91dea023ae
[containerd] add hashes for versions '1.6.30-31', 'v1.7.16' and make v1.7.16 default ( #11142 )
2024-04-30 04:20:29 -07:00
245454855d
Add additional checking for calico rr cluster_id ( #11112 )
...
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2024-04-30 03:46:30 -07:00
3a112e834c
ingress-nginx: added ability to enable opentelemetry nginx module ( #11034 )
2024-04-30 03:46:17 -07:00
cf0de0904c
Bump tzdata from 2023.3 to 2024.1 ( #11121 )
...
Bumps [tzdata](https://github.com/python/tzdata ) from 2023.3 to 2024.1.
- [Release notes](https://github.com/python/tzdata/releases )
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md )
- [Commits](https://github.com/python/tzdata/compare/2023.3...2024.1 )
---
updated-dependencies:
- dependency-name: tzdata
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-30 02:16:26 -07:00
d772350b04
Bump molecule-plugins[vagrant] from 23.5.0 to 23.5.3 ( #11120 )
...
Bumps [molecule-plugins[vagrant]](https://github.com/ansible-community/molecule-plugins ) from 23.5.0 to 23.5.3.
- [Release notes](https://github.com/ansible-community/molecule-plugins/releases )
- [Commits](https://github.com/ansible-community/molecule-plugins/compare/v23.5.0...v23.5.3 )
---
updated-dependencies:
- dependency-name: molecule-plugins[vagrant]
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-30 01:07:08 -07:00
3351dc0925
Bump jinja2 from 3.1.2 to 3.1.3 ( #11119 )
...
Bumps [jinja2](https://github.com/pallets/jinja ) from 3.1.2 to 3.1.3.
- [Release notes](https://github.com/pallets/jinja/releases )
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst )
- [Commits](https://github.com/pallets/jinja/compare/3.1.2...3.1.3 )
---
updated-dependencies:
- dependency-name: jinja2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-30 00:36:09 -07:00
f0e20705aa
Add Calico v3.27.3 and make it default ( #11141 )
...
* Add Calico v3.27.3 and make it default
* Add Calico v3.27.3 and make it default
* Update README.md
2024-04-30 00:20:42 -07:00
ff4e572e0c
Bump tox from 4.11.3 to 4.15.0 ( #11133 )
...
Bumps [tox](https://github.com/tox-dev/tox ) from 4.11.3 to 4.15.0.
- [Release notes](https://github.com/tox-dev/tox/releases )
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst )
- [Commits](https://github.com/tox-dev/tox/compare/4.11.3...4.15.0 )
---
updated-dependencies:
- dependency-name: tox
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-30 00:20:33 -07:00
97e71da97b
Merge pull request #11131 from VannTen/design/modular_pkgs_install
...
Fine grained OS packages installation
2024-04-30 00:20:24 -07:00
a7f98116ca
fix: updating the calico-crds ( #11089 )
2024-04-30 00:15:09 -07:00
088b1b0cec
Add `enabled` to pkgs to handle ipvs
...
Some packages requirements depends on inventory variables
(`kube_proxy_mode` in that case but it could apply to others).
As the case seems pretty rare, instead of adding complexity to pkgs, we
add an escape hatch to use jinja conditions.
That should be revisited if we find ourselves shoehorning lots of logic
in this later on.
2024-04-29 21:22:23 +02:00
11f35e462c
Convert common packages to use the new tooling
...
The empty dict means that packages will always be installed on the host.
2024-04-29 21:22:22 +02:00
da3ff1cc11
Convert OS specific packages to new format
...
Uses the logic introduced in the previous patch to convert all
kubernetes/preinstall/vars/* os specific files to the `pkgs`
dictionary.
Some niceties for devs:
- always validate the `pkgs` variable to catch mistakes in CI.
- ensure that `pkgs` is always sorted. This makes it easier to find the
packages you're looking for.
2024-04-29 21:22:21 +02:00
663fcd104c
Filter packages installation by OS and by group
...
Adds infrastructure to install OS packages depending not only on OS
(family, versions, etc) but on groups.
All the informations related to a particular package should reside in
the `pkgs` dictionnary, which takes inspiration from the `downloads`
dictionary structure.
2024-04-29 21:22:20 +02:00
a2019c1c24
Add a JSON schema describing the packages install structure
...
Since the structure we're setting in place for installing packages has
some complexity, add a JSON schema to avoid frustrating errors when
modifying the informations (adding/removing packages install).
