RuriRyan
c2710899ed
Fixes network restart for Ubuntu Bionic Beaver ( #3600 )
...
As Ubuntu Bionic Beaver uses systemd-networkd the step fails
if it tries to restart networking, as it is nonexistent.
2018-11-09 08:13:57 -08:00
Erwan Miran
a6932b6b81
Install ipvsadm when kube_proxy_mode is ipvs ( #3548 )
2018-11-07 14:04:11 -08:00
Erwan Miran
77d705ca9f
cluster_name is to be set in initConfiguration too ( #3661 )
2018-11-07 12:41:11 -08:00
Erwan Miran
1e22c83f0f
kube_override_hostname must be in kubernetes/master role defaults ( #3647 )
2018-11-07 12:38:19 -08:00
Erwan Miran
1ad1e80ae3
Checking new CA key presence is not relevant to determine if kubeadm has already run ( #3653 )
2018-11-07 11:46:11 -08:00
Matthew Mosesohn
2ba4e9bda5
Skip most of kubernetes/preinstall role during late DNS config ( #3627 )
...
When using resolvconf_mode host_resolvconf, there is an early DNS
config stage where Kubernetes cluster DNS is not injected for host
DNS intially. Later, the cluster DNS is enabled, but we do not
need to run every task from the kubernetes/preinstall role.
2018-11-01 08:08:50 -07:00
Louis
a84508d6b9
remove deprecated parameters of blockinfile module ( #3581 )
2018-10-30 05:56:58 -07:00
Louis
93104d9224
fix typo
2018-10-24 11:39:15 +08:00
Matthew Mosesohn
7e84de2ae1
Purge /root/.kube/config when migrating to kubeadm ( #3566 )
2018-10-23 05:09:11 -07:00
Maxim Makarov
8a17de327e
Not necessary run on Nginx proxy all cpu cores ( #3559 )
2018-10-20 13:56:53 -07:00
Matthew Mosesohn
127969d65f
Align node-role value for kubeadm compatibility ( #3558 )
...
kubeadm sets node label node-role.kubernetes.io/master=''
and this is not configurable. We should use it everywhere.
2018-10-20 07:12:54 -07:00
Matthew Mosesohn
4bdd0ce417
Allow kubeadm master untaint to fail ( #3549 )
2018-10-19 00:38:12 -07:00
Erwan Miran
87193fd270
Fix ansible syntax to avoid ansible warnings (one more) ( #3536 )
...
* warning on meta flush_handlers
* avoid rm
* avoid "Module remote_tmp /root/.ansible/tmp did not exist and was created with a mode of 0700, this may cause issues when running as another user. To avoid this, create the remote_tmp dir with the correct permissions manually" warning on subsequent tasks using blockinfile
* is match
2018-10-17 12:27:11 -07:00
Erwan Miran
7bec169d58
Fix ansible syntax to avoid ansible deprecation warnings ( #3512 )
...
* failed
* version_compare
* succeeded
* skipped
* success
* version_compare becomes version since ansible 2.5
* ansible minimal version updated in doc and spec
* last version_compare
2018-10-16 15:33:30 -07:00
Rong Zhang
76fe84fe93
Use imageRepository instead of the unifiedControlPlaneImage ( #3484 )
2018-10-16 07:26:04 -07:00
刘旭
cf4dd645a7
fix --etcd-servers-overrides invalid ( #3470 )
2018-10-16 07:25:03 -07:00
JuanJo Ciarlante
a5edd0d709
[jjo] add kube-router support ( #3339 )
...
* [jjo] add kube-router support
Fixes cloudnativelabs/kube-router#147 .
