8bc0710073
clean up document ( #5214 )
2019-10-02 04:41:07 -07:00
fb591bf232
Apply workaround for NetworkManager and calico ( #5230 )
...
Change-Id: I5cb2bdf1a57707c1b8da3e5ac0c80e5c353480a4
2019-10-02 04:37:07 -07:00
a43e0d3f95
Switch to Kubernetes v1.16.0 ( #5189 )
...
* Switch to Kubernetes v1.16.0
Change-Id: I5d6a9528b2d443750fc5e031aff15ad3ffead158
* Fix download localhost cached file path
Change-Id: I65e79b70e3d1b37265ebc60f41b460cf4b0a0d47
* fix kubeadm etcd for v1.16
Change-Id: I6888a00fd48b530a38b0b31c4095492476af42d2
* disable tf packet jobs
Change-Id: I075c4666547fdea4c50ec04864f38e2cfaa79154
* Disable contiv packet jobs. Fix kube-router
Change-Id: I3170e8789e60711d4cee8faf65f2094480b79b8d
* bump sonobuoy version
Change-Id: Ib946905629c7c53ed88f08fb2f41c454457a0097
2019-10-02 02:21:07 -07:00
99dbc6d780
clean-up doc,spelling mistakes ( #5206 )
2019-09-26 04:25:08 -07:00
75e4cc2fd9
Updated kubectl.sh ( #5156 )
...
The script is not usable unless you are in the '.vagrant/provisioners/ansible/inventory/artifacts' folder.
This update makes this usable from anywhere.
2019-09-26 04:23:07 -07:00
81cb302399
MetalLB: fail if kube_proxy_strict_arp is false ( #5180 )
...
When using IPVS, kube_proxy_strict_arp = true is required
https://github.com/danderson/metallb/issues/153#issuecomment-518651132
Add kube_proxy_strict_arp to inventory/sample
2019-09-26 04:21:06 -07:00
3bcdf46937
fix-up some spelling mistakes ( #5202 )
2019-09-25 23:27:08 -07:00
1cf6a99df4
generate kubeadm download image list with options useHyperKubeImage ( #5203 )
2019-09-25 18:03:06 -07:00
f18e77f1db
Blocksize for calico default pool should be configurable ( #5198 )
2019-09-25 04:44:00 -07:00
2fc02ed456
fix-typo ( #5199 )
2019-09-25 04:04:00 -07:00
9db61c45ed
Upgrade nodelocaldns to 1.15.5 ( #5191 )
2019-09-22 20:13:22 -07:00
8cb54cd74d
fix broken scale procedure: ( #5193 )
...
- do not run etcd role when etcd_kubeadm_enabled == true
- remove default value 'systemd' for cgroup driver in containerd role.
this value override autodetect in kubelet_cgroup_driver_detected from docker info
2019-09-22 01:07:22 -07:00
a3f1ce25f8
Add support for k8s v1.14.6 ( #5182 )
2019-09-18 02:53:30 -07:00
3c7f682e90
Parameterize gcr, quay, and docker image repo defines ( #5146 )
...
This allows to easily override the gcr, quay, and docker repos with the
mirror repos in countries like China, where the default accesses are
blocked or unstable.
2019-09-18 02:49:30 -07:00
8984096f35
use hyperkubeimage to run controlplane containers ( #5178 )
2019-09-17 18:33:28 -07:00
1ce7831f6d
Update main.yml ( #5166 )
2019-09-17 05:36:24 -07:00
6fe2248314
Use more native way to update kubeconfigs using kubeadm ( #5165 )
...
Change-Id: I1076b418f85a26d9896be69910052128afc51cee
2019-09-13 03:40:29 -07:00
cb4f797d32
Fix macro on local_volume_provisioner ( #5168 )
...
mydict.keys() should be converted to list,
otherwise it causes errors in loop iteration.
Remove extra space after class name, which broke configmap.
Also allow set reclaimPolicy property.
2019-09-13 00:50:33 -07:00
eb40ac163f
Move cri_socket var to kubespray-defaults ( #5149 )
2019-09-10 12:30:55 -07:00
27ec548b88
Add support for k8s v1.16.0-beta.2 ( #5148 )
...
Cleaned up deprecated APIs:
apps/v1beta1
apps/v1beta2
extensions/v1beta1 for ds,deploy,rs
Add workaround for deploying helm using incompatible
deployment manifest.
Change-Id: I78b36741348f47a999df3841ee63cf4e6f377830
2019-09-10 12:06:54 -07:00
637f09f140
Fix ansible task titles ( #5154 )
...
