a3e34f589a
Enable Graceful Node Shutdown for Kubernetes >= 1.21.0 ( #7746 )
...
* Enable Graceful Node Shutdown for Kubernetes >= 1.21.0
* Add sample graceful shutdown parameters
2021-06-27 23:53:25 -07:00
a2cf6816ce
Calico wireguard ( #7638 )
...
* Calico: add Wireguard support
* CI: Add Calico Wireguard scenario
2021-06-25 03:22:45 -07:00
bbcafb5d7b
Clean up residual files about modules-load.d ( #7737 )
...
When reset, need to clean up files kube_proxy-ipvs.conf and kubespray-br_netfilter.conf.
2021-06-25 00:32:45 -07:00
a31baf3c16
Fix deployment without openstack cacert ( #7723 )
...
* fix group name
* fix external-openstack-cloud-config secret
* don't add ca.cert in the secret if not defined
2021-06-21 05:38:50 -07:00
e83728897b
Clean up residual files ( #7722 )
...
* Clean up residual files
When reset, you need to clean up to the kerw directory.
* Update main.yml
2021-06-21 05:34:50 -07:00
282a27a07c
gVisor: initial support for gVisor container runtime ( #7661 )
...
* Docker/Containerd: move downloads urls to containerd-common
* gVisor: initial support for gVisor container runtime
2021-06-21 05:18:51 -07:00
3fe6dbb65c
fix image pull url for coredns v1.8.0 ( #7702 )
2021-06-16 17:00:19 -07:00
7547e6a272
Ubuntu 21.04 changed packagename python-apt in python3-apt ( #7715 )
2021-06-16 13:58:00 -07:00
1928dafc7e
Revert to conmon location override for Redhat and Fedora ( #7701 )
2021-06-16 09:07:59 -07:00
e77b9bf3ee
Update kube-ovn to 1.7.0 ( #7686 )
2021-06-16 08:10:00 -07:00
7f7e83a4d9
fix local-path-provisioner helper image repo ( #7703 )
2021-06-16 08:06:00 -07:00
85fe716d46
Drop "Server" from crio repo URL ( #7698 ) ( #7699 )
...
$releasever can be 7Server, but there is no such CentOS path on
download.opensuse.org.
Use ansible_distribution_major_version instead of $releasever.
2021-06-11 05:10:59 -07:00
85ff3eb8be
Update the version of local_volume_provisioner ( #7684 )
...
As [1], v2.4.0 has been released already for local_volume_provisioner.
This updates the version.
[1]: https://github.com/kubernetes-sigs/sig-storage-local-static-provisioner/tags
2021-06-11 04:36:59 -07:00
e55c359cf9
Updage docker packages to 20.10.7 ( #7685 )
2021-06-11 04:32:59 -07:00
d66da21726
make sure serviceaccounts/token is only in the metadata stage ( #7679 )
2021-06-07 08:38:40 -07:00
1069b05e68
Improve scale flow and documentation ( #7610 )
...
* Improve scale flow
* Add confirmation prompt again
2021-06-07 05:02:40 -07:00
ec0c0d4a28
Calico enable support for eBPF ( #7618 )
...
* Calico: align manifests with upstream
* allow enabling typha prometheus metrics
* Calico: enable eBPF support
* manage the kubernetes-services-endpoint configmap
* Calico: document the use of eBPF dataplane
* Calico: improve checks before deployment
* enforce disabling kube-proxy when using eBPF dataplane
* ensure calico_version is supported
2021-06-07 04:58:39 -07:00
1739b27231
Replace yum module with package module ( #7621 )
2021-06-05 04:16:39 -07:00
d9d29af87f
update containerd to version 1.4.6 ( #7674 )
2021-06-03 10:55:38 -07:00
7036b704b3
Replace Kata 1.x with Kata 2.x ( #7670 )
...
* Kata: add Kata 2.x checksums and adjust download urls for 2.x
* Kata: drop 1.x version which is no longer supported
* Kata: set default version 2.1.0
2021-06-02 00:50:41 -07:00
54cda80018
Fix debian docker available version ( #7668 )
2021-06-01 20:58:39 -07:00
6a2ea94b39
Docs improvements ( #7660 )
...
* Docs: update sidebar
* Docs: move registry documentation into docs/
* Docs: move rbd_provisioner documentation into docs/
* Docs: move cephfs_provisioner into docs/
* Docs: move local_volume_provisioner documentation into docs/
* Docs: move ambassador.md to docs/ingress_controller/
* Docs: move metallb.md to docs/ingress_controller/
* Docs: move ingress_nginx documentation into docs/
* Docs: move alb_ingress_controller documentation into docs/
* Docs: merge ambassador documentation into docs/ingress_controller/
* Docs: move cert_manager documentation into docs/
* Docs: move bootstrap-os documentation into docs/
* Docs: update file locations in sidebar
2021-06-01 07:30:27 -07:00
4674b03661
Add cinder_csi_ignore_volume_az ( #7624 )
...
Signed-off-by: Cedric Hnyda <cedric.hnyda@itera.io>
2021-06-01 07:10:27 -07:00
922de32290
spelling mistakes ( #7664 )
...
Signed-off-by: kjinan <2008kongxiangsheng@163.com>
2021-05-31 05:46:26 -07:00
7896bc7831
Add Fedora 33 image and CI, remove Fedora 31 (EOL) + update docker packages ( #7657 )
...