* add kube-router as another network_plugin choice
* support most used kube-router flags via
`kube_router_foo` vars as other plugins
* implement replacing kube-proxy (--run-service-proxy=true) via
`kube_proxy_mode: none`, verified in a _non kubeadm_enabled_
install, should also work for recent kubeadm releases via
`skipKubeProxyInstall: true` config
* [jjo] address PR#3339 review from @woopstar
* add busybox image used by kube-router to downloads
* fix busybox download groups key
* rework kubeadm_enabled + kube_router_run_service_proxy
- verify it working ok w/the kubeadm_enabled and
kube_router_run_service_proxy true or false
- introduce `kube_proxy_remove` fact, to decouple logic
from kube_proxy_mode (which affects kubeadm configmap
settings, thus no-good to ab-use it to 'none')
* improve kube-router.md re: kubeadm_enabled and kube_router_run_service_proxy
* address @woopstar latest review
* add inventory/sample/group_vars/k8s-cluster/k8s-net-kube-router.yml
* fix kube_router_run_service_proxy conditional for kube-proxy removal
* fix kube_proxy_remove fact (w/ |bool), add some needed kube-proxy tags on my and existing changes
* update kube-router tolerations for 1.12 compatibility
* add PriorityClass to kube-router DaemonSet
2018-10-16 07:15:05 -07:00
anarcat
c33e08c3fa
show FQDN first in /etc/hosts ( closes : #3521 ) ( #3522 )
...
The hosts(5) manpage clearly states that the first entry is the
"canonical name", or FQDN (Fully-Qualified Domain Name):
IP_address canonical_hostname [aliases...]
By using the alias as a first entry, `hostname -f` does not return the
correct domain which breaks all sorts of unrelated functionality (it
has impact over email server configuration, for example).
2018-10-16 03:55:55 -07:00
Erwan Miran
fcd8d850dc
Fix ansible syntax to avoid ansible warnings (again) ( #3509 )
...
* Fix ansible syntax to avoid ansible warnings (again)
* warn: false on tar -cfz
* wrong placement of warn:false
2018-10-15 23:47:04 -07:00
JuanJo Ciarlante
4077934519
[jjo] add DIND support to contrib/ ( #3468 )
...
* [jjo] add DIND support to contrib/
- add contrib/dind with ansible playbook to
create "node" containers, and setup them to mimic
host nodes as much as possible (using Ubuntu images),
see contrib/dind/README.md
- nodes' /etc/hosts editing via `blockinfile` and
`lineinfile` need `unsafe_writes: yes` because /etc/hosts
are mounted by docker, and thus can't be handled atomically
(modify copy + rename)
* dind-host role: set node container hostname on creation
* add "Resulting deployment" section with some CLI outputs
* typo
* selectable node_distro: debian, ubuntu
* some fixes for node_distro: ubuntu
* cpu optimization: add early `pkill -STOP agetty`
* typo
* add centos dind support ;)
* add kubespray-dind.yaml, support fedora
- add kubespray-dind.yaml (former custom.yaml at README.md)
- rework README.md as per above
- use some YAML power to share distros' commonality
- add fedora support
* create unique /etc/machine-id and other updates
- create unique /etc/machine-id in each docker node,
used as seed for e.g. weave mac addresses
- with above, now netchecker 100% passes WoHooOO!
🎉 🎉 🎉
- updated README.md output from (1.12.1, verified
netcheck)
* minor typos
* fix centos node creation, needs earlier udevadm removal to avoid flaky facts, also verified netcheck Ok \o/
* add Q&D test-distros.sh, back to manual /etc/machine-id hack
* run-test-distros.sh cosmetics and minor fixes
* run-test-distros.sh: $rc fix and minor formatting changes
* run-test-distros.sh output cosmetics
2018-10-15 09:44:02 +02:00
Loic Gouarin
36322901a6
fix kube-controller-manager config with openstack-cacert ( #3435 )
2018-10-12 06:39:58 -07:00
Johann Queuniet
1911fe5ca8
fix nginx proxy configuration conflicts ( #3489 )
...
* Allow configuration of nginx proxy config path
* Fix the internal nginx configuration location
Signed-off-by: Johann Queuniet <contact@lordran.net>
2018-10-11 06:33:18 -07:00
Andreas Krüger
2117e8167d
Update pre-install verify settings with network checks and etc. ( #3504 )
...
