6c112a9b41
Merge pull request #11567 from VannTen/cleanup/remove_node_static_token_generation
...
Remove generation of static tokens for cluster members
2024-09-26 13:58:01 +01:00
656ed796b9
[etcd] make etcd 3.5.16 default ( #11572 )
...
* [etcd] make etcd 3.5.16 default
* Update etcd binary checksums for version 3.5.16 and lower
2024-09-26 09:12:01 +01:00
e355bef79b
fix: vsphere image repositories, tags and docs ( #11564 )
...
The old repository for these has been deleted, leaving the previous
configuration not possible to deploy, and even currently running clusters
fail after a restart as the DeameonSet has ImagePullPolicy: Always. More
details can be found here: kubernetes-sigs/vsphere-csi-driver#3053
As of writing, only CSI driver versions 3.1.2 to 3.3.1 is available in
this registry. This "officially" supports Kubernetes 1.26 to 1.30. Since
older drivers are not available, I have removed some feature-gating for
those unavailable versions while I was at it. For the cloud provider,
the `latest` image is now missing, and only 1.28.0 to 1.31.0 are
available. I've set the latest of these as the new default.
I also updated the documented default versions, as they were all out of
date and not aligned with actual code defaults.
2024-09-26 08:22:02 +01:00
15bb5b0789
[kubernetes] Support kubernetes 1.31.1 ( #11533 )
2024-09-25 05:10:01 +01:00
ebdc599b05
Bump tox from 4.18.1 to 4.20.0 ( #11562 )
...
Bumps [tox](https://github.com/tox-dev/tox ) from 4.18.1 to 4.20.0.
- [Release notes](https://github.com/tox-dev/tox/releases )
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst )
- [Commits](https://github.com/tox-dev/tox/compare/4.18.1...4.20.0 )
---
updated-dependencies:
- dependency-name: tox
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-24 02:52:00 +01:00
a2a2dfa419
k8s/control-plane: cleanup excessive defaulting
2024-09-23 20:37:56 +02:00
baf0a331c9
Don't generate static tokens for nodes and control planes
...
Nodes to api-server relies by default certificates, and bootstrap
tokens, and there should be no need to generate tokens for every nodes,
even when enabling static token auth.
2024-09-23 16:58:42 +02:00
1c0718bb7d
update containerd 1.7.22 ( #11554 )
2024-09-23 15:31:59 +01:00
03a055c383
Merge pull request #10643 from VannTen/cleanup/k8s_node_templates
...
Refactor kubernetes/node templates
2024-09-23 14:16:00 +01:00
e9d406ed08
Merge pull request #11559 from VannTen/cleanup/less_inventory_boilerplate
...
Only require minimum structure in inventory, compute the rest
2024-09-23 10:08:00 +01:00
99c6a884a9
Bump ansible-lint from 24.9.0 to 24.9.2 ( #11563 )
...
Bumps [ansible-lint](https://github.com/ansible/ansible-lint ) from 24.9.0 to 24.9.2.
- [Release notes](https://github.com/ansible/ansible-lint/releases )
- [Commits](https://github.com/ansible/ansible-lint/compare/v24.9.0...v24.9.2 )
---
updated-dependencies:
- dependency-name: ansible-lint
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-23 09:32:00 +01:00
1818993a8a
CI: for upgrade testing, checkout old version before provisioning
...
Otherwise, modifying the test inventory + it's expected structure will
always fail.
2024-09-21 15:10:59 +02:00
88b6f08e26
Documentation of k8s_cluster auto-defined
...
Also remove the group from the example inventory, since it should not be
needed anymore.
2024-09-21 14:35:36 +02:00
7580e59bbf
Define k8s_cluster dynamically
...
This allows inventories to not define the k8s_cluster group manually.
2024-09-21 14:35:35 +02:00
2ec1c93897
Test group membership with group_names
...
Testing for group membership with group names makes Kubespray more
tolerant towards the structure of the inventory.
Where 'inventory_hostname in groups["some_group"] would fail if
"some_group" is not defined, '"some_group" in group_names' would not.
2024-09-21 14:09:09 +02:00
89ff0710e9
Bump ansible-lint from 24.7.0 to 24.9.0 ( #11541 )
...
