818aa7aeb1
Set dnsPolicy to ClusterFirstWithHostNet when hostNetwork is true ( #4843 )
2019-06-05 03:17:55 -07:00
d540560619
Preinstall fails on checking etcd group length ( #4839 )
2019-06-05 01:37:53 -07:00
797bfd85b0
Only create kubeadm compat cert dir link if it does not exist ( #4840 )
2019-06-05 01:27:53 -07:00
07cb8ebef7
Add support for arm images for hyperkube, kubeadm and cni_binary ( #4261 )
...
* Add support for arm images for hyperkube, kubeadm and cni_binary
* Add dummy etcd checksum for arm
This commit adds dummy etcd checksum for arm to avoid "no attribute" error
during setup.
* Add etcd host assert check
* Add 1.13.4 checksums of kubeadm and hyperkube for arm
* Update checksums of kubeadm and hyperkube for arm
* Add dummy checksums for calicoctl_binary_checksums dict
* disable gather_facts because it causes tests to fail
* Remove architecture check for etcd, due to unable to run tests
2019-06-05 00:05:55 -07:00
54416cabfd
prefer_udp for upstream dns servers ( #4810 )
2019-06-04 23:27:55 -07:00
3617ae31f6
Optionally skip predownload of kubeadm images ( #4832 )
2019-06-04 04:35:02 -07:00
6347419233
Avoid duplicating nameservers ( #4833 )
2019-06-04 00:13:02 -07:00
7423932510
Add ready plugin for CoreDNS ( #4817 )
2019-05-28 06:47:56 -07:00
b41530ba5d
Add missing extraArgs to kubeadm-config ( #4814 )
2019-05-28 03:57:52 -07:00
b45f3f0004
Add tf-ovh_coreos CI job ( #4763 )
2019-05-28 01:51:53 -07:00
2a5721b4d4
Change CentOS CRI-O repo from developer repo to public one ( #4807 )
2019-05-27 05:33:51 -07:00
333f1a4a40
kubeadm join path fixed for RH linux ( #4798 )
2019-05-27 01:49:51 -07:00
1e470b0473
Fix certificate-key param for kubeadm init ( #4789 )
...
* Fix certificate-key param for kubeadm init
* Fix yamllint error
2019-05-22 02:06:11 -07:00
0ef3a7914c
Added pod psp in Rancher Local Path Provisioner ( #4385 )
...
* Added pod psp in Rancher Local Path Provisioner
Added pod security policy (psp) in Rancher Local Path Provisioner.
Signed-off-by: André R. de Miranda <andre@miranda.work>
* Apply psp for Rancher Local Path Provisioner only when local_path_provisioner_namespace is not kube-system and also reorganized the templates
2019-05-22 00:16:08 -07:00
a3fff1e438
cordon all deleted nodes before drain ( #4756 )
...
Kubespray waits exit of every drain before run other one.
Running drain every after each other seems better than parallel, because we should check resources availability every time.
But, this way, we have one additional problem: possible restart pods on the nodes that are killed little bit later.
Fast cordon before heavy drain seems like an easy solution.
2019-05-21 23:36:05 -07:00
4bc204925a
Error in nginx when starting registry-proxy ( #4785 )
...
Error starting nginx because in requiredDropCapabilities is dropped all capabilities.
The nginx requires the following capabilities:
- CHOWN
- SETGID
- SETUID
Signed-off-by: André R. de Miranda <andre@miranda.work>
2019-05-20 11:27:15 -07:00
5d9946184a
Add ignore_assert_errors to "kube-master, ... ( #4779 )
...
... kube-node or etcd is empty" task
As a assert must be ignored if ignore_assert_errors is true
2019-05-20 11:25:14 -07:00
8485136f9a
var node_labels as string ( #4764 )
2019-05-19 12:31:10 -07:00
ff1bc739f1
Change default for kubelet_flexvolumes_plugins_dir ( #4752 )
2019-05-19 12:29:10 -07:00
8e28ba38d2
Add Load Balancer IP to API servers SANs ( #4775 )
...
- Add loadbalancer_apiserver.address to apiserver_sans
2019-05-16 01:23:42 -07:00
73c2ff17dd
Fix Ansible-lint error [E502] ( #4743 )
2019-05-16 00:27:43 -07:00
13f225e6ae
Only pull images for destined host groups ( #4735 )
...
