a962fa2357
[podSecurityConfiguration]: fix apiVersion and change default policy versions ( #10210 )
...
Signed-off-by: Ugur <ugurozturk918@gmail.com>
2023-06-12 17:55:57 -07:00
775851b00c
[flatcar] add python dependency check for helm-apps ( #10192 )
...
* add pyyaml install via task instead of package
* Change condition for better consistency in the codebase
2023-06-12 17:51:58 -07:00
f8fadf53cd
helm: fix pyyaml package on RH distros ( #10204 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
2023-06-12 17:39:57 -07:00
ce13699dfa
Use a uniform way to get the local path of the binaries ( #10211 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2023-06-12 00:39:48 -07:00
fc5937e948
fix gce-pd-csi driver ( #10208 )
...
* fix gce-pd-csi driver
* fixed, 1. reading replicas value from defaults.yml, and 2. corrected gcp-pd-csi driver version in README.md
2023-06-11 20:45:47 -07:00
729e2c565b
cleanup-for-2.22.1 ( #10201 )
2023-06-08 07:36:15 -07:00
26ed50f04a
Enable interruptible jobs' pipelines ( #10167 )
2023-06-08 03:12:13 -07:00
2b80d053f3
bump nodelocaldns version to 1.22.20 ( #10200 )
...
Signed-off-by: Emin Aktaş <eminaktas34@gmail.com>
2023-06-08 03:08:14 -07:00
f5ee8b71ff
Permit custom names for API server lb/proxy containers. ( #10166 )
...
Signed-off-by: Pat Riehecky <riehecky@fnal.gov>
2023-06-08 02:54:13 -07:00
4c76feb574
Kubelet csr approver fixes ( #10165 )
...
* Fix upgrade-path for kubelet-csr-approver
Fixes an error when you enable kubelet-csr-approver when upgrading.
It hangs waiting for the certificate to be approved since the
kubelet-csr-approver is not installed yet.
* Add missing package when using helm role
2023-06-06 02:27:00 -07:00
18d84db41c
Don't search filesystem mounts in docker build step ( #10131 )
...
Limit find cmd to /usr/ where __pycache__ files are located
2023-06-06 01:13:01 -07:00
08a571b4a1
Remove flannel_cni_download_url ( #10188 )
...
Since the commit 937e64d296
2023-06-05 05:57:25 -07:00
5ebd305d17
remove cri-o using crio_bin_files ( #10182 )
2023-06-04 20:02:42 -07:00
edc73bc3c8
project: upgrade test dependencies and drop ansible-core 2.11 ( #10034 )
...
Molecule 5.0 require ansible-core 2.12.10.
So this commit we update ansible-core from 2.12.5 to 2.12.10.
We also drop supporting two ansible-core version. Also we now use the "oldest"
still supported ansible-core version as both 2.11 is EOL and not
supported by molecule.
tests/molecule: remove linting in molecule to support molecule 5
tests/molecule: remove role name check for molecule 5 support
Kubespray doesn't use ansible galaxy style naming so we have to disable
that check.
contrib/inventory_builder: fix tox.ini for tox4
tests/molecule: fix get_playbook in testinfra tests
tests: upgrade most tests requirements
Exclude ansible-lint for now, I will do that in a separate PR.
tests/molecule: force kvm driver option
If we don't do this it fallbacks to qemu emulated on our CI for some
reasons.
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
2023-06-02 20:40:40 -07:00
b7fa2d7b87
Fix metrics-server for k8s 1.26 ( #10183 )
2023-06-02 18:16:40 -07:00
7771ac6074
add krew_no_upgrade_check ( #10175 )
2023-06-02 18:12:40 -07:00
f25b6fce1c
Add node_taints to aws_inventory script ( #10168 ) ( #10170 )
2023-06-01 22:12:52 -07:00
d7b79395c7
Add labels to kube-vip static pods ( #10139 )
2023-06-01 16:45:46 -07:00
ce18b0f22d
fix missing newline in template ( #10174 )
2023-05-31 23:27:45 -07:00
2d8f60000c
Solves #2933 : Allow http_proxy, https_proxy and no_proxy environment variables in cert-manager playbook ( #10162 )
2023-05-31 20:23:45 -07:00
0b102287d1
[ #10148 ] The download.timeout can be changed by variable download.timeout ( #10149 )
...
Reference:
https://docs.ansible.com/ansible/latest/collections/ansible/builtin/get_url_module.html#parameter-timeout
2023-05-31 18:15:45 -07:00
d325fd6af7
Don't create calico CNI dir when not using calico ( #10156 )
...
Signed-off-by: Pat Riehecky <riehecky@fnal.gov>
2023-05-31 08:35:48 -07:00
e949b8a1e8
Update cilium to latest (1.13.3) ( #10158 )
...
Signed-off-by: Pat Riehecky <riehecky@fnal.gov>
2023-05-31 03:23:46 -07:00
ab6e284180
Locate mount names isn't a change to the system ( #10161 )
...
Signed-off-by: Pat Riehecky <riehecky@fnal.gov>
2023-05-31 01:33:46 -07:00
7421b6e180
Running ping doesn't change state ( #10160 )
...
Signed-off-by: Pat Riehecky <riehecky@fnal.gov>
2023-05-31 01:29:46 -07:00
a2f03c559a
Fixed the incorrect links in kubespray/docs ( #10159 )
2023-05-30 19:35:47 -07:00
3ced391fab
Print the found version when it is incorrect ( #10109 )
...
