e2f1f8d69d
add-Rocky-9-support ( #9212 )
2022-09-04 16:54:36 -07:00
4df6e35270
Move oracle7-canal to centos7-canal
2022-08-02 16:55:52 -07:00
7fa6314791
Add ignore_assert_error to ubuntu20 etcd ha job ( #9108 )
2022-07-26 10:45:09 -07:00
9c51ac5157
Switch fedora36se to 35 and 35docker to 36
2022-07-21 23:03:38 -07:00
07eab539a6
Add Fedora 36 support and CI, remove Fedora 34 (eol)
2022-07-21 23:03:38 -07:00
2e1863af78
feat: change default blockSize for calico ( #9055 )
...
Signed-off-by: cyclinder qifeng.guo@daocloud.io
2022-07-19 13:05:27 -07:00
adfd77f11d
add-test-for-kubeadm-etcd-deployment ( #9007 )
2022-07-05 07:58:47 -07:00
f3ea8cf45e
Add Rocky Linux 8 support for vagrant ( #8905 )
...
To test Kubespray on Rocky Linux 8 with vagrant, this adds it to
the Vagrantfile.
2022-07-05 07:50:47 -07:00
4b03f6c20f
add-managed-ntp-support ( #9027 )
2022-06-28 13:15:34 -07:00
e8ccbebd6f
add ingress nginx webhook ( #9033 )
...
* add ingress nginx webhook
* fix ingress nginx template
2022-06-28 11:55:35 -07:00
56d83c931b
[CI] use debian-11 image with more disk space to ensure successful upgrade tests
2022-06-17 08:00:32 -07:00
a22ae6143a
[CI] ensure upgrade tests cover defaults (containerd currently)
2022-06-17 08:00:32 -07:00
5dc8be9aa2
[CI] kube 1.24 requires at least 1775Mi of memory, might as well leave the default of 2048
2022-06-15 00:57:20 -07:00
fad296616c
[docker] use cri-dockerd instead of dockershim for any kubernetes version deployed with docker as the container_manager
2022-06-15 00:57:20 -07:00
85271fc2e5
add-ci-for-ubuntu2204 ( #8958 )
2022-06-15 00:47:19 -07:00
4726a110fc
remove-support-for-ansible-2.9-2.10 ( #8951 )
2022-06-10 03:35:47 -07:00
3d8f3bc0b7
Fix the invalid kube vip manifest ( #8831 )
...
* add Feature synchronized time checking
* fix-invalid-kube-vip-manifest
2022-05-17 23:48:55 -07:00
9143810a4d
[CI] add remove node job
2022-05-04 06:35:51 -07:00
aa12f1c56b
[CI] fix packet_ubuntu20-calico-etcd-kubeadm-upgrade-ha job ( #8752 )
2022-04-27 12:39:36 -07:00
3261d26181
[etcd] ensure etcd is properly upgraded when managed by kubeadm ( #8722 )
...
* [etcd] ensure etcd is properly upgraded when managed by kubeadm
* [CI] add periodic job to test upgrade of etcd managed by kubeadm
2022-04-17 10:32:41 -07:00
424ef3b3f9
[calico] add calico apiserver ( #8690 )
...
* [calico] add calico apiserver
* fix yamllint
* remove addext argument
* Configure API server with the CA bundle
* add check kdd
2022-04-08 00:02:42 -07:00
6af9cae0a5
Add missing 2.10 ansible test ( #8665 )
2022-03-30 08:12:27 -07:00
ef29455652
[ansible] make ansible 5.x the new default version ( #8660 )
...
* [ansible] make ansible 5.x the new default version and move different versions tested to nightly jobs
* [CI] jobs were missing proper ansible cleanup
2022-03-29 15:36:11 -07:00
113de8381c
[ansible] add support for ansible 5 (ansible-core 2.12) ( #8512 )
2022-03-28 08:49:22 -07:00
dd2d95ecdf
[calico] don't enable ipip encapsulation by default and use vxlan in CI ( #8434 )
...
