1df0b67ec1
Add volume and volumeMount for crio-socket
...
This commit fixes #3295
2018-09-13 14:34:44 +05:30
218e527363
Merge pull request #3243 from mirwan/helm_binary_should_be_installed_on_all_masters
...
Install Helm client on all masters
2018-09-13 00:39:36 -07:00
27fc391f71
Merge pull request #3291 from mirwan/remove_insecure-bind-address_when_insecure_port_is_0
...
Remove --insecure-bind-address when insecure-port=0
2018-09-13 00:34:39 -07:00
1091e82327
Update install.yml
2018-09-12 22:15:46 +03:00
a5cc8537f9
Merge pull request #3283 from mattymo/more_upgrade_options
...
Extra options for upgrade mode
2018-09-12 10:50:33 -07:00
d692737a13
Extra options for upgrade mode
...
Optionally do not drain nodes by setting drain_nodes to false
Optionally set a labelselector to target which pods should be drained.
2018-09-12 17:05:41 +03:00
cc79125d3e
Update install.yml
2018-09-12 17:03:55 +03:00
a801e02cea
Merge pull request #3261 from mattymo/etcd_ssl_dir_perms
...
Ensure etcd file permissions are correct when using vault
2018-09-12 01:10:26 -07:00
29c7775ea1
Monitor CoreDNS over svc
2018-09-12 10:24:15 +03:00
cbf099de4d
Merge pull request #3285 from mirwan/fix_netchecker_sa_when_psp
...
Fix wrong sa name in crb when psp is enabled
2018-09-12 00:20:38 -07:00
c8630f46fd
Merge pull request #3286 from fritchie/master
...
Change update strategy to RollingUpdate
2018-09-12 00:18:05 -07:00
af74d85b7d
Remove --insecure-bind-address when insecure-port=0
2018-09-12 08:22:11 +02:00
97e5f28537
Revert "Remove insecure-port and insecure-bind-address when possible"
2018-09-11 17:42:12 -05:00
f42e0a4711
Change update strategy to RollingUpdate.
...
When enable_network_policy is set to True with Calico 3 kubectl
apply fails with the error:
The Deployment "calico-kube-controllers" is invalid:
spec.strategy.rollingUpdate: Forbidden: may not be specified when
strategy type is 'Recreate'
See
https://github.com/kubernetes-incubator/kubespray/issues/3267
Changing the update strategy to RollingUpdate avoids this error.
2018-09-11 12:03:42 -04:00
d91f9e14e6
Put back legacy support for calico ippools and bgp settings
2018-09-11 16:40:11 +03:00
e24b1220a0
Fix wrong sa name in crb when psp is enabled
2018-09-11 15:04:55 +02:00
0a720b35af
Merge pull request #3270 from riverzhang/fix-registry
...
Add insecure_registry config to docker options
2018-09-10 04:28:52 -07:00
f557b54489
Add `docker_` to values
2018-09-10 18:05:49 +08:00
04852ad753
Install Helm on all masters
2018-09-10 11:39:26 +02:00
aaa9a4efac
Ensure vault file permissions are correct
2018-09-10 12:04:04 +03:00
0140cf71c8
Upgrade kubernetes to v1.11.3
2018-09-10 15:52:49 +08:00
51794e4c13
Deploying k8s clusters in a private environment
2018-09-09 11:06:00 +08:00
b249b06036
Move docker options to kubespray-defaults
2018-09-09 10:21:18 +08:00
20caaf9d1f
Delete gitignore file
2018-09-09 02:09:02 +08:00
c41ca22a78
Planning the configuration of docker parameters
2018-09-09 00:59:59 +08:00
b891d77679
add option to secure helm tiller with tls
2018-09-07 10:29:31 -05:00
5c2e9a5376
Merge pull request #3252 from mirwan/remove_insecure-bind-address_when_insecure-bind-port_is_0
...
Remove insecure-port and insecure-bind-address when possible
2018-09-07 07:41:21 -07:00
b3a689658b
Merge pull request #3255 from mlushpenko/calico_check
...
Fix calico health checks
2018-09-07 07:39:20 -07:00
d182d4f979
absolute path for kubectl.
2018-09-07 09:33:43 -04:00
9c49e071d3
Merge pull request #3260 from riverzhang/discoverytimeout
...
Add discovery_timeout to join configuration
2018-09-07 05:20:19 -07:00
0f63924ed4
Add discovery_timeout to join configuration
...
https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha2#JoinConfiguration
2018-09-07 16:28:53 +08:00
ea2c9d8f57
Fix yaml checks
2018-09-06 16:26:57 +02:00
f958b32c83
Fix calico health checks
2018-09-06 15:57:21 +02:00
2faa8f1e37
Merge pull request #3254 from mattymo/calico_upgrade_tweaks
...
