3e8e64a3e5
fix typo / error regarding etcd and k8s_cluster groups ( #8580 )
...
As far as I can tell this is simply a typo that has existed from the beginning. Having it this way around (`etcd` group as a child and thus subset of `k8s_cluster`) mirrors what is written in the preceeding sentence.
2022-02-28 02:54:58 -08:00
36393d77d3
Encrypting Secret Data at Rest ( #8574 )
...
* change default value for Encrypting Secret Data at Rest to secretbox, remove experimental flag and add documentation
* fix MD012/no-multiple-blanks
2022-02-23 03:04:18 -08:00
e9c8913248
Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable ( #8317 )
...
* Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* Add etcd kubeadm deployment documentation
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* Refactor warning for the deprecated 'etcd_kubeadm_enabled' variable
Signed-off-by: necatican <necaticanyildirim@gmail.com>
2022-02-22 08:53:16 -08:00
0f73d87509
Allow pausing after upgrade but before uncordon ( #8530 )
...
* Allow pausing after upgrade but before uncordon
* Expand docs for upgrade pausing vars
Signed-off-by: Mac Chaffee <me@macchaffee.com>
2022-02-15 16:39:02 -08:00
98d5d0cdd5
add support for Dual Stack node InternalIP ( #8542 )
2022-02-15 00:28:02 -08:00
da8522af64
docs: Update offline-environment.md for containerd ( #8520 ) ( #8523 )
...
* Add containerd/runc/nerdctl download url
* Add insecure registries configuration for containerd
2022-02-09 08:08:18 -08:00
87928baa31
CRI-O: fix unqualified-search registries ( #8496 )
2022-02-04 23:46:50 -08:00
eac799f589
Amend documentation for docker to containerd migration ( #8477 )
...
* Amend PR https://github.com/kubernetes-sigs/kubespray/pull/8471 with missing inventory configuration.
Signed-off-by: Julio Morimoto <julio@morimoto.net.br>
* Amend PR https://github.com/kubernetes-sigs/kubespray/pull/8471 with missing inventory configuration.
Signed-off-by: Julio Morimoto <julio@morimoto.net.br>
2022-02-02 00:46:22 -08:00
92d612c3e0
8487: Allow override of default CoreDNS zone cache ( #8488 )
...
Using the coredns_cluster_zone_cache_block variable
2022-02-01 00:48:18 -08:00
7d4d554436
Document host_resolvconf as default value for resolvconf_mode ( #8493 )
...
refs #8247
2022-01-31 03:12:24 -08:00
c40b43de01
[mitogent] update to 0.3.2 ( #8470 )
2022-01-27 08:36:59 -08:00
b0eb5650da
Provide initial guidelines for a container engine migration (docker-2-containerd), with special emphasis on the fact that the procedure is still not officially supported. ( #8471 )
...
Follow up from https://github.com/kubernetes-sigs/kubespray/issues/8431 .
Signed-off-by: Julio Morimoto <julio@morimoto.net.br>
2022-01-27 01:40:10 -08:00
d580014c66
Fix CI for Fedora (followup) + OpenSUSE Leap (update to 15.3) ( #8407 )
...
* Fix fedora jobs - followup
* Update OpenSUSE Leap to 15.3
* Fix cilium version in README + update minor 1.11.1
2022-01-24 23:24:30 -08:00
e88aa7c96b
Add youki runtime support ( #8411 )
2022-01-21 14:01:07 -08:00
6e2e61012a
Docs - Removed incorrect info on calico_rr. ( #8437 )
2022-01-17 02:55:30 -08:00
caff539ccd
Add identity_allocation_mode support for Cilium ( #8430 )
...
Co-authored-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
Signed-off-by: necatican <necaticanyildirim@gmail.com>
Co-authored-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
2022-01-16 09:29:28 -08:00
43d128362f
Document image_command_tool and image_command_tool_on_localhost ( #8409 )
...
Signed-off-by: Mathieu Parent <mathieu.parent@insee.fr>
2022-01-11 15:35:24 -08:00
e0d67367ed
Update installation doc with vagrant ( #8406 )
2022-01-11 05:19:17 -08:00
59f62473c9
Update configuration of registries in cri-o ( #7852 )
...