Bumps [ansible-lint](https://github.com/ansible/ansible-lint ) from 24.7.0 to 24.9.0.
- [Release notes](https://github.com/ansible/ansible-lint/releases )
- [Commits](https://github.com/ansible/ansible-lint/compare/v24.7.0...v24.9.0 )
---
updated-dependencies:
- dependency-name: ansible-lint
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-20 10:45:58 +01:00
1fa4bb733d
Bump ansible from 9.8.0 to 9.10.0 ( #11540 )
...
Bumps [ansible](https://github.com/ansible-community/ansible-build-data ) from 9.8.0 to 9.10.0.
- [Changelog](https://github.com/ansible-community/ansible-build-data/blob/main/docs/release-process.md )
- [Commits](https://github.com/ansible-community/ansible-build-data/compare/9.8.0...9.10.0 )
---
updated-dependencies:
- dependency-name: ansible
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-20 09:33:39 +01:00
93ee1226eb
Merge pull request #11521 from VannTen/cleanup/deduplicate_kubeadm_control_plane
...
Use in inventory variables rather than patch files for kubeadm_patches
2024-09-20 01:05:14 +01:00
4323e5d039
Reset operation, disable service enabled and clean container's logs. ( #11501 )
2024-09-19 19:14:37 +01:00
163697951c
Merge pull request #11527 from VannTen/feat/vagrant_multi_inv
...
Cleanup Vagrantfile and allow to use multiples inventories
2024-09-19 13:46:45 +01:00
893e9cb177
Merge pull request #11471 from VannTen/feat/config_plugin_list
...
Update the list of admission plugins which needs config
2024-09-18 13:18:44 +01:00
76c42b4d3f
CI: cleanup '-scale' tests infra ( #11535 )
...
There is actually no test using this since ad6fecefa8
2024-09-18 13:04:50 +01:00
b3b00775ea
Remove unused test infrastructure ( #11529 )
...
These two files haven't been touched since 2016 and don't appear to be
referenced anywhere else
2024-09-18 13:04:44 +01:00
e550118314
Allow setting annotations on ingress-nginx service ( #11544 )
2024-09-18 11:54:44 +01:00
c3de25c782
Move the CRI endpoint setting to kubelet config ( #11550 )
...
The `--container-runtime-endpoint` kubelet argument is deprecated in
favor of the config file alternative.
2024-09-18 01:34:45 +01:00
59dd713585
Bump molecule from 24.8.0 to 24.9.0 ( #11542 )
...
Bumps [molecule](https://github.com/ansible-community/molecule ) from 24.8.0 to 24.9.0.
- [Release notes](https://github.com/ansible-community/molecule/releases )
- [Commits](https://github.com/ansible-community/molecule/compare/v24.8.0...v24.9.0 )
---
updated-dependencies:
- dependency-name: molecule
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-16 08:31:14 +01:00
e5d2452828
fix elastx cleanup security groups ( #11411 )
2024-09-15 13:59:13 +01:00
8cb081a3d0
Fix: download hash crictl link ( #11534 )
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2024-09-14 17:35:13 +01:00
4bf2d7a2c2
Rework vagrant documentation
...
- Use proper syntax highlighting for config.rb examples
- Consistent shell style ($ as prompt)
- Use only one way to do things
- Remove OS specific details
2024-09-13 08:00:33 +02:00
1e769b7260
Rework vagrant inventory handling + support for multiples inventories
...
The current way to handle a custom inventory in vagrant is a bit
hackish, copy files around and can break Vagrantfile parsing in
cornercase scenarios (removing vagrant inventories, or the inventory
copied into vagrant inventory).
Instead, simply pass additional inventories to the ansible-playbook
command lines as raw arguments with `-i`.
This also makes supporting multiples inventories trivial, so we add a
new `$inventories` variable for that purpose.
2024-09-13 08:00:32 +02:00
8d8d063de4
Remove useless file ( #11526 )
...
This was somehow copied from vagrant docs, not sure why it's there...
2024-09-13 04:31:12 +01:00
c601c8faf2
fix: Swap kubespray-defaults & boostrap-os ( #11441 )
...