* Fix ansible task titles for CRI connection tasks
* Fix Azure subscription ID check task title
2019-09-10 01:34:54 -07:00
9b0f57a0a6
Adjust endpoints for kube-proxy,controller,scheduler to proper ip ( #5150 )
...
Change-Id: I5aa009358bee7035922b5a10327997e47c9ba434
2019-09-09 10:33:20 -07:00
7f74906d33
Make haproxy/nginx client timeout configurable ( #5140 )
...
Change-Id: I61319a06eb33d9fc868e19941924f387088b856b
2019-09-05 00:32:51 -07:00
4d95bb1421
Use python3-libselinux on RHEL8/Centos8 ( #5127 )
...
* Use python3-libselinux on RHEL8/Centos8
* The fact ansible_facts.distribution_major_version is not present on older Ansible version.
Default it to 0 in when not present and use libselinux-python as package to get current
default behaviour.
2019-08-28 02:33:15 -07:00
184ac6a4e6
Parse calico nodes as json ( #5114 )
2019-08-27 10:16:42 -07:00
10e0fe86fb
remove unimplemented custom_flags vars, document the extra_args vars (issue 4352) ( #5108 )
2019-08-23 01:21:18 -07:00
7e1645845f
Allow calico settings to be modified ( #5101 )
...
Previous logic used calicoctl.sh create --skip-exists, which
allowed setting initial values, but not permitting changes.
2019-08-23 00:01:19 -07:00
f255ce3f02
Added CRI-O support for ubuntu ( #4629 )
...
* Added CRI-O support for ubuntu
* implemented feedback
* set crictl to fixed version
* Fix errors during rebasing
* Fix linting errors
2019-08-22 03:54:31 -07:00
07ecef86e3
Replace fetch with synchronize due to memory error ( #5084 )
...
Fix for Kubespray Issue #5059 (https://github.com/kubernetes-sigs/kubespray/issues/5059 ). There is a known issue with the 'fetch' module that will sometimes lead to it failing with a memory error. See ansible/ansible#11702 (https://github.com/ansible/ansible/issues/11702 ). I encountered this issue with the "Copy kubectl binary to ansible host" task in kubespray/roles/kubernetes/client/tasks/main.yml, and it caused my entire deployment to error out (see "Output of ansible run" above). Replacing 'fetch' with 'synchronize' fixes this issue.
2019-08-22 02:40:32 -07:00
3bc4b4c174
Use raw module for bootstrap-debian.yml ( #5061 )
...
Updated Openstack to terraform 0.12 (#5062 )
* update openstack to terraform 0.12(.5)
* replace cluter.tf with cluster.tfvars
* update README.md to terraform 0.12
* update Openstack CI tests to use terraform 0.12
* specify terraform version in openstack README
* gitlab CI to copy cluster.tfvars in case of openstack provider
* The terraform/openstack dynamic inventory can read
tfstate v4 (generated by terraform 0.12) and convert them internally
ro v3 (as generated by terraform 0.11.x).
Additionally the script has been updated to Python 3.
2019-08-22 01:46:31 -07:00
da089b5fca
Update CRI-O in CentOS ( #4582 )
...
According to their compatibility matrix[1] the 1.11.5 version seems to
be deprecated. This change updates the CentOS repository reference.
[1] https://github.com/cri-o/cri-o#compatibility-matrix-cri-o---kubernetes-clusters
2019-08-22 01:16:32 -07:00
494a6512b8
fix bug: run Copy image to ansible host cache on download_delegate host ( #5094 )
...
* run 'task download_container | Copy image to ansible host cache' with synchronize on download_delegate host
* try to run task copy file to ansible host on all inventory, not only on first random host
2019-08-21 23:38:30 -07:00
f6a63d88a7
Allow to configure strict ARP on kube-proxy ( #5092 )
2019-08-20 18:21:17 -07:00
86cc703c75
Upgrade to Kubernetes 1.15.3 ( #5091 )
2019-08-20 02:05:32 -07:00
4dba34bd02
add cinder max attached volumes ( #5089 )
2019-08-19 23:45:32 -07:00
b0437516c1
Kube-router annotate.yml: Use group 'k8s-cluster' instead of 'all' ( #5087 ) ( #5088 )
2019-08-19 04:53:29 -07:00
a1ff1de975
fix openstack_cacert conditional ( #5078 )
2019-08-15 05:50:34 -07:00
1bfbc5bbc4
remove resource-container default value for kube-proxy ( #4994 )
2019-08-15 05:30:33 -07:00
c5b4d3ceaa
upgrade Helm to 2.14.3 ( #5075 )
...
