinder CSI ( #6358 )
...
Add proper RBAC for new csi-attacher version
2020-07-13 04:48:32 -07:00
Arthur Outhenin-Chalandre
05b9f14b76
Update cilium minimum kernel preinstall check ( #6376 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-13 04:44:32 -07:00
petruha
4cb576da19
Add readiness probe to dns-autoscaler ( #6382 )
2020-07-13 02:50:34 -07:00
bozzo
8cb644fbec
Add Fedora CoreOS kubevirt image for tests ( #6337 )
2020-07-10 01:07:48 -07:00
Hans Feldt
22996babcf
allow kubeadm to upgrade etcd ( #6345 )
...
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
2020-07-07 12:36:00 -07:00
Hans Feldt
75ad868cbd
crio: harden downloads with retry ( #6374 )
...
CI job 624031102 failed with:
fatal: [ubuntu1804]: FAILED! => {"changed": false, "msg": "Failed to download key at https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/xUbuntu_18.04/Release.key : Request failed: <urlopen error [Errno -3] Temporary failure in name resolution>"}
Assuming its a temporary problem it should get more robust with a
couple of retries like in other roles.
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
2020-07-07 12:32:01 -07:00
spaced
9433fe46c8
Add workaround with include_task for mitogen ( #6312 )
2020-07-07 08:09:59 -07:00
Maxime Guyot
935c5093e2
Enable OVH CI ( #6365 )
2020-07-06 01:56:51 -07:00
Sam Lin
6bb47d8adb
Fix can't remove etcd node ( #6363 )
...
* add remove_node_ip
* move remove_node_ip to remove etcd part
* fix: remove tail space
* fix: handle ubuntu: focal
2020-07-04 02:02:48 -07:00
Maxime Guyot
57eefdd458
Fix azure-cloud-config.j2 JSON syntax ( #6364 )
2020-07-02 23:38:47 -07:00
Kenichi Omichi
060d25fc79
Update MetalLB README.md ( #6350 )
...
Recently MetalLB becomes one of addons with renaming the options.
This updates MetalLB README.md for this change.
2020-07-02 07:12:54 -07:00
Pasquale Toscano
4ce970c0b2
Cilium: overwrite auto-detected MTU of underlying network ( #6329 )
2020-07-02 07:12:47 -07:00
nurekage
017df7113d
Patch Calico for V3.14.0 missing CR and CRD ( #6276 )
2020-07-01 08:44:16 -07:00
Maxime Guyot
00fe3d5094
Explicitly set ETCDCTL_API and use ETCDCTL_ENDPOINTS ( #6327 )
2020-07-01 04:56:16 -07:00
Paul Rey
bcac3c62a2
Add additional metadata configuration options to external Openstack CCM (kubernetes-sigs#6338) ( #6339 )
...
* Add additional metadata configuration option to external Openstack CCM (kubernetes-sigs#6338)
* Set the variable external_openstack_metadata_search_order undefined by default
2020-07-01 04:52:17 -07:00
Florian Ruynat
2a82dff3ae
Remove runtime-config from kubeadm if empty ( #6311 )
2020-06-30 11:22:05 -07:00
Florian Ruynat
16ec5939c2
Update deprecated api ( #6245 )
2020-06-30 09:00:07 -07:00
Florian Ruynat
b064274e27
Update kube-router to 1.0.0 ( #6211 )
2020-06-30 08:54:06 -07:00
Hans Feldt
ae003af262
Fix kubelet cgroup driver detection for crio ( #6331 )
...
* Fix kubelet cgroup driver detection for crio
Remove fact standalone_kubelet since it is not used
* Fix yamllint complaints of roles/kubernetes/node/tasks/facts.yml
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
2020-06-30 02:32:05 -07:00
Florian Ruynat
f515898cb5
Update hashes and set default version to 1.18.5 ( #6335 )
2020-06-30 02:00:05 -07:00
Kenichi Omichi
25bab0e976
Change MetalLB to one of addons ( #6238 )
...
This changes MetalLB contrib to one of addons for deploying MetalLB with
Kubernetes cluster deployment. By the default, Kubespray doesn't deploy
MetalLB addon.
2020-06-29 15:11:59 -07:00
Florian Ruynat
8213b1802b
Update calico to 1.15.0 + minor update to kube-ovn/weave ( #6306 )
2020-06-29 14:39:58 -07:00
Joel Seguillon
4c1e0b188d
Add .editorconfig file ( #6307 )
2020-06-29 12:39:59 -07:00
bozzo
09b23f96d7
Use NetworkManager to manage resolv.conf in FedoraCoreOS ( #6291 )
2020-06-29 00:26:17 -07:00
Kenichi Omichi
56f389a9f3
Add USE_REAL_HOSTNAME to inventory.py ( #6293 )
...
inventory_builder creates hosts.yaml file with hostnames like "node1",
"node2", etc. Even if specifying override_system_hostname=false, the
output of "kubectl get nodes" shows those hostnames ("node1", etc.)
without using actual hostnames.
To solve this issue, this adds an option USE_REAL_HOSTNAME to get
actual hostnames when creating hosts.yaml file instead of "node1", etc.
2020-06-26 00:03:47 -07:00
Maxime Guyot
45e12df8a3
Cleanup OpenStack network things ( #6283 )
2020-06-26 00:03:39 -07:00
Mateus Caruccio
1892cd65f6
Add support for dns_etchosts ( #6236 )
2020-06-26 00:03:31 -07:00
Erwan Miran
d3ca9d1db9
kube_encryption_resources must be output as yaml ( #6309 )
2020-06-25 23:59:31 -07:00
Qasim Sarfraz
16ad344c41
Gather ansible_default_ipv4 for specific groups ( #6318 )
2020-06-25 23:55:31 -07:00
Mike Dziedziela
8ca2a9a7d5
added azure_cloud parameter to Azure's cloud_config ( #6321 )
2020-06-25 14:35:30 -07:00
Maxime Guyot
93cbcb61b8
Fix some doc links ( #6328 )
2020-06-25 11:56:37 -07:00
bozzo
276c450759
Use connection: local
when delegate_to: localhost
( #6322 )
...
This will avoid SSH connection on the local host
2020-06-25 08:14:38 -07:00
irizzant
a6a6e843af
Add /dev volume ( #6319 )
2020-06-25 06:22:38 -07:00
Florian Ruynat
f54f63ec3f
Update cilium to 1.8.0 ( #6314 )
2020-06-25 06:16:38 -07:00
Hans Feldt
93951f2ed5
fix use of ansible tags ( #6316 )
...
tags are not inherited for include_role therefore the change
from include to import
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
2020-06-25 03:00:37 -07:00
Samuel Liu
c29b21717d
Add event-ttl duration ( #6310 )
...
* Add event-ttl duration
* Fix wrong location
2020-06-24 08:15:17 -07:00
Alvaro
80d16e6c91
Support for Ambassador OSS as an Ingress ( #6135 )
...
Support for Ambassador OSS as an Ingress Controller when
settings `ingress_ambassador_enabled: true`.
Signed-off-by: Alvaro Saurin <alvaro.saurin@gmail.com>
2020-06-24 07:39:17 -07:00
Kenichi Omichi
68cfb9a053
Update OpenStack doc for external cloud provider ( #6252 )
...
Now the in-tree cloud provider is deprecated and it is recommended to
the external cloud provider for OpenStack instead.
The doc described how to upgrade from the in-tree cloud provider, but
it is better to describe how to deploy the external cloud provider from
scratch instead for current situation.
This updates the OpenStack doc for this usecase.
2020-06-22 04:48:39 -07:00
Joel Seguillon
d50fe9550c
bump dashboard to 2.0.2 ( #6303 )
2020-06-22 01:14:40 -07:00
Pasquale Toscano
8f5c4dcd2e
Add support for Kata Containers ( #6256 )
...
* Install Kata Containers as additional container runtime
* Create RuntimeClasses for Kata Containers
* Updated Vagrant to optionally run without Docker as container manager
* Updated Vagrant to optionally use Libvirt nested virtualization
* Add Kata Containers documentation
* Fix lint errors
* Add kata_containers_enabled to kubespray-defaults
* Fixed typo error
* Fixed typo error
2020-06-22 00:28:39 -07:00
Maxime Guyot
1a802726d2
Update base image to v2.13.2 ( #6296 )
2020-06-19 06:47:58 -07:00
Florian Ruynat
90c867b424
Update loadbalancers versions (haproxy&nginx) ( #6278 )
2020-06-18 07:48:19 -07:00
Florian Ruynat
eeb77369cb
Update hashes and set default to 1.18.4 ( #6285 )
2020-06-18 06:30:19 -07:00
Maxime Guyot
69a48cbdd7
Add Vagrant CI for Ubuntu 20.04 ( #6279 )
2020-06-18 01:18:05 -07:00
Florian Ruynat
33b8ad0d89
Update test-cases documentation ( #6264 )
2020-06-17 23:40:05 -07:00
Maxime Guyot
605cfeb3e4
Test bootstrap-os on more platforms ( #6277 )
2020-06-17 04:52:39 -07:00
Maxime Guyot
c6588856c7
Add Ubuntu 20.04 support and use Python 3 ( #6157 )
2020-06-16 13:04:05 -07:00
Samuel Liu
dba645421f
ADD tls cipher suites support ( #6024 )
...
* ADD tls cipher suites support
yaml lint
yamllint
* update test case
* update test case
2020-06-16 04:10:05 -07:00
Florian Ruynat
f437ac0b27
Fix nologin wrong path ( #6272 )
2020-06-16 02:30:04 -07:00
Unai Arríen
8ec6729cae
Add disable_ipv6_dns: true in E2E tests ( #6266 )
2020-06-16 01:12:03 -07:00
Florian Ruynat
19d4b5dd04
Update various dependencies ( #6265 )
2020-06-16 01:08:03 -07:00
Kenichi Omichi
78251b0304
Fix check external_openstack_tenant_name value ( #6270 )
...
We need to specify either external_openstack_tenant_name or
external_openstack_tenant_id. Those values were checked by seeing they
are defined or they have actual values separately.
However those values are always defined because of the following code
of openstack/defaults/main.yml:
external_openstack_tenant_id: "{{ lookup('env','OS_TENANT_ID')| default(lookup('env','OS_PROJECT_ID'),true) }}"
external_openstack_tenant_name: "{{ lookup('env','OS_TENANT_NAME')| default(lookup('env','OS_PROJECT_NAME'),true) }}"
So even if not specifying both values, those checks could not detect
the misconfiguration. This fixes this to detect the misconfiguration.
2020-06-16 01:02:03 -07:00
mohsen
10e54eca26
make better condition for applying nf_conntrack kernel tweak ( #6267 )
...
* MINOR: Check kernel version before enable modprobe nf_conntrack
* CLEANUP: no more need to ignore error of this task
* MINOR: Fixing yaml and ansible lint error - remove trailling-space
2020-06-16 00:34:06 -07:00
Hans Feldt
a8740c6e13
fix a few tasks falsely reporting "changed" ( #6269 )
...
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
2020-06-16 00:24:03 -07:00
Y0UZ45
06391b6dd9
Fix kubectl.sh parameter quoting ( #6239 )
...
If the special parameter "$@" is not quoted, the following command will not work:
./kubectl.sh patch storageclass my-storage-class -p '{"metadata": {"annotations":{"storageclass.kubernetes.io/is-default-class":"true"}}}'
2020-06-14 13:57:57 -07:00
marcosfsch
8dc01df60b
Oracle Linux 8 support and fixes ( #6198 )
...
* Add oraclelinux8 and disable firewalld
Add oraclelinux8 image and disable firewalld on oraclelinux VMs
* Fix Oracle Linux repositories
As documented in: http://yum.oracle.com/getting-started.html#installing-software-from-oracle-linux-yum-server
public-yum-ol7.repo was deprecated on release 7.6. Some repos were integrated into oracle-linux-ol7.repo (i.e.: ol7_latest, ol7_addons) and other are available as packages (epel). This also adds support for oraclelinux8
* Fix to use ansible_distribution_version
Instead of ansible_distribution_major_version
* Update README.md
2020-06-12 01:59:56 -07:00
Florian Ruynat
a9de6dde33
Cleanup unneeded elif in kubelet env file ( #6261 )
2020-06-12 01:27:55 -07:00
Alexander Petermann
75571ed303
manual intervention on etcd member removal aren't required anymore ( #6248 )
2020-06-12 01:13:54 -07:00
Unai Arríen
1912df7e3e
Create /etc/gai.conf if not exists when disable_ipv6_dns is 'true' ( #6258 )
2020-06-12 00:55:55 -07:00
petruha
bacbb2a0ca
Add custom dashboard namespace test ( #6249 )
...
Add custom dashboard namespace test
2020-06-12 00:52:03 -07:00
Hugo Blom
e1ba25a4fb
Bump CSI containers to latest version ( #6221 )
...
* bump csi containers
* bump snapshoter to 2.1.1
2020-06-12 00:51:55 -07:00
Kenichi Omichi
10a17cfe54
Look up OS_PROJECT_NAME for OpenStack project name ( #6262 )
...
On OpenStack history, we used to call "tenant" for separeted namespace.
However we use "project" now instead.
Then we have replaced "tenant" with "project". Then all "TENANT" variables
also are renamed to "PROJECT".
This makes Kubespray search "PROJECT" variable also for newer OpenStack
clouds.
2020-06-12 00:47:56 -07:00
Alexander Evseev
5a311236c4
Enable portmap CNI plugin with kube-router ( #6204 )
...
... to have working `hostPort` for containers.
See: https://www.kube-router.io/docs/user-guide/#hostport-support
2020-06-10 10:08:52 -07:00
Yousong Zhou
a7b8708dfc
calico: use absolute path to docker, crictl binary ( #6253 )
...
To avoid the following error (ignored when pipefail is off)
RUNNING HANDLER [network_plugin/calico : containerd | delete calico-node containers] *******************************************************************************
changed: [node1] => {"attempts": 1, "changed": true, "cmd": "crictl pods --name calico-node-* -q | xargs -I% --no-run-if-empty bash -c \"crictl stopp % && crictl rmp %\"", "delta": "0:00:00.004240", "end": "2020-06-10 03:32:41.316955", "rc": 0, "start": "2020-06-10 03:32:41.312715", "stderr": "/bin/sh: crictl: command not found", "stderr_lines": ["/bin/sh: crictl: command not found"], "stdout": "", "stdout_lines": []}
2020-06-10 03:22:08 -07:00
Florent Monbillard
8964dc53df
Add Offline docs to docs website's sidebar ( #6251 )
...
Fix the offline docs URL in README
2020-06-09 12:17:01 -07:00
Florian Ruynat
ecc3a0aec5
Update kube-ovn to 1.2.0 - also update minor version for multus and weave ( #6223 )
2020-06-09 12:09:01 -07:00
Craig Rodrigues
144743e818
Fix indentation in a few places so file can be round-tripped more easily ( #6178 )
...
with the Python ruamel.yml library
- Change True/False to true/false in a few places so file can
be more easily round-tripped with the Python ruamel.yml library
2020-06-09 06:39:20 -07:00
Alexander Petermann
7712bd0c76
remove ectd node in pre step, instead of post step ( #6099 )
2020-06-09 05:37:17 -07:00
Florian Ruynat
101686c665
Remove outdated CriticalAddonsOnly toleration and critical-pod annotation ( #6202 )
2020-06-09 05:23:30 -07:00
Florian Ruynat
f2ca929a4a
Move nodes readiness test before pods readiness ( #6089 )
2020-06-09 05:23:18 -07:00
Florent Monbillard
13f2b3d134
Improve air-gap installation instructions ( #6234 )
2020-06-09 03:25:17 -07:00
Danilo Riecken P. de Morais
50204d9551
Add rpm-ostree cleanup task ( #5986 )
2020-06-09 02:49:17 -07:00
Florian Ruynat
6852f821a5
Update nginx ingress to 0.32.0 ( #6063 )
2020-06-09 02:45:18 -07:00
Florian Ruynat
953bc8dee2
Update docker & docker-cli to 19.03.11 ( #6225 )
2020-06-07 23:55:46 -07:00
Maxime Guyot
9afd3f0c32
Use a random subnet for elastx CI ( #6232 )
2020-06-06 12:11:45 -07:00
Hugo Blom
3f443f3878
set allowVolumeExpansion in cinder csi ( #6220 )
2020-06-05 08:27:43 -07:00
Lovro Seder
5dd85197af
Manage containerd.io package with docker CRI. ( #6218 )
...
* Manage containerd.io package with docker CRI.
* Refactor common containerd stuff to separate role
* Fix check mode and unnecessary shell.
2020-06-05 05:55:44 -07:00
Florian Ruynat
764a851189
Terraform quoted references are now deprecated ( #6203 )
2020-06-05 00:05:43 -07:00
Maxime Guyot
b98cb74f5e
Use 19.03.9 in localhost CI ( #6201 )
2020-06-04 08:59:14 -07:00
spaced
750db9139a
fix CRI-O repos for centos distributions ( #6224 )
...
* fix CRI-O repos for centos distributions
* fix CRI-O repos for centos distributions
- revert workarounds
* fix CRI-O repos for centos distributions
- use https for centos repos
* avoid 302 redirects for centos repos
2020-06-04 01:08:44 -07:00
Hugo Blom
f2c8b393e1
Upgrade calico to 3.14.1 ( #6219 )
...
* upgrade calico to 3.14.1
* add checksums for calico 3.14.1 and update readme
2020-06-03 00:38:17 -07:00
Maxime Guyot
fd59556222
Add Elastx CI ( #6127 )
2020-06-03 00:00:17 -07:00
Wang Zhen
0b54e8e04c
fix documentation example ( #6216 )
...
Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>
2020-06-02 05:42:23 -07:00
Aleksandr Loktionov
85b3526617
Fix vSphere CPI configMap and vSphere CSI secret re-deploy ( #6209 ) ( #6210 )
2020-06-02 05:42:15 -07:00
Flavien
7ff8fc259b
Support all taints in network plugins manifests ( #6208 )
...
flannel, ovn and multus network plugins did not support all taint keys. This
update changes the tolerations to support them all.
According to the documentation:
```
There are two special cases: An empty key with operator Exists matches all keys,
values and effects which means this will tolerate everything. An empty effect matches
all effects with key key.
```
Usage of the empty `key` and `effect` ensures the network plugin daemonset will
be deployed on every nodes (ex: in case of custom taints, or NoExecute effect)
2020-06-02 05:38:15 -07:00
Sergey
cc507d7ace
disable bird-check flag for probes of calico-node pods when calico_network_backend is not 'bird'. ( #6217 )
2020-06-01 12:44:14 -07:00
xgdgsc
7c0fbe2959
dead link ( #6181 )
...
* dead link
* triggger ci
2020-06-01 09:33:56 -07:00
Florian Ruynat
6bc60e021e
Update minor version for dependencies ( #6206 )
2020-05-29 05:11:24 -07:00
petruha
54816f1217
Update containerd package to 1.2.13-3.2.el7 ( #6162 )
...
* Update containerd package to 1.2.13-3.2.el7
* Update Fedora containerd package versions.
* Update Redhat containerd stable and edge packages.
2020-05-29 05:11:16 -07:00
jeanfabrice
be3283c9ba
Fix conflicting clusterIP fact between coredns and nodelocaldns ( #6195 )
2020-05-29 04:27:15 -07:00
Kenichi Omichi
249b0a2a80
Allow metallb:speaker to create events ( #6147 )
...
Since MetalLB v0.8[1], metallb:speaker has started publishing an event
nodeAssigned on k8s resource.
To support MetalLB v0.8+, this allows metallb:speaker to create events.
[1]: 5cc6e23776 (diff-60053ad6fecb5a3cfabb6f3d9e720899R246)
2020-05-29 04:17:16 -07:00
Florian Ruynat
71d476b121
Auto detect github target branch in rebase script ( #6187 )
2020-05-28 12:37:15 -07:00
Florian Ruynat
45d8797dce
Fix download boolean for local_path_provisioner ( #6177 )
2020-05-28 06:56:02 -07:00
Cody Seavey
b6e21a18cc
Modify the populate no_proxy task to use a combine rather than relying on the hash_behaviour setting to be set to merge rather than replace ( #6112 )
2020-05-28 06:42:03 -07:00
petruha
f959cc296f
Fix metrics-server rules ( #6165 )
2020-05-28 03:18:02 -07:00
Flavien
ab44beba17
weave: support any taint effect in daemonset tolerations ( #6159 )
...
Since weave 2.5.1, `NoExecute` taint effect is no more supported,
this changes the daemonset tolerations to change this behavior.
Also remove the toleration key `CriticalAddonsOnly` not required anymore.
2020-05-28 01:10:02 -07:00
Florian Ruynat
b2a0b649fd
Add new Kubernetes version hashes and set default to 1.18.3 ( #6173 )
2020-05-28 01:02:03 -07:00
Florian Ruynat
6179405e84
Update docker default to 19.03 - cleanup docker docs & refs ( #6153 )
2020-05-28 00:52:02 -07:00
Maxime Guyot
83d945127f
Make vagrant CI normal ( #6074 )
2020-05-28 00:46:02 -07:00
spaced
1be15a0864
Enable crio 1.18 ( #6197 )
2020-05-28 00:42:15 -07:00
Etienne Champetier
41b44739b1
Bump CNI plugins to 0.8.6 ( #6196 )
...
https://github.com/containernetworking/plugins/releases/tag/v0.8.6
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-05-28 00:42:03 -07:00
Samuel Liu
38ca58ae8d
update pause images version: 3.2 ( #6190 )
2020-05-28 00:38:02 -07:00
Kenichi Omichi
fd7829d468
Update MetalLB version ( #6139 )
...
If running MetalLB v0.7.3 on k8s v1.18.2, metallb pods output the
following parsing error of v1.ServiceList:
$ kubectl logs controller-dbb46cf84-fw8h8 -n metallb-system
{
"caller":"reflector.go:205",
"level":"error",
"msg":"go.universe.tf/metallb/internal/k8s/k8s.go:231:
Failed to list *v1.Service: v1.ServiceList:
Items: []v1.Service: v1.Service: ObjectMeta:
v1.ObjectMeta: readObjectFieldAsBytes:
expect : after object field, parsing 1605
Then an external IP address is never allocated to the Service of
LoadBalancer type.
By updating MetalLB version to the latest v0.9[1] today, this issue
can be solved.
[1]: https://hub.docker.com/r/metallb/controller/tags
2020-05-27 14:10:03 -07:00
Wang Zhen
d62836f2ab
Replace seccomp profile docker/default with runtime/default ( #6170 )
...
Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>
2020-05-27 14:02:02 -07:00
Craig Rodrigues
4fd03b93f7
Rewrite download_hash in Python ( #5995 )
...
- Directly update the main.yml file with the new hashes.
2020-05-27 06:52:40 -07:00
Maxime Guyot
1617a6ea8e
CI upgrade from v2.13.1 ( #6188 )
2020-05-27 05:22:40 -07:00
Florian Ruynat
e9ce7243b8
Match docker-cli version with docker-engine version (when available) ( #6163 )
2020-05-25 05:37:11 -07:00
404notfoundhard
d036a04d4d
restart kubelet service when kube-config.yml is changed ( #5402 )
...
* fix(kubelet): exec notify restart kubelet service when kube-config.yml changed
* Revert "refactor(kubelet handler): change task name("reload kubelet") this is misleading"
This reverts commit 8f5d29560802c7c997293adb1ce9f84d3b20b6cb.
* fix(handlers,kubelet): setting right notify task name
2020-05-19 10:13:37 -07:00
Maxime Guyot
35ad57674e
Update containerd to 1.2.13-2 ( #6156 )
2020-05-18 07:57:36 -07:00
qvicksilver
437189c213
Fix missing permissions for OpenStack cloud-controller-manager preventing metrics scraping ( #6124 )
2020-05-18 02:35:45 -07:00
Alexander Petermann
0f5fd1edc0
update documentation to add and remove nodes ( #6095 )
...
* update documentation to add and remove nodes
* add information about parameters to change when adding multiple etcd nodes
* add information about reset_nodes
* add documentation about adding existing nodes to ectd masters.
2020-05-18 02:35:37 -07:00
Paul Rey
b5aaaf864d
Add additional network configuration options to external Openstack CCM ( #6083 ) ( #6085 )
...
* Add additional network configuration options to external Openstack CCM (#6083 )
* Change the default version of external openstack cloud controller image to v1.18.1 since there was an issue in v1.18.0 where some IPs of the private network were ignored
* Change Network section in external-openstack-cloud-config.j2 to Networking
* Add networking customization information in the openstack documentation
2020-05-18 02:31:36 -07:00
bozzo
d948839320
Fix resolv.conf configuration for Fedora CoreOS. ( #6138 )
2020-05-18 02:27:36 -07:00
Mateus Caruccio
a5af58c05a
Fix apiserver port when upgrading ( #6136 )
2020-05-18 01:21:36 -07:00
Kenichi Omichi
d8a61b94a9
Update MetalLB README ( #6140 )
...
This updates MetalLB README as following
- Remove unnecessary markdown to read it easily on github
- Make words consistency (kubernetes, loadbalancer)
- Add change-required option
2020-05-18 01:17:36 -07:00
Matthew Mosesohn
fda05df5f1
Only fix kube-proxy address on evaluating kube_master hosts ( #6152 )
...
Change-Id: I83a7101a6cd99eb531d8385de5c31aee4f474469
2020-05-17 13:05:36 -07:00
jeanfabrice
3997aa9a0f
Use OS packaging default value for apparmor_profile in crio.conf ( #6125 )
2020-05-14 21:47:00 -07:00
tasekida
81292f9cf3
Fix apt update don't access Docker’s official repository for Ubuntu ( #6106 )
2020-05-13 07:06:26 -07:00
Florian Ruynat
167e293594
Fix erroneous variable name (docker_keepcache) ( #6129 )
2020-05-13 06:26:27 -07:00
Florian Ruynat
1f9ccfe54d
Rollback metrics-server version and enable in one CI test ( #6130 )
2020-05-13 06:20:26 -07:00
Hector S
d3d0360526
Changed state to present instead of installed in glusterfs role for Debian ( #6096 )
2020-05-12 13:50:30 -07:00
Kenichi Omichi
826b0f384d
Add installation of requirements for Azure ( #6076 )
...
Due to lack of requirements installation on Azure README, the error
can happen:
"The ipaddr filter requires python's netaddr be installed on the
ansible controller"
It is nice to add the installation for Azure users.
2020-05-12 13:50:23 -07:00
Hector S
a3131e271a
Removed env vars DOCKER_NETWORK_OPTIONS and INSECURE_REGISTRY from docker.service.j2 ( #6126 )
2020-05-12 13:46:21 -07:00
Anton Kulikov
ed12936be2
Add missing RBAC rule #6116 ( #6121 )
2020-05-11 04:25:51 -07:00
Florian Ruynat
7c00ce5f30
Update metrics-server tag and template ( #6090 )
2020-05-11 03:55:50 -07:00
Florian Ruynat
c87bd53352
Update calico to 3.14.0 ( #6120 )
2020-05-11 03:51:51 -07:00
Andrew DeMaria
af1c93cdfc
Add option to expose metrics on separate port ( #6092 )
2020-05-10 12:21:51 -07:00
petruha
9ce7fc9b2c
Create namespace when dashboard deployment uses customized namespace. ( #6107 )
...
* Create namespace when dashboard deployment uses customized namespace.
* Fix syntax.
2020-05-10 11:38:02 -07:00
Florian Ruynat
b6243bfc1c
Fix ImagePullPolicy missing variable usage ( #6091 )
2020-05-10 11:37:50 -07:00
Maxime Guyot
21ea079896
Disable OVH CI ( #6114 )
2020-05-09 15:19:50 -07:00
Florian Ruynat
93579773d6
Cleanup kubernetes 1.15.x hashes (and references) as it has now reached EOL ( #5876 )
2020-05-09 12:19:50 -07:00
Florian Ruynat
0bd23f720d
Fix docker fedora packages ( #6097 )
2020-05-08 15:39:51 -07:00
Florent Monbillard
dca3bf0e80
Fix first etcd member exclusion in host group pattern ( #6109 )
2020-05-08 15:31:51 -07:00
Florian Ruynat
c605a05c6b
Update coredns to 1.6.7 ( #6086 )
2020-05-08 12:07:51 -07:00
Florian Ruynat
c44f13114f
Allow containerd runtime with fedora os (30/31) - add CI test ( #6094 )
2020-05-08 07:55:43 -07:00
lukasz bielinski
ef7076e36f
fix expected str instance, float found #6078 ( #6103 )
2020-05-08 05:57:42 -07:00
Florent Monbillard
324106e91e
Remove Kubernetes <1.16 conditionals ( #6088 )
2020-05-08 00:45:43 -07:00
Florent Monbillard
218b2a5992
Workaround about inconsistent CRI-O YUM repo path on Kubic repos ( #6101 )
2020-05-07 12:59:42 -07:00
Florian Ruynat
61e7afa9f0
Fix some typos and outdated docs ( #6071 )
2020-05-06 11:17:25 -07:00
Victor Morales
367566adaa
Fix kubernetes-dashboard template identation ( #6066 )
...
The 98e7a07fba
commit udpates the
dashboard version to 2.0.0 but it enable skip login flag wasn't
updated. This change updates its identation to avoid issues when
dashboard_skip_login is enabled.
2020-05-06 11:17:17 -07:00
Florian Ruynat
c06f482901
Update default kubernetes version to 1.18.2 ( #6064 )
2020-05-06 11:17:09 -07:00
Florian Ruynat
965fe1db94
Update cni spec to 0.4.0 for network plugin allowing it ( #6053 )
2020-05-06 11:13:09 -07:00
Florian Ruynat
f6be326feb
Update kube-ovn to 1.1.1 ( #6060 )
2020-05-06 11:05:09 -07:00
Michael Sheinberg
c58e5e80ce
Bump pypy to 7.3.1, verify hash ( #6070 )
...
As of pypy 7.3.0, we can utilize the official pypy project as opposed to
the previously used "portable-pypy" distribution.
2020-05-06 04:49:08 -07:00
Maxime Guyot
641a2a8bb4
Skip molecule tests for Ubuntu 18.04 ( #6077 )
2020-05-05 07:17:09 -07:00
Florian Ruynat
7d497e46c5
Update calico to 3.13.3 ( #6061 )
2020-05-04 08:56:26 -07:00
Kenichi Omichi
d414588a47
Azure: Rename apply-rg_2.sh to apply-rg.sh ( #6049 )
...
apply-rg.sh was for Azure command version 1("azure" command) and the
command is old and version 2("az" command) is officially used today.
apply-rg_2.sh was for the version 2. In addition, the README[1] says
we need to run apply-rg.sh for applying templates.
This renames apply-rg_2.sh to apply-rg.sh for common usages of the
version 2.
[1]: https://github.com/kubernetes-sigs/kubespray/tree/master/contrib/azurerm#generating-and-applying
2020-05-03 12:42:26 -07:00
Florian Ruynat
79de8ff169
Replace "replicas" option (CI tests) removed in latest k8s versions ( #6068 )
2020-05-03 12:36:34 -07:00
Florian Ruynat
38daee41d5
Reorder tests in packet file ( #6067 )
2020-05-03 12:36:26 -07:00
Florian Ruynat
f8f55bc413
Update cilium to 1.7.3 ( #6069 )
2020-05-03 12:32:26 -07:00
Maxime Guyot
7457ce7f2d
Update Kubespray CI image to v2.13.0 ( #6062 )
2020-05-02 00:56:26 -07:00
Maxime Guyot
01dbc909be
Make Vagrant CI use unsafe I/O ( #6058 )
2020-05-01 07:30:29 -07:00
Kenichi Omichi
0512c22607
Update contrib/azurerm/README.md ( #6057 )
...
The ansible-playbook needs to ssh-login to Azure virtual machines with
ssh keypair, and users need to specify ssh_public_keys for their own
ssh public key. The change of ssh_public_keys is mandatory.
So this updates contrib/azurerm/README.md to explain that.
In addition, the path of all.yml was wrong. That also is updated with
this.
2020-04-30 23:46:12 -07:00
Kenichi Omichi
f0d5a96464
Update deprecated command in azure script ( #6056 )
...
apply-rg_2.sh uses 'az group deployment' command but the command is
deprecated like the following warning message:
"This command is implicitly deprecated because command group
'group deployment' is deprecated and will be removed in a future release.
Use 'deployment group' instead."
This updates these deprecated commands.
FYI: The command has been deprecated since [1] on azure-cli side.
[1]: 991cb7cc7c (diff-2057bbb8441166e4910b34b09d22b58cR222)
2020-04-30 23:46:06 -07:00
Florian Ruynat
361645e8b6
Fix multus missing cni and erroneous CI tests ( #6051 )
2020-04-30 23:38:05 -07:00
Maxime Guyot
353d44a4a6
Add CI var for http_proxy ( #6039 )
2020-04-30 05:44:17 -07:00
qvicksilver
680aa60429
Specify tag for OpenStack Cloud Controller image ( #6048 )
2020-04-30 02:02:17 -07:00
Kenichi Omichi
6b3cf8c4b8
Update azure with az command ( #6042 )
...
As the download page[1], the command name is "az", not "azure". This
replaces "azure" command with "az" command for fixing it.
In addition, "az account list-locations" is correct command line to
know available location as [2].
[1]: https://docs.microsoft.com/en-gb/azure/xplat-cli-install
[2]: https://docs.microsoft.com/en-us/cli/azure/account?view=azure-cli-latest#az-account-list-locations
2020-04-30 00:00:26 -07:00
qvicksilver
e41766fd58
Fix broken Octavia integration in OpenStack External Cloud Provider ( #6046 )
2020-04-29 11:30:25 -07:00
Maxime Guyot
e4c820c35e
Add molecule tests to containerd role ( #6037 )
2020-04-29 09:08:25 -07:00
Joel Seguillon
db5f83f8c9
update dashboard access doc for 2.0.x ( #6036 )
...
* update dashboard access doc for 2.0.x
* make metrics scrapper system-cluster-critical
2020-04-29 07:20:25 -07:00
Maxime Guyot
412d560bcf
Add CI for 16x ubuntu servers ( #6040 )
2020-04-29 07:14:24 -07:00
Florian Ruynat
a468954519
Fix default value for standalone tests ( #6043 )
2020-04-29 06:34:24 -07:00
Lee Spottiswood
a3d3f27aaa
allow dns autoscaler limits to be specified via variables ( #6020 )
2020-04-28 23:34:25 -07:00
Florian Ruynat
72b68c7f82
Update spray version in ci/dockerfile ( #6041 )
2020-04-28 23:26:25 -07:00
Maxime Guyot
28333d4513
Fix crio runc path on Ubuntu ( #6035 )
2020-04-28 05:28:06 -07:00
Florent Monbillard
ed8c0ee95a
Add EppO to the reviewers group ( #6034 )
2020-04-28 11:21:09 +03:00
Hugo Blom
724a316204
Cinder-CSI default storageclass and volumeBindingMode ( #6026 )
...
* Set volumeBindingMode in cinder CSI template (#22 )
* make sure true/false is lowercase in cinder-csi storageclass
2020-04-28 00:12:04 -07:00
marcosfsch
d70cafc1e4
vagrant: Add Flatcart images ( #6029 )
2020-04-28 00:08:05 -07:00
Hugo Blom
18c8e0a14a
rename mitogen playbook inside makefile ( #6025 )
2020-04-27 01:13:29 -07:00
Florian Ruynat
3ff6a2e7ff
Update default (erroneous) backend value for calico ( #6031 )
2020-04-27 00:03:39 -07:00
Florian Ruynat
1ee3ff738e
Add option to enable usage reports to calico servers ( #6030 )
2020-04-27 00:03:30 -07:00
Qasim Sarfraz
52edd4c9bc
Fix liveness probe for cilium operator ( #6016 )
2020-04-26 23:59:29 -07:00
Samuel Liu
d8345c5eae
MetalLB IP address range extension ( #6023 )
...
* MetalLB IP address range extension
* MetalLB IP address range extension
2020-04-26 23:55:28 -07:00
Joel Seguillon
98e7a07fba
bump to dashboard 2.0.0 with metrics scrapper support ( #5821 )
...
* bump to dashboard 2.0 rc6 with metrics scrapper
* fix missing yaml seperator making Replicaset complaining about missing ServiceAccount
* unwanted legay gross hack forgot to remove before
* no need namespace on CrBinding
* bump to 2.0.0 release
* remove dashboard_metrics_scrapper_enabled
2020-04-25 03:55:28 -07:00
Pasquale Toscano
3d5988577a
Support Cilium from version 1.5 ( #6006 )
2020-04-24 06:00:10 -07:00
Sergey
69603aed34
add strategy mitogen_linear when installed mitogen ( #5985 )
...
* add strategy mitogen_linear when installed mitogen
* add small docs
Rename playbook file
The raw action executes as a regular Mitogen connection, which requires Python on the target, so add strategy: linear to bootstrap-os role playbook.
* add mitogen to CI test
fix typo
* enable mitogen test on deploy-part1 tests
change version from master to release
download tar.gz archive
* run all CI tests with mitogen
* disable mitogen with upgrade CI tests
* enable mitogen on CI tests via env vars
* disable mitogen on CI test by default, enable on some different OS
* disable mitogen CI test on centos8
(get error /usr/bin/python: No such file or directory)
2020-04-24 05:20:07 -07:00
Florian Ruynat
299e35ebe4
Cleanup unused/erroneous variables ( #6003 )
2020-04-24 01:54:07 -07:00
Maxime Guyot
6674be2572
Cleanup Vagrant VMs before molecule and vagrant CI ( #6009 )
2020-04-24 01:30:07 -07:00
spaced
cf1566e8ed
Centos, debian and fedora CRI-O repo ( #6008 )
...
* replace removed repo with kubic repository for centos 7
* add crio configuration for centos8
* add crio configurations for debian
* use correct crio version for fedora
* simplify calulation of required crio version
- gives possibility to overwrite
* change default path for runc
* change default for seccomp path
* change default for conmon
2020-04-24 01:18:07 -07:00
Maxime Guyot
c6d91b89d7
Update CONTRIBUTING.md ( #6012 )
2020-04-23 14:36:06 -07:00
Maxime Guyot
b44f7957d5
Update CI matrix ( #6010 )
2020-04-23 09:51:11 -07:00
Sergey
aead0e3a69
bump minimal ansible version to 2.8.0 ( #5984 )
...
* bump minimal ansible version to 2.8.0
* check ansible version in separate playbook
2020-04-22 13:33:44 -07:00
spaced
b0484fe3e5
Ubuntu crio repo ( #5994 )
...
* declare kubic repo for ubuntu
* do not install crictl twice
* move fedora repo modular tasks to crio_repo file
* move centos repo tasks to crio_repo
* declare crio version matrix for ubuntu
* update documentation crio support for ubuntu
2020-04-22 13:29:45 -07:00
Florian Ruynat
b8cd9403df
Fix nginx template missing latest changes ( #6000 )
2020-04-22 08:41:52 -07:00
Florent Monbillard
d7df577898
k8s-dns-node-cache 1.15.12 was released ( #5999 )
2020-04-22 07:43:53 -07:00
Maxime Guyot
09bccc97ba
Add CRI-O CI ( #5460 )
2020-04-22 06:09:52 -07:00
Florian Ruynat
1c187e9729
Downgrade coredns to 1.6.5 due to upgrade errors while migrating coredns configmap (Corefile) ( #5960 )
2020-04-22 05:27:52 -07:00
Maxime Guyot
8939196f0d
Verify apiserver version in CI ( #5918 )
2020-04-21 12:31:53 -07:00
Kenichi Omichi
15be42abfd
Update path of all.yml on Azure README ( #5993 )
...
cloud_provider option exists in ./inventory/sample/group_vars/all/all.yml
In addition, the quick start shows to create configuration by copying
./inventory/sample. So this updates path of all.yml for fitting the above.
2020-04-21 07:21:04 -07:00
Florian Ruynat
ca45d5ffbe
Fix retries keyword missing until instruction ( #5989 )
2020-04-21 07:20:56 -07:00
Victor Morales
2bec26dba5
Add proxy support to CRI-O service ( #4607 )
...
* Add proxy support to CRI-O service
The crio.service requires proxy environment variables when it's
deployed behind a corporated network. This change creates a systemd
configuration file when the proxy variables are defined.
* Remove unnecesary crio's tasks
2020-04-21 04:12:55 -07:00
Pierre Lebrun
03c8d0113c
Add vSphere external cloud provider ( #5959 )
2020-04-20 08:47:39 -07:00
Lovro Seder
536606c2ed
Fix kube-proxy ds win nodeselector check for 1.17 ( #5982 )
...
* Fix kube-proxy ds nodeselector for older versions
* Fix for ansible-lint
2020-04-20 08:43:39 -07:00
Sergey
6e29a47784
generate flannel manifest only on first master ( #5983 )
2020-04-20 01:33:38 -07:00
Florian Ruynat
826a440fa6
Add floryut to reviewers ( #5979 )
2020-04-19 22:53:38 -07:00
Sergey
baff4e61cf
remove image flannel cni ( #5980 )
2020-04-19 06:13:37 -07:00
Maxime Guyot
4d7eca7d2e
Add Dockerfile for vagrant image ( #5977 )
2020-04-18 13:53:36 -07:00
Florian Ruynat
32fec3bb74
Update minor version for tools (helm, busybox, registry etc...) ( #5961 )
2020-04-18 07:59:36 -07:00
Maxime Guyot
3134dd4c0d
Drop support for Fedora 28 and add Fedora 30 and 31 ( #5969 )
2020-04-18 06:35:36 -07:00
Maxime Guyot
56a9c7a802
Add Vagrant CI ( #5487 )
2020-04-18 06:09:35 -07:00
Maxime Guyot
bfa468c771
Ensure upgrade CI jobs are named correctly ( #5909 )
2020-04-18 06:05:36 -07:00
Sergey
6318bb9f96
Return the ability to start control plain from the hyperkube image ( #5422 )
2020-04-18 05:59:36 -07:00
Florian Ruynat
8618a3119b
Fix selector check for windows ( #5974 )
2020-04-18 00:41:35 -07:00
Lovro Seder
27a268df33
Gather just the necessary facts ( #5955 )
...
* Gather just the necessary facts
* Move fact gathering to separate playbook.
2020-04-17 16:23:36 -07:00
Victor Morales
7930f6fa0a
Ensure /etc/sysconfig/proxy for openSUSE bootstrap ( #5445 )
...
The playbook that bootstrap openSUSE servers assumes that the
/etc/sysconfig/proxy file exists but the execution fails when
these file is not present. This change guarantees its existence.
2020-04-17 14:23:35 -07:00
Florian Ruynat
49bd208026
Update hashes (1.18.2/1.17.5/1.16.9) and set default to 1.17.5 ( #5967 )
2020-04-17 06:55:07 -07:00
Florian Ruynat
83fe607f62
Cleanup deprecated labels beta.kubernetes.io/arch and beta.kubernetes.io/os ( #5964 )
2020-04-17 05:51:06 -07:00
Kenichi Omichi
ea8b799ff0
Update link to deprecated repository ( #5965 )
...
https://github.com/colemickens/azure-kubernetes-status is deprecated
and will be removed soon as the README.
So this updates the link to the repository for a new one.
2020-04-17 04:07:07 -07:00
Rishi
e2d6f8d897
Update packet.md ( #5963 )
...
The Terraform installation part states that is for CentOS 7, but the echo command refers to OS X binary. Updated the echo command to use the Linux version.
2020-04-16 13:07:07 -07:00
Maxime Guyot
0924c2510c
Use role to copy CNI bin ( #5953 )
2020-04-16 10:06:45 -07:00
qvicksilver
065292f8a4
Terraform/OpenStack: Allow free form worker node definition ( #5952 )
...
* Terraform/OpenStack: Allow free form worker node definition
* fixup! Terraform/OpenStack: Allow free form worker node definition
2020-04-16 07:52:45 -07:00
Sergey
35f248dff0
assembly fallback_ips and no_proxy var only one time on localhost and… ( #5957 )
...
* assembly fallback_ips and no_proxy var only one time on localhost and populate result on all hosts
* add tag always, fix ansible lint errors
* workaround to mitogen issue dw/mitogen#663
* do not gather fact before install python on coreos like distros
* try to pass docker molecule test
2020-04-16 07:22:47 -07:00
Lovro Seder
b09fe64ff1
Calculate inventory list only once ( #5956 )
2020-04-16 06:12:45 -07:00
Florent Monbillard
54debdbda2
Generate unique username per cluster in client kubeconfig ( #5943 )
...
* Generate unique username per cluster
* rename admin kubeconfig shell output to raw_admin_kubeconfig
* Make the linter happy
* Fix lint errors
* Cleaning up tasks
2020-04-16 05:32:45 -07:00
aharrisson
b6341287bb
Add Molecule to Docker role ( #5129 )
...
* Add Molecule for container-engine/docker
* Add bootstrap-os to Molecule prepare stage
2020-04-15 23:28:45 -07:00
Florian Ruynat
6a92e34994
Update tests names ( #5904 )
2020-04-15 09:24:03 -07:00
Pasquale Toscano
00efc63f74
Customize PodSecurityPolicies from inventory ( #5920 )
...
* Customize PodSecurityPolicies from inventory
* Fixed yaml indentation
2020-04-15 03:18:02 -07:00
Ryler Hockenbury
b061cce913
Allow configureable vni and port for flannel overlay ( #5939 )
2020-04-15 03:14:02 -07:00
Florian Ruynat
c929b5e82e
Upgrade kube-ovn to v1.1.0 and move test from centos7 to centos8 ( #5852 )
2020-04-15 03:10:03 -07:00
Florian Ruynat
58f48500b1
Update Flannel manifests, install script and version (0.12) + fix tests scripts ( #5937 )
...
* Add CI_TEST_VARS to tests
* Update flannel to 0.12.0 (with new manifests) and disable tx/rx
offloading in networking test
2020-04-14 23:48:02 -07:00
Florian Ruynat
b5125e59ab
update rbac.authorization.k8s.io to non deprecated api-groups ( #5517 )
2020-04-14 13:14:04 -07:00
Christopher Randles
d316b02d28
else condition required otherwise AnsibleUndefinedVariable is triggered ( #5722 )
2020-04-14 07:06:12 -07:00
MikeG
7910198b93
fix error in templating in local-path-provisioner ( #5950 )
2020-04-14 06:52:12 -07:00
Carlos Tolon
7b2f35c7d4
Update vars.md ( #5947 )
...
Add the `container_manager` variable as a Cluster Variable in the global Docs
2020-04-13 23:11:10 -07:00
Florian Ruynat
45874a23bb
Remove 1.16.x flag for packet_centos7-weave-kubeadm-sep ( #5907 )
2020-04-11 00:15:48 -07:00
spaced
9c3b573f8e
Cleanup fedora coreos with crio container ( #5887 )
...
* fix upgrade of crio on fcos
- update documents
* install conntrack required by kube-proxy
- like commit 48c41bcbe7
* enable fedora modular repo for crio
* allow to override crio configuration
- set cgroup manager same to kubelet_cgroup_driver if defined
- path of seccomp_profile depends on distribution
* allow to override crio configuration
- fix path for ubuntu
* allow to override crio configuration
- fix cni path for fcos
2020-04-10 23:51:47 -07:00
Pasquale Toscano
7d6ef61491
Fix metallb speaker when podsecuritypolicy_enabled=true ( #5932 ) ( #5933 )
2020-04-10 23:48:03 -07:00
Florian Ruynat
6a7c3c6e3f
Upgrade terraform version to 0.12.24 ( #5928 )
2020-04-10 23:47:56 -07:00
Chris
883194afec
Fix Cilium permissions ( #5923 )
...
* added required permissions for querying endpointslice resources
* copy-pasted role permissions from cilium install manifests
* bumped cilium version to v1.7.2
2020-04-10 23:47:48 -07:00
Sergey
3a63aa6b1e
downgrade nodelocaldns version due bug with flood to error log ( #5931 )
...
https://github.com/kubernetes/kubernetes/issues/90043
2020-04-10 23:41:55 -07:00
Sergey
337499d772
Remove hashes only for EOL version in RELEASE cycle. ( #5924 )
2020-04-10 23:41:47 -07:00
Florian Ruynat
82123f3c4e
Upgrade azure csi and fix aws csi tag ( #5938 )
2020-04-10 17:53:47 -07:00
Sergey
8f3d820664
always download docker image on download_host when download_run_once=true ( #5921 )
2020-04-10 01:59:47 -07:00
Maxime Guyot
7d812f8112
Set LANG in Dockerfile ( #5929 )
2020-04-10 01:25:46 -07:00
Florian Ruynat
473a8beff0
Remove hard-coded dependance to docker.service in kubelet.service file ( #5917 )
2020-04-09 08:43:46 -07:00
Alexander Kross
0d675cdd1a
Update Calico to v3.13.2, Multus to v3.4.1. Add ConfigMap get permission to allow calico-node access to kubeadm config. ( #5912 )
2020-04-09 07:27:43 -07:00
aharrisson
9cce46ea8c
Fix idempotence issue in bootstrap-os ( #5916 )
2020-04-09 03:31:44 -07:00
qvicksilver
2e67289473
Terraform/OpenStack: Fix idempotency bug in module.network.openstack_networking_router_interface_v2.k8s[0] ( #5914 )
2020-04-09 02:27:44 -07:00
Florian Ruynat
980aeafebe
Add kubernetes 1.18.1 hashes ( #5915 )
2020-04-09 01:53:43 -07:00
Denis Kadyshev
7d1ab3374e
Proxy fixes ( #5869 )
...
* Fix proxy and module_hotfixes
On CentOS 8 with proxy ansible render inline `proxy` and `module_hotfixes` options.
For example:
`proxy=http://127.0.0.1:3128module_hotfixes=True `
But expected result:
```
proxy=http://127.0.0.1:3128
module_hotfixes=True
```
* Use ini_file module for work with ini files
* Prevent duplicates proxy= option in /etc/yum.conf
Module `lineinfile` is weak, use most powerful module `ini_file` and add or remove `proxy=` when `http_proxy` is defined or not.
2020-04-09 01:25:44 -07:00
Florian Ruynat
01b9b263ed
Remove 1.16.x flag for tf-ovh_coreos-calico (now 1.17 ready) ( #5853 )
2020-04-08 10:57:44 -07:00
Alexander Kross
c33a049292
Update docker RHEL/CentOS versions to the latest patch versions available. ( #5872 )
2020-04-08 10:09:45 -07:00
Maxime Guyot
7eaa7c957a
Fix conntrack for opensuse and docker support ( #5880 )
2020-04-08 07:37:44 -07:00
Florian Ruynat
f055ba7965
Add crictl 1.18.0 hashes for k8s 1.18 ( #5877 )
2020-04-08 02:19:43 -07:00
spaced
157c247563
fix readonly flexvolume in fcos and coreos ( #5885 )
2020-04-08 01:41:43 -07:00
Etienne Champetier
a35b6dc1af
Fix scaling ( #5889 )
...
* etcd: etcd-events doesn't depend on etcd_cluster_setup
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* etcd: remove condition already present on include_tasks
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* etcd: fix scaling up
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* etcd: use *access_addresses, do not delegate to etcd[0]
We want to wait for the full cluster to be healthy,
so use all the cluster addresses
Also we should be able to run the playbook when etcd[0] is down
(not tested), so do not delegate to etcd[0]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* etcd: use failed_when for health check
unhealthy cluster is expected on first run, so use failed_when
instead of ignore_errors to remove scary red messages
Also use run_once
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* kubernetes/preinstall: ensure ansible_fqdn is up to date after changing /etc/hosts
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* kubernetes/master: regenerate apiserver cert if needed
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-04-08 01:27:43 -07:00
Alexander Kross
910a821d0b
Fix chicken and egg problem with proxy_env not defined on the first … ( #5896 )
...
* Fix chicken and egg problem with proxy_env not defined on the first envinronment usage.
* Disable fact gathering for the first proxy_env evaluation.
* Move proxy_env var set up from the role defaults to the root playbooks as fact.
2020-04-08 00:53:43 -07:00
Joel Seguillon
2c21e7bd3a
make explicit that doc is at kubespray.io ( #5878 )
2020-04-08 00:19:43 -07:00
MikeG
45a177e2a0
add local-path-provosioner helper image def ( #5817 )
2020-04-07 23:51:43 -07:00
spaced
0c51352a74
remove unused kubelet options ( #5903 )
2020-04-07 11:51:44 -07:00
Florian Ruynat
9b1980cfff
Change docker.io repo to variable and upgrade alb image ( #5898 )
2020-04-07 08:07:42 -07:00
Florian Ruynat
ae29296e20
Replace latest tags for csi drivers ( #5899 )
2020-04-07 06:55:44 -07:00
Etienne Champetier
75e743bfae
CentOS 8 CI ( #5842 )
...
* requirements.txt: Bump versions
Ansible 2.8+ allow ansible_python_interpreter autodetection
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* tests: do not force ansible_python_interpreter
we do not expect people to set ansible_python_interpreter, so we should not set it in the CI
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* Add CentOS 8 Calico to CI
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-04-07 05:49:43 -07:00
Etienne Champetier
2f19d964f6
Bump requirements.txt versions / remove ansible_python_interpreter hack ( #5847 )
...
* requirements.txt: Bump versions
Ansible 2.8+ allow ansible_python_interpreter autodetection
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* tests: do not force ansible_python_interpreter
we do not expect people to set ansible_python_interpreter, so we should not set it in the CI
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-04-07 01:47:44 -07:00
qvicksilver
0d2990510e
Terraform/OpenStack: Enable usage of an existing router ( #5890 )
2020-04-06 02:41:46 -07:00
Maxime Guyot
e732df56a1
Move packet_centos7-calico-ha-once-localhost to the appropriate CI stage ( #5881 )
2020-04-02 02:02:24 -07:00
Florian Ruynat
2f92d6bca3
Upgrade coredns to 1.6.9 ( #5871 )
2020-04-01 10:58:23 -07:00
Maxime Guyot
c72903e8d6
Update release policy ( #5749 )
2020-04-01 07:29:28 -07:00
Maxime Guyot
ded58d3b66
Add molecule test for bootstrap-os ( #5845 )
2020-04-01 07:25:28 -07:00
Maxime Guyot
be9414fabe
Add cluster dump artifact in CI jobs ( #5796 )
2020-04-01 07:23:29 -07:00
Maxime Guyot
033afe1574
Fix Docker in Docker CI jobs ( #5867 )
2020-04-01 07:19:28 -07:00
Craig Rodrigues
c35461a005
Add checksums for v1.18.0 ( #5843 )
...
* Add checksums for v1.18.0
* Add crictl version for k8s 1.18
2020-04-01 06:41:28 -07:00
Florian Ruynat
a93421019b
Upgrade ingress-nginx to 0.30.0 ( #5870 )
2020-04-01 03:57:28 -07:00
Maxime Guyot
4fd3e2ece7
Fix download_run_once in packet_ubuntu18-flannel-containerd-once ( #5864 )
2020-04-01 03:15:28 -07:00
Ali Sanhaji
937adec515
Azure Disk CSI deployment ( #5833 )
...
* Azure Disk CSI deployment
* Mention Azure CSI support
* Fix: remove unnecessary file
* Typo in documentation
* Add newline to end of file
2020-04-01 00:53:27 -07:00
matjazp
bce3f282f1
fix systemd cgroup driver for containerd ( #5220 )
2020-04-01 00:43:26 -07:00
Vinayaka V Ladwa
f8ad44a99f
Azure vmss - kubelet: failed to get instance ID from cloud provider: instance not found #5824 ( #5855 )
...
* kubernetes-sigs-kubespray #5824
Added support nodes which are part of Virtual Machine Scale Sets(VMSS)
* kubernetes-sigs-kubespray #5824
* kubernetes-sigs-kubespray #5824
Added comments and updatetd azure docs.
* kubernetes-sigs-kubespray #5824
Added supported values comments for "azure_vmtype" in azure.yml
2020-03-31 10:12:40 -07:00
Maxime Guyot
7ee2f0d918
Hide after_script output if return code is zero ( #5862 )
2020-03-31 05:28:40 -07:00
Maxime Guyot
9cbb373ae2
Update base CI image to v2.12.5 ( #5858 )
2020-03-31 01:28:40 -07:00
Ali Sanhaji
484df62c5a
GCP Persistent Disk CSI Driver deployment ( #5857 )
...
* GCP Persistent Disk CSI Driver deployment
* Fix MD lint
* Fix Yaml lint
2020-03-31 00:06:40 -07:00
Anshul Sharma
79a6b72a13
Removed deprecated label kubernetes.io/cluster-service ( #5372 )
2020-03-30 01:19:53 -07:00
Christopher Randles
d439564a7e
disable gpgcheck if gpgkey is empty ( #5621 )
...
Signed-off-by: Chris Randles <randles.chris@gmail.com>
2020-03-30 01:13:53 -07:00
Martin Zobel-Helas
b0a5f265e3
Honor bastion host config from inventary ( #5522 )
...
Before this commit, the bastion entry in the inventary was not honored,
so machines behind firewalls or with unrouted addresses were not
reachable for ansible.
2020-03-30 01:11:53 -07:00
Mateus Caruccio
8800eb3492
Remove unicode chars from coredns template ( #5848 )
2020-03-27 11:39:54 -07:00
Florian Ruynat
09308d6125
Upgrade to Kubernetes 1.174 ( #5628 )
...
* Upgrade to Kubernetes 1.17.4 - change defaults
* Update ci jobs to previous k8s release (will fix them afterward)
2020-03-27 07:40:23 -07:00
Pierre Gaxatte
a8822e24b0
Fix terraform formatting ( #5823 )
2020-03-27 05:46:24 -07:00
Maxime Guyot
a60e4c0a3f
Remove unused kubeadm_enabled variable ( #5838 )
2020-03-27 04:58:23 -07:00
Maxime Guyot
b2d740dd1f
Add Ubuntu 20.04 RC image and test job ( #5836 )
2020-03-27 02:14:23 -07:00
Mateus Caruccio
3237b2702f
Add config coredns_external_zones ( #5280 )
...
Allows to add custom zone resolving servers.
2020-03-26 23:34:23 -07:00
Craig Rodrigues
e8c49b0090
Improve curl invocation ( #5844 )
...
- make it follow redirects
- error out if an HTTP error is encountered
2020-03-26 23:12:23 -07:00
Maxime Guyot
3dd51cd648
Add moreutils in Dockerfile ( #5839 )
2020-03-26 13:58:23 -07:00
Maxime Guyot
e03aa795fa
Move long running jobs into separate CI stage ( #5837 )
2020-03-26 13:56:24 -07:00
Ali Sanhaji
a8a05a21a4
AWS EBS CSI implementation ( #5549 )
...
* AWS EBS CSI implementation
* Fixing image repos
* Add OWNERS file
* Fix expressions
* Add csi-driver tag
* Add AWS EBS prefix to variables
* Add AWS EBS CSI Driver documentation
2020-03-25 13:10:25 -07:00
Xiaodu
63fa406c3c
Move host_architecture to kubespray-defaults ( #5811 )
...
The variable is defined in `kubernetes/preinstall` role and used in several roles. Since `kubernetes/preinstall` is not always included when `ansible-playbook` is run with tag selectors (see #5734 for reason), they will fail, or individual roles must copy the same fact definitions (as in #3846 ). Moving the definition to the always-included `kubespray-defaults` role will resolve the dependency problem.
2020-03-25 12:58:25 -07:00
Etienne Champetier
6ad6609872
Fix certificates checking when adding etcd node to existing k8s node ( #5807 )
...
Co-authored-by: alexkomrakov <alexkomrakov@gmail.com>
2020-03-25 12:46:25 -07:00
Petr Enkov
474fbf09c4
fix wrong cilium_operator repo variable ( #5819 )
2020-03-25 02:17:03 -07:00
Etienne Champetier
47849b8ff7
docker: Fix docker install on CentOS/RHEL 8 ( #5820 )
...
we can't set module_hotfixes=True using yum_repository ansible module
Fixes 38688a4486
(keep docker-ce.repo name)
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-03-25 01:03:03 -07:00
Stephen Schmidt
0379a52f03
Fix etcd install with docker and etcd_kubeadm_enabled ( #5777 )
...
- This solves issue #5721 & #5713 (dupes)
- Provide a cleaner default usage pattern for the download role
around etcd that supports 'host' and 'docker' properly
- Extract the 'etcdctl' as a separate task install piece and reuse it where
appropriate
- Update the kubeadm-etcd task to reflect the above change
2020-03-24 08:12:47 -07:00
Petr Enkov
bc2eeb0560
use variables for cilium-operator instead of hardcoded value ( #5802 )
2020-03-24 07:40:47 -07:00
Mateus Caruccio
81f07c3783
Disable IPv6 support for canal's calico-node ( #5684 )
...
This implements the same behavior as a15a0b5eb9/roles/network_plugin/calico/templates/calico-node.yml.j2
More info: https://github.com/projectcalico/felix/issues/1447
2020-03-24 07:10:49 -07:00
Pierre Gaxatte
f90926389a
Fix wrong Docker ubuntu repo URL ( #5815 )
2020-03-24 04:36:46 -07:00
Pierre Gaxatte
dcb97e775e
Fix broken internal links ( #5799 )
2020-03-20 15:40:44 -07:00
Etienne Champetier
096de82fd9
Fixup recover_control_plane with Ansible 2.9 ( #5806 )
...
Tests as filters support is removed as of Ansible 2.9
https://docs.ansible.com/ansible/latest/porting_guides/porting_guide_2.5.html#jinja-tests-used-as-filters
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-03-20 14:22:06 -07:00
eddebc
db693d46df
Fixed an issue where without a default GW, ansible_default_ipv4 would return an empty dict which passed as a valid fallback_ip dict item ( #5394 )
2020-03-20 14:06:09 -07:00
Sergey
b8d628c5f3
rename handler to fix ansible 2.8 issue ( #5801 )
2020-03-20 13:54:08 -07:00
Etienne Champetier
0aa22998e2
Bump node local dns version to 1.15.11 ( #5805 )
...
k8s-dns-node-cache now uses debian-iptables base images
to automatically use either iptables-legacy or iptables-nft
https://github.com/kubernetes/dns/pull/355
https://github.com/kubernetes/kubernetes/pull/82966
This adds support CentOS 8
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-03-20 13:44:09 -07:00
Maxime Guyot
afe047a77f
Add documentation for scripts/openstack-cleanup ( #5803 )
2020-03-20 13:18:06 -07:00
Maxime Guyot
1ae794e5e4
Add script to cleanup old gitlab branches ( #5795 )
2020-03-20 13:16:06 -07:00
Maxime Guyot
a7a204ebca
Add kube_encryption_resources variable to configure which resources are encrypted at rest ( #5797 )
2020-03-20 04:14:36 -07:00
Maxime Guyot
8774d7e4d5
Fix ERROR! the playbook: tests/testcases/020_check-nodes-ready.yml could not be found ( #5798 )
2020-03-20 01:14:35 -07:00
Maxime Guyot
34e51ac1cb
Add a test to check that nodes are Ready ( #5793 )
2020-03-19 04:09:14 -07:00
nmr
d152dc2e6a
Update prep_download.yml ( #5791 )
...
Fix check if user can use docker without sudo.
2020-03-18 13:30:44 -07:00
spaced
8ce5a9dd19
remove atomic support because reached end of live ( #5783 )
2020-03-17 14:31:27 -07:00
Bjoern Teipel
820d8e6ce6
Adding new registry_port option ( #5779 )
...
New override are added to allow installation of the registry
on different ports than ``5000``. The default port is unchanged
from previous versions
2020-03-17 05:52:22 -07:00
bozzo
3cefd60c37
Add OWNERS file for kube-router ( #5782 )
...
I propose also my help as a reviewer
2020-03-17 04:14:22 -07:00
spaced
876d4de6be
Fedora CoreOS support ( #5657 )
...
* fedora coreos support
- bootstrap and new fact for
* fedora coreos support
- fix bootstrap condition
* fedora coreos support
- allow customize packages for fedora coreos bootstrap
* fedora coreos support
- prevent install ptyhon3 and epel via dnf for fedora coreos
* fedora coreos support
- handle all ostree like os in same way
* fedora coreos support
- handle all ostree like os in same way for crio
* fedora coreos support
- add fcos documentations
2020-03-17 03:12:21 -07:00
bozzo
974902af31
Update Kube-router version to v0.4.0 ( #5756 )
2020-03-17 02:40:21 -07:00
MengZeLee
45626a05dc
fix pip requirements version ( #5174 )
...
Because using python Program create inventory it will happen error, thus I change python pip version to install kubespray requirements.
2020-03-16 05:10:35 -07:00
Pasquale Toscano
4b5299bb7a
Add variables to configure Containerd default runtime, untrusted runt… ( #5497 )
...
* Add variables to configure Containerd default runtime, untrusted runtime and additional runtimes
* Add containerd settings to sample inventory
* Empty commit
2020-03-16 03:48:36 -07:00
Yujun Zhang
ceab27c97a
Add OWNERS file for recover_control_plane ( #5505 )
...
Related to #5432
2020-03-16 03:46:35 -07:00
Sergey
03d1b56a8f
fix check exists download cache ( #5776 )
2020-03-16 03:34:35 -07:00
keyboardfann
64190dfc73
Fix deploy heketi show selector missing error. ( #5738 )
2020-03-16 03:32:36 -07:00
Michael Shnit
29128eb316
Add AWS ALB Ingress Controller ( #5489 )
...
* Add AWS ALB Ingress Controller Ansible role
* remove trailing spaces
* update owners
* ALB ingress: update rbac clusterrole and remove role
* Move alb-ingress role to roles/kubernetes-apps/ingress_controller folder
2020-03-16 02:58:35 -07:00
Yujun Zhang
ea9f8b4258
Add document about adding/replacing a node ( #5570 )
...
* Add document about adding/replacing a node
* Update nodes.md
Amend for comments
2020-03-15 03:32:34 -07:00
Sergey
1cb03a184b
kubernetes 1.15.11 ( #5775 )
2020-03-14 07:16:34 -07:00
hfinucane
158d998ec4
Support configuring the Calico iptables insert mode ( #5473 )
...
* Support configuring the insert mode
Defaults to the upstream default https://docs.projectcalico.org/v3.9/reference/felix/configuration
so nothing should change for existing deployments.
This allows coexistence with other firewall management technologies.
* Add a note to the sample config
2020-03-14 06:36:35 -07:00
Cédric de Saint Martin
168241df4f
Python bootstrap: upgrade pypy to 3.6-7.2.0. ( #5511 )
...
Solves problem with mitogen about 'Compress object has no attribute copy' in zlib module.
2020-03-14 06:32:35 -07:00
Sander Cornelissen
f5417032bf
Merge OracleLinux in RedHat bootstrap-os ( #5575 )
...
* Merge OracleLinux in RedHat bootstrap-os
* Set default for use_oracle_public_repo in main.yaml
2020-03-14 06:28:34 -07:00
bozzo
d69db3469e
Add external zones in nodelocaldns configuration ( #5591 )
...
Allows to configure additionnal zone for domains not resolved by `upstream_dns_servers`.
2020-03-14 06:26:34 -07:00
Xiaodu
980a4fa401
Add docker-ce 19.03 packages for Debian & Ubuntu ( #5729 )
...
* Add docker-ce 19.03 packages for Debian & Ubuntu
K8s has updated the recommended Docker version to 19.03. More
specifically it should be 19.03.4, but since we used 18.06.7 instead of
.2, I'm assuming the latest patch version should be used here as well.
* Add docker 19.03 for redhat
2020-03-14 06:24:35 -07:00
Florent Monbillard
027e2e8a11
Update CoreDNS to 1.6.7 ( #5761 )
2020-03-14 04:20:34 -07:00
Maxime Guyot
dcfda9d9d2
Change python crypto module from pycrypto to cryptography ( #5769 )
2020-03-14 03:30:34 -07:00
Florent Monbillard
ca73e29ec5
Use k8s.gcr.io for kubernetes related images ( #5764 )
...
* Use k8s.gcr.io for kubernetes related images
* Use k8s.gcr.io in inventory sample
2020-03-13 14:41:48 -07:00
Florent Monbillard
0330442c63
Kubernetes 1.16.8 ( #5770 )
...
* Kubernetes 1.16.8
* Use 1.16.8 in sample inventory and kubespray-defaults
2020-03-13 13:41:47 -07:00
Maxime Guyot
221c6a8eef
Use a separate runner for light CI jobs ( #5771 )
2020-03-13 20:29:22 +03:00
Florent Monbillard
25a1e5f952
Include etcd image repository when using kubeadm etcd deployment mode ( #5725 )
2020-03-13 10:28:39 -07:00
Maxime Guyot
38df80046e
CI inventory should start at 1 instead of 0 ( #5763 )
2020-03-13 10:22:39 -07:00
Nakahara, Kohei
57bb7aa5f6
Fix delete nodes task ( #5747 )
2020-03-13 08:36:40 -07:00
Florian Ruynat
86996704ce
remove unused crictl hashes ( #5754 )
2020-03-13 06:56:40 -07:00
Joel Seguillon
f53ac2a5a0
Update metrics addon for 1.16 ( #5706 )
...
* upgrade metrics server and resizer images version
* scope "apps" api group for addon resizer
2020-03-13 06:46:40 -07:00
Hugo Blom
d0af5979c8
install csi-driver not just cinder ( #5766 )
2020-03-13 05:34:39 -07:00
Qingkun Li
43020bd064
Fix the command for kube-proxy cleanup ( #5671 )
2020-03-13 05:32:39 -07:00
Danilo Riecken P. de Morais
dc00b96f47
Add missing Coreos OS family string ( #5759 )
2020-03-13 04:24:39 -07:00
Christopher Randles
71c856878c
update multus to 3.4 and add crio support ( #5701 )
...
Signed-off-by: Chris Randles <randles.chris@gmail.com>
2020-03-13 04:22:39 -07:00
Maxime Guyot
19865e81db
Add OWNERS file for OpenStack CSI driver and cloud controller ( #5753 )
2020-03-13 02:52:39 -07:00
Maxime Guyot
a4258b1244
Add automatic cleanup of OpenStack CI VMs ( #5760 )
2020-03-12 15:12:39 -07:00
dymq
e0b76b185a
Failover for adding proxy when line exists in file ( #5751 )
...
The 'regexp' parameter matches last occurrence of a line starting with 'proxy=' and replaces it with the one defined in 'line' parameter. If no match - it works same way as before. This fixes resuming cluster deployments failed after that task (if there was no more than one line starting with 'proxy' in the yum.conf file - this condition should also be reassured with the change introduced here) eg. if they were initiated with Terraform.
2020-03-12 15:08:39 -07:00
Xiaodu
c47f441b13
fix kube-proxy server address when local apiserver lb is disabled ( #5730 )
...
refs #5277
As the issue describes, when no external or local load-balanced is used,
kube-proxy won't be able to contact apiserver at 127.0.0.1. So the
config map should be left as is.
2020-03-12 10:40:39 -07:00
Maxime Guyot
7c854a18bb
Enable retries on SSH error during CI ( #5755 )
2020-03-12 10:10:39 -07:00
Florent Monbillard
8df2c0a7c6
Upgrade CNI plugins to 0.8.5 ( #5717 )
2020-03-12 07:22:38 -07:00
Sergey
e60b9f796e
add calico VXLAN mode, update docs and vars in sample inventory ( #5731 )
...
* calico VXLAN mode
* check vars if calico backend defined
2020-03-12 01:20:37 -07:00
Florent Monbillard
2c8bcc6722
Upgrade etcd to 3.3.12 ( #5718 )
...
* Upgrade etcd to 3.3.18
* Try with etcd 3.3.15 (kubeadm 1.16.7 default)
* Back to square one
* Try with 3.3.11
* Upgrade etcd to 3.3.18 (take 2)
* Try with 3.3.12
2020-03-11 08:25:38 -07:00
Fredrik Lönnegren
e257d92f41
Cilium updates ( #5438 )
...
* Add resources needed to deploy 1.6.4
* Use cilium v1.6.4
* Change deprecated option name
* Add update crd to clusterrole cilium
* Cilium 1.6.4 -> 1.6.5
* Make monitor-aggregation config configurable as a variable
* Change monitor-aggregation default none->medium
* Cilium 1.6.5 -> 1.6.6
* Update to 1.7.0
* v1.7.0->v1.7.1
2020-03-11 08:15:36 -07:00
Hugo Blom
f697338eec
[Openstack] Install Cinder-CSI before first node is schedulable again ( #5735 )
...
* install cinder-csi before upgrading nodes
* Only run the Cinder CSI when enabled
2020-03-11 06:31:36 -07:00
Etienne Champetier
e2ec7c76a4
containerd: bump to 1.2.13 ( #5727 )
...
https://github.com/containerd/containerd/releases/tag/v1.2.11
CVE-2019-16884 / CVE-2019-17596
https://github.com/containerd/containerd/releases/tag/v1.2.12
CVE-2019-19921 / CVE-2019-16884 / CVE-2019-11253
https://github.com/containerd/containerd/releases/tag/v1.2.13
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-03-11 05:39:36 -07:00
Lovro Seder
058d101bf9
Escape dots in jsonpath keys. ( #5600 )
...
+ use more secure `command` instead of `shell`
+ read-only command doesn't change state - make idempotent
+ multi-line long string
2020-03-11 05:17:36 -07:00
Hugo Blom
833794feef
[Openstack] Cleanup the old in-tree openstack cloud provider ( #5742 )
...
* Added playbook to migrate openstack cloud provider
* remove old cloud provider config
* Rewrite provisioned-by annotation on Cinder PVs
* update indents
Co-authored-by: Jonathan Süssemilch Poulain <jonathan@sofiero.net>
2020-03-11 05:13:36 -07:00
Hugo Blom
a3dedb68d1
[Openstack] Make it possible to apply the new cloud provider during upgrade ( #5707 )
...
* run external cloud provider setup during upgrade
* change name of taskt to better reflect what it does
* fix typo
2020-03-11 05:11:36 -07:00
Hugo Blom
4a463567ac
[Openstack] A guide on how to replace the in-tree cloudprovider with the external one ( #5741 )
...
* add documentation for how to upgrade to the new external cloud provider
* add migrate_openstack_provider playbook
* fix codeblock syntax highligth
* make docs for migrating cloud provider better
* update grammar
* fix typo
* Make sure the code is correct markdown
* remove Fenced code blocks
* fix markdown syntax
* remove extra lines and fix trailing spaces
2020-03-11 05:09:35 -07:00
Sergey
9f3ed7d855
change ignore_errors: to when: in assert tasks ( #5716 )
2020-03-10 08:09:36 -07:00
Sergey
221b429c24
move var preinstall_selinux_state: to roles/kubespray-defaults/defaults/main.yaml ( #5715 )
2020-03-10 07:45:35 -07:00
dependabot[bot]
b937d1cd9a
Bump ansible from 2.7.12 to 2.7.16 ( #5739 )
...
Bumps [ansible](https://github.com/ansible/ansible ) from 2.7.12 to 2.7.16.
- [Release notes](https://github.com/ansible/ansible/releases )
- [Commits](https://github.com/ansible/ansible/compare/v2.7.12...v2.7.16 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-03-09 06:31:34 -07:00
Vicenç Juan Tomàs Montserrat
986c46c2b6
Check ansible version >=2.7.8 in recover-control-plane.yml playbook ( #5724 )
2020-03-07 10:17:34 -08:00
Maxime Guyot
e029216566
Update security contacts ( #5719 )
2020-03-06 10:47:24 -08:00
roc
2d4595887d
Fix youtube url ( #5582 )
2020-03-06 02:13:22 -08:00
Jakub Husák
2beffe688a
Make etcdctl connect to localhost out of the box ( #5643 )
...
* Make etcdctl connect to localhost out of the box
* etcdctl envs: use admin-.pem instead of member-.pem
2020-03-06 02:05:23 -08:00
Kubernetes Prow Robot
66408a87ee
Refactor download role ( #5697 )
...
* download file
* download containers
* fix push image to nodes
* pull if none image on host
* fix
* improve docker image tag checks.
do not pull already cached images
* rebase fix merge conflict
* add support download_run_once when upgrade and scale cluster
add some test with download_run_once
* set default values to temp flag for every download cycle
* add save,load abilty for containerd and crio when download_run_once=true
* return redefine image save/load command to set_docker_image_facts.yml
* move set command to set_container_facts
* ctr in containerd_bin_dir
* fix order of ctr image export arguments
* temporary disable download_run_once for containerd and crio
due https://github.com/containerd/containerd/issues/4075
* remove unused files
* fix strict yaml linter warning and errors
* refactor logical conditions to pull and cache container images
* remove comment due lint check
* document role
* remove image_load_on_localhost, because cached images are always loaded to docker on remote sites
* remove XXX from debug output
2020-03-05 07:31:39 -08:00
Kubernetes Prow Robot
62b418cd16
Use 'k8s.gcr.io' instead of 'gcr.io/google-containers' ( #5709 )
...
Ref: kubernetes/kubeadm/issues/2051
See: https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/kubernetes-sig-release/ew-k9PEBckQ/T7dFepHdCAAJ
Signed-off-by: Nguyen Hai Truong <truongnh@vn.fujitsu.com>
2020-03-05 05:44:37 -08:00
Kubernetes Prow Robot
5361cc075d
Use the v2.12.3 docker image for CI ( #5712 )
2020-03-05 05:40:37 -08:00
Kubernetes Prow Robot
be12164290
Add option and defaults to configure metrics exporting in containerd ( #5466 )
...
* Add metrics exporting in containerd config
* Add containerd.yml with containerd configuration example to the sample group_vars
2020-03-04 14:46:38 -08:00
Arthur Outhenin-Chalandre
588896712e
Fix kube-router config generation ( #5531 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-03-04 02:11:47 -08:00
Steven Reitsma
6221b94fdf
Fix variable naming bug in OpenStack CCM ( #5702 )
2020-03-03 06:45:38 -08:00
Steven Reitsma
efef80f67b
Add support for HA deployment of OpenStack Cinder CSI plugin ( #5691 )
2020-03-03 06:33:38 -08:00
Hugo Blom
0c1a0ab966
implement max-volumes for cinder csi ( #5666 )
2020-03-02 03:30:43 -08:00
Sergey
678ed5ced5
fix upgrade procedure when in playbook ( #5695 )
...
exists role kubernetes/preinstall and not exists role container-engine
error 'yum_repo_dir' is undefined
2020-02-28 01:56:38 -08:00
Lovro Seder
7f87ce0362
Upgrade container-engine after draining ( #5601 )
...
* Run 'container-engine' after drain.
Move possibly disruptive role 'container-engine' to run after the node
is drained.
As that role have to be run on non-cluster nodes as well (etcd and
calico-rr), and those nodes are not drained, add play for that case.
* Check if api is up before upgrade.
If container engine is restarted in previous role, api controller can
take some time to start. This check ensures api is up before upgrade.
2020-02-27 11:47:28 -08:00
Steven Reitsma
d1acf7f192
Add additional configuration options to external Openstack CCM ( #5661 )
...
- Add support for manage-security-groups flag
- Add support for internal-lb flag
2020-02-26 13:03:19 -08:00
Hugo Blom
171d2ce59c
Implement topology support for Cinder CSI ( #5667 )
...
* make cinder csi topology aware
* change feature description do better reflect whats being done
* remove sameas true since it isn't required
2020-02-26 05:12:25 -08:00
Nguyen Hai Truong
c6170eb79d
docs: fix some typos ( #5618 )
...
Although it is spelling mistakes, it might make affect while reading.
Signed-off-by: Nguyen Hai Truong <truongnh@vn.fujitsu.com>
2020-02-26 04:46:28 -08:00
Moritz Graf
d2c44dd4df
Modifying Ansible filter 'failed' according to Ansible 2.5 porting guide ( #5678 )
2020-02-26 00:18:26 -08:00
Qingkun Li
9b7090ca1d
add mangle table in the iptable flush task ( #5672 )
...
When kube-router is used as cni, rules might be added to the mangle table
to support external IPs. Therefore, mangle table should be flushed during
reset as well.
2020-02-26 00:04:26 -08:00
Sergey
ee8e88b111
Require a complete inventory with all variables in the bugreport ( #5655 )
2020-02-25 23:58:25 -08:00
Hugo Blom
a901b1f0d7
convert volumes to dynamic blocks, openstack ( #5673 )
2020-02-24 01:20:49 -08:00
Victor Morales
82efd95901
Remove dockerproject_.+_repo_.+ variables ( #5662 )
...
This 38688a4486
change replaces the
value for dockerproject_.+_repo_.+ docker variables but their new
value was previously defined in other variables. This change removes
the dockerproject_.+_repo_.+ docker variables in favor of the older
ones.
2020-02-22 13:28:47 -08:00
Hoat Le
4c803d579b
@ #5008 | Local path provisioner boolean annotation is rendered incorrectly and not applied ( #5669 )
2020-02-22 07:08:47 -08:00
keyboardfann
b34ec6c46b
Enhance ha document ( #5664 )
...
* Fix HAproxy config to avoid client offered only unsupported versions error
* Add HAproxy SSL check interval
* Fix ha mode document markdown
2020-02-22 07:04:47 -08:00
Javeria Khan
6368c626c5
Ignore assertion comparison for kube_network_node_prefix when using calico ( #5632 )
...
* Fix incorrect assertion comparison for kube_network_node_prefix
* Ignore assertion comparison for kube_network_node_prefix when using calico
* Adding more var docs description for kube_network_node_prefix
* Fixing trailing whitespaces
2020-02-20 00:39:03 -08:00
Erwan Miran
a5445d9c5c
Add stable repo on all masters with helm 3.x.x ( #5659 )
2020-02-19 14:05:46 -08:00
Adrien Gooris
da86457cda
remove unused var 'kube_apiserver_admission_control' ( #5648 ) ( #5651 )
2020-02-19 05:08:25 -08:00
Lovro Seder
eb00693325
Do not display skipped hosts/tasks. ( #5620 )
...
Replace deprecated callback plugin `skippy` with `default`, which
also supports ignoring skipped hosts.
2020-02-19 02:38:25 -08:00
Chad Swenson
a15a0b5eb9
Make calico iptables lock timeout configurable ( #5658 )
...
Adds `calico_iptables_lock_timeout_secs` variable to calico DS yaml.
2020-02-19 02:28:25 -08:00
Ali Sanhaji
646fd5f47b
External OpenStack Cloud Controller Manager implementation ( #5491 )
...
* External OpenStack Cloud Controller Manager implementation
* Adding controller image tag
* Minor fixes
* Restructuring the external cloud controller to work with KubeADM
2020-02-18 04:47:28 -08:00
rptaylor
277b347604
add az_list_node variable to specify different AZs for kubelets ( #5413 )
...
* rebase and add az_list_node variable to specify different AZs for kubelets
* fix missing variable name change
2020-02-18 04:29:27 -08:00
Sergey
12bc634ec3
helm default version 3.1.0 ( #5634 )
...
* helm default version 3.1.0
* fix newline
try to retest2
2020-02-18 03:21:29 -08:00
Jin Hase
769e54d8f5
Fix a typo in integration.md ( #5616 )
2020-02-18 02:29:29 -08:00
MarkusTeufelberger
ad50bc4ccb
Cache facts for 2 hours ( #5633 )
...
Sets a 2 hour timeout value for facts caching.
2020-02-18 01:31:28 -08:00
Sylvain Chateau
0ca7aa126b
added "Flatcar", "Flatcar Container Linux by Kinvolk" for all coreOS role ( #5607 )
2020-02-18 00:15:29 -08:00
Woohyung Han
d0d9967457
Fix to Vagrant config.rb apply correctly ( #5525 )
2020-02-18 00:13:28 -08:00
Manuel Cintron
b51b52ac0e
Fixing and issue where if the pids in the orphan list no longer exist then all systemd child processes would be killed. ( #5636 )
2020-02-17 09:33:29 -08:00
Sergey
36c1f32ef9
remove legacy docker repo in kubernetes/preinstall before any packages installed ( #5640 )
2020-02-17 08:59:28 -08:00
Steven Reitsma
fa245ffdd5
Fix some minor issues with the Cinder CSI plugin ( #5561 )
...
Add Cinder images to download role
2020-02-17 03:47:28 -08:00
Erwan Miran
f7c5f45833
Ability to define plugins.cri.containerd params ( #5624 )
...
* Ability to define plugins.cri.containerd params
* addition of containerd field commented as an example
* documentation of containerd_config
2020-02-17 02:15:29 -08:00
lcooper40
579976260f
Added in code to allow control over pull policy for local path provis… ( #5334 )
...
* Added in code to allow control over pull policy for local path provisioner
* change to imagePullPolicy to use globally used variable k8s_image_pull_policy
* removed unusued variable from defaults
* updated contiv-etcd and cinder-csi-controllerplugin to use k8s_image_pull_policy variable
2020-02-17 02:13:30 -08:00
Ali Sanhaji
d56e9f6b80
Fix Cinder CSI bugs ( #5492 )
2020-02-17 01:49:28 -08:00
Brendan Creane
57b0b6a9b1
update Calico CNI description ( #5523 )
2020-02-17 01:47:28 -08:00
Flowkap
640190217d
UPdate docs to match actuall required settings to perform an unsafe upgrade using cluster.yml playbook. Relates to https://github.com/kubernetes-sigs/kubespray/issues/4736 and https://github.com/kubernetes-sigs/kubespray/issues/4139 ( #5609 )
2020-02-17 01:45:29 -08:00
Thomas Ziegler
a08f485d76
updated links in the PR template ( #5614 )
2020-02-17 12:16:35 +03:00
Quan Hoang
f6b66839bd
Use 'private_dns' as hostname in inventory file ( #5463 )
2020-02-17 00:59:28 -08:00
Erwan Miran
26700e7882
kubelet_config_extra_args and kubelet_node_config_extra_args ( #5623 )
...
* Introduce kubelet_config_extra_args and kubelet_node_config_extra_args to pass params to kubelet via YAML config
* kubelet_config_extra_args is not the alternative
2020-02-14 16:05:28 -08:00
Florian Ruynat
d86229dc2b
Upgrade cri-tools (crictl) to 1.17.0 ( #5629 )
2020-02-14 02:50:17 -08:00
Florian Ruynat
f56171b513
Remove old features gates ( #5608 )
2020-02-14 02:24:17 -08:00
Nguyen Hai Truong
516e9a4de6
Securing http link to https link ( #5617 )
...
Fix http link to https link for security
Signed-off-by: Nguyen Hai Truong <truongnh@vn.fujitsu.com>
2020-02-13 14:46:17 -08:00
Thomas Ziegler
765d907ea1
added reference to calico_ip_auto_method in sample inventory group vars ( #5612 )
2020-02-13 13:18:36 -08:00
Bort Verwilst
287421e21e
Set helm 3.0 as default ( #5503 )
...
* set helm 3.0 as default
* remove trainling space in vars.yml
* switched to helm 3.0.3
2020-02-13 02:18:35 -08:00
fktkrt
2761fda2c9
Update bug-report.md ( #5585 )
2020-02-13 01:34:35 -08:00
Erwan Miran
339e36fbe6
Files to archive can be passed directly ( #5571 )
2020-02-12 07:50:51 -08:00
Arthur Outhenin-Chalandre
5e648b96e8
Fix default value of kube_api_server_endpoint ( #5529 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-02-11 01:40:01 -08:00
qvicksilver
ac2135e450
Fix recover-control-plane to work with etcd 3.3.x and add CI ( #5500 )
...
* Fix recover-control-plane to work with etcd 3.3.x and add CI
* Set default values for testcase
* Add actual test jobs
* Attempt to satisty gitlab ci linter
* Fix ansible targets
* Set etcd_member_name as stated in the docs...
* Recovering from 0 masters is not supported yet
* Add other master to broken_kube-master group as well
* Increase number of retries to see if etcd needs more time to heal
* Make number of retries for ETCD loops configurable, increase it for recovery CI and document it
2020-02-11 01:38:01 -08:00
rptaylor
68c8c05775
improve documentation about user account and connecting to API ( #5415 )
...
* improve documentation about user acct and connecting to API
* fix lint
2020-02-11 01:36:00 -08:00
Sergey
14b1cab5d2
force rotate control plane certifcate on master node when upgrade cluster ( #5596 )
2020-02-10 06:09:54 -08:00
Florian Ruynat
e570e2e736
Remove last rkt references ( #5606 )
2020-02-07 02:19:43 -08:00
Fabiano Tessarolo
16fd2e5d68
Fix etcd deployment type variable location ( #5587 )
...
On deployments types where etcd server is splitted from Kube Master, the deployment fails since it cannot find the variable.
2020-02-07 02:17:43 -08:00
Preslav Draganov
422b25ab1f
Bind Docker service to containerd.service on versions >=18.09.1 ( #5477 )
2020-02-07 02:15:44 -08:00
rptaylor
b7527399b5
fully clean docker_options from sample inventory ( #5414 )
...
* comment out docker_options
* fix yamllint
2020-02-07 02:13:43 -08:00
wwgfhf
89bad11ad8
Update PULL_REQUEST_TEMPLATE.md ( #5597 )
2020-02-07 02:11:44 -08:00
aca
9d32e2c3b0
fix duplicates when scheduler_extra_volumes defined ( #5566 )
2020-02-07 02:09:44 -08:00
Florian Ruynat
099341582a
Update nginx image to latest ( #5590 )
2020-02-07 02:07:44 -08:00
Matthew Mosesohn
942c98003f
Add LuckySB as an approver ( #5584 )
...
Change-Id: I830d5bff9fa3c50b83a9eb1fd6dff521f8e55dc1
2020-02-05 11:21:55 -08:00
Maxime Guyot
cad3bf3e8c
Add CentOS 8 image for testing ( #5589 )
2020-01-29 02:06:16 -08:00
andreyshestakov
2ab5cc73cd
Fix typo in Multus plugin. ( #5568 )
2020-01-29 01:28:13 -08:00
Etienne Champetier
9f2dd09628
Add proxy support to containerd, improves no_proxy ( #5583 )
...
* containerd: add proxy support
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* kubespray-defaults: add kube_service_addresses / kube_pods_subnet to no_proxy
CIDR notation in no_proxy is supported by a lot of programs/languages,
including go: https://github.com/golang/go/issues/16704
Without that containerd cannot talk the the API server (kube_apiserver_ip),
but it should not go through an external proxy for the nodes/pods/services
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-01-29 01:24:14 -08:00
Sergey
2798adc837
Remove stale legacy yum docker repo /etc/yum.repos.d/docker.repo ( #5569 )
...
* Remove stale legacy yum docker repo /etc/yum.repos.d/docker.repo
* move task 'Remove legacy docker repo file' to pre-upgrade.yml
2020-01-28 02:31:40 -08:00
Florian Ruynat
54d9404c0e
Fix hashes... kubernetes 1.17.2 ( #5581 )
2020-01-24 06:44:31 -08:00
Florian Ruynat
f1025dce4e
Update to hashes and default version (1.15.8 / 1.16.5 / 1.17.1) ( #5564 )
2020-01-23 03:54:49 -08:00
jlacoline
538f4dad9d
tag role kubernetes/node-label in playbooks ( #5560 )
2020-01-20 11:43:36 -08:00
gatolynx
5323e232b2
recreate in another branch due to rebase problem ( #5557 )
2020-01-18 02:23:35 -08:00
Maxime Guyot
5d9986ab5f
Fix temp filename for debian-10 image ( #5540 )
2020-01-17 02:08:56 -08:00
Matthew Mosesohn
38688a4486
Remove dockerproject org ( #5548 )
...
* Change dockerproject.org to download.docker.com
dockerproject.org was deprecated in 2017 and has gone down.
* Restore yum repo for containerd
Change-Id: I883bb512a2164a85865b1bd4fb569af0358c8c2b
Co-authored-by: Craig Rodrigues <rodrigc@crodrigues.org>
2020-01-17 00:38:55 -08:00
Florian Ruynat
d640a57f9b
update api-version for PriorityClass following removal in 1.17 ( #5450 )
2020-01-16 01:52:22 -08:00
Etienne Champetier
5e9479cded
Ensure we always fixup kube-proxy kubeconfig ( #5524 )
...
When running with serial != 100%, like upgrade_cluster.yml, we need to apply this fixup each time
Problem was introduced in 05dc2b3a09
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-01-14 02:45:09 -08:00
Matthew Mosesohn
06ffe44f1f
Remove downloading deprecated calico-rr image ( #5528 )
...
Change-Id: I7354d33c7db513e0ee27c9a4cc40e8501c0e1061
2020-01-14 02:41:08 -08:00
Matthew Mosesohn
b35b816287
Raise typha max connections to 300 ( #5527 )
...
Raises limit from 100 to 300 because the default is far too low
and the pod can handle 300 with the given resources.
Change-Id: Ib1eec10da3d09d198933fcfe87291587e58d7cdb
2020-01-10 00:24:33 -08:00
Florian Ruynat
bf15d06568
Update to Kubernetes 1.15.7 ( #5518 )
2020-01-08 17:35:40 -08:00
Etienne Champetier
2c2ffa846c
Calico: update to 3.11.1, allow to configure calico_iptables_backend ( #5514 )
...
I've tested this update by deploying a containerd / etcd cluster on top CentOS7,
MetalLB + NGINX Ingress. Upgrade using upgrade-cluster.yml
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-01-08 02:27:40 -08:00
Damon Wang
48c41bcbe7
kube-proxy need conntrack ( #5478 )
2020-01-06 02:31:35 -08:00
zhanwang
beb47e1c63
update ingress_nginx install guide ( #5502 )
2020-01-06 02:27:35 -08:00
Erwan Miran
303c3654a1
Set pipefail in case tar fails ( #5506 )
2020-01-06 02:25:34 -08:00
Matthew Mosesohn
5fab610fab
Clean kubectl cache after upgrade on first master ( #5479 )
...
Resolves issue where kubectl cache of <v1.16 api schema
interferes with interacting with daemonsets and deployments.
Change-Id: I63b7046958f2008eb144b6da0004c598f945e0ae
2020-01-06 02:23:35 -08:00
Kessler
3c3ebc05cc
Fix invalid count index ( #5469 )
2020-01-02 01:57:39 -08:00
Kessler
94956ebde9
Fix invalid variable in host inventory script ( #5481 )
2019-12-20 05:01:33 -08:00
Alex Newman
e716bed11b
A fix of install instructions ( #5483 )
...
* Update from https://github.com/kubernetes-sigs/kubespray/issues/4318#issuecomment-470161397
* Woops I missed a spot
2019-12-20 04:39:32 -08:00
Fredrik Lönnegren
ccbcad9741
Ubuntu CRI-O ( #5426 )
...
* Fix crictl
* Reload systemd daemon before enabling service
* Typo
* Add crictl template
* Remove seccomp.json for ubuntu
* Set runtime path of runc for ubuntu
* Change path to conmon
2019-12-19 04:37:57 -08:00
wwgfhf
15a8c34717
Update PULL_REQUEST_TEMPLATE.md ( #5476 )
2019-12-19 04:21:57 -08:00
Matthew Mosesohn
b815f48803
Add script for generating binary hashes ( #5470 )
...
Change-Id: I4498d1c0585ee98c23856208d660caadf67cab34
2019-12-18 00:29:57 -08:00
Maxime Guyot
95c97332bf
Bump yamllint and ansible-lint versions ( #5421 )
2019-12-17 07:13:59 -08:00
Maxime Guyot
9bdf6b00cc
Remove inline shell in YAML for vagrant-validate ( #5386 )
2019-12-17 07:11:59 -08:00
Maxime Guyot
91b23caa19
Remove GCE tests files ( #5459 )
2019-12-17 07:09:59 -08:00
Maxime Guyot
5df48ef8fd
[docs] Add CI matrix and script ( #5461 )
...
* Rename CI jobs from ubuntu to ubuntu16
* Add CI matrix and script
2019-12-17 07:07:59 -08:00
Florent Monbillard
109078c5e0
Update CNI plugins to v0.8.3 ( #5453 )
2019-12-16 04:53:36 -08:00
bozzo
c0b262a22a
Add kube-router configuration to enable metrics exposure ( #5416 )
2019-12-16 04:35:36 -08:00
Florian Ruynat
8bb1af9926
fix typo ( #5452 )
2019-12-16 02:55:36 -08:00
Douglas Schilling Landgraf
538f1f1a68
cri-o: redhat.yml - remove package cri-tools ( #5444 )
...
There is no cri-tools package in CentOS/EPEL/Red Hat.
Additionally, cri-tools is provided into the installation via
roles/download/defaults/main.yml:104:crictl_download_url.
2019-12-16 02:53:36 -08:00
Maxime Guyot
b60ab3ae44
Update CI to use v2.12.0 image and update release process ( #5448 )
2019-12-13 05:42:54 -08:00
Andreas Krüger
370a0635fa
Bump nodelocaldns version to 1.15.8 ( #5447 )
...
* Bump nodelocaldns version
* Add missing upstreamsvc
2019-12-13 02:22:55 -08:00
Bort Verwilst
db2ca014cb
Add Helm 3.x support ( #5441 )
...
* Add Helm 3.x support
* tiller enabled when helm < 3.0.0
2019-12-12 09:24:32 -08:00
bfraz
f0f8379e1b
Update aws tf ( #5435 )
...
* update aws tf to function as expected
* update tf version
* update syntax for tf v0.12
* update tf version in readme
* update per tf for v0.12
2019-12-12 03:42:33 -08:00
Maxime Guyot
815eebf1d7
Add wait for kubectl get ds after upgrades ( #5433 )
2019-12-11 11:23:55 -08:00
Maxime Guyot
95cf18ff00
Re introduce CI for upgrades ( #5427 )
2019-12-11 04:48:06 -08:00
Matthew Mosesohn
696fcaf391
Ensure 0644 mode for ca.crt on nodes ( #5428 )
...
Change-Id: I5e018dfaeffe314300b373aeb7ed5f59929cf4f9
2019-12-11 00:54:04 -08:00
Maxime Guyot
6ff5ccc938
Use kubespray/kubespray:v2.11.0 for CI ( #5363 )
2019-12-11 00:10:05 -08:00
Maxime Guyot
f8a18fcaca
Update the release process doc ( #5419 )
2019-12-10 04:41:29 -08:00
Maxime Guyot
961c1be53e
Remove Digital Ocean CI ( #5418 )
2019-12-10 04:39:29 -08:00
Maxime Guyot
eda1dcb7f6
Fix TF inventory script ( #5424 )
2019-12-10 03:41:29 -08:00
Etienne Champetier
5e0140d62c
Add k8s 1.15.6 hashes ( #5342 )
...
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2019-12-10 00:45:30 -08:00
Craig Rodrigues
717fe3cf3a
Add checksums for v1.17.0 ( #5423 )
2019-12-09 21:15:28 -08:00
Yujun Zhang
32d80ca438
Add default value for bin_dir
in recover control plane ( #5396 )
2019-12-09 02:54:02 -08:00
ooneko
2a9aead50e
Set kube_image_repo use {{ gcr_image_repo }} ( #5314 )
...
To aviod repeat "gcr.io" again.
2019-12-09 02:52:02 -08:00
Sergey
9fda84b1c9
set node label via kubectl label command ( #5257 )
...
* set varios node label via kubectl label command, not kubelet options
* remove node_labels from KUBELET_ARGS
2019-12-09 01:43:09 -08:00
Etienne Champetier
42702dc1a3
Fixes for CentOS 8 ( #5213 )
...
* Fix python3-libselinux installation for RHEL/CentOS 8
In bootstrap-centos.yml we haven't gathered the facts,
so #5127 couldn't work
Minimum ansible version to run kubespray is 2.7.8,
so ansible_distribution_major_version is defined an there is no need to default it
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* Restart NetworkManager for RHEL/CentOS 8
network.service doesn't exist anymore
# systemctl status network
Unit network.service could not be found.
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* Add module_hotfixes=True to docker / containerd yum repo config
https://bugzilla.redhat.com/show_bug.cgi?id=1734081
https://bugzilla.redhat.com/show_bug.cgi?id=1756473
Without this setting you end up with the following error:
# yum install docker-ce
Failed to set locale, defaulting to C
Last metadata expiration check: 0:03:21 ago on Thu Sep 26 22:00:05 2019.
Error:
Problem: package docker-ce-3:19.03.2-3.el7.x86_64 requires containerd.io >= 1.2.2-3, but none of the providers can be installed
- cannot install the best candidate for the job
- package containerd.io-1.2.2-3.3.el7.x86_64 is excluded
- package containerd.io-1.2.2-3.el7.x86_64 is excluded
- package containerd.io-1.2.4-3.1.el7.x86_64 is excluded
- package containerd.io-1.2.5-3.1.el7.x86_64 is excluded
- package containerd.io-1.2.6-3.3.el7.x86_64 is excluded
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2019-12-09 01:37:10 -08:00
Hugo Blom
40e35b3fa6
Support Openstack servergroups ( #5412 )
...
* add support for nova servergroups
* Add documentation for openstack nova servergroups
* uppdate to TF 0.12.12 format and fix etcd
* revert for_each change
* fix variables and formatting in main.tf
* try to avoid errors
* update variable
* Update main.tf
* Update main.tf
* update all other instance resources
2019-12-09 01:15:10 -08:00
Maxime Guyot
b15d41a96a
Add support to Ansible 2.9 ( #5361 )
2019-12-05 07:24:32 -08:00
Matthew Mosesohn
7da2083986
Add toleration for calico-typha on master ( #5405 )
...
Change-Id: Iea9a366cf6ccc4d491bfc49c5d2dba6d98f81b69
2019-12-05 06:24:32 -08:00
Maxime Guyot
37df9a10ff
Add CI for Amazon Linux 2 ( #5410 )
2019-12-05 05:44:32 -08:00
Maxime Guyot
0f845fb350
Add support for Debian 10 ( #5408 )
2019-12-05 05:42:32 -08:00
Maxime Guyot
23b8998701
Add OIDC to CI ( #5407 )
2019-12-05 05:40:32 -08:00
Maxime Guyot
401d441c10
Fix Python code style for inventory_builder ( #5362 )
2019-12-05 01:48:32 -08:00
Hugo Blom
f7aea8ed89
update oidc to contain quotes ( #5406 )
2019-12-05 00:24:32 -08:00
Maxime Guyot
a9b67d586b
Add markdown CI ( #5380 )
2019-12-04 07:22:57 -08:00
Maxime Guyot
b1fbead531
Update to TF v0.12.12 ( #5267 )
2019-12-04 07:20:58 -08:00
Maxime Guyot
b06826e88a
Fix OpenSUSE support ( #5370 )
2019-12-04 05:16:57 -08:00
Matthew Mosesohn
57fef8f75e
Allow customizing kubelet healthz port and bind addr ( #5403 )
...
Change-Id: I1634ba2d2d3337243ffcdea86750003a559f2576
2019-12-03 11:56:58 -08:00
Matthew Mosesohn
f599a4a859
force other resolvers to be secondary when using systemd-resolved ( #5391 )
...
Change-Id: I33d46c7e0c5374467e22c5a652b282d1703dea85
2019-12-02 08:41:04 -08:00
Matthew Mosesohn
e44b0727d5
Allow inventory_builder to add nodes with hostname ( #5398 )
...
Change-Id: Ifd7dd7ce8778f4f1be2016cae8d74452173b5312
2019-12-02 08:13:04 -08:00
Matthew Mosesohn
18cee65c4b
Add support for k8s v1.17.0-rc.1, remove hyperkube ( #5378 )
...
Change-Id: I3fff04f0211cd9c2e8235acaf51c3aa98abc8bb7
2019-11-28 05:41:03 -08:00
zhanwang
f779cb93d6
update URL for Gluster Getting Started Guide ( #5390 )
...
update URL for Gluster Getting Started Guide
2019-11-28 00:45:03 -08:00
Yujun Zhang
aec5080a47
kubernetes/masters: fix task name in kubeadm setup ( #5377 )
2019-11-27 06:05:20 -08:00
Anton Fayzrahmanov
80418a44d5
CoreDNS deployment extra tolerations ( #5364 )
...
* Add extra tolerations for coredns
* dns_extra_tolerations option
* dns_extra_tolerations
* missing starting space in comment
2019-11-27 05:49:21 -08:00
Florian Ruynat
257c20f39e
add 1.16.3 checksums and set new version as default ( #5384 )
2019-11-27 01:29:20 -08:00
xieyanker
050de3ab7b
update fedora atomic download url ( #5357 )
2019-11-26 07:53:10 -08:00
Aaron Crickenberger
f1498d4b53
fix OWNERS file ( #5359 )
...
Initially this was to fix a mis-indented approvers key. However, it turns
out that 'oilbeater' is not a member of kubernetes-sigs nor
kubernetes-incubator (the org this repo was migrated from). Thus this
OWNERS file is failing prow's validation check.
As a workaround I've opted to move them to emeritus_approver, which
isn't valiated and can be used as a hint for other approvers in this
repo
2019-11-25 17:59:11 -08:00
Etienne Champetier
18d19d9ed4
containerd: update to 1.2.10 ( #5341 )
...
Lot's of bugs and security fixes:
https://github.com/containerd/containerd/releases/tag/v1.2.10
CVE-2019-16884 / CVE-2019-16276
https://github.com/containerd/containerd/releases/tag/v1.2.9
CVE-2019-9512 / CVE-2019-9514 / CVE-2019-9515
https://github.com/containerd/containerd/releases/tag/v1.2.8
CVE-2019-9512 / CVE-2019-9514
https://github.com/containerd/containerd/releases/tag/v1.2.7
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2019-11-22 00:09:29 -08:00
Matthew Mosesohn
61d7d1459a
Purge inactive reviewers. Promote miouge1 to approver ( #5365 )
...
Change-Id: I92b94ed9be85d47717e24a6099b4b22066717d02
2019-11-21 11:03:29 -08:00
Michael Shen
6924c6e5a3
[FIX] fix match because trim removes leading/trailing whitespace ( #5356 )
2019-11-19 22:35:18 -08:00
Matthew Mosesohn
85c851f519
scale down coredns on each master during graceful upgrade ( #5344 )
...
This fixes the scenario where masters are upgraded one at a time
and coredns gets improperly scaled back up to 2 replicas.
Change-Id: I7cc9283f40efcfd61b5813c89a5805c95d901567
2019-11-18 00:13:41 -08:00
Yumo Yang
5cd7d1a3c9
modify host.yml in README.md ( #5338 )
2019-11-17 18:15:40 -08:00
Matthew Mosesohn
8b67159239
Do not run kubeadm upgrade on first deploy ( #5339 )
...
Change-Id: I68a962a9dd28c83ef07eaeaf53eb98287f38bca9
2019-11-14 02:05:34 -08:00
LuciferInLove
4f70da2731
Added Amazon Linux 2 support for deploying with docker ( #5301 )
2019-11-11 07:05:41 -08:00
Matthew Mosesohn
db5040e6ea
Set certs and files with kubeadm token to mode 0640 ( #5325 )
...
Change-Id: I298496e55a6889c158b2085fcadeda5e679a873e
2019-11-11 05:41:41 -08:00
Jacopo Secchiero
97764921ed
Fix calico name resolution ( #5291 )
2019-11-11 04:01:41 -08:00
Michée lengronne
a6853cb79d
library files added to setup.cfg ( #5274 )
...
It hopefully ensures the usability of Kubespray as pip.
2019-11-11 03:59:41 -08:00
Bjoern Teipel
8c15db53b2
Fix helm for Kubernetes 1.16.2 ( #5332 )
...
Since upgrading k8s beyond 1.16.0 version, helm init does
no longer work with helm < 2.16.0 due to
https://github.com/helm/helm/issues/6374
This PR closes issue #5331
2019-11-11 03:53:41 -08:00
Julien Pervillé
0200138a5d
Pass ingress_nginx_extra_args
when deploying the nginx-ingress addon ( #5321 )
2019-11-11 03:51:40 -08:00
Florent Monbillard
14af98ebdc
Respect cri-tool supported version matrix ( #5241 )
...
| Kubernetes Version | cri-tools Version |
|--------------------|-------------------|
| 1.16.x | v1.16.0 |
| 1.15.X | v1.15.0 |
| 1.14.X | v1.14.0 |
| 1.13.X | v1.13.0 |
| 1.12.X | v1.12.0 |
| 1.11.X | v1.11.1 |
- Upgrade to cri-tools 1.16.1
- Add checksums for cri-tools 1.16.1
2019-11-11 03:45:42 -08:00
YichenWong
8a5434419b
fix useradd etcd ( #5281 )
2019-11-11 03:27:41 -08:00
Quentin Gliech
8a406be48a
Fix indentation in cilium-ds.yml template ( #5305 )
2019-11-11 03:25:41 -08:00
Johannes Scheuermann
feac802456
Remove default docker_options from sample ( #5287 )
2019-11-11 03:23:40 -08:00
Junho Suh
076f254a67
Add cilium_tunnel_mode variable to the cilium config ( #5295 )
2019-11-11 03:19:42 -08:00
holmesb
bc3a8a0039
Fixes issue #5299 ( #5300 )
2019-11-11 03:13:41 -08:00
Dmitry Chusovitin
45d151a69d
containerd installation on Debian ( #5326 )
2019-11-11 02:41:41 -08:00
Matthew Mosesohn
bd014c409b
Skip coredns image when evaluating kubeadm images ( #5327 )
...
It will be enabled correctly in downloads
Change-Id: Ief0b7aa2a8ee2ba6a6849820802f8542584b2c04
Related-story: PRODX-1171
2019-11-09 00:51:39 -08:00
Michael Shen
08421aad3d
[FIX] fix incorrect link to downloads documentation ( #5319 )
2019-11-07 03:50:42 -08:00
Matthew Mosesohn
1c25ed669c
Remove unnecessary and risky reload network for resolvconf propagation ( #5322 )
...
Change-Id: I54d706f7941b4b86c4c6cd45340295577155b884
2019-11-06 10:11:52 -08:00
Matthew Mosesohn
a005d19f6f
Enable systemd-resolved DNS resolution mode ( #5318 )
...
Change-Id: If3e253a40782e03cde7fc4a91493517ae31fda17
2019-11-06 03:33:52 -08:00
Matthew Mosesohn
471589f1f4
Scale down coredns created by kubeadm upgrade to 0 replicas ( #5308 )
...
Change-Id: I128b0f9c1acbb956d9a6c4e5510b45a36e296af7
2019-11-05 03:34:38 -08:00
Ali Sanhaji
b0ee1f6cc6
Deploy Cinder CSI driver to provision volumes over OpenStack ( #5184 )
...
* Deploy Cinder CSI driver to provision volumes over OpenStack
* Deploy Cinder CSI StorageClass
* Cinder CSI doc
2019-11-01 00:59:24 -07:00
Pierre Ozoux
79128dcd6b
Removes repetition. ( #5310 )
2019-10-30 06:12:53 -07:00
Samina Fu
dd7e1469e9
Fix typo of docs/dns-stack ( #5307 )
2019-10-30 02:00:55 -07:00
Matthew Mosesohn
186ec13579
Fix incorrect suggestion to enable old k8s apis ( #5292 )
...
Change-Id: If965cc6aa0daaca232dcf2ca0efd649aa097497f
2019-10-30 01:58:53 -07:00
Matthew Mosesohn
2c4e6b65d7
Raise delay and retry for rotate tokens ( #5304 )
...
Change-Id: I87844b43b9a18064e7a99567ce57c1ca1ffcc4a8
2019-10-30 01:56:52 -07:00
Eric Lake
108a6297e9
Terraform dynamic inventory 0.12.12 ( #5298 )
...
* Update parsing of terraform state file for 0.12.12
* Resource does not seem to have a module element but instead has
provider
* Return the boolean right way if it is already a bool since a bool does
not have an lower method
* Remove the setting of ansible_ssh_user to root for all Packet
Not all servers in packet are accessed as root by default. CoreOS
systems use the `core` user. Removing this allows the user to specify
the remote user with an extra_var or in an ansible.cfg file.
* Default to root user for packet devices except on CoreOS
* Update TF_VERSION for packet in tf-validate-packet
Update TV_VERSION to 0.12.12 for gitlab-ci tf-validate-packet tests
* convert packet terraform files to TV_VERSION 4
* initalize terraform before copying the variable file to the top level dir
2019-10-29 00:02:42 -07:00
Matthew Mosesohn
94d4ce5a6f
Retry cleaning up calico-node container ( #5302 )
...
Change-Id: Iad27b107860213759c7ae51f0891d7e5e7c6d96b
2019-10-28 05:11:25 -07:00
Matthew Mosesohn
81da231b1e
Set cluster DNS in kubeadm config for kubelet dynamic config ( #5293 )
...
Change-Id: I23116efefe8626d361d1904fc6fb8448f66cf3c5
2019-10-25 02:23:40 -07:00
Ludovic Muller
1a87dcd9b9
readme: update url to the Kubernetes documentation page for Kubespray ( #5294 )
2019-10-24 22:39:39 -07:00
Matthew Mosesohn
a1fff30bd9
Generate TLS certs for calico typha ( #5258 )
...
* Generate TLS certs for calico typha
Change-Id: I3883f49c124c52d0fc5b900ca2b44e4e2ed0d707
* Add group vars note
Change-Id: I63550dfef616e884efdbd42010a90b2c04c5eb69
2019-10-17 07:02:38 -07:00
Sergey
81d57fe658
set calico_datastore default value in role kubespray-default ( #5259 )
2019-10-17 05:58:38 -07:00
Sergey
3118437e10
check on all cluster node - kubelet_max_pods <= (2 ** (32 - kube_network_node_prefix | int)) - 2 ( #5279 )
2019-10-17 05:48:38 -07:00
Sergey
65e461a7c0
download container always been on download_delegate host ( #5177 )
...
* download container always been on download_delegate host
* fix also check pull required
2019-10-17 05:38:38 -07:00
Michael Oglesby
c672681ce5
Revert Pull Request #5084 ( #5120 )
...
Kubespray Pull Request #5084 (https://github.com/kubernetes-sigs/kubespray/pull/5084 ) caused more problems than it solved due to limitations with the synchronize module. See comments on Kubespray Issues #5059 (https://github.com/kubernetes-sigs/kubespray/issues/5059 ) and #5116 (https://github.com/kubernetes-sigs/kubespray/issues/5116 ). Details from Ansible documentation: "Currently, synchronize is limited to elevating permissions via passwordless sudo. This is because rsync itself is connecting to the remote machine and rsync doesn’t give us a way to pass sudo credentials in. ... Currently there are only a few connection types which support synchronize (ssh, paramiko, local, and docker) because a sync strategy has been determined for those connection types. Note that the connection for these must not need a password as rsync itself is making the connection and rsync does not provide us a way to pass a password to the connection. ..." Thus, reverting Pull Request #5084 .
2019-10-17 05:26:37 -07:00
yelhouti
d332a254ee
install python3 instead of python2 for fedora >= 30 fixes 5056, fixes 4802 ( #5111 )
2019-10-17 05:04:38 -07:00
Sean Sube
f3c072f6b6
ignore gpg files in inventory ( #5209 )
2019-10-16 20:22:39 -07:00
Matthew Rapa
3debb8aab5
add KUBELET_VOLUME_PLUGIN to kubelet.env ( #5128 )
2019-10-16 20:08:38 -07:00
YichenWong
aada6e7e40
Add etcd_data_dir variable to the kubeadm config ( #5263 )
2019-10-16 19:50:39 -07:00
Matthew Mosesohn
ac60786c6f
Add support for restart handlers for control plane on crio/containerd ( #5250 )
...
* Add support for restart handlers for control plane on crio/containerd
Change-Id: I8343cc4e9df7f55b732628ed01cc6e7ea5dcee85
* Update main.yml
2019-10-16 18:58:39 -07:00
Hugo Blom
db33dc6938
Add support for Kubernetes 1.16.2 ( #5272 )
...
* Add support for Kubernetes 1.16.1
* Defaults to 1.16.1
* add 1.16.2 checksums and set new version as default
* correct 1.16.2 checksums and add 1.15.5 checksums
2019-10-16 18:34:38 -07:00
Hugo Blom
9dfb25cafd
fix typo ( #5275 )
2019-10-16 18:26:38 -07:00
Maxime Guyot
df8d2285b6
Update ingress-nginx to v0.26.1 ( #5268 )
2019-10-16 18:22:39 -07:00
Matthew Mosesohn
af6456d1ea
Fix selector for calico-typha deployment ( #5253 )
...
Change-Id: I79f43379cbe1c495cb416f0572e65f695d5ec2b8
2019-10-16 07:53:42 -07:00
Maxime Guyot
6f57f7dd2f
Update nginx image to latest ( #5270 )
2019-10-16 04:37:42 -07:00
Dennis Field
fd2ff675c3
Clarify process for upgrading more than one version ( #5264 )
...
Since it is unsupported to skip upgrades, I've detailed the steps for upgrading a step at a time and removed some language that indicated it should work
2019-10-16 04:35:41 -07:00
Xiaodu
bec23c8a41
Add k8s v1.15.4 hashes ( #5235 )
2019-10-16 04:33:41 -07:00
Robin Elfrink
faaff8bd72
Add RotateCertificates to kubelet config if kubelet_rotate_certificates is set. ( #5152 )
...
Signed-off-by: Robin Elfrink <robin.elfrink@eu.equinix.com>
2019-10-16 04:31:41 -07:00
andreyshestakov
8031c6c1e7
Update template for dashboard to support v2.x ( #5187 )
...
Secrets and ConfigMap should be created before dashboard pod run.
2019-10-16 04:29:41 -07:00
Erwan Miran
9d8fc8caad
Fix getting nameserver and search for /etc/resolv.conf with comments ( #5197 )
2019-10-16 04:27:40 -07:00
Julien Pervillé
d1b1add176
contrib/heketi: use inventory node ip in topology instead of guessing it ( #5233 )
2019-10-16 04:25:42 -07:00
Qingkun Li
a51b729817
add ignore_errors to the kube-proxy deletion task ( #5236 )
...
When using cluster.yml or scale.yml to add/scale nodes in the existing
k8s cluster, the `kubeadm init` wouldn't run. As a result, kube-proxy
wouldn't be created, and therefore the kube-proxy deletion task would
fail, e.g. in the case where kube-router is used and "kube_proxy_remove"
is set to true. As a workaround, add ignore_errors to the kube-proxy
deletion task.
2019-10-16 04:23:40 -07:00
Maxime Guyot
19bc79b1a6
Update cert-manager to v0.11.0 ( #5269 )
2019-10-16 04:21:40 -07:00
Seref Acet
d2fa3c7796
Minimum required version of Kubernetes is v1.15 ( #5266 )
2019-10-15 06:59:53 -07:00
Mateus Caruccio
03cac2109c
No need to gather facts on localhost ( #5251 )
...
It's unnecessary and breaks when running from within a docker container:
```
An exception occurred during task execution. To see the full traceback, use -vvv. The error was: TimeoutError: Timer expired after 10 seconds
fatal: [localhost]: FAILED! => {"changed": false, "cmd": "/usr/sbin/udevadm info --query property --name /dev/mapper/vg00-root", "msg": "Timer expired after 10 seconds", "rc": 257}
```
2019-10-15 06:57:53 -07:00
Sergey
932935ecc7
fix wrong path in include install_host.yml in etcd role ( #5256 )
2019-10-13 18:16:34 -07:00
BenoitBOULANGER
e01118d36d
Fix issue in remove-node/post-remove task ( #5185 ) ( #5186 )
2019-10-10 05:17:43 -07:00
Matthew Mosesohn
dea9304968
Enable openstack_cacert to be either file or base64 string ( #5243 )
2019-10-09 02:19:49 -07:00
Matthew Mosesohn
2864e13ff9
Reset between kubeadm secondary control plane join attempts ( #5240 )
...
Change-Id: Ic9425bf90552d7e3d42b02409af9773d99376384
2019-10-08 00:15:12 -07:00
Hugo Blom
a8c5a0afdc
Make it possible to disable access_ip (openstack provider) ( #5239 )
...
* Add a variable do disable access_ip
* Document the use of use_access_ip
2019-10-07 04:09:09 -07:00
Erwan Miran
0ba336b04e
install helm client separately ( #5212 )
2019-10-04 05:14:02 -07:00
Matthew Mosesohn
89f1223f64
Fix selector workaround for helm install ( #5237 )
...
Change-Id: I826337b59814674c3feb4cd6a4904d9d53e01652
2019-10-03 23:41:56 -07:00
陈谭军
8bc0710073
clean up document ( #5214 )
2019-10-02 04:41:07 -07:00
Matthew Mosesohn
fb591bf232
Apply workaround for NetworkManager and calico ( #5230 )
...
Change-Id: I5cb2bdf1a57707c1b8da3e5ac0c80e5c353480a4
2019-10-02 04:37:07 -07:00
Matthew Mosesohn
a43e0d3f95
Switch to Kubernetes v1.16.0 ( #5189 )
...
* Switch to Kubernetes v1.16.0
Change-Id: I5d6a9528b2d443750fc5e031aff15ad3ffead158
* Fix download localhost cached file path
Change-Id: I65e79b70e3d1b37265ebc60f41b460cf4b0a0d47
* fix kubeadm etcd for v1.16
Change-Id: I6888a00fd48b530a38b0b31c4095492476af42d2
* disable tf packet jobs
Change-Id: I075c4666547fdea4c50ec04864f38e2cfaa79154
* Disable contiv packet jobs. Fix kube-router
Change-Id: I3170e8789e60711d4cee8faf65f2094480b79b8d
* bump sonobuoy version
Change-Id: Ib946905629c7c53ed88f08fb2f41c454457a0097
2019-10-02 02:21:07 -07:00
Besmir Zanaj
f16cc1f08d
fix digital rebar url ( #5223 )
2019-09-30 01:05:38 -07:00
Maxime Guyot
8712bddcbe
Add docs for TF vars introduced PR 4239 ( #5201 )
2019-09-26 04:31:07 -07:00
陈谭军
99dbc6d780
clean-up doc,spelling mistakes ( #5206 )
2019-09-26 04:25:08 -07:00
Richard Scott
75e4cc2fd9
Updated kubectl.sh ( #5156 )
...
The script is not usable unless you are in the '.vagrant/provisioners/ansible/inventory/artifacts' folder.
This update makes this usable from anywhere.
2019-09-26 04:23:07 -07:00
Etienne Champetier
81cb302399
MetalLB: fail if kube_proxy_strict_arp is false ( #5180 )
...