* Update pre-install verify settings with network checks and etc.
* Remove upstream dns server check. It's bogus
2018-10-11 06:28:21 -07:00
Erwan Miran
dd5327ef9e
Fix ansible syntax to avoid ansible warnings ( #3499 )
2018-10-11 00:45:00 -07:00
Erwan Miran
2ab2f3a0a3
Ability to define SSL certificates duration and SSL key size ( #3482 )
...
* Ability to specify ssl certificate duration and ssl key size - etcd/secrets
* Ability to specify ssl certificate duration and ssl key size - helm/contiv + fix contiv missing copy certs generation script
2018-10-09 04:43:30 -07:00
okamototk
c825f4d180
Untaint master when it has node role ( #3466 )
2018-10-09 01:40:43 -07:00
Dylan
30132d8c35
Removed hostname truncation. ( #3409 )
2018-10-08 05:14:01 -07:00
Chad Swenson
6602760a48
Support multiple local volume provisioner StorageClasses ( #3450 )
...
- Local Volume StorageClass configuration is now manged by `local_volume_provisioner_storage_classes`, a list of maps that specifies local storage classes with `name` `host_dir` and `mount_dir` keys per entry
- Tasks and templates updated to loop through local volume storage classes
- Previous defaults for path/class names were not changed
- Fixed an issue where a `kubernetes/preinstall` was creating directories inconsistently with the `kubernetes-apps/external_provisioner/local_volume_provisioner` task
2018-10-05 05:52:25 -07:00
Rong Zhang
af97febb04
Upgrade kubernetes to v1.12.0 ( #3410 )
...
* Upgrade kubernetes to v1.12.0
Use kubeadm v1alpha3 config
* Upgrade coredns and etcd
* Upgrage docker to 18.06
2018-10-04 02:05:55 -07:00
LiuDui
192f7967c9
Remove excess space ( #3421 )
2018-10-01 00:09:45 -07:00
rboyapat
d9f495d391
Fix the dic iteration method in the kubelet template ( #3415 )
...
* Fix the jinja expression for openstack_tenant_id
OS_PROJECT_ID is obsolete in keystone v3 and jinja expression
doesn't set openstack_tenant_id as expected because of
undefined env var. Fixed the expression.
* Fix the dic iteration method in the kubelet template
Kubelet template rendering errors when additional Node lables are
added and using Python3. Update the method to be compatible to both
python2/3
Node lables doesn't work
2018-09-30 05:10:12 -07:00
sangwook
0536125f75
Better fix for openstack cinder zone issue using ignore-volume-az option ( #2980 )
...
* Better fix for openstack cinder zone issue[1][2]
using ignore-volume-az option[3].
[1]: https://github.com/kubernetes-incubator/kubespray/pull/2155
[2]: https://github.com/kubernetes-incubator/kubespray/pull/2346
[3]: https://github.com/kubernetes/kubernetes/pull/53523
* Remove kube-scheduler-policy.yaml
2018-09-27 22:15:47 -07:00
Shida Qiu
8b8e534769
remove the redundant space ( #3400 )
2018-09-27 03:32:26 -07:00
Kuldip Madnani
36898a2c39
Adding pod priority for all the components. ( #3361 )
...
* Changes to assign pod priority to kube components.
* Removed the boolean flag pod_priority_assignment
* Created new priorityclass k8s-cluster-critical
* Created new priorityclass k8s-cluster-critical
* Fixed the trailing spaces
* Fixed the trailing spaces
* Added kube version check while creating Priority Class k8s-cluster-critical
* Moved k8s-cluster-critical.yml
* Moved k8s-cluster-critical.yml to kube_config_dir
2018-09-25 07:50:22 -07:00
Andreas Krüger
d6ebe8c3e7
Sync manifests with kubeadm ( #3383 )
2018-09-24 02:17:18 -07:00
Sergey Magidovich
2197330727
Add check that kube-master, kube-node and etcd groups are not empty.