Signed-off-by: Bart Verwilst <bart@verwilst.be>
2019-08-15 04:34:33 -07:00
8fc9c5d025
Upgrade ingress nginx to 0.25.1 ( #5081 )
2019-08-15 04:14:34 -07:00
53bc80bb59
Ingress nginx ( #5066 )
...
* remove svc-default-backend
* update ingress-nginx clusterrole
2019-08-15 02:34:33 -07:00
771ce96e6d
Set initial kubeadm token if specified in kubeadm init ( #5057 )
...
Change-Id: I7fd94ec6d195af60d237b3cfe91668ca1f707d26
2019-08-15 02:26:33 -07:00
fc456ff0cd
move kube-ovn images to dockerhub ( #5063 )
2019-08-14 04:02:24 -07:00
b4f70db878
Fix broken containerd pinning on Ubuntu ( #5072 )
2019-08-13 19:26:23 -07:00
0a2f4edfc6
Always download coredns images with kubeadm ( #5071 )
...
Fixes situation when using manual mode because it
tries to download coredns v1.3.1 from the same
image repository where kubernetes images are
downloaded from.
Change-Id: Ibbec8a72c8162ce8befa74e2013a268737ea5f8a
2019-08-13 08:53:43 -07:00
56fa46716e
Add missing coredns tag. ( #5054 )
2019-08-09 02:29:27 -07:00
62aecd1e4a
multus | fix use last version ( #5041 )
2019-08-08 23:05:25 -07:00
973afef96e
Fix variable for rbd_provisioner_user_secret ( #5042 )
...
* Update main.yml
* fix dead link 404
2019-08-08 20:03:25 -07:00
a235605d2c
go to k8s 1.15.2, update nodelocaldns to latest bugfix release ( #5048 )
2019-08-08 19:49:25 -07:00
023108a733
Refactor calico route reflector to run in k8s cluster ( #4975 )
...
* Refactor calico-rr to run in k8s cluster with taint
Change-Id: I75a3169ff5b36ce8302fc7ef1c32d3eb697b5afa
* add preinstall checks
* rework calico/rr role
Change-Id: I2f0a7e6cb77cf91ad4a615923680760d2e5d9ca8
* add empty calico-rr group
Change-Id: I006c0a60db9b72d02245bf8fdfabcf982144a5ad
2019-08-08 07:37:22 -07:00
75d1be8272
Fix check for removing etcd member ( #5051 )
...
Change-Id: Ib27d051ff111f813097a9b33a86465a2a30a6db0
2019-08-07 08:26:51 -07:00
a44235d11b
Refactor remove node to allow removing dead nodes and etcd members ( #5009 )
...
Change-Id: I1c59249f08f16d0f6fd60df6ab61f17a0a7df189
2019-08-07 04:46:50 -07:00
7abf6a6958
Allow etcd member join by checking cluster health only on first etcd ( #5032 )
...
Change-Id: I9cc01cef3a437893225e2d9f58495826bbce7be9
2019-08-07 04:44:50 -07:00
b710c72f04
Add ability to setup virtual ip for ingress-controller ( #5044 )
2019-08-06 19:24:50 -07:00
bc6de32faf
Upgrade Cilium network plugin to v1.5.5. ( #5014 )
...
* Needs an additional cilium-operator deployment.
* Added option to enable hostPort mappings.
2019-08-06 01:37:55 -07:00
7cf8ad4dc7
Optionally refresh kubeadm token every time ( #5043 )
...
Change-Id: I278cb14aa93abf20160cc001f69e2f472504e6d8
2019-08-06 00:59:53 -07:00
02ec72fa40
Fix commands for using experimental kubeadm control plane ( #5006 )
2019-08-05 07:31:50 -07:00
d22634a597
Refactor containerd ubuntu setup and remove redundant tasks ( #5015 )
2019-08-05 07:29:48 -07:00
f3df0d5f4a
Always create bash_completion.d folder ( #5039 )
2019-08-04 18:15:48 -07:00
92bfcf0467
Add CoreDNS endpoint_pod_names option ( #5012 )
2019-07-31 11:26:15 -07:00
54b1fe83f3
Add an option to reserve resources for OS system daemons ( #5007 )
2019-07-31 11:24:15 -07:00
1be788f785
add Kube-OVN cni to kubespray ( #5020 )
2019-07-30 20:10:20 -07:00
8afbf339f7
fix broken link ( #5023 )
2019-07-30 19:18:22 -07:00
8c935dfb50
Update CoreDNS to 1.6.0 ( #5021 )
2019-07-30 18:58:21 -07:00
66c5ed8406
Update critools to v1.15.0 ( #5016 )
2019-07-30 12:04:09 -07:00
4087e97505
Additional files and dirs to remove when running reset ( #5000 )
2019-07-30 12:02:08 -07:00
da50ed0936
move flexvolume plugin directory creation to preinstall ( #4999 )
...