Without this, pulls are considered for all
hosts groups, even if not targetted by the downloads
`groups` list. Hence, a download/sync is triggered
even though the host does not require the image.
2019-05-16 00:25:48 -07:00
14749df6f3
Fix "netchecker-server" ClusterRole ( #4730 )
...
* Add sha256 hashes for calicoctl v3.6.1
Hashes are added to calicoctl_binary_checksums for both adm and arm platforms.
* Add rules for "network-checker.ext" resource to "netchecker-server" ClusterRole
So that it could access the resource after it is created.
Corresponding issues:
https://github.com/Mirantis/k8s-netchecker-server/issues/125
https://github.com/kubernetes-sigs/kubespray/issues/3281
2019-05-09 01:30:49 -07:00
2db2898112
Fixed runc path in runtime for RedHat os family ( #4731 )
2019-05-09 01:28:48 -07:00
044dcbaed0
Add Kubelet config, remove deprecated flags and fix minor bugs ( #4724 )
...
* Add kubelet config
* Change kubelet_authorization_mode_webhook to true
* Fix lint
* Sync env file
* Refactor the kubernetes node folder
* Remove deprecated flag and fix lint
2019-05-08 13:38:36 -07:00
8a5eae94ea
Minor cleanups of CoreDNS issues and CI job ( #4719 )
...
* Minor cleanups
* Add comment in docs that nodelocaldns cache is enabled by default
2019-05-07 13:20:36 -07:00
bf3c6aeed1
Add kube anon auth settings to kubeadm config templates ( #4713 )
...
* Disable kube_api_anonymous_auth by default to secure the setup
* Disable metrics-server in addons. Health endpoint is slow and unstable
* Fix anonymous-auth missing in configuration
* Cleanup a bit
* Fix kube anon auth
2019-05-07 12:52:34 -07:00
03bded2b6b
Fix adding output of kubeadm to the admin.conf downloaded to the artifacts directory ( #4696 )
...
Fixes issue https://github.com/kubernetes-sigs/kubespray/issues/4695
2019-05-06 03:29:36 -07:00
d5c0829d61
Removing unnecessary httplib2 install ( #4708 )
2019-05-03 17:55:38 -07:00
00369303de
Fixing `msg` parameter for `debug` module ( #4702 )
...
According to [`debug` module documentation](https://docs.ansible.com/ansible/latest/modules/debug_module.html?highlight=msg ), the correct parameter name is `msg`.
With the previous `message` parameter name I was getting FAILED messages while ansible was trying to debug previous FAILED tasks.
2019-05-03 12:21:42 -07:00
1f1479c0a7
Update ingress nginx 0.24.1. ( #4691 )
2019-05-03 12:19:39 -07:00
e67f848abc
ansible-lint: add spaces around variables [E206] ( #4699 )
2019-05-02 14:24:21 -07:00
560f50d3cd
Add support for http(s)_proxy to CoreOS, Fedora and OpenSUSE ( #4669 )
...
* Add support for http(s)_proxy to CoreOS and Fedora
* fix opensuse proxy support
* Fix CoreOS proxy support
* update documentation
2019-05-02 12:28:22 -07:00
50bdaa573c
Apply etcd_extra_vars to etcd-events.env as well. ( #4219 )
...
This change ensures that etcd_extra_vars variable applies
to events etcd as well.
2019-05-02 12:24:27 -07:00
f29387316f
Fix ansible-lint 602 ( #4688 )
2019-05-01 23:42:17 -07:00
d6fd0d2aca
Enable delegating all downloads (binaries, images, kubeadm images) ( #4420 )
...
* Download to delegate and sync files when download_run_once
* Fail on error after saving container image
* Do not set changed status when downloaded container was up to date
* Only sync containers when they are actually required
Previously, non-required images (pull_required=false as
image existed on target host) were synced to the target
hosts. This failed as the image was not downloaded to
the download_delegate and hence was not available for
syncing.
* Sync containers when only missing on some hosts
* Consider images with multiple repo tags
* Enable kubeadm images pull/syncing with download_delegate
* Use kubeadm images list to pull/sync
'kubeadm config images pull' is replaced by collecting the images
list with 'kubeadm config images list' and using the commonly
used method of pull/syncing the images.