When using IPVS, kube_proxy_strict_arp = true is required
https://github.com/danderson/metallb/issues/153#issuecomment-518651132
Add kube_proxy_strict_arp to inventory/sample
2019-09-26 04:21:06 -07:00
陈谭军
3bcdf46937
fix-up some spelling mistakes ( #5202 )
2019-09-25 23:27:08 -07:00
Sergey
1cf6a99df4
generate kubeadm download image list with options useHyperKubeImage ( #5203 )
2019-09-25 18:03:06 -07:00
Robert Neumann
a5d165dc85
Customize host root volume size by Terrafrom provisioning ( #4239 )
...
* print hostnames (#5110 )
Terrafrom - customize hosts root volume size
disable block_device by default value
Terraform formatting fix
Fixed typos
* fix resources after rebase
* Fix glusterfs image issue
2019-09-25 05:17:59 -07:00
Erwan Miran
f18e77f1db
Blocksize for calico default pool should be configurable ( #5198 )
2019-09-25 04:44:00 -07:00
陈谭军
2fc02ed456
fix-typo ( #5199 )
2019-09-25 04:04:00 -07:00
pando85
9db61c45ed
Upgrade nodelocaldns to 1.15.5 ( #5191 )
2019-09-22 20:13:22 -07:00
Sergey
8cb54cd74d
fix broken scale procedure: ( #5193 )
...
- do not run etcd role when etcd_kubeadm_enabled == true
- remove default value 'systemd' for cgroup driver in containerd role.
this value override autodetect in kubelet_cgroup_driver_detected from docker info
2019-09-22 01:07:22 -07:00
Florent Monbillard
a3f1ce25f8
Add support for k8s v1.14.6 ( #5182 )
2019-09-18 02:53:30 -07:00
Qingkun Li
3c7f682e90
Parameterize gcr, quay, and docker image repo defines ( #5146 )
...
This allows to easily override the gcr, quay, and docker repos with the
mirror repos in countries like China, where the default accesses are
blocked or unstable.
2019-09-18 02:49:30 -07:00
Sergey
8984096f35
use hyperkubeimage to run controlplane containers ( #5178 )
2019-09-17 18:33:28 -07:00
Mario
1ce7831f6d
Update main.yml ( #5166 )
2019-09-17 05:36:24 -07:00
holmesb
46f6c09d21
Fixes issue #5160 ( #5171 )
2019-09-16 23:42:22 -07:00
Matthew Mosesohn
6fe2248314
Use more native way to update kubeconfigs using kubeadm ( #5165 )
...
Change-Id: I1076b418f85a26d9896be69910052128afc51cee
2019-09-13 03:40:29 -07:00
andreyshestakov
cb4f797d32
Fix macro on local_volume_provisioner ( #5168 )
...
mydict.keys() should be converted to list,
otherwise it causes errors in loop iteration.
Remove extra space after class name, which broke configmap.
Also allow set reclaimPolicy property.
2019-09-13 00:50:33 -07:00
Matthew Mosesohn
eb40ac163f
Move cri_socket var to kubespray-defaults ( #5149 )
2019-09-10 12:30:55 -07:00
Matthew Mosesohn
27ec548b88
Add support for k8s v1.16.0-beta.2 ( #5148 )
...
Cleaned up deprecated APIs:
apps/v1beta1
apps/v1beta2
extensions/v1beta1 for ds,deploy,rs
Add workaround for deploying helm using incompatible
deployment manifest.
Change-Id: I78b36741348f47a999df3841ee63cf4e6f377830
2019-09-10 12:06:54 -07:00
Florent Monbillard
637f09f140
Fix ansible task titles ( #5154 )
...
* Fix ansible task titles for CRI connection tasks
* Fix Azure subscription ID check task title
2019-09-10 01:34:54 -07:00
Matthew Mosesohn
9b0f57a0a6
Adjust endpoints for kube-proxy,controller,scheduler to proper ip ( #5150 )
...
Change-Id: I5aa009358bee7035922b5a10327997e47c9ba434
2019-09-09 10:33:20 -07:00
leonmbecker
5f02068f90
Documenting Terraform variable az_list
explicitly ( #5132 )
...
* added az_list to README section
* added az_list to cluster.tfvars
2019-09-09 07:41:19 -07:00
Matthew Mosesohn
7f74906d33
Make haproxy/nginx client timeout configurable ( #5140 )
...
Change-Id: I61319a06eb33d9fc868e19941924f387088b856b
2019-09-05 00:32:51 -07:00
Csergő Bálint
56523812d3
print hostnames ( #5110 )
2019-08-29 05:07:57 -07:00
Guangming Wang
602b2d198a
Cleanup: fix typo in doc ( #5105 )
...
Signed-off-by: Guangming Wang <guangming.wang@daocloud.io>
2019-08-28 02:35:15 -07:00
Richard Arends
4d95bb1421
Use python3-libselinux on RHEL8/Centos8 ( #5127 )
...
* Use python3-libselinux on RHEL8/Centos8
* The fact ansible_facts.distribution_major_version is not present on older Ansible version.
Default it to 0 in when not present and use libselinux-python as package to get current
default behaviour.
2019-08-28 02:33:15 -07:00
Matthew Mosesohn
184ac6a4e6
Parse calico nodes as json ( #5114 )
2019-08-27 10:16:42 -07:00
rptaylor
10e0fe86fb
remove unimplemented custom_flags vars, document the extra_args vars (issue 4352) ( #5108 )
2019-08-23 01:21:18 -07:00
Matthew Mosesohn
7e1645845f
Allow calico settings to be modified ( #5101 )
...
Previous logic used calicoctl.sh create --skip-exists, which
allowed setting initial values, but not permitting changes.
2019-08-23 00:01:19 -07:00
Neven Miculinic
f255ce3f02
Added CRI-O support for ubuntu ( #4629 )
...
* Added CRI-O support for ubuntu
* implemented feedback
* set crictl to fixed version
* Fix errors during rebasing
* Fix linting errors
2019-08-22 03:54:31 -07:00
Michael Oglesby
07ecef86e3
Replace fetch with synchronize due to memory error ( #5084 )
...
Fix for Kubespray Issue #5059 (https://github.com/kubernetes-sigs/kubespray/issues/5059 ). There is a known issue with the 'fetch' module that will sometimes lead to it failing with a memory error. See ansible/ansible#11702 (https://github.com/ansible/ansible/issues/11702 ). I encountered this issue with the "Copy kubectl binary to ansible host" task in kubespray/roles/kubernetes/client/tasks/main.yml, and it caused my entire deployment to error out (see "Output of ansible run" above). Replacing 'fetch' with 'synchronize' fixes this issue.
2019-08-22 02:40:32 -07:00
ewtang
3bc4b4c174
Use raw module for bootstrap-debian.yml ( #5061 )
...
Updated Openstack to terraform 0.12 (#5062 )
* update openstack to terraform 0.12(.5)
* replace cluter.tf with cluster.tfvars
* update README.md to terraform 0.12
* update Openstack CI tests to use terraform 0.12
* specify terraform version in openstack README
* gitlab CI to copy cluster.tfvars in case of openstack provider
* The terraform/openstack dynamic inventory can read
tfstate v4 (generated by terraform 0.12) and convert them internally
ro v3 (as generated by terraform 0.11.x).
Additionally the script has been updated to Python 3.
2019-08-22 01:46:31 -07:00
Victor Morales
da089b5fca
Update CRI-O in CentOS ( #4582 )
...
According to their compatibility matrix[1] the 1.11.5 version seems to
be deprecated. This change updates the CentOS repository reference.
[1] https://github.com/cri-o/cri-o#compatibility-matrix-cri-o---kubernetes-clusters
2019-08-22 01:16:32 -07:00
ewtang
d4f094cc11
Add localhost to ansible.limit. ( #5037 )
...
Upgrade to Kubernetes 1.15.3 (#5091 )
2019-08-22 01:14:32 -07:00
Sergey
494a6512b8
fix bug: run Copy image to ansible host cache on download_delegate host ( #5094 )
...
* run 'task download_container | Copy image to ansible host cache' with synchronize on download_delegate host
* try to run task copy file to ansible host on all inventory, not only on first random host
2019-08-21 23:38:30 -07:00
mcayland
3732c3a9b1
terraform/openstack: add network_dns_domain variable ( #5093 )
...
This allows the user to optionally specify the dns_domain attribute on the
generated internal kubernetes network.
2019-08-21 05:09:15 -07:00
Tony Fouchard
f6a63d88a7
Allow to configure strict ARP on kube-proxy ( #5092 )
2019-08-20 18:21:17 -07:00
Andreas Krüger
86cc703c75
Upgrade to Kubernetes 1.15.3 ( #5091 )
2019-08-20 02:05:32 -07:00
Hugo Blom
4dba34bd02
add cinder max attached volumes ( #5089 )
2019-08-19 23:45:32 -07:00
Xiaodu
b0437516c1
Kube-router annotate.yml: Use group 'k8s-cluster' instead of 'all' ( #5087 ) ( #5088 )
2019-08-19 04:53:29 -07:00
Hugo Blom
da015e0249
Updated Openstack to terraform 0.12 ( #5062 )
...
* update openstack to terraform 0.12(.5)
* replace cluter.tf with cluster.tfvars
* update README.md to terraform 0.12
* update Openstack CI tests to use terraform 0.12
* specify terraform version in openstack README
* gitlab CI to copy cluster.tfvars in case of openstack provider
* The terraform/openstack dynamic inventory can read
tfstate v4 (generated by terraform 0.12) and convert them internally
ro v3 (as generated by terraform 0.11.x).
Additionally the script has been updated to Python 3.
2019-08-18 01:30:05 -07:00
shlo
554857da97
add cluster name into filer if specifed in environment variable ( #5085 )
2019-08-16 19:28:08 -07:00
Guangming Wang
9bf23fa43b
cleanup vars.md typos words ( #5086 )
...
Signed-off-by: Guangming Wang <guangming.wang@daocloud.io>
2019-08-16 19:12:09 -07:00
Guangming Wang
42287066d3
fix word errors in downloads.md ( #5083 )
...
Signed-off-by: Guangming Wang <guangming.wang@daocloud.io>
2019-08-15 20:10:33 -07:00
Ali Sanhaji
a1ff1de975
fix openstack_cacert conditional ( #5078 )
2019-08-15 05:50:34 -07:00
Zou Nengren
1bfbc5bbc4
remove resource-container default value for kube-proxy ( #4994 )
2019-08-15 05:30:33 -07:00
Bort Verwilst
c5b4d3ceaa
upgrade Helm to 2.14.3 ( #5075 )
...
Signed-off-by: Bart Verwilst <bart@verwilst.be>
2019-08-15 04:34:33 -07:00
w33dw0r7d
8fc9c5d025
Upgrade ingress nginx to 0.25.1 ( #5081 )
2019-08-15 04:14:34 -07:00
Maxime Guyot
42bba66c02
Disable moderator ( #5069 )
...
* Test the CI
* Disable CI moderator
2019-08-15 03:02:34 -07:00
刘旭
53bc80bb59
Ingress nginx ( #5066 )
...
* remove svc-default-backend
* update ingress-nginx clusterrole
2019-08-15 02:34:33 -07:00
Matthew Mosesohn
771ce96e6d
Set initial kubeadm token if specified in kubeadm init ( #5057 )
...
Change-Id: I7fd94ec6d195af60d237b3cfe91668ca1f707d26
2019-08-15 02:26:33 -07:00
Oilbeater
fc456ff0cd
move kube-ovn images to dockerhub ( #5063 )
2019-08-14 04:02:24 -07:00
Sergey Kolekonov
b4f70db878
Fix broken containerd pinning on Ubuntu ( #5072 )
2019-08-13 19:26:23 -07:00
Matthew Mosesohn
5707f79b33
Allow to configure number of kube-masters ( #5073 )
...
Change-Id: Ia3f30a1216b3ea063cd72c839ef6dff753cf10c6
2019-08-13 18:52:24 -07:00
Matthew Mosesohn
0a2f4edfc6
Always download coredns images with kubeadm ( #5071 )
...
Fixes situation when using manual mode because it
tries to download coredns v1.3.1 from the same
image repository where kubernetes images are
downloaded from.
Change-Id: Ibbec8a72c8162ce8befa74e2013a268737ea5f8a
2019-08-13 08:53:43 -07:00
Danilo Riecken P. de Morais
56fa46716e
Add missing coredns tag. ( #5054 )
2019-08-09 02:29:27 -07:00
Craig Rodrigues
b74abe56fd
Bump minimum K8S version to 1.14 ( #5055 )
...
Signed-off-by: Craig Rodrigues <craig@portworx.com>
2019-08-09 02:13:26 -07:00
Simon Lelievre
62aecd1e4a
multus | fix use last version ( #5041 )
2019-08-08 23:05:25 -07:00
Mario
973afef96e
Fix variable for rbd_provisioner_user_secret ( #5042 )
...
* Update main.yml
* fix dead link 404
2019-08-08 20:03:25 -07:00
Bort Verwilst
a235605d2c
go to k8s 1.15.2, update nodelocaldns to latest bugfix release ( #5048 )
2019-08-08 19:49:25 -07:00
Matthew Mosesohn
023108a733
Refactor calico route reflector to run in k8s cluster ( #4975 )
...
* Refactor calico-rr to run in k8s cluster with taint
Change-Id: I75a3169ff5b36ce8302fc7ef1c32d3eb697b5afa
* add preinstall checks
* rework calico/rr role
Change-Id: I2f0a7e6cb77cf91ad4a615923680760d2e5d9ca8
* add empty calico-rr group
Change-Id: I006c0a60db9b72d02245bf8fdfabcf982144a5ad
2019-08-08 07:37:22 -07:00
Matthew Mosesohn
75d1be8272
Fix check for removing etcd member ( #5051 )
...
Change-Id: Ib27d051ff111f813097a9b33a86465a2a30a6db0
2019-08-07 08:26:51 -07:00
Matthew Mosesohn
a44235d11b
Refactor remove node to allow removing dead nodes and etcd members ( #5009 )
...
Change-Id: I1c59249f08f16d0f6fd60df6ab61f17a0a7df189
2019-08-07 04:46:50 -07:00
Matthew Mosesohn
7abf6a6958
Allow etcd member join by checking cluster health only on first etcd ( #5032 )
...
Change-Id: I9cc01cef3a437893225e2d9f58495826bbce7be9
2019-08-07 04:44:50 -07:00
Edward Vielmetti
0d0b1fdf82
Ansible version bump for CVE-2019-10156 ( #5050 )
2019-08-06 23:56:50 -07:00
Maxim Snezhkov
b710c72f04
Add ability to setup virtual ip for ingress-controller ( #5044 )
2019-08-06 19:24:50 -07:00
Matthew Mosesohn
678c316d01
Optionally refresh kubeadm token every time ( #5045 )
...
Change-Id: I278cb14aa93abf20160cc001f69e2f472504e6d8
2019-08-06 07:35:55 -07:00
Holger Frydrych
bc6de32faf
Upgrade Cilium network plugin to v1.5.5. ( #5014 )
...
* Needs an additional cilium-operator deployment.
* Added option to enable hostPort mappings.
2019-08-06 01:37:55 -07:00
Matthew Mosesohn
7cf8ad4dc7
Optionally refresh kubeadm token every time ( #5043 )
...
Change-Id: I278cb14aa93abf20160cc001f69e2f472504e6d8
2019-08-06 00:59:53 -07:00
Remous-Aris Koutsiamanis
02ec72fa40
Fix commands for using experimental kubeadm control plane ( #5006 )
2019-08-05 07:31:50 -07:00
Johannes Scheuermann
d22634a597
Refactor containerd ubuntu setup and remove redundant tasks ( #5015 )
2019-08-05 07:29:48 -07:00
Mark Janssen
4132cee687
Fix mistakes in downloads docs ( #5038 )
2019-08-04 18:25:47 -07:00
Mark Janssen
f3df0d5f4a
Always create bash_completion.d folder ( #5039 )
2019-08-04 18:15:48 -07:00
Adrian Moisey
1d285e654d
Fix small typo ( #5029 )
2019-08-01 06:52:16 -07:00
Vitaliy Dmitriev
dc6ad64ec7
[contrib/heketi]: tear down additions and fixes. Heketi updated to version 9 ( #5027 )
...
* lvm packages removal during tear down skipped by default
* lvm utils execution PATH fixed for CentOS/RH
* Heketi updated to the latest version 9
Signed-off-by: Vitaliy Dmitriev <vi7alya@gmail.com>
2019-08-01 04:00:16 -07:00
w33dw0r7d
92bfcf0467
Add CoreDNS endpoint_pod_names option ( #5012 )
2019-07-31 11:26:15 -07:00
koriukiv
54b1fe83f3
Add an option to reserve resources for OS system daemons ( #5007 )
2019-07-31 11:24:15 -07:00
Andreas Holmsten
5337cff179
Add packet_ubuntu18-flannel-containerd ( #5004 )
2019-07-31 11:22:14 -07:00
Oilbeater
1be788f785
add Kube-OVN cni to kubespray ( #5020 )
2019-07-30 20:10:20 -07:00
rptaylor
8afbf339f7
fix broken link ( #5023 )
2019-07-30 19:18:22 -07:00
Andreas Krüger
8c935dfb50
Update CoreDNS to 1.6.0 ( #5021 )
2019-07-30 18:58:21 -07:00
Johannes Scheuermann
66c5ed8406
Update critools to v1.15.0 ( #5016 )
2019-07-30 12:04:09 -07:00
Erwan Miran
4087e97505
Additional files and dirs to remove when running reset ( #5000 )
2019-07-30 12:02:08 -07:00
Jeff Bornemann
da50ed0936
move flexvolume plugin directory creation to preinstall ( #4999 )
...
* move flexvolume plugin directory creation to preinstall
* changes per pr feedback
2019-07-30 12:00:10 -07:00
okamototk
fbbfff3795
fix broken ubuntu containerd engine ( #5002 )
2019-07-30 11:58:11 -07:00
Aleksey Kasatkin
fb9103acd3
Update calico-typha deployment to address v3.7.x changes ( #5003 )
...
* Update calico-typha deployment to address v3.7.x changes
So that calico-typha works for Calico v3.7.x.
* Apply changes for v3.7.x only.
2019-07-24 09:12:16 -07:00
nico-netminded
49d921cf91
Restart canal after scale or upgrade. Just like PR#4531, but for canal ( #4992 )
2019-07-22 00:50:53 -07:00
刘旭
fe29c97ae8
add ansible_hostname and ansible_fqdn to apiserver_sans ( #4990 )
2019-07-22 00:48:53 -07:00
Hugo Blom
2abb6c8689
update to kubernetes 1.15.1 ( #4989 )
...
* update to kubernetes 1.15.1
* Revert to sonobuoy 0.15.0
* update test timeout from 3 to 5 minutes
2019-07-21 12:24:51 -07:00
Andreas Krüger
a3ca441998
Remove unused handlers from Flannel CNI ( #4984 )
...
* Only reload docker when is_atomic for Flannel
* Remove unused handlers from Flannel CNI
2019-07-21 00:16:54 -07:00
rptaylor
9cf503acb1
configure docker_options directly with template ( #4912 )
2019-07-21 00:12:53 -07:00
Matthew Mosesohn
1cbdd7ed5c
Fixup etcdctl download for etcd kubeadm mode ( #4991 )
...
Change-Id: I8d8e59a97823390f40e8810905ca52430329f040
2019-07-21 00:08:53 -07:00
Sergey Kolekonov
428e52e0d1
Fix calico handler for containerd ( #4985 )
...
crictl tool must be used to delete containers in case of containerd
deployment
2019-07-16 08:35:24 -07:00
Matthew Mosesohn
70dc222719
Upgrade local volume provisioner to v2.3.2 ( #4983 )
2019-07-16 05:27:26 -07:00
Tilman Beitter
69f796f0c7
use the locally deployed kubectl binary within the kubectl.sh helper script ( #4311 )
2019-07-16 02:23:25 -07:00
Vincent Link
5826f0810c
Check all apt config files for configured proxies ( #4972 )
2019-07-16 01:41:24 -07:00
刘旭
de9443a694
remove unused code ( #4981 )
2019-07-16 01:39:24 -07:00
Alex Barcelo
99c5f7e013
add k8s_external plugin to CoreDNS configuration ( #4704 )
2019-07-16 00:53:23 -07:00
Andreas Krüger
d9dedc2cd5
Let Premoderator script add labels ( #4978 )
...
* Let Premoderator script add labels
* Fix JQ error
* Minor fixes
* Debug patch label output
* Try again
* Try again
* Try again
* Try again
* Try again
* Minor cleanup
2019-07-16 00:43:23 -07:00
Matthew Mosesohn
23ae6027ab
remove support for calico v2.x ( #4974 )
...
* Remove support for calico below version v3.0.0
Change-Id: If8fe3036b9e054901a8b2c48516eff1e1271970f
* Update main.yml
* fixup node peering
Change-Id: Ifac4d363deba826f0c80e390ce80a28df9827323
* fixups
Change-Id: Ic35417330af6741962003b3930604393c90804d1
* fixups
Change-Id: I0ea82d634bb0c81d9b7dc50569c70988bc8d3a3b
2019-07-15 07:47:09 -07:00
Waret
781b5691c9
prep_kubeadm_images: parse repo and tag ( #4976 ) ( #4977 )
2019-07-15 03:15:09 -07:00
Matthew Mosesohn
fd9bbcb157
Enable nodes to run calicoctl for calico kdd mode ( #4956 )
...
* Enable nodes to run calicoctl
per-node tasks require waiting for calico-node to be applied
Change-Id: Ibe1076b7334a2da0332f2dd766fde0c3f172d1f2
* cleanup tasks that should run on master
Change-Id: I43a837879ef41596f14657ecd7f813899b6865ae
* Switch run_once calico logic to just run on first master
Change-Id: I6893711e354f63c5e1eaf6ac2e23d9a6347a555d
2019-07-15 01:59:06 -07:00
Gustavo Muniz do Carmo
e0410661fa
azure loadbalancer vars generation ( #4892 )
2019-07-15 01:27:06 -07:00
TommyKTheDJ
8ef754678a
Ansible 2.8.x note ( #4908 )
...
Update README.md to link to the open issue that shows Ansible 2.8.x doesn't work with Kubespray. The requirements.txt file is already fixed to 2.7.8 so only the README needed updating, I think.
2019-07-15 01:05:07 -07:00
Andreas Krüger
161a8f55fa
Update CoreDNS to 1.5.2 ( #4970 )
2019-07-15 00:59:06 -07:00
Andreas Krüger
7481cc31e1
Update Weave CNI to 2.5.2 ( #4969 )
2019-07-15 00:57:06 -07:00
Matthew Mosesohn
b15b6e834f
fix parsing refresh of kubeadm cert key ( #4971 )
...
* fix parsing refresh of kubeadm cert key
Change-Id: I4de2a1df6498790a80351b4bc7d88e6c9e470358
* Update kubeadm-secondary-experimental.yml
2019-07-15 00:45:06 -07:00
Hugo Blom
76640cf1a1
update docker-ce to 18.09.7 ( #4973 )
2019-07-14 22:59:04 -07:00
jlacoline
374ea7b81d
update supported calico version to 3.7.3 in README ( #4966 )
2019-07-12 03:31:05 -07:00
Sergey Kolekonov
46bef931e9
Fix images info logic for containerd ( #4965 )
...
As crictl tool is used to download images, it must be also used to gather
images info
2019-07-12 03:29:07 -07:00
Stanislav Makar
a36e9ae690
Add checksums for k8s 1.14.4 ( #4959 )
2019-07-11 23:19:05 -07:00
Jeff Bornemann
728155a2a1
Support for Oracle Linux ( #3655 )
...
Fixed Issue #1032
test case for OEL7 AIL with kubeadm
Add packet CI stuff for oracle 7
2019-07-11 23:17:05 -07:00
Matthew Mosesohn
cdf9a9f4fc
Generate certificate key before kubeadm control plane config ( #4964 )
2019-07-11 05:30:54 -07:00
Matthew Mosesohn
29307740dd
Enable containerd to deploy vanilla containerd package ( #4951 )
...
* Enable containerd to deploy vanilla containerd package
Fixes kubeadm references to CRI socket for containerd
Fixes download role cache feature to work with containerd
Change-Id: I2ab8f0031107e2f0d1a85c39b4beb66f08509a01
* use containerd for flannel-addons job
Change-Id: Ied375c7d65e64a625ffbd995ff16f2374067dee6
* add containerd vars
Change-Id: Ib9a8a04e501c481a86235413cbec63f3672baf91
* fixup vars
Change-Id: Ibea64e4b18405a578b52a13da100384582aa24c2
* more fixes
* fix rh repo
Change-Id: I00575a77cfb7b81d6095db5d918a52023c8f13ba
* Adjust helm host install for containerd
2019-07-10 23:46:54 -07:00
Vilvaramadurai Samidurai
a038d62644
doc-fix: azure.md azure cli parameter update ( #4936 )
2019-07-10 05:46:25 -07:00
jlacoline
20c7e31ea3
Add calico 3.7.3 support ( #4953 )
...
* Add calico 3.7.3 support
* add calico_datastore variable to policy controller role
* add missing clusterrole rules for calico policy controller
* disable calico kube controller when kdd mode is used for versions < 3.6
2019-07-09 12:42:28 -07:00
Matthew Mosesohn
65065e7fdf
Default kubeadm_images to empty dict instead of set_fact ( #4957 )
...
Change-Id: I9ef52232176fe8e2a99b4f09ae05e1451f7ad1ff
2019-07-09 12:07:30 -07:00
Matthew Mosesohn
352297cf8d
Fixup deploy of kubeadm etcd for Kubernetes v1.15.0 ( #4952 )
...
* Fixup deploy of kubeadm etcd for Kubernetes v1.15.0
Change-Id: If42c2c75c4d278ba9475ebf76c243f3e6ee4d02e
* undo renaming cloud config file
Change-Id: Iafbd27c3887d6a2a6d0819c711f150ecf70c515d
2019-07-09 15:41:59 +03:00
champtar
a67a50f9c0
nodelocaldns: allow to set health port, switch to 9254 by default ( #4902 )
...
8080 is a pretty common port, using nodelocaldns_ip:8080 still
prevents node processes or hostNetwork=true processes to bind to *:8080
so switch to 9254 by default (prometheus port is 9253)
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2019-07-09 00:52:01 -07:00
rptaylor
324bc41097
Add support for Docker plugins ( #4934 )
...
* Add support for Docker plugins
* support multiple Docker plugins using looped include
* fix yamllint error
2019-07-08 06:44:35 -07:00
andreyshestakov
c81b443d93
Fix order of names in /etc/hosts ( #4940 )
...
Configure fqdn properly
2019-07-08 06:08:34 -07:00
Julian Tabel
dc16ab92f4
fix for calico with kdd datastore ( #4922 )
...
* fix for calico with kdd datastore
* remove AS number from daemonset
* revert changes to canal
* additionnal fixes for kdd datastore in calico
2019-07-08 12:20:03 +03:00
Timoses
53032a6695
Use kubespray-defaults in remove-node role ( #4946 )
2019-07-05 03:28:34 -07:00
Konrad Kurdej
d90a5f291b
Using also uppercase proxy env variables ( #4910 )
2019-07-02 18:13:12 -07:00
Evans Tucker
3b7791501e
Adding "-F /dev/null" to load null SSH config file. ( #4933 )
2019-07-02 01:53:08 -07:00
okamototk
f2b8a3614d
Use K8s 1.15 ( #4905 )
...
* Use K8s 1.15
* Use Kubernetes 1.15 and use kubeadm.k8s.io/v1beta2 for
InitConfiguration.
* bump to v1.15.0
* Remove k8s 1.13 checksums.
* Update README kubernetes version 1.15.0.
* Update metrics server 0.3.3 for k8s 1.15
* Remove less than k8s 1.14 related code
* Use kubeadm with --upload-certs instead of --experimental-upload-certs due to depricate
* Update dnsautoscaler 1.6.0
* Skip certificateKey if it's not defined
* Add kubeadm-conftolplane.v2beta2 for k8s 1.15 or later
* Support kubeadm control plane for k8s 1.15
* Update sonobuoy version 0.15.0 for k8s 1.15
2019-07-02 01:51:08 -07:00
Matthew Mosesohn
e89b47c7ee
Add nginx stub metrics if health check enabled ( #4938 )
...
Change-Id: Iac90beef20e63fb4a539f91836231469c573f402
2019-07-01 13:38:37 -07:00
Matthew Mosesohn
2aa66eb12d
Default to refreshing kubeadm etcd key ( #4931 )
...
Change-Id: Icc0176773b6d581c43647de433214079440d7321
2019-06-30 03:37:22 -07:00
okamototk
4c8b93e5b9
containerd support ( #4664 )
...
* Add limited containerd support
Containerd support for Ubuntu + Calico
* Added CRI-O support for ubuntu
* containerd support.
* Reset containerd support.
* fix lint.
* implemented feedback
* Change task name cri xx instead of cri-o in reset task and timeout condition.
* set crictl to fixed version
* Use docker-ce's container.io package for containerd.
* Add check containerd is installable or not.
* Avoid stop docker when use containerd and optimize retry for reset.
* Add config.toml.
* Fixed containerd for kubelet.env.
* Merge PR #4629
* Remove unused ubuntu variable for containerd
* Polish code for containerd and cri-o
* Refactoring cri socket configuration.
* Configurable conmon.
* Remove unused crictl/runc download
* Now crictl and runc is downloaded by common crictl.yml.
* fixed yamllint error
* Fixed brokenfiles by conflict.
* Remove commented line in config.toml
* Remove readded v1.12.x version
* Fixed broken set_docker_image_facts
* Fix yamllint errors.
* Remove unused apt source
* Fix crictl could not be installed
* Add containerd config from skolekonov's PR #4601
2019-06-29 14:09:20 -07:00
Tony Fouchard
216631bf02
Repair kube_proxy_exclude_cidrs ( #4909 )
2019-06-28 00:39:37 -07:00
Erwan Miran
c7f3123e28
kubeadm_discovery_address should not contain proto ( #4930 )
2019-06-28 00:37:37 -07:00
Simon Lelievre
f599c2a691
add macvlan cni to kubespray ( #4901 )
...
* add macvlan cni to kubespray
* macvlan: lint yaml files and fix sample config file
* macvlan: add OWNERS file
* add macvlan to README
* macvlan : CI first shoot
* macvlan : CI add full masquerade
* delegate retrive pod cidr to master only
* macvlan: add config for CI
* macvlan: add netchecker deployment
2019-06-28 00:35:38 -07:00
Matthew Mosesohn
bc7d1f36ea
Remove wasteful extra gather facts step ( #4928 )
...
Ansible will gather facts on the preinstall/download role
automatically at the start of that play.
2019-06-27 06:25:21 -07:00
Matthew Mosesohn
80fa294a31
Disable redundant CI test cases ( #4918 )
...
Change-Id: I1991bca8368adc20832d2bb15644411653446b51
2019-06-27 04:49:22 -07:00
Matthew Mosesohn
465dfd68bc
Fix empty kube_override_hostname in apiserver_sans ( #4916 )
...
kubernetes/master role defines this value as an empty string
when using a cloud provider, not undefined. The check was updated
accordingly.
Change-Id: I58dc31ef4fd568a717a6753eb89ca687933018ae
2019-06-25 08:00:37 -07:00
Matthew Mosesohn
73f45fbe94
Revert "Filter undefined SANs for apiserver cert ( #4913 )" ( #4914 )
...
This reverts commit d270678bda
.
2019-06-25 06:56:00 -07:00
Matthew Mosesohn
d270678bda
Filter undefined SANs for apiserver cert ( #4913 )
...
Change-Id: I37442fb095fb4217f67f74744ad07c1d5d8229ea
2019-06-25 05:54:36 -07:00
Andreas Krüger
de028814e5
Upgrade to etcd version 3.3.10 per 1.14 release notes. ( #4898 )
...
* Upgrade to etcd version 3.3.10 per 1.14 release notes.
* Update etcd binary checksums
2019-06-24 01:27:55 -07:00
andreyshestakov
b5406b752d
Add kube_override_hostname to kubeadm certs. ( #4903 )
2019-06-23 23:19:56 -07:00
Matthew Mosesohn
6025981ceb
Allow skip kubeadm image prep but install kubeadm ( #4904 )
...
Change-Id: I744e9a192cd863a1ce22fbd16d217c5dfb16750c
2019-06-23 23:17:56 -07:00
Matthew Mosesohn
4348e78b24
Enable kubeadm etcd mode ( #4818 )
...
* Enable kubeadm etcd mode
Uses cert commands from kubeadm experimental control plane to
enable non-master nodes to obtain etcd certs.
Related story: PROD-29434
Change-Id: Idafa1d223e5c6ceadf819b6f9c06adf4c4f74178
* Add validation checks and exclude calico kdd mode
Change-Id: Ic234f5e71261d33191376e70d438f9f6d35f358c
* Move etcd mode test to ubuntu flannel HA job
Change-Id: I9af6fd80a1bbb1692ab10d6da095eb368f6bc732
* rename etcd_mode to etcd_kubeadm_enabled
Change-Id: Ib196d6c8a52f48cae370b026f7687ff9ca69c172
2019-06-20 11:12:51 -07:00
Andreas Holmsten
e2f9adc2ff
Add holmsten to reviewers (slack - gix) ( #4896 )
2019-06-20 00:38:48 -07:00
Tony Fouchard
f67a24499b
Allow to specify feature_control in calico cni config ( #4879 )
...
* Allow to specify feature_control in calico cni config
* list length checking
* double check
* remove 2 conditions
2019-06-16 23:14:07 -07:00
Simon Lelievre
5c704552d8
multus | use last version ( #4880 )
2019-06-16 23:12:07 -07:00
D瓜哥
d83ea51101
fix markdown style ( #4886 )
2019-06-14 05:42:21 -07:00
Edwin Jacques
fa6027e8f0
fix references to sample files in setup.cfg ( #4882 )
2019-06-14 03:52:21 -07:00
Simon Lelievre
2849191e67
CNI plugins: use last version 0.8.1 ( #4878 )
...
* CNI plugins: bump version 0.8.1
* cni plugins : update checksums
* cni : update readme
2019-06-14 02:42:23 -07:00
Edwin Jacques
0559eec681
Update Dockerfile to use python3 ( #4885 )
2019-06-14 01:54:24 -07:00
刘旭
a3a7fe7c8e
fix start CoreDNS when init secondary master ( #4867 )
2019-06-11 04:56:18 -07:00
Maxime Guyot
9b2d176617
Enable packet_ubuntu-contiv-sep ( #4595 )
2019-06-11 03:28:16 -07:00
Maxime Guyot
7a3547e4d1
Enable packet_*-kube-router jobs ( #4594 )
2019-06-11 02:58:18 -07:00
Scott Charron
e6fb686156
added the ability to define and deploy multiple address pools to metallb ( #4757 )
2019-06-11 00:20:21 -07:00
Johnny Halfmoon
5e80603bbb
updated vagrant doc ( #3719 )
2019-06-10 23:58:14 -07:00
Andreas Krüger
c8d95a1586
Remove dnsPolicy from PSP ( #4864 )
2019-06-10 23:34:16 -07:00
Neven Miculinic
27a99e0a3f
Added configurable min memory assertions ( #4307 )
2019-06-10 23:22:15 -07:00
Andreas Krüger
3cc351dff9
Require min version of Kubernetes ( #4860 )
...
* Require minimum version of Kubernetes
* Remove checksums for kubernetes version 1.12
* Add kube_version to precheck output and add min required version to README
* Fix merge
* Fix defaults
* Fix typo in precheck
2019-06-10 23:18:15 -07:00
Johnny Halfmoon
23c9071c30
Added file and container image caching ( #4828 )
...
* File and container image downloads are now cached localy, so that repeated vagrant up/down runs do not trigger downloading of those files. This is especially useful on laptops with kubernetes runnig locally on vm's. The total size of the cache, after an ansible run, is currently around 800MB, so bandwidth (=time) savings can be quite significant.
* When download_run_once is false, the default is still not to cache, but setting download_force_cache will still enable caching.
* The local cache location can be set with download_cache_dir and defaults to /tmp/kubernetes_cache
* A local docker instance is no longer required to cache docker images; Images are cached to file. A local docker instance is still required, though, if you wish to download images on localhost.
* Fixed a FIXME, wher the argument was that delegate_to doesn't play nice with omit. That is a correct observation and the fix is to use default(inventory_host) instead of default(omit). See ansible/ansible#26009
* Removed "Register docker images info" task from download_container and set_docker_image_facts because it was faulty and unused.
* Removed redundant when:download.{container,enabled,run_once} conditions from {sync,download}_container.yml
* All features of commit d6fd0d2aca
by Timoses <timosesu@gmail.com>, merged May 1st 2019, are included in this patch. Not all code was included verbatim, but each feature of that commit was checked to be working in this patch. One notable change: The actual downloading of the kubeadm images was moved to {download,sync)_container, to enable caching.
Note 1: I considered splitting this patch, but most changes that are not directly related to caching, are a pleasant by-product of implementing the caching code, so splitting would be impractical.
Note 2: I have my doubts about the usefulness of the upload, download and upgrade tags in the download role. Must they remain or can they be removed? If anybody knows, then please speak up.
2019-06-10 11:21:07 -07:00
Maxime Guyot
14141ec137
Rebase only on PRs ( #4861 )
2019-06-10 11:17:05 -07:00
rptaylor
5bec2edaf7
remove namespace from ClusterRole ( #4856 )
2019-06-10 11:15:12 -07:00
Matthew Mosesohn
f504d0ea99
Remove invalid field dnsPolicy from podSecurityPolicy ( #4863 )
...
Change-Id: I02864011bf5fda5dbd35c7513c73875769036f87
2019-06-10 07:11:10 -07:00
Matthew Mosesohn
3b7797b1a1
Ensure haproxy and nginx reload when config changes ( #4862 )
...
Change-Id: Ia9a41e7b1cfcb1e6acb2dbae6eecc541dce25a74
2019-06-10 05:59:08 -07:00
Aivars Sterns
aa63eb6196
disable ansible group name warning ( #4852 )
2019-06-10 03:29:09 -07:00
Andreas Krüger
23aa3e4638
Remove GCE tests and CNCF funding ended ( #4859 )
2019-06-10 00:31:06 -07:00
Trond Hasle Amundsen
56ae3bfec2
Add support for IPv6 for Openstack in terraform.py via metadata ( #4716 )
...
* Add support for IPv6 for Openstack in terraform.py via metadata
* document terraform.py metadata variables for openstack
2019-06-09 23:01:05 -07:00
Sergey Nuzhdin
4d5c4a13cb
Add missing checksums, update default k8s version to 1.14.3 ( #4850 )
...
This PR adds missing checksums for kubeadm and hyperkube and changes
default version to 1.14.3
Signed-off-by: Sergey Nuzhdin <ipaq.lw@gmail.com>
2019-06-09 11:49:05 -07:00
AlawnWong
69a8f91512
Update dns-autoscaler.yml.j2 ( #4857 )
...
Merge two tolerations. because the latest tolerations will cover the first tolerations.
2019-06-09 11:39:04 -07:00
Daniel Holbach
fa791cc344
update link to Weave Net Troubleshooting docs ( #4853 )
...
Signed-off-by: Daniel Holbach <daniel@weave.works>
2019-06-07 05:52:00 -07:00
Dani Comnea
456f743470
Fix etcd_events_cluster_enabled in CI due to wrong var used ( #4849 )
2019-06-06 07:10:17 -07:00
Frank Ritchie
ab6f0012cc
Make local volume provisioner dir mode a variable ( #4821 )
...
* Make local volume provisioner dir mode a variable
I need to change this for Nagios monitoring. Others may
need to as well. Had to close previous commits, sorry for
the spam.
* Make local volume provisioner dir mode a variable
I need to change this for Nagios monitoring. Others may
need to as well. Had to close previous commits, sorry for
the spam.
2019-06-06 04:36:14 -07:00
Alberto Murillo
4afbf51d32
kube-router: Set ownership of /opt/cni/bin/* to kube ( #4825 )
...
Task "kube-roter | Set cni directory permissions"
sets ownership of /opt/cni/bin to "kube"
Task "kube-router | Copy cni plugins"
copies the binaries from the archive setting the ownership
back to "root"
Fix "kube-roter" typo
Signed-off-by: Alberto Murillo <albertomurillosilva@gmail.com>
2019-06-06 04:34:13 -07:00
Ivan Kukharchuk
d62684b617
Fixed missing meta for generic CNI network plugin ( #4845 )
2019-06-06 02:22:11 -07:00
mervynzhang
a8dfcbbfc7
Switch /root references to ansible_env.HOME ( #4842 )
...
* kube config dir for current/ansible become user
* remove extra /
* fix default value
2019-06-06 02:06:11 -07:00
Scott Charron
bbdc6210f5
use dpkg_selections module to hold docker-ce on Debian family hosts ( #4820 )
...
* use dpkg_selections module to hold docker-ce on Debian family hosts
* removed debian_docker.j2 template as it is no longer required
2019-06-06 01:16:13 -07:00
Maxime Guyot
c7f6ed1495
Move moderator between part1 and part2 ( #4844 )
2019-06-06 01:00:17 -07:00
Andreas Krüger
818aa7aeb1
Set dnsPolicy to ClusterFirstWithHostNet when hostNetwork is true ( #4843 )
2019-06-05 03:17:55 -07:00
Vladimir Kiselev
045acc724b
fix relative paths for bastion host template ( #4126 )
...
This is a fix for #4124
2019-06-05 01:51:55 -07:00
Dani Comnea
d540560619
Preinstall fails on checking etcd group length ( #4839 )
2019-06-05 01:37:53 -07:00
Andreas Krüger
797bfd85b0
Only create kubeadm compat cert dir link if it does not exist ( #4840 )
2019-06-05 01:27:53 -07:00
Sergey Nuzhdin
07cb8ebef7
Add support for arm images for hyperkube, kubeadm and cni_binary ( #4261 )
...
* Add support for arm images for hyperkube, kubeadm and cni_binary
* Add dummy etcd checksum for arm
This commit adds dummy etcd checksum for arm to avoid "no attribute" error
during setup.
* Add etcd host assert check
* Add 1.13.4 checksums of kubeadm and hyperkube for arm
* Update checksums of kubeadm and hyperkube for arm
* Add dummy checksums for calicoctl_binary_checksums dict
* disable gather_facts because it causes tests to fail
* Remove architecture check for etcd, due to unable to run tests
2019-06-05 00:05:55 -07:00
Toni Pokki
54416cabfd
prefer_udp for upstream dns servers ( #4810 )
2019-06-04 23:27:55 -07:00
Matthew Mosesohn
3617ae31f6
Optionally skip predownload of kubeadm images ( #4832 )
2019-06-04 04:35:02 -07:00
Maxime Guyot
4f05d801c3
Use short cluster_name for TF CI ( #4835 )
2019-06-04 04:25:00 -07:00
Maxime Guyot
956afcb33f
Move tf-ovh to part2 ( #4834 )
2019-06-04 01:39:07 -07:00
Matthew Mosesohn
6347419233
Avoid duplicating nameservers ( #4833 )
2019-06-04 00:13:02 -07:00
Rodrigo Bermúdez Schettino
0c7a50fe1e
README: Make usage section clearer ( #4034 )
...
Long option --become was used in the example but in the comment describing it the short option -b was used.
Use same option in description and example to avoid confusion.
2019-05-31 12:48:28 -07:00
Andreas Krüger
7423932510
Add ready plugin for CoreDNS ( #4817 )
2019-05-28 06:47:56 -07:00
Andreas Krüger
b41530ba5d
Add missing extraArgs to kubeadm-config ( #4814 )
2019-05-28 03:57:52 -07:00
Maxime Guyot
29e916508c
Update roadmap ( #4811 )
2019-05-28 02:05:54 -07:00
Maxime Guyot
b45f3f0004
Add tf-ovh_coreos CI job ( #4763 )
2019-05-28 01:51:53 -07:00
Dani Comnea
2a5721b4d4
Change CentOS CRI-O repo from developer repo to public one ( #4807 )
2019-05-27 05:33:51 -07:00
Maxime Guyot
e30a703c8e
Add Kubernetes conformance tests ( #4614 )
2019-05-27 05:31:52 -07:00
Vitaliy Dmitriev
333f1a4a40
kubeadm join path fixed for RH linux ( #4798 )
2019-05-27 01:49:51 -07:00
Geert-Johan Riemer
84b278021a
Update openstack.yml ( #4795 )
...
Fix comment style
2019-05-25 05:19:27 -07:00
Andreas Krüger
1e470b0473
Fix certificate-key param for kubeadm init ( #4789 )
...
* Fix certificate-key param for kubeadm init
* Fix yamllint error
2019-05-22 02:06:11 -07:00
André R. de Miranda
0ef3a7914c
Added pod psp in Rancher Local Path Provisioner ( #4385 )
...
* Added pod psp in Rancher Local Path Provisioner
Added pod security policy (psp) in Rancher Local Path Provisioner.
Signed-off-by: André R. de Miranda <andre@miranda.work>
* Apply psp for Rancher Local Path Provisioner only when local_path_provisioner_namespace is not kube-system and also reorganized the templates
2019-05-22 00:16:08 -07:00
bobahspb
a3fff1e438
cordon all deleted nodes before drain ( #4756 )
...
Kubespray waits exit of every drain before run other one.
Running drain every after each other seems better than parallel, because we should check resources availability every time.
But, this way, we have one additional problem: possible restart pods on the nodes that are killed little bit later.
Fast cordon before heavy drain seems like an easy solution.
2019-05-21 23:36:05 -07:00
André R. de Miranda
4bc204925a
Error in nginx when starting registry-proxy ( #4785 )
...
Error starting nginx because in requiredDropCapabilities is dropped all capabilities.
The nginx requires the following capabilities:
- CHOWN
- SETGID
- SETUID
Signed-off-by: André R. de Miranda <andre@miranda.work>
2019-05-20 11:27:15 -07:00
Jacopo Secchiero
5d9946184a
Add ignore_assert_errors to "kube-master, ... ( #4779 )
...
... kube-node or etcd is empty" task
As a assert must be ignored if ignore_assert_errors is true
2019-05-20 11:25:14 -07:00
MarkusTeufelberger
5ba169a612
Ignore 2 ansible-lint rules (E204, E701) on purpose. ( #4744 )
2019-05-20 11:23:14 -07:00
marcstreeter
872b37f751
updated pinning to prevent breaking changes ( #4783 )
...
* updated ansible pinning to prevent more possibilities of breaking changes
* more exact pinning of ansible version
* more exact pinning of ansible version and also all the rest
* added testing requirements.txt pinning settings
* removed boto from testing requirements.txt
2019-05-20 11:21:14 -07:00
Mateus Caruccio
8485136f9a
var node_labels as string ( #4764 )
2019-05-19 12:31:10 -07:00
Maxime Guyot
ff1bc739f1
Change default for kubelet_flexvolumes_plugins_dir ( #4752 )
2019-05-19 12:29:10 -07:00
MarioUhrik
594a0e7f1b
Fix invalid YAML formatting within addons.yml ( #4753 )
2019-05-16 02:05:49 -07:00
Florent Monbillard
8e28ba38d2
Add Load Balancer IP to API servers SANs ( #4775 )
...
- Add loadbalancer_apiserver.address to apiserver_sans
2019-05-16 01:23:42 -07:00
MarkusTeufelberger
73c2ff17dd
Fix Ansible-lint error [E502] ( #4743 )
2019-05-16 00:27:43 -07:00
Timoses
13f225e6ae
Only pull images for destined host groups ( #4735 )
...
Without this, pulls are considered for all
hosts groups, even if not targetted by the downloads
`groups` list. Hence, a download/sync is triggered
even though the host does not require the image.
2019-05-16 00:25:48 -07:00
Maxime Guyot
3f62492a15
Use standard testcases job for TF CI ( #4732 )
2019-05-14 02:01:14 -07:00
Maxime Guyot
5e3bd2dff1
Use common playbook to wait for SSH ( #4734 )
2019-05-10 01:25:59 -07:00
Robert Neumann
787a9c74fa
Terraform wait for floating IP instance has been associated ( #4321 )
...
* Add wait for floating ip associate with instance
* Terraform formatting fix
* Sort Open Telekom Cloud in compatible list
2019-05-09 02:16:50 -07:00
Aleksey Kasatkin
14749df6f3
Fix "netchecker-server" ClusterRole ( #4730 )
...
* Add sha256 hashes for calicoctl v3.6.1
Hashes are added to calicoctl_binary_checksums for both adm and arm platforms.
* Add rules for "network-checker.ext" resource to "netchecker-server" ClusterRole
So that it could access the resource after it is created.
Corresponding issues:
https://github.com/Mirantis/k8s-netchecker-server/issues/125
https://github.com/kubernetes-sigs/kubespray/issues/3281
2019-05-09 01:30:49 -07:00
Sandro Modarelli
2db2898112
Fixed runc path in runtime for RedHat os family ( #4731 )
2019-05-09 01:28:48 -07:00
Maxime Guyot
3776000fc4
Run TF tests from repo root ( #4723 )
2019-05-08 23:40:49 -07:00
Maxime Guyot
f0572e59e7
Always do OVH CI ( #4722 )
2019-05-08 23:38:53 -07:00
Andreas Krüger
6217184c7f
Merge pull request #4720 from MarkusTeufelberger/patch-1
...
Update default CentOS version on Azure
2019-05-09 08:38:44 +02:00
Andreas Krüger
044dcbaed0
Add Kubelet config, remove deprecated flags and fix minor bugs ( #4724 )
...
* Add kubelet config
* Change kubelet_authorization_mode_webhook to true
* Fix lint
* Sync env file
* Refactor the kubernetes node folder
* Remove deprecated flag and fix lint
2019-05-08 13:38:36 -07:00
Andreas Krüger
8a5eae94ea
Minor cleanups of CoreDNS issues and CI job ( #4719 )
...
* Minor cleanups
* Add comment in docs that nodelocaldns cache is enabled by default
2019-05-07 13:20:36 -07:00
Andreas Krüger
bf3c6aeed1
Add kube anon auth settings to kubeadm config templates ( #4713 )
...
* Disable kube_api_anonymous_auth by default to secure the setup
* Disable metrics-server in addons. Health endpoint is slow and unstable
* Fix anonymous-auth missing in configuration
* Cleanup a bit
* Fix kube anon auth
2019-05-07 12:52:34 -07:00
MarkusTeufelberger
f3fbf995ca
Update default CentOS version on Azure
2019-05-07 13:37:42 +02:00
Dmitri Rubinstein
03bded2b6b
Fix adding output of kubeadm to the admin.conf downloaded to the artifacts directory ( #4696 )
...
Fixes issue https://github.com/kubernetes-sigs/kubespray/issues/4695
2019-05-06 03:29:36 -07:00
Manuel Cintron
d5c0829d61
Removing unnecessary httplib2 install ( #4708 )
2019-05-03 17:55:38 -07:00
Alex Barcelo
00369303de
Fixing msg
parameter for debug
module ( #4702 )
...
According to [`debug` module documentation](https://docs.ansible.com/ansible/latest/modules/debug_module.html?highlight=msg ), the correct parameter name is `msg`.
With the previous `message` parameter name I was getting FAILED messages while ansible was trying to debug previous FAILED tasks.
2019-05-03 12:21:42 -07:00
okamototk
1f1479c0a7
Update ingress nginx 0.24.1. ( #4691 )
2019-05-03 12:19:39 -07:00
MarkusTeufelberger
e67f848abc
ansible-lint: add spaces around variables [E206] ( #4699 )
2019-05-02 14:24:21 -07:00
MarkusTeufelberger
560f50d3cd
Add support for http(s)_proxy to CoreOS, Fedora and OpenSUSE ( #4669 )
...
* Add support for http(s)_proxy to CoreOS and Fedora
* fix opensuse proxy support
* Fix CoreOS proxy support
* update documentation
2019-05-02 12:28:22 -07:00
Maxime Guyot
3f45122d0d
Refactor Terraform CI ( #4654 )
2019-05-02 12:26:19 -07:00
Stas
50bdaa573c
Apply etcd_extra_vars to etcd-events.env as well. ( #4219 )
...
This change ensures that etcd_extra_vars variable applies
to events etcd as well.
2019-05-02 12:24:27 -07:00
Maxime Guyot
24b6698cc9
Disable CI deploys on master ( #4690 )
2019-05-02 12:20:20 -07:00
Andreas Krüger
73885d3b9e
Validate Vagrantfile in CI unit-tests ( #4642 )
...
* Validate vagrant file on CI
* Install vagrant
* Install vagrant
* Install vagrant
* Install vagrant
* Install vagrant
* Install vagrant
* Test vagrant validate
2019-05-02 11:24:21 -07:00
Maxime Guyot
f29387316f
Fix ansible-lint 602 ( #4688 )
2019-05-01 23:42:17 -07:00
Timoses
d6fd0d2aca
Enable delegating all downloads (binaries, images, kubeadm images) ( #4420 )
...
* Download to delegate and sync files when download_run_once
* Fail on error after saving container image
* Do not set changed status when downloaded container was up to date
* Only sync containers when they are actually required
Previously, non-required images (pull_required=false as
image existed on target host) were synced to the target
hosts. This failed as the image was not downloaded to
the download_delegate and hence was not available for
syncing.
* Sync containers when only missing on some hosts
* Consider images with multiple repo tags
* Enable kubeadm images pull/syncing with download_delegate
* Use kubeadm images list to pull/sync
'kubeadm config images pull' is replaced by collecting the images
list with 'kubeadm config images list' and using the commonly
used method of pull/syncing the images.
* Ensure containers are downloaded and synced for all hosts
* Fix download/syncing when download_delegate is a kubernetes host
2019-05-01 01:10:56 -07:00
MarkusTeufelberger
e814da1eec
ansible-lint: Don't use the local_action module [E504] ( #4666 )
2019-05-01 00:38:55 -07:00
Andreas Krüger
e029a09345
Update CI to use 2.10.0 release ( #4682 )
...
* Update CI to use 2.10.0 release
* Add rsync as it's required to use synchronize
2019-04-30 07:29:37 -07:00
Christoffer Anselm
dcd9c9509b
Add etcd role dependency on kube user to avoid etcd role failure when running scale.yml with a fresh node. ( #3240 ) ( #4479 )
2019-04-30 04:01:36 -07:00
Matthew Mosesohn
15eb7db36d
Fix k8s api endpoint for secondary nodes in control plane mode ( #4675 )
...
Change-Id: I1588458b54c52443ad8d0afbd266f77ac0afea67
2019-04-29 07:50:24 -07:00
Matthew Mosesohn
a5b46bfc8c
Run dns_late preinstall tasks on all k8s nodes ( #4672 )
...
* Run dns_late preinstall tasks on all k8s nodes
Related issue: #4656
Change-Id: I63f8559ef1a497b7580ab084561e6603fe647834
* Fix ansible-lint
Change-Id: Ia5b33fa63dbc36d8c3e9557ef3f2ea02af2325a5
* Fix recover_control_plane lint issues
Change-Id: I16643a3193c11b6ba704e9698812cac7e4fd19a8
2019-04-29 05:12:21 -07:00
Youngchul Bang
fbba259933
ingress-nginx: enable --report-node-internal-ip-address flag ( #4114 )
...
Close #4113
2019-04-29 01:44:22 -07:00
Florent Monbillard
7b77e2d232
Remove docker-storage-setup dependency if not needed ( #4077 )
...
When docker_container_storage_setup is false,
docker service should not depend on docker-storage-setup service,
because it's not installed.
For example, when using overlay2 on recent RHEL 7/Centos 7 kernels,
you most likely don't need it.
2019-04-29 01:42:22 -07:00
qvicksilver
48a182844c
Documentation and playbook for recovering control plane from node failure ( #4146 )
2019-04-29 01:40:20 -07:00
MarkusTeufelberger
9335cdcebc
ansible-lint: Add exception for invocation of "rm" ( #4609 )
2019-04-29 01:34:20 -07:00
Andreas Krüger
38af93b60c
Remove rkt support ( #4671 )
2019-04-29 01:14:20 -07:00
Matthew Mosesohn
741de6051c
Fix nodeselectors for contiv and nginx-ingress ( #4662 )
...
* Fix nodeselectors for contiv and nginx-ingress
Change-Id: Ib3eb6bd87193c69a90ee944c9164a0b6792c79ba
* Set kube proxy mode to iptables for addons task
Change-Id: Iff71a71f672405c74b4708c71db15ddc4391a53a
2019-04-28 23:36:19 -07:00
Dmitry
b8f0de3074
Fixed etcd-servers-overrides in kubeadm config ( #4668 )
...
* kube-apiserver will fail if used comma as separator
2019-04-28 23:02:20 -07:00
MarkusTeufelberger
88d919337e
ansible-lint: don't compare to empty string [E602] ( #4665 )
2019-04-28 23:00:20 -07:00
Jiang Yi Tao
f518b90c6b
associate fips for masters with no etcd ( #4657 )
2019-04-28 22:58:20 -07:00
Maxime Guyot
d5c33e6d6c
Refactor test cases ( #4655 )
2019-04-28 22:56:19 -07:00
Matthew Mosesohn
338eb4ce65
Fix kubeadm upload certs with when condition ( #4659 )
...
* Fix kubeadm upload certs with when condition
Change-Id: I916dd2375b71eea2386047c7f185a2f8361f7a61
* Update kubeadm-secondary-experimental.yml
2019-04-27 01:14:20 -07:00
Matthew Mosesohn
009e208bcd
Remove RHEL from packet deploy ( #4661 )
...
Change-Id: I131d77bb9d16cc0f252dd86166c29f72daa9a64a
2019-04-26 09:56:29 -07:00
Matthew Mosesohn
81e6877b02
Make cilium tests pass ( #4660 )
...
Cilium requires a high kernel. rhel7 and centos7 are too low, so they are removed.
Bumping ubuntu to ubuntu-1804
Change-Id: Ib1bffa45b8f9ed0ba500f751714372b3a3f7878b
2019-04-26 05:54:37 -07:00
Andreas Krüger
3722acee85
Fix broken metrics-server deployment not starting ( #4651 )
...
* Fix metrics-server deployment
* Make metrics server work
* Fix sample inventory
2019-04-26 00:44:26 -07:00
Maxime Guyot
a4a35f8a4f
Git checkout a specific version for testing upgrades ( #4653 )
2019-04-25 05:24:46 -07:00
grialeyur
82119ca923
Add support calico kubernetes datastore and typha. ( #4498 )
...
* Add support calico kubernetes datastore and typha.
* Add typha_enabled to kubespray-defaults.
2019-04-25 05:00:48 -07:00
gitareest
6ca2019002
Fix issue with etcd arm host installation case ( #4589 )
...
Use host_architecture variable.
2019-04-25 04:58:47 -07:00
Maxime Guyot
53e3463b5a
Fix GCE tests with undefined CI_PLATFORM ( #4650 )
2019-04-25 04:20:47 -07:00
Matthew Mosesohn
c9ed5f69d7
Prepend docker.io for all docker hub images ( #4648 )
...
Change-Id: I71dc793641bc168e40419e38f33f68f5325e77a9
2019-04-25 01:34:46 -07:00
Maxime Guyot
696d481e3b
Fix dynamic inventory parsing in contrib/tf/packet ( #4645 )
2019-04-25 00:40:46 -07:00
Maxime Guyot
f5a83ceded
Fix typo in test-infra playbook ( #4644 )
2019-04-24 13:34:46 -07:00
Andreas Krüger
3fe66a1298
Update downloads role to download to correct group ( #4638 )
2019-04-24 10:48:03 -07:00
Maxime Guyot
6af1f65d3c
Fix python syntax in Terraform dynamic inventory ( #4643 )
2019-04-24 10:34:04 -07:00
Sergey Kolekonov
4a10dca7d4
Add an ability to provide oidc cert in base64 ( #4618 )
2019-04-24 09:40:01 -07:00
Matthew Mosesohn
4d57ed314d
Clean up check for setting kubeadm certificate key ( #4634 )
...
Change-Id: I2c97c4753089eb3ec2e6b01b2681a8be98ecbb57
2019-04-24 07:14:12 -07:00
Andreas Krüger
86d0e12695
Add missing comma ( #4636 )
2019-04-24 07:10:02 -07:00
iwankgb
4e81bcc147
Fixing Vagrant cluster provisioning ( #4218 )
...
* Pass ansible_ssh_user as host_var
Co-authored-by: Damian Darczuk <damian.darczuk@intel.com>
Co-authored-by: Paweł Pałucki <pawel.palucki@intel.com>
* Create a directory before downloading container images to ansible host
Co-authored-by: Damian Darczuk <damian.darczuk@intel.com>
Co-authored-by: Paweł Pałucki <pawel.palucki@intel.com>
* Set private key usuing synchronize task options
Co-authored-by: Damian Darczuk <damian.darczuk@intel.com>
Co-authored-by: Paweł Pałucki <pawel.palucki@intel.com>
2019-04-24 05:42:05 -07:00
andreyshestakov
691baf5b14
Calico fix ( #4540 )
...
* Mark "Calico | Set global as_num" as "unchanged"
This command executes with "--skip-exists" parameter, so it is idempotent
and should not be marked as "changed".
* trigger ci
2019-04-24 05:40:01 -07:00
Attilio Greco
6243467856
remove duble check for run this task just one time ( #4613 )
2019-04-24 05:38:01 -07:00
Andreas Krüger
3c5a4474ac
Increase ansible-lint speed ( #4632 )
2019-04-24 05:28:00 -07:00
Maxime Guyot
01da65252b
Reduce VM size for Packet CI ( #4630 )
2019-04-24 04:30:04 -07:00
Andreas Krüger
f3e7615bef
Switch deploy-part1 AIO job to Calico ( #4628 )
...
* Switch deploy-part1 AIO job to Calico
* Cleanup file
* Remove newline at end
2019-04-24 03:32:04 -07:00
Vincent Gramer
f47a666227
support azure loadbalancer standard sku ( #4150 ) ( #4476 )
...
add the support of the folling property in azure-credential-check.yml
- azure_loadbalancer_sku: Sku of Load Balancer and Public IP. Candidate values are: basic and standard.
- azure_exclude_master_from_standard_lb: excludes master nodes from standard load balancer.
- azure_disable_outbound_snat: disables the outbound SNAT for public load balancer rules
- useInstanceMetadata: Use instance metadata service where possible
- azure_primary_availability_set: (Optional) The name of the availability set that should be used as the load balancer backend
2019-04-24 02:14:01 -07:00
Wilmar den Ouden
b708db4cd5
Update to v1.14.1 ( #4481 )
2019-04-24 02:08:01 -07:00
Maxime Guyot
a3144e7e21
Test with minimum requirements ( #4615 )
2019-04-24 02:02:03 -07:00
Maxime Guyot
683efc5698
Move on_success test to deploy-part2 ( #4627 )
2019-04-24 01:42:04 -07:00
Maxime Guyot
38a3075025
Always rebase on master before running a job ( #4616 )
2019-04-24 01:38:01 -07:00
Matthew Mosesohn
fc072300ea
Purge legacy cleanup tasks from older than 1 year ( #4450 )
...
We don't need to support upgrades from 2 year old installs,
just from the last major version.
Also changed most retried tasks to 1s delay instead of longer.
2019-04-24 00:08:05 -07:00
Chad Swenson
d25ecfe1c1
Update Docker defaults to 18.09.5 and drop deprecated ( #4624 )
...
As of kubernetes v1.14, docker 18.09 is [validated for use](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.14.md#external-dependencies ). Docker 1.11 and 1.12 were dropped.
This patch:
- Updates the default docker version to 18.09
- Updates Docker packages to the latest 18.09 patch (18.09.5)
- Removes options for Docker 1.11 and 1.12
2019-04-23 22:24:01 -07:00
Maxime Guyot
37d98e79ec
Pin Terraform provider versions ( #4620 )
2019-04-23 22:22:01 -07:00
MarkusTeufelberger
a65605b17a
ansible-lint: Don't use bare variables ( #4608 )
...
Circumvented one false positive from ansible-lint
Moved a block of jinja magic into its own variable
2019-04-23 22:20:00 -07:00
MarkusTeufelberger
424e59805f
ansible-lint: Fix commands that are also available as module ( #4619 )
2019-04-23 22:18:00 -07:00
Maxime Guyot
6df8111cd4
Merge 020_check and 030_check ( #4623 )
...
* Merge 020_check and 030_check
* Fix pods output and fail if test pods is not ready
2019-04-23 16:12:00 -07:00
MarkusTeufelberger
76db060afb
Define and implement specs for bootstrap-os ( #4455 )
...
* Add README to bootstrap-os role
* Rework bootstrap-os once more
* Document workarounds for bugs/deficiencies in Ansible modules
* Unify and document role variables
* Remove installation of additional packages and repositories
* Merge Ubuntu and Debian tasks
* Remove pipelining setting from default playbooks
* Fix OpenSUSE not running its required tasks
2019-04-23 15:46:02 -07:00
Andreas Krüger
d588532c9b
Update probe timeouts, delays etc. ( #4612 )
...
* Fix merge conflict
* Add check delay
* Add more liveness and readiness options to metrics-server
2019-04-23 14:46:02 -07:00
Matthew Mosesohn
d6d7458d68
Fix control plane setup without a hardcoded key ( #4610 )
2019-04-23 14:37:59 -07:00
Maxime Guyot
228b244c84
Move inline shell into script files ( #4604 )
2019-04-23 13:36:03 -07:00
Matthew Mosesohn
d89ecb8308
disable metrics server and fix terraform ( #4617 )
...
* disable metrics server in centos7-flannel-addons job
Change-Id: I1d87923547584896f64dda9ea8feb5581ad48cbe
* Fix tf facility->facilities syntax
Change-Id: I434bfe53f47e8e4a546890e0b62d24bde6e6d6a7
* Update Terraform CI for facilities
* Fix undefined variable error
2019-04-23 12:06:03 -07:00
Maxime Guyot
50751bb610
Revert "Optimize kube resources creation ( #4572 )" ( #4621 )
...
This reverts commit f8fdc0cd93
.
2019-04-23 20:37:23 +03:00
Justin Chao
64f48bf84c
Update ansible.md ( #4599 )
...
Ansible 2.0 has deprecated the “ssh” from ansible_ssh_host.
Updating the docs to be more aligned with the Ansible version used in the sample/inventory.ini file as well.
Also adding `[bastion]` group in the docs to avoid confusion.
2019-04-22 23:36:09 -07:00
andreyshestakov
f8fdc0cd93
Optimize kube resources creation ( #4572 )
2019-04-22 23:34:10 -07:00
Matthew Mosesohn
09fe95bc60
Avoid creating k8s cert dir on non-k8s nodes ( #4602 )
2019-04-21 15:27:43 -07:00
Victor Morales
ada5941a70
Unmask Docker service in ClearLinux ( #4583 )
...
The docker service provided by the containers-basic bundle is masked
in ClearLinux distribution. This is causing errors in the following
steps. This commit ensures that the unit is not masked.
2019-04-21 07:31:43 -07:00
Maxime Guyot
88fe3403ce
Add overcommitment for CPU in Packet CI playbook ( #4597 )
2019-04-21 02:27:44 -07:00
Maxime Guyot
04f2682ac6
Drop unused dynamic inventory functions ( #4138 )
2019-04-21 01:59:45 -07:00
rptaylor
873b5608cf
add master_allowed_remote_ips (with terraform fmt) ( #4022 )
2019-04-21 01:57:44 -07:00
Maxime Guyot
12086744e0
Update docs for inventory_builder ( #4581 )
2019-04-20 11:09:45 -07:00
Vedran Bartonicek
33ab615072
Wait longer for node to join the cluster ( #4549 )
2019-04-20 07:05:40 -07:00
Maxime Guyot
f696d7abee
Simplify syntax-check CI job ( #4585 )
2019-04-20 06:37:40 -07:00
Rabi Mishra
5a1cf19278
Install cri-tools on fedora ( #4350 )
2019-04-20 06:29:40 -07:00
Maxime Guyot
416e65509b
Add documentation about CPU arch compatibility ( #4302 )
2019-04-20 06:27:40 -07:00
Maxime Guyot
4de6a78e26
Fix CI for packet_centos7-flannel-addons ( #4586 )
2019-04-20 06:21:40 -07:00
Maxime Guyot
026088deea
Re-Add docker:dind for Packet CI ( #4567 )
2019-04-20 06:19:40 -07:00
Maxime Guyot
f142e671b3
Cleanup references to Travis CI ( #4208 )
...
Broken since 4efb0b7
2019-04-20 06:17:40 -07:00
Maxime Guyot
2f49b6caa8
Use yamllint --strict ( #4587 )
2019-04-20 06:15:41 -07:00
Maxime Guyot
50c86919dc
Packet CI: Increasing the time wiating for IP to be assigned ( #4584 )
2019-04-20 06:13:40 -07:00
Maxime Guyot
781cc00cc4
Add a testcase to check that pods are running ( #4555 )
2019-04-20 06:11:40 -07:00
Matthew Mosesohn
05dc2b3a09
Use K8s 1.14 and add kubeadm experimental control plane mode ( #4514 )
...
* Use K8s 1.14 and add kubeadm experimental control plane mode
This reverts commit d39c273d96
.
* Cleanup kubeadm setup run on first master
* pin kubeadm_certificate_key in test
* Remove kubelet autolabel of kube-node, add symlink for pki dir
Change-Id: Id5e74dd667c60675dbfe4193b0bc9fb44380e1ca
2019-04-19 06:01:54 -07:00
Aleksey Kasatkin
d0e628911c
Add sha256 hashes for calicoctl v3.6.1 ( #4580 )
...
Hashes are added to calicoctl_binary_checksums for both adm and arm platforms.
2019-04-19 05:45:55 -07:00
Andreas Krüger
656633f784
YAMLLint everything ( #4576 )
2019-04-18 23:59:54 -07:00
Maxime Guyot
530e1c329d
Add shellcheck CI ( #4562 )
2019-04-18 23:57:54 -07:00
Victor Morales
f5aec8add4
Fix runc absolute path ( #4542 )
...
The BINDIR variable defined on the runc's Makefile[1] defines
installation path is on $(PREFIX)/sbin which used for most of the
Linux distributions. This change fixes the absolute path used for
non-ClearLinux distributions (CentOS, Ubuntu).
[1] https://github.com/opencontainers/runc/blob/master/Makefile#L10
2019-04-18 15:41:58 -07:00
Maxime Guyot
f92309bfd0
Fix ansible-lint for ceph package ( #4568 )
2019-04-18 13:45:25 -07:00
Maxime Guyot
ef10feb26f
Comment loadbalancer_* settings in sample inventory ( #4566 )
2019-04-18 04:20:10 -07:00
Victor Morales
c6586829de
Ensure /etc/bash_completion.d/ folder exists ( #4543 )
...
The Stateless ClearLinux feature[1] requires the creation of folders
in /etc folder. This change ensure the existence of the
/etc/bash_completion.d/ folder for ClearLinux Distribution.
[1] https://clearlinux.org/features/stateless
2019-04-18 02:24:10 -07:00
johnstudarus
b103385678
added missing sidebar link to Packet doc ( #4513 )
2019-04-18 02:22:10 -07:00
Maxime Guyot
848191e97a
Enable working Packet CI jobs and delay GCE CI ( #4559 )
2019-04-18 01:50:09 -07:00
MarkusTeufelberger
04e3fb6a5a
Fix ansible-lint error 103 ( #4511 )
2019-04-18 01:42:10 -07:00
Maxime Guyot
b218e17f44
ansible-lint: E403 Package installs should not use latest ( #4500 )
2019-04-18 01:34:08 -07:00
Maxime Guyot
bba6d0c613
Fix CI link ( #4521 )
2019-04-18 01:12:08 -07:00
Maxime Guyot
49af1f9969
Fix ansible-lint e601 in create-vms ( #4561 )
2019-04-17 10:46:10 -07:00
Maxime Guyot
a6dc50e7cb
Add host information for canal readiness probe ( #4548 )
2019-04-17 10:22:02 -07:00
Maxime Guyot
f69b5f7f33
Upgrade to Ansible 2.7.8 ( #4535 )
2019-04-17 10:18:05 -07:00
Maxime Guyot
37eac010c8
ansible-lint: Don’t compare to literal True/False ( #4499 )
2019-04-17 08:42:03 -07:00
Andreas Krüger
d4b9f15c0a
PHASE 2 - Enable Packet-CI in gitlab and move unit-tests and deploy-part1 ( #4538 )
...
* PHASE 2 - Enable Packet-CI in gitlab
* Add gitlab files
* Reset files back and only keep Packet
* Include packet
* Add missing Upgrade Tests
* Update GCE jobs etc
* Fix bug
* Yaml lint all gitlab files
* Remove GCE
* Test
* Test again
* Enable GCE again
* Install requirements
* Cleanup the gitlab file
* Cleanup runner tags
* Install requirements
* Test
* Test variables for gce
* Test again
* Test again
* Fix
* Update
2019-04-17 08:32:03 -07:00
Maxime Guyot
ec3daedf9e
Revert "Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels ( #4320 )" ( #4553 )
...
This reverts commit 586ad89d50
.
2019-04-17 07:58:06 -07:00
Maxime Guyot
1cf76a10db
Disable usage of default security group ( #4533 )
2019-04-17 02:10:03 -07:00
Jugwan Eom
d83181a2be
add RBD Provisioner Addon ( #3667 ) ( #3668 )
...
Based on the CephFS Provisioner Addon, the following changes have been made:
- Upstream v2.1.1-k8s1.11
- Configurable Provisioner replicas
2019-04-16 23:14:02 -07:00
Andreas Krüger
b834a28891
PHASE 1 - Add Packet-CI playbook and configuration ( #4537 )
2019-04-16 14:49:07 -07:00
andreyshestakov
78f6f6b889
Mark "Calico | Set global as_num" as "unchanged" ( #4539 )
...
This command executes with "--skip-exists" parameter, so it is idempotent
and should not be marked as "changed".
2019-04-16 09:31:11 -07:00
Maxime Guyot
0b02f6593b
Split .gitlab-ci.yml into several files ( #4519 )
2019-04-16 05:35:05 -07:00
Andreas Holmsten
7f1d9ff543
[contrib/terraform/openstack] Add k8s_allowed_remote_ips variable ( #4506 )
...
* Add k8s_allowed_remote_ips variable
Useful for defining CIDRs allowed to initiate a SSH connection when
you don't want to use a bastion.
* Add TF_VAR_k8s_allowed_remote_ips variable to tf-apply-ovh
2019-04-15 07:22:08 -07:00
Matthew Mosesohn
c5fb734098
Switch calicoctl from a container to a binary ( #4524 )
2019-04-15 04:24:04 -07:00
Maxime Guyot
d5d3cfd3fa
Sanitize the cluster_name variable ( #4509 )
2019-04-15 04:22:06 -07:00
Maxime Guyot
cc77a8c395
Add logo folders ( #4515 )
2019-04-12 11:00:47 -07:00
Matthew Mosesohn
d39c273d96
Revert "Use K8s 1.14 and add kubeadm experimental control plane mode ( #4317 )" ( #4510 )
...
This reverts commit 316508626d
.
2019-04-11 12:52:43 -07:00
Matthew Mosesohn
316508626d
Use K8s 1.14 and add kubeadm experimental control plane mode ( #4317 )
...
* Use Kubernetes 1.14 and experimental control plane support
* bump to v1.14.0
2019-04-11 05:30:13 -07:00
Maxime Guyot
46ba6a4154
ansible-lint: when lines should not include Jinja2 variables ( #4496 )
2019-04-11 03:06:10 -07:00
Maxime Guyot
d8cbbc414e
Add a PR template ( #4491 )
2019-04-11 03:04:14 -07:00
Maxime Guyot
ebae491e3f
Add several issue templates ( #4493 )
2019-04-11 03:02:13 -07:00
Maxime Guyot
6f919e5020
Add CI for Ubuntu 18.04 on Packet ( #4439 )
2019-04-11 00:26:10 -07:00
Andreas Krüger
4ff851b302
Enable nodelocaldns by default ( #4461 )
...
* Enable nodelocaldns by default
* Enable nodelocaldns by default
* nodelocaldns is now default
* Disable enable_nodelocaldns for the addons CI jobs
Disable enable_nodelocaldns for the addons CI jobs to make sure things still work without nodelocaldns
2019-04-11 00:24:08 -07:00
Qasim Sarfraz
3af90f8772
disable cloud-routes for non-cloud plugin ( #4443 )
2019-04-10 23:50:09 -07:00
MarkusTeufelberger
cb54d074b5
Fix syntax of yaml in .gitlab-ci.yml file ( #4409 )
2019-04-10 23:46:10 -07:00
Andreas Krüger
9032e271f1
Upgrade CoreDNS to 1.5.0 ( #4494 )
2019-04-10 13:40:08 -07:00
Andreas Krüger
15597aa493
Do not force TCP connections to upstreams. ( #4492 )
2019-04-10 12:40:09 -07:00
Sergey
3b9d13fda9
Return back bind API server node loadbalancer to 127.0.0.1 for security purposes. ( #4489 )
2019-04-10 12:20:08 -07:00
Andreas Krüger
5e0249ae7c
Add HAProxy as internal loadbalancer ( #4480 )
2019-04-10 05:56:18 -07:00
Remous-Aris Koutsiamanis
27958e4247
Fix "Prevent inventory.py from configuring an even number of nodes in etcd" #4399 ( #4465 )
...
by making clusters with fewer than 3 nodes have only 1 etcd node
2019-04-10 05:52:14 -07:00
Maxime Guyot
353afa7cb0
Fix ipip: false in calico v3 ( #4473 )
2019-04-10 05:50:15 -07:00
Maxime Guyot
e865c50574
Fix terraform fmt on contrib/terraform/aws ( #4484 )
2019-04-10 04:32:14 -07:00
Neven Miculinic
a30ad1e5a5
Added generic CNI network plugin ( #4322 )
...
* Added generic CNI network plugin
* Added CNI network plugin documentation
* added necessary fix
2019-04-10 04:16:15 -07:00
Robert Neumann
586ad89d50
Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels ( #4320 )
...
* Fix the file path for all.yml and k8s-cluster.yml
* Fix --node-labels namespace error "unknown labels specified"
* Update templates and configs kubelet node-labels
2019-04-10 04:14:12 -07:00
Sidharth Anupkrishnan
6caa639243
Update CoreDNS label as specified in the kubernetes coredns repository ( #3920 )
2019-04-10 04:12:13 -07:00
Maxime Guyot
80f31818df
Add terraform validate for contrib/terraform/aws ( #4438 )
2019-04-10 02:14:14 -07:00
Maxime Guyot
854cc53fa5
Add CI for contrib/terraform/openstack ( #4475 )
2019-04-10 02:12:16 -07:00
MarkusTeufelberger
d2a1ac3b0c
Add Ansible-lint CI step ( #4411 )
...
* Add ansible-lint as gitlab-ci step
* Fix jinja2 syntax in include_tasks that breaks ansible-lint
* Use a block scalar to get around gitlab quoting/escaping rules
* Run ansible-lint in verbose mode in CI
2019-04-10 02:04:16 -07:00
Andreas Krüger
a678d1be9d
Update CI to use 2.9.0 release and update Dockerfile to now use 18.04 ( #4472 )
...
* Update CI to use 2.9.0 release and update Dockerfile to now use 18.04
* Update CI to use 2.9.0 release and update Dockerfile to now use 18.04
* Update the kubectl bin
2019-04-09 05:57:06 -07:00
André R. de Miranda
097806dfe8
Added tag kube-proxy ( #4272 )
...
Signed-off-by: André R. de Miranda <andre@miranda.work>
2019-04-09 05:25:06 -07:00
Abdulaziz AlMalki
7cdf1fd388
quote values for kube_oidc_groups_prefix and kube_oidc_username_prefix values to accept colon, e.g oidc: ( #4305 )
...
This will fix error: error converting YAML to JSON: yaml: line 36: mapping values are not allowed in this context
Signed-off-by: Abdulaziz AlMalki <almalki.a@gmail.com>
2019-04-09 05:23:06 -07:00
Maxime Guyot
a4e65c7ceb
Upgrade to Ansible >2.7.0 ( #4471 )
2019-04-09 04:21:07 -07:00
Karen Almog
20ebb49568
Don't create security groups for a bastion host on openstack, if doesn't exist ( #4291 )
2019-04-09 04:01:09 -07:00
Andreas Krüger
aa162b0d5d
Update kube-router to 0.2.5 ( #4469 )
2019-04-09 03:37:04 -07:00
Maxime Guyot
b15f3e182d
add default routing to canal and disable bird checks ( #4468 )
...
Co-Author: Paweł Skrzyński
2019-04-09 02:45:07 -07:00
Andreas Krüger
4d39c1856e
Fix jinja filters ( #4470 )
2019-04-09 02:19:06 -07:00
Maxime Guyot
b2fa84af61
Vagrant fix password prompt ( #4457 )
2019-04-09 00:59:05 -07:00
Maxime Guyot
913fed0089
kubeadmn init: add 'until' to make 'retries' effective ( #4464 )
...
an 'until' clause is required or 'retries' is ignored
(see note @ https://docs.ansible.com/ansible/latest/user_guide/playbooks_loops.html#do-until-loops )
2019-04-09 00:21:04 -07:00
Maxime Guyot
80ea18bd28
Disable download_once in Vagrant to workaround rsync error ( #4448 )
2019-04-09 00:19:05 -07:00
Markos Chandras
12c6b5c3eb
openSUSE: Use Leap 15.0 instead of 42.3 ( #4442 )
...
* Vagrantfile: Bump openSUSE to Leap 15.0
* roles: container-engine: Add 'containerd' package for openSUSE
The 'containerd' package contains the docker-containerd and
docker-containerd-shim binaries. We also need to ensure that the latest
version is installed since an older version may already be present (eg GCE
images)
* Remove docker log-opts for opensuse
* roles: bootstrap-os: Use lowercase 'o' for openSUSE
OpenSUSE is not a valid family name. The correct one is openSUSE
* roles: bootstrap-os: Update zypper cache before first installation
The zypper cache may be outdated so ensure that it's fully updated
before we try and install the bootstrap packages.
2019-04-09 00:17:05 -07:00
Maxime Guyot
35c0010876
Rename inventory/sample/hosts.ini to fix vagrant up ( #4447 )
2019-04-09 00:15:06 -07:00
rptaylor
f52584a715
robust handling of API server SANs ( #4435 )
...
* robust handling of API server SANs
* use apiserver_loadbalancer_domain_name if it is defined, according to PR 3977
2019-04-08 08:10:35 -07:00
Erwan Miran
09bbdadcee
remove nodelocaldns iface on reset ( #4460 )
2019-04-08 02:26:25 -07:00
Xinghong Fang
d711a0c83f
[nodelocaldns] expand tolerations on the daemonset ( #4451 )
2019-04-08 02:24:26 -07:00
Andreas Holmsten
01cf11b961
Run terraform fmt and add step to CI ( #4405 )
...
* Run terraform fmt
* Add terraform fmt to .terraform-validate CI step
* Add tf-validate-aws CI step
* Revert "Add tf-validate-aws CI step"
This reverts commit e007225fac
.
2019-04-08 02:22:24 -07:00
Eric Ross
29825e6873
Missing ruamel.yaml from requirements.txt ( #4446 )
2019-04-08 02:20:27 -07:00
Andreas Krüger
d18ad63e49
Update nginx to 1.15. Update manifest and performance optimize ( #4458 )
2019-04-08 02:02:29 -07:00
Andreas Holmsten
3da392d1cf
Add OWNERS to contrib/terraform ( #4441 )
2019-04-08 00:36:24 -07:00
Maxime Guyot
8947614d97
Upgrade to etcd v3.2.26 ( #4444 )
2019-04-08 00:34:25 -07:00
Victor Morales
7e4f4a96fc
Replace iteritems() to items() in Jinja2 templates ( #4437 )
...
The iteritems() dictionary's method has been removed in Python3. Using
this method in Jinja2 templates limits the execution to Python2 which
will be deprecated in 2020[1]. This change replaces that method for
the items() method as it's suggested in the official website[2].
[1] https://pythonclock.org/
[2] https://docs.ansible.com/ansible/latest/user_guide/playbooks_python_version.html#dict-iteritems
2019-04-08 00:32:26 -07:00
MarkusTeufelberger
301a371efe
Update pypy3 on CoreOS to 7.0.0 ( #4456 )
2019-04-08 00:28:24 -07:00
Maxime Guyot
1a6df84c7a
Upgrade to Helm 2.13.1 ( #4445 )
2019-04-07 07:04:25 -07:00
Andreas Krüger
2d38c1e20c
Update premoderator to fix Github API throttle ( #4424 )
...
* Update premoderator to fix Github API throttle
* Update premoderator script
Add exit codes and document the exit code.
* Fix indentation
2019-04-06 12:12:26 -07:00
Maxime Guyot
9155339cf0
Fix pep8 warnings ( #4368 )
2019-04-05 12:51:22 -07:00
rptaylor
d8a023a92c
Tell git to ignore .terraform directory ( #4428 )
...
The .terraform directory is populated when modules are downloaded:
https://www.terraform.io/docs/commands/get.html
"The modules are downloaded into a local .terraform folder. This folder should not be committed to version control."
2019-04-05 01:27:18 -07:00
Maxime Guyot
8ad74404c9
Remove bash-completion ( #4431 )
2019-04-05 01:23:22 -07:00
Maxime Guyot
1ce2f04f47
allow Suse OS family ( #4430 )
2019-04-04 03:02:51 -07:00
Xavi
20b12751af
add Cinder allowVolumeExpansion option ( #4415 )
2019-04-04 02:36:50 -07:00
Maxime Guyot
e485fab7eb
Add CI for contrib/terraform/ ( #4133 )
2019-04-04 01:42:52 -07:00
Maxime Guyot
adca353fe9
Use docker.io for calico ( #4253 )
2019-04-04 01:20:49 -07:00
Andreas Krüger
7a72e567d5
Update CoreDNS to 1.4.0 ( #4422 )
...
* Update CoreDNS to 1.4.0
* Update readme to reflect CoreDNS update
2019-04-04 00:40:50 -07:00
Andreas Krüger
3c050be0b0
Update nodelocaldns cache settings ( #4423 )
2019-04-04 00:38:51 -07:00
Andreas Krüger
41e684eb5a
Update DNS Autoscaler to 1.4.0 ( #4425 )
...
* Update DNS Autoscaler
* Update downloads too
* Fix yamllint
* Fix yamllint
2019-04-04 00:36:51 -07:00
Erwan Miran
2067417ad4
jmespath is required when re-running cluster.yml ( #4426 )
2019-04-04 00:34:49 -07:00
Sergey
55890e1b82
keep compatibility as it was before ( #4268 )
2019-04-03 01:39:42 -07:00
Sergey
1e524c68d5
remove our config if docker start failed ( #4260 )
2019-04-03 01:37:44 -07:00
Sergey
740d8b0a26
enable kubelet client certificate rotation ( #4081 )
...
* enable kubelet client certificate rotation
* change to variable kubelet_rotate_certificates
2019-04-03 01:35:44 -07:00
Gautam Divgi
a8dd69cf17
Fixed cleanup-docker-orphans.sh to use docker-containerd-shim and containerd-shim ( #4418 )
2019-04-02 09:11:21 -07:00
Matthew Mosesohn
4fe2aa6bf7
Use install_cni init container for cni copy for calico/canal ( #4416 )
2019-04-02 03:32:36 -07:00
Chad Swenson
5d5c9cab19
Speed up old docker package removal ( #4408 )
...
Both the `yum` and `apt` modules support a list as input, this allows us avoid the slower `with_items` approach, which can take a long time with a large count of cluster nodes.
2019-04-01 15:08:35 -07:00
Matthew Mosesohn
5f12b7aedf
Remove kubedns and dnsmasq. Move dns_late phase after apps ( #4406 )
...
Both kubedns and dnsmasq modes are long not maintained.
We should run dns_late steps at the end because sshd
makes DNS lookups during Ansible run and has 2s timeouts
for each failed lookup trying to connect to coredns before
it is ready.
2019-04-01 12:32:34 -07:00
Bort Verwilst
d71590bbd0
add 1.14.0 checksum, remove 1.11.* checksums ( #4401 )
2019-04-01 07:16:33 -07:00
MarkusTeufelberger
9ffc65f8f3
Yamllint fixes ( #4410 )
...
* Lint everything in the repository with yamllint
* yamllint fixes: syntax fixes only
* yamllint fixes: move comments to play names
* yamllint fixes: indent comments in .gitlab-ci.yml file
2019-04-01 02:38:33 -07:00
ml
483f1d2ca0
Calico felix - Fix jinja2 boolean condition ( #4348 )
...
* Fix jinja2 boolean condition
* Convert all felix variable to booleans instead.
2019-03-29 16:07:09 -07:00
tikitavi
1babba753d
adapt inventory script to python 2.7 version ( #4407 )
2019-03-29 06:08:13 -07:00
johnstudarus
ed18a10571
Corrected cloud name ( #4316 )
...
The correct name is Packet, not Packet Host.
2019-03-29 00:28:13 -07:00
Dmitry Chepurovskiy
0440e45d65
Fix supplementary_addresses rendering error ( #4403 )
2019-03-29 00:26:13 -07:00
Stefan Prietl
2fb27c8521
Use static files in KubeDNS templating task ( #4379 )
...
This commit adapts the "Lay Down KubeDNS Template" task to use the static
files moved by pull request [1]
[1] https://github.com/kubernetes-sigs/kubespray/pull/4341
2019-03-28 06:26:43 -07:00
Qasim Sarfraz
f17f4ff963
Fix bootsrap-os role, failing to create remote_tmp ( #4384 )
...
* Fix bootsrap-os role, failing to create remote_tmp
* use ansible_remote_tmp hostvar
2019-03-28 06:24:43 -07:00
Sergey
e9c34fe038
Default values for variable dns_servers and dns_domain are set in two files: ( #3999 )
...
values from inventory in roles/kubespray-defaults/defaults/main.yml
hardcoded values in roles/container-engine/defaults/main.yml
dns_servers set empty in roles/container-engine/defaults/main.yml and skydns_server not set in docker_dns_servers variables
also set default value for manual_dns_serve
another variables in roles/container-engine/defaults not need to set
2019-03-28 06:22:44 -07:00
Dmitry Chepurovskiy
669ab10c17
Added livenessProbe for local nginx apiserver proxy liveness probe ( #4222 )
...
* Added configurable local apiserver proxy liveness probe
* Enable API LB healthcheck by default
* Fix template spacing and moved healthz location to nginx http section
* Fix healthcheck listen address to allow kubelet request healthcheck
2019-03-28 06:20:46 -07:00
Qasim Sarfraz
0a3cf1a087
Fix CA cert environment variable for ectd v3 ( #4381 )
2019-03-28 00:18:43 -07:00
Maxime Guyot
3511b55cf5
Increase CPU flavor for CI ( #4389 )
2019-03-27 16:26:48 -07:00
Chad Swenson
1f01b6546c
Merge pull request #4396 from verwilst/feature/k8s-1.13.5
...
Upgrade to k8s 1.13.5
2019-03-27 13:47:39 -05:00
Bart Verwilst
0efa3e6392
Upgrade to k8s 1.13.5
2019-03-27 11:16:21 +01:00
Matthew Mosesohn
6d7f3c4405
Reduce jinja2 filters in coredns templates ( #4390 )
2019-03-26 11:09:17 -07:00
Michael Vorburger ⛑️
85e0fb32e6
clarify that kubespray now supports kubeadm ( fixes #4089 ) ( #4366 )
2019-03-26 03:51:19 -07:00
Etienne
d0ae316934
Use proxy_env with kubeadm phase commands ( #4325 )
2019-03-26 03:03:19 -07:00
Dmitry Chepurovskiy
f6d280452f
Added support of bastion host for reset.yaml ( #4359 )
...
* Added support of bastion host for reset.yaml
* Empty commit to triger CI
2019-03-26 02:59:16 -07:00
Maxime Guyot
7fb5fbac37
Use wide for netchecker debug output ( #4383 )
2019-03-22 19:41:06 -07:00
Matthew Mosesohn
b7fd462944
Fix support for ansible 2.7.9 ( #4375 )
2019-03-20 11:29:42 -07:00
Matthew Mosesohn
ec08303f82
Revert "Fix #4237 : update kube cert path ( #4354 )" ( #4369 )
...
This reverts commit ea7a6f1cf1
.
This change modified the certs dir for Kubernetes, but did not move the directories for existing clusters.
2019-03-20 05:56:57 -07:00
Maxime Guyot
e640233947
Use sample inventory file in doc ( #4052 )
2019-03-18 01:43:15 -07:00
Dmitry Chepurovskiy
ea7a6f1cf1
Fix #4237 : update kube cert path ( #4354 )
2019-03-17 23:55:11 -07:00
Peter Metz
38009a215a
fix(contrib/metallb): adds missing become: true in role ( #4356 )
...
On CoreOS, without this, it fails to kubectl apply MetalLB due to lack of privileges.
2019-03-17 18:15:09 -07:00
Matthew Mosesohn
150a969cf4
Forcefully delete pods when necessary ( #4328 )
...
Pods on down/unresponsive nodes can't be deleted without
--force --grace-period=0.
Fixes #4314
2019-03-14 07:45:46 -07:00
Manuel Cintron
3c4cbf133e
Adding ability to override dashboard replica count ( #4344 )
2019-03-13 13:58:25 -07:00
Matthew Mosesohn
fd2c47b56a
Move most coredns templates to static files ( #4341 )
...
* Move most coredns templates to static files
This should speed up the task slightly
* yaml lint fixes
2019-03-12 21:17:31 -07:00
tikitavi
2560c4dda3
fixing dump of ordered dictionaries in inventory script ( #4343 )
2019-03-13 02:57:34 +03:00
tikitavi
254a0ab69d
fix inventory script ( #4342 )
...
hosts are ordered dictionary
remove ansible_user from inventory file
2019-03-13 01:46:46 +03:00
tikitavi
7b3e59ed0a
fix inventory script ( #4339 )
...
- fix order of entries when the new yaml file is created
- fix group in case there are no hosts in it
2019-03-12 11:02:44 -07:00
tikitavi
44de04be89
update inventory builder for public and private IP per node ( #4323 )
2019-03-07 18:30:12 +03:00
Bort Verwilst
33024731e4
Upgrade to k8s 1.13.4 ( #4319 )
2019-03-06 23:16:56 -08:00
chadswilson
d469282f1c
add blockSize to IPPool spec for Calico >= v3.3.0 ( #4224 )
...
* add blockSize to IPPool spec for Calico >= v3.3.0
* fix "cidr" spec in Calico IPPool resource for my PR
2019-03-06 12:42:48 -08:00
Matthew Mosesohn
acbf3db233
Remove hard dependence on facts for all nodes ( #4304 )
...
* Remove hard dependence on facts for all nodes
* Update main.yaml
* Update main.yaml
2019-03-05 03:04:39 -08:00
Matthew Mosesohn
adf6a7121f
Reenable set_facts task for dns_late ( #4312 )
2019-03-01 05:39:30 -08:00
tikitavi
b73f009c07
rewrite inventory script to create inventory file in YAML format ( #4303 )
...
* rewrite inventory script to create inventory file in YAML format
* minor fixes to inventory script
* change requirments for the inventory script
2019-02-28 17:28:27 +03:00
Bort Verwilst
bbfd2dc2bd
Add 1.12.6, sort arm64 descending ( #4308 )
...
* Add 1.12.6, sort arm64 descending
* remove 1.10.x checksums (EOL anyways)
2019-02-28 05:55:19 -08:00
Matthew Mosesohn
4fe61968cf
Set default value for local_path_provisioner_enabled in role ( #4309 )
2019-02-28 05:36:08 -08:00
Anupam Basak
9e8e069b23
remove kube bridge on reset ( #4250 )
2019-02-26 00:32:00 -08:00
Peter Metz
26ca58419f
feat(external-provisioner): adds support for local-path-provisioner ( #4232 )
...
* feat(external-provisioner/local-path-provisioner): adds support for local path provisioner
Helpful for local development but also in production workloads (once the
permission model is worked out) where you have redundancy built into the
software uses the PVCs (e.g. database cluster with synchronous
replication)
* feat(local-path-provisioner): adds debug flag, image tag group var
* fix(local-path-provisioner): moves image repo/tag to download role
* test(gce_centos7-flannel): enables local-path-provisioner in test case
* fix(addons): add image repo/tag to commented default values
* fix(local-path-provisioner): typo in jinja template for local path provisioner
* style(local-path-provisioner): debug flag condition re-formatted
* fix(local-path-provisioner): adds missing default value for debug flag
* fix(local-path-provisioner): syntax fix for debug if condition end
* fix(local-path-provisioner): jinja template syntax: if condition white space
2019-02-25 22:45:30 -08:00
etharendil
063faaae1c
recursive option for kube ansible module ( #4273 )
...
kube ansible module can be used with recursive: true
which sill process the directory used in -f, --filename recursively
2019-02-25 22:17:23 -08:00
Maxime Guyot
131c3d4d5b
Add link to Kubespray.io ( #4240 )
2019-02-25 21:20:14 -08:00
Christian Berendt
44ee4b507c
terraform: use openstackclient instead of novaclient ( #4280 )
...
The openstackclient is the preferred CLI for OpenStack
environments and should be used instead of novaclient.
2019-02-25 20:13:16 -08:00
Maxime Guyot
c36a0226d0
Add more links to the docs ( #4204 )
2019-02-25 20:11:23 -08:00
hikoz
67832aada9
changed_when:false ( #4189 )
2019-02-25 20:09:30 -08:00
johnstudarus
74727b085b
Packet docs ( #4160 )
...
* Create packet.md
* Update README.md
* Update README.md
* Update packet.md
download the latest version
* Update packet.md
2019-02-25 20:07:38 -08:00
Maxime Guyot
bb495006c8
Update MetalLB to v0.7.3 ( #4194 )
2019-02-25 20:05:45 -08:00
hikoz
3d25b4dfc1
30MiB for gpu-device-plugin ( #4227 )
...
* 30MiB for gpu-device-plugin
* use vars for easier configuration
2019-02-25 20:03:53 -08:00
Wong Hoi Sing Edison
1c12c19150
weave: Upgrade to 2.5.1 ( #4248 )
...
Upstream Changes:
- weave 2.5.1 (https://github.com/weaveworks/weave/releases/tag/v2.5.1 )
Our Changes:
- Sync templates with upstream changes
2019-02-25 20:02:00 -08:00
Sebastian Poxhofer
58dc641001
added hardware requirements in README.md ( #4233 )
...
* added hardware requirements in README.md
* added hardware requirements in README.md
2019-02-25 20:00:08 -08:00
Ryler Hockenbury
88249308a0
Add labels to vsphere cloud config ( #4275 )
2019-02-25 19:58:15 -08:00
Gabor Lekeny
b4aaa7b908
Speed up tasks ( #4278 )
...
* fact gathering should run only once per node
* eliminate ansible version check, it is at the beginning of each
playbook
2019-02-25 19:56:23 -08:00
Christian Berendt
c386172be7
terraform: correct the spelling of Betacloud ( #4282 )
2019-02-25 19:38:32 -08:00
Andrey Zhelnin
c66e9a6d62
Disable become for localhost ( #4287 )
2019-02-25 19:36:44 -08:00
Vasilis Remmas
81801ce23b
Add master toleration flag in dashboard deployment ( #4290 )
2019-02-25 19:34:47 -08:00
Etienne
7dfa39483f
Make container storage repository configurable ( #4284 )
2019-02-25 19:29:32 -08:00
Matthew Mosesohn
b07641c3f3
Move kube_proxy_remove out of set_facts and set default ( #4180 )
2019-02-25 00:08:06 -08:00
Matthew Mosesohn
4638acfe81
Retry applying podsecurity policies ( #4279 )
2019-02-24 22:50:55 -08:00
Kaoet
aadef80404
Upgrade to latest version of ubuntu-nvidia-driver-installer. ( #4296 )
...
The lastest version of ubuntu-nvidia-driver-installer contains a fix for
https://github.com/GoogleCloudPlatform/container-engine-accelerators/issues/90
which causes the installer pod to crash when driver is already loaded.
2019-02-24 22:22:48 -08:00
Frank Ritchie
9805fb7a34
Add flexvolume plugin dir to kubeadm kubelet ( #4168 )
...
This was already approved in #4106 but there are CI issues
with that PR due to references to kubernetes incubator.
After upgrading to Kubespray 2.8.1 with Kubeadm enabled Rook
Ceph volume provision failed due to the flexvolume plugin dir not
being correct. Adding the var fixed the issue
2019-02-20 15:02:02 -08:00
Christian Berendt
7d2ba49969
Add CNCF CLA to the contributing document ( #4281 )
2019-02-20 06:47:17 -08:00
Peter Metz
f81bafa07b
feat(vagrant/virtualbox): adds parameter to resize vbox disks ( #4231 )
...
Useful if the default 20GB is not enough in cases where you are using
the local path provisioner of rancher for example
2019-02-20 06:37:18 -08:00
Peter Metz
94892ab3a4
fix(vagrant): sets video RAM to 8 MB, avoids large default (256) ( #4230 )
2019-02-20 06:35:21 -08:00
Maxime Guyot
323d788f48
Add support for --enable-skip-login in Dashboard ( #4265 )
2019-02-19 23:24:29 -08:00
Abdulaziz AlMalki
eafab9636f
fix wrong indent of oidc-username-prefix and oidc-groups-prefix in kubeadm config template ( #4263 )
2019-02-19 23:22:32 -08:00
Seungkyu Ahn
107bfb259a
This PS is to fix the bug when Workers can't join the cluster ( #4276 )
...
because of etc-kubernetes-manifests not empty.
2019-02-19 22:13:59 -08:00
Rong Zhang
d4a36aa55b
Merge pull request #4027 from riverzhang/kube-proxy
...
Add update server field in kube-proxy kubeconfig
2019-02-20 13:41:06 +08:00
Manuel Cintron
07b2894080
Adding ability to maintain existing Encryption Secrets at Rest. ( #4255 )
...
* Adding ability to maintain existing Encryption Secrets at Rest.
If secrets_encryption.yaml is present it will not be overriten with a new kube_encrypt_token.
This should allow for it to be set ahead of a playbook running or maintain it if cluster.yml is ran on the same cluster and the ansible host does not have access to the secrets.
* Setting existing kube_encrypt_token across all master nodes in case it was missing in one or more nodes.
2019-02-19 07:31:45 -08:00
Florent Monbillard
802ac377b8
Fix typo in task description ( #4243 )
2019-02-19 06:06:29 -08:00
Roy Lenferink
738ab4239a
Updated OWNERS file pointing to docs ( #4184 )
2019-02-18 05:49:36 -08:00
Ted Wexler
b5a895d1ec
Run 'terraform fmt' in contrib/terraform/openstack ( #4242 )
2019-02-17 21:04:41 -08:00
Kaoet
23685b4537
Add image tag in "pause" container of nvidia driver installer. ( #4247 )
2019-02-17 21:02:30 -08:00
Chad Swenson
e552be76ce
Docker apt repo name fix (again) ( #4246 )
...
For some reason 18.09 packages are now prefixed with `5:` in the download.docker.com apt repos
Followup to #4236
2019-02-14 10:19:19 -08:00
Ryler Hockenbury
eea22dfd40
Fix typo with docker-ce package versions ( #4236 )
2019-02-14 07:32:12 -08:00
Maxime Guyot
0a722942cc
Use git tag when checking out for test upgrade ( #4209 )
2019-02-14 05:09:56 -08:00
Kaoet
192f4c4e96
Allow customizing container image path used in NVIDIA GPU addon. ( #4229 )
2019-02-14 03:51:38 -08:00
hikoz
e03588f431
use swapon -s ( #4216 )
2019-02-14 02:35:17 -08:00
Chad Swenson
8872b2e0c6
Fix calico when kube_override_hostname is set ( #4235 )
...
This fixes an issue where the `nodename` in calico's cni config json can fall out of sync with the k8s node name used by the calico pod if `kube_override_hostname` is set
2019-02-13 16:02:48 -08:00
Florent Monbillard
061f5a313b
Explicitely set etcd endpoint in kubeadm-images.yaml ( #4063 )
...
Currently, the task `container_download | download images for kubeadm config images` fetches etcd image even though it's not required (etcd is bootstrapped by kubespray, not kubeadm).
`kubeadm-images.yaml` is only a subset of `kubeadm-config.yaml`, therefore ``kubeadm config images pull` will try to get all this list (including etcd)
```
# kubeadm config images list --config /etc/kubernetes/kubeadm-images.yaml
k8s.gcr.io/kube-apiserver:v1.13.2
k8s.gcr.io/kube-controller-manager:v1.13.2
k8s.gcr.io/kube-scheduler:v1.13.2
k8s.gcr.io/kube-proxy:v1.13.2
k8s.gcr.io/pause:3.1
k8s.gcr.io/etcd:3.2.24
k8s.gcr.io/coredns:1.2.6
```
When using the `kubeadm-config.yaml` though, it doesn't list etcd image:
```
# kubeadm config images list --config /etc/kubernetes/kubeadm-config.yaml
k8s.gcr.io/kube-apiserver:v1.13.2
k8s.gcr.io/kube-controller-manager:v1.13.2
k8s.gcr.io/kube-scheduler:v1.13.2
k8s.gcr.io/kube-proxy:v1.13.2
k8s.gcr.io/pause:3.1
k8s.gcr.io/coredns:1.2.6
```
This change just adds the etcd endpoints in the `kubeadm-images.yaml` to give a hint to kubeadm it doesn't need etcd image for its boostrapping as etcd is "external".
I confess it is a ugly hack, a better way would be to use a single `kubeadm-config.yaml` for both tasks, but they are triggered by different roles (`kubeadm-images.yaml` is used by download, `kubeadm-config.yaml` by kubernetes/master) at different steps and I didn't want to refactor too many things to prevent breakage.
This is specially useful for offline installation where a whitelist of container images is mirrored on a local private container registry. `k8s.gcr.io/etcd` and `quay.io/coreos/etcd` are two different repositories hosting the same images but using *different tags*!
* coreos/etcd:v3.2.24
* k8s.gcr.io/etcd:3.2.24 (note the missing 'v' in the tag name)
2019-02-13 12:44:12 -08:00
Chad Swenson
2e2ed3bd35
[SECURITY] Docker patches for CVE-2019-5736 ( #4223 )
...
This updates docker 18.06 and 18.09 with the two patches released
yesterday to address the new runc exploit. Details here:
https://kubernetes.io/blog/2019/02/11/runc-and-cve-2019-5736/
2019-02-13 01:50:53 -08:00
Manuel Cintron
7697baf0da
Omit does not work in the context of yum_repository proxy. The ansible documentation specifies to use _none_ to disable the global proxy setting. ( #4225 )
2019-02-12 16:46:32 -08:00
Sorin Sbarnea
22a5a00c49
Improve kubeadm join tasks ( #4206 )
...
Fix issue where `kubeadm join` could wait forever for joining.
Fix issue where `kubeadm join` were not reaching the user, making
impossible to find the cause of the failure.
New behaviour is to first attempt to join without bypassing the
verifications checks and to display them if needed.
If this fails it still attempts to join by ignoring the check in
order to make previous behavior.
A timeout of 60 seconds is allocated for a joining.
Related-bug: #3973
2019-02-12 13:42:56 -08:00
Robert Neumann
8b289ad9e1
Fix the file path for all.yml and k8s-cluster.yml ( #4210 )
2019-02-11 14:55:41 -08:00
Maxime Guyot
6a33411d65
Add an option for helm init --wait ( #4202 )
2019-02-11 14:32:26 -08:00
hikoz
9a91ef8628
change permission after unarchive ( #4191 )
2019-02-11 14:21:38 -08:00
Sergey
fbce6349c4
check kube_pods_subnet and kube_service_addresses to valid ip network range, not single ip address ( #4188 )
2019-02-11 14:12:06 -08:00
Maxime Guyot
954676b3d8
Update the admin cert paths ( #4135 )
2019-02-11 14:10:10 -08:00
MarkusTeufelberger
e2ad6aad5a
bootstrap: rework role ( #4045 )
...
* bootstrap: rework role
* support being called from a non-root user
* run some commands in check mode
* unify spelling/task names
* bootstrap: fix wording of comments for check_mode: false
* bootstrap: remove setup-pipelining task
2019-02-11 14:04:27 -08:00
Chad Swenson
038a2eb862
Merge pull request #3949 from trogeat/patch-fix-missing-ca-cert-apiserver
...
kubespray: fix missing ca-certificate path in apiserver
2019-02-11 15:40:04 -06:00
Manuel Cintron
5d146e52fe
If a centos or rhel node is not configured with the extras repo installation of required packages (python-httplib2 in particular) will fail later on. ( #4213 )
2019-02-11 13:27:02 -08:00
Jeff Bornemann
c41c1e771f
OCI Cloud Provider Update ( #4186 )
...
* OCI subnet AD 2 is not required for CCM >= 0.7.0
Reorganize OCI provider to generate configuration, rather than pull
Add pull secret option to OCI cloud provider
* Updated oci example to document new parameters
2019-02-11 12:08:53 -08:00
tikitavi
befa8a6cbd
fix error with delete host in inventory.py script ( #4203 )
...
* fix error with delete host in inventory.py script
* minor fix
2019-02-11 15:57:51 +03:00
Karl
85b77f7c22
Remove Ubuntu Bionic specific vars file - breaks multi-arch ( #3974 )
2019-02-11 00:04:27 -08:00
Maxime Guyot
6b3f7306a4
Add support for arm64 images for hyperkube, kubeadm and cni_binary ( #4176 )
2019-02-09 02:08:57 -08:00
Earl C. Ruby III
ba5c0fa364
Tell Git to ignore the inventory/mycluster directory ( #3900 )
...
The inventory/mycluster directory gets created when someone follows
the instructions in README.md, but it should never be committed to
the kubespray repo. Ignore it.
2019-02-07 23:30:28 -08:00
Maxime Guyot
2a92fd2f14
Update docs/roadmap.md ( #4198 )
2019-02-07 07:43:35 -08:00
Maxime Guyot
7e974f1401
Fix MetaLB library ( #4195 )
2019-02-07 17:31:53 +03:00
Matthew Mosesohn
8373fa393a
Update CNAME
2019-02-07 16:30:25 +03:00
Matthew Mosesohn
613841381d
Create CNAME
2019-02-07 16:28:44 +03:00
Maxime Guyot
9e76aafc1c
Publish docs with docsify ( #4193 )
...
* Add docsify website
* Add website CI
2019-02-07 04:52:08 -08:00
Matthew Mosesohn
9b5096ab10
Set theme jekyll-theme-slate
2019-02-07 15:47:50 +03:00
joakimr-axis
01d70f2c7c
Update flannel version to v0.11.0 ( #4190 )
...
Change-Id: I27d670803bea82a68d5eb0e49d4677f4afdce55f
2019-02-07 04:33:01 -08:00
Chad Swenson
6878c2af4e
Fix kube_hostname_override inconsistencies ( #4185 )
2019-02-06 22:20:11 -08:00
Bort Verwilst
db2b76a22a
update k8s to 1.13.3 ( #4192 )
...
* update k8s to 1.13.3
* update README as well
2019-02-06 10:48:05 -08:00
tikitavi
263c8731f2
add to inventory.py script ability to indicate ip ranges ( #4182 )
...
* add to inventory.py script ability to indicate ip ranges
* add test for range2ip function for inventory.py script
some fixes
* add negative test for range2ip function for inventory.py script
2019-02-06 18:22:13 +03:00
peerapach
69e5deeccc
Fix newline issue of priorityClassName when enable tolerations ( #4164 )
2019-02-04 12:59:01 -08:00
Matthew Mosesohn
2e1e27219e
Refactor collect-info.yaml playbook ( #4157 )
...
Run only commands that apply to the current deployed cluster (only get
calico info and skip weave/flannel when deploying calico, for example).
Add helm release info if helm is deployed
2019-02-04 12:46:48 -08:00
Danny Kulchinsky
226d5ed7de
[Calico] Define FELIX_KUBENODEPORTRANGES when kube-proxy in ipvs mode ( #4173 )
...
* Define FELIX_KUBENODEPORTRANGES when kube-proxy in ipvs mode
* ensure kube_apiserver_node_port_range is defined
2019-02-04 12:42:40 -08:00
Earl C. Ruby III
52e0aa7a80
Install the latest filesystem creation packages ( #3904 )
...
This PR ensures that the e2fsprogs and xfsprogs packages are
installed on all Kubernetes nodes and that the packages are
the latest versions. It also ensures that the nodes can
create XFS filesystems when necessary, since not all distros
install xfsprogs by default.
e2fsprogs - ext2/ext3/ext4 file system utilities
xfsprogs - Utilities for managing the XFS filesystem
2019-02-04 12:23:33 -08:00
peerapach
bd9474bafd
fix kubeadm-setup when enable access_ip ( #4145 )
2019-02-01 20:10:34 -08:00
Sorin Sbarnea
316b73178d
Add timeout to Get current version of calico cluster version ( #4149 )
...
Avoid waiting forever for this task that should be very quick.
Fixes : #4148
2019-02-01 20:09:04 -08:00
Samina Fu
58c71d8ea6
Add Setting Multi on group_vars ( #4054 )
2019-01-31 23:48:13 -08:00
Peter Metz
e245e935aa
fix(vagrant): sets ansible.inventory_path to file not dir ( #4153 )
...
This fixes the issue where if there was a hosts.ini file present in the
inventory directory, then Vagrant would set an incorrect path as
ansible.inventory_path
2019-01-31 23:46:52 -08:00
Manuel Cintron
143e2272ff
Fixing an issue where trying to install docker-ce-18.09 on rhel7 nodes (or potentially centos 7) without an enabled extras repo the installation will fail because container-selinux >= 2.9 is required. The check for container-selinux upfront should obviate the need for adding an extras repo if the node is able to find it from another source. ( #4161 )
2019-01-31 16:19:48 -08:00
Vasilis Remmas
cd7924f8c9
Add oidc prefixes to kubeadm templates ( #4159 )
2019-01-31 15:31:43 -08:00
Erwan Miran
7f93a5a0f5
Fix deprecation warnings ( #4130 )
...
* use not deprecated ansible_play_hosts variable
* Using tests as filters is deprecated
* Fix deprecation warning about pkg list
2019-01-31 14:57:22 -08:00
Danny Kulchinsky
1abd3cf3d7
Update calico version in README ( #4143 )
2019-01-31 14:52:43 -08:00
Petr Ruzicka
91e2d61cf2
Adding link to ../../contrib in README ( #4097 )
2019-01-31 14:44:06 -08:00
Erwan Miran
f6d60a7e89
Calico: Ability to define the default IPPool CIDR (instead of kube_pods_subnet) ( #4131 )
...
* Calico: Ability to define the default IPPool CIDR (instead of kube_pods_subnet)
* Documentation for calico_pool_cidr (and calico_advertise_cluster_ips which has been forgotten...)
2019-01-31 13:39:13 -08:00
Maxime Guyot
40f1c51ec3
Add support for Packet with Terraform ( #4043 )
...
* Add support for Packet with Terraform
Co-Author: johnstudarus <john@jhlconsulting.com>
* removed advanced features to streamline
* clarifying usage
* Update README.md
provide a better test to validate things are working OK
* Update README.md
clarifying what to set
* minor wordsmithing
* Fix admin cert path
* clarifying how to configure keys
* enabling kubeconfig_localhost
pull over the configuration file via playbooks rather than the key files individually
* Create output.tf
* Add support for node specific plans
2019-01-31 07:24:36 -08:00
Thomas Nys
68fd7e39da
Set cluster DNS correctly in case of nodelocal dns cache ( #3879 )
...
* Set cluster DNS correctly in case of nodelocal dns cache
* Pass in cluster_ip based on dns mode
* Disable nodelocaldns by default
* Fix syntax error
* Fix syntax issue
* Add nodelocadns ip to vars of node installation
* Change location of nodelocaldns_ip
* Try to remove newlines from jinja template
* Add debug for config file
* Move parameter logic outside of template
* Adapt templates after feedback
* Remove debugging
2019-01-28 23:39:27 -08:00
wangxf
a096761306
[PR-Calico]Support calico 3.4.0 ( #4102 )
...
* Suport calico 3.4.0
Signed-off-by: wangxf1987 <xiaofeix.wang@gmail.com>
* Remove symlink + cni conflist template when 3.3.0+, handle Canal, addition of install-cni: sidecar(3.3.0) or initontainer(3.4.0), KUBECONFIG_FILEPATH, calico_cert_dir, advertise cluster ips
* scheduler.alpha.kubernetes.io/critical-pod deprecated since 1.12
2019-01-28 11:03:49 -08:00
Erwan Miran
d790ec96d8
Fixup 4125: Debug agents when requests time out ( #4132 )
2019-01-28 10:22:43 -08:00
Erwan Miran
5e260fe23a
Fixup 4094: Debug agents when nothing is return ( #4125 )
2019-01-28 03:33:18 -08:00
Florent Monbillard
2054a98cf7
Run kubeadm and hyperkube outside of local_release_dir ( #4098 )
...
Addressing the discussion started in #4064 , this PR moves kubeadm and
hyperkube binaries to /usr/local/bin before running them on the master
nodes.
It is to address the case where local_release_dir points to /tmp
(kubespray default) and /tmp is mounted with noexec mode, preventing
any binaries to be run in that partition.
In role "node", we still move kubeadm to bin_dir only on the worker
nodes.
2019-01-28 02:00:49 -08:00
Sergey
ce8ba1f170
create artifacts_dir ( #4079 )
2019-01-28 01:59:15 -08:00
Danny Kulchinsky
595d6427ac
[Nodelocal DNS cache] Mount host /run/xtables.lock in nodelocaldns container ( #4074 )
...
* Mount host /run/xtables.lock in nodelocaldns container
* fix typo in nodelocaldns daemonset manifest yml
* Add prometheus scrape annotation, updateStrategy and reduce termination grace period
* fix indentation
* actually fix it..
* Bump k8s-dns-node-cache tag to 1.15.1 (fixes https://github.com/kubernetes/dns/issues/282 )
2019-01-28 01:57:40 -08:00
Aivars Sterns
39dc61b948
add miouge1 to reviewers (slack - maxguy) ( #4108 )
2019-01-28 00:42:22 -08:00
Danny Kulchinsky
96688269f8
Support both --address and --bind-address for scheduler and controller-manager ( #4112 )
2019-01-27 23:43:34 -08:00
Rong Zhang
55aa58ee2e
Merge pull request #4025 from riverzhang/download-images
...
Fix kubeadm config images pull
2019-01-28 15:41:15 +08:00
Erwan Miran
556a8d68bc
Set IP env var to autodetect when calico_ip_auto_method is defined ( #4105 )
2019-01-27 23:09:18 -08:00
rongzhang
3ed5f89cf5
Add update server field in kube-proxy kubeconfig
...
I know this is a bit hack.
If you use cloud LB, you can use kubeadm's controlPlaneEndpoint to configure kube-proxy's server field.
But for nginx-proxy, it didn't start when kubeadm init.
2019-01-28 14:45:43 +08:00
rongzhang
8d0158ceeb
Fix kubeadm config images pull
...
Supported by kubeadm v1.11
2019-01-28 14:42:55 +08:00
Peter Metz
fcd895d032
fix(vagrant): forces flannel interface as eth1 ( #4070 )
...
Without this pods cannot communicate with each other by default (broken
networking)
Closes #2114
2019-01-26 13:38:37 -08:00
Erwan Miran
61d88b8db2
Fix random failure in debug: var=result.content|from_json ( #4094 )
...
* Fix random failure in debug: var=result.content|from_json
* netchecker agents are deployed on all k8s-cluster group members
* reducing limits/requests is not enough, switching to n1-standard-2
* gce_centos7 need more cpu
2019-01-25 08:14:22 -08:00
Chad Swenson
3e52f1a4e9
Merge pull request #4091 from doughgle/master
...
Introduce `calico_upgrade_url` var for Calico upgrade tool.
2019-01-23 17:39:59 -06:00
Douglas Hellinger
4479cc48fe
Introduce calico_upgrade_url
var for Calico upgrade tool.
...
So that binary can be sourced from anywhere - not only github.
2019-01-23 16:19:27 +08:00
Chad Swenson
5708914699
Merge pull request #4088 from chadswen/bootstrap-rhel-epel-fixes
...
Fix epel_enabled and RHEL support in bootstrap-os
2019-01-22 17:13:10 -06:00
Chad Swenson
881be9b741
Fix epel_enabled and RHEL support in bootstrap-os
...
Looks like `epel_enabled` was not configured for the epel install in `bootstrap-centos.yml`. Also, there were no conditionals that would trigger bootstrap for RHEL.
2019-01-22 16:40:02 -06:00
Chad Swenson
e6f1c4df7f
Merge pull request #4085 from chadswen/docker-systemd-after-containerd
...
Fix docker 18.09.1 systemd service
2019-01-22 13:33:34 -06:00
Chad Swenson
e2592f1ce2
Fix docker 18.09.1 systemd service
...
The `docker-ce` 18.09.1 packaging missed an `After` dependency on containerd in the systemd service. Upstream PR: https://github.com/docker/docker-ce-packaging/pull/290
2019-01-22 11:19:54 -06:00
Matthew Mosesohn
77d31e679a
fixup external kube-apiserver port ( #4075 )
2019-01-21 14:43:27 +03:00
Florent Monbillard
decbcdc423
Use external LB IP for external api endpoint ( #4060 )
...
* Use external LB IP for external api endpoint
Use loadbalancer_apiserver.address instead of apiserver_loadbalancer_domain_name for kudadm init --apiserver-advertise-address argument
https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-init/#options states apiserver-advertise-address needs to be a IPv4 or IPv6 address
* only use loadbalancer IP if it is defined
2019-01-21 12:27:42 +03:00
Chad Swenson
e3ffa21303
Merge pull request #4019 from chadswen/kubeadm-env
...
Fix PATH for kubeadm init
2019-01-18 11:27:57 -06:00
Chad Swenson
f2ecda6f0f
Merge pull request #4059 from chadswen/helm-version-bump
...
Update helm version for security and stablity fixes
2019-01-18 11:25:42 -06:00
Chad Swenson
26f6f1f62e
Merge pull request #4050 from chadswen/docker-18.09.1
...
