872d717105
Add kube|system_reserved CI testing
2024-09-06 09:25:26 +02:00
1533d40411
Fix kube_reserved_cgroups_for_service_slice
...
The default value is used across kubespray but only defined in
kubernetes/node.
Move it to kubespray-defaults
2024-09-06 09:25:23 +02:00
4b324cb0f0
Rename master to control plane - non-breaking changes only ( #11394 )
...
K8s is moving away from the "master" terminology, so kubespray should follow the same naming conventions. See 65d886bb30/sig-architecture/naming/recommendations/001-master-control-plane.md
2024-09-06 07:56:19 +01:00
d4bf3b9dc7
cleaup for 2.26.0 ( #11511 )
2024-09-06 07:02:28 +01:00
f9ebd45c74
boostrap-os: use import_tasks instead of symlinks ( #11508 )
...
Working symlinks are dependant on git configuration (when using the playbook as
a git repository, which is common), precisely `git config
core.symlinks`.
While this is enabled by default, some company policies will disable it.
Instead, use import_tasks which should avoid that class of bugs.
2024-09-05 08:24:49 +01:00
7f527f6195
Drop support for RHEL 7 / CentOS 7 ( #11246 )
...
* Simplify docker systemd unit
systemd handles missing unit by ignoring the dependency so we don't need
to template them.
* Remove RHEL 7/CentOS 7 support
- remove ref in kubespray roles
- move CI from centos 7 to 8
- remove docs related to centos7
* Remove container-storage-setup
Only used for RHEL 7 and CentOS 7
2024-09-05 07:41:01 +01:00
3da6c4fc18
Allow for configuring etcd progress notify interval and default set to 5s ( #11499 )
2024-09-05 06:29:05 +01:00
e744a117d6
Remove systemd version + ostree check for docker TasksMax ( #11493 )
...
systemd ignores unknown keys (with a warning) so version checking is not
necessary.
There is no rationale for excluding it from ostree systems either.
2024-09-02 13:16:57 +01:00
03372d883a
upgrade nerdctl to v1.7.6 ( #11492 )
...
Signed-off-by: Jongwoo Han <jongwooo.han@gmail.com>
2024-09-01 11:20:44 +01:00
8a961a60c2
Feat: Gateway API CRDs install support ( #11376 )
...
* Feat: add Gateway API CRDs installation
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Feat: add Gateway API CRDs variable in inventory
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
---------
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2024-08-31 08:24:45 +01:00
db0138b2f9
fix: incorrect member matching when removing etcd nodes ( #11488 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2024-08-31 08:20:44 +01:00
b0be5f2dad
Print the name of faulty jinja templates in pre-commit ( #11484 )
2024-08-30 06:43:30 +01:00
27c7dc7008
upgrade helm to v3.15.4 ( #11486 )
2024-08-30 06:39:30 +01:00
acc5e579f6
Add conditional checking on ubuntu kernel unattended_upgrades disabling ( #11479 )
...
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2024-08-29 15:47:39 +01:00
60b323b17f
[CI] Add a CI job to test cluster upgrading, and fix bug of testcases_run.sh ( #11458 )
...
* Fix: fix testcases_run.sh for upgrade tests
Need to git checkout ${CI_COMMIT_SHA} before running upgrade playbook (revert #11173 partially)
* feat: add CI job to test upgrade
Add a packet_ubuntu22-calico-all-in-one-upgrade job
2024-08-29 15:47:32 +01:00
924a979955
Calico v3.28.[0-1] checksums and change calico default version ( #11234 )
...
* make calico api server manifest backward compatible with version older than 3.27.3
Add 3.28.1 checksums
Add 3.28.0 checksums
Change default version to 3.27.3
* change default calico version to 3.28.1
* Set mount type to DirectoryOrCreate for hostPath needed by Calico
2024-08-29 12:10:28 +01:00
5fe8714f05
Adding myself (VannTen) as approver ( #11483 )
2024-08-29 10:30:29 +01:00
6acb44eeaf
update containerd 1.7.21 ( #11478 )
2024-08-29 04:22:29 +01:00
c89ea7e4c7
Fix: remove --config option from kubeadm upgrade ( #11350 ) ( #11352 )
...