* Ensure containers are downloaded and synced for all hosts
* Fix download/syncing when download_delegate is a kubernetes host
2019-05-01 01:10:56 -07:00
dcd9c9509b
Add etcd role dependency on kube user to avoid etcd role failure when running scale.yml with a fresh node. ( #3240 ) ( #4479 )
2019-04-30 04:01:36 -07:00
15eb7db36d
Fix k8s api endpoint for secondary nodes in control plane mode ( #4675 )
...
Change-Id: I1588458b54c52443ad8d0afbd266f77ac0afea67
2019-04-29 07:50:24 -07:00
a5b46bfc8c
Run dns_late preinstall tasks on all k8s nodes ( #4672 )
...
* Run dns_late preinstall tasks on all k8s nodes
Related issue: #4656
Change-Id: I63f8559ef1a497b7580ab084561e6603fe647834
* Fix ansible-lint
Change-Id: Ia5b33fa63dbc36d8c3e9557ef3f2ea02af2325a5
* Fix recover_control_plane lint issues
Change-Id: I16643a3193c11b6ba704e9698812cac7e4fd19a8
2019-04-29 05:12:21 -07:00
fbba259933
ingress-nginx: enable --report-node-internal-ip-address flag ( #4114 )
...
Close #4113
2019-04-29 01:44:22 -07:00
7b77e2d232
Remove docker-storage-setup dependency if not needed ( #4077 )
...
When docker_container_storage_setup is false,
docker service should not depend on docker-storage-setup service,
because it's not installed.
For example, when using overlay2 on recent RHEL 7/Centos 7 kernels,
you most likely don't need it.
2019-04-29 01:42:22 -07:00
48a182844c
Documentation and playbook for recovering control plane from node failure ( #4146 )
2019-04-29 01:40:20 -07:00
38af93b60c
Remove rkt support ( #4671 )
2019-04-29 01:14:20 -07:00
741de6051c
Fix nodeselectors for contiv and nginx-ingress ( #4662 )
...
* Fix nodeselectors for contiv and nginx-ingress
Change-Id: Ib3eb6bd87193c69a90ee944c9164a0b6792c79ba
* Set kube proxy mode to iptables for addons task
Change-Id: Iff71a71f672405c74b4708c71db15ddc4391a53a
2019-04-28 23:36:19 -07:00
b8f0de3074
Fixed etcd-servers-overrides in kubeadm config ( #4668 )
...
* kube-apiserver will fail if used comma as separator
2019-04-28 23:02:20 -07:00
88d919337e
ansible-lint: don't compare to empty string [E602] ( #4665 )
2019-04-28 23:00:20 -07:00
338eb4ce65
Fix kubeadm upload certs with when condition ( #4659 )
...
* Fix kubeadm upload certs with when condition
Change-Id: I916dd2375b71eea2386047c7f185a2f8361f7a61
* Update kubeadm-secondary-experimental.yml
2019-04-27 01:14:20 -07:00
3722acee85
Fix broken metrics-server deployment not starting ( #4651 )
...
* Fix metrics-server deployment
* Make metrics server work
* Fix sample inventory
2019-04-26 00:44:26 -07:00
82119ca923
Add support calico kubernetes datastore and typha. ( #4498 )
...
* Add support calico kubernetes datastore and typha.
* Add typha_enabled to kubespray-defaults.
2019-04-25 05:00:48 -07:00
6ca2019002
Fix issue with etcd arm host installation case ( #4589 )
...
Use host_architecture variable.
2019-04-25 04:58:47 -07:00
c9ed5f69d7
Prepend docker.io for all docker hub images ( #4648 )
...
Change-Id: I71dc793641bc168e40419e38f33f68f5325e77a9
2019-04-25 01:34:46 -07:00
3fe66a1298
Update downloads role to download to correct group ( #4638 )
2019-04-24 10:48:03 -07:00
4a10dca7d4
Add an ability to provide oidc cert in base64 ( #4618 )
2019-04-24 09:40:01 -07:00
4d57ed314d
Clean up check for setting kubeadm certificate key ( #4634 )
...
Change-Id: I2c97c4753089eb3ec2e6b01b2681a8be98ecbb57
2019-04-24 07:14:12 -07:00
4e81bcc147
Fixing Vagrant cluster provisioning ( #4218 )
...