Bump docker 18.09 to the latest patch
2019-01-18 11:23:44 -06:00
Matthew Mosesohn
28aee0fc34
Update OWNERS_ALIASES ( #4068 )
2019-01-18 18:58:04 +03:00
Bort Verwilst
f97cb4e761
Add 1.12.5 checksums ( #4067 )
2019-01-18 07:16:43 -08:00
Chad Swenson
405198acd0
Update helm version for security and stablity fixes
...
Helm v2.12.2 has fixes for a security vuln, and there have been several improvements since our last update.
2019-01-16 11:03:23 -06:00
Matthew Mosesohn
eecaba6b84
Generate external admin.conf with kubeadm ( #4056 )
...
* Generate external admin.conf with kubeadm
* Fix apiserver sans
2019-01-16 16:30:50 +03:00
Thomas Rogeat
83e11f9ef7
kubespray: fix missing ca-certificate path in apiserver
2019-01-16 11:48:24 +01:00
Chad Swenson
5a7ac7e5c1
Merge pull request #3984 from dannyk81/calico_xtables_lock
...
[calico/canal] mount host's xtables lock and enable calico locking for <v3.2.1
2019-01-15 23:13:02 -06:00
Chad Swenson
c15c933ce8
Bump docker 18.09 to the latest patch
...
Docker 18.09.1 is out and it includes some fixes that are quite critical for RHEL distros, details here: https://docs.docker.com/engine/release-notes/#18091
2019-01-15 13:54:58 -06:00
Chad Swenson
0697ab4b4f
Merge pull request #4048 from chadswen/readonly-writable-fix
...
Fix kubeadm config extra volumes
2019-01-15 13:02:04 -06:00
Chad Swenson
13e3e867ac
Fix kubeadm config extra volumes
...
I found a potential use case where `writable` could be null and therfore
not treated like a boolean, so this adds an extra default statement to
avoid negating a non-boolean as boolean which would lead to undefined. refs #4020
2019-01-15 12:35:22 -06:00
Chad Swenson
cc30220f01
Merge pull request #4044 from chadswen/lvp-cm-fix
...
Fix local-volume-provisioner configmap template
2019-01-15 09:08:08 -06:00
Danny Kulchinsky
257019d424
Mount host's xtable lock and enable calico lokcing for <v3.2.1
2019-01-14 17:16:29 -05:00
Chad Swenson
4959bfc1b3
Merge pull request #3950 from elementyang/pr-registry
...
fix registry_storage_class equals empty string
2019-01-14 15:45:09 -06:00
Chad Swenson
301671ae19
Merge pull request #4026 from riverzhang/bind-address
...
Use --bind-address instead of --address
2019-01-14 15:35:00 -06:00
Chad Swenson
1e09fd8e0f
Merge pull request #3970 from woopstar/image_builder_1
...
Add image builder to create Docker vm's for kube-virt
2019-01-14 15:21:58 -06:00
Chad Swenson
f10f7d0e84
Merge pull request #3975 from kskewes/arm64-urls
...
Update kubectl and etcd download urls for mult-arch
2019-01-14 15:04:29 -06:00
Chad Swenson
3ee5aa0d6b
Fix local-volume-provisioner configmap template
...
Looks like the template is removing the trailing space between storage
class entries, and since CI only has one storage class we never hit this
issue. This change will prevent the yaml from printing on a single line
when multiple storage classes are defined.
2019-01-14 14:28:00 -06:00
Chad Swenson
fce8712bff
Merge pull request #4033 from MarkusTeufelberger/pypy_portable
...
Use Pypy portable on coreos
2019-01-14 12:30:47 -06:00
Chad Swenson
2051bf2b67
Merge pull request #4028 from riverzhang/v1.13.2
...
Upgrade kubernetes to v1.13.2
2019-01-14 10:00:15 -06:00
Markus Teufelberger
87c9a871b9
bootstrap-os: use the systemd module to stop and mask locksmithd
2019-01-12 15:06:01 +01:00
Markus Teufelberger
5e2c14e916
bootstrap-os: simplify pip3 installation on coreos
2019-01-12 15:05:33 +01:00
Markus Teufelberger
5b5546adf1
bootstrap-os: Install pypy3 portable
2019-01-12 15:04:33 +01:00
rongzhang
0b09c8154a
Upgrade kubernetes to v1.13.2
2019-01-11 14:32:42 +08:00
rongzhang
bab2e5ed0d
Use --bind-address instead of --address
...
--address deprecated
2019-01-11 12:22:47 +08:00
Chad Swenson
7c620ade85
Merge pull request #4020 from chadswen/kubeadm-config-field-updates
...
Fix readOnly flag in kubeadm-config.v1beta1.yaml.j2
2019-01-10 16:30:56 -06:00
Chad Swenson
1d9c0c7d17
Fix readOnly flag in kubeadm-config.v1beta1.yaml.j2
...
In v1beta1 of `ClusterConfiguration` the extraVolumes `writable` field was changed to `readOnly` and its boolean value must be negated.
Also, the json field for `useHyperKubeImage` was incorrectly capitalized.
2019-01-09 20:43:35 -06:00
Chad Swenson
aa1d5b8970
Fix PATH for kubeadm init
...
Right now we're consistently getting warnings about kubelet not found in
path during `kubeadm init`. We fixed this for `kubeadm join` in #3342 , and this brings the change to init
as well.
2019-01-09 18:38:02 -06:00
Sascha Marcel Schmidt
435993891b
fix assertions, use msg instead of message ( #3913 )
2019-01-09 11:01:47 -08:00
Chad Swenson
1d5a9464e2
Merge pull request #4009 from chadswen/lvp-fixup
...
Bugfixes for Local Volume Provisioner
2019-01-09 11:22:28 -06:00
Chad Swenson
e88b8f247a
Merge pull request #3996 from Bobonium/issue_3586_kube_router_with_external_loadbalancer_not_working
...
use api server loadbalancer ip if external loadbalancer is used (fixes kube-router deployment)
2019-01-09 11:20:38 -06:00
Chad Swenson
880c9c6b48
Merge pull request #4016 from mcntrn/download_file_basic_auth
...
Added optional basic auth parameters
2019-01-09 11:15:05 -06:00
Manuel Cintron
7633e6d582
Added pass through parameters to enable basic auth for downloads
2019-01-08 19:36:13 -06:00
Chad Swenson
72802e4d8d
Bugfixes for Local Volume Provisioner
...
- Fixed an issue where storage class host directories were looped
through excessive target hosts
- Fixes examples in the LVP `README.md` to use nested dicts instead of a
list of dicts
2019-01-08 17:45:20 -06:00
Wilmar den Ouden
4fb8adb9e4
More dynamic local-storage-provisioner approach ( #3472 )
...
* Makes local volume provisioner more dynamic
* Correct variable name in local storage provisioner defaults
* Updates external-provisioner readme
* Updates variable naming to be more clear, more documentation, fixes sample inventory
* Variable refactor, untangled some jinja2 loops
* Corrects variable name
* No variable substitution in dict keys, replaced with anchor
* Fixes default storage_classes dict, inline docs
* Fixes spelling in inline docs
* Addresses comments in review
* Updates all the defaults
* Fix failing CI task
* Fixes external provisioner daemonset
2019-01-08 12:36:44 -08:00
Chad Swenson
5c52a830d2
Update kubernetes dashboard to latest patch ( #3995 )
2019-01-08 09:46:20 -08:00
Julien C
2c8d75afb7
Remove --limit option to select node to delete ( #4001 )
...
--limit doesn't work when using remove-node.yml as there is group listing with "hosts: kube-master" in the playbook. Thus, remove-node/pre-remove/post-remove tasks are skipped as they are filtered by group "hosts: kube-master"
2019-01-08 12:09:18 +01:00
Andreas Holmsten
4d5b41b8db
Allow override of bind addr for controller-manager and scheduler ( #3968 )
...
* allows to override the bind addresses for controller-manager and scheduler
Useful for Prometheus metrics monitoring
* Add bind addr override support in kubeadm/v1beta1
Adds support for override of bind addresses for controller-manager
and scheduler in kubeadm/v1beta1
* Move location of bind address vars
* Remove double declaration of schedulerExtraArgs
2019-01-07 20:41:54 -08:00
Bobonium
11d9c2e2c3
use api server loadbalancer ip if external loadbalancer is used - this fixes the broken kube-router deployment
2019-01-07 23:06:52 +01:00
Andreas Kruger
352fbd71e7
Merge branch 'master' of github.com:kubernetes-sigs/kubespray into image_builder_1
2019-01-04 10:18:23 +01:00
Andreas Kruger
2706633f81
Update OWNERS file
2019-01-04 10:18:05 +01:00
Andreas Kruger
50af3cf6c1
Added owners file
2019-01-04 10:16:07 +01:00
Aivars Sterns
39d7503069
Merge pull request #3959 from elementyang/pr-ingress
...
fix ingress nodeSelector label
2019-01-04 08:58:16 +00:00
Karl Skewes
41434ce080
Update kubectl and etcd download urls for mult-arch
2019-01-04 21:44:57 +13:00
MarkusTeufelberger
f72ed13f3c
remove os_family variable from bootstrap-os ( #3962 )
...
* remove os_family variable from bootstrap-os
* quote the conditions another time to fix the syntax error
2019-01-03 11:28:03 -08:00
Andreas Kruger
0fec370dcd
Minor changes
2019-01-03 15:41:31 +01:00
Andreas Kruger
bf63569184
Add image builder to create Docker vm's for kube-virt
2019-01-03 15:34:37 +01:00
okamototk
8216e821d3
Fix kubeadm v1beta1 configuration taint ( #3928 )
...
* Use master node taint same as kubeadm configuration v1alpha3 or before.
2019-01-03 03:42:23 -08:00
Andreas Krüger
13efa95ef7
Run less CI jobs on each PR ( #3967 )
2019-01-03 01:26:38 -08:00
Anton Patsev
e25237455c
Fix mixup http/https in bootstrap-debian.yml ( #3963 )
...
* Fix mixup http/https in bootstrap-debian.yml
* Update bootstrap-debian.yml
2019-01-03 00:18:09 -08:00
Andreas Krüger
b38ed2c959
Update to Dockerfile used for releasing 2.8 and 2.8.1 ( #3966 )
2019-01-03 00:16:35 -08:00
Andreas Holmsten
a34139e19e
(Re)add line break for supplementary addr in SANs ( #3952 )
...
The change implemented in #3908 remove line breaks for supplementary
addresses in kubeadm SANs, causing errors in the config file and
failure to bring cluster up. This commit reimplement line breaks in
between supplementary addresses.
2019-01-03 00:12:00 -08:00
Chad Swenson
80379f6cab
Fix kube-proxy configuration for kubeadm ( #3958 )
...
- Creates and defaults an ansible variable for every configuration option in the `kubeproxy.config.k8s.io/v1alpha1` type spec
- Fixes vars that were orphaned by removing non-kubeadm
- Fixes previously harcoded kubeadm values
- Introduces a `main` directory for role default files per component (requires ansible 2.6.0+)
- Split out just `kube-proxy.yml` in this first effort
- Removes the kube-proxy server field patch task
We should continue to pull out other components from `main.yml` into their own defaults files as I did here for `defaults/main/kube-proxy.yml`. I hope for and will need others to join me in this refactoring across the project until each component config template has a matching role defaults file, with shared defaults in `kubespray-defaults` or `downloads`
2019-01-03 00:04:26 -08:00
MarkusTeufelberger
d58b338bd8
Update the version of pypy used on CoreOS bootstrap-os ( #3922 )
...
* Update the version of pypy used on CoreOS bootstrap-os
* update the pip installation process on CoreOS
2019-01-02 06:17:20 -08:00
elementyang
e1e13b68b3
fix ingress nodeSelector label
2018-12-29 14:41:23 +08:00
elementyang
90ee5df413
fix registry_storage_class equals empty string
2018-12-29 14:31:47 +08:00
Rong Zhang
5834e609a6
Add scale master features ( #3946 )
...
* Add scale master features
* Add certificate management with kubeadm
* Add kubeadm kubeconfig
* Fix ymalroles error
* fix upgrade cluster fialed
* force update cert and keys when you reconfigure cluster
2018-12-27 23:27:27 -08:00
elementyang
532e97c542
fix registry_storage_class equals empty string
2018-12-28 14:23:19 +08:00
Markos Chandras
d156449819
roles: docker: Update docker service for SUSE distributions ( #3924 )
...
The containerd service and socket files have been dropped from the
openSUSE docker package so we should not require them in the docker
service anymore. This makes the docker service file look similar to
the one shipped by the openSUSE package.
Signed-off-by: Markos Chandras <mchandras@suse.de>
2018-12-27 07:26:02 -08:00
Anton Patsev
d4bd08f82e
Install python-pip from local yum repository ( #3940 )
...
Add support install python-pip from local yum repository if local yum repository exist.
2018-12-27 06:30:59 -08:00
Earl C. Ruby III
3ce033995f
Documented docker_version acceptable values ( #3901 )
...
Added a line documenting where to find acceptable values for the
`docker_version` setting. If you use a value that is not used as
a key value by `docker_versioned_pkg` the container-engine/docker
playbook will throw a "Unexpected templating type error". (e.g.
If you use '18.06.1' or '18.06.1-ce', neither of which is used
as a key value of `docker_versioned_pkg`, rather than '18.06',
you'll get an error when installing on Ubuntu 18.04.)
2018-12-27 16:32:16 +03:00
Gautam Divgi
320f4d4d7f
Added filters for integer conversion of kubelet_max_pods and kube_network_node_prefix ( #3857 )
2018-12-26 13:58:53 -08:00
Seongjin Cho
16715adfa0
Adds support for webhook token auth. ( #3939 )
...
Webhook token auth:
https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
Fixes #3063 .
2018-12-26 01:52:53 -08:00
Lucas Melchior
100d972cea
Updated cri-o documentation ( #3878 )
2018-12-25 22:55:17 -08:00
Rong Zhang
ce63597e4a
Merge pull request #3941 from riverzhang/gpu
...
Fix GPU node Scheduling
2018-12-26 13:39:10 +08:00
Anton Patsev
5f117fb65e
Add support http/https proxy for bootstrap-debian ( #3932 )
2018-12-25 10:46:53 -08:00
WillPlatnick
72fee60c8f
Update nodelocal to be in its own section ( #3931 )
2018-12-25 07:10:08 -08:00
rongzhang
1bb1ba2274
Fix GPU node Scheduling
2018-12-25 21:37:10 +08:00
Zefool
6ebcaab2bb
controlPlaneEndpoint set up through load balancer should be possible … ( #3888 )
...
* controlPlaneEndpoint set up through load balancer should be possible even in single master setups
Enable load balancer for single-master setups
Fixes an issue where single-master setups are not reachable using the usual admin.conf from outside the cluster.
controlPlaneEndpoint set up through load balancer should be possible even in single master setups
* add fix to other api versions
* remove obsolete check completely
* remove check, pass 2
* removes checks in client configuration
* delete 'and'
2018-12-25 00:03:32 -08:00
Rong Zhang
cd42e649a7
Fix reconfigure and upgrade cluster ( #3938 )
2018-12-24 23:06:27 -08:00
Rong Zhang
8167e5b690
Fix kubeadm images templates ( #3936 )
...
download v1.12.3 kubernetes images failed
2018-12-23 06:35:06 -08:00
Bort Verwilst
de014422bf
Add k8s 1.12.4 checksums ( #3929 )
2018-12-23 01:09:09 -08:00
Rong Zhang
2f5c0d10bb
Merge pull request #3934 from riverzhang/delete-kubeamd-client
...
Delete unused controlPlane for join node
2018-12-23 12:07:26 +08:00
Rong Zhang
48b5ee5cd5
Merge pull request #3933 from riverzhang/fix-kubeadm-images
...
Fix installation using CRIO about download images failed
2018-12-23 11:10:08 +08:00
rongzhang
dd4159fe65
Delete unused controlPlane for join node
...
it is used for join master or use --experimental-control-plane argments
2018-12-23 00:31:01 +08:00
rongzhang
62a8961d8f
Fix installation using CRIO about download images failed
2018-12-23 00:20:39 +08:00
Seongjin Cho
e7b835eb4c
Fix duplicate storage-backend ( #3906 )
2018-12-20 01:01:39 -08:00
Hedayat Vatankhah (هدایت)
fbe9e0ac1a
Fix docker_options definition when docker_version is 'latest' rather than a number ( #3919 )
...
- NOTE: it assumes that the 'latest' version is newer than 17.05
2018-12-20 00:58:21 -08:00
Rong Zhang
40feb120e4
Merge pull request #3895 from riverzhang/v1.13.1
...
Upgrade kubernetes to v1.13.1
2018-12-20 16:53:31 +08:00
Rong Zhang
6362211860
Add images downloader to download roles ( #3914 )
...
* Add images downloader to download roles
* Use single jinja2 templates
* add kube_version to templates
2018-12-19 05:17:58 -08:00
Rong Zhang
925a820b56
Fix skip upgrade first master ( #3915 )
2018-12-19 05:16:14 -08:00
Matthew Mosesohn
50b884a32d
Fixup line breaks for kubeadm SANs ( #3908 )
2018-12-19 02:47:31 -08:00
rongzhang
890878f5db
disable ubuntu18-flannel test
2018-12-19 15:14:04 +08:00
rongzhang
435ef14379
Upgrade kubernetes to v1.13.1
2018-12-19 15:13:43 +08:00
Matthew Mosesohn
3c44ffcf80
set kubespray-defaults kube_api_anonymous_auth to true ( #3909 )
2018-12-18 06:53:58 -08:00
Ganesh Maharaj Mahalingam
73aee004ac
Enable ClearLinux as a distro in kubespray ( #3855 )
...
Signed-off-by: Ganesh Maharaj Mahalingam <ganesh.mahalingam@intel.com>
2018-12-18 01:39:25 -08:00
ihard
30a9149b52
add vars for cilium init container ( #3893 )
...
* add vars for cilium init container
* make yamllint happy
* add var cilium_init in downloads
2018-12-18 00:34:19 -08:00
Ryler Hockenbury
4a7f829ecf
Reapply win_node patches ( #3868 )
2018-12-13 06:17:46 -08:00
Egor
dc8a8011be
Load nf_conntrack module if nf_conntrack_ipv4 failed ( #3764 )
2018-12-12 05:33:54 -08:00
Maxim Snezhkov
5e84dabb46
Fix assertion for alone etcd nodes ( #3847 )
2018-12-12 05:21:54 -08:00
Ryler Hockenbury
3e8f4c1545
Use recommended defaults for dns autoscale ( #3884 )
2018-12-12 05:05:46 -08:00
Ganesh Maharaj Mahalingam
1a50a1a733
cri-o reset all containers and pods ( #3856 )
...
Signed-off-by: Ganesh Maharaj Mahalingam <ganesh.mahalingam@intel.com>
2018-12-12 01:59:55 -08:00
Florent Monbillard
e50647d252
dns_mode defaults to coredns ( #3882 )
...
since bad886ca9b
, dns_mode is set to coredns by default instead of kubedns
2018-12-12 01:45:00 -08:00
Maxim Snezhkov
951e4675c6
Fix error with ipvs on cluster reset task ( #3848 )
2018-12-12 01:43:16 -08:00
Ryler Hockenbury
c04e8b57b9
Metrics server resizer addon needs to target metrics server deployment ( #3867 )
...
* Metrics server resizer addon should target metrics server deployment
* Target metrics server deployment without version
2018-12-12 00:09:09 -08:00
gdoucet
32d47c836d
Adding is_atomic in centos bootstrap-os ( #3873 )
...
Adding fact is_atomic in bootstrap-centos.yml.
Fix issue: #3538
2018-12-11 02:43:21 -08:00
Maxim Snezhkov
90a7941d56
Fix disabling swap on ubuntu systems ( #3864 )
2018-12-11 02:42:00 -08:00
Thomas Nys
3e3ee0aeb1
Add support for running a nodelocal dns cache ( #3861 )
...
* Add support for running a nodelocal dns cache
After encountering dns issues in a cluster I was recently working on I
noticed Kubernetes 1.13 introduced support for running a nodelocal dns
cache.
I believe this can usefull for more people.
73b548db06
https://github.com/kubernetes/enhancements/blob/master/keps/sig-network/0030-nodelocal-dns-cache.md
* Add requested changes
* Add additional requested changes + documentation
* Add requested changes after review
* Replace incorrect variable
2018-12-10 17:28:03 -08:00
Anton Patsev
7b674e0607
Add proxy to /etc/apt/apt.conf for ubuntu ( #3869 )
2018-12-10 02:33:45 -08:00
Julien C
593a9a262d
Add metrics service to kube-dns ( #3852 )
...
Metrics port is exposed through a service for CoreDNS but not for kube-dns.
2018-12-10 01:45:00 -08:00
Zohar Mamedov
456596710e
kube-router manifest DSR adjustments ( #3828 )
2018-12-10 00:40:39 -08:00
Đào Hoàng Sơn
01cd4cf1c6
Remove vault role from inventory_builder. ( #3863 )
...
Related to https://github.com/kubernetes-sigs/kubespray/pull/3684
2018-12-09 18:13:42 +01:00
Andrey Zhelnin
1712314fab
Setting host_architecture var ( #3846 )
...
Setting host_architecture to allow etcd upgrade working through: ansible-playbook -b -i inventory/sample/hosts.ini cluster.yml --tags=etcd (on other case host_architecture is missing)
2018-12-07 05:41:30 -08:00
Egor
7da9880ff7
Move node-cidr-mask-size to ControllerManagerextraArgs ( #3845 )
2018-12-07 04:23:17 -08:00
Bjorn Skovlund Ryden
d42b37b77d
Added RBAC rights for metrics_server. Fixes #3829 ( #3843 )
2018-12-07 03:11:35 -08:00
Maxime Guyot
c3e83f464f
Remove mention of fuel in README ( #3826 )
2018-12-07 11:12:54 +01:00
Rong Zhang
1550c05a7a
Add docker 18.09 support ( #3844 )
2018-12-07 02:02:39 -08:00
pasqualet
ea833a4cd7
Fix apiServerCertSANs in kubeadm config file ( #3839 )
2018-12-07 00:11:08 -08:00
Tagir
2d8e04dca7
Added v1.10.11 v1.11.5 support ( #3837 )
2018-12-07 00:09:51 -08:00
Andreas Krüger
d5ce5874e8
Streamline path to certs dir ( #3836 )
...
* Streamline path to certs dir
* More fixes
* Set path to etcd certs in kubernetes defaults instead
2018-12-06 23:11:53 -08:00
Rong Zhang
225f765b56
Upgrade kubernetes to v1.13.0 ( #3810 )
...
* Upgrade kubernetes to v1.13.0
* Remove all precense of scheduler.alpha.kubernetes.io/critical-pod in templates
* Fix cert dir
* Use kubespray v2.8 as baseline for gitlab
2018-12-06 12:11:48 -08:00
Andreas Krüger
ddffdb63bf
Remove non-kubeadm deployment ( #3811 )
...
* Remove non-kubeadm deployment
* More cleanup
* More cleanup
* More cleanup
* More cleanup
* Fix gitlab
* Try stop gce first before absent to make the delete process work
* More cleanup
* Fix bug with checking if kubeadm has already run
* Fix bug with checking if kubeadm has already run
* More fixes
* Fix test
* fix
* Fix gitlab checkout untill kubespray 2.8 is on quay
* Fixed
* Add upgrade path from non-kubeadm to kubeadm. Revert ssl path
* Readd secret checking
* Do gitlab checks from v2.7.0 test upgrade path to 2.8.0
* fix typo
* Fix CI jobs to kubeadm again. Fix broken hyperkube path
* Fix gitlab
* Fix rotate tokens
* More fixes
* More fixes
* Fix tokens
2018-12-06 02:33:38 -08:00
Erwan Miran
0d1be39a97
Reset: Check for kube-ipvs0 presence before remove it ( #3816 )
2018-12-04 19:18:50 -08:00
Erwan Miran
2c1dd69891
Reset tasks specific to Calico ( #3813 )
2018-12-04 11:37:45 -08:00
Chad Swenson
145687a48e
Reduce log spam of verbose tasks ( #3806 )
...
Added a loop_control label to a few tasks that flood our logs.
2018-12-04 10:35:44 -08:00
Rong Zhang
9051aa5296
Fix ubuntu-contiv test failed ( #3808 )
...
netchecker agent status is pending
2018-12-03 23:01:32 -08:00
Andreas Krüger
432f8e9841
Fix basic auth tokens for kubeadm deployment. ( #3801 )
...
* Fix basic auth tokens for kubeadm deployment.
* Tokens should be a dependancy on master, not nodes
2018-12-03 10:44:29 -08:00
Erwan Miran
19792cfae7
Remove iface kube-ipvs0 on reset when kube_proxy_mode is ipvs ( #3802 )
2018-12-03 10:38:51 -08:00
Andreas Krüger
9463b70edd
Cleanup defaults file from kubernetes-apps and add dashboard to download role ( #3800 )
...
* Remove variables defined in download role. Fixes #3799
* Cleanup some more variables
* Fix bad templating
* Minor fix
* Add dashboard to download role. Fixes #3736
2018-12-03 10:29:42 -08:00
karbyshevds
b109f52dab
Set configure-cloud-routes=false as default if no network plugin is used ( #3788 )
...
* Set configure-cloud-routes=false as default if no network plugin is used
As configure-cloud-routes default value is `true`, so it need to be set to `false` when not required to avoid error messages like:
"Couldn't reconcile node routes: error listing routes: unable to find route table for AWS cluster"
on, for example, AWS installations that don't use cloud native routing.
* Update kube-controller-manager.manifest.j2
remove extra spaces
2018-12-03 05:04:03 -08:00
Rong Zhang
e0781483fa
Use download binary instead of copying from the container ( #3786 )
2018-12-03 02:22:17 -08:00
Andreas Krüger
ffcea384a6
Merge pull request #3773 from toddnni/disable_facts_from_deprecation_notice
...
Disable gather_facts from non-kubeadm deprecation notice
2018-12-03 10:29:15 +01:00
Wong Hoi Sing Edison
deff6a82fa
ingress-nginx: Upgrade to 0.21.0 ( #3789 )
...
Upstream Changes:
- ingress-nginx 0.21.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.21.0 )
Our Changes:
- Sync templates with upstream changes
- Remove --default-backend-service requirement. Use the flag only for custom default backends
2018-11-30 02:48:50 -08:00
Toni Ylenius
919a268de3
Disable gather_facts from non-kubeadm deprecation notice
...
fact gathering causes errors when using become (-b) and there is no sudo access
locally
2018-11-29 18:35:12 +02:00
Chad Swenson
487cfa5e6c
Add options for configuring control plane component extra volumes ( #3779 )
...
This takes care of a few arbitrary use cases that may require custom mounts
inside of apiserver, controller manager, or scheduler.
2018-11-28 23:16:55 -08:00
Andreas Krüger
5fcda86f8c
Update gitlab to new repository ( #3784 )
2018-11-28 06:13:28 -08:00
Joost Cassee
f2635776cd
Make Calico Felix log level configurable ( #3781 )
2018-11-28 00:55:01 -08:00
Aivars Sterns
d30dbdde23
Update all kubernetes-incubator/kubespray refs to kubernetes-sigs/kubespray ( #3780 )
2018-11-28 09:15:25 +01:00
Chad Swenson
b59d5c35bc
Fix kubeadm_controller_extra_args ( #3778 )
2018-11-27 19:30:43 -08:00
Michal Belica
8331f7b056
Add support for setting custom node taints ( #3774 )
...
Introduced variable node_taints which can be set in inventory for
specific hosts or in group_vars, which generates --register-with-taints
command line argument for kubelet.
2018-11-27 15:56:49 -08:00
Andreas Krüger
92274a74f7
Merge pull request #3777 from kubernetes-sigs/woopstar-patch-1
...
Fix path to Kubespray in CI auth check
2018-11-27 22:34:17 +01:00
Andreas Krüger
1739c479ed
Fix path to Kubespray in CI auth check
2018-11-27 22:32:44 +01:00
Erwan Miran
551317f1cd
Fix docker_options jinja syntax ( #3770 )
2018-11-27 07:13:15 -08:00
Rong Zhang
ddc19f43ba
Add cloud provider config to kubeadm deployments ( #3766 )
2018-11-27 05:03:03 -08:00
Michal Belica
993b8e2791
Add support to set tolerations for ingress-nginx ( #3742 )
...
Introduced variable `ingress_nginx_tolerations` to set custom
tolerations for Ingress nginx daemonset, to be able to schedule
ingress-nginx on dedicated nodes with taints.
2018-11-27 03:30:16 -08:00
Egor
9a5438ce2f
Fix kubeadm-config: add kube_network_node_prefix ( #3761 )
2018-11-27 00:12:16 -08:00
Erwan Miran
d33434647b
Fix node selector for contiv etcd proxy ( #3765 )
2018-11-27 00:10:33 -08:00
Rong Zhang
02169e8f85
Upgrade kubernetes to 1.12.3 ( #3767 )
2018-11-26 23:22:15 -08:00
Aivars Sterns
b07e93e08b
Merge pull request #3754 from MiaoZhou/fix-aws-node-label-error
...
Fix AWS Node Labels Error
2018-11-27 09:09:54 +02:00
Andreas Krüger
bad886ca9b
Update defaults to match k8s 1.12 suggestions ( #3760 )
...
* Update defaults to match k8s 1.12 suggestions
* Test if Netchecker works with node ip instead of localhost
* Update defaults to ipvs and coredns
* Update defaults for kube_apiserver_insecure_port
* Update main.yaml
2018-11-26 15:36:39 -08:00
okamototk
967a042321
Add flag to deploy container engine manually. ( #3753 )
...
This feature was removed by PR#3061. But change flag manage_docker to deploy_container_engine.
2018-11-26 07:26:40 -08:00
Miao Zhou
a585318b1a
Fix Sync Container Permission ( #3752 )
...
When `ansible_user` is not root, using `-b` option.
And with `download_run_once` and `download_localhost` set `true`.
Ansible will executes `container_download | upload container images to nodes` task.
It uses rsync to upload images to `/tmp/release/container/`, but the
`container` directory owned by `root`.
2018-11-26 07:00:34 -08:00
Rong Zhang
07d2f1aa36
Add some warning information about deprecating non-kubeadm code ( #3759 )
2018-11-26 01:17:31 -08:00
Erwan Miran
b15e685a0b
sysctl related PodSecurityPolicy spec since 1.12 ( #3743 )
2018-11-26 00:13:51 -08:00
Miao Zhou
885c6cff71
Fix AWS Node Labels Error
...
Now the `kubespray-aws-inventory.py` script always set a node_labels key
to ansible_host.
When AWS instance did not set property labels, it would be an empty
string.
The TASK `Write kubelet config file (kubeadm or non-kubeadm)` will
failed with a msg:
`AnsibleUndefinedVariable: 'unicode object' has no attribute 'items'`.
2018-11-23 17:37:41 +08:00
okamototk
c5e425b02b
Support Metrics Server as addon ( #3560 ). ( #3563 )
...
* Support Metrics Server as addon (#3560 ).
* Update metrics server v0.3.1.
* Add metrics server test.
* Replace metrics server manifests with kubernetes/cluster/addons's.
* Modify metrics server manifests for kubespray.
* Follow PR#3558 node label node-role.kubernetes.io/master change
* Fix metrics server parameters base_metrics_server_... to metrics_server_...
* Fix too hard corded metrics_server_memory_per_node
* Add configurable insecure tls for metrics-apiservice
* Downloadable addon-resizer and extract parameter as variables
* Remove metrics server version from deployment name
* Metrics Server work when all masters has node role
* Download metrics-server and add-resizer container only on master
* ServiceAccount and ConfigMap is separated and fix application name
* Remove old metrics server clusterrole template
* Fix addon-resizer image specify
* Make InternalIP default for metrics_server_kubelet_preferred_address_types
Make InternalIP default because multiple preferrred address types does not work.
2018-11-23 00:36:21 -08:00
Egor
3fa81bb86e
Fix dns-autoscaler nodeAffinity: set to empty ( #3747 )
2018-11-22 05:29:09 -08:00
Egor
5daadc022d
Fix: nodeAffinity for coredns-deployment and kubedns-deployment ( #3746 )
2018-11-22 05:27:25 -08:00
Rong Zhang
0cfcd39d55
Switch to kubeadm deployment mode ( #3461 )
...
* Switch to kubeadm deployment mode
Discuss:https://github.com/kubernetes-incubator/kubespray/issues/3301
* Add non-kubeadm upgrage to kubeadm cluster
2018-11-21 01:35:40 -08:00
Aivars Sterns
7875c38023
Merge pull request #3663 from gfleury/patch-1
...
Update getting-started.md
2018-11-21 10:14:51 +02:00
Wong Hoi Sing Edison
edfec26988
cert-manager: Upgrade to 0.5.2 ( #3741 )
...
Upstream Changes:
- cert-manager 0.5.2 (https://github.com/jetstack/cert-manager/releases/tag/v0.5.2 )
Our Changes:
- Templates sync with upstream manifests
2018-11-20 05:13:01 -08:00
Matthew Mosesohn
daa290100c
Fix helper script to refer to admin.conf as relative path ( #3738 )
2018-11-19 18:28:51 -08:00
Rong Zhang
b4eb25197b
Merge pull request #3730 from elementyang/pr-docker-options
...
fix modify deprecated --graph flag
2018-11-20 10:23:16 +08:00
Matthew Mosesohn
ac00d23b80
Skip etcd upgrade steps in kubeadm because it is not used ( #3737 )
2018-11-19 06:29:58 -08:00
Danny Kulchinsky
9ae2eefb9a
Add resource-container flag to kube-proxy manifest ( #3519 )
...
* Add resource-container flag to kube-proxy manifest
* add resourceContainer: "" to kubeadm kube-proxy configs
2018-11-19 00:39:29 -08:00
Andreas Krüger
8c18f053aa
Fix DNS Autoscaler for coredns_dual deployment ( #3726 )
...
* Fix DNS Autoscaler for coredns_dual deployment
* Fix templating
* Fix templating again
2018-11-19 00:35:53 -08:00
Oleg Dolya
2aefa25448
fix args peer router ips and asns ( #3644 )
2018-11-19 00:34:05 -08:00
Andreas Krüger
6e01c1e377
Fix missing run_once ( #3733 )
2018-11-18 21:39:29 -08:00
Rong Zhang
3c6ee19785
Merge pull request #3731 from riverzhang/suse
...
Fix OpenSuse set hostname
2018-11-17 21:33:58 +08:00
rongzhang
0e2d3fb923
Fix OpenSuse set hostname
2018-11-17 20:41:07 +08:00
Zohar Mamedov
af5e05d08d
etcd_log_package_levels for /etc/etcd.env ( #3700 )
2018-11-16 23:59:40 -08:00
marcstreeter
c83bfc9df6
fix dns_prevent_single_point_failure
variable ( #3728 )
...
comparison that happens during `TASK [kubernetes-apps/ansible : Kubernetes Apps | Lay Down CoreDNS Template]` where the `dns-autoscaler` template is deployed causes coredns to fail deployment. The error is caused by the variable `dns_prevent_single_point_failure` where an integer is being compared with a string. The resulting error:
```bash
'>' not supported between instances of 'int' and 'str'
```
prevents successful deployment of CoreDNS.
The change makes the comparison happen between integers and allows CoreDNS to succeed.
2018-11-16 23:57:47 -08:00
elementyang
1ebb670141
fix modify deprecated --graph flag
2018-11-17 14:22:14 +08:00
Johnny Halfmoon
9d0786cbb0
cleaned up vagrantfile ( #3717 )
2018-11-16 15:28:29 +01:00
Johnny Halfmoon
53bde23a5e
fixed ansible include/import inheritance issue ( #3716 )
2018-11-16 04:33:23 -08:00
Ryler Hockenbury
187798086a
Tag win_nodes roles with master ( #3704 )
...
* Tag win_nodes roles with master
* Dummy change
2018-11-16 04:01:48 -08:00
Erwan Miran
1540bc9759
Fix patch type in kubectl patch for hostnameOverride ( #3725 )
2018-11-16 02:35:02 -08:00
Johnny Halfmoon
618ab93b42
added rpm caching for to docker repo ( #3718 )
2018-11-16 02:33:23 -08:00
Andreas Krüger
5ba67c55a2
Merge pull request #3721 from kubernetes-incubator/readme-fix
...
Update README with correct versions
2018-11-15 20:46:27 +01:00
Andreas Krüger
d8ad9aedad
Update README with correct versions
...
README contains wrong versions. Let's fix that.
2018-11-15 19:52:49 +01:00
Erwan Miran
3e6d0a50e8
Addition of the missing patch file hostnameOverride-patch.json from PR#3708 ( #3714 )
2018-11-15 10:37:57 -08:00
Matthew Mosesohn
ff09141a14
Retry kubeadm proxy and secondary master init tasks ( #3715 )
...
Due to suboptimal external loadbalancer configs, the LoadBalancer
might point to a downed kube-apiserver that is not set up yet.
2018-11-15 10:03:23 -08:00
Arslanbekov Denis
d188876a91
Added feature-gates flags in kubelet.env (for kubeadm) ( #3713 )
2018-11-15 10:01:53 -08:00
Andreas Krüger
6f6274d0d9
Update CoreDNS, KubeDNS and Autoscaler to newest templates ( #3711 )
...
* Update DNS Autoscaler to latest
* Update CoreDNS to latest
* Update KubeDNS to latest
* Add KubeDNS config map
* Fix filename
* Add missing selector to DNS Autoscaler
* Add missing tolerations
2018-11-15 09:52:12 -08:00
Evgeny Zislis
29ee581067
pin hvac version to 0.6.4 ( #3692 )
2018-11-15 02:08:33 -08:00
Andreas Krüger
17f07e2613
Enable DNS AutoScaler for CoreDNS ( #3707 )
...
* Enable AutoScaler for CoreDNS
* Only use one template for dns autoscaler
* Rename a few variables for replicas and minimum pods
* Rename a few variables for replicas and minimum pods
* Remove replicas to make autoscale work
* Cleanup kubedns-autoscaler as it has been renamed
2018-11-15 01:28:03 -08:00
Wong Hoi Sing Edison
9ebdf0e3cf
weave: Upgrade to 2.5.0 ( #3660 )
...
* weave: Upgrade to 2.5.0
Upstream Changes:
- weave 2.5.0 (https://github.com/weaveworks/weave/releases/tag/v2.5.0 )
- Adds support for Kubernetes `hostPort` mapping
- Adds support for Kubernetes `ipBlock` NetworkPolicy feature
Our Changes:
- Templates sync with upstream manifests
- Remove legacy nodePort fix
* BC for weave < 2.5.0
2018-11-14 23:38:51 -08:00
Andreas Krüger
730caa3d58
Add PriorityClasses on the last master. ( #3706 )
2018-11-14 15:59:20 -08:00
Mark Eisenblätter
7deb842030
calico-node: add prometheus annotations ( #3645 )
...
add prometheus annotations to calico-node if
calico_felix_prometheusmetricsenabled is enabled.
This will allow a kubernetes_sd to automaticly find the pods and start
scraping.
2018-11-14 15:01:35 -08:00
Jack Zhou
5f7d5e1e80
ansible: Fix version check in remove_node.yml ( #3628 )
2018-11-14 14:48:10 -08:00
Andreas Krüger
931c76e58f
Add DNS entries to node certs ( #3710 )
2018-11-14 13:58:17 -08:00
Erwan Miran
3fafa583d1
hostnameOverride on a per-node basis ( #3708 )
2018-11-14 09:37:53 -08:00
Ryler Hockenbury
d8e9b0f675
Netchecker version and namespace ( #3705 )
...
* Revert netchecker image and version
* Create namespace for netchecker
* Remove extra slashes
2018-11-14 09:27:45 -08:00
Andreas Krüger
846c7a26e8
Merge pull request #3582 from LinuxGit/Louis/gen_tags-script
...
Fix gen_tags.sh script
2018-11-14 09:42:19 +01:00
Dann
98d766c68e
Moves apiserver port to bindPort when using controlPlaneEndpoint ( #3449 )
2018-11-14 00:23:30 -08:00
Mateus Caruccio
087b7fa38e
Set node labels from AWS instance tag ( #3544 )
...
Set kubernetes node labels from a given comma-separated list of `key=value` from AWS instance tag `kubespray-node-labels`.
2018-11-14 00:21:56 -08:00
Mateus Caruccio
92877e8bf8
Avoid gather_facts on scale.yml ( #3631 )
...
Use case is when kubespray runs from unprivileged user without sudo permission.
2018-11-13 13:47:21 -08:00
Bort Verwilst
d3ef41b603
Upgrade helm from 2.9 to 2.11 ( #3638 )
2018-11-13 11:24:29 -08:00
Arnaud MAZIN
633bfa7ebc
Bring static tokens and user back to 1.12 ( #3593 )
2018-11-13 10:25:59 -08:00
Egor
13af4c1f40
remove-node: fix assert for ansible_version ( #3703 )
2018-11-13 16:18:31 +01:00
Andreas Krüger
afc3f7dce4
Create certificates for each node too ( #3698 )
2018-11-13 07:10:59 -08:00
Ryler Hockenbury
e8901a2422
Apply linux node selector to coreDNS deployment ( #3688 )
...
* Apply linux node selector to coreDNS deployment
* Remove comment before linux node selector on manifests
* mend
2018-11-13 04:54:15 -08:00
Wilmar den Ouden
c888de8b38
fix: Coredns tag wasn't updated in #3619 ( #3634 )
2018-11-13 00:30:29 -08:00
Miao Zhou
fefa1670a6
fix calico_version wrong get ( #3694 )
...
the ':' makes wrong return of calico_version after the calicoctl downloaded && before the cluster is up
2018-11-12 07:35:21 -08:00
Antoine Legrand
589d22da0b
Update ha-mode.md ( #3696 )
...
* Update ha-mode.md
2018-11-12 11:49:23 +01:00
Antoine Legrand
3dcb914607
Remove Vault ( #3684 )
...
* Remove Vault
* Remove reference to 'kargo' in the doc
* change check order
2018-11-10 08:51:24 -08:00
Bily Zhang
b2b421840c
Fix some typos ( #3690 )
...
Signed-off-by: mooncake <xcoder@tenxcloud.com>
2018-11-10 15:53:58 +01:00
Egor
5c7eef70b4
Fix kube-router annotations: add conditions ( #3670 )
2018-11-09 08:15:27 -08:00
RuriRyan
c2710899ed
Fixes network restart for Ubuntu Bionic Beaver ( #3600 )
...
As Ubuntu Bionic Beaver uses systemd-networkd the step fails
if it tries to restart networking, as it is nonexistent.
2018-11-09 08:13:57 -08:00
Erwan Miran
b997912ebe
Fix dead link to exmaples in vsphere.md ( #3673 )
2018-11-09 02:32:25 -08:00
Igor Ivanov
e5d07f3a3d
use force umount when reset cluster ( #3672 )
...
reset role hang and can't umount PersistenceVolume (ceph cluster)
2018-11-09 02:30:55 -08:00
Thomas Nys
fb9155c450
Add the option to create a DNS record for bastion deployed to Azure ( #3675 )
...
This is rather convenient if you want to configure exceptions on a
company firewall.
2018-11-09 11:30:35 +01:00
Thomas Nys
dc3195310c
Add the option to add multiple ssh public keys for Azure infrastructure ( #3674 )
...
This give users the option to define multiple ssh public keys when
deploying the base infrastructure on Azure.
2018-11-08 15:25:07 +01:00
Giacomo Longo
9f7c2b08a5
Idempotency fixes to roles/pre-upgrade ( #3497 )
2018-11-07 16:31:29 -08:00
Erwan Miran
a6932b6b81
Install ipvsadm when kube_proxy_mode is ipvs ( #3548 )
2018-11-07 14:04:11 -08:00
Erwan Miran
77d705ca9f
cluster_name is to be set in initConfiguration too ( #3661 )
2018-11-07 12:41:11 -08:00
Erwan Miran
89ac53acd7
_ansible_item_label is not necessarily set ( #3646 )
2018-11-07 12:39:44 -08:00
Erwan Miran
1e22c83f0f
kube_override_hostname must be in kubernetes/master role defaults ( #3647 )
2018-11-07 12:38:19 -08:00
Erwan Miran
1ad1e80ae3
Checking new CA key presence is not relevant to determine if kubeadm has already run ( #3653 )
2018-11-07 11:46:11 -08:00
George Fleury
bc785196c8
Update getting-started.md
2018-11-07 17:18:03 +01:00
Anton Patsev
dfdf530723
Fix work yum in Install packages requirements for bootstrap ( #3630 )
...
* Fix Failure talking to yum: Cannot find a valid baseurl for repo: base/7/x86_64 if Install packages in CentOS using proxy
* Add proxy to /etc/yum.conf if http_proxy is defined
2018-11-06 22:44:37 -08:00
Lear Li
33f33a7358
Fix docker-storage was not found issue ( #3584 )
2018-11-06 17:50:14 -08:00
Kuldip Madnani
113dd2146a
Added some minor changes to the docker orphan clean up process. ( #3657 )
...
* Added changes to clean up orphan containers and reload docker & kubelet directories.
* Added new files for cleaning up orphans and docker & kubelet directories
* Added new lines at the end of these files
* removed the trailing whitespaces from main.yml and clean-up.yml
* Updated as per the review comments
* Updated as per the review comments
* Removed service_facts and package_facts because they are not supported in ansible 2.4.0
* Corrected yaml syntax errors
* Removed the use of json_query filter and utilized selectattr
* Removed trailing spaces
* Changed the default value of docker_clean_up to false
* Added Changes to only include cleanup-docker-orphans.sh
* Reverted back changes done inside handler.
* Removed trailing spaces and made default value of docker_orphan_clean_up as true
* Reverted the default value of docker_orphan_clean_up as false
* Made the docker clean up as drop in
* Made the docker clean up as drop in
* Reverted the value of boolean docker_orphan_clean_up to false
* Converted ExecStop to ExecSTartPost. Removed the live restore check from the orphan script
2018-11-06 16:50:19 -08:00
Erwan Miran
14c2df0418
Replace raw module with shell to avoid warning ( #3652 )
2018-11-06 11:07:11 -08:00
Wilmar den Ouden
b316518864
Bump coredns to 1.2.6 ( #3641 )
2018-11-06 05:58:20 -08:00
Rong Zhang
612663667c
Merge pull request #3639 from holmsten/ops-readme-capitalisation
...
Fix company name capitalisation
2018-11-06 15:00:08 +08:00
Bily Zhang
6c14f35f00
Fix some typos ( #3636 )
...
Signed-off-by: mooncake <xcoder@tenxcloud.com>
2018-11-05 15:22:16 -08:00
Andreas Holmsten
289be0a0db
Fix capitalisation
2018-11-05 12:47:23 +01:00
Aivars Sterns
a4de023c29
Merge pull request #3635 from Kusanagi9999/Multus-README-fix
...
Move Multus under network plugin section
2018-11-04 15:55:18 +02:00
Kusanagi9999
e3fdd4a0ac
Move Multus under network plugin section
2018-11-04 04:52:22 -08:00
Louis Woods
bc9e14a762
Adds support for Multus (multiple interfaces) CNI plugin ( #3166 )
...
* Adds support for Multus (multiple interfaces) CNI plugin
Multus is a latin word for "Multi". As the name suggests, it acts as a
Multi plugin in Kubernetes and provides multiple network interface
support in a pod. Multus uses the concept of invoking delegates by
grouping multiple plugins into delegates and invoking them in the
sequential order of the CNI configuration file provided in json format.
* Change CNI version (0.1.0->0.3.1) of Contiv to be compatible with Multus
2018-11-04 01:07:38 -08:00
Aivars Sterns
3c5f20190f
Merge pull request #3629 from holmsten/terraform-ops-worker-allowed-ports
...
[contrib/terraform/openstack] Allow user defined port ranges for worker security group
2018-11-03 17:52:00 +02:00
ankitcharolia
9c83551a0e
add certificate authority file ( #3433 )
2018-11-02 08:27:53 -07:00
Rong Zhang
99c139dd5a
Merge pull request #3621 from elementyang/pr-check-docker-packages
...
fix modify the way of the command 'yum remove xxx', e.g. docker-selin…
2018-11-02 18:48:33 +08:00
Andreas Holmsten
6c34745958
Add worker_allowed_ports
...
* [contrib/terraform/openstack] Add worker_allowed_ports
Allow user to define in terraform template which ports and remote
IPs that are allowed to access worker nodes. This is useful when you
don't want to open up whole NodePort range to the outside world, or
ports outside NodePort range.
2018-11-01 17:48:37 +01:00
Matthew Mosesohn
2ba4e9bda5
Skip most of kubernetes/preinstall role during late DNS config ( #3627 )
...
When using resolvconf_mode host_resolvconf, there is an early DNS
config stage where Kubernetes cluster DNS is not injected for host
DNS intially. Later, the cluster DNS is enabled, but we do not
need to run every task from the kubernetes/preinstall role.
2018-11-01 08:08:50 -07:00
Robert Liotta
2a00c931e4
Added the missing environment for proxy for get_url ( #3603 )
...
* Added the missing environment for proxy for get_url
* Update upgrade.yml
* Fixed spaces
* Fixed spaces
* Update upgrade.yml
2018-11-01 06:20:57 -07:00
Wong Hoi Sing Edison
1e6ad5acb6
Fixup #3595 : coredns: Upgrade to v1.2.5 ( #3619 )
...
Upstream Changes:
- coredns v1.2.5 (https://github.com/coredns/coredns/releases/tag/v1.2.5 )
NOTE:
- Switch image repo to https://hub.docker.com/r/coredns/coredns/ (https://github.com/kubernetes-incubator/kubespray/pull/3595#issuecomment-433962973 )
2018-11-01 06:05:17 -07:00
Matthew Mosesohn
bc74a37696
Calculate etcd client cert serial for appropriate groups ( #3605 )
...
Standalone etcd nodes do not generate node-$hostname certs and do
not need this serial calculated.
2018-11-01 05:50:26 -07:00
Aivars Sterns
0cb326b10f
Merge pull request #3624 from xichengliudui/fix181101
...
Correct the wrong words
2018-11-01 09:49:05 +02:00
xichengliudui
4daa9aa443
Correct the wrong words
2018-10-31 22:42:05 -04:00
Aivars Sterns
667364143c
Merge pull request #3623 from yeya24/patch-1
...
fix typo doesnt -> doesn't
2018-10-31 15:30:16 +02:00
Ye Ben
d8b357ce49
fix typo doesnt -> doesn't
...
fix typos in line 114 and 116: doesnt -> doesn't
2018-10-31 21:27:58 +08:00
Antoine Legrand
479d0e858d
Add playbook to install mitogen ( #3622 )
2018-10-31 11:52:47 +01:00
Matthew Mosesohn
152c15b19f
Disable gather facts when checking ansible version ( #3615 )
2018-10-31 03:19:17 -07:00
Wong Hoi Sing Edison
ce5a34d86c
ansible: Upgrade to 2.7.1 ( #3618 )
...
Only exclude buggy Ansible v2.7.0 (https://github.com/ansible/ansible/issues/46600#issuecomment-433863628 )
Fixup #3589
2018-10-31 03:01:19 -07:00
AdamDang
b8bafb2893
Fix a typo in dind/README.md ( #3620 )
...
appropiate->appropriate
2018-10-31 11:01:13 +01:00
Yumo Yang
5da18854a3
fix modify the way of the command 'yum remove xxx', e.g. docker-selinux and docker-engine-selinux packages
2018-10-31 17:16:35 +08:00
Dmitriy Zinin
d269e7f46c
cilium v1.3.0 ( #3564 )
2018-10-31 00:42:56 -07:00
Anton Patsev
8c636f67af
Added support proxy to 'Install pip for bootstrap' ( #3609 )
2018-10-31 00:35:57 -07:00
Louis
a84508d6b9
remove deprecated parameters of blockinfile module ( #3581 )
2018-10-30 05:56:58 -07:00
Rong Zhang
22c234040e
Merge pull request #3608 from xichengliudui/fix181030
...
Correct the wrong word
2018-10-30 20:52:02 +08:00
Rong Zhang
4a1be18361
Merge pull request #3614 from liyongxin/master
...
typo fix about officially
2018-10-30 20:41:30 +08:00
Yongxin Li
3b6df70f11
typo fix about officially
...
Signed-off-by: Yongxin Li <yxli@alauda.io>
2018-10-30 20:38:37 +08:00
Rong Zhang
48390d37c2
Merge pull request #3613 from mirake/fix-typos
...
Fix some typos
2018-10-30 20:23:44 +08:00
Rui Cao
0d3beb4e5a
Fix some typos
...
Signed-off-by: Rui Cao <ruicao@alauda.io>
2018-10-30 20:07:52 +08:00
Andreas Krüger
6e192d487b
Merge pull request #3604 from Intermax-Cloudsourcing/fix-coredns
...
Revert "CoreDNS v1.2.5 (#3595 )"
2018-10-30 10:04:51 +01:00
xichengliudui
306c61a968
Remove duplicate words
2018-10-30 04:51:36 -04:00
Ted Wexler
58b4fea2b1
Add an 'access_ip' for openstack resources to the terraform inventory builder script ( #3592 )
...
* Add an 'access_ip' for openstack resources to the terraform inventory builder script
* Update Openstack README
* Only use ipv4
* If there's a floating IP assigned to an openstack instance, use that for access_ip
2018-10-29 19:28:23 +01:00
wilmardo
2149bfbc5b
Revert "CoreDNS v1.2.5 ( #3595 )"
...
This reverts commit 8ba6b601b0
.
2018-10-29 16:33:52 +01:00
Bart Laarhoven
0acb823d96
Distribute node etcd certificates like it's done in kubernetes/secrets ( #3486 )
...
* do it like in kubernetes/secrets
* fix indentation
* processed comments
* missed one, sorry
* trailing space fix
2018-10-29 11:45:32 +01:00
Dmitriy Zinin
8ba6b601b0
CoreDNS v1.2.5 ( #3595 )
2018-10-29 03:20:03 -07:00
Aivars Sterns
06f981ffed
Merge pull request #3601 from xichengliudui/fix181029
...
Fix typo
2018-10-29 12:12:45 +02:00
xichengliudui
4a4a3f759c
Fix typo
2018-10-29 06:10:33 -04:00
Yumo Yang
8fbebf4e83
fix readme.md sample/* ( #3541 )
2018-10-29 11:04:51 +01:00
Yumo Yang
8371beb915
fix bootstrap os_family error in multi-plantform ( #3594 )
2018-10-29 09:37:30 +01:00
Rong Zhang
b39b32a48c
Fix set coreos hostname failed ( #3599 )
...
need set hostname by kubeadm
2018-10-29 00:59:25 -07:00
Rong Zhang
dbe99b59a7
Upgrade kubernetes to v1.12.2 ( #3597 )
2018-10-29 00:58:24 -07:00
Aivars Sterns
3cc413fe9a
Merge pull request #3598 from AdamDang/patch-2
...
Update vsphere.md
2018-10-28 12:39:20 +02:00
AdamDang
59d0138bcd
Update vsphere.md
2018-10-28 16:38:05 +08:00
Rong Zhang
801bbcbc63
Merge pull request #3591 from AdamDang/patch-1
...
Fix some typos
2018-10-26 22:58:10 +08:00
AdamDang
4560ff7386
Update vars.md
2018-10-26 21:57:04 +08:00
AdamDang
477841d8c0
Update ha-mode.md
2018-10-26 21:55:54 +08:00
AdamDang
a89dc49c52
Update ansible.md
2018-10-26 21:49:57 +08:00
Antoine Legrand
90d8f7aa6a
Assert if ansible 2.7 is used ( #3589 )
2018-10-26 00:29:21 -07:00
Louis
abc1421def
Fix gen_tags.sh script
2018-10-25 02:16:48 +08:00
Rong Zhang
7abd4eeafd
Merge pull request #3578 from LinuxGit/Louis/fix-typo
...
fix typo
2018-10-24 13:45:31 +08:00
Aivars Sterns
27c79088e6
Merge pull request #3556 from Miouge1/routerless-master
...
[contrib/terraform/openstack] Add support for router less deployments
2018-10-24 08:33:33 +03:00
Aivars Sterns
ce2a3a80db
Merge pull request #3577 from fritchie/master
...
Add bin_dir to kubectl version check
2018-10-24 08:33:03 +03:00
Erwan Miran
79bf74e90f
Offline deployment: PyPi repo ( #3542 )
2018-10-23 22:22:09 -07:00
Erwan Miran
4f12ba00d1
Fix calico peering with router(s) ( #3547 )
2018-10-23 22:19:50 -07:00
Louis
93104d9224
fix typo
2018-10-24 11:39:15 +08:00
Frank Ritchie
b5f4a79365
Add bin_dir to kubectl version check
2018-10-23 15:51:17 -04:00
Matthew Mosesohn
7e84de2ae1
Purge /root/.kube/config when migrating to kubeadm ( #3566 )
2018-10-23 05:09:11 -07:00
Wong Hoi Sing Edison
06e1f81801
ingress-nginx: Upgrade to 0.20.0 ( #3565 )
...
Upstream Changes:
- ingress-nginx 0.20.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.20.0 )
Our Changes:
- Sync templates with upstream changes
2018-10-23 05:08:03 -07:00
Egor
ccc3f89060
Add kube-router annotations ( #3533 )
2018-10-21 00:35:52 -07:00
Maxim Makarov
8a17de327e
Not necessary run on Nginx proxy all cpu cores ( #3559 )
2018-10-20 13:56:53 -07:00
Erwan Miran
3b787123e3
Fix tasks to avoid ansible warning about raw module environment ( #3545 )
2018-10-20 07:13:54 -07:00
Matthew Mosesohn
127969d65f
Align node-role value for kubeadm compatibility ( #3558 )
...
kubeadm sets node label node-role.kubernetes.io/master=''
and this is not configurable. We should use it everywhere.
2018-10-20 07:12:54 -07:00
Andreas Krüger
4b711e29ef
Merge pull request #3557 from Zefool/patch-1
...
Fix typo
2018-10-20 16:12:02 +02:00
Antoine Legrand
2a3aa591e0
Download role ( #3553 )
...
* codestyle tests
* Download destination can be different than local_release_dir
2018-10-20 13:56:55 +02:00
Aivars Sterns
56cafc3fb3
Merge pull request #3550 from Kusanagi9999/fix-kube-router-docs-link
...
Fix missing s in link to kube-router docs
2018-10-19 20:17:55 +03:00
Zefool
b434456f54
Fix typo
2018-10-19 17:12:37 +02:00
Kusanagi9999
6923d350f4
Fixed docker version comment in README.md
2018-10-19 06:29:20 -07:00
Maxime Guyot
38beab8fe8
Add support for router less deployments
2018-10-19 12:39:34 +02:00
Matthew Mosesohn
4bdd0ce417
Allow kubeadm master untaint to fail ( #3549 )
2018-10-19 00:38:12 -07:00
Kusanagi9999
e5c4e1ecc3
Fix missing s in link to kube-router docs
2018-10-18 14:55:10 -07:00
Aivars Sterns
a48131f1e1
Merge pull request #3543 from Miouge1/openstack-public-clouds
...
[contrib/terraform/openstack] Add list of know working OpenStack clouds
2018-10-18 13:23:26 +03:00
Miouge1
6e34918b52
Add list of know working OpenStack clouds
2018-10-18 11:04:04 +02:00
JuanJo Ciarlante
66fddb2d52
[jjo] upgrade kube-router to v0.2.1 ( #3535 )
...
kube-router v0.2.1 highlights from changelog:
- IPv6 WIP but pretty close to full working functionality
- fully support network policy semantics with addition of support for
ipblock and except
2018-10-18 00:09:42 -07:00
Erwan Miran
87193fd270
Fix ansible syntax to avoid ansible warnings (one more) ( #3536 )
...
* warning on meta flush_handlers
* avoid rm
* avoid "Module remote_tmp /root/.ansible/tmp did not exist and was created with a mode of 0700, this may cause issues when running as another user. To avoid this, create the remote_tmp dir with the correct permissions manually" warning on subsequent tasks using blockinfile
* is match
2018-10-17 12:27:11 -07:00
Andreas Krüger
52b5309385
Merge pull request #3532 from jjo/jjo-improve-dind
...
[jjo] improve contrib/dind/run-test-distros.sh via spec files
2018-10-17 09:47:16 +02:00
Mateus Caruccio
7f4e048052
kubespray-aws-inventory.py ported to python 3 ( #3528 )
2018-10-16 23:53:39 -07:00
JuanJo Ciarlante
7fe7357154
improve contrib/dind/README.md
2018-10-16 21:25:41 -03:00
JuanJo Ciarlante
635261eb12
[jjo] improve dind run-test-distros.sh via spec files
2018-10-16 21:25:41 -03:00
Samina Fu
5a5cf15c04
Add clear ipvs virtual server table when reset k8s ( #3530 )
2018-10-16 16:29:43 -07:00
Erwan Miran
4d2b6b71f2
Fix contiv api certificate generation ( #3531 )
2018-10-16 15:34:33 -07:00
Erwan Miran
7bec169d58
Fix ansible syntax to avoid ansible deprecation warnings ( #3512 )
...
* failed
* version_compare
* succeeded
* skipped
* success
* version_compare becomes version since ansible 2.5
* ansible minimal version updated in doc and spec
* last version_compare
2018-10-16 15:33:30 -07:00
Erwan Miran
bfd4ccbeaa
Calico: Ability to define global peers ( #3493 )
2018-10-16 15:32:26 -07:00
Rong Zhang
76fe84fe93
Use imageRepository instead of the unifiedControlPlaneImage ( #3484 )
2018-10-16 07:26:04 -07:00
刘旭
cf4dd645a7
fix --etcd-servers-overrides invalid ( #3470 )
2018-10-16 07:25:03 -07:00
JuanJo Ciarlante
a5edd0d709
[jjo] add kube-router support ( #3339 )
...
* [jjo] add kube-router support
Fixes cloudnativelabs/kube-router#147 .
* add kube-router as another network_plugin choice
* support most used kube-router flags via
`kube_router_foo` vars as other plugins
* implement replacing kube-proxy (--run-service-proxy=true) via
`kube_proxy_mode: none`, verified in a _non kubeadm_enabled_
install, should also work for recent kubeadm releases via
`skipKubeProxyInstall: true` config
* [jjo] address PR#3339 review from @woopstar
* add busybox image used by kube-router to downloads
* fix busybox download groups key
* rework kubeadm_enabled + kube_router_run_service_proxy
- verify it working ok w/the kubeadm_enabled and
kube_router_run_service_proxy true or false
- introduce `kube_proxy_remove` fact, to decouple logic
from kube_proxy_mode (which affects kubeadm configmap
settings, thus no-good to ab-use it to 'none')
* improve kube-router.md re: kubeadm_enabled and kube_router_run_service_proxy
* address @woopstar latest review
* add inventory/sample/group_vars/k8s-cluster/k8s-net-kube-router.yml
* fix kube_router_run_service_proxy conditional for kube-proxy removal
* fix kube_proxy_remove fact (w/ |bool), add some needed kube-proxy tags on my and existing changes
* update kube-router tolerations for 1.12 compatibility
* add PriorityClass to kube-router DaemonSet
2018-10-16 07:15:05 -07:00
anarcat
c33e08c3fa
show FQDN first in /etc/hosts ( closes : #3521 ) ( #3522 )
...
The hosts(5) manpage clearly states that the first entry is the
"canonical name", or FQDN (Fully-Qualified Domain Name):
IP_address canonical_hostname [aliases...]
By using the alias as a first entry, `hostname -f` does not return the
correct domain which breaks all sorts of unrelated functionality (it
has impact over email server configuration, for example).
2018-10-16 03:55:55 -07:00
Aivars Sterns
9b773185c3
Merge pull request #3184 from oracle/new_oci_controls
...
Add new OCI cloud controls
2018-10-16 11:29:13 +03:00
Andreas Krüger
b1974ab3cf
Merge pull request #3515 from SataQiu/fix-20181012
...
fix typo
2018-10-16 09:11:08 +02:00
Erwan Miran
b4e2b85745
Replace shell with command in order to allow the task to fail when openssl x509 does return zero ( #3516 )
2018-10-15 23:48:12 -07:00
Erwan Miran
fcd8d850dc
Fix ansible syntax to avoid ansible warnings (again) ( #3509 )
...
* Fix ansible syntax to avoid ansible warnings (again)
* warn: false on tar -cfz
* wrong placement of warn:false
2018-10-15 23:47:04 -07:00
Erwan Miran
6549b8f8ae
Ability to define the asNumber on a per node basis when route reflectors are not used in order to peer directly with routers ( #3492 )
2018-10-15 23:44:49 -07:00
Rong Zhang
1ea7ec3189
Fix nginx_config_dir value not defined when use reset.yml ( #3524 )
2018-10-15 01:46:55 -07:00
JuanJo Ciarlante
4077934519
[jjo] add DIND support to contrib/ ( #3468 )
...
* [jjo] add DIND support to contrib/
- add contrib/dind with ansible playbook to
create "node" containers, and setup them to mimic
host nodes as much as possible (using Ubuntu images),
see contrib/dind/README.md
- nodes' /etc/hosts editing via `blockinfile` and
`lineinfile` need `unsafe_writes: yes` because /etc/hosts
are mounted by docker, and thus can't be handled atomically
(modify copy + rename)
* dind-host role: set node container hostname on creation
* add "Resulting deployment" section with some CLI outputs
* typo
* selectable node_distro: debian, ubuntu
* some fixes for node_distro: ubuntu
* cpu optimization: add early `pkill -STOP agetty`
* typo
* add centos dind support ;)
* add kubespray-dind.yaml, support fedora
- add kubespray-dind.yaml (former custom.yaml at README.md)
- rework README.md as per above
- use some YAML power to share distros' commonality
- add fedora support
* create unique /etc/machine-id and other updates
- create unique /etc/machine-id in each docker node,
used as seed for e.g. weave mac addresses
- with above, now netchecker 100% passes WoHooOO!
🎉 🎉 🎉
- updated README.md output from (1.12.1, verified
netcheck)
* minor typos
* fix centos node creation, needs earlier udevadm removal to avoid flaky facts, also verified netcheck Ok \o/
* add Q&D test-distros.sh, back to manual /etc/machine-id hack
* run-test-distros.sh cosmetics and minor fixes
* run-test-distros.sh: $rc fix and minor formatting changes
* run-test-distros.sh output cosmetics
2018-10-15 09:44:02 +02:00
Julien Senon
fac8aaa44e
Update template for bastion ( #3523 )
...
Update template to have bastion section
2018-10-15 09:42:22 +02:00
Kuldip Madnani
fd422a0646
Add Priority class for tiller and fix tiller override. ( #3494 )
...
* Added Priority class to tiller installation and also fixed tiller override implementation.
* Added changes to handle priority classes separately in tiller, instead of using the variable tiller_override
2018-10-12 11:46:39 -07:00
Kuldip Madnani
d7bb4d954a
Handling docker clean up during docker upgrade and docker config changes. ( #3321 )
...
* Added changes to clean up orphan containers and reload docker & kubelet directories.
* Added new files for cleaning up orphans and docker & kubelet directories
* Added new lines at the end of these files
* removed the trailing whitespaces from main.yml and clean-up.yml
* Updated as per the review comments
* Updated as per the review comments
* Removed service_facts and package_facts because they are not supported in ansible 2.4.0
* Corrected yaml syntax errors
* Removed the use of json_query filter and utilized selectattr
* Removed trailing spaces
* Changed the default value of docker_clean_up to false
* Added Changes to only include cleanup-docker-orphans.sh
* Reverted back changes done inside handler.
* Removed trailing spaces and made default value of docker_orphan_clean_up as true
* Reverted the default value of docker_orphan_clean_up as false
* Made the docker clean up as drop in
* Made the docker clean up as drop in
* Reverted the value of boolean docker_orphan_clean_up to false
2018-10-12 10:29:51 -07:00
Loic Gouarin
36322901a6
fix kube-controller-manager config with openstack-cacert ( #3435 )
2018-10-12 06:39:58 -07:00
Oz N Tiram
31d8fc086b
Specify that the cluster.yml playbook should run as root ( #3474 )
...
* Specify that the cluster.yml playbook should run as root
This is a possible fix for #3388 .
The following examples show the option `-b` too:
https://kubernetes.io/docs/setup/custom-cloud/kubespray/
https://github.com/kubernetes-incubator/kubespray/blob/master/docs/getting-started.md#starting-custom-deployment
* Update invocation to include specific root user
* Update comment text according to suggestions
2018-10-12 02:29:01 -07:00
SataQiu
9ca583d984
fix typo
2018-10-12 15:53:30 +08:00
Anupam Basak
3ce933051a
calico CALICO_IPV4POOL_IPIP overriding variable ( #3507 )
2018-10-12 00:09:36 -07:00
Rui Cao
3b750cafc1
Fix some typos ( #3510 )
...
Signed-off-by: Rui Cao <ruicao@alauda.io>
2018-10-11 08:18:22 -07:00
Johann Queuniet
1911fe5ca8
fix nginx proxy configuration conflicts ( #3489 )
...
* Allow configuration of nginx proxy config path
* Fix the internal nginx configuration location
Signed-off-by: Johann Queuniet <contact@lordran.net>
2018-10-11 06:33:18 -07:00
Andreas Krüger
2117e8167d
Update pre-install verify settings with network checks and etc. ( #3504 )
...
* Update pre-install verify settings with network checks and etc.
* Remove upstream dns server check. It's bogus
2018-10-11 06:28:21 -07:00
Antoine Legrand
c66d1ad6cb
Update scale.yml ( #3511 )
2018-10-11 14:08:56 +02:00
IgLiv
bd0383a4e3
Update vsphere.md ( #3467 )
2018-10-11 02:43:25 -07:00
Erwan Miran
dd5327ef9e
Fix ansible syntax to avoid ansible warnings ( #3499 )
2018-10-11 00:45:00 -07:00
Andreas Krüger
cdce8c81da
Update CoreDNS templates to newest version and fix kubedns-autoscaler ( #3483 )
...
* Update CoreDNS templates to newest version
* Add watch to ClusterRole. Fixes #3460
2018-10-11 00:12:58 -07:00
Giacomo Longo
3f786542d3
Automatically infer bootstrap_os ( #3498 )
...
* Automatically infer bootstrap_os
* Rename bootstrap os to os_family
2018-10-10 23:32:10 -07:00
LiuDui
e813b26963
Remove excess Spaces ( #3452 )
2018-10-10 19:28:39 -07:00
Pierluigi Lenoci
abe711dcb5
Missing [all] sections inside the sample ( #3500 )
...
* Missing [all] sections inside the sample
* Update hosts.ini
2018-10-10 21:37:47 +02:00
pastushenko
b35a9fcb04
#3475 - make dnsmasq to send queries to all servers in upstream. Make… ( #3481 )
...
* #3475 - make dnsmasq to send queries to all servers in upstream. Make dnsmasq config file customizable.
* Code style fixes. Return current behaviour for dnsmasq strict-order flag.
2018-10-09 23:29:06 -07:00
Antoine Legrand
c27a91f7f0
Split deploy steps in separate playbooks: part1 ( #3451 )
...
* Fix bootstrap_os/ubuntu idempotency
* Update bastion role
* move container_engine in sub-roles
* requires ansible 2.5
* ubuntu18 as first CI job
2018-10-09 19:14:33 -07:00
Erwan Miran
2ab2f3a0a3
Ability to define SSL certificates duration and SSL key size ( #3482 )
...
* Ability to specify ssl certificate duration and ssl key size - etcd/secrets
* Ability to specify ssl certificate duration and ssl key size - helm/contiv + fix contiv missing copy certs generation script
2018-10-09 04:43:30 -07:00
okamototk
c825f4d180
Untaint master when it has node role ( #3466 )
2018-10-09 01:40:43 -07:00
Andreas Krüger
7e195b06a6
Fix DNS loop when resolvconf_mode is set to host_resolvconf ( #3390 )
...
* Fix DNS loop when resolvconf_mode is set to host_resolvconf
* Make sure upstream_dns_servers is defined when using resolvconf_mode == 'host_resolvconf'
* Only set upstream dns servers on KubeDNS and CoreDNS if they are defined
* Only set upstream dns servers on KubeDNS and CoreDNS if they are defined
2018-10-08 07:08:51 -07:00
Dylan
30132d8c35
Removed hostname truncation. ( #3409 )
2018-10-08 05:14:01 -07:00
Giacomo Longo
0d89db5141
Split Vagrantfile Ubuntu versions into 1604 and 1804 ( #3440 )
...
Split Vagrantfile Ubuntu versions into 1604 and 1804 (#3440 )
2018-10-08 12:40:20 +02:00
Matthew Mosesohn
4b7d59224d
Fix tag based deploy of apps by skipping kubeadm dns tasks ( #3462 )
2018-10-08 01:22:57 -07:00
SataQiu
72157a7514
fix typo: remove redundant space ( #3429 )
2018-10-08 01:21:45 -07:00
Rong Zhang
4f51607145
Upgrade kubernetes to v1.12.1 ( #3463 )
...
https://github.com/kubernetes/kubernetes/issues/69214
2018-10-07 13:33:13 -07:00
Chad Swenson
6602760a48
Support multiple local volume provisioner StorageClasses ( #3450 )
...
- Local Volume StorageClass configuration is now manged by `local_volume_provisioner_storage_classes`, a list of maps that specifies local storage classes with `name` `host_dir` and `mount_dir` keys per entry
- Tasks and templates updated to loop through local volume storage classes
- Previous defaults for path/class names were not changed
- Fixed an issue where a `kubernetes/preinstall` was creating directories inconsistently with the `kubernetes-apps/external_provisioner/local_volume_provisioner` task
2018-10-05 05:52:25 -07:00
Erwan Miran
9232261665
serviceaccounts is required in resources list of cluster role ( #3455 )
2018-10-04 11:32:37 -07:00
Rong Zhang
af97febb04
Upgrade kubernetes to v1.12.0 ( #3410 )
...
* Upgrade kubernetes to v1.12.0
Use kubeadm v1alpha3 config
* Upgrade coredns and etcd
* Upgrage docker to 18.06
2018-10-04 02:05:55 -07:00
Aivars Sterns
c818dc1ce8
Merge pull request #3427 from EppO/patch-1
...
Add note to README about offline environments
2018-10-04 09:27:25 +03:00
Tupin Laurent
05dabb7e7b
Fix Bionic networking restart error #3430 ( #3431 )
2018-10-02 03:10:52 -07:00
Florent Monbillard
ad50f376a5
Add note about offline environments
...
Internet access is not mandatory as long as the user configures all container image repositories to point to internal container registries, in case of on-premises installation with firewall rules preventing direct Internet access.
2018-10-01 09:50:48 -04:00
okamototk
66e304c41b
Fixed Ubuntu 18.04's docker version( fixes #3424 ). ( #3425 )
2018-10-01 04:26:51 -07:00
LiuDui
192f7967c9
Remove excess space ( #3421 )
2018-10-01 00:09:45 -07:00
SataQiu
f67d82a9db
fix typo: delete duplicate words ( #3422 )
2018-10-01 00:07:25 -07:00
Luke Seelenbinder
3cfbc1a79a
Add Pod IP to Flannel manifest. ( #3379 )
2018-10-01 00:06:13 -07:00
rboyapat
d9f495d391
Fix the dic iteration method in the kubelet template ( #3415 )
...
* Fix the jinja expression for openstack_tenant_id
OS_PROJECT_ID is obsolete in keystone v3 and jinja expression
doesn't set openstack_tenant_id as expected because of
undefined env var. Fixed the expression.
* Fix the dic iteration method in the kubelet template
Kubelet template rendering errors when additional Node lables are
added and using Python3. Update the method to be compatible to both
python2/3
Node lables doesn't work
2018-09-30 05:10:12 -07:00
SataQiu
71f6c018ce
fix typo: remove repeated words(is) ( #3419 )
2018-09-29 21:04:43 -07:00
LiuDui
0401f4afff
remove the redundant space ( #3420 )
2018-09-29 21:03:27 -07:00
Mikael Berthe
b4989b5a2a
Fix netcheck agent/server image variable names ( #3417 )
...
According to the documentation, container images are described
by vars like `foo_image_repo` and `foo_image_tag`.
The variables netcheck_{agent,server}_{img_repo,tag} do not
follow that convention.
2018-09-29 20:44:01 -07:00
SataQiu
6f4054679e
Remove the redundant space ( #3418 )
2018-09-29 20:31:57 -07:00
KMilhan
df7d53b9ef
Fix ready
to not to be an AnsibleUnsafeText ( #3404 )
2018-09-28 05:07:27 -07:00
Andreas Holmsten
0a9a42b544
Change from Nova security groups to Neutron ( #2910 )
...
* Replace `openstack_compute_secgroup_v2` with `openstack_networking_secgroup_v2`
The `openstack_networking_secgroup_v2` resource allow specifications of
both ingress and egress. Nova security groups define ingress rules only.
This change will also allow for more user-friendly specified security
rules, as the different security group resources have different HCL
syntax.
2018-09-28 11:35:02 +02:00
Rong Zhang
0232e755f3
Upgrade kubedns and kubednsautoscaler ( #3407 )
2018-09-28 01:20:08 -07:00
sangwook
0536125f75
Better fix for openstack cinder zone issue using ignore-volume-az option ( #2980 )
...
* Better fix for openstack cinder zone issue[1][2]
using ignore-volume-az option[3].
[1]: https://github.com/kubernetes-incubator/kubespray/pull/2155
[2]: https://github.com/kubernetes-incubator/kubespray/pull/2346
[3]: https://github.com/kubernetes/kubernetes/pull/53523
* Remove kube-scheduler-policy.yaml
2018-09-27 22:15:47 -07:00
Cédric de Saint Martin
53d87e53c5
All CNIs: support ANY toleration. ( #3391 )
...
Before, Nodes tainted with NoExecute policy did not have calico/weave Pod.
Network pod should run on all nodes whatever happens on a specific node.
Also always set the Pods to be critical.
Also remove deprecated scheduler.alpha.kubernetes.io/tolerations annotations.
2018-09-27 05:28:54 -07:00
Erwan Miran
232020ef96
skip-exists is an flag for create command, not for calicoctl ( #3401 )
2018-09-27 04:57:02 -07:00
Antoine Legrand
a22d74b165
Update README.md ( #3402 )
2018-09-27 13:32:28 +02:00
Shida Qiu
8b8e534769
remove the redundant space ( #3400 )
2018-09-27 03:32:26 -07:00
arzarif
6b71229d3f
Resolve issues associated with Calico deployment in policy-only mode. ( #3392 )
2018-09-27 03:31:14 -07:00
刘旭
145e5c8943
use copy and slurp module ( #3313 )
2018-09-27 02:12:02 -07:00
Ryan McGuire
28315ca933
Fix README links to new inventory file paths. ( #3398 )
2018-09-27 01:09:51 -07:00
Victor Palma
dced082e5f
fixes roles/docker/vars/ubuntu-bionic.yml points to xenial ( #3395 )
...
* fixes : #3387
2018-09-27 01:08:39 -07:00
Tupin Laurent
408faac3c9
Pip is required for vault #3376 ( #3378 )
...
* Change execution order for pip
* Remove spaces
2018-09-26 00:28:54 -07:00
Tupin Laurent
cd4a606cb1
UI is required for vault #3376 ( #3377 )
2018-09-26 00:27:38 -07:00
Hoat Le
c7c3effd6f
Ansible var should be quoted ( #3393 )
...
to fix the follow problem in case quote is not used:
PLAY [k8s-cluster:etcd:calico-rr] **********************************************
ERROR! Syntax Error while loading YAML.
expected <block end>, but found '<scalar>'
The error appears to have been in '/tmp/vagrant-ansible/inventory/group_vars/k8s-cluster.yml': line 59, column 39, but may
be elsewhere in the file depending on the exact syntax problem.
The offending line appears to be:
kube_oidc_ca_file: {{ kube_cert_dir }}/openid-ca.pem
^ here
We could be wrong, but this one looks like it might be an issue with
missing quotes. Always quote template expression brackets when they
start a value. For instance:
with_items:
- {{ foo }}
Should be written as:
with_items:
- "{{ foo }}"
Ansible failed to complete successfully. Any error output should be
visible above. Please fix these errors and try again.
2018-09-25 23:35:35 -07:00
Kuldip Madnani
36898a2c39
Adding pod priority for all the components. ( #3361 )
...
* Changes to assign pod priority to kube components.
* Removed the boolean flag pod_priority_assignment
* Created new priorityclass k8s-cluster-critical
* Created new priorityclass k8s-cluster-critical
* Fixed the trailing spaces
* Fixed the trailing spaces
* Added kube version check while creating Priority Class k8s-cluster-critical
* Moved k8s-cluster-critical.yml
* Moved k8s-cluster-critical.yml to kube_config_dir
2018-09-25 07:50:22 -07:00
Wilmar den Ouden
8526c30b63
Replaces nonexisting system_namespace variable ( #3389 )
2018-09-25 01:39:02 -07:00
Andreas Krüger
d6ebe8c3e7
Sync manifests with kubeadm ( #3383 )
2018-09-24 02:17:18 -07:00
Rui Cao
02de35cfc3
Fix some typos ( #3382 )
...
Signed-off-by: Rui Cao <ruicao@alauda.io>
2018-09-23 06:33:17 -07:00
Arnaud M
7d8e21634c
add CRI-O in the list of core components supported ( #3381 )
2018-09-22 23:03:53 -07:00
k8s-ci-robot
6b598eaacb
Merge pull request #3367 from mgsergio/master
...
Add check that kube-master, kube-node and etcd groups are not empty.
2018-09-21 07:09:44 -07:00
Sergey Magidovich
2197330727
Add check that kube-master, kube-node and etcd groups are not empty.
2018-09-21 17:02:53 +03:00
k8s-ci-robot
1d8627eb8b
Merge pull request #3370 from AnatolyRugalev/issue-3357
...
Added download_validate_certs option
2018-09-21 04:44:05 -07:00
Anatoly Rugalev
8f85ea89fa
Added download_validate_certs
option which allows to disables SSL validation for file downloads
2018-09-21 11:51:17 +02:00
k8s-ci-robot
51a5f54fc4
Merge pull request #3335 from AtzeDeVries/fix/ubuntu-xenial-resolv-conf
...
Fix/ubuntu xenial resolv conf
2018-09-20 23:16:11 -07:00
k8s-ci-robot
e5550b5140
Merge pull request #3369 from crandles/rm-varlibcni
...
remove /var/lib/cni directory in reset playbook
2018-09-20 19:32:23 -07:00
Chris Randles
a1d6078d46
remove /var/lib/cni directory
2018-09-20 15:36:25 -04:00
k8s-ci-robot
7fd87b95cf
Merge pull request #3368 from woopstar/fedora_fix_1
...
Fix CI issue (Fedora task introduce new lookup plugin)
2018-09-20 08:16:22 -07:00
Rajitha Perera
e3d562bcdb
Support for AWS cloud-config ( #1465 )
...
* Support for AWS cloud-config
* Update docs
* Fix version incompatibilities
* Do not use shorthand `default`
* Add new cloud config variable, roleArn
2018-09-20 16:31:28 +02:00
Andreas Kruger
442e6e55b6
Fix CI issue with Fedora
2018-09-20 15:45:15 +02:00
k8s-ci-robot
1f1a87bd3d
Merge pull request #3366 from riverzhang/fix-error
...
Remove some useless files
2018-09-20 05:27:28 -07:00
rongzhang
4d1055f5d5
Remove some useless files
2018-09-20 20:24:06 +08:00
k8s-ci-robot
68acdd71f1
Merge pull request #3172 from Atoms/additional-proxy
...
Add additional no proxy parameter for more customization
2018-09-20 03:26:29 -07:00
k8s-ci-robot
62b1ea2b48
Merge pull request #3360 from gabibbo97/master
...
Support Fedora 28
2018-09-20 02:22:53 -07:00
k8s-ci-robot
9fa23ffa21
Merge pull request #3364 from SataQiu/fix-20180920
...
Remove duplicate persistent_volumes_enabled element in k8s-cluster.yml
2018-09-20 02:21:41 -07:00
k8s-ci-robot
1dda89dbe3
Merge pull request #3363 from woopstar/remove_efk
...
Remove EFK from Kubespray
2018-09-20 02:19:31 -07:00
SataQiu
2a1f77efc6
remove duplicate persistent_volumes_enabled parameter in k8s-cluster.yml
2018-09-20 17:02:26 +08:00
k8s-ci-robot
f9502e0964
Merge pull request #3362 from mirake/fix-typos
...
Fix some typos
2018-09-20 01:46:58 -07:00
Andreas Kruger
09b67c1ad5
Remove EFK from Kubespray
2018-09-20 10:44:17 +02:00
Rui Cao
66475f98b9
Fix some typos
...
Signed-off-by: Rui Cao <ruicao@alauda.io>
2018-09-20 16:27:16 +08:00
k8s-ci-robot
8512cc5cca
Merge pull request #3280 from wozniakjan/openstack/openstack_cacert
...
Check `openstack_cacert` for empty string
2018-09-19 22:42:37 -07:00
k8s-ci-robot
3a65c66a3e
Merge pull request #3355 from wwt/rr-v3
...
Uses etcdv3 for calico 3 rr_v4 resources
2018-09-19 22:35:02 -07:00
Giacomo Longo
492b3e525d
Support Fedora 28
2018-09-19 20:11:07 +02:00
Kevin Schuck
639010b3df
Uses environment vars for etcd cert paths
2018-09-19 12:32:16 -05:00
k8s-ci-robot
34d1f0bff2
Merge pull request #3351 from woopstar/kubeadm_token_basic_auth_fix
...
Mount basic auth or token auth dirs to support it on kubeadm deployments
2018-09-19 07:50:43 -07:00
Jan Wozniak
a330b281e8
Check openstack_cacert
for empty string
2018-09-19 16:37:24 +02:00
Kevin Schuck
6f9f80acee
Uses etcdv3 for calico 3 rr_v4 resources
2018-09-19 09:22:52 -05:00
k8s-ci-robot
a8a62afd74
Merge pull request #3304 from kubernetes-incubator/gpu2
...
Add support for GPU accelerator
2018-09-19 07:12:32 -07:00
k8s-ci-robot
7fa682bdd5
Merge pull request #3342 from okamototk/fix_path_for_kubeadm_join
...
Add kubelet path for kubeadm.
2018-09-19 06:17:47 -07:00
Aivars Sterns
34019291b8
Merge pull request #3143 from jbcraig/add_os_trust_id
...
add support for openstack trust to cloud provider config
2018-09-19 16:07:03 +03:00
Aivars Sterns
847390dd9c
Merge pull request #3225 from niallmcandrew/patch-1
...
Fix test readme formatting
2018-09-19 16:06:21 +03:00
Antoine Legrand
08179018d4
Merge branch 'master' into gpu2
2018-09-19 15:02:51 +02:00
k8s-ci-robot
b796226869
Merge pull request #3325 from firaxis/configurable_felix_healthhost
...
Make Felix healthhost configurable
2018-09-19 06:02:29 -07:00
Romain GUICHARD
131d565498
fix openstack cli syntax ( #3353 )
...
* fix openstack cli syntax
* 'allowed-address' is also a dash, not an underscore
* multiple allowed-address
multiple allowed-address must be in separate parameters
2018-09-19 14:50:38 +02:00
k8s-ci-robot
084af7b6e5
Merge pull request #3354 from mirwan/offline_env
...
Offline environment documentation
2018-09-19 05:36:37 -07:00
Aivars Sterns
bacd8c70e1
Merge pull request #3149 from rguichard/fix-router-id-output
...
fix the output of router_id with the right id
2018-09-19 15:34:03 +03:00
Erwan Miran
963c3479a9
Offline environment documentation
2018-09-19 14:18:51 +02:00
k8s-ci-robot
39c567de47
Merge pull request #3307 from kaarolch/upgrade_docs
...
Calico version verification before cluster upgrade begin.
2018-09-19 05:15:55 -07:00
k8s-ci-robot
da4cc74498
Merge pull request #3340 from wwt/master
...
Fixes Calico 3.x BGPPeer resources
2018-09-19 04:43:35 -07:00
Andreas Kruger
cac485756b
Mount basic auth or token auth dirs to support it on kubeadm deployments
2018-09-19 13:21:58 +02:00
k8s-ci-robot
118a7cd4ae
Merge pull request #3350 from woopstar/kubeadm_audit_fix_2
...
Remove audit again from Kubeadm 1.10.x. Write mounts not supported un…
2018-09-19 04:17:29 -07:00
Andreas Kruger
c058e7a5ec
Remove audit again from Kubeadm 1.10.x. Write mounts not supported untill 1.11
2018-09-19 13:15:14 +02:00
k8s-ci-robot
1c10c3e2ff
Merge pull request #3348 from woopstar/kubelet_node_custom_flags
...
Add support for kubelet_node_custom_flags
2018-09-19 04:10:29 -07:00
Andreas Kruger
e0ddabc463
Add support for kubelet_node_custom_flags
2018-09-19 12:58:06 +02:00
k8s-ci-robot
13da9bf75e
Merge pull request #3337 from LuckySB/groupvars-networkplugin
...
create separate options files for network plugins
2018-09-19 03:56:29 -07:00
k8s-ci-robot
e47eeb67ee
Merge pull request #3344 from woopstar/kubeadm-minor-fix
...
Sync manifests from non-kubeadm to kubeadm deploy
2018-09-19 03:48:32 -07:00
k8s-ci-robot
824199fc7f
Merge pull request #3347 from mirake/fix-error
...
Fix some typos
2018-09-19 03:43:29 -07:00
Rui Cao
c004896a40
Fix some typos
...
Signed-off-by: Rui Cao <ruicao@alauda.io>
2018-09-19 18:22:08 +08:00
Andreas Kruger
940d2fdbb1
Add missing enforce-node-allocatable to kubelet for kubeadm deployments
2018-09-19 11:54:34 +02:00
Andreas Kruger
1c999b2a61
Move kube_kubeadm_controller_extra_args to controllerManagerExtraArgs section. It was placed in controllerManagerExtraVolumes
2018-09-19 11:24:19 +02:00
Andreas Kruger
8e37841a2e
Add audit support to v1alpha1 of Kubeadm
2018-09-19 11:01:30 +02:00
Andreas Kruger
8d1c0c469c
Added missing enable-aggregator-routing option
2018-09-19 10:58:46 +02:00
Rong Zhang
8f5b0c777b
Merge pull request #3345 from mirake/fix-typos
...
Fix some typos
2018-09-19 16:50:14 +08:00
Rui Cao
0dd82293f1
Fix some typos
...
Signed-off-by: Rui Cao <ruicao@alauda.io>
2018-09-19 16:47:58 +08:00
Andreas Kruger
26d7380c2e
Sync manifests from non-kubeadm to kubeadm deploy
2018-09-19 10:01:45 +02:00
Takashi Okamoto
95703fb6f2
Add kubelet path for kubeadm.
2018-09-19 03:04:03 +00:00
Karol Chrapek
0121bce9e5
Instead of doc update, change the verify step
2018-09-18 22:13:15 +02:00
Sergey Bondarev
e766dd5582
move calico options from all.yml to k8s-cluster/k8s-net-calico.yml
2018-09-18 21:30:49 +03:00
Kevin Schuck
fb1678d425
Ensures BGPPeer resource names are unique
2018-09-18 10:48:30 -05:00
Alex Yakovenko
884053aaa7
Make Felix healthhost configurable
2018-09-18 15:48:29 +03:00
Sergey Bondarev
93429bc661
create separate options files for network plugins
...
remove plugin options from common files
2018-09-18 14:29:53 +03:00
k8s-ci-robot
3d27007750
Merge pull request #3329 from riverzhang/checksum
...
Keep list of k8s checksums for hyperkube and kubeadm
2018-09-18 02:42:59 -07:00
AtzeDeVries
4cbd97667d
Merge remote-tracking branch 'upstream/master' into fix/ubuntu-xenial-resolv-conf
2018-09-18 09:51:46 +02:00
k8s-ci-robot
2730c90dcd
Merge pull request #3320 from riverzhang/kubelet
...
Support dynamic kubelet config
2018-09-18 00:16:04 -07:00
rongzhang
09a1bcb30b
Keep list of k8s checksums for hyperkube and kubeadm
...
Keep a list of checksums for kubeadm and hyperkube downloads.
Makes it easier to switch version
2018-09-18 15:05:17 +08:00
rongzhang
77e08ba204
Support dynamic kubelet config
...
https://kubernetes.io/blog/2018/07/11/dynamic-kubelet-configuration/
2018-09-18 08:44:39 +08:00
Kevin Schuck
d3adf09bde
Fixes BGPPeer resource for calico >= 3.0.0
2018-09-17 15:22:28 -05:00
k8s-ci-robot
26db1afd1a
Merge pull request #3227 from mirwan/contiv121
...
Upgrade contiv to 1.2.1 with some enhancements
2018-09-17 08:15:23 -07:00
Erwan Miran
afa2a5f1c4
enhanced reset for contiv
2018-09-17 16:46:19 +02:00
Erwan Miran
bcaf2f9ea3
contiv 1.2.1
2018-09-17 16:45:05 +02:00
Rong Zhang
3cd38e0d4c
Merge pull request #3245 from ctang1989/patch-1
...
terraform.tfvars.example is not correct, remove.
2018-09-17 20:41:08 +08:00
k8s-ci-robot
d16b562b18
Merge pull request #3316 from mattymo/tiller_override_fix
...
Fix tiller override command
2018-09-17 05:12:05 -07:00
k8s-ci-robot
0538f8a70d
Merge pull request #3290 from riverzhang/fix-upgrade
...
Fix upgrade k8s
2018-09-17 04:26:47 -07:00
k8s-ci-robot
1a426ada3c
Merge pull request #3324 from alvistack/cert-manager-v0.5.0
...
cert-manager: Upgrade to 0.5.0
2018-09-17 04:20:56 -07:00
k8s-ci-robot
d96e17451e
Merge pull request #3326 from alvistack/weave-v2.4.1
...
weave: Upgrade to 2.4.1
2018-09-17 04:19:39 -07:00
Wong Hoi Sing Edison
a544e54578
weave: Upgrade to 2.4.1
...
Upstream Changes:
- weave 2.4.1 (https://github.com/weaveworks/weave/releases/tag/v2.4.1 )
Our Changes:
- Templates sync with upstream manifests
2018-09-17 17:09:19 +08:00
Wong Hoi Sing Edison
f34a6699ef
cert-manager: Upgrade to 0.5.0
...
Upstream Changes:
- cert-manager 0.5.0 (https://github.com/jetstack/cert-manager/releases/tag/v0.5.0 )
Our Changes:
- Templates sync with upstream manifests
2018-09-17 16:58:04 +08:00
AtzeDeVries
482857611a
added extra var for ubuntu 18 netplan resolv
2018-09-17 09:01:55 +02:00
AtzeDeVries
8d8bbc294a
fix for resolvconf in ubuntu18
2018-09-17 09:00:55 +02:00
k8s-ci-robot
7f91f6e034
Merge pull request #3287 from Kami-no/coredns_metrics
...
Monitor CoreDNS over svc
2018-09-16 23:39:59 -07:00
rongzhang
84c4c7dc82
Use synchronize module
2018-09-16 20:36:44 +08:00
rongzhang
1d4aa7abcc
Fix upgrade k8s
2018-09-16 10:35:12 +08:00
Matthew Mosesohn
fe35c32c62
Fix tiller override command
2018-09-15 16:35:19 +03:00
Rong Zhang
aa0da221e9
Merge pull request #2880 from hfinucane/rh7-paths
...
Fix #2261 by supporting Red Hat's limited PATH
2018-09-15 19:27:22 +08:00
k8s-ci-robot
f1403493df
Merge pull request #3296 from rabi/fix_cilium_crio
...
Add volume and volumeMount for crio-socket
2018-09-15 03:23:02 -07:00
k8s-ci-robot
36901d8394
Merge pull request #3309 from ant31/fix_download_file
...
Fix download file
2018-09-15 03:18:23 -07:00
k8s-ci-robot
a789707027
Merge pull request #3310 from mirwan/document_psp_auditing
...
Document podsecuritypolicy_enabled and kubernetes_audit
2018-09-15 02:09:37 -07:00
k8s-ci-robot
e6a2e34dd1
Merge pull request #3315 from riverzhang/upgrade-kubedns
...
Upgrade kubedns to 1.14.11
2018-09-15 02:08:20 -07:00
rongzhang
934d92f09c
Upgrade kubedns to 1.14.11
2018-09-15 15:22:38 +08:00
Antoine Legrand
016ba4cdfa
update hyperkube checksum
2018-09-14 00:44:36 +02:00
k8s-ci-robot
b227e44498
Merge pull request #3265 from torvitas/fix_metallb_configuration
...
[bugfix] fix path to metallb configuration
2018-09-13 14:47:38 -07:00
k8s-ci-robot
5e59541faa
Merge pull request #3258 from okamototk/fix_kubectl_path
...
absolute path for kubectl.
2018-09-13 14:38:20 -07:00
Antoine Legrand
d94b7fd57c
Don't download binary if docker is selected
2018-09-13 22:06:51 +02:00
k8s-ci-robot
9964ba77ee
Merge pull request #3305 from mattymo/fixup_upgrade
...
Fixes for upgrade mode
2018-09-13 12:57:23 -07:00
k8s-ci-robot
153661cc47
Merge pull request #3284 from mattymo/more_calico_legacy
...
Put back legacy support for calico ippools and bgp settings
2018-09-13 09:25:26 -07:00
Erwan Miran
166da2ffd0
Document podsecuritypolicy_enabled and kubernetes_audit
2018-09-13 18:07:15 +02:00
Matthew Mosesohn
8becd905b8
Fixes for upgrade mode
...
Uses correct flag for draining with a pod selector
Verifies minimum kubectl version for compatibility
2018-09-13 18:42:01 +03:00
Matthew Mosesohn
c83350e597
refactor to base on calico_version
2018-09-13 18:05:10 +03:00
Karol Chrapek
730866f431
Update upgrades.md
2018-09-13 15:58:41 +02:00
k8s-ci-robot
ffbe9e7fd8
Merge pull request #1973 from guenhter/rsync-cmd-to-synchronize
...
Replace the raw rsync command with the synchronize module
2018-09-13 03:12:05 -07:00
AtzeDeVries
91b02c057e
Add support for GPU accelerator
2018-09-13 11:53:11 +02:00
Matthew Mosesohn
55d76ea3d8
Update install.yml
2018-09-13 12:04:53 +03:00
rabi
1df0b67ec1
Add volume and volumeMount for crio-socket
...
This commit fixes #3295
2018-09-13 14:34:44 +05:30
Sascha Marcel Schmidt
cd3b30d3bf
fix path to configuration
2018-09-13 10:15:31 +02:00
k8s-ci-robot
53a685dbf8
Merge pull request #3262 from torvitas/fix_bin_path
...
[bugfix] Use bin_dir to find kubectl in contrib/metallb
2018-09-13 00:51:45 -07:00
k8s-ci-robot
218e527363
Merge pull request #3243 from mirwan/helm_binary_should_be_installed_on_all_masters
...
Install Helm client on all masters
2018-09-13 00:39:36 -07:00
k8s-ci-robot
27fc391f71
Merge pull request #3291 from mirwan/remove_insecure-bind-address_when_insecure_port_is_0
...
Remove --insecure-bind-address when insecure-port=0
2018-09-13 00:34:39 -07:00
Matthew Mosesohn
1091e82327
Update install.yml
2018-09-12 22:15:46 +03:00
k8s-ci-robot
a5cc8537f9
Merge pull request #3283 from mattymo/more_upgrade_options
...
Extra options for upgrade mode
2018-09-12 10:50:33 -07:00
Matthew Mosesohn
d692737a13
Extra options for upgrade mode
...
Optionally do not drain nodes by setting drain_nodes to false
Optionally set a labelselector to target which pods should be drained.
2018-09-12 17:05:41 +03:00
Matthew Mosesohn
cc79125d3e
Update install.yml
2018-09-12 17:03:55 +03:00
k8s-ci-robot
a801e02cea
Merge pull request #3261 from mattymo/etcd_ssl_dir_perms
...
Ensure etcd file permissions are correct when using vault
2018-09-12 01:10:26 -07:00
Zinin D.A
29c7775ea1
Monitor CoreDNS over svc
2018-09-12 10:24:15 +03:00
k8s-ci-robot
cbf099de4d
Merge pull request #3285 from mirwan/fix_netchecker_sa_when_psp
...
Fix wrong sa name in crb when psp is enabled
2018-09-12 00:20:38 -07:00
k8s-ci-robot
c8630f46fd
Merge pull request #3286 from fritchie/master
...
Change update strategy to RollingUpdate
2018-09-12 00:18:05 -07:00
Erwan Miran
af74d85b7d
Remove --insecure-bind-address when insecure-port=0
2018-09-12 08:22:11 +02:00
Chad Swenson
b8e7b4c0cd
Merge pull request #3288 from kubernetes-incubator/revert-3252-remove_insecure-bind-address_when_insecure-bind-port_is_0
...
Revert "Remove insecure-port and insecure-bind-address when possible"
2018-09-11 17:44:59 -05:00
Chad Swenson
97e5f28537
Revert "Remove insecure-port and insecure-bind-address when possible"
2018-09-11 17:42:12 -05:00
Frank Ritchie
f42e0a4711
Change update strategy to RollingUpdate.
...
When enable_network_policy is set to True with Calico 3 kubectl
apply fails with the error:
The Deployment "calico-kube-controllers" is invalid:
spec.strategy.rollingUpdate: Forbidden: may not be specified when
strategy type is 'Recreate'
See
https://github.com/kubernetes-incubator/kubespray/issues/3267
Changing the update strategy to RollingUpdate avoids this error.
2018-09-11 12:03:42 -04:00
Sascha Marcel Schmidt
6a5c828b6c
fix bin_dir
2018-09-11 16:27:20 +02:00
Sascha Marcel Schmidt
97aa87612a
use bin_dir
2018-09-11 16:27:17 +02:00
Matthew Mosesohn
d91f9e14e6
Put back legacy support for calico ippools and bgp settings
2018-09-11 16:40:11 +03:00
Erwan Miran
e24b1220a0
Fix wrong sa name in crb when psp is enabled
2018-09-11 15:04:55 +02:00
k8s-ci-robot
18f0531bba
Merge pull request #3266 from mirwan/doc_mixed_ansible_installation
...
Precision on control machine mixed Ansible installation
2018-09-11 03:04:26 -07:00
k8s-ci-robot
0a720b35af
Merge pull request #3270 from riverzhang/fix-registry
...
Add insecure_registry config to docker options
2018-09-10 04:28:52 -07:00
rongzhang
f557b54489
Add docker_
to values
2018-09-10 18:05:49 +08:00
Erwan Miran
04852ad753
Install Helm on all masters
2018-09-10 11:39:26 +02:00
k8s-ci-robot
ee4f437aa2
Merge pull request #3276 from riverzhang/1.11.3
...
Upgrade kubernetes to v1.11.3
2018-09-10 02:15:52 -07:00
Matthew Mosesohn
aaa9a4efac
Ensure vault file permissions are correct
2018-09-10 12:04:04 +03:00
rongzhang
0140cf71c8
Upgrade kubernetes to v1.11.3
2018-09-10 15:52:49 +08:00
rongzhang
51794e4c13
Deploying k8s clusters in a private environment
2018-09-09 11:06:00 +08:00
rongzhang
b249b06036
Move docker options to kubespray-defaults
2018-09-09 10:21:18 +08:00
rongzhang
20caaf9d1f
Delete gitignore file
2018-09-09 02:09:02 +08:00
rongzhang
cb133cba68
Add registry_mirrors config to docker options
2018-09-09 01:21:32 +08:00
rongzhang
c41ca22a78
Planning the configuration of docker parameters
2018-09-09 00:59:59 +08:00
rongzhang
009d2ffc6c
Add insecure_registry config to docker options
2018-09-08 23:24:35 +08:00
k8s-ci-robot
baf1aba239
Merge pull request #3257 from georgejdli/feature-helm-tls-2
...
[helm-tls] add option to secure helm tiller with tls
2018-09-07 10:34:58 -07:00
georgejdli
b891d77679
add option to secure helm tiller with tls
2018-09-07 10:29:31 -05:00
Erwan Miran
1d2ae39cff
Precision on control machine mixed Ansible installation
2018-09-07 17:26:55 +02:00
k8s-ci-robot
7bf09945f2
Merge pull request #3259 from okamototk/fix_indent
...
Fix indent error by yamllint.
2018-09-07 08:25:20 -07:00
k8s-ci-robot
5c2e9a5376
Merge pull request #3252 from mirwan/remove_insecure-bind-address_when_insecure-bind-port_is_0
...
Remove insecure-port and insecure-bind-address when possible
2018-09-07 07:41:21 -07:00
k8s-ci-robot
b3a689658b
Merge pull request #3255 from mlushpenko/calico_check
...
Fix calico health checks
2018-09-07 07:39:20 -07:00
Takashi Okamoto
d182d4f979
absolute path for kubectl.
2018-09-07 09:33:43 -04:00
k8s-ci-robot
9c49e071d3
Merge pull request #3260 from riverzhang/discoverytimeout
...
Add discovery_timeout to join configuration
2018-09-07 05:20:19 -07:00
rongzhang
0f63924ed4
Add discovery_timeout to join configuration
...
https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha2#JoinConfiguration
2018-09-07 16:28:53 +08:00
Takashi Okamoto
b2a7a27dfb
Fix indent error by yamllint.
2018-09-06 16:23:00 -04:00
k8s-ci-robot
b79dd602f3
Merge pull request #3256 from torvitas/heketi-fix-storageclass
...
[bugfix] heketi storageclass privilege
2018-09-06 07:52:08 -07:00
Sascha Marcel Schmidt
157639e451
use privileged user
2018-09-06 16:38:11 +02:00
mlushpenko
ea2c9d8f57
Fix yaml checks
2018-09-06 16:26:57 +02:00
mlushpenko
f958b32c83
Fix calico health checks
2018-09-06 15:57:21 +02:00
k8s-ci-robot
2faa8f1e37
Merge pull request #3254 from mattymo/calico_upgrade_tweaks
...
Fix backward compatibility with calico 2.6
2018-09-06 06:20:52 -07:00
k8s-ci-robot
ab462d92b8
Merge pull request #3249 from mattymo/fix_missing_var_kube_proxy_nodeport
...
Add missing variable kube_proxy_nodeport_addresses
2018-09-06 06:18:23 -07:00
k8s-ci-robot
27905bbddf
Merge pull request #3250 from mattymo/openstack_cacert
...
Fix openstack cacert task
2018-09-06 06:15:59 -07:00
Matthew Mosesohn
dc3e317d20
Fix backward compatibility with calico 2.6
2018-09-06 15:54:20 +03:00
k8s-ci-robot
ac87ba5c0d
Merge pull request #3253 from mattymo/reduce_gce_size
...
Reduce instance sizes in gce
2018-09-06 05:45:23 -07:00
Matthew Mosesohn
ea918e1999
Reduce instance sizes in gce
2018-09-06 15:22:46 +03:00
Erwan Miran
a5509fc2ce
Remove insecure-port and insecure-bind-address when possible
2018-09-06 13:46:09 +02:00
Matthew Mosesohn
b614a3504b
Fix openstack cacert task
2018-09-06 14:06:06 +03:00
k8s-ci-robot
661d455ab4
Merge pull request #3248 from mattymo/fixupfixup
...
put back endif in kubelet rkt template
2018-09-06 03:51:50 -07:00
Matthew Mosesohn
cd8e469b9c
Add missing variable kube_proxy_nodeport_addresses
2018-09-06 13:36:17 +03:00
Matthew Mosesohn
991b3dbe54
put back endif in kubelet rkt template
2018-09-06 13:21:22 +03:00
k8s-ci-robot
a3caeba242
Merge pull request #2931 from torvitas/master
...
Heketi/GlusterFS
2018-09-06 03:07:35 -07:00
k8s-ci-robot
f5251f7d27
Merge pull request #3247 from mattymo/kubelet_rkt_Fix
...
remove broken endifs in kubelet rkt mode
2018-09-06 02:49:35 -07:00
Matthew Mosesohn
faedfb6307
remove broken endifs in kubelet rkt mode
2018-09-06 11:59:25 +03:00
k8s-ci-robot
1940495817
Merge pull request #3246 from riverzhang/pause
...
Upgrade pause image to 3.1
2018-09-06 00:48:05 -07:00
rongzhang
b979fb0116
Upgrade pause image to 3.1
2018-09-06 14:15:51 +08:00
Antoine Legrand
7e140e5f3c
Merge pull request #3122 from jbcraig/fix_cacert_feature
...
resolve issues with new cacert feature
2018-09-05 23:31:53 +02:00
k8s-ci-robot
0e5393f203
Merge pull request #3224 from riverzhang/fix-feature-gates
...
Fix feature-gates
2018-09-05 08:55:48 -07:00
Sascha Marcel Schmidt
df6cf9aa51
add cleanup
2018-09-05 17:18:53 +02:00
Sascha Marcel Schmidt
5cf1396cb7
removes unnecessary check
2018-09-05 17:17:49 +02:00
rongzhang
435e098751
Fix feature-gates
2018-09-05 22:55:51 +08:00
Sascha Marcel Schmidt
6ffddbff24
fix database not available heketi error
2018-09-05 16:03:32 +02:00
Sascha Marcel Schmidt
64b0ce974d
use bin_dir variable
2018-09-05 16:02:55 +02:00
Sascha Marcel Schmidt
ce776f0f6a
actually use heketi auth
2018-09-05 15:59:56 +02:00
Sascha Marcel Schmidt
949984601f
actually use heketi auth
2018-09-05 15:58:44 +02:00
Antoine Legrand
055e80f846
Merge pull request #3244 from ant31/calico31
...
Reverts calico update to 3.2.0, fixes #3223
2018-09-05 11:45:22 +02:00
Antoine Legrand
15363530ae
Reverts calico update to 3.2.0, fixes #3223
2018-09-05 11:44:32 +02:00
唐超
ca6c5e2a6a
terraform.tfvars.example is not correct, remove.
2018-09-05 17:41:34 +08:00
k8s-ci-robot
73ddb62c58
Merge pull request #3234 from warmchang/tryUpdateNodeStatus
...
Fix the tryUpdateNodeStatus link
2018-09-05 00:21:33 -07:00
k8s-ci-robot
a512f68650
Merge pull request #3236 from luisyonaldo/fix-configure-calico-network-pool
...
Fix configure calico network pool for ipipMode = CrossSubnet
2018-09-04 23:22:33 -07:00
Jeff Bornemann
83838b7fbc
Add new OCI cloud controls
2018-09-04 14:03:17 -04:00
Antoine Legrand
769f99b369
Merge pull request #3233 from mgsergio/patch-2
...
Hint on how to join the slack channel README.md
2018-09-04 17:27:10 +02:00
Antoine Legrand
bf1b9649d0
Merge pull request #3235 from mirwan/docker_version_emphasis
...
Emphasis on docker recommended version
2018-09-04 17:11:29 +02:00
Luis Nunez
6569180654
remove capitalize filter
2018-09-04 14:56:53 +02:00
Erwan Miran
ae0ed87c0f
Emphasis on docker recommended version
2018-09-04 14:34:04 +02:00
Sascha Marcel Schmidt
9cc8ef4b91
MetalLB as loadbalancer for on premise deployments ( #3027 )
...
* add metallb as loadbalancer for on premise deployments
* improve configuration
* add variables to DaemonSet
2018-09-04 15:17:23 +03:00
k8s-ci-robot
ad33f71ac2
Merge pull request #3228 from mirwan/credentials_dir
...
Introducing credentials_dir variable in order to be able to override it
2018-09-04 04:35:11 -07:00
William Zhang
30634b3a25
Fix the tryUpdateNodeStatus link
...
Signed-off-by: William Zhang <zhang.wanmin@zte.com.cn>
2018-09-04 19:17:05 +08:00
mgsergio
b31cf0284d
Update README.md
...
It wan't obvious for me how to join this channel.
2018-09-04 12:33:55 +03:00
k8s-ci-robot
50c6a98b15
Merge pull request #3229 from mirwan/docker_1806_ubuntu_under_bionic
...
Docker 18.06 for ubuntu versions before bionic
2018-09-03 11:37:13 -07:00
Antoine Legrand
e7234c9114
Merge pull request #3232 from rabi/master
...
Document correct var kubeadm_enabled
2018-09-03 20:34:16 +02:00
Erwan Miran
a644b7c267
Introducing credentials_dir in order to be able to override it
2018-09-03 18:04:50 +02:00
Erwan Miran
f0af7262b1
credentials directory should be ignored as inventory
2018-09-03 18:04:34 +02:00
rabi
0865bef382
Document correct var kubeadm_enabled
2018-09-03 21:14:53 +05:30
Atoms
8c9588ab59
Add additional no proxy parameter for more customization
2018-09-03 17:09:58 +03:00
Erwan Miran
c0ce875743
change edge to 18.06 for ubuntu
2018-09-03 14:11:25 +02:00
Erwan Miran
a22d28e1c1
docker 18.06 for ubuntu version before bionic
2018-09-03 14:10:51 +02:00
k8s-ci-robot
c32145057d
Merge pull request #3178 from gitphill/patch-1
...
Add azure-container-registry-config for Azure
2018-09-03 05:06:01 -07:00
rboyapat
fbb98b0070
Fix the jinja expression for openstack_tenant_id ( #3151 )
...
OS_PROJECT_ID is obsolete in keystone v3 and jinja expression
doesn't set openstack_tenant_id as expected because of
undefined env var. Fixed the expression.
2018-09-03 14:59:49 +03:00
k8s-ci-robot
db11394711
Merge pull request #3200 from pablodav/feature/k8s_win_v1.11
...
Required support to start working on windows node support
2018-09-03 04:51:23 -07:00
k8s-ci-robot
72f6b3f836
Merge pull request #3210 from kubernetes-incubator/re-org-group_vars
...
Split group-variables
2018-09-03 04:40:26 -07:00
Antoine Legrand
0a08268efb
Merge pull request #3226 from mattymo/always_run_helm_init
...
Always run helm init to allow for settings changes
2018-09-03 12:49:05 +02:00
Antoine Legrand
ccda9664e7
remove duplicated var
2018-09-03 12:09:31 +02:00
Antoine Legrand
e98ba9e839
Split group-variables
2018-09-03 12:09:31 +02:00
Matthew Mosesohn
fd57fde075
Always run helm init to allow for settings changes
2018-09-03 11:16:01 +03:00
k8s-ci-robot
6204b85a37
Merge pull request #3222 from alvistack/nginx-0.19.0
...
ingress-nginx: Upgrade to 0.19.0
2018-09-03 00:11:38 -07:00
Wong Hoi Sing Edison
9fc8f9a07d
ingress-nginx: Upgrade to 0.19.0
...
Upstream Changes:
- ingress-nginx 0.19.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.19.0 )
Our Changes:
- Sync templates with upstream changes
2018-09-03 08:00:08 +08:00
niallmcandrew
8745486fb3
Fix test readme formatting
...
Adds a missing vertical bar at the star of a table so its correct markdown.
2018-09-03 08:38:21 +12:00
Pablo Estigarribia
7cbe3c2171
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
...
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
remove empty when line
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
force kubeadm upgrade due to failure without --force flag
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
added nodeSelector to have compatibility with hybrid cluster with win nodes, also fix for download with missing container type
fixes in syntax and LF for newline in files
fix on yamllint check
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
some cleanup for innecesary lines
remove conditions for nodeselector
2018-09-02 12:47:06 -03:00
k8s-ci-robot
a47c9239e8
Merge pull request #3221 from alvistack/cephfs-provisioner-v2.1.0-k8s1.11
...
cephfs-provisioner: Upgrade to v2.1.0-k8s1.11
2018-09-02 04:16:17 -07:00
k8s-ci-robot
635ca1a0b8
Merge pull request #3220 from alvistack/coredns-1.2.2
...
coredns: Upgrade to v1.2.2
2018-09-02 04:13:53 -07:00
Wong Hoi Sing Edison
32fdfbcd5a
cephfs-provisioner: Upgrade to v2.1.0-k8s1.11
...
Upstream Changes:
- cephfs-provisioner v2.1.0-k8s1.11 (https://github.com/kubernetes-incubator/external-storage/releases/tag/cephfs-provisioner-v2.1.0-k8s1.11 )
Our Changes:
- Sync clusterrole and role with upstream changes
2018-09-02 11:51:28 +08:00
k8s-ci-robot
dee9324d4b
Merge pull request #3219 from mlushpenko/kubeadm-ha
...
Fix ports for kubeadm client and master configs for ha setups
2018-09-01 20:49:22 -07:00
Wong Hoi Sing Edison
df8b27c03c
coredns: Upgrade to v1.2.2
...
Upstream Changes:
- coredns v1.2.2 (https://github.com/coredns/coredns/releases/tag/v1.2.2 )
NOTE:
- coredns image for 1.2.0 and 1.2.1 had been removed from https://console.cloud.google.com/gcr/images/google-containers/GLOBAL/coredns
2018-09-02 11:37:21 +08:00
mlushpenko
8e95974930
Fix ports for kubeadm client and master configs for ha setups
2018-09-01 18:02:52 +02:00
k8s-ci-robot
64b32146ca
Merge pull request #3217 from mirwan/fix_3215
...
Fix docker_options definition to remove newlines
2018-09-01 07:29:47 -07:00
Erwan Miran
36a7bdfac1
Fix docker_options definition to remove newlines
2018-09-01 09:55:04 +02:00
k8s-ci-robot
13dda0e36e
Merge pull request #3207 from mirwan/fix_3206
...
Fix target hosts generation when /etc/hosts does not contain 127.0.0.1 or ::1
2018-08-31 17:50:56 -07:00
k8s-ci-robot
6e7100f283
Merge pull request #3208 from mirwan/etcd_ha_doc_n_cleaning
...
Add documentation about having HA for etcd
2018-08-31 08:06:05 -07:00
Erwan Miran
059cd17b47
Fix target hosts generation when /etc/hosts does not contain 127.0.0.1 or ::1
2018-08-31 16:33:18 +02:00
k8s-ci-robot
fb7b3305dc
Merge pull request #3209 from mirwan/use_etcd_events_access_address
...
etcd_events_access_address should be used for peer_url and client_url
2018-08-31 07:26:25 -07:00
k8s-ci-robot
0e1f24e95a
Merge pull request #3140 from kubernetes-incubator/preinstall-tasks_num
...
Add support for etcd arm64
2018-08-31 06:20:56 -07:00
Erwan Miran
81c3f2c971
etcd_events_access_address should be used for peer_url and client_url
2018-08-31 15:03:07 +02:00
Erwan Miran
82a28d6bb3
Add documentation about having HA for etcd
2018-08-31 14:40:25 +02:00
Antoine Legrand
22f9114630
update calico to 3.2.0
2018-08-31 13:45:08 +02:00
Antoine Legrand
1704d699c4
CI: switch ubuntu18 to manual job
2018-08-31 13:45:08 +02:00
Antoine Legrand
f2f0cdd0ff
add arch vars for docker
2018-08-31 13:45:08 +02:00
Antoine Legrand
da06c8e5a9
etcd UNSUPPORTED for all arch
2018-08-31 13:45:08 +02:00
Antoine Legrand
2f1fe44762
update images to use arch
2018-08-31 13:45:08 +02:00
Antoine Legrand
19268ded23
Fix some arm64 errors
2018-08-31 13:45:08 +02:00
Antoine Legrand
f67933d2ac
add ETCD_UNSUPPORTED_ARCH=arm64 flag
2018-08-31 13:45:08 +02:00
Antoine Legrand
247b9e83d8
etcd arch-image
2018-08-31 13:45:08 +02:00
Antoine Legrand
9c2098b8fa
fix kubelet_max_pod assert
2018-08-31 13:45:08 +02:00
Antoine Legrand
48c0c8d854
Update dir list
2018-08-31 13:45:08 +02:00
k8s-ci-robot
f5f7b1626b
Merge pull request #3203 from riverzhang/doc
...
Update readme
2018-08-31 02:57:55 -07:00
k8s-ci-robot
c87a373c53
Merge pull request #3204 from riverzhang/fix-copy-ssl-ca
...
Fix copy etcd-ssl-ca failed
2018-08-31 02:00:01 -07:00
rongzhang
2609ec0dc3
Fix copy etcd-ssl-ca failed
2018-08-31 15:06:03 +08:00
rongzhang
61ed9886c1
Update readme
2018-08-31 14:12:16 +08:00
k8s-ci-robot
aafd034ab8
Merge pull request #3202 from riverzhang/fix-ipvs
...
Fix ipvs by kubeadm v1alpha1
2018-08-30 13:26:02 -07:00
k8s-ci-robot
d14394c691
Merge pull request #3185 from mirwan/helm_install_docker_insecureport_0
...
Mount /root/.kube to helm container
2018-08-30 08:11:33 -07:00
rongzhang
16fc22a207
Fix ipvs by kubeadm v1alpha1
2018-08-30 23:04:57 +08:00
k8s-ci-robot
d9ea937493
Merge pull request #3187 from mirwan/kubeadm-config_syntax
...
Fix kubeadm-config for audit-log-path and feature-gates
2018-08-30 06:55:43 -07:00
k8s-ci-robot
a96a0ee307
Merge pull request #3198 from riverzhang/fix-kubeadm-v1alpha1
...
Fix kubeadm v1alpha1 configure
2018-08-30 04:11:37 -07:00
k8s-ci-robot
f48468b83b
Merge pull request #3195 from mirwan/fix_psp_templates
...
Fix some addons when PodSecurityPolicy is enabled
2018-08-30 03:37:52 -07:00
Aivars Sterns
5b79ec8e3b
Merge pull request #3199 from kubernetes-incubator/ant31-patch-2
...
Add mirwan as Reviewer
2018-08-30 13:24:15 +03:00
Antoine Legrand
3f4acbc5f6
Add mirwan as Reviewer
2018-08-30 11:53:50 +02:00
rongzhang
35e5adaf0a
Fix kubeadm v1alpha1 configure
2018-08-30 17:44:00 +08:00
k8s-ci-robot
a268a49e1a
Merge pull request #3197 from riverzhang/kubeadm-test
...
Enable kubeadm test
2018-08-29 22:56:46 -07:00
rongzhang
91a83a3a0f
Enable kubeadm test
...
Need to test the kubeadm deployment cluster, most of the functional changes, will involve kubeadm.
