f8fdc0cd93
Optimize kube resources creation ( #4572 )
2019-04-22 23:34:10 -07:00
09fe95bc60
Avoid creating k8s cert dir on non-k8s nodes ( #4602 )
2019-04-21 15:27:43 -07:00
ada5941a70
Unmask Docker service in ClearLinux ( #4583 )
...
The docker service provided by the containers-basic bundle is masked
in ClearLinux distribution. This is causing errors in the following
steps. This commit ensures that the unit is not masked.
2019-04-21 07:31:43 -07:00
33ab615072
Wait longer for node to join the cluster ( #4549 )
2019-04-20 07:05:40 -07:00
5a1cf19278
Install cri-tools on fedora ( #4350 )
2019-04-20 06:29:40 -07:00
05dc2b3a09
Use K8s 1.14 and add kubeadm experimental control plane mode ( #4514 )
...
* Use K8s 1.14 and add kubeadm experimental control plane mode
This reverts commit d39c273d96
2019-04-19 06:01:54 -07:00
d0e628911c
Add sha256 hashes for calicoctl v3.6.1 ( #4580 )
...
Hashes are added to calicoctl_binary_checksums for both adm and arm platforms.
2019-04-19 05:45:55 -07:00
656633f784
YAMLLint everything ( #4576 )
2019-04-18 23:59:54 -07:00
f5aec8add4
Fix runc absolute path ( #4542 )
...
The BINDIR variable defined on the runc's Makefile[1] defines
installation path is on $(PREFIX)/sbin which used for most of the
Linux distributions. This change fixes the absolute path used for
non-ClearLinux distributions (CentOS, Ubuntu).
[1] https://github.com/opencontainers/runc/blob/master/Makefile#L10
2019-04-18 15:41:58 -07:00
f92309bfd0
Fix ansible-lint for ceph package ( #4568 )
2019-04-18 13:45:25 -07:00
c6586829de
Ensure /etc/bash_completion.d/ folder exists ( #4543 )
...
The Stateless ClearLinux feature[1] requires the creation of folders
in /etc folder. This change ensure the existence of the
/etc/bash_completion.d/ folder for ClearLinux Distribution.
[1] https://clearlinux.org/features/stateless
2019-04-18 02:24:10 -07:00
b218e17f44
ansible-lint: E403 Package installs should not use latest ( #4500 )
2019-04-18 01:34:08 -07:00
a6dc50e7cb
Add host information for canal readiness probe ( #4548 )
2019-04-17 10:22:02 -07:00
37eac010c8
ansible-lint: Don’t compare to literal True/False ( #4499 )
2019-04-17 08:42:03 -07:00
ec3daedf9e
Revert "Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels ( #4320 )" ( #4553 )
...
This reverts commit 586ad89d50
2019-04-17 07:58:06 -07:00
d83181a2be
add RBD Provisioner Addon ( #3667 ) ( #3668 )
...
Based on the CephFS Provisioner Addon, the following changes have been made:
- Upstream v2.1.1-k8s1.11
- Configurable Provisioner replicas
2019-04-16 23:14:02 -07:00
78f6f6b889
Mark "Calico | Set global as_num" as "unchanged" ( #4539 )
...
This command executes with "--skip-exists" parameter, so it is idempotent
and should not be marked as "changed".
2019-04-16 09:31:11 -07:00
c5fb734098
Switch calicoctl from a container to a binary ( #4524 )
2019-04-15 04:24:04 -07:00
d39c273d96
Revert "Use K8s 1.14 and add kubeadm experimental control plane mode ( #4317 )" ( #4510 )
...
This reverts commit 316508626d
2019-04-11 12:52:43 -07:00
316508626d
Use K8s 1.14 and add kubeadm experimental control plane mode ( #4317 )
...
* Use Kubernetes 1.14 and experimental control plane support
* bump to v1.14.0
2019-04-11 05:30:13 -07:00
46ba6a4154
ansible-lint: when lines should not include Jinja2 variables ( #4496 )
2019-04-11 03:06:10 -07:00
4ff851b302
Enable nodelocaldns by default ( #4461 )
...