* Update configuration of registries in cri-o
* Update docs to match new registry configuration
2022-01-05 07:36:40 -08:00
3eab1129b9
CI: Replace CentOS 8 with AlmaLinux 8 before CentOS 8 EOL end of 2021 ( #8297 )
2022-01-05 02:20:33 -08:00
78c83a8f26
Update containerd doc ( #8369 )
...
This is a follow-up change for https://github.com/kubernetes-sigs/kubespray/pull/7911
2022-01-05 00:32:33 -08:00
e72f8e0412
Update node about container_manager variable ( #7911 )
...
I was deploy my cluster with separate etcd cluster and not intersect with kube_control_plane or kube_node. And I want to run etcd cluster in docker but still used containerd to make container runtime for all other nodes. Therefore, I was added note to this doc for everyone
Thank !
2022-01-04 14:29:20 -08:00
f01f7c54aa
Add support for CRI-O user namespaces ( #8268 )
...
* add support for cri-o user namespaces
* comply with yamllint rules
2021-12-20 06:37:25 -08:00
c59407f105
add support for Calico BGPPeer sourceAddress ( #8306 )
2021-12-20 01:51:25 -08:00
615216f397
Fix if bind-address is not set to 0.0.0.0 ( #8262 )
...
* if bind-address is not set to 0.0.0.0
* Update docs and left comments
* fix yamllist check: remove space
2021-12-05 23:58:32 -08:00
e19ce27352
Remove ovn4nfv support ( #8265 )
2021-12-03 11:56:35 -08:00
e82443241b
Move opensuse CI to docker and fix ubuntu16 containerd version for docker ( #8257 )
2021-12-02 08:01:34 -08:00
b38382a68f
Move cri-o default package to 1.22 ( #8258 )
2021-12-02 06:21:34 -08:00
30ec03259d
Remove fedora33 - eol ( #8246 )
2021-11-30 15:53:17 -08:00
ee882fa462
Add capability to use swap, requires Kube 1.22 ( #8241 )
...
* Alpha-NodeSwap: allow nodes to use swap
* CI: Add Fedora 35 with experimental swap job
2021-11-30 00:52:56 -08:00
52ee5d0fff
Various documentation updates ( #8243 )
...
* Docs: update CONTRIBUTING.md
* Docs: clean up outdated roadmap and point to github issues instead
* Docs: update note on kubelet_cgroup_driver
* Docs: update kata containers docs with note about cgroup driver
* Docs: note about CI specific overrides
2021-11-29 15:05:21 -08:00
a5f88e14d0
Cleanup tests ( #8234 )
...
* Add Fedora 35 image, support and CI
* Cleanup tests and allow_failure for vagrant
2021-11-26 09:00:51 -08:00
e78bda65fe
Defaults: replace docker with containerd as our default container_manager ( #8175 )
...
* Defaults: replace docker with containerd as our default container_manager
* CI: Use docker for download_localhost test
* Defaults: with container_manager=containerd we need etcd_deployment_type=host
* CI: Run weave jobs with docker
* CI: Vagrant don't download_force_cache
* CI: Fix upgrade tests
* should run compatible with old settings, this means docker
* we need to run with a distro that has at least modern containerd,
this means move from debian9 to debian10 to allow `containerd_version`
to match between 2.17 and master
2021-11-25 06:54:33 -08:00
e35a87e3eb
Update registry template ( #8198 )
...
* Add registry replica setting
* Add registry liveness and readiness probe
* Set the security context for registry
* Add registry pvc access mode option
* registry add replica requirement check
* docs: add registry replicas setting note
* Update docs/kubernetes-apps/registry.md
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
2021-11-22 02:45:09 -08:00
25316825b1
docs: remove basic auth reference in getting-started ( #7823 )
2021-11-19 14:49:23 -08:00
0263c649f4
Allow to scrape etcd metrics using a service ( #8203 )
...
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
2021-11-17 23:53:01 -08:00
424163c7d3
add gce support ( #8179 )
...