2018-08-30 12:58:00 +08:00
k8s-ci-robot
a247c2c713
Merge pull request #3191 from fcgravalos/make-canal-mount-xtables-lock
...
canal should mount xtables.lock to share the lock with other processe…
2018-08-29 08:57:32 -07:00
k8s-ci-robot
4feb62f6bf
Merge pull request #3193 from riverzhang/fix-lb-kubeadm
...
Fix kubeadm lb
2018-08-29 04:22:40 -07:00
Fernando Crespo Grávalos
ac4ef719cc
canal should mount xtables.lock to share the lock with other processes like kube-proxy
2018-08-29 13:08:51 +02:00
Erwan Miran
ceb97e5809
Fix wrong syntax for jinja sub list extraction and addition of missing role template
2018-08-29 12:58:10 +02:00
k8s-ci-robot
3bfda55fca
Merge pull request #3061 from okamototk/crio
...
cri-o support
2018-08-29 03:48:40 -07:00
rongzhang
9eade647e6
Fix kubeadm lb
2018-08-29 18:29:24 +08:00
k8s-ci-robot
f82a1933b0
Merge pull request #3176 from equinix-ms/master
...
Add option to change the Tiller Deployment namespace.
2018-08-29 03:03:40 -07:00
Robin Elfrink
bbdd1c8f06
Add option to change the Tiller Deployment namespace.
2018-08-29 11:20:41 +02:00
k8s-ci-robot
f876c89081
Merge pull request #3189 from Arslanbekov/up-dashboard-version
...
Up dashboard version to 1.10.0
2018-08-29 02:08:40 -07:00
Phill Garrett
1babbcca85
Fix elif azure statement
2018-08-28 15:43:03 +01:00
k8s-ci-robot
58ecd312a7
Merge pull request #3186 from mirwan/fix_etchosts_localhost_handling
...
Fix localhost handling when /etc/hosts contains parenthesis
2018-08-28 07:07:53 -07:00
Takashi Okamoto
c0dfa72707
Separate RedHat specific vars for cri-o.
2018-08-28 13:36:14 +00:00
Arslanbekov Denis
fe1e758856
Up dashboard version to 1.10.0
2018-08-28 14:10:19 +03:00
Phill Garrett
f325d13082
Add azure-container-registry-config for Azure
...
Seperated out KUBELET_CLOUDPROVIDER env var assignment when cloud_provider equals azure
Appended azure-container-registry-config parameter
2018-08-28 10:23:25 +00:00
Erwan Miran
52ab54eeea
Fix missing quotes for audit-log-path and wrong placement of feature-gates
2018-08-28 09:05:57 +02:00
Takashi Okamoto
d407a590a6
container_manager variable to specify runtime.
2018-08-28 06:23:38 +00:00
Takashi Okamoto
5eb805f098
Change timeout for kubeadm 600s.
...
* kubeadm timeout is too short and it may interrupt by timeout.
2018-08-28 04:51:38 +00:00
Takashi Okamoto
dfdcb56784
Delete all cri-o containers when execute reset.yml.
2018-08-28 02:25:33 +00:00
Takashi Okamoto
659cccc507
Update sample.
2018-08-28 02:25:33 +00:00
Takashi Okamoto
f47c31dce5
Add cri-o document.
2018-08-28 02:25:33 +00:00
Takashi Okamoto
236f066635
kubeadm cri-o support.
2018-08-28 02:24:45 +00:00
Takashi Okamoto
5ab8a712d9
Add download_container flag to avoid docker pull when use cri-o.
2018-08-28 01:24:26 +00:00
Takashi Okamoto
cf7b9cfeef
Support crio in kubelet service.
2018-08-28 01:24:26 +00:00
Takashi Okamoto
6090af29e7
Add cri-o role.
2018-08-28 01:24:26 +00:00
Takashi Okamoto
359009bb05
Download etcd and hyperkube binary.
2018-08-28 01:24:26 +00:00
Takashi Okamoto
bdbfa4d403
Add ipvs support for kubeadm 1.10 or later.
2018-08-28 01:24:26 +00:00
Takashi Okamoto
6849788ebc
Fix copy ca cert and ca key for kubeadm.
2018-08-28 01:24:25 +00:00
Takashi Okamoto
ac639b2a17
Change kubeadm config to run etcd by kubeadm.
2018-08-28 01:24:25 +00:00
Takashi Okamoto
b18ed5922b
Add etcd default value in kubespray-default.
2018-08-28 01:24:25 +00:00
Erwan Miran
b395bb953f
Fix wrong when condition that ends up with jinja error when the content of /etc/hosts contains parenthesis
2018-08-27 21:20:57 +02:00
Erwan Miran
b652792a93
/root/.kube must to mounted in order for helm to read kubeconfig and not fallback to localhost:8080
2018-08-27 18:17:26 +02:00
k8s-ci-robot
7efe287c74
Merge pull request #2474 from mirwan/localhost_in_etc_hosts
...
Localhost in hosts files should be updated (if necessary), not overriden
2018-08-27 06:25:43 -07:00
k8s-ci-robot
881b46f458
Merge pull request #3095 from mirwan/dnsmasq_template_rendering_filename
...
Dnsmasq manifests should not have j2 extension but templates should
2018-08-27 02:51:43 -07:00
k8s-ci-robot
d43cd9a24c
Merge pull request #3104 from maxbrunet/hotfix/replace-local_actions
...
Use delegate_to: localhost instead of local_action
2018-08-27 02:50:42 -07:00
guenhter
fff48d24ea
Replace the raw rsync command with the synchronize module
2018-08-27 10:00:21 +02:00
k8s-ci-robot
f4feb17629
Merge pull request #2958 from elementyang/etcd-pr
...
change the way that getting etcd_member_name
2018-08-26 23:55:04 -07:00
Maxime Brunet
33135f2ada
k8s/preinstall: Turn AND condition into a list
2018-08-25 14:33:31 -04:00
k8s-ci-robot
d6f4d10075
Merge pull request #3153 from alvistack/remove-image_tag-suffix
...
Remove *_image_tag suffix from ReplicaSet/Deployment
2018-08-25 04:42:19 -07:00
k8s-ci-robot
f97515352b
Merge pull request #3161 from nutellinoit/kube_proxy_nodeport_addresses
...
--nodeport-addresses added on kube-proxy.manifest.j2 and on k8s-cluster.yml
2018-08-25 02:00:19 -07:00
k8s-ci-robot
f765ed8f1c
Merge pull request #3179 from kubernetes-incubator/removeubuntu18
...
move ubuntu18 to CI part2
2018-08-24 10:08:57 -07:00
Antoine Legrand
84bfcbc0d8
move ubuntu18 to CI part2
2018-08-24 18:18:27 +02:00
Aivars Sterns
2c98efb781
Merge pull request #3158 from tiri/fix-glusterfs-inventory
...
Fix node hostname in glusterfs inventory.example
2018-08-24 16:35:34 +03:00
Aivars Sterns
f7f58bf070
Merge pull request #3173 from msimonin/fix-3164
...
Fix createhome directory for adduser role
2018-08-24 16:34:57 +03:00
Erwan Miran
1432e511a2
same work with less lines
2018-08-24 14:06:07 +02:00
Aivars Sterns
1ddc420e39
Merge pull request #3058 from vasrem/feature_add_etcd_quota_backend_bytes
...
Add ETCD_QUOTA_BACKEND_BYTES environment variable
2018-08-24 14:17:55 +03:00
Vasilis Remmas
b61eb7d7f3
Add ETCD_QUOTA_BACKEND_BYTES environment variable
2018-08-24 12:17:34 +02:00
Aivars Sterns
dd55458315
Merge pull request #3174 from kubernetes-incubator/revert-3147-etcd-cleanup
...
Revert "gen_certs_script: refactor using stdin (Ansible 2.4+)"
2018-08-24 12:51:45 +03:00
Aivars Sterns
1567a977c3
Revert "gen_certs_script: refactor using stdin (Ansible 2.4+)"
2018-08-24 12:35:31 +03:00
Samuele Chiocca
cb8be37f72
fix on v1alpha1
2018-08-24 11:19:06 +02:00
Samuele Chiocca
e5dd4e1e70
added on v1alpha1
2018-08-24 10:59:06 +02:00
Antoine Legrand
6d74a3db7a
Merge pull request #3163 from kubernetes-incubator/fix-docker-ubuntu1804
...
Fix docker apt-repo for Ubuntu18
2018-08-24 00:51:59 +02:00
ant31
1da5926a94
Use xenial repo for ubuntu18
2018-08-23 22:34:44 +00:00
Antoine Legrand
4882531c29
Merge pull request #3115 from oracle/oracle_oci_controller
...
Cloud provider support for OCI (Oracle Cloud Infrastructure)
2018-08-23 18:22:45 +02:00
Antoine Legrand
f59b80b80b
Merge pull request #3147 from ishitatsuyuki/etcd-cleanup
...
gen_certs_script: refactor using stdin (Ansible 2.4+)
2018-08-23 18:19:28 +02:00
Antoine Legrand
f7d0e4208e
Merge pull request #3142 from riverzhang/fix-kubeadm-lb
...
Fix kubeadm LB configure
2018-08-23 16:40:59 +02:00
rongzhang
7b61a0eff0
Fix kubeadm LB configure
...
1. join node add LB discoveryTokenAPIServers
2. kubeadm_config_api_fqdn support ipddress and domain_name
2018-08-23 22:22:34 +08:00
Aivars Sterns
23fd3461bc
calico upgrade to v3 ( #3086 )
...
* calico upgrade to v3
* update calico_rr version
* add missing file
* change contents of main.yml as it was left old version
* enable network policy by default
* remove unneeded task
* Fix kubelet calico settings
* fix when statement
* switch back to node-kubeconfig.yaml
2018-08-23 17:17:18 +03:00
msimonin
e22e15afda
Fix createhome directory for adduser role
...
A typo in the adduser role prevents the createhome
variable to be taken into account.
Fix #3164
2018-08-23 08:55:11 +02:00
Rong Zhang
f453567cce
Merge pull request #3144 from riverzhang/fix-audit-log
...
Fix install audit failed
2018-08-23 14:41:37 +08:00
Tatsuyuki Ishi
69786b2d16
gen_certs_script: refactor using stdin (Ansible 2.4+)
2018-08-23 11:19:17 +09:00
rongzhang
5a4352657d
Fix install audit failed
...
1.fix audit log not write
2.fix Parameter not recognized
3.delete kubedm futuregates auditing and use apiServerExtraArgs
2018-08-23 01:47:15 +08:00
Samuele Chiocca
f13bc796d9
added nodePortAddresses on kubeadm conf v1alpha2 (not present on v1alpha1)
2018-08-22 18:43:03 +02:00
Antoine Legrand
7a2cfb8578
Merge pull request #3102 from mirwan/psp
...
PodSecurityPolicy admission controller support
2018-08-22 18:37:40 +02:00
Erwan Miran
a6a14e7f77
create the service account and roles even if the rbac is not enabled. it will just be ignored
2018-08-22 18:17:11 +02:00
Erwan Miran
80cfeea957
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
2018-08-22 18:16:13 +02:00
ant31
2c90208486
Fix docker apt-repo for Ubuntu18
2018-08-22 15:53:14 +00:00
Antoine Legrand
4eea7f7eb9
Merge pull request #3152 from johnzheng1975/cilium_1.2.0
...
new cilium stable version: 1.2.0
2018-08-22 17:11:42 +02:00
Antoine Legrand
3c59657f59
Merge pull request #3165 from hadrien-toma/patch-1
...
Update ansible.md
2018-08-22 16:58:29 +02:00
Hadrien TOMA
6598beb804
Update ansible.md
2018-08-22 16:40:17 +02:00
Antoine Legrand
32049efbc2
Merge pull request #3162 from kubernetes-incubator/add-ubuntu1804-ci
...
Add ubuntu18 ci job
2018-08-22 16:27:19 +02:00
Antoine Legrand
78be27e18f
Add ubuntu18 job
2018-08-22 16:02:07 +02:00
Samuele Chiocca
5d9908c2c3
--nodeport-addresses added on kube-proxy.manifest.j2
...
Changed author
2018-08-22 15:32:07 +02:00
Antoine Legrand
7eb4d7bb19
Merge pull request #3155 from alvistack/rbac_enabled
...
Always create service account even rbac_enabled = false
2018-08-22 13:26:20 +02:00
Erwan Miran
a7b0c454db
Localhost in hosts files should be updated (if necessary), not overriden
2018-08-22 12:10:49 +02:00
Timo Ribbers
83e3b72220
Fix node hostname in glusterfs inventory.example
...
Remove duplicate hostname usage.
2018-08-22 11:03:38 +02:00
john
7e2e3ddd32
update new cilium version 1.2.0 in README.md
2018-08-22 15:29:42 +08:00
Wong Hoi Sing Edison
c3b3572025
Always create service account even rbac_enabled = false
2018-08-22 11:41:29 +08:00
Wong Hoi Sing Edison
f897596844
Remove *_image_tag suffix from ReplicaSet/Deployment
2018-08-22 11:02:56 +08:00
john
6df71956c4
new cilium stable version: 1.2.0
2018-08-22 10:52:24 +08:00
Jeff Bornemann
94df70be98
Cloud provider support for OCI (Oracle Cloud Infrastructure)
...
Signed-off-by: Jeff Bornemann <jeff.bornemann@oracle.com>
2018-08-21 17:36:42 -04:00
rguichard
6650bc6b25
fix the output of router_id with the right id
2018-08-21 13:21:25 +02:00
Antoine Legrand
7398858572
Merge pull request #3141 from qeqar/bad-hostname
...
allow '.' in hostnames for verify bad hostnames
2018-08-21 11:39:49 +02:00
Mark Eisenblaetter
0c0a2138d9
allow '.' in hostnames
...
we use FQDN as inventory_hostname
2018-08-21 08:24:33 +02:00
Jonathan Craig
5bf152886b
add support for openstack trust to cloud provider config
2018-08-20 12:51:25 -04:00
Mark Eisenblätter
08353f291b
scaling: issue etcd certs for new nodes ( #3125 )
2018-08-20 14:40:44 +03:00
Andreas Krüger
497db69c9f
Merge pull request #3130 from riverzhang/add-control-plane
...
Add kubeadm controlplaneEndpoint
2018-08-20 10:43:50 +02:00
Andreas Krüger
c7de737551
Merge pull request #3133 from mirwan/auditlog_to_stdout_w_kubeadm
...
Audit log to stdout with kubeadm
2018-08-20 10:43:22 +02:00
Andreas Krüger
69749a5b7b
Merge pull request #3132 from mirwan/custom_audit_policy
...
Custom audit policy
2018-08-20 10:42:38 +02:00
Andreas Krüger
b3e32c1393
Merge pull request #3094 from hedayat/master
...
Add --dns-loop-detect to dnsmasq used in kube-dns
2018-08-20 09:27:15 +02:00
Erwan Miran
fc38b6d0ca
Ability to define custom audit polcy rules
2018-08-20 07:04:56 +02:00
Erwan Miran
c34900e569
Define apiserver flags directly instead of relying on auditPolicy section in order to have the ability to redirect audit log to stdout with kubeadm
2018-08-20 07:00:53 +02:00
Rong Zhang
855f2a55cb
Merge pull request #3135 from ishitatsuyuki/patch-1
...
Add bad hostname preflight check
2018-08-20 12:08:02 +08:00
Rong Zhang
ea35e6be9b
Merge pull request #3139 from alvistack/cephfs-provisioner-v2.0.1-k8s1.11
...
cephfs-provisioner: Upgrade to v2.0.1-k8s1.11
2018-08-20 12:04:53 +08:00
Wong Hoi Sing Edison
71fdc257bc
cephfs-provisioner: Upgrade to v2.0.1-k8s1.11
2018-08-20 11:55:04 +08:00
Rong Zhang
fd16f77e20
Merge pull request #3017 from seungkyua/fix_kubeadm_client_conf
...
Fix kubeadm client conf
2018-08-20 10:51:02 +08:00
Tatsuyuki Ishi
3eef8dc8d0
Add bad hostname preflight check
...
Hostname must be a valid DNS name, which is checked as https://github.com/kubernetes/apimachinery/blob/master/pkg/util/validation/validation.go#L115
The situation I have encountered is that my hostname contained underscore which is disallowed and apiserver refused to start.
2018-08-20 09:09:00 +09:00
rongzhang
59176ebbb9
Add kubeadm controlplaneEndpoint
...
Nginx LB(default)
Other LB by kubeadm controlplane
2018-08-20 00:57:13 +08:00
Rong Zhang
3663061b38
Merge pull request #3137 from riverzhang/packages
...
Fix install nss
2018-08-20 00:47:53 +08:00
rongzhang
b421d0ed5b
Fix install nss
2018-08-20 00:07:31 +08:00
Rong Zhang
f7097fbe07
Merge pull request #3134 from riverzhang/image
...
Fix pull dns image error
2018-08-19 23:29:57 +08:00
rongzhang
35efc387c4
Fix pull dns image error
2018-08-19 22:47:17 +08:00
Rong Zhang
fb309ca446
Merge pull request #3128 from riverzhang/delete-kubeadm
...
Remove unused configuration
2018-08-19 10:01:33 +08:00
Antoine Legrand
c833a8872b
Merge pull request #3131 from 3cky/patch-1
...
Fix k8s-dns-dnsmasq-nanny repo path
2018-08-19 01:31:45 +02:00
Antoine Legrand
1d4f88eea8
Fix typo in image url
2018-08-19 01:30:54 +02:00
Victor Antonovich
e9b8c8956d
Fix k8s-dns-dnsmasq-nanny repo path
2018-08-19 00:01:19 +03:00
rongzhang
095ccef8bd
Remove unused configuration
2018-08-19 01:23:20 +08:00
Rong Zhang
0df969ad19
Merge pull request #3117 from mirwan/audit_usecases
...
Audit support improvement
2018-08-19 01:13:22 +08:00
Antoine Legrand
3e5b6a5481
Merge pull request #3105 from mirwan/remove_cilium_device_at_reset_plus_move_network_to_network_plugin_roles
...
Move network_plugin specific reset tasks to its role directory
2018-08-17 22:27:16 +02:00
Antoine Legrand
3201f17058
Merge pull request #3119 from hoatle/improvements/ansible-ignored-patterns
...
add ignore_patterns to ansible.cfg
2018-08-17 22:13:16 +02:00
Antoine Legrand
c36744e96d
Merge pull request #3120 from alvistack/cephfs-provisioner-v2.0.0-k8s1.11
...
cephfs-provisioner: Upgrade to v2.0.0-k8s1.11
2018-08-17 22:11:15 +02:00
Antoine Legrand
e51c5dc0a6
Merge pull request #3123 from mathieuherbert/until-restart-etcd
...
add until option for etcd backup commands
2018-08-17 22:09:08 +02:00
Antoine Legrand
d297b82e82
Merge pull request #3126 from LuckySB/etcd_restart_on_update
...
add etcd version to etcd environment file to trigger a reload
2018-08-17 22:05:34 +02:00
Antoine Legrand
ca649b57e6
Merge pull request #1942 from jerrypeng/patch-1
...
SERIOUS Bug in download main.yml
2018-08-17 18:23:05 +02:00
Antoine Legrand
2c587f9ea5
Merge pull request #2104 from xd007/multi-arch-support
...
add support for non-amd64 arch gcr.io images
2018-08-17 16:38:14 +02:00
Erwan Miran
98b818bbaf
comply with ansible syntax consistency guideline
2018-08-17 16:37:33 +02:00
Antoine Legrand
26bf719a02
Merge branch 'master' into multi-arch-support
2018-08-17 16:35:50 +02:00
Antoine Legrand
7e37aa4aca
Merge pull request #2103 from xd007/docker_aarch64_pkg
...
Update docker package info for aarch64
2018-08-17 16:26:56 +02:00
Sergey Bondarev
ce6854e726
add version to environment file
...
Trigger reboot handler when version upgrade during update script
2018-08-17 17:25:35 +03:00
Antoine Legrand
ac49bbb336
Merge pull request #2168 from xd007/docker_arm64
...
fix docker opts incompatible running on aarch64 Redhat/Centos
2018-08-17 16:24:07 +02:00
Antoine Legrand
b490231f59
Merge pull request #2025 from kubernetes-incubator/terraform-aws-inventory
...
contrib/terraform/aws: Make path to generated inventory configurable
2018-08-17 15:55:38 +02:00
Antoine Legrand
6c7eabb53b
Merge pull request #2001 from b0r1sp/patch-3
...
Quote false and yes, otherwise they'll be transformed to 'False', 'Yes'
2018-08-17 15:52:15 +02:00
Antoine Legrand
7a0f0126f7
Merge pull request #1295 from xuhuilong/master
...
fix curl get calico status error ( error in tls version, centos 7.3 1611)
2018-08-17 14:29:01 +02:00
Mathieu Herbert
59d89a37cc
add until option for etcd backup commands
2018-08-17 11:05:57 +02:00
Wong Hoi Sing Edison
1a07c87af7
cephfs-provisioner: Upgrade to v2.0.0-k8s1.11
...
Upstream Changes:
- cephfs-provisioner v2.0.0-k8s1.11 (https://github.com/kubernetes-incubator/external-storage/releases/tag/cephfs-provisioner-v2.0.0-k8s1.11 )
- Update ClusterRole
Our Changes:
- Fix typo in defaults/main.yml (rs -> deploy)
- Manifests cleanup
2018-08-17 12:41:56 +08:00
Seungkyu Ahn
29894293eb
Fix kubeadm client conf
...
Fix DiscoveryTokenCACertHashes key to discoveryTokenCACertHashes in kubeadm-client.conf
2018-08-17 04:40:08 +00:00
Jonathan Craig
4d783fff0d
resolve issues with new cacert feature
2018-08-16 23:31:21 -04:00
hoatle
a7a53d1f38
add ignore_patterns to ansible.cfg
...
To avoid warning message when artifacts is generated within
the inventory directory
2018-08-17 09:22:02 +07:00
Erwan Miran
7f16b46ed5
Reset tasks specific to a network_plugin moved inside its role directory + Reset tasks specific to cilium
2018-08-16 17:34:33 +02:00
Antoine Legrand
58ee5f1cc9
Merge pull request #3089 from mattymo/cloudconfig
...
Remove erroneous cloud-config task
2018-08-16 16:17:01 +02:00
Antoine Legrand
bc844ca96e
Merge pull request #3079 from wikiselev/master
...
fix glusterfs ppa and glusterfs server command name errors
2018-08-16 16:15:32 +02:00
Antoine Legrand
253dc4f606
Merge pull request #3114 from woopstar/coredns-1.2.0
...
Update CoreDNS to 1.2.0
2018-08-16 16:14:13 +02:00
Antoine Legrand
b54ce3e66e
Merge pull request #3043 from jerryrelmore/patch-3
...
Update openstack.md
2018-08-16 16:09:12 +02:00
Antoine Legrand
a642931422
Merge pull request #3019 from holmsten/terraform-ops-worker-groups
...
[contrib/terraform/openstack] Add supplementary node groups
2018-08-16 16:06:53 +02:00
Antoine Legrand
2228f0dabc
Merge pull request #3116 from kubernetes-incubator/update-owners
...
Update OWNERS
2018-08-16 15:57:53 +02:00
Antoine Legrand
a619dfb03e
Update OWNERS
2018-08-16 13:32:46 +02:00
Erwan Miran
54548d3b95
kubeadm mounts the hostpaths itself
2018-08-16 13:17:30 +02:00
Erwan Miran
58d4d65fab
minor variable fix and reuse + handle auditlog redirected to stdout
2018-08-16 12:51:09 +02:00
Rong Zhang
364ab2a6b7
Merge pull request #3113 from riverzhang/support-audit
...
Support audit
2018-08-16 15:33:43 +08:00
Andreas Krüger
fdbb078aa9
Merge pull request #3111 from alvistack/cert-manager-0.4.1
...
cert-manager: Upgrade to 0.4.1
2018-08-16 09:13:46 +02:00
rongzhang
2ffc1afe40
Support audit
2018-08-16 14:38:07 +08:00
Wong Hoi Sing Edison
18612b3501
cert-manager: Upgrade to 0.4.1
...
Upstream Changes:
- cert-manager 0.4.1 (https://github.com/jetstack/cert-manager/releases/tag/v0.4.1 )
Our Changes:
- Better templates sync with upstream manifests
- Remove fancy resources requests/limits customization
2018-08-16 08:47:01 +08:00
Andreas Krüger
d635a97088
Merge pull request #3112 from alvistack/ingress-nginx-0.18.0
...
ingress-nginx: Upgrade to 0.18.0
2018-08-15 17:07:24 +02:00
Andreas Kruger
9da5d67728
Update CoreDNS to 1.2.0
2018-08-15 13:39:05 +02:00
Wong Hoi Sing Edison
bd413e36a3
ingress-nginx: Upgrade to 0.18.0
...
Upstream Changes:
- ingress-nginx 0.18.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.18.0 )
2018-08-15 11:40:42 +08:00
Chad Swenson
2c5781ace1
Merge pull request #2932 from wiremind/efk-fluentd-no-nodeselector
...
fluentd daemonset: do not set old nodeSelector.
2018-08-14 13:48:30 -05:00
JohnZheng
b50b3430be
Disable locksmithd on CoreOS if coreos_auto_upgrade set to false ( #3088 )
...
* Disable locksmithd on CoreOS if coreos_auto_upgrade set to false
* change when format to support multiple-condition
2018-08-14 13:42:16 -05:00
Chad Swenson
0e3518f2ca
Merge pull request #2871 from fritchie/lptolerate
...
Local volume provisioner: tolerate NoSchedule
2018-08-14 13:39:57 -05:00
Chad Swenson
238f04c931
Merge pull request #3097 from sdemura/vagrantfile-playbook
...
Define custom playbook in Vagrantfile
2018-08-14 13:31:50 -05:00
Chad Swenson
3a85a2f81c
Merge pull request #3080 from mirwan/netchecker_template_rendering_filename
...
Netchecker manifests should not have j2 extension
2018-08-14 13:24:16 -05:00
Chad Swenson
5dbfa0384e
Merge pull request #3101 from chenhonggc/uninstall_old_versions_of_docker
...
Uninstall old versions of Docker
2018-08-14 11:32:23 -05:00
edemsea
80c87db148
Define custom playbook in Vagrantfile
...
This change allows the playbook used in Vagrant to be
defined by the end user.
This is useful in the case where a developer may want to use
their own playbook that imports Kubespray, but also leverage
the Kubespray Vagrantfile.
2018-08-14 12:12:07 -04:00
Rong Zhang
d0d7777d68
Merge pull request #3108 from riverzhang/upgrade-coredns
...
Upgrade coredns to 1.1.3
2018-08-15 00:08:09 +08:00
rongzhang
48b6128814
Upgrade coredns to 1.1.3
2018-08-15 00:05:55 +08:00
Maxime Brunet
70b28288a3
Use delegate_to: localhost instead of local_action
...
Allow to use `ansible_become: true` (#2969 )
And set it to `false` for `localhost` with an `host_var`
2018-08-14 10:08:43 -04:00
Rong Zhang
a11e1eba9e
Upgrade kubernetes to V1.11.x ( #3078 )
...
Upgrade Kubernetes to V1.11.2
The kubeadm configuration file version has been upgraded from v1alpha1 to v1alpha2
Add bootstrap kubeadm-config.yaml with external etcd
2018-08-14 15:13:44 +03:00
Chen Hong
2dfa928c90
Uninstall old versions of Docker
2018-08-14 17:48:30 +08:00
Erwan Miran
d3c0fe1fcb
Templates (even without actual templating inside) should have j2 extension but should not be rendered with j2 extension
2018-08-13 09:51:26 +02:00
Rong Zhang
36e8683cf5
Merge pull request #3091 from mauromedda/master
...
Add the path to kubectl binary
2018-08-13 10:04:59 +08:00
Hedayat Vatankhah
c0221c2e72
Add --dns-loop-detect to dnsmasq used in kube-dns
...
It prevents DNS loops when host's DNS server is a localhost DNS server,
or when DNS server of cluster is also added as an upstream DNS server
2018-08-12 20:36:33 +04:30
mauromedda
9cef20187c
Add the path to kubectl binary
...
The post-remove action fails during the kubectl delete node action because with rc: 2, command not found. The kubectl is not in the system PATH and the full path to the binary is required
2018-08-12 10:50:50 +02:00
Anton Fayzrahmanov
95f1e4634a
local-volume-provisioner: use mountPropagation HostToContainer and version bump ( #3081 )
...
* Update local-volume-provisioner-ds.yml.j2
After v1.10.2 default mountPropagation is "None"
* local_volume_provisioner version bump
v2.1.0 uses the beta nodeAffinity API by default which is available starting 1.10
* Update local-volume-provisioner-ds.yml.j2
MY_NAMESPACE env
* Update README.md
Raw block devices docs.
2018-08-10 17:14:34 +03:00
Matthew Mosesohn
581a30fdec
Remove erroneous cloud-config task
2018-08-10 15:59:18 +03:00
Sascha Marcel Schmidt
19e2868484
fix path to bootstrap tear down
2018-08-10 13:42:28 +02:00
Matthew Mosesohn
8b3ce6e418
bump upgrade tests to v2.5.0 commit ( #3087 )
2018-08-10 13:05:05 +03:00
Andreas Krüger
d8e77600e2
Merge pull request #3066 from luisyonaldo/fix-conditional
...
fix bad conditional
2018-08-10 10:38:52 +02:00
Cédric de Saint Martin
e3dcd96301
kubedns & kubedns-autoscaler: Stick to master nodes. ( #2909 )
...
* kubedns & kubedns-autoscaler: Stick to master nodes.
- Tolerate only master nodes and not any NoSchedule taint
- Pods are on different nodes
- Pods are required to be on a master node.
* kubedns: use soft nodeAffinity.
Prefer to be on a master node, don't require.
* coredns: Stick to (different) master nodes.
- Pods are on different nodes
- Pods are preferred to be on a master node.
2018-08-09 10:42:53 -05:00
Chad Swenson
001cae5894
Merge pull request #3028 from Kami-no/cilium
...
cilium v1.1.2
2018-08-09 10:35:29 -05:00
Erwan Miran
494ff9522b
j2 extension should only be used for template filename, not target file on remote host
2018-08-09 11:29:45 +02:00
wikiselev
53aee6dc24
fix glusterfs ppa and glusterfs server command name errors
2018-08-09 10:14:14 +01:00
Luis Nuñez
fd380615a0
fix bad conditional
2018-08-09 10:20:45 +02:00
Rong Zhang
039180b2ca
Merge pull request #3022 from alvistack/weave-2.4.0
...
weave: Upgrade to 2.4.0
2018-08-09 15:01:05 +08:00
Zinin D.A
22b89edbbc
cilium v1.1.2
...
Update all configs to current upstream state.
Add more resources (unable to pass tests now)...
2018-08-08 22:42:50 +03:00
Rong Zhang
4650f04b37
Merge pull request #3075 from okamototk/fix_skipdownloads_condition
...
Fix skip_downloads condition.
2018-08-08 20:23:01 +08:00
Sascha Marcel Schmidt
9fba448053
recator to use kube module, finally fix race condition in storage tasks
2018-08-08 14:22:50 +02:00
Takashi Okamoto
82f9652fd8
Fix skip_downloads condition.
2018-08-08 10:56:02 +00:00
Rong Zhang
94ae945bea
Merge pull request #2904 from mirwan/var_lib_kubelet_should_not_be_unmounted_when_having_its_own_partition
...
Only subdirectories in /var/lib/kubelet should be unmounted at reset time
2018-08-08 15:00:54 +08:00
Rong Zhang
f6189885c2
Merge pull request #3037 from okamototk/fix_skipdownload
...
Fixed checking skip_downloads condition.
2018-08-08 14:58:22 +08:00
Rong Zhang
5c039d87aa
Merge pull request #3054 from reverson/1.10-admission
...
Add support for admission controllers in 1.10 and above
2018-08-08 14:32:11 +08:00
Rong Zhang
08dfb7b59f
Merge pull request #3073 from riverzhang/delete-istio
...
Remove istio support
2018-08-08 13:00:57 +08:00
Rong Zhang
4c0e723ead
Merge pull request #3069 from magnuhho/master
...
contrib/terraform/terraform.py: fix for Ansible 2.6.2+, issue #3067
2018-08-08 11:52:07 +08:00
rongzhang
ea6af449a8
Remove istio support
...
Use helm install or support in future
2018-08-08 11:10:09 +08:00
Rong Zhang
f72d74f951
Merge pull request #3072 from mathieuherbert/dns-tags
...
Add tags for coredns and kubedns
2018-08-08 09:58:25 +08:00
Mathieu Herbert
d285565475
Add tags for coredns and kubedns
2018-08-07 20:55:38 +02:00
Robert Everson
4eadf3228e
Only add admission plugins if defined
2018-08-07 11:25:03 -07:00
Robert Everson
99c5aa5a02
Use k8s default plugin list
2018-08-07 11:25:03 -07:00
Robert Everson
6ed65d762b
Separate out plugins into 2 variables
2018-08-07 11:25:03 -07:00
Robert Everson
ac18f6cf8b
Add support for admission controllers in 1.10 and above
2018-08-07 11:25:03 -07:00
Takashi Okamoto
1f7a42f3a4
Fixed checking skip_downloads condition.
2018-08-07 12:03:57 -04:00
Rong Zhang
e71f261935
Merge pull request #3068 from riverzhang/swap
...
Enable swap
2018-08-07 21:29:41 +08:00
Magnus Holm
fcfe12437c
contrib/terraform/terraform.py: fix for Ansible 2.6.2+, issue #3067
2018-08-07 15:22:14 +02:00
rongzhang
b902602d16
Enable swap
2018-08-07 21:13:12 +08:00
Rong Zhang
b1ef336ffa
Merge pull request #3001 from alvistack/ingress-nginx-0.17.0
...
ingress-nginx: Upgrade to 0.17.1
2018-08-07 20:50:53 +08:00
Simon Li
d284961d47
Change heketi-tear-down to run on nodes instead of localhost delegate_to
2018-08-07 13:52:49 +02:00
Simon Li
8ac57201a7
Prefix heketi kubectl calls with {{ bin_dir }}
2018-08-07 13:48:16 +02:00
Wong Hoi Sing Edison
538cb3b1bd
weave: Upgrade to 2.4.0
...
Upstream Changes:
- weave 2.4.0 (https://github.com/weaveworks/weave/releases/tag/v2.4.0 )
- Support `externalTrafficPolicy: Local` (https://github.com/weaveworks/weave/issues/2924 )
- Make the ipset list size bigger (https://github.com/weaveworks/weave/pull/3305 )
- Break out of kube rm-peers loop if nothing changes (https://github.com/weaveworks/weave/pull/3317 )
Our Changes:
- Revamp weave-net.yml.j2 with upstream changes
- Add more variables for customization
- Replace WEAVE_PASSWORD with k8s secret
- Remove hard-corded seed mode support, in favor of variables customization
2018-08-07 18:34:51 +08:00
Wong Hoi Sing Edison
17e335c6a7
ingress-nginx: Upgrade to 0.17.1
...
Upstream Changes:
- ingress-nginx 0.17.1 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.17.1 )
- Remove duplicated `securityContext` (https://github.com/kubernetes/ingress-nginx/pull/2705 )
- Remove --publish-service flag, in favor of DaemonSet + hostPort
Close #2998
Close #2999
2018-08-07 18:31:08 +08:00
Rong Zhang
280d6cac1a
Merge pull request #2997 from alvistack/cert-manager-0.4.0
...
cert-manager: Upgrade to 0.4.0
2018-08-07 18:00:46 +08:00
Rong Zhang
c288ffc55d
Merge pull request #2342 from southquist/add-ca-cert
...
allow for setting the cacert on openstack cloud provider
2018-08-07 17:46:01 +08:00
Rong Zhang
9075dbdd3c
Merge pull request #2875 from bradbeam/movault
...
Adding cluster_name to api cert alt name for vault
2018-08-07 17:36:04 +08:00
Rong Zhang
16bd0d2b5d
Merge pull request #2900 from drekle/configure_openstack_subnet_CIDR
...
Configure openstack subnet cidr
2018-08-07 17:27:01 +08:00
Rong Zhang
7850bce254
Merge pull request #2994 from DBLaci/master
...
dashboard_token_ttl option override possibility with default
2018-08-07 17:16:25 +08:00
Rong Zhang
3d19e03294
Merge pull request #3015 from podnov/kube_proxy_healthz_bind_address
...
Variablize kube_proxy_healthz_bind_address
2018-08-07 17:10:33 +08:00
Rong Zhang
496cb306bc
Merge pull request #3050 from woosley/master
...
update .gitignore
2018-08-07 17:01:51 +08:00
Rong Zhang
b1f8bfdf7c
Merge pull request #3055 from reverson/17.09-docker
...
Add support for docker 17.09
2018-08-07 16:57:50 +08:00
Rong Zhang
2c38e4e1ac
Merge pull request #3059 from okumin/fix-glusterfs-group_vars
...
Fix a broken symbolic link for group_vars
2018-08-07 16:55:32 +08:00
Rong Zhang
411d07a4f6
Merge pull request #3047 from rguichard/openstack-az-support
...
availability zones support for OpenStack
2018-08-07 16:51:41 +08:00
Rong Zhang
7d3a6541d7
Merge pull request #3065 from freeseacher/patch-1
...
Service file binary place mismatch
2018-08-07 16:48:56 +08:00
Wong Hoi Sing Edison
0f400a113c
cert-manager: Upgrade to 0.4.0
...
Upstream Changes:
- cert-manager 0.4.0 (https://github.com/jetstack/cert-manager/releases/tag/v0.4.0 )
2018-08-07 14:29:28 +08:00
Aleksey Shirokih
e8447e3d71
Service file binary place mismatch
...
According to cluster/binary.yml vault binary will be placed to `{{ bin_dir }}` and according to `inventory/sample/group_vars/all.yml` that is
`inventory/sample/group_vars/all.yml`
2018-08-06 14:44:13 +03:00
Rong Zhang
f086b6824e
Merge pull request #3064 from riverzhang/yamlroles
...
Fix yaml roles error
2018-08-05 18:51:02 +08:00
rongzhang
ac644ed049
Fix yaml roles error
2018-08-05 18:48:07 +08:00
Rong Zhang
453fea1977
Merge pull request #3034 from cornelius-keller/library_fix
...
fix missing libraries on newer coreos versions
2018-08-05 12:54:03 +08:00
okumin
a953f1ca8b
Fix a broken symbolic link for group_vars
2018-08-04 23:49:06 +09:00
cornelius-keller
4b5cb1185f
fix missing libraries on newer coreos versions
2018-08-03 15:29:05 +02:00
Robert Everson
275cdc1ce3
Add support for docker 17.09
2018-08-02 11:35:16 -07:00
woosley.xu
8d6f67e476
update .gitigonre
...
- add vim default backup file *~
- remove duplicated *sw[pon]
2018-08-02 11:30:55 +08:00
Rong Zhang
9172150966
Merge pull request #3044 from jerryrelmore/patch-4
...
Clarify etcd deployment script failure mechanism
2018-08-01 22:57:14 +08:00
Rong Zhang
1f2831967e
Merge pull request #3041 from woosley/master
...
set LC_ALL=C for growpart
2018-08-01 22:54:19 +08:00
rguichard
c19643cee2
availability zones support for OpenStack
...
allow masters, nodes and gluster nodes (within each group) to be scheduled
on differents AZ.
2018-08-01 16:42:58 +02:00
Rong Zhang
a5c165bb13
Merge pull request #3033 from rguichard/remotes/fork/master
...
add openstack security group for traffic to 30000-32767/tcp on worker nodes
2018-08-01 22:34:14 +08:00
DBLaci
d43f09081e
Merge pull request #1 from kubernetes-incubator/master
...
Follow upstream
2018-08-01 16:34:10 +02:00
Jerry Elmore
1385091768
Clarify etcd deployment script failure mechanism
...
Attempting to clarify the language surrounding the etcd node deployment script failure mechanism. I had this error when doing a new cluster deployment last night and, though it should have been, it wasn't immediately apparent to me what was causing the issue (since my default master node hostnames do not specify whether they are also acting as etcd replicas).
2018-07-31 15:15:49 -04:00
Jerry Elmore
e30847e231
Update openstack.md
...
Neutron cli is deprecated - replaced neutron cli commands with equivalent openstack cli commands.
2018-07-31 14:34:04 -04:00
woosley.xu
72074f283b
set local for growpart part 2
2018-07-31 06:56:09 +08:00
woosley.xu
a5db3dbea9
set locale for growpart
2018-07-31 06:52:56 +08:00
Rong Zhang
a2c9331b56
Merge pull request #3031 from a14n/patch-1
...
Fix label of registry in README
2018-07-27 21:38:27 +08:00
rguichard
1a38a9df88
add security groups for traffic to 30000-32767/tcp
...
This will make NodePort services work out of the box
2018-07-27 14:57:29 +02:00
Alexandre Ardhuin
9b349a9049
Fix label of registry in README
2018-07-27 11:42:21 +02:00
Chad Swenson
329e97c4d3
Merge pull request #3018 from seungkyua/remove_double_slash
...
Remove double slash
2018-07-25 12:31:46 -05:00
Sascha Marcel Schmidt
2bd8fbb2dd
add missing templates
2018-07-25 16:46:12 +02:00
Sascha Marcel Schmidt
205ea33b10
"fix" race condition
2018-07-25 16:42:57 +02:00
Sascha Marcel Schmidt
c42397d7db
run kubectl on one of the masters
2018-07-25 16:42:30 +02:00
Seungkyu Ahn
0366600b45
Remove double slash
...
Even without this PR, the operation works well.
However, it is better to use a single slash rather than
a double slash in the path.
2018-07-20 07:34:33 +00:00
Evan Zeimet
6a4ce96b7d
Variablize kube_proxy_healthz_bind_address
...
This fixes #3014
2018-07-19 14:19:09 -05:00
DBLaci
b61c64a8ea
token-ttl default value is int in seconds
2018-07-19 12:15:47 +02:00
Andreas Krüger
ca62c75bdf
Merge pull request #2990 from Miouge1/update-adding-node-doc
...
Include etcd and masters in adding node doc
2018-07-19 11:55:55 +02:00
Rong Zhang
38bd328abb
Merge pull request #2995 from okamototk/fix_kubectl_path
...
Fixed kubectl path.
2018-07-18 22:31:38 +08:00
Takashi Okamoto
37ccf7e405
Fixed kubectl path.
2018-07-13 15:32:08 +00:00
DBLaci
cb91003cea
dashboard_token_ttl option override possibility with default
2018-07-13 15:26:18 +02:00
Miouge1
4ad7b229d3
Include etcd and masters in adding node doc
2018-07-12 17:22:11 +02:00
Matthew Mosesohn
97e0de7e29
Fix vault file owner issues and k8s apiserver cert creation ( #2985 )
...
apiserver cert should be created only once
2018-07-11 14:58:02 +03:00
Rong Zhang
83d1486a67
Merge pull request #2984 from mattymo/docker_tag
...
add docker upgrade tag doc
2018-07-10 20:57:34 +08:00
Matthew Mosesohn
9081b3f914
add docker upgrade tag doc
2018-07-10 13:37:37 +03:00
Rong Zhang
cf445fd4fe
Merge pull request #2930 from alvistack/ingress-nginx-0.16.1
...
ingress-nginx: Upgrade to 0.16.2
2018-07-10 14:42:37 +08:00
Aivars Sterns
72f053d9bb
Merge pull request #2972 from mattymo/force_cni_cp
...
Force copy cni files
2018-07-10 09:40:10 +03:00
Wong Hoi Sing Edison
a0defefb3f
ingress-nginx: Upgrade to 0.16.2
...
ingress-nginx 0.16.2 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.16.2 )
This patch simplify ingress-nginx deployment by default deploy on
master, with customizable options; on the other hand, remove the
additional Ansible group "kube-ingress" and its k8s node label
injection.
Reference to https://kubernetes.io/docs/concepts/services-networking/ingress/#prerequisites :
GCE/Google Kubernetes Engine deploys an ingress controller on the master.
By changing `ingress_nginx_nodeselector` plus custom k8s node
label, user could customize the DaemonSet deployment target.
If `ingress_nginx_nodeselector` is empty, will deploy DaemonSet on
every k8s node.
2018-07-10 12:26:06 +08:00
Rong Zhang
9e19159547
Merge pull request #2935 from alvistack/cert-manager-0.3.1
...
cert-manager: Upgrade to 0.3.2
2018-07-10 12:05:31 +08:00
Wong Hoi Sing Edison
62b1166911
cert-manager: Upgrade to 0.3.2
...
Upstream Changes:
- cert-manager 0.3.2 (https://github.com/jetstack/cert-manager/releases/tag/v0.3.2 )
Our Changes:
- Remove legacy addon dir, manifests and namespace before upgrade
2018-07-10 08:48:44 +08:00
Rong Zhang
810596c6d8
Merge pull request #2974 from alvistack/cephfs-provisioner-1.1.0-k8s1.10
...
cephfs-provisioner: Upgrade to 1.1.0-k8s1.10
2018-07-09 13:53:07 +08:00
Rong Zhang
a488d55c2c
Merge pull request #2975 from daohoangson/remove_force_disable_kube_basic_auth
...
Remove step that disables `kube_basic_auth`.
2018-07-08 21:18:36 +08:00
Rong Zhang
8106f1c86d
Merge pull request #2977 from pennycoders/master
...
Fix 2976
2018-07-08 21:17:37 +08:00
Sascha Marcel Schmidt
306a6a751f
wait for job to complete
2018-07-08 13:16:25 +02:00
Sascha Marcel Schmidt
318c69350e
pin heketi image version
2018-07-08 13:15:54 +02:00
Alexandru Bogdan Pica
e63bc65a9d
Fix 2976
...
Fix failure when the container attribute is not set for a download
2018-07-08 13:36:47 +03:00
Dao Hoang Son
d306c9708c
Remove step that force disable kube_basic_auth
.
...
The referenced issue (https://github.com/kubernetes/kubeadm/issues/441 ) has already been fixed.
2018-07-08 16:57:43 +07:00
Wong Hoi Sing Edison
6a65345ef3
cephfs-provisioner: Upgrade to 1.1.0-k8s1.10
...
Upstream Changes:
- Update CEPH_VERSION to mimic (https://github.com/kubernetes-incubator/external-storage/pull/841 )
Our Changes:
- Using image from official repo which contain latest changes (https://quay.io/repository/external_storage/cephfs-provisioner )
2018-07-08 00:37:08 +08:00
Rong Zhang
f1e348ab95
Merge pull request #2971 from elementyang/calico-pr
...
change create to apply
2018-07-07 09:13:57 +08:00
Matthew Mosesohn
1a3b9dd864
Force copy cni files
2018-07-06 16:39:42 +03:00
elementyang
8fee1ab102
change create to apply
2018-07-06 19:36:19 +08:00
Matthew Mosesohn
5c617c5a8b
Add tags to deploy components by --tags option ( #2960 )
...
* Add tags for cert serial tasks
This will help facilitate tag-based deployment of specific components.
* fixup kubernetes node
2018-07-06 09:12:13 +03:00
Sascha Marcel Schmidt
6d1804d8a4
also remove storage class
2018-07-05 14:19:18 +02:00
Sascha Marcel Schmidt
ee67ece641
suppress unnecessary change
2018-07-05 14:18:27 +02:00
Matthew Mosesohn
0b939a495b
Improve vault etcd initialization check ( #2959 )
2018-07-05 12:27:45 +03:00
Rong Zhang
4d7426ec95
Fix terraform env Not effective ( #2966 )
...
Add TF_VAR_ to terraform env
2018-07-05 12:20:02 +03:00
Sascha Marcel Schmidt
f703814561
add tear down playbook
2018-07-05 02:15:05 +02:00
Sascha Marcel Schmidt
c39835628d
prevent some race conditions, increase over all time limits
2018-07-05 02:14:36 +02:00
Sascha Marcel Schmidt
1253725975
add necessary chdir
2018-07-04 19:31:25 +02:00
Sascha Marcel Schmidt
f4c1d6a5d7
remove unnecessary check for existing artifact
2018-07-04 19:08:02 +02:00
Sascha Marcel Schmidt
d7abdced05
fix typo
2018-07-04 18:58:45 +02:00
Sascha Marcel Schmidt
78aeef074e
add hint on how to install heketi-cli
2018-07-04 18:40:48 +02:00
Sascha Marcel Schmidt
0b7aa33bc2
add jmespath as requirement
2018-07-04 18:25:35 +02:00
elementyang
5a4f07adca
change the way of getting etcd_member_name
2018-07-05 00:06:37 +08:00
Aivars Sterns
4092f96dd8
Merge pull request #2946 from Miouge1/remove-pid-predicate
...
CheckNodePIDPressure is not supported in v1.10
2018-07-04 18:30:19 +03:00
elementyang
effd27a5f6
change the way that getting etcd_member_name
2018-07-03 22:02:44 +08:00
Rong Zhang
fa003af8f0
Merge pull request #2954 from aioue/patch-1
...
Update README.md
2018-07-03 19:43:22 +08:00
Rong Zhang
77c870b7d0
Merge pull request #2951 from alvistack/cephfs-provisioner-06fddbe2
...
cephfs-provisioner: Upgrade to 06fddbe2
2018-07-03 19:36:42 +08:00
Rong Zhang
32a6ca4fd6
Merge pull request #2948 from qeqar/remove-node-limit
...
move node selection from --limit to --extra-vars=node<nodename>"
2018-07-03 18:41:57 +08:00
Tom Paine
958eca2863
Update README.md
2018-07-03 11:39:51 +02:00
Mark Eisenblaetter
af635ff3ff
[remove-node] add doku for nodeselector
2018-07-03 10:38:37 +02:00
Wong Hoi Sing Edison
728024e8ff
cephfs-provisioner: Upgrade to 06fddbe2
...
- cephfs-provisioner 06fddbe2 (https://github.com/kubernetes-incubator/external-storage/tree/06fddbe2/ceph/cephfs )
Noteable changes from upstream:
- Added storage class parameters to specify a root path within the backing cephfs and, optionally, use deterministic directory and user names (https://github.com/kubernetes-incubator/external-storage/pull/696 )
- Support capacity (https://github.com/kubernetes-incubator/external-storage/pull/770 )
- Enable metrics server (https://github.com/kubernetes-incubator/external-storage/pull/797 )
Other noteable changes:
- Clean up legacy manifests file naming
- Remove legacy manifests, namespace and storageclass before upgrade
- `cephfs_provisioner_monitors` simplified as string
- Default to new deterministic naming
- Add `reclaimPolicy` support in StorageClass
With legacy non-deterministic naming style (where $UUID are generated ramdonly):
- cephfs_provisioner_claim_root: /volumes/kubernetes
- cephfs_provisioner_deterministic_names: false
- Generated CephFS volume: /volumes/kubernetes/kubernetes-dynamic-pvc-$UUID
- Generated CephFS user: kubernetes-dynamic-user-$UUID
With new default deterministic naming style (where $NAMESPACE and $PVC are predictable):
- cephfs_provisioner_claim_root: /volumes
- cephfs_provisioner_deterministic_names: true
- Generated CephFS volume: /volumes/$NAMESPACE/$PVC
- Generated CephFS user: k8s.$NAMESPACE.$PVC
2018-07-03 10:15:24 +08:00
Mark Eisenblaetter
b548f6f320
move node selection from --limit to --extra-vars=node<nodename>"
2018-07-02 20:04:36 +02:00
Rong Zhang
62df6ac724
Merge pull request #2952 from scality/coredns-typo
...
Fix `coreos_dual` -> `coredns_dual` typo
2018-07-02 23:50:59 +08:00
Nicolas Trangez
8bcad4f5ef
Fix coreos_dual
-> coredns_dual
typo
...
See: e40368ae2b
2018-07-02 17:19:35 +02:00
Rong Zhang
31e6c44b07
Merge pull request #2924 from elementyang/make-ssl-etcd-pr
...
fix the time of ca files are changed in make-ssl-etcd
2018-07-02 20:44:20 +08:00
Matthew Mosesohn
77c910c1c3
Fixup vault etcd check ( #2938 )
...
* Fixup vault etcd
* Update main.yml
2018-07-02 15:37:37 +03:00
Matthew Mosesohn
c20196f9a0
Remove modprobe binary from kubelet rkt deployment ( #2917 )
2018-07-02 15:37:24 +03:00
Rong Zhang
f6a15b1829
Merge pull request #2918 from elementyang/fix-pr
...
fix add etcd_events_access_address
2018-06-30 11:55:38 +08:00
elementyang
7c22def422
add etcd_events_access_address
2018-06-30 07:32:29 +08:00
Rong Zhang
87e49f0055
Merge pull request #2921 from elementyang/index-out-of-range-pr
...
fix template index out of range for pull images
2018-06-30 00:53:53 +08:00
Matthew Mosesohn
a36e3fbec3
Add rkt gc task ( #2945 )
2018-06-29 19:53:21 +03:00
Derek Lemon
4bceaf77ee
Merge branch 'master' of https://github.com/kubernetes-incubator/kubespray
2018-06-29 16:40:16 +00:00
Rong Zhang
35a3597416
Merge pull request #2941 from amaya382/fix-dns-doc
...
Fix default value for dns_mode on the document
2018-06-29 22:24:31 +08:00
Miouge1
2a279e30b0
CheckNodePIDPressure is not supported in v1.10
2018-06-28 20:10:38 +02:00
Andreas Holmsten
b900bd6e94
[contrib/terraform/openstack] Add supplementary node groups
...
* Add supplementary node groups
To add additional ansible groups to the k8s nodes, such as
`kube-ingress` for running ingress controller pods. Empty by default.
2018-06-28 16:46:20 +02:00
southquist
c685dc493f
allow for setting the cacert on openstack cloud provider
2018-06-28 16:00:13 +02:00
amaya
aacc89e4e6
Fix default value for dns_mode on the document
2018-06-28 17:08:27 +09:00
Sascha Marcel Schmidt
8e275ab2bd
change order and validation of bootstrap and rest tasks as well as
...
volumes
2018-06-27 12:30:14 +02:00
Andreas Krüger
e24f888bc4
Merge pull request #2923 from bradbeam/vaultrkt
...
Adding uuidfile for rkt based vault to properly cleanup after itself
2018-06-27 11:18:39 +02:00
Sascha Marcel Schmidt
b56f465145
fix creation of heketi volumes and storage provisioning validation
2018-06-27 10:12:23 +02:00
Sascha Marcel Schmidt
74cad6b811
pin versions of container images
2018-06-27 10:11:14 +02:00
Andreas Krüger
3d2ea28c96
Merge pull request #2926 from neith00/coreos_rkt
...
No need to install rkt on CoreOS
2018-06-26 10:58:16 +02:00
Cédric de Saint Martin
a260412c7e
fluentd daemonset: do not set arbitrary nodeSelector.
2018-06-25 15:19:56 +02:00
Sascha Marcel Schmidt
8ef0cf771f
update link
2018-06-25 15:09:22 +02:00
Sascha Marcel Schmidt
9516170ce5
remove unnecessary become flag
2018-06-25 15:09:19 +02:00
Sascha Marcel Schmidt
5aefa847df
add fences
2018-06-25 15:09:16 +02:00
Sascha Marcel Schmidt
831ef7ea2c
add readme
2018-06-25 15:09:13 +02:00
Sascha Marcel Schmidt
9c7e30e4b4
add sample inventory
2018-06-25 15:09:03 +02:00
Sascha Marcel Schmidt
8c5bfc7718
add debian compatibility
2018-06-25 15:08:53 +02:00
Sascha Marcel Schmidt
61046a6923
move heketi playbook
2018-06-25 15:08:35 +02:00
Sascha Marcel Schmidt
9d2fabc9b9
add heketi/glusterfs as additional contributional network storage
2018-06-25 15:08:18 +02:00
neith00
a643f72d93
No need to install rkt on CoreOS
2018-06-25 09:38:24 +02:00
Aivars Sterns
73a2a18006
Merge pull request #2795 from gfkse/baremetal-override-calico-hostname
...
Make Calico nodename overridable on bare metal
2018-06-25 08:45:09 +03:00
Rong Zhang
2ef05fb3b7
Merge pull request #2763 from ameukam/update_efk_stack
...
Update efk stack
2018-06-24 19:01:32 +08:00
Rong Zhang
e06d02365e
Merge pull request #2338 from southquist/template-openstack-storage-class
...
allow for configurable openstack storage class
2018-06-24 18:42:29 +08:00
elementyang
d6f2dbc723
fix the time of ca files are changed in make-ssl-etcd
2018-06-24 13:05:43 +08:00
Brad Beam
20dba8b388
Adding uuidfile for rkt based vault to properly cleanup after itself
2018-06-23 15:14:40 -05:00
Rong Zhang
f624ba47fb
Merge pull request #2922 from riverzhang/remove-node
...
Add run_once to remove-node
2018-06-23 15:09:16 +08:00
rongzhang
94aa062d51
Add run_once to remove-node
2018-06-23 07:05:24 +00:00
elementyang
c0935e161b
fix template index out of range for pull images
2018-06-23 05:32:44 +08:00
elementyang
70fbc01cc1
fix etcd_events_access_addresses
2018-06-23 00:04:19 +08:00
Yumo Yang
6c2f169ea2
update test-pr2 ( #2911 )
2018-06-22 13:22:26 +03:00
Rong Zhang
c230e617f0
Merge pull request #2891 from earlruby/fix-python-pip-version-flag-in-readme
...
Fix the Python and pip version flag in the README
2018-06-22 14:10:39 +08:00
Rong Zhang
1aee6ec371
Merge pull request #2903 from riverzhang/swap
...
Add manage swap on the worker node
2018-06-21 22:20:23 +08:00
Erwan Miran
d3fdfee211
Only subdirectories in /var/lib/kubelet should be unmounted
2018-06-21 11:50:02 +02:00
rongzhang
3232e2743e
Add manage swap on the worker node
2018-06-21 08:15:01 +00:00
Andreas Krüger
cbb959151c
Merge pull request #2737 from Miouge1/update-scheduler
...
Update kube-scheduler policy
2018-06-19 14:53:22 +02:00
Andreas Krüger
c3d8b131db
Merge pull request #2801 from dvazar/bugfix/undefined__network_plugin__variable
...
Fixed "network_plugin" variable
2018-06-19 10:01:06 +02:00
Andreas Krüger
236d1a448d
Merge pull request #2898 from kubernetes-incubator/default_true_authtoken
...
Enable by default the kubelet token auth
2018-06-19 09:56:32 +02:00
Andreas Krüger
cfd51b1ac7
Merge pull request #2899 from mattymo/etcd_events_var_clarity
...
Improve variable handling for disabling etcd events cluster
2018-06-19 09:55:56 +02:00
Matthew Mosesohn
61e97251a5
Improve variable handling for disabling etcd events cluster
2018-06-18 16:58:29 +03:00
Antoine Legrand
c192a01b20
Enable by default the kubelet token auth
2018-06-18 14:20:05 +02:00
Henry Finucane
3ad9e9c5eb
Fix #2261 by supporting Red Hat's limited PATH
...
Red Hat has this theory that binaries in sbin are too dangerous to be on
the default path, but we need them anyway.
RH7 has /sbin and /usr/sbin as symlinks, so that is no longer important.
I'm adding it to the `PATH` instead of making the path to `modinfo`
absolute because I am worried about breaking support for other
distributions.
2018-06-15 12:49:22 -07:00
Earl C. Ruby III
97a05ff34a
Fix the Python and pip version flag in the README
...
The README says to check if Python and pip are installed type:
```
python -v && pip -v
```
Lowercase `-v` is `--verbose`, uppercase `-V` is `--version`. The
command should be:
```
python -V && pip -V
```
2018-06-15 11:10:29 -07:00
Julien Mailleret
6aaaf4a272
Limit the maximum number of revisions saved per helm release ( #2894 )
...
* Limit the maximum number of revisions saved per helm release
2018-06-15 12:50:18 +02:00
Andreas Krüger
cd64f41524
Merge pull request #2844 from chechiachang/fix-inconsistent-variable-in-task-name-and-msg
...
Fix inconsistent variables in task name and task message
2018-06-15 09:19:31 +02:00
Andreas Krüger
df279b1ff6
Merge pull request #2890 from drekle/bugfix/dns-domain-incorrect-for-coredns
...
CoreDNS uses cluster_name instead of dns_domain
2018-06-15 09:06:11 +02:00
Derek Lemon
aa859bc640
Merge pull request #2 from drekle/configure_openstack_subnet_CIDR
...
Configure openstack subnet cidr
2018-06-14 15:15:51 -06:00
Andreas Krüger
6ac601fd2d
Merge pull request #2876 from neith00/docker_iptables
...
parametrized iptables options for docker daemon
2018-06-14 22:23:27 +02:00
Andreas Krüger
3a569c9dcb
Merge pull request #2750 from w-leads/feature/add-vmname-to-vcp-config
...
Add vm_name option to vsphere cloud provider config
2018-06-14 22:22:34 +02:00
Derek Lemon
27d62941b2
Add the subnet_cidr as a required argument to the network module
2018-06-14 17:41:58 +00:00
Derek Lemon
ab345c5f69
Change was not picked up
2018-06-14 17:31:04 +00:00
Derek Lemon
a06f641b6c
Configurable openstack subnet cidr
2018-06-14 16:40:32 +00:00
neith00
f2f1e7f9d1
parametrized iptables options for docker daemon
2018-06-14 12:16:16 +02:00
Rong Zhang
0686b8452e
Merge pull request #2860 from alvistack/cert-manager-0.3.0
...
cert-manager: Upgrade to v0.3.0
2018-06-14 10:35:23 +08:00
Derek Lemon
72504d26dc
Merge pull request #1 from drekle/bugfix/dns-domain-incorrect-for-coredns
...
appropriately use dns_domain instead of cluster_name for coredns for coredns config map
2018-06-13 14:01:00 -06:00
Derek Lemon
1e98e8444e
Using dns domain instead of cluster name for coredns, incase they differ
2018-06-13 18:52:35 +00:00
Rong Zhang
f216e7339b
Merge pull request #2629 from alvistack/cephfs-provisioner-namespace
...
Fixup #2545 , cephfs-provisioner: Individual Namespace for Add-on
2018-06-13 22:42:20 +08:00
Wong Hoi Sing Edison
291dd1aca8
Fixup #2545 , cephfs-provisioner: Individual Namespace for Add-on
2018-06-13 21:52:58 +08:00
Wong Hoi Sing Edison
38da0adead
cert-manager: Upgrade to v0.3.0
2018-06-13 21:47:44 +08:00
Rong Zhang
81b3343796
Merge pull request #2857 from alvistack/ingress-nginx-0.15.0
...
ingress-nginx: Upgrade to 0.15.0
2018-06-13 21:16:17 +08:00
Rong Zhang
f2c160e7e0
Merge pull request #2872 from riverzhang/kube-proxy
...
Reconfigure kube-proxy to access kube-apiserver via the LB(kubeadm)
2018-06-13 17:43:34 +08:00
Brad Beam
3d819a6edd
Adding cluster_name to api cert alt name for vault
2018-06-12 14:15:07 -05:00
rongzhang
20bd656975
Reconfigure kube-proxy to access kube-apiserver via the LB(kubeadm)
2018-06-12 12:53:50 +00:00
Frank Ritchie
cfe939ff08
Tolerate NoSchedule by default
2018-06-11 20:10:13 -04:00
Wong Hoi Sing Edison
9f245dd9b2
ingress-nginx: Upgrade to 0.15.0
2018-06-08 16:05:15 +08:00
Rong Zhang
cf8e9eed69
Merge pull request #2853 from pomverte/patch-1
...
docs(azure arm): update link azure cli login
2018-06-08 01:24:29 +08:00
Rong Zhang
10c9fe96b0
Merge pull request #2859 from riverzhang/nginx
...
Fix nginx-proxy HA when kubeadm enable
2018-06-08 01:10:01 +08:00
Rong Zhang
42b24616ac
Merge pull request #2856 from alvistack/kubernetes-1.10.4
...
Upgrade Kubernetes to 10.0.4 and etcd to 3.2.18
2018-06-07 23:54:03 +08:00
rongzhang
f9ccb93825
Fix nginx-proxy HA when kubeadm enable
2018-06-07 14:27:19 +00:00
Aivars Sterns
daeea75fbb
Merge pull request #2835 from oracle/bm_fix-apiserver-access-ip
...
roles/kubernetes/client: kubeconfig template should use access_ip
2018-06-07 11:50:57 +03:00
Wong Hoi Sing Edison
0ad0202e8f
Upgrade Kubernetes to 10.0.4 and etcd to 3.2.18
2018-06-07 16:20:29 +08:00
hvle
a2a26755fe
docs(azure cli): update links
...
install and login links
2018-06-07 07:10:33 +02:00
Brad Beam
1f02cc70f1
Merge pull request #2825 from dshuvar/dshuvar/docker-options.conf
...
Changed /etc/systemd/system/docker.service.d/docker-options.conf file for successful parsing mount aguments
2018-06-06 12:56:18 -05:00
Brad Beam
fe010504aa
Merge pull request #2851 from bradbeam/vaultnotify
...
Adding wait for vault up handler in service restart
2018-06-06 12:49:03 -05:00
Brad Beam
05e3c76b1d
Merge pull request #2852 from bradbeam/etcdeventsrkt
...
Adding missing rkt template for etcd-events
2018-06-06 12:48:31 -05:00
Brad Beam
63a458063b
Adding missing rkt template for etcd-events
2018-06-06 10:43:30 -05:00
Brad Beam
a8715f9f0f
Adding wait for vault up handler in service restart
2018-06-06 10:40:27 -05:00
Matthew Mosesohn
59be578842
Revert "wip pr for improved cert sync" ( #2849 )
2018-06-06 17:22:25 +03:00
Aivars Sterns
cb0a257349
Merge pull request #2819 from oleh-ozimok/fix-cidr-assert
...
Fix enough network address space assert
2018-06-06 07:32:16 +03:00
Di Xu
1081f620d2
add support for non-amd64 arch gcr.io images
...
Currently all the gcr.io images used in kubespray can only run on x86.
Also gcr.io has not fully support multi-arch docker images.
Add extra var "image_arch" (default is amd64) to support running other
platforms, like arm64.
Change-Id: I8e1c9af533c021cb96ade291a1ce58773b40e271
2018-06-05 17:29:02 +08:00
David Chang
e1cfe83825
Fix inconsistent variables in task name and task message
2018-06-05 16:45:02 +08:00
Di Xu
6019a84fb3
Update docker package info for aarch64
...
Missing corresponding package docker-engine on aarch64, use docker instead.
Change-Id: If5df58337746a81752b5d477e0473600eaee8381
2018-06-05 16:30:28 +08:00
Di Xu
f4d762bb95
fix docker opts incompatible running on aarch64 Redhat/Centos
...
On Aarch64, the default cgroup driver for docker is systemd
instead of cgroupfs. Should conform kubelet to use systemd
as cgroup driver as well to keep it consistent with docker.
Without this change, below exception will be raised.
/usr/bin/docker-current: Error response from daemon: shim
error: docker-runc not installed on system.
Change-Id: Id496ec9eaac6580e4da2f3ef1a386c9abc2a5129
2018-06-05 16:17:16 +08:00
Aivars Sterns
69ea28e187
Merge pull request #2827 from mattymo/testpr
...
wip pr for improved cert sync
2018-06-04 12:43:00 +03:00
Ben Meier
2f5a9e180c
kubernetes/client: kubeconfig template should use the access_ip for the chosen master node
2018-06-04 09:51:05 +01:00
Dmitry
f912a4ece5
Fix compare AnsibleUnsafeText with int ( #2828 )
2018-06-04 11:34:10 +03:00
Rong Zhang
d1e66f9cc8
Add label to kubelet env for kubeadm deploy cluster ( #2841 )
2018-06-04 11:26:47 +03:00
Aivars Sterns
1a25903583
Merge pull request #2838 from kubernetes-incubator/ant31-patch-1
...
Remove the HUGE gitlab logo
2018-06-02 13:19:22 +03:00
Antoine Legrand
0728a2a78a
Update README.md
...
Remove the HUGE gitlab logo
2018-06-01 11:30:40 +02:00
Aivars Sterns
b67cf74c5e
Merge pull request #2823 from scality/dashboard_in_cluster_info
...
Dashboard in cluster info
2018-05-31 15:48:25 +03:00
Aivars Sterns
2832a1cdcd
Merge pull request #2821 from MithunMJ/patch-1
...
Update README.md
2018-05-31 11:43:59 +03:00
Aivars Sterns
4e0ed1ea50
Adding SECURITY_CONTACTS fixes #2816 ( #2833 )
2018-05-31 10:48:49 +03:00
Andreas Krüger
164122555d
Merge pull request #2822 from mirwan/contiv_etcd_init_image
...
contiv-etcd-init image as default instead hardcoded
2018-05-31 09:35:39 +02:00
Erwan Miran
11d87ecc37
removed surnumerary definition of contiv_etcd_init_image_* (already in download role)
2018-05-31 00:02:11 +02:00
Matthew Mosesohn
7433348aae
wip pr for improved cert sync
2018-05-30 12:15:11 +03:00
Erwan Miran
3673ed6262
include contiv_etcd_init_image to downloads role
2018-05-29 17:05:33 +02:00
Dmitrii Shuvar
16f860bbc2
Update docker-options.conf.j2
...
Changed /etc/systemd/system/docker.service.d/docker-options.conf file for successful parsing mount aguments
try fix ci error previous commit
2018-05-29 12:40:33 +03:00
dshuvar
d973ecf5cc
fix error message: '[/etc/systemd/system/docker.service.d/docker-options.conf:3] Failed to parse mount flag , ignoring.'
2018-05-28 18:23:15 +03:00
Julien Girardin
f88cd27686
Add dashboard url as part of kubectl cluster-info
output
2018-05-28 11:46:11 +02:00
Erwan Miran
2a4fc70e1c
contiv-etcd-init image as default instead hardcoded
2018-05-28 11:11:18 +02:00
Mithun Arunan
c9c12129fd
Update README.md
...
fix gitlab logo
2018-05-28 13:04:40 +05:30
Oleg Ozimok
38f7ba2584
Fix enough network address space assert
2018-05-27 18:01:17 +03:00
Bogdan Dobrelya
c4b1808983
Use relative paths for data_files in setup.cfg ( #2812 )
...
pip install doesn't work with absolute paths
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2018-05-25 11:57:03 +02:00
Aivars Sterns
f3ed740a75
Merge pull request #2793 from lpaulmp/use-env-python-header
...
Set widely used header to execute python scripts in different OS
2018-05-25 08:27:41 +03:00
dvazar
b3f9cae820
fixed a check unknown networks (cilium & contiv)
2018-05-22 16:43:19 +07:00
Andreas Krüger
a67bdff28c
Merge pull request #2743 from mrostecki/opensuse-tumbleweed-openssl
...
opensuse: Fix OpenSSL package name
2018-05-22 11:21:04 +02:00
Andreas Krüger
e3c8b230a0
Merge pull request #2806 from Miouge1/no-kpm
...
Remove KPM support
2018-05-22 11:17:52 +02:00
Andreas Krüger
9689a28d15
Merge pull request #2805 from mvasilenko/helm_v291
...
Update Helm to latest version 2.9.1
2018-05-22 11:14:39 +02:00
Miouge1
095d33bc51
Remove KPM support
2018-05-21 22:28:08 +02:00
Mikhail Vasilenko
821966b319
Update Helm version to 2.9.1
2018-05-21 17:36:51 +03:00
Aivars Sterns
ab46687a8a
Merge pull request #2777 from spinside/patch-2
...
Update README.md
2018-05-19 19:29:53 +03:00
spinside
be7278ce9d
Update README.md
2018-05-19 17:11:57 +02:00
spinside
428218dbf0
Update README.md
2018-05-19 17:10:27 +02:00
spinside
d110999d31
Update README.md
2018-05-19 17:09:38 +02:00
dvazar
4b8daa22f6
Fixes #2800
2018-05-19 00:57:09 +07:00
Paul Montero
3f1887316b
Set widely used header for python for different OS
2018-05-17 17:00:49 -05:00
Andreas Krüger
e60a63ea51
Merge pull request #2577 from woopstar/etcd-fix-4
...
Makeover of etcd- and etcd-cluster setup.
2018-05-16 20:49:54 +02:00
Andreas Krüger
a2a7bcd43d
Merge pull request #2786 from cruwe/cjr-assert-maximum-pods-on-node-cidr
...
assert that number of pods on node does not exceed CIDR address range
2018-05-16 19:57:43 +02:00
Christopher J. Ruwe
c1bc4615fe
assert that number of pods on node does not exceed CIDR address range
...
The number of pods on a given node is determined by the --max-pods=k
directive. When the address space is exhausted, no more pods can be
scheduled even if from the --max-pods-perspective, the node still has
capacity.
The special case that a pod is scheduled and uses the node IP in the
host network namespace is too "soft" to derive a guarantee.
Comparing kubelet_max_pods with kube_network_node_prefix when given
allows to assert that pod limits match the CIDR address space.
2018-05-16 11:55:46 +00:00
Andreas Kruger
76dca877da
Set the vars explicit
2018-05-16 13:14:13 +02:00
Aivars Sterns
38e727dbe1
Merge pull request #2744 from girikuncoro/fix-tf-aws-readme
...
Remove unnecessary loadbalancer_apiserver binding on terraform AWS readme
2018-05-16 14:10:38 +03:00
Aivars Sterns
eba486f229
add posibility to provide different yum repository directory ( #2787 )
2018-05-16 13:56:04 +03:00
Andreas Krüger
4ac79993e2
Merge pull request #2666 from AnatolyRugalev/master
...
Added MountFlags variable to docker options
2018-05-16 09:34:34 +02:00
Matthew Mosesohn
7c93e71801
Upgrade k8s to 1.10.2 ( #2748 )
...
* Upgrade k8s to 1.10.2
Bumped etcd version to 3.2.16 as recommended
* Add ipvs fix for v1.10
* change flannel addons test to ha
2018-05-15 16:00:29 +03:00
Andreas Krüger
1be399ab7b
Merge pull request #2772 from cruwe/cjr-correct-perms-on-kubeconfig
...
make admin.conf -> .kube/config non-executable
2018-05-15 13:26:33 +02:00
Anatoly Rugalev
eae4fa040a
Added docker_mount_flags option ( fixes #2624 )
2018-05-15 11:57:18 +02:00
spinside
a3c53efaf7
Update README.md
2018-05-15 10:29:41 +02:00
spinside
0f7fefd1b5
Update README.md
2018-05-15 10:27:44 +02:00
Rong Zhang
76fc786c07
Merge pull request #2782 from riverzhang/kube-dns-upgrade
...
Bump kube-dns to 1.14.10
2018-05-15 16:12:37 +08:00
Andreas Krüger
76a1fd37ff
Merge pull request #2779 from lvthillo/patch-2
...
Update README.md
2018-05-15 10:04:34 +02:00
Christopher J. Ruwe
73800ef111
make certificates non-executable
2018-05-15 07:54:32 +00:00
rongzhang
742a8782dd
Bump kube-dns to 1.14.10
...
Upgrade kube-dns to 1.14.10
https://github.com/kubernetes/kubernetes/tree/master/cluster/addons/dns
2018-05-15 03:29:10 +00:00
Lorenz Vanthillo
8f6c863d7b
Update README.md
...
https://github.com/kubernetes-incubator/kubespray/issues/2764
2018-05-14 20:11:57 +02:00
Arnaud Meukam
cd7c58e8d3
correct some indentation issues in the fluentd daemonset.
2018-05-14 19:56:18 +02:00
spinside
a1de8a07d6
Update README.md
...
Added the requirement of pip for Vagrant users in readme.
See issue #2766
2018-05-14 16:22:38 +02:00
Daniel Mohr
476b14b06e
Make Calico nodename overridable on bare metal
...
Signed-off-by: Daniel Mohr <daniel.mohr@supercrunch.io>
2018-05-14 14:13:51 +02:00
Christopher J. Ruwe
49d106f615
make admin.conf -> .kube/config non-executable
...
Almost certainly, the .kube/config file (YAML) should not be executable.
2018-05-14 09:29:48 +00:00
Andreas Krüger
63fdfae918
Merge pull request #2770 from Miouge1/notify-policy
...
Restart scheduler when policy changes
2018-05-14 10:57:16 +02:00
Miouge1
ad48606e4e
Restart scheduler when policy changes
2018-05-14 10:09:30 +02:00
Rong Zhang
32f312f4a6
Merge pull request #2757 from qbl/master
...
Fix issue #2702 : 'docker_bin_dir' is undefined when running ansible-playbook remove-node.yml
2018-05-14 09:54:57 +08:00
Iqbal Farabi
52ffd5dae4
Fix issue #2702 : 'docker_bin_dir' is undefined when running ansible-playbook remove-node.yml
2018-05-14 07:20:45 +05:30
Arnaud Meukam
c75da43f22
add missing field in fluentd
2018-05-13 21:39:27 +02:00
Arnaud Meukam
65f14f636d
remove support of other CRI runtimes than Docker in the efk stack
2018-05-13 18:37:36 +02:00
Rong Zhang
d7d85d2d3e
Merge pull request #2758 from girikuncoro/fix-remove-node
...
Fix privilege escalation timeout for remove-node playbook
2018-05-13 21:42:10 +08:00
Arnaud Meukam
363627d9f8
serviceName added in elasticsearch. Required when a Statefulset is used
2018-05-13 14:23:37 +02:00
Rong Zhang
322b528ee0
Merge pull request #2765 from alirezaDavid/debug_docs
...
add svc to netchecker-service.default.svc.cluster.local
2018-05-13 12:31:38 +08:00
Alireza David
0fe5f120a3
add svc to netchecker-service.default.svc.cluster.local
2018-05-12 17:34:51 +04:30
Arnaud Meukam
7950a49e28
update fluentd deployment and configmap
2018-05-11 18:56:14 +02:00
Arnaud Meukam
698da78768
update kibana docker image
2018-05-11 18:36:50 +02:00
Arnaud Meukam
ba320e918d
update elasticsearch image
2018-05-11 18:22:44 +02:00
Matthew Mosesohn
07cc981971
refactor vault role ( #2733 )
...
* Move front-proxy-client certs back to kube mount
We want the same CA for all k8s certs
* Refactor vault to use a third party module
The module adds idempotency and reduces some of the repetitive
logic in the vault role
Requires ansible-modules-hashivault on ansible node and hvac
on the vault hosts themselves
Add upgrade test scenario
Remove bootstrap-os tags from tasks
* fix upgrade issues
* improve unseal logic
* specify ca and fix etcd check
* Fix initialization check
bump machine size
2018-05-11 19:11:38 +03:00
Andreas Krüger
e23fd5ca44
Merge pull request #2762 from woopstar/fix-coreos-bootstrap-fact
...
Fix path for pip and python when already bootstrapped
2018-05-11 17:06:28 +02:00
woopstar
7df5edef52
Fix path for pip and python
2018-05-11 16:01:52 +02:00
Giri Kuncoro
1eaa6925b9
Fix privilege escalation timeout for remove-node playbook
2018-05-10 11:53:48 +05:30
Iqbal Farabi
86212d59ae
Fix issue #2702 : 'docker_bin_dir' is undefined when running ansible-playbook remove-node.yml
2018-05-10 10:10:59 +05:30
Andreas Krüger
82deb2c57f
Merge pull request #2725 from desaintmartin/coreos-pip-path
...
coreos: explicitely set pip executable.
2018-05-09 09:47:14 +02:00
Cédric de Saint Martin
7507031cb1
CoreOS bootstrap: set bin_dir and PATH for pip.
2018-05-08 22:20:58 +02:00
Ryo Nishikawa
51a9379d3c
Add vm_name option to vsphere cloud provider config
2018-05-08 12:23:58 -07:00
Andreas Krüger
d73d60c9b0
Merge pull request #2600 from maximegaillard/master
...
Add Openstack tenant name
2018-05-08 12:03:01 +02:00
Andreas Krüger
004b4a0436
Merge pull request #2729 from Ashon/issues/fix-python-compat
...
Use 'items()' for python compatibility
2018-05-08 12:02:28 +02:00
Andreas Krüger
67ce8925e4
Merge pull request #2742 from woopstar/coredns-update
...
Update CoreDNS to version 1.1.2
2018-05-08 12:01:42 +02:00
Giri Kuncoro
3a1f6810b7
Remove loadbalancer_apiserver binding on readme
2018-05-08 14:55:52 +05:30
Michal Rostecki
066016cd3e
opensuse: Fix OpenSSL package name
...
OpenSSL 1.1 package in openSUSE Tumbleweed is named openssl-1_1,
not openssl-1_1_0.
2018-05-08 10:03:30 +02:00
Andreas Krüger
28d6eb6af1
Merge pull request #2644 from cp3hu/master
...
Fix apiserver manifest and kubelet for kube version < 1.9
2018-05-08 09:22:36 +02:00
woopstar
1a47a9b850
Update CoreDNS to version 1.1.2
2018-05-08 09:14:01 +02:00
Andreas Krüger
addd67dc63
Merge pull request #2738 from krystan/master
...
tiny spacing change "can be"
2018-05-04 20:58:26 +02:00
Miouge1
70e0998a70
Update kube-scheduler policy
2018-05-03 21:56:51 +02:00
Krystan Honour
988bd88468
tiny spacing change "can be"
2018-05-03 20:56:07 +01:00
Andreas Krüger
0d88972d3e
Merge pull request #2732 from Towmeykaw/patch-1
...
Update aws.md
2018-05-03 12:45:08 +02:00
Tommy Kindmark
0e012e5987
Update aws.md
...
I had an issue with DNS not working because i didn't add the "kubernetes.io/cluster/$cluster_name" to the route table my subnets where using.
2018-05-02 22:32:41 +02:00
Chad Swenson
595e96ebf1
Merge pull request #2693 from romaindequidt/sync-certs-tasks-fix
...
sync certs tasks (fix #2596 #2667 )
2018-05-02 12:17:23 -05:00
woopstar
4c81cd2a71
Merge branch 'master' of https://github.com/kubernetes-incubator/kubespray into etcd-fix-4
2018-05-02 14:45:58 +02:00
Andreas Kruger
32a8ea8094
Fix wrong var used
2018-05-02 12:44:05 +02:00
Andreas Kruger
c594bd7feb
Do not run setup on all the nodes.
2018-05-02 10:58:38 +02:00
Andreas Krüger
223ed98828
Merge pull request #2728 from hswong3i/ingress-nginx-0.14.0
...
ingress-nginx: Upgrade to 0.14.0
2018-05-02 10:20:46 +02:00
Andreas Krüger
39e3df25a3
Merge pull request #2731 from girikuncoro/fix-aws-readme
...
Fix broken terraform aws readme
2018-05-02 09:35:59 +02:00
Giri Kuncoro
0fb017b9c1
Rename ansible user env vars
2018-05-02 14:07:54 +07:00
ashon
fb465f8b4b
Use 'items()' for python compatibility
2018-05-01 16:55:50 +09:00
Wong Hoi Sing Edison
3501eb6916
ingress-nginx: Upgrade to 0.14.0
2018-05-01 15:42:07 +08:00
Maxime Gaillard
00db751646
Add Openstack tenant name
2018-05-01 09:21:37 +02:00
Pablo Moreno
df6c5b28a1
[contrib/terraform/openstack] Backward compatibility changes ( #2539 )
...
* [terraform/openstack] Restores ability to use existing public nodes and masters as bastion.
* [terraform/openstack] Uses network_id as output
* [terraform/openstack] Fixes link to inventory/local/group_vars
* [terraform/openstack] Adds supplementary master groups
* [terraform/openstack] Updates documentation avoiding manual setups for bastion (as they are not needed now).
* [terraform/openstack] Supplementary master groups in docs.
* [terraform/openstack] Fixes repeated usage of master fips instead of bastion fips
* [terraform/openstack] Missing change for network_id to subnet_id
* [terraform/openstack] Changes conditional to element( concat ) form to avoid type issues with empty lists.
2018-04-30 18:11:07 +03:00
Tomasz Majchrowski
59789ae02a
ISSUE-2706: Provide consistent usage of supplementary_addresses_in_ssl_keys across vault and script mode ( #2707 )
2018-04-30 14:48:17 +03:00
Andreas Krüger
414e420bd2
Merge pull request #2701 from desaintmartin/netchecker-update
...
Update netchecker to v1.2.2.
2018-04-30 10:55:18 +02:00
Andreas Krüger
03de4c0806
Merge pull request #2695 from suzutan/add-oidc-prefix-args
...
Add oidc-user-prefix and oidc-group-prefix args
2018-04-30 09:17:02 +02:00
Andreas Krüger
4fb8e6d455
Merge pull request #2653 from kidk/fixed-incorrect-mem-tag
...
Replaced 'mem' with 'memory/ in elasticsearch and kibana deployment
2018-04-30 09:14:15 +02:00
mirwan
06cdb260f6
labelvalue must be formatted to handle non string values ( #2722 )
2018-04-29 19:02:14 +03:00
mirwan
c3c5817af6
sysctl file should be in defaults so that it can be overriden ( #2475 )
...
* sysctl file should be in defaults so that it can be overriden
* Change sysctl_file_path to be consistent with roles/kubernetes/preinstall/defaults/main.yml
2018-04-27 18:50:58 +03:00
Markos Chandras
9168c71359
Revert "Revert "Add openSUSE support" ( #2697 )" ( #2699 )
...
This reverts commit 51f4e6585a
.
2018-04-26 12:52:06 +03:00
Matthew Mosesohn
1a14f1ecc1
Fix vol format for local volume provisioner in rkt ( #2698 )
2018-04-24 20:32:08 +03:00
Cédric de Saint Martin
44cb126e7d
Update netchecker to v1.2.2.
...
Using official image from mirantis at dockerhub.
2018-04-24 09:13:56 +02:00
Matthew Mosesohn
51f4e6585a
Revert "Add openSUSE support" ( #2697 )
2018-04-23 14:28:24 +03:00
Suzuka Asagiri
f81e6d2ccf
Add oidc-user-prefix and oidc-group-prefix args
2018-04-23 12:23:59 +09:00
Romain DEQUIDT
80dd230a65
sync certs tasks ( fix #2596 #2667 )
2018-04-22 10:00:31 +02:00
Aivars Sterns
d1b4ea5807
Merge pull request #2687 from noris-network/master
...
Document how to allow ipip traffic with calico on OpenStack
2018-04-21 10:38:21 +03:00
Aivars Sterns
f5db403c45
Merge pull request #2689 from lpaulmp/run-once-preinstall-upgrade
...
run_once pre_upgrade tasks which are executing in localhost
2018-04-21 10:37:10 +03:00
Paul Montero
75950344fb
run_once pre_upgrade tasks which are executing in localhost
2018-04-19 11:38:13 -05:00
oz123
a49e06b54b
Document how to allow ipip traffic with calico on OpenStack
2018-04-19 16:00:01 +02:00
Matthew Mosesohn
0945eb990a
Make it possible to skip docker role as a var ( #2686 )
2018-04-19 16:47:20 +03:00
Andreas Krüger
a498cc223b
Merge pull request #2673 from hswong3i/cephfs-provisioner-a71a49d4
...
cephfs-provisioner: Upgrade to a71a49d4
2018-04-19 11:39:10 +02:00
Andreas Krüger
ddd200bbfa
Merge pull request #2604 from shravanpn7/shravan-pr
...
kubectl get pods from 'test' namespace as the pods were created in test ns
2018-04-19 09:27:53 +02:00
Andreas Krüger
9707aa8091
Merge pull request #2677 from woopstar/bootstrap-fix-1
...
Properly check need_pip, always run pip to check if needed
2018-04-19 09:23:26 +02:00
Spencer Smith
2e6a260ab1
Merge pull request #2683 from rsmitty/custom-etcd-vars
...
support custom env vars for etcd
2018-04-18 16:07:43 -04:00
Spencer Smith
49c6bf8fa6
support custom env vars for etcd
2018-04-18 14:03:24 -04:00
Samuel Vandamme
296b92dbd4
Replaced 'mem' with 'memory/ in elasticsearch and kibana deployment
2018-04-18 11:25:29 +02:00
Andreas Krüger
b2756d148a
Merge pull request #2671 from hswong3i/cert-manager-0.2.4
...
cert-manager: Upgrade to v0.2.4
2018-04-18 10:17:39 +02:00
woopstar
756af57787
Properly check need_pip, always run pip to check if needed
...
pip was always being downloaded on subsequent runs, This PR always runs the pip command, and checks the rc of it before downloading pip
Fix in favor of #2582
2018-04-18 10:15:46 +02:00
Andreas Krüger
cb7096f2ec
Merge pull request #2672 from hswong3i/ingress-nginx-0.13.0
...
ingress-nginx: Upgrade to 0.13.0
2018-04-18 10:10:13 +02:00
Andreas Krüger
3c4871d9b8
Merge pull request #2670 from hswong3i/weave-2.3.0
...
weave: Upgrade to 2.3.0
2018-04-18 10:09:38 +02:00
Aivars Sterns
f90673ac68
Merge pull request #2662 from ganeshmaharaj/vagrant-gitignore
...
Vagrantfile: Add vagrant inventory file in any directory to .gitignore
2018-04-17 19:16:00 +03:00
Wong Hoi Sing Edison
d435e17681
cephfs-provisioner: Upgrade to a71a49d4
2018-04-17 13:41:34 +08:00
Wong Hoi Sing Edison
23e9737b85
ingress-nginx: Upgrade to 0.13.0
2018-04-17 12:19:44 +08:00
Wong Hoi Sing Edison
54beb27eaa
cert-manager: Upgrade to v0.2.4
2018-04-17 12:08:10 +08:00
Wong Hoi Sing Edison
7968437a65
Weave: Upgrade to 2.3.0
2018-04-17 08:51:24 +08:00
Andreas Krüger
693b7c5fd0
Merge pull request #2668 from Arslanbekov/kubernetes-logo
...
Kubernetes logo in README.md
2018-04-16 20:06:46 +02:00
Arslanbekov Denis
1bd49ff125
Add production uri
2018-04-16 17:33:24 +03:00
Arslanbekov Denis
9f460dd1bf
Change uri
2018-04-16 17:32:00 +03:00
Arslanbekov Denis
2441dd6f6f
Usage kubernetes-logo in README.md
2018-04-16 17:30:53 +03:00
Arslanbekov Denis
ea44ad4d75
Added img kubernetes-logo.png
2018-04-16 17:29:55 +03:00
Aivars Sterns
4b4786f75d
Merge pull request #2381 from vikas027/inventory_fixes
...
Replaced ansible_ssh_host with ansible_host in sample inventory file and fixed usage of bastion
2018-04-16 10:06:19 +03:00
Matthew Mosesohn
02cd5418c2
Weave limits ( #2660 )
...
* Raise limits for weave
* Adjust weave limits
2018-04-15 18:32:49 +03:00
Ganesh Maharaj Mahalingam
c432697667
Vagrantfile: Add vagrant inventory file in any directory to .gitignore
...
Follow-on fix for #2654
Signed-off-by: Ganesh Maharaj Mahalingam <ganesh.mahalingam@intel.com>
2018-04-13 10:54:21 -07:00
Aivars Sterns
c7683f33cb
Merge pull request #2654 from ganeshmaharaj/fix-vagrant-default-inventory
...
Vagrantfile: Fix default inventory path.
2018-04-13 19:10:42 +03:00
Matthew Mosesohn
49e3665d96
Remove prometheus operator from Kubespray ( #2658 )
...
Kubespray should not install any helm charts. This is a task
that a user should do on his/her own through ansible or another
tool. It opens the door to wrapping installation of any helm
chart.
2018-04-13 18:53:39 +03:00
Matthew Mosesohn
e95ba800ea
Define local volume provisioner dirs in defaults ( #2656 )
2018-04-13 17:23:10 +03:00
Aivars Sterns
5d9bb300d7
Merge pull request #2646 from Atoms/fix-sync-container
...
move when condition to main.yml
2018-04-13 09:10:21 +03:00
Ganesh Maharaj Mahalingam
afcd5997b9
Vagrantfile: Fix default inventory path.
...
Change to support multiple inventory path led to Vagrant environment not
getting a default group_vars in it's inventory path. Using sample as the
default path if none specified.
Fix issue #2541
Signed-off-by: Ganesh Maharaj Mahalingam <ganesh.mahalingam@intel.com>
2018-04-12 14:24:41 -07:00
Matthew Mosesohn
f73717ea35
Mount local volume provisioner dirs for containerized kubelet ( #2648 )
2018-04-12 22:55:13 +03:00
Aivars Sterns
1967963702
Merge pull request #2380 from hwoarang/add-opensuse-support
...
Add openSUSE support
2018-04-12 20:28:50 +03:00
Chad Swenson
76dd0cd777
Merge pull request #2609 from chadswen/front-proxy-client-ca
...
Use dedicated front-proxy-ca for front-proxy-client
2018-04-12 12:19:41 -05:00
Chad Swenson
d87b6fd9f3
Use dedicated front-proxy-ca for front-proxy-client
2018-04-12 11:03:22 -05:00
Chad Swenson
a6a47dbc96
Merge pull request #2617 from bradbeam/savaultcert
...
Adding missing service-account certificate for vault
2018-04-12 11:02:24 -05:00
Matthew Mosesohn
61791bbb3d
Remove condition for docker pull when using download delegate
2018-04-12 19:01:13 +03:00
Aivars Sterns
298c6cb790
Merge pull request #2633 from grebois/patch-3
...
Enabling MutatingAdmissionWebhook for Istio Automatic sidecar injection
2018-04-12 11:53:58 +03:00
Rong Zhang
a561ee6207
Merge pull request #2647 from riverzhang/build_rpm
...
Fix missing install remove-node feature
2018-04-12 15:44:40 +08:00
Matthew Mosesohn
3fa7468d54
Copy ca-key.pem to etcd and kube-masters accordingly
2018-04-12 10:17:54 +03:00
Michal Rostecki
bc3abad602
tests: Add CI jobs for openSUSE
2018-04-11 20:55:20 +01:00
Markos Chandras
d75b5d6931
README.md: Add openSUSE Leap and Tumbleweed as supported distributions
2018-04-11 20:55:20 +01:00
Markos Chandras
02bf742e15
roles: rkt: Add support for SUSE distributions
...
The RPM file that's provided by upstream can be used for SUSE
distributions as well. Moreover we simplify the playbook to use
the 'package' module to install packages across different distros.
Link: https://github.com/rkt/rkt/pull/3904
2018-04-11 20:55:20 +01:00
Markos Chandras
d07f75b389
roles: kubernetes: secrets: Add SUSE support
...
Add path for certificate location for SUSE distributions. Also make sure
the 'update-ca-certificates' command is executed on SUSE hosts as well.
2018-04-11 20:55:02 +01:00
Markos Chandras
2d34781259
roles: etcd: Add support for SUSE distributions
...
Add path for certificate location for SUSE distributions. Also make sure
the 'update-ca-certificates' command is executed on SUSE hosts as well.
2018-04-11 20:53:43 +01:00
Markos Chandras
cdb63a8c49
roles: docker: Ensure service is started if docker is already installed
...
If the 'docker' package is already installed, then the handlers will not
run and the service will not be (re-)started. As such, lets make sure
that the service is started even if the packages are already installed.
2018-04-11 17:46:14 +01:00
Markos Chandras
44a0626fc8
roles: docker: Add support for SUSE distributions
...
Add support for installing Docker on SUSE distributions. The Docker
repository at https://yum.dockerproject.org/repo/main/ does not support
recent openSUSE distributions so the only alternative is to use the
packages from the distro repositories. This however renders the
'docker_version' Ansible variable useless on SUSE.
2018-04-11 17:46:14 +01:00
Nirmoy Das
45eac53ec7
roles: kubernetes: preinstall: Install openssl-1.1.0 on Tumbleweed
...
The openssl package on Tumbleweed is actually a virtual package covering
openssl-1.0.0 and openssl-1.1.0 implementations. It defaults to 1.1.0 so
when trying to install it and openssl-1.0.0 is installed, zypper fails
with conflicts. As such, lets explicitly pull the package that we need
which also updates the virtual one.
Co-authored-by: Markos Chandras <mchandras@suse.de>
2018-04-11 17:46:14 +01:00
Markos Chandras
e42203a13e
roles: kubernetes: preinstall: Add SUSE support
...
Add support for installing package dependencies and refreshing metadata
on SUSE distributions
Co-authored-by: Nirmoy Das <ndas@suse.de>
2018-04-11 17:46:14 +01:00
Nirmoy Das
4ba25326ed
roles: bootstrap-os: Use 'hostname' command on Tumbleweed
...
openSUSE Tumbleweed is having the same problems with CoreOS when it
comes to using the hostname ansible module (#1588 , #1600 ) so we need
to apply a similar workaround.
Co-authored-by: Markos Chandras <mchandras@suse.de>
Link: http://bugzilla.opensuse.org/show_bug.cgi?id=997614
2018-04-11 17:46:14 +01:00
Markos Chandras
dca4777347
roles: bootstrap-os: Add support for SUSE distributions
...
Install some required packages when running on SUSE distributions.
2018-04-11 17:46:14 +01:00
Markos Chandras
e113d1ccab
Vagrantfile: Use rsync to copy working directory to VM
...
Depending on the VM configuration, vagrant may either use 'rsync' or
vboxfs for populating the working directory to the VM. However, vboxfs
means that any files created by the VM will also be present on the host.
As such, lets be explicit and always use 'rsync' to copy the directory
to the VM so we can keep the host copy clean. Moreover, the default
rsync options include '--copy-links' and this breaks rsync if there are
missing symlinks in the working directory like the following one:
Error: symlink has no referent:
"/home/user/kubespray/contrib/network-storage/glusterfs/group_vars"
As such, we override the default options to drop --copy-links.
2018-04-11 17:44:55 +01:00
Nirmoy Das
112ccfa9db
Vagrantfile: Add support for openSUSE Tumbleweed
...
Add support for provisioning kubespray on openSUSE Tumbleweed virtual
machines.
2018-04-11 16:58:03 +01:00
Markos Chandras
0ed1919a38
Vagrantfile: Add support for openSUSE Leap 42.3
...
Add support for provisioning kubespray on openSUSE Leap 42.3 virtual
machines.
2018-04-11 16:58:03 +01:00
rongzhang
ff003cfa3c
Fix missing install remove-node feature
2018-04-11 17:30:01 +08:00
Atoms
6c954df636
move when condition to main.yml
2018-04-11 12:05:33 +03:00
Aivars Sterns
981e61fb51
Merge pull request #2625 from kaarolch/master
...
Add note about ansible_become to coreos section
2018-04-11 08:32:43 +03:00
Karol Chrapek
5db1c3eef7
Add note about privilege escalation method to the README
2018-04-10 22:22:08 +02:00
Christian Phu
3535c29e59
Fix apiserver manifest for kube version < 1.9
2018-04-10 18:17:56 +02:00
Marcelo Grebois
88765f62e6
Updating order
...
https://kubernetes.io/docs/admin/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use
2018-04-10 17:17:39 +02:00
Robin Skahjem-Eriksen
0f35e17e23
Fix new envvar for setting openstack_tenant_id ( #2641 )
...
Changed from OS_PROJECT_ID to OS_PROJECT_NAME.
2018-04-10 17:23:31 +03:00
Brad Beam
77b3f9bb97
Removing default for volume-plugins mountpoint ( #2618 )
...
All checks test if this is defined meaning there is no way to undefine it.
2018-04-10 17:19:25 +03:00
Matthew Mosesohn
09f93d9e0c
Fix CI upgrade scenario by using dynamic inventory file ( #2635 )
...
Also updates the commit ID we use as a basis for upgrade tests.
2018-04-10 16:02:33 +03:00
Matthew Mosesohn
45f15bf753
Revert "Fix new envvar for setting openstack_tenant_id" ( #2640 )
2018-04-10 14:37:24 +03:00
Aivars Sterns
913cc5a9af
Merge pull request #2639 from ironhouzi/openstack_tenant_id_fix
...
Fix new envvar for setting openstack_tenant_id
2018-04-10 14:35:28 +03:00
Aivars Sterns
a46acfcdd8
Merge pull request #2627 from mattymo/no_more_do_do
...
Remove jinja2 dependency of do
2018-04-10 14:32:29 +03:00
Robin Skahjem-Eriksen
0c0f6b755d
Fix new envvar for setting openstack_tenant_id
...
Changed from OS_PROJECT_ID to OS_PROJECT_NAME.
2018-04-10 13:30:48 +02:00
Vikas Kumar
94eb18b3d9
Replaced ansible_ssh_host with ansible_host in sample inventory file as the former is deprecated since Ansible v2.0
...
Fixed the reference of ansible_user in kubespray-defaults role
References:
- http://docs.ansible.com/ansible/latest/intro_inventory.html
2018-04-10 15:21:40 +10:00
Vikas Kumar
af5943f7e6
Merge branch 'master' of github.com:kubernetes-incubator/kubespray
2018-04-10 15:07:35 +10:00
Aivars Sterns
ecda4e3a8c
Merge pull request #2632 from Atoms/permission_fix
...
fix kubectl download location and kubectl.sh helper owner/group remove
2018-04-09 15:33:04 +03:00
Marcelo Grebois
4c12b273ac
Enabling MutatingAdmissionWebhook for Istio Automatic sidecar injection
...
https://istio.io/docs/setup/kubernetes/sidecar-injection.html#automatic-sidecar-injection
2018-04-09 12:49:05 +02:00
Atoms
b68854f79d
fix kubectl download location and kubectl.sh helper owner/group remove
2018-04-09 13:19:26 +03:00
Matthew Mosesohn
f954bc0a5a
Remove jinja2 dependency of do
...
While `do` looks cleaner, forcing this extra option in ansible.cfg
seems to be more invasive. It would be better to keep the traditional
approach of `set dummy = ` instead.
2018-04-09 12:27:53 +03:00
Rong Zhang
7b8359df4d
Merge pull request #2613 from riverzhang/atomic-docker
...
Fix check docker error for atomic
2018-04-08 20:58:42 +08:00
rongzhang
66b61866cd
Fix check docker error for atomic
...
Fix issues #2611
2018-04-08 17:53:16 +08:00
Rong Zhang
3736bfa04a
Merge pull request #2612 from riverzhang/os
...
Fix issues #2522 Support Debian stretch
2018-04-08 16:29:05 +08:00
Brad Beam
dfc46f02d7
Adding missing service-account certificate for vault
...
Missed in #2554
2018-04-06 15:29:52 -05:00
rongzhang
9086665013
Fix issues #2522 Support Debian stretch
...
https://download.docker.com/linux/debian/dists/
2018-04-06 18:31:46 +08:00
RongZhang
0210e53bb7
Merge pull request #2610 from danielhoherd/master
...
Fix typos (no logic changes)
2018-04-06 16:53:40 +08:00
Daniel Hoherd
ca40d51bc6
Fix typos (no logic changes)
2018-04-05 15:54:58 -07:00
RongZhang
ca6a07f595
Add VMware vSphere to deployed
2018-04-05 22:36:50 +08:00
Andreas Krüger
b5bd959a97
Merge pull request #2598 from chenhonggc/persist_ipvs_module
...
Persist ip_vs modules
2018-04-05 09:53:47 +02:00
Shravan Papanaidu
f26e16bf79
kubectl get pods from 'test' namespace as the pods were created in 'test' ns
2018-04-04 13:26:16 -07:00
Chen Hong
973e7372b4
content: |
2018-04-04 23:05:27 +08:00
Chen Hong
b54e091886
Persist ip_vs modules
2018-04-04 18:18:51 +08:00
Andreas Krüger
6c220e4e4b
Merge pull request #2495 from holmsten/rotate-provisioner-token
...
Rotate local-volume-provisioner token
2018-04-04 10:21:12 +02:00
Andreas Krüger
2511e14289
Merge pull request #2346 from Miouge1/kube-scheduler-mode
...
Use legacy policy config to apply the scheduler policy
2018-04-04 10:20:51 +02:00
Andreas Krüger
0f5ea5474c
Merge pull request #2593 from vterdunov/fix-check-vsphere_cloud_provider
...
Properly check vsphere_cloud_provider.rc
2018-04-03 20:35:59 +02:00
Andreas Krüger
6567b8e012
Merge pull request #2590 from hswong3i/istio-download
...
istio: container download related things should defined in the download role
2018-04-03 13:57:43 +02:00
Andreas Krüger
aee3ec682e
Merge pull request #2587 from tossmilestone/update-ingress-nginx-version
...
Bump ingress-nginx-controller to version 0.12.0
2018-04-03 13:56:41 +02:00
Wong Hoi Sing Edison
428a554ddb
istio: container download related things should defined in the download role
2018-04-03 14:29:50 +08:00
Xiaoxi He
32f4194cf8
Bump ingress-nginx-controller to version 0.12.0
2018-04-03 10:39:17 +08:00
Chad Swenson
6f3ff70b17
Merge pull request #2585 from georgejdli/fix-sa-token-signing
...
check if dedicated service account token signing key exists
2018-04-02 14:23:49 -05:00
georgejdli
76bb5f8d75
check if dedicated service account token signing key exists
2018-04-02 10:57:24 -05:00
vterdunov
4b98537f79
Properly check vsphere_cloud_provider.rc
2018-04-02 18:45:42 +03:00
Andreas Krüger
cac2196ad5
Merge pull request #2575 from hswong3i/local-volume-provisioner-download
...
local-volume-provisioner: container download related things should defined in the download role
2018-04-02 10:32:43 +02:00
Andreas Krüger
ba24fe3226
Merge pull request #2570 from avoidik/transfer-cloud-configs
...
Move cloud config configurations to proper location
2018-04-02 10:31:38 +02:00
Matthew Mosesohn
3004791c64
Add pre-upgrade task for moving credentials file ( #2394 )
...
* Add pre-upgrade task for moving credentials file
This reverts commit 7ef9f4dfdd
.
* add python interpreter workaround for localhost
2018-04-02 11:19:23 +03:00
Wong Hoi Sing Edison
b1a7889ff5
local-volume-provisioner: container download related things should defined in the download role
2018-04-02 13:50:11 +08:00
woopstar
86e3506ae6
Etcd cluster setup makeover
...
The current way to setup the etc cluster is messy and buggy.
- It checks for cluster is healthy before the cluster is even created.
- The unit files are started on handlers, not in the task, so you mess with "flush handlers".
- The join_member.yml is not used.
- etcd events cluster is not configured for kubeadm
- remove duplicate runs between running the role on etcd nodes and k8s nodes
2018-04-01 21:38:33 +02:00
Andreas Krüger
92fc2df214
Merge pull request #2574 from hswong3i/cephfs-provisioner-download
...
cephfs-provisioner: container download related things should defined in the download role
2018-04-01 18:26:08 +02:00
Wong Hoi Sing Edison
4f714b07b8
cephfs-provisioner: container download related things should defined in the download role
2018-04-01 20:35:44 +08:00
Andreas Krüger
eb4038a6b9
Merge pull request #2573 from hswong3i/registry-download
...
registry: container download related things should defined in the download role
2018-04-01 11:39:04 +02:00
Wong Hoi Sing Edison
4c0e9ba890
registry: container download related things should defined in the download role
2018-04-01 06:51:57 +08:00
Andreas Krüger
deac627dc7
Merge pull request #2571 from hswong3i/ingress-nginx-download
...
ingress-nginx: container download related things should defined in the download role
2018-03-31 20:51:50 +02:00
Andreas Krüger
6ee3c053b7
Merge pull request #2547 from bobahspb/master
...
prometheus operator, metrics for k8s cluster
2018-03-31 20:51:24 +02:00
bobahspb
16961f69f2
Merge branch 'master' into master
2018-03-31 21:48:39 +03:00
Andreas Krüger
b9b028a735
Update etcd deployment to use correct cert and key ( #2572 )
...
* Update etcd deployment to use correct cert and key
* Update to use admin cert for etcdctl commands
* Update handler to use admin cert too
2018-03-31 14:06:09 -04:00
Wong Hoi Sing Edison
5fe144aa0f
ingress-nginx: container download related things should defined in the download role
2018-04-01 00:22:33 +08:00
Andreas Krüger
5b0da4279f
Merge pull request #2543 from hswong3i/cert-manager-0.2.3
...
Integrate jetstack/cert-manager 0.2.3 to Kubespray
2018-03-31 18:15:25 +02:00
Andreas Krüger
1ac978b8fa
Merge pull request #2567 from mirwan/node_labels_doc_plus_kube_ingress_handling
...
node_labels documentation and kube-ingress label definition as role_node_label
2018-03-31 18:05:52 +02:00
Andreas Krüger
c1a2e9a8c6
Merge pull request #2569 from avoidik/allow-ssh-key-openstack
...
Allow ansible_ssh_private_key_file for Openstack
2018-03-31 18:05:00 +02:00
Wong Hoi Sing Edison
195d6d791a
Integrate jetstack/cert-manager 0.2.3 to Kubespray
2018-03-31 19:29:11 +08:00
avoidik
aa301c31d1
Move credential checks into proper folder
2018-03-31 13:29:00 +03:00
Andreas Krüger
d9418b1dc4
Merge pull request #2554 from georgejdli/fix-sa-token-signing
...
Fix kubespray's ServiceAccount token signing keys
2018-03-31 09:59:22 +02:00
Andreas Krüger
2c89a02db3
Only download container/file if host is in defined group ( #2565 )
...
* Only download container/file if host is in defined group
* Set correct when clause
* Fix last entries
* Update download groups
2018-03-30 22:40:01 -04:00
Chad Swenson
0ca08e03af
Merge pull request #2566 from woopstar/etcd-fix-2
...
Fix etcd from import task to include task
2018-03-30 20:53:32 -04:00
avoidik
15efdf0c16
Move credential checks
2018-03-31 03:26:37 +03:00
avoidik
ab8760cc83
Move credentials pre-check
2018-03-31 03:24:57 +03:00
avoidik
b6da596ec1
Move default configuration parameters for cloud-config
2018-03-31 03:18:23 +03:00
avoidik
3c12c6beb3
Move cloud config configurations to proper location
2018-03-31 02:59:59 +03:00
avoidik
26caad4f12
Allow ansible_ssh_private_key_file for Openstack
2018-03-31 02:38:01 +03:00
Erwan Miran
8ece922ef0
node_labels documentation + kube-ingress label handling as role_node_label
2018-03-31 00:36:11 +02:00
Andreas Krüger
887a468d32
Merge pull request #2562 from avoidik/fix-indexes-pr-2251
...
Fix kubecert_node.results indexes
2018-03-31 00:16:11 +02:00
woopstar
859a7f32fb
Fix import task. Has to be include task to evalutate etcd_cluster_setup variable at run time
2018-03-31 00:06:34 +02:00
Andreas Krüger
1f28764ca1
Merge pull request #2512 from woopstar/hyperkube-fix-1
...
Switch hyperkube from CoreOS to Google
2018-03-30 21:58:03 +02:00
Andreas Krüger
76cb37d6b5
Merge pull request #2544 from woopstar/cert-fix-2
...
Update openssl.conf to count better and work with Jinja 2.9
2018-03-30 21:57:17 +02:00
Andreas Krüger
7ddd4cd38c
Merge pull request #2561 from rsmitty/no_proxy
...
only set no_proxy if other proxy vars are defined
2018-03-30 21:43:23 +02:00
Andreas Krüger
c1eb975545
Merge pull request #2557 from chenhonggc/vault_health_check_delay
...
Maybe vault health check needs delay
2018-03-30 21:39:15 +02:00
Chad Swenson
414b739641
Merge pull request #2564 from rsmitty/jinja-ext
...
include do extension for jinja
2018-03-30 15:30:15 -04:00
georgejdli
572ab650db
copy dedicated service account token signing key for kubeadm migration
2018-03-30 13:03:32 -05:00
Spencer Smith
e296ccb4d0
include do extension for jinja
2018-03-30 12:31:38 -04:00
avoidik
72c2a8982b
Fix kubecert_node.results indexes
2018-03-30 17:24:50 +03:00
Spencer Smith
13c57147eb
only set no_proxy if other proxy vars are defined
2018-03-30 09:48:55 -04:00
Andreas Krüger
7e58b96328
Merge pull request #2525 from avoidik/openstack_subnet_fix
...
Return subnet_id as defined in kubespray.tf
2018-03-30 13:42:12 +02:00
Andreas Krüger
ac4a71452e
Merge pull request #2062 from wanix/ansible-vagrant-update
...
replace ansible.sudo by ansible.become for vagrant
2018-03-30 13:41:45 +02:00
Matthew Mosesohn
03bcfa7ff5
Stop templating kube-system namespace and creating it ( #2545 )
...
Kubernetes makes this namespace automatically, so there is
no need for kubespray to manage it.
2018-03-30 14:29:13 +03:00
Andreas Kruger
af5f376163
Revert
2018-03-30 11:42:20 +02:00
woopstar
004b0a3fcf
Fix merge conflict
2018-03-30 11:38:59 +02:00
Andreas Kruger
4bb7d2b566
Merge branch 'master' of https://github.com/kubernetes-incubator/kubespray into cert-fix-2
2018-03-30 11:34:05 +02:00
Vladimir Vasilkin
94a0562c93
adding prometheus_operator_enabled, k8s_metrics_enabled parameters to tests
2018-03-30 12:29:04 +03:00
Andreas Krüger
f619eb08b1
Merge pull request #2350 from whereismyjetpack/kubeadm-nodename
...
set nodeName to "{{ inventory_hostname }}" in kubeadm-config
2018-03-30 11:15:52 +02:00
Andreas Krüger
55195fe546
Merge pull request #2500 from gorazio/patch-1
...
Add prometheus annotations to spec in ingress
2018-03-30 11:02:31 +02:00
RongZhang
5711074c5a
Merge pull request #2290 from mirwan/node_labels_from_inventory
...
Node labels definition in kubelet params from inventory
2018-03-30 03:42:52 -05:00
Chen Hong
4a705b3fba
May vault health check needs delay
2018-03-30 16:42:08 +08:00
RongZhang
31e386886f
Merge pull request #2555 from chenhonggc/redundancy
...
remove redundancy code
2018-03-29 22:03:37 -05:00
陈宏
4d85e3765e
remove redundancy code
2018-03-30 09:19:00 +08:00
Vladimir Vasilkin
f0a04b4d65
wait 5 * 4 secs until Tiller starts
2018-03-30 00:09:36 +03:00
Vladimir Vasilkin
760ca1c3a9
adding checking for prometheus_operator_enabled
2018-03-29 23:03:43 +03:00
Vladimir Vasilkin
23b3833806
running on the first master only.
2018-03-29 22:51:46 +03:00
Kuldip Madnani
daeeae1a91
Added retries in pre-upgrade.yml and retries while applying kube-dns.yml ( #2553 )
...
* Added retries in pre-upgrade.yml and retries while applying kube-dns.yml
* Removed trailing spaces
2018-03-29 11:37:32 -05:00
georgejdli
c8f857eae4
configure kubespray to sign service account tokens with a dedicated and stable key
2018-03-29 09:50:31 -05:00
Andreas Krüger
270d21f5c1
Merge pull request #2540 from mattymo/cloud_config_timing
...
Write cloud-config during kubelet configuration
2018-03-29 09:12:18 +02:00
Andreas Kruger
bf29198efd
Fix merge conflict
2018-03-29 09:11:13 +02:00
Chad Swenson
db4e225342
Merge pull request #2548 from kmadnani/fix-openssl-conf
...
Added a fix in openssl.conf template to check for loadbalancer IP.
2018-03-28 16:37:24 -05:00
Kuldip Madnani
9ebbf1c3cd
Added a fix in openssl.conf template to check if IP of loadbalncer is available or not.
2018-03-28 16:34:26 -05:00
Chad Swenson
ef7f5edbb3
Remove old docker packages and other docker upgrade fixes ( #2536 )
...
* Remove old docker packages
This removes docker packages that are obsolete if docker-ce packages are to be installed, which fixes some package conflict issues that can occur during upgrades.
* Add support for setting obsoletes=0 when installing docker with yum
2018-03-28 15:10:39 -05:00
woopstar
0b5404b2b7
Fix
2018-03-28 20:28:04 +02:00
Vladimir Vasilkin
19e1b11d98
prometheus operator, metrics for k8s cluster
...
install using Helm:
- Prometheus Operator
- metrics for k8s cluster including: grafana dashboard, alertmanager, node exporters
base project:
https://github.com/coreos/prometheus-operator
the issue:
https://github.com/kubernetes-incubator/kubespray/issues/2042
Previous PR, raw ansible without Helm:
https://github.com/kubernetes-incubator/kubespray/pull/2499
2018-03-28 21:23:30 +03:00
woopstar
0df32b03ca
Update openssl.conf to count better and work with Jinja 2.9
2018-03-28 17:48:56 +02:00
Matthew Mosesohn
72a4223884
Write cloud-config during kubelet configuration
...
This file should only be updated during kubelet upgrade so that
master components are not accidentally restarted first during
preinstall stage.
2018-03-28 16:26:36 +03:00
Andreas Krüger
03117d9572
Merge pull request #2488 from LuckySB/ingress-nginx-node-role
...
Dedicated node for ingress nginx controller
2018-03-28 14:07:40 +02:00
Andreas Krüger
c78f5393c3
Merge pull request #2538 from hswong3i/weave-2.2.1-fixup
...
Fixup #2523 : Upgrade Weave to 2.2.1
2018-03-28 11:06:33 +02:00
Andreas Krüger
fda49564bf
Merge pull request #2492 from chenhonggc/gather_all_instances
...
gather all facts
2018-03-28 09:52:39 +02:00
Andreas Krüger
ed48b6e4b7
Merge pull request #2537 from hswong3i/calico-2.6.8-docs
...
Fixup #2262 : Update README.md for calico v2.6.8
2018-03-28 09:50:07 +02:00
Wong Hoi Sing Edison
848fc323db
Fixup for #2523 :
...
- Rename template for /etc/cni/net.d/00-weave.conflist to 00-weave.conflist.j2
- Apply resources requests/limits to both container weave and weave-npc
2018-03-28 11:16:42 +08:00
Wong Hoi Sing Edison
e6f57f27ee
Fixup #2262 : Update README.md for calico v2.6.8
2018-03-28 10:44:54 +08:00
Brad Beam
015ea62e92
Merge pull request #2262 from tmjd/calico-canal-v2-6-7
...
Update Calico and Canal
2018-03-27 21:07:28 -05:00
Andreas Krüger
2ca7087018
Merge pull request #2524 from avoidik/systemd_user_kubelet
...
Set exact user for Kubelet services
2018-03-27 16:41:10 +02:00
Andreas Krüger
d665f14682
Merge pull request #2526 from mzehrer/patch-1
...
Remove kibana_base_url
2018-03-27 12:40:31 +02:00
avoidik
e375678674
Set exact user for Kubelet services
2018-03-27 11:13:52 +03:00
avoidik
076b5c153f
Return subnet_id as defined in kubespray.tf
2018-03-27 11:13:36 +03:00
Andreas Krüger
d33a482c91
Merge pull request #2529 from dvazar/bugfix/azurerm_generate_inventory
...
Fixed inventory file creation
2018-03-26 21:11:28 +02:00
Andreas Krüger
d64839e7d2
Merge pull request #2532 from LuckySB/etcd_tuning
...
add etc tunning options
2018-03-26 21:10:38 +02:00
Erwan SEITE
31705a502d
change vagrant version
2018-03-26 18:02:14 +02:00
Erwan SEITE
5f5d0ffe14
replace sudo by become
2018-03-26 18:02:14 +02:00
Sergey Bondarev
4f7479d94d
add etc tunning options
...
https://coreos.com/etcd/docs/latest/tuning.html
etcd_snapshot_count
and
ionice priority
2018-03-26 17:25:51 +03:00
dvazar
9511178666
fixed: creation of an inventory template
2018-03-26 12:00:02 +07:00
Michael Zehrer
b8d1652baf
Remove kibana_base_url
...
The default for kibana_base_url does not make sense an makes kibana unusable. The default path forces a 404 when you try to open kibana in the browser. Not setting kibana_base_url works just fine.
2018-03-25 16:08:07 +02:00
Andreas Krüger
f7dc73b830
Merge pull request #2521 from f84anton/patch-1
...
optional calico_ip_auto_method variable with IP_AUTODETECTION_METHOD
2018-03-24 18:37:03 +01:00
Andreas Krüger
8eac37fabd
Merge pull request #2523 from hswong3i/weave-2.2.1
...
Upgrade Weave to 2.2.1
2018-03-24 18:36:28 +01:00
Dann Bohn
1d0415a6cf
fixes typo in kube_override_hostname for kubeadm
2018-03-24 13:29:07 -04:00
Wong Hoi Sing Edison
3f5c60886b
Upgrade Weave to 2.2.1
...
- Fix #2414 , so namespace isolation should now works
- Update weave-net.yml.j2 as per latest https://cloud.weave.works/k8s/net
- Other minor fixup
2018-03-24 17:27:12 +08:00
Anton Fayzrahmanov
a75598b3f4
IP_AUTODETECTION_METHOD docs
2018-03-24 01:54:17 +03:00
Anton Fayzrahmanov
60a057cace
Update calico-node.yml.j2
2018-03-24 01:46:26 +03:00
Anton Fayzrahmanov
dd9d0c0530
optional calico_ip_auto_method variable with IP_AUTODETECTION_METHOD
...
can be set to one of
first-found
can-reach
interface
2018-03-23 16:33:20 +03:00
Dann Bohn
9fa995ac9d
only sets nodeName in kubeadm-config when kube_override_hostname is set
2018-03-23 08:33:25 -04:00
Andreas Krüger
f07734596e
Merge pull request #2333 from hswong3i/cephfs_provisioner_fixup
...
CephFS Provisioner Addon Fixup
2018-03-23 11:57:11 +01:00
Wong Hoi Sing Edison
caec3de364
Updating to use calico-node v2.6.8
2018-03-22 12:33:04 -05:00
Erik Stidham
60bfc56e8e
Update Calico and Canal
...
- Updating to use calico-node v2.6.7
- A few updates to their manifests too
2018-03-22 12:30:23 -05:00
Wong Hoi Sing Edison
206e24448b
CephFS Provisioner Addon Fixup
2018-03-22 23:03:13 +08:00
Spencer Smith
4175431dcd
Merge pull request #2332 from hswong3i/registry_fixup
...