* Pass ansible_ssh_user as host_var
Co-authored-by: Damian Darczuk <damian.darczuk@intel.com>
Co-authored-by: Paweł Pałucki <pawel.palucki@intel.com>
* Create a directory before downloading container images to ansible host
Co-authored-by: Damian Darczuk <damian.darczuk@intel.com>
Co-authored-by: Paweł Pałucki <pawel.palucki@intel.com>
* Set private key usuing synchronize task options
Co-authored-by: Damian Darczuk <damian.darczuk@intel.com>
Co-authored-by: Paweł Pałucki <pawel.palucki@intel.com>
2019-04-24 05:42:05 -07:00
6243467856
remove duble check for run this task just one time ( #4613 )
2019-04-24 05:38:01 -07:00
f47a666227
support azure loadbalancer standard sku ( #4150 ) ( #4476 )
...
add the support of the folling property in azure-credential-check.yml
- azure_loadbalancer_sku: Sku of Load Balancer and Public IP. Candidate values are: basic and standard.
- azure_exclude_master_from_standard_lb: excludes master nodes from standard load balancer.
- azure_disable_outbound_snat: disables the outbound SNAT for public load balancer rules
- useInstanceMetadata: Use instance metadata service where possible
- azure_primary_availability_set: (Optional) The name of the availability set that should be used as the load balancer backend
2019-04-24 02:14:01 -07:00
b708db4cd5
Update to v1.14.1 ( #4481 )
2019-04-24 02:08:01 -07:00
fc072300ea
Purge legacy cleanup tasks from older than 1 year ( #4450 )
...
We don't need to support upgrades from 2 year old installs,
just from the last major version.
Also changed most retried tasks to 1s delay instead of longer.
2019-04-24 00:08:05 -07:00
d25ecfe1c1
Update Docker defaults to 18.09.5 and drop deprecated ( #4624 )
...
As of kubernetes v1.14, docker 18.09 is [validated for use](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.14.md#external-dependencies ). Docker 1.11 and 1.12 were dropped.
This patch:
- Updates the default docker version to 18.09
- Updates Docker packages to the latest 18.09 patch (18.09.5)
- Removes options for Docker 1.11 and 1.12
2019-04-23 22:24:01 -07:00
a65605b17a
ansible-lint: Don't use bare variables ( #4608 )
...
Circumvented one false positive from ansible-lint
Moved a block of jinja magic into its own variable
2019-04-23 22:20:00 -07:00
424e59805f
ansible-lint: Fix commands that are also available as module ( #4619 )
2019-04-23 22:18:00 -07:00
76db060afb
Define and implement specs for bootstrap-os ( #4455 )
...
* Add README to bootstrap-os role
* Rework bootstrap-os once more
* Document workarounds for bugs/deficiencies in Ansible modules
* Unify and document role variables
* Remove installation of additional packages and repositories
* Merge Ubuntu and Debian tasks
* Remove pipelining setting from default playbooks
* Fix OpenSUSE not running its required tasks
2019-04-23 15:46:02 -07:00
d588532c9b
Update probe timeouts, delays etc. ( #4612 )
...
* Fix merge conflict
* Add check delay
* Add more liveness and readiness options to metrics-server
2019-04-23 14:46:02 -07:00
d6d7458d68
Fix control plane setup without a hardcoded key ( #4610 )
2019-04-23 14:37:59 -07:00
d89ecb8308
disable metrics server and fix terraform ( #4617 )
...
* disable metrics server in centos7-flannel-addons job
Change-Id: I1d87923547584896f64dda9ea8feb5581ad48cbe
* Fix tf facility->facilities syntax
Change-Id: I434bfe53f47e8e4a546890e0b62d24bde6e6d6a7
* Update Terraform CI for facilities
* Fix undefined variable error
2019-04-23 12:06:03 -07:00
50751bb610
Revert "Optimize kube resources creation ( #4572 )" ( #4621 )
...
This reverts commit f8fdc0cd93
2019-04-23 20:37:23 +03:00
f8fdc0cd93
Optimize kube resources creation ( #4572 )
2019-04-22 23:34:10 -07:00
09fe95bc60
Avoid creating k8s cert dir on non-k8s nodes ( #4602 )
2019-04-21 15:27:43 -07:00
ada5941a70
Unmask Docker service in ClearLinux ( #4583 )
...
The docker service provided by the containers-basic bundle is masked
in ClearLinux distribution. This is causing errors in the following
steps. This commit ensures that the unit is not masked.