* Update docker package to 20.10.6
* Add Fedora 33 image and CI, remove Fedora 31 (EOL)
2021-05-28 08:04:25 -07:00
da07459bd6
Update crun 0.19 checksum ( #7655 )
...
Checksum of crun 0.19 is not correct, this commit fixes it
2021-05-27 15:20:23 -07:00
3ca205446e
Added possibility to specify vSphere credentials via env variables ( #7646 )
...
* Added possibility to specify vSphere credentials via env variables
* Removed excessive spacing
2021-05-27 12:02:30 -07:00
eff1931283
Add retries to 'Set label for route reflector' task ( #7645 )
2021-05-27 12:02:23 -07:00
fd8ae54fa7
Docker default version is now 20.10
2021-05-27 11:18:24 -07:00
79fdee3979
Bump crio to default 1.21
2021-05-27 11:18:24 -07:00
a754c0d476
Kubernetes now use CoreDNS 1.8.0
2021-05-27 11:18:24 -07:00
7208169db3
Update kubernetes version to 1.21.1
2021-05-27 11:18:24 -07:00
7b5d43cc00
Calico: upgrade 3.18 to 3.18.4 ( #7648 )
2021-05-26 05:51:21 -07:00
c5ccedb694
store openstack external cloud controller ca.cert in a k8s secret instead of the host filesystem ( #7603 )
2021-05-26 00:35:21 -07:00
858b29f425
Calico: add support for v3.19.1 ( #7630 )
...
* Calico: add v3.19.1 hashes
* enable liveness probe for calico-kube-controllers
3.19.1
* Calico: drop support for v3.16.x
* Calico: promote v3.18.3 as default
2021-05-25 13:40:50 -07:00
7db76f8809
Add nodeSelctor for other services and node labels before CNI setup ( #7613 )
2021-05-25 13:40:43 -07:00
bcf695913f
Fix Oracle yum disabled repository file after EPEL install ( #7639 )
2021-05-25 08:30:23 -07:00
59fc17f4e3
Override the default value of containerd's root, state, and oom_score ( #7622 )
...
* Override the default value of containerd's root, state, and oom_score configurations
* Add tests data for containerd_storage_dir, containerd_state_dir and containerd_oom_score variables
2021-05-19 08:24:53 -07:00
c1aa755a3c
Fix missing broken_etcd filter in recover control plane task ( #7619 )
2021-05-18 10:29:04 -07:00
29c2fbdbc1
Fix cloud_resolver type from str to list (issue #7605 ) ( #7606 )
2021-05-18 06:41:30 -07:00
4b9f98f933
Fix pull_by_digest variable type to boolean instead of str ( #7612 )
2021-05-18 06:29:31 -07:00
e9870b8d25
add support for using ansible 2.10.x for deploying kubespray ( #7600 )
...
* add support for using ansible 2.10.x for deploying kubespray
* move dns-autoscaler-clusterrole{binding}.yml to files/ folder
* note that ansible 2.10 is now experimentally supported
* coredns: move files to templates like before #4341
2021-05-18 05:39:31 -07:00
e0c74fa082
Update nerdctl version to 0.8.1 ( #7617 )
2021-05-17 11:07:30 -07:00
bdf74c6749
Set default version to 1.20.7
2021-05-14 09:48:06 -07:00
d6f9a8d752
Update hashes with 1.21.1/1.20.7/1.19.11
2021-05-14 09:48:06 -07:00
14cf3e138b
Support Calico advertisement of MetalLB LoadBalancer IPs ( #7593 )
...
* add initial MetalLB docs
* metallb allow disabling the deployment of the metallb speaker
* calico>=3.18 allow using calico to advertise service loadbalancer IPs
* Document the use of MetalLB and Calico
* clean MetalLB docs
2021-05-12 05:22:17 -07:00
afbabebfd5
Enables Calico serviceAccount token monitoring and update of /etc/cni/net.d/calico-kubeconfig if need be. ( #7586 )
...
Since K8S 1.21, BoundServiceAccountTokenVolume feature gate is in beta stage, thus activated by default (anyone who follows CSI guidelines has enabled AllAlpha and faced the issue before 1.21).
With this feature, SA tokens are regenerated every hour.
As a consequence for Calico CNI, token in /etc/cni/net.d/calico-kubeconfig copied from /var/run/secrets/kubernetes.io/serviceaccount in install-cni initContainer expires after one hour and any pod creation fails due to unauthorization.
Calico pods need to be restarted so that /etc/cni/net.d/calico-kubeconfig is updated with the new SA token.
2021-05-11 08:47:36 -07:00
8c0a2741ae
allow overriding calico peers names and avoid ipv6 naming issues ( #7591 )
2021-05-11 07:05:36 -07:00
d90baa8601
add containerd support for Amazon Linux 2 ( #7595 )
2021-05-10 19:25:36 -07:00
d5660cd37c
Fix reset cluster task failed ( #7597 )
2021-05-10 17:25:36 -07:00
Cristian Calin
jayonlau
Id2ndR
Sergey
flix444
Florian Ruynat
Samuel Liu
Marko Kohtala
Kenichi Omichi
Kasakaze
forselli-stratio
jiriproX
Cedric Hnyda
kongxs
AnatomicJC
Fredrik Liv
efrikin
Fatih Sarhan
Pavel Martynov
Muzi Li
emiran-orange