Registry Addon Fixup
2018-03-22 11:01:22 -04:00
Wong Hoi Sing Edison
bb1eb9fec8
Add labels for namespace
2018-03-22 21:33:32 +08:00
Keyvan Hedayati
b0d7115e9b
hswong3i/kubespray#3 : Use {{ cluster_name }} for valid FQDN in REGISTRY_HOST
2018-03-22 21:33:32 +08:00
Wong Hoi Sing Edison
f8ebd08e75
Registry Addon Fixup
2018-03-22 21:33:32 +08:00
Andreas Krüger
6ac7840195
Update to correct versions in README
...
Some of the versions does not match. Fix this.
2018-03-22 11:59:58 +01:00
Andreas Krüger
30e4b89837
Merge pull request #2504 from brtknr/patch-1
...
Update kube-apiserver.manifest.j2 and kubeadm-config.yaml.j2 to incorporate `endpoint-reconciler-type: lease`
2018-03-22 09:15:55 +01:00
Andreas Krüger
405c711edb
Remove v in tag
2018-03-22 09:07:28 +01:00
Chad Swenson
0e6b4e80f7
Merge pull request #2490 from woopstar/workaround-fix-1
...
Only apply roles from first master node to fix regression
2018-03-21 20:29:59 -05:00
Chad Swenson
9949782e96
Merge pull request #2489 from woopstar/token-fix-1
...
Only copy tokens if tokens_list contains any
2018-03-21 20:28:06 -05:00
Chad Swenson
bbb6e7b3da
Merge pull request #2508 from melkosoft/cilium
...
Cilium v.1.0.0-rc8
2018-03-21 20:25:43 -05:00
Chad Swenson
bc68188209
Merge pull request #2498 from zmsp/master
...
Upgraded kubernetes from 1.9.3 to 1.9.5
2018-03-21 20:25:05 -05:00
woopstar
d3780e181e
Switch hyperkube from CoreOS to Google
2018-03-21 23:27:16 +01:00
Andreas Krüger
2e202051e3
Merge pull request #2364 from whereismyjetpack/default-download
...
set local_release_dir in downloads to match others
2018-03-21 23:16:48 +01:00
Chad Swenson
448c1d5faa
Merge pull request #2509 from chadswen/flannel-update
...
Update flannel version to v0.10.0
2018-03-21 12:15:09 -05:00
Andreas Krüger
ff2b8e5e60
Merge pull request #2503 from woopstar/kubelet-fix-1
...
Fix duplicate --proxy-client-cert-file and --proxy-client-key-file
2018-03-21 10:03:31 +01:00
Erwan Miran
8b71ef8ceb
Labels from role (node-role.k8s.io/node) and labels from inventory are merged into node-labels parameter in kubelet
2018-03-21 09:19:05 +01:00
mirwan
ee8f678010
Addition of the .creds extension to the credentials files generated by password lookup in order for Ansible not to consider them as inventory files with inventory_ignore_extensions set accordingly ( #2446 )
2018-03-21 10:50:32 +03:00
melkosoft
6425c837d5
Added GCE Cilium Ubuntu test
2018-03-21 04:39:29 +00:00
Chad Swenson
a6b918c1a1
Merge pull request #2485 from LuckySB/flannel_iface_regexp
...
Add --iface-regex options to flannel
2018-03-20 21:18:01 -05:00
Chad Swenson
c025ab4eb4
Update flannel version to v0.10.0
2018-03-20 19:59:51 -05:00
melkosoft
ae30009fbc
changed version to 1.0.0-rc8
2018-03-20 14:18:56 -07:00
melkosoft
158d775306
changed cilium to 1.0.0-rc7. Set CI to use coreos for cilium test
2018-03-20 12:43:26 -07:00
woopstar
9d540165c0
Set kube_api_aggregator_routing to default false as we use kube-proxy
2018-03-20 16:28:05 +01:00
Bharat Kunwar
0cb51e7530
Merge branch 'master' into patch-1
2018-03-20 13:36:25 +00:00
Bharat Kunwar
13e47e73c8
Update kubeadm-config.yaml.j2
...
As requested
2018-03-20 13:33:36 +00:00
Bharat Kunwar
6c4e5e0e3d
Update kubeadm-config.yaml.j2
2018-03-20 13:30:57 +00:00
Bharat Kunwar
d2fd7b7462
Update kube-apiserver.manifest.j2
2018-03-20 12:19:53 +00:00
Bharat Kunwar
d9453f323b
Update kube-apiserver.manifest.j2
2018-03-20 12:16:35 +00:00
Bharat Kunwar
b787b76c6c
Update kube-apiserver.manifest.j2
...
Ensure that kube-apiserver will respond even if one of the nodes are down.
2018-03-20 12:06:34 +00:00
woopstar
a94a407a43
Fix duplicate --proxy-client-cert-file and --proxy-client-key-file
2018-03-20 12:08:36 +01:00
gorazio
96e46c4209
bump after CLA signing
2018-03-20 10:23:50 +03:00
gorazio
aa30fa8009
Add prometheus annotations to spec in ingress
...
Added annotations from metadata to spec.template.metadata. Without it, pod does not get any annotations, and Prometheus didn't see it
2018-03-20 08:47:36 +03:00
Zobair Shahadat
ebfee51aca
Upgraded kubernetes from 1.9.3 to 1.9.5
2018-03-19 15:42:24 -04:00
Andreas Krüger
8b6a6a5a28
Merge pull request #2487 from MQasimSarfraz/upgrade-playbook-fix
...
Mark "calico-rr" as optional in fact gather
2018-03-19 20:25:24 +01:00
Andreas Holmsten
14ac7d797b
Rotate local-volume-provisioner token
...
When tokens need to rotate, include local-volume-provisioner
2018-03-19 13:04:18 +01:00
Andreas Krüger
f253691a68
Merge pull request #2347 from hswong3i/multiple_artifacts_dir
...
Support multiple artifacts under individual inventory directory
2018-03-19 12:45:55 +01:00
Sergey Bondarev
038da7255f
check if group kube-ingress is not empty
...
fix spelling mistaker ingress_nginx_host_network
set default value for ingress_nginx_host_network: false
2018-03-19 12:59:38 +03:00
Chen Hong
73cd24bf5a
gather facts from all instances, maybe include calico-rr
2018-03-19 14:35:45 +08:00
Chen Hong
4ee9cb2be9
gather facts from all instances, maybe include calico-rr
2018-03-19 14:32:25 +08:00
woopstar
f1d2f84043
Only apply roles from first master node to fix regression
2018-03-18 16:15:01 +01:00
woopstar
b9a949820a
Only copy tokens if tokens_list contains any
2018-03-18 08:42:38 +01:00
Andreas Krüger
50e5f0d28b
Merge pull request #2468 from LuckySB/master
...
change expirations period for generated certificate from 10y to 100 years
2018-03-17 19:43:40 +01:00
Sergey Bondarev
1481f7d64b
Dedicated node for ingress nginx controller
...
The ability to create dedicated node for ingress nginx controller
host type network for nginx controller
and add from example https://github.com/kubernetes/ingress-nginx/blob/master/docs/examples/static-ip/nginx-ingress-controller.yaml
terminationGracePeriodSeconds: 60
2018-03-17 02:54:46 +03:00
Chad Swenson
7d33650019
Merge pull request #2462 from woopstar/coredns-patch
...
Add CoreDNS support
2018-03-16 18:33:36 -05:00
MQasimSarfraz
728598b230
Mark "calico-rr" as optional in fact gathering
2018-03-16 21:09:47 +00:00
woopstar
e40368ae2b
Add CoreDNS support with various fixes
...
Added CoreDNS to downloads
Updated with labels. Should now work without RBAC too
Fix DNS settings on hosts
Rename CoreDNS service from kube-dns to coredns
Add rotate based on http://edgeofsanity.net/rant/2017/12/20/systemd-resolved-is-broken.html
Updated docs with CoreDNS info
Added labels and fixed minor settings from official yaml file: https://github.com/kubernetes/kubernetes/blob/release-1.9/cluster/addons/dns/coredns.yaml.sed
Added a secondary deployment and secondary service ip. This is to mitigate dns timeouts and create high resitency for failures. See discussion at 'https://github.com/coreos/coreos-kubernetes/issues/641#issuecomment-281174806 '
Set dns list correct. Thanks to @whereismyjetpack
Only download KubeDNS or CoreDNS if selected
Move dns cleanup to its own file and import tasks based on dns mode
Fix install of KubeDNS when dnsmask_kubedns mode is selected
Add new dns option coredns_dual for dual stack deployment. Added variable to configure replicas deployed. Updated docs for dual stack deployment. Removed rotate option in resolv.conf.
Run DNS manifests for CoreDNS and KubeDNS
Set skydns servers on dual stack deployment
Use only one template for CoreDNS dual deployment
Set correct cluster ip for the dns server
2018-03-16 21:51:37 +01:00
Brad Beam
4ff17cb5a5
Merge pull request #2457 from MQasimSarfraz/vsphere-volumes-rbac
...
Fix vsphere cloud_provider RBAC permissions
2018-03-16 14:08:49 -05:00
Sergey Bondarev
b7e6dd0dd4
Add --iface-regex options to flannel
...
Flannel use interface for inter-host communication setted on --iface options
Defaults to the interface for the default route on the machine.
flannel config set via daemonset, and flannel config on all nodes is the same.
But different nodes can have different interface names for the inter-host communication network
The option --iface-regex allows the flannel to find the interface on which the address is set from the inter-host communication network
2018-03-16 21:44:36 +03:00
Qasim Sarfraz
8ee2091955
Merge pull request #3 from kubernetes-incubator/master
...
Sync Upstream
2018-03-16 17:21:54 +01:00
Sergey Bondarev
3fac550090
Merge remote-tracking branch 'upstream/master'
2018-03-16 14:09:54 +03:00
Andreas Krüger
d29a1db134
Merge pull request #2461 from woopstar/patch-11
...
Add support to kubeadm too
2018-03-16 08:24:31 +01:00
Andreas Krüger
653d97dda4
Merge pull request #2472 from woopstar/patch-12
...
Make sure output from extra args is strings
2018-03-16 08:23:50 +01:00
Andreas Krüger
5364160d6a
Merge pull request #2476 from woopstar/patch-13
...
Enable encrypting the secrets
2018-03-16 08:22:54 +01:00
Andreas Krüger
1a35948ff6
Enable encrypting the secrets
...
Enable the CI test to check the encryption of secrets
2018-03-15 20:33:57 +01:00
woopstar
40c0f3756b
Encapsulate item instead of casting to string
2018-03-15 20:27:21 +01:00
Andreas Krüger
3d6fd49179
Added option for encrypting secrets to etcd v.2 ( #2428 )
...
* Added option for encrypting secrets to etcd
* Fix keylength to 32
* Forgot the default
* Rename secrets.yaml to secrets_encryption.yaml
* Fix static path for secrets file to use ansible variable
* Rename secrets.yaml.j2 to secrets_encryption.yaml.j2
* Base64 encode the token
* Fixed merge error
* Changed path to credentials dir
* Update path to secrets file which is now readable inside the apiserver container. Set better file permissions
* Add encryption option to k8s-cluster.yml
2018-03-15 22:20:05 +03:00
Oleg Vyukov
d843e3d562
Fix indent Custom ConfigMap ingress-nginx ( #2447 )
2018-03-15 22:18:18 +03:00
Aivars Sterns
d8d5474dcc
Merge pull request #2467 from huzhengchuan/fix/kubeadm_enable
...
Fix error in kubelet.kubeadm.env.j2
2018-03-15 08:50:40 +02:00
Andreas Krüger
788e41a315
Make sure output from extra args is strings
...
Setting the following:
```
kube_kubeadm_controller_extra_args:
address: 0.0.0.0
terminated-pod-gc-threshold: "100"
```
Results in `terminated-pod-gc-threshold: 100` in the kubeadm config file. But it has to be a string to work.
2018-03-14 19:23:43 +01:00
MQasimSarfraz
1bcc641dae
Create vsphere clusterrole only if it doesnt exists
2018-03-14 11:29:35 +00:00
Sergey Bondarev
f8fed0f308
change expirations period for generated certificate from 10 years to 100 years
2018-03-14 13:33:36 +03:00
zhengchuan hu
d1e6632e6a
Fix err in kubelet.kubeadm.env.j2
...
1. 404 link url
2. kubelet_authentication_token_webhook is not work
3. kube_reserved variable set twice
2018-03-14 17:25:21 +08:00
Aivars Sterns
710295bd2f
Merge pull request #2434 from protomech/feature/azure-vnet-resource-group
...
add support for azure vnetResourceGroup
2018-03-13 17:42:09 +02:00
RongZhang
3e2d68cd32
Merge pull request #2455 from whereismyjetpack/kube-limits
...
uses new kube_memory_reserved/kube_cpu_reserved variables in kubelt
2018-03-13 06:28:07 -05:00
Dann Bohn
f3788525ff
fixes yamllint for docker defaults, and weave network plugin
2018-03-13 06:15:48 -04:00
Andreas Krüger
39d247a238
Add support to kubeadm too
...
Explicitly defines the --kubelet-preferred-address-types parameter #2418
Fixes #2453
2018-03-13 10:31:15 +01:00
Aivars Sterns
b37144b0b2
Merge pull request #2459 from riverzhang/remove-node-docs
...
Add remove node to getting-started doc
2018-03-13 11:12:42 +02:00
rong.zhang
2e0b33f754
Add remove node to getting-started doc
2018-03-13 16:41:26 +08:00
Aivars Sterns
adc3f79c23
Merge pull request #2458 from jouve/collect_info
...
use archive instead of command
2018-03-13 09:45:48 +02:00
Aivars Sterns
7904b454ba
Merge pull request #2460 from riverzhang/fix-weave
...
Fix yamllint roles error for #2188 commit
2018-03-13 09:40:54 +02:00
rong.zhang
d264da8f08
Fix yamllint roles error for #2188 commit
2018-03-13 14:28:49 +08:00
Cyril Jouve
6abe78ff46
use archive instead of command
2018-03-12 19:59:22 +01:00
MQasimSarfraz
9a4aa4288c
Fix vsphere cloud_provider RBAC permissions
2018-03-12 18:07:08 +00:00
Dann Bohn
50e3ccfa2b
uses new kube_memory_reserved/kube_cpu_reserved variables in kubelt
2018-03-12 12:46:14 -04:00
RongZhang
69a3c33ceb
Merge pull request #2429 from riverzhang/patch-6
...
Fix Docker exits prematurely
2018-03-12 06:16:25 -05:00
RongZhang
649b1ae868
Merge pull request #2452 from riverzhang/dockerproject
...
Fix issues #2451 Support docker-ce and docker-engine
2018-03-12 06:15:44 -05:00
Aivars Sterns
973cc12ca9
Merge pull request #2188 from cornelius-keller/fix_weave
...
fix nodePort for weave
2018-03-12 10:55:41 +02:00
Aivars Sterns
436de45dd4
Merge pull request #2295 from manics/supplementary-bugfix
...
Fix indexing of supplementary DNS in openssl.conf
2018-03-12 10:54:56 +02:00
Aivars Sterns
5f186a2835
Merge pull request #2418 from kubernetes-incubator/1439br
...
Explicitly defines the --kubelet-preferred-address-types parameter
2018-03-12 10:53:48 +02:00
RongZhang
ecec94ee7e
Fix Docker exits prematurely
...
details:https://github.com/moby/moby/pull/31490/files
2018-03-12 14:44:47 +08:00
rong.zhang
196995a1a7
Fix issues#2451 Support docker-ce and docker-engine
...
Support docker-ce and docker-engine include redhat/centos ubuntu debian
2018-03-12 13:31:31 +08:00
Spencer Smith
3a714fd4ac
Merge pull request #2427 from hswong3i/local_volume_provisioner_default
...
FIXUP #2424 : local_provisioner directory should be created only if enabled
2018-03-10 09:00:35 -05:00
Spencer Smith
2132ec0269
Merge pull request #2378 from dleske/reorg-inventory-for-opst
...
Update OpenStack contrib to use per-cluster inventory layout
2018-03-09 15:21:21 -05:00
Spencer Smith
c47fdc9aa0
Merge pull request #2445 from chadswen/kube-cert-directory-fix
...
Fix kubernetes cert permission sync
2018-03-09 15:10:35 -05:00
Spencer Smith
5c4cfb54ae
Merge pull request #2444 from chadswen/system-node-crb-name
...
Prefix system:node CRB
2018-03-09 15:09:01 -05:00
chadswen
cd153a1fb3
Fix kubernetes cert permission sync
...
Add `state: directory` to `file` task so that `recurse: yes` will actually take effect and ensure
certs/keys have the right file mode and owner
2018-03-09 00:11:10 -06:00
chadswen
b0ab92c921
Prefix system:node CRB
...
Change the name of `system:node` CRB to `kubespray:system:node` to avoid
conflicts with the auto-reconciled CRB also named `system:node`
Fixes #2121
2018-03-08 23:56:46 -06:00
RongZhang
5007a69eee
Merge pull request #2437 from huzhengchuan/fix/callo-routereflector
...
Fix always download calico_rr image
2018-03-08 23:22:48 -06:00
Chad Swenson
8a46e050e3
Merge pull request #2433 from octarinesec/eyeofthefrog/systemd_command_fix
...
Fix systemd version detection
2018-03-08 22:28:12 -06:00
Chad Swenson
256fd12da5
Merge pull request #2440 from huzhengchuan/fix/proxy
...
clean http-proxy.conf
2018-03-08 20:36:26 -06:00
zhengchuan hu
8e36ad09b4
clean http-proxy.conf
2018-03-08 23:16:02 +08:00
zhengchuan hu
96a92503cb
Fix always download calico_rr image
2018-03-08 17:04:16 +08:00
RongZhang
5253153dbb
Merge pull request #2416 from riverzhang/delete-node
...
Remove nodes
2018-03-08 01:55:20 -06:00
rong.zhang
12c78e622b
Remove nodes
...
Drain node except daemonsets resource
Use reset cluser for delete deploy data
Then delete node
2018-03-08 15:03:42 +08:00
RongZhang
216bf2e867
Merge pull request #2422 from riverzhang/patch-5
...
Enable OOM killing for etcd-events
2018-03-07 23:15:19 -06:00
Wong Hoi Sing Edison
a086686e9f
Support multiple artifacts under individual inventory directory
2018-03-08 11:57:53 +08:00
Wong Hoi Sing Edison
6402004018
FIXUP #2424 : local_provisioner directory should be created only if enabled
2018-03-08 11:57:46 +08:00
RongZhang
955f833120
Merge pull request #2430 from huzhengchuan/fix/kube-reserve
...
fix the name of some variable
2018-03-07 21:25:32 -06:00
Chad Swenson
f4476f25bd
Merge pull request #2435 from chadswen/kube-module-enhancements
...
kube Module Enhancements
2018-03-07 17:17:01 -06:00
Chad Swenson
8960d5bcfa
kube Module Enhancements
...
* Multiple files are now supported across operations.
* Can be specified as a list or a comma separated string.
* Single item per task params will still work without changes.
* Added `files`, `filenames`, and `file`, as aliases for the `filename` param.
* Improved output of error message to always include stderr
* `exists` now supports checking files
Follow up PRs encouraged across roles to start converting `with_items` loops on `kube` tasks into `files` param lists so we can improve performance.
2018-03-07 14:50:09 -06:00
Chris Mildebrandt
605738757d
Fix systemd version detection
...
Change "command" to "shell" in order for the pipe to work correctly
2018-03-07 11:32:47 -08:00
Aivars Sterns
569613f2a4
Merge pull request #2425 from hswong3i/ingress_nginx_configmap
...
Add Custom ConfigMap Support for ingress-nginx
2018-03-07 19:02:03 +02:00
Antoine Legrand
cc182ea2f3
Merge pull request #2432 from kubernetes-incubator/remove-do-ci
...
Remove DigitalOcean
2018-03-07 16:29:45 +01:00
Wong Hoi Sing Edison
3f96b2da7a
Add Custom ConfigMap Support for ingress-nginx
2018-03-07 21:37:45 +08:00
Antoine Legrand
9e44f94176
Remove DigitalOcean
2018-03-07 13:37:07 +01:00
Aivars Sterns
f94a7c6d82
Merge pull request #2431 from huzhengchuan/fix/doc-large-deployment
...
add tip to large-deployments.doc
2018-03-07 14:14:30 +02:00
RongZhang
dbf40bbbb8
docker-ce instead of docker-engine repo ( #2423 )
...
* Use docker-ce 17.03.2
* Docker-engine may be discarded
2018-03-07 15:11:20 +03:00
RongZhang
954aae931e
Fix issues #2246 ( #2403 )
...
Support Centos/Fedora atomic host
2018-03-07 14:39:03 +03:00
zhengchuan hu
0b1200bb49
add tip to large-deployments.doc
...
set the ``etcd_events_cluster_setup: true`` store events
in a separate dedicated etcd instance.
2018-03-07 19:00:00 +08:00
zhengchuan hu
646d473e8e
fix the name of some variable
2018-03-07 18:30:34 +08:00
Aivars Sterns
6975cd1622
Merge pull request #2419 from hswong3i/ingress_nginx_labels
...
Add labels for ingress_nginx_namespace
2018-03-06 08:01:13 +02:00
Aivars Sterns
b7f9bf43c2
Merge pull request #2421 from ctlam/master
...
Adding ssh_private_key_file to ProxyCommand
2018-03-06 07:59:26 +02:00
RongZhang
388b627f72
Enable OOM killing for etcd-events
...
Enable OOM killing like docker run etcd
2018-03-05 20:46:39 -06:00
Dominic Lam
f9019ab116
Adding ssh_private_key_file to ProxyCommand
...
This is trying to match what the roles/bastion-ssh-config is trying to do. When the setup is going through bastion, we want to ssh private key to be used on the bastion instance.
2018-03-05 13:15:10 -08:00
Michael Beatty
07657aecf4
add support for azure vnetResourceGroup
2018-03-05 13:40:25 -06:00
Wong Hoi Sing Edison
e65904eee3
Add labels for ingress_nginx_namespace, also only setup serviceAccountName if rbac_enabled
2018-03-05 23:11:18 +08:00
Ayaz Ahmed Khan
89847d5684
Explicitly defines the --kubelet-preferred-address-types parameter
...
to the API server configuration.
This solves the problem where if you have non-resolvable node names,
and try to scale the server by adding new nodes, kubectl commands
start to fail for newly added nodes, giving a TCP timeout error when
trying to resolve the node hostname against a public DNS.
2018-03-05 15:25:14 +01:00
RongZhang
dada98143c
Fix kubespary rpm spec file some requires ( #2417 )
...
Fix kubespary rpm spec file some requires
2018-03-05 13:53:51 +03:00
Aivars Sterns
713efff78e
Merge pull request #2184 from kongslund/kubelet-webhook-support
...
Added support for kubelet webhook authentication/authorization
2018-03-05 12:23:47 +02:00
Jonas Kongslund
585303ad66
Start with three dashes for consistency
2018-03-03 10:05:05 +04:00
Jonas Kongslund
a800ed094b
Added support for webhook authentication/authorization on the secure kubelet endpoint
2018-03-03 10:00:09 +04:00
Aivars Sterns
84e47f4aaa
Merge pull request #2411 from MQasimSarfraz/patch-1
...
README.md update for default component versions
2018-03-02 18:59:36 +02:00
Qasim Sarfraz
46ff9ce765
README.md update for default component versions
2018-03-02 16:37:41 +00:00
Aivars Sterns
e31eb199c5
Merge pull request #2324 from hswong3i/nginx_ingress
...
Integrate kubernetes/ingress-nginx 0.10.2 to Kubespray
2018-03-02 17:35:40 +02:00
Wong Hoi Sing Edison
fd46442188
Integrate kubernetes/ingress-nginx 0.11.0 to Kubespray
2018-03-02 23:33:19 +08:00
Matthew Mosesohn
9837b7926f
Use proper lookup of etcd host for calico ( #2408 )
...
Fixes #2397
2018-03-02 15:36:52 +03:00
Aivars Sterns
5aeaa248d4
Merge pull request #2407 from brant4test/PR
...
remove + groups['calico-rr']
2018-03-02 12:04:43 +02:00
brant
739f6c78ad
remove [calico-rr]
2018-03-02 15:41:04 +08:00
Aivars Sterns
b75b6b513b
Merge pull request #2406 from riverzhang/fedora
...
Delete unused fedora docker repo
2018-03-02 09:33:57 +02:00
rong.zhang
2a3b48edaf
Delete unused fedora docker repo
2018-03-02 14:39:13 +08:00
brant
7c7b33a0f8
remove + groups['calico-rr']
2018-03-02 14:31:54 +08:00
brant
40d72d1865
added [calico-rr]
2018-03-02 13:48:11 +08:00
brant
cdc2e7d4fe
Test-for-release-(do-not-merge)
2018-03-02 11:30:55 +08:00
Spencer Smith
2628663590
Merge pull request #2376 from dleske/opst-deprecation-warning
...
Correct use of deprecated argument to TF/OpenStack module
2018-03-01 12:51:09 -05:00
Antoine Legrand
5cc77eb6fd
Merge pull request #2294 from Nowaker/patch-1
...
Enable OOM killing
2018-03-01 14:56:26 +01:00
Aivars Sterns
a1aa9d79c0
Merge pull request #2341 from trilogy-group/hotfix/single_node_limited_run
...
gather facts for all nodes, even if running for single one (--limit)
2018-03-01 15:50:45 +02:00
Aivars Sterns
8b21034b31
Merge pull request #2344 from hswong3i/local_volume_provisioner_fixup
...
Upgrade Local Volume Provisioner Addon to v2.0.0
2018-03-01 13:12:44 +02:00
RongZhang
67ffd8e923
Add etcd-events cluster for kube-apiserver ( #2385 )
...
Add etcd-events cluster for kube-apiserver
2018-03-01 11:39:14 +03:00
Chad Swenson
af7edf4dff
Merge pull request #2369 from eviln1/fix-insecure-apiserver-port
...
fix apiserver manifest when disabling insecure_port
2018-02-28 17:48:08 -06:00
Spencer Smith
0fd3b9f7af
Merge pull request #2391 from Miouge1/latest-helm
...
Install latest version of Helm
2018-02-28 15:04:41 -05:00
Matthew Mosesohn
7ef9f4dfdd
Revert "Add pre-upgrade task for moving credentials file" ( #2393 )
2018-02-28 22:41:52 +03:00
Brad Beam
6ce507f39f
Merge pull request #2345 from mattymo/credentials_upgrade_fix
...
Add pre-upgrade task for moving credentials file
2018-02-28 12:39:02 -06:00
Brad Beam
34cab91e86
Merge pull request #2366 from z1nkum/bump_dashboard_tag
...
Bump dashboard from 1.8.1 to 1.8.3 because of reload bug
2018-02-28 12:38:34 -06:00
Brad Beam
63de9bdba3
Merge pull request #2363 from whereismyjetpack/default-kube-proxy
...
default kube_proxy_mode in kubernetes-defaults
2018-02-28 12:37:46 -06:00
Brad Beam
afb6e7dfc3
Merge pull request #2362 from mattymo/calico_ignore_extra_pools_again
...
Use CNI to assign kube_pods_subnet for calico
2018-02-28 12:36:50 -06:00
Brad Beam
ad89d1c876
Update pre_upgrade.yml
2018-02-28 19:07:44 +03:00
Simon Li
6b80ac6500
Fix indexing of supplementary DNS in openssl.conf
2018-02-28 16:04:52 +00:00
Miouge1
2257dc9baa
Install latest version of Helm
2018-02-28 16:29:38 +01:00
Andrew Greenwood
a40d9f3c72
Document a silent killer... ( #2373 )
...
Adding this into the default example inventory so it has less of a chance of biting others after weeks of random failures (as etcd does not express that it has run out of RAM it just stalls).. 512MB was not enough for us to run one of our products.
2018-02-28 15:36:51 +03:00
Dmitry Vlasov
977e7ae105
remove obsolete init image, bump dashboard version 1.8.1 -> 1.8.3
2018-02-28 12:52:59 +03:00
Matthew Mosesohn
bc0fc5df98
Use node cert for etcd tasks instead of delegating to first etcd ( #2386 )
...
For etcdctl commands, use admin cert instead of node because this file
doesn't exist on etcd only hosts.
2018-02-27 22:23:51 +03:00
Brad Beam
810c10a0e9
Merge pull request #2382 from chechiachang/replace-tab-with-space-and-remove-redundant-spaces
...
Remove redundant spaces
2018-02-27 10:39:57 -06:00
Matthew Mosesohn
bb469005b2
Add pre-upgrade task for moving credentials file
2018-02-27 17:35:15 +03:00
Brad Beam
89ade65ad6
Fixing etcd certs for calico rr ( #2374 )
2018-02-27 17:34:07 +03:00
RongZhang
128d3ef94c
Fix run kubectl error ( #2199 )
...
* Fix run kubectl error
Fix run kubectl error when first master doesn't work
* if access_ip is define use first_kube_master
else different master use a different ip
* Delete set first_kube_master and use kube_apiserver_access_address
2018-02-27 16:32:20 +03:00
RongZhang
b7e06085c7
Upgrade to Kubernetes v1.9.3 ( #2323 )
...
Upgrade to Kubernetes v1.9.3
2018-02-27 14:31:59 +03:00
David Chang
8875e25fe9
Replace tab with space. Remove redundant spaces
2018-02-27 14:34:58 +08:00
Chad Swenson
44f9739750
Merge pull request #2326 from merwan/patch-1
...
Fix link markdown markup
2018-02-26 18:40:11 -06:00
Chad Swenson
9e85a023c1
Merge pull request #2360 from mattymo/reset_fixes
...
retry unmount kubelet dirs
2018-02-26 18:30:38 -06:00
Drew Leske
b6698e686a
Update README.md with minor fixes/clarifications
2018-02-23 16:54:13 -08:00
Drew Leske
66bd570584
Update README.md with minor fixes and cleanup
2018-02-23 15:05:29 -08:00
Drew Leske
e2c5a3895b
Rename sample inventory directory to be less awkward
2018-02-23 14:39:31 -08:00
Drew Leske
fe719c1bc1
Update OpenStack contrib to use per-cluster inventory layout
...
Supports Kubespray workspace with multiple OpenStack-deployed k8s
clusters.
* Create sample inventory directory for template
* Moved broken `group_vars` symlink to sample directory
* Created sample cluster Terraform file
* Updated documentation
2018-02-23 12:08:45 -08:00
Drew Leske
89fe6505f9
Correct use of deprecated argument to TF/OpenStack module
...
https://www.terraform.io/docs/providers/openstack/r/networking_router_v2.html#external_gateway
2018-02-22 22:41:19 -08:00
Brad Beam
4b5f780ff0
Merge pull request #2357 from octarinesec/eyeofthefrog/set_TasksMax_infinity_for_ubuntu
...
Set TasksMax to infinity on any OS with systemd
2018-02-22 21:31:10 -06:00
Brad Beam
31659efe13
Fixing cert name in calico/canal for etcd check ( #2358 )
2018-02-22 17:37:07 +03:00
Nedim Haveric
2bd3776ddb
fix apiserver manifest when disabling insecure_port
2018-02-22 14:00:32 +01:00
Brad Beam
c874f16c02
Fixing credential lookup for fe proxy and vault ( #2361 )
2018-02-22 15:09:26 +03:00
Maxim Krasilnikov
ba91304636
Fixed generate front proxy client certs with vault ( #2359 )
...
* Fixed generate front proxy client certs with vault
* fix vault cert management
* Distrebute etcd node certs to vault hosts
2018-02-22 15:08:50 +03:00
Andreas Krüger
42a0f46268
Add health check to kube proxy ( #2356 )
...
Adding health checking to kube proxy. Fixes #2308
2018-02-21 23:14:45 +03:00
Andreas Krüger
d84ff06f73
Set filemode to 0640 ( #2315 )
...
* Set filemode to 0640
weave-net.yml file is readable by all users on the host. It however contains the weave_password to encrypt all pod communication. It should only be readable by root.
* Set mode 0640 on users_file with basic auth
2018-02-21 23:13:46 +03:00
Matthew Mosesohn
87f33a4644
Use CNI to assign kube_pods_subnet for calico
...
Now calico can be deployed if there are other existing pools
and not confuse IPAM and end up with pods in the wrong pools.
2018-02-21 20:32:28 +03:00
Dann Bohn
2d69b05c77
set local_release_dir in downloads to match others
2018-02-21 11:35:34 -05:00
Dann Bohn
2eb57ee5cd
default kube_proxy_mode in kubernetes-defaults
2018-02-21 11:33:25 -05:00
Chris Mildebrandt
85c69c2a4a
Add check for atomic hosts in template
2018-02-21 08:26:18 -08:00
Matthew Mosesohn
c20f38b89c
retry unmount kubelet dirs
2018-02-21 14:41:57 +03:00
Aivars Sterns
bfe196236f
Merge pull request #2033 from ArchiFleKs/terraform-fix-cred
...
Update Terraform docs and authentication method
2018-02-21 12:16:24 +02:00
Wong Hoi Sing Edison
d4c61d2628
Fixup for gce_centos7-flannel-addons
2018-02-21 13:41:25 +08:00
Wong Hoi Sing Edison
deef47c923
Upgrade Local Volume Provisioner Addon to v2.0.0
2018-02-21 13:41:25 +08:00
Chris Mildebrandt
c19d8994b9
Set TasksMax to infinity on any OS with systemd
2018-02-20 11:55:13 -08:00
Chad Swenson
2de6da25a8
Merge pull request #2312 from woopstar/patch-7
...
Added iptables lock fix and ajusted oom-score
2018-02-19 22:47:07 -06:00
melkosoft
f13e76d022
Added cilium support ( #2236 )
...
* Added cilium support
* Fix typo in debian test config
* Remove empty lines
* Changed cilium version from <latest> to <v1.0.0-rc3>
* Add missing changes for cilium
* Add cilium to CI pipeline
* Fix wrong file name
* Check kernel version for cilium
* fixed ci error
* fixed cilium-ds.j2 template
* added waiting for cilium pods to run
* Fixed missing EOF
* Fixed trailing spaces
* Fixed trailing spaces
* Fixed trailing spaces
* Fixed too many blank lines
* Updated tolerations,annotations in cilium DS template
* Set cilium_version to iptables-1.9 to see if bug is fixed in CI
* Update cilium image tag to v1.0.0-rc4
* Update Cilium test case CI vars filenames
* Add optional prometheus flag, adjust initial readiness delay
* Update README.md with cilium info
2018-02-16 21:37:47 -06:00
Dann Bohn
95e2bde15b
set nodeName to "{{ inventory_hostname }}" in kubeadm-config
2018-02-16 16:20:08 -05:00
Antoine Legrand
5c0a41a6e0
Merge pull request #2340 from eduardobaitello/patch-1
...
Fix typo in aws.md docs
2018-02-16 19:03:14 +01:00
David Miller
6424928ba3
Update typo in the tag necessary for the ELB role ( #2330 )
2018-02-16 17:20:03 +01:00
Miouge1
4c280e59d4
Use legacy policy config to apply the scheduler policy
2018-02-16 13:43:35 +01:00
Antoine Legrand
56b7400dac
Merge pull request #2325 from kubernetes-incubator/ci_two_stages
...
rollback to a two stage CI
2018-02-15 23:27:45 +01:00
Antoine Legrand
d095a1bb96
rollback to a two stage CI
2018-02-15 23:17:10 +01:00
Antoine Legrand
76a89039ad
Merge pull request #2285 from jasdeep-hundal/do_not_install_python_apt
...
Remove redundant python-apt install
2018-02-15 17:04:08 +01:00
Sebastian Söderqvist
ba2107ea8c
is-default-class is case sensative so we must return a lowercase string
2018-02-15 10:51:42 +01:00
Łukasz Piątkowski
f90e509bf6
gather facts for all nodes, even if running for single one (--limit)
2018-02-14 15:45:50 +00:00
Eduardo Baitello
dd8902bfcd
Fix typo in aws.md docs
...
"kubernetes" is spelled wrong in the cluster tag example
2018-02-14 12:52:36 -02:00
southquist
3f44a33738
allow for configurable openstack storage class
2018-02-14 11:32:56 +01:00
Merouane Atig
911af3f331
Fix link markdown markup
2018-02-13 16:02:50 +01:00
Antoine Legrand
e2f083f885
Merge pull request #2317 from kubernetes-incubator/add_digitalocean_ci
...
Additional CI platform (digital-ocean)
2018-02-13 14:59:08 +01:00
Antoine Legrand
e5a450349b
Single step CI
2018-02-13 12:30:14 +01:00
Antoine Legrand
7a20d69809
fix inventory paths
2018-02-12 17:38:32 +01:00
Antoine Legrand
c187ae22e5
Force to /usr/bin/python in CI
2018-02-12 17:38:32 +01:00
Antoine Legrand
cb202a76df
Fix tests
2018-02-12 17:38:32 +01:00
Antoine Legrand
e1d139db2e
Use new CI image
2018-02-12 17:38:32 +01:00
Antoine Legrand
51e695066a
Add dockerfile for the ci
2018-02-12 17:38:32 +01:00
Antoine Legrand
ce25fa4302
Enable multiple CI platform / Add DigitalOcean
2018-02-12 17:38:32 +01:00
Antoine Legrand
c403b61383
Update private key
2018-02-12 17:38:32 +01:00
Antoine Legrand
3ef7c25a16
Add digitalocean test case
2018-02-12 17:38:32 +01:00
Antoine Legrand
442d211ee3
Add DigitalOcean playbook to create VM
2018-02-12 17:38:32 +01:00
RongZhang
c0aad0a6d5
Fix install etcd by host service ( #2297 )
...
Fix bug issues #2289
2018-02-12 17:34:01 +01:00
Matthew Mosesohn
5903aea86f
Update coreos-calico-aio scenario to test no group vars ( #2314 )
...
This updated scenario ensures deployment still passes without
having any group_vars available.
2018-02-12 12:38:06 +01:00
Aivars Sterns
f4a68eae01
Merge pull request #2313 from hswong3i/multiple_inventory_dir
...
Update default CONFIG_FILE for contrib/inventory_builder/inventory.py
2018-02-12 11:24:35 +00:00
Wong Hoi Sing Edison
4a36b091f4
Update default CONFIG_FILE for contrib/inventory_builder/inventory.py
2018-02-12 18:01:56 +08:00
Antoine Legrand
874ec8fc73
Merge pull request #2311 from brutus333/fix/wait4k8sapi
...
Increased timeout values for k8s API server restart
2018-02-12 10:25:16 +01:00
Andreas Krüger
41ca67bf54
Added iptables lock fix and ajusted oom-score
...
xtables lock was missing. Added new option for oom-score to make sure it's not killed in an OOM situation before regular pods.
2018-02-12 10:21:38 +01:00
Virgil Chereches
d72232f15b
Increased timeout values for k8s API server restart
2018-02-12 07:35:29 +00:00
Maxim Krasilnikov
03c61685fb
Added apiserver extra args variable for kubeadm config ( #2291 )
2018-02-12 10:29:46 +03:00
Antoine Legrand
46284198f8
Merge pull request #2298 from clkao/patch-2
...
Fix version comparison
2018-02-11 17:22:39 +01:00
Antoine Legrand
9916100835
Merge pull request #2299 from riverzhang/patch-4
...
Fix default_resolver is undefined
2018-02-10 17:26:51 +01:00
RongZhang
bbb1da1a83
Fix default_resolver is undefined
...
fix issues #2265
2018-02-10 10:08:26 -06:00
Antoine Legrand
cf183288dd
Merge pull request #2287 from hswong3i/cephfs_provisioner_default
...
Add optional StorageClass name with cephfs_provisioner_storage_class
2018-02-10 14:13:48 +01:00
Wong Hoi Sing Edison
07075add3d
Add optional StorageClass name with cephfs_provisioner_storage_class
2018-02-10 20:31:34 +08:00
Chia-liang Kao
338238d086
Fix version comparison
...
`FAILED! => {"changed": false, "msg": "AnsibleFilterError: Version comparison: unorderable types: str() < int()"}`
2018-02-10 03:49:49 +08:00
Brad Beam
c6c74616d8
Merge pull request #2293 from bradbeam/upgrade
...
Making node status and scheduling detection mo betta for upgrades
2018-02-09 13:15:55 -06:00
Brad Beam
03bb729fea
Making status and detection mo betta
2018-02-09 12:30:46 -06:00
Antoine Legrand
60460c025c
Merge pull request #2256 from mlushpenko/fix-kubeadm-safe-upgrade
...
Fix safe upgrade
2018-02-09 19:03:04 +01:00
Damian Nowak
f8a59446e8
Enable OOM killing
...
When etcd exceeds its memory limit, it becomes useless but keeps running.
We should let OOM killer kill etcd process in the container, so systemd can spot
the problem and restart etcd according to "Restart" setting in etcd.service unit file.
If OOME problem keep repeating, i.e. it happens every single restart,
systemd will eventually back off and stop restarting it anyway.
--restart=on-failure:5 in this file has no effect because memory allocation error
doesn't by itself cause the process to die
Related: https://github.com/kubernetes-incubator/kubespray/blob/master/roles/etcd/templates/etcd-docker.service.j2
This kind of reverts a change introduced in #1860 .
2018-02-09 11:00:13 -06:00
mlushpenko
a37c642127
Remove obsolete token variables
...
Tokens are generated automatically during init process and on-demand for nodes joining process
2018-02-09 15:53:12 +01:00
mlushpenko
4e61fb9cd3
Refactored kubeadm join process and fixed uncrodonng for master nodes
2018-02-09 15:51:47 +01:00
mlushpenko
b472c2df98
Fix safe upgrade
...
Even though there it kubeadm_token_ttl=0 which means that kubeadm token never expires, it is not present in `kubeadm token list` after cluster is provisioned (at least after it is running for some time) and there is issue regarding this https://github.com/kubernetes/kubeadm/issues/335 , so we need to create a new temporary token during the cluster upgrade.
2018-02-09 15:51:47 +01:00
Antoine Legrand
17f9242b58
Merge pull request #2292 from chapsuk/fix_miss_var
...
Added missing cephfs_provisioner_enabled to kubespray-defaults vars
2018-02-09 15:46:20 +01:00
mkrasilnikov
bc67deee78
Added missing cephfs_provisioner_enabled to kubespray-defaults vars
2018-02-09 17:03:38 +03:00
jasdeep-hundal
f57abae01e
Remove redundant python-apt install
...
Ansible automatically installs the python-apt package when using
the 'apt' Ansible module, if python-apt is not present. This patch
removes the (unneeded) explicit installation in the Kubespray
'preinstall' role.
2018-02-08 18:59:37 -08:00
Antoine Legrand
275b1d6897
Merge pull request #2274 from mirwan/local_volume_provisioner_configmap_in_daemonset
...
Local volume provisioner fixes
2018-02-09 00:59:47 +01:00
Erwan Miran
e9a676951b
storageClass name template as suggested by @eyeofthefrog
2018-02-09 00:11:07 +01:00
Antoine Legrand
b31d905704
Merge pull request #2230 from hswong3i/cephfs_provisioner
...
Add cephfs_provisioner Support for Kubespray
2018-02-08 16:52:15 +01:00
Aivars Sterns
c70c44b07b
Merge pull request #2257 from rzenker/tb/baremetal-tweaks
...
baremetal tweaks
2018-02-08 15:48:55 +00:00
Aivars Sterns
20583e3d15
Merge pull request #2067 from manics/sysctl-net-brfilter
...
Always set net.bridge.bridge-nf-call-* sysctl
2018-02-08 15:43:46 +00:00
Aivars Sterns
9f4588cd0c
Merge pull request #2266 from riverzhang/epel-release
...
Disalbe install epel-release rpm on Centos/Redhat
2018-02-08 15:42:28 +00:00
Wong Hoi Sing Edison
b25e0f82b1
Add cephfs_provisioner Support for Kubespray
2018-02-08 22:27:54 +08:00
Maxim Krasilnikov
cae1c683aa
Merge pull request #2271 from leseb/retry-get-token
...
kubernetes-apps: retry get default token name
2018-02-08 16:46:32 +03:00
Antoine Legrand
57e7a5a34a
Merge pull request #2233 from hswong3i/multiple_inventory_dir
...
Support multiple inventory files under individual inventory directory
2018-02-08 11:57:04 +01:00
Antoine Legrand
230f1e1208
Merge pull request #2273 from infernix/inventory-symlink-fix
...
Fix symlinking vagrant inventory
2018-02-08 11:52:55 +01:00
Antoine Legrand
7bce70339f
Merge pull request #2251 from woopstar/metrics-server-patch-2
...
Adding metrics-server support for K8s version 1.9
2018-02-08 11:16:44 +01:00
Erwan Miran
e1aaef7d4d
Removal of surnumerary slash
2018-02-08 09:06:17 +01:00
Wong Hoi Sing Edison
1a1d154e14
Support multiple inventory files under individual inventory directory
2018-02-08 08:08:15 +08:00
Brad Beam
384e5dd4c4
Merge pull request #2160 from kongslund/disable-read-only-port
...
Make the Kubelet read-only port configurable and disable it by default
2018-02-07 13:06:32 -06:00
Erwan Miran
abfb147292
MountDir in configmap and daemonset must be the same
2018-02-07 18:42:42 +01:00
Erwan Miran
44eb03f78a
typo
2018-02-07 17:57:54 +01:00
Erwan Miran
857784747b
local-provisioner:v1.0.1 still expects json configmap
2018-02-07 17:47:05 +01:00
Erwan Miran
7a2cb5e41c
local-provisioner:v1.0.1 still uses VOLUME_CONFIG_NAME env to read ConfigMap
2018-02-07 17:01:19 +01:00
Gerben Meijer
e662ed4adc
Fix symlinking vagrant inventory
...
The default path assumes that the vagrant dir is called 'inventory'.
With custom defined inventory dirs that are not called 'inventory' this
fails to create the correct symlink under .vagrant.d.
2018-02-07 16:50:05 +01:00
Antoine Legrand
712bdfc82f
Merge pull request #2260 from mirwan/local_volume_provisioner_fixes
...
local_volume_provisioner_enabled replacement
2018-02-07 13:42:00 +01:00
Sébastien Han
34bd47de79
kubernetes-apps: retry get default token name
...
In some installation, it can take up to 3sec to get the value. Retrying
for 5 sec will ensure the command won't return 1.
Signed-off-by: Sébastien Han <seb@redhat.com>
2018-02-07 12:09:51 +01:00
Antoine Legrand
fe57c13b51
Merge pull request #2172 from leseb/etcd-auth
...
etcd: ability to enable/disable ETCD_PEER_CLIENT_CERT_AUTH
2018-02-07 11:25:56 +01:00
woopstar
f9df692056
Issue front proxy certs for vault
2018-02-07 11:03:10 +01:00
woopstar
f193b12059
Kubeadm auto creates this
2018-02-07 10:50:34 +01:00
woopstar
2cd254954c
Remove defaults of allowed names. Updated kubeadm
2018-02-07 10:07:55 +01:00
woopstar
4dab92ce69
Rename from aggregator-proxy-client to front-proxy-client to match kubeadm design. Added kubeadm support too. Changed to use variables set and not hardcode paths. Still missing cert generation for Vault
2018-02-07 09:50:19 +01:00
Erwan Miran
d53f45d4e2
missing double quotes for ansible
2018-02-07 09:24:00 +01:00
Erwan Miran
ca08614641
yamllint fix
2018-02-07 09:12:28 +01:00
rong.zhang
47adf4bce6
Disalbe install epel-release rpm on Centos/Redhat
...
1.Disalbe install epel-release rpm on Centos/Redhat
2.Use yum install epel-release
2018-02-07 14:58:50 +08:00
Erwan Miran
e69979d5a2
keep local_volumes_enabled as deprecated
2018-02-07 07:58:50 +01:00
Maxim Krasilnikov
2ae68df41b
Merge pull request #2153 from leseb/retry-rotate
...
Several enhancements and bug fixes
2018-02-07 00:54:13 +03:00
Brad Beam
7928cd20fb
Merge pull request #2037 from tiewei/contiv-etcd-split
...
Split contiv etcd and etcd-proxy into two daemonsets
2018-02-06 15:37:16 -06:00
Ryan Zenker
ad9049a49e
baremetal tweaks
...
* allow installs to not have hostname overriden with fqdn from inventory
* calico-config no longer requires local as and will default to global
* when cloudprovider is not defined, use the inventory_hostname for cni-calico
* allow reset to not restart network (buggy nodes die with this cmd)
* default kube_override_hostname to inventory_hostname instead of ansible_hostname
2018-02-06 13:52:22 -05:00
Sébastien Han
dfcd60a9e2
vagrant: use "centos/7" box to support libvirt provider
...
The "centos/7" box is the official centos box and supports all the major
providers:
virtualbox Externally hosted (cloud.centos.org)
vmware_desktop Externally hosted (cloud.centos.org)
libvirt Externally hosted (cloud.centos.org)
hyperv Externally hosted (cloud.centos.org)
Where bento/centos-7.3 only supports:
parallels Hosted by Vagrant Cloud (570 MB)
virtualbox Hosted by Vagrant Cloud (525 MB)
vmware_desktop Hosted by Vagrant Cloud (608 MB)
Signed-off-by: Sébastien Han <seb@redhat.com>
2018-02-06 18:20:11 +01:00
Sébastien Han
0684df804d
vagrant: libvirt add vm_memory support
...
Signed-off-by: Sébastien Han <seb@redhat.com>
2018-02-06 18:20:11 +01:00
Sébastien Han
f8d6b84cb6
vagrant: add ability to use drives in the VMs
...
When testing deployments of SDS, it is quite useful to get a Kubernetes
env with nodes having dedicated drives.
You can now enable this by setting: kube_node_instances_with_disks: true
Also you can chose the amount of drives per machine and their respective
size:
* kube_node_instances_with_disks_number: 10
* kube_node_instances_with_disks_size: "20G"
Signed-off-by: Sébastien Han <seb@redhat.com>
2018-02-06 18:20:11 +01:00
Sébastien Han
a980731bed
vagrant: remove trailing line
...
Signed-off-by: Sébastien Han <seb@redhat.com>
2018-02-06 18:20:10 +01:00
Erwan Miran
b4e264251f
JSON/YAML syntax fix
2018-02-06 17:17:10 +01:00
Erwan Miran
8006a6cd82
local_volumes_enabled replaced by local_volume_provisioner_enabled
2018-02-06 17:12:09 +01:00
Antoine Legrand
a69db4169b
Merge pull request #2259 from woopstar/patch-5
...
Adding missing defaults for weave
2018-02-06 17:01:29 +01:00
Andreas Krüger
5cd6b0c753
Adding missing defaults for weave
...
The PR #2203 add's missing defaults for weave, but no signed CLA. So this PR fixes it.
2018-02-06 14:25:07 +01:00
Antoine Legrand
36ead3a720
Merge pull request #2258 from woopstar/patch-4
...
Set default registry_enabled to false
2018-02-06 14:19:24 +01:00
Andreas Krüger
bb339265fc
Set default registry_enabled to false
...
In PR #2244 the `registry_enabled` is missing in defaults, causing a deployment to fail, if it is not set in k8s-cluster.yml
2018-02-06 14:17:06 +01:00
Antoine Legrand
bb4446e94c
Merge pull request #2226 from manics/supplemental-addresses
...
Enable additional addresses to be added to certificates
2018-02-06 13:51:54 +01:00
Antoine Legrand
d2102671cd
Merge pull request #2214 from woopstar/patch-3
...
Loadbalancer Apiserver Address is missing
2018-02-06 13:47:55 +01:00
Antoine Legrand
138e0c2301
Merge pull request #2250 from woopstar/weave-mtu-patch
...
Added option to set MTU on Weave
2018-02-06 12:13:54 +01:00
Antoine Legrand
37cfd289d8
Merge pull request #2248 from hswong3i/dashboard.yml.j2
...
Dashboard template should not suffix with .yml.j2
2018-02-06 11:25:02 +01:00
Antoine Legrand
9f3081580a
Merge pull request #2249 from hswong3i/kubedns-deploy.yml.j2
...
KubeDNS template should not suffix with .yml.j2
2018-02-06 11:24:19 +01:00
Antoine Legrand
2b6781bc65
Merge pull request #2232 from hswong3i/local_volume_provisioner
...
Update and cleanup Local volume provisioner
2018-02-06 09:28:41 +01:00
Antoine Legrand
a3248379db
Merge branch 'master' into local_volume_provisioner
2018-02-06 09:28:27 +01:00
Antoine Legrand
0774c8385c
Merge pull request #2244 from hswong3i/registry
...
Migrate Kubernetes v1.9.1 cluster/addons/registry to Kubespray
2018-02-06 09:20:48 +01:00
woopstar
b2d30d68e7
Rename CN for aggreator back. Add flags to apiserver when version is >= 1.9
2018-02-05 20:37:14 +01:00
woopstar
82d10b882c
Added fixes from whereismyjetpack
2018-02-05 20:07:12 +01:00
Spencer Smith
24ae85fa56
Merge pull request #2255 from rsmitty/kubespray-cli
...
remove references to deprecated kubespray-cli
2018-02-05 11:34:11 -05:00
Spencer Smith
1869aa3985
remove references to deprecated kubespray cli
2018-02-05 10:00:21 -05:00
Maxim Krasilnikov
95b8ac5f62
Added optional controller and scheduler extra args to kubeadm config ( #2205 )
2018-02-05 16:49:13 +03:00
woopstar
0b4168cad4
WIP. Adding metrics-server support for K8s version 1.9
2018-02-05 10:37:41 +01:00
woopstar
3289472e31
Added option to set MTU on Weave
2018-02-05 10:23:48 +01:00
Wong Hoi Sing Edison
4ad53339f6
KubeDNS template should not suffix with .yml.j2
2018-02-05 16:26:54 +08:00
Wong Hoi Sing Edison
a4d3da6a8e
Dashboard template should not suffix with .yml.j2
2018-02-05 16:18:21 +08:00
Wong Hoi Sing Edison
7954ea2525
Migrate Kubernetes v1.9.1 cluster/addons/registry to Kubespray
2018-02-05 12:21:09 +08:00
Chad Swenson
bd1f0bcfd7
Merge pull request #2201 from riverzhang/ipvs
...
Support ipvs mode for kube-proxy
2018-02-01 22:29:52 -06:00
Wong Hoi Sing Edison
bc2e26d7ef
update apiVersion
2018-02-01 14:16:32 +08:00
Wong Hoi Sing Edison
fd80013917
lint and cleanup local_volume_provisioner
2018-02-01 14:14:18 +08:00
Chad Swenson
f7d52564aa
Merge pull request #2084 from riverzhang/devicemapper
...
Fix can not use devicemapper driver
2018-01-31 20:52:22 -06:00
Spencer Smith
f7e8d1149a
Merge pull request #2229 from whereismyjetpack/etcd-quorum-read
...
--etcd-quorum-read is depricated in kube >= 1.9
2018-01-31 17:10:10 -05:00
Spencer Smith
bd091caaf9
Merge pull request #2200 from riverzhang/hyperkube
...
Upgrade to Kubernetes v1.9.2
2018-01-31 16:08:22 -05:00
Spencer Smith
b455a1bf76
Merge pull request #2212 from mattymo/missing_defaults
...
Add missing group var default values to kubespray-defaults
2018-01-31 16:07:53 -05:00
Spencer Smith
c0a3bcf9b3
Merge pull request #2221 from Xuxe/patch-vcp-v1.9.2
...
Updated vSphere cloud provider config for Kubernetes >= v1.9.2 and added resource pool deployment variable
2018-01-31 16:06:07 -05:00
Spencer Smith
5eedb5562f
Merge pull request #2228 from mattymo/vault_etcd_secure
...
Vault should use cert auth for etcd
2018-01-31 16:05:28 -05:00
Dann Bohn
dc6c703741
--etcd-quorum-read is depricated in kube >= 1.9
2018-01-31 15:49:52 -05:00
Matthew Mosesohn
16629d0b8e
Vault should use cert auth for etcd
2018-01-31 20:37:14 +03:00
Julian Hübenthal
7f79210ed1
reworked vsphere-cloud-config template
2018-01-31 16:51:23 +01:00
Simon Li
27a1a697e7
supplementary_addresses_in_ssl_keys can be a hostname
2018-01-31 15:16:08 +00:00
Aivars Sterns
c1267004ef
Merge pull request #2130 from ArchiFleKs/simplify_os_provider
...
Simplify and update OpenStack cloud provider
2018-01-31 12:02:02 +02:00
Julian Hübenthal
9cdd2214f9
render vsphere_resource_pool only if defined
2018-01-31 09:56:43 +01:00
Julian Hübenthal
fc29764911
fixed broken variables table
2018-01-31 09:27:45 +01:00
Julian Hübenthal
989e9174c2
Added vSphere cloud provider config update for Kubernetes >= 1.9.2
2018-01-31 09:15:46 +01:00
rong.zhang
3993e12335
Fix can not be used devicemapper driver
...
Fix can not be used devicemapper driver
2018-01-31 15:51:11 +08:00
Brad Beam
ac4d782937
Merge pull request #2074 from fangzhen/fix-domains-split
...
Make spliting system_search_domains more robust
2018-01-30 21:01:19 -06:00
rong.zhang
32d18ca992
remove trailing space
2018-01-31 09:50:41 +08:00
Matthew Mosesohn
2df4b6c5d2
Rename default_resolver to cloud_resolver ( #2209 )
...
Cloud resolvers are mandatory for hosts on GCE and OpenStack
clouds. The 8.8.8.8 alternative resolver was dropped because
there is already a default nameserver. The new var name
reflects the purpose better.
Also restart apiserver when modifying dns settings.
2018-01-31 00:26:07 +03:00
Andreas Krüger
088d36da09
Increase the idx counter
...
Fix the idx counter to increase too, or you will end up with two same indexes.
2018-01-30 21:48:13 +01:00
Andreas Krüger
6f36faa4f9
Loadbalancer Apiserver Address is missing
...
If you configure your external loadbalancer to do a simple tcp pass-through to the api servers, and you do not use a DNS FQDN but just the ip, then you need to add the ip adress to the certificates too.
Example config:
```
## External LB example config
apiserver_loadbalancer_domain_name: "10.50.63.10"
loadbalancer_apiserver:
address: 10.50.63.10
port: 8383
```
2018-01-30 17:33:00 +01:00
RongZhang
3846384d56
Bump kube-dns to 1.14.8 ( #2204 )
...
Bump kube-dns to 1.14.8
2018-01-30 19:23:37 +03:00
Dmitri Rubinstein
331f141f63
Fix DNS entries in etcd's openssl.conf by adding a newline. ( #2208 )
...
DNS entries generated from 'etcd_cert_alt_names' variable in etcd's
openssl.conf are not terminated by a newline.
This fixes issue #2207 .
2018-01-30 16:26:58 +03:00
Matthew Mosesohn
62dd3d2a9d
Add missing group var default values to kubespray-defaults
2018-01-30 16:04:00 +03:00
Sébastien Han
fa8a128e49
etcd: ability to enable/disable ETCD_PEER_CLIENT_CERT_AUTH
...
Some installation are failing to authenticate with peers due to
etcd picking up/resoling the wrong node.
By setting 'etcd_peer_client_auth' to "False" you can disable peer client cert
authentication.
Signed-off-by: Sébastien Han <seb@redhat.com>
2018-01-30 11:19:12 +01:00
rong.zhang
b10c308a5a
Support ipvs mode for kube-proxy
...
Support ipvs mode for kube-proxy
2018-01-30 13:09:01 +08:00
rong.zhang
e22c70e431
Upgrade to Kubernetes v1.9.2
2018-01-30 13:04:38 +08:00
Chad Swenson
f4fe9e3421
Merge pull request #2171 from ArchiFleKs/kubeproxy-lvs
...
Add lib/modules to kube-proxy to enable LVS
2018-01-29 22:58:02 -06:00
Brad Beam
da173615e4
Merge pull request #2048 from xizhibei/master
...
Fix: always only one container got synced after download
2018-01-29 16:01:11 -06:00
Matthew Mosesohn
dc6a17e092
Use include/import tasks ( #2192 )
...
import_tasks will consume far less memory, so it should be
used whenever it is compatible.
2018-01-29 14:37:48 +03:00
Antoine Legrand
f4180503c8
Merge pull request #2196 from Miouge1/network-size-large-deploy
...
Network size large deploy documentation
2018-01-26 15:26:03 +01:00
Miouge1
240d4193ae
Update information about network sizes
2018-01-26 15:23:21 +01:00
Matthew Mosesohn
ac66e98ae9
Upgrade to Kubernetes v1.9.1 ( #2152 )
...
Raise drain timeout to 5m
2018-01-25 18:44:44 +03:00
Matthew Mosesohn
d2935ffed0
Optionally ignore the presence of extra calico pools ( #2190 )
2018-01-25 18:44:20 +03:00
Chad Swenson
c6e0fcea31
Merge pull request #1948 from sgmitchell/secured-etcd
...
Enable etcd secure client to prevent etcdctl access without cert and key
2018-01-25 09:35:51 -06:00
Chad Swenson
5d014d986b
Merge pull request #1992 from manics/flannel-hairpin
...
Enable flannel hairpin mode
2018-01-24 21:20:03 -06:00
mirwan
714994cad8
iptables: flush nat table as well as filter table upon reset ( #2174 )
...
* iptables: flush nat table as well as filter table upon reset
* Indentation fix
2018-01-24 20:22:49 -06:00
Brad Beam
08fe61e058
Merge pull request #2071 from riverzhang/dashboard
...
Update dashboard version to v1.8.1
2018-01-24 20:10:05 -06:00
Brad Beam
0c8bed21ee
Merge pull request #2019 from chadswen/disable-api-insecure-port
...
Support for disabling apiserver insecure port (the sequel)
2018-01-24 19:58:53 -06:00
Brad Beam
98eb845f8c
Merge pull request #2173 from mirwan/hardcoded_dnsmasq-autoscaler_image
...
Dnsmasq autoscaler image should be a variable
2018-01-24 16:15:59 -06:00
Brad Beam
98300e3165
Merge pull request #2155 from brutus333/fix/pvc
...
Fix for Issue #2141
2018-01-24 16:15:33 -06:00
Cornelius Keller
e22759d8f0
fix nodePort for weave
2018-01-24 10:31:51 +01:00
Matthew Mosesohn
bf1411060e
Add optional manual dns_mode ( #2178 )
2018-01-23 14:28:42 +01:00
Virgil Chereches
a4d142368b
Renamed variable from disable_volume_zone_conflict to volume_cross_zone_attachment and removed cloud provider condition; fix identation
2018-01-23 13:14:00 +00:00
Brad Beam
eb80f9b606
Merge pull request #2154 from tdihp/proxy-conf-restart-docker
...
Restart docker when http-proxy.conf changed.
2018-01-22 08:39:05 -06:00
Stanislav Makar
ae47b617e3
Fix 'no such host' problem ( #2148 )
...
Fix 'no such host' problem reported by commands *kubectl logs* and *kubectl exec*
when cloud_provider is OpenStack
Closes : #2147
2018-01-22 16:08:24 +03:00
Bogdan Dobrelya
c116b8022e
Update rpm spec and pbr setup configs ( #2170 )
...
* Update rpm spec and pbr setup configs
* Rename package to kubespray
* Do not break Fedora's FHS and install to /usr/share instead
* Remove the vendor tag
* Update source0 for better artifacts' names
* Fix missing files build errors
* Make version/release to auto match from git and fit PEP 440
Co-authored-by: Matthias Runge <mrunge@redhat.com>
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
* Add package paths to roles search in ansible conf
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
* Poke jinja2 requirements in rpm spec file
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2018-01-18 16:22:37 +01:00
Erwan Miran
5b98e15613
Merge branch 'hardcoded_dnsmasq-autoscaler_image' of github.com:mirwan/kubespray into hardcoded_dnsmasq-autoscaler_image
2018-01-18 16:04:35 +01:00
Erwan Miran
e5b4011aa4
move hardcoded dnsmasq autoscaler image to its own variable
2018-01-18 16:04:29 +01:00
Virgil Chereches
3125f93b3f
Added disable_volume_zone_conflict variable
2018-01-18 10:55:23 +00:00
Spencer Smith
f19c8e8c1d
Merge pull request #2132 from PhilippeChepy/flex-volumes
...
Add support for flex volumes plugins.
2018-01-17 15:00:45 -05:00
ArchiFleKs
20779df686
remove kube-node from master node by default
2018-01-17 19:02:02 +01:00
Dave Carley
752fba1691
Fix spelling mistakes in group_vars ( #2166 )
2018-01-17 18:42:27 +03:00
ArchiFleKs
637604d08f
Add lib/modules to kube-proxy to enable LVS
...
kube-proxy is complaining of missing modules at startup. There is a plan
to also support an LVS implementation of kube-proxy in additon to
userspace and iptables
2018-01-17 16:35:53 +01:00
ArchiFleKs
ba7b1d74d0
remove user_data which may mess up /etc/hosts
2018-01-17 14:29:23 +01:00
Erwan Miran
1a9989ade9
move hardcoded dnsmasq autoscaler image to its own variable
2018-01-16 09:11:59 +01:00
Jonas Kongslund
11844c987c
Make the Kubelet read-only port configurable and disable it by default. Fixes #2159 .
2018-01-16 11:11:41 +04:00
Virgil Chereches
8c45c88d15
Fix for Issue #2141 - added policy file
2018-01-12 07:15:35 +00:00
Virgil Chereches
c87bb2f239
Fix for Issue #2141
2018-01-12 07:07:02 +00:00
heping
32eeb9a0e0
Restart docker when http-proxy.conf changed.
2018-01-12 10:56:25 +08:00
rong.zhang
df21fc8643
Remove initContainer
2018-01-10 12:17:17 +08:00
Spencer Smith
ffbdf31ac4
Merge pull request #2135 from riverron/master
...
Updated with correct syntax to access default_tags variable.
2018-01-09 17:22:12 -05:00
Spencer Smith
ccd9cc3dce
Merge pull request #2146 from abelgana/master
...
Manage deprecated kubelet option
2018-01-09 17:19:42 -05:00
Spencer Smith
81867402f6
Merge pull request #2145 from pslijkhuis/master
...
Add kubelet_custom_flags to kubelet.kubeadm.env.j2
2018-01-09 17:19:09 -05:00
Spencer Smith
4f5d61212b
Merge pull request #2144 from neith00/weave-2.1.3
...
updated weave to 2.1.3
2018-01-09 17:18:26 -05:00
Spencer Smith
ef96123482
Merge pull request #2068 from chadswen/remove-container-retries
...
Retry kube container removal during upgrade
2018-01-09 15:03:50 -05:00
Spencer Smith
ee27ab0052
Merge pull request #2124 from riverzhang/patch-3
...
Remove blank lines
2018-01-09 14:58:49 -05:00
Spencer Smith
57f87ba083
Merge pull request #2142 from trilogy-group/hotfix/fluentd-template
...
fix fluentd template
2018-01-09 14:44:50 -05:00
abelgana
a9bb72c6fd
require-kubeconfig is depricated since k8s v1.8
2018-01-09 14:35:42 -05:00
abelgana
9506c2e597
require-kubeconfig is deprecated since K8s v1.8
2018-01-09 14:33:05 -05:00
Peter Slijkhuis
32884357ff
Add kubelet_custom_flags to kubelet.kubeadm.env.j2
2018-01-09 14:04:36 +01:00
Bogdan Dobrelya
278ac08087
Fix HA docs API access endpoints explained ( #2126 )
...
* Fix HA docs API access endpoints explained
Follow-up commit 81347298a3
and fix the endpoint value provided in HA docs.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
* Clarify internal LB with external LB use case
* Clarify how to use both internal and external, non-cluster aware and
not managed with Kubespray, LB solutions.
* Clarify the requirements, like TLS/SSL termination, for such an external LB.
Unlike to the 'cluster-aware' external LB config, endpoints' security must be
managed by that non-cluster aware external LB.
* Note that masters always contact their local apiservers via https://bip:sp .
It's highly unlikely to go down and it reduces latency that might be
introduced when going host->lb->host. Only computes go that path.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
* Add a note for supplementary_addresses_in_ssl_keys
Explain how to benefit from supplementary_addresses_in_ssl_keys
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2018-01-09 16:01:50 +03:00
neith00
88204642b7
updated weave to 2.1.3
2018-01-09 13:50:42 +01:00
Matthew Mosesohn
1401286910
Add support for cert alt names for etcd ( #2139 )
...
* Add support for cert alt names for etcd
* Update gen_certs_vault.yml
2018-01-09 14:37:34 +03:00
Lukasz Piatkowski
12eb242224
fix fluentd template
2018-01-08 13:40:47 +00:00
Ronald Rivera
8f36a02998
Merge branch 'master' of https://github.com/riverron/kubespray
2018-01-07 15:40:34 +00:00
Ronald Rivera
88f9e25f76
Updated with correct syntax to access default_tags variable.
2018-01-07 15:39:58 +00:00
Ron Rivera
dba1c13954
Updated with correct syntax to access default_tags variable.
2018-01-07 14:57:14 +00:00
Philippe Chepy
df9faa1743
Add support for flex volumes plugins.
2018-01-05 17:56:36 +01:00
ArchiFleKs
74fd975b57
run terraform FMT for readability
2018-01-05 12:09:04 +01:00
ArchiFleKs
ce85bcaee7
Simplify and update OpenStack cloud provider
...
Simplify the number of variables necessary to "just" enable OpenStack
cloud provider. Also add the new options available in K8s 1.9.
2018-01-05 12:05:24 +01:00
ArchiFleKs
6eb6e806e7
Update Terraform docs and authentication method
...
Hardcoded variables are removed from variables.tf file because it might
not be suitable for all OpenStack Cloud depending on Identity API
version available (between v2 or v3) and preferred authentication
method.
2018-01-05 11:25:37 +01:00
rong.zhang
6ed2a60978
fix run dashboard error
2018-01-04 13:13:36 +08:00
Brad Beam
fd04c14260
Merge pull request #2127 from spiffxp/follow-cla-doc
...
Follow CLA doc to kubernetes/community
2018-01-03 19:19:34 -06:00
Aaron Crickenberger
10a5273f07
Follow CLA doc to kubernetes/community
2018-01-03 16:48:53 -08:00
Bogdan Dobrelya
bac3bf1a5f
Fix auto-evaluated API access endpoint for bind IP ( #2086 )
...
Auto configure API access endpoint with a custom bind IP, if provided.
Fix HA docs' http URLs are https in fact, clarify the insecure vs secure
API access modes as well.
Closes: #issues/2051
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2018-01-03 17:40:21 +01:00
RongZhang
e3b684df21
Remove blank lines
...
Remove blank lines
2018-01-03 00:54:04 -06:00
Steve Mitchell
e45b30d033
Add etcd key and cert environment variables for use with client auth
2018-01-02 13:52:17 -05:00
Matthew Mosesohn
ad6fecefa8
Update Kubernetes to v1.9.0 ( #2100 )
...
Update checksum for kubeadm
Use v1.9.0 kubeadm params
Include hash of ca.crt for kubeadm join
Update tag for testing upgrades
Add workaround for testing upgrades
Remove scale CI scenarios because of slow inventory parsing
in ansible 2.4.x.
Change region for tests to us-central1 to
improve ansible performance
2017-12-25 08:57:45 +00:00
Jan Jungnickel
3fdb2ccf55
Revert back to using an empty var as default to exclude hostname ( #2110 )
2017-12-22 22:09:59 +00:00
Matthew Mosesohn
29f5b55d42
remove unwanted whitespace for kube_override_hostname ( #2105 )
2017-12-22 11:31:18 +00:00
rong.zhang
5aef52e8c0
fix dashboard certs secret
2017-12-22 11:17:05 +08:00
Brad Beam
336e0cbf70
Merge pull request #2102 from spiffxp/update-code-of-conduct
...
Update code-of-conduct.md
2017-12-20 20:00:47 -06:00
Aaron Crickenberger
3cd06b0eb4
Update code-of-conduct.md
...
Refer to kubernetes/community as authoritative source for code of conduct
2017-12-20 14:12:38 -05:00
Matthew Mosesohn
6bb46e3ecb
Fix param names in preparation for Kubernetes v1.9.0 ( #2098 )
...
This does not update v1.9.0, but fixes two incompatibilities
when trying to deploy v1.9.0.
2017-12-20 10:48:09 +00:00
Matthew Mosesohn
127bc01857
Do not override kubelet hostname if cloud_provider is used ( #2095 )
...
Starting with Kubernetes v1.8.4, kubelet ignores the AWS cloud
provider string and uses the override hostname, which fails
Node admission checks.
Fixes #2094
2017-12-19 20:18:20 +00:00
Evan Zeimet
a6975c1850
Rename runtime docker_version ( #2082 )
...
Renaming runtime docker_version to prevent setting that
value on the command line from breaking the play run.
This fixes #2081
2017-12-19 14:47:54 +00:00
Stanislav Makar
b2cb0725ac
Default OpenStack Cinder Storage Class ( #2083 )
...
Add possibility to create default OpenStack Cinder Storage Class
Closes : #1609
2017-12-19 14:47:00 +00:00
rong.zhang
b974b144a8
Add RBAC to binding Dahsboard UI
2017-12-18 23:07:19 +08:00
Matthew Mosesohn
bfb25fa47b
Change vault cert ttl to 8y ( #2013 )
2017-12-15 13:34:00 +00:00
Wei Tie
3bb505d43f
Remove unrequired mounts
2017-12-14 14:59:40 -08:00
Matthew Mosesohn
b135bcb9d9
Split download container task for delegate and non-delegate modes ( #2077 )
...
Ansible cannot seem to handle omitting delegate_to since v2.4.0.0.
Possibly related: https://github.com/ansible/ansible/issues/30760
2017-12-14 16:45:54 +00:00
Wei Tie
4e97225424
Add quote for etcd endpoints
2017-12-13 18:35:12 -08:00
rong.zhang
0771cd8599
Remove dashboard_tls_key and dashboard_tls_cert
2017-12-13 15:42:20 +08:00
Fang Zhen
91d848f98a
Make spliting system_search_domains more robust
...
The search line in /etc/resolv.conf could have
multiple spaces or tabs between domains.
split(' ') will give wrong results in some case,
use split() without argument instead.
e.g.
>>> 'domain.tld cluster.tld '.split(' ')
['domain.tld\tcluster.tld', '']
>>> 'domain.tld cluster.tld '.split()
['domain.tld', 'cluster.tld']
2017-12-13 15:39:38 +08:00
rong.zhang
40edf8c6f5
Update dashboard version to v1.8.0
...
Update dependencies to be compatible with Kubernetes v1.8
2017-12-13 12:50:44 +08:00
Chad Swenson
e78562830f
Retry kube container removal during upgrade
...
As we have seen with other containers, sometimes container removal fails on the first attempt due to some Docker bugs. Retrying typically corrects the issue.
2017-12-12 12:06:41 -06:00
Simon Li
bef259a6eb
Always set net.bridge.bridge-nf-call-* sysctl
2017-12-12 17:11:35 +00:00
Brad Beam
39ce1bd8be
Merge pull request #2059 from bradbeam/vaultalt
...
Fixing alt_names for vault cert generation
2017-12-12 09:28:51 -06:00
Spencer Smith
6291881943
Merge pull request #2057 from rsmitty/master
...
set docker_version fact regardless of docker_dns in use
2017-12-12 10:28:14 -05:00
Brad Beam
802fd94dad
Merge pull request #2054 from ArchiFleKs/os-cloud-provider-domain-fix
...
Fix domain id for OpenStack provider
2017-12-11 21:06:16 -06:00
Xu Zhipei
66f38a1b31
fix: always only one docker image got synced after download
2017-12-12 09:51:03 +08:00
Brad Beam
d3850a4da5
Fixing alt_names for vault cert generation
2017-12-11 17:28:18 -06:00
Spencer Smith
53a4355e60
set docker_version fact regardless of docker_dns in use
2017-12-11 17:48:11 -05:00
Spencer Smith
18a616f57c
Merge pull request #2052 from ArchiFleKs/os-terraform-fix-inventory
...
Change OpenStack inventory to python2
2017-12-11 13:42:05 -05:00
Spencer Smith
32333eb627
Merge pull request #2035 from brutus333/fix/proxy
...
Added proxy_env to scale and upgrade playbooks
2017-12-11 12:43:06 -05:00
Brad Beam
19def41fdf
Merge pull request #2047 from bradbeam/vaulttime
...
Adding retries for vault-temp to come online
2017-12-11 09:04:57 -06:00
ArchiFleKs
44b9dce134
Fix domain id for OpenStack provider
...
OpenStack authentication does not support using a mix of DomainID and
DomainName, only one or the other should be used.
2017-12-11 15:57:33 +01:00
Brad Beam
fa5a538fe5
Merge pull request #2050 from jbonachera/fix-vault-tls-validation
...
append newline char to vault generated certs
2017-12-11 08:41:34 -06:00
ArchiFleKs
5e3fd2253f
Change OpenStack inventory to python2
...
For distribution who ship python3 as default python, it breaks the
inventory script as it is not compatible with python3.
2017-12-11 14:25:05 +01:00
Brad Beam
9643c2c1e3
Fixes to reset ( #2046 )
...
- adding additional directories to cleanup (rkt/vault)
- targeting kubespray ansible groups instead of all
2017-12-11 12:49:21 +00:00
Brad Beam
93f3614382
Fixes #2039 - changing alt_names to be string instead of list ( #2043 )
2017-12-11 12:48:07 +00:00
Brad Beam
cbc8a7d679
Merge pull request #1995 from b0r1sp/patch-1
...
Update main.yml
2017-12-10 21:45:02 -06:00
Julien BONACHERA
290bc993a5
append newline char to vault generated certs
2017-12-10 13:06:28 +01:00
Brad Beam
3694657eb6
Adding retries for vault-init to come online
2017-12-09 17:40:44 -06:00
Thomas Sarboni
79417e07ca
Fix systemd service unit for docker >= 17.03 ( #1844 )
2017-12-08 13:12:45 +00:00
Wei Tie
dad95c873b
Remove templating for etcd members
...
Use a etcd-initer init container to generate etcd args, it determines
etcd name by comparing its ip and etcd cluster ips. This way will
make etcd configuration independent to the ansible templating so
that could be easier on adding master nodes.
2017-12-07 23:33:29 -08:00
Spencer Smith
626b35e1b0
Merge pull request #2005 from riverzhang/patch-1
...
Delete helm home
2017-12-07 11:23:30 -05:00
Wei Tie
5881ba43f8
Split contiv etcd and etcd-proxy into two daemonsets
...
Putting contiv etcd and etcd-proxy into the same daemonset and manage
the difference by a env file is not good for scaling (adding nodes).
This commit split them into two daemonsets so that when adding nodes,
k8s could automatically starting a etcd-proxy on new nodes without need
to run related play that putting env file.
2017-12-06 22:21:50 -08:00
Brad Beam
fed7b97dcb
Merge pull request #2030 from mattymo/removerbaccheck
...
Remove RBAC from boolean checks
2017-12-06 23:41:13 -06:00
Spencer Smith
c4458c9d9a
Merge pull request #1997 from mrbobbytables/feature-keepalived-cloud-provider
...
Add minimal keepalived-cloud-provider support
2017-12-06 23:28:27 -05:00
Virgil Chereches
7bae2a4547
Added proxy_env to scale and upgrade playbooks
2017-12-06 15:06:34 +00:00
riverzhang
aeb3e647d4
Remove the network device created by the flannel ( #2006 )
...
* Remove the network device created by the flannel
Remove the network device created by the flannel
* Modify flannel.1 device path
Modify flannel.1 device path
* remove trailing spaces
2017-12-06 14:15:39 +00:00
Kuldip Madnani
fe036cbe77
Adding changes to handle updation of yum Management cache in rhel. ( #2026 )
...
* Adding changes to handle updation of yum cache in rhel.
* Removed the redundant spaces
2017-12-06 09:00:41 +00:00
Matthew Mosesohn
952ec65a40
Remove RBAC from boolean checks
2017-12-06 11:57:40 +03:00
Chad Swenson
b8788421d5
Support for disabling apiserver insecure port
...
This allows `kube_apiserver_insecure_port` to be set to 0 (disabled).
Rework of #1937 with kubeadm support
Also, fixed an issue in `kubeadm-migrate-certs` where the old apiserver cert was copied as the kubeadm key
2017-12-05 09:13:45 -06:00
Brad Beam
c2347db934
Merge pull request #1953 from chadswen/dashboard-refactor
...
Kubernetes Dashboard v1.7.1 Refactor
2017-12-05 08:50:55 -06:00
Brad Beam
27ead5d4fa
Merge pull request #2003 from abelgana/master
...
Change altnames to alt_names
2017-12-05 08:48:32 -06:00
BenGalewsky
591ae700ce
Update OpenStack Terraform: Modules, Bastions, and New Floating IP config ( #1958 )
...
* Adding bastion and private network provisioning for openstack terraform
* Remove usage of floating-ip property
* Combine openstack instances + floating ips
* Fix relating floating IPs to hosts for openstack builds
* Tighten up security groups
Allow ssh into all instances with floating IP
* Add the gluster hosts to the no-floating group
* Break terraform into modules
* Update README and var descriptions to match current config
* Remove volume property in gluster compute def
* Include cluster name in internal network and router names
* Make dns_nameservers a variable
2017-12-05 12:48:47 +00:00
Stanislav Makar
6ade7c0a8d
Update k8s version to 1.8.4 ( #2015 )
...
* Update k8s version to 1.8.4
* Update main.yml
2017-12-04 16:23:04 +00:00
Jan Jungnickel
8766b36144
Make path to generated inventory configurable
2017-12-04 16:41:35 +01:00
Jan Jungnickel
b3745f2614
contrib/terraform/aws: Tag instances and remove loadbalancer ip ( #2023 )
...
* Properly tag instances and subnets with `kubernetes.io/cluster/$cluster_name`
This is required by kubernetes to support multiple clusters in a single vpc/az
* Get rid of loadbalancer_apiserver_address as it is no longer needed
2017-12-04 14:31:46 +00:00
Jean-Marie F
ca8a9c600a
Terraform - Remove the need for region specific reference data ( #1962 )
...
* Dynamically retrieve aws_bastion_ami latest reference by querying AWS rather than hard coded
* Dynamically retrieve the list of availability_zones instead of needing to have them hard coded
* Limit availability zones to first 2, using slice extrapolation function
* Replace the need for hardcoded variable "aws_cluster_ami" by the data provided by Terraform
* Move ami choosing to vars, so people don't need to edit create infrastructure if they want another vendor image (as suggested by @atoms)
* Make name of the data block agnostic of distribution, given there are more than one distribution supported
* Add documentation about other distros being supported and what to change in which location to make these changes
2017-11-30 15:27:52 +00:00
Matthew Mosesohn
a0225507a0
Set helm deployment type to host ( #2012 )
2017-11-29 19:52:54 +00:00
Steven Hardy
d39a88d63f
Allow setting --bind-address for apiserver hyperkube ( #1985 )
...
* Allow setting --bind-address for apiserver hyperkube
This is required if you wish to configure a loadbalancer (e.g haproxy)
running on the master nodes without choosing a different port for the
vip from that used by the API - in this case you need the API to bind to
a specific interface, then haproxy can bind the same port on the VIP:
root@overcloud-controller-0 ~]# netstat -taupen | grep 6443
tcp 0 0 192.168.24.6:6443 0.0.0.0:* LISTEN 0 680613 134504/haproxy
tcp 0 0 192.168.24.16:6443 0.0.0.0:* LISTEN 0 653329 131423/hyperkube
tcp 0 0 192.168.24.16:6443 192.168.24.16:58404 ESTABLISHED 0 652991 131423/hyperkube
tcp 0 0 192.168.24.16:58404 192.168.24.16:6443 ESTABLISHED 0 652986 131423/hyperkube
This can be achieved e.g via:
kube_apiserver_bind_address: 192.168.24.16
* Address code review feedback
* Update kube-apiserver.manifest.j2
2017-11-29 15:24:02 +00:00
unclejack
e5d353d0a7
contiv network support ( #1914 )
...
* Add Contiv support
Contiv is a network plugin for Kubernetes and Docker. It supports
vlan/vxlan/BGP/Cisco ACI technologies. It support firewall policies,
multiple networks and bridging pods onto physical networks.
* Update contiv version to 1.1.4
Update contiv version to 1.1.4 and added SVC_SUBNET in contiv-config.
* Load openvswitch module to workaround on CentOS7.4
* Set contiv cni version to 0.1.0
Correct contiv CNI version to 0.1.0.
* Use kube_apiserver_endpoint for K8S_API_SERVER
Use kube_apiserver_endpoint as K8S_API_SERVER to make contiv talks
to a available endpoint no matter if there's a loadbalancer or not.
* Make contiv use its own etcd
Before this commit, contiv is using a etcd proxy mode to k8s etcd,
this work fine when the etcd hosts are co-located with contiv etcd
proxy, however the k8s peering certs are only in etcd group, as a
result the etcd-proxy is not able to peering with the k8s etcd on
etcd group, plus the netplugin is always trying to find the etcd
endpoint on localhost, this will cause problem for all netplugins
not runnign on etcd group nodes.
This commit make contiv uses its own etcd, separate from k8s one.
on kube-master nodes (where net-master runs), it will run as leader
mode and on all rest nodes it will run as proxy mode.
* Use cp instead of rsync to copy cni binaries
Since rsync has been removed from hyperkube, this commit changes it
to use cp instead.
* Make contiv-etcd able to run on master nodes
* Add rbac_enabled flag for contiv pods
* Add contiv into CNI network plugin lists
* migrate contiv test to tests/files
Signed-off-by: Cristian Staretu <cristian.staretu@gmail.com>
* Add required rules for contiv netplugin
* Better handling json return of fwdMode
* Make contiv etcd port configurable
* Use default var instead of templating
* roles/download/defaults/main.yml: use contiv 1.1.7
Signed-off-by: Cristian Staretu <cristian.staretu@gmail.com>
2017-11-29 14:24:16 +00:00
Di Xu
de422c822d
update nginx tag to use multi-arch docker image ( #2009 )
2017-11-29 10:39:52 +00:00
Matthew Mosesohn
4d3326b542
Raise default vault lease TTL to 10y ( #2008 )
2017-11-29 10:38:59 +00:00
riverzhang
1b82138142
Delete helm home
...
Delete helm home
2017-11-29 13:27:09 +08:00
Christopher Randles
208ff8e350
Allow for more customization of the tiller deploy ( #1946 )
2017-11-28 18:33:57 +00:00
Matthew Mosesohn
ec54b36e05
add retries for calico/canal etcd commands ( #2007 )
2017-11-28 16:39:55 +00:00
Spencer Smith
38e8522cbf
Merge pull request #1983 from tomdee/bump-flannel-ver
...
Bump flannel version to v0.9.1
2017-11-28 11:38:55 -05:00
Spencer Smith
52f8687397
Merge pull request #1977 from mattymo/initializers
...
Disable initializers feature gate if istio is not used
2017-11-28 11:37:41 -05:00
Spencer Smith
43600ffcf8
Merge pull request #1972 from chadswen/master-static-pod-flush
...
Additional flush for static pod master upgrade
2017-11-28 11:36:38 -05:00
Christopher Randles
938d2d9e6e
update helm/tiller to v2.7.2 -- security bugfix ( #1986 )
2017-11-28 14:52:42 +00:00
Kevin Lefevre
9368dbe0e7
update calico to 2.6.2 ( #1874 )
...
Move RS to deployment so no need to take care of the revision history
limits :
- Delete the old RS
- Make Calico manifest a deployment
- move deployments to apps/v1beta2 API since Kubernetes 1.8
2017-11-28 12:01:30 +00:00
abelgana
fe3290601a
The variable altnames is used by this task.
...
Since the value will change on the default. It needs to change here also.
2017-11-27 06:57:16 -05:00
abelgana
e7173e1d62
Change altnames to alt_names
...
Hi,
Could you please check if it was a typo?
https://www.vaultproject.io/api/secret/pki/
Regards,
2017-11-25 17:29:21 -05:00
brx
2ffcfdcd25
Update main.yml
2017-11-24 20:13:38 +01:00
Bogdan Dobrelya
8aafe64397
Defaults for apiserver_loadbalancer_domain_name ( #1993 )
...
* Defaults for apiserver_loadbalancer_domain_name
When loadbalancer_apiserver is defined, use the
apiserver_loadbalancer_domain_name with a given default value.
Fix unconsistencies for checking if apiserver_loadbalancer_domain_name
is defined AND using it with a default value provided at once.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
* Define defaults for LB modes in common defaults
Adjust the defaults for apiserver_loadbalancer_domain_name and
loadbalancer_apiserver_localhost to come from a single source, which is
kubespray-defaults. Removes some confusion and simplefies the code.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-11-23 16:15:48 +00:00
Bob Killen
2140303fcc
add minimal keepalived-cloud-provider support
2017-11-23 08:43:36 -05:00
brx
b80ded63ca
Update main.yml
...
just a small spelling mistake
2017-11-21 22:37:52 +01:00
Simon Li
7be2521a31
Add flannel hairping mode
2017-11-21 10:43:50 +00:00
Tom Denham
15b9d54a32
Bump flannel version to v0.9.1
2017-11-16 12:52:18 -07:00
Spencer Smith
bc1a4e12ad
fix broken variable in ansible 2.4.1.0 and ensure tasks for calico-rr ( #1982 )
2017-11-16 18:44:15 +00:00
Matthew Mosesohn
67419e8d0a
Run rotate_tokens role only once ( #1970 )
2017-11-15 18:50:23 +00:00
Chad Swenson
849aaf7435
Update to k8s 1.8.3 ( #1971 )
2017-11-15 17:43:22 +00:00
Chad Swenson
a89ee8c406
Add ability to use custom cert secret instead of init container provisioned self-signed certs
2017-11-15 10:05:52 -06:00
Chad Swenson
0c6f172e75
Kubernetes Dashboard v1.7.1 Refactor
...
This version required changing the previous access model for dashboard completely but it's a change for the better. Docs were updated.
* New login/auth options that use apiserver auth proxying by default
* Requires RBAC in `authorization_modes`
* Only serves over https
* No longer available at https://first_master:6443/ui until apiserver is updated with the https proxy URL:
* Can access from https://first_master:6443/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/#!/login you will be prompted for credentials
* Or you can run 'kubectl proxy' from your local machine to access dashboard in your browser from: http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/
* It is recommended to access dashboard from behind a gateway that enforces an authentication token, details and other access options here: https://github.com/kubernetes/dashboard/wiki/Accessing-Dashboard---1.7.X-and-above
2017-11-15 10:05:48 -06:00
Matthew Mosesohn
a67349b076
Disable initializers feature gate if istio is not used
2017-11-15 12:56:36 +00:00
Matthew Mosesohn
f9b68a5d17
Revert "Support for disabling apiserver insecure port" ( #1974 )
2017-11-14 13:41:28 +00:00
chenhonggc
c7910b51a1
--peers DEPRECATED - --endpoints should be used instead ( #1943 )
2017-11-14 11:28:35 +00:00
Chad Swenson
1f99710b21
Additional flush for static pod master upgrade
...
Thought this wasn't required at first but I forgot there's no auto flush at the end of these tasks since the `kubernetes/master` role is not the end of the play.
2017-11-13 18:11:57 -06:00
Aivars Sterns
5e558c361b
update weave-net to 2.0.5 version ( #1877 )
2017-11-13 16:11:47 +00:00
neith00
5f39efcdfd
adding mount for kubelet to enable rbd mounts ( #1957 )
...
* adding mount for kubelet to enable rbd mounts
* fix conditionnal variable name
2017-11-13 14:04:13 +00:00
Stanislav Makar
037edf1215
Fix failed task of setting up bash completion for helm ( #1968 )
...
Closes : #1967
2017-11-13 10:15:53 +00:00
Hyunsun Moon
37125866ca
Make calico_node_ignorelooserpf have an effect ( #1945 )
2017-11-13 09:35:13 +00:00
Günther Grill
421e73b87c
Add missing exclamation mark in shebang line ( #1966 )
2017-11-13 09:34:21 +00:00
Maxim Krasilnikov
0d8de289dd
Revert "Change deprecated vagrant ansible flag 'sudo' to 'become'" ( #1960 )
2017-11-12 09:20:30 +00:00
Brad Beam
00916dec38
Merge pull request #1954 from abelgana/patch-1
...
fix a typo
2017-11-10 11:04:57 -05:00
Brad Beam
c115e5677e
Merge pull request #1828 from hzamani/patch-1
...
Use etcd_access_addresses for vault_etcd_url
2017-11-10 10:56:37 -05:00
abelgana
56047c1c83
fix a typo
2017-11-10 09:30:27 -05:00
Spencer Smith
09d85631dc
Merge pull request #1944 from chadswen/reload-master-pods
...
Master component and kubelet container upgrade fixes
2017-11-08 22:23:12 -05:00
Brad Beam
f25e4dc3ed
Merge pull request #1937 from chadswen/disable-api-insecure-port
...
Support for disabling apiserver insecure port
2017-11-08 18:13:49 -05:00
Spencer Smith
a3a7c2d24e
Merge pull request #1947 from rsmitty/rkt-proxy
...
provide environment for rkt trust and run with etcd
2017-11-08 15:26:47 -05:00
Spencer Smith
0126168472
provide environment for rkt trust and run with etcd
2017-11-08 12:57:22 -05:00
Chad Swenson
e9f795c5ce
Master component and kubelet container upgrade fixes
...
* Fixes an issue where apiserver and friends (controller manager, scheduler) were prevented from restarting after manifests/secrets are changed. This occurred when a replaced kubelet doesn't reconcile new master manifests, which caused old master component versions to linger during deployment. In my case this was causing upgrades from k8s 1.6/1.7 -> k8s 1.8 to fail
* Improves transitions from kubelet container to host kubelet by preventing issues where kubelet container reappeared during the deployment
2017-11-08 01:40:33 -06:00
Boyang Jerry Peng
8d460a7300
Bug in download main.yml
...
I think there was a mistake here:
"{{ peer_with_calico_rr is defined and peer_with_calico_rr }} and kube_network_plugin == 'calico'"
should be
"{{ peer_with_calico_rr is defined and peer_with_calico_rr and kube_network_plugin == 'calico' }}"
this is causing calico_rr to be download even if you are using something other than calico
2017-11-07 17:17:19 -08:00
Chad Swenson
0c7e1889e4
Support for disabling apiserver insecure port
...
This allows `kube_apiserver_insecure_port` to be set to 0 (disabled). It's working, but so far I have had to:
1. Make the `uri` module "Wait for apiserver up" checks use `kube_apiserver_port` (HTTPS)
2. Add apiserver client cert/key to the "Wait for apiserver up" checks
3. Update apiserver liveness probe to use HTTPS ports
4. Set `kube_api_anonymous_auth` to true to allow liveness probe to hit apiserver's /healthz over HTTPS (livenessProbes can't use client cert/key unfortunately)
5. RBAC has to be enabled. Anonymous requests are in the `system:unauthenticated` group which is granted access to /healthz by one of RBAC's default ClusterRoleBindings. An equivalent ABAC rule could allow this as well.
Changes 1 and 2 should work for everyone, but 3, 4, and 5 require new coupling of currently independent configuration settings. So I also added a new settings check.
Options:
1. The problem goes away if you have both anonymous-auth and RBAC enabled. This is how kubeadm does it. This may be the best way to go since RBAC is already on by default but anonymous auth is not.
2. Include conditional templates to set a different liveness probe for possible combinations of `kube_apiserver_insecure_port = 0`, RBAC, and `kube_api_anonymous_auth` (won't be possible to cover every case without a guaranteed authorizer for the secure port)
3. Use basic auth headers for the liveness probe (I really don't like this, it adds a new dependency on basic auth which I'd also like to leave independently configurable, and it requires encoded passwords in the apiserver manifest)
Option 1 seems like the clear winner to me, but is there a reason we wouldn't want anonymous-auth on by default? The apiserver binary defaults anonymous-auth to true, but kubespray's default was false.
2017-11-06 14:01:10 -06:00
Aivars Sterns
8b2bec700a
add bastion role to scale ( #1882 )
2017-11-06 13:51:36 +00:00
Amit Kumar Jaiswal
125267544e
Fix Typo ( #1935 )
2017-11-06 13:51:22 +00:00
Günther Grill
0d55ed3600
Avoid that some read-only tasks cause an ansible-change ( #1910 )
2017-11-06 13:51:07 +00:00
Haiwei Liu
ad0cd6939a
Add support cAdvisor ( #1908 )
...
Signed-off-by: Haiwei Liu <carllhw@gmail.com>
2017-11-06 13:50:28 +00:00
Rob Hirschfeld
a1244d7bd3
update link to latest Digital Rebar integration ( #1933 )
2017-11-06 13:49:54 +00:00
Stanislav Makar
33adb334cd
Fix openstack tenant id variable name ( #1932 )
2017-11-05 08:40:41 +00:00
Spencer Smith
ef87a8a1f0
Merge pull request #1916 from vtomasr5/master
...
Fix bad handler directory name in kubeadm role
2017-11-03 18:14:48 -04:00
Spencer Smith
5223a80ab8
Merge pull request #1925 from chadswen/proxy-fixes
...
Remove proxy settings from etcd and kubernetes/master roles
2017-11-03 18:13:36 -04:00
Spencer Smith
a595c84f7e
Merge pull request #1928 from chadswen/flannel-rbac-fix
...
Flannel RBAC Fix
2017-11-03 18:12:16 -04:00
Spencer Smith
adcfcc1178
Merge pull request #1931 from chadswen/docker-update
...
Docker Version Update
2017-11-03 18:11:33 -04:00
Chad Swenson
b158dbcf79
Docker Version Update
...
Update default docker version to 17.03.1
2017-11-03 12:34:45 -05:00
Matthew Mosesohn
ab3832f3e7
Set host IP for kubelet always ( #1924 )
...
* Set host IP for kubelet always
Use ansible default IP if ip var is not set.
* Update main.yml
2017-11-03 10:19:37 +00:00
Kevin Lefevre
9bf415f749
update helm to v2.7.0 ( #1875 )
...
* update helm to v2.7.0
* Update main.yml
2017-11-03 07:15:00 +00:00
Günther Grill
a2bda9e5f1
Eliminate jinja2 template expression warning and rename coreos-python var ( #1911 )
...
* Change deprecated vagrant ansible flag 'sudo' to 'become'
* Emphasize, that the name of the pip_pyton_modules is only considered in coreos
* Remove useless unused variable
* Fix warning when jinja2 template-delimiters used in when statement
There is no need for jinja2 template-delimiters like {{ }} or {% %}
any more. They can just be omitted as described in https://github.com/ansible/ansible/issues/22397
* Fix broken link in getting-started guide
2017-11-03 07:11:36 +00:00
Günther Grill
0195725563
Workaround ansible bug where access var via dict doesn't get real value ( #1912 )
...
* Change deprecated vagrant ansible flag 'sudo' to 'become'
* Workaround ansible bug where access var via dict doesn't get real value
When accessing a variable via it's name "{{ foo }}" its value is
retrieved. But when the variable value is retrieved via the vars-dict
"{{ vars['foo'] }}" this doesn't resolve the expression of the variable
any more due to a bug. So e.g. a expression foo="{{ 1 == 1 }}" isn't
longer resolved but just returned as string "1 == 1".
* Make file yamllint complient
2017-11-03 07:11:14 +00:00
Spencer Smith
ec1170bd37
only mount volumes if local_volumes_enabled is true. fix mount flags in rkt. ( #1923 )
2017-11-03 07:10:37 +00:00
Matthew Mosesohn
66c67dbe73
Add optional helm deployment mode for host ( #1920 )
2017-11-03 07:09:24 +00:00
Chad Swenson
e5d8d8234d
Remove proxy settings from etcd and kubernetes/master roles
...
When proxy vars are set, `uri` module tasks will attempt to route traffic through the proxy. This causes the "Wait for" tasks in the `etcd` and `kubernetes/master` roles to hang, as localhost connections struggle with a proxy.
As far as I know these roles only need local/cluster networking, so a proxy doesn't apply here anyway.
2017-11-03 01:41:17 -05:00
Chad Swenson
16ae2c1809
Flannel RBAC Fix
...
Fixes a bug that can occur if `cni-flannel-rbac.yml` was written but the playbook failed before it was applied. Uses the same approach as calico.
2017-11-02 23:20:23 -05:00
Spencer Smith
5c5e879c2c
Merge pull request #1904 from guenhter/master
...
Change deprecated vagrant ansible flag 'sudo' to 'become'
2017-11-02 12:02:32 -04:00
Spencer Smith
4771716ab2
Merge pull request #1907 from mattymo/disable_anon_auth
...
Block anonymous auth requests to kubelet
2017-11-02 12:01:39 -04:00
Spencer Smith
b156585739
Merge pull request #1917 from chadswen/docker-daemon-graph
...
Fix kubelet container with alternate Docker data paths
2017-11-02 11:58:55 -04:00
Spencer Smith
7a77b5c419
Merge pull request #1919 from mattymo/fix_rkt_local_vols
...
Fix local volume provisioner mount point for rkt
2017-11-02 11:32:30 -04:00
Spencer Smith
9872b594bf
Merge pull request #1921 from pipo02mix/patch-2
...
Typo in apt-get command
2017-11-02 11:29:32 -04:00
Aivars Sterns
e6c88db0a0
change how terraform generates apiserver variables ( #1922 )
2017-11-02 12:26:11 +00:00
Fernando Ripoll
257280a050
Typo in apt-get command
...
Typo in apt-get command
2017-11-02 11:40:08 +01:00
Matthew Mosesohn
520103df78
Change namespace for provisioner account
2017-11-02 10:16:08 +00:00
Matthew Mosesohn
3e3787de15
Fix local volume provisioner mount point for rkt
2017-11-02 09:45:26 +00:00
Chad Swenson
0c824d5ef1
Fix kubelet container with alternate Docker data paths
...
Some time ago I think the hardcoded `/var/lib/docker` was required, but kubelet running in a container has been aware of the Docker path since at least as far back as k8s 1.6.
Without this change, you see a large number of errors in the kubelet logs if you installed with a non-default `docker_daemon_graph`
2017-11-01 13:25:15 -05:00
Matthew Mosesohn
c0e989b17c
New addon: local_volume_provisioner ( #1909 )
2017-11-01 14:25:35 +00:00
Vicenç Juan Tomàs Montserrat
5218b3af82
Fix bad handler directory name in kubeadm role
2017-11-01 14:36:28 +01:00
Spencer Smith
ef0a91da27
Merge pull request #1891 from rsmitty/proxy-fixes
...
Improved proxy support
2017-10-31 14:32:12 -04:00
Spencer Smith
8412181746
Merge pull request #1899 from skyscooby/update_kube182
...
Update to Kubernetes 1.8.2
2017-10-31 14:30:56 -04:00
Spencer Smith
400ee2aa57
Merge pull request #1898 from skyscooby/update_kubedns
...
Update kubedns to 1.14.7 release
2017-10-31 14:30:36 -04:00
Spencer Smith
05b8466f87
Merge pull request #1890 from chadswen/apt-repo-params
...
Parameterize dockerproject apt repo endpoints
2017-10-31 14:29:19 -04:00
Spencer Smith
6061c691e6
Merge pull request #1902 from pipo02mix/patch-1
...
Typo in the apt-get command
2017-10-31 12:30:41 -04:00
guenhter
3ac967a7b6
Merge branch 'master' of https://github.com/kubernetes-incubator/kubespray
2017-10-31 15:15:39 +01:00
Spencer Smith
19962f6b6a
fix indentation for master template ( #1906 )
2017-10-31 06:43:54 +00:00
Matthew Mosesohn
f7703dbca3
Block anonymous auth requests to kubelet
2017-10-30 19:06:54 +00:00
Spencer Smith
74a9eedb93
helm template check for http/https_proxy
2017-10-30 13:11:04 -04:00
Spencer Smith
6df104b275
don't check for no_proxy, only http/https_proxy. fix linting issues.
2017-10-30 11:42:14 -04:00
Spencer Smith
b27453d8d8
improved proxy support
2017-10-30 11:42:14 -04:00
Spencer Smith
4470ee4ccf
Merge pull request #1887 from mattymo/fix_indent_apiserver
...
fix indentation for network policy option
2017-10-30 11:33:13 -04:00
Andrew Greenwood
df27fd1e9c
Update README.md
2017-10-30 09:39:02 -04:00
guenhter
97c68810e0
Change deprecated vagrant ansible flag 'sudo' to 'become'
2017-10-30 14:37:06 +01:00
Andrew Greenwood
8a86acf75d
Update kubespray-defaults kubernetes to v1.8.2
2017-10-30 09:34:32 -04:00
Fernando Ripoll
160e479f8d
Typo in the apt-get command
...
Typo in the apt-get command
2017-10-30 13:47:39 +01:00
abelgana
d738acf638
Update kubelet.kubeadm.env.j2 ( #1901 )
2017-10-30 11:33:02 +00:00
tanshanshan
84d92aa3c7
fix-bug ( #1900 )
2017-10-30 11:23:24 +00:00
Andrew Greenwood
dd01cabcdc
Update to kubernetes 1.8.2
2017-10-29 22:13:06 -04:00
Andrew Greenwood
e196adb98c
Update kubernetes 1.8.2
2017-10-29 22:09:22 -04:00
Andrew Greenwood
c383c7e2c1
Update kubedns image to latest
2017-10-29 21:58:05 -04:00
Andrew Greenwood
958bb5285d
Update kubedns image to latest
2017-10-29 21:57:32 -04:00
Spencer Smith
f0317ae70b
Merge pull request #1876 from ArchiFleKs/update_flannel
...
update flannel
2017-10-27 15:22:54 -04:00
Spencer Smith
591941bd39
Merge pull request #1884 from abelgana/master
...
Sysctl reload if needed after IP forward enabling
2017-10-27 15:12:08 -04:00
Spencer Smith
e90769c869
Merge pull request #1888 from chapsuk/issue_1885
...
Disable swap in vagrant vms
2017-10-27 15:10:16 -04:00
Chad Swenson
256bbb1a8a
Parameterize apt repo endpoints
...
This allows overriding of apt repo endpoints when internet sources are not accessible. Additionally, switch to using the dockerproject.org gpg key url for apt instead of keyservers.net
2017-10-27 13:48:11 -05:00
mkrasilnikov
2c7c956be9
Disable swap in vagrant vms
2017-10-27 19:57:54 +03:00
Matthew Mosesohn
fe81bba08d
Force kubelet certificates to be generated as lowercase ( #1886 )
...
All nodes get converted to lowercase, so certs should set
CN with lowercase as well.
2017-10-27 15:58:25 +01:00
Matthew Mosesohn
564de07963
fix indentation for network policy option
2017-10-27 14:56:22 +01:00
Aivars Sterns
84cf6fbe83
change ssh_args/bastion configuration ( #1883 )
2017-10-27 12:18:39 +01:00
abelgana
d9160f19c0
Sysctl reload if needed after IP forward enabling
...
Add reload yes to reload sysctl if the value of net.ipv4.ip_forward changes.
- name: Enable ip forwarding
sysctl:
sysctl_file: "{{sysctl_file_path}}"
name: net.ipv4.ip_forward
value: 1
state: present
reload: yes
tags:
- bootstrap-os
2017-10-26 13:06:21 -04:00
Brad Beam
ba0a03a8ba
Merge pull request #1880 from mattymo/node_auth_fixes2
...
Move cluster roles and system namespace to new role
2017-10-26 10:02:24 -05:00
Matthew Mosesohn
b0f04d925a
Update network policy setting for Kubernetes 1.8 ( #1879 )
...
It is now enabled by default in 1.8 with the api changed
to networking.k8s.io/v1 instead of extensions/v1beta1.
2017-10-26 15:35:26 +01:00
Matthew Mosesohn
7b78e68727
disable idempotency tests ( #1872 )
2017-10-26 15:35:12 +01:00
Matthew Mosesohn
ec53b8b66a
Move cluster roles and system namespace to new role
...
This should be done after kubeconfig is set for admin and
before network plugins are up.
2017-10-26 14:36:05 +01:00
ArchiFleKs
6e949bf951
update flannel
2017-10-26 11:18:06 +02:00
Matthew Mosesohn
86fb669fd3
Idempotency fixes ( #1838 )
2017-10-25 21:19:40 +01:00
Matthew Mosesohn
7123956ecd
update checksum for kubeadm ( #1869 )
2017-10-25 21:15:16 +01:00
Spencer Smith
46cf6b77cf
Merge pull request #1857 from pmontanari/patch-1
...
Use same kubedns_version: 1.14.5 in downloads and kubernetes-apps/ansible roles
2017-10-25 10:05:43 -04:00
Matthew Mosesohn
a52bc44f5a
Fix broken CI jobs ( #1854 )
...
* Fix broken CI jobs
Adjust image and image_family scenarios for debian.
Checkout CI file for upgrades
* add debugging to file download
* Fix download for alternate playbooks
* Update ansible ssh args to force ssh user
* Update sync_container.yml
2017-10-25 11:45:54 +01:00
Matthew Mosesohn
acb63a57fa
Only limit etcd memory on small hosts ( #1860 )
...
Also disable oom killer on etcd
2017-10-25 10:25:15 +01:00
Flavio Percoco Premoli
5b08277ce4
Access dict item's value keys using .value ( #1865 )
2017-10-24 20:49:36 +01:00
Chiang Fong Lee
5dc56df64e
Fix ordering of kube-apiserver admission control plug-ins ( #1841 )
2017-10-24 17:28:07 +01:00
Matthew Mosesohn
33c4d64b62
Make ClusterRoleBinding to admit all nodes with right cert ( #1861 )
...
This is to work around #1856 which can occur when kubelet
hostname and resolvable hostname (or cloud instance name)
do not match.
2017-10-24 17:05:58 +01:00
Matthew Mosesohn
25de6825df
Update Kubernetes to v1.8.1 ( #1858 )
2017-10-24 17:05:45 +01:00
Peter Lee
0b60201a1e
fix etcd health check bug ( #1480 )
2017-10-24 16:10:56 +01:00
Haiwei Liu
cfea99c4ee
Fix scale.yml to supoort kubeadm ( #1863 )
...
Signed-off-by: Haiwei Liu <carllhw@gmail.com>
2017-10-24 16:08:48 +01:00
Matthew Mosesohn
cea41a544e
Use include instead of import tasks to support v2.3 ( #1855 )
...
Eventually 2.3 support will be dropped, so this is
a temporary change.
2017-10-23 13:56:03 +01:00
pmontanari
8371a060a0
Update main.yml
...
Match kubedns_version with roles/download/defaults/main.yml:kubedns_version: 1.14.5
2017-10-22 23:48:51 +02:00
Matthew Mosesohn
7ed140cea7
Update refs to kubernetes version to v1.8.0 ( #1845 )
2017-10-20 08:29:28 +01:00
Matthew Mosesohn
cb97c2184e
typo fix for ci job name ( #1847 )
2017-10-20 08:26:42 +01:00
Matthew Mosesohn
0b4fcc83bd
Fix up warnings and deprecations ( #1848 )
2017-10-20 08:25:57 +01:00
Matthew Mosesohn
514359e556
Improve etcd scale up ( #1846 )
...
Now adding unjoined members to existing etcd cluster
occurs one at a time so that the cluster does not
lose quorum.
2017-10-20 08:02:31 +01:00
Peter Slijkhuis
55b9d02a99
Update README.md ( #1843 )
...
Changed Ansible 2.3 to 2.4
2017-10-19 13:49:04 +01:00
Matthew Mosesohn
fc9a65be2b
Refactor downloads to use download role directly ( #1824 )
...
* Refactor downloads to use download role directly
Also disable fact delegation so download delegate works acros OSes.
* clean up bools and ansible_os_family conditionals
2017-10-19 09:17:11 +01:00
Jan Jungnickel
49dff97d9c
Relabel controler-manager to kube-controller-manager ( #1830 )
...
Fixes #1129
2017-10-18 17:29:18 +01:00
Matthew Mosesohn
4efb0b78fa
Move CI vars out of gitlab and into var files ( #1808 )
2017-10-18 17:28:54 +01:00
Hassan Zamani
c9fe8fde59
Use fail-swap-on flag only for kube_version >= 1.8 ( #1829 )
2017-10-18 16:32:38 +01:00
Simon Li
74d54946bf
Add note that glusterfs is not automatically deployed ( #1834 )
2017-10-18 13:26:14 +01:00
Matthew Mosesohn
16462292e1
Properly skip extra SANs when not specified for kubeadm ( #1831 )
2017-10-18 12:04:13 +01:00
Aivars Sterns
7ef1e1ef9d
update terraform, fix deprecated values add default_tags, fix ansible inventory ( #1821 )
2017-10-18 11:44:32 +01:00
pmontanari
20d80311f0
Update main.yml ( #1822 )
...
* Update main.yml
Needs to set up resolv.conf before updating Yum cache otherwise no name resolution available (resolv.conf empty).
* Update main.yml
Removing trailing spaces
2017-10-18 11:42:00 +01:00
Tim(Xiaoyu) Zhang
f1a1f53f72
fix slack UR; ( #1832 )
2017-10-18 10:32:47 +01:00
Hassan Zamani
3acc42c5b3
Use etcd_access_addresses for vault_etcd_url
2017-10-17 19:27:36 +03:30
Matthew Mosesohn
c766bd077b
Use batch mode for graceful docker/rkt upgrade ( #1815 )
2017-10-17 14:12:11 +01:00
Tennis Smith
54320c5b09
set to 3 digit version number ( #1817 )
2017-10-17 11:14:29 +01:00
Seungkyu Ahn
291b71ea3b
Changing default value string to boolean. ( #1669 )
...
When downloading containers or files, use boolean
as a default value.
2017-10-17 11:14:12 +01:00
Rémi de Passmoilesel
356515222a
Add possibility to insert more ip adresses in certificates ( #1678 )
...
* Add possibility to insert more ip adresses in certificates
* Add newline at end of files
* Move supp ip parameters to k8s-cluster group file
* Add supplementary addresses in kubeadm master role
* Improve openssl indexes
2017-10-17 11:06:07 +01:00
Aivars Sterns
688e589e0c
fix #1788 lock dashboard version to 1.6.3 version while 1.7.x is not working ( #1805 )
2017-10-17 11:04:55 +01:00
刘旭
6c98201aa4
remove kube-dns versions and images in kubernetes-apps/ansible/defaults/main.yaml ( #1807 )
2017-10-17 11:03:53 +01:00
Matthew Mosesohn
d4b10eb9f5
Fix path for calico get node names ( #1816 )
2017-10-17 10:54:48 +01:00
Jiří Stránský
728d56e74d
Only write bastion ssh config when needed ( #1810 )
...
This will allow running Kubespray when the user who runs it doesn't
have write permissions to the Kubespray dir, at least when not using
bastion.
2017-10-17 10:28:45 +01:00
Matthew Mosesohn
a9f4038fcd
Update roadmap ( #1814 )
2017-10-16 17:02:53 +01:00
neith00
77f1d4b0f1
Revert "Update roadmap" ( #1809 )
...
* Revert "Debian jessie docs (#1806 )"
This reverts commit d78577c810
.
* Revert "[contrib/network-storage/glusterfs] adds service for glusterfs endpoint (#1800 )"
This reverts commit 5fb6b2eaf7
.
* Revert "[contrib/network-storage/glusterfs] bootstrap for glusterfs nodes (#1799 )"
This reverts commit 404caa111a
.
* Revert "Fixed kubelet standard log environment (#1780 )"
This reverts commit b838468500
.
* Revert "Add support for fedora atomic host (#1779 )"
This reverts commit f2235be1d3
.
* Revert "Update network-plugins to use portmap plugin (#1763 )"
This reverts commit 6ec45b10f1
.
* Revert "Update roadmap (#1795 )"
This reverts commit d9879d8026
.
2017-10-16 14:09:24 +01:00
Marc Zahn
d78577c810
Debian jessie docs ( #1806 )
...
* Add Debian Jessie notes
* Add installation notes for Debian Jessie
2017-10-16 09:02:12 +01:00
Pablo Moreno
5fb6b2eaf7
[contrib/network-storage/glusterfs] adds service for glusterfs endpoint ( #1800 )
2017-10-16 08:48:29 +01:00
Pablo Moreno
404caa111a
[contrib/network-storage/glusterfs] bootstrap for glusterfs nodes ( #1799 )
2017-10-16 08:23:38 +01:00
Seungkyu Ahn
b838468500
Fixed kubelet standard log environment ( #1780 )
...
Change KUBE_LOGGING to KUBE_LOGTOSTDERR, when installing kubelet
as host type.
2017-10-16 08:22:54 +01:00
Jason Brooks
f2235be1d3
Add support for fedora atomic host ( #1779 )
...
* don't try to install this rpm on fedora atomic
* add docker 1.13.1 for fedora
* built-in docker unit file is sufficient, as tested on both fedora and centos atomic
2017-10-16 08:03:33 +01:00
Kevin Lefevre
6ec45b10f1
Update network-plugins to use portmap plugin ( #1763 )
...
Portmap allow to use hostPort with CNI plugins. Should fix #1675
2017-10-16 07:11:38 +01:00
Matthew Mosesohn
d9879d8026
Update roadmap ( #1795 )
2017-10-16 07:06:06 +01:00
Matthew Mosesohn
d487b2f927
Security best practice fixes ( #1783 )
...
* Disable basic and token auth by default
* Add recommended security params
* allow basic auth to fail in tests
* Enable TLS authentication for kubelet
2017-10-15 20:41:17 +01:00
Julian Poschmann
66e5e14bac
Restart kubelet on update in deployment-type host on update ( #1759 )
...
* Restart kubelet on update in deployment-type host on update
* Update install_host.yml
* Update install_host.yml
* Update install_host.yml
2017-10-15 20:22:17 +01:00
Matthew Mosesohn
7e4668859b
Change file used to check kubeadm upgrade method ( #1784 )
...
* Change file used to check kubeadm upgrade method
Test for ca.crt instead of admin.conf because admin.conf
is created during normal deployment.
* more fixes for upgrade
2017-10-15 10:33:22 +01:00
Matthew Mosesohn
92d038062e
Fix node authorization for cloudprovider installs ( #1794 )
...
In 1.8, the Node authorization mode should be listed first to
allow kubelet to access secrets. This seems to only impact
environments with cloudprovider enabled.
2017-10-14 11:28:46 +01:00
abelgana
2972bceb90
Changre raw execution to use yum module ( #1785 )
...
* Changre raw execution to use yum module
Changed raw exection to use yum module provided by Ansible.
* Replace ansible_ssh_* by ansible_*
Ansible 2.0 has deprecated the “ssh” from ansible_ssh_user, ansible_ssh_host, and ansible_ssh_port to become ansible_user, ansible_host, and ansible_port. If you are using a version of Ansible prior to 2.0, you should continue using the older style variables (ansible_ssh_*). These shorter variables are ignored, without warning, in older versions of Ansible.
I am not sure about the broader impact of this change. But I have seen on the requirements the version required is ansible>=2.4.0.
http://docs.ansible.com/ansible/latest/intro_inventory.html
2017-10-14 09:52:40 +01:00
刘旭
cb0a60a0fe
calico v2.5.0 should use calico/routereflector:v0.4.0 ( #1792 )
2017-10-14 09:51:48 +01:00
Matthew Mosesohn
3ee91e15ff
Use commas in no_proxy ( #1782 )
2017-10-13 15:43:10 +01:00
Matthew Mosesohn
ef47a73382
Add new addon Istio ( #1744 )
...
* add istio addon
* add addons to a ci job
2017-10-13 15:42:54 +01:00
Matthew Mosesohn
dc515e5ac5
Remove kernel-upgrade role ( #1798 )
...
This role only support Red Hat type distros and is not maintained
or used by many users. It should be removed because it creates
feature disparity between supported OSes and is not maintained.
2017-10-13 15:36:21 +01:00
Julian Poschmann
56763d4288
Persist br_netfilter module loading ( #1760 )
2017-10-13 10:50:29 +01:00
Maxim Krasilnikov
ad9fa73301
Remove cert_managment var definition from k8s-cluster group vars ( #1790 )
2017-10-13 10:21:39 +01:00
Matthew Mosesohn
10dd049912
Revert "Security fixes for etcd ( #1778 )" ( #1786 )
...
This reverts commit 4209f1cbfd
.
2017-10-12 14:02:51 +01:00
Matthew Mosesohn
4209f1cbfd
Security fixes for etcd ( #1778 )
...
* Security fixes for etcd
* Use certs when querying etcd
2017-10-12 13:32:54 +01:00
Matthew Mosesohn
ee83e874a8
Clear admin kubeconfig when rotating certs ( #1772 )
...
* Clear admin kubeconfig when rotating certs
* Update main.yml
2017-10-12 09:55:46 +01:00
Vijay Katam
27ed73e3e3
Rename dns_server, add var for selinux. ( #1572 )
...
* Rename dns_server to dnsmasq_dns_server so that it includes role prefix
as the var name is generic and conflicts when integrating with existing ansible automation.
* Enable selinux state to be configurable with new var preinstall_selinux_state
2017-10-11 20:40:21 +01:00
Aivars Sterns
e41c0532e3
add possibility to disable fail with swap ( #1773 )
2017-10-11 19:49:31 +01:00
Matthew Mosesohn
eeb7274d65
Adjust memory reservation for master nodes ( #1769 )
2017-10-11 19:47:42 +01:00
Matthew Mosesohn
eb0dcf6063
Improve proxy ( #1771 )
...
* Set no_proxy to all local ips
* Use proxy settings on all necessary tasks
2017-10-11 19:47:27 +01:00
Matthew Mosesohn
83be0735cd
Fix setting etcd client cert serial ( #1775 )
2017-10-11 19:47:11 +01:00
Matthew Mosesohn
fe4ba51d1a
Set node IP correctly ( #1770 )
...
Fixes #1741
2017-10-11 15:28:42 +01:00
Hyunsun Moon
adf575b75e
Set default value for disable_shared_pid ( #1710 )
...
PID namespace sharing is disabled only in Kubernetes 1.7.
Explicitily enabling it by default could help reduce unexpected
results when upgrading to or downgrading from 1.7.
2017-10-11 14:55:51 +01:00
Spencer Smith
e5426f74a8
Merge pull request #1762 from manics/bindir-helm
...
Include bin_dir when patching helm tiller with kubectl
2017-10-10 10:40:47 -04:00
Spencer Smith
f5212d3b79
Merge pull request #1752 from pmontanari/patch-1
...