2018-09-21 17:02:53 +03:00
k8s-ci-robot
51a5f54fc4
Merge pull request #3335 from AtzeDeVries/fix/ubuntu-xenial-resolv-conf
...
Fix/ubuntu xenial resolv conf
2018-09-20 23:16:11 -07:00
Rajitha Perera
e3d562bcdb
Support for AWS cloud-config ( #1465 )
...
* Support for AWS cloud-config
* Update docs
* Fix version incompatibilities
* Do not use shorthand `default`
* Add new cloud config variable, roleArn
2018-09-20 16:31:28 +02:00
rongzhang
4d1055f5d5
Remove some useless files
2018-09-20 20:24:06 +08:00
Andreas Kruger
09b67c1ad5
Remove EFK from Kubespray
2018-09-20 10:44:17 +02:00
k8s-ci-robot
8512cc5cca
Merge pull request #3280 from wozniakjan/openstack/openstack_cacert
...
Check `openstack_cacert` for empty string
2018-09-19 22:42:37 -07:00
k8s-ci-robot
34d1f0bff2
Merge pull request #3351 from woopstar/kubeadm_token_basic_auth_fix
...
Mount basic auth or token auth dirs to support it on kubeadm deployments
2018-09-19 07:50:43 -07:00
Jan Wozniak
a330b281e8
Check `openstack_cacert` for empty string
2018-09-19 16:37:24 +02:00
k8s-ci-robot
a8a62afd74
Merge pull request #3304 from kubernetes-incubator/gpu2
...
Add support for GPU accelerator
2018-09-19 07:12:32 -07:00
k8s-ci-robot
7fa682bdd5
Merge pull request #3342 from okamototk/fix_path_for_kubeadm_join
...
Add kubelet path for kubeadm.
2018-09-19 06:17:47 -07:00
Aivars Sterns
34019291b8
Merge pull request #3143 from jbcraig/add_os_trust_id
...
add support for openstack trust to cloud provider config
2018-09-19 16:07:03 +03:00
Antoine Legrand
08179018d4
Merge branch 'master' into gpu2
2018-09-19 15:02:51 +02:00
k8s-ci-robot
39c567de47
Merge pull request #3307 from kaarolch/upgrade_docs
...
Calico version verification before cluster upgrade begin.
2018-09-19 05:15:55 -07:00
Andreas Kruger
cac485756b
Mount basic auth or token auth dirs to support it on kubeadm deployments
2018-09-19 13:21:58 +02:00
Andreas Kruger
c058e7a5ec
Remove audit again from Kubeadm 1.10.x. Write mounts not supported untill 1.11
2018-09-19 13:15:14 +02:00
Andreas Kruger
e0ddabc463
Add support for kubelet_node_custom_flags
2018-09-19 12:58:06 +02:00
Andreas Kruger
940d2fdbb1
Add missing enforce-node-allocatable to kubelet for kubeadm deployments
2018-09-19 11:54:34 +02:00
Andreas Kruger
1c999b2a61
Move kube_kubeadm_controller_extra_args to controllerManagerExtraArgs section. It was placed in controllerManagerExtraVolumes
2018-09-19 11:24:19 +02:00
Andreas Kruger
8e37841a2e
Add audit support to v1alpha1 of Kubeadm
2018-09-19 11:01:30 +02:00
Andreas Kruger
8d1c0c469c
Added missing enable-aggregator-routing option
2018-09-19 10:58:46 +02:00
Andreas Kruger
26d7380c2e
Sync manifests from non-kubeadm to kubeadm deploy
2018-09-19 10:01:45 +02:00
Takashi Okamoto
95703fb6f2
Add kubelet path for kubeadm.