* Enable nodelocaldns by default
* Enable nodelocaldns by default
* nodelocaldns is now default
* Disable enable_nodelocaldns for the addons CI jobs
Disable enable_nodelocaldns for the addons CI jobs to make sure things still work without nodelocaldns
2019-04-11 00:24:08 -07:00
3af90f8772
disable cloud-routes for non-cloud plugin ( #4443 )
2019-04-10 23:50:09 -07:00
9032e271f1
Upgrade CoreDNS to 1.5.0 ( #4494 )
2019-04-10 13:40:08 -07:00
15597aa493
Do not force TCP connections to upstreams. ( #4492 )
2019-04-10 12:40:09 -07:00
3b9d13fda9
Return back bind API server node loadbalancer to 127.0.0.1 for security purposes. ( #4489 )
2019-04-10 12:20:08 -07:00
5e0249ae7c
Add HAProxy as internal loadbalancer ( #4480 )
2019-04-10 05:56:18 -07:00
353afa7cb0
Fix ipip: false in calico v3 ( #4473 )
2019-04-10 05:50:15 -07:00
a30ad1e5a5
Added generic CNI network plugin ( #4322 )
...
* Added generic CNI network plugin
* Added CNI network plugin documentation
* added necessary fix
2019-04-10 04:16:15 -07:00
586ad89d50
Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels ( #4320 )
...
* Fix the file path for all.yml and k8s-cluster.yml
* Fix --node-labels namespace error "unknown labels specified"
* Update templates and configs kubelet node-labels
2019-04-10 04:14:12 -07:00
6caa639243
Update CoreDNS label as specified in the kubernetes coredns repository ( #3920 )
2019-04-10 04:12:13 -07:00
d2a1ac3b0c
Add Ansible-lint CI step ( #4411 )
...
* Add ansible-lint as gitlab-ci step
* Fix jinja2 syntax in include_tasks that breaks ansible-lint
* Use a block scalar to get around gitlab quoting/escaping rules
* Run ansible-lint in verbose mode in CI
2019-04-10 02:04:16 -07:00
097806dfe8
Added tag kube-proxy ( #4272 )
...
Signed-off-by: André R. de Miranda <andre@miranda.work>
2019-04-09 05:25:06 -07:00
7cdf1fd388
quote values for kube_oidc_groups_prefix and kube_oidc_username_prefix values to accept colon, e.g oidc: ( #4305 )
...
This will fix error: error converting YAML to JSON: yaml: line 36: mapping values are not allowed in this context
Signed-off-by: Abdulaziz AlMalki <almalki.a@gmail.com>
2019-04-09 05:23:06 -07:00
aa162b0d5d
Update kube-router to 0.2.5 ( #4469 )
2019-04-09 03:37:04 -07:00
b15f3e182d
add default routing to canal and disable bird checks ( #4468 )
...
Co-Author: Paweł Skrzyński
2019-04-09 02:45:07 -07:00
4d39c1856e
Fix jinja filters ( #4470 )
2019-04-09 02:19:06 -07:00
913fed0089
kubeadmn init: add 'until' to make 'retries' effective ( #4464 )
...
an 'until' clause is required or 'retries' is ignored
(see note @ https://docs.ansible.com/ansible/latest/user_guide/playbooks_loops.html#do-until-loops )
2019-04-09 00:21:04 -07:00
12c6b5c3eb
openSUSE: Use Leap 15.0 instead of 42.3 ( #4442 )
...
* Vagrantfile: Bump openSUSE to Leap 15.0
* roles: container-engine: Add 'containerd' package for openSUSE
The 'containerd' package contains the docker-containerd and
docker-containerd-shim binaries. We also need to ensure that the latest
version is installed since an older version may already be present (eg GCE
images)
* Remove docker log-opts for opensuse
* roles: bootstrap-os: Use lowercase 'o' for openSUSE
OpenSUSE is not a valid family name. The correct one is openSUSE
* roles: bootstrap-os: Update zypper cache before first installation
The zypper cache may be outdated so ensure that it's fully updated
before we try and install the bootstrap packages.
2019-04-09 00:17:05 -07:00
f52584a715
robust handling of API server SANs ( #4435 )
...