Fix backward compatibility with calico 2.6
2018-09-06 06:20:52 -07:00
ab462d92b8
Merge pull request #3249 from mattymo/fix_missing_var_kube_proxy_nodeport
...
Add missing variable kube_proxy_nodeport_addresses
2018-09-06 06:18:23 -07:00
27905bbddf
Merge pull request #3250 from mattymo/openstack_cacert
...
Fix openstack cacert task
2018-09-06 06:15:59 -07:00
dc3e317d20
Fix backward compatibility with calico 2.6
2018-09-06 15:54:20 +03:00
a5509fc2ce
Remove insecure-port and insecure-bind-address when possible
2018-09-06 13:46:09 +02:00
b614a3504b
Fix openstack cacert task
2018-09-06 14:06:06 +03:00
cd8e469b9c
Add missing variable kube_proxy_nodeport_addresses
2018-09-06 13:36:17 +03:00
991b3dbe54
put back endif in kubelet rkt template
2018-09-06 13:21:22 +03:00
f5251f7d27
Merge pull request #3247 from mattymo/kubelet_rkt_Fix
...
remove broken endifs in kubelet rkt mode
2018-09-06 02:49:35 -07:00
faedfb6307
remove broken endifs in kubelet rkt mode
2018-09-06 11:59:25 +03:00
1940495817
Merge pull request #3246 from riverzhang/pause
...
Upgrade pause image to 3.1
2018-09-06 00:48:05 -07:00
b979fb0116
Upgrade pause image to 3.1
2018-09-06 14:15:51 +08:00
7e140e5f3c
Merge pull request #3122 from jbcraig/fix_cacert_feature
...
resolve issues with new cacert feature
2018-09-05 23:31:53 +02:00
435e098751
Fix feature-gates
2018-09-05 22:55:51 +08:00
055e80f846
Merge pull request #3244 from ant31/calico31
...
Reverts calico update to 3.2.0, fixes #3223
2018-09-05 11:45:22 +02:00
15363530ae
Reverts calico update to 3.2.0, fixes #3223
2018-09-05 11:44:32 +02:00
6569180654
remove capitalize filter
2018-09-04 14:56:53 +02:00
ad33f71ac2
Merge pull request #3228 from mirwan/credentials_dir
...
Introducing credentials_dir variable in order to be able to override it
2018-09-04 04:35:11 -07:00
50c6a98b15
Merge pull request #3229 from mirwan/docker_1806_ubuntu_under_bionic
...
Docker 18.06 for ubuntu versions before bionic
2018-09-03 11:37:13 -07:00
a644b7c267
Introducing credentials_dir in order to be able to override it
2018-09-03 18:04:50 +02:00
8c9588ab59
Add additional no proxy parameter for more customization
2018-09-03 17:09:58 +03:00
c0ce875743
change edge to 18.06 for ubuntu
2018-09-03 14:11:25 +02:00
a22d28e1c1
docker 18.06 for ubuntu version before bionic
2018-09-03 14:10:51 +02:00
c32145057d
Merge pull request #3178 from gitphill/patch-1
...
Add azure-container-registry-config for Azure
2018-09-03 05:06:01 -07:00
fbb98b0070
Fix the jinja expression for openstack_tenant_id ( #3151 )
...
OS_PROJECT_ID is obsolete in keystone v3 and jinja expression
doesn't set openstack_tenant_id as expected because of
undefined env var. Fixed the expression.
2018-09-03 14:59:49 +03:00
db11394711
Merge pull request #3200 from pablodav/feature/k8s_win_v1.11
...
Required support to start working on windows node support
2018-09-03 04:51:23 -07:00
fd57fde075
Always run helm init to allow for settings changes
2018-09-03 11:16:01 +03:00
9fc8f9a07d
ingress-nginx: Upgrade to 0.19.0
...
Upstream Changes:
- ingress-nginx 0.19.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.19.0 )
Our Changes:
- Sync templates with upstream changes
2018-09-03 08:00:08 +08:00
7cbe3c2171
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
...
