a1f04e9869
Cleanup v1.16 hashes ( #6635 )
2020-09-08 01:51:43 -07:00
961149b865
Update kube_version_min_required for 2.14 release ( #6634 )
2020-09-07 23:59:43 -07:00
597c810ef0
Resolve Vagrant etcd unhealthy cluster error ( #6630 )
2020-09-07 12:09:41 -07:00
2de6a5676d
Fedora coreos networkmanager global dns and bootstrapping fix ( #6577 )
...
* remove podman cni plugin
* configure networkamanger global dns
* allow installation of python3-libselinux by disabling update repo temporary
* remove ipv4 section because it is not a valid configuration
2020-09-07 02:27:41 -07:00
050578da94
Update Cilium to 1.8.3 ( #6629 )
2020-09-07 02:11:49 -07:00
5a437add01
Fix upgrade playbook name ( #6625 )
...
* Fix upgrade playbook name
* Fix my fix :)
2020-09-07 02:11:42 -07:00
6fc73e3038
Add Kubernetes 1.16.15 hashes ( #6624 )
2020-09-07 01:23:41 -07:00
d97e9b9e50
Fix oracle linux repo ( #6627 )
2020-09-07 01:15:41 -07:00
fa0eb11bf4
Update kubernetes dashboard ( #6623 )
2020-09-04 05:29:41 -07:00
f660c29348
Declare port 10254 in nginx ingress pod template ( #6609 )
2020-09-04 04:54:11 -07:00
6613895de0
remove kubelet startup warnings for non docker container runtime ( #6605 )
...
Removes these startup warnings:
Warning: For remote container runtime, --pod-infra-container-image is ignored in kubelet, which should be set in that remote runtime instead
Using "/var/run/crio/crio.sock" as endpoint is deprecated, please consider using full url format "unix:///var/run/crio/crio.sock".
2020-09-04 04:54:04 -07:00
803d52ffce
kubernetes: remove unused variables ( #6601 )
2020-09-04 04:53:56 -07:00
fc61f8d52e
Update cert manager to 0.16.1 ( #6600 )
...
* Update cert manager to 0.16.1
* Update cert manager to 0.16.1
Co-authored-by: Barry Melbourne <9964974+bmelbourne@users.noreply.github.com>
2020-09-04 04:53:48 -07:00
0553814b4f
Add selectable dns policy for kube-router ( #6586 )
2020-09-04 04:53:41 -07:00
f1566cb8c2
Add protectKernelDefaults option (default true) to kubelet config file ( #6611 )
2020-09-03 07:41:41 -07:00
c1ba8e1b3a
Rotate kubelet server certificate. ( #6453 )
...
* Rotate kubelet server certificate.
* CI test kubelet server cert rotation
* Approve kubelet serving certificates in tests.
2020-09-03 07:25:41 -07:00
2ff7ab8d40
Add snapshot-controller for CSI drivers and snapshot CRDs, add a default volumesnapshotclass when running cinder CSI ( #6537 )
...
* add snapshot-controller and v1beta1 snapshot api
* fix typo
* udpate manifest to v1beta1
* update
* update manifests
* fix spelling
* wait until crd is applied
* fix missing info in kube module
* revert snapshotclass
* add snapshot crds before applying the csi driver
* add crds, missed them in last commit
* use pull policy from kubespray
2020-09-03 04:01:43 -07:00
93698a8f73
Calico: update crds to v1 and cr ( #6360 )
...
* Update CustomResourceDefinition for kubecontrollersconfigurations.crd.projectcalico.org to v1
* Align ClusterRole for kube-controllers with upstream (calico)
2020-09-03 00:51:40 -07:00
6245587dc8
Fix E306 in roles/network_plugin ( #6516 )
...
Signed-off-by: Miouge1 <maxime@root314.com>
2020-09-02 23:55:40 -07:00
2faf53b039
Check node_ip is defined when removing etcd node ( #6603 )
2020-09-01 01:05:58 -07:00
e0b1787740
Use crictl 1.19.0 for k8s 1.19.x ( #6598 )
2020-09-01 01:05:50 -07:00
9849dba5d3
Update cni plugins with minor fix ( #6592 )
2020-08-31 05:16:21 -07:00
03c9c091f2
Docker: Set Cgroup driver by default to systemd ( #6563 )
...
* Set Docker Cgroup driver to systemd
* Add docker_cgroup_driver in Docker defaults
2020-08-31 04:56:20 -07:00
5a8b68a429
Add support for openstack application credentials ( #6534 )
...