2018-09-19 03:04:03 +00:00
Karol Chrapek
0121bce9e5
Instead of doc update, change the verify step
2018-09-18 22:13:15 +02:00
AtzeDeVries
4cbd97667d
Merge remote-tracking branch 'upstream/master' into fix/ubuntu-xenial-resolv-conf
2018-09-18 09:51:46 +02:00
rongzhang
77e08ba204
Support dynamic kubelet config
...
https://kubernetes.io/blog/2018/07/11/dynamic-kubelet-configuration/
2018-09-18 08:44:39 +08:00
AtzeDeVries
482857611a
added extra var for ubuntu 18 netplan resolv
2018-09-17 09:01:55 +02:00
AtzeDeVries
8d8bbc294a
fix for resolvconf in ubuntu18
2018-09-17 09:00:55 +02:00
rongzhang
84c4c7dc82
Use synchronize module
2018-09-16 20:36:44 +08:00
rongzhang
1d4aa7abcc
Fix upgrade k8s
2018-09-16 10:35:12 +08:00
Rong Zhang
aa0da221e9
Merge pull request #2880 from hfinucane/rh7-paths
...
Fix #2261 by supporting Red Hat's limited PATH
2018-09-15 19:27:22 +08:00
k8s-ci-robot
ffbe9e7fd8
Merge pull request #1973 from guenhter/rsync-cmd-to-synchronize
...
Replace the raw rsync command with the synchronize module
2018-09-13 03:12:05 -07:00
AtzeDeVries
91b02c057e
Add support for GPU accelerator
2018-09-13 11:53:11 +02:00
Erwan Miran
af74d85b7d
Remove --insecure-bind-address when insecure-port=0
2018-09-12 08:22:11 +02:00
Chad Swenson
97e5f28537
Revert "Remove insecure-port and insecure-bind-address when possible"
2018-09-11 17:42:12 -05:00
k8s-ci-robot
5c2e9a5376
Merge pull request #3252 from mirwan/remove_insecure-bind-address_when_insecure-bind-port_is_0
...
Remove insecure-port and insecure-bind-address when possible
2018-09-07 07:41:21 -07:00
k8s-ci-robot
b3a689658b
Merge pull request #3255 from mlushpenko/calico_check
...
Fix calico health checks
2018-09-07 07:39:20 -07:00
k8s-ci-robot
9c49e071d3
Merge pull request #3260 from riverzhang/discoverytimeout
...
Add discovery_timeout to join configuration
2018-09-07 05:20:19 -07:00
rongzhang
0f63924ed4
Add discovery_timeout to join configuration
...
https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha2#JoinConfiguration
2018-09-07 16:28:53 +08:00
mlushpenko
ea2c9d8f57
Fix yaml checks
2018-09-06 16:26:57 +02:00
k8s-ci-robot
27905bbddf
Merge pull request #3250 from mattymo/openstack_cacert
...
Fix openstack cacert task
2018-09-06 06:15:59 -07:00
Erwan Miran
a5509fc2ce
Remove insecure-port and insecure-bind-address when possible
2018-09-06 13:46:09 +02:00
Matthew Mosesohn
b614a3504b
Fix openstack cacert task
2018-09-06 14:06:06 +03:00
Matthew Mosesohn
991b3dbe54
put back endif in kubelet rkt template
2018-09-06 13:21:22 +03:00
Matthew Mosesohn
faedfb6307
remove broken endifs in kubelet rkt mode
2018-09-06 11:59:25 +03:00
Antoine Legrand
7e140e5f3c
Merge pull request #3122 from jbcraig/fix_cacert_feature
...
resolve issues with new cacert feature
2018-09-05 23:31:53 +02:00
rongzhang
435e098751
Fix feature-gates
2018-09-05 22:55:51 +08:00
Erwan Miran
a644b7c267
Introducing credentials_dir in order to be able to override it
2018-09-03 18:04:50 +02:00
k8s-ci-robot
c32145057d
Merge pull request #3178 from gitphill/patch-1
...