Author: lmercl <lubos.mercl@gmail.com>
Date: Wed Nov 10 15:30:04 2021 +0000
fix markdown
2021-11-16 08:58:28 -08:00
4d79a55904
Remove extra parameter kube_proxy_remove ( #8158 )
...
Signed-off-by: EDGsheryl <edgsheryl@gmail.com>
2021-11-15 00:02:48 -08:00
039205560a
nodelocaldns: allow a secondary pod for nodelocaldns for local-HA ( #8100 )
...
* nodelocaldns: allow a secondary pod for nodelocaldns for local-HA
* CI: add job to test nodelocaldns secondary
2021-11-09 09:57:47 -08:00
4a8757161e
Docker: replace the use of containerd_version with docker_containerd_version to avoid causing conflicts when bumping containerd_version ( #8130 )
2021-11-08 15:56:49 -08:00
b7eb1cf936
cert-manager: add trusted internal ca when configured ( #8135 )
...
* cert-manager: add trusted internal ca when configured
* wrong check for inventory variable
* Update documentation
2021-11-05 09:43:52 -07:00
6e5b9e0ebf
Fix Kubelet and Containerd when using cgroupfs as cgroup driver ( #8123 )
2021-11-05 07:59:54 -07:00
8d553f7e91
Mitogen: deprecate the use of mitogen and remove coverage from CI ( #8147 )
2021-11-05 00:57:52 -07:00
8d82033bff
fix(doc): update typo ( #8148 )
...
I guess `kubernetes-the-hard-way` should be `kubernetes-the-kubespray-way` because of recently created network name is `kubernetes-the-kubespray-way`.
2021-11-02 01:16:58 -07:00
331647f4ab
Remove deprecated Ambassador ingress code ( #8086 )
2021-10-26 15:19:09 -07:00
3c30be1320
cert-manager: update docs to reflect 1.5.x links ( #8117 )
2021-10-25 03:14:23 -07:00
6a5b87dda4
netchecker: update images to 1.2.2 from Mirantis ( #8074 )
...
* netchecker: update images to 1.2.2 from Mirantis which is slightly less ancinet than the l23networks images
* Netchecker: use local etcd instead of kubernetes v1beta1 crds which are no longer suported by kube 1.22+
2021-10-19 10:17:04 -07:00
6aac59394e
Rocky Linux support ( #8095 )
...
* Add Rocky as a known OS
* Make sure Rocky includes bootstrap-centos.yml
* Update docs with Rocky Linux
* Rocky Linux wireguard and EPEL
* Rocky Linux in the list of supported distributions
2021-10-19 08:29:04 -07:00
cee481f63d
cert-manager: upgrade to 1.5.4 ( #8069 )
...
* cert-manager: update to 1.5.4
* cert-manager: remove outdated guidelines on creating an initial ClusterIssuer
2021-10-12 09:17:47 -07:00
c68fb81aa7
Clarify documentation for integration.md ( #8049 )
2021-10-06 16:44:41 -07:00
c5c10067ed
Update kubespray version to 2.17.x in first cluster guide ( #8043 )
2021-10-04 00:09:07 -07:00
af949cd967
Fix invalid documentation links ( #7692 )
...
* Fix invalid link to Ansible documentation
* Fix invalid link to mitogen doc page
* Fix invalid link to calico doc page
* Fix all invalid links to doc pages
2021-09-28 09:58:43 -07:00
33146b9481
CI: Add Calico eBPF in HA mode test ( #7710 )
...
* Sample-Inventory: add sample for calico_bpf_enabled
* Calico-Doc: note about CONFIG_NET_SCHED for eBPF support
* CI: Add Calico eBPF in HA mode test
2021-09-24 09:57:23 -07:00
ae44aff330
Calico: increase calico node probe timeouts and allow tunning ( #7981 )
2021-09-17 16:08:07 -07:00
85d18fc107
add node-based upgrade ( #7785 )
2021-09-13 23:59:07 -07:00
7e4b176323
Update Ansible tags in documentation ( #7933 )
2021-09-02 10:08:58 -07:00
207d3e7b4e
Add Debian-11 image and CI ( #7919 )
2021-08-31 14:02:22 -07:00
1afdb05ea9
Fedora and RHEL use etc_t and the convention is <type_name>_t ( #7891 )
...