* robust handling of API server SANs
* use apiserver_loadbalancer_domain_name if it is defined, according to PR 3977
2019-04-08 08:10:35 -07:00
09bbdadcee
remove nodelocaldns iface on reset ( #4460 )
2019-04-08 02:26:25 -07:00
d711a0c83f
[nodelocaldns] expand tolerations on the daemonset ( #4451 )
2019-04-08 02:24:26 -07:00
d18ad63e49
Update nginx to 1.15. Update manifest and performance optimize ( #4458 )
2019-04-08 02:02:29 -07:00
8947614d97
Upgrade to etcd v3.2.26 ( #4444 )
2019-04-08 00:34:25 -07:00
7e4f4a96fc
Replace iteritems() to items() in Jinja2 templates ( #4437 )
...
The iteritems() dictionary's method has been removed in Python3. Using
this method in Jinja2 templates limits the execution to Python2 which
will be deprecated in 2020[1]. This change replaces that method for
the items() method as it's suggested in the official website[2].
[1] https://pythonclock.org/
[2] https://docs.ansible.com/ansible/latest/user_guide/playbooks_python_version.html#dict-iteritems
2019-04-08 00:32:26 -07:00
301a371efe
Update pypy3 on CoreOS to 7.0.0 ( #4456 )
2019-04-08 00:28:24 -07:00
1a6df84c7a
Upgrade to Helm 2.13.1 ( #4445 )
2019-04-07 07:04:25 -07:00
8ad74404c9
Remove bash-completion ( #4431 )
2019-04-05 01:23:22 -07:00
1ce2f04f47
allow Suse OS family ( #4430 )
2019-04-04 03:02:51 -07:00
20b12751af
add Cinder allowVolumeExpansion option ( #4415 )
2019-04-04 02:36:50 -07:00
adca353fe9
Use docker.io for calico ( #4253 )
2019-04-04 01:20:49 -07:00
7a72e567d5
Update CoreDNS to 1.4.0 ( #4422 )
...
* Update CoreDNS to 1.4.0
* Update readme to reflect CoreDNS update
2019-04-04 00:40:50 -07:00
3c050be0b0
Update nodelocaldns cache settings ( #4423 )
2019-04-04 00:38:51 -07:00
41e684eb5a
Update DNS Autoscaler to 1.4.0 ( #4425 )
...
* Update DNS Autoscaler
* Update downloads too
* Fix yamllint
* Fix yamllint
2019-04-04 00:36:51 -07:00
55890e1b82
keep compatibility as it was before ( #4268 )
2019-04-03 01:39:42 -07:00
1e524c68d5
remove our config if docker start failed ( #4260 )
2019-04-03 01:37:44 -07:00
740d8b0a26
enable kubelet client certificate rotation ( #4081 )
...
* enable kubelet client certificate rotation
* change to variable kubelet_rotate_certificates
2019-04-03 01:35:44 -07:00
a8dd69cf17
Fixed cleanup-docker-orphans.sh to use docker-containerd-shim and containerd-shim ( #4418 )
2019-04-02 09:11:21 -07:00
4fe2aa6bf7
Use install_cni init container for cni copy for calico/canal ( #4416 )
2019-04-02 03:32:36 -07:00
5d5c9cab19
Speed up old docker package removal ( #4408 )
...
Both the `yum` and `apt` modules support a list as input, this allows us avoid the slower `with_items` approach, which can take a long time with a large count of cluster nodes.
2019-04-01 15:08:35 -07:00
5f12b7aedf
Remove kubedns and dnsmasq. Move dns_late phase after apps ( #4406 )
...
Both kubedns and dnsmasq modes are long not maintained.
We should run dns_late steps at the end because sshd
makes DNS lookups during Ansible run and has 2s timeouts
for each failed lookup trying to connect to coredns before
it is ready.
2019-04-01 12:32:34 -07:00
d71590bbd0
add 1.14.0 checksum, remove 1.11.* checksums ( #4401 )
2019-04-01 07:16:33 -07:00
483f1d2ca0
Calico felix - Fix jinja2 boolean condition ( #4348 )
...
* Fix jinja2 boolean condition
* Convert all felix variable to booleans instead.