* [calico] make vxlan encapsulation the default
* don't enable ipip encapsulation by default
* set calico_network_backend by default to vxlan
* update sample inventory and documentation
* [CI] pin default calico parameters for upgrade tests to ensure proper upgrade
* [CI] improve netchecker connectivity testing
* [CI] show logs for tests
* [calico] tweak task name
* [CI] Don't run the provisioner from vagrant since we run it in testcases_run.sh
* [CI] move kube-router tests to vagrant to avoid network connectivity issues during netchecker check
* service proxy mode still fails connectivity tests so keeping it manual mode
* [kube-router] account for containerd use-case
2022-03-17 18:05:39 -07:00
394857b5ce
[docker] add support for cri-dockerd as a replacement for dockershim ( #8623 )
2022-03-16 16:28:11 -07:00
e9c8913248
Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable ( #8317 )
...
* Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* Add etcd kubeadm deployment documentation
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* Refactor warning for the deprecated 'etcd_kubeadm_enabled' variable
Signed-off-by: necatican <necaticanyildirim@gmail.com>
2022-02-22 08:53:16 -08:00
d580014c66
Fix CI for Fedora (followup) + OpenSUSE Leap (update to 15.3) ( #8407 )
...
* Fix fedora jobs - followup
* Update OpenSUSE Leap to 15.3
* Fix cilium version in README + update minor 1.11.1
2022-01-24 23:24:30 -08:00
ef34f5fe7d
[calico] switch default iptables backend detection to Auto ( #8429 )
2022-01-23 23:47:57 -08:00
d007132655
Fix Fedora CI following ipset version in kube-proxy for k8s 1.23 ( #8397 )
2022-01-11 05:01:17 -08:00
3eab1129b9
CI: Replace CentOS 8 with AlmaLinux 8 before CentOS 8 EOL end of 2021 ( #8297 )
2022-01-05 02:20:33 -08:00
4daa824b3c
CI: fix test name debian10-aio was a 2 instance default ( #8286 )
...
* CI: fix test name debian10-aio was a 2 instance default
* CI: Fix running ubuntu20-aio-docker
* CI: Fix running ubuntu18-aio-docker
2021-12-13 14:50:25 -08:00
682c8a59c2
containerd: change default resolvconf_mode to host_resolvconf ( #8247 )
...
* containerd: change default resolvconf_mode to host_resolvconf
* Wait for kube-apiserver to come back after pod refresh
* Handle resolv.conf gracefully
* Retain currently configured DNS entries to ensure we don't break the resolvers
* Suse uses wickedd for network management so no dhcp hooks
* Molecule: increase ansible timeout
* CI: Increase ansible timeout to 120s for Packet jobs
2021-12-09 14:09:06 -08:00
e19ce27352
Remove ovn4nfv support ( #8265 )
2021-12-03 11:56:35 -08:00
e82443241b
Move opensuse CI to docker and fix ubuntu16 containerd version for docker ( #8257 )
2021-12-02 08:01:34 -08:00
b38382a68f
Move cri-o default package to 1.22 ( #8258 )
2021-12-02 06:21:34 -08:00
30ec03259d
Remove fedora33 - eol ( #8246 )
2021-11-30 15:53:17 -08:00
ee882fa462
Add capability to use swap, requires Kube 1.22 ( #8241 )
...
* Alpha-NodeSwap: allow nodes to use swap
* CI: Add Fedora 35 with experimental swap job
2021-11-30 00:52:56 -08:00
a5f88e14d0
Cleanup tests ( #8234 )
...
* Add Fedora 35 image, support and CI
* Cleanup tests and allow_failure for vagrant
2021-11-26 09:00:51 -08:00
e78bda65fe
Defaults: replace docker with containerd as our default container_manager ( #8175 )
...
* Defaults: replace docker with containerd as our default container_manager
* CI: Use docker for download_localhost test
* Defaults: with container_manager=containerd we need etcd_deployment_type=host
* CI: Run weave jobs with docker
* CI: Vagrant don't download_force_cache
* CI: Fix upgrade tests
* should run compatible with old settings, this means docker
* we need to run with a distro that has at least modern containerd,
this means move from debian9 to debian10 to allow `containerd_version`
to match between 2.17 and master
2021-11-25 06:54:33 -08:00
4d79a55904
Remove extra parameter kube_proxy_remove ( #8158 )
...