* Fedora and RHEL use etc_t and the convention is <type_name>_t
* Docs: specify all values for preinstall_selinux_state
* CI: Add Fedora 34 with SELinux in enforcing mode
2021-08-27 14:20:53 -07:00
d635961120
Add Infomaniak to compatible public clouds list ( #7910 )
2021-08-26 06:47:24 -07:00
d5b865da4d
Update etcd without rotating etcd certs ( #7907 )
2021-08-26 00:21:23 -07:00
9dfade5641
Update nodes.md ( #7902 )
2021-08-24 02:43:14 -07:00
dad4b26c6f
Update Azure.md ( #7880 )
2021-08-20 20:23:58 -07:00
dfd35892f2
docs/cert_manager.md: Update docs for K8s v1.22 ( #7877 )
2021-08-19 18:31:24 -07:00
1f09229740
Update cilium to 1.9.9 ( #7871 )
...
Now that 1.10 is out this is to make 1.9.9 the default. I am running
this version successfully.
2021-08-16 13:34:22 -07:00
e2b67b5700
Add suport of Vsphere CSI driver 2.2.X versions ( #7848 )
2021-08-09 08:19:38 -07:00
5db86f4c2b
Update vSphere CPI ( #7838 )
...
Changes:
* ClusterRole updated according to the latest manifests from
https://github.com/kubernetes/cloud-provider-vsphere
* vSphere CPI/CSI default versions bumped and
tested successfully on K8S 1.21.1
* vSphere documentation updated
Signed-off-by: Vitaliy D <vi7alya@gmail.com>
2021-07-29 18:17:37 -07:00
20c284c276
doc: Update 'Kubespray vs Kubeadm' ( #7834 )
...
non-kubeadm mode has been removed since ddffdb63bf
2021-07-28 03:15:34 -07:00
befc6cd650
Update MetalLB documentation ( #7833 )
...
- Added a hint about the kube_proxy_strict_arp configuration, which is required for MetalLB to work
- See also https://github.com/kubernetes-sigs/kubespray/pull/5180/files
2021-07-27 08:46:45 -07:00
417180246c
Fix: typos in docs and comments ( #7805 )
2021-07-16 18:58:50 -07:00
22b128dfd2
fix: update metallb docs url ( #7802 )
2021-07-16 03:38:08 -07:00
c2cf0d9945
add containerd on fedora CoreOS ( #7794 )
...
* set selinux type t_etc if selinux state is enforcing
* workaround with update repo is no longer needed
remove comments about failing playbook
* grubby is not available in distros using ostree
* remove docker support because removed in fcos
update install script example with live rootfs
* do not call grubby on ostree based distro
* update docs enabling containerd on fedora coreos
2021-07-15 00:00:48 -07:00
7516fe142f
Move to Ansible 3.4.0 ( #7672 )
...
* Ansible: move to Ansible 3.4.0 which uses ansible-base 2.10.10
* Docs: add a note about ansible upgrade post 2.9.x
* CI: ensure ansible is removed before ansible 3.x is installed to avoid pip failures
* Ansible: use newer ansible-lint
* Fix ansible-lint 5.0.11 found issues
* syntax issues
* risky-file-permissions
* var-naming
* role-name
* molecule tests
* Mitogen: use 0.3.0rc1 which adds support for ansible 2.10+
* Pin ansible-base to 2.10.11 to get package fix on RHEL8
2021-07-12 00:00:47 -07:00
394afc957b
Update vars.md to remove mention of string syntax of node_labels ( #7776 )
...
* Update vars.md to remove mention of string syntax of node_labels
Fixes https://github.com/kubernetes-sigs/kubespray/issues/6215
* Try fix makrdown linting
* Update docs/vars.md
2021-07-07 14:20:22 -07:00
63e92d719a
Clarify first master replace ( #7761 )
...