Force synchronize to use ssh_args so it works when using bastion
2017-10-10 10:40:01 -04:00
Spencer Smith
3d09c4be75
Merge pull request #1756 from kubernetes-incubator/fix_bool_assert
...
Fix bool check assert
2017-10-10 10:38:53 -04:00
Spencer Smith
f2db15873d
Merge pull request #1754 from ArchiFleKs/rkt-kubelet-fix
...
add hosts to rkt kubelet
2017-10-10 10:37:36 -04:00
ArchiFleKs
7c663de6c9
add /etc/hosts volume to rkt templates
2017-10-09 16:41:51 +02:00
Simon Li
c14bbcdbf2
Include bin_dir when patching helm tiller with kubectl
2017-10-09 15:17:52 +01:00
ant31
1be4c1935a
Fix bool check assert
2017-10-06 17:02:38 +00:00
pmontanari
764b1aa5f8
Force synchronize to use ssh_args so it works when using bastion
...
In case ssh.config is set to use bastion, synchronize needs to use it too.
2017-10-06 00:21:54 +02:00
Spencer Smith
d13b07ba59
Merge pull request #1751 from bradbeam/calicoprometheus
...
Adding calico/node env vars for prometheus configuration
2017-10-05 17:29:12 -04:00
Spencer Smith
028afab908
Merge pull request #1750 from bradbeam/dnsmasq2
...
Followup fix for CVE-2017-14491
2017-10-05 17:28:28 -04:00
Brad Beam
55dfae2a52
Followup fix for CVE-2017-14491
2017-10-05 11:31:04 -05:00
Matthew Mosesohn
994324e19c
Update gce CI ( #1748 )
...
Use image family for picking latest coreos image
Update python deps
2017-10-05 16:52:28 +01:00
Brad Beam
b81c0d869c
Adding calico/node env vars for prometheus configuration
2017-10-05 08:46:01 -05:00
Matthew Mosesohn
f14f04c5ea
Upgrade to kubernetes v1.8.0 ( #1730 )
...
* Upgrade to kubernetes v1.8.0
hyperkube no longer contains rsync, so now use cp
* Enable node authorization mode
* change kube-proxy cert group name
2017-10-05 10:51:21 +01:00
Aivars Sterns
9c86da1403
Normalize tags in all places to prepare for tag fixing in future ( #1739 )
2017-10-05 08:43:04 +01:00
Spencer Smith
cb611b5ed0
Merge pull request #1742 from mattymo/facts_as_vars
...
Move set_facts to kubespray-defaults defaults
2017-10-04 15:46:39 -04:00
Spencer Smith
891269ef39
Merge pull request #1743 from rsmitty/kube-client
...
Don't delegate cert gathering before creating admin.conf
2017-10-04 15:38:21 -04:00
Spencer Smith
ab171a1d6d
don't delegate cert slurp
2017-10-04 13:06:51 -04:00
Matthew Mosesohn
a56738324a
Move set_facts to kubespray-defaults defaults
...
These facts can be generated in defaults with a performance
boost.
Also cleaned up duplicate etcd var names.
2017-10-04 14:02:47 +01:00
Maxim Krasilnikov
da61b8e7c9
Added workaround for vagrant 1.9 and centos vm box ( #1738 )
2017-10-03 11:32:19 +01:00
Maxim Krasilnikov
d6d58bc938
Fixed vagrant up with flannel network, removed old config values ( #1737 )
2017-10-03 11:16:13 +01:00
Matthew Mosesohn
e42cb43ca5
add bootstrap for debian ( #1726 )
2017-10-03 08:30:45 +01:00
Brad Beam
ca541c7e4a
Ensuring vault service is stopped in reset tasks ( #1736 )
2017-10-03 08:30:28 +01:00
Brad Beam
96e14424f0
Adding kubedns update for CVE-2017-14491 ( #1735 )
2017-10-03 08:30:14 +01:00
Brad Beam
47830896e8
Merge pull request #1733 from chapsuk/vagrant_mem
...
Increase vagrant vm's memory size
2017-10-02 15:45:37 -05:00
mkrasilnikov
5fd4b4afae
Increase vagrant vm's memory size
2017-10-02 23:16:39 +03:00
Matthew Mosesohn
dae9f6d3c2
Test if tokens are expired from host instead of inside container ( #1727 )
...
* Test if tokens are expired from host instead of inside container
* Update main.yml
2017-10-02 13:14:50 +01:00
Julian Poschmann
8e1210f96e
Fix cluster-network w/ prefix > 25 not possible with CNI ( #1713 )
2017-10-01 10:43:00 +01:00
Matthew Mosesohn
56aa683f28
Fix logic in idempotency tests in CI ( #1722 )
2017-10-01 10:42:33 +01:00
Brad Beam
1b9a6d7ad8
Merge pull request #1672 from manics/bastion-proxycommand-newline
...
Insert a newline in bastion ssh config after ProxyCommand conditional
2017-09-29 11:37:47 -05:00
Brad Beam
f591c4db56
Merge pull request #1720 from shiftky/improve_integration_doc
...
Improve playbook example of integration document
2017-09-29 11:34:44 -05:00
Peter Slijkhuis
371fa51e82
Make installation of EPEL optional ( #1721 )
2017-09-29 13:44:29 +01:00
shiftky
a927ed2da4
Improve playbook example of integration document
2017-09-29 18:00:01 +09:00
Matthew Mosesohn
a55675acf8
Enable RBAC with kubeadm always ( #1711 )
2017-09-29 09:18:24 +01:00
Matthew Mosesohn
25dd3d476a
Fix error for azure+calico assert ( #1717 )
...
Fixes #1716
2017-09-29 08:17:18 +01:00
Matthew Mosesohn
3ff5f40bdb
fix graceful upgrade ( #1704 )
...
Fix system namespace creation
Only rotate tokens when necessary
2017-09-27 14:49:20 +01:00
Matthew Mosesohn
689ded0413
Enable kubeadm upgrades to any version ( #1709 )
2017-09-27 14:48:18 +01:00
Matthew Mosesohn
327ed157ef
Verify valid settings before deploy ( #1705 )
...
Also fix yaml lint issues
Fixes #1703
2017-09-27 14:47:47 +01:00
Pablo Moreno
c819238da9
Adds support for separate etcd machines on terraform/openstack deployment ( #1674 )
2017-09-27 10:59:09 +01:00
tanshanshan
477afa8711
when and run_once are reduplicative ( #1694 )
2017-09-26 14:48:05 +01:00
Matthew Mosesohn
bd272e0b3c
Upgrade to kubeadm ( #1667 )
...
* Enable upgrade to kubeadm
* fix kubedns upgrade
* try upgrade route
* use init/upgrade strategy for kubeadm and ignore kubedns svc
* Use bin_dir for kubeadm
* delete more secrets
* fix waiting for terminating pods
* Manually enforce kube-proxy for kubeadm deploy
* remove proxy. update to kubeadm 1.8.0rc1
2017-09-26 10:38:58 +01:00
Maxim Krasilnikov
1067595b5c
Change used chars for kubeadm tokens ( #1701 )
2017-09-26 05:56:08 +01:00
Brad Beam
14c232e3c4
Merge pull request #1663 from foxyriver/fix-shell
...
use command module instead of shell module
2017-09-25 13:24:45 -05:00
Brad Beam
57f5fb1f4f
Merge pull request #1661 from neith00/master
...
upgrading from weave version 2.0.1 to 2.0.4
2017-09-25 13:23:57 -05:00
Bogdan Dobrelya
bcddfb786d
Merge pull request #1692 from mattymo/old-etcd-logic
...
drop unused etcd logic
2017-09-25 17:44:33 +02:00
Martin Uddén
20db1738fa
feature: install project atomic CSS on RedHat family ( #1499 )
...
* feature: install project atomic CSS on RedHat family
* missing patch for this feature
* sub-role refactor
* Yamllint fix
2017-09-25 12:29:17 +01:00
Hassan Zamani
b23d81f825
Add etcd_blkio_weight var ( #1690 )
2017-09-25 12:20:24 +01:00
Maxim Krasilnikov
bc15ceaba1
Update var doc about users accounts ( #1685 )
2017-09-25 12:20:00 +01:00
Junaid Ali
6f17d0817b
Updating getting-started.md ( #1683 )
...
Signed-off-by: Junaid Ali <junaidali.yahya@gmail.com>
2017-09-25 12:19:38 +01:00
Matthew Mosesohn
a1cde03b20
Correct master manifest cleanup logic ( #1693 )
...
Fixes #1666
2017-09-25 12:19:04 +01:00
Bogdan Dobrelya
cfce23950a
Merge pull request #1687 from jistr/cgroup-driver-kubeadm
...
Set correct kubelet cgroup-driver also for kubeadm deployments
2017-09-25 11:16:40 +02:00
Deni Bertovic
64740249ab
Adds tags for asserts ( #1639 )
2017-09-25 08:41:03 +01:00
Matthew Mosesohn
126f42de06
drop unused etcd logic
...
Fixes #1660
2017-09-25 07:52:55 +01:00
Matthew Mosesohn
d94e3a81eb
Use api lookup for kubelet hostname when using cloudprovider ( #1686 )
...
The value cannot be determined properly via local facts, so
checking k8s api is the most reliable way to look up what hostname
is used when using a cloudprovider.
2017-09-24 09:22:15 +01:00
Jiri Stransky
70d0235770
Set correct kubelet cgroup-driver also for kubeadm deployments
...
This follows pull request #1677 , adding the cgroup-driver
autodetection also for kubeadm way of deploying.
Info about this and the possibility to override is added to the docs.
2017-09-22 13:19:04 +02:00
foxyriver
30b5493fd6
use command module instead of shell module
2017-09-22 15:47:03 +08:00
Bogdan Dobrelya
4f6362515f
Merge pull request #1677 from jistr/cgroup-driver
...
Allow setting cgroup driver for kubelet
2017-09-21 17:31:48 +02:00
Jiri Stransky
dbbe9419e5
Allow setting cgroup driver for kubelet
...
Red Hat family platforms run docker daemon with `--exec-opt
native.cgroupdriver=systemd`. When kubespray tried to start kubelet
service, it failed with:
Error: failed to run Kubelet: failed to create kubelet: misconfiguration: kubelet cgroup driver: "cgroupfs" is different from docker cgroup driver: "systemd"
Setting kubelet's cgroup driver to the correct value for the platform
fixes this issue. The code utilizes autodetection of docker's cgroup
driver, as different RPMs for the same distro may vary in that regard.
2017-09-21 11:58:11 +02:00
Matthew Mosesohn
188bae142b
Fix wait for hosts in CI ( #1679 )
...
Also fix usage of failed_when and handling exit code.
2017-09-20 14:30:09 +01:00
Simon Li
7c2b12ebd7
Insert a newline in bastion after ProxyCommand conditional
2017-09-18 16:29:12 +01:00
Matthew Mosesohn
ef8e35e39b
Create admin credential kubeconfig ( #1647 )
...
New files: /etc/kubernetes/admin.conf
/root/.kube/config
$GITDIR/artifacts/{kubectl,admin.conf}
Optional method to download kubectl and admin.conf if
kubeconfig_lcoalhost is set to true (default false)
2017-09-18 13:30:57 +01:00
Matthew Mosesohn
975accbe1d
just use public_ip in creating gce temporary waitfor hosts ( #1646 )
...
* just use public_ip in creating gce temporary waitfor hosts
* Update create-gce.yml
2017-09-18 13:24:57 +01:00
Brad Beam
aaa27d0a34
Adding quotes around parameters in cloud_config ( #1664 )
...
This is to help support escapes and special characters
2017-09-16 08:43:47 +01:00
Kevin Lefevre
9302ce0036
Enhanced OpenStack cloud provider ( #1627 )
...
- Enable Cinder API version for block storage
- Enable floating IP for LBaaS
2017-09-16 08:43:24 +01:00
Matthew Mosesohn
0aab3c97a0
Add all-in-one CI mode and make coreos test aio ( #1665 )
2017-09-15 22:28:37 +01:00
Matthew Mosesohn
8e731337ba
Enable HA deploy of kubeadm ( #1658 )
...
* Enable HA deploy of kubeadm
* raise delay to 60s for starting gce hosts
2017-09-15 22:28:15 +01:00
Matthew Mosesohn
b294db5aed
fix apply for netchecker upgrade ( #1659 )
...
* fix apply for netchecker upgrade and graceful upgrade
* Speed up daemonset upgrades. Make check wait for ds upgrades.
2017-09-15 13:19:37 +01:00
Matthew Mosesohn
8d766a2ca9
Enable ssh opts by in config, set 100 connection retries ( #1662 )
...
Also update to ansible 2.3.2
2017-09-15 10:19:36 +01:00
Brad Beam
f2ae16e71d
Merge pull request #1651 from bradbeam/vaultnocontent
...
Fixing condition where vault CA already exists
2017-09-14 17:04:15 -05:00
Brad Beam
ac281476c8
Prune unnecessary certs from vault setup ( #1652 )
...
* Cleaning up cert checks for vault
* Removing all unnecessary etcd certs from each node
* Removing all unnecessary kube certs from each node
2017-09-14 12:28:11 +01:00
neith00
1b1c8d31a9
upgrading from weave version 2.0.1 to 2.0.4
...
This upgrade has been testing offline on a 1.7.5 cluster
2017-09-14 10:29:28 +02:00
Brad Beam
4b587aaf99
Adding ability to specify altnames for vault cert ( #1640 )
2017-09-14 07:19:44 +01:00
Kyle Bai
016301508e
Update to Kubernetes v1.7.5 ( #1649 )
2017-09-14 07:18:03 +01:00
Matthew Mosesohn
6744726089
kubeadm support ( #1631 )
...
* kubeadm support
* move k8s master to a subtask
* disable k8s secrets when using kubeadm
* fix etcd cert serial var
* move simple auth users to master role
* make a kubeadm-specific env file for kubelet
* add non-ha CI job
* change ci boolean vars to json format
* fixup
* Update create-gce.yml
* Update create-gce.yml
* Update create-gce.yml
2017-09-13 19:00:51 +01:00
Brad Beam
0a89f88b89
Fixing condition where CA already exists
2017-09-13 03:40:46 +00:00
Brad Beam
69fac8ea58
Merge pull request #1634 from bradbeam/calico_cni
...
fix for calico cni plugin node name
2017-09-11 22:18:06 -05:00
Brad Beam
a51104e844
Merge pull request #1648 from kubernetes-incubator/mattymo-patch-1
...
Update getting-started.md
2017-09-11 17:55:51 -05:00
Matthew Mosesohn
943aaf84e5
Update getting-started.md
2017-09-11 12:47:04 +03:00
Seungkyu Ahn
e8bde03a50
Setting kubectl bin directory ( #1635 )
2017-09-09 23:54:13 +03:00
Matthew Mosesohn
75b13caf0b
Fix kube-apiserver status checks when changing insecure bind addr ( #1633 )
2017-09-09 23:41:48 +03:00
Matthew Mosesohn
0f231f0e76
Improve method to create and wait for gce instances ( #1645 )
2017-09-09 23:41:31 +03:00
Matthew Mosesohn
5d99fa0940
Purge old upgrade hooks and unused tasks ( #1641 )
2017-09-09 23:41:20 +03:00
Matthew Mosesohn
649388188b
Fix netchecker update side effect ( #1644 )
...
* Fix netchecker update side effect
kubectl apply should only be used on resources created
with kubectl apply. To workaround this, we should apply
the old manifest before upgrading it.
* Update 030_check-network.yml
2017-09-09 23:38:38 +03:00
Matthew Mosesohn
9fa1873a65
Add kube dashboard, enabled by default ( #1643 )
...
* Add kube dashboard, enabled by default
Also add rbac role for kube user
* Update main.yml
2017-09-09 23:38:03 +03:00
Matthew Mosesohn
f2057dd43d
Refactor downloads ( #1642 )
...
* Refactor downloads
Add prefixes to tasks (file vs container)
Remove some delegates
Clean up some conditions
* Update ansible.cfg
2017-09-09 23:32:12 +03:00
Brad Beam
eeffbbb43c
Updating calicocni.hostname to calicocni.nodename
2017-09-08 12:47:40 +00:00
Brad Beam
aaa0105f75
Flexing calicocni.hostname based on cloud provider
2017-09-08 12:47:40 +00:00
Matthew Mosesohn
f29a42721f
Clean up debug in check apiserver test ( #1638 )
...
* Clean up debug in check apiserver test
* Change password generation for kube_user
Special characters are not allowed in known_users.csv file
2017-09-08 15:47:13 +03:00
Matthew Mosesohn
079d317ade
Default is_atomic to false ( #1637 )
2017-09-08 15:00:57 +03:00
Matthew Mosesohn
6f1fd12265
Revert "Add option for fact cache expiry" ( #1636 )
...
* Revert "Add option for fact cache expiry (#1602 )"
This reverts commit fb30f65951
.
2017-09-08 10:19:58 +03:00
Maxim Krasilnikov
e16b57aa05
Store vault users passwords to credentials dir. Create vault and etcd roles after start vault cluster ( #1632 )
2017-09-07 23:30:16 +03:00
Yorgos Saslis
fb30f65951
Add option for fact cache expiry ( #1602 )
...
* Add option for fact cache expiry
By adding the `fact_caching_timeout` we avoid having really stale/invalid data ending up in there.
Leaving commented out by default, for backwards compatibility, but nice to have there.
* Enabled cache-expiry by default
Set to 2 hours and modified comment to reflect change
2017-09-07 23:29:27 +03:00
Tennis Smith
a47aaae078
Add bastion host definitions ( #1621 )
...
* Add comment line and documentation for bastion host usage
* Take out unneeded sudo parm
* Remove blank lines
* revert changes
* take out disabling of strict host checking
2017-09-07 23:26:52 +03:00
Matthew Mosesohn
7117614ee5
Use a generated password for kube user ( #1624 )
...
Removed unnecessary root user
2017-09-06 20:20:25 +03:00
Chad Swenson
e26aec96b0
Consolidate kube-proxy module and sysctl loading ( #1586 )
...
This sets br_netfilter and net.bridge.bridge-nf-call-iptables sysctl from a single play before kube-proxy is first ran instead of from the flannel and weave network_plugin roles after kube-proxy is started
2017-09-06 15:11:51 +03:00
Sam Powers
c60d104056
Update checksums (etcd calico calico-cni weave) to fix uploads.yml ( #1584 )
...
the uploads.yml playbook was broken with checksum mismatch errors in
various kubespray commits, for example, 3bfad5ca73
which updated the version from 3.0.6 to 3.0.17 without updating the
corresponding checksums.
2017-09-06 15:11:13 +03:00
Oliver Moser
e6ff8c92a0
Using 'hostnamectl' to set unconfigured hostname on CoreOS ( #1600 )
2017-09-06 15:10:52 +03:00
Maxim Krasilnikov
9bce364b3c
Update auth enabled methods in group_vars example ( #1625 )
2017-09-06 15:10:18 +03:00
Chad Swenson
cbaa2b5773
Retry Remove all Docker containers in reset ( #1623 )
...
Due to various occasional docker bugs, removing a container will sometimes fail. This can often be mitigated by trying again.
2017-09-06 14:23:16 +03:00
Matthieu
0453ed8235
Fix an error with Canal when RBAC are disabled ( #1619 )
...
* Fix an error with Canal when RBAC are disabled
* Update using same rbac strategy used elsewhere
2017-09-06 11:32:32 +03:00
Brad Beam
a341adb7f3
Updating CN for node certs generated by vault ( #1622 )
...
This allows the node authorization plugin to function correctly
2017-09-06 10:55:08 +03:00
Matthew Mosesohn
4c88ac69f2
Use kubectl apply instead of create/replace ( #1610 )
...
Disable checks for existing resources to speed up execution.
2017-09-06 09:36:54 +03:00
Brad Beam
85c237bc1d
Merge pull request #1607 from chapsuk/vault_roles
...
Vault role updates
2017-09-05 11:48:41 -05:00
Tennis Smith
35d48cc88c
Point apiserver address to 0.0.0.0 ( #1617 )
...
* Point apiserver address to 0.0.0.0
Added loadbalancer api server address
* Update documentation
2017-09-05 18:41:47 +03:00
mkrasilnikov
957b7115fe
Remove node name from kube-proxy and admin certificates
2017-09-05 14:40:26 +03:00
Yorgos Saslis
82eedbd622
Update ansible inventory file when template changes ( #1612 )
...
This trigger ensures the inventory file is kept up-to-date. Otherwise, if the file exists and you've made changes to your terraform-managed infra without having deleted the file, it would never get updated.
For example, consider the case where you've destroyed and re-applied the terraform resources, none of the IPs would get updated, so ansible would be trying to connect to the old ones.
2017-09-05 14:10:53 +03:00
mkrasilnikov
b930b0ef5a
Place vault role credentials only to vault group hosts
2017-09-05 11:16:18 +03:00
mkrasilnikov
ad313c9d49
typo fix
2017-09-05 09:07:36 +03:00
mkrasilnikov
06035c0f4e
Change vault CI CLOUD_MACHINE_TYPE to n1-standard-2
2017-09-05 09:07:36 +03:00
mkrasilnikov
e1384f6618
Using issue cert result var instead hostvars
2017-09-05 09:07:36 +03:00
mkrasilnikov
3acb86805b
Rename vault_address to vault_bind_address
2017-09-05 09:07:35 +03:00
mkrasilnikov
bf0af1cd3d
Vault role updates:
...
* using separated vault roles for generate certs with different `O` (Organization) subject field;
* configure vault roles for issuing certificates with different `CN` (Common name) subject field;
* set `CN` and `O` to `kubernetes` and `etcd` certificates;
* vault/defaults vars definition was simplified;
* vault dirs variables defined in kubernetes-defaults foles for using
shared tasks in etcd and kubernetes/secrets roles;
* upgrade vault to 0.8.1;
* generate random vault user password for each role by default;
* fix `serial` file name for vault certs;
* move vault auth request to issue_cert tasks;
* enable `RBAC` in vault CI;
2017-09-05 09:07:35 +03:00
ArthurMa
c77d11f1c7
Bugfix ( #1616 )
...
lost executable path
2017-09-05 08:35:14 +03:00
Matthew Mosesohn
d279d145d5
Fix non-rbac deployment of resources as a list ( #1613 )
...
* Use kubectl apply instead of create/replace
Disable checks for existing resources to speed up execution.
* Fix non-rbac deployment of resources as a list
* Fix autoscaler tolerations field
* set all kube resources to state=latest
* Update netchecker and weave
2017-09-05 08:23:12 +03:00
Matthew Mosesohn
fc7905653e
Add socat for CoreOS when using host deploy kubelet ( #1575 )
2017-09-04 11:30:18 +03:00
Matthew Mosesohn
660282e82f
Make daemonsets upgradeable ( #1606 )
...
Canal will be covered by a separate PR
2017-09-04 11:30:01 +03:00
Matthew Mosesohn
77602dbb93
Move calico to daemonset ( #1605 )
...
* Drop legacy calico logic
* add calico as a daemonset
2017-09-04 11:29:51 +03:00
Matthew Mosesohn
a3e6896a43
Add RBAC support for canal ( #1604 )
...
Refactored how rbac_enabled is set
Added RBAC to ubuntu-canal-ha CI job
Added rbac for calico policy controller
2017-09-04 11:29:40 +03:00
Dann
702ce446df
Apply ClusterRoleBinding to dnsmaq when rbac_enabled ( #1592 )
...
* Add RBAC policies to dnsmasq
* fix merge conflict
* yamllint
* use .j2 extension for dnsmasq autoscaler
2017-09-03 10:53:45 +03:00
Brad Beam
8ae77e955e
Adding in certificate serial numbers to manifests ( #1392 )
2017-09-01 09:02:23 +03:00
sgmitchell
783924e671
Change backup handler to only run v2 data backup if snap directory exists ( #1594 )
2017-08-31 18:23:24 +03:00
Julian Poschmann
93304e5f58
Fix calico leaving service behind. ( #1599 )
2017-08-31 12:00:05 +03:00
Brad Beam
917373ee55
Merge pull request #1595 from bradbeam/cacerts
...
Fixing CA certificate locations for k8s components
2017-08-30 21:31:19 -05:00
Brad Beam
7a98ad50b4
Fixing CA certificate locations for k8s components
2017-08-30 15:30:40 -05:00
Brad Beam
982058cc19
Merge pull request #1514 from vijaykatam/docker_systemd
...
Configurable docker yum repos, systemd fix
2017-08-30 11:50:23 -05:00
Oliver Moser
576beaa6a6
Include /opt/bin in PATH for host deployed kubelet on CoreOS ( #1591 )
...
* Include /opt/bin in PATH for host deployed kubelet on CoreOS
* Removing conditional check for CoreOS
2017-08-30 16:50:33 +03:00
Maxim Krasilnikov
6eb22c5db2
Change single Vault pki mount to multi pki mounts paths for etcd and kube CA`s ( #1552 )
...
* Added update CA trust step for etcd and kube/secrets roles
* Added load_balancer_domain_name to certificate alt names if defined. Reset CA's in RedHat os.
* Rename kube-cluster-ca.crt to vault-ca.crt, we need separated CA`s for vault, etcd and kube.
* Vault role refactoring, remove optional cert vault auth because not not used and worked. Create separate CA`s fro vault and etcd.
* Fixed different certificates set for vault cert_managment
* Update doc/vault.md
* Fixed condition create vault CA, wrong group
* Fixed missing etcd_cert_path mount for rkt deployment type. Distribute vault roles for all vault hosts
* Removed wrong when condition in create etcd role vault tasks.
2017-08-30 16:03:22 +03:00
Brad Beam
72a0d78b3c
Merge pull request #1585 from mattymo/canal_upgrade
...
Fix upgrade for canal and apiserver cert
2017-08-29 18:45:21 -05:00
Matthew Mosesohn
13d08af054
Fix upgrade for canal and apiserver cert
...
Fixes #1573
2017-08-29 22:08:30 +01:00
Brad Beam
80a7ae9845
Merge pull request #1581 from 2ffs2nns/update-calico-version
...
update calico version
2017-08-29 07:48:44 -05:00
Eric Hoffmann
6c30a7b2eb
update calico version
...
update calico releases link
2017-08-28 16:23:51 -07:00
Matthew Mosesohn
76b72338da
Add CNI config for rkt kubelet ( #1579 )
2017-08-28 21:11:01 +03:00
Chad Swenson
a39e78d42d
Initial version of Flannel using CNI ( #1486 )
...
* Updates Controller Manager/Kubelet with Flannel's required configuration for CNI
* Removes old Flannel installation
* Install CNI enabled Flannel DaemonSet/ConfigMap/CNI bins and config (with portmap plugin) on host
* Uses RBAC if enabled
* Fixed an issue that could occur if br_netfilter is not a module and net.bridge.bridge-nf-call-iptables sysctl was not set
2017-08-25 10:07:50 +03:00
Brad Beam
4550dccb84
Fixing reference to vault leader url ( #1569 )
2017-08-24 23:21:39 +03:00
Hassan Zamani
01ce09f343
Add feature_gates var for customizing Kubernetes feature gates ( #1520 )
2017-08-24 23:18:38 +03:00
Brad Beam
71dca67ca2
Merge pull request #1508 from tmjd/update-calico-2-4-0
...
Update Calico to 2.4.1 release.
2017-08-24 14:57:29 -05:00
Hans Kristian Flaatten
327f9baccf
Update supported component versions in README.md ( #1555 )
2017-08-24 21:36:53 +03:00
Yuki KIRII
a98b866a66
Verify if br_netfilter module exists ( #1492 )
2017-08-24 17:47:32 +03:00
Xavier Mehrenberger
3aabba7535
Remove discontinued option --reconcile-cidr if kube_network_plugin=="cloud" ( #1568 )
2017-08-24 17:01:30 +03:00
Mohamed Mehany
c22cfa255b
Added private key file to ssh bastion conf ( #1563 )
...
* Added private key file to ssh bastion conf
* Used regular if condition insted of inline conditional
2017-08-24 17:00:45 +03:00
Brad Beam
af211b3d71
Merge pull request #1567 from mattymo/tolerations
...
Enable scheduling of critical pods and network plugins on master
2017-08-24 08:40:41 -05:00
Matthew Mosesohn
6bb3463e7c
Enable scheduling of critical pods and network plugins on master
...
Added toleration to DNS, netchecker, fluentd, canal, and
calico policy.
Also small fixes to make yamllint pass.
2017-08-24 10:41:17 +01:00
Brad Beam
8b151d12b9
Adding yamllinter to ci steps ( #1556 )
...
* Adding yaml linter to ci check
* Minor linting fixes from yamllint
* Changing CI to install python pkgs from requirements.txt
- adding in a secondary requirements.txt for tests
- moving yamllint to tests requirements
2017-08-24 12:09:52 +03:00
Ian Lewis
ecb6dc3679
Register standalone master w/ taints ( #1426 )
...
If Kubernetes > 1.6 register standalone master nodes w/ a
node-role.kubernetes.io/master=:NoSchedule taint to allow
for more flexible scheduling rather than just marking unschedulable.
2017-08-23 16:44:11 +03:00
riverzhang
49a223a17d
Update elrepo-release rpm version ( #1554 )
2017-08-23 09:54:51 +03:00
Brad Beam
e5cfdc648c
Adding ability to override max ttl ( #1559 )
...
Prior this would fail because we didnt set max ttl for vault temp
2017-08-23 09:54:01 +03:00
Erik Stidham
9f9f70aade
Update Calico to 2.4.1 release.
...
- Switched Calico images to be pulled from quay.io
- Updated Canal too
2017-08-21 09:33:12 -05:00
Bogdan Dobrelya
e91c04f586
Merge pull request #1553 from mattymo/kubelet-deployment-doc
...
Add node to docs about kubelet deployment type changes
2017-08-21 11:42:23 +02:00
Matthew Mosesohn
277fa6c12d
Add node to docs about kubelet deployment type changes
2017-08-21 09:13:59 +01:00
Matthew Mosesohn
ca3050ec3d
Update to Kubernetes v1.7.3 ( #1549 )
...
Change kubelet deploy mode to host
Enable cri and qos per cgroup for kubelet
Update CoreOS images
Add upgrade hook for switching from kubelet deployment from docker to host.
Bump machine type for ubuntu-rkt-sep
2017-08-21 10:53:49 +03:00
Bogdan Dobrelya
1b3ced152b
Merge pull request #1544 from bogdando/rpm_spec
...
[WIP] Support pbr builds and prepare for RPM packaging as the ansible-kubespray artifact
2017-08-21 09:13:59 +02:00
Vijay Katam
97031f9133
Make epel-release install configurable ( #1497 )
2017-08-20 14:03:10 +03:00
Vijay Katam
c92506e2e7
Add calico variable that enables ignoring Kernel's RPF Setting ( #1493 )
2017-08-20 14:01:09 +03:00
Kevin Lefevre
65a9772adf
Add OpenStack LBaaS support ( #1506 )
2017-08-20 13:59:15 +03:00
Anton
1e07ee6cc4
etcd_compaction_retention every 8 hour ( #1527 )
2017-08-20 13:55:48 +03:00
Abdelsalam Abbas
01a130273f
fix issues with if condition ( #1537 )
2017-08-20 13:55:13 +03:00
Miad Abrin
3c710219a1
Fix Some Typos in kubernetes master role ( #1547 )
...
* Fix Typo etc3 -> etcd3
* Fix typo in post-upgrade of master. stop -> start
2017-08-20 13:54:28 +03:00
Maxim Krasilnikov
2ba285a544
Fixed deploy cluster with vault cert manager ( #1548 )
...
* Added custom ips to etcd vault distributed certificates
* Added custom ips to kube-master vault distributed certificates
* Added comment about issue_cert_copy_ca var in vault/issue_cert role file
* Generate kube-proxy, controller-manager and scheduler certificates by vault
* Revert "Disable vault from CI (#1546 )"
This reverts commit 781f31d2b8
.
* Fixed upgrade cluster with vault cert manager
* Remove vault dir in reset playbook
2017-08-20 13:53:58 +03:00
Antoine Legrand
72ae7638bc
Merge pull request #1446 from matlockx/master
...
add possibility to ignore the hostname override
2017-08-18 17:03:40 +02:00
Xavier Lange
3bfad5ca73
Bump etcd to 3.2.4 ( #1468 )
2017-08-18 17:12:33 +03:00
Bogdan Dobrelya
668d02846d
Align pbr config data with the spec file
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-08-18 16:04:48 +02:00
Matthew Mosesohn
781f31d2b8
Disable vault from CI ( #1546 )
...
https://github.com/kubernetes-incubator/kubespray/issues/1545
2017-08-18 16:45:27 +03:00
Matthew Mosesohn
df28db0066
Fix cert and netchecker upgrade issues ( #1543 )
...
* Bump tag for upgrade CI, fix netchecker upgrade
netchecker-server was changed from pod to deployment, so
we need an upgrade hook for it.
CI now uses v2.1.1 as a basis for upgrade.
* Fix upgrades for certs from non-rbac to rbac
2017-08-18 15:46:22 +03:00
Jan Jungnickel
20183f3860
Bump Calico CNI Plugin to 1.8.0 ( #1458 )
...
This aligns calico component versions with Calico release 2.1.5 and
fixes an issue with nodes being unable to schedule existing workloads
as per [#349 ](https://github.com/projectcalico/cni-plugin/issues/349 )
2017-08-18 15:40:14 +03:00
Bogdan Dobrelya
48edf1757b
Adjust the rpm spec data
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-08-18 14:09:55 +02:00
Matthew Mosesohn
2645e88b0c
Fix vault setup partially ( #1531 )
...
This does not address per-node certs and scheduler/proxy/controller-manager
component certs which are now required. This should be handled in a
follow-up patch.
2017-08-18 15:09:45 +03:00
Bogdan Dobrelya
db121049b3
Move the spec file
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-08-18 13:59:27 +02:00
Bogdan Dobrelya
8058cdbc0e
Add pbr build configuration
...
Required for an RPM package builds with the contrib/ansible-kubespray.spec
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-08-18 12:56:01 +02:00
Bogdan Dobrelya
31d357284a
Update gitignore to prepare for a package build
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-08-18 11:58:07 +02:00
Bogdan Dobrelya
4ee77ce026
Add an RPM spec file and customize ansible roles_path
...
Install roles under /usr/local/share/kubespray/roles,
playbooks - /usr/local/share/kubespray/playbooks/,
ansible.cfg and inventory group vars - into /etc/kubespray.
Ship README and an example inventory as the package docs.
Update the ansible.cfg to consume the roles from the given path,
including virtualenvs prefix, if defined.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-08-18 11:54:20 +02:00
Kyle Bai
8373129588
Support CentOS 7 through Vagrant ( #1542 )
2017-08-18 09:16:47 +03:00
Malepati Bala Siva Sai Akhil
9a3c6f236d
Update Community Code of Conduct ( #1530 )
...
Update Community Code of Conduct from kubernetes/kubernetes-template-project
2017-08-15 16:24:20 +03:00
Vijay Katam
55ba81fee5
Add changed_when: false to rpm query
2017-08-14 12:31:44 -07:00
Joseph Heck
bc5159a1f5
Update comparisons.md ( #1519 )
...
Minor grammar fixes
2017-08-14 18:48:35 +03:00
Brad Beam
af007c7189
Fixing netchecker-server type - pod => deployment ( #1509 )
2017-08-14 18:43:56 +03:00
Malepati Bala Siva Sai Akhil
dc79d07303
Fix Typo in Events Code of Conduct ( #1521 )
2017-08-13 22:49:24 +03:00
Brad Beam
79167c7577
Merge pull request #1461 from Abdelsalam-Abbas/azure_cli_2
...
Update azure contrib to use azure cli 2.0
2017-08-11 13:56:41 -05:00
Brad Beam
08dd057864
Merge pull request #1517 from seungkyua/apply_efk_rabc_and_fluentd_configmap
...
Apply RBAC to efk and create fluentd.conf
2017-08-11 13:33:35 -05:00
Abdelsalam Abbas
fee3f288c0
update azure contrib to use azure cli 2.0
2017-08-11 20:13:02 +02:00
Seungkyu Ahn
b22bef5cfb
Apply RBAC to efk and create fluentd.conf
...
Making fluentd.conf as configmap to change configuration.
Change elasticsearch rc to deployment.
Having installed previous elastaicsearch as rc, first should delete that.
2017-08-11 05:31:50 +00:00
Vijay Katam
7ad5523113
restrict rpm query to redhat
2017-08-10 13:49:14 -07:00
Brad Beam
460b5824c3
Merge pull request #1448 from lancomsystems/log-rotataion-example
...
Add logging options to default docker options
2017-08-10 08:30:23 -05:00
Brad Beam
b0a28b1e80
Merge pull request #1462 from Abdelsalam-Abbas/azure_vars
...
Add more variables for more clarity
2017-08-10 08:29:09 -05:00
Brad Beam
ca6535f210
Merge pull request #1488 from timtoum/weave_docs
...
added Weave documentation
2017-08-10 08:26:19 -05:00
Brad Beam
1155008719
Merge pull request #1481 from magnon-bliex/fluentd-template-fix-typo
...
fixed typo in fluentd-ds.yml.j2
2017-08-10 08:19:59 -05:00
Brad Beam
d07594ed59
Merge pull request #1512 from samuelmanzer/master
...
Add to network plugins documentation - README.md
2017-08-10 08:13:29 -05:00
Vijay Katam
5efda3eda9
Configurable docker yum repos, systemd fix
...
* Make yum repos used for installing docker rpms configurable
* TasksMax is only supported in systemd version >= 226
* Change to systemd file should restart docker
2017-08-09 15:49:53 -07:00
Sam Manzer
4b137efdbd
Add to network plugins documentation - README.md
2017-08-09 14:28:33 -05:00
Brad Beam
383d582b47
Merge pull request #1382 from jwfang/rbac
...
basic rbac support
2017-08-07 08:01:51 -05:00
Spencer Smith
6eacedc443
Merge pull request #1483 from delfer/patch-3
...
Update flannel from 0.6.2 to 0.8.0
2017-08-01 13:57:43 -04:00
timtoum
b1a5bb593c
update docs
2017-08-01 15:55:38 +02:00
timtoum
9369c6549a
update docs
2017-08-01 14:30:12 +02:00
email
c7731a3b93
update docs
2017-08-01 14:24:19 +02:00
email
24706c163a
update docs
2017-08-01 14:12:21 +02:00
email
a276dc47e0
update docs
2017-08-01 10:52:21 +02:00
Spencer Smith
e55f8a61cd
Merge pull request #1482 from bradbeam/fix1393
...
Removing run_once in these tasks so that etcd ca certs get propogated…
2017-07-31 13:47:18 -04:00
email
c8bcca0845
update docs
2017-07-31 16:33:00 +02:00
Spencer Smith
cb6892d2ed
Merge pull request #1469 from hzamani/etcd_metrics
...
Add etcd metrics flag
2017-07-31 09:04:07 -04:00
Spencer Smith
43eda8d878
Merge pull request #1471 from whereismyjetpack/fix_1447
...
add newline after expanding user information
2017-07-31 09:03:04 -04:00
Spencer Smith
a2534e03bd
Merge pull request #1442 from Sispheor/fix_kublet_options
...
Fix enforce-node-allocatable option
2017-07-31 09:00:42 -04:00
email
dc5b955930
update docs
2017-07-31 13:45:43 +02:00
email
5de7896ffb
update docs
2017-07-31 13:28:47 +02:00
email
01af45d14a
update docs
2017-07-31 13:23:01 +02:00
nico
cc9f3ea938
Fix enforce-node-allocatable option
...
Closes #1228
pods is default enforcement
see https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/
add
update
2017-07-31 10:06:53 +02:00
Alexander Chumakov
ff43de695e
Update flannel from v0.6.2 to v0.8.0 in Readme
2017-07-29 08:00:05 +00:00
Alexander Chumakov
8bc717a55c
Update flannel from 0.6.2 to 0.8.0
2017-07-29 10:54:31 +03:00
Brad Beam
d09222c900
Removing run_once in these tasks so that etcd ca certs get propogated properly to worker nodes
...
without this etcd ca certs dont exist on worker nodes causing calico to fail
2017-07-28 14:34:47 -05:00
email
87cdb81fae
update docs
2017-07-28 11:33:13 +02:00
magnon-bliex
38eb1d548a
fixed typo
2017-07-28 14:10:13 +09:00
Anton
e0960f6288
FIX: Unneded (extra) cycles in some tasks ( #1393 )
2017-07-27 20:46:21 +03:00
email
74403f2003
update docs
2017-07-27 17:00:54 +02:00
Spencer Smith
b2c83714d1
Merge pull request #1478 from delfer/patch-2
...
[terraform/openstack] fixed mistake in README.md
2017-07-27 10:50:26 -04:00
email
2c21672de6
update docs
2017-07-27 15:10:08 +02:00
email
f7dc21773d
new doc for weave
2017-07-27 14:40:52 +02:00
timtoum
3e457e4edf
Enable weave seed mode for kubespray ( #1414 )
...
* Enable weave seed mode for kubespray
* fix task Weave seed | Set peers if existing peers
* fix mac address variabilisation
* fix default values
* fix include seed condition
* change weave var to default values
* fix Set peers if existing peers
2017-07-26 19:09:34 +03:00
Alexander Chumakov
03572d175f
[terraform/openstack] fixed mistake in README.md
2017-07-26 17:42:44 +03:00
Dann Bohn
c4894d6092
add newline after expanding user information
2017-07-25 12:59:10 -04:00
Hassan Zamani
3fb0383df4
Add etcd metrics flag
2017-07-25 20:00:30 +04:30
Spencer Smith
ee36763f9d
Merge pull request #1464 from johnko/patch-4
...
set loadbalancer_apiserver_localhost default true
2017-07-25 10:00:56 -04:00
Spencer Smith
955c5549ae
Merge pull request #1402 from Lendico/fix_failed_when
...
"failed_when: false" and "|succeeded" checks for registered vars
2017-07-25 09:33:43 -04:00
Spencer Smith
4a34514b21
Merge pull request #1447 from whereismyjetpack/template_known_users
...
Template out known_users.csv, optionally add groups
2017-07-25 08:55:08 -04:00
jwfang
805d9f22ce
note upgrade from non-RBAC not supported
2017-07-24 19:11:41 +08:00
Brad Beam
20f29327e9
Merge pull request #1379 from gdmello/etcd_data_dir_fix
...
Custom `etcd_data_dir` saves etcd data to host, not container
2017-07-20 09:30:18 -05:00
John Ko
018b5039e7
set loadbalancer_apiserver_localhost default true
...
to match this https://github.com/kubernetes-incubator/kubespray/blob/master/roles/kubernetes/node/tasks/main.yml#L20
and the documented behaviour in HA docs
related to #1456
@rsmitty
2017-07-20 10:27:05 -04:00
Abdelsalam Abbas
d6aeb767a0
Add more azure variables for more clarity
2017-07-20 15:29:27 +02:00
Spencer Smith
b5d3d4741f
Merge pull request #1454 from Abdelsalam-Abbas/higher_drain_timeout
...
higher the timeouts for draining nodes while upgrading kubernetes version
2017-07-19 10:39:33 -04:00
Spencer Smith
85c747d444
Merge pull request #1441 from bradbeam/1434
...
Adding recursive=true for rkt kubelet dir
2017-07-19 10:38:06 -04:00
Spencer Smith
927e6d89d7
Merge pull request #1435 from delfer/master
...
Kubernetes upgrade to 1.6.7
2017-07-19 05:23:38 -07:00
jwfang
3d87f23bf5
uncomment unintended local changes
2017-07-19 12:11:47 +08:00
Brad Beam
45845d4a2a
Merge pull request #1437 from rajiteh/fix_aws_docs
...
Add more instructions to setting up AWS provider
2017-07-18 16:43:01 -05:00
Brad Beam
00ef129b2a
Merge pull request #1455 from johnko/patch-2
...
fix some typos in HA doc
2017-07-18 16:12:58 -05:00
John Ko
06b219217b
fix some typos in HA doc
2017-07-18 10:44:08 -04:00
jwfang
789910d8eb
remote unused netchecker-agent-hostnet-ds.j2
2017-07-17 19:29:59 +08:00
jwfang
a8e6a0763d
run netchecker-server with list pods
2017-07-17 19:29:59 +08:00
jwfang
e1386ba604
only patch system:kube-dns role for old dns
2017-07-17 19:29:59 +08:00
jwfang
83deecb9e9
Revert "no need to patch system:kube-dns"
...
This reverts commit c2ea8c588aa5c3879f402811d3599a7bb3ccab24.
2017-07-17 19:29:59 +08:00
jwfang
d8dcb8f6e0
no need to patch system:kube-dns
2017-07-17 19:29:59 +08:00
jwfang
5fa31eaead
add '-e "${AUTHORIZATION_MODES}"' for all cluster.yml
2017-07-17 19:29:59 +08:00
jwfang
d245201614
test: change ubuntu_calico_rbac to ubuntu_flannel_rbac
2017-07-17 19:29:59 +08:00
jwfang
a5b84a47b0
docs: experimental, no calico/vault
2017-07-17 19:29:59 +08:00
jwfang
552b2f0635
change authorization_modes default value
2017-07-17 19:29:59 +08:00
jwfang
0b3badf3d8
revert calico-related changes
2017-07-17 19:29:59 +08:00
jwfang
cea3e224aa
change authorization_modes default value
2017-07-17 19:29:59 +08:00
jwfang
1eaf0e1c63
rename task
2017-07-17 19:29:59 +08:00
jwfang
2cda982345
binding group system:nodes to clusterrole calico-role
2017-07-17 19:29:59 +08:00
jwfang
c9734b6d7b
run calico-policy-controller with proper sa/role/rolebinding
2017-07-17 19:29:59 +08:00
jwfang
fd01377f12
remove more bins when reset
2017-07-17 19:29:59 +08:00
jwfang
8d2fc88336
add ci test for rbac
2017-07-17 19:29:59 +08:00
jwfang
092bf07cbf
basic rbac support
2017-07-17 19:29:59 +08:00
Ubuntu
5145a8e8be
higher draining timeouts
2017-07-16 20:52:13 +00:00
Matthew Mosesohn
b495d36fa5
Merge pull request #1450 from johnko/patch-1
...
fix typo 'on' > 'one'
2017-07-14 23:00:19 +03:00
John Ko
3bdeaa4a6f
fix typo 'on' > 'one'
2017-07-14 15:25:09 -04:00
Dann Bohn
d1f58fed4c
Template out known_users.csv, optionally add groups
2017-07-14 09:27:20 -04:00
Martin Joehren
12e918bd31
add possibility to ignore the hostname override
2017-07-13 14:04:39 +00:00
Brad Beam
637f445c3f
Merge pull request #1365 from AtzeDeVries/master
...
Give more control over IPIP, but with same default behaviour
2017-07-12 10:17:17 -05:00
Brad Beam
d0e4cf5895
Merge pull request #1438 from gstorme/etcd_retention
...
add configurable parameter for etcd_auto_compaction_retention
2017-07-12 09:53:15 -05:00
Brad Beam
e0bf8b2aab
Adding recursive=true for rkt kubelet dir
...
Fixes #1434
2017-07-12 09:28:54 -05:00
Matthew Mosesohn
483c06b4ab
Merge pull request #1440 from Sispheor/vsphere_doc
...
add vsphere cloud provider doc
2017-07-12 12:05:26 +03:00
nico
f4a3b31415
add vsphere cloud provider doc
...
fix typo
2017-07-12 11:01:06 +02:00
Raj Perera
5c7e309d13
Add more instructions to setting up AWS provider
2017-07-11 10:53:19 -04:00
Spencer Smith
7a72b2d558
Merge pull request #1418 from Abdelsalam-Abbas/fix_vagrantfile
...
make sure every instance is a node if user changed defaults
2017-07-11 08:56:31 -04:00
Spencer Smith
c75b21a510
Merge pull request #1408 from amitkumarj441/patch-1
...
Remove deprecated 'enable-cri' flag in kubernetes 1.7
2017-07-11 08:56:14 -04:00
Spencer Smith
a9f318d523
Merge pull request #1424 from Abdelsalam-Abbas/fix_azure_https_ports
...
fix azure kubernetes port to 6443
2017-07-11 08:55:30 -04:00
Spencer Smith
1dca0bd8d7
Merge pull request #1428 from delfer/patch-1
...
[terraform/openstack] README.md Guide expanded
2017-07-11 08:53:33 -04:00
Alexander Chumakov
f3165a716a
Add more config to README.md
...
Add resolvconf_mode and cloud_provider config description to README.md
2017-07-11 12:46:19 +03:00
Delfer
9f45eba6f6
Kubernetes upgrade to 1.6.7
2017-07-11 09:11:55 +00:00
Abdelsalam Abbas
ecaa7dad49
add a variable for kube_apiserver at all
2017-07-10 20:16:02 +02:00
Spencer Smith
ee84e34570
Merge pull request #1420 from rsmitty/default-matching
...
match kubespray-defaults dns mode with k8s-cluster setting
2017-07-10 12:35:31 -04:00
Alexander Chumakov
442be2ac02
[terraform/openstack] README.md Guide expanded
...
Add section how to configure k8s cluster and set up kubectl
2017-07-10 18:53:57 +03:00
Abdelsalam Abbas
22d600e8c0
fix azure kubernetes port to 6443
2017-07-09 09:56:32 +02:00
AtzeDeVries
e160018826
Fixed conflicts, ipip:true as defualt and added ipip_mode
2017-07-08 14:36:44 +02:00
Spencer Smith
d1a02bd3e9
match kubespray-defaults dns mode with k8s-cluster setting
2017-07-07 13:13:12 -04:00
Julian Poschmann
380fb986b6
Add logging options to default docker options
2017-07-07 12:39:42 +02:00
Abdelsalam Abbas
e7f794531e
make sure every instance is a node if user changed defauls of num_instances
2017-07-07 09:20:14 +02:00
Brad Beam
992023288f
Merge pull request #1319 from fieryvova/private-dns-server
...
Add private dns server for a specific zone
2017-07-06 15:02:54 -05:00
Spencer Smith
ef5a36dd69
Merge pull request #1281 from y-taka-23/patch-01
...
Typo
2017-07-06 14:11:12 -04:00
Spencer Smith
3ab90db6ee
Merge pull request #1411 from kevinjqiu/allow-calico-ipip-subnet-mode
...
Allow calico ipPool to be created with mode "cross-subnet"
2017-07-06 14:04:03 -04:00
Vladimir Kozyrev
e26be9cb8a
add private dns server for a specific zone
2017-07-06 16:30:47 +03:00
Spencer Smith
bba555bb08
Merge pull request #1346 from Starefossen/patch-1
...
Set kubedns minimum replicas to 2
2017-07-06 09:14:11 -04:00
Spencer Smith
4b0af73dd2
Merge pull request #1332 from gstorme/kube_apiserver_insecure_port
...
Use the kube_apiserver_insecure_port variable instead of static 8080
2017-07-06 09:06:50 -04:00
Spencer Smith
da72b8c385
Merge pull request #1391 from Abdelsalam-Abbas/master
...
Uncodron Masters which have scheduling Enabled
2017-07-06 09:06:02 -04:00
Spencer Smith
44079b7176
Merge pull request #1401 from Lendico/better_task_naming
...
Better naming for recurrent tasks
2017-07-06 09:01:07 -04:00
Spencer Smith
19c36fe4c9
Merge pull request #1406 from matlockx/master
...
added flag for not populating inventory entries to etc hosts file
2017-07-06 08:59:49 -04:00
Kevin Jing Qiu
a742d10c54
Allow calico ipPool to be created with mode "cross-subnet"
2017-07-04 19:05:16 -04:00
Hans Kristian Flaatten
6bd27038cc
Set kubedns min replicas to 1 in gitlab config
2017-07-04 16:58:16 +02:00
Hans Kristian Flaatten
5df757a403
Correct indentation and line endings for gitlab config
2017-07-04 16:58:16 +02:00
Hans Kristian Flaatten
38f5d1b18e
Set kubedns minimum replicas to 2
2017-07-04 16:58:16 +02:00
Abdelsalam Abbas
5f75d4c099
Uncodron Masters which have scheduling Enabled
2017-07-03 15:30:21 +02:00
Amit Kumar Jaiswal
319a0d65af
Update kubelet.j2
...
Updated with closing endif.
2017-07-03 16:23:35 +05:30
Amit Kumar Jaiswal
3d2680a102
Update kubelet.j2
...
Updated!
2017-07-03 15:58:50 +05:30
Amit Kumar Jaiswal
c36fb5919a
Update kubelet.j2
...
Updated!!
2017-07-03 15:55:04 +05:30
Amit Kumar Jaiswal
46d3f4369e
Updated K8s version
...
Signed-off-by: Amit Kumar Jaiswal <amitkumarj441@gmail.com>
2017-07-03 04:06:42 +05:30
Martin Joehren
c2b3920b50
added flag for not populating inventory entries to etc hosts file
2017-06-30 16:41:03 +00:00
Spencer Smith
6e7323e3e8
Merge pull request #1398 from tanshanshan/fix-reset
...
clean files in reset roles
2017-06-30 07:59:44 -04:00
Spencer Smith
e98b0371e5
Merge pull request #1368 from vgkowski/patch-3
...
change documentation from "self hosted" to "static pod" for the contr…
2017-06-30 07:31:52 -04:00
Spencer Smith
f085419055
Merge pull request #1388 from vgkowski/master
...
add six package to bootstrap role
2017-06-30 07:30:36 -04:00
Anton Nerozya
1fedbded62
ignore_errors instead of failed_when: false
2017-06-29 20:15:14 +02:00
Anton Nerozya
c8258171ca
Better naming for recurrent tasks
2017-06-29 19:50:09 +02:00
tanshanshan
007ee0da8e
fix reset
2017-06-29 14:45:15 +08:00
Brad Beam
5e1ac9ce87
Merge pull request #1354 from chadswen/kubedns-var-fix
...
kubedns consistency fixes
2017-06-27 22:26:46 -05:00
Brad Beam
a7cd08603e
Merge pull request #1384 from gdmello/etcd_backup_dir_fix
...
Make etcd_backup_prefix configurable.
2017-06-27 22:25:53 -05:00
Brad Beam
854cd1a517
Merge pull request #1380 from jwfang/max-dns
...
docker_dns_servers_strict to control docker_dns_servers rtrim
2017-06-27 21:15:12 -05:00
Spencer Smith
cf8c74cb07
Merge pull request #1342 from Abdelsalam-Abbas/patch-1
...
Create ansible.md
2017-06-27 13:58:18 -04:00
Spencer Smith
23565ebe62
Merge pull request #1356 from rsmitty/rename
...
Rename project to kubespray
2017-06-27 11:40:03 -04:00
Chad Swenson
8467bce2a6
Fix inconsistent kubedns version and parameterize kubedns autoscaler image vars
2017-06-27 10:19:31 -05:00
Spencer Smith
e6225d70a1
Merge pull request #1389 from Abdelsalam-Abbas/master
...
changing username from "ubuntu" to the correct one "vagrant" for ubuntu
2017-06-27 11:04:35 -04:00
Abdelsalam Abbas
a69de8be40
changing username from "ubuntu" to the correct one "vagrant" for ubuntu
2017-06-27 16:42:18 +02:00
gdmelloatpoints
649654207f
mount the etcd data directory in the container with the same path as on the host.
2017-06-27 09:29:47 -04:00
gdmelloatpoints
3123502f4c
move etcd_backup_prefix
to new home.
2017-06-27 09:12:34 -04:00
vincent gromakowski
17d54cffbb
add six package to bootstrap role
2017-06-27 10:08:57 +02:00
Brad Beam
bddee7c38e
Merge pull request #1338 from kevinjqiu/vagrant-sync-folder
...
Sync folders on the vagrant machine
2017-06-26 22:10:58 -05:00
Brad Beam
6f9c311285
Merge pull request #1387 from rsmitty/ci-fixes
...
CI Fixes: turn off coreos updates
2017-06-26 22:00:08 -05:00
Brad Beam
0cfa6a8981
Merge pull request #1372 from seungkyua/apply_kubedns_to_the_latest
...
Make kubedns up to date
2017-06-26 21:58:03 -05:00
Seungkyu Ahn
d5516a4ca9
Make kubedns up to date
...
Update kube-dns version to 1.14.2
https://github.com/kubernetes/kubernetes/pull/45684
2017-06-27 00:57:29 +00:00
Spencer Smith
d2b793057e
Merge pull request #1370 from Abdelsalam-Abbas/master
...
Fixing a condition that cause upgrade failure.
2017-06-26 17:15:03 -04:00
Spencer Smith
b2a409fd4d
turn off coreos updates
2017-06-26 15:45:08 -04:00
gdmelloatpoints
4ba237c5d8
Make etcd_backup_prefix configurable. Ensures that backups can be stored on a different location other than ${HOST}/var/backups, say an EBS volume on AWS.
2017-06-26 09:42:30 -04:00
AtzeDeVries
f5ef02d4cc
Merge remote-tracking branch 'upstream/master'
2017-06-26 11:37:23 +02:00
jwfang
ec2255764a
docker_dns_servers_strict to control docker_dns_servers rtrim
2017-06-26 17:29:12 +08:00
Abdelsalam Abbas
1a8e92c922
Fixing cordoning condition that cause fail for upgrading the cluster
2017-06-23 20:41:47 +02:00
gdmelloatpoints
5c1891ec9f
In the etcd container, the etcd data directory is always /var/lib/etcd. Reverting to this value, since etcd_data_dir
on the host maps to /var/lib/etcd
in the container.
2017-06-23 13:49:31 -04:00
Spencer Smith
83265b7f75
renaming kargo-cli to kubespray-cli
2017-06-23 12:35:10 -04:00
Brad Beam
5364a10033
Merge pull request #1374 from Lendico/doc_ansible_integration
...
Flow for intergation with existing ansible repo
2017-06-23 11:31:22 -05:00
Brad Beam
c2a46e4aa3
Merge pull request #1345 from y-taka-23/neutron-for-calico
...
Modify documented neutron commands for Calico setup
2017-06-23 11:25:56 -05:00
Spencer Smith
bae5ce0bfa
Merge branch 'master' into rename
2017-06-23 12:23:51 -04:00
Spencer Smith
cc5edb720c
Merge pull request #1378 from rsmitty/fix-premoderator
...
premoderator breaks on redirect. update to use kubespray.
2017-06-23 12:10:15 -04:00
Spencer Smith
e17c2ef698
premoderator breaks on redirect. update to use kubespray.
2017-06-23 11:49:48 -04:00
AtzeDeVries
61b74f9a5b
updated to direct control over ipip
2017-06-23 09:16:05 +02:00
Anton Nerozya
0cd83eadc0
README: Integration with existing ansible repo
2017-06-22 18:58:10 +02:00
Anton Nerozya
1757c45490
Merge remote-tracking branch 'upstream/master'
2017-06-22 18:23:29 +02:00
vgkowski
d85f98d2a9
change documentation from "self hosted" to "static pod" for the control plane
2017-06-21 11:00:11 +02:00
TAKAHASHI Yuto
9e123011c2
Modify documented neutron commands for Calico setup
2017-06-21 15:11:39 +09:00
Brad Beam
774c4d0d6f
Merge pull request #1360 from vgkowski/patch-3
...
Update openstack documentation with Calico
2017-06-20 22:10:48 -05:00
AtzeDeVries
7332679678
Give more control over IPIP, but with same default behaviour
2017-06-20 14:50:08 +02:00
vgkowski
bb6f727f25
Update openstack documentation with Calico
...
Linked to the issue https://github.com/kubernetes-incubator/kubespray/issues/1359
2017-06-19 15:48:34 +02:00
Matthew Mosesohn
586d2a41ce
Merge pull request #1357 from seungkyua/fixed_helm_bash_completion
...
Fixed helm bash complete
2017-06-19 09:57:36 +03:00
Seungkyu Ahn
91dff61008
Fixed helm bash complete
2017-06-19 15:33:50 +09:00
Spencer Smith
8203383c03
rename almost all mentions of kargo
2017-06-16 13:25:46 -04:00
Spencer Smith
a3c88a0de5
rename kargo mentions in top-level yml files
2017-06-16 12:18:35 -04:00
Gregory Storme
fff0aec720
add configurable parameter for etcd_auto_compaction_retention
2017-06-14 10:39:38 +02:00
Brad Beam
b73786c6d5
Merge pull request #1335 from bradbeam/imagerepo
...
Set default value for kube_hyperkube_image_repo
2017-06-12 09:46:17 -05:00
Abdelsalam Abbas
67eeccb31f
Create ansible.md
...
fixing a typo
2017-06-12 13:20:15 +02:00
Gregory Storme
266ca9318d
Use the kube_apiserver_insecure_port variable instead of static 8080
2017-06-12 09:20:59 +02:00
Kevin Jing Qiu
3e97299a46
Sync folders on the vagrant machine
2017-06-09 17:19:28 -04:00
Brad Beam
eacc42fedd
Merge pull request #1240 from bradbeam/vaultfixup
...
Fixing up vault variables
2017-06-08 22:33:03 -05:00
Brad Beam
db3e8edacd
Fixing up vault variables
2017-06-08 16:15:33 -05:00
Brad Beam
6e41634295
Set default value for kube_hyperkube_image_repo
...
Fixes #1334
2017-06-08 12:22:16 -05:00
Spencer Smith
ef3c2d86d3
Merge pull request #1327 from rsmitty/coreos-testing-update
...
use latest coreos-stable for testing to avoid upgrades during deployment
2017-06-07 16:31:23 -07:00
Brad Beam
780308c194
Merge pull request #1174 from jlothian/atomic-docker-restart
...
Fix docker restart in atomic
2017-06-07 12:05:32 -05:00
Brad Beam
696fd690ae
Merge pull request #1092 from bradbeam/rkt_docker
...
Adding flag for docker container in kubelet w/ rkt
2017-06-06 12:58:40 -05:00
Spencer Smith
d323501c7f
Merge pull request #1328 from kevinjqiu/coreos-vagrant
...
Support provisioning vagrant k8s clusters with coreos
2017-06-05 14:30:49 -07:00
Kevin Jing Qiu
66d8b2c18a
Specify coreos vagrant box url
2017-06-04 11:31:39 -04:00
Kevin Jing Qiu
6d8a415b4d
Update doc on Vagrant local override file
2017-06-02 20:09:37 -04:00
Kevin Jing Qiu
dad268a686
Add default ssh user for different OSes
2017-06-02 19:51:09 -04:00
Kevin Jing Qiu
e7acc2fddf
Update doc for Vagrant install
2017-06-02 19:03:43 -04:00
Kevin Jing Qiu
6fb17a813c
Support provisioning vagrant k8s clusters with coreos
2017-06-02 18:53:47 -04:00
Spencer Smith
11ede9f872
use latest coreos-stable for testing to avoid upgrades during deployment
2017-06-02 12:24:54 -04:00
Spencer Smith
6ac1c1c886
Merge pull request #1320 from rsmitty/centos-cert-fix
...
check if cloud_provider is defined
2017-05-31 11:54:15 -04:00
Spencer Smith
01c0ab4f06
check if cloud_provider is defined
2017-05-31 08:24:24 -04:00
Spencer Smith
7713f35326
Merge pull request #1317 from mtsr/versionlock
...
Adds note on versionlock to README
2017-05-30 14:37:21 -04:00
Spencer Smith
7220b09ff9
Merge pull request #1315 from rsmitty/hostnames-upgrade
...
Resolve upgrade issues
2017-05-30 11:40:19 -04:00
Spencer Smith
b7298ef51a
Merge pull request #1313 from rsmitty/centos-cert-path
...
add direct path for cert in AWS with RHEL family
2017-05-30 11:37:37 -04:00
Spencer Smith
16b10b026b
add scale.yml to do minimum needed for a node bootstrap
2017-05-29 13:49:21 +02:00
Jonas Matser
9b18c073b6
Adds note on versionlock to README
...
Note to users that auto-updates break clusters that don't lock the docker version somehow.
2017-05-28 20:55:44 +02:00
Spencer Smith
dd89e705f2
don't uncordon masters
2017-05-26 17:48:56 -04:00
Spencer Smith
56b86bbfca
inventory hostname for cordoning/uncordoning
2017-05-26 17:47:25 -04:00
Spencer Smith
7e2aafcc76
add direct path for cert in AWS with RHEL family
2017-05-26 17:32:50 -04:00
Spencer Smith
11c774b04f
Merge pull request #1306 from rsmitty/scale-up
...
add scale.yml to do minimum needed for a node bootstrap
2017-05-25 18:51:09 -04:00
Spencer Smith
6ba926381b
Merge pull request #1309 from jhunthrop/router-peering
...
adding --skip-exists flag for peer_with_router
2017-05-25 18:50:54 -04:00
Justin Hunthrop
af55e179c7
adding --skip-exists flag for peer_with_router
2017-05-25 14:29:18 -05:00
Spencer Smith
18a42e4b38
add scale.yml to do minimum needed for a node bootstrap
2017-05-24 15:49:21 -04:00
Spencer Smith
a10ccadb54
Merge pull request #1300 from rsmitty/dynamic-inventory-aws
...
Added dynamic inventory for AWS as contrib
2017-05-23 12:57:51 -04:00
Spencer Smith
15fee582cc
Merge pull request #1305 from zouyee/master
...
upgrade k8s version to 1.6.4
2017-05-23 12:52:13 -04:00
zoues
43408634bb
Merge branch 'master' into master
2017-05-23 09:32:28 +08:00
zouyee
d47fce6ce7
upgrade k8s version to 1.6.4
2017-05-23 09:30:03 +08:00
Matthew Mosesohn
9e64267867
Merge pull request #1293 from mattymo/kubelet_host_mode
...
Add host-based kubelet deployment
2017-05-19 18:07:39 +03:00
Josh Lothian
7ae5785447
Removed the other unused handler
...
With live-restore: true, we don't need a special docker restart
2017-05-19 09:50:10 -05:00
Josh Lothian
ef8d3f684f
Remove unused handler
...
Previous patch removed the step that sets live-restore
back to false, so don't try to notify that handler any more
2017-05-19 09:45:46 -05:00
Matthew Mosesohn
cc6e3d14ce
Add host-based kubelet deployment
...
Kubelet gets copied from hyperkube container and run locally.
2017-05-19 16:54:07 +03:00
Spencer Smith
83f44b1ac1
Added example json
2017-05-18 17:57:30 -04:00
Spencer Smith
1f470eadd1
Added dynamic inventory for AWS as contrib
2017-05-18 17:52:44 -04:00
Spencer Smith
005b01bd9a
Merge pull request #1299 from bradbeam/kubelet
...
Minor kubelet updates
2017-05-18 12:52:43 -04:00
Josh Lothian
6f67367b57
Leave 'live-restore' false
...
Leave live-restore false to updates always pick
up new network configuration
2017-05-17 14:31:49 -05:00
Josh Lothian
9ee0600a7f
Update handler names and explanation
2017-05-17 14:31:49 -05:00
Josh Lothian
30cc7c847e
Reconfigure docker restart behavior on atomic
...
Before restarting docker, instruct it to kill running
containers when it restarts.
Needs a second docker restart after we restore the original
behavior, otherwise the next time docker is restarted by
an operator, it will unexpectedly bring down all running
containers.
2017-05-17 14:31:49 -05:00
Josh Lothian
a5bb24b886
Fix docker restart in atomic
...
In atomic, containers are left running when docker is restarted.
When docker is restarted after the flannel config is put in place,
the docker0 interface isn't re-IPed because docker sees the running
containers and won't update the previous config.
This patch kills all the running containers after docker is stopped.
We can't simply `docker stop` the running containers, as they respawn
before we've got a chance to stop the docker daemon, so we need to
use runc to do this after dockerd is stopped.
2017-05-17 14:31:49 -05:00
Spencer Smith
f02d810af8
Merge pull request #1298 from rsmitty/centos-bootstrap
...
issue raw yum command since we don't have facts in bootstrapping
2017-05-17 14:44:54 -04:00
Brad Beam
55f6b6a6ab
Merge pull request #940 from Connz/patch-1
...
Fixed nova command to get available flavors
2017-05-16 21:24:07 -05:00
Brad Beam
b999ee60aa
Fixing typo in kubelet cluster-dns and cluster-domain flags
2017-05-16 15:43:29 -05:00
Brad Beam
85afd3ef14
Removing old sysv reference
2017-05-16 15:28:39 -05:00
Spencer Smith
1907030d89
issue raw yum command since we don't have facts in bootstrapping
2017-05-16 10:07:38 -04:00
Spencer Smith
361a5eac7e
Merge pull request #1290 from huikang/update-version-readme
...
Update the kubernete and docker verion in readme
2017-05-15 09:55:04 -04:00
Spencer Smith
fecb41d2ef
Merge pull request #1289 from rsmitty/default-dns-mode
...
default to kubedns &set nxdomain in kubedns deployment if that's the dns_mode
2017-05-15 09:52:07 -04:00
xuhuilong
71dabf9fb3
fix curl get calico status error ( error in tls version) : https://bugzilla.redhat.com/show_bug.cgi?id=1272504
2017-05-15 08:12:26 -04:00
Hui Kang
4cdb641e7b
Update the kubernete and docker verion in readme
...
- kubernetes v1.6.1
- docker v1.13.1
Signed-off-by: Hui Kang <hkang.sunysb@gmail.com>
2017-05-13 22:34:41 -04:00
Spencer Smith
efa2dff681
remove conditional
2017-05-12 17:16:49 -04:00
Spencer Smith
31a7b7d24e
default to kubedns and set nxdomain in kubedns deployment if that's the dns_mode
2017-05-12 15:57:24 -04:00
TAKAHASHI Yuto
af8cc4dc4a
Typo
2017-05-08 22:55:34 +09:00
Matthew Mosesohn
8eb60f5624
Merge pull request #1280 from moss2k13/bugfix/helm_centos
...
Updated kubernetes-apps helm installation
2017-05-08 12:45:35 +03:00
moss2k13
791ea89b88
Updated helm installation
...
Added full path for helm
2017-05-08 09:27:06 +02:00
Spencer Smith
c572760a66
Merge pull request #1254 from iJanki/cert_group
...
Adding /O=system:masters to admin certificate
2017-05-05 10:58:42 -04:00
Brad Beam
69fc19f7e0
Merge pull request #1252 from adidenko/separate-tags-for-netcheck-containers
...
Add support for different tags for netcheck containers
2017-05-05 08:04:54 -05:00
Spencer Smith
b939c24b3d
Merge pull request #1250 from digitalrebar/master
...
bootstrap task on centos missing packages
2017-05-02 12:24:11 -04:00
Spencer Smith
3eb494dbe3
Merge pull request #1259 from bradbeam/calico214
...
Updating calico to v2.1.4
2017-05-02 12:20:47 -04:00
Spencer Smith
d6a66c83c2
Merge pull request #1266 from rsmitty/os-release
...
mount os-release to ensure the node's OS is what's seen in k8s api
2017-05-02 12:17:48 -04:00
Spencer Smith
582a9a5db8
Merge pull request #1265 from cfarquhar/fix_docs_calico_link
...
Fix link from ansible.md to calico.md
2017-05-02 12:17:10 -04:00
Spencer Smith
0afbc19ffb
ensure the /etc/os-release is mounted read only
2017-05-01 14:51:40 -04:00
Spencer Smith
ac9290f985
add for rkt as well
2017-04-28 17:45:10 -04:00
Brad Beam
a133ba1998
Updating calico to v2.1.4
2017-04-28 14:04:25 -05:00
Spencer Smith
5657738f7e
mount os-release to ensure the node's OS is what's seen in k8s api
2017-04-28 13:40:54 -04:00
Charles Farquhar
d310acc1eb
Fix link from ansible.md to calico.md
...
This commit fixes a broken link from ansible.md to calico.md.
2017-04-28 12:10:23 -05:00
Matthew Mosesohn
2b88f10b04
Merge pull request #1262 from holser/switch_ci_to_ansible_2.3
...
Switch CI to ansible 2.3.0
2017-04-28 12:07:19 +03:00
Aleksandr Didenko
883ba7aa90
Add support for different tags for netcheck containers
...
Replace 'netcheck_tag' with 'netcheck_version' and add additional
'netcheck_server_tag' and 'netcheck_agent_tag' config options to
provide ability to use different tags for server and agent
containers.
2017-04-27 17:15:28 +02:00
Sergii Golovatiuk
28f55deaae
Switch CI to ansible 2.3.0
...
Closes: 1253
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-27 12:50:16 +02:00
Matthew Mosesohn
40407930d5
Merge pull request #1260 from holser/fix_jinja_ansible_2.3
...
Ansible 2.3 support
2017-04-27 13:39:28 +03:00
Sergii Golovatiuk
674b71b535
Ansible 2.3 support
...
- Fix when clauses in various places
- Update requirements.txt
- Fix README.md
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-26 15:22:10 +02:00
Matthew Mosesohn
677d9c47ac
Merge pull request #1256 from AlexeyKasatkin/add_MY_NODE_NAME_var
...
add MY_NODE_NAME variable into netchecker-agent environment
2017-04-25 18:12:25 +03:00
Aleksey Kasatkin
2638ab98ad
add MY_NODE_NAME variable into netchecker-agent environment
2017-04-24 17:19:42 +03:00
Matthew Mosesohn
bc3068c2f9
Merge pull request #1251 from FengyunPan/fix-helm-home
...
Specify a dir and attach it to helm for HELM_HOME
2017-04-24 15:17:28 +03:00
FengyunPan
2bde9bea1c
Specify a dir and attach it to helm for HELM_HOME
2017-04-21 10:51:27 +08:00
Spencer Smith
502f2f040d
Merge pull request #1249 from rsmitty/master
...
add some known tweaks that need to be made for coreos to docs
2017-04-20 18:40:25 -04:00
Greg Althaus
041d4d666e
Install required selinux-python bindings in bootstrap
...
on centos. The bootstrap tty fixup needs it.
2017-04-20 11:17:01 -05:00
Spencer Smith
c0c10a97e7
Merge pull request #1248 from rsmitty/aws-resolver
...
allow for correct aws default resolver
2017-04-20 11:25:40 -04:00
Spencer Smith
5a7c50027f
add some known tweaks that need to be made for coreos
2017-04-20 11:14:41 -04:00
Spencer Smith
88b5065e7d
fix stray 'in' and break into multiple lines for clarity
2017-04-20 09:53:01 -04:00
Spencer Smith
b690008192
allow for correct aws default resolver
2017-04-20 09:32:03 -04:00
Matthew Mosesohn
2d6bc9536c
Merge pull request #1246 from holser/disable_dns_for_kube_services
...
Change DNS policy for kubernetes components
2017-04-20 16:12:52 +03:00
Sergii Golovatiuk
01dc6b2f0e
Add aws to default_resolver
...
When VPC is used, external DNS might not be available. This patch change
behavior to use metadata service instead of external DNS when
upstream_dns_servers is not specified.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-20 11:47:19 +02:00
Sergii Golovatiuk
d8aa2d0a9e
Change DNS policy for kubernetes components
...
According to code apiserver, scheduler, controller-manager, proxy don't
use resolution of objects they created. It's not harmful to change
policy to have external resolver.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-20 11:22:57 +02:00
Matthew Mosesohn
19bb97d24d
Merge pull request #1238 from Starefossen/fix/namespace-template-file
...
Move namespace file to template directory
2017-04-20 12:19:55 +03:00
Matthew Mosesohn
9f4f168804
Merge pull request #1241 from bradbeam/rktcnidir
...
Explicitly create cni bin dir
2017-04-20 12:19:26 +03:00
Matthew Mosesohn
82e133b382
Merge pull request #1235 from JustinAzoff/patch-1
...
Fix IPS array variable expansion
2017-04-20 12:08:49 +03:00
Matthew Mosesohn
cf3083d68e
Merge pull request #1239 from mattymo/resettags
...
Add tags to reset playbook and make iptables flush optional
2017-04-20 11:35:08 +03:00
Sergii Golovatiuk
e796cdbb27
Fix restart kube-controller ( #1242 )
...
kubernetesUnitPrefix was changed to k8s_* in 1.5. This patch reflects
this change in kargo
2017-04-20 11:26:01 +03:00
Matthew Mosesohn
2d44582f88
Add tags to reset playbook and make iptables flush optional
...
Fixes #1229
2017-04-19 19:32:18 +03:00
Spencer Smith
2a61344c03
Merge pull request #1236 from mattymo/minupgrade
...
Add minimal k8s upgrade playbook
2017-04-19 12:05:39 -04:00
Spencer Smith
77c6aad1b5
Merge pull request #1237 from Starefossen/chore/remove-dot-bak
...
Remove and ignore .bak files
2017-04-19 12:03:41 -04:00
Brad Beam
b60a897265
Explicitly create cni bin dir
...
If this path doesnt exist, it will cause kubelet to fail to start when
using rkt
2017-04-19 16:00:44 +00:00
Hans Kristian Flaatten
fdd41c706a
Remove and ignore .bak files
2017-04-19 13:37:23 +02:00
Hans Kristian Flaatten
d68cfeed6e
Move namespace file to template directory
2017-04-19 13:37:02 +02:00
Matthew Mosesohn
14911e0d22
Add minimal k8s upgrade playbook
2017-04-18 13:28:36 +03:00
Justin
9503434d53
Fix IPS array variable expansion
...
$IPS only expands to the first ip address in the array:
justin@box:~$ declare -a IPS=(10.10.1.3 10.10.1.4 10.10.1.5)
justin@box:~$ echo $IPS
10.10.1.3
justin@box:~$ echo ${IPS[@]}
10.10.1.3 10.10.1.4 10.10.1.5
2017-04-17 20:56:52 -04:00
Spencer Smith
c3c9e955e5
Merge pull request #1232 from rsmitty/custom-flags
...
add ability for custom flags
2017-04-17 14:01:32 -04:00
Spencer Smith
72d5db92a8
remove stray spaces in templating
2017-04-17 12:24:24 -04:00
Spencer Smith
3f302c8d47
ensure spacing on string of flags
2017-04-17 12:13:39 -04:00
Spencer Smith
04a769bb37
ensure spacing on string of flags
2017-04-17 11:11:10 -04:00
Spencer Smith
f9d4a1c1d8
update to safeguard against accidentally passing string instead of list
2017-04-17 11:09:34 -04:00
Matthew Mosesohn
3e7db46195
Merge pull request #1233 from gbolo/master
...
allow admission control plug-ins to be easily customized
2017-04-17 12:59:49 +03:00
Matthew Mosesohn
e52aca4837
Merge pull request #1223 from mattymo/vault_cert_skip
...
Skip vault cert task evaluation when using script certs
2017-04-17 12:52:42 +03:00
Matthew Mosesohn
5ec503bd6f
Merge pull request #1222 from bradbeam/calico
...
Updating calico versions
2017-04-17 12:52:20 +03:00
gbolo
49be805001
allow admission control plug-ins to be easily customized
2017-04-16 22:03:45 -04:00
Spencer Smith
94596388f7
add ability for custom flags
2017-04-14 17:33:04 -04:00
Spencer Smith
5c4980c6e0
Merge pull request #1231 from holser/fix_netchecker-server
...
Reschedule netchecker-server in case of HW failure.
2017-04-14 10:50:07 -04:00
Spencer Smith
6d157f0b3e
Merge pull request #1225 from VincentS/aws_fixes
...
Fixes for AWS Terraform Deployment and Updated Readme
2017-04-14 10:47:25 -04:00
Spencer Smith
c3d5fdff64
Merge pull request #1192 from justindowning/patch-2
...
Update upgrades.md
2017-04-14 10:19:35 -04:00
Spencer Smith
d6cbdbd6aa
Merge pull request #1230 from jduhamel/jduhamel-kubedns-autoscaler-1
...
Update kubedns-autoscaler change target
2017-04-14 09:56:48 -04:00
Matthew Mosesohn
d7b8fb3113
Update start_vault_temp.yml
2017-04-14 13:32:41 +03:00
Sergii Golovatiuk
45044c2d75
Reschedule netchecker-server in case of HW failure.
...
Pod opbject is not reschedulable by kubernetes. It means that if node
with netchecker-server goes down, netchecker-server won't be scheduled
somewhere. This commit changes the type of netchecker-server to
Deployment, so netchecker-server will be scheduled on other nodes in
case of failures.
2017-04-14 10:49:16 +02:00
Joe Duhamel
a9f260d135
Update dnsmasq-autoscaler
...
changed target to be a deployment rather than a replicationcontroller.
2017-04-13 15:07:06 -04:00
Joe Duhamel
072b3b9d8c
Update kubedns-autoscaler change target
...
The target was a replicationcontroller but kubedns is currently a deployment
2017-04-13 14:55:25 -04:00
Matthew Mosesohn
ae7f59e249
Skip vault cert task evaluation completely when using script cert generation
2017-04-13 19:29:07 +03:00
Spencer Smith
450b4e16b2
Merge pull request #1224 from VincentS/var_fix
...
Fix undefined variables for etcd deployment
2017-04-12 09:19:02 -04:00
Vincent Schwarzer
c48ffa24be
Fixes for AWS Terraform Deployment and Updated Readme
2017-04-12 15:15:54 +02:00
Vincent Schwarzer
7f0c0a0922
Fix for etcd variable issue
2017-04-12 12:59:49 +02:00
Brad Beam
bce1c62308
Updating calico versions
2017-04-11 20:52:04 -05:00
Spencer Smith
9b3aa3451e
Merge pull request #1218 from bradbeam/efkidempotent
...
Fixing resource type for kibana
2017-04-11 19:04:13 -04:00
Spencer Smith
436c0b58db
Merge pull request #1217 from bradbeam/helmcompletion
...
Excluding bash completion for helm on CoreOS
2017-04-11 17:34:11 -04:00
Spencer Smith
7ac62822cb
Merge pull request #1219 from zouyee/master
...
upgrade etcd version from v3.0.6 to v3.0.17
2017-04-11 17:32:56 -04:00
Matthew Mosesohn
af8ae83ea0
Merge pull request #1216 from mattymo/rework_collect_logs
...
Allow collect-logs.yaml to operate without inventory vars
2017-04-11 16:58:39 +03:00
zouyee
0bcecae2a3
upgrade etcd version from v3.0.6 to v3.0.17
2017-04-11 10:42:35 +08:00
Brad Beam
bd130315b6
Excluding bash completion for helm on CoreOS
2017-04-10 11:07:15 -05:00
Brad Beam
504711647e
Fixing resource type for kibana
2017-04-10 11:01:12 -05:00
Matthew Mosesohn
a9a016d7b1
Allow collect-logs.yaml to operate without inventory vars
2017-04-10 18:49:17 +03:00
Antoine Legrand
ab12b23e6f
Merge pull request #1173 from bradbeam/dockerlogs
...
Setting defaults for docker log rotation
2017-04-09 11:50:01 +02:00
Matthew Mosesohn
797bdbd998
Merge pull request #1210 from mattymo/fix-1.5-kubelet
...
Unbreak 1.5 deployment with kubelet
2017-04-07 08:22:39 +03:00
Matthew Mosesohn
1c45d37348
Update kubelet.j2
2017-04-06 22:59:18 +03:00
Matthew Mosesohn
b521255ec9
Unbreak 1.5 deployment with kubelet
...
1.5 kubelet fails to start when using unknown params
2017-04-06 21:07:48 +03:00
Matthew Mosesohn
75ea001bfe
Merge pull request #1208 from mattymo/1.6-flannel
...
Update to k8s 1.6 with flannel and centos fixes
2017-04-06 13:04:02 +03:00
Matthew Mosesohn
ff2fb9196f
Fix flannel for 1.6 and apply fixes to enable containerized kubelet
2017-04-06 10:06:21 +04:00
Matthew Mosesohn
acae0fe4a3
Merge pull request #1205 from holser/resolv_updates
...
Refactoring resolv.conf
2017-04-05 14:22:52 +03:00
Matthew Mosesohn
ccc11e5680
Upgrade to Kubernetes 1.6.1
2017-04-05 13:26:36 +03:00
Sergii Golovatiuk
2670eefcd4
Refactoring resolv.conf
...
- Renaming templates for netchecker
- Add dnsPolicy: ClusterFirstWithHostNet to kube-proxy
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-05 09:28:01 +02:00
Matthew Mosesohn
c0cae9e8a0
Merge pull request #1204 from mattymo/resolvconf-nodes
...
Restart kubelet when updating /etc/resolv.conf on all k8s nodes
2017-04-04 22:03:44 +03:00
Matthew Mosesohn
f8cf6b4f7c
Merge pull request #1186 from holser/resolv_conf
...
Set ClusterFirstWithHostNet for Pods with hostnetwork: true
2017-04-04 20:49:55 +03:00
Matthew Mosesohn
a29182a010
Restart kubelet when updating /etc/resolv.conf on all k8s nodes
2017-04-04 20:43:47 +03:00
Sergii Golovatiuk
1cfe0beac0
Set ClusterFirstWithHostNet for Pods with hostnetwork: true
...
In kubernetes 1.6 ClusterFirstWithHostNet was added as an option. In
accordance to it kubelet will generate resolv.conf based on own
resolv.conf. However, this doesn't create 'options', thus the proper
solution requires some investigation.
This patch sets the same resolv.conf for kubelet as host
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-04 16:34:13 +02:00
Matthew Mosesohn
798f90c4d5
Merge pull request #1153 from mattymo/graceful_drain
...
Move graceful upgrade test to Ubuntu canal HA, adjust drain
2017-04-04 17:33:53 +03:00
Matthew Mosesohn
fac4334950
Merge pull request #1201 from mattymo/configurable_failure
...
Make any_errors_fatal configurable
2017-04-04 15:51:56 +03:00
Matthew Mosesohn
f8d44a8a88
Merge pull request #1200 from mattymo/issue1190
...
Fix multiline condition for k8s check certs
2017-04-04 15:48:05 +03:00
Matthew Mosesohn
1136a94a6e
Merge pull request #1191 from justindowning/patch-1
...
pin ansible to version 2.2.1.0
2017-04-04 13:42:32 +03:00
Matthew Mosesohn
fd20e0de90
Wait for container creation in check network test
2017-04-04 13:12:24 +03:00
Matthew Mosesohn
a1150dc334
Make any_errors_fatal configurable
...
Useful at scale when 1 or 2 noes my fail and you can proceed with
the majority and go back and fix the others later.
2017-04-04 12:52:47 +03:00
Matthew Mosesohn
b4d06ff8dd
Add /var/lib/cni to kubelet
...
Necessary to persist this directory for host-local IPAM used by Canal
Add pre-upgrade task to copy /var/lib/cni out of old kubelet.
2017-04-03 19:38:24 +03:00
Matthew Mosesohn
7581705007
Merge pull request #1185 from intelsdi-x/hostname
...
Use hostname module to set hostname, and do it for all Os not only Co…
2017-04-03 19:01:12 +03:00
Matthew Mosesohn
5a5707159a
Fix multiline condition for k8s check certs
...
Fixes #1190
2017-04-03 17:44:55 +03:00
Matthew Mosesohn
742a1681ce
Merge pull request #1166 from rogerwelin/master
...
add iptables --flush to reset role
2017-04-03 17:25:10 +03:00
Matthew Mosesohn
fba9b9cb65
Merge pull request #1182 from artem-panchenko/bumpCalicoPolicyControllerVersion
...
Bump calico policy controller version
2017-04-03 17:21:52 +03:00
Paweł Skrzyński
61b2d7548a
Use hostname module to set hostname, and do it for all Os not only CoreOS
2017-04-03 15:09:33 +02:00
Matthew Mosesohn
80828a7c77
use etcd2 when upgrading unless forced
2017-04-03 15:07:42 +03:00
Matthew Mosesohn
f5af86c9d5
Merge pull request #1194 from adidenko/fix-sync_certs
...
Fix multiline when condition in sync_certs task
2017-03-31 17:39:40 +03:00
Aleksandr Didenko
58acbe7caf
Fix multiline when condition in sync_certs task
...
Folded style in multiline 'when' condition causes error with
unexpected ident. Changing it to literal style should fix
the issue.
Closes #1190
2017-03-30 22:21:04 +02:00
Spencer Smith
355b92d7ba
Merge pull request #1170 from jlothian/atomic-docker-network
...
1169 - fix docker systemd unit
2017-03-30 13:13:28 -07:00
Matthew Mosesohn
d42e4f2344
Update .gitlab-ci.yml
2017-03-30 12:19:15 +04:00
Justin Downing
fbded9cdac
Update upgrades.md
...
Clarify that the `kube_version` environment variable is needed for the CLI "graceful upgrade". Also add and example to check that the upgrade was successful.
2017-03-29 22:00:52 -04:00
Justin Downing
907e43b9d5
pin ansible to version 2.2.1.0
...
ansible 2.2.2.0 has an [issue]() that causes problems for kargo:
```
(env) kargo ᐅ env/bin/ansible-playbook upgrade-cluster.yml
ERROR! Unexpected Exception: 'Host' object has no attribute 'remove_group'
```
Pinning ansible to 2.2.1.0 resolved this for me.
2017-03-29 21:40:34 -04:00
Matthew Mosesohn
fb467df47c
fix etcd restart
2017-03-29 23:22:49 +04:00
Matthew Mosesohn
48beef25fa
delete master containers forcefully
2017-03-27 19:08:22 +03:00
Matthew Mosesohn
a3f568fc64
restart scheduler and controller-manager too
2017-03-27 13:51:35 +03:00
Matthew Mosesohn
57ee304260
ensure post-upgrade purge ones only once
2017-03-27 13:28:37 +03:00
Matthew Mosesohn
0794a866a7
switch debian8-canal-ha to ubuntu
2017-03-27 13:28:37 +03:00
Matthew Mosesohn
49e4d344da
move network plugins out of grouped upgrades
2017-03-27 13:28:37 +03:00
Matthew Mosesohn
21a9dea99f
move kubernetes-apps/network-plugin back to master role
2017-03-27 13:28:37 +03:00
Matthew Mosesohn
6e505c0c3f
Fix delegate tasks for kubectl and etcdctl
2017-03-27 13:28:37 +03:00
Matthew Mosesohn
e9a294fd9c
Significantly reduce memory requirements
...
Canal runs more pods and upgrades need a bit of extra
room to load new pods in and get the old ones out.
2017-03-27 13:28:37 +03:00
Matthew Mosesohn
44d851d5bb
Only cordon Ready nodes
2017-03-27 13:28:37 +03:00
Matthew Mosesohn
5ed03ce7f0
Use checksum of dnsmasq config to trigger updates of dnsmasq
...
Allows config changes made by Ansible to restart dnsmasq deployment
2017-03-27 13:28:37 +03:00
Matthew Mosesohn
c1b9660ec8
Move graceful upgrade test to debian canal HA, adjust drain
...
Graceful upgrades require 3 nodes
Drain now has a command timeout of 40s
2017-03-27 13:28:37 +03:00
Matthew Mosesohn
c2c334d22f
Merge pull request #1181 from holser/refactor_etcd
...
Refactor etcd role
2017-03-27 13:05:35 +03:00
Antoine Legrand
ed5c848473
Merge pull request #1175 from zoidbergwill/patch-1
...
Fix markdown of heading in README
2017-03-27 09:33:43 +02:00
Sergii Golovatiuk
f144fd1ed3
Refactor etcd role
...
- Run docker run from script rather than directly from systemd target
- Refactoring styling/templates
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-03-24 12:34:15 +01:00
Artem Panchenko
e96557f410
Bump calico policy controller version
...
Latest released version of kube-policy-controller
contains important bug fixes and should be used
by default.
2017-03-24 12:13:09 +02:00
Antoine Legrand
ac96d5ccf0
Merge pull request #1176 from zoidbergwill/patch-2
...
Update roadmap.md
2017-03-23 12:05:35 +01:00
Matthew Mosesohn
b2af19471e
Merge pull request #1177 from rutsky/replace-nbsp
...
replace non-breakable space with regular space
2017-03-23 12:59:45 +03:00
Matthew Mosesohn
6805d0ff2b
Merge pull request #1179 from kubernetes-incubator/missing_defaults
...
Add missing defaults
2017-03-23 12:16:13 +03:00
Antoine Legrand
6e1de9d820
Add missing defaults
2017-03-23 10:05:34 +01:00
Matthew Mosesohn
d27ca7854f
Merge pull request #1161 from VincentS/aws_deployment
...
Fixes for AWS Terraform Deployment
2017-03-23 11:59:39 +03:00
Vladimir Rutsky
c4e57477fb
replace non-breakable space with regular space
...
Non-brekable space is 0xc2 0xa0 byte sequence in UTF-8.
To find one:
$ git grep -I -P '\xc2\xa0'
To replace with regular space:
$ git grep -l -I -P '\xc2\xa0' | xargs sed -i 's/\xc2\xa0/ /g'
This commit doesn't include changes that will overlap with commit f1c59a91a1
.
2017-03-23 00:25:01 +03:00
William Martin Stewart
f1c59a91a1
Update roadmap.md
2017-03-22 22:03:06 +02:00
William Martin Stewart
74c573ef04
Update README.md
2017-03-22 22:01:44 +02:00
Matthew Mosesohn
5f082bc0e5
Merge pull request #1172 from mattymo/dnsmasq_upgrade
...
Use checksum of dnsmasq config to trigger updates of dnsmasq
2017-03-22 18:00:10 +03:00
Matthew Mosesohn
0e3b7127b5
Merge pull request #1167 from mattymo/dnsmasq_when_deploying_master
...
Change wait for dnsmasq to skip if there are no kube-nodes in play
2017-03-22 17:59:56 +03:00
Brad Beam
5d3414a40b
Setting defaults for docker log rotation
2017-03-22 09:40:10 -04:00
Roger Welin
f4638c7580
add iptables --flush to reset role
2017-03-22 11:10:24 +01:00
Matthew Mosesohn
8b0b500c89
Use checksum of dnsmasq config to trigger updates of dnsmasq
...
Allows config changes made by Ansible to restart dnsmasq deployment
2017-03-22 13:03:55 +03:00
Matthew Mosesohn
04746fc4d8
Merge pull request #1163 from mattymo/kvm_setup
...
Add KVM hypervisor playbook to contrib
2017-03-22 12:31:14 +03:00
Matthew Mosesohn
463ef3f8bc
Merge pull request #1168 from mattymo/disable_download_delegate
...
Disable download_run_once and download_localhost for most CI scenarios
2017-03-22 12:19:24 +03:00
Josh Lothian
5e2f78424f
1169 - fix docker systemd unit
...
The docker-network environment file masks the new values
put into /etc/systemd/system/docker.service.d/flannel-options.conf
to renumber the docker0 to work correctly with flannel.
2017-03-21 15:22:14 -05:00
Matthew Mosesohn
3889c2e01c
Add KVM hypervisor playbook to contrib
...
Optional Ansible playbook for preparing a host for running Kargo.
This includes creation of a user account, some basic packages,
and sysctl values required to allow CNI networking on a libvirt network.
2017-03-21 19:50:01 +03:00
Matthew Mosesohn
1887e984a0
Change wait for dnsmasq to skip if there are no kube-nodes in play
...
Also changed unnecessary delay to a max timeout (now defaulting to 1s sleep
between tries)
Also rename play_hosts to ansible_play_hosts
2017-03-21 18:55:22 +03:00
Matthew Mosesohn
a495bbc1db
Disable download_run_once and download_localhost for most CI scenarios
...
This adds time to deployment, so we should only test it sparingly during
daily master.
2017-03-21 16:41:30 +03:00
Matthew Mosesohn
cd429d3654
Merge pull request #1159 from holser/etcd_backup_restore
...
Backup etcd
2017-03-21 13:07:44 +03:00
Matthew Mosesohn
771aef0b44
Merge pull request #1162 from holser/bump_coreos_ci
...
Bump CoreOS stable to latest version
2017-03-20 17:45:04 +03:00
Matthew Mosesohn
f7ef452d8a
Merge pull request #1160 from mattymo/simpler_idempotency
...
Make reset check on idempotency check optional
2017-03-20 17:04:51 +03:00
Matthew Mosesohn
0f64f8db90
Merge pull request #1155 from mattymo/helm
...
Add helm deployment
2017-03-20 17:00:06 +03:00
Sergii Golovatiuk
c04a6254b9
Backup etcd data before restarting etcd
...
etcd is crucial part of kubernetes cluster. Ansible restarts etcd on
reconfiguration. Backup helps operator to restore cluster manually in
case of any issues.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-03-20 14:50:52 +01:00
Sergii Golovatiuk
485e17d6ed
Bump CoreOS stable to latest version
...
1298.6.0 fixes some sporadic network issues. It also includes docker
1.12.6 which includes several stability fixes for kubernetes.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-03-20 14:31:33 +01:00
Vincent Schwarzer
952ab03d2a
Fixes for AWS Terraform Deployment
2017-03-20 12:08:17 +01:00
Matthew Mosesohn
bbb524018e
Make reset check on idempotency check optional
...
By default we do not test reset.yml now.
2017-03-20 13:16:58 +03:00
Matthew Mosesohn
859c08620b
Merge pull request #1105 from VincentS/aws_deployment
...
AWS Terraform for Kargo
2017-03-20 12:55:11 +03:00
Antoine Legrand
f6cd42e6e0
Merge pull request #1158 from rutsky/patch-6
...
limit jinja2 version to <2.9
2017-03-19 23:42:11 +01:00
Vladimir Rutsky
61ee67d612
limit jinja2 version to <2.9
...
Ansible 2.2.1 requires jinja2<2.9, see <https://github.com/ansible/ansible/blob/v2.2.1.0-1/setup.py#L25 >,
but without explicit limiting upper jinja2 version here pip ignores
Ansible requirements and installs latest available jinja2
(pip is not very smart here), which is incompatible with with
Ansible 2.2.1.
With incompatible jinja2 version "ansible-vault create" (and probably other parts)
fails with:
ERROR! Unexpected Exception: The 'jinja2<2.9' distribution was not found
and is required by ansible
This upper limit should be removed in 2.2.2 release, see:
<978311bf3f
>
2017-03-20 01:33:08 +03:00
Matthew Mosesohn
939c1def5d
Merge pull request #1152 from mattymo/redhat_weave
...
Fix weave on RHEL deployment
2017-03-19 16:45:20 +03:00
Matthew Mosesohn
b7ab80e8ea
Merge pull request #1149 from mattymo/centos-retries
...
Retry yum/apt/rpm download commands
2017-03-18 11:12:36 +03:00
Matthew Mosesohn
b69d4b0ecc
Add helm deployment
2017-03-17 20:24:41 +03:00
Matthew Mosesohn
2f437d7452
Merge pull request #1157 from rutsky/remove-change-k8s-version
...
remove obsolete script
2017-03-17 20:23:34 +03:00
Vladimir Rutsky
d761216ec1
remove obsolete script
...
Currently Kubernetes version can be selected using "kube_version" variable.
2017-03-17 20:09:36 +03:00
Matthew Mosesohn
088e9be931
Merge pull request #1156 from rutsky/patch-5
...
fix jinja package name
2017-03-17 20:08:36 +03:00
Vladimir Rutsky
32ecac6464
fix jinja package name
...
Jinja 2.* releases are published under `Jinja2` name.
2017-03-17 20:07:49 +03:00
Matthew Mosesohn
7760c3e4aa
Retry yum/apt/rpm download commands, fix succeeded filter
2017-03-17 18:56:26 +03:00
Matthew Mosesohn
3cfb76e57f
Merge pull request #1146 from mattymo/resolvconf_optimize
...
Condense resolvconf sources before starting loop
2017-03-17 18:42:32 +03:00
Matthew Mosesohn
e1faeb0f6c
Fix weave on RHEL deployment
...
Reduce retry delay checking weave
Always load br_netfilter module
2017-03-17 18:17:47 +03:00
Matthew Mosesohn
25bff851dd
Merge pull request #1136 from adidenko/fix-calico-policy-order
...
Move calico-policy-controller into separate role
2017-03-17 17:32:14 +03:00
Aleksandr Didenko
3a39904011
Move calico-policy-controller into separate role
...
By default Calico CNI does not create any network access policies
or profiles if 'policy' is enabled in CNI config. And without any
policies/profiles network access to/from PODs is blocked.
K8s related policies are created by calico-policy-controller in
such case. So we need to start it as soon as possible, before any
real workloads.
This patch also fixes kube-api port in calico-policy-controller
yaml template.
Closes #1132
2017-03-17 11:21:52 +01:00
Matthew Mosesohn
7e1fbfba64
Merge pull request #1147 from mattymo/calico-update
...
Update calico to 1.1.0-rc8
2017-03-17 13:17:41 +03:00
Matthew Mosesohn
a52064184e
Condense resolvconf sources before starting loop
2017-03-17 13:06:56 +03:00
Matthew Mosesohn
b4a1ba828a
Merge pull request #1148 from VincentS/patch-1
...
Fixed Formatting / Ansbile-Playbook Command Upgrade Cluster
2017-03-16 19:55:59 +03:00
Vincent Schwarzer
c8c6105ee2
Fixed Formatting / Ansbile-Playbook Command
...
- added -b and fixed typo in ansible-playbook command
- fixed formatting issue
2017-03-16 17:53:48 +01:00
Matthew Mosesohn
0b49eeeba3
Update calico to 1.1.0-rc8
...
Fixes bug in CentOS/RHEL in felix related to overlayfs driver.
2017-03-16 19:23:36 +03:00
Matthew Mosesohn
b0830f0cd7
Merge pull request #1087 from bradbeam/openstack
...
Adding openstack domain id
2017-03-16 17:53:14 +03:00
Matthew Mosesohn
565d4a53b0
Merge pull request #1108 from idcrook/issue_1107-docker-versioning
...
Adding Docker CE 'stable' and 'edge' version packages
2017-03-16 16:32:13 +03:00
Matthew Mosesohn
9624662bf6
Merge pull request #1141 from mattymo/idempotency2
...
More idempotency fixes
2017-03-16 12:29:42 +03:00
Matthew Mosesohn
8195957461
Merge branch 'master' into idempotency2
2017-03-16 09:29:43 +03:00
Matthew Mosesohn
02fed4a082
Merge pull request #1138 from mattymo/idempotency-fixes
...
Idempotency fixes for etcd certs and resolvconf tasks
2017-03-16 09:20:28 +03:00
Bogdan Dobrelya
34ecf4ea51
Merge pull request #1109 from pcm32/feature/fixTerraformOS
...
Restores working order of contrib/terraform/openstack
2017-03-15 17:15:35 +01:00
Matthew Mosesohn
a422ad0d50
More idempotency fixes
...
Fixed sync_tokens fact
Fixed sync_certs for k8s tokens fact
Disabled register docker images changability
Fixed CNI dir permission
Fix idempotency for etcd pre upgrade checks
2017-03-15 19:06:39 +03:00
Matthew Mosesohn
096d96e344
Merge pull request #1137 from holser/bug/1135
...
Turn on iptables for flannel
2017-03-15 17:06:42 +03:00
Bogdan Dobrelya
e61310bc89
Merge pull request #1140 from VincentS/jinja28
...
Added Jinja 2.8 to Docs
2017-03-15 13:18:53 +01:00
Vincent Schwarzer
111ca9584e
Added Jinja 2.8 to Docs
...
Added Jinja 2.8 Requirements to docs and pip requirements file which
is needed to run the current Ansible Playbooks.
2017-03-15 13:11:09 +01:00
Matthew Mosesohn
7d35c4592c
Merge pull request #1139 from VincentS/docu_fix
...
Fix for CoreOS Docu
2017-03-15 15:06:41 +03:00
Vincent Schwarzer
3e8386cbf3
Fixed CoreOS Docu
...
CoreOS docu was referencing outdated bootstrap playbook that
is now part of kargo itself.
2017-03-15 13:04:01 +01:00
Matthew Mosesohn
4354162067
Merge pull request #1080 from VincentS/Granular_Auth_Control
...
Granular authentication Control
2017-03-15 13:12:51 +03:00
Matthew Mosesohn
a62a444229
Merge pull request #1117 from mattymo/etcd3-upgrade
...
Migrate k8s data to etcd3 api store
2017-03-15 12:56:06 +03:00
Matthew Mosesohn
f6b72fa830
Make resolvconf preinstall idempotent
2017-03-15 01:20:13 +04:00
Sergii Golovatiuk
9667e8615f
Turn on iptables for flannel
...
Closes : #1135
Closes : #1026
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-03-14 17:54:55 +01:00
Vincent Schwarzer
026da060f2
Granular authentication Control
...
It is now possible to deactivate selected authentication methods
(basic auth, token auth) inside the cluster by adding
removing the required arguments to the Kube API Server and generating
the secrets accordingly.
The x509 authentification is currently not optional because disabling it
would affect the kubectl clients deployed on the master nodes.
2017-03-14 16:57:35 +01:00
Matthew Mosesohn
3feab1cb2d
Merge pull request #1134 from mattymo/1.6-support
...
Explicitly set cni-bin-dir
2017-03-14 17:53:08 +03:00
Matthew Mosesohn
804e9a09c0
Migrate k8s data to etcd3 api store
...
Default backend is now etcd3 (was etcd2).
The migration process consists of the following steps:
* check if migration is necessary
* stop etcd on first etcd server
* run migration script
* start etcd on first etcd server
* stop kube-apiserver until configuration is updated
* update kube-apiserver
* purge old etcdv2 data
2017-03-14 17:50:20 +03:00
Matthew Mosesohn
4c6829513c
Fix etcd idempotency
2017-03-14 17:23:29 +03:00
Matthew Mosesohn
4038954f96
Merge pull request #1078 from VincentS/oidc_support
...
Added Support for OpenID Connect Authentication
2017-03-14 12:07:21 +03:00
Matthew Mosesohn
52a6dd5427
Explicitly set cni-bin-dir
2017-03-13 20:13:21 +03:00
Matthew Mosesohn
c301dd5d94
Merge pull request #1118 from mattymo/noderolelabels
...
Add node labels in kubelet
2017-03-13 19:04:21 +03:00
Connz
28473e919f
Fixed nova command to get available flavors
...
The nova command for getting the flavors is not
nova list-flavors
but
nova flavor-list
2017-03-09 11:10:25 +01:00
Cesarini, Daniele
69636d2453
Adding /O=system:masters to admin certificate
...
Issue #1125 . Make RBAC authorization plugin work out of the box.
"When bootstrapping, superuser credentials should include the system:masters group, for example by creating a client cert with /O=system:masters. This gives those credentials full access to the API and allows an admin to then set up bindings for other users."
2017-03-08 14:42:25 +00:00
Antoine Legrand
7cb7eee29d
Merge pull request #1116 from kubernetes-incubator/contrib_docs
...
Reference external documentation sources
2017-03-07 13:33:25 +01:00
David Crook
a52e1069ce
updated debian and ubuntu package names based on testing
...
docker-ce is not the .deb package until the repositories are switched over to new "downloads" docker webserver
2017-03-06 16:54:39 -07:00
David Crook
a8e5002aeb
removed irrelevant comments
2017-03-06 16:02:53 -07:00
David Crook
c515a351c6
Merge branch 'master' into issue_1107-docker-versioning
2017-03-06 16:00:31 -07:00
Antoine Legrand
7777b30693
Merge pull request #1120 from bradbeam/fixtags
...
Removing cloud_provider tag to fix scenario where cloud_provider is n…
2017-03-06 19:00:41 +01:00
Brad Beam
d04fbf3f78
Removing cloud_provider tag to fix scenario where cloud_provider is not defined
2017-03-06 10:52:38 -06:00
Matthew Mosesohn
54207877bd
Add node labels in kubelet
...
Related-issue: https://github.com/kubernetes/community/issues/300
Upgraded nodes do not obtain labels automatically.
See https://github.com/kubernetes/kubernetes/pull/29459 for more details.
2017-03-06 17:18:42 +03:00
Vincent Schwarzer
3c6b1480b8
Rewrote AWS Terraform for Kargo
...
Rewrote AWS Terraform deployment for AWS Kargo. It supports now
multiple Availability Zones, AWS Loadbalancer for Kubernetes API,
Bastion Host, ...
For more information see README
2017-03-06 12:52:02 +01:00
Vincent Schwarzer
b075960e3b
Added Support for OpenID Connect Authentication
...
To use OpenID Connect Authentication beside deploying an OpenID Connect
Identity Provider it is necesarry to pass additional arguments to the Kube API Server.
These required arguments were added to the kube apiserver manifest.
2017-03-06 12:40:35 +01:00
Antoine Legrand
85596c2610
Merge pull request #1045 from bradbeam/vsphere
...
Adding vsphere cloud provider support
2017-03-06 12:34:05 +01:00
Antoine Legrand
0613e3c24d
Reference external documentation sources
2017-03-06 12:25:54 +01:00
Antoine Legrand
ee5f009b95
Merge pull request #1112 from mattymo/skip_vault_if_disabled
...
Disable vault role properly on ansible 2.2.0
2017-03-06 11:27:53 +01:00
Antoine Legrand
d76816d043
Merge pull request #1115 from mattymo/etcd-phases
...
Remove standalone etcd specific play, cleanup host mode
2017-03-06 11:21:08 +01:00
Matthew Mosesohn
45274560ec
Disable vault role properly on ansible 2.2.0
...
when condition does not seem to work correctly at playbook
level for ansible 2.2.0.
2017-03-05 00:43:01 +04:00
Matthew Mosesohn
02a8e78902
Remove standalone etcd specific play, cleanup host mode
...
Now etcd role can optionally disable etcd cluster setup for faster
deployment when it is combined with etcd role.
2017-03-04 00:34:26 +04:00
Matthew Mosesohn
8f3d9e93ce
Merge pull request #1111 from mattymo/use_find_for_certs
...
Use find module for checking for certificates
2017-03-03 20:08:33 +03:00
Matthew Mosesohn
a244aca6a4
Merge pull request #1113 from VincentS/AWS_IAM_PROFILES
...
Added Missing AWS IAM Profiles and Policies
2017-03-03 17:35:55 +03:00
Vincent Schwarzer
5ae85b9de5
Added Missing AWS IAM Profiles and Policies
...
The AWS IAM profiles and policies required to run Kargo on AWS
are no longer hosted in the kubernetes main repo since kube-up got
deprecated. Hence we have to move the files into the kargo repository.
2017-03-03 15:30:07 +01:00
Matthew Mosesohn
d176818c44
Use find module for checking for certificates
...
Also generate certs only when absent on master (rather than
when absent on target node)
2017-03-03 16:21:01 +03:00
Bogdan Dobrelya
aeec0f9a71
Merge pull request #1071 from vijaykatam/atomic_host
...
Add support for atomic host
2017-03-03 13:03:59 +01:00
Matthew Mosesohn
08a02af833
Merge pull request #1075 from VincentS/loadbalancer_aws
...
Possibility to add Loadbalancers without static IP (e.g. AWS ELB) #1074
2017-03-03 14:07:22 +03:00
Pablo Moreno
cf26585cff
Restores working order of contrib/terraform/openstack, includes vault group and avoids group_vars/k8s-cluster.yml
2017-03-02 23:58:07 +00:00
David Crook
3f4a375ac4
first pass at adding 'stable' and 'edge' version packages
...
- Only have ubuntu to test on
- fedora and redhat are placeholders/guesses
- the "old" package repositories seem to have the "new" CE version which is `1.13.1` based
- `docker-ce` looks like it is named as a backported `docker-engine` package in some
places
- Did not change the `defaults` version anywhere, so should work as before
- Did not point to new package repositories, as existing ones have the new packages.
2017-03-02 13:48:09 -07:00
Matthew Mosesohn
cc632f2713
Merge pull request #1099 from rutsky/patch-4
...
fix inline verbatim blocks formatting in markdown
2017-03-02 17:46:52 +03:00
Matthew Mosesohn
5ebc9a380c
Merge pull request #1060 from holser/etcdv3
...
Allow to specify etcd backend for kube-api
2017-03-02 17:24:09 +03:00
Matthew Mosesohn
6453650895
Merge pull request #1093 from mattymo/scaledns
...
Add autoscalers for dnsmasq and kubedns
2017-03-02 16:58:56 +03:00
Matthew Mosesohn
9cb12cf250
Add autoscalers for dnsmasq and kubedns
...
By default kubedns and dnsmasq scale when installed.
Dnsmasq is no longer a daemonset. It is now a deployment.
Kubedns is no longer a replicationcluster. It is now a deployment.
Minimum replicas is two (to enable rolling updates).
Reduced memory erquirements for dnsmasq and kubedns
2017-03-02 13:44:22 +03:00
Vincent Schwarzer
68e8d74545
Changes based on feedback (additional ansible checks)
2017-03-02 11:04:10 +01:00
Vincent Schwarzer
fc054e21f6
Modified how adding LB for the Kube API is handled (AWS)
...
Until now it was not possible to add an API Loadbalancer
without an static IP Address. But certain Loadbalancers
like AWS Elastic Loadbalanacer dontt have an fixed IP address.
With this commit it is possible to add these kind of Loadbalancers
to the Kargo deployment.
2017-03-02 11:04:10 +01:00
Matthew Mosesohn
3256f4bc0f
Merge pull request #1103 from mattymo/upgradesyntax
...
Add upgrade-cluster and reset playbooks to syntax check
2017-03-02 12:41:10 +03:00
Matthew Mosesohn
0e9ad8f2c7
Merge pull request #1100 from retr0h/host-vars
...
Added host_vars to gitignore
2017-03-02 12:32:22 +03:00
Matthew Mosesohn
efbb5b2db3
Merge pull request #1101 from retr0h/docker-1.13.1
...
Use docker-engine 1.13.1
2017-03-02 12:31:58 +03:00
Matthew Mosesohn
85ed4157ff
Add upgrade-cluster and reset playbooks to syntax check
2017-03-02 09:37:16 +04:00
John Dewey
a43569c8a5
Use docker-engine 1.13.1
...
The default version of Docker was switched to 1.13 in #1059 . This
change also bumped ubuntu from installing docker-engine 1.13.0 to
1.13.1. This PR updates os families which had 1.13 defined, but
were using 1.13.0.
The impetus for this change is an issue running tiller 1.2.3 on
docker 1.13.0. See discussion [1][2].
[1] https://github.com/kubernetes/helm/issues/1838
[2] https://github.com/kubernetes-incubator/kargo/pull/1100
2017-03-01 12:53:39 -08:00
John Dewey
e771d0ea39
Updated gitignore pattern per review
2017-03-01 12:45:24 -08:00
John Dewey
9073eba405
Added host_vars to gitignore
...
Since inventory ships with kargo, the ability to change functionality
without having a dirty git index is nice. An example, we wish to change
is the version of docker deployed to our CentOS systems. Due to an issue
with tiller and docker 1.13, we wish to deploy docker 1.12. Since this
change does not belong in Kargo, we wish to locally override the docker
version, until the issue is sorted.
2017-03-01 11:08:35 -08:00
Matthew Mosesohn
a5cd73d047
Merge pull request #959 from galthaus/host-mode-restart
...
Restart kube-controller for host_resolvconf mode
2017-03-01 20:54:21 +03:00
Vijay Katam
a0b1eda1d0
Add support for atomic host
...
Updates based on feedback
Simplify checks for file exists
remove invalid char
Review feedback. Use regular systemd file.
Add template for docker systemd atomic
2017-03-01 09:38:19 -08:00
Vladimir Rutsky
ad80e09ac5
fix inline verbatim blocks formatting in markdown
2017-03-01 17:50:28 +04:00
Antoine Legrand
77e5171679
Merge pull request #1076 from VincentS/etcd_openssl_count_fix
...
Fixed counter in ETCD Openssl.conf
2017-03-01 14:17:27 +01:00
Bogdan Dobrelya
0c66418dad
Merge pull request #1090 from artem-panchenko/calicoAcceptHostEndpointConnections
...
Allow connections from pods to local endpoints
2017-03-01 13:37:05 +01:00
Bogdan Dobrelya
45a9eac7d2
Merge pull request #1097 from kubernetes-incubator/mattymo-patch-1
...
Fix vault role in upgrade-cluster.yml
2017-03-01 09:21:02 +01:00
Matthew Mosesohn
838adf7475
Fix vault role in upgrade-cluster.yml
2017-03-01 11:19:38 +03:00
Artem Panchenko
fa05d15093
Allow connections from pods to local endpoints
...
By default Calico blocks traffic from endpoints
to the host itself by using an iptables DROP
action. It could lead to a situation when service
has one alive endpoint, but pods which run on
the same node can not access it. Changed the action
to RETURN.
2017-03-01 09:21:02 +02:00
Antoine Legrand
1122740bd7
Merge pull request #1094 from retr0h/vagrant-flannel
...
Ensure vagrant uses flannel
2017-03-01 00:07:24 +01:00
John Dewey
f877278075
Ensure vagrant uses flannel
...
The Vagrantfile is setup to use flannel. The default network
was changed to Calico (#1031 ). However, the Vagrantfile was
not updated to reflect this. Ensuring the Vagrantfile remains
functional on master, until someone decides to make it work
with Calico.
2017-02-28 13:31:28 -08:00
Matthew Mosesohn
cbaa6abdd0
Merge pull request #1066 from bradbeam/rkt-kubelet-cloudprovider
...
Adding KUBELET_CLOUDPROVIDER to kubelet.rkt.service
2017-02-28 20:02:56 +03:00
Matthew Mosesohn
76a4803292
Merge pull request #1084 from mattymo/fixubunturktjob
...
Remove upgrade from the ubuntu-rkt-sep CI job
2017-02-28 20:02:05 +03:00
Antoine Legrand
b286b2eb31
Merge pull request #1083 from holser/api_port
...
Change kube-api default port from 443 to 6443
2017-02-28 17:57:35 +01:00
Sergii Golovatiuk
295103adc0
Allow to specify etcd backend for kube-api
...
Kubernetes project is about to set etcdv3 as default storage engine in
1.6. This patch allows to specify particular backend for
kube-apiserver. User may force the option to etcdv3 for new environment.
At the same time if the environment uses v2 it will continue uses it
until user decides to upgrade to v3.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-28 17:13:22 +01:00
Sergii Golovatiuk
d31c040dc0
Change kube-api default port from 443 to 6443
...
Operator can specify any port for kube-api (6443 default) This helps in
case where some pods such as Ingress require 443 exclusively.
Closes: 820
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-28 15:45:35 +01:00
Brad Beam
8a63b35f44
Adding flag for docker container in kubelet w/ rkt
2017-02-28 07:55:12 -06:00
Brad Beam
bfff06d402
Adding KUBELET_CLOUDPROVIDER to kubelet.rkt.service
2017-02-28 06:29:35 -06:00
Matthew Mosesohn
21d3d75827
Merge pull request #1086 from bradbeam/lowermem
...
Lower default memory requests
2017-02-28 13:37:28 +03:00
Matthew Mosesohn
2c3538981a
Merge pull request #1077 from holser/bug/1073
...
Make etcd data dir configurable.
2017-02-28 13:19:20 +03:00
Brad Beam
30a9899262
Making openstack domain name optional
2017-02-27 21:19:27 -06:00
Xavier Lange
dd10b8a27c
Bug fix: support kilo's keystone requirement for domain-name, extracts from ENV var
2017-02-27 21:18:30 -06:00
Brad Beam
dbf13290f5
Updating vsphere cloud provider support
2017-02-27 15:08:04 -06:00
Sergii Golovatiuk
f9ff93c606
Make etcd data dir configurable.
...
Closes : #1073
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-27 21:35:51 +01:00
Jan Jungnickel
df476b0088
Initial support for vsphere as cloud provider
2017-02-27 12:51:41 -06:00
Brad Beam
56664b34a6
Lower default memory requests
...
This is to address out of memory issues on CI as well as help
fit deployments for people starting out with kargo on smaller
machines
2017-02-27 10:53:43 -06:00
Matthew Mosesohn
efb45733de
Remove upgrade from the ubuntu-rkt-sep CI job
2017-02-27 18:16:22 +03:00
Vincent Schwarzer
0cbc3d8df6
Fixed counter in ETCD Openssl.conf
...
When a apiserver_loadbalancer_domain_name is added to the Openssl.conf
the counter gets not increased correctly. This didnt seem to have an
effect at the current kargo version.
2017-02-27 12:01:09 +01:00
Bogdan Dobrelya
27b4e61c9f
Merge pull request #946 from neith00/master
...
Using the command module instead of raw
2017-02-27 10:59:53 +01:00
Bogdan Dobrelya
069606947c
Merge pull request #1063 from bogdando/fix
...
Align LB defaults with the HA docs
2017-02-27 10:14:42 +01:00
Matthew Mosesohn
6ae6b7cfcd
Merge pull request #1072 from gkopylov/fix_doc_issue
...
Fix cluster.yml file extension in docs
2017-02-26 15:12:45 +03:00
Kopylov German
d197ce230f
Fix cluster.yml file extension in docs
2017-02-26 13:42:52 +03:00
Matthew Mosesohn
c6cb0d3984
Merge pull request #1069 from holser/increase_ssl_ttl
...
Increase SSL TTL to 3650 days
2017-02-25 10:47:30 +03:00
Sergii Golovatiuk
00cfead9bb
Increase SSL TTL to 3650 days
...
In real scenarios 365 days is short period of time. 3650 days is good
enough for long running k8s environments
2017-02-24 15:38:13 +01:00
Antoine Legrand
20b1e4db0b
Merge pull request #1068 from holser/uncomment_all.yml
...
Uncomment one key/value in all.yml
2017-02-24 12:54:51 +01:00
Sergii Golovatiuk
a098a32f7d
Uncomment one key/value in all.yml
...
all.yaml shouldn't be empty otherwise ansible won't be able to merge 2
dicts.
Related bug: ansible/issues/21889
2017-02-24 12:25:45 +01:00
Antoine Legrand
9ee9a1033f
Merge pull request #1067 from kubernetes-incubator/ant31-patch-2
...
Uncommented group_vars variables
2017-02-24 11:45:17 +01:00
Antoine Legrand
eb904668b2
Uncommented group_vars variables
2017-02-24 10:54:25 +01:00
Bogdan Dobrelya
75b69876a3
Merge pull request #1064 from kubernetes-incubator/rework_vars
...
Add default var role
2017-02-23 21:48:23 +01:00
Antoine Legrand
08d9d24320
Add subnet var in tests
2017-02-23 15:14:28 +01:00
Antoine Legrand
c7d61af332
Comment all variables in group_vars
2017-02-23 14:02:57 +01:00
Antoine Legrand
5f7607412b
Add default var role
2017-02-23 12:07:17 +01:00
Antoine Legrand
403fea39f7
Merge pull request #829 from bogdando/opts
...