Signed-off-by: EDGsheryl <edgsheryl@gmail.com>
2021-11-15 00:02:48 -08:00
0d0468e127
Exercise multiple ansible versions in CI ( #8172 )
...
* Ansible: separate requirements files for supported ansible versions
* Ansible: allow using ansible 2.11
* CI: Exercise Ansible 2.9 and Ansible 2.11 in a basic AIO CI job
* CI: Allow running a reset test outside of idempotency tests and running it in stage1
* CI: move ubuntu18-calico-aio job to stage2 and relay only on ubuntu20 with the variously supported ansible versions for stage1
* CI: add capability to install collections or roles from ansible-galaxy to mitigate missing behavior in older ansible versions
2021-11-10 16:11:50 -08:00
039205560a
nodelocaldns: allow a secondary pod for nodelocaldns for local-HA ( #8100 )
...
* nodelocaldns: allow a secondary pod for nodelocaldns for local-HA
* CI: add job to test nodelocaldns secondary
2021-11-09 09:57:47 -08:00
4a8757161e
Docker: replace the use of containerd_version with docker_containerd_version to avoid causing conflicts when bumping containerd_version ( #8130 )
2021-11-08 15:56:49 -08:00
331647f4ab
Remove deprecated Ambassador ingress code ( #8086 )
2021-10-26 15:19:09 -07:00
ea8e2fc651
containerd: download containerd from upstream instead of using distro specific packages ( #7970 )
...
* Containerd: download containerd from upstream instead of using distro specific packages
split runc download to separate role
make bootstrap-os role deploy container-selinux and seccomp libraries
clean up package manager provided containerd
move variables to docker role that are no longer common with containerd
* Containerd: make molecule testing more relevant
* replace ubuntu18 with ubuntu20
* add centos8 and debian11 to molecule tests
* run kubernetes/preinstall role to ensure relevancy
of test including dependency packages
* CI: adjust test scenarios for downloaded containerd
2021-10-20 08:47:58 -07:00
33146b9481
CI: Add Calico eBPF in HA mode test ( #7710 )
...
* Sample-Inventory: add sample for calico_bpf_enabled
* Calico-Doc: note about CONFIG_NET_SCHED for eBPF support
* CI: Add Calico eBPF in HA mode test
2021-09-24 09:57:23 -07:00
30a7dfa4f8
Fix ubuntu16/centos8 CI jobs ( #7972 )
2021-09-16 23:39:01 -07:00
d57ddf0be8
Feature DynamicKubeletConfig is deprecated in 1.22 and will not move to GA ( #7938 )
...
* Feature DynamicKubeletConfig is deprecated in 1.22 and will not move to GA
* Add check for dynamic_kubelet_configuration with kube >= 1.22
2021-09-07 10:47:16 -07:00
207d3e7b4e
Add Debian-11 image and CI ( #7919 )
2021-08-31 14:02:22 -07:00
77a74adedd
Bump centos8 CI job memory to 3go and remove mitogen for fedora CI ( #7921 )
2021-08-30 08:25:13 -07:00
1afdb05ea9
Fedora and RHEL use etc_t and the convention is <type_name>_t ( #7891 )
...
* Fedora and RHEL use etc_t and the convention is <type_name>_t
* Docs: specify all values for preinstall_selinux_state
* CI: Add Fedora 34 with SELinux in enforcing mode
2021-08-27 14:20:53 -07:00
a2cf6816ce
Calico wireguard ( #7638 )
...
* Calico: add Wireguard support
* CI: Add Calico Wireguard scenario
2021-06-25 03:22:45 -07:00
54cda80018
Fix debian docker available version ( #7668 )
2021-06-01 20:58:39 -07:00
7896bc7831
Add Fedora 33 image and CI, remove Fedora 31 (EOL) + update docker packages ( #7657 )
...
* Update docker package to 20.10.6
* Add Fedora 33 image and CI, remove Fedora 31 (EOL)
2021-05-28 08:04:25 -07:00
fd8ae54fa7
Docker default version is now 20.10
2021-05-27 11:18:24 -07:00
59fc17f4e3
Override the default value of containerd's root, state, and oom_score ( #7622 )
...