Add azure-container-registry-config for Azure
2018-09-03 05:06:01 -07:00
rboyapat
fbb98b0070
Fix the jinja expression for openstack_tenant_id ( #3151 )
...
OS_PROJECT_ID is obsolete in keystone v3 and jinja expression
doesn't set openstack_tenant_id as expected because of
undefined env var. Fixed the expression.
2018-09-03 14:59:49 +03:00
k8s-ci-robot
db11394711
Merge pull request #3200 from pablodav/feature/k8s_win_v1.11
...
Required support to start working on windows node support
2018-09-03 04:51:23 -07:00
Pablo Estigarribia
7cbe3c2171
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
...
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
remove empty when line
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
force kubeadm upgrade due to failure without --force flag
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
added nodeSelector to have compatibility with hybrid cluster with win nodes, also fix for download with missing container type
fixes in syntax and LF for newline in files
fix on yamllint check
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
some cleanup for innecesary lines
remove conditions for nodeselector
2018-09-02 12:47:06 -03:00
mlushpenko
8e95974930
Fix ports for kubeadm client and master configs for ha setups
2018-09-01 18:02:52 +02:00
Erwan Miran
059cd17b47
Fix target hosts generation when /etc/hosts does not contain 127.0.0.1 or ::1
2018-08-31 16:33:18 +02:00
Antoine Legrand
247b9e83d8
etcd arch-image
2018-08-31 13:45:08 +02:00
Antoine Legrand
9c2098b8fa
fix kubelet_max_pod assert
2018-08-31 13:45:08 +02:00
Antoine Legrand
48c0c8d854
Update dir list
2018-08-31 13:45:08 +02:00
rongzhang
2609ec0dc3
Fix copy etcd-ssl-ca failed
2018-08-31 15:06:03 +08:00
rongzhang
16fc22a207
Fix ipvs by kubeadm v1alpha1
2018-08-30 23:04:57 +08:00
k8s-ci-robot
d9ea937493
Merge pull request #3187 from mirwan/kubeadm-config_syntax
...
Fix kubeadm-config for audit-log-path and feature-gates
2018-08-30 06:55:43 -07:00
rongzhang
35e5adaf0a
Fix kubeadm v1alpha1 configure
2018-08-30 17:44:00 +08:00
k8s-ci-robot
4feb62f6bf
Merge pull request #3193 from riverzhang/fix-lb-kubeadm
...
Fix kubeadm lb
2018-08-29 04:22:40 -07:00
k8s-ci-robot
3bfda55fca
Merge pull request #3061 from okamototk/crio
...
cri-o support
2018-08-29 03:48:40 -07:00
rongzhang
9eade647e6
Fix kubeadm lb
2018-08-29 18:29:24 +08:00
Phill Garrett
1babbcca85
Fix elif azure statement
2018-08-28 15:43:03 +01:00
Phill Garrett
f325d13082
Add azure-container-registry-config for Azure
...
Seperated out KUBELET_CLOUDPROVIDER env var assignment when cloud_provider equals azure
Appended azure-container-registry-config parameter
2018-08-28 10:23:25 +00:00
Erwan Miran
52ab54eeea
Fix missing quotes for audit-log-path and wrong placement of feature-gates
2018-08-28 09:05:57 +02:00
Takashi Okamoto
d407a590a6
container_manager variable to specify runtime.
2018-08-28 06:23:38 +00:00
Takashi Okamoto
5eb805f098
Change timeout for kubeadm 600s.
...
* kubeadm timeout is too short and it may interrupt by timeout.
2018-08-28 04:51:38 +00:00
Takashi Okamoto
236f066635
kubeadm cri-o support.
2018-08-28 02:24:45 +00:00
Takashi Okamoto
5ab8a712d9
Add download_container flag to avoid docker pull when use cri-o.
2018-08-28 01:24:26 +00:00
Takashi Okamoto
cf7b9cfeef
Support crio in kubelet service.
2018-08-28 01:24:26 +00:00
Takashi Okamoto
6090af29e7
Add cri-o role.