Rework group/role vars
2017-02-23 10:39:43 +01:00
Bogdan Dobrelya
f2a4619c57
Align LB defaults with the HA docs
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-02-23 10:32:44 +01:00
Bogdan Dobrelya
712872efba
Rework inventory all by real groups' vars
...
* Leave all.yml to keep only optional vars
* Store groups' specific vars by existing group names
* Fix optional vars casted as mandatory (add default())
* Fix missing defaults for an optional IP var
* Relink group_vars for terraform to reflect changes
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-02-23 09:43:42 +01:00
Matthew Mosesohn
8cbf3fe5f8
Merge pull request #1020 from mattymo/synthscale
...
Add synthetic scale deployment mode
2017-02-22 19:15:46 +03:00
Matthew Mosesohn
02137f8cee
Merge pull request #1059 from holser/docker_iptables
...
iptables switch for docker
2017-02-22 08:23:58 +03:00
Matthew Mosesohn
43ea281a7f
Merge pull request #1061 from ivan4th/fix-shell-vars
...
Fix shell special vars
2017-02-22 08:23:44 +03:00
Ivan Shvedunov
0006e5ab45
Fix shell special vars
2017-02-21 22:22:40 +03:00
Matthew Mosesohn
d821448e2f
Merge branch 'master' into synthscale
2017-02-21 22:17:43 +03:00
Sergii Golovatiuk
3bd46f7ac8
Switch docker to 1.13
...
- Remove variable dup for Ubuntu
- Update Docker to 1.13
2017-02-21 19:10:34 +01:00
Sergii Golovatiuk
ebf9daf73e
Statically disable iptables management for docker
...
Docker 1.13 changes the behaviour of iptables defaults from allow
to drop. This patch disables docker's iptables management as it was
in Docker 1.12 [1]
[1] https://github.com/docker/docker/pull/28257
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-21 19:10:34 +01:00
Matthew Mosesohn
2ba66f0b26
Change coreos-alpha dns mode to host_resolvconf
2017-02-21 18:14:42 +03:00
Matthew Mosesohn
0afadb9149
Merge pull request #1046 from skyscooby/pedantic-syntax-cleanup
...
Cleanup legacy syntax, spacing, files all to yml
2017-02-21 17:03:16 +03:00
Matthew Mosesohn
19d0159e33
Raise timeout for get netchecker agents
2017-02-21 14:48:25 +03:00
Matthew Mosesohn
d4f15ab402
Merge pull request #1055 from mattymo/etcd-preupgrade-speedup
...
speed up etcd preupgrade check
2017-02-21 12:51:42 +03:00
Matthew Mosesohn
527e030283
Merge pull request #1058 from holser/update_calico_cni
...
Update calico-cni to 1.5.6
2017-02-20 23:09:47 +03:00
Matthew Mosesohn
634e6a381c
Merge pull request #1043 from rutsky/patch-3
...
fix typos in azure docs
2017-02-20 20:24:05 +03:00
Matthew Mosesohn
042d094ce7
Merge pull request #1034 from rutsky/fix-openssl-lb-index
...
fix load balancer DNS name index evaluation in openssl.conf
2017-02-20 20:23:26 +03:00
Matthew Mosesohn
3cc1491833
Merge branch 'master' into pedantic-syntax-cleanup
2017-02-20 20:19:38 +03:00
Matthew Mosesohn
d19e6dec7a
speed up etcd preupgrade check
2017-02-20 20:18:10 +03:00
Matthew Mosesohn
6becfc52a8
Merge pull request #1056 from mattymo/k8s153
...
Update Kubernetes to v1.5.3
2017-02-20 20:13:40 +03:00
Sergii Golovatiuk
a2cbbc5c4f
Update calico-cni to 1.5.6
...
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-20 17:14:45 +01:00
Matthew Mosesohn
10173525d8
Update Kubernetes to v1.5.3
2017-02-20 18:14:56 +03:00
Antoine Legrand
ccdb72a422
Merge pull request #1053 from hvnsweeting/master
...
Update Doc
2017-02-20 10:42:16 +01:00
Hung Nguyen Viet
df96617d3c
Only 1 key needed
2017-02-20 14:54:20 +07:00
Antoine Legrand
09aa3e0e79
Merge pull request #1052 from hvnsweeting/master
...
Put Ansible requirements first
2017-02-20 08:44:16 +01:00
Hung Nguyen Viet
a673e97f02
Put Ansible requirements first
...
And re-phrase all sentences to passive tense
2017-02-20 14:39:51 +07:00
Matthew Mosesohn
43e86921e0
pin coreos-alpha to 1325
2017-02-19 16:23:35 +03:00
Antoine Legrand
ad58e08a41
Merge pull request #1049 from alop/selinux
...
Safe disable SELinux
2017-02-19 10:26:01 +01:00
Abel Lopez
0bfc2d0f2f
Safe disable SELinux
...
Sometimes, a sysadmin might outright delete the SELinux rpms and
delete the configuration. This causes the selinux module to fail
with
```
IOError: [Errno 2] No such file or directory: '/etc/selinux/config'\n",
"module_stdout": "", "msg": "MODULE FAILURE"}
```
This simply checks that /etc/selinux/config exists before we try
to set it Permissive.
Update from feedback
2017-02-18 11:54:25 -08:00
Matthew Mosesohn
475a42767a
Suppress logging for download image
...
This generates too much output and during upgrade scenarios
can bring us over the 4mb limit.
2017-02-18 19:10:26 +04:00
Matthew Mosesohn
ce4eefff6a
Use first kube-master to check results
2017-02-18 14:11:51 +04:00
Matthew Mosesohn
82b247d1a4
Adapt advanced network checker for scale
...
Skip nodes not in ansible play (via --limit)
2017-02-18 14:09:57 +04:00
Matthew Mosesohn
a21eb036ee
Add no_log to cert tar tasks
...
This works around 4MB limit for gitlab CI runner.
2017-02-18 14:09:57 +04:00
Matthew Mosesohn
9c1701f2aa
Add synthetic scale deployment mode
...
New deploy modes: scale, ha-scale, separate-scale
Creates 200 fake hosts for deployment with fake hostvars.
Useful for testing certificate generation and propagation to other
master nodes.
Updated test cases descriptions.
2017-02-18 14:09:55 +04:00
Andrew Greenwood
fd17c37feb
Regex syntax changes in yml mode
2017-02-17 17:30:39 -05:00
Andrew Greenwood
cde5451e79
Syntax Bugfix
2017-02-17 17:08:44 -05:00
Andrew Greenwood
ca9ea097df
Cleanup legacy syntax, spacing, files all to yml
...
Migrate older inline= syntax to pure yml syntax for module args as to be consistant with most of the rest of the tasks
Cleanup some spacing in various files
Rename some files named yaml to yml for consistancy
2017-02-17 16:22:34 -05:00
Antoine Legrand
b84cc14694
Merge pull request #1029 from mattymo/graceful
...
Add graceful upgrade process
2017-02-17 21:24:32 +01:00
Vladimir Rutsky
a84175b3b9
fix typo: "infrastructore"
2017-02-17 23:27:38 +04:00
Vladimir Rutsky
438b4e9625
fix typos in azure docs
2017-02-17 21:39:22 +04:00
Matthew Mosesohn
a510e7b8f3
Use gce hostname as inventory name
...
Calico does not allow renaming hosts
2017-02-17 20:21:58 +03:00
Antoine Legrand
e16ebcad6e
Merge pull request #1042 from holser/fix_facts
...
Fix fact tags
2017-02-17 17:56:29 +01:00
Sergii Golovatiuk
e91e58aec9
Fix fact tags
...
Ansible playbook fails when tags are limited to "facts,etcd" or to
"facts". This patch allows to run ansible-playbook to gather facts only
that don't require calico/flannel/weave components to be verified. This
allows to run ansible with 'facts,bootstrap-os' or just 'facts' to
gether facts that don't require specific components.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-17 12:32:33 +01:00
Antoine Legrand
3629b9051d
Merge pull request #1038 from rutsky/kubelet-mount-var-log
...
Mount host's /var/log into kubelet container
2017-02-17 10:26:12 +01:00
Antoine Legrand
ef919d963b
Merge pull request #1040 from retr0h/vagrant-config
...
Better control instance sizing
2017-02-17 10:25:09 +01:00
Antoine Legrand
4545114408
Merge pull request #1037 from mattymo/coreos_fix
...
Fix references to CoreOS and Container Linux by CoreOS
2017-02-17 10:21:14 +01:00
Smaine Kahlouch
9ed32b9dd0
Merge pull request #1036 from rutsky/fix-kibana-default-base-url
...
fix typo in "kibana_base_url" variable name
2017-02-17 07:03:59 +01:00
John Dewey
45dbe6d542
Better control instance sizing
...
* Git ignore the user controlled config.rb.
* Ability to better control the number of instances running.
2017-02-16 13:09:34 -08:00
Vladimir Rutsky
bff955ff7e
Mount host's /var/log into kubelet container
...
Kubelet is responsible for creating symlinks from /var/lib/docker to /var/log
to make fluentd logging collector work.
However without using host's /var/log those links are invisible to fluentd.
This is done on rkt configuration too.
2017-02-16 22:31:05 +03:00
Matthew Mosesohn
80c0e747a7
Fix references to CoreOS and Container Linux by CoreOS
...
Fixes #967
2017-02-16 19:25:17 +03:00
Matthew Mosesohn
617edda9ba
Adjust weave daemonset for serial deployment
2017-02-16 18:24:30 +03:00
Vladimir Rutsky
7ab04b2e73
fix typo in "kibana_base_url" variable name
...
This typo lead to kibana_base_url being undefined and Kibana used
default base URL ("/") which is incorrect with default proxy-based
access.
2017-02-16 18:17:06 +03:00
Antoine Legrand
e89056a614
Merge pull request #1033 from rutsky/reset-confirmation
...
ask confirmation before running reset.yml playbook
2017-02-16 16:10:58 +01:00
Matthew Mosesohn
97ebbb9672
Add graceful upgrade process
...
Based on #718 introduced by rsmitty.
Includes all roles and all options to support deployment of
new hosts in case they were added to inventory.
Main difference here is that master role is evaluated first
so that master components get upgraded first.
Fixes #694
2017-02-16 17:18:38 +03:00
Vladimir Rutsky
c02213e4af
force reset confirmation in CI
2017-02-16 16:35:01 +03:00
Smaine Kahlouch
73e0aeb4ca
Merge pull request #1031 from mattymo/defaultcalico
...
Change default network plugin to Calico
2017-02-16 14:04:12 +01:00
Vladimir Rutsky
a1ec6f401c
fix load balancer DNS name index evaluation in openssl.conf
...
Looks like OpenSSL still properly handles it, even with duplicated
"DNS.X" items.
2017-02-16 00:16:13 +03:00
Vladimir Rutsky
5337d37a1c
ask confirmation before running reset.yml playbook
2017-02-15 21:05:46 +03:00
Matthew Mosesohn
d92d955aeb
Merge pull request #985 from rutsky/check-mode-for-shell-commands
...
set "check_mode: on" for read-only "shell" steps that registers result
2017-02-15 17:53:41 +03:00
Matthew Mosesohn
7ac84d386c
Merge pull request #1030 from rutsky/remove-swp
...
remove temporary file
2017-02-15 17:44:41 +03:00
Vladimir Rutsky
8397baa700
remove temporary file
2017-02-15 17:40:05 +03:00
Matthew Mosesohn
2d65554cb9
Change default network plugin to Calico
2017-02-15 16:15:22 +03:00
Matthew Mosesohn
64e40d471c
Merge pull request #1028 from holser/ansible.cfg
...
Add timings to RECAP output.
2017-02-15 12:41:49 +03:00
Sergii Golovatiuk
c5ea29649b
Add timings to RECAP output.
...
- Starting from version 2.0 ansible has 'callback_whitelist =
profile_tasks'. It allows to analyze CI to find some time regressions.
- Add skippy to CI's ansible.cfg
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-14 18:47:02 +01:00
Antoine Legrand
410438a0e3
Merge pull request #1008 from bradbeam/rkt-proxy
...
Adding support for proxy w/ rkt kubelet
2017-02-14 17:52:21 +01:00
Spencer Smith
fbaef7e60f
specify grace period for draining
2017-02-14 18:51:13 +03:00
Spencer Smith
017a813621
first cut of an upgrade process
2017-02-14 18:51:13 +03:00
Brad Beam
4c891b8bb0
Adding support for proxy w/ rkt kubelet
2017-02-14 08:09:49 -06:00
Matthew Mosesohn
948d9bdadb
Merge pull request #1019 from mattymo/issue1011
...
Update calico to v1.0.2
2017-02-14 14:01:25 +03:00
Matthew Mosesohn
b7258ec3bb
Merge pull request #1013 from mattymo/remove_masqerade_all
...
Disable kube_proxy_masquerade_all
2017-02-14 14:00:29 +03:00
Antoine Legrand
93cb5a5bd6
Merge pull request #1027 from hvnsweeting/master
...
Multiples doc fixes
2017-02-14 11:39:22 +01:00
Hung Nguyen Viet
d8f46c4410
Highlight important action
2017-02-14 17:18:25 +07:00
Hung Nguyen Viet
d0757ccc5e
Fix typo
2017-02-14 17:18:22 +07:00
Antoine Legrand
f4f730bd8a
Merge pull request #1025 from holser/bug/961
...
Install pip on Ubuntu
2017-02-14 10:31:42 +01:00
Matthew Mosesohn
f5e27f1a21
Merge pull request #1021 from holser/remove_deprecated
...
Replace always_run with check_mode
2017-02-14 11:25:58 +03:00
Matthew Mosesohn
bb6415ddc4
Merge pull request #1015 from holser/rkt_ssl_ca_dirs
...
Set ssl_ca_dirs for rkt based on fact
2017-02-14 11:25:17 +03:00
Sergii Golovatiuk
2b6179841b
Install pip on Ubuntu
...
- Refactor 'Check if bootstrap is needed' as ansible loop. This allows
to add new elements easily without refactoring. Add pip to the list.
- Refactor 'Install python 2.x' task to run once if any of rc
codes != 0. Actually, need_bootstrap is array of hashes, so map will
allow to get single array of rc statuses. So if status is not zero it
will be sorted and the last element will be get, converted to bool.
Closes : #961
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-13 19:35:13 +01:00
Antoine Legrand
e877cd2874
Merge pull request #1024 from holser/bug/961
...
Install pip on Ubuntu
2017-02-13 17:53:57 +01:00
Matthew Mosesohn
203ddfcd43
Merge pull request #1023 from mattymo/fix_dnsmasq_cleanup
...
Clean up dnsmasq purge task
2017-02-13 19:50:01 +03:00
Vladimir Rutsky
09847567ae
set "check_mode: no" for read-only "shell" steps that registers result
...
"shell" step doesn't support check mode, which currently leads to failures,
when Ansible is being run in check mode (because Ansible doesn't run command,
assuming that command might have effect, and no "rc" or "output" is registered).
Setting "check_mode: no" allows to run those "shell" commands in check mode
(which is safe, because those shell commands doesn't have side effects).
2017-02-13 18:53:41 +03:00
Sergii Golovatiuk
732ae69d22
Install pip on Ubuntu
...
Closes : #961
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-13 16:27:09 +01:00
Greg Althaus
2b10376339
When resolv.conf changes during host_resolvconf mode, we need to
...
restart the controller to get the new file configuration.
I'm not fond of this form and would like a better way, but this
seems to "work".
2017-02-13 09:20:02 -06:00
Antoine Legrand
9667ac3baf
Merge pull request #1022 from kubernetes-incubator/ant31-patch-1
...
Document gitlab-runner.sh
2017-02-13 15:40:34 +01:00
Matthew Mosesohn
b5be335db3
Clean up dnsmasq purge task
2017-02-13 17:30:15 +03:00
Antoine Legrand
d33945780d
Document gitlab-runner.sh
2017-02-13 15:04:35 +01:00
Sergii Golovatiuk
5f4cc3e1de
Replace always_run with check_mode
...
always_run was deprecated in Ansible 2.2 and will be removed in 2.4
ansible logs contain "[DEPRECATION WARNING]: always_run is deprecated.
Use check_mode = no instead". This patch fix deprecation.
2017-02-13 15:00:56 +01:00
Matthew Mosesohn
ec567bd53c
Update calico to v1.0.2
...
Also calico-cni to v1.5.6, calico-policy to v0.5.2
Fixes : #1011
2017-02-13 15:39:25 +03:00
Sergii Golovatiuk
aeadaa1184
Set ssl_ca_dirs for rkt based on fact
...
Since systemd kubelet.service has {{ ssl_ca_dirs }}, fact should be
gathered before writing kubelet.service.
Closes : #1007
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-13 13:28:29 +01:00
Matthew Mosesohn
2f0f0006e3
Merge pull request #988 from mattymo/feat/rolling3
...
Add CI cases for testing upgrade from v2.0.1 release
2017-02-10 18:09:43 +03:00
Matthew Mosesohn
de047a2b8c
Merge pull request #983 from vwfs/centos_kernel_upgrade
...
Add kernel upgrade for CentOS
2017-02-10 14:40:27 +03:00
Antoine Legrand
86a35652bb
Merge pull request #1009 from mattymo/dnsmasq_updates
...
Enable reset of dnsmasq if manifest or config changes
2017-02-10 11:43:09 +01:00
Matthew Mosesohn
6ae70e03cb
fixup upgrades for canal and weave
2017-02-10 13:27:41 +03:00
Matthew Mosesohn
2c532cb74d
Disable kube_proxy_masquerade_all
...
Fixes #1012
2017-02-10 13:16:39 +03:00
Matthew Mosesohn
779f20d64e
Merge pull request #1010 from bogdando/fixes
...
Fix misleading HA docs
2017-02-10 13:01:29 +03:00
Bogdan Dobrelya
89ae9f1f88
Merge pull request #1002 from code0x9/master
...
use ansible sysctl module for config ip forwarding
2017-02-10 10:40:18 +01:00
Bogdan Dobrelya
ed1ab11001
Fix misleading HA docs
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-02-10 10:28:27 +01:00
Alexander Block
d2e010cbe1
Add kernel upgrade for CentOS
2017-02-10 09:29:12 +01:00
Matthew Mosesohn
a44a0990f5
Enable reset of dnsmasq if manifest or config changes
2017-02-10 10:40:07 +04:00
Matthew Mosesohn
2f88c9eefe
Merge pull request #989 from holser/kubelet_remedy
...
Kubernetes Reliability Improvements
2017-02-10 09:29:29 +03:00
Matthew Mosesohn
60f1936a62
Merge pull request #1004 from galthaus/kubelet-load-modules
...
Allow kubelet to load kernel modules
2017-02-10 09:28:16 +03:00
Matthew Mosesohn
ee15f99dd7
Add CI cases for testing upgrade from v2.0.1 release
...
These are manual trigger jobs, but should be run if any PR
impacts upgrades.
2017-02-10 10:20:58 +04:00
Matthew Mosesohn
b0ee27ba46
Merge pull request #1006 from mattymo/fix_weave_upgrade
...
Enable weave upgrade from previous versions
2017-02-10 09:03:49 +03:00
Antoine Legrand
067bbaa473
Merge pull request #1001 from idcrook/kargo-issue-1000-efk-enable
...
removed explicit role for efk in cluster.yml
2017-02-10 03:03:18 +01:00
Sergii Golovatiuk
c07d60bc90
Kubernetes Reliability Improvements
...
- Exclude kubelet CPU/RAM (kube-reserved) from cgroup. It decreases a
chance of overcommitment
- Add a possibility to modify Kubelet node-status-update-frequency
- Add a posibility to configure node-monitor-grace-period,
node-monitor-period, pod-eviction-timeout for Kubernetes controller
manager
- Add Kubernetes Relaibility Documentation with recomendations for
various scenarios.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-09 23:54:08 +01:00
Matthew Mosesohn
29fd957352
Enable weave upgrade from previous versions
...
Raise readiness probe initial time to 60 (was 30)
2017-02-09 21:39:31 +03:00
Matthew Mosesohn
ef10ce04e2
Merge pull request #1005 from rutsky/patch-2
...
fix kube_apiserver_ip/kube_apiserver_port description
2017-02-09 21:08:15 +03:00
Vladimir Rutsky
f0269b28f4
fix kube_apiserver_ip/kube_apiserver_port description
2017-02-09 21:47:36 +04:00
Matthew Mosesohn
0a7c6eb9dc
Merge pull request #998 from mattymo/fix_upgrade_daemonsets
...
Fix upgrade for all daemonset type resources
2017-02-09 20:02:21 +03:00
Greg Althaus
3f0c13af8a
Make kubelet_load_modules always present but false.
...
Update code and docs for that assumption.
2017-02-09 10:25:44 -06:00
Greg Althaus
fcd78eb1f7
Due to the nsenter and other reworks, it appears that
...
kubelet lost the ability to load kernel modules. This
puts that back by adding the lib/modules mount to kubelet.
The new variable kubelet_load_modules can be set to true
to enable this item. It is OFF by default.
2017-02-09 10:02:26 -06:00
Matthew Mosesohn
17dfae6d4e
Merge pull request #999 from holser/decrease_weave_ram_limits
...
Lower weave RAM settings.
2017-02-09 13:19:12 +03:00
Mark Lee
e414c25fd7
follow sysctl.conf file symlink if linked
2017-02-09 18:16:52 +09:00
Mark Lee
34a71554ae
use ansible sysctl module for config ip forwarding
2017-02-09 17:28:44 +09:00
Bogdan Dobrelya
3b1a196c75
Merge pull request #902 from insequent/master
...
Adding vault role
2017-02-09 09:24:52 +01:00
Bogdan Dobrelya
105dbf471e
Merge pull request #993 from code0x9/master
...
enable proxy support on docker repository
2017-02-09 09:21:01 +01:00
David Crook
d4d9f27a8d
removed explicit role for efk in cluster.yml
2017-02-08 20:48:28 -07:00
Antoine Legrand
68df0d4909
Merge pull request #986 from vwfs/dnsmasq_system_nameservers
...
Also add the system nameservers to upstream servers in dnsmasq
2017-02-08 23:21:54 +01:00
Antoine Legrand
9c572fe54b
Merge pull request #984 from rutsky/patch-2
...
fix typo: "explicetely"
2017-02-08 23:19:01 +01:00
Josh Conant
245e05ce61
Vault security hardening and role isolation
2017-02-08 21:41:36 +00:00
Josh Conant
f4ec2d18e5
Adding the Vault role
2017-02-08 21:31:28 +00:00
Sergii Golovatiuk
4124d84c00
Lower weave RAM settings.
...
- Since Weave 1.8.x was rewritten in Golang we may decrease RAM settings
to continue using g1-small for CI
2017-02-08 18:50:36 +01:00
Matthew Mosesohn
3c713a3f53
Fix upgrade for all daemonset type resources
...
Daemonsets cannot be simply upgraded through a single API call,
regardless of any kubectl documentation. The resource must be
purged and then recreated in order to make any changes.
2017-02-08 18:16:00 +03:00
Alexander Block
89e570493a
Also add the system nameservers to upstream servers in dnsmasq
...
Also make no-resolv unconditional again. Otherwise, we may end up in
a resolver loop. The resolver loop was the cause for the piling up
parallel queries.
2017-02-08 14:38:55 +01:00
Matthew Mosesohn
16674774c7
Merge pull request #994 from mattymo/docker_save
...
Change docker save compress level to 1
2017-02-08 15:13:15 +03:00
Matthew Mosesohn
0180ad7f38
Merge pull request #990 from mattymo/fix_cert_upgrade
...
Fix check for node-NODEID certs existence
2017-02-08 14:44:09 +03:00
Matthew Mosesohn
bfd1ea1da1
Merge pull request #971 from bradbeam/efk
...
Adding EFK logging stack
2017-02-08 14:28:04 +03:00
Mark Lee
3eacd0c871
Update rh_docker.repo.j2
2017-02-08 20:03:51 +09:00
Matthew Mosesohn
d587270293
Merge pull request #992 from vwfs/host_mount_dev
...
Host mount /dev for kubelet
2017-02-08 13:45:22 +03:00
Matthew Mosesohn
3eb13e83cf
Change docker save compress level to 1
...
Faster gzip improves CI deploy times by at least 2 mins.
Fixes #982
2017-02-08 13:25:11 +03:00
Mark Lee
df761713aa
Merge branch 'master' of https://github.com/kubespray/kargo
2017-02-08 19:19:26 +09:00
Mark Lee
de50f37fea
enable proxy support on docker repository
2017-02-08 19:19:08 +09:00
Matthew Mosesohn
bad6076905
Merge pull request #987 from mattymo/etcd-retune
...
Re-tune ETCD performance params
2017-02-08 13:00:25 +03:00
Bogdan Dobrelya
c2bd76a22e
Merge pull request #956 from adidenko/update-netchecker
...
Update playbooks to support new netchecker
2017-02-08 10:09:46 +01:00
Alexander Block
010fe30b53
Host mount /dev for kubelet
2017-02-08 09:55:51 +01:00
Matthew Mosesohn
e5779ab786
Fix check for node-NODEID certs existence
...
Fixes upgrade from pre-individual node cert envs.
2017-02-07 21:06:48 +03:00
Matthew Mosesohn
71e14a13b4
Re-tune ETCD performance params
...
Reduce election timeout to 5000ms (was 10000ms)
Raise heartbeat interval to 250ms (was 100ms)
Remove etcd cpu share (was 300)
Make etcd_cpu_limit and etcd_memory_limit optional.
2017-02-07 20:15:14 +03:00
Matthew Mosesohn
491074aab1
Merge pull request #969 from mattymo/port_reserve
...
Prevent dynamic port allocation in nodePort range
2017-02-07 18:24:57 +03:00
Aleksandr Didenko
54af533b31
Update playbooks to support new netchecker
...
Netchecker is rewritten in Go lang with some new args instead of
env variables. Also netchecker-server no longer requires kubectl
container. Updating playbooks accordingly.
2017-02-07 15:20:34 +01:00
Matthew Mosesohn
4f13043d14
Merge pull request #976 from holser/bug/975
...
Improve Weave
2017-02-06 22:48:13 +03:00
Vladimir Rutsky
6a5df4d999
fix typo: "pubilcally"
2017-02-06 21:35:02 +04:00
Vladimir Rutsky
d41602088b
fix typo: "explicetely"
2017-02-06 21:29:11 +04:00
Matthew Mosesohn
f3a0f73588
Prevent dynamic port allocation in nodePort range
...
kube_apiserver_node_port_range should be accessible only
to kube-proxy and not be taken by a dynamic port allocation.
Potentially temporary if https://github.com/kubernetes/kubernetes/issues/40920
gets fixed.
2017-02-06 20:01:16 +03:00
Matthew Mosesohn
be1e1b41bd
Merge pull request #981 from kubernetes-incubator/revert-911-DROP_CAPS
...
Revert "Drop linux capabilities and rework users/groups"
2017-02-06 17:52:58 +03:00
Matthew Mosesohn
fd30131dc2
Revert "Drop linux capabilities and rework users/groups"
2017-02-06 15:58:54 +03:00
Sergii Golovatiuk
5122697f0b
Improve Weave
...
- Remove weave CPU limits from .gitlab-ci.yml. Closes : #975
- Fix weave version in documentation
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-06 13:24:40 +01:00
Bogdan Dobrelya
b7bf502e02
Merge pull request #978 from rutsky/patch-1
...
remove extra `~`
2017-02-06 12:07:54 +01:00
Bogdan Dobrelya
3f70e3a843
Merge pull request #977 from holser/bug/973
...
Add .swp .swo .swn to .gitignore
2017-02-06 12:07:07 +01:00
Bogdan Dobrelya
cae2982d81
Merge pull request #911 from bogdando/DROP_CAPS
...
Drop linux capabilities and rework users/groups
2017-02-06 12:05:51 +01:00
Vladimir Rutsky
b638c89556
remove extra ~
2017-02-06 15:05:24 +04:00
Bogdan Dobrelya
9bc51bd0e2
Merge pull request #972 from kubernetes-incubator/update-roadmap
...
Update roadmap.md
2017-02-06 12:03:09 +01:00
Sergii Golovatiuk
408b4f3f42
Add .swp .swo .swn to .gitignore
...
According to http://vimdoc.sourceforge.net/htmldoc/recover.html vim
creates .swo .swn .swp files. This patch adds them to .gitignore in all
directories recursively
Closes : #973
2017-02-06 12:00:49 +01:00
Antoine Legrand
d818ac1d59
Update roadmap.md
2017-02-04 23:23:24 +01:00
Antoine Legrand
bd1c764a1a
Merge pull request #963 from rutsky/bastion-ansible-host
...
handle both 'ansible_host' and 'ansible_ssh_host' in bastion configration
2017-02-04 15:42:39 -05:00
Antoine Legrand
8f377ad8bd
Merge pull request #968 from rutsky/remove-deprecated-ubuntu-bootstrap
...
remove deprecated ubuntu-bootstrap.yml script
2017-02-04 15:36:49 -05:00
Brad Beam
df3e11bdb8
Adding EFK logging stack
2017-02-03 16:27:08 -06:00
Vladimir Rutsky
97dabbe997
remove deprecated ubuntu-bootstrap.yml script
...
Signed-off-by: Vladimir Rutsky <rutsky.vladimir@gmail.com>
2017-02-03 15:02:17 +03:00
Bogdan Dobrelya
5a7a3f6d4a
Merge pull request #949 from vmtyler/master
...
Fixes Support for OpenStack v3 credentials
2017-02-03 12:22:00 +01:00
Vladimir Rutsky
b4327fdc99
handle both 'ansible_host' and 'ansible_ssh_host' in bastion configuration
...
'absible_ssh_host' is deprecated in Ansible 2.0 and at least
'contrib/inventory_builder/inventory.py' uses 'ansible_host' instead.
2017-02-02 18:34:53 +03:00
Matthew Mosesohn
10f924a617
Merge pull request #927 from holser/nsenter_fix
...
Remove nsenter workaround
2017-02-02 18:18:15 +03:00
Matthew Mosesohn
3dd6a01c8b
Merge pull request #901 from galthaus/dns-tweak
...
DHCP Hook protections
2017-02-02 16:47:16 +03:00
Sergii Golovatiuk
585afef945
Remove nsenter workaround
...
- Docker 1.12 and further don't need nsenter hack. This patch removes
it. Also, it bumps the minimal version to 1.12.
Closes #776
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-02 14:38:11 +01:00
Matthew Mosesohn
bdc65990e1
Merge pull request #958 from holser/fix_weave_cpu
...
Fix CPU out of scope for Weave-net
2017-02-02 16:05:47 +03:00
Sergii Golovatiuk
f2e4ffcac2
Fix weave-net after upgrade to 1.82
...
- Set recommended CPU settings
- Cleans up upgrade to weave 1.82. The original WeaveWorks
daemonset definition uses weave-net name.
- Limit DS creation to master
- Combined 2 tasks into one with better condition
2017-02-02 10:31:58 +01:00
Matthew Mosesohn
ae66b6e648
Merge pull request #957 from mattymo/weave-net-naming
...
Rename weave-kube to weave-net
2017-02-02 10:18:02 +03:00
Greg Althaus
923057c1a8
This continues the DHCP hook checks. Also protect the create side
...
if the system doesn't have any config files at all.
2017-01-31 09:56:27 -06:00
Matthew Mosesohn
0f6e08d34f
Merge pull request #951 from mattymo/k8s-certs-scale
...
Fix cert distribution at scale
2017-01-31 18:49:26 +03:00
Matthew Mosesohn
4889a3e2e1
Merge pull request #954 from artem-panchenko/improve_dnsmasq
...
Explicitly set config path for DNSMasq
2017-01-31 18:48:46 +03:00
Matthew Mosesohn
39d87a96aa
Rename weave-kube to weave-net
...
Cleans up upgrade to weave 1.82. The original WeaveWorks
daemonset definition uses weave-net name.
2017-01-31 18:47:27 +03:00
Bogdan Dobrelya
e7c03ba66a
Merge pull request #955 from mattymo/disable-idempotency-check
...
Disable idempotency for ubuntu-weave-sep
2017-01-31 14:55:27 +01:00
Matthew Mosesohn
08822ec684
Fix cert distribution at scale
...
Use stdin instead of bash args to pass node filenames and base64 data.
Use tempfile for master cert data
2017-01-31 16:27:45 +03:00
Matthew Mosesohn
6463a01e04
Merge pull request #880 from bradbeam/weave-kube
...
Weave kube
2017-01-31 13:31:09 +03:00
Matthew Mosesohn
0cf1850465
Disable idempotency for ubuntu-weave-sep
...
CI is failing 40% of the time due to errors in reset.
Let's disable idempotency check per-patch until we fix it.
Fixes #953
2017-01-31 13:23:27 +03:00
Artem Panchenko
1418fb394b
Explicitly set config path for DNSMasq
...
When DNSMasq is configured to read its settings
from a folder ('-7' or '--conf-dir' option) it only
checks that the directory exists and doesn't fail if
it's empty. It could lead to a situation when DNSMasq
is running and handles requests, but not properly
configured, so some of queries can't be resolved.
2017-01-31 12:14:57 +02:00
Matthew Mosesohn
e4eda88ca9
Merge pull request #944 from tureus/skip-cloud-config-on-etcd
...
Bugfix: skip cloud_config on etcd
2017-01-30 20:12:36 +03:00
Bogdan Dobrelya
71a3c97d6f
Merge pull request #943 from bradbeam/cilint
...
Fixing lint check for ci
2017-01-30 09:19:44 +01:00
Antoine Legrand
1c3d2924ae
Merge pull request #947 from bradbeam/libs
...
Consolidating kube.py module
2017-01-29 00:02:32 +01:00
Brad Beam
a11b9d28bd
Upgrading weave to weave-kube
2017-01-27 17:05:25 -06:00
Brad Beam
b54eb609bf
Consolidating kube.py module
2017-01-27 11:28:11 -06:00
Bogdan Dobrelya
dc8ff413f9
Merge pull request #948 from mattymo/update_coreos
...
Update coreos-stable image
2017-01-27 17:53:17 +01:00
Tyler Britten
f8ffa1601d
Fixed for non-null output
2017-01-27 10:47:59 -05:00
Tyler Britten
da01bc1fbb
Updated OpenStack vars to check for tenant_id (v2) and project_id (v3)
2017-01-27 10:26:20 -05:00
Matthew Mosesohn
a2079a9ca9
Update coreos-stable image
...
Our old coreos-stable image has docker 1.10
2017-01-27 16:20:40 +04:00
neith00
bbc8c09753
Using the command module instead of raw
...
Using the command module instead of raw.
Also fixed the syntax.
2017-01-26 16:28:48 +01:00
Matthew Mosesohn
a627299468
Merge pull request #941 from adidenko/use_ansible_hostname_in_calico
...
Switch to ansible_hostname in calico
2017-01-26 13:06:35 +03:00
Xavier Lange
e5fdc63bdd
Bugfix: skip cloud_config on etcd
2017-01-25 14:09:21 -08:00
Brad Beam
fe83e70074
Fixing lint check for ci
2017-01-25 09:54:32 -06:00
Aleksandr Didenko
46c177b982
Switch to ansible_hostname in calico
...
For consistancy with kubernetes services we should use the same
hostname for nodes, which is 'ansible_hostname'.
Also fixing missed 'kube-node' in templates, Calico is installed
on 'k8s-cluster' roles, not only 'kube-node'.
2017-01-25 11:49:58 +01:00
Bogdan Dobrelya
1df50adc1c
Merge pull request #933 from frozenice/hide-skipped-hosts
...
add skippy stdout callback
2017-01-25 10:33:20 +01:00
Bogdan Dobrelya
b6cd9a4c4b
Merge pull request #938 from bradbeam/ci
...
Splitting out moderator check from syntax check
2017-01-25 10:12:11 +01:00
Brad Beam
2333ec4d1f
Splitting out moderator check from syntax check
...
- Attempt to clarify CI runs from contributors
2017-01-24 23:05:12 -06:00
Bogdan Dobrelya
85a8a54d3e
Merge pull request #935 from sc68cal/terraform_groupvars_update
...
Update the group_vars for Terraform
2017-01-24 11:33:17 +01:00
Bogdan Dobrelya
7294a22901
Merge pull request #934 from frozenice/use-api-pwd-for-root
...
also use kube_api_pwd for root account
2017-01-24 11:24:02 +01:00
Matthew Mosesohn
f4b7474ade
Merge pull request #926 from adidenko/fix-calico-rr-for-masters
...
Fix calico-rr peering with k8s masters
2017-01-24 12:38:52 +03:00
Matthew Mosesohn
9428321607
Merge pull request #932 from vwfs/centos_pin_docker_version
...
Pin docker version on RedHat and CentOS to the desired version
2017-01-24 12:21:50 +03:00
Matthew Mosesohn
882544446a
Merge pull request #928 from sc68cal/terraform_identity_version
...
Specify the version of the credentials to download from Horizon
2017-01-24 12:21:27 +03:00
Sean M. Collins
73160c9b90
Update terraform's group_vars to be a symlink
...
That way, it will not become stale.
Related bug #929
2017-01-23 16:08:37 -05:00
Sean M. Collins
2184d6a3ff
Specify the version of the credentials to download from Horizon
...
More recent versions of OpenStack Horizon provide Identity v2 and
Identity v3 versions of the RC file.
2017-01-23 14:52:51 -05:00
David Kirstein
6e35895b44
also use kube_api_pwd for root account
...
This makes it a bit more secure. Also the password can now be changed with a (inventory) variable (no need to edit all.yml).
2017-01-23 19:09:30 +01:00
David Kirstein
8009ff8537
add skippy stdout callback
...
It removes the teal lines when a host is skipped for a task. This makes the output less spammy and much easier to read. Empty TASK blocks are still included in the output, but that's ok.
2017-01-23 18:53:14 +01:00
Alexander Block
9bf792ce0b
Pin docker version on RedHat and CentOS to the desired version
2017-01-23 12:39:54 +01:00
Aleksandr Didenko
f05aaeb329
Fix calico-rr peering with k8s masters
...
Calico-rr is broken for deployments with separate k8s-master and
k8s-node roles. In order to fix it we should peer k8s-cluster
nodes with calico-rr, not just k8s-node. The same for peering
with routers.
Closes #925
2017-01-23 10:19:09 +01:00
Bogdan Dobrelya
1bdf34e7dc
Merge pull request #915 from bradbeam/ci
...
Sorting ansible args, fixed ci cluster_mode
2017-01-20 09:43:10 +01:00
Bogdan Dobrelya
cd25bfca91
Merge pull request #884 from mattymo/inventory_builder_scale
...
Add scale thresholds to split etcd and k8s-masters
2017-01-20 09:34:45 +01:00
Bogdan Dobrelya
1b621ab81c
Merge pull request #873 from crodetsky/fix_test_cases
...
Genericize test cases and namespace create pod
2017-01-20 09:30:35 +01:00
Bogdan Dobrelya
cb2e5ac776
Drop linux capabilities and rework users/groups
...
* Drop linux capabilities for unprivileged containerized
worlkoads Kargo configures for deployments.
* Configure required securityContext/user/group/groups for kube
components' static manifests, etcd, calico-rr and k8s apps,
like dnsmasq daemonset.
* Rework cloud-init (etcd) users creation for CoreOS.
* Fix nologin paths, adjust defaults for addusers role and ensure
supplementary groups membership added for users.
* Add netplug user for network plugins (yet unused by privileged
networking containers though).
* Grant the kube and netplug users read access for etcd certs via
the etcd certs group.
* Grant group read access to kube certs via the kube cert group.
* Remove priveleged mode for calico-rr and run it under its uid/gid
and supplementary etcd_cert group.
* Adjust docs.
* Align cpu/memory limits and dropped caps with added rkt support
for control plane.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-20 08:50:42 +01:00
Matthew Mosesohn
8ce32eb3e1
Merge pull request #905 from galthaus/async-runs
...
Add tasks to ensure that the first nodes have their directories for cert gen
2017-01-19 18:32:27 +03:00
Matthew Mosesohn
aae0314bda
Merge pull request #904 from galthaus/nginx-port-config
...
Add nginx local balancer port configuration variable
2017-01-19 18:31:57 +03:00
Matthew Mosesohn
35d5248d41
Merge pull request #913 from galthaus/apps-master-only
...
Ansible apps should only check for api-server running on the master.
2017-01-19 18:30:58 +03:00
Matthew Mosesohn
0ccc2555d3
Merge pull request #917 from mattymo/rkt_resolvconf
...
Fix setting resolvconf when using rkt deploy mode
2017-01-19 18:30:21 +03:00
Matthew Mosesohn
b26a711e96
Merge pull request #916 from mattymo/update_ansible
...
Update Ansible to 2.2.1
2017-01-19 18:13:45 +03:00
Matthew Mosesohn
2218a052b2
Merge pull request #921 from mattymo/docker113
...
Add docker 1.13, update 1.12 to 1.12.6
2017-01-19 18:13:21 +03:00
Matthew Mosesohn
40f419ca54
Merge pull request #922 from holser/dnsmasq_dns-forward-max
...
Allow to specify number of concurrent DNS queries
2017-01-19 18:08:04 +03:00
Matthew Mosesohn
f742fc3dd1
Add scale thresholds to split etcd and k8s-masters
...
Also adds calico-rr group if there are standalone etcd nodes.
Now if there are 50 or more nodes, 3 etcd nodes will be standalone.
If there are 200 or more nodes, 2 kube-masters will be standalone.
If thresholds are exceeded, kube-node group cannot add nodes that
belong to etcd or kube-master groups (according to above statements).
2017-01-19 17:30:56 +03:00
Matthew Mosesohn
33fbcc56d6
Add docker 1.13, update 1.12 to 1.12.6
...
Fixes #903
2017-01-19 13:58:36 +03:00
Sergii Golovatiuk
61d05dea58
Allow to specify number of concurrent DNS queries
...
ndots creates overhead as every pod creates 5 concurrent connections
that are forwarded to sky dns. Under some circumstances dnsmasq may
prevent forwarding traffic with "Maximum number of concurrent DNS
queries reached" in the logs.
This patch allows to configure the number of concurrent forwarded DNS
queries "dns-forward-max" as well as "cache-size" leaving the default
values as they were before.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-01-19 11:47:37 +01:00
Matthew Mosesohn
8a821060a3
Update Ansible to 2.2.1
2017-01-19 13:46:46 +03:00
Greg Althaus
0d44599a63
Add explicit name printing in task names for deletgated task during
...
cert creation
2017-01-18 14:06:50 -06:00
crodetsky
8e29b08070
Genericize test cases and namespace create pod
...
This change modifies 020_check-create-pod and 030_check-network test cases to
target `kube-master[0]` instead of `node1` as these tests can be useful in
deployments that do not use the same naming convention as the basic tests.
This change also modifies 020_check-create-pod to namespace into a `test`
namespace allowing the `get pods` command to get its expected number of
running containers.
Closes #866 and #867 .
2017-01-18 14:52:35 -05:00
Matthew Mosesohn
b6c3e61603
Fix setting resolvconf when using rkt deploy mode
...
rkt deploy mode doesn't create {{ bin_dir }}/kubelet, so
let's rely on kubelet.env file instad.
2017-01-18 19:18:47 +03:00
Brad Beam
dc08b75c6a
Sorting ansible args, fixed ci cluster_mode
...
- s/separated/separate/g for cluster_mode so it now generates the correct number of instances
2017-01-18 08:03:04 -06:00
Matthew Mosesohn
5420fa942e
Merge pull request #897 from holser/flush_handlers_before_etcd
...
Flush handlers before etcd restart
2017-01-18 12:27:01 +03:00
Matthew Mosesohn
1ee33d3a8d
Merge pull request #910 from mattymo/escape_curly
...
Fix ansible 2.2.1 handling of registered vars
2017-01-18 11:13:01 +03:00
Greg Althaus
61dab8dc0b
Should only check for api-server running on the master.
...
If this runs on other nodes, it will fail the playbook.
2017-01-17 15:57:34 -06:00
Greg Althaus
0022a2b29e
Add doc updates.
2017-01-17 13:15:48 -06:00
Matthew Mosesohn
b2a27ed089
Fix bash completion installation
2017-01-17 20:36:58 +03:00
Matthew Mosesohn
d8ae50800a
Work around escaping curly braces for docker inspect
2017-01-17 20:35:38 +03:00
Sergii Golovatiuk
43fa72b7b7
Flush handlers before etcd restart
...
systemctl daemon-reload should be run before when task modifies/creates
union for etcd. Otherwise etcd won't be able to start
Closes #892
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-01-17 15:04:25 +01:00
Bogdan Dobrelya
36b62b7270
Merge pull request #896 from bogdando/idempot_check
...
Add idempotency checks for CI
2017-01-17 14:21:32 +01:00
Matthew Mosesohn
73204c868d
Merge pull request #909 from mattymo/docker-upgrade
...
Always trigger docker restart when docker package changes
2017-01-17 11:37:42 +03:00
Matthew Mosesohn
2ee889843a
Merge pull request #900 from galthaus/cn-length
...
Cert fail if inventory names too long
2017-01-16 23:39:32 +03:00
Matthew Mosesohn
74b78e75a1
Always trigger docker restart when docker package changes
...
Docker upgrade doesn't auto-restart docker, causing failures
when trying to start another container
2017-01-16 17:52:28 +03:00
Greg Althaus
6905edbeb6
Add a variable that defaults to kube_apiserver_port that defines
...
the which port the local nginx proxy should listen on for HA
local balancer configurations.
2017-01-14 23:38:07 -06:00
Greg Althaus
6c69da1573
This PR adds/or modifies a few tasks to allow for the playbook to
...
be run by limit on each node without regard for order.
The changes make sure that all of the directories needed to do
certificate management are on the master[0] or etcd[0] node regardless
of when the playbook gets run on each node. This allows for separate
ansible playbook runs in parallel that don't have to be synchronized.
2017-01-14 23:24:34 -06:00
Bogdan Dobrelya
e776dfd800
Add idempotency checks for CI
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-13 17:16:03 +01:00
Greg Althaus
95bf380d07
If the inventory name of the host exceeds 63 characters,
...
the openssl tools will fail to create signing requests because
the CN is too long. This is mainly a problem when FQDNs are used
in the inventory file.
THis will truncate the hostname for the CN field only at the
first dot. This should handle the issue for most cases.
2017-01-13 10:02:23 -06:00
Bogdan Dobrelya
2a61ad1b57
Merge pull request #895 from mattymo/same_apiserver_certs
...
Use only one certificate for all apiservers
2017-01-13 13:05:06 +01:00
Matthew Mosesohn
80703010bd
Use only one certificate for all apiservers
...
https://github.com/kubernetes/kubernetes/issues/25063
2017-01-13 14:03:20 +03:00
Bogdan Dobrelya
e88c10670e
Merge pull request #891 from galthaus/selinux-order
...
preinstall fails on AWS CentOS7 image
2017-01-13 11:51:18 +01:00
Bogdan Dobrelya
2a2953c674
Merge pull request #893 from kubernetes-incubator/undo_hostresolvconf
...
Don't try to delete kargo specific config from dhclient when file does not exist
2017-01-13 11:35:46 +01:00
Alexander Block
1054f37765
Don't try to delete kargo specific config from dhclient when file does not exist
...
Also remove the check for != "RedHat" when removing the dhclient hook,
as this had also to be done on other distros. Instead, check if the
dhclienthookfile is defined.
2017-01-13 10:56:10 +01:00
Greg Althaus
f77257cf79
When running on CentOS7 image in AWS with selinux on, the order of
...
the tasks fail because selinux prevents ip-forwarding setting.
Moving the tasks around addresses two issues. Makes sure that
the correct python tools are in place before adjusting of selinux
and makes sure that ipforwarding is toggled after selinux adjustments.
2017-01-12 10:12:21 -06:00
Bogdan Dobrelya
f004cc07df
Merge pull request #830 from mattymo/k8sperhost
...
Generate individual certificates for k8s hosts
2017-01-12 12:42:14 +01:00
Bogdan Dobrelya
065a4da72d
Merge pull request #886 from kubernetes-incubator/undo_hostresolvconf
...
Add tasks to undo changes to hosts /etc/resolv.conf and dhclient configs
2017-01-12 12:27:22 +01:00
Bogdan Dobrelya
98c7f2eb13
Merge pull request #887 from bogdando/docs
...
Clarify major/minor/maintainance releases
2017-01-12 11:55:00 +01:00
Bogdan Dobrelya
d332502d3d
Clarify major/minor/maintainance releases
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-12 11:25:04 +01:00
Alexander Block
a7bf7867d7
Add tasks to undo changes to hosts /etc/resolv.conf and dhclient configs
2017-01-11 16:56:16 +01:00
Bogdan Dobrelya
c63cda7c21
Merge pull request #883 from bogdando/docs
...
Docs updates
2017-01-11 15:40:41 +01:00
Bogdan Dobrelya
caab0cdf27
Docs updates
...
Fix mismatching inventory examples.
Add command examples.
Clarify groups use cases.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-11 15:39:35 +01:00
Bogdan Dobrelya
1191876ae8
Merge pull request #882 from bogdando/releases
...
Clarify release policy
2017-01-11 11:45:47 +01:00
Bogdan Dobrelya
fa51a589ef
Clarify release policy
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-11 11:18:21 +01:00
Matthew Mosesohn
3f274115b0
Generate individual certificates for k8s hosts
2017-01-11 12:58:07 +03:00
Matthew Mosesohn
3b0918981e
Merge pull request #878 from bradbeam/rkt-cni
...
Adding /opt/cni /etc/cni to rkt run kubelet
2017-01-11 12:22:04 +03:00
Bogdan Dobrelya
a327dfeed7
Merge pull request #881 from bogdando/docs
...
Fix inventory generator link
2017-01-10 17:09:35 +01:00
Bogdan Dobrelya
d8cef34d6c
Merge pull request #872 from mattymo/bug868
...
Bind nginx localhost proxy to localhost
2017-01-10 17:09:25 +01:00
Bogdan Dobrelya
6fb6947feb
Fix inventory generator link
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-10 17:02:28 +01:00
Brad Beam
db8173da28
Adding /opt/cni /etc/cni to rkt run kubelet
2017-01-10 08:48:58 -06:00
Bogdan Dobrelya
bcdfb3cfb0
Merge pull request #793 from kubernetes-incubator/fix_dhclientconf_path
...
Fix wrong path of dhclient on CentOS+Azure
2017-01-10 13:23:55 +01:00
Bogdan Dobrelya
79aeb10431
Merge pull request #858 from bradbeam/calicoctl-canal
...
Misc updates for canal
2017-01-10 12:24:59 +01:00
Bogdan Dobrelya
5fd2b151b9
Merge pull request #874 from bogdando/fix
...
Fix docs formatting
2017-01-09 17:57:05 +01:00
Bogdan Dobrelya
3c107ef4dc
Fix docs formatting
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-09 17:53:05 +01:00
Bogdan Dobrelya
a5f93d6013
Merge pull request #862 from bogdando/docs
...
Update docs
2017-01-09 17:43:36 +01:00
Matthew Mosesohn
38338e848d
Merge pull request #860 from adidenko/fix-calico-rr-certs
...
Fix etcd cert generation for calico-rr role
2017-01-09 18:34:02 +03:00
Bogdan Dobrelya
e9518072a8
Update docs
...
Link docs to README, update README with recent info.
Update comparsions, add kubeadm vs kargo.
Better describe variables precedence UX impact.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-09 16:32:55 +01:00
Bogdan Dobrelya
10dbd0afbd
Merge pull request #871 from mattymo/fix_system_search_domains
...
Fix docker dns host scenario with no search domains
2017-01-09 15:52:12 +01:00
Matthew Mosesohn
e22f938ae5
Bind nginx localhost proxy to localhost
...
This proxy should only be listening for local connections, not 0.0.0.0.
Fixes #868
2017-01-09 17:19:54 +03:00
Matthew Mosesohn
1dce56e2f8
Fix docker dns host scenario with no search domains
...
Fixes scenario where docker-dns.conf tries to create an empty
search entry
2017-01-09 16:36:44 +03:00
Bogdan Dobrelya
1f0b2eac12
Merge pull request #815 from adidenko/calico-1.0.0
...
Set latest stable versions for Calico images
2017-01-09 13:57:41 +01:00
Aleksandr Didenko
d9539e0f27
Fix etcd cert generation for calico-rr role
...
"etcd_node_cert_data" variable is undefinded for "calico-rr" role.
This patch adds "calico-rr" nodes to task where "etcd_node_cert_data"
variable is registered.
2017-01-09 12:06:25 +01:00
Aleksandr Didenko
0909368339
Set latest stable versions for Calico images
...
Change version for calico images to v1.0.0. Also bump versions for
CNI and policy controller.
Also removing images repo and tag duplication from netchecker role
2017-01-09 12:05:49 +01:00
Bogdan Dobrelya
091b634ea1
Merge pull request #799 from kubernetes-incubator/docker_dns
...
Implement "dockerd --dns-xxx" based dns mode
2017-01-09 11:38:02 +01:00
Bogdan Dobrelya
d18804b0bb
Merge pull request #865 from rsmitty/coreos-family-vars
...
remove assertion for family not being CoreOS
2017-01-09 10:36:13 +01:00
Alexander Block
a8b5b856d1
Only use default resolver in dnsmasq when we are using host_resolvconf mode
2017-01-06 10:21:07 +01:00
Alexander Block
1d2a18b355
Introduce dns_mode and resolvconf_mode and implement docker_dns mode
...
Also update reset.yml to do more dns/network related cleanup.
2017-01-05 23:38:51 +01:00
Spencer Smith
4a59340182
remove assertion for family not being CoreOS
2017-01-05 13:36:25 -05:00
Spencer Smith
aa33613b98
Merge pull request #863 from bogdando/coreos_facts
...
[WIP] Better fix for different CoreOS os family facts
2017-01-05 13:22:35 -05:00
Brad Beam
cf042b2a4c
Create network policy directory for canal
2017-01-05 10:54:27 -06:00
Brad Beam
65c86377fc
Adding calicoctl to canal deployment
2017-01-05 10:54:27 -06:00
Bogdan Dobrelya
96372c15e2
Merge pull request #864 from bogdando/nopreemtible
...
Non preempt GCE instances for CI
2017-01-05 17:22:20 +01:00
Bogdan Dobrelya
f365b32c60
Non preempt GCE instances for CI
...
Revert preemptible GCE instances for CI as they are too
much of UNREACHABLE. Later we could return to them after
figured out how to mitigate preepted instances with
automated CI retries.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-05 17:08:57 +01:00
Bogdan Dobrelya
5af2c42bde
Better fix for different CoreOS os family facts
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-05 16:32:08 +01:00
Bogdan Dobrelya
c0400e9db5
Merge pull request #861 from bogdando/rename_coreos
...
Rename CoreOS fact
2017-01-05 14:53:06 +01:00
Bogdan Dobrelya
f7447837c5
Rename CoreOS fact
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-05 14:02:29 +01:00
Bogdan Dobrelya
a4dbee3e38
Merge pull request #859 from bogdando/minor_rkt
...
Minor fix to rkt version in group vars
2017-01-05 12:14:01 +01:00
Bogdan Dobrelya
fb7899aa06
Minor fix to rkt version in group vars
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-05 11:11:03 +01:00
Bogdan Dobrelya
6d54d9f49a
Merge pull request #784 from bradbeam/rkt
...
rkt support for control plane ( etcd + kubelet )
2017-01-05 10:34:49 +01:00
Bogdan Dobrelya
6546869c42
Merge branch 'master' into rkt
2017-01-05 10:34:18 +01:00
Bogdan Dobrelya
aa79a02f9c
Merge pull request #854 from bogdando/pipeline
...
Fix pipeline premoderation/unit-tests
2017-01-04 18:00:48 +01:00
Bogdan Dobrelya
447febcdd6
Fix pipeline premoderation/unit-tests
...
Do not run unit-tests for master merges.
Fix the permissive "null" user.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-04 17:52:27 +01:00
Smaine Kahlouch
61732847b6
Merge pull request #853 from bogdando/premoderated_builds
...
Do not auto-trigger gitlab CI pipeline on PRs
2017-01-04 15:20:50 +01:00
Bogdan Dobrelya
fcd9d97f10
Do not auto-trigger gitlab CI pipeline on PRs
...
For security and resources utilization reasons, do not auto-start CI
for opened/updated PRs.
A member of the kubernetes-incubator github org has first to approve
that the PR is reasonable to test by putting the "ci check this" into
the PR's comments.
If approved that way, the CI pipeline starts as always. Only the 1st step
of the pipeline is premoderatied, the rest will follow each over on
success.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-04 13:52:31 +01:00
Bogdan Dobrelya
b6b5d52f78
Merge pull request #852 from intelsdi-x/issue_template
...
Issue template proposal
2017-01-04 13:28:39 +01:00
Brad Beam
4b6f29d5e1
Adding kubelet in rkt
2017-01-03 14:49:48 -06:00
Bogdan Dobrelya
f5d5230034
Merge pull request #843 from bogdando/fix_certs_k8s_apps
...
Fix cert paths for flannel/calico policy apps
2017-01-03 17:53:07 +01:00
Brad Beam
8dc19374cc
Allowing etcd to run via rkt
2017-01-03 10:10:38 -06:00
Brad Beam
a8f2af0503
Adding initial rkt support
2017-01-03 10:08:43 -06:00
Bogdan Dobrelya
d8a2941e9e
Fix cert paths for flannel/calico policy apps
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-03 16:12:54 +01:00
Michał Żyłowski
55b6d0bbdd
GITHUB: Added issue template file
2017-01-03 16:09:35 +01:00
Bogdan Dobrelya
a3c044b657
Merge pull request #848 from kubernetes-incubator/upgrade_docker_1_12
...
Upgrade docker version and do some cleanups for unsupported distros/docker versions
2017-01-03 15:39:57 +01:00
Bogdan Dobrelya
4a2abc1a46
Merge pull request #845 from bogdando/docs
...
Comment cloud providers private networks use cases
2017-01-03 10:50:39 +01:00
Bogdan Dobrelya
410c78f2e5
Merge pull request #849 from intelsdi-x/ansible_version
...
README: changed minimal ansible version
2017-01-03 10:35:20 +01:00
Michał Żyłowski
3b5830a1cf
README: changed minimal ansible version
2017-01-02 20:37:58 +01:00
Alexander Block
ab7df10a7d
Upgrade docker version and do some cleanups for unsupported distros/docker versions
2017-01-02 18:05:50 +01:00
Bogdan Dobrelya
93663e987c
Merge pull request #847 from bogdando/bug_769
...
Fix etc hosts for cluster nodes
2017-01-02 17:47:23 +01:00
Bogdan Dobrelya
6114266b84
Merge pull request #846 from bogdando/drop_sysv
...
Drop non systemd OS types support
2017-01-02 16:51:51 +01:00
Bogdan Dobrelya
97f96a6376
Fix etc hosts for cluster nodes
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-02 13:20:51 +01:00
Bogdan Dobrelya
58062be2a3
Drop non systemd OS types support
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-02 12:14:03 +01:00
Bogdan Dobrelya
031cf565ec
Comment cloud providers private networks use cases
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-02 11:40:56 +01:00
Bogdan Dobrelya
5ec4efe88e
Merge pull request #814 from swizzlr/patch-1
...
Add section describing Kargo vs Kops
2016-12-30 13:58:28 +01:00
Bogdan Dobrelya
e02aae71a1
Merge pull request #841 from mattymo/bug832
...
Fix etcd cert generation to support large deployments
2016-12-30 13:15:20 +01:00
Matthew Mosesohn
1f9f885379
Fix etcd cert generation to support large deployments
...
Due to bash max args limits, we should pass all node filenames and
base64-encoded tar data through stdin/stdout instead.
Fixes #832
2016-12-30 12:55:26 +03:00
Thomas Catterall
80509673d2
Update README.md
2016-12-29 19:41:34 +00:00
Thomas Catterall
b902110d75
Create comparisons.md
2016-12-29 19:41:11 +00:00
Bogdan Dobrelya
2c23027794
Merge pull request #838 from mattymo/invb_enhance
...
Add yaml/json loader for inventory
2016-12-29 13:19:19 +01:00
Matthew Mosesohn
15589dd88f
Merge pull request #816 from bogdando/paths_units
...
Systemd units, limits, and bin path fixes
2016-12-29 15:18:01 +03:00
Bogdan Dobrelya
1a7f52c889
Merge pull request #837 from bogdando/notall
...
Rework wildcards matching all nodes
2016-12-29 12:01:30 +01:00
Matthew Mosesohn
24cbf2287c
Update inventory.py
2016-12-29 10:57:58 +03:00
Bogdan Dobrelya
a56d9de502
Systemd units, limits, and bin path fixes
...
* Add restart for weave service unit
* Reuse docker_bin_dir everythere
* Limit systemd managed docker containers by CPU/RAM. Do not configure native
systemd limits due to the lack of consensus in the kernel community
requires out-of-tree kernel patches.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-28 15:49:42 +01:00
Matthew Mosesohn
95e14ffb54
Add yaml/json loader for inventory
2016-12-28 16:50:31 +03:00
Bogdan Dobrelya
6139ee3add
Merge pull request #831 from mattymo/fix_separate_etcd
...
Fix creation and sync of etcd certs
2016-12-28 13:56:42 +01:00
Matthew Mosesohn
f0c0390646
Fix creation and sync of etcd certs
...
Admin certs only go to etcd nodes
Only generate cert-data for nodes that need sync
2016-12-28 14:21:17 +04:00
Matthew Mosesohn
e7a1949d85
Merge pull request #818 from mattymo/calico-rr-certs
...
Fix calico-rr to use etcd certs instead of kube certs
2016-12-28 08:47:16 +03:00
Bogdan Dobrelya
ff8cb46bb9
Rework wildcards matching all nodes
...
* Re-enable ansible_ssh_pipelining as expected for the cluster.yml
* Do not use 'all' wildcasts for hosts, limit only to k8s-cluster, etcd,
calico-rr groups instead. Other nodes in inventory are out of Kargo
scope and it's up to users how to manage them.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2016-12-27 17:02:08 +01:00
Antoine Legrand
399cb9707a
Merge pull request #828 from bogdando/triggers
...
Rework CI triggers/pipeline
2016-12-27 15:20:42 +01:00
Matthew Mosesohn
6d9cd2d720
Fix calico-rr to use etcd certs instead of kube certs
2016-12-27 17:04:50 +03:00
Bogdan Dobrelya
622537bd33
Rework CI triggers/pipeline
...
* Run CI triggers in one step
* Run all test matrix for triggers
* Switch back to g1-small
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2016-12-27 14:39:52 +01:00
Bogdan Dobrelya
9169f840c2
Merge pull request #827 from bogdando/noreds
...
Rework ignore_errors to report no reds
2016-12-27 14:37:38 +01:00
Bogdan Dobrelya
79996b557b
Rework ignore_errors to report no reds
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2016-12-27 13:00:50 +01:00
Antoine Legrand
be8e5e1fdc
Merge pull request #805 from bogdando/dnsmasq_armors
...
Do not forward private domains for upstream resolvers
2016-12-26 14:50:39 +01:00
Bogdan Dobrelya
bb0c3537cb
Do not forward bogus domains for upstream resolvers
...
Also fix kube log level 4 to log dnsmasq queries.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 11:53:14 +01:00
Matthew Mosesohn
36a5143478
Merge pull request #804 from mattymo/inventory_builder
...
Add inventory builder python script
2016-12-23 13:22:41 +03:00
Matthew Mosesohn
7b86b87dca
Add inventory builder python script
...
Includes tox support for running unit tests.
Small note added to getting-started guide for using
inventory_builder.py
Also adds manual-only unit test.
2016-12-23 13:00:56 +03:00
Thomas Catterall
53affb9bc0
Update README.md
2016-12-22 22:46:23 +00:00
Spencer Smith
0fe2b66097
Merge pull request #813 from mattymo/etcdcertflags
...
Adjust etcd server certificates
2016-12-22 16:37:15 -05:00
Matthew Mosesohn
385f7f6e75
Update etcd.j2
2016-12-22 22:29:24 +03:00
Matthew Mosesohn
9f1e3db906
Adjust etcd server certificates
...
ETCD doesn't need cert/key options set. It only requires peer
cert options.
2016-12-22 23:05:17 +04:00
Spencer Smith
b63d900625
Workaround etcdctl not yet being installed ( #797 )
...
workaround case for etcdctl not yet being installed, only allow for return code of 0 (no error)
2016-12-22 12:41:38 -05:00
Antoine Legrand
ac295de64c
Merge pull request #812 from mattymo/vars_doc
...
Document commonly used Kargo vars
2016-12-22 18:01:23 +01:00
Matthew Mosesohn
111571b67a
Document commonly used Kargo vars
2016-12-22 19:57:39 +03:00
Matthew Mosesohn
a4bce333a3
Merge pull request #760 from genti-t/issue-748-flannel-options
...
Fix Flannel network on CoreOS
2016-12-22 19:02:31 +03:00
Matthew Mosesohn
c53a6eca86
Merge pull request #798 from mattymo/perhostssl7
...
Individual etcd ssl certs
2016-12-22 19:02:15 +03:00
Genti Topija
7c2785e083
Fix Flannel network on CoreOS
...
Resolves : #748
2016-12-22 16:50:04 +01:00
Antoine Legrand
aab4149ab0
Merge pull request #809 from bogdando/ci_forks
...
Raise ansible forks for CI test config
2016-12-22 15:55:47 +01:00
Bogdan Dobrelya
89a4b92753
Raise ansible forks for CI test config
...
As we raised the flavor from small to standard, raise the ansible
forks from default 5 to 20 to speed up deployment.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-22 15:12:47 +01:00
Bogdan Dobrelya
5414a410bd
Merge pull request #787 from bogdando/coreos_weave_manual
...
Add coreos-alpha weave manual CI builds
2016-12-22 14:32:03 +01:00
Matthew Mosesohn
ad796d188d
Individual etcd ssl certs
...
Includes hooks for triggering calico, kubelet, and kube-apiserver restarts
if etcd certs changed.
2016-12-22 13:31:11 +03:00
Bogdan Dobrelya
de8cd5cd7f
Merge pull request #786 from mattymo/bug777
...
Add wait for kube-apiserver to kubernetes-apps
2016-12-22 11:02:50 +01:00
Bogdan Dobrelya
cc93c4fe12
Merge pull request #801 from rsmitty/issue-800
...
create systemd drop-in path if not existent
2016-12-22 11:02:05 +01:00
Bogdan Dobrelya
c456a311d6
Add coreos-alpha weave manual CI builds
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-22 11:00:31 +01:00
Bogdan Dobrelya
ed4b4b8482
Merge pull request #791 from kubernetes-incubator/premptilble_gce_vm
...
Use preemptible instances
2016-12-22 11:00:08 +01:00
Alexander Block
8e4e3998dd
Fix wrong path of dhclient on CentOS+Azure
...
This was alredy fixed in #755 but had to be reverted. This PR should be
more intelligent about deciding which path to use.
2016-12-21 21:51:07 +01:00
Spencer Smith
8d9f207836
create systemd drop-in path if not existent
2016-12-21 13:06:12 -05:00
Bogdan Dobrelya
2a3164e040
Merge pull request #794 from kubernetes-incubator/revert-722-dnsmasq_armors
...
Revert "Do not forward private domains for upstream resolvers"
2016-12-21 17:39:11 +01:00
Bogdan Dobrelya
f10d1327d4
Revert "Do not forward private domains for upstream resolvers"
2016-12-21 15:24:17 +01:00
Matthew Mosesohn
d314174149
Add wait for kube-apiserver to kubernetes-apps
...
Fixes #777
2016-12-21 15:39:39 +03:00
Antoine Legrand
9885fe73dc
use standard vm
2016-12-21 11:43:52 +01:00
Antoine Legrand
f2cf323ecf
Merge pull request #782 from samos123/master
...
Vagrant, skip synchronize tasks (bug #697 )
2016-12-21 11:18:20 +01:00
Bogdan Dobrelya
cf4f2b4f14
Merge pull request #780 from bogdando/downloads
...
Add download_always_pull check and sha256 for docker images
2016-12-21 11:02:57 +01:00
Antoine Legrand
fbc13ea6dc
Use preemptible instances
2016-12-21 09:27:21 +01:00
Bogdan Dobrelya
b8bc8eee41
Add download_always_pull check and sha256 for docker images
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-20 17:02:09 +01:00
Bogdan Dobrelya
11380769cd
Merge pull request #722 from bogdando/dnsmasq_armors
...
Do not forward private domains for upstream resolvers
2016-12-20 14:25:17 +01:00
Antoine Legrand
ee62c99eb1
Merge pull request #785 from bogdando/pipelines
...
Add gitlab CI auto builds for triggers
2016-12-20 14:18:19 +01:00
Bogdan Dobrelya
843d439898
Merge pull request #775 from kubernetes-incubator/register_master
...
Register master node as unschedulable
2016-12-20 14:17:55 +01:00
Bogdan Dobrelya
8d5da5cfca
Add gitlab CI auto builds for triggers
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-20 11:23:13 +01:00
Sam Stoelinga
5a2c75a3cb
Fix #781 prevent vagrant asking for password
...
When download_run_once=True it will try to first download images to host
running vagrant, then upload the images from vagrant host to the vagrant
vms. While trying to upload the images it will ask for a the vagrant
linux user password.
For small environments this behaviour is unnecessary hence changing the
default to download_run_once=False inside the Vagrantfile seems like a
good fix.
2016-12-19 11:52:18 -08:00
Bogdan Dobrelya
c1e4cef75b
Merge pull request #774 from kubernetes-incubator/ant31-patch-2
...
check if calico_peer_rr is defined
2016-12-19 18:19:03 +01:00
Bogdan Dobrelya
5d73b9ccc5
Merge pull request #778 from mattymo/fix_etcd_upgrade
...
Fix etcd to-SSL upgrade and task register vars
2016-12-19 15:20:07 +01:00
Antoine Legrand
9efe1fe09d
Merge pull request #779 from bogdando/ci_triggers
...
Allow triggered gitlab CI builds
2016-12-19 15:18:43 +01:00
Bogdan Dobrelya
4bbec963e6
Allow triggered gitlab CI builds
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-19 13:43:04 +01:00
Matthew Mosesohn
348fc5b109
Fix etcd to-SSL upgrade and task register vars
2016-12-19 15:05:49 +03:00
Bogdan Dobrelya
101864c050
Do not forward private domains for upstream resolvers
...
Also fix kube log level 4 to log dnsmasq queries.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Co-authored-by: Matthew Mosesohn <mmosesohn@mirantis.com>
2016-12-19 11:01:41 +01:00
Alexander Block
fe150d4e4d
Register master node as unschedulable
...
Also refactor generation of kubelet args to not repeat args.
2016-12-19 10:47:43 +01:00
Antoine Legrand
048ac264a3
Update main.yml
2016-12-17 20:22:39 +01:00
Antoine Legrand
add7570a94
Merge pull request #770 from kubernetes-incubator/ant31-patch-2
...
Remove 'bastion' as default conf
2016-12-17 12:42:51 +01:00
Antoine Legrand
db77bd9588
Remove 'bastion' as default conf
2016-12-17 12:42:30 +01:00
Antoine Legrand
768fe05eea
Merge pull request #704 from vwfs/bastion_hosts
...
Add support for bastion hosts
2016-12-17 12:08:49 +01:00
Antoine Legrand
1c48a001df
Merge pull request #763 from bogdando/resolver_fallback
...
Fallback to default resolver if no nameservers
2016-12-17 12:03:41 +01:00
Antoine Legrand
a7276901a3
Merge pull request #766 from kubernetes-incubator/docker12point5
...
Update docker to 1.12.5
2016-12-17 11:55:06 +01:00
Antoine Legrand
b0fa189b3c
Merge pull request #764 from kubernetes-incubator/1.5
...
Bump kube_version to v1.5.1
2016-12-16 22:15:07 +01:00
Antoine Legrand
cc57152cc0
Merge pull request #768 from bogdando/gitlab_pipes
...
Rework Gitlab pipeline stages for PRs/merges
2016-12-16 18:19:18 +01:00
Bogdan Dobrelya
046f3eebcb
Rework Gitlab pipeline stages for PRs/merges
...
Run 1 of each part1/2/special for Gitlab CI only for PRs
Remaining 2/3 of each stage are manual steps for master only (merges)
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-16 16:33:14 +01:00
Bogdan Dobrelya
ea874899c7
Merge pull request #767 from kubernetes-incubator/revert-755-fix_dhclientconf_path
...
Revert "Fix wrong path for dhclient.conf on RedHat/CentOS"
2016-12-16 15:50:06 +01:00
Bogdan Dobrelya
1782d19e1f
Fallback to default resolver if no nameservers
...
Current design expects users to define at least one
nameserver in the nameservers var to backup host OS DNS config
when the K8s cluster DNS service IP is not available and hosts
still have to resolve external or intranet FQDNs.
Fix undefined nameservers to fallback to the default_resolver.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-16 14:51:34 +01:00
Bogdan Dobrelya
e2476fbd0b
Revert "Fix wrong path for dhclient.conf on RedHat/CentOS"
2016-12-16 14:49:26 +01:00
Matthew Mosesohn
07cd81ef58
Update docker to 1.12.5
...
Note the new ubuntu/debian version string change:
https://github.com/docker/docker/issues/29355
2016-12-16 16:30:46 +03:00
Bogdan Dobrelya
92f542938c
Merge pull request #745 from kubernetes-incubator/fix_weave_start
...
Fix weave restart after docker daemon restart
2016-12-16 14:06:48 +01:00
Matthew Mosesohn
9df2306ee9
Bump kube_version to v1.5.1
2016-12-16 15:53:25 +03:00
Matthew Mosesohn
495d0b659a
Fix weave restart after docker daemon restart
2016-12-16 14:15:22 +03:00
Antoine Legrand
a2f8f17270
Merge pull request #757 from kubernetes-incubator/issue754
...
Add dns_domain for each host to /etc/hosts
2016-12-15 21:42:59 +01:00
Bogdan Dobrelya
0e2329b59e
Merge pull request #755 from kubernetes-incubator/fix_dhclientconf_path
...
Fix wrong path for dhclient.conf on RedHat/CentOS
2016-12-15 19:08:31 +01:00
Antoine Legrand
7c011b14df
Merge pull request #761 from kubernetes-incubator/reduce_test_inventory
...
Manual steps for Gitlab CI pipeline
2016-12-15 18:57:35 +01:00
Bogdan Dobrelya
ad68b23d8a
Manual steps for Gitlab CI pipeline
...
* Reduce default testcase to 2 nodes, add HA case.
* Adjust gen_matrix script for Travis/Gitlab CIs.
* Enable netchecker deploy foro gitlab CI.
* Sync other things from travis matrix and reorder them as build steps
for pull requests, master branch, auto/manual.
* Do auto-step1 from part1 and manual step2,3 for branches/PRs.
* Do manual steps from part2, special for master merges.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-15 17:23:18 +01:00
Antoine Legrand
670d977dfb
Merge pull request #756 from bogdando/skip_netcheck
...
Consider netcheck passed if agents can't report in time
2016-12-15 14:48:09 +01:00
Bogdan Dobrelya
70143d87bf
Merge pull request #746 from kubernetes-incubator/etcd_ssl_upgrade_fix
...
Fix etcd member list when upgrading ETCD from an old version
2016-12-15 12:31:34 +01:00
Antoine Legrand
e21ca5433a
Merge pull request #742 from kubernetes-incubator/gitlabci-gce
...
Add deployment from gitlab-ci
2016-12-15 12:20:56 +01:00
Matthew Mosesohn
68ad4ff4d9
Add dns_domain for each host to /etc/hosts
...
Fixes #754
2016-12-15 13:34:59 +04:00
Bogdan Dobrelya
d7b0ff3de6
Consider netcheck passed if agents can't report in time
...
Double the time to wait for the netcheck agents.
Do not fail CI build, if agents can't report in time.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-15 10:28:03 +01:00
Bogdan Dobrelya
725f9ea3bd
Merge pull request #749 from kubernetes-incubator/azure_ip_forward
...
Set net.ipv4.ip_forward=1 on all systems, not only on GCE
2016-12-15 10:19:43 +01:00
Alexander Block
a9684648ab
Fix wrong path for dhclient.conf on RedHat/CentOS
...
/etc/dhclient.conf is ignored on RedHat/CentOS
Correct location is /etc/dhcp/dhclient.conf
2016-12-15 10:11:16 +01:00
Antoine Legrand
6b1dfa4ae6
Add deployment from gitlab-ci
2016-12-15 09:12:19 +01:00
Matthew Mosesohn
9cc73bdf08
Fix etcd member list when upgrading ETCD from an old version
2016-12-15 12:00:45 +04:00
Bogdan Dobrelya
114ab5e4e6
Merge pull request #721 from adidenko/calico-add-rr
...
Add calico/routereflector support
2016-12-14 17:22:00 +01:00
Antoine Legrand
77ebf4531c
Merge pull request #751 from bogdando/rebalance_gce
...
Rebalance CI GCE zones for better CPU per region usage
2016-12-14 16:27:27 +01:00
Bogdan Dobrelya
1551fe01f9
Rebalance CI GCE zones for better CPU per region usage
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-14 16:23:57 +01:00
Smaine Kahlouch
29874baf8a
Merge pull request #708 from vwfs/cloud_network
...
Add support for cloud-provider based networking
2016-12-14 16:23:20 +01:00
Matthew Mosesohn
e6fe9d5807
Merge pull request #726 from bogdando/netcheck_ci
...
Enable netchecker for CI
2016-12-14 17:19:30 +03:00
Alexander Block
81317505eb
Set net.ipv4.ip_forward=1 on all systems, not only on GCE
2016-12-14 15:08:13 +01:00
Aleksandr Didenko
d57c27ffcf
Add calico/routereflector support
...
Add BGP route reflectors support in order to optimize BGP topology
for deployments with Calico network plugin.
Also bump version of calico/ctl for some bug fixes.
2016-12-14 13:44:10 +01:00
Bogdan Dobrelya
8d7b25d4f0
Enable netchecker for CI
...
* Enable netchecker app for CI postinstall tests
* Rework outputs and better coverage to the ping between pods post
intall test case. With netchecker deployed, the test covers hostnet
to hostnet and standard to standrad pods ping check as well.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-14 13:42:19 +01:00
Antoine Legrand
8e809aed01
Merge pull request #741 from codablock/patch-1
...
Fix kube_version to include 'v' again
2016-12-13 21:46:36 +01:00
Alexander Block
b4c87c669b
Fix kube_version to include 'v' again
...
https://github.com/kubernetes-incubator/kargo/pull/736 missed this
2016-12-13 21:43:25 +01:00
Antoine Legrand
bca704e7e9
Merge pull request #727 from bogdando/standalone_kubelet
...
Address standalone kubelet config case
2016-12-13 18:15:25 +01:00
Alexander Block
d50eb60827
Add --reconcile-cidr flag to kubelet to support cloud network plugin in 1.4
2016-12-13 17:30:10 +01:00
Alexander Block
dbd9aaf1ea
Add check for azure_route_table_name and add it to all.yml
2016-12-13 17:30:10 +01:00
Alexander Block
d20d5e648f
Add pseudo network plugin called "cloud" to use cloud provider for network
...
Allow to let the cloud provider configure proper routing for nodes.
2016-12-13 17:30:10 +01:00
Alexander Block
96640e68e2
Add tags for bastion-ssh-config
2016-12-13 17:29:47 +01:00
Alexander Block
3e007df97c
Add documentation about bastion hosts
2016-12-13 17:29:47 +01:00
Alexander Block
06584ee3aa
Add support for bastion hosts
2016-12-13 17:29:47 +01:00
Antoine Legrand
26e3142c95
Merge branch 'master' into standalone_kubelet
2016-12-13 17:26:21 +01:00
Antoine Legrand
33585fa673
Merge pull request #736 from vwfs/anon_auth
...
Move kube_version to group_vars/all to allow easier changing of version
2016-12-13 17:24:05 +01:00
Alexander Block
665ce82d71
Move kube_version to group_vars/all to allow easier changing of version
...
Also allows to perform version dependent logic in Ansible roles.
2016-12-13 17:21:00 +01:00
Antoine Legrand
fb78bfaaae
Merge pull request #734 from vwfs/anon_auth
...
Pass --anonymous-auth to apiserver for 1.5>=
2016-12-13 17:10:00 +01:00
Antoine Legrand
b4ce221002
Merge pull request #730 from vwfs/azurerm
...
Add Azure Resource Group templates and scripts to contrib
2016-12-13 17:07:41 +01:00
Alexander Block
444b1dafdc
Pass --anonymous-auth to apiserver
...
Fixes #732
2016-12-13 17:06:53 +01:00
Bogdan Dobrelya
d6174b22e9
Merge pull request #731 from bogdando/fix_resolvconf
...
Fix resolvconf
2016-12-13 16:48:37 +01:00
Bogdan Dobrelya
c75f394707
Address standalone kubelet config case
...
Also place in global vars and do not repeat the kube_*_config_dir
and kube_namespace vars for better code maintainability and UX.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-13 16:35:53 +01:00
Alexander Block
94ce99eb0a
Add documentation link for contrib/azurerm
2016-12-13 16:30:52 +01:00
Bogdan Dobrelya
0515814e0c
Fix resolvconf
...
Do not repeat options and nameservers in the dhclient hooks.
Do not prepend nameservers for dhclient but supersede and fail back
to the upstream_dns_resolvers then default_resolver. Fixes order of
nameservers placement, which is cluster DNS ip goes always first.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-13 15:48:53 +01:00
Alexander Block
c87f4f613e
Add Azure Resource Manager templates to contrib folder
2016-12-13 15:37:04 +01:00
Alexander Block
f12e9fa22a
Delete .tfstate and .tfstate.backup from openstack terraform
2016-12-13 15:37:04 +01:00
Antoine Legrand
3ca11b70c4
Merge pull request #729 from vwfs/fix_reset_umount
...
Fix reverse umount in reset role
2016-12-13 14:25:01 +01:00
Alexander Block
1cfaf927c9
Fix reverse umount in reset role
...
The Jinja2 filter 'reverse' returned an iterator instead of a list,
resulting in the umount task to fail.
Intead of using the reverse filter, we use 'tac' to reverse the output
of the previous task.
2016-12-13 14:21:24 +01:00
Bogdan Dobrelya
45135ad3e4
Merge pull request #705 from vwfs/centos7-azure
...
Better support for CentOS 7 on Azure
2016-12-13 10:36:58 +01:00
Antoine Legrand
9c06dd2863
Merge pull request #725 from kubernetes-incubator/ci-fix
...
remove local deployment from ci
2016-12-12 21:52:46 +01:00
Antoine Legrand
b2088b72dd
remove local deployment from ci
2016-12-12 21:50:13 +01:00
Bogdan Dobrelya
4e721bfd9d
Merge pull request #667 from bogdando/fix_dns
...
Rework DNS stack to meet hostnet pods needs
2016-12-12 21:38:13 +01:00
Bogdan Dobrelya
f52ed9f91e
Update main.yml
2016-12-12 21:37:16 +01:00
Antoine Legrand
88f3b86410
Merge pull request #719 from kubernetes-incubator/gitlabci
...
Add gitlabci
2016-12-12 18:29:03 +01:00
Bogdan Dobrelya
3117858dcd
Rework DNS stack to meet hostnet pods needs
...
* For Debian/RedHat OS families (with NetworkManager/dhclient/resolvconf
optionally enabled) prepend /etc/resolv.conf with required nameservers,
options, and supersede domain and search domains via the dhclient/resolvconf
hooks.
* Drop (z)nodnsupdate dhclient hook and re-implement it to complement the
resolvconf -u command, which is distro/cloud provider specific.
Update docs as well.
* Enable network restart to apply and persist changes and simplify handlers
to rely on network restart only. This fixes DNS resolve for hostnet K8s
pods for Red Hat OS family. Skip network restart for canal/calico plugins,
unless https://github.com/projectcalico/felix/issues/1185 fixed.
* Replace linefiles line plus with_items to block mode as it's faster.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Co-authored-by: Matthew Mosesohn <mmosesohn@mirantis.com>
2016-12-12 17:43:47 +01:00
ant31
8c36915ea0
add gitlabci
2016-12-12 16:49:17 +01:00
Alexander Block
5176e5c968
Make growpart only run on Azure
2016-12-12 14:14:22 +01:00
Bogdan Dobrelya
e95c733a81
Merge pull request #690 from bogdando/collect-info
...
Add kubelet and calico CLI info collection
2016-12-12 11:46:14 +01:00
Bogdan Dobrelya
15c2919ecc
Merge pull request #715 from bogdando/tags_download
...
More granular control for download/upload images/binaries
2016-12-12 11:44:13 +01:00
Bogdan Dobrelya
774f4dbbf7
Merge branch 'master' into tags_download
2016-12-12 11:44:00 +01:00
Matthew Mosesohn
b1e852a785
Merge pull request #707 from vwfs/reset_playbook
...
Add playbook and role to reset the cluster
2016-12-12 12:43:00 +03:00
Alexander Block
42ea4d2cfd
Add comment about why ansible_ssh_pipelining is set to false in bootstrap-os
2016-12-12 09:55:28 +01:00
Alexander Block
9fd14cb6ea
Add growpart role to allow growing the root partition on CentOS
...
At least the OS images from Azure do not grow the root FS automatically.
2016-12-12 09:55:28 +01:00
Alexander Block
4e34803b1e
Disable fastestmirror on CentOS
...
It actually slows down things dramatically when used in combination
with Ansible.
2016-12-12 09:54:39 +01:00
Alexander Block
7abcf6e0b9
Remove requiretty from sudoers to actually make pipelining work
...
Some systems (e.g. CentOS on Azure) have requiretty in sudoers which makes
pipelining fail.
2016-12-12 09:54:39 +01:00
Matthew Mosesohn
e5ad0836bc
Merge pull request #713 from kubernetes-incubator/bump_kubedns
...
Bump kubedns version to 1.9
2016-12-10 11:08:42 +03:00
Bogdan Dobrelya
2c50f20429
Merge pull request #696 from bogdando/intranet_dns
...
Preconfigure dns stack early
2016-12-09 21:46:03 +01:00
Bogdan Dobrelya
a15d626771
Preconfigure DNS stack and docker early
...
In order to enable offline/intranet installation cases:
* Move DNS/resolvconf configuration to preinstall role. Remove
skip_dnsmasq_k8s var as not needed anymore.
* Preconfigure DNS stack early, which may be the case when downloading
artifacts from intranet repositories. Do not configure
K8s DNS resolvers for hosts /etc/resolv.conf yet early (as they may be
not existing).
* Reconfigure K8s DNS resolvers for hosts only after kubedns/dnsmasq
was set up and before K8s apps to be created.
* Move docker install task to early stage as well and unbind it from the
etcd role's specific install path. Fix external flannel dependency on
docker role handlers. Also fix the docker restart handlers' steps
ordering to match the expected sequence (the socket then the service).
* Add default resolver fact, which is
the cloud provider specific and remove hardcoded GCE resolver.
* Reduce default ndots for hosts /etc/resolv.conf to 2. Multiple search
domains combined with high ndots values lead to poor performance of
DNS stack and make ansible workers to fail very often with the
"Timeout (12s) waiting for privilege escalation prompt:" error.
* Update docs.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-09 17:30:55 +01:00
Bogdan Dobrelya
fd9b26675e
More granular control for download/upload images/binaries
...
Add upload tag allow users to exclude distributing images across nodes
when running with the download tag set.
Add related tags and update docs as well.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-09 17:04:55 +01:00
Alexander Block
eb33f085b6
Changes according to code review
2016-12-09 16:33:10 +01:00
Matthew Mosesohn
fb774d4317
Merge pull request #706 from vwfs/docker_storage_options
...
Allow to specify docker storage driver
2016-12-09 18:28:20 +03:00
Matthew Mosesohn
459bee6d2c
Bump kubedns version to 1.9
...
Version 1.9 has reduced verbosity for federation dns queries
which flood container logs.
2016-12-09 17:57:54 +03:00
Antoine Legrand
6e080cd9b0
Merge pull request #711 from bogdando/fix_link
...
Fix bad symlink
2016-12-09 14:53:30 +01:00
Alexander Block
8a5ba6b20c
Use proper style (spacing) for docker_storage_options
2016-12-09 13:56:56 +01:00
Alexander Block
c3ec3ff902
Allow to specify docker storage driver
2016-12-09 13:56:56 +01:00
Bogdan Dobrelya
284a21012c
Fix bad symlink
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-09 13:34:52 +01:00
Bogdan Dobrelya
7897c34ba3
Merge pull request #700 from bogdando/tags
...
Add tags
2016-12-09 13:23:56 +01:00
Bogdan Dobrelya
8cc84e132a
Add tags
...
Add tags to allow more granular tasks filtering.
Add generator script for MD formatted tags found.
Add docs for tags how-to.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-09 12:14:28 +01:00
Alexander Block
00ad151186
Add playbook and role to reset the cluster
...
This deletes everything related to the cluster and allows to start from
scratch.
2016-12-09 11:15:36 +01:00
Matthew Mosesohn
4265149463
Merge pull request #703 from adidenko/fix-docker_versioned_pkg
...
Convert docker_versioned_pkg dict keys to string
2016-12-09 11:50:17 +03:00
Aleksandr Didenko
ee8d6ab4fc
Convert docker_versioned_pkg dict keys to string
...
This will allow to use '-e docker_version=1.12' in ansible playbook
execution. It's also backward-compatible and will work with floating
docker_version format in custom yaml files.
Closes #702
2016-12-09 09:17:36 +01:00
Matthew Mosesohn
a80745b5bd
Merge pull request #668 from bodepd/etcd_access_address
...
Use etcd host ip instead of hostname to build etcd_access_addresses
2016-12-09 07:54:12 +03:00
Antoine Legrand
bd3f2d5cef
Merge pull request #698 from bogdando/fix_terraform
...
Symlink global vars for terraform
2016-12-08 23:59:53 +01:00
Bogdan Dobrelya
e9c591e6de
Symlink global vars for terraform
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-08 12:07:01 +01:00
Bogdan Dobrelya
710d5ae48e
Merge pull request #691 from adidenko/calico-old-cni-fix
...
Fix possible problems with legacy calicoctl
2016-12-08 12:00:08 +01:00
Matthew Mosesohn
fc769eb870
Merge pull request #693 from kubernetes-incubator/upgrades-doc
...
Add document outlining upgrade process
2016-12-08 13:02:55 +03:00
Dan Bode
eec2ed5809
Allow etcd_access_addresses to be more flexible
...
The variale etcd_access_addresses is used to determine
how to address communication from other roles to
the etcd cluster.
It was set to the address that ansible uses to
connect to instance ({{ item }})s and not the
the variable:
ip_access
which had already been created and could already
be overridden through the access_ip variable.
This change allows ansible to connect to a machine using
a different address than the one used to access etcd.
2016-12-07 10:33:15 -08:00
Bogdan Dobrelya
f7dd20f21c
Merge pull request #695 from kubernetes-incubator/bug669
...
Force hardlink for calico/canal certs
2016-12-07 18:25:09 +01:00
Matthew Mosesohn
bfc9bcb8c7
Force hardlink for calico/canal certs
...
Fixes : #669
2016-12-07 19:03:22 +03:00
Bogdan Dobrelya
8eb26c21be
Merge pull request #692 from bogdando/gce_fixes
...
Change GCE sysctls placement and docs
2016-12-07 16:17:30 +01:00
Matthew Mosesohn
3c66e4cdba
Add document outlining upgrade process
2016-12-07 16:33:08 +03:00
Bogdan Dobrelya
f0f2b81276
Change GCE sysctls placement and docs
...
Override GCE sysctl in /etc/sysctl.d/99-sysctl.conf instead of
the /etc/sysctl.d/11-gce-network-security.conf. It is recreated
by GCE, f.e. if gcloud CLI invokes some security related changes,
thus losing customizations we want to be persistent.
Update cloud providers firewall requirements in calico docs.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-07 12:53:45 +01:00
Matthew Mosesohn
45ed6de315
Merge pull request #688 from fen4o/cluster-signing-cert
...
add cluster-signing to kube-controller-manager
2016-12-07 14:53:30 +03:00
Aleksandr Didenko
c9290182be
Fix possible problems with legacy calicoctl
...
When running legacy calicoctl we do not specify calico hostname in
calico-node container thus we should not specify it in CNI config.
Also move 'legacy_calicoctl' set_fact task to the top.
2016-12-07 12:26:44 +01:00
Bogdan Dobrelya
893538d8e6
Add kubelet and calico CLI info collection
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-07 11:05:30 +01:00
fen4o
246c8209c1
add cluster-signing to kube-controller-manager
...
kube-controller-manager's cluster signing cert and key points by default to not
existing `/etc/kubernetes/ca/ca.pem` and `/etc/kubernetes/ca/ca.key` [docs][1]
[1]: http://kubernetes.io/docs/admin/kube-controller-manager/#options
2016-12-07 11:20:18 +02:00
Bogdan Dobrelya
36fe2cb5ea
Merge pull request #584 from chadswen/docker-options-refactor
...
Docker Options Refactor
2016-12-07 07:57:53 +01:00
Bogdan Dobrelya
9d6cc3a8d5
Merge pull request #684 from adidenko/fix-calico-peering
...
Calico: fix peering with routers for new version
2016-12-06 22:42:02 +01:00
Spencer Smith
8870178a2d
Merge pull request #627 from kubernetes-incubator/issue-626
...
add restart flag for docker run kubelet
2016-12-06 08:47:18 -08:00
Aleksandr Didenko
b0079ccd77
Calico: fix peering with routers for new version
...
In new `calicoctl` version nodes peering with routers is broken.
We need to use predictable node names for calico-node and the
same names in calico `bgpPeer` resources and CNI.
2016-12-06 17:17:39 +01:00
Bogdan Dobrelya
1772d122b2
Merge pull request #683 from kubernetes-incubator/fix_debian_image
...
Re-enable debian-8-kubespray image for CI
2016-12-06 14:21:28 +01:00
Matthew Mosesohn
756ae926ba
Re-enable debian-8-kubespray image for CI
...
debian-8 image is missing memory cgroup, so it can't spawn pods.
2016-12-06 16:00:58 +03:00
Bogdan Dobrelya
2c1db56213
Merge pull request #678 from adidenko/update-calico-unit
...
Update calico-node systemd unit
2016-12-06 13:51:37 +01:00
Antoine Legrand
d672cef21c
Merge pull request #641 from pcm32/feature/glusterfs-pr
...
GlusterFS server separate nodes and client facilities for k8s nodes.
2016-12-06 12:05:36 +01:00
Pablo Moreno
27e239c8d6
GlusterFS with external VMs, terraform/os included
2016-12-06 11:03:13 +00:00
Aleksandr Didenko
f1d7af11ee
Update calico-node systemd unit
...
New calicoctl does not support --detach=false option, so we should
use a recommended way to run calico-node service:
http://docs.projectcalico.org/v2.0/usage/configuration/as-service
Closes #674 , #675
2016-12-06 11:34:12 +01:00
Bogdan Dobrelya
59a097b255
Merge pull request #679 from kubernetes-incubator/kube-proxy-dbus
...
Add dbus socket dir to kube-proxy
2016-12-06 11:08:16 +01:00
Bogdan Dobrelya
d40783022b
Merge pull request #680 from kubernetes-incubator/gce_ipv4_forward
...
Fix ipv4 forwarding on GCE
2016-12-06 11:02:45 +01:00
Matthew Mosesohn
7a3a473ccf
Fix ipv4 forwarding on GCE
...
ipv4 forwarding gets broken when restarting networking, which
breaks all networking for all pods.
2016-12-06 11:57:57 +03:00
Matthew Mosesohn
2cdf752481
Add dbus socket dir to kube-proxy
2016-12-05 19:25:27 +03:00
Antoine Legrand
26f93feb2d
Merge pull request #673 from Smana/kargogo_link
...
Update README: kargo-golang, slack, and travis urls
2016-12-04 13:22:32 +01:00
Smana
d4aba0af48
README: change travis url
2016-12-04 09:24:30 +01:00
Smana
42d12afbc6
remove deprecation warning for kargo-cli
2016-12-04 09:18:26 +01:00
Smana
022468ae3e
change slack channel url
2016-12-04 09:14:15 +01:00
Smana
3bb42cc66a
change kargo go version branch url
2016-12-02 23:56:14 +01:00
Chad Swenson
8b5b27bb51
Docker Options Refactor
2016-12-02 15:07:51 -06:00
Bogdan Dobrelya
7328e0e1ac
Merge pull request #672 from kubernetes-incubator/fail_all_on_error
...
Fail all nodes on error
2016-12-02 17:08:10 +01:00
Bogdan Dobrelya
eeaf2ea4cf
Merge pull request #671 from bogdando/disable_logs_upload
...
Disable logs upload and verbose logging
2016-12-02 16:02:52 +01:00
Bogdan Dobrelya
42eb8e4663
Disable logs upload and verbose logging
...
In order to speed up CI jobs, do not produce -v logs.
Also, disable collecting and uploading logs to GS, unless
the buckets creation issue resolved.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-02 16:02:33 +01:00
Bogdan Dobrelya
c13d0db0cc
Merge pull request #656 from YorikSar/nginx-proxy-timeout
...
Set proxy_timeout to 10m in nginx.conf
2016-12-02 12:48:18 +01:00
ant31
dba2026002
Fail all nodes on error
2016-12-02 12:37:22 +01:00
Bogdan Dobrelya
a62f74259c
Merge pull request #663 from bogdando/reduce_matrix
...
Reduce CI test matrix
2016-11-30 10:43:43 +01:00
Bogdan Dobrelya
a2331fec55
Reduce CI test matrix
...
Reduce the test cases from 15 to 9, bearing in mind that:
* Disable weave/coreos gate unless its deployment fixed
* If debian/centos7 fails with net plugin X, ubuntu-xenial/rhel-7 will
likely fail as well
* Canal also covers the flannel plugin deployment, but keep at least one
of the flannel plugin deployment, unless it's superseded and removed.
* Keep at least one of each OS/plugin family to be tested in the separate
nodes layout
* Keep at least one of each OS family to be tested against each of the
plugin types in default nodes layout
* Rebalance GCE regions for instances, replace asia to eu/us as they
are the longest running jobs.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-29 18:53:43 +01:00
Antoine Legrand
b6872a0be3
Merge pull request #657 from smelchior/master
...
add azure support for kargo
2016-11-29 12:20:49 +01:00
Sebastian Melchior
bc7a73ca2c
add azure to readme
2016-11-29 12:16:30 +01:00
Bogdan Dobrelya
c405944e9d
Merge pull request #658 from bogdando/gce_images
...
Switch to standard debian/centos/rhel for CI
2016-11-29 11:35:50 +01:00
Bogdan Dobrelya
7eab889c07
Switch to standard debian/centos/rhel for CI
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-29 10:25:07 +01:00
Sebastian Melchior
bb55f68f95
add basic azure support for kargo
2016-11-29 10:20:28 +01:00
Yuriy Taraday
658543c949
Set proxy_timeout to 10m in nginx.conf
...
Fixes #655 .
This is a teporary solution for long-polling idle connections to
apiserver. It will make Nginx not cut them for the duration of expected
timeout. It will also make Nginx extremely slow in realizing that there
is some issue with connectivity to apiserver as well, so it might not be
perfect permanent solution.
2016-11-28 20:27:47 +03:00
Antoine Legrand
5b382668f5
Merge pull request #529 from bogdando/netcheck
...
Add a k8s app for advanced e2e netcheck for DNS
2016-11-28 15:26:30 +01:00
Bogdan Dobrelya
b7692fad09
Add advanced net check for DNS K8s app
...
* Add an option to deploy K8s app to test e2e network connectivity
and cluster DNS resolve via Kubedns for nethost/simple pods
(defaults to false).
* Parametrize existing k8s apps templates with kube_namespace and
kube_config_dir instead of hardcode.
* For CoreOS, ensure nameservers from inventory to be put in the
first place to allow hostnet pods connectivity via short names
or FQDN and hostnet agents to pass as well, if netchecker
deployed.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-28 13:23:25 +01:00
Bogdan Dobrelya
fbdda81515
Merge pull request #652 from kubernetes-incubator/debug_mode
...
Tune dnsmasq/kubedns limits, replicas, logging
2016-11-25 16:57:15 +01:00
Bogdan Dobrelya
7484888e42
Merge pull request #640 from bodepd/terraform_aws_decouple_k8s_cluster_etcd_roles
...
Decouple etcd/k8s-cluster roles in ec2 terraform
2016-11-25 15:11:51 +01:00
Bogdan Dobrelya
f783a638a3
Merge pull request #650 from adidenko/remove-calico-ctl-tag-override
...
Update default calico/ctl image tag
2016-11-25 14:55:59 +01:00
Bogdan Dobrelya
2d18e19263
Tune dnsmasq/kubedns limits, replicas, logging
...
* Add dns_replicas, dns_memory/cpu_limit/requests vars for
dns related apps.
* When kube_log_level=4, log dnsmasq queries as well.
* Add log level control for skydns (part of kubedns app).
* Add limits/requests vars for dnsmasq (part of kubedns app) and
dnsmasq daemon set.
* Drop string defaults for kube_log_level as it is int and
is defined in the global vars as well.
* Add docs
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-25 12:49:17 +01:00
Aleksandr Didenko
ff7d489f2d
Update calico/ctl image tag
...
We no longer need to use v0.22.0 for calicoctl since Kargo has
support for new calicoctl CLI format.
Also fixing condition logic for calico pool task.
2016-11-25 11:23:27 +01:00
Bogdan Dobrelya
6d29a5981c
Merge pull request #651 from bogdando/fix_docker_install
...
Fix download dnsmasq image dependency on docker
2016-11-24 18:44:12 +01:00
Bogdan Dobrelya
10b75d1d51
Merge pull request #648 from artem-panchenko/fix_calicoctl_node_run
...
Fix Calico jinja template (systemd)
2016-11-24 18:33:34 +01:00
Bogdan Dobrelya
aa447585c4
Fix download dnsmasq image dependency on docker
...
When download_run_once with download_localhost is used, docker is
expected to be running on the delegate localhost. That may be not
the case for a non localhost delegate, which is the kube-master
otherwise. Then the dnsmasq role, had it been invoked early before
deployment starts, would fail because of the missing docker dependency.
* Fix that dependency on docker and do not pre download dnsmasq image
for the dnsmasq role, if download_localhost is disabled.
* Remove become: false for docker CLI invocation because that's not
the common pattern to allow users access docker CLI w/o sudo.
* Fix opt bin path hack for localhost delegate to ignore errors when
it fails with "sudo password required" otherwise.
* Describe download_run_once with download_localhost use case in docs
as well.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-24 18:31:26 +01:00
Smaine Kahlouch
f6c32c3ea3
Merge pull request #649 from bogdando/coreos_resolvconf
...
Ensure /etc/resolv.conf content for CoreOS
2016-11-24 10:42:38 +01:00
Bogdan Dobrelya
d208896c46
Ensure /etc/resolv.conf content for CoreOS
...
Use cloud-init config to replace /etc/resolv.conf with the
content for kubelet to properly configure hostnet pods.
Do not use systemd-resolved yet, see
https://coreos.com/os/docs/latest/configuring-dns.html
"Only nss-aware applications can take advantage of the
systemd-resolved cache. Notably, this means that statically
linked Go programs and programs running within Docker/rkt
will use /etc/resolv.conf only, and will not use the
systemd-resolve cache."
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-23 16:51:49 +01:00
Bogdan Dobrelya
08506f5139
Merge pull request #646 from kubernetes-incubator/fix_nginx_download
...
Fix nginx container download for download_run_once mode
2016-11-23 11:46:53 +01:00
Artem Panchenko
2c4b11f321
Fix Calico jinja template (systemd)
2016-11-23 11:43:53 +02:00
Bogdan Dobrelya
d890d2f277
Fix nginx container download for download_run_once mode
...
W/o this patch, the "Download containers" task may be skipped
when running on the delegate node due to wrong "when" confition.
Then it fails to upload nginx image to the nodes as well.
Fix download nginx dependency so it always can be pushed to
nodes when download_run_once is enabled.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-23 10:37:08 +01:00
Bogdan Dobrelya
793f3990a0
Merge pull request #642 from kubernetes-incubator/k8s_imgpull
...
Allow pre-downloaded images to be used effectively
2016-11-22 18:09:38 +01:00
Bogdan Dobrelya
9d439d2e5b
Merge pull request #645 from adidenko/fix-ansible_ssh_user
...
Set defaults for ansible_ssh_user
2016-11-22 18:07:16 +01:00
Aleksandr Didenko
db03f17486
Set defaults for ansible_ssh_user
...
When setting permission for containers download/upload dir we're
using `ansible_ssh_user`. But if playbook is executed without
user being explicitly set `ansible_ssh_user` may be undefined.
In such situations dir ownership will default to `ansible_user_id`
Closes : #644
2016-11-22 18:00:56 +01:00
Bogdan Dobrelya
dff78f616e
Allow pre-downloaded images to be used effectively
...
According to http://kubernetes.io/docs/user-guide/images/ :
By default, the kubelet will try to pull each image from the
specified registry. However, if the imagePullPolicy property
of the container is set to IfNotPresent or Never, then a local\
image is used (preferentially or exclusively, respectively).
Use IfNotPresent value to allow images prepared by the download
role dependencies to be effectively used by kubelet without pull
errors resulting apps to stay blocked in PullBackOff/Error state
even when there are images on the localhost exist.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-22 16:16:04 +01:00
Antoine Legrand
d3a4d8dc24
Merge pull request #638 from pskrzyns/fix_setting_loadbalancer_apiserver_localhost
...
Fix conditional when setting loadbalancer_apiserver_localhost
2016-11-22 15:15:38 +01:00
Bogdan Dobrelya
dc58159d16
Merge pull request #621 from xenolog/calico_network_backend
...
Add ability to define network backend for Calico.
2016-11-22 14:55:47 +01:00
Antoine Legrand
b60d5647a2
Merge pull request #635 from kubernetes-incubator/download_images
...
Download images as dependencies of roles
2016-11-22 14:53:12 +01:00
Antoine Legrand
2bcfb3fea3
Merge pull request #637 from bogdando/wait_pods
...
Increase wait for pods post-install test
2016-11-22 12:25:47 +01:00
Bogdan Dobrelya
66f27ed1f3
Download images as dependencies of roles
...
Pre download all required container images as roles' deps.
Drop unused flannel-server-helper images pre download.
Improve pods creation post-install test pre downloaded busybox.
Improve logs collection script with kubectl describe, fix sudo/etcd/weave
commands.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-22 11:13:57 +01:00
Dan Bode
cb84b93930
Decouple etcd/k8s-cluster roles in ec2 terraform
...
Currently, the terraform script in contrib
adds etcd role as a child of k8s-cluster in
its generated inventory file.
This is problematic when the etcd role is
deployed on separate nodes from the k8s master
and nodes. In this case, this leads to failures
of the k8s node since the PKI certs required for
that role have not been propogated.
2016-11-21 10:44:13 -08:00
Paweł Skrzyński
32a5453473
Fix conditional when setting loadbalancer_apiserver_localhost
2016-11-21 19:36:05 +01:00
Bogdan Dobrelya
97d126ac8b
Increase wait for pods post-install test
...
The test deployment/rc/pods creation time
is near 2m on slow CI instances with 1 CPU/1.7G RAM.
Increase wait time to allow the post test fail less often.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-21 18:50:05 +01:00
Antoine Legrand
deea7bb87b
Merge pull request #636 from kubernetes-incubator/apiserver_liveness
...
Add missing liveness probe for apiserver static pod
2016-11-21 18:27:20 +01:00
Bogdan Dobrelya
1bd1825ecb
Add missing liveness probe for apiserver static pod
...
Fix unreliable waiting for the apiserver to become ready.
Remove logfile mount to align with the rest of static pods
and because containers shall write logs to stdout only.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-21 13:15:51 +01:00
Bogdan Dobrelya
20e36191bb
Merge pull request #629 from kubernetes-incubator/fix-download-once
...
Fix download once
2016-11-21 10:55:54 +01:00
Bogdan Dobrelya
769566f36c
Merge pull request #633 from bodepd/etcd_fix
...
Ensure that etcd health checks always pass
2016-11-21 10:29:35 +01:00
Bogdan Dobrelya
ddd230485b
Merge pull request #631 from kubernetes-incubator/allow_failures
...
Allow failures for coreos/weave
2016-11-21 10:21:57 +01:00
Bogdan Dobrelya
5ee0cbaa42
Merge pull request #630 from suside/node_port
...
Add service-node-port-range parameter for kube-apiserver
2016-11-21 10:17:34 +01:00
Dan Bode
ff675d40f9
Ensure that etcd health checks always pass
...
in the etcd handler, the reload etcd action
was called after ansible waits for etcd to be
up, this means that the health checks which are
called immediately after fail (resulting in the etcd
role always failing and never finishing)
This patch changes the order to move the 'wait for etcd
up' resource after the 'reload etcd resource', ensuring that
the service is up before the health check is called.
2016-11-18 14:15:00 -08:00
Spencer Smith
0eebe43c08
updated all instances of restart always to restart on-failure with a max of 5 times
2016-11-18 14:33:22 -05:00
Bogdan Dobrelya
069636e5b4
Allow failures for coreos/weave
...
Unless https://github.com/kubernetes-incubator/kargo/issues/613
fixed.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-18 17:41:50 +01:00
Bogdan Dobrelya
a03540dabc
Add download localhost and enable for CI
...
* Add download_localhost for the download_run_once mode, which is
use the ansible host (a travis node for CI case) to store and
distribute containers across cluster nodes in inventory.
Defaults to false.
* Rework download_run_once logic to fix idempotency of uploading
containers.
* For Travis CI, enable docker images caching and run Travis
workers with sudo enabled as a dependency
* For Travis CI, deploy with download_localhost and download_run_once
enabled to shourten dev path drastically.
* Add compression for saved container images. Defaults to 'best'.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Co-authored-by: Aleksandr Didenko <adidenko@mirantis.com>
2016-11-18 16:00:07 +01:00
Sergey Vasilenko
f6d69d0a00
Add ability to define network backend for Calico.
...
This patch introduce `calico_network_backend` global variable,
which allow to describe alternative network backend.
Default behavior is unchanged.
2016-11-18 16:38:18 +03:00
Maciej Filipiak
cc2f26b8e9
Add service-node-port-range parameter for kube-apiserver
2016-11-18 14:09:38 +01:00
Aleksandr Didenko
3e687bbe9a
Fix download_run_once for containers
...
Add one more step (task) to containers download/upload sequence -
copy saved .tar containers to ansible host (delegate_to: localhost).
Then upload images to target nodes. It uses synchronize module so
if ansible host (localhost) is the same host as kube-master[0] then
new task causes no issues and the copy to localhost process is
basically skipped.
2016-11-18 12:47:35 +01:00
Antoine Legrand
c5113d3352
Merge pull request #628 from abourget/patch-1
...
Update roadmap.md
2016-11-17 22:59:25 +01:00
Smaine Kahlouch
4d9712a3ef
Merge pull request #620 from bogdando/logs_coreos
...
Fix collect/upload logs for CoreOS
2016-11-17 22:53:53 +01:00
Alexandre Bourget
5b9b2c0973
Update roadmap.md
2016-11-17 12:44:30 -05:00
Spencer Smith
a5af87758a
remove the --rm b/c it conflicts with restart
2016-11-17 12:21:30 -05:00
Matthew Mosesohn
8b11de5425
Merge pull request #608 from sneumann/patch-1
...
Fix failure if image package index is outdated
2016-11-17 12:21:15 -05:00
Spencer Smith
ff928e0e66
add restart flag for docker run kubelet
2016-11-17 12:03:41 -05:00
Bogdan Dobrelya
952191db99
Fix collect/upload logs for CoreOS
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-17 15:54:41 +01:00
Antoine Legrand
61adca2a6d
Merge pull request #618 from kubernetes-incubator/fix_inventory_example
...
Fix inventory example
2016-11-17 14:41:21 +01:00
ant31
9872ed4bb2
Merge branch 'master' of github.com:kubespray/kargo
2016-11-17 14:32:14 +01:00
sneumann
3aa2d56da9
updated bootstrap-ubuntu.yml
...
Moved the variable setting to the apt-get install part where it matters as requested in the review.
2016-11-16 12:11:54 +01:00
Bogdan Dobrelya
6a398724b6
Merge pull request #609 from sneumann/patch-2
...
Fix sugested bootstrap options
2016-11-16 11:51:48 +01:00
Bogdan Dobrelya
af3823bced
Merge pull request #611 from bogdando/coreos_canal
...
Improve CI test matrix
2016-11-16 11:31:03 +01:00
Bogdan Dobrelya
1e601bb2ef
Merge pull request #601 from adidenko/calico_mtu
...
Move CNI config and add MTU support for calico-cni
2016-11-15 18:40:03 +01:00
Bogdan Dobrelya
e4d240b1b7
Improve CI test matrix
...
For Travis CI and GCE, add a naive generator script into a markdown table.
Add GCE/Travis CI matrix docs.
Add CoreOS test cases.
Rework existing cases w/o loosing of coverage.
Rework postinstall tests to support CoreOS as well.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-15 18:17:30 +01:00
Aleksandr Didenko
e3470b28c5
Move CNI config and add MTU support for calico-cni
...
- Move CNI configuration creation for Calico to appropriate
network_plugin role from kubernetes/node.
- Add support for MTU configuration in Calico.
2016-11-15 18:05:11 +01:00
sneumann
e9a48770a7
Fix sugested bootstrap options
2016-11-15 17:52:35 +01:00
sneumann
0322b69f63
Fix failure if image package index is outdated
2016-11-15 17:49:14 +01:00
Bogdan Dobrelya
e587e82f7f
Merge pull request #600 from adidenko/calico-cni-container-support
...
Replace calico-cni binaries with calico/cni container
2016-11-15 15:40:13 +01:00
Smaine Kahlouch
5f5199bf53
Merge pull request #607 from kubernetes-incubator/fix_mounts
...
Fix mountflags and kubelet config
2016-11-15 11:29:30 +01:00
Bogdan Dobrelya
876c4df1b6
Fix mountflags and kubelet config
...
Add missing --require-kubeconfig to the if..else stanza.
Make sure certs dirs mounted in RO.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-15 11:22:23 +01:00
Antoine Legrand
e68ec257a3
Merge pull request #606 from kubernetes-incubator/issue-605
...
update comment with valid options for bootstrap_os
2016-11-15 10:51:05 +01:00
Antoine Legrand
216e0b2a52
Merge pull request #599 from kubernetes-incubator/bug_542
...
Fix kubelet deprecated options
2016-11-15 10:50:26 +01:00
Matthew Mosesohn
ab0ff2ab3c
Merge pull request #602 from adidenko/fix-canal-ssl
...
Fix etcd ssl for canal
2016-11-15 12:43:22 +03:00
Matthew Mosesohn
5cd65f9c45
Merge pull request #598 from kubernetes-incubator/bug_376
...
Generate kubectl bash completion from kubectl instead of file
2016-11-15 12:28:51 +03:00
Matthew Mosesohn
4e47c267fb
Merge pull request #604 from kubernetes-incubator/k8s-upgrade-v1.4.6
...
upgrade k8s version to 1.4.6
2016-11-15 12:27:29 +03:00
Spencer Smith
cb47bbf753
update comment with valid options for bootstrap_os
2016-11-14 16:31:15 -05:00
Smana
c41d200a95
upgrade k8s version to 1.4.6
2016-11-14 21:40:05 +01:00
Bogdan Dobrelya
771d537ff3
Merge pull request #603 from bogdando/fix_logs
...
Fix collect_info script
2016-11-14 19:16:29 +01:00
Matthew Mosesohn
8ca1f4ce44
Fix kubelet deprecated options
...
--api-servers now just reads kubeconfig
--config is now --pod-manifest-path
Fixes #542
2016-11-14 22:13:44 +04:00
Bogdan Dobrelya
625ec529ff
Fix collect_info script
...
Fix missing journal ctl utc key.
Rework kube* logs collection.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-14 19:01:50 +01:00
Aleksandr Didenko
caa81f3ac2
Fix etcd ssl for canal
...
- Move CNI configuration from `kubernetes/node` role to
`network_plugin/canal`
- Create SSL dir for Canal and symlink etcd SSL files
- Add needed options to `canal-config` configmap
- Run flannel and calico-node containers with proper configuration
2016-11-14 14:49:17 +01:00
Matthew Mosesohn
8092f57695
Merge branch 'master' into calico-cni-container-support
2016-11-14 14:58:42 +03:00
Aleksandr Didenko
965a1234d3
Replace calico-cni binaries with calico/cni container
...
Calico CNI binaries are also released/shipped in calico/cni
container. This patch replaces download of calico CNI binaries with
calico/cni container.
2016-11-14 12:19:58 +01:00
Matthew Mosesohn
15bc445a9c
Generate kubectl bash completion from kubectl instead of file
2016-11-14 14:54:59 +04:00
Bogdan Dobrelya
bb72de0dc9
Merge pull request #496 from kubernetes-incubator/idempotency_resolvconf
...
Ignore changes on check resolvconf task
2016-11-14 11:10:04 +01:00
Matthew Mosesohn
6da0ecfa55
Merge pull request #550 from chadswen/hostname-alias
...
Hostname alias fixes
2016-11-14 13:09:18 +03:00
Matthew Mosesohn
1ccc10baf8
Merge pull request #597 from pcm32/patch-1
...
Adds missing 'ip' var for terraform-generated inventory, based on internal ip
2016-11-14 10:41:21 +03:00
Matthew Mosesohn
45c2900e71
Merge branch 'master' into hostname-alias
2016-11-14 09:32:35 +03:00
Matthew Mosesohn
eb583dd2f3
Merge branch 'master' into idempotency_resolvconf
2016-11-14 09:30:22 +03:00
Smaine Kahlouch
f6233ffc9a
Merge pull request #596 from kubernetes-incubator/fix_etcd_coreos_ca
...
Fix ca certificate loading on CoreOS
2016-11-14 07:28:17 +01:00
Matthew Mosesohn
46ee9faca9
Fix ca certificate loading on CoreOS
2016-11-14 08:47:09 +04:00
Pablo Moreno
f320b79c0c
Adds missing ip based on internal ip, for etcd
2016-11-14 02:04:13 +00:00
Matthew Mosesohn
6cc05c103a
Merge pull request #592 from artem-panchenko/support_golang_calicoctl
...
Support new version of 'calicoctl' (>=v1.0.0)
2016-11-11 13:55:24 +03:00
Bogdan Dobrelya
88577b9889
Merge pull request #593 from bogdando/label_apps
...
Label k8s apps, adjust collect info commands
2016-11-10 18:09:05 +01:00
Bogdan Dobrelya
5821f9748a
Merge pull request #594 from adidenko/fix-calico-policy-controller
...
Fix policy controller
2016-11-10 16:15:36 +01:00
Artem Panchenko
c58bd33af7
Support new version of 'calicoctl' (>=v1.0.0)
...
Since version 'v1.0.0-beta' calicoctl is written
in Go and its API differs from old Python based
utility. Added support of both old and new version
of the utility.
2016-11-10 17:11:29 +02:00
Bogdan Dobrelya
cf7c60029b
Label k8s apps, adjust collect/upload info steps
...
- Drop debugs from collect-info playbook
- Drop sudo from collect-info step and add target dir var (required for travis jobs)
- Label all k8s apps, including static manifests
- Add logs for K8s apps to be collected as well
- Fix upload to GCS as a public-read tarball
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-10 16:05:50 +01:00
Matthew Mosesohn
046e315bfd
Merge pull request #595 from kubernetes-incubator/etcdtls-followup
...
Fix canal's calico networking config for ETCD TLS
2016-11-10 16:00:05 +03:00
Aleksandr Didenko
251800eb16
Fix policy controller
...
'etcd_cert_dir' variable is missing from 'kubernetes-apps/ansible'
role which breaks Calico policy controller deployment.
Also fixing calico-policy-controller.yml.
2016-11-10 13:31:31 +01:00
Matthew Mosesohn
fe16fecd8f
Fix canal's calico networking config for ETCD TLS
...
Also fixes kube-apiserver upgrade that was erroneously
deleted in a previous commit.
2016-11-10 12:49:47 +03:00
Matthew Mosesohn
9ea9604b3f
Merge pull request #591 from kubernetes-incubator/etcdtls
...
Add etcd tls support
2016-11-10 12:32:13 +03:00
Matthew Mosesohn
a32cd85eb7
Add etcd TLS support
2016-11-09 18:38:28 +03:00
Matthew Mosesohn
95b460ae94
Remove etcd-proxy from all nodes and use etcd multiaccess
2016-11-09 13:31:12 +03:00
Bogdan Dobrelya
57e467c03c
Merge pull request #589 from bogdando/fix_gcs_upload
...
[WIP] Fix uploading CI logs to GCS
2016-11-09 10:55:00 +01:00
Bogdan Dobrelya
764a2fd5a8
Merge pull request #588 from adidenko/canal-support
...
Adding support for canal network plugin
2016-11-09 10:31:56 +01:00
Bogdan Dobrelya
d197130148
Fix uploading CI logs to GCS
...
* Use gsutil to configure the logs bucket's lifecycle,
which is not in the gc_storage module yet.
(See https://cloud.google.com/storage/docs/gsutil_install ).
* Generate uniq bucket names extended with the build's OS type info as well.
* Ignore boto related errors for the gc_storage module.
* Use no_log when needed to supress noise/secrets in output
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-08 16:17:10 +01:00
Bogdan Dobrelya
39d68822ed
Merge pull request #590 from adidenko/fix-policy-rc-idempotency
...
Fix idempotency of calico-policy-controller rs
2016-11-08 15:54:07 +01:00
Aleksandr Didenko
4ece73d432
Fix idempotency of calico-policy-controller rs
...
We need to specify kube resource type and name in order to avoid
playbook errors related to k8s resource duplication.
2016-11-08 12:59:18 +01:00
Aleksandr Didenko
60a217766f
Add ConfigMap for basic configuration options
...
Container settings moved from deamonset yaml to a separate
configmap.
2016-11-08 12:57:34 +01:00
Aleksandr Didenko
309240cd6f
Adding support for canal network plugin
...