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
remove empty when line
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
force kubeadm upgrade due to failure without --force flag
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
added nodeSelector to have compatibility with hybrid cluster with win nodes, also fix for download with missing container type
fixes in syntax and LF for newline in files
fix on yamllint check
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
some cleanup for innecesary lines
remove conditions for nodeselector
2018-09-02 12:47:06 -03:00
a47c9239e8
Merge pull request #3221 from alvistack/cephfs-provisioner-v2.1.0-k8s1.11
...
cephfs-provisioner: Upgrade to v2.1.0-k8s1.11
2018-09-02 04:16:17 -07:00
635ca1a0b8
Merge pull request #3220 from alvistack/coredns-1.2.2
...
coredns: Upgrade to v1.2.2
2018-09-02 04:13:53 -07:00
32fdfbcd5a
cephfs-provisioner: Upgrade to v2.1.0-k8s1.11
...
Upstream Changes:
- cephfs-provisioner v2.1.0-k8s1.11 (https://github.com/kubernetes-incubator/external-storage/releases/tag/cephfs-provisioner-v2.1.0-k8s1.11 )
Our Changes:
- Sync clusterrole and role with upstream changes
2018-09-02 11:51:28 +08:00
df8b27c03c
coredns: Upgrade to v1.2.2
...
Upstream Changes:
- coredns v1.2.2 (https://github.com/coredns/coredns/releases/tag/v1.2.2 )
NOTE:
- coredns image for 1.2.0 and 1.2.1 had been removed from https://console.cloud.google.com/gcr/images/google-containers/GLOBAL/coredns
2018-09-02 11:37:21 +08:00
8e95974930
Fix ports for kubeadm client and master configs for ha setups
2018-09-01 18:02:52 +02:00
13dda0e36e
Merge pull request #3207 from mirwan/fix_3206
...
Fix target hosts generation when /etc/hosts does not contain 127.0.0.1 or ::1
2018-08-31 17:50:56 -07:00
6e7100f283
Merge pull request #3208 from mirwan/etcd_ha_doc_n_cleaning
...
Add documentation about having HA for etcd
2018-08-31 08:06:05 -07:00
059cd17b47
Fix target hosts generation when /etc/hosts does not contain 127.0.0.1 or ::1
2018-08-31 16:33:18 +02:00
fb7b3305dc
Merge pull request #3209 from mirwan/use_etcd_events_access_address
...
etcd_events_access_address should be used for peer_url and client_url
2018-08-31 07:26:25 -07:00
81c3f2c971
etcd_events_access_address should be used for peer_url and client_url
2018-08-31 15:03:07 +02:00
82a28d6bb3
Add documentation about having HA for etcd
2018-08-31 14:40:25 +02:00
22f9114630
update calico to 3.2.0
2018-08-31 13:45:08 +02:00
f2f0cdd0ff
add arch vars for docker
2018-08-31 13:45:08 +02:00
da06c8e5a9
etcd UNSUPPORTED for all arch
2018-08-31 13:45:08 +02:00
2f1fe44762
update images to use arch
2018-08-31 13:45:08 +02:00
19268ded23
Fix some arm64 errors
2018-08-31 13:45:08 +02:00
f67933d2ac
add ETCD_UNSUPPORTED_ARCH=arm64 flag
2018-08-31 13:45:08 +02:00
247b9e83d8
etcd arch-image
2018-08-31 13:45:08 +02:00
9c2098b8fa
fix kubelet_max_pod assert
2018-08-31 13:45:08 +02:00
48c0c8d854
Update dir list
2018-08-31 13:45:08 +02:00
2609ec0dc3
Fix copy etcd-ssl-ca failed
2018-08-31 15:06:03 +08:00
aafd034ab8
Merge pull request #3202 from riverzhang/fix-ipvs
...
Fix ipvs by kubeadm v1alpha1
2018-08-30 13:26:02 -07:00
d14394c691
Merge pull request #3185 from mirwan/helm_install_docker_insecureport_0
...
Mount /root/.kube to helm container
2018-08-30 08:11:33 -07:00
16fc22a207
Fix ipvs by kubeadm v1alpha1
2018-08-30 23:04:57 +08:00
d9ea937493
Merge pull request #3187 from mirwan/kubeadm-config_syntax
...
Fix kubeadm-config for audit-log-path and feature-gates
2018-08-30 06:55:43 -07:00
a96a0ee307
Merge pull request #3198 from riverzhang/fix-kubeadm-v1alpha1
...
Fix kubeadm v1alpha1 configure
2018-08-30 04:11:37 -07:00
f48468b83b
Merge pull request #3195 from mirwan/fix_psp_templates
...
Fix some addons when PodSecurityPolicy is enabled
2018-08-30 03:37:52 -07:00
35e5adaf0a
Fix kubeadm v1alpha1 configure
2018-08-30 17:44:00 +08:00
a247c2c713
Merge pull request #3191 from fcgravalos/make-canal-mount-xtables-lock
...
canal should mount xtables.lock to share the lock with other processe…
2018-08-29 08:57:32 -07:00
4feb62f6bf
Merge pull request #3193 from riverzhang/fix-lb-kubeadm
...
Fix kubeadm lb
2018-08-29 04:22:40 -07:00
ac4ef719cc
canal should mount xtables.lock to share the lock with other processes like kube-proxy
2018-08-29 13:08:51 +02:00
ceb97e5809
Fix wrong syntax for jinja sub list extraction and addition of missing role template
2018-08-29 12:58:10 +02:00
3bfda55fca
Merge pull request #3061 from okamototk/crio
...
cri-o support
2018-08-29 03:48:40 -07:00
9eade647e6
Fix kubeadm lb
2018-08-29 18:29:24 +08:00
bbdd1c8f06
Add option to change the Tiller Deployment namespace.
2018-08-29 11:20:41 +02:00
f876c89081
Merge pull request #3189 from Arslanbekov/up-dashboard-version
...
Up dashboard version to 1.10.0
2018-08-29 02:08:40 -07:00
1babbcca85
Fix elif azure statement
2018-08-28 15:43:03 +01:00
c0dfa72707
Separate RedHat specific vars for cri-o.
2018-08-28 13:36:14 +00:00
fe1e758856
Up dashboard version to 1.10.0
2018-08-28 14:10:19 +03:00
f325d13082
Add azure-container-registry-config for Azure
...
Seperated out KUBELET_CLOUDPROVIDER env var assignment when cloud_provider equals azure
Appended azure-container-registry-config parameter
2018-08-28 10:23:25 +00:00
52ab54eeea
Fix missing quotes for audit-log-path and wrong placement of feature-gates
2018-08-28 09:05:57 +02:00
d407a590a6
container_manager variable to specify runtime.
2018-08-28 06:23:38 +00:00
5eb805f098
Change timeout for kubeadm 600s.
...
* kubeadm timeout is too short and it may interrupt by timeout.
2018-08-28 04:51:38 +00:00
dfdcb56784
Delete all cri-o containers when execute reset.yml.
2018-08-28 02:25:33 +00:00
236f066635
kubeadm cri-o support.
2018-08-28 02:24:45 +00:00
5ab8a712d9
Add download_container flag to avoid docker pull when use cri-o.
2018-08-28 01:24:26 +00:00
cf7b9cfeef
Support crio in kubelet service.
2018-08-28 01:24:26 +00:00
6090af29e7
Add cri-o role.
2018-08-28 01:24:26 +00:00
359009bb05
Download etcd and hyperkube binary.
2018-08-28 01:24:26 +00:00
bdbfa4d403
Add ipvs support for kubeadm 1.10 or later.
2018-08-28 01:24:26 +00:00
6849788ebc
Fix copy ca cert and ca key for kubeadm.
2018-08-28 01:24:25 +00:00
ac639b2a17
Change kubeadm config to run etcd by kubeadm.
2018-08-28 01:24:25 +00:00
b18ed5922b
Add etcd default value in kubespray-default.
2018-08-28 01:24:25 +00:00
b395bb953f
Fix wrong when condition that ends up with jinja error when the content of /etc/hosts contains parenthesis
2018-08-27 21:20:57 +02:00
b652792a93
/root/.kube must to mounted in order for helm to read kubeconfig and not fallback to localhost:8080
2018-08-27 18:17:26 +02:00
7efe287c74
Merge pull request #2474 from mirwan/localhost_in_etc_hosts
...
Localhost in hosts files should be updated (if necessary), not overriden
2018-08-27 06:25:43 -07:00
881b46f458
Merge pull request #3095 from mirwan/dnsmasq_template_rendering_filename
...
Dnsmasq manifests should not have j2 extension but templates should
2018-08-27 02:51:43 -07:00
d43cd9a24c
Merge pull request #3104 from maxbrunet/hotfix/replace-local_actions
...
Use delegate_to: localhost instead of local_action
2018-08-27 02:50:42 -07:00
fff48d24ea
Replace the raw rsync command with the synchronize module
2018-08-27 10:00:21 +02:00
f4feb17629
Merge pull request #2958 from elementyang/etcd-pr
...
change the way that getting etcd_member_name
2018-08-26 23:55:04 -07:00
33135f2ada
k8s/preinstall: Turn AND condition into a list
2018-08-25 14:33:31 -04:00
d6f4d10075
Merge pull request #3153 from alvistack/remove-image_tag-suffix
...
Remove *_image_tag suffix from ReplicaSet/Deployment
2018-08-25 04:42:19 -07:00
f97515352b
Merge pull request #3161 from nutellinoit/kube_proxy_nodeport_addresses
...
--nodeport-addresses added on kube-proxy.manifest.j2 and on k8s-cluster.yml
2018-08-25 02:00:19 -07:00
f7f58bf070
Merge pull request #3173 from msimonin/fix-3164
...
Fix createhome directory for adduser role
2018-08-24 16:34:57 +03:00
1432e511a2
same work with less lines
2018-08-24 14:06:07 +02:00
b61eb7d7f3
Add ETCD_QUOTA_BACKEND_BYTES environment variable
2018-08-24 12:17:34 +02:00
1567a977c3
Revert "gen_certs_script: refactor using stdin (Ansible 2.4+)"
2018-08-24 12:35:31 +03:00
cb8be37f72
fix on v1alpha1
2018-08-24 11:19:06 +02:00
e5dd4e1e70
added on v1alpha1
2018-08-24 10:59:06 +02:00
6d74a3db7a
Merge pull request #3163 from kubernetes-incubator/fix-docker-ubuntu1804
...
Fix docker apt-repo for Ubuntu18
2018-08-24 00:51:59 +02:00
1da5926a94
Use xenial repo for ubuntu18
2018-08-23 22:34:44 +00:00
4882531c29
Merge pull request #3115 from oracle/oracle_oci_controller
...
Cloud provider support for OCI (Oracle Cloud Infrastructure)
2018-08-23 18:22:45 +02:00
f59b80b80b
Merge pull request #3147 from ishitatsuyuki/etcd-cleanup
...
gen_certs_script: refactor using stdin (Ansible 2.4+)
2018-08-23 18:19:28 +02:00
7b61a0eff0
Fix kubeadm LB configure
...
1. join node add LB discoveryTokenAPIServers
2. kubeadm_config_api_fqdn support ipddress and domain_name
2018-08-23 22:22:34 +08:00
23fd3461bc
calico upgrade to v3 ( #3086 )
...
* calico upgrade to v3
* update calico_rr version
* add missing file
* change contents of main.yml as it was left old version
* enable network policy by default
* remove unneeded task
* Fix kubelet calico settings
* fix when statement
* switch back to node-kubeconfig.yaml
2018-08-23 17:17:18 +03:00
e22e15afda
Fix createhome directory for adduser role
...
A typo in the adduser role prevents the createhome
variable to be taken into account.
Fix #3164
2018-08-23 08:55:11 +02:00
f453567cce
Merge pull request #3144 from riverzhang/fix-audit-log
...
Fix install audit failed
2018-08-23 14:41:37 +08:00
69786b2d16
gen_certs_script: refactor using stdin (Ansible 2.4+)
2018-08-23 11:19:17 +09:00
5a4352657d
Fix install audit failed
...
1.fix audit log not write
2.fix Parameter not recognized
3.delete kubedm futuregates auditing and use apiServerExtraArgs
2018-08-23 01:47:15 +08:00
f13bc796d9
added nodePortAddresses on kubeadm conf v1alpha2 (not present on v1alpha1)
2018-08-22 18:43:03 +02:00
a6a14e7f77
create the service account and roles even if the rbac is not enabled. it will just be ignored
2018-08-22 18:17:11 +02:00
80cfeea957
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
2018-08-22 18:16:13 +02:00
2c90208486
Fix docker apt-repo for Ubuntu18
2018-08-22 15:53:14 +00:00
4eea7f7eb9
Merge pull request #3152 from johnzheng1975/cilium_1.2.0
...
new cilium stable version: 1.2.0
2018-08-22 17:11:42 +02:00
5d9908c2c3
--nodeport-addresses added on kube-proxy.manifest.j2
...
Changed author
2018-08-22 15:32:07 +02:00
a7b0c454db
Localhost in hosts files should be updated (if necessary), not overriden
2018-08-22 12:10:49 +02:00
c3b3572025
Always create service account even rbac_enabled = false
2018-08-22 11:41:29 +08:00
f897596844
Remove *_image_tag suffix from ReplicaSet/Deployment
2018-08-22 11:02:56 +08:00
rabi
k8s-ci-robot
Matthew Mosesohn
Matthew Mosesohn
Zinin D.A
Erwan Miran
Chad Swenson
Frank Ritchie
rongzhang
georgejdli
Takashi Okamoto
mlushpenko
Antoine Legrand
Luis Nunez
Atoms
rboyapat
Wong Hoi Sing Edison
Pablo Estigarribia
Fernando Crespo Grávalos
Robin Elfrink
Phill Garrett
Arslanbekov Denis
guenhter
Maxime Brunet
Aivars Sterns
Vasilis Remmas
Samuele Chiocca
msimonin
Tatsuyuki Ishi