2019-03-29 16:07:09 -07:00
0440e45d65
Fix supplementary_addresses rendering error ( #4403 )
2019-03-29 00:26:13 -07:00
2fb27c8521
Use static files in KubeDNS templating task ( #4379 )
...
This commit adapts the "Lay Down KubeDNS Template" task to use the static
files moved by pull request [1]
[1] https://github.com/kubernetes-sigs/kubespray/pull/4341
2019-03-28 06:26:43 -07:00
f17f4ff963
Fix bootsrap-os role, failing to create remote_tmp ( #4384 )
...
* Fix bootsrap-os role, failing to create remote_tmp
* use ansible_remote_tmp hostvar
2019-03-28 06:24:43 -07:00
e9c34fe038
Default values for variable dns_servers and dns_domain are set in two files: ( #3999 )
...
values from inventory in roles/kubespray-defaults/defaults/main.yml
hardcoded values in roles/container-engine/defaults/main.yml
dns_servers set empty in roles/container-engine/defaults/main.yml and skydns_server not set in docker_dns_servers variables
also set default value for manual_dns_serve
another variables in roles/container-engine/defaults not need to set
2019-03-28 06:22:44 -07:00
669ab10c17
Added livenessProbe for local nginx apiserver proxy liveness probe ( #4222 )
...
* Added configurable local apiserver proxy liveness probe
* Enable API LB healthcheck by default
* Fix template spacing and moved healthz location to nginx http section
* Fix healthcheck listen address to allow kubelet request healthcheck
2019-03-28 06:20:46 -07:00
0a3cf1a087
Fix CA cert environment variable for ectd v3 ( #4381 )
2019-03-28 00:18:43 -07:00
0efa3e6392
Upgrade to k8s 1.13.5
2019-03-27 11:16:21 +01:00
6d7f3c4405
Reduce jinja2 filters in coredns templates ( #4390 )
2019-03-26 11:09:17 -07:00
d0ae316934
Use proxy_env with kubeadm phase commands ( #4325 )
2019-03-26 03:03:19 -07:00
b7fd462944
Fix support for ansible 2.7.9 ( #4375 )
2019-03-20 11:29:42 -07:00
ec08303f82
Revert "Fix #4237 : update kube cert path ( #4354 )" ( #4369 )
...
This reverts commit ea7a6f1cf1
2019-03-20 05:56:57 -07:00
ea7a6f1cf1
Fix #4237 : update kube cert path ( #4354 )
2019-03-17 23:55:11 -07:00
150a969cf4
Forcefully delete pods when necessary ( #4328 )
...
Pods on down/unresponsive nodes can't be deleted without
--force --grace-period=0.
Fixes #4314
2019-03-14 07:45:46 -07:00
3c4cbf133e
Adding ability to override dashboard replica count ( #4344 )
2019-03-13 13:58:25 -07:00
fd2c47b56a
Move most coredns templates to static files ( #4341 )
...
* Move most coredns templates to static files
This should speed up the task slightly
* yaml lint fixes
2019-03-12 21:17:31 -07:00
33024731e4
Upgrade to k8s 1.13.4 ( #4319 )
2019-03-06 23:16:56 -08:00
d469282f1c
add blockSize to IPPool spec for Calico >= v3.3.0 ( #4224 )
...
* add blockSize to IPPool spec for Calico >= v3.3.0
* fix "cidr" spec in Calico IPPool resource for my PR
2019-03-06 12:42:48 -08:00
acbf3db233
Remove hard dependence on facts for all nodes ( #4304 )
...
* Remove hard dependence on facts for all nodes
* Update main.yaml
* Update main.yaml
2019-03-05 03:04:39 -08:00
adf6a7121f
Reenable set_facts task for dns_late ( #4312 )
2019-03-01 05:39:30 -08:00
bbfd2dc2bd
Add 1.12.6, sort arm64 descending ( #4308 )
...
* Add 1.12.6, sort arm64 descending
* remove 1.10.x checksums (EOL anyways)
2019-02-28 05:55:19 -08:00
4fe61968cf
Set default value for local_path_provisioner_enabled in role ( #4309 )
2019-02-28 05:36:08 -08:00
9e8e069b23
remove kube bridge on reset ( #4250 )
2019-02-26 00:32:00 -08:00
26ca58419f
feat(external-provisioner): adds support for local-path-provisioner ( #4232 )
...