We can't mix some options with --config for kubeadm upgrade.
The --config on upgrade is deprecated, and should be removed.
2024-08-29 03:08:29 +01:00
3d9e4951ce
fix static api server advertise address ( #11457 )
2024-08-28 15:20:56 +01:00
776b40a329
Adjust task name since we allow empty kube_node ( #11474 )
2024-08-28 06:35:02 +01:00
a3d0ba230d
Remove kubeadm_version and use kube_version instead ( #11473 )
...
We explicitly check for equality so customizing kubeadm_version does not
work at the moment.
Use only one variable instead.
2024-08-28 06:34:56 +01:00
9a7b021eb8
Do not use ‘yes/no’ for boolean values ( #11472 )
...
Consistent boolean values in ansible playbooks
2024-08-28 06:30:56 +01:00
5c5421e453
fix double pop of access_ip ( #11435 )
2024-08-27 16:28:57 +01:00
1798989f99
Bump molecule from 24.7.0 to 24.8.0 ( #11460 )
...
Bumps [molecule](https://github.com/ansible-community/molecule ) from 24.7.0 to 24.8.0.
- [Release notes](https://github.com/ansible-community/molecule/releases )
- [Commits](https://github.com/ansible-community/molecule/compare/v24.7.0...v24.8.0 )
---
updated-dependencies:
- dependency-name: molecule
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-27 14:32:56 +01:00
961a6a8c9e
fix reset network for tencent OS ( #11459 )
...
Signed-off-by: KubeKyrie <shaolong.qin@daocloud.io>
2024-08-26 15:32:08 +01:00
5b057c7328
Update list of admission plugins with a config file
2024-08-26 14:53:20 +02:00
d3402736d4
Remove special case for PodNodeSelector
...
This is already handled by the previous task.
2024-08-26 14:43:00 +02:00
47c3949477
Change plugins_needs_config list format
...
Makes easier diff when adding or removing plugins.
2024-08-26 14:42:04 +02:00
2f84567a69
Add containerd config options ( #11080 )
...
* chore(containerd): add some config debug options
See: https://github.com/containerd/containerd/blob/v1.7.15/docs/man/containerd-config.toml.5.md
* chore(containerd): add CRI config options
See: https://github.com/containerd/containerd/blob/v1.7.15/docs/man/containerd-config.toml.5.md
See: https://github.com/containerd/containerd/blob/v1.7.15/docs/cri/config.md
2024-08-21 05:13:05 +01:00
171b0e60aa
Bump tox from 4.17.1 to 4.18.0 ( #11461 )
...
Bumps [tox](https://github.com/tox-dev/tox ) from 4.17.1 to 4.18.0.
- [Release notes](https://github.com/tox-dev/tox/releases )
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst )
- [Commits](https://github.com/tox-dev/tox/compare/4.17.1...4.18.0 )
---
updated-dependencies:
- dependency-name: tox
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-20 02:35:44 -07:00
c4338687e1
[ingress-nginx] upgrade to 1.11.2 ( #11463 )
2024-08-19 06:10:27 -07:00
ad1ce92b41
Update node-feature-discovery to v0.16.4 ( #11250 )
2024-08-19 05:59:30 -07:00
1093c76f9b
bump k8s version ( #11455 )
2024-08-19 00:12:33 -07:00
c7935e2988
Add tico88612 as reviewer ( #11453 )
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2024-08-16 07:06:39 -07:00
0306771c29
fix: cleanup networkmanager dns conf on reset ( #11440 )
2024-08-15 06:43:19 -07:00
390d74706c
[kube-ovn] update version to 1.12.21 ( #11445 )
...
Signed-off-by: Mengxin Liu <liumengxinfly@gmail.com>
2024-08-15 06:39:18 -07:00
ce9ba9a8bf
Bump tox from 4.16.0 to 4.17.1 ( #11442 )
...
Bumps [tox](https://github.com/tox-dev/tox ) from 4.16.0 to 4.17.1.
- [Release notes](https://github.com/tox-dev/tox/releases )
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst )
- [Commits](https://github.com/tox-dev/tox/compare/4.16.0...4.17.1 )
---
updated-dependencies:
- dependency-name: tox
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-14 04:19:37 -07:00
fe4cbbccd1
fix: correct resolvconf typo ( #11439 )
2024-08-14 02:07:55 -07:00
e43e08c7d1
fix: use super-admin.conf for kube-vip on first master when it exists ( #11422 )
...