2024-04-29 21:22:19 +02:00
3a43ac4506
Don't special case openssl for tumbleweed
...
openssl 1.1.1 is EOL since 12 September 2023, so just use the default
version on tumbleweed like we do on other distributions.
2024-04-29 21:22:18 +02:00
f91e00a61b
preinstall: Move ipvs packages into defaults
2024-04-29 21:22:15 +02:00
c6bdc38776
containerd: allow to configure fallback server ( #10988 )
...
Also nerdctl limitation is now removed as we use /etc/containerd/certs.d/
2024-04-29 05:41:47 -07:00
08a7010e80
Revert "Only download kubeadm images where needed ( #10899 )" ( #11105 )
...
This reverts commit 4b0a134bc9
2024-04-29 01:59:51 -07:00
538deff9ea
ntp: add config to filter and set ntp interfaces ( #11066 )
...
* ntp: add config to set which interface ntp should listen
* Fixed config to only have one variable
2024-04-25 07:51:45 -07:00
cd7d11fea2
Feat: dependabot initial config ( #11084 )
...
* Feat: dependabot initial config
Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>
* Feat: ignore yaml lint check .github path
Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>
---------
Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>
2024-04-25 01:34:39 -07:00
23b56e3f89
Enclose the cpu type with quotation marks in kubelet-config.v1beta1 ( #11111 )
...
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2024-04-25 00:32:06 -07:00
eee5b5890d
feat: Add support for cilium 1.15 and updated cilium to v1.15.4 ( #11106 )
2024-04-23 19:42:11 -07:00
ab0ef182fb
[containerd/tracing]: add distributed tracing config flags ( #11103 )
...
* [containerd/tracing]: add distributed tracing config flags
Signed-off-by: Ugur Ozturk <ugurozturk918@gmail.com>
* [containerd/tracing]: add distributed tracing config flags -fix
Signed-off-by: Ugur Ozturk <ugurozturk918@gmail.com>
---------
Signed-off-by: Ugur Ozturk <ugurozturk918@gmail.com>
2024-04-23 00:24:19 -07:00
4db3e2c3cf
fix: 🐛 calico-cni-plugin missing RBAC ( #11077 )
...
To configure node asNumber for per node peering service account
calico-cni-plugin need nodes/status update rights
✅ Closes: 11076
2024-04-22 10:09:37 -07:00
3d19e744f0
feat(calico): add support filters on bgppeers per node definition ( #11079 )
...
Signed-off-by: MatthieuFin <matthieu2717@gmail.com>
2024-04-21 19:35:34 -07:00
929c818b63
Fixed joined_control_planes when ansible_hostvars references a variable ( #11060 )
2024-04-19 03:20:58 -07:00
4baa2c8704
set default containerd_version to v1.7.15 and add checksums ( #11083 )
...
* set default containerd_version to v1.7.15 and add checksums for v1.7.14 and v1.7.15
* update containerd version in README.md
2024-04-16 19:33:15 -07:00
f3065cc5c4
bump skopeo version and checksum ( #11044 )
...
Signed-off-by: Abhishek Jain <jain.abhishek1991@gmail.com>
2024-04-16 01:19:27 -07:00
ed2059395c
Remove the archived debian apt repository ( #11088 )
...
Signed-off-by: Kay Yan <kay.yan@daocloud.io>
2024-04-16 00:21:55 -07:00
8919901ed5
fix python regex matching problem when finding docker packages ( #11075 )
2024-04-14 19:55:18 -07:00
cc0c3d73dc
fix reset/main.yml lsattr command error when kubelet has symbolic link ( #11074 )
...
Signed-off-by: KubeKyrie <shaolong.qin@daocloud.io>
2024-04-14 19:55:05 -07:00
dd0f42171f
fix kubespray-defaults: Check for boostrap-os FQCN ( #11073 )
2024-04-14 18:21:11 -07:00
1b870a1862
Update kubelet systemd service default allowed IP addresses for cluster hardening ( #11061 )
...
Signed-off-by: bmelbourne <barry.melbourne0@gmail.com>
2024-04-11 00:58:27 -07:00
8a423abd0f
Update Snapshot controller to v7.0.2 ( #11041 )
...
Upgrade Snapshot controller installed for all supported Kubernetes
versions to v7.0.2. Also update the manifests used to deploy the
Snapshot controller.