* Override the default value of containerd's root, state, and oom_score configurations
* Add tests data for containerd_storage_dir, containerd_state_dir and containerd_oom_score variables
2021-05-19 08:24:53 -07:00
96e6a6ac3f
Add krew support ( #7464 )
...
* Add krew support
* Add reset for krew
* Update install krew(local)
* ansible lint
* yamllint
* fix krew default vars
* fix kubectl_localhost mode
* replace include
* fix e206
2021-05-03 07:16:03 -07:00
42382e2cde
Update Terraform/Vagrant + increase tf_ovh retries ( #7477 )
2021-04-12 09:47:39 -07:00
cce0940e1f
add CI test for auto_renew_certificates ( #7472 )
...
* add CI test for auto_renew_certificates
* change timer value
fix typo error in rotate cert script
2021-04-09 00:42:47 -07:00
bef1e628ac
Fix issue with 'latest' in containerd version ( #7459 )
2021-04-07 08:33:53 -07:00
2257181ca8
Set containerd version to 1.4.4 ( #7398 )
...
* Set containerd version to 1.4.3
* Set containerd version to 1.4.4
Co-authored-by: Barry Melbourne <9964974+bmelbourne@users.noreply.github.com>
2021-04-01 23:20:11 -07:00
e35becebf8
Move centos7-crio CI job to centos8 ( #7327 )
2021-03-01 09:57:26 -08:00
c2c97c36bc
Add in tests for Calico with dual-stack networking
2021-02-05 00:04:52 -08:00
81b4ffa6b4
Add Fedora 33 CI, remove Fedora 31 ( #7072 )
2021-01-14 08:27:05 -08:00
e0195da80d
Allow containerd root and state path to be configured ( #7098 )
2021-01-05 07:13:58 -08:00
096bcdd078
Download once for crio ( #6998 )
...
* download run once feature for CRI-O
* fix typo
* fix test
2020-12-21 01:54:25 -08:00
cd7212453e
Add etcd tls cipher suites ( #7001 )
...
* Add etcd tls cipher suites
* yamllint
2020-12-07 18:13:10 -08:00
a69f2b09da
download run once feature for containerd ( #6997 )
2020-12-07 01:09:25 -08:00
68b96bdf1a
Helm v3 only ( #6846 )
...
* Fix etcd download dest
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* Only support Helm v3, cleanup install
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-12-02 00:20:50 -08:00
f6eed8091e
Remove contiv related files ( #6964 )
2020-11-30 06:48:50 -08:00
405692d793
Switch some image from dockerhub to k8s.gcr (also increase pkg retries) ( #6955 )
2020-11-26 08:46:19 -08:00
ee23b947aa
fix flake8 errors in Kubespray CI - tox-inventory-builder ( #6910 )
...
* fix flake8 errors in Kubespray CI - tox-inventory-builder
* Invalidate CRI-O kubic repo's cache
Signed-off-by: Victor Morales <v.morales@samsung.com>
* add support to configure pkg install retries
and use in CI job tf-ovh_ubuntu18-calico (due to it failing often)
* Switch Calico, Cilium and MetalLB image repos to Quay.io
Co-authored-by: Victor Morales <v.morales@samsung.com>
Co-authored-by: Barry Melbourne <9964974+bmelbourne@users.noreply.github.com>
2020-11-22 23:47:35 -08:00
270f91e577
cleanup kubelet_deployment_type ( #6815 )
...
No longer used/supported
2020-10-12 00:04:47 -07:00
6141b98bf8
calico: default to using kdd datastore ( #6693 )
...
If already deployed, get current datastore from CNI config file
2020-09-23 08:38:09 -07:00
bd49c993de
Added support for setting tiller_service_account and tiller_replicas ( #6696 )
...
* Added support for setting tiller_service_account and tiller_replicas
* Specify helm 2 version to ensure we have a test path that still hits helm 2 code
* Moved tiller_service_account to defaults.yml. Fixed is tiller_replicas defined check.
2020-09-20 23:52:30 -07:00
6da385de9d
Use "kubeadm join" to join masters to control plane ( #6661 )
...