2018-08-28 01:24:26 +00:00
Takashi Okamoto
359009bb05
Download etcd and hyperkube binary.
2018-08-28 01:24:26 +00:00
Takashi Okamoto
bdbfa4d403
Add ipvs support for kubeadm 1.10 or later.
2018-08-28 01:24:26 +00:00
Takashi Okamoto
6849788ebc
Fix copy ca cert and ca key for kubeadm.
2018-08-28 01:24:25 +00:00
Takashi Okamoto
ac639b2a17
Change kubeadm config to run etcd by kubeadm.
2018-08-28 01:24:25 +00:00
Erwan Miran
b395bb953f
Fix wrong when condition that ends up with jinja error when the content of /etc/hosts contains parenthesis
2018-08-27 21:20:57 +02:00
k8s-ci-robot
7efe287c74
Merge pull request #2474 from mirwan/localhost_in_etc_hosts
...
Localhost in hosts files should be updated (if necessary), not overriden
2018-08-27 06:25:43 -07:00
k8s-ci-robot
d43cd9a24c
Merge pull request #3104 from maxbrunet/hotfix/replace-local_actions
...
Use delegate_to: localhost instead of local_action
2018-08-27 02:50:42 -07:00
guenhter
fff48d24ea
Replace the raw rsync command with the synchronize module
2018-08-27 10:00:21 +02:00
Maxime Brunet
33135f2ada
k8s/preinstall: Turn AND condition into a list
2018-08-25 14:33:31 -04:00
k8s-ci-robot
f97515352b
Merge pull request #3161 from nutellinoit/kube_proxy_nodeport_addresses
...
--nodeport-addresses added on kube-proxy.manifest.j2 and on k8s-cluster.yml
2018-08-25 02:00:19 -07:00
Erwan Miran
1432e511a2
same work with less lines
2018-08-24 14:06:07 +02:00
Samuele Chiocca
cb8be37f72
fix on v1alpha1
2018-08-24 11:19:06 +02:00
Samuele Chiocca
e5dd4e1e70
added on v1alpha1
2018-08-24 10:59:06 +02:00
Antoine Legrand
4882531c29
Merge pull request #3115 from oracle/oracle_oci_controller
...
Cloud provider support for OCI (Oracle Cloud Infrastructure)
2018-08-23 18:22:45 +02:00
rongzhang
7b61a0eff0
Fix kubeadm LB configure
...
1. join node add LB discoveryTokenAPIServers
2. kubeadm_config_api_fqdn support ipddress and domain_name
2018-08-23 22:22:34 +08:00
Aivars Sterns
23fd3461bc
calico upgrade to v3 ( #3086 )
...
* calico upgrade to v3
* update calico_rr version
* add missing file
* change contents of main.yml as it was left old version
* enable network policy by default
* remove unneeded task
* Fix kubelet calico settings
* fix when statement
* switch back to node-kubeconfig.yaml
2018-08-23 17:17:18 +03:00
Rong Zhang
f453567cce
Merge pull request #3144 from riverzhang/fix-audit-log
...
Fix install audit failed
2018-08-23 14:41:37 +08:00
rongzhang
5a4352657d
Fix install audit failed
...
1.fix audit log not write
2.fix Parameter not recognized
3.delete kubedm futuregates auditing and use apiServerExtraArgs
2018-08-23 01:47:15 +08:00
Samuele Chiocca
f13bc796d9
added nodePortAddresses on kubeadm conf v1alpha2 (not present on v1alpha1)
2018-08-22 18:43:03 +02:00
Erwan Miran
80cfeea957
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
2018-08-22 18:16:13 +02:00
Samuele Chiocca
5d9908c2c3
--nodeport-addresses added on kube-proxy.manifest.j2
...
Changed author
2018-08-22 15:32:07 +02:00
Erwan Miran
a7b0c454db
Localhost in hosts files should be updated (if necessary), not overriden
2018-08-22 12:10:49 +02:00
Jeff Bornemann
94df70be98
Cloud provider support for OCI (Oracle Cloud Infrastructure)
...
