ce18b0f22d
fix missing newline in template ( #10174 )
2023-05-31 23:27:45 -07:00
2d8f60000c
Solves #2933 : Allow http_proxy, https_proxy and no_proxy environment variables in cert-manager playbook ( #10162 )
2023-05-31 20:23:45 -07:00
f264426646
cert-manager controller args: ( #10049 )
...
- Adding in the ability to feed extra-args to cert-manager-controller.
2023-05-24 08:12:53 -07:00
862fd2c5c4
feature(ingress_nginx) Add ingressclass for ingress_nginx ( #10091 )
...
Add option to configure class as the default class
Add option to disable wathcing for ingresses without class
Remove redundant if that always evaluates to true
Fix default value missing for ingress_nginx_default
2023-05-24 04:12:50 -07:00
dcc04e54f3
fix(cert manager): Fix manifest if cert_manager_trusted_internal_ca is provided ( #9922 )
2023-03-27 08:12:28 -07:00
260dad8f10
[ingress-nginx] upgrade to 1.6.4 ( #9818 )
2023-02-23 01:35:34 -08:00
2c93c997cf
pre-commit autocorrected files ( #9750 )
2023-02-06 01:35:16 -08:00
ee2193d4cf
Add dns configuration for cert manager ( #9673 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2023-01-23 17:42:15 -08:00
c7cffb14a7
[cert-manager] update cert-manager to v1.11.0 ( #9661 )
2023-01-16 02:36:51 -08:00
529faeea9e
[cert-manager] Upgrade to v1.10.1 ( #9512 )
2022-11-29 07:17:26 -08:00
d00508105b
Removed PodSecurityPolicy from ingress-nginx ( #9448 )
2022-10-30 20:08:44 -07:00
0374a55eb3
Specify securityContext for cert-manager ( #9404 )
...
On hardening environments, cert-manager pods could not be created
from the corresponding deployments. This adds the securityContext
to solve the issue.
2022-10-20 00:57:08 -07:00
958840da89
Add var for control initialDelaySeconds in nginx ingress probe ( #9405 )
...
Signed-off-by: Zemtsov Vladimir <vl.zemtsov@gmail.com>
Signed-off-by: Zemtsov Vladimir <vl.zemtsov@gmail.com>
2022-10-19 21:20:56 -07:00
0f44e8c812
[ingress-nginx] upgrade to 1.4.0 ( #9403 )
2022-10-18 16:53:00 -07:00
5ac614f97d
fix duplicate field in ingress-nginx template ( #9285 )
2022-09-19 03:03:22 -07:00
f3fb758f0c
Remove useless file ( #9258 )
2022-09-07 17:10:49 -07:00
8585134db4
when ingress-nginx is deployes without a class, we need to use 'ingress-controller-leader' resource instead of the default 'ingress-controller-leader-nginx' ( #9156 )
2022-08-09 04:52:50 -07:00
b3876142d2
[cert-manager] Upgrade to v1.9.0 ( #9117 )
2022-07-29 00:11:11 -07:00
ce04fdde72
[ingress-nginx] upgrade to 1.3.0 ( #9088 )
...
* This release removes support for Kubernetes v1.19.0
* This release adds support for Kubernetes v1.24.0
* Starting with this release, we will need permissions on the coordination.k8s.io/leases resource for leaderelection lock
2022-07-14 18:46:25 -07:00
d821bed2ea
Fix some typo ( #9056 )
...
* fix ingress controller task name
* fix calico word
* add check typo
2022-07-11 09:49:48 -07:00
e8ccbebd6f
add ingress nginx webhook ( #9033 )
...
* add ingress nginx webhook
* fix ingress nginx template
2022-06-28 11:55:35 -07:00
0481dd946f
[cert-manager] Upgrade to v1.8.0 ( #8688 )
2022-04-06 00:52:57 -07:00
a67e36703f
Update cert-manager to v1.7.2 ( #8648 )
2022-03-26 04:53:22 -07:00
2b79be68e7
fix typo and duplicated declaration of ingressclasses ( #8591 )
2022-03-12 23:36:23 -08:00
790448f48b
feat: update cert-manager to 1.7.0 ( #8491 )
...
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2022-02-03 17:24:00 -08:00
392815d97c
[cert-manager] Fix missing RBAC rules for ClusterRole cert-manager-cainjector kubernetes-sigs#8104. ( #8444 )
2022-01-20 12:17:09 -08:00
e791089466
cert-manager: Fix incorrect leader election namespace lead to insufficient permission ( #8433 )
2022-01-17 02:37:29 -08:00
ccd3180a69
cert-manager: Allow to change leader election namespace for GKE Autopilot support ( #8424 )
...
More information:
- kubernetes-sigs/kubespray#8393
- jetstack/cert-manager#4102
- jetstack/cert-manager#3717
2022-01-14 12:54:26 -08:00
86953b2ac4
fix: add tolerations / affinity to cert-manager ( #8389 )
...
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2022-01-11 09:14:26 -08:00
f80fd24a55
Fix risky-file-permissions ( #8370 )
...
When running ansible-lint directly, we can see a lot of warning
message like
risky-file-permissions File permissions unset or incorrect
This fixes the warning messages.
2022-01-09 01:51:12 -08:00
52266406f8
Bump cert-manager version to v1.6.1 ( #8377 )
2022-01-07 16:45:34 -08:00
cb54eb40ce
Use a variable for standardizing kubectl invocation ( #8329 )
...