* Update nodes.md
* fix syntax
* fix syntax - part 2
* replace master with kube_control_plane
* return etcd-master
2021-07-07 13:42:23 -07:00
9b87131b19
Fix Operating Systems menu for Amazon Linux 2 ( #7772 )
2021-07-05 01:30:55 -07:00
b77f207512
Docs: Replace master with control plane ( #7767 )
...
This replaces master with "control plane" in Kubespray docs
because of [1].
[1]: https://github.com/kubernetes/enhancements/blob/master/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md#motivation
2021-07-01 00:55:55 -07:00
05d864c913
Calico Docs: clarify the algorithm to calculate calico_veth_mtu ( #7749 )
...
* Claico Docs: clarify the algorithm to calculate calico_veth_mtu
* Update sample calico_veth_mtu
2021-06-27 23:59:25 -07:00
a2cf6816ce
Calico wireguard ( #7638 )
...
* Calico: add Wireguard support
* CI: Add Calico Wireguard scenario
2021-06-25 03:22:45 -07:00
70f1abbc18
fix broken link in doc ( #7736 )
...
* fix broken link in doc
* Revert "fix broken link in doc"
This reverts commit b427d1f57f
2021-06-25 01:34:45 -07:00
271be92b02
Update kubernetes-reliability.md ( #7724 )
...
It's a minor change, I just corrected `–` char to `-`.
2021-06-21 10:36:51 -07:00
282a27a07c
gVisor: initial support for gVisor container runtime ( #7661 )
...
* Docker/Containerd: move downloads urls to containerd-common
* gVisor: initial support for gVisor container runtime
2021-06-21 05:18:51 -07:00
1069b05e68
Improve scale flow and documentation ( #7610 )
...
* Improve scale flow
* Add confirmation prompt again
2021-06-07 05:02:40 -07:00
ec0c0d4a28
Calico enable support for eBPF ( #7618 )
...
* Calico: align manifests with upstream
* allow enabling typha prometheus metrics
* Calico: enable eBPF support
* manage the kubernetes-services-endpoint configmap
* Calico: document the use of eBPF dataplane
* Calico: improve checks before deployment
* enforce disabling kube-proxy when using eBPF dataplane
* ensure calico_version is supported
2021-06-07 04:58:39 -07:00
6a2ea94b39
Docs improvements ( #7660 )
...
* Docs: update sidebar
* Docs: move registry documentation into docs/
* Docs: move rbd_provisioner documentation into docs/
* Docs: move cephfs_provisioner into docs/
* Docs: move local_volume_provisioner documentation into docs/
* Docs: move ambassador.md to docs/ingress_controller/
* Docs: move metallb.md to docs/ingress_controller/
* Docs: move ingress_nginx documentation into docs/
* Docs: move alb_ingress_controller documentation into docs/
* Docs: merge ambassador documentation into docs/ingress_controller/
* Docs: move cert_manager documentation into docs/
* Docs: move bootstrap-os documentation into docs/
* Docs: update file locations in sidebar
2021-06-01 07:30:27 -07:00
4674b03661
Add cinder_csi_ignore_volume_az ( #7624 )
...
Signed-off-by: Cedric Hnyda <cedric.hnyda@itera.io>
2021-06-01 07:10:27 -07:00
e2f1964389
Fix typo ( #7665 )
...
Signed-off-by: Guangwen Feng <fenggw-fnst@cn.fujitsu.com>
2021-06-01 00:34:27 -07:00
7896bc7831
Add Fedora 33 image and CI, remove Fedora 31 (EOL) + update docker packages ( #7657 )
...
* Update docker package to 20.10.6
* Add Fedora 33 image and CI, remove Fedora 31 (EOL)
2021-05-28 08:04:25 -07:00
3ca205446e
Added possibility to specify vSphere credentials via env variables ( #7646 )
...
* Added possibility to specify vSphere credentials via env variables
* Removed excessive spacing
2021-05-27 12:02:30 -07:00
3a37a49690
Packet renamed ( #7653 )
...