* move flexvolume plugin directory creation to preinstall
* changes per pr feedback
2019-07-30 12:00:10 -07:00
fbbfff3795
fix broken ubuntu containerd engine ( #5002 )
2019-07-30 11:58:11 -07:00
fb9103acd3
Update calico-typha deployment to address v3.7.x changes ( #5003 )
...
* Update calico-typha deployment to address v3.7.x changes
So that calico-typha works for Calico v3.7.x.
* Apply changes for v3.7.x only.
2019-07-24 09:12:16 -07:00
49d921cf91
Restart canal after scale or upgrade. Just like PR#4531, but for canal ( #4992 )
2019-07-22 00:50:53 -07:00
fe29c97ae8
add ansible_hostname and ansible_fqdn to apiserver_sans ( #4990 )
2019-07-22 00:48:53 -07:00
2abb6c8689
update to kubernetes 1.15.1 ( #4989 )
...
* update to kubernetes 1.15.1
* Revert to sonobuoy 0.15.0
* update test timeout from 3 to 5 minutes
2019-07-21 12:24:51 -07:00
a3ca441998
Remove unused handlers from Flannel CNI ( #4984 )
...
* Only reload docker when is_atomic for Flannel
* Remove unused handlers from Flannel CNI
2019-07-21 00:16:54 -07:00
9cf503acb1
configure docker_options directly with template ( #4912 )
2019-07-21 00:12:53 -07:00
1cbdd7ed5c
Fixup etcdctl download for etcd kubeadm mode ( #4991 )
...
Change-Id: I8d8e59a97823390f40e8810905ca52430329f040
2019-07-21 00:08:53 -07:00
428e52e0d1
Fix calico handler for containerd ( #4985 )
...
crictl tool must be used to delete containers in case of containerd
deployment
2019-07-16 08:35:24 -07:00
70dc222719
Upgrade local volume provisioner to v2.3.2 ( #4983 )
2019-07-16 05:27:26 -07:00
69f796f0c7
use the locally deployed kubectl binary within the kubectl.sh helper script ( #4311 )
2019-07-16 02:23:25 -07:00
5826f0810c
Check all apt config files for configured proxies ( #4972 )
2019-07-16 01:41:24 -07:00
de9443a694
remove unused code ( #4981 )
2019-07-16 01:39:24 -07:00
99c5f7e013
add k8s_external plugin to CoreDNS configuration ( #4704 )
2019-07-16 00:53:23 -07:00
23ae6027ab
remove support for calico v2.x ( #4974 )
...
* Remove support for calico below version v3.0.0
Change-Id: If8fe3036b9e054901a8b2c48516eff1e1271970f
* Update main.yml
* fixup node peering
Change-Id: Ifac4d363deba826f0c80e390ce80a28df9827323
* fixups
Change-Id: Ic35417330af6741962003b3930604393c90804d1
* fixups
Change-Id: I0ea82d634bb0c81d9b7dc50569c70988bc8d3a3b
2019-07-15 07:47:09 -07:00
781b5691c9
prep_kubeadm_images: parse repo and tag ( #4976 ) ( #4977 )
2019-07-15 03:15:09 -07:00
fd9bbcb157
Enable nodes to run calicoctl for calico kdd mode ( #4956 )
...
* Enable nodes to run calicoctl
per-node tasks require waiting for calico-node to be applied
Change-Id: Ibe1076b7334a2da0332f2dd766fde0c3f172d1f2
* cleanup tasks that should run on master
Change-Id: I43a837879ef41596f14657ecd7f813899b6865ae
* Switch run_once calico logic to just run on first master
Change-Id: I6893711e354f63c5e1eaf6ac2e23d9a6347a555d
2019-07-15 01:59:06 -07:00
161a8f55fa
Update CoreDNS to 1.5.2 ( #4970 )
2019-07-15 00:59:06 -07:00
7481cc31e1
Update Weave CNI to 2.5.2 ( #4969 )
2019-07-15 00:57:06 -07:00
b15b6e834f
fix parsing refresh of kubeadm cert key ( #4971 )
...