2019-04-21 07:31:43 -07:00
33ab615072
Wait longer for node to join the cluster ( #4549 )
2019-04-20 07:05:40 -07:00
5a1cf19278
Install cri-tools on fedora ( #4350 )
2019-04-20 06:29:40 -07:00
05dc2b3a09
Use K8s 1.14 and add kubeadm experimental control plane mode ( #4514 )
...
* Use K8s 1.14 and add kubeadm experimental control plane mode
This reverts commit d39c273d96
2019-04-19 06:01:54 -07:00
d0e628911c
Add sha256 hashes for calicoctl v3.6.1 ( #4580 )
...
Hashes are added to calicoctl_binary_checksums for both adm and arm platforms.
2019-04-19 05:45:55 -07:00
656633f784
YAMLLint everything ( #4576 )
2019-04-18 23:59:54 -07:00
f5aec8add4
Fix runc absolute path ( #4542 )
...
The BINDIR variable defined on the runc's Makefile[1] defines
installation path is on $(PREFIX)/sbin which used for most of the
Linux distributions. This change fixes the absolute path used for
non-ClearLinux distributions (CentOS, Ubuntu).
[1] https://github.com/opencontainers/runc/blob/master/Makefile#L10
2019-04-18 15:41:58 -07:00
f92309bfd0
Fix ansible-lint for ceph package ( #4568 )
2019-04-18 13:45:25 -07:00
c6586829de
Ensure /etc/bash_completion.d/ folder exists ( #4543 )
...
The Stateless ClearLinux feature[1] requires the creation of folders
in /etc folder. This change ensure the existence of the
/etc/bash_completion.d/ folder for ClearLinux Distribution.
[1] https://clearlinux.org/features/stateless
2019-04-18 02:24:10 -07:00
b218e17f44
ansible-lint: E403 Package installs should not use latest ( #4500 )
2019-04-18 01:34:08 -07:00
a6dc50e7cb
Add host information for canal readiness probe ( #4548 )
2019-04-17 10:22:02 -07:00
37eac010c8
ansible-lint: Don’t compare to literal True/False ( #4499 )
2019-04-17 08:42:03 -07:00
ec3daedf9e
Revert "Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels ( #4320 )" ( #4553 )
...
This reverts commit 586ad89d50
2019-04-17 07:58:06 -07:00
d83181a2be
add RBD Provisioner Addon ( #3667 ) ( #3668 )
...
Based on the CephFS Provisioner Addon, the following changes have been made:
- Upstream v2.1.1-k8s1.11
- Configurable Provisioner replicas
2019-04-16 23:14:02 -07:00
78f6f6b889
Mark "Calico | Set global as_num" as "unchanged" ( #4539 )
...
This command executes with "--skip-exists" parameter, so it is idempotent
and should not be marked as "changed".
2019-04-16 09:31:11 -07:00
c5fb734098
Switch calicoctl from a container to a binary ( #4524 )
2019-04-15 04:24:04 -07:00
d39c273d96
Revert "Use K8s 1.14 and add kubeadm experimental control plane mode ( #4317 )" ( #4510 )
...
This reverts commit 316508626d
2019-04-11 12:52:43 -07:00
316508626d
Use K8s 1.14 and add kubeadm experimental control plane mode ( #4317 )
...
* Use Kubernetes 1.14 and experimental control plane support
* bump to v1.14.0
2019-04-11 05:30:13 -07:00
46ba6a4154
ansible-lint: when lines should not include Jinja2 variables ( #4496 )
2019-04-11 03:06:10 -07:00
4ff851b302
Enable nodelocaldns by default ( #4461 )
...
* Enable nodelocaldns by default
* Enable nodelocaldns by default
* nodelocaldns is now default
* Disable enable_nodelocaldns for the addons CI jobs
Disable enable_nodelocaldns for the addons CI jobs to make sure things still work without nodelocaldns
2019-04-11 00:24:08 -07:00
3af90f8772
disable cloud-routes for non-cloud plugin ( #4443 )
2019-04-10 23:50:09 -07:00
9032e271f1
Upgrade CoreDNS to 1.5.0 ( #4494 )
2019-04-10 13:40:08 -07:00
15597aa493
Do not force TCP connections to upstreams. ( #4492 )
2019-04-10 12:40:09 -07:00
3b9d13fda9
Return back bind API server node loadbalancer to 127.0.0.1 for security purposes. ( #4489 )
2019-04-10 12:20:08 -07:00
5e0249ae7c
Add HAProxy as internal loadbalancer ( #4480 )
2019-04-10 05:56:18 -07:00
353afa7cb0
Fix ipip: false in calico v3 ( #4473 )
2019-04-10 05:50:15 -07:00
a30ad1e5a5
Added generic CNI network plugin ( #4322 )
...
* Added generic CNI network plugin
* Added CNI network plugin documentation
* added necessary fix
2019-04-10 04:16:15 -07:00
586ad89d50
Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels ( #4320 )
...
* Fix the file path for all.yml and k8s-cluster.yml
* Fix --node-labels namespace error "unknown labels specified"
* Update templates and configs kubelet node-labels
2019-04-10 04:14:12 -07:00
6caa639243
Update CoreDNS label as specified in the kubernetes coredns repository ( #3920 )
2019-04-10 04:12:13 -07:00
d2a1ac3b0c
Add Ansible-lint CI step ( #4411 )
...
* Add ansible-lint as gitlab-ci step
* Fix jinja2 syntax in include_tasks that breaks ansible-lint
* Use a block scalar to get around gitlab quoting/escaping rules
* Run ansible-lint in verbose mode in CI
2019-04-10 02:04:16 -07:00
097806dfe8
Added tag kube-proxy ( #4272 )
...
Signed-off-by: André R. de Miranda <andre@miranda.work>
2019-04-09 05:25:06 -07:00
7cdf1fd388
quote values for kube_oidc_groups_prefix and kube_oidc_username_prefix values to accept colon, e.g oidc: ( #4305 )
...
This will fix error: error converting YAML to JSON: yaml: line 36: mapping values are not allowed in this context
Signed-off-by: Abdulaziz AlMalki <almalki.a@gmail.com>
2019-04-09 05:23:06 -07:00
aa162b0d5d
Update kube-router to 0.2.5 ( #4469 )
2019-04-09 03:37:04 -07:00
b15f3e182d
add default routing to canal and disable bird checks ( #4468 )
...
Co-Author: Paweł Skrzyński
2019-04-09 02:45:07 -07:00
4d39c1856e
Fix jinja filters ( #4470 )
2019-04-09 02:19:06 -07:00
913fed0089
kubeadmn init: add 'until' to make 'retries' effective ( #4464 )
...
an 'until' clause is required or 'retries' is ignored
(see note @ https://docs.ansible.com/ansible/latest/user_guide/playbooks_loops.html#do-until-loops )
2019-04-09 00:21:04 -07:00
12c6b5c3eb
openSUSE: Use Leap 15.0 instead of 42.3 ( #4442 )
...
* Vagrantfile: Bump openSUSE to Leap 15.0
* roles: container-engine: Add 'containerd' package for openSUSE
The 'containerd' package contains the docker-containerd and
docker-containerd-shim binaries. We also need to ensure that the latest
version is installed since an older version may already be present (eg GCE
images)
* Remove docker log-opts for opensuse
* roles: bootstrap-os: Use lowercase 'o' for openSUSE
OpenSUSE is not a valid family name. The correct one is openSUSE
* roles: bootstrap-os: Update zypper cache before first installation
The zypper cache may be outdated so ensure that it's fully updated
before we try and install the bootstrap packages.
2019-04-09 00:17:05 -07:00
f52584a715
robust handling of API server SANs ( #4435 )
...
* robust handling of API server SANs
* use apiserver_loadbalancer_domain_name if it is defined, according to PR 3977
2019-04-08 08:10:35 -07:00
09bbdadcee
remove nodelocaldns iface on reset ( #4460 )
2019-04-08 02:26:25 -07:00
d711a0c83f
[nodelocaldns] expand tolerations on the daemonset ( #4451 )
2019-04-08 02:24:26 -07:00
d18ad63e49
Update nginx to 1.15. Update manifest and performance optimize ( #4458 )
2019-04-08 02:02:29 -07:00
8947614d97
Upgrade to etcd v3.2.26 ( #4444 )
2019-04-08 00:34:25 -07:00
7e4f4a96fc
Replace iteritems() to items() in Jinja2 templates ( #4437 )
...
The iteritems() dictionary's method has been removed in Python3. Using
this method in Jinja2 templates limits the execution to Python2 which
will be deprecated in 2020[1]. This change replaces that method for
the items() method as it's suggested in the official website[2].
[1] https://pythonclock.org/
[2] https://docs.ansible.com/ansible/latest/user_guide/playbooks_python_version.html#dict-iteritems
2019-04-08 00:32:26 -07:00
301a371efe
Update pypy3 on CoreOS to 7.0.0 ( #4456 )
2019-04-08 00:28:24 -07:00
1a6df84c7a
Upgrade to Helm 2.13.1 ( #4445 )
2019-04-07 07:04:25 -07:00
8ad74404c9
Remove bash-completion ( #4431 )
2019-04-05 01:23:22 -07:00
1ce2f04f47
allow Suse OS family ( #4430 )
2019-04-04 03:02:51 -07:00
20b12751af
add Cinder allowVolumeExpansion option ( #4415 )
2019-04-04 02:36:50 -07:00
adca353fe9
Use docker.io for calico ( #4253 )
2019-04-04 01:20:49 -07:00
7a72e567d5
Update CoreDNS to 1.4.0 ( #4422 )
...
* Update CoreDNS to 1.4.0
* Update readme to reflect CoreDNS update
2019-04-04 00:40:50 -07:00
3c050be0b0
Update nodelocaldns cache settings ( #4423 )
2019-04-04 00:38:51 -07:00
41e684eb5a
Update DNS Autoscaler to 1.4.0 ( #4425 )
...
* Update DNS Autoscaler
* Update downloads too
* Fix yamllint
* Fix yamllint
2019-04-04 00:36:51 -07:00
55890e1b82
keep compatibility as it was before ( #4268 )
2019-04-03 01:39:42 -07:00
1e524c68d5
remove our config if docker start failed ( #4260 )
2019-04-03 01:37:44 -07:00
740d8b0a26
enable kubelet client certificate rotation ( #4081 )
...
* enable kubelet client certificate rotation
* change to variable kubelet_rotate_certificates
2019-04-03 01:35:44 -07:00
a8dd69cf17
Fixed cleanup-docker-orphans.sh to use docker-containerd-shim and containerd-shim ( #4418 )
2019-04-02 09:11:21 -07:00
4fe2aa6bf7
Use install_cni init container for cni copy for calico/canal ( #4416 )
2019-04-02 03:32:36 -07:00
5d5c9cab19
Speed up old docker package removal ( #4408 )
...
Both the `yum` and `apt` modules support a list as input, this allows us avoid the slower `with_items` approach, which can take a long time with a large count of cluster nodes.
2019-04-01 15:08:35 -07:00
5f12b7aedf
Remove kubedns and dnsmasq. Move dns_late phase after apps ( #4406 )
...
Both kubedns and dnsmasq modes are long not maintained.
We should run dns_late steps at the end because sshd
makes DNS lookups during Ansible run and has 2s timeouts
for each failed lookup trying to connect to coredns before
it is ready.
2019-04-01 12:32:34 -07:00
d71590bbd0
add 1.14.0 checksum, remove 1.11.* checksums ( #4401 )
2019-04-01 07:16:33 -07:00
483f1d2ca0
Calico felix - Fix jinja2 boolean condition ( #4348 )
...
* Fix jinja2 boolean condition
* Convert all felix variable to booleans instead.
2019-03-29 16:07:09 -07:00
0440e45d65
Fix supplementary_addresses rendering error ( #4403 )
2019-03-29 00:26:13 -07:00
2fb27c8521
Use static files in KubeDNS templating task ( #4379 )
...
This commit adapts the "Lay Down KubeDNS Template" task to use the static
files moved by pull request [1]
[1] https://github.com/kubernetes-sigs/kubespray/pull/4341
2019-03-28 06:26:43 -07:00
f17f4ff963
Fix bootsrap-os role, failing to create remote_tmp ( #4384 )
...
* Fix bootsrap-os role, failing to create remote_tmp
* use ansible_remote_tmp hostvar
2019-03-28 06:24:43 -07:00
e9c34fe038
Default values for variable dns_servers and dns_domain are set in two files: ( #3999 )
...
values from inventory in roles/kubespray-defaults/defaults/main.yml
hardcoded values in roles/container-engine/defaults/main.yml
dns_servers set empty in roles/container-engine/defaults/main.yml and skydns_server not set in docker_dns_servers variables
also set default value for manual_dns_serve
another variables in roles/container-engine/defaults not need to set
2019-03-28 06:22:44 -07:00
669ab10c17
Added livenessProbe for local nginx apiserver proxy liveness probe ( #4222 )
...
* Added configurable local apiserver proxy liveness probe
* Enable API LB healthcheck by default
* Fix template spacing and moved healthz location to nginx http section
* Fix healthcheck listen address to allow kubelet request healthcheck
2019-03-28 06:20:46 -07:00
0a3cf1a087
Fix CA cert environment variable for ectd v3 ( #4381 )
2019-03-28 00:18:43 -07:00
0efa3e6392
Upgrade to k8s 1.13.5
2019-03-27 11:16:21 +01:00
6d7f3c4405
Reduce jinja2 filters in coredns templates ( #4390 )
2019-03-26 11:09:17 -07:00
d0ae316934
Use proxy_env with kubeadm phase commands ( #4325 )
2019-03-26 03:03:19 -07:00
b7fd462944
Fix support for ansible 2.7.9 ( #4375 )
2019-03-20 11:29:42 -07:00
ec08303f82
Revert "Fix #4237 : update kube cert path ( #4354 )" ( #4369 )
...
This reverts commit ea7a6f1cf1
2019-03-20 05:56:57 -07:00
ea7a6f1cf1
Fix #4237 : update kube cert path ( #4354 )
2019-03-17 23:55:11 -07:00
150a969cf4
Forcefully delete pods when necessary ( #4328 )
...
Pods on down/unresponsive nodes can't be deleted without
--force --grace-period=0.
Fixes #4314
2019-03-14 07:45:46 -07:00
3c4cbf133e
Adding ability to override dashboard replica count ( #4344 )
2019-03-13 13:58:25 -07:00
fd2c47b56a
Move most coredns templates to static files ( #4341 )
...
* Move most coredns templates to static files
This should speed up the task slightly
* yaml lint fixes
2019-03-12 21:17:31 -07:00
33024731e4
Upgrade to k8s 1.13.4 ( #4319 )
2019-03-06 23:16:56 -08:00
d469282f1c
add blockSize to IPPool spec for Calico >= v3.3.0 ( #4224 )
...
* add blockSize to IPPool spec for Calico >= v3.3.0
* fix "cidr" spec in Calico IPPool resource for my PR
2019-03-06 12:42:48 -08:00
acbf3db233
Remove hard dependence on facts for all nodes ( #4304 )
...
* Remove hard dependence on facts for all nodes
* Update main.yaml
* Update main.yaml
2019-03-05 03:04:39 -08:00
adf6a7121f
Reenable set_facts task for dns_late ( #4312 )
2019-03-01 05:39:30 -08:00
bbfd2dc2bd
Add 1.12.6, sort arm64 descending ( #4308 )
...
* Add 1.12.6, sort arm64 descending
* remove 1.10.x checksums (EOL anyways)
2019-02-28 05:55:19 -08:00
Andreas Krüger
Dani Comnea
Sergey Nuzhdin
Toni Pokki
Matthew Mosesohn
Maxime Guyot
Vitaliy Dmitriev
André R. de Miranda
bobahspb
Jacopo Secchiero
Mateus Caruccio
Florent Monbillard
MarkusTeufelberger
Timoses
Aleksey Kasatkin
Sandro Modarelli
Dmitri Rubinstein
Manuel Cintron
Alex Barcelo
okamototk
Stas
Christoffer Anselm
Youngchul Bang
qvicksilver
Dmitry
grialeyur
gitareest
Sergey Kolekonov
iwankgb
Attilio Greco
Vincent Gramer
Wilmar den Ouden
Chad Swenson
MarkusTeufelberger
andreyshestakov
Victor Morales
Vedran Bartonicek
Rabi Mishra
Jugwan Eom
Qasim Sarfraz
Sergey
Neven Miculinic
Robert Neumann
Sidharth Anupkrishnan
Abdulaziz AlMalki
Markos Chandras
rptaylor
Erwan Miran
Xinghong Fang
Xavi
Gautam Divgi
Bort Verwilst
ml
Dmitry Chepurovskiy
Stefan Prietl
Bart Verwilst
Etienne
chadswilson