* Add kubectl variable
* Replace kubectl usage by kubectl variable in roles
* Remove redundant --kubeconfig on kubectl usage
* Replace unecessary shell usage with command
2022-01-05 02:26:32 -08:00
6aafb9b2d4
fix bad indentation ( #8314 )
2021-12-17 07:36:29 -08:00
785324827c
Set ingress-nginx default terminationGracePeriodSeconds to 5 min ( #8252 )
...
* set ingress-nginx default terminationGracePeriodSeconds to 5 min for the drain of connection
* Add ingress_nginx_termination_grace_period_seconds at sample inventory
2021-12-02 03:23:33 -08:00
7e1873d927
DeprecationWarning occurs when indentfirst=None is specified in coredns-config.yml.j2 ( #8224 )
2021-11-24 08:56:21 -08:00
b7eb1cf936
cert-manager: add trusted internal ca when configured ( #8135 )
...
* cert-manager: add trusted internal ca when configured
* wrong check for inventory variable
* Update documentation
2021-11-05 09:43:52 -07:00
0b441ade2c
nginx ingress controller should watch kind:ingress without class ( #8128 )
2021-10-28 11:48:59 -07:00
331647f4ab
Remove deprecated Ambassador ingress code ( #8086 )
2021-10-26 15:19:09 -07:00
cee481f63d
cert-manager: upgrade to 1.5.4 ( #8069 )
...
* cert-manager: update to 1.5.4
* cert-manager: remove outdated guidelines on creating an initial ClusterIssuer
2021-10-12 09:17:47 -07:00
6c004efd5f
cert_manager: Remove deprecated ClusterIssuer and its Secret ( #8064 )
2021-10-11 09:40:40 -07:00
43e7e2d663
nginx-ingress: bump to 1.0.0 to support kube 1.22 ( #7942 )
2021-09-06 04:50:36 -07:00
4c9d7dedb3
addons/cert_manager: retries until webhook pods has been created ( #7850 )
...
Fix task 'Cert Manager | Wait for Webhook pods become ready' failed due to webhook pods don't exist yet by using `retries..until` trick like kubernetes-sigs/kubespray#7842
This fix should be removed in the future if the kubernetes/kubernetes#83242 is resolved.
Signed-off-by: rtsp <git@rtsp.us>
2021-08-25 07:16:41 -07:00
82a9064d8d
addons/cert_manager: fix kubernetes-sigs#7085 by adding retries..until ( #7842 )
...
Fix task 'Cert Manager | Apply ClusterIssuer manifest' failed due to service/endpoints updating delayed even though the wekhook pod status is ready.
Signed-off-by: rtsp <git@rtsp.us>
2021-08-09 08:19:31 -07:00
7516fe142f
Move to Ansible 3.4.0 ( #7672 )
...
* Ansible: move to Ansible 3.4.0 which uses ansible-base 2.10.10
* Docs: add a note about ansible upgrade post 2.9.x
* CI: ensure ansible is removed before ansible 3.x is installed to avoid pip failures
* Ansible: use newer ansible-lint
* Fix ansible-lint 5.0.11 found issues
* syntax issues
* risky-file-permissions
* var-naming
* role-name
* molecule tests
* Mitogen: use 0.3.0rc1 which adds support for ansible 2.10+
* Pin ansible-base to 2.10.11 to get package fix on RHEL8
2021-07-12 00:00:47 -07:00
6a2ea94b39
Docs improvements ( #7660 )
...
* Docs: update sidebar
* Docs: move registry documentation into docs/
* Docs: move rbd_provisioner documentation into docs/
* Docs: move cephfs_provisioner into docs/
* Docs: move local_volume_provisioner documentation into docs/
* Docs: move ambassador.md to docs/ingress_controller/
* Docs: move metallb.md to docs/ingress_controller/
* Docs: move ingress_nginx documentation into docs/
* Docs: move alb_ingress_controller documentation into docs/
* Docs: merge ambassador documentation into docs/ingress_controller/
* Docs: move cert_manager documentation into docs/
* Docs: move bootstrap-os documentation into docs/
* Docs: update file locations in sidebar
2021-06-01 07:30:27 -07:00
922de32290
spelling mistakes ( #7664 )
...
Signed-off-by: kjinan <2008kongxiangsheng@163.com>
2021-05-31 05:46:26 -07:00
360aff4a57
Rename ansible groups to use _ instead of - ( #7552 )
...
* rename ansible groups to use _ instead of -
k8s-cluster -> k8s_cluster
k8s-node -> k8s_node
calico-rr -> calico_rr
no-floating -> no_floating
Note: kube-node,k8s-cluster groups in upgrade CI
need clean-up after v2.16 is tagged
* ensure old groups are mapped to the new ones
2021-04-29 05:20:50 -07:00
c16efc9ab8
Fix Opensuse not working with ansible_distribution ( #7551 )
2021-04-26 08:37:02 -07:00
8c7b90ebbf
add ingress controller class ( #7522 )
2021-04-22 00:22:38 -07:00
38d9d2ea0e
Ambassador can watch multiple namespaces ( #7516 )
...
* Ambassador can watch multiple namespaces
* update variable name per PR review
2021-04-22 00:22:31 -07:00
Richard Fairthorne
Aleksandr Karabanov
Rob Tongue
Mathias Petermann
Mohamed Zaian
Bas
ERIK
rtsp
yanggang
Kenichi Omichi
Vladimir
Vadim
ghostloda
Cristian Calin
Samuel Liu
spaced
cyril-corbon
onock
Victor Morales
Max Gautier
Antoine Gatineau
zhengtianbao
ishizuka
Sergey
Florian Ruynat
rtsp
kongxs
Ian Martin