* Add support for openstack application credentials
* Add some lines for readability
* Update external_openstack_tenant_id check
Do not check external_openstack_tenant_id when application credentials are defined
* Add check for external_openstack_domain_id
* Fix typo
2020-08-31 03:30:28 -07:00
34d88ea6d9
Fix Ansible-lint E303 ( #6409 )
2020-08-31 03:30:20 -07:00
0665b45e61
Update nginx ingress to 0.35.0 ( #6599 )
2020-08-31 03:24:21 -07:00
648fcf3a2e
Fix E306 in roles/etcd ( #6515 )
2020-08-31 03:20:20 -07:00
058438a25d
Remove support for CoreOS Container Linux ( #6576 )
2020-08-28 02:28:53 -07:00
6e938a3106
Fix E306 in other roles ( #6517 )
2020-08-28 01:20:53 -07:00
2f93d62aa5
Update nginx ingress to 0.34.1 ( #6571 )
2020-08-27 10:15:53 -07:00
8ba3d7ec75
Add Kubernetes 1.19 hashes ( #6593 )
2020-08-27 09:45:53 -07:00
9e2d282709
cri-o: add variable to configure unsecure pull ( #6568 )
...
By default do not allow "unqualified" (without a registry) images
because it is considered unsecure and subject to mitm attacks.
To enable insecure pull configure for example:
crio_registries:
- "docker.io"
- "quay.io"
2020-08-27 09:09:53 -07:00
706c7cb4f1
etcd should not fail when adding an already existing member ( #6587 )
2020-08-27 02:33:01 -07:00
5884eeb606
Remove ethtool workaround, issue is now fixed ( #6579 )
2020-08-27 02:29:01 -07:00
e7ee19bd66
Update bunch of dependencies with minor fixes ( #6570 )
2020-08-27 02:25:01 -07:00
2f8fc92182
make it possible to open additional ports on master nodes ( #6547 )
2020-08-27 02:07:13 -07:00
f59d3fc4a3
Deviceroutesourceaddress ( #6508 )
...
* add FELIX_DEVICEROUTESOURCEADDRESS calico option
* add calico_use_default_route_src_ipaddr option
add calico_use_default_route_src_ipaddr option to use FELIX_DEVICEROUTESOURCEADDRESS calico option
* Update k8s-net-calico.yml
2020-08-27 02:07:01 -07:00
8e2bae0f2a
Fix Ansible Lint warnings (No such file or directory) ( #6581 )
2020-08-26 23:19:10 -07:00
e6dae03a0d
Add cilium hubble server in config ( #6575 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-26 23:19:02 -07:00
2f2ed116f7
Improve metallb template for bgp peers ( #6574 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-26 23:15:03 -07:00
e91c6a7bd1
update the ovn4nfv-k8s-plugin image version to v1.1.0 ( #6531 )
...
Signed-off-by: Kuralamudhan Ramakrishnan <kuralamudhan.ramakrishnan@intel.com>
2020-08-26 23:11:03 -07:00
1ff95e85f4
Rollback coredns, should not have been updated before 1.19 ( #6573 )
2020-08-26 03:30:03 -07:00
36924b63dc
Allow webhook authorization ( #6502 )
2020-08-24 06:29:41 -07:00
0c80d3d9fa
Add proxy_env calculation to reset.yml ( #6558 )
2020-08-21 02:03:46 -07:00
411510cbe6
Use proper openssl command to differentiate between host and ip in API certificate check ( #6392 )
...
* Use proper openssl command to differentiate between host and ip in current certificate check
* fixup! Use proper openssl command to differentiate between host and ip in current certificate check
2020-08-21 02:03:39 -07:00
6e2b8a5750
Add timeout to Get current version of calico cluster version, again ( #6493 )
2020-08-21 00:13:51 -07:00
ca66a96d0a
make pre-remove node draining a failable task ( #6442 )
...
and add configuration to allow ungraceful removal
2020-08-21 00:13:39 -07:00
0c09ec5d13
Bump Openstack cloud controller image verison to 1.18.2 ( #6562 )
2020-08-21 00:10:03 -07:00
a8e2110b2d
#6552 Update extras_rh_repo_base_url ( #6556 )
2020-08-21 00:09:55 -07:00
250541d29d
Use proper pypy download url in bootstrap script ( #6555 )
...
The bootstrap-os role uses a bootstrap script to provision a
python interpreter on flatcar and container os hosts. As the
pypy project switched to another hoster, the download url changed.
If applied this will use the new proper pypy download url in bootstrap script
2020-08-21 00:09:47 -07:00
Maxime Guyot
Barry Melbourne
spaced
Florian Ruynat
Florent Monbillard
Julien Pervillé
Hans Feldt
tasekida
Maxim Pogozhiy
Lovro Seder
Hugo Blom
Marc-Antoine
nic0las
Arthur Outhenin-Chalandre
Kuralamudhan Ramakrishnan
Sulochan Acharya
Florian Ruynat
jeanfabrice
Lars
*=0=1=4=*
Christian Strack