* fix: use super-admin.conf for kube-vip when it exists
* Mathieu Parent add as co-author
Co-authored-by: Mathieu Parent <math.parent@gmail.com>
* template change for readability
* fix lint error
---------
Co-authored-by: Mathieu Parent <math.parent@gmail.com>
2024-08-10 21:35:58 -07:00
28712045a5
bump cni version to v1.4.0 ( #10698 )
2024-08-10 05:25:58 -07:00
1968db9a52
fix: skip multus when not defined ( #10934 )
...
fix task failure:
TASK [kubernetes-apps/network_plugin/multus : Multus | Start resources] ************************************************
fatal: [hfal12k8n1 -> {{ groups['kube_control_plane'][0] }}]: FAILED! => {"msg": "Error in jmespath.search in json_query filter plugin:\n'ansible.vars.hostvars.HostVarsVars object' has no attribute 'multus_manifest_2'"}
2024-08-06 03:42:50 -07:00
cc03ca62be
Avoid empty "supersede domain-name-servers" directives for dhclient.conf ( #10948 )
...
Fixes https://github.com/kubernetes-sigs/kubespray/issues/10947
This patch aims to be minimal and intentionally:
- does not change the generation logic for `supersede_domain` and `supersede_search`
- does not change how `nameserverentries` (for NetworkManager) is built
It seems like `nameserverentries` in the "Generate nameservers for resolvconf, including cluster DNS"
task is built the same way as `dhclient_supersede_nameserver_entries_list`.
However, `nameserverentries` in the "Generate nameservers for resolvconf, not including cluster DNS"
task (below) is built differently for some reason. It includes `configured_nameservers` as well.
Due to these differences, I have refrained from reusing the same building logic
(`dhclient_supersede_nameserver_entries_list`) for both.
If the `configured_nameservers` addition can be removed or made to apply
to dhclient as well, we could potentially build a single list and then
generate the `nameserverentries` and `supersede_nameserver` strings from it.
2024-08-06 03:38:51 -07:00
5f18fe739e
Restart kube-proxy pods only on configmap changes ( #11401 )
2024-08-06 00:50:50 -07:00
343d680371
fix kylin OS choose NetworkManager ( #11406 )
...
Signed-off-by: KubeKyrie <shaolong.qin@daocloud.io>
2024-08-05 03:34:59 -07:00
3d1653f950
[containerd] add hashes for versions '1.6.32-34', 'v1.7.17-20' and make v1.7.20 default ( #11413 )
2024-08-05 02:48:07 -07:00
dd51ef6f96
Bugfix/code inspection. ( #11384 )
...
- Make ansible-galaxy collection dependencies explicit
- Reorganized requirements.yml
- Adding required collections to galaxy.yml
- Ansible 9.6.0 was yanked on Pypi
- Sync pre-commit requirements with requirements.txt
Signed-off-by: Bas Meijer <bas.meijer@enexis.nl>
2024-08-02 03:43:54 -07:00
4e99b94dcc
Add generic post upgrade hooks for node ( #11368 )
2024-07-31 21:58:48 -07:00
54ac5a6de4
Update cni-kube-ovn.yml.j2 ( #11357 )
...
Made corrections in Indentation at L658 which causes kubespray execution failed with YAML to Json conversion. #11356
2024-07-31 21:58:39 -07:00
2799f11475
Add support for LB in upcloud private zone ( #11260 )
2024-07-31 21:58:30 -07:00
Max Gautier
Bogdan Sass
Kay Yan
刘旭
Jongwoo Han
ChengHao Yang
ERIK
Lihai Tu
Takuya Murakami
Ehsan Golpayegani
Takuya Murakami
Selçuk Arıbalı
Vlad Korolev
R. P. Taylor
dependabot[bot]
kyrie
Lola Delannoy
Mohamed Omar Zaian
kokyhm
Ho Kim
Mengxin Liu
Cyclinder
Not Darko
Slavi Pantaleev
Injun Baeg
Bas
James
Sanyam Shah
David