This patch provides support for Canal network plugin installation
as a self-hosted app, see the following link for details:
https://github.com/tigera/canal/tree/master/k8s-install
2016-11-08 11:04:01 +01:00
Antoine Legrand
6b0d26ddf0
Merge pull request #585 from pcm32/feature/terraform_floating_ips_squashed
...
openstack/terraform: allows masters and nodes with no floating ips
2016-11-07 12:53:34 +01:00
ant31
5aa8df163e
Merge branch 'master' of github.com:kubespray/kargo
2016-11-07 12:05:36 +01:00
ant31
881dc8172c
update example
2016-11-07 12:03:55 +01:00
Pablo Moreno
aff441a01f
Merge branch 'feature/terraform_floating_ips_squashed' of https://github.com/pcm32/kargo into feature/terraform_floating_ips_squashed
2016-11-07 10:55:07 +00:00
Antoine Legrand
44a14d0b3e
Merge pull request #586 from bogdando/fix_upload_logs
...
[WIP] Fix upload logs
2016-11-07 11:53:47 +01:00
Matthew Mosesohn
f106bf5bc4
adds ability to have hosts with no floating ips on terraform/openstack (+8 squashed commits)
...
Squashed commits:
[f9355ea
] Swap order in which we reload docker/socket
[2ca6819
] Reload docker.socket after installing flannel on coreos
Workaround for #569
[9f976e5
] Vagrantfile: setup proxy inside virtual machines
In corporate networks, it is good to pre-configure proxy variables.
[9d7142f
] Vagrantfile: use Ubuntu 16.04 LTS
Use recent supported version of Ubuntu for local development setup
with Vagrant.
[50f77cc
] Add CI test layouts
* Drop Wily from test matrix
* Replace the Wily cases dropped with extra cases to test separate
roles deployment
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
[03e162b
] Update OWNERS
[c7b00ca
] Use tar+register instead of copy/slurp for distributing tokens and certs
Related bug: https://github.com/ansible/ansible/issues/15405
Uses tar and register because synchronize module cannot sudo on the
remote side correctly and copy is too slow.
This patch dramatically cuts down the number of tasks to process
for cert synchronization.
[2778ac6
] Add new var skip_dnsmasq_k8s
If skip_dnsmasq is set, it will still not set up dnsmasq
k8s pod. This enables independent setup of resolvconf section
before kubelet is up.
2016-11-07 10:53:13 +00:00
Bogdan Dobrelya
39b8336f3f
Fix upload logs
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-07 10:48:01 +01:00
Pablo Moreno
a6bc284abd
adds ability to have hosts with no floating ips on terraform/openstack
2016-11-05 09:12:40 +00:00
Smaine Kahlouch
6b7b8a2303
Merge pull request #583 from kubernetes-incubator/issue-582
...
update admission controllers for > 1.4
2016-11-04 18:11:30 +01:00
Spencer Smith
8f20d90f88
update admission controllers for > 1.4
2016-11-04 12:54:35 -04:00
Bogdan Dobrelya
047f098660
Merge pull request #580 from bogdando/gcs_logs
...
Upload logs to GCS after failure
2016-11-04 14:50:54 +01:00
Bogdan Dobrelya
3b2554217b
Upload logs to GCS after failure
...
Delete configure logs script as not needed
Rework collect info script defaults
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-03 15:25:37 +01:00
Bogdan Dobrelya
672d50393c
Merge branch 'master' into idempotency_resolvconf
2016-11-03 13:08:07 +01:00
Pablo Moreno
d4467ab1c6
Merge pull request #3 from kubernetes-incubator/master
...
stays up to date with upstream
2016-11-02 11:23:03 +00:00
Smaine Kahlouch
ebeb57ee7c
Merge pull request #576 from sgm-media/master
...
Reload docker.socket after installing flannel on coreos
2016-11-02 09:03:09 +01:00
Jan Jungnickel
f9355ea14d
Swap order in which we reload docker/socket
2016-11-01 13:12:40 +01:00
Jan Jungnickel
2ca6819cdf
Reload docker.socket after installing flannel on coreos
...
Workaround for #569
2016-11-01 13:12:32 +01:00
Bogdan Dobrelya
437372021d
Merge pull request #574 from kad/vagrant-proxy
...
Vagrantfile: setup proxy inside virtual machines
2016-11-01 11:40:17 +01:00
Bogdan Dobrelya
78ac01add7
Merge pull request #573 from kad/newvb
...
Vagrantfile: use Ubuntu 16.04 LTS
2016-11-01 11:37:34 +01:00
Smaine Kahlouch
3b3938c6a6
Merge branch 'master' into newvb
2016-11-01 10:28:56 +01:00
Pablo Moreno
36fc05d2fd
Merge pull request #2 from kubernetes-incubator/master
...
stays up to date with upstream repo
2016-10-31 14:10:19 +00:00
Bogdan Dobrelya
7abc747b56
Merge pull request #572 from bogdando/ci_matrix_chagnes
...
Add CI test layouts
2016-10-31 11:21:55 +01:00
Alexander Kanevskiy
9f976e568d
Vagrantfile: setup proxy inside virtual machines
...
In corporate networks, it is good to pre-configure proxy variables.
2016-10-29 00:32:56 +03:00
Alexander Kanevskiy
9d7142f476
Vagrantfile: use Ubuntu 16.04 LTS
...
Use recent supported version of Ubuntu for local development setup
with Vagrant.
2016-10-28 23:26:25 +03:00
Bogdan Dobrelya
50f77cca1d
Add CI test layouts
...
* Drop Wily from test matrix
* Replace the Wily cases dropped with extra cases to test separate
roles deployment
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-10-28 16:42:03 +02:00
Antoine Legrand
33ebf124c4
Merge pull request #570 from mattymo/update_owners
...
Update OWNERS
2016-10-28 14:27:01 +02:00
Matthew Mosesohn
03e162b342
Update OWNERS
2016-10-28 11:16:11 +04:00
Matthew Mosesohn
d8b06f3e2f
Ignore changes on check resolvconf task
2016-10-28 10:38:16 +04:00
Smaine Kahlouch
d6f206b5fd
Merge pull request #561 from kubespray/rsync_certs
...
Use tar+register instead of copy/slurp for distributing tokens and certs
2016-10-27 10:52:41 +02:00
Smaine Kahlouch
357a15ffd4
Merge pull request #568 from kubespray/issue/452
...
Add new var skip_dnsmasq_k8s
2016-10-27 09:07:39 +02:00
Pablo Moreno
a3f892c76c
Merge pull request #1 from kubespray/master
...
stays up to date with main project
2016-10-26 22:03:23 +01:00
Matthew Mosesohn
2778ac61a4
Add new var skip_dnsmasq_k8s
...
If skip_dnsmasq is set, it will still not set up dnsmasq
k8s pod. This enables independent setup of resolvconf section
before kubelet is up.
2016-10-26 17:56:15 +03:00
Matthew Mosesohn
c7b00caeaa
Use tar+register instead of copy/slurp for distributing tokens and certs
...
Related bug: https://github.com/ansible/ansible/issues/15405
Uses tar and register because synchronize module cannot sudo on the
remote side correctly and copy is too slow.
This patch dramatically cuts down the number of tasks to process
for cert synchronization.
2016-10-26 15:46:18 +03:00
Smaine Kahlouch
7fe255e5bb
Merge pull request #566 from bogdando/smart_facts
...
Enable smart facts cache for CI jobs
2016-10-25 14:13:18 +02:00
Bogdan Dobrelya
93f7a26896
Enable smart facts cache for CI jobs
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-10-25 12:23:49 +02:00
Smaine Kahlouch
3d617fbf88
Merge pull request #564 from bogdando/containers_download
...
Fix idempotency/recurrence of download and preinstall
2016-10-25 11:52:24 +02:00
Bogdan Dobrelya
c59c3a1bcf
Fix idempotency/recurrence of download and preinstall
...
* Don't push containers if not changed
* Do preinstall role only once and redistribute defaults to
corresponding roles
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-10-24 18:28:53 +02:00
Smaine Kahlouch
4c0bf6225a
Merge pull request #562 from kubespray/enable_standalone_node
...
Enable standalone node deployment
2016-10-24 13:10:53 +02:00
Smaine Kahlouch
b11662a887
Merge pull request #558 from chadswen/etcdctl-path
...
Use absolute path for etcdctl
2016-10-21 23:06:15 +02:00
Matthew Mosesohn
11f1f71b3b
dynamically calculate etcd peer names
2016-10-21 16:17:50 +03:00
Matthew Mosesohn
0e9d1e09e3
Sync master tokens only with those in play_hosts
2016-10-21 14:43:41 +03:00
Matthew Mosesohn
65d2a3b0e5
Use only native cachable hostvars for etcd set_facts
2016-10-21 14:39:58 +03:00
Smaine Kahlouch
8165da3f3d
Merge pull request #559 from kubespray/fix_cloud_provider
...
fix dnsmasq template cloud_provider lookup
2016-10-21 12:25:29 +02:00
Matthew Mosesohn
4b7347f1cd
fix dnsmasq template cloud_provider lookup
2016-10-21 13:00:40 +03:00
Chad Swenson
e6902d8ecc
Use absolute path for etcdctl
...
Small fix. The shell module won't automatically resolve the path to the etcdctl binary, so i prefixed with {{ bin_dir }}/
2016-10-20 14:56:52 -05:00
Chad Swenson
a5137affeb
Hostname alias fixes
...
Change the kubelet --hostname-override flag to use the ansible_hostname variable which should be more consistent with the value required by cloud providers
Add ansible_hostname alias to /etc/hosts when it is different from inventory_hostname to overcome node name limitations see https://github.com/kubernetes/kubernetes/issues/22770
Signed-off-by: Chad Swenson <chadswen@gmail.com>
2016-10-18 16:22:32 -05:00
Smaine Kahlouch
a423927ac9
Merge pull request #546 from chadswen/dependency-variables
...
Parameterize dependency endpoints
2016-10-18 18:42:17 +02:00
Smaine Kahlouch
31c2922752
Merge pull request #552 from kubespray/upgrade_k8s_v1.4.3
...
upgrade to k8s v1.4.3
2016-10-18 18:19:08 +02:00
Smaine Kahlouch
7e81855e24
Merge pull request #554 from bogdando/kubeadm_adoption
...
Update roadmap for the kubeadm LCM track
2016-10-18 13:52:55 +02:00
Smaine Kahlouch
2510092599
Merge pull request #555 from kubespray/update_roadmap
...
update roadmap, kubeadm adoption
2016-10-18 13:52:08 +02:00
Smana
6113a3f350
update roadmap, kubeadm adoption
2016-10-18 13:51:36 +02:00
Bogdan Dobrelya
7d6fc1d680
Update roadmap for the kubeadm LCM track
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-10-18 13:44:45 +02:00
Smana
91a101c855
upgrade to k8s v1.4.3
2016-10-18 12:52:35 +02:00
Smaine Kahlouch
1de127470f
Merge pull request #549 from bogdando/fix_ha_lb
...
Update ha docs
2016-10-17 15:45:35 +02:00
Bogdan Dobrelya
40de468413
Update ha docs
...
Fix mismatch in code and docs, see
https://github.com/kubespray/kargo/pull/528
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-10-17 15:42:30 +02:00
Chad Swenson
c402feffbd
Parameterize several dependency endpoints so that they can be overridden with internal mirrors.
...
Signed-off-by: Chad Swenson <chadswen@gmail.com>
2016-10-15 12:26:52 -05:00
Smaine Kahlouch
f74d6b084b
Merge pull request #545 from kubespray/upgrade_calico_v0.22.0
...
upgrade calico version v0.22.0
2016-10-15 18:01:25 +02:00
Smana
dd022f2dbc
upgrade calico version v0.22.0
2016-10-15 15:01:45 +02:00
Smaine Kahlouch
19928dea2b
Merge pull request #544 from kubespray/upgrade_flannel_v0.6.2
...
upgrade flannel version v0.6.2
2016-10-13 17:03:51 +02:00
Smana
21273926ce
upgrade flannel version
2016-10-12 21:55:39 +02:00
Smaine Kahlouch
c03bab3246
Merge pull request #543 from kubespray/kube-proxy-cluster-cidr
...
[WIP] Add cluster-cidr to kube-proxy config
2016-10-12 21:18:33 +02:00
Matthew Mosesohn
71347322d6
Add cluster-cidr to kube-proxy config
...
This option enables masquerading for traffic directed at pods
that comes frmom outside the cluster.
2016-10-12 19:13:33 +03:00
Smaine Kahlouch
c9769965b8
Merge pull request #540 from aateem/enable-network-policy
...
Add possibility to enable network policy via Calico network controller
2016-10-11 12:10:56 +02:00
Smaine Kahlouch
52cee1f57f
Merge pull request #538 from kubespray/upgrade_k8s_v1.4.0
...
Upgrade to kubernetes version 1.4.0
2016-10-10 23:14:03 +02:00
Smana
056f4b6c00
upgrade to kubernetes version 1.4.0
...
test to change the machine type
Revert "test to change the machine type"
This reverts commit 7a91f1b5405a39bee6cb91940b09a0b0f9d3aee1.
use google dns server when no upstream dns are defined
comment upstream_dns_servers
update documentation
remove deprecated kubelet flags
Revert "remove deprecated kubelet flags"
This reverts commit 21e3b893c896d0291c36a07d0414f4cb88b8d8ac.
2016-10-10 22:44:47 +02:00
Artem Roma
3919d666c1
Add possibility to enable network policy via Calico network controller
...
The requirements for network policy feature are described here [1]. In
order to enable it, appropriate configuration must be provided to the CNI
plug in and Calico policy controller must be set up. Beside that
corresponding extensions needed to be enabled in k8s API.
Now to turn on the feature user can define `enable_network_policy`
customization variable for Ansible.
[1] http://kubernetes.io/docs/user-guide/networkpolicies/
2016-10-10 17:22:12 +03:00
Smaine Kahlouch
8c8d978cd8
Merge pull request #537 from xenolog/issues/535
...
Issues/535
2016-10-07 18:05:14 +02:00
Sergey Vasilenko
dea4210da1
Bump Calico-CNI plugin binaries versions
...
and correct checksums
2016-10-07 13:14:46 +03:00
Sergey Vasilenko
a6344f7561
Changes in Kubernetes and Calico-CNI plugin config files
...
required for usage of Calico CNI plugin version 1.4.2
2016-10-06 19:33:16 +03:00
Smaine Kahlouch
c490e5c8a1
Merge pull request #528 from kubespray/proxy-nginx
...
Use nginx proxy on non-master nodes to proxy apiserver traffic
2016-10-05 19:19:32 +02:00
Matthew Mosesohn
84052ff0b6
use nginx proxy on non-master nodes to proxy apiserver traffic
...
Also adds all masters by hostname and localhost/127.0.0.1 to
apiserver SSL certificate.
Includes documentation update on how localhost loadbalancer works.
2016-10-05 20:09:10 +03:00
Smaine Kahlouch
9ca374a88d
Merge pull request #491 from kubespray/calicopools
...
Allow calico to configure pool if tree exists, but no pools defined
2016-10-05 17:12:26 +02:00
Smaine Kahlouch
648aa7422d
Merge pull request #522 from anthonyhaussman/KubeVersionDefaults
...
Move kube_version var to defaults
2016-10-05 17:11:59 +02:00
Smaine Kahlouch
41aefd131b
Merge pull request #531 from kubespray/reverselookups
...
Disable reverse lookups again
2016-10-05 13:49:13 +02:00
Matthew Mosesohn
2e90d3fe76
Merge branch 'master' into reverselookups
2016-10-05 14:46:47 +03:00
Smaine Kahlouch
4f33c6cfe6
Merge pull request #533 from kubespray/etcd_quorum_read
...
Enable quorum read for apiserver
2016-10-05 12:01:04 +02:00
Matthew Mosesohn
f4e6fdc193
Enable quorum read for apiserver
...
This reduces the likelihood of apiserver status updates
timing out due to etcd write conflicts.
2016-10-04 18:31:42 +03:00
Smaine Kahlouch
9d069d54d6
Merge pull request #530 from adidenko/fix-calico-cluster-ip
...
Add support for --masquerade-all in kube-proxy
2016-10-03 16:49:31 +02:00
Aleksandr Didenko
fb0ee9d84a
Add support for --masquerade-all in kube-proxy
...
New boolean var `kube_proxy_masquerade_all` which enables/disables
`--masquerade-all` argument for kube-proxy.
Closes #524
2016-10-03 12:24:43 +02:00
Smaine Kahlouch
016b7893c6
Merge pull request #525 from keglevich3/patch-2
...
changed to the correct link
2016-09-30 12:38:55 +02:00
Smaine Kahlouch
1724772b20
Merge pull request #527 from bogdando/download_binaries
...
Skip download_run_once for binaries as unimplemented yet
2016-09-30 12:28:53 +02:00
Bogdan Dobrelya
a6a5d0e068
Skip download_run_once for binaries as unimplemented yet
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-30 10:55:02 +02:00
keglevich3
d548cb6ac2
changed to the correct link
2016-09-29 17:44:24 +03:00
Matthew Mosesohn
d9641771ed
add kube-masters to SSL certificate
2016-09-29 15:12:30 +03:00
Smaine Kahlouch
aaa3f1c491
Merge pull request #502 from adidenko/custom-calico-hyperkube
...
Allow to use custom "canalized" calico cni
2016-09-29 13:29:49 +02:00
Smaine Kahlouch
5889f7af0e
Merge pull request #515 from adidenko/fix-delegate-to
...
Fix delegate_to expression in download tasks
2016-09-29 10:36:44 +02:00
Matthew Mosesohn
5579cddbdb
Disable reverse lookups again
...
Initially this was removed, but it turns out that services that
perform reverse lookups (such as MariaDB) will encounter severe
performance degredation with this disabled.
2016-09-29 10:49:55 +04:00
Aleksandr Didenko
2b6866484e
Allow to use custom "canalized" calico cni
...
- Allow to overwrite calico cni binaries copied from hyperkube
by the custom ones.
- Fix calico-ipam deployment (it had wrong source in rsync)
- Make copy from hyperkube idempotent (use rsync instead of cp)
- Remove some orphaned comments
2016-09-28 18:09:20 +02:00
Anthony Haussmann
34a27b0127
Move kube_version var to defaults
...
Move the variable kube_version to defaults to have the possibility to overwrite it via group_vars inventory if needed.
2016-09-28 16:15:18 +02:00
Smaine Kahlouch
948d1d61ff
Merge pull request #521 from anthonyhaussman/MethodBoolUseCNI
...
Change method to set use_hyperkube_cni var bool
2016-09-28 12:24:53 +02:00
Smaine Kahlouch
c96a9bfdfd
Merge pull request #518 from bogdando/issues/516
...
Allow subdomains of dns_domain and fix kubelet restarts
2016-09-28 10:11:44 +02:00
Smaine Kahlouch
4e80ac1cb3
Merge pull request #497 from tonycapone/master
...
Restored gather facts on all hosts
2016-09-27 17:00:39 +02:00
Anthony Haussmann
550bda951e
Change method to set use_hyperkube_cni var bool
...
The precedent method returb a string "True\n" or "False\n", it seems to be an Ansible bug.
New method return a boolean
2016-09-27 16:41:09 +02:00
Smaine Kahlouch
6b27508c93
Merge pull request #519 from bogdando/fix_containers_download
...
Fix containers download condition
2016-09-27 15:23:50 +02:00
Smaine Kahlouch
6684766c5f
Merge pull request #520 from kubespray/use_dns_name_kubedns
...
use variable dns_domain instead of cluster_name for kubedns
2016-09-27 14:52:30 +02:00
Bogdan Dobrelya
5fd43b7cf0
Allow subdomains of dns_domain and fix kubelet restarts
...
* Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf.
* Poke kube dns container image to v1.7
* In order to apply changes to kubelet, notify it to
be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet
may yet to be present up to the moment of the notification being processed.
* Remove unnecessary kubelet restart for master role as the node role ensures
it is up and running. Notify master static pods waiters for apiserver,
scheduler, controller-manager instead.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-27 14:32:49 +02:00
Smana
336e2b8c84
use variable dns_domain instead of cluster_name for kubedns
2016-09-27 14:15:27 +02:00
Bogdan Dobrelya
ee69ac857e
Fix containers download condition
...
Save/push/load containers if only download.enabled and download.container
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-27 13:44:29 +02:00
Aleksandr Didenko
6caf5b0ac3
Fix delegate_to expression in download tasks
...
"else omit" is causing problems in this expression. Replacing
it with more strict "inventory_hostname" fixes the issue and
handles `download_run_once` as expected.
Closes issue #514
2016-09-27 11:25:24 +02:00
Smaine Kahlouch
0f461282c8
Merge pull request #507 from anthonyhaussman/KubeDNSCorrection
...
Correct nslookup command
2016-09-26 13:58:00 +02:00
Smaine Kahlouch
ab7c110880
Merge pull request #510 from bogdando/dns_docs
...
Add more DNS docs
2016-09-26 13:57:14 +02:00
Smaine Kahlouch
5046466dae
Merge pull request #509 from kubespray/cnicopyweave
...
Copy hyperkube CNI plugins when using weave
2016-09-26 13:54:02 +02:00
Smaine Kahlouch
0cc581b2da
Merge pull request #500 from kubespray/docker1.12.1
...
Add Docker 1.12.1 version
2016-09-26 13:53:29 +02:00
Bogdan Dobrelya
7dde23e60b
Add more DNS docs
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-26 13:47:34 +02:00
Matthew Mosesohn
e4a48cf53b
Add Docker 1.12.1 version
2016-09-26 12:16:16 +03:00
Matthew Mosesohn
a3fe1e78df
Copy hyperkube CNI plugins when using weave
2016-09-26 12:02:19 +03:00
Anthony Haussmann
5f2bb3319b
Correct nslookup command
...
Change nslookup command to check the right cluster_name
2016-09-23 17:44:09 +02:00
Smaine Kahlouch
429b08a408
Merge pull request #506 from bogdando/dns_drawing
...
Adjust DNS picture
2016-09-23 17:26:29 +02:00
Bogdan Dobrelya
ec0317e0e4
Adjust DNS picture
...
Reflect changes made to DNS setup
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-23 17:11:07 +02:00
Smaine Kahlouch
613e3b65ac
Merge pull request #505 from bogdando/rework_dnsstack
...
Fix docs and dns servers placement order
2016-09-23 16:25:20 +02:00
Bogdan Dobrelya
dfb9063b3f
Fix docs and dns servers placement order
...
- Update docs and a drawing to clarify DNS setup.
- Change order of nameservers placement to match
changes in https://github.com/kubespray/kargo/pull/501
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-23 16:16:00 +02:00
Smaine Kahlouch
284354c0da
Merge pull request #504 from bogdando/rework_dnsstack
...
Make dnsmasq daemon set optional
2016-09-23 15:33:34 +02:00
Bogdan Dobrelya
82ee60fe8b
Make dnsmasq daemon set optional
...
Change additional dnsmasq opts:
- Adjust caching size and TTL
- Disable resolve conf to not create loops
- Change dnsPolicy to default (similarly to kubedns's dnsmasq). The
ClusterFirst should not be used to not create loops
- Disable negative NXDOMAIN replies to be cached
- Make its very installation as optional step (enabled by default).
If you don't want more than 3 DNS servers, including 1 for K8s, disable
it.
- Add docs and a drawing to clarify DNS setup.
- Fix stdout logs for dnsmasq/kubedns app configs
- Add missed notifies to resolvconf -u handler
- Fix idempotency of resolvconf head file changes
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-23 12:59:06 +02:00
Smaine Kahlouch
73a8c24089
Merge pull request #501 from kubespray/nameserver_update_fix
...
Improve management of nameservers in resolv.conf
2016-09-22 18:49:29 +02:00
Matthew Mosesohn
d313be4420
Improve management of nameservers in resolv.conf
...
Changing nameservers now will clean up previous entries
2016-09-22 18:11:15 +03:00
Smaine Kahlouch
83750d14e3
Merge pull request #498 from teutostack/pr_dnsmasq_enhancement
...
Changed ImagePullPolicy from Always to IfNotPresent to avoid download…
2016-09-22 12:40:49 +02:00
Özgür Caner
123532d2a4
Changed ImagePullPolicy from Always to IfNotPresent to avoid download issue when DNS is not working
2016-09-20 10:34:44 +02:00
Anthony Howell
1a05b5980f
restored gather facts on all hosts
2016-09-19 14:12:42 -05:00
Smaine Kahlouch
a3a772be7b
Merge pull request #495 from sc68cal/sc68cal-patch-1
...
Rename large-deploymets.md to large-deployments.md
2016-09-19 18:49:37 +02:00
Sean M. Collins
42a5055d3c
Rename large-deploymets.md to large-deployments.md
...
Filename was a typo
2016-09-19 11:51:37 -04:00
Matthew Mosesohn
a93639650f
Allow calico to configure pool if tree exists, but no pools defined
2016-09-19 15:27:47 +03:00
Smaine Kahlouch
71a230a4fa
Merge pull request #493 from ivan4th/fix-reverse-dns-lookups
...
Fix reverse DNS lookups of service IPs.
2016-09-19 14:20:15 +02:00
Smaine Kahlouch
0643ed968f
Merge pull request #494 from kubespray/etcd_proxy_fix
...
always bind etcd_proxy to localhost
2016-09-19 14:19:55 +02:00
Smaine Kahlouch
1572aaf6ca
Merge pull request #489 from lukaszo/patch-1
...
Add socat do required pkgs
2016-09-19 12:19:46 +02:00
Smaine Kahlouch
5803de1ac5
Merge pull request #486 from kubespray/etchosts
...
switch /etc/hosts to use blockinfile
2016-09-19 12:19:37 +02:00
Ivan Shvedunov
13874f4610
Fix reverse DNS lookups of service IPs.
...
This fixes "DNS should provide DNS for services [Conformance]"
e2e test in k8s.
2016-09-19 09:12:10 +03:00
Matthew Mosesohn
341ea5a6ea
always bind etcd_proxy to localhost
2016-09-18 19:58:15 +04:00
Smaine Kahlouch
93be5afb60
Merge pull request #492 from bogdando/fix_cni
...
Fix use_hyperkube_cni logic
2016-09-16 15:01:48 +02:00
Bogdan Dobrelya
5ed3916f82
Fix use_hyperkube_cni logic
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-16 13:07:04 +02:00
Smaine Kahlouch
7760f75ae0
Merge pull request #488 from bogdando/issue/480
...
Distribute container images across nodes
2016-09-16 09:15:10 +02:00
Bogdan Dobrelya
390764c2b4
Add retry_stagger var for failed download/pushes.
...
* Add the retry_stagger var to tweak push and retry time strategies.
* Add large deployments related docs.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-15 16:43:58 +02:00
Bogdan Dobrelya
9926395e5b
Distribute downloaded artifacts
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-15 16:43:56 +02:00
Bogdan Dobrelya
422428908a
Download containers and save all
...
Move version/repo vars to download role.
Add container to download params, which overrides url/source_url,
if enabled.
Fix networking plugins download depending on kube_network_plugin.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-15 16:43:56 +02:00
Smaine Kahlouch
76c43f62e2
Merge pull request #490 from kubespray/fix_hyperkube_cni_decision
...
Fix logic handling for use_hyperkube_cni
2016-09-15 15:35:00 +02:00
Matthew Mosesohn
b69d5f6e6e
Fix logic handling for use_hyperkube_cni
2016-09-15 16:09:40 +03:00
Łukasz Oleś
0db441b28f
Add socat do required pkgs
...
It's required for port forwarding.
2016-09-14 21:27:33 +02:00
Matthew Mosesohn
e3ebabc3b0
switch /etc/hosts to use blockinfile
2016-09-14 19:43:33 +03:00
Smaine Kahlouch
d0867c8d03
Merge pull request #484 from ursuad/master
...
Added IntelliJ IDEA Project folder to .gitignore
2016-09-14 13:03:35 +02:00
Smaine Kahlouch
b46458a18f
Merge pull request #483 from kubespray/fix_idempotency_kubedns
...
Fix kubedns idempotency
2016-09-14 13:02:02 +02:00
Adrian Ursu
3ae29d763e
Added IntelliJ IDEA Project folder to .gitignore
2016-09-14 10:34:47 +01:00
Smaine Kahlouch
125cb0aa64
Merge pull request #481 from bogdando/issue/479
...
Add retries for copying binaries from containers and packages
2016-09-14 10:04:32 +02:00
Bogdan Dobrelya
783871a253
Add retries for packages installation
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-13 18:12:07 +02:00
Smaine Kahlouch
8294a9f1db
Merge pull request #482 from anthonyhaussman/checkkubeversioncni
...
Check kube version for calico cni to use
2016-09-13 15:54:47 +02:00
Matthew Mosesohn
ef43b21597
Fix kubedns idempotency
...
Removed api-version from kube.py because it is deprecated.
Updating both kube.py because dnsmasq one is actually used.
Fixed name back to kubedns for checking its resource.
2016-09-13 16:49:51 +03:00
Bogdan Dobrelya
6fdcaa1a63
Add retries for copying binaries from containers
...
Closes issue: https://github.com/kubespray/kargo/issues/479
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-13 15:09:34 +02:00
Anthony Haussmann
d47a2d03b4
Delete default variable use_hyperkube_cni
...
The variable is now set via a task depending of the version of kube
2016-09-13 14:59:50 +02:00
Anthony Haussmann
739cf59953
Determine hyperkube cni to use
...
Starting from version 1.3.4 of hyperkube, calico is "canalized" which requires flannel and hostonly cni plugins.So we let hyperkube ship necessary cni
2016-09-13 14:58:29 +02:00
Antoine Legrand
2e386dfbdc
Merge pull request #465 from kubespray/freeze_kpm_version
...
Multiple app deploy tools
2016-09-08 22:01:52 +02:00
Antoine Legrand
ccbb2ee3ae
App deployer plugins
2016-09-08 15:01:57 +02:00
Antoine Legrand
eb78ce4c4e
Merge pull request #473 from kubespray/bootsrap
...
Bootstrap
2016-09-08 14:54:08 +02:00
Antoine Legrand
6084e05a6b
Bootstrap os
2016-09-07 20:19:46 +02:00
Özgür Caner
da8a604c4c
Changed apt to apt-get
2016-09-07 20:13:15 +02:00
Özgür Caner
df2b2d7417
Added bootstrap script for Ubuntu 16.04 LTS and later
2016-09-07 20:13:05 +02:00
Smaine Kahlouch
d87b0344b5
Merge pull request #471 from kubespray/kubednsrc
...
Reset replicacluster name of kube-dns-v19 back to kubedns
2016-09-07 13:22:46 +02:00
Brandon B. Jozsa
2606e8e1c8
combine bootstrap options, add xenial support
2016-09-06 10:04:41 -04:00
Matthew Mosesohn
b62de1dcb1
Reset replicacluster name of kube-dns-v19 back to kubedns
...
This broke upgraded clusters
2016-09-06 16:43:17 +03:00
Antoine Legrand
37057ba969
Merge pull request #468 from kubespray/fix-kubedns-name
...
Rename kube-dns back to kubedns
2016-09-02 13:36:38 +02:00
Matthew Mosesohn
b58512bbda
Rename kube-dns back to kubedns
...
kubedns should stay named the same so that services which
depend on this name are not broken.
2016-09-02 15:09:49 +04:00
Antoine Legrand
c90045c506
Merge pull request #467 from kubespray/issue-352
...
remove dependency on kpm for kubedns
2016-09-02 12:20:24 +02:00
Spencer Smith
8b91a43576
remove dependency on kpm for kubedns
2016-09-01 10:01:15 -07:00
Antoine Legrand
602dba45ea
Merge pull request #466 from bogdando/fix_resolvconf
...
Fix updating resolvconf
2016-09-01 14:09:45 +02:00
Bogdan Dobrelya
d240073f65
Fix updating resolvconf
...
Move updating resolvconf to the network restart handler to
ensure changes applied to the /etc/resolv.conf.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-01 11:10:26 +02:00
Smaine Kahlouch
69f09e0f18
Merge pull request #461 from kubespray/issue-369
...
Issue 369
2016-08-31 15:09:33 +02:00
Smaine Kahlouch
cca26ae3d7
Merge pull request #458 from kubespray/issue456
...
Remove search and nameserver entries from resolvconf base
2016-08-31 13:15:30 +02:00
Smaine Kahlouch
1c1894cdd3
Merge pull request #462 from kubespray/calicodefaultpool
...
Disable calicoctl from creating a default pool
2016-08-31 11:58:37 +02:00
Matthew Mosesohn
26a0406669
Disable calicoctl from creating a default pool
...
Sometimes invoking calicoctl to create a pool also
creates a default pool, which causes errors in deploy.
2016-08-31 12:54:05 +03:00
Spencer Smith
a746d63177
ensure docker.service.d exists
2016-08-30 09:34:34 -07:00
Spencer Smith
0fc5e70c18
incorrect file name
2016-08-30 09:26:14 -07:00
Spencer Smith
b74c2f89f0
lay down a systemd dropin instead of the /run/flannel_docker_opts.env symlink
2016-08-30 09:17:41 -07:00
Smaine Kahlouch
7ac7fc33a7
Merge pull request #460 from str1ke/fix-vagrant-ansible-groups
...
Fix vagrant custom instance name prefix
2016-08-30 15:47:25 +02:00
Andrey Sokolov
9339903a85
Fix vagrant custom instance name prefix
2016-08-30 19:24:17 +06:00
Matthew Mosesohn
33c8d0a1a7
Remove search and nameserver entries from resolvconf base
...
These items conflict when they are provided also in head file
Fixes : #456
2016-08-30 13:14:44 +03:00
Smaine Kahlouch
5488571108
Merge pull request #455 from kubespray/fix_etcd_checksum
...
fix etcd checksum
2016-08-29 19:06:41 +02:00
Smana
28fbfbbbe7
fix etcd checksum
2016-08-29 19:09:08 +02:00
Smaine Kahlouch
18cdab3671
Merge pull request #449 from kubespray/fixapiserverplugins
...
Remove SecurityContextDeny API plugin
2016-08-29 18:58:53 +02:00
Smaine Kahlouch
311baeed5d
Merge pull request #448 from kubespray/etcdnosync
...
Add --no-sync to etcdctl member list
2016-08-29 18:58:14 +02:00
Smaine Kahlouch
f4d4d490af
Merge pull request #451 from kubespray/etcd306
...
Rebase etcd to v3.0.6
2016-08-29 18:56:32 +02:00
Matthew Mosesohn
256a4e1f29
Rebase etcd to v3.0.6
...
Fixes #450
2016-08-29 15:31:05 +03:00
Matthew Mosesohn
c50c6672f3
Remove SecurityContextDeny API plugin
...
This is no longer recommended for use since K8s 1.2:
http://kubernetes.io/docs/admin/admission-controllers/#is-there-a-recommended-set-of-plug-ins-to-use
2016-08-29 14:20:28 +03:00
Matthew Mosesohn
1345dd07f7
Add --no-sync to etcdctl member list
...
Fixes #447
2016-08-29 12:51:43 +03:00
Smaine Kahlouch
e83010b739
Merge pull request #445 from kubespray/caliconodechoice
...
Enable customization of calico-node docker image
2016-08-28 09:36:06 +02:00
Smaine Kahlouch
0dbde9e923
Merge pull request #446 from kubespray/upgrade_weave_v1.6.1
...
upgrade weave version to 1.6.1
2016-08-27 17:20:31 +02:00
Smana
d4193bbd22
upgrade weave version to 1.6.1
2016-08-27 16:04:06 +02:00
Matthew Mosesohn
b92404fd0a
Enable customization of calico-node docker image
...
New vars: calico_node_image_repo and claico_node_image_tag
Defaults: calico/node and {{ calico_version }}, respectively
2016-08-27 16:25:39 +04:00
Smaine Kahlouch
9f01331595
Merge pull request #442 from kubespray/issue-441
...
ensure bin dir for coreos before anything else
2016-08-26 21:05:04 +02:00
Spencer Smith
82076f90a3
ensure bin dir for coreos before anything else
2016-08-26 13:24:47 -04:00
Smaine Kahlouch
e165bb19a0
Merge pull request #440 from bogdando/roles_deps
...
Refactor roles and hosts
2016-08-25 15:32:22 +02:00
Bogdan Dobrelya
8168689caa
Refactor roles and hosts
...
Shorten deployment time with:
- Remove redundand roles if duplicated by a dependency and vice versa
- When a member of k8s-cluster, always install docker as a dependency
of the etcd role and drop the docker role from cluster.yaml.
- Drop etcd and node role dependencies from master role as they are
covered by the node role in k8s-cluster group as well. Copy defaults
for master from node role.
- Decouple master, node, secrets roles handlers and vars to be used w/o
cross references.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-08-25 13:27:57 +02:00
Smaine Kahlouch
c71b078c8e
Merge pull request #437 from kubespray/issues/429
...
Fix handler triggering for kubelet restart
2016-08-25 11:33:50 +02:00
Bogdan Dobrelya
caa8efbf86
Fix handler triggering for kubelet restart
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-08-25 09:12:25 +02:00
Smaine Kahlouch
bcec5553c5
Merge pull request #434 from kubespray/issue-426
...
Check only for AWS, wrote some docs on actually using AWS
2016-08-24 21:55:57 +02:00
Smaine Kahlouch
9ac744779c
Merge pull request #433 from bogdando/issues/322
...
Fix resolv.conf search/nameserver
2016-08-24 17:08:31 +02:00
Spencer Smith
4e76bced53
merge with current master, update typos in doc
2016-08-24 09:56:42 -04:00
Spencer Smith
60f263b629
updated to no longer handle gce as cloud-provider. provided aws setup doc
2016-08-24 09:48:32 -04:00
Bogdan Dobrelya
ea57ce7514
Fix resolv.conf search/nameserver
...
* Ensure additional nameserver/search, if defined as vars.
* Don't backup changed dhclient hooks as they are going to be
executed by dhclient as well, which is not what we want.
* For debian OS family only:
- Rename nodnsupdate hook the resolvconf hook to be sourced always
before it.
- Ensure dhclient restarted via network restart to apply the
nodnsupdate hook.
* For rhel OS family, the fix TBD, it doesn't work the same way.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-08-24 15:31:57 +02:00
Smaine Kahlouch
439a2e2678
Merge pull request #432 from kubespray/revert_regressions
...
Revert regressions
2016-08-24 15:31:21 +02:00
Smana
346eca5748
Revert "pass cloud provider flag in all cases, not just openstack"
...
This reverts commit f35e5e864f
.
2016-08-24 14:32:54 +02:00
Smana
643b28f9d3
Revert "Fix resolv.conf search/nameserver"
...
This reverts commit 977f82c32c
.
2016-08-24 12:36:25 +02:00
Smaine Kahlouch
1938c96239
Merge pull request #420 from bogdando/collect_info
...
Adjust collect-info playbook
2016-08-24 10:06:30 +02:00
Smaine Kahlouch
5dc8f5229f
Merge pull request #427 from kubespray/issue-426
...
pass cloud provider flag in all cases, not just openstack
2016-08-23 21:12:11 +02:00
Spencer Smith
f35e5e864f
pass cloud provider flag in all cases, not just openstack
2016-08-23 13:57:32 -04:00
Bogdan Dobrelya
47b4242613
Adjust collect-info playbook
...
Cleanup collected artifacts,
drop unrelated files/commands.
Always install gitinfos script to binaries for external
use.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-08-23 11:28:27 +02:00
Smaine Kahlouch
92c4428cfd
Merge pull request #422 from kubespray/issue-421
...
remove host ca-certs, as they aren't necessary
2016-08-23 10:17:38 +02:00
Smaine Kahlouch
d97673c13f
Merge pull request #423 from bogdando/fix_gitinfos
...
Fix gen-gitinfos.sh
2016-08-23 10:17:21 +02:00
Bogdan Dobrelya
f61071312a
Fix gen-gitinfos.sh
...
Fix the error gen-gitinfos.sh: 57: [: foo: unexpected operator
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-08-23 10:15:30 +02:00
Spencer Smith
234608433e
remove host ca-certs, as they aren't necessary
2016-08-22 16:09:33 -04:00
Smaine Kahlouch
36b6ae9a3c
Merge pull request #419 from bogdando/fix_322
...
Fix resolv.conf search/nameserver
2016-08-22 13:48:35 +02:00
Bogdan Dobrelya
977f82c32c
Fix resolv.conf search/nameserver
...
Rename nodnsupdate hook the resolvconf hook to be sourced always
before it.
Ensure dhclient restarted via network restart to apply the
nodnsupdate hook.
Ensure additional nameserver/search, if defined as vars.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-08-22 11:53:44 +02:00
Smaine Kahlouch
1f6dce61ba
Merge pull request #418 from kubespray/fixkubeletnode
...
Restart kubelet if launcher changed
2016-08-19 09:10:55 +02:00
Matthew Mosesohn
6f07da9f41
Restart kubelet if launcher changed
...
Fixes #409
2016-08-18 19:00:05 +03:00
Smaine Kahlouch
ac7cc4b7d1
Merge pull request #413 from kubespray/fix_etcd_standalone_play
...
Fix etcd play to only run on non-k8s-cluster nodes
2016-08-18 14:15:15 +02:00
Matthew Mosesohn
d591b59205
Fix etcd play to only run on non-k8s-cluster nodes
...
This decreases the time required to deploy a cluster with
3 nodes, but none are standalone etcd roles.
2016-08-18 14:08:24 +03:00
Smaine Kahlouch
c6f2102073
Merge pull request #412 from kubespray/optionalkubeletcni
...
Copy hyperkube cni plugins optionally for calico deployment
2016-08-16 14:00:27 +02:00
Smaine Kahlouch
612266f3e5
Merge pull request #408 from kubespray/upstreaming_to_k8s
...
upstreaming to k8s
2016-08-16 13:59:13 +02:00
Smana
5fbfa1481e
files needed to move kargo to k8s
2016-08-16 14:01:03 +02:00
Smaine Kahlouch
430a87d887
Merge pull request #416 from kubespray/bug383
...
Fix init scripts for etcd. Fixes #383
2016-08-16 09:17:53 +02:00
Matthew Mosesohn
0c953101ff
Fix init scripts for etcd. Fixes #383
...
Fixes Ubuntu 14.04 deployment of etcd.
2016-08-15 14:09:42 +03:00
Smaine Kahlouch
07c144d8a6
Merge pull request #415 from kubespray/issue-414
...
force fact check of all nodes first thing
2016-08-12 17:16:18 +02:00
Spencer Smith
298ab8e89e
force fact check of all nodes first thing
2016-08-12 10:06:31 -04:00
Smaine Kahlouch
8812be1e14
Merge pull request #411 from idvoretskyi/patch-1
...
OpenStack minor fix
2016-08-11 14:22:36 +02:00
Ihor Dvoretskyi
4268996680
OpenStack minor fix
2016-08-11 12:33:29 +03:00
Smaine Kahlouch
34232a170a
Merge pull request #410 from dis-xcom/fix-resolvconf-discovery
...
Fix resolvconf executable discovery
2016-08-10 21:58:16 +02:00
dis
0fa90ec9e8
Fix resolvconf executable discovery
...
If resolvconf was installed and then removed, the file
/etc/resolvconf/resolv.conf.d/head remains in the filesystem
- change discovery of 'resolvconf' executable to check if it
can be located with 'which resolvconf' command or not.
2016-08-10 17:22:33 +03:00
Matthew Mosesohn
f073ee91ea
Copy hyperkube cni plugins optionally for calico deployment
...
Hyperkube from CoreOS now ships with all binaries required for
calico and flannel (but not weave). It simplifies deployment for
some network plugin scenarios to not download CNI images.
TODO: Optionally disable downloading calico to /opt/cni/bin
2016-08-10 15:35:53 +03:00
Smaine Kahlouch
cf502735e9
Merge pull request #407 from bogdando/ansible_logs
...
Collect ansible logs as artifacts
2016-08-09 09:14:31 +02:00
Bogdan Dobrelya
252a30aee8
Collect ansible logs as artifacts
...
Extends https://github.com/kubespray/kargo/pull/406
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-08-08 16:52:08 +02:00
Smaine Kahlouch
677c4c4cb6
Merge pull request #404 from bogdando/fix_sunit
...
Fix calico-node service unit
2016-08-08 16:41:28 +02:00
Smaine Kahlouch
6a457720a4
Merge pull request #406 from bogdando/collect_info
...
Add a diagnostic info collect playbook
2016-08-08 16:09:53 +02:00
Smaine Kahlouch
f2de250b10
Merge pull request #405 from kubespray/disableipv6dns
...
Add option to disable ipv6 dns lookup
2016-08-08 16:09:43 +02:00
Bogdan Dobrelya
6cb9bd2619
Add a diagnostic info collect playbook
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-08-08 13:38:25 +02:00
Matthew Mosesohn
e727bd52f1
Add option to disable ipv6 dns lookup
...
New variable disable_ipv6_dns in kubernetes/preinstall.
2016-08-08 13:59:20 +03:00
Bogdan Dobrelya
d2c57142d3
Fix calico-node service unit
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-08-08 12:06:32 +02:00
Smaine Kahlouch
9be099466d
Merge pull request #403 from kubespray/bug368
...
Check dnsmasq on first kube-node
2016-08-05 15:07:25 +02:00
Matthew Mosesohn
acae5d4286
Check dnsmasq on first kube-node
...
kube-masters without kube-node role will not run
kube-proxy, and therefore can't check if dnsmasq
is running.
Fixes #368
2016-08-05 16:55:48 +04:00
Smaine Kahlouch
637eabccce
Merge pull request #401 from bogdando/revert_ci_changes
...
Revert "Merge pull request #393 from bogdando/ci_changes"
2016-08-03 15:13:07 +02:00
Bogdan Dobrelya
e6cfbe42db
Revert "Merge pull request #393 from bogdando/ci_changes"
...
This reverts commit 4662b41de6
, reversing
changes made to 4fb4ac120b
.
2016-08-03 12:42:52 +02:00
Smaine Kahlouch
15aec7cd87
Merge pull request #398 from mattymo/rework_systemd_wait_master
...
Improve systemd handling and stabilize docker
2016-08-03 11:30:14 +02:00
Antoine Legrand
b5d3f9b2fe
Merge pull request #397 from kubespray/docker112
...
Add future docker versions
2016-08-02 17:39:43 +02:00
Matthew Mosesohn
e38258381f
Wait for static pods when setting up
...
Fixes #390
2016-08-02 17:56:31 +03:00
Matthew Mosesohn
e8a1c7a53f
Move docker systemd unit creation to docker role
...
Creating the unit using default settings early on
and then changing it during network_plugin section
leads to too many docker restarts and duplicated code.
Reversed Wants= dependence on docker.service so it does not
restart docker when reloading systemd
Consolidated all docker restart handlers.
2016-08-02 17:56:24 +03:00
Matthew Mosesohn
5bf9b5345e
Add future docker versions
...
Default version is still unchanged, but added docker versions 1.11 and 1.12
2016-08-02 12:35:05 +03:00
Bogdan Dobrelya
2af71f31b4
Rework systemd service units
...
* Add for docker system units:
ExecReload=/bin/kill -s HUP $MAINPID
Delegate=yes
KillMode=process.
* Add missed DOCKER_OPTIONS for calico/weave docker systemd unit.
* Change Requires= to a less strict and non-faily Wants=, add missing
Wants= for After=.
* Align wants/after in a wat if Wants=foo, After= has foo as well.
* Make wants/after docker.service to ask for the docker.socket as well.
* Move "docker rm -f" commands from ExecStartPre= to ExecStopPost=.
hooks to ensure non-destructive start attempts issued by Wants=.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-08-02 10:55:42 +02:00
Antoine Legrand
4662b41de6
Merge pull request #393 from bogdando/ci_changes
...
Add CI test layouts
2016-08-01 05:31:05 -07:00
Bogdan Dobrelya
ff5a48c9f9
Add CI test layouts
...
* Drop Trusty from test matrix
* Add extra cases to test separate roles deployment
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-08-01 14:07:59 +02:00
Antoine Legrand
4fb4ac120b
Merge pull request #389 from kubespray/fixweave
...
Fix weave deployment task names
2016-07-30 18:26:08 -07:00
Matthew Mosesohn
c7fef6cb76
Fix weave deployment task names
2016-07-30 23:12:41 +04:00
Antoine Legrand
6a7308d5c7
Merge pull request #372 from adidenko/calico-ipip-support
...
Support --ipip option for calico pool
2016-07-29 08:05:00 -07:00
Antoine Legrand
4419662fa0
Merge pull request #330 from jonbec/master
...
Add settable flannel image tag & image repo
2016-07-29 08:02:18 -07:00
Antoine Legrand
b91f8630a3
Merge pull request #387 from kubespray/dockerwants
...
Fix etcd restart and calico-node unit
2016-07-29 07:59:22 -07:00
Matthew Mosesohn
5668e5f767
Fix etcd restart and handler systemd tasks
...
Changed Wants=docker.service to docker.socket
Renamed handlers for reloading systemd to contain role in task name.
2016-07-29 16:32:35 +03:00
Antoine Legrand
aa0d7ea5d0
Merge pull request #386 from kubespray/fixetcdproxysysv
...
Fix etcd user for etcd-proxy service
2016-07-28 07:53:20 -07:00
Aleksandr Didenko
c52c5f5056
Add run_once to define calico pool task name
2016-07-27 15:55:41 +02:00
Matthew Mosesohn
90fc407420
Fix etcd user for etcd-proxy service
...
Only affects sys V OSes (Ubuntu 14.04)
Fixes ##383
2016-07-27 11:54:47 +03:00
Antoine Legrand
9fb391fed5
Merge pull request #381 from kubespray/fixetcdstandalone
...
Fix etcd standalone deployment
2016-07-26 16:04:26 -07:00
Antoine Legrand
fbc55da2bf
Merge pull request #378 from bogdando/issues/26
...
Add HA/LB endpoints for kube-apiserver
2016-07-26 16:03:31 -07:00
Matthew Mosesohn
1b1f5f22d4
Fix etcd standalone deployment
...
etcd facts are generated in kubernetes/preinstall, so etcd nodes need
to be evaluated first before the rest of the deployment.
Moved several directory facts from kubernetes/node to
kubernetes/preinstall because they are not backward dependent.
2016-07-26 18:15:06 +03:00
Antoine Legrand
66da43bbbc
Merge pull request #380 from kubespray/kubectl-container
...
Copy kubectl from docker container
2016-07-26 08:02:56 -07:00
Bogdan Dobrelya
731d32afda
Add HA/LB endpoints for kube-apiserver
...
* Add HA docs for API server.
* Add auto-evaluated internal endpoints and clarify the loadbalancer_apiserver
vars and usecases.
* Use facts for kube_apiserver to not repeat code and enable LB endpoints use.
* Use /healthz check for the wait-for apiserver.
* Use the single endpoint for kubelet instead of the list of apiservers
* Specify kube_apiserver_count to for HA layout
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-07-25 17:25:45 +02:00
Matthew Mosesohn
b4688701ea
Copy kubectl from docker container
...
Nearly the last stage of source all components to containers.
Kubectl will be called from hyperkube image.
Remaining tasks:
* Move kube_version variable to kubernetes/preinstall
* Drop placeholder download.nothing requirement
2016-07-25 18:17:59 +03:00
Antoine Legrand
af4c41f32e
Merge pull request #363 from mattymo/kubelet
...
Deploy kubelet and kube-apiserver as containers
2016-07-24 01:02:33 +02:00
Matthew Mosesohn
d0a1e15ef3
Deploy kubelet and kube-apiserver as containers
...
kubelet via docker
kube-apiserver as a static pod
Fixed etcd service start to be more tolerant of slow start.
Workaround for kube_version to stay in download role, but not
download an files by creating a new "nothing" download entry.
2016-07-22 16:42:34 +03:00
Antoine Legrand
a4da0e4ee2
Merge pull request #375 from bogdando/ha_docs
...
Add ha docs
2016-07-22 15:16:01 +02:00
Bogdan Dobrelya
7d816aecf1
Add ha docs
...
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-07-22 14:44:36 +02:00
Antoine Legrand
a63b05efbc
Merge pull request #374 from kubespray/revert-lb
...
Revert "Add HA/LB endpoints for kube-apiserver"
2016-07-22 14:17:50 +02:00
Matthew Mosesohn
7f212ca9cb
Revert "Add HA/LB endpoints for kube-apiserver"
...
This reverts commit a70c3b661e
.
2016-07-22 13:54:38 +03:00
Antoine Legrand
296eccd238
Merge pull request #361 from bogdando/issue/26_p2
...
Add HA/LB endpoints for kube-apiserver
2016-07-21 14:43:53 +02:00
Aleksandr Didenko
f94eb0b997
Support --ipip option for calico pool
...
Adds new boolean configuration variable for calico network plugin
`ipip`. When it's enabled calico pool is created with '--ipip'
option (IP-over-IP encapsulation across hosts).
Also refactor pool creation tasks to simplify logic and make tasks
more readable.
2016-07-21 13:05:40 +02:00
Bogdan Dobrelya
a70c3b661e
Add HA/LB endpoints for kube-apiserver
...
* Add auto-evaluated internal endpoints and clarify the loadbalancer_apiserver
vars and usecases.
* Add loadbalancer_apiserver_localhost (default false). If enabled, override
the external LB and expect localhost:443/8080 to be new internal only frontends.
* Add kube_apiserver_multiaccess to ignore loadbalancers, and make clients
to access the apiservers as a comma-separated list of access_ip/ip/ansible ip
(a default mode). When disabled, allow clients to use the given loadbalancers.
* Define connections security mode for kube controllers, schedulers, proxies.
It is insecure be default, which is the current deployment choice.
* Rework the groups['kube-master'][0] hardcode defining the apiserver
endpoints.
* Improve grouping of vars and add facts for kube_apiserver.
* Define kube_apiserver_insecure_bind_address as a fact, add more
facts for ease of use.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-07-21 11:05:03 +02:00
Antoine Legrand
0f246bfba4
Merge pull request #365 from kubespray/etcddockerdefault
...
Set default etcd deployment to docker
2016-07-21 10:59:49 +02:00
mattymo
8141b72d5e
Merge branch 'master' into etcddockerdefault
2016-07-20 19:16:47 +03:00
Antoine Legrand
277c5d74cc
Merge pull request #367 from bogdando/set_facts
...
Fix set_facts visibility
2016-07-20 18:00:15 +02:00
Matthew Mosesohn
7a86b6c73e
Set default etcd deployment to docker
...
Improved docker reload command to wait for etcd to be
up before proceeding. Switched reload to run restart
because it can't reload if it is not guaranteed to be
in running state.
2016-07-20 18:26:16 +03:00
Antoine Legrand
52a85d5757
Merge pull request #366 from mattymo/kubeletresolv
...
Add variable kube_resolv_conf
2016-07-20 13:47:59 +02:00
Bogdan Dobrelya
a76e5dbb11
Fix set_facts visibility
...
Move set_facts to the preinstall scope, so every role
may see it. For example, network plugins to see the etcd_endpoint.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-07-20 11:41:09 +02:00
Matthew Mosesohn
c3e5aac18e
Add variable kube_resolv_conf
...
Allow configuration of a custom /etc/resolv.conf for kubelet.
2016-07-20 11:57:47 +03:00
Antoine Legrand
10b38ab9ff
Merge pull request #355 from bogdando/issues/26
...
Add etcd proxy support
2016-07-19 17:43:21 +02:00
Bogdan Dobrelya
32cd6e99b2
Add etcd proxy support
...
* Enforce a etcd-proxy role to a k8s-cluster group members. This
provides an HA layout for all of the k8s cluster internal clients.
* Proxies to be run on each node in the group as a separate etcd
instances with a readwrite proxy mode and listen the given endpoint,
which is either the access_ip:2379 or the localhost:2379.
* A notion for the 'kube_etcd_multiaccess' is: ignore endpoints and
loadbalancers and use the etcd members IPs as a comma-separated
list. Otherwise, clients shall use the local endpoint provided by a
etcd-proxy instances on each etcd node. A Netwroking plugins always
use that access mode.
* Fix apiserver's etcd servers args to use the etcd_access_endpoint.
* Fix networking plugins flannel/calico to use the etcd_endpoint.
* Fix name env var for non masters to be set as well.
* Fix etcd_client_url was not used anywhere and other etcd_* facts
evaluation was duplicated in a few places.
* Define proxy modes only in the env file, if not a master. Del
an automatic proxy mode decisions for etcd nodes in init/unit scripts.
* Use Wants= instead of Requires= as "This is the recommended way to
hook start-up of one unit to the start-up of another unit"
* Make apiserver/calico Wants= etcd-proxy to keep it always up
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Co-authored-by: Matthew Mosesohn <mmosesohn@mirantis.com>
2016-07-19 14:09:40 +02:00
Smaine Kahlouch
a2540e3318
Merge pull request #362 from bogdando/fix_service_unit
...
Fix systemd service unit for etcd
2016-07-16 10:38:36 +02:00
Bogdan Dobrelya
0b874e8db2
Fix systemd service unit for etcd
...
See https://github.com/coreos/etcd/issues/4308
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-07-15 16:22:17 +02:00
Smaine Kahlouch
192136df20
Merge pull request #359 from kubespray/fix_351
...
deployment idempotent
2016-07-14 21:34:21 +02:00
Smana
ab8fdba484
deployment idempotent
2016-07-14 21:33:24 +02:00
Smaine Kahlouch
342e6d6823
Merge pull request #358 from kubespray/use_coreos_hyperkube
...
use hyperkube coreos image
2016-07-14 21:19:10 +02:00
Smana
dfe7bfd127
use hyperkube coreos image
2016-07-14 21:20:41 +02:00
Smaine Kahlouch
51f55f3748
Merge pull request #353 from kubespray/proxymode_default_iptables
...
use iptables as default proxy mode
2016-07-12 11:16:39 +02:00
Smana
a709cd9aa1
use iptables as default proxy mode
2016-07-12 10:20:43 +02:00
Jonathan Beckman
d4dfdf68a6
Add settable flannel image tag & image repo
...
New settings with defaults:
flannel_server_helper_image_repo: "gcr.io/google_containers/"
flannel_server_helper_image_tag: "0.1"
flannel_image_repo: "quay.io/coreos/flannel"
flannel_image_tag: "0.5.5"
2016-07-11 13:18:20 +08:00
Smaine Kahlouch
a5c21ab2e8
Merge pull request #346 from bogdando/issues/345
...
Add hostpath dynamic provisioner for PetSets
2016-07-09 22:43:09 +02:00
Smaine Kahlouch
c1690c91c2
Merge pull request #348 from rsmitty/master
...
updated admission controllers for >1.2 Kubernetes
2016-07-08 23:08:32 +02:00
Smaine Kahlouch
e8195b65e4
Merge pull request #344 from jcsirot/master
...
Some additional roadmap items
2016-07-08 19:06:35 +02:00
Spencer Smith
c9cff5c845
updated admission controllers for >1.2 Kubernetes
2016-07-08 10:04:14 -07:00
Bogdan Dobrelya
da20d9eda4
Add hostpath dynamic provisioner for PetSets
...
Defaults to false. Use with v1.3 only.
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-07-08 16:52:39 +02:00
Jean-Christophe Sirot
a2bdcabc33
Some additional roadmap items
2016-07-08 16:32:01 +02:00
Smana
1e8ee99d1a
a small change in the roadmap
2016-07-08 09:40:12 +02:00
Smaine Kahlouch
a07260959d
Merge pull request #339 from kubespray/roadmap
...
roadmap
2016-07-08 09:20:29 +02:00
Smaine Kahlouch
5fdea4b947
first version of the roadmap
2016-07-08 09:21:33 +02:00
Smaine Kahlouch
83da5d7657
Merge pull request #335 from mattymo/calicoctl
...
Change calicoctl deployment to use container
2016-07-07 21:47:40 +02:00
Smaine Kahlouch
1761f9f891
Merge pull request #309 from mattymo/etcddocker
...
Add optional deployment mode for Docker etcd_deployment_type
2016-07-07 21:17:58 +02:00
Matthew Mosesohn
b3282cd0bb
Add optional deployment mode for Docker etcd_deployment_type
...
Running etcd in Docker reduces the number of individual file
downloads and services running on the host.
Note: etcd container v3.0.1 moves bindir to /usr/local/bin
Fixes : #298
2016-07-07 19:31:28 +03:00
Smaine Kahlouch
65ece3bc1d
Merge pull request #341 from jcsirot/ci-test-matrix
...
Add CI test matrix for GCE
2016-07-07 11:11:03 +02:00
Jean-Christophe Sirot
e2d6b92370
Add CI test matrix
2016-07-07 10:35:59 +02:00
Smaine Kahlouch
bcd912e854
Merge pull request #337 from blasphemy/add-kubelet-ip
...
Add kubelet ip
2016-07-07 08:05:03 +02:00
Smaine Kahlouch
8251781efb
Merge pull request #340 from abourget/fix/flanneld-free-the-logs
...
flanneld: don't redirect logs to an unreadable location
2016-07-07 07:56:10 +02:00
Alexandre Bourget
3b7eaf66b6
flanneld: don't redirect logs to an unreadable location, let docker/k8s see
...
and aggregate them.
2016-07-06 16:25:11 -04:00
Daniel Leining
1d148e9755
fix kubelet ip with quotes
2016-07-05 17:23:08 -04:00
Daniel Leining
d84ed1b4b3
make kubelet use "ip" as bind address
2016-07-05 17:14:12 -04:00
Matthew Mosesohn
baf80b7d7e
Change calicoctl deployment to use container
...
Improves upgradability of calicoctl by leveraging docker tags.
2016-07-05 13:49:03 +03:00
Smaine Kahlouch
9777b3c177
Merge pull request #333 from mattymo/apiserver-loglevel
...
Fix kube-apiserver log level syntax
2016-07-05 12:15:26 +02:00
Matthew Mosesohn
d2151500b6
Fix kube-apiserver log level syntax
2016-07-05 13:11:45 +03:00
Smaine Kahlouch
e101b72a72
Merge pull request #332 from mattymo/hyperkubeversion
...
Set hyperkube version to kube_version
2016-07-05 11:47:30 +02:00
Matthew Mosesohn
b847a43c61
Set hyperkube version to kube_version
2016-07-05 12:43:27 +03:00
Smaine Kahlouch
19f5093034
Merge pull request #331 from kubespray/docs
...
add documentation
2016-07-04 14:39:00 +02:00
Smaine Kahlouch
585102ee20
add documentation
2016-07-04 14:37:30 +02:00
Smaine Kahlouch
ee7ac22f0d
Merge pull request #328 from kubespray/upgrade_k8s_v1.3.0
...
upgrade to k8s v1.3.0
2016-07-03 18:23:17 +02:00
Smana
0b67c23d42
test the apiserver from the masters instead of the deployment machine
2016-07-03 16:18:04 +02:00
Smana
f1ba247844
upgrade to k8s v1.3.0
2016-07-03 14:14:09 +02:00
Smaine Kahlouch
2fa7ee0cf9
Merge pull request #326 from kubespray/upgrade_etcd_v3
...
upgrade to etcd v3.0.1
2016-07-02 14:26:13 +02:00
Smana
40fbb3691d
uprade to etcd v3.0.1
2016-07-02 14:14:32 +02:00
Smaine Kahlouch
d9b1435621
Merge pull request #325 from blasphemy/apiserver-bind-address
...
Add --bind-address to kube-apiserver
2016-07-02 10:35:34 +02:00
Daniel Leining
72ab34f210
Add --bind-address to kube-apiserver
2016-07-01 18:33:59 -04:00
Smaine Kahlouch
67ca186dd1
Merge pull request #318 from kubespray/upgrade_k8s_v1.2.5
...
upgrade kubernetes to v1.2.5
2016-06-29 16:51:42 +02:00
Smana
85fa3efc06
upgrade kubernetes to v1.2.5
2016-06-29 15:38:33 +02:00
Smaine Kahlouch
8531ec9186
Merge pull request #313 from Smana/choose_k8s_version
...
Helper to change k8s version
2016-06-29 15:14:32 +02:00
Smana
8c3f5f0831
change licence to apache2
2016-06-29 14:08:17 +02:00
Smana
c4beee38f6
include variables from a distinct file
2016-06-29 14:08:14 +02:00
Smana
247a1a6e6e
change hyperkube repository
2016-06-29 14:07:05 +02:00
Smana
a4396cfca0
use python script to update sha256 sum in the vars
2016-06-29 14:07:01 +02:00
Smaine Kahlouch
53b72920a5
Merge pull request #317 from kubespray/etcd_upgrade_v2.3.7
...
upgrade etcd version to 2.3.7
2016-06-28 13:22:31 +02:00
Smana
536454b079
upgrade etcd version to 2.3.7
2016-06-28 12:31:57 +02:00
Smaine Kahlouch
95bb8075f5
Merge pull request #315 from mattymo/patch-2
...
Add KUBE_API_INSECURE_BIND to systemd unit file
2016-06-27 11:10:34 +02:00
mattymo
708d2fbd61
Add KUBE_API_INSECURE_BIND to systemd unit file
...
This was missing from commit c4c312c2e6
2016-06-27 13:01:22 +04:00
Smaine Kahlouch
103f09b470
Merge pull request #310 from mattymo/kube_api_insecure_port
...
Add configurable option for kube_apiserver_insecure_bind_address
2016-06-24 17:13:44 +02:00
Matthew Mosesohn
c4c312c2e6
Add configurable option for kube_apiserver_insecure_bind_address
2016-06-24 18:10:01 +03:00
Smaine Kahlouch
d7babeba2e
Merge pull request #308 from aLostEngineer/master
...
Update calico systemd.service template for EL7
2016-06-22 21:12:11 +02:00
Chris Bell
9e59c74c24
Maintain backwards compatibility with EL6
2016-06-22 09:51:49 -04:00
Chris Bell
d94253ff6a
Modify calico docker.service
2016-06-22 09:44:31 -04:00
Smaine Kahlouch
dc90c594c6
Merge pull request #305 from kubespray/upgrade_coreos_pypy
...
upgrade pypy version
2016-06-21 12:20:39 +02:00
Smana
094c2c75f3
upgrade pypy version
2016-06-21 12:11:10 +02:00
Smaine Kahlouch
9ddace0566
Merge pull request #294 from billyoung/master
...
Add IAM profiles for Kubernetes nodes
2016-06-18 11:03:24 +02:00
Smaine Kahlouch
47061a31e2
Merge pull request #296 from mattymo/forcedockerpkg
...
Force install of specified docker version, fixes #295
2016-06-17 12:11:04 +02:00
Matthew Mosesohn
33d897bcb6
Force install of specified docker version, fixes #295
...
This allows Ubuntu/Debian to downgrade Docker version if
a newer version is installed, instead of failing.
2016-06-17 12:31:55 +03:00
Smaine Kahlouch
bf94d6f45e
Merge pull request #285 from paulczar/contrib_terraform_openstack
...
WIP: terraform openstack
2016-06-17 10:09:18 +02:00
Bill Young
1556d1c63e
Add IAM profiles for Kubernetes nodes
2016-06-15 12:58:44 -04:00
Smaine Kahlouch
c2093b128d
Merge pull request #293 from mattymo/calicodockeropts
...
Add docker_options to calico networking
2016-06-14 19:13:43 +02:00
Matthew Mosesohn
153b82a803
Add docker_options to calico networking
2016-06-14 19:33:44 +03:00
Smaine Kahlouch
587c8f4701
Merge pull request #220 from kubespray/deploy_application_with_kpm
...
Add kpm role
2016-06-12 21:26:22 +02:00
Smana
922c6897d1
Install python-pip on first master
2016-06-12 20:44:12 +02:00
ant31
eb6025a184
Add kubedns as default package to install
2016-06-12 18:08:53 +02:00
ant31
c43f9bc705
Add variables to kpm module
2016-06-12 18:02:44 +02:00
ant31
cd2847c1b9
Add kpm role
2016-06-12 18:02:44 +02:00
Smaine Kahlouch
309d6a49b6
Merge pull request #291 from kubespray/install_pip_kpm
...
install kpm in order to deploy addons
2016-06-11 21:48:07 +02:00
Smana
8281b98e19
install kpm in order to deploy addons
2016-06-11 21:08:05 +02:00
Smaine Kahlouch
0e99cbb0ad
Merge pull request #290 from kubespray/upgrade_calico_v0.20_cni_v1.3.1
...
upgrade calico to v0.20 and calico-cni to v1.3.1
2016-06-10 09:16:21 +02:00
Smana
7c7adc7198
upgrade calico to v0.20 and calico-cni to v1.3.1
2016-06-09 19:55:12 +02:00
Smaine Kahlouch
c1ebd84bf0
Merge pull request #289 from rsmitty/issue-279
...
base functionality to create aws resources
2016-06-09 13:57:04 +02:00
Spencer Smith
26aeebb372
base functionality to create aws resources
2016-06-07 12:45:25 -07:00
Smaine Kahlouch
c7de2a524b
Merge pull request #284 from rsmitty/issue-283
...
allow for bootstrapping of separate CoreOS etcd nodes
2016-06-06 11:07:00 +02:00
Paul Czarkowski
e924504928
WIP: terraform openstack
2016-06-05 15:52:20 -05:00
Spencer Smith
63908108b2
allow for separate CoreOS etcd nodes
2016-06-03 10:29:12 -04:00
Smaine Kahlouch
9bc5da9780
Merge pull request #282 from kubespray/clean_docker_templates
...
clean conditions into docker templates
2016-06-02 22:00:31 +02:00
Smana
4a7d8c6fea
clean conditions into docker templates
2016-06-02 21:01:41 +02:00
Smaine Kahlouch
722aacb633
Merge pull request #272 from rustyrobot/fix-etcd-scale-up
...
Add scale-up for etcd cluster
2016-06-01 17:20:04 +02:00
Smaine Kahlouch
ab0581e114
Merge pull request #276 from mattymo/patch-1
...
Fix order in restart kubelet to fix systemd reload
2016-05-31 20:16:01 +02:00
mattymo
68808534b3
Fix order in restart kubelet to fix systemd reload
...
Systemd reload before reload kubelet was failing because its definition was before "restart kubelet". Its definition should be after the notify hook.
2016-05-31 20:09:49 +04:00
Evgeny L
0500f27db8
Scale-up functionality for etcd cluster
...
* Set ETCD_INITIAL_CLUSTER_STATE from `new` to `existing`,
because parameter `new` makes sense only on cluster assembly
stage.
* If cluster exists and current node is not a part
of the cluster, add it with command `etcdctl add member name url`.
Closes kubespray/kargo/#270
2016-05-31 18:23:46 +03:00
Smaine Kahlouch
cb92b30c25
Merge pull request #273 from kubespray/default_to_insecure_registry
...
example env allow insecure-registry
2016-05-28 21:14:14 +02:00
Paul Czarkowski
67147cf435
example env allow insecure-registry
...
Many use cases of k8s involve running a local
registry, chances are the person running this
will learn the hard way that they need to allow
insecure registry on the `kube_service_addresses`
network.
We should just default to settings this in
`inventory/group_vars/all.yml` to help reduce
potential friction for first time users.
2016-05-28 11:56:16 -05:00
Smaine Kahlouch
96a2439c38
Merge pull request #264 from rsmitty/issue-255
...
resolves coreos nodes not setting up docker proxies
2016-05-26 21:55:53 +02:00
Smaine Kahlouch
e8f97aa437
Merge pull request #268 from rsmitty/issue-265
...
provides initial docker options support
2016-05-26 21:14:32 +02:00
Spencer Smith
87757d4fcf
provides initial docker options support
2016-05-25 12:56:45 -04:00
Smaine Kahlouch
33de89b69f
Merge pull request #263 from rsmitty/issue-262
...
removed os restriction for coreos
2016-05-24 22:14:51 +02:00
Smaine Kahlouch
9e86f1672b
Merge pull request #266 from rsmitty/slack-update
...
Dropped a link for people to self-invite to slack channel
2016-05-24 22:04:49 +02:00
Spencer Smith
28aade3e06
cleaned up wording after a second read
2016-05-24 12:32:09 -04:00
Spencer Smith
35276de37e
Dropped a link for people to self-invite to slack channel
2016-05-24 12:29:34 -04:00
Spencer Smith
492218a3e1
resolves coreos nodes not setting up docker proxies
2016-05-24 12:11:24 -04:00
Spencer Smith
a740e521d2
removed os restriction for coreos
2016-05-24 12:03:16 -04:00
Smaine Kahlouch
bdc183114a
Merge pull request #261 from paulczar/meta_roles_yo
...
turn adduser/download roles into meta roles
2016-05-23 17:29:37 +02:00
Paul Czarkowski
7de87d958e
turn adduser/download roles into meta roles
...
This should make things a little more composable,
by making these roles meta roles that perform no
actions by default we allow each role to own its own
resources.
2016-05-22 17:25:52 -05:00
Smaine Kahlouch
ffce277c0c
Merge pull request #259 from paulczar/api_advertised_address
...
set `--advertise-address` for kube api-server
2016-05-22 21:40:21 +02:00
Paul Czarkowski
c226b4e5cb
fixes issue #258
...
Kubernetes API server has an option:
```
--advertise-address=<nil>: The IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster. If blank, the --bind-address will be used. If --bind-address is unspecified, the host's default interface will be used.
```
kargo does not set --bind-address, thus it binds to eth0, in vagrant and similar
environments this causes issues because nodes cannot talk to eachother over eth0.
This sets `--advertise-address` to `ip` if its set, otherwise the default behavior
of is persisted by using `ansible_default_ipv4.address`.
2016-05-22 13:48:16 -05:00
Smaine Kahlouch
094f4d02b8
Merge pull request #253 from paulczar/fix_vagrantfile
...
set vm box to be hashicorp hosted trusty
2016-05-21 09:28:33 +02:00
Paul Czarkowski
ba615ff94e
race condition in download role under vagrant
...
using a shared folder can cause race conditions for the download
role as it tries to download files on all the nodes to the same
shared path. This adds a flag to run the tasks in the download
role on just one node.
2016-05-20 17:04:38 -05:00
Paul Czarkowski
5240465f39
set vm box to be hashicorp hosted trusty
...
I accidently left in the old download URL for coreos
even after I switched the box name to be ubuntu, it
worked fine for me because I already had that box
locally so it didn't try to download. This should
resolve this by using the official bento/ubuntu-14.04
box which is a nice minimal image.
We also allow the default behaviour of sharing folder to VMs
By doing this we can stage our download files in a shared location
and speed up subsequent runs significantly.
Finally will create more verbose documentation.
2016-05-20 17:04:03 -05:00
Antoine Legrand
ef6a59bbd3
Update README.md
2016-05-18 12:14:07 +02:00
Smaine Kahlouch
cd123f7f24
Merge pull request #251 from davidreuss/patch-2
...
Use correct google ns for dns upstream
2016-05-17 13:41:30 +02:00
David Reuss
0984b23f0e
Use correct google ns for dns upstream
2016-05-17 13:19:13 +02:00
Smaine Kahlouch
d9dca20d7f
Merge pull request #247 from paulczar/check_certs_defaults
...
Fix issue with check_certs playbook
2016-05-16 08:55:27 +02:00
Paul Czarkowski
d8bebcd201
Fix issue with check_certs playbook
...
check_certs task "Check_certs | Set 'sync_certs' to true" was failing
due to the dict not existing, this sets defaults that allows the
correct behavior of the conditionals.
2016-05-15 17:15:59 -05:00
Smaine Kahlouch
f576d70b3c
Merge pull request #245 from kubespray/fix_flannel_deploy_213
...
fix flannel deployment, remove docker bridge before restarting
2016-05-13 19:54:07 +02:00
Smana
ae5ff890d4
fix flannel deployment, remove docker bridge before restarting
2016-05-13 18:10:00 +02:00
Smaine Kahlouch
24ee97d558
Merge pull request #244 from rsmitty/issue-219
...
Remove need to pre-create writeable dir on CoreOS
2016-05-13 14:07:26 +02:00
Spencer Smith
f949bfd46c
remove need for baking image to get writeable /opt/bin
2016-05-13 02:48:13 -07:00
Smaine Kahlouch
242e96d251
Merge pull request #230 from rsmitty/issue-229
...
Issue-229: Support Proxies in Docker Daemon
2016-05-12 21:25:53 +02:00
Spencer Smith
66d9a6ebbc
updated to use handlers
2016-05-12 12:18:38 -07:00
Smaine Kahlouch
4e28f1de4e
Merge pull request #240 from kubespray/ant31-chat-1
...
Update README.md
2016-05-12 20:31:18 +02:00
Spencer Smith
9b8a757526
missed a name update :)
2016-05-12 09:30:11 -07:00
Spencer Smith
a894a8c7bc
Merge branch 'master' into issue-229
2016-05-12 09:10:57 -07:00
Spencer Smith
962155e463
updated names and removed checks for rhel, as we already know we have systemd inside that play
2016-05-12 09:06:31 -07:00
Spencer Smith
c90c981bb2
updated to support all OSes using systemd
2016-05-12 09:03:11 -07:00
Antoine Legrand
04fe83daa0
Update README.md
2016-05-12 17:22:36 +02:00
Smaine Kahlouch
50d0ab2944
Merge pull request #237 from kubespray/upgrade_kubernetes_v1.2.4
...
upgrade k8s vers, and add a script for future upgrades
2016-05-12 16:14:06 +02:00
Smana
608e7dfab2
upgrade k8s vers, and add a script for future upgrades
2016-05-12 15:56:30 +02:00
Smaine Kahlouch
c6e3a8dbbd
Merge pull request #236 from kubespray/fix_gen_certs_234
...
fixes the certs issue when masters or not in the kube-node group
2016-05-12 10:23:10 +02:00
Smana
1884d89d3b
fixes the certs issue when masters or not in the kube-node group
2016-05-12 10:07:34 +02:00
Smaine Kahlouch
ed95f9ab81
Merge pull request #232 from rsmitty/issue-231
...
Issue 231: ensure ca.pem makes it to multi-masters
2016-05-11 21:24:04 +02:00
Spencer Smith
9f8466a186
ensure ALL certs are synced between masters
2016-05-11 10:09:13 -07:00
Smaine Kahlouch
8c869a2e3e
Merge pull request #235 from rsmitty/issue-233
...
Issue 233: Typo with sync_tokens vs. sync_certs
2016-05-11 18:43:18 +02:00
Spencer Smith
743ad0eb5c
s/sync_certs/sync_tokens
2016-05-11 09:38:26 -07:00
Spencer Smith
5253b3ec13
ensure ca.pem makes it to multi-masters
2016-05-11 09:06:08 -07:00
Spencer Smith
ebf8231c9a
only run if proxy variables are added
2016-05-10 15:53:32 -07:00
Spencer Smith
adceaf60e1
support proxies with docker on rhel
2016-05-10 15:49:27 -07:00
Smaine Kahlouch
96c63cc0b6
Merge pull request #227 from paulczar/vagrant
...
Add native Vagrant support
2016-05-09 11:47:07 +02:00
Paul Czarkowski
5f2fa6d76f
revert .gitignore for secrets
2016-05-08 23:46:35 -05:00
Paul Czarkowski
bd064e8094
fix flannel's cross vm networking for vagrant
...
* set flannel backend type to `host-gw`
* set flannel interface to be eth1 ip
2016-05-08 23:42:42 -05:00
Paul Czarkowski
8f4e879ca7
Add native Vagrant support
...
This allows you to simply run `vagrant up` to get a 3 node HA cluster.
* Creates a dynamic inventory and uses the inventory/group_vars/all.yml
* commented lines in inventory.example so that ansible doesn't try to use it.
* added requirements.txt to give easy way to install ansible/ipaddr
* added gitignore files to stop attempts to save unwated files
* changed `Check if kube-system exists` to `failed_when: false` instead of
`ignore_errors`
2016-05-08 10:17:11 -05:00
Smaine Kahlouch
a19ab91b1b
Merge pull request #225 from Smana/gen_secrets_on_first_master
...
generate secrets on first master
2016-05-07 22:00:00 +02:00
Smana
4f627baf71
generate secrets on first master
2016-05-07 21:08:29 +02:00
Smaine Kahlouch
3914d51a7e
Merge pull request #222 from kubespray/fix_test_api_auth
...
fix api auth issue for ci tests
2016-05-05 09:37:03 +02:00
Smana
bd6c12d686
fix api auth issue for ci tests
2016-05-05 09:00:02 +02:00
Smaine Kahlouch
9135c134ec
Merge pull request #221 from Smana/variable_for_root_api_pwd
...
use a variable for api's 'root' password
2016-05-04 18:13:38 +02:00
Smana
59d71740b1
use a variable for api's 'root' password
2016-05-04 16:49:25 +02:00
Antoine Legrand
078d27c0f1
Merge pull request #217 from davidreuss/patch-1
...
Pull correct variable for etcd initial variable
2016-04-29 14:41:38 +02:00
David Reuss
180f2d1fde
Pull correct variable for etcd initial variable
...
This shouldn't use the `inventory_hostname` variable, as that will just yield the same variable, but rather use the `host` which we're looping over.
2016-04-29 14:37:01 +02:00
Antoine Legrand
391b155a98
Merge pull request #216 from cmluciano/cml/fixubuntu
...
Fix ansible dict error on Ubuntu 14.04
2016-04-25 14:54:17 +02:00
Christopher M Luciano
47982ea21c
Use ansible array format instead of dot-notation.
...
This fixes the ansible error ```'dict object' has no attribute
'ansible_default_ipv4'"}```. Closes #215
2016-04-25 08:45:58 -04:00
Smaine Kahlouch
d0e31f9457
Merge pull request #209 from kubespray/upgrade_weave_v1.5.0
...
Upgrade weave v1.5.0 with CNI
2016-04-20 19:44:55 +02:00
Smana
7803ae6acb
enabling travis tests for weave
2016-04-20 17:23:11 +02:00
Smana
97de82bbcc
upgrade weave to v1.5.0 with cni
2016-04-20 17:09:09 +02:00
Smaine Kahlouch
bd1d49fabd
Merge pull request #207 from kubespray/upgrade_calico_v0.19.0
...
upgrade calico v0.19.0, calico-cni v1.2.1
2016-04-19 19:22:07 +02:00
Smana
928bbeaf0f
upgrade calico v0.19.0, calico-cni v1.2.1
2016-04-19 18:28:45 +02:00
Smaine Kahlouch
343a26434d
Merge pull request #203 from zehicle/flagfixes12
...
Add code to detect if epel is already installed and skip it if it is
2016-04-13 09:48:12 +02:00
Rob Hirschfeld
107da007b1
Merge branch 'master' into flagfixes12
2016-04-12 18:44:06 -07:00
Rob Hirschfeld
fb980e4542
missed tick in message
...
cosmetic
2016-04-12 18:43:31 -07:00
Rob Hirschfeld
f12ad6a56f
consolidate EPEL change into a single task
...
as per @smana request
2016-04-12 18:41:46 -07:00
Smaine Kahlouch
5691086ba2
Merge pull request #164 from oneswig/master
...
Provide a non-default hostname for CoreOS systems.
2016-04-12 17:18:33 +02:00
Rob Hirschfeld
831a54e9b7
add code to detect if epel is already installed and skip it if it is
...
add option for generic
2016-04-11 16:44:56 -05:00
Smaine Kahlouch
fd64f4d2a0
Merge pull request #201 from Smana/upgrade_kubernetes_v1.2.2
...
Kubernetes upgrade to 1.2.2
2016-04-11 16:17:09 +02:00
Smana
3cd89bed45
Kubernetes upgrade to 1.2.2
2016-04-11 12:19:09 +02:00
Smaine Kahlouch
5b2568adf1
Merge pull request #200 from kubespray/docker_install_on_rhel7
...
Fix docker install on rhel7
2016-04-11 11:54:14 +02:00
Smana
48a85ce8f8
use docker repository to install on CentOS
2016-04-11 11:17:14 +02:00
Smana
936927a54f
Fix docker install on rhel7
2016-04-10 22:08:13 +02:00
Smaine Kahlouch
8418daa544
Merge pull request #198 from Smana/add_nodes
...
fix add nodes to the cluster
2016-04-10 11:35:00 +02:00
Smana
5c22133492
fix add nodes to the cluster
2016-04-08 07:45:39 +02:00
Smaine Kahlouch
e69b9f6dcb
Merge pull request #194 from kubespray/upgrade_kubernetes_v1.2.1
...
Upgrade kubernetes v1.2.1
2016-04-05 15:28:04 +02:00
Smana
b03093be73
update kubectl bash completion
...
change hyperkube image repository
2016-04-05 15:27:06 +02:00
Smana
bc44d5deb3
upgrade to kubernetes v1.2.1
2016-04-05 12:59:18 +02:00
Smaine Kahlouch
8ab86ac49d
Merge pull request #193 from kubespray/remove_deprecation_warns
...
remove deprecation warns and update doc
2016-04-04 10:54:56 +02:00
Smana
850b7466cd
remove deprecation warns and update doc
2016-04-04 10:14:56 +02:00
Smaine Kahlouch
652cbedee5
Merge pull request #192 from oneswig/coreos-fixes
...
Coreos fixes
2016-04-03 09:32:00 +02:00
Stig Telfer
bf96b92def
Merge branch 'master' into coreos-fixes
2016-04-02 21:01:28 +01:00
Stig Telfer
ab21f4d169
Define empty default objects for docker package management.
...
On CoreOS where there is no package management, perform zero-trip
loops instead of throwing an exception for iterating over a member
of an undefined variable.
2016-04-02 20:55:17 +01:00
Stig Telfer
64a39fdb86
Use var for bin dir instead of assuming /usr/local/bin
...
On CoreOS the binaries are not installed in /usr/local/bin.
2016-04-02 20:53:33 +01:00
Smaine Kahlouch
2192bcccbd
Merge pull request #191 from kubespray/add_certs
...
Add kubernetes.default.svc in certs dns
2016-04-01 15:13:29 +02:00
ant31
7237a925eb
Add kubernetes.default.svc in certs dns
2016-04-01 12:40:01 +02:00
Smaine Kahlouch
34ed6e1a08
Merge pull request #190 from teutostack/automatic-cinder-provisioning
...
Implemented Dynamic Provisioning of PersistentVolumes with cinder
2016-04-01 09:47:29 +02:00
teuto.net Netzdienste GmbH
8cbdf73eba
Changed path to hosts ssl certs from /usr/share/ca-certificates to /etc/ssl/certs/ which fixes https problems in kube-controller-manager and kube-apiserver ( #189 ) caused by the lack of certificates on debian and redhat based systems.
2016-04-01 09:34:28 +02:00
teuto.net Netzdienste GmbH
624a964cda
Implemented Dynamic Provisioning of PersistentVolumes with cinder
...
When kubespray is deployed on OpenStack, the kube-controller-manager is now aware of the cluster and can create new cinder volumes automatically if the PersistentVolumeClaims are annotated accordingly.
Note that this is an alpha feature of kubernetes 1.2
2016-03-31 14:38:46 +02:00
Smaine Kahlouch
a14dfe74e1
Merge pull request #188 from teutostack/warnings-removal
...
Fixing deprecation warnings regarding bare variables and apt
2016-03-30 11:57:57 +02:00
Smaine Kahlouch
f2e822810a
Merge pull request #187 from teutostack/openstack-integration
...
Implemented cloud-provider integration for OpenStack
2016-03-30 11:55:53 +02:00
teuto.net Netzdienste GmbH
a192111e6a
Reverted deletion of "changed_when: False" for Task "Install python-dnf for latest RedHat versions". Deleted "changed_when: False" on Task "Install latest version of python-apt for Debian distribs" to get notified when kubespray has installed a new package version.
2016-03-30 11:21:36 +02:00
teuto.net Netzdienste GmbH
4271dd6645
using apt module instead of command module to install python-apt
2016-03-30 10:39:33 +02:00
teuto.net Netzdienste GmbH
457ed11b49
fixed deprecation warnings regarding bare variables
2016-03-30 10:23:43 +02:00
teuto.net Netzdienste GmbH
9f8da6c225
Implemented cloud-provider integration for OpenStack.
...
Currently kubespray does not install kubernetes in a way that allows cinder volumes to be used. This commit provides the necessary cloud configuration file and configures kubelet and kube-apiserver to use it.
2016-03-29 15:17:22 +02:00
Smaine Kahlouch
ed9a521d6d
Merge pull request #185 from Smana/choose_cloud_provider
...
choose between gce and aws cloud providers
2016-03-24 16:57:40 +01:00
Smaine Kahlouch
68fafd030d
choose between gce and aws cloud providers
2016-03-23 17:27:06 +01:00
Smaine Kahlouch
f49926413a
Merge pull request #176 from kubespray/kubernetes-v1.2.0
...
Kubernetes v1.2.0
2016-03-22 13:52:37 +01:00
Smaine Kahlouch
e8aec5f4f0
Don't call the apiserver when the server is master only
2016-03-22 13:25:41 +01:00
Smaine Kahlouch
c51ed4bbb7
use master election option instead of podmaster
2016-03-21 22:25:09 +01:00
Smaine Kahlouch
ba4ad51c26
add aufs-tools package for debian
2016-03-21 17:25:14 +01:00
Antoine Legrand
785b84fd43
Upgrade to docker 1.10.3
2016-03-21 16:54:14 +01:00
Antoine Legrand
15ce66b2f5
Kubernetes 1.2.0
2016-03-21 16:54:14 +01:00
Smaine Kahlouch
9949c2b34e
Merge pull request #181 from Smana/fix_dnsmasq_as_ds
...
Dnsmasq runs on all nodes
2016-03-21 11:38:04 +01:00
Smaine Kahlouch
7e6d7caf4b
Dnsmasq runs on all nodes
2016-03-21 11:37:35 +01:00
Smaine Kahlouch
48c64a1f72
Merge pull request #179 from kubespray/dnsmasq_ds
...
Dnsmasq ds
2016-03-20 00:08:33 +01:00
ant31
6297e5ea93
Use dnsmasq inside pods
2016-03-19 23:41:27 +01:00
Smaine Kahlouch
0c315e0ff4
Merge pull request #174 from jcsirot/jenkins_pipeline
...
Move common groovy test code for jenkins into git repo and add test r…
2016-03-15 17:30:09 +01:00
Smaine Kahlouch
b7fcabea7b
Merge pull request #175 from Smana/update_ansible_galaxy
...
update requirements.yml with the new gitlab url
2016-03-15 16:16:39 +01:00
Smaine Kahlouch
999141f0fd
update requirements.yml with the new gitlab url
2016-03-15 16:15:23 +01:00
Jean-Christophe Sirot
f5f6e44369
Move common groovy test code for jenkins into git repo and add test result matrix
2016-03-10 22:45:54 +01:00
Smaine Kahlouch
0c2183c10a
Merge pull request #173 from Smana/redirect_to_docs
...
redirecting to new doc page
2016-03-07 16:21:25 +01:00
Smana
cd38ecc378
redirecting to new doc page
2016-03-07 16:15:40 +01:00
Antoine Legrand
1771f18437
Merge pull request #171 from kubespray/uploads_bin
...
Uploads bin
2016-03-04 19:33:56 +01:00
Antoine Legrand
72807965a8
Upload files to a separate storage
2016-03-04 17:39:02 +01:00
Antoine Legrand
611c7744a1
Remove submodules
2016-03-04 16:14:01 +01:00
Antoine Legrand
9baf9e569b
Merge pull request #169 from kubespray/flannel_backend_option
...
flannel backend type option
2016-03-04 16:08:38 +01:00
Smana
ede3aad2ab
flannel backend type option
2016-03-04 14:55:04 +01:00
Smaine Kahlouch
143a75ccde
Merge pull request #167 from kubespray/upgrade_calico_v0.17.0
...
upgrade calicoctl to v0.17.0
2016-03-02 11:56:44 +01:00
Smana
62218c1497
upgrade calicoctl to v0.17.0
2016-03-02 10:42:31 +01:00
Antoine Legrand
8a238cda3d
Create LICENSE
2016-03-01 15:37:01 +01:00
Smaine Kahlouch
706d8c7968
Merge pull request #165 from kubespray/option_proxy_mode
...
adding option --proxy-mode for kubeproxy
2016-02-29 11:42:18 +01:00
Smana
cb3cc6f523
adding option --proxy-mode for kubeproxy
2016-02-29 11:41:08 +01:00
Smaine Kahlouch
87fd8415da
Merge pull request #163 from Smana/upgrade_kube_v1.1.8
...
Upgrade kuberenetes to v1.1.8
2016-02-26 23:25:00 +01:00
Stig Telfer
edcd5bf67f
Provide a non-default hostname for CoreOS systems.
...
A freshly-installed CoreOS system does not always have a hostname configured.
This causes problems for etcd and BGP mesh configuration for Calico.
Assign the Ansible inventory name as hostname as part of CoreOS bootstrap,
if the hostname is the default ("localhost").
2016-02-26 13:43:07 +00:00
Smana
9528caa1d7
Upgrade kuberenetes to v1.1.8
2016-02-25 17:35:38 +01:00
Smaine Kahlouch
3f32e5973f
Merge pull request #158 from Smana/calico_nat_outgoing_opt
...
calico: enabling nat outgoing by default
2016-02-24 12:11:34 +01:00
Antoine Legrand
a17e466a29
Merge pull request #162 from oneswig/master
...
On CoreOS, /etc/hosts does not always exist.
2016-02-23 14:27:07 +01:00
Stig Telfer
ff03c82151
On CoreOS, /etc/hosts does not always exist.
2016-02-23 12:04:58 +00:00
Smana
152c409022
calico: enabling nat outgoing by default
2016-02-21 17:11:49 +01:00
Antoine Legrand
a46d4efba6
Merge pull request #156 from Smana/coreos_support
...
CoreOS support (Calico, Flannel, Weave)
2016-02-21 14:10:14 +01:00
Smana
fca384e24c
first version of CoreOS on GCE
...
Please enter the commit message for your changes. Lines starting
2016-02-21 00:06:36 +01:00
Antoine Legrand
ec64eda2bc
Merge pull request #152 from rsmitty/issue-151
...
confirmed working change to mktemp command
2016-02-18 22:12:38 +01:00
Spencer Smith
20adb604cc
confirmed working change to mktemp command
2016-02-18 15:56:10 -05:00
Antoine Legrand
57a1ce28c4
Merge pull request #150 from Smana/update_hyperkube_version
...
update hyperkube version
2016-02-18 16:40:21 +01:00
Smana
39caf94790
update hyperkube version
2016-02-18 16:38:25 +01:00
Smaine Kahlouch
ba4c89a12e
Merge pull request #149 from Smana/upgrade_calico_etcd
...
Upgrade Calico and etcd
2016-02-15 15:31:32 +01:00
Smana
b013b125bc
Upgrade Calico and etcd
2016-02-15 12:41:27 +01:00
Smaine Kahlouch
e786010584
Merge pull request #147 from kubespray/upgrade_kube_1.1.7
...
upgrade kubernetes to 1.1.7
2016-02-15 12:12:17 +01:00
Smana
01397678df
upgrade kubernetes to 1.1.7
2016-02-15 10:57:45 +01:00
Antoine Legrand
fae77970ac
Allow to fail calico/trusty
2016-02-13 20:55:10 +01:00
Antoine Legrand
e737ed8105
Merge pull request #146 from kubespray/rollback_docker_1.9
...
Rollback docker 1.9
2016-02-13 18:34:55 +01:00
Antoine Legrand
b2dd01a0b0
Merge pull request #145 from jcsirot/jenkins
...
Jenkins
2016-02-13 18:03:29 +01:00
Jean-Christophe Sirot
323ff78206
Update playbooks for automatic deployment tests
2016-02-13 17:57:10 +01:00
Smana
8659693c76
fix testcases
2016-02-13 17:29:41 +01:00
Smana
c3a8f379e8
rollback to docker 1.9
2016-02-13 15:38:42 +01:00
Smaine Kahlouch
ad18f229c5
Merge pull request #143 from Smana/tests_kubectl_path
...
change tests, full path of kubectl binary
2016-02-13 14:58:46 +01:00
Smana
2feac2956a
change tests, full path of kubectl binary
2016-02-13 14:47:53 +01:00
Antoine Legrand
60d6195a9e
Merge pull request #142 from kubespray/use_ansible_service_mgr
...
use ansible_service_mgr to detect init system
2016-02-13 14:30:04 +01:00
Smana
c0cf506fb4
install epel-release on RHEL7
2016-02-13 13:15:08 +01:00
Smana
a649aa8b7e
use ansible_service_mgr to detect init system
2016-02-13 11:46:53 +01:00
Antoine Legrand
7fef64dacd
Merge pull request #140 from kubespray/secret_from_localhost
...
generate secrets on deployment machine
2016-02-13 07:27:56 +01:00
Smana
91fca69aa0
generate secrets on deployment machine
...
test travis with sudo=true instead of required
2016-02-13 06:51:54 +01:00
Antoine Legrand
3fef552978
Docker 1.10.1
2016-02-13 06:19:47 +01:00
Smaine Kahlouch
50364ab571
Merge pull request #141 from ntfrnzn/pin-docker-version
...
pin docker versions to 1.9 or earlier
2016-02-13 00:07:42 +01:00
ntfrnzn
a4e32c748a
pin docker version actually
2016-02-12 14:45:09 -08:00
ntfrnzn
c48bc34a34
pin docker versions to 1.9 or earlier
2016-02-12 14:40:13 -08:00
Antoine Legrand
451ee18c4a
Merge pull request #138 from kubespray/integration_tests
...
Integration tests
2016-02-11 14:00:09 +01:00
ant31
4ee3699933
Add weave to tests
2016-02-11 10:57:54 +01:00
ant31
caa2555b1d
Add complete test integration
2016-02-10 22:58:57 +01:00
Smaine Kahlouch
09851621de
Merge pull request #133 from Smana/weave_network_plugin
...
weave network plugin
2016-02-10 18:39:48 +01:00
Smaine Kahlouch
05c8a29688
Merge branch 'master' into weave_network_plugin
2016-02-10 18:33:48 +01:00
Smana
793d665db4
specify weave version
2016-02-10 18:19:03 +01:00
Antoine Legrand
50da691d45
Merge pull request #134 from rackn/kubeproxy-bind-local
...
Force kube-proxy to bind to local address
2016-02-10 18:05:50 +01:00
Greg Althaus
6f1fe0cda2
Force kube-proxy to bind to local address
2016-02-10 10:53:22 -06:00
Smana
ab007e4ab8
weave network plugin
2016-02-09 17:55:12 +01:00
Smaine Kahlouch
03dd43e97d
Merge pull request #132 from Smana/net_plugins_distinct_roles
...
split network plugins into distinct roles
2016-02-09 16:10:15 +01:00
Smaine Kahlouch
4f92417a5d
split network plugins into distinct roles
2016-02-09 11:42:00 +01:00
Antoine Legrand
3016ab79cb
Merge pull request #129 from Smana/fedora_23_compat
...
fix some issues with fedora 23 and dnf
2016-02-04 12:11:51 +01:00
Smana
b2d6626363
fix some issues with fedora 23 and dnf
2016-02-03 21:26:49 +01:00
Smaine Kahlouch
98e2d6957a
Merge pull request #128 from ansibl8s/fix_calico_initd_ip
...
calico uses --ip option
2016-02-01 16:32:19 +01:00
Smaine Kahlouch
779299de15
calico uses --ip option
2016-02-01 15:53:23 +01:00
Antoine Legrand
bf5582b01f
Merge pull request #127 from ansibl8s/increase_timeout
...
Increase liveness timeout
2016-02-01 14:53:48 +01:00
Antoine Legrand
7e94d31c8b
Merge branch 'master' into increase_timeout
2016-02-01 14:32:25 +01:00
Antoine Legrand
896f59267a
Merge pull request #126 from ansibl8s/calico_nat_outgoing
...
add option '--nat-outgoing' for calico on clouds
2016-02-01 14:32:13 +01:00
ant31
21b0a3649d
Increase liveness timeout
2016-02-01 13:41:49 +01:00
Smaine Kahlouch
3bb6066558
add option '--nat-outgoing' for calico on clouds
2016-02-01 10:47:34 +01:00
Smaine Kahlouch
64be24dd20
Merge pull request #123 from Smana/install_epel_rhel
...
install epel release for rhel
2016-02-01 10:46:10 +01:00
Antoine Legrand
f8ffe53709
Merge pull request #124 from rackn/centos-fixes
...
Update docker for CentOS issues in AWS and general variables
2016-01-31 22:33:02 +01:00
Smaine Kahlouch
4d3f6c6533
install epel release for rhel
...
install required packages before common
roles/kubernetes/preinstall/tasks/main.yml
2016-01-31 22:12:34 +01:00
Greg Althaus
6163fe166e
Update docker for CentOS issues in AWS and general
...
variables.
1. AWS has issues with ext4 (use xfs instead for CentOS only)
2. Make sure all the centos config files are include in the systemd config
3. Make sure that network options are set in the correct file by os family
This allows downstream items like opencontrail and others change variables
in expected locations.
2016-01-30 21:46:32 -06:00
Antoine Legrand
6eff3f0fce
Merge pull request #120 from Smana/fix_etcd_initd
...
etcd initd startup command fix
2016-01-30 22:42:13 +01:00
Smaine Kahlouch
6358cf788f
etcd initd startup command fix
2016-01-30 22:31:41 +01:00
Antoine Legrand
6915278f65
Merge pull request #118 from ansibl8s/calico
...
Change calico condition --ipip
2016-01-29 15:51:17 +01:00
Antoine Legrand
b33713da4a
Change calico condition --ipip
2016-01-29 14:07:21 +01:00
Antoine Legrand
83c1bd516d
Update calico.yml
2016-01-29 12:23:29 +01:00
Antoine Legrand
5d24cabc83
Merge pull request #116 from ansibl8s/calico_on_cloud
...
Add --ipip to calico if on cloud_proivder
2016-01-28 20:28:15 +01:00
Antoine Legrand
7127e6de54
Add --ipip to calico if on cloud_proivder
2016-01-28 20:13:50 +01:00
Antoine Legrand
cea8f1d381
Merge pull request #109 from rackn/awsify
...
Add variables and defaults for multiple types of ip addresses.
2016-01-28 14:47:27 +01:00
Greg Althaus
bedcca922c
Add variables and defaults for multiple types of ip addresses.
...
Each node can have 3 IPs.
1. ansible_default_ip4 - whatever ansible things is the first IPv4 address
usually with the default gw.
2. ip - An address to use on the local node to bind listeners and do local
communication. For example, Vagrant boxes have a first address that is the
NAT bridge and is common for all nodes. The second address/interface should
be used.
3. access_ip - An address to use for node-to-node access. This is assumed to
be used by other nodes to access the node and may not be actually assigned
on the node. For example, AWS public ip that is not assigned to node.
This updates the places addresses are used to use either ip or access_ip and walk
up the list to find an address.
2016-01-27 16:05:39 -06:00
Smaine Kahlouch
faf50ea698
Merge pull request #111 from Smana/flannel_pods_subnet
...
use 'kube_pods_subnet' var for flannel conf
2016-01-27 22:14:20 +01:00
Smaine Kahlouch
a323335d36
use 'kube_pods_subnet' var for flannel conf
2016-01-27 22:00:12 +01:00
Antoine Legrand
f15dda0248
Merge pull request #110 from Smana/updatedoc
...
update submodules and documentation
2016-01-27 17:42:52 +01:00
Smaine Kahlouch
8d71d56809
update submodules and documentation
2016-01-27 17:02:41 +01:00
Antoine Legrand
cf472a6b4c
Merge pull request #107 from ansibl8s/race_condition_api_master
...
Slowdown apimaster restart
2016-01-26 18:00:47 +01:00
ant31
fd6ac61afc
Use local etcd/etcdproxy for calico
2016-01-26 17:28:30 +01:00
Antoine Legrand
16a1926f94
Drop ansible 1.9 support
2016-01-26 15:31:11 +01:00
Antoine Legrand
839974bad0
Merge pull request #108 from ansibl8s/set_perms_on_unarchive
...
Set perms on unarchive
2016-01-26 15:25:28 +01:00
Antoine Legrand
4566d60e6f
Slowdown apimaster restart
2016-01-26 15:23:16 +01:00
Antoine Legrand
49a7278563
Set perms on unarchive
2016-01-26 12:17:33 +01:00
Antoine Legrand
8676f8761f
Merge pull request #99 from ansibl8s/symlink-dnsmasq-conf
...
Symlink dnsmasq conf
2016-01-26 00:44:13 +01:00
Antoine Legrand
b9781fa7c2
Symlink dnsmasq conf
2016-01-26 00:30:29 +01:00
Antoine Legrand
08052f60da
Merge pull request #105 from ansibl8s/fix_handlers
...
fix some handlers
2016-01-25 23:00:07 +01:00
Antoine Legrand
44230a4e86
Merge pull request #101 from galthaus/patch-1
...
Fix download reference in cluster.ml
2016-01-25 22:56:48 +01:00
Smaine Kahlouch
90ffb8489a
fix some handlers
2016-01-25 22:49:24 +01:00
Antoine Legrand
238f6e8a0b
Remove apt-get update
2016-01-25 22:46:20 +01:00
Antoine Legrand
ef7cf3bf11
Merge pull request #103 from rackn/perm-fix
...
Force owner and permissions for get_url retrieved files.
2016-01-25 22:01:57 +01:00
Greg Althaus
e7d5b7af67
Force owner and permissions for get_url retrieved
...
files. get_url doesn't honor owner and mode is spotty.
2016-01-25 13:30:48 -06:00
Smaine Kahlouch
359e55f6e4
Merge pull request #100 from rackn/cache-update-centos
...
Need to use separate stanzas for each repo because the
2016-01-25 19:00:57 +01:00
Greg Althaus
dd29c8064f
Fix download reference in cluster.ml
2016-01-25 11:23:55 -06:00
Greg Althaus
c7bd2a2a1e
Need to use separate stanzas for each repo because the
...
args are different. Sigh.
2016-01-25 11:16:56 -06:00
Smaine Kahlouch
87fa167efa
Merge pull request #95 from Smana/fix_ha_apiserver
...
workaround_ha_apiserver
2016-01-25 13:01:03 +01:00
Smaine Kahlouch
baaa6efc2b
workaround_ha_apiserver
2016-01-25 12:07:32 +01:00
Antoine Legrand
cece179bd4
Merge pull request #97 from ansibl8s/systemd_reload
...
Fix systemd reload and calico unit
2016-01-25 11:01:11 +01:00
ant31
56b92812fa
Fix systemd reload and calico unit
2016-01-25 10:54:07 +01:00
Antoine Legrand
2cbbcee351
Merge pull request #98 from ansibl8s/setup_cache
...
Use update_cache when possible
2016-01-25 02:12:19 +01:00
ant31
f5508b1794
Use update_cache when possible
2016-01-25 02:06:34 +01:00
Antoine Legrand
8f7d552401
Merge pull request #93 from ansibl8s/flannel-info
...
Add flannel vars to enable vagrant and amazon environments
2016-01-24 16:46:04 +01:00
Greg Althaus
bcd6ecb7fb
Add flannel vars to enable vagrant and amazon environments
2016-01-24 16:18:35 +01:00
Antoine Legrand
65666fc28a
Merge pull request #90 from ansibl8s/add_users_role
...
AddUser Role
2016-01-24 16:17:24 +01:00
Antoine Legrand
b4734c280a
Merge branch 'master' into add_users_role
2016-01-24 15:58:10 +01:00
Antoine Legrand
dd61f685b8
AddUser Role
2016-01-24 11:54:34 +01:00
Antoine Legrand
641ce3358a
Merge pull request #91 from Smana/rsync_instead_of_copy
...
use rsync instead of cp
2016-01-23 23:38:42 +01:00
Smaine Kahlouch
4984b57aa2
use rsync instead of command
2016-01-23 18:26:07 +01:00
Smaine Kahlouch
87d8d87c6e
Merge pull request #87 from Smana/apiserver_on_host
...
Apiserver on host
2016-01-23 17:46:23 +01:00
Smaine Kahlouch
283c4169ac
run apiserver as a service
...
reorder master handlers
typo for sysvinit
2016-01-23 14:21:04 +01:00
Smaine Kahlouch
d5f11b2442
Merge pull request #88 from Smana/complete_remove_downloader
...
missing commits for the PR #86
2016-01-22 17:25:12 +01:00
Smaine Kahlouch
5edc81c627
moving kube-cert group into group_vars
2016-01-22 17:18:45 +01:00
Smaine Kahlouch
391413f7e7
missing commits for the PR #86
2016-01-22 17:10:31 +01:00
Smaine Kahlouch
c05c60a5d2
Merge pull request #86 from ansibl8s/remove_downloader
...
Remove downloader host
2016-01-22 17:04:54 +01:00
Smaine Kahlouch
87b42e34e0
create kube-cert group task
2016-01-22 16:51:54 +01:00
Smaine Kahlouch
be0bec9eab
add kube-cert group
2016-01-22 16:46:06 +01:00
Smaine Kahlouch
cb59559835
use command instead of synchronize
2016-01-22 16:37:07 +01:00
Antoine Legrand
078b67c50f
Remove downloader host
2016-01-22 09:59:39 +01:00
Antoine Legrand
e95c4739f5
Merge pull request #82 from rackn/etcd-sync
...
Fix etcd synchronize to other nodes from the downloader
2016-01-21 20:39:52 +01:00
Greg Althaus
32877bdc7b
Merge branch 'master' into etcd-sync
2016-01-21 13:13:58 -06:00
Antoine Legrand
5e3af86c26
Merge pull request #84 from rackn/init-system-fix
...
Test for a systemd service that should be up.
2016-01-21 20:07:47 +01:00
Greg Althaus
ec1073def8
Test for a systemd service that should be up.
2016-01-21 11:35:15 -06:00
Greg Althaus
28e530e005
Fix etcd synchronize to other nodes from the downloader
2016-01-21 11:21:25 -06:00
Smaine Kahlouch
9e9aba4e3a
Merge pull request #79 from Smana/gitinfo
...
script which gives info about the deployment state
2016-01-21 13:49:11 +01:00
Smaine Kahlouch
de038530ef
don't run gitinfos by default
2016-01-21 13:41:01 +01:00
Smaine Kahlouch
337977e868
script which gives info about the deployment state
...
fix script location
2016-01-21 13:41:01 +01:00
Smaine Kahlouch
1c2bdbacb1
Merge pull request #72 from Smana/etcd_on_host
...
etcd directly in host
2016-01-21 13:20:05 +01:00
Smaine Kahlouch
9715962356
etcd directly in host
...
fix etcd configuration for nodes
fix wrong calico checksums
using a var name etcd_bin_dir
fix etcd handlers for sysvinit
using a var name etcd_bin_dir
sysvinit script
review etcd configuration
2016-01-21 11:36:11 +01:00
Smaine Kahlouch
5afbe181ce
Merge pull request #78 from Smana/conf_etc-hosts_preinstall
...
move /etc/hosts configuration in 'preinstall' role
2016-01-20 19:02:03 +01:00
Smaine Kahlouch
a5094f2a6a
move /etc/hosts configuration in 'preinstall' role
2016-01-20 17:37:23 +01:00
Antoine Legrand
9156d1ecfd
Merge pull request #76 from rackn/dns-ip
...
Use IP is specified, otherwise use the ansible discovered address.
2016-01-20 15:46:27 +01:00
Greg Althaus
fe5ec398bf
Use IP is specified, otherwise use the ansible discovered address.
...
This fixes cases for use in Vagrant environments.
2016-01-20 08:34:39 -06:00
Antoine Legrand
babf42f03a
Merge pull request #71 from ansibl8s/add_set_remote_user
...
Add set remote user
2016-01-19 22:20:31 +01:00
Antoine Legrand
859f6322a0
Merge branch 'master' into add_set_remote_user
2016-01-19 21:08:52 +01:00
Smaine Kahlouch
815c5fa43c
Merge pull request #74 from rackn/master
...
run_once only works if master[0] is first in inventory list of all nodes
2016-01-19 20:48:42 +01:00
Greg Althaus
10b2466d82
run_once only works if master[0] is first in inventory list
...
of all nodes.
2016-01-19 13:10:54 -06:00
Antoine Legrand
f68d8f3757
Add seT_remote_user in synchronize
2016-01-19 14:20:05 +01:00
Antoine Legrand
9b083b62cf
Rename tasks
2016-01-19 14:20:05 +01:00
Smaine Kahlouch
59614fc60d
Merge pull request #70 from Smana/localhost_dnsmasq
...
Localhost dnsmasq
2016-01-19 14:01:05 +01:00
Smaine Kahlouch
b54af6b42f
reduce dns timeout
2016-01-19 13:49:33 +01:00
Smaine Kahlouch
7cab7e5fef
restarting kubelet is sometimes required after docker restart
2016-01-19 13:47:07 +01:00
Smaine Kahlouch
4c5735cef8
configure dnsmasq to listen on localhost only
2016-01-19 13:34:30 +01:00
Smaine Kahlouch
58e1db6aae
update kubedns submodule
2016-01-19 13:32:53 +01:00
Smaine Kahlouch
63ae6ba5b5
dnsmasq runs on all nodes
2016-01-19 10:31:47 +01:00
Smaine Kahlouch
f58b4d3dd6
dnsmasq listens on localhost
2016-01-19 10:29:33 +01:00
Smaine Kahlouch
d3a8584212
add timeout options to resolv.conf
2016-01-19 10:18:53 +01:00
Antoine Legrand
51f1ae1e9e
Merge pull request #67 from ansibl8s/v1.1.4
...
Change hyperkube repo
2016-01-18 17:32:05 +01:00
ant31
4271126bae
Change hyperkube repo
2016-01-18 17:17:08 +01:00
Smaine Kahlouch
049f5015c1
upgrade hyperkube image version
2016-01-18 16:55:57 +01:00
Smaine Kahlouch
6ab671c88b
update memcached submodule
2016-01-18 16:25:01 +01:00
Smaine Kahlouch
d73ac90acf
udpate k8s-pgbouncer submodule
2016-01-18 11:58:12 +01:00
Smaine Kahlouch
adf6e2f7b1
update postgres submodule
2016-01-18 11:44:33 +01:00
Smaine Kahlouch
fb0803cf4c
README : update versions
2016-01-17 21:31:38 +01:00
Smaine Kahlouch
806834a6e9
upgrade kubernetes to 1.1.4 and calico to 0.14.0
2016-01-17 21:30:11 +01:00
Smaine Kahlouch
8415634016
use google hyperkube image
2016-01-16 22:55:49 +01:00
Antoine Legrand
319f687ced
Merge pull request #62 from ansibl8s/flannel
...
Flannel running as pod
2016-01-15 13:13:56 +01:00
Smaine Kahlouch
8127e8f8e8
Flannel running as pod
2016-01-15 13:03:27 +01:00
Smaine Kahlouch
dd46cc64a4
README : Networking title
2016-01-15 12:18:26 +01:00
Smaine Kahlouch
2d5862a94d
README : typo
2016-01-15 12:18:21 +01:00
Smaine Kahlouch
3d45a81006
README: ansible basics docs link
2016-01-15 12:18:13 +01:00
Smaine Kahlouch
51a0996087
fix regexp for resolv.conf
2016-01-15 12:18:03 +01:00
Smaine Kahlouch
80ac2ec6fc
update README
2016-01-15 12:17:28 +01:00
ant31
5d61b5e813
Fix namespace
2016-01-14 16:22:37 +01:00
ant31
b769636435
Ansible 2.0
2016-01-13 16:40:24 +01:00
Smaine Kahlouch
af8f394714
update README, local connection
2016-01-08 16:04:17 +01:00
Smaine Kahlouch
eab2cec0ad
fix kubectl perms
2016-01-08 16:02:40 +01:00
Smaine Kahlouch
0b17a4c00f
Merge pull request #45 from jcsirot/fix-calico-systemd
...
Fix calico with systemd
2016-01-08 11:34:58 +01:00
ant31
f49aa90bf7
fix synchronize pull mode
2016-01-08 11:32:06 +01:00
Jean-Christophe Sirot
6f9148e994
Fix calico with systemd
2016-01-08 10:32:43 +01:00
Antoine Legrand
7c8e9dbe00
Update README.md
2016-01-08 00:36:06 +01:00
Antoine Legrand
df3d0bcc21
Build status
2016-01-08 00:20:31 +01:00
Antoine Legrand
7913d62749
Merge pull request #44 from ansibl8s/travis
...
Travis tests
2016-01-07 23:46:02 +01:00
Smaine Kahlouch
d5320961e9
enforce user root when sudo is used
2016-01-05 15:33:23 +01:00
ant31
9c461e1018
Use inline update for resolv.conf
2016-01-05 12:31:49 +01:00
ant31
9a03249446
Add travis tests
2016-01-05 12:31:49 +01:00
Smaine Kahlouch
4e015dd3f1
add requirement python-netaddr
2016-01-04 17:06:26 +01:00
Smaine Kahlouch
6f53269ce3
Merge pull request #40 from ansibl8s/common
...
Common
2016-01-04 17:01:08 +01:00
Smaine Kahlouch
e356b2de4f
Updated README
2016-01-04 17:00:40 +01:00
ant31
8fa0110e28
Remove local dep. downloader
2016-01-04 16:10:29 +01:00
Smaine Kahlouch
2a08f7bc0a
inventory example, localhost for downloader
2016-01-04 14:54:30 +01:00
Smaine Kahlouch
99d16913d3
use bin_dir var in init scripts
2016-01-04 14:35:01 +01:00
Smaine Kahlouch
d172457504
sysvinit scripts
2016-01-04 14:30:37 +01:00
Smaine Kahlouch
6103d673b7
New calico's configuration
2016-01-04 14:30:37 +01:00
Smaine Kahlouch
29bf90a858
review handlers for sysvinit
2016-01-04 14:30:37 +01:00
Smaine Kahlouch
2c35e4c055
Merge pull request #41 from ansibl8s/download_role
...
Rework download role
2015-12-31 16:22:07 +01:00
ant31
e3cdb3574a
Rework download role
2015-12-31 16:12:16 +01:00
Smaine Kahlouch
15cd1bfc56
rename env file
2015-12-31 14:55:06 +01:00
Smaine Kahlouch
392570f4ff
distinct local hostname
2015-12-31 14:54:51 +01:00
Smaine Kahlouch
be5fe9af54
never report changed for init system detection
2015-12-31 14:54:15 +01:00
Smaine Kahlouch
7006d56ab8
split role download and preinstall
2015-12-31 14:07:02 +01:00
Smaine Kahlouch
1695682d85
handle sysvinit
2015-12-31 14:05:55 +01:00
Smaine Kahlouch
1d1d8b9c28
add nodnsupdate hook for RedHat
2015-12-31 14:04:08 +01:00
Smaine Kahlouch
98fe2c02b2
review local tasks
2015-12-31 10:28:47 +01:00
Smaine Kahlouch
92c2a9457e
rename role common to kubernetes/preinstall
2015-12-31 10:03:22 +01:00
Smaine Kahlouch
a11e0cb3d1
keep host downloader
2015-12-31 09:38:55 +01:00
Smaine Kahlouch
dbb6f4934e
common role in order to support other linux distribs
2015-12-30 22:26:45 +01:00
Smaine Kahlouch
9f07f2a951
install docker on a largest number of linux distribution (based on https://github.com/marklee77/ansible-role-docker )
2015-12-30 22:26:45 +01:00
Smaine Kahlouch
005ddedb94
Merge pull request #38 from ansibl8s/dockerize_dnsmasq
...
[WIP] Docker dnsmasq
2015-12-30 14:04:17 +01:00
Smaine Kahlouch
b72e220126
remove carriage return
2015-12-30 14:02:22 +01:00
Smaine Kahlouch
e0f460d9b5
copy template dnsmasq pod and remove handlers
2015-12-30 14:02:22 +01:00
Smaine Kahlouch
2bd6b83656
increase etcd timeout value again
2015-12-30 14:02:22 +01:00
ant31
2df70d6a3d
Docker dnsmasq
2015-12-30 14:02:22 +01:00
Smaine Kahlouch
ddaeb2b8fa
Merge pull request #35 from ansibl8s/dockerize_etcd
...
Dockerize etcd
2015-12-30 14:01:00 +01:00
Smaine Kahlouch
6f4f170a88
remove useless etcd download, runs into docker containers
2015-12-30 09:50:02 +01:00
Smaine Kahlouch
3f3b03bc99
increase timeout value for etcd wait_for
2015-12-29 21:37:17 +01:00
Smaine Kahlouch
c9d9ccf025
move network-environment template into node role, required by kubelet
2015-12-29 21:36:51 +01:00
ant31
e378f4fb14
Install calico-plugin before running calico
2015-12-28 22:04:39 +01:00
Antoine Legrand
5c15d14f12
Run etcd as pod
2015-12-28 22:04:39 +01:00
Antoine Legrand
b45747ec86
Merge pull request #37 from ansibl8s/apiserver_https
...
Apiserver https
2015-12-28 13:00:46 +01:00
ant31
d597f707f1
use backup file
2015-12-24 19:23:21 +01:00
Smaine Kahlouch
4388cab8d6
Use second ip address in order to avoid any ip range problem
2015-12-24 13:58:04 +01:00
Smaine Kahlouch
595e93e6da
Peer with router configuration is made on the first etcd node
2015-12-24 13:56:53 +01:00
Smaine Kahlouch
5f4e01cec5
new version of logstash submodule
2015-12-22 16:38:40 +01:00
Smaine Kahlouch
7c9c609ac4
calico uses loadbalancer address for apiserver
2015-12-22 08:45:14 +01:00
Smaine Kahlouch
680864f95c
don't sync certs on masters, already done in another task
2015-12-21 14:24:57 +01:00
Smaine Kahlouch
7315d33e3c
use ip for etcd proxies even when hostnames are used in the inventory
2015-12-21 14:24:10 +01:00
Smaine Kahlouch
b2afbfd4fb
don't touch if the file exists
2015-12-21 14:23:33 +01:00
Smaine Kahlouch
ab694ee291
Install python-httplib2 required packaged
2015-12-21 12:00:42 +01:00
Smaine Kahlouch
bba3525cd8
use loadbalancer when that's possible
2015-12-21 09:13:48 +01:00
Smaine Kahlouch
2c816f66a3
Check calico network pool
2015-12-20 16:51:14 +01:00
Smaine Kahlouch
d585ceaf3b
set permissions on network-environment file
2015-12-19 12:32:06 +01:00
Smaine Kahlouch
fec1dc9041
A single file for tokens tasks
2015-12-19 11:00:22 +01:00
Smaine Kahlouch
e7e03bae9f
calico talks to apiserver with https
2015-12-18 22:22:52 +01:00