* fix parsing refresh of kubeadm cert key
Change-Id: I4de2a1df6498790a80351b4bc7d88e6c9e470358
* Update kubeadm-secondary-experimental.yml
2019-07-15 00:45:06 -07:00
76640cf1a1
update docker-ce to 18.09.7 ( #4973 )
2019-07-14 22:59:04 -07:00
46bef931e9
Fix images info logic for containerd ( #4965 )
...
As crictl tool is used to download images, it must be also used to gather
images info
2019-07-12 03:29:07 -07:00
a36e9ae690
Add checksums for k8s 1.14.4 ( #4959 )
2019-07-11 23:19:05 -07:00
728155a2a1
Support for Oracle Linux ( #3655 )
...
Fixed Issue #1032
test case for OEL7 AIL with kubeadm
Add packet CI stuff for oracle 7
2019-07-11 23:17:05 -07:00
cdf9a9f4fc
Generate certificate key before kubeadm control plane config ( #4964 )
2019-07-11 05:30:54 -07:00
29307740dd
Enable containerd to deploy vanilla containerd package ( #4951 )
...
* Enable containerd to deploy vanilla containerd package
Fixes kubeadm references to CRI socket for containerd
Fixes download role cache feature to work with containerd
Change-Id: I2ab8f0031107e2f0d1a85c39b4beb66f08509a01
* use containerd for flannel-addons job
Change-Id: Ied375c7d65e64a625ffbd995ff16f2374067dee6
* add containerd vars
Change-Id: Ib9a8a04e501c481a86235413cbec63f3672baf91
* fixup vars
Change-Id: Ibea64e4b18405a578b52a13da100384582aa24c2
* more fixes
* fix rh repo
Change-Id: I00575a77cfb7b81d6095db5d918a52023c8f13ba
* Adjust helm host install for containerd
2019-07-10 23:46:54 -07:00
20c7e31ea3
Add calico 3.7.3 support ( #4953 )
...
* Add calico 3.7.3 support
* add calico_datastore variable to policy controller role
* add missing clusterrole rules for calico policy controller
* disable calico kube controller when kdd mode is used for versions < 3.6
2019-07-09 12:42:28 -07:00
65065e7fdf
Default kubeadm_images to empty dict instead of set_fact ( #4957 )
...
Change-Id: I9ef52232176fe8e2a99b4f09ae05e1451f7ad1ff
2019-07-09 12:07:30 -07:00
352297cf8d
Fixup deploy of kubeadm etcd for Kubernetes v1.15.0 ( #4952 )
...
* Fixup deploy of kubeadm etcd for Kubernetes v1.15.0
Change-Id: If42c2c75c4d278ba9475ebf76c243f3e6ee4d02e
* undo renaming cloud config file
Change-Id: Iafbd27c3887d6a2a6d0819c711f150ecf70c515d
2019-07-09 15:41:59 +03:00
a67a50f9c0
nodelocaldns: allow to set health port, switch to 9254 by default ( #4902 )
...
8080 is a pretty common port, using nodelocaldns_ip:8080 still
prevents node processes or hostNetwork=true processes to bind to *:8080
so switch to 9254 by default (prometheus port is 9253)
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2019-07-09 00:52:01 -07:00
324bc41097
Add support for Docker plugins ( #4934 )
...
* Add support for Docker plugins
* support multiple Docker plugins using looped include
* fix yamllint error
2019-07-08 06:44:35 -07:00
c81b443d93
Fix order of names in /etc/hosts ( #4940 )
...
Configure fqdn properly
2019-07-08 06:08:34 -07:00
dc16ab92f4
fix for calico with kdd datastore ( #4922 )
...
* fix for calico with kdd datastore
* remove AS number from daemonset
* revert changes to canal
* additionnal fixes for kdd datastore in calico
2019-07-08 12:20:03 +03:00
陈谭军
Matthew Mosesohn
Richard Scott
Etienne Champetier
Sergey
Erwan Miran
pando85
Florent Monbillard
Qingkun Li
Mario
andreyshestakov
Richard Arends
rptaylor
Neven Miculinic
Michael Oglesby
ewtang
Victor Morales
Tony Fouchard
Andreas Krüger
Hugo Blom
Xiaodu
Ali Sanhaji
Zou Nengren
Bort Verwilst
w33dw0r7d
刘旭
Oilbeater
Sergey Kolekonov
Danilo Riecken P. de Morais
Simon Lelievre
Maxim Snezhkov
Holger Frydrych
Remous-Aris Koutsiamanis
Johannes Scheuermann
Mark Janssen
koriukiv
Jeff Bornemann
okamototk
Aleksey Kasatkin
nico-netminded
Tilman Beitter
Vincent Link
Alex Barcelo
Waret
Stanislav Makar
jlacoline
Julian Tabel