c12s-kubespray/roles/network_plugin
emiran-orange afbabebfd5
Enables Calico serviceAccount token monitoring and update of /etc/cni/net.d/calico-kubeconfig if need be. (#7586)
Since K8S 1.21, BoundServiceAccountTokenVolume feature gate is in beta stage, thus activated by default (anyone who follows CSI guidelines has enabled AllAlpha and faced the issue before 1.21).
With this feature, SA tokens are regenerated every hour.
As a consequence for Calico CNI, token in /etc/cni/net.d/calico-kubeconfig copied from /var/run/secrets/kubernetes.io/serviceaccount in install-cni initContainer expires after one hour and any pod creation fails due to unauthorization.
Calico pods need to be restarted so that /etc/cni/net.d/calico-kubeconfig is updated with the new SA token.
2021-05-11 08:47:36 -07:00
..
calico Enables Calico serviceAccount token monitoring and update of /etc/cni/net.d/calico-kubeconfig if need be. (#7586) 2021-05-11 08:47:36 -07:00
canal Fix calico-kube-controller becomes Error for canal (#7564) 2021-04-28 11:26:52 -07:00
cilium Upgrade cilium role (#7521) 2021-04-30 08:09:59 -07:00
cni/tasks Use role to copy CNI bin (#5953) 2020-04-16 10:06:45 -07:00
flannel Add image_arch in flannel image tag (#7560) 2021-04-29 17:51:57 -07:00
kube-ovn Minor update to cni-plugins and kube-router 2021-04-22 06:47:42 -07:00
kube-router Rename ansible groups to use _ instead of - (#7552) 2021-04-29 05:20:50 -07:00
macvlan Rename ansible groups to use _ instead of - (#7552) 2021-04-29 05:20:50 -07:00
meta Remove contiv related files (#6964) 2020-11-30 06:48:50 -08:00
multus Disable CRI-O restart by Multus (#6930) 2020-11-28 08:52:47 -08:00
ovn4nfv Replace kube-master with kube_control_plane (#7256) 2021-03-23 17:26:05 -07:00
weave Update Weave to 2.8.0 (#7181) 2021-01-19 08:35:48 -08:00