Remove configuration variable kubeadm_control_plane
2020-09-17 04:34:45 -07:00
705ad84ce7
Update third party librairies and tools ( #6669 )
2020-09-17 02:36:46 -07:00
a556f8f2bf
Remove deprecated (and removed in 1.19) flag and function --basic-auth-file ( #6655 )
2020-09-11 00:30:14 -07:00
ad15721677
Add Kubernetes 1.19.1 hashes and set default ( #6654 )
2020-09-10 10:43:46 -07:00
c1ba8e1b3a
Rotate kubelet server certificate. ( #6453 )
...
* Rotate kubelet server certificate.
* CI test kubelet server cert rotation
* Approve kubelet serving certificates in tests.
2020-09-03 07:25:41 -07:00
35682b5228
Fix cilium strict kube proxy replacement in HA ( #6473 )
...
* Update the cilium svc proxy test to HA mode
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Fix cilium strict kube-proxy in HA
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add a single global endpoint variable
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add cilium docs about kube-proxy replacement
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Fix issues in docs
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-06 00:14:55 -07:00
90e5f8ffe1
adding ovn4nfv in kubespray ( #6381 )
...
Signed-off-by: Kuralamudhan Ramakrishnan <kuralamudhan.ramakrishnan@intel.com>
2020-07-31 07:33:08 -07:00
bf6168fca8
Move fedora30 jobs to fedora32 ( #6426 )
2020-07-30 23:31:07 -07:00
3550e3c145
Adding kube-proxy-replacement support in cilium ( #6334 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-30 02:46:31 -07:00
abfa1636e4
Fix kube-proxy post deployment removal ( #5554 )
...
* Fix kube-proxy removal
* Fix unwanted skipped task for kube-proxy
* Fix kube_proxy_remove default
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add test for kube-router svc proxy
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-13 07:12:33 -07:00
935c5093e2
Enable OVH CI ( #6365 )
2020-07-06 01:56:51 -07:00
4c1e0b188d
Add .editorconfig file ( #6307 )
2020-06-29 12:39:59 -07:00
80d16e6c91
Support for Ambassador OSS as an Ingress ( #6135 )
...
Support for Ambassador OSS as an Ingress Controller when
settings `ingress_ambassador_enabled: true`.
Signed-off-by: Alvaro Saurin <alvaro.saurin@gmail.com>
2020-06-24 07:39:17 -07:00
90c867b424
Update loadbalancers versions (haproxy&nginx) ( #6278 )
2020-06-18 07:48:19 -07:00
69a48cbdd7
Add Vagrant CI for Ubuntu 20.04 ( #6279 )
2020-06-18 01:18:05 -07:00
c6588856c7
Add Ubuntu 20.04 support and use Python 3 ( #6157 )
2020-06-16 13:04:05 -07:00
dba645421f
ADD tls cipher suites support ( #6024 )
...
* ADD tls cipher suites support
yaml lint
yamllint
* update test case
* update test case
2020-06-16 04:10:05 -07:00
8ec6729cae
Add disable_ipv6_dns: true in E2E tests ( #6266 )
2020-06-16 01:12:03 -07:00
bacbb2a0ca
Add custom dashboard namespace test ( #6249 )
...
Add custom dashboard namespace test
2020-06-12 00:52:03 -07:00
fd59556222
Add Elastx CI ( #6127 )
2020-06-03 00:00:17 -07:00
83d945127f
Make vagrant CI normal ( #6074 )
2020-05-28 00:46:02 -07:00
1f9ccfe54d
Rollback metrics-server version and enable in one CI test ( #6130 )
2020-05-13 06:20:26 -07:00
21ea079896
Disable OVH CI ( #6114 )
2020-05-09 15:19:50 -07:00
c44f13114f
Allow containerd runtime with fedora os (30/31) - add CI test ( #6094 )
2020-05-08 07:55:43 -07:00
Kay Yan
Florian Ruynat
Cyclinder
Kenichi Omichi
Samuel Liu
Calin Cristian Andrei
Cristian Calin
Necatican Yıldırım
EDGsheryl
Fatih Sarhan
Sergey
Daniil Muidinov
Matt Calvert
Etienne Champetier
Hans Feldt
David Louks
Lovro Seder
Arthur Outhenin-Chalandre
Kuralamudhan Ramakrishnan
Florian Ruynat
Maxime Guyot
Joel Seguillon
Alvaro
Unai Arríen
petruha