* Packet->Equinix Metal rename #6901
Updates throughout to reflect #6901 renaming for Packet to Equinix Metal.
* Rename Packet to Equinix Metal throughout the project #6901
Packet is renamed to Equinix Metal in more contexts including
documentation links. The Terraform provider used is still the Packet
provider. The environment variables and configuration options still
refer to the Packet name.
Signed-off-by: Marques Johansson <mjohansson@equinix.com>
Co-authored-by: Edward Vielmetti <ed@packet.net>
2021-05-27 11:58:24 -07:00
d5fcbcd89f
Update nodes.md ( #7649 )
2021-05-26 09:07:21 -07:00
23cd1d41fb
Minor spelling edits ( #7640 )
...
Minor spelling edits. Was reading your documentation.
2021-05-24 23:48:22 -07:00
62f5369237
Remove warning about Docker-only support ( #7626 )
2021-05-20 00:01:05 -07:00
26c1d42fff
add note on download_localhost ( #7623 )
...
It can be counterintuitive for the downloaded files to show up on local host when download_localhost is false, this explains the reason.
2021-05-19 05:04:51 -07:00
5b93a97281
remove experimental note about CentOS 8 and derivatives ( #7615 )
2021-05-16 12:07:59 -07:00
e357d8678c
update README about supported OSes ( #7608 )
2021-05-14 00:06:05 -07:00
14cf3e138b
Support Calico advertisement of MetalLB LoadBalancer IPs ( #7593 )
...
* add initial MetalLB docs
* metallb allow disabling the deployment of the metallb speaker
* calico>=3.18 allow using calico to advertise service loadbalancer IPs
* Document the use of MetalLB and Calico
* clean MetalLB docs
2021-05-12 05:22:17 -07:00
6a001e4971
Add suport of Vsphere CSI driver 2.X versions ( #7480 )
2021-05-04 00:05:11 -07:00
2556eb2733
Upgrade cilium role ( #7521 )
...
* Upgrade cilium roles
* Del old test result
* Add hubble ui examples
* Refactor hubble metrics
* Markdown fix pipeline errors
* yamllint check and fix
* refactor install from https://github.com/kubernetes-sigs/kubespray/pull/7520
* Docs syntax change (fix)
* Cilium set default 1.8.9
* Update cilium version in Readme
2021-04-30 08:09:59 -07:00
360aff4a57
Rename ansible groups to use _ instead of - ( #7552 )
...
* rename ansible groups to use _ instead of -
k8s-cluster -> k8s_cluster
k8s-node -> k8s_node
calico-rr -> calico_rr
no-floating -> no_floating
Note: kube-node,k8s-cluster groups in upgrade CI
need clean-up after v2.16 is tagged
* ensure old groups are mapped to the new ones
2021-04-29 05:20:50 -07:00
324c95d37f
Fix some docs.ansible.com url typo ( #7550 )
2021-04-26 08:33:02 -07:00
Tom Janson
Alex
Necatican Yıldırım
Mac Chaffee
kakkotetsu
Takuya Murakami
Krystian Młynek
Julio H Morimoto
Tristan
Ilya Margolin
Cristian Calin
Florian Ruynat
Victor Morales
Pav K
Mathieu Parent
Tovin Seven
Bart Sloeserwij
Kenichi Omichi
Nguyễn Trung
Nicolas MASSE
Hanna Bledai
zhengtianbao
Karthikeya Viswanath
Mathieu Parent
Lubos Mercl
EDGsheryl
Antoine Gatineau
Pasquale Toscano
Erkan Zileli
Omar Aloraini
Orhun Parmaksız
Nicolas Goudry
andrew.k
Léopold Jacquot
Hari Hud
Baargav
Hrittik Roy
rtsp
Frank Ritchie
Eugene Artemenko
Vitaliy D
Markus Opolka
Atsushi Nukariya
spaced
Arian van Putten
Julien Carpentier
rptaylor
Hamed Bahadorzadeh
forselli-stratio
Cedric Hnyda
Guangwen Feng
Fredrik Liv
Marques Johansson
sangheee
Catblade
bac-w
muzi502