- Execute boostrap-os before so that Python is installed for kubespray-defaults
- Remove outdated kubespray-defaults dependency on boostrap-os
2024-09-12 22:21:12 +01:00
5ae433bf47
Remove refs to rhel7 in Vagrantfile ( #11525 )
2024-09-12 11:01:13 +01:00
d54356e113
Add testcase for kubeadm_patches
2024-09-12 10:31:10 +02:00
c87097fc35
Document how to use kubeadm patches
2024-09-12 10:31:09 +02:00
4e6ae04b06
Merge pull request #11513 from VannTen/feat/python_download
...
Refactor and expand download_hash.py
2024-09-12 06:51:12 +01:00
8e254ec1e8
kubeadm: allow to provide patch inline in inventories
...
Specifying one directory for kubeadm patches is not ideal:
1. It does not allow working with multiples inventories easily
2. No ansible templating of the patch
3. Ansible path searching can sometimes be confusing
Instead, provide the patch directly in a variable, and add some quality
of life to handle components targeting and patch ordering more
explicitly (`target` and `type` which are translated to the kubeadm
scheme which is based on the file name)
2024-09-10 20:37:14 +02:00
a8b66fd207
Deduplicate kubeadm_patches tasks
...
kubernetes/control-plane and kubernetes/kubeadm roles both push kubeadm
patches in the same way.
Extract that code and make it a dependency of both.
This is safe because it's only configuration for kubeadm, which only
takes effect when kubeadm is run.
2024-09-10 17:39:31 +02:00
d54cfba6c2
Fix SAN check on newer versions versions of openssl ( #11277 )
2024-09-09 10:04:27 +01:00
533dbc62fe
Bump ara[server] from 1.7.1 to 1.7.2 ( #11514 )
...
Bumps [ara[server]](https://github.com/ansible-community/ara ) from 1.7.1 to 1.7.2.
- [Commits](https://github.com/ansible-community/ara/compare/1.7.1...1.7.2 )
---
updated-dependencies:
- dependency-name: ara[server]
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-09 08:38:27 +01:00
95f038559b
Bump tox from 4.18.0 to 4.18.1 ( #11515 )
...
Bumps [tox](https://github.com/tox-dev/tox ) from 4.18.0 to 4.18.1.
- [Release notes](https://github.com/tox-dev/tox/releases )
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst )
- [Commits](https://github.com/tox-dev/tox/compare/4.18.0...4.18.1 )
---
updated-dependencies:
- dependency-name: tox
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-09 06:04:27 +01:00
bb724655ae
Add favicon in Kubespray website ( #11512 )
2024-09-09 04:42:27 +01:00
538a1f2791
Update multus to v4.1.0 and clarify cilium compatibility ( #11434 )
...
* Update multus to v4.1.0 and clarify cilium compatibility
* Fix: bug introduced by #10934 where the template would break if multus was defined
* Set priorityClassName to system-node-critical for multus pods
2024-09-09 03:56:27 +01:00
230cb37626
download_hash: document usage
2024-09-08 14:27:03 +02:00
dec4e711d1
download_hash: cache request for 'multi-hash' files
...
This avoid re-downloading the same file for different arch and
re-parsing it
2024-09-08 14:27:03 +02:00
1b1045c0e2
download_hash: use persistent session
...
This allows to reuse http connection and be more efficient.
From rough measuring it saves around 25-30% of execution time.
2024-09-08 14:27:02 +02:00
86855be634
download_hash: document missing support
2024-09-08 14:27:02 +02:00
b2e64aed4b
download_hash: support 'multi-hash' components
2024-09-08 14:27:01 +02:00
a2644c7a4f
download_hash: add support for 'simple hash' components
2024-09-08 14:14:00 +02:00
e256f74f2a
download_hash: propagate new patch versions to all archs
2024-09-08 14:11:47 +02:00
Kubernetes Prow Robot
janosbabik
Bakke
Philip Sabri
dependabot[bot]
Max Gautier
Baargav
Leeon Fu
Qasim Mehmood
Kay Yan
ChengHao Yang
Kevin Huang
M. Hamzah Khan
Sy Tran Dung