Signed-off-by: Pat Riehecky <riehecky@fnal.gov>
2023-05-30 11:43:49 -07:00
ea7dcd46d7
Update MetalLB deployment, wait for resource. ( #9995 )
...
* Update MetalLB deployment, wait for resource.
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
* yml to yaml, add basic test for metallb
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
---------
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2023-05-30 11:37:49 -07:00
94e33bdbbf
fix manage-offline-files script - wrong path ( #9886 )
2023-05-28 21:27:42 -07:00
29f833e9a4
fix(ssl-ca): mount ssl ca directories ( #9794 )
...
Signed-off-by: Maxime Leroy <19607336+maxime1907@users.noreply.github.com>
2023-05-28 19:43:42 -07:00
8c32be5feb
Add insecure_registry config to crio.conf ( #10142 )
2023-05-28 19:03:41 -07:00
0ba2e655f4
Fix problem migration to k8s 1.27 ( #10136 )
...
* Fix `The task includes an option with an undefined variable` for 1.27
* delete old flag --container-runtime
Signed-off-by: Victor Login <batazor@evrone.com>
---------
Signed-off-by: Victor Login <batazor@evrone.com>
2023-05-28 17:09:42 -07:00
78189186e5
Rebasechanges from upstream ( #10128 )
2023-05-26 00:28:52 -07:00
96e875cd50
Add systemd_resolved_disable_stub_listener ( #9875 )
2023-05-25 10:04:51 -07:00
808524bed6
fix-ci-tf-elastx_cleanup ( #10133 )
2023-05-25 08:38:52 -07:00
75e00420ec
Add arch and version to the downloaded binary name ( #10122 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2023-05-24 22:30:50 -07:00
8be5604da4
[kubernetes] support 1.27.2 ( #9976 )
2023-05-24 20:00:50 -07:00
02624554ae
Remove end of life ubuntu versions in CI ( #10107 )
...
* tests: replace ubuntu16 with ubuntu20
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
* tests: replace ubuntu18 with ubuntu20
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
* docs: update docs to remove support for ubuntu 16 and 18
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
* molecule: upgrade ubuntu versions
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
* vagrant: upgrade ubuntu versions
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
* tests: cleanup ubuntu{16,18}
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
* tests: increase ubuntu22 ram to allow molecule creation
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
---------
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
2023-05-24 19:56:50 -07:00
9d1e9a6a78
kube_ovn_cni_config_priority ( #10125 )
2023-05-24 18:34:51 -07:00
861d5b763d
fix-dockerfile ( #10127 )
2023-05-24 17:02:50 -07:00
4013c48acb
cleanup-for-2.22.0 ( #10126 )
2023-05-24 08:56:50 -07:00
f264426646
cert-manager controller args: ( #10049 )
...
- Adding in the ability to feed extra-args to cert-manager-controller.
2023-05-24 08:12:53 -07:00
862fd2c5c4
feature(ingress_nginx) Add ingressclass for ingress_nginx ( #10091 )
...
Add option to configure class as the default class
Add option to disable wathcing for ingresses without class
Remove redundant if that always evaluates to true
Fix default value missing for ingress_nginx_default
2023-05-24 04:12:50 -07:00
4014a1cccb
fix multus include ( #10105 )
...
``
"msg": "Failed to template loop_control.label: 'ansible.utils.unsafe_proxy.AnsibleUnsafeText object' has no attribute 'item'. 'ansible.utils.unsafe_proxy.AnsibleUnsafeText object' has no attribute 'item'", "skip_reason": "Conditional result was False"}
``
fixes case when multus should NOT be included.
2023-05-23 01:12:27 -07:00
c55844b80e
playbooks: bootstrap in facts playbook ( #10069 )
...
Calling bootstrap in facts.yaml so that we can always collect facts even on
new nodes. This is useful when you want to add nodes to an inventory
beforehand and then collect facts and scale the cluster with the scale
playbook and --limits. With dynamic inventory sometimes it might be more
difficult to add the nodes after running the facts playbook in this
specific situation.
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
2023-05-23 00:18:28 -07:00
a4fa9aed75
fix: use dl.k8s.io, not kubernetes-release bucket ( #10118 )
...
Signed-off-by: Ricky Sadowski <richard.j.sadowski@gmail.com>
2023-05-22 17:50:21 -07:00
659001c9d7
[nerdctl] upgrade to version 1.4.0 ( #10119 )
2023-05-22 17:44:20 -07:00
07647fb720
Fix broken CI tests link in README ( #10114 )
2023-05-22 16:58:20 -07:00
161bd55ab2
Remove deprecated crio_pids_limits ( #10056 )
...
As per https://github.com/cri-o/cri-o/pull/5831 , option is now
deprecated.
2023-05-22 08:49:03 -07:00
4b67c7d6a6
[calico] add hashes for v3.24.6 ( #10113 )
2023-05-22 07:50:35 -07:00
Ugur Can Ozturk
palme
Arthur Outhenin-Chalandre
ERIK
Ashish Singh Dev
Kay Yan
James
Emin AKTAS
Pat Riehecky
Mateusz Mojsiejuk
Kenichi Omichi
yun
Mohamed Omar Zaian
Samuel Liu
Michael Stötzer
Richard Fairthorne
Aleksandr Karabanov
yjqg6666
Vaibhav Goel
Jeroen Rijken
Mohammad KhoshZaban
Maxime Leroy
qlijin
Victor Login
Daniel Strufe
Andrei Costescu
Rob Tongue
Mathias Petermann
darkobas2
Ricky Sadowski