Signed-off-by: Jeff Bornemann <jeff.bornemann@oracle.com>
2018-08-21 17:36:42 -04:00
Mark Eisenblaetter
0c0a2138d9
allow '.' in hostnames
...
we use FQDN as inventory_hostname
2018-08-21 08:24:33 +02:00
Jonathan Craig
5bf152886b
add support for openstack trust to cloud provider config
2018-08-20 12:51:25 -04:00
Andreas Krüger
497db69c9f
Merge pull request #3130 from riverzhang/add-control-plane
...
Add kubeadm controlplaneEndpoint
2018-08-20 10:43:50 +02:00
Andreas Krüger
c7de737551
Merge pull request #3133 from mirwan/auditlog_to_stdout_w_kubeadm
...
Audit log to stdout with kubeadm
2018-08-20 10:43:22 +02:00
Erwan Miran
fc38b6d0ca
Ability to define custom audit polcy rules
2018-08-20 07:04:56 +02:00
Erwan Miran
c34900e569
Define apiserver flags directly instead of relying on auditPolicy section in order to have the ability to redirect audit log to stdout with kubeadm
2018-08-20 07:00:53 +02:00
Rong Zhang
855f2a55cb
Merge pull request #3135 from ishitatsuyuki/patch-1
...
Add bad hostname preflight check
2018-08-20 12:08:02 +08:00
Rong Zhang
fd16f77e20
Merge pull request #3017 from seungkyua/fix_kubeadm_client_conf
...
Fix kubeadm client conf
2018-08-20 10:51:02 +08:00
Tatsuyuki Ishi
3eef8dc8d0
Add bad hostname preflight check
...
Hostname must be a valid DNS name, which is checked as https://github.com/kubernetes/apimachinery/blob/master/pkg/util/validation/validation.go#L115
The situation I have encountered is that my hostname contained underscore which is disallowed and apiserver refused to start.
2018-08-20 09:09:00 +09:00
rongzhang
59176ebbb9
Add kubeadm controlplaneEndpoint
...
Nginx LB(default)
Other LB by kubeadm controlplane
2018-08-20 00:57:13 +08:00
rongzhang
b421d0ed5b
Fix install nss
2018-08-20 00:07:31 +08:00
Rong Zhang
fb309ca446
Merge pull request #3128 from riverzhang/delete-kubeadm
...
Remove unused configuration
2018-08-19 10:01:33 +08:00
rongzhang
095ccef8bd
Remove unused configuration
2018-08-19 01:23:20 +08:00
Rong Zhang
0df969ad19
Merge pull request #3117 from mirwan/audit_usecases
...
Audit support improvement
2018-08-19 01:13:22 +08:00
Antoine Legrand
ac49bbb336
Merge pull request #2168 from xd007/docker_arm64
...
fix docker opts incompatible running on aarch64 Redhat/Centos
2018-08-17 16:24:07 +02:00
Antoine Legrand
7a0f0126f7
Merge pull request #1295 from xuhuilong/master
...
fix curl get calico status error ( error in tls version, centos 7.3 1611)
2018-08-17 14:29:01 +02:00
Seungkyu Ahn
29894293eb
Fix kubeadm client conf
...
Fix DiscoveryTokenCACertHashes key to discoveryTokenCACertHashes in kubeadm-client.conf
2018-08-17 04:40:08 +00:00
Jonathan Craig
4d783fff0d
resolve issues with new cacert feature
2018-08-16 23:31:21 -04:00
Antoine Legrand
58ee5f1cc9
Merge pull request #3089 from mattymo/cloudconfig
...
Remove erroneous cloud-config task
2018-08-16 16:17:01 +02:00
Erwan Miran
54548d3b95
kubeadm mounts the hostpaths itself
2018-08-16 13:17:30 +02:00