* feat(external-provisioner/local-path-provisioner): adds support for local path provisioner
Helpful for local development but also in production workloads (once the
permission model is worked out) where you have redundancy built into the
software uses the PVCs (e.g. database cluster with synchronous
replication)
* feat(local-path-provisioner): adds debug flag, image tag group var
* fix(local-path-provisioner): moves image repo/tag to download role
* test(gce_centos7-flannel): enables local-path-provisioner in test case
* fix(addons): add image repo/tag to commented default values
* fix(local-path-provisioner): typo in jinja template for local path provisioner
* style(local-path-provisioner): debug flag condition re-formatted
* fix(local-path-provisioner): adds missing default value for debug flag
* fix(local-path-provisioner): syntax fix for debug if condition end
* fix(local-path-provisioner): jinja template syntax: if condition white space
2019-02-25 22:45:30 -08:00
67832aada9
changed_when:false ( #4189 )
2019-02-25 20:09:30 -08:00
3d25b4dfc1
30MiB for gpu-device-plugin ( #4227 )
...
* 30MiB for gpu-device-plugin
* use vars for easier configuration
2019-02-25 20:03:53 -08:00
1c12c19150
weave: Upgrade to 2.5.1 ( #4248 )
...
Upstream Changes:
- weave 2.5.1 (https://github.com/weaveworks/weave/releases/tag/v2.5.1 )
Our Changes:
- Sync templates with upstream changes
2019-02-25 20:02:00 -08:00
88249308a0
Add labels to vsphere cloud config ( #4275 )
2019-02-25 19:58:15 -08:00
b4aaa7b908
Speed up tasks ( #4278 )
...
* fact gathering should run only once per node
* eliminate ansible version check, it is at the beginning of each
playbook
2019-02-25 19:56:23 -08:00
81801ce23b
Add master toleration flag in dashboard deployment ( #4290 )
2019-02-25 19:34:47 -08:00
7dfa39483f
Make container storage repository configurable ( #4284 )
2019-02-25 19:29:32 -08:00
b07641c3f3
Move kube_proxy_remove out of set_facts and set default ( #4180 )
2019-02-25 00:08:06 -08:00
4638acfe81
Retry applying podsecurity policies ( #4279 )
2019-02-24 22:50:55 -08:00
aadef80404
Upgrade to latest version of ubuntu-nvidia-driver-installer. ( #4296 )
...
The lastest version of ubuntu-nvidia-driver-installer contains a fix for
https://github.com/GoogleCloudPlatform/container-engine-accelerators/issues/90
which causes the installer pod to crash when driver is already loaded.
2019-02-24 22:22:48 -08:00
9805fb7a34
Add flexvolume plugin dir to kubeadm kubelet ( #4168 )
...
This was already approved in #4106 but there are CI issues
with that PR due to references to kubernetes incubator.
After upgrading to Kubespray 2.8.1 with Kubeadm enabled Rook
Ceph volume provision failed due to the flexvolume plugin dir not
being correct. Adding the var fixed the issue
2019-02-20 15:02:02 -08:00
323d788f48
Add support for --enable-skip-login in Dashboard ( #4265 )
2019-02-19 23:24:29 -08:00
eafab9636f
fix wrong indent of oidc-username-prefix and oidc-groups-prefix in kubeadm config template ( #4263 )
2019-02-19 23:22:32 -08:00
107bfb259a
This PS is to fix the bug when Workers can't join the cluster ( #4276 )
...
because of etc-kubernetes-manifests not empty.
2019-02-19 22:13:59 -08:00
d4a36aa55b
Merge pull request #4027 from riverzhang/kube-proxy
...
Add update server field in kube-proxy kubeconfig
2019-02-20 13:41:06 +08:00
07b2894080
Adding ability to maintain existing Encryption Secrets at Rest. ( #4255 )
...
* Adding ability to maintain existing Encryption Secrets at Rest.
If secrets_encryption.yaml is present it will not be overriten with a new kube_encrypt_token.
This should allow for it to be set ahead of a playbook running or maintain it if cluster.yml is ran on the same cluster and the ansible host does not have access to the secrets.
* Setting existing kube_encrypt_token across all master nodes in case it was missing in one or more nodes.
2019-02-19 07:31:45 -08:00
802ac377b8
Fix typo in task description ( #4243 )
2019-02-19 06:06:29 -08:00
23685b4537
Add image tag in "pause" container of nvidia driver installer. ( #4247 )
2019-02-17 21:02:30 -08:00
e552be76ce
Docker apt repo name fix (again) ( #4246 )
...
For some reason 18.09 packages are now prefixed with `5:` in the download.docker.com apt repos
Followup to #4236
2019-02-14 10:19:19 -08:00
eea22dfd40
Fix typo with docker-ce package versions ( #4236 )
2019-02-14 07:32:12 -08:00
192f4c4e96
Allow customizing container image path used in NVIDIA GPU addon. ( #4229 )
2019-02-14 03:51:38 -08:00
e03588f431
use swapon -s ( #4216 )
2019-02-14 02:35:17 -08:00
8872b2e0c6
Fix calico when kube_override_hostname is set ( #4235 )
...
This fixes an issue where the `nodename` in calico's cni config json can fall out of sync with the k8s node name used by the calico pod if `kube_override_hostname` is set
2019-02-13 16:02:48 -08:00
061f5a313b
Explicitely set etcd endpoint in kubeadm-images.yaml ( #4063 )
...
Currently, the task `container_download | download images for kubeadm config images` fetches etcd image even though it's not required (etcd is bootstrapped by kubespray, not kubeadm).
`kubeadm-images.yaml` is only a subset of `kubeadm-config.yaml`, therefore ``kubeadm config images pull` will try to get all this list (including etcd)
```
# kubeadm config images list --config /etc/kubernetes/kubeadm-images.yaml
k8s.gcr.io/kube-apiserver:v1.13.2
k8s.gcr.io/kube-controller-manager:v1.13.2
k8s.gcr.io/kube-scheduler:v1.13.2
k8s.gcr.io/kube-proxy:v1.13.2
k8s.gcr.io/pause:3.1
k8s.gcr.io/etcd:3.2.24
k8s.gcr.io/coredns:1.2.6
```
When using the `kubeadm-config.yaml` though, it doesn't list etcd image:
```
# kubeadm config images list --config /etc/kubernetes/kubeadm-config.yaml
k8s.gcr.io/kube-apiserver:v1.13.2
k8s.gcr.io/kube-controller-manager:v1.13.2
k8s.gcr.io/kube-scheduler:v1.13.2
k8s.gcr.io/kube-proxy:v1.13.2
k8s.gcr.io/pause:3.1
k8s.gcr.io/coredns:1.2.6
```
This change just adds the etcd endpoints in the `kubeadm-images.yaml` to give a hint to kubeadm it doesn't need etcd image for its boostrapping as etcd is "external".
I confess it is a ugly hack, a better way would be to use a single `kubeadm-config.yaml` for both tasks, but they are triggered by different roles (`kubeadm-images.yaml` is used by download, `kubeadm-config.yaml` by kubernetes/master) at different steps and I didn't want to refactor too many things to prevent breakage.
This is specially useful for offline installation where a whitelist of container images is mirrored on a local private container registry. `k8s.gcr.io/etcd` and `quay.io/coreos/etcd` are two different repositories hosting the same images but using *different tags*!
* coreos/etcd:v3.2.24
* k8s.gcr.io/etcd:3.2.24 (note the missing 'v' in the tag name)
2019-02-13 12:44:12 -08:00
2e2ed3bd35
[SECURITY] Docker patches for CVE-2019-5736 ( #4223 )
...
This updates docker 18.06 and 18.09 with the two patches released
yesterday to address the new runc exploit. Details here:
https://kubernetes.io/blog/2019/02/11/runc-and-cve-2019-5736/
2019-02-13 01:50:53 -08:00
7697baf0da
Omit does not work in the context of yum_repository proxy. The ansible documentation specifies to use _none_ to disable the global proxy setting. ( #4225 )
2019-02-12 16:46:32 -08:00
22a5a00c49
Improve kubeadm join tasks ( #4206 )
...
Fix issue where `kubeadm join` could wait