2024-04-10 20:38:08 -07:00
3ec2e497c6
Update kubelet-csr-approver to v1.1.0 ( #11070 )
...
Signed-off-by: bmelbourne <barry.melbourne0@gmail.com>
2024-04-10 18:57:02 -07:00
7844b8dbac
Promote nodelocaldns daemonset to system-node-critical ( #11056 )
...
As upstream
2024-04-09 19:48:01 -07:00
e87040d5ba
change debian8 network manage service from networking to systemd-networkd ( #11058 )
...
Signed-off-by: KubeKyrie <shaolong.qin@daocloud.io>
2024-04-09 06:50:39 -07:00
d58343d201
Document "Remove access to cluster from anonymous users" ( #11068 )
...
See https://github.com/kubernetes-sigs/kubespray/pull/11016
2024-04-09 03:34:36 -07:00
b2cce8d6dc
force update helm repo if exists on host ( #11043 )
2024-04-08 19:02:48 -07:00
3067e565c0
Fix calico host local ipam ( #11022 )
...
* Prevent upgrade-ipam for host-local IPAM
Otherwise, the init container upgrade-ipam would clear the state of the host-local plugin, potentially causing it to reassign IPs that are still in use.
* USE_POD_CIDR required for host-local
4efd1bfd91/charts/calico/templates/calico-node.yaml (L279)4efd1bfd91/charts/calico/templates/calico-typha.yaml (L133)
2024-04-03 00:52:31 -07:00
c6fcbf6ee0
Remove access to cluster from anonymous users ( #11016 )
...
* feat: add user facing variable with default
* feat: remove rolebinding to anonymous users after init and upgrade
* feat: use file discovery for secondary control plane nodes
* feat: use file discovery for nodes
* fix: do not fail if rolebinding does not exist
* docs: add warning about kube_api_anonymous_auth
* style: improve readability of delegate_to parameter
* refactor: rename discovery kubeconfig file
* test: enable new variable in hardening and upgrade test cases
* docs: add option to config parameters
* test: multiple instances and upgrade
2024-04-02 23:54:12 -07:00
fdf5988ea8
revert crictl version ( #11042 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2024-04-01 18:43:53 -07:00
a7d42824be
Merge pull request #11036 from mzaian/etcd-3512
...
[etcd] make etcd 3.5.12 default
2024-04-01 14:57:48 +08:00
9ef6678b7e
configure crio to use kube reserved cgroups ( #11028 )
2024-03-31 22:21:33 -07:00
70a54451b1
[etcd] make etcd 3.5.12 default
2024-03-30 05:01:01 +01:00
c6758fe544
Cleanup of kubernetes/preinstall ( #11010 )
...
* Move fedora ansible python install to bootstrap-os
* /bin/dir is set in bootstrap-os
* Removing ansible_os_family workarounds
Support for these distributions was merged in Ansible, no need to
override it ourselves now.
https://github.com/ansible/ansible/pull/69324 openEuler
https://github.com/ansible/ansible/pull/77275/ UnionTech OS Server 20
https://github.com/ansible/ansible/pull/78232/ Kylin
* Don't unconditionnaly set VARIANT_ID=coreos in os-release
WTF, this is so wrong.
Furthermore, is_fedora_coreos is already handled in boostrap-os
* Handle Clearlinux generically
Followup of 4eec302e86
2024-03-28 15:17:52 -07:00
10315590c7
Change hard-coded URLs to use variables ( #11031 )
2024-03-27 20:44:25 -07:00
03ac02afe4
[kubernetes] Add hashes for kubernetes 1.29.3, 1.28.8, 1.27.12 ( #11035 )
2024-03-27 12:30:27 -07:00
fd83ec9d91
kubespray-defaults: regenerate checksums and bump various versions ( #10999 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2024-03-27 06:02:53 -07:00
Mohamed Omar Zaian
Lihai Tu
Denis Khachyan
dependabot[bot]
Patrick
Kubernetes Prow Robot
RaSerge
Max Gautier
Mathieu Parent
Pavan Gunda
tico88612
Devesh Kumar
Ugur Can Ozturk
MatthieuFin
Lilian ARAGO
Alexander
Abhishek Jain
Kay Yan
kyrie
Barry M
J
Sergey
Robert Volkmann
Nicolas Goudry
ERIK
peterw
itayporezky
Arthur Outhenin-Chalandre