6ad6609872
Fix certificates checking when adding etcd node to existing k8s node ( #5807 )
...
Co-authored-by: alexkomrakov <alexkomrakov@gmail.com>
2020-03-25 12:46:25 -07:00
474fbf09c4
fix wrong cilium_operator repo variable ( #5819 )
2020-03-25 02:17:03 -07:00
47849b8ff7
docker: Fix docker install on CentOS/RHEL 8 ( #5820 )
...
we can't set module_hotfixes=True using yum_repository ansible module
Fixes 38688a4486
2020-03-25 01:03:03 -07:00
0379a52f03
Fix etcd install with docker and etcd_kubeadm_enabled ( #5777 )
...
- This solves issue #5721 & #5713 (dupes)
- Provide a cleaner default usage pattern for the download role
around etcd that supports 'host' and 'docker' properly
- Extract the 'etcdctl' as a separate task install piece and reuse it where
appropriate
- Update the kubeadm-etcd task to reflect the above change
2020-03-24 08:12:47 -07:00
bc2eeb0560
use variables for cilium-operator instead of hardcoded value ( #5802 )
2020-03-24 07:40:47 -07:00
81f07c3783
Disable IPv6 support for canal's calico-node ( #5684 )
...
This implements the same behavior as a15a0b5eb9/roles/network_plugin/calico/templates/calico-node.yml.j2https://github.com/projectcalico/felix/issues/1447
2020-03-24 07:10:49 -07:00
f90926389a
Fix wrong Docker ubuntu repo URL ( #5815 )
2020-03-24 04:36:46 -07:00
096de82fd9
Fixup recover_control_plane with Ansible 2.9 ( #5806 )
...
Tests as filters support is removed as of Ansible 2.9
https://docs.ansible.com/ansible/latest/porting_guides/porting_guide_2.5.html#jinja-tests-used-as-filters
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-03-20 14:22:06 -07:00
db693d46df
Fixed an issue where without a default GW, ansible_default_ipv4 would return an empty dict which passed as a valid fallback_ip dict item ( #5394 )
2020-03-20 14:06:09 -07:00
b8d628c5f3
rename handler to fix ansible 2.8 issue ( #5801 )
2020-03-20 13:54:08 -07:00
0aa22998e2
Bump node local dns version to 1.15.11 ( #5805 )
...
k8s-dns-node-cache now uses debian-iptables base images
to automatically use either iptables-legacy or iptables-nft
https://github.com/kubernetes/dns/pull/355
https://github.com/kubernetes/kubernetes/pull/82966
This adds support CentOS 8
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-03-20 13:44:09 -07:00
a7a204ebca
Add kube_encryption_resources variable to configure which resources are encrypted at rest ( #5797 )
2020-03-20 04:14:36 -07:00
d152dc2e6a
Update prep_download.yml ( #5791 )
...
Fix check if user can use docker without sudo.
2020-03-18 13:30:44 -07:00
8ce5a9dd19
remove atomic support because reached end of live ( #5783 )
2020-03-17 14:31:27 -07:00
820d8e6ce6
Adding new registry_port option ( #5779 )
...
New override are added to allow installation of the registry
on different ports than ``5000``. The default port is unchanged
from previous versions
2020-03-17 05:52:22 -07:00
3cefd60c37
Add OWNERS file for kube-router ( #5782 )
...
I propose also my help as a reviewer
2020-03-17 04:14:22 -07:00
876d4de6be
Fedora CoreOS support ( #5657 )
...
* fedora coreos support
- bootstrap and new fact for
* fedora coreos support
- fix bootstrap condition
* fedora coreos support
- allow customize packages for fedora coreos bootstrap
* fedora coreos support
- prevent install ptyhon3 and epel via dnf for fedora coreos
* fedora coreos support
- handle all ostree like os in same way
* fedora coreos support
- handle all ostree like os in same way for crio
* fedora coreos support
- add fcos documentations
2020-03-17 03:12:21 -07:00
974902af31
Update Kube-router version to v0.4.0 ( #5756 )
2020-03-17 02:40:21 -07:00
4b5299bb7a
Add variables to configure Containerd default runtime, untrusted runt… ( #5497 )
...
* Add variables to configure Containerd default runtime, untrusted runtime and additional runtimes
* Add containerd settings to sample inventory
* Empty commit
2020-03-16 03:48:36 -07:00
ceab27c97a
Add OWNERS file for recover_control_plane ( #5505 )
...
Related to #5432
2020-03-16 03:46:35 -07:00
03d1b56a8f
fix check exists download cache ( #5776 )
2020-03-16 03:34:35 -07:00
29128eb316
Add AWS ALB Ingress Controller ( #5489 )
...
* Add AWS ALB Ingress Controller Ansible role
* remove trailing spaces
* update owners
* ALB ingress: update rbac clusterrole and remove role
* Move alb-ingress role to roles/kubernetes-apps/ingress_controller folder
2020-03-16 02:58:35 -07:00
1cb03a184b
kubernetes 1.15.11 ( #5775 )
2020-03-14 07:16:34 -07:00
158d998ec4
Support configuring the Calico iptables insert mode ( #5473 )
...
* Support configuring the insert mode
Defaults to the upstream default https://docs.projectcalico.org/v3.9/reference/felix/configuration
so nothing should change for existing deployments.
This allows coexistence with other firewall management technologies.
* Add a note to the sample config
2020-03-14 06:36:35 -07:00
168241df4f
Python bootstrap: upgrade pypy to 3.6-7.2.0. ( #5511 )
...
Solves problem with mitogen about 'Compress object has no attribute copy' in zlib module.
2020-03-14 06:32:35 -07:00
f5417032bf
Merge OracleLinux in RedHat bootstrap-os ( #5575 )
...
* Merge OracleLinux in RedHat bootstrap-os
* Set default for use_oracle_public_repo in main.yaml
2020-03-14 06:28:34 -07:00
d69db3469e
Add external zones in nodelocaldns configuration ( #5591 )
...
Allows to configure additionnal zone for domains not resolved by `upstream_dns_servers`.
2020-03-14 06:26:34 -07:00
980a4fa401
Add docker-ce 19.03 packages for Debian & Ubuntu ( #5729 )
...
* Add docker-ce 19.03 packages for Debian & Ubuntu
K8s has updated the recommended Docker version to 19.03. More
specifically it should be 19.03.4, but since we used 18.06.7 instead of
.2, I'm assuming the latest patch version should be used here as well.
* Add docker 19.03 for redhat
2020-03-14 06:24:35 -07:00
027e2e8a11
Update CoreDNS to 1.6.7 ( #5761 )
2020-03-14 04:20:34 -07:00
ca73e29ec5
Use k8s.gcr.io for kubernetes related images ( #5764 )
...
* Use k8s.gcr.io for kubernetes related images
* Use k8s.gcr.io in inventory sample
2020-03-13 14:41:48 -07:00
0330442c63
Kubernetes 1.16.8 ( #5770 )
...
* Kubernetes 1.16.8
* Use 1.16.8 in sample inventory and kubespray-defaults
2020-03-13 13:41:47 -07:00
25a1e5f952
Include etcd image repository when using kubeadm etcd deployment mode ( #5725 )
2020-03-13 10:28:39 -07:00
57bb7aa5f6
Fix delete nodes task ( #5747 )
2020-03-13 08:36:40 -07:00
86996704ce
remove unused crictl hashes ( #5754 )
2020-03-13 06:56:40 -07:00
f53ac2a5a0
Update metrics addon for 1.16 ( #5706 )
...
* upgrade metrics server and resizer images version
* scope "apps" api group for addon resizer
2020-03-13 06:46:40 -07:00
d0af5979c8
install csi-driver not just cinder ( #5766 )
2020-03-13 05:34:39 -07:00
43020bd064
Fix the command for kube-proxy cleanup ( #5671 )
2020-03-13 05:32:39 -07:00
dc00b96f47
Add missing Coreos OS family string ( #5759 )
2020-03-13 04:24:39 -07:00
71c856878c
update multus to 3.4 and add crio support ( #5701 )
...
Signed-off-by: Chris Randles <randles.chris@gmail.com>
2020-03-13 04:22:39 -07:00
19865e81db
Add OWNERS file for OpenStack CSI driver and cloud controller ( #5753 )
2020-03-13 02:52:39 -07:00
e0b76b185a
Failover for adding proxy when line exists in file ( #5751 )
...
The 'regexp' parameter matches last occurrence of a line starting with 'proxy=' and replaces it with the one defined in 'line' parameter. If no match - it works same way as before. This fixes resuming cluster deployments failed after that task (if there was no more than one line starting with 'proxy' in the yum.conf file - this condition should also be reassured with the change introduced here) eg. if they were initiated with Terraform.
2020-03-12 15:08:39 -07:00
c47f441b13
fix kube-proxy server address when local apiserver lb is disabled ( #5730 )
...
refs #5277
As the issue describes, when no external or local load-balanced is used,
kube-proxy won't be able to contact apiserver at 127.0.0.1. So the
config map should be left as is.
2020-03-12 10:40:39 -07:00
8df2c0a7c6
Upgrade CNI plugins to 0.8.5 ( #5717 )
2020-03-12 07:22:38 -07:00
e60b9f796e
add calico VXLAN mode, update docs and vars in sample inventory ( #5731 )
...
* calico VXLAN mode
* check vars if calico backend defined
2020-03-12 01:20:37 -07:00
2c8bcc6722
Upgrade etcd to 3.3.12 ( #5718 )
...
* Upgrade etcd to 3.3.18
* Try with etcd 3.3.15 (kubeadm 1.16.7 default)
* Back to square one
* Try with 3.3.11
* Upgrade etcd to 3.3.18 (take 2)
* Try with 3.3.12
2020-03-11 08:25:38 -07:00
e257d92f41
Cilium updates ( #5438 )
...
* Add resources needed to deploy 1.6.4
* Use cilium v1.6.4
* Change deprecated option name
* Add update crd to clusterrole cilium
* Cilium 1.6.4 -> 1.6.5
* Make monitor-aggregation config configurable as a variable
* Change monitor-aggregation default none->medium
* Cilium 1.6.5 -> 1.6.6
* Update to 1.7.0
* v1.7.0->v1.7.1
2020-03-11 08:15:36 -07:00
e2ec7c76a4
containerd: bump to 1.2.13 ( #5727 )
...
https://github.com/containerd/containerd/releases/tag/v1.2.11
CVE-2019-16884 / CVE-2019-17596
https://github.com/containerd/containerd/releases/tag/v1.2.12
CVE-2019-19921 / CVE-2019-16884 / CVE-2019-11253
https://github.com/containerd/containerd/releases/tag/v1.2.13
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2020-03-11 05:39:36 -07:00
058d101bf9
Escape dots in jsonpath keys. ( #5600 )
...
+ use more secure `command` instead of `shell`
+ read-only command doesn't change state - make idempotent
+ multi-line long string
2020-03-11 05:17:36 -07:00
9f3ed7d855
change ignore_errors: to when: in assert tasks ( #5716 )
2020-03-10 08:09:36 -07:00
221b429c24
move var preinstall_selinux_state: to roles/kubespray-defaults/defaults/main.yaml ( #5715 )
2020-03-10 07:45:35 -07:00
Etienne Champetier
Petr Enkov
Stephen Schmidt
Petr Enkov
Mateus Caruccio
Pierre Gaxatte
eddebc
Sergey
Maxime Guyot
nmr
spaced
Bjoern Teipel
bozzo
Pasquale Toscano
Yujun Zhang
Michael Shnit
hfinucane
Cédric de Saint Martin
Sander Cornelissen
Xiaodu
Florent Monbillard
Nakahara, Kohei
Florian Ruynat
Joel Seguillon
Hugo Blom
Qingkun Li
Danilo Riecken P. de Morais
Christopher Randles
dymq
Fredrik Lönnegren
Lovro Seder