39b907cdfb
Remove workaround for kubeadm upgrade ( #6478 )
...
https://github.com/kubernetes/kubeadm/issues/1498 was closed
2020-08-03 01:17:40 -07:00
24a7878e7c
Update kube-router to 1.0.1 and kube-ovn to 1.3.0 ( #6479 )
2020-08-01 00:34:04 -07:00
2364a84579
fix src for audit webhook config yaml ( #6470 )
2020-08-01 00:33:56 -07:00
c6e5be91e9
crio: align template crio.conf with upstream ( #6432 )
...
* log level by default increased to 'info'
* cgroup manager by default set to 'systemd'
* stream port (used by kubelet) bound to 127.0.0.1 for security reasons
* metrics can be enabled and port specified
2020-08-01 00:33:48 -07:00
ce22c0e6a4
Add option to configure IPVS timeouts in kube-proxy configration manifest. ( #6396 )
2020-08-01 00:33:40 -07:00
bd60df97aa
Fix download calico policy condition ( #6474 )
2020-08-01 00:29:48 -07:00
94df580674
Moved docker_dns_options to defaults so it can be overridden ( #6394 )
...
* Moved docker_dns_options to defaults so it can be overridden
* Fixed yaml indentation and markdown
* Moved docker_dns_search_domains to defaults
2020-08-01 00:29:41 -07:00
90e5f8ffe1
adding ovn4nfv in kubespray ( #6381 )
...
Signed-off-by: Kuralamudhan Ramakrishnan <kuralamudhan.ramakrishnan@intel.com>
2020-07-31 07:33:08 -07:00
bf6168fca8
Move fedora30 jobs to fedora32 ( #6426 )
2020-07-30 23:31:07 -07:00
a78e861a89
Fix test if openstack_cacert is a base64 string ( #6421 )
2020-07-30 13:15:17 -07:00
3550e3c145
Adding kube-proxy-replacement support in cilium ( #6334 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-30 02:46:31 -07:00
8425c2363b
Replaced a broken link ( #6467 )
2020-07-30 00:58:31 -07:00
15ec44901d
azure csi typo ( #6469 )
2020-07-30 00:52:31 -07:00
924cc11af6
Upgrade to kubernetes 1.18.6 ( #6405 )
...
- Add 1.17.9 and 1.16.13 SHAs
2020-07-29 14:54:09 -07:00
fe46349786
Fix ansible-lint E301 for commands fetching data ( #6465 )
2020-07-28 08:39:47 -07:00
214e08f8c9
Fix ansible-lint E305 ( #6459 )
2020-07-28 01:39:08 -07:00
8bd3b50e31
Fix ansible-lint E404 ( #6417 )
2020-07-28 01:21:08 -07:00
e70f27dd79
Add noqa and disable .ansible-lint global exclusions ( #6410 )
2020-07-27 06:24:17 -07:00
b680cdd0e4
Move healthz check to secure ports ( #6446 )
2020-07-27 00:26:17 -07:00
c9f63e5016
Update multus version & crio conf ( #6444 )
2020-07-26 23:36:16 -07:00
d8a197ca51
Fix remove etcd broken with etcdctl_api 3 ( #6448 )
2020-07-26 23:32:29 -07:00
1f9841f609
update cinder csi manifests ( #6434 )
2020-07-26 23:32:17 -07:00
aa21edeb53
Update docker package to 19.03.12 ( #6439 )
2020-07-22 09:26:06 -07:00
4b80a7f6fe
Felix configuration via extraenvs of calico node ( #6433 )
2020-07-22 00:08:04 -07:00
e06e6895da
Remove dbus-tools from coreos bootstrap ( #6428 )
...
Trying to layer this package on Fedora 32 causes the install to crash
and furthermore it looks like the original bug linked to in the comment
has been resolved for Fedora 31
2020-07-22 00:04:04 -07:00
50fc82acdc
Minor update to Cilium and Calico ( #6438 )
2020-07-21 23:58:33 -07:00
ea67bb6e41
Fix typo: Modprode -> Modprobe ( #6429 )
2020-07-21 23:58:25 -07:00
b19f2e2d3d
Update the calico_veth_mtu setting to affect IP-in-IP users ( #6419 )
...
* Update calico_veth_mtu to FELIX_IPINIP variable
calico_veth_mtu is specified in the configuration, but since it only works for wireguard, modify it to work for IP-in-IP users.
* Update template with more cleaner expression
2020-07-21 23:58:18 -07:00
9c48f666ec
change /etc/ssl/etcd to etcd_config_dir param ( #6408 )
...
* change /etc/ssl/etcd to etcd_config_dir param
* add use etcd_events_data_dir param
2020-07-21 23:58:05 -07:00
bf8c8976dd
Upgrade etcd to 3.4.3 ( #5998 )
2020-07-20 07:26:51 -07:00
a7ec0ed587
add audit webhook support ( #6317 )
...
* add audit webhook support
* use generic name auditsink
2020-07-20 01:32:54 -07:00
1a1fe99669
Add a way to deploy cilium alongside another CNI ( #6373 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-17 05:57:01 -07:00
5e22574402
Remove allow-release-candidate-upgrades already include in experimental-upgrades flag ( #6349 )
2020-07-15 00:26:37 -07:00
e1873ab872
add calico-node selinux ( #6359 )
2020-07-15 00:22:38 -07:00
29312a3ec0
Add oomichi to reviwers of MetalLB addon ( #6393 )
...
I'd like to review PRs related to metallb addon as possible to make
it better, and it would be easy to track related PRs if becoming the
reviewer.
2020-07-14 20:44:37 -07:00
feeb701c13
Respect kube_override_hostname during removal/upgrade ( #6347 )
...
* respect kube_override_hostname during removal/upgrade
* Use hostvars in loop
2020-07-13 07:18:40 -07:00
b347aefd61
Fixed fedora modular repos activation for fcos ( #6300 )
...
* Enable fedora modular repos for fcos #6299
* Fixed fedora modular repos activation for fcos #6300
2020-07-13 07:18:32 -07:00
abfa1636e4
Fix kube-proxy post deployment removal ( #5554 )
...
* Fix kube-proxy removal
* Fix unwanted skipped task for kube-proxy
* Fix kube_proxy_remove default
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add test for kube-router svc proxy
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-13 07:12:33 -07:00
deca5ec903
Remove old csi-attacher flag and fix RBAC for Cinder CSI ( #6358 )
...
Add proper RBAC for new csi-attacher version
2020-07-13 04:48:32 -07:00
05b9f14b76
Update cilium minimum kernel preinstall check ( #6376 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-13 04:44:32 -07:00
4cb576da19
Add readiness probe to dns-autoscaler ( #6382 )
2020-07-13 02:50:34 -07:00
22996babcf
allow kubeadm to upgrade etcd ( #6345 )
...
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
2020-07-07 12:36:00 -07:00
75ad868cbd
crio: harden downloads with retry ( #6374 )
...
CI job 624031102 failed with:
fatal: [ubuntu1804]: FAILED! => {"changed": false, "msg": "Failed to download key at https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/xUbuntu_18.04/Release.key : Request failed: <urlopen error [Errno -3] Temporary failure in name resolution>"}
Assuming its a temporary problem it should get more robust with a
couple of retries like in other roles.
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
2020-07-07 12:32:01 -07:00
9433fe46c8
Add workaround with include_task for mitogen ( #6312 )
2020-07-07 08:09:59 -07:00
6bb47d8adb
Fix can't remove etcd node ( #6363 )
...
* add remove_node_ip
* move remove_node_ip to remove etcd part
* fix: remove tail space
* fix: handle ubuntu: focal
2020-07-04 02:02:48 -07:00
57eefdd458
Fix azure-cloud-config.j2 JSON syntax ( #6364 )
2020-07-02 23:38:47 -07:00
060d25fc79
Update MetalLB README.md ( #6350 )
...
Recently MetalLB becomes one of addons with renaming the options.
This updates MetalLB README.md for this change.
2020-07-02 07:12:54 -07:00
4ce970c0b2
Cilium: overwrite auto-detected MTU of underlying network ( #6329 )
2020-07-02 07:12:47 -07:00
017df7113d
Patch Calico for V3.14.0 missing CR and CRD ( #6276 )
2020-07-01 08:44:16 -07:00
00fe3d5094
Explicitly set ETCDCTL_API and use ETCDCTL_ENDPOINTS ( #6327 )
2020-07-01 04:56:16 -07:00
bcac3c62a2
Add additional metadata configuration options to external Openstack CCM (kubernetes-sigs#6338) ( #6339 )
...
* Add additional metadata configuration option to external Openstack CCM (kubernetes-sigs#6338)
* Set the variable external_openstack_metadata_search_order undefined by default
2020-07-01 04:52:17 -07:00
2a82dff3ae
Remove runtime-config from kubeadm if empty ( #6311 )
2020-06-30 11:22:05 -07:00
16ec5939c2
Update deprecated api ( #6245 )
2020-06-30 09:00:07 -07:00
b064274e27
Update kube-router to 1.0.0 ( #6211 )
2020-06-30 08:54:06 -07:00
ae003af262
Fix kubelet cgroup driver detection for crio ( #6331 )
...
* Fix kubelet cgroup driver detection for crio
Remove fact standalone_kubelet since it is not used
* Fix yamllint complaints of roles/kubernetes/node/tasks/facts.yml
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
2020-06-30 02:32:05 -07:00
f515898cb5
Update hashes and set default version to 1.18.5 ( #6335 )
2020-06-30 02:00:05 -07:00
25bab0e976
Change MetalLB to one of addons ( #6238 )
...
This changes MetalLB contrib to one of addons for deploying MetalLB with
Kubernetes cluster deployment. By the default, Kubespray doesn't deploy
MetalLB addon.
2020-06-29 15:11:59 -07:00
8213b1802b
Update calico to 1.15.0 + minor update to kube-ovn/weave ( #6306 )
2020-06-29 14:39:58 -07:00
4c1e0b188d
Add .editorconfig file ( #6307 )
2020-06-29 12:39:59 -07:00
09b23f96d7
Use NetworkManager to manage resolv.conf in FedoraCoreOS ( #6291 )
2020-06-29 00:26:17 -07:00
1892cd65f6
Add support for dns_etchosts ( #6236 )
2020-06-26 00:03:31 -07:00
d3ca9d1db9
kube_encryption_resources must be output as yaml ( #6309 )
2020-06-25 23:59:31 -07:00
16ad344c41
Gather ansible_default_ipv4 for specific groups ( #6318 )
2020-06-25 23:55:31 -07:00
8ca2a9a7d5
added azure_cloud parameter to Azure's cloud_config ( #6321 )
2020-06-25 14:35:30 -07:00
276c450759
Use `connection: local` when `delegate_to: localhost` ( #6322 )
...
This will avoid SSH connection on the local host
2020-06-25 08:14:38 -07:00
a6a6e843af
Add /dev volume ( #6319 )
2020-06-25 06:22:38 -07:00
f54f63ec3f
Update cilium to 1.8.0 ( #6314 )
2020-06-25 06:16:38 -07:00
93951f2ed5
fix use of ansible tags ( #6316 )
...
tags are not inherited for include_role therefore the change
from include to import
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
2020-06-25 03:00:37 -07:00
c29b21717d
Add event-ttl duration ( #6310 )
...
* Add event-ttl duration
* Fix wrong location
2020-06-24 08:15:17 -07:00
80d16e6c91
Support for Ambassador OSS as an Ingress ( #6135 )
...
Support for Ambassador OSS as an Ingress Controller when
settings `ingress_ambassador_enabled: true`.
Signed-off-by: Alvaro Saurin <alvaro.saurin@gmail.com>
2020-06-24 07:39:17 -07:00
d50fe9550c
bump dashboard to 2.0.2 ( #6303 )
2020-06-22 01:14:40 -07:00
8f5c4dcd2e
Add support for Kata Containers ( #6256 )
...
* Install Kata Containers as additional container runtime
* Create RuntimeClasses for Kata Containers
* Updated Vagrant to optionally run without Docker as container manager
* Updated Vagrant to optionally use Libvirt nested virtualization
* Add Kata Containers documentation
* Fix lint errors
* Add kata_containers_enabled to kubespray-defaults
* Fixed typo error
* Fixed typo error
2020-06-22 00:28:39 -07:00
90c867b424
Update loadbalancers versions (haproxy&nginx) ( #6278 )
2020-06-18 07:48:19 -07:00
eeb77369cb
Update hashes and set default to 1.18.4 ( #6285 )
2020-06-18 06:30:19 -07:00
605cfeb3e4
Test bootstrap-os on more platforms ( #6277 )
2020-06-17 04:52:39 -07:00
c6588856c7
Add Ubuntu 20.04 support and use Python 3 ( #6157 )
2020-06-16 13:04:05 -07:00
dba645421f
ADD tls cipher suites support ( #6024 )
...
* ADD tls cipher suites support
yaml lint
yamllint
* update test case
* update test case
2020-06-16 04:10:05 -07:00
f437ac0b27
Fix nologin wrong path ( #6272 )
2020-06-16 02:30:04 -07:00
19d4b5dd04
Update various dependencies ( #6265 )
2020-06-16 01:08:03 -07:00
78251b0304
Fix check external_openstack_tenant_name value ( #6270 )
...
We need to specify either external_openstack_tenant_name or
external_openstack_tenant_id. Those values were checked by seeing they
are defined or they have actual values separately.
However those values are always defined because of the following code
of openstack/defaults/main.yml:
external_openstack_tenant_id: "{{ lookup('env','OS_TENANT_ID')| default(lookup('env','OS_PROJECT_ID'),true) }}"
external_openstack_tenant_name: "{{ lookup('env','OS_TENANT_NAME')| default(lookup('env','OS_PROJECT_NAME'),true) }}"
So even if not specifying both values, those checks could not detect
the misconfiguration. This fixes this to detect the misconfiguration.
2020-06-16 01:02:03 -07:00
10e54eca26
make better condition for applying nf_conntrack kernel tweak ( #6267 )
...
* MINOR: Check kernel version before enable modprobe nf_conntrack
* CLEANUP: no more need to ignore error of this task
* MINOR: Fixing yaml and ansible lint error - remove trailling-space
2020-06-16 00:34:06 -07:00
a8740c6e13
fix a few tasks falsely reporting "changed" ( #6269 )
...
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
2020-06-16 00:24:03 -07:00
06391b6dd9
Fix kubectl.sh parameter quoting ( #6239 )
...
If the special parameter "$@" is not quoted, the following command will not work:
./kubectl.sh patch storageclass my-storage-class -p '{"metadata": {"annotations":{"storageclass.kubernetes.io/is-default-class":"true"}}}'
2020-06-14 13:57:57 -07:00
8dc01df60b
Oracle Linux 8 support and fixes ( #6198 )
...
* Add oraclelinux8 and disable firewalld
Add oraclelinux8 image and disable firewalld on oraclelinux VMs
* Fix Oracle Linux repositories
As documented in: http://yum.oracle.com/getting-started.html#installing-software-from-oracle-linux-yum-server
public-yum-ol7.repo was deprecated on release 7.6. Some repos were integrated into oracle-linux-ol7.repo (i.e.: ol7_latest, ol7_addons) and other are available as packages (epel). This also adds support for oraclelinux8
* Fix to use ansible_distribution_version
Instead of ansible_distribution_major_version
* Update README.md
2020-06-12 01:59:56 -07:00
a9de6dde33
Cleanup unneeded elif in kubelet env file ( #6261 )
2020-06-12 01:27:55 -07:00
1912df7e3e
Create /etc/gai.conf if not exists when disable_ipv6_dns is 'true' ( #6258 )
2020-06-12 00:55:55 -07:00
e1ba25a4fb
Bump CSI containers to latest version ( #6221 )
...
* bump csi containers
* bump snapshoter to 2.1.1
2020-06-12 00:51:55 -07:00
10a17cfe54
Look up OS_PROJECT_NAME for OpenStack project name ( #6262 )
...
On OpenStack history, we used to call "tenant" for separeted namespace.
However we use "project" now instead.
Then we have replaced "tenant" with "project". Then all "TENANT" variables
also are renamed to "PROJECT".
This makes Kubespray search "PROJECT" variable also for newer OpenStack
clouds.
2020-06-12 00:47:56 -07:00
5a311236c4
Enable portmap CNI plugin with kube-router ( #6204 )
...
... to have working `hostPort` for containers.
See: https://www.kube-router.io/docs/user-guide/#hostport-support
2020-06-10 10:08:52 -07:00
a7b8708dfc
calico: use absolute path to docker, crictl binary ( #6253 )
...
To avoid the following error (ignored when pipefail is off)
RUNNING HANDLER [network_plugin/calico : containerd | delete calico-node containers] *******************************************************************************
changed: [node1] => {"attempts": 1, "changed": true, "cmd": "crictl pods --name calico-node-* -q | xargs -I% --no-run-if-empty bash -c \"crictl stopp % && crictl rmp %\"", "delta": "0:00:00.004240", "end": "2020-06-10 03:32:41.316955", "rc": 0, "start": "2020-06-10 03:32:41.312715", "stderr": "/bin/sh: crictl: command not found", "stderr_lines": ["/bin/sh: crictl: command not found"], "stdout": "", "stdout_lines": []}
2020-06-10 03:22:08 -07:00
ecc3a0aec5
Update kube-ovn to 1.2.0 - also update minor version for multus and weave ( #6223 )
2020-06-09 12:09:01 -07:00
144743e818
Fix indentation in a few places so file can be round-tripped more easily ( #6178 )
...
with the Python ruamel.yml library
- Change True/False to true/false in a few places so file can
be more easily round-tripped with the Python ruamel.yml library
2020-06-09 06:39:20 -07:00
7712bd0c76
remove ectd node in pre step, instead of post step ( #6099 )
2020-06-09 05:37:17 -07:00
101686c665
Remove outdated CriticalAddonsOnly toleration and critical-pod annotation ( #6202 )
2020-06-09 05:23:30 -07:00
50204d9551
Add rpm-ostree cleanup task ( #5986 )
2020-06-09 02:49:17 -07:00
6852f821a5
Update nginx ingress to 0.32.0 ( #6063 )
2020-06-09 02:45:18 -07:00
953bc8dee2
Update docker & docker-cli to 19.03.11 ( #6225 )
2020-06-07 23:55:46 -07:00
3f443f3878
set allowVolumeExpansion in cinder csi ( #6220 )
2020-06-05 08:27:43 -07:00
5dd85197af
Manage containerd.io package with docker CRI. ( #6218 )
...
* Manage containerd.io package with docker CRI.
* Refactor common containerd stuff to separate role
* Fix check mode and unnecessary shell.
2020-06-05 05:55:44 -07:00
750db9139a
fix CRI-O repos for centos distributions ( #6224 )
...
* fix CRI-O repos for centos distributions
* fix CRI-O repos for centos distributions
- revert workarounds
* fix CRI-O repos for centos distributions
- use https for centos repos
* avoid 302 redirects for centos repos
2020-06-04 01:08:44 -07:00
Florent Monbillard
Florian Ruynat
Konstantin Lebedev
Hans Feldt
fulii
Maxime Lavandier
Cristian Chiru
Kuralamudhan Ramakrishnan
Arthur Outhenin-Chalandre
Vladimir Masarik
Samuel Liu
Maxime Guyot
Hugo Blom
Michael Sheinberg
Igor Vuk
Minjong Kim
chenguoquan1024
Kenichi Omichi
Qasim Sarfraz
Daniel Schade
Steven Reitsma
petruha
spaced
Sam Lin
Pasquale Toscano
nurekage
Paul Rey
Joel Seguillon
bozzo
Mateus Caruccio
Erwan Miran
Mike Dziedziela
irizzant
Alvaro
mohsen
Y0UZ45
marcosfsch
Unai Arríen
Alexander Evseev
Yousong Zhou
Craig Rodrigues
Alexander Petermann
Danilo Riecken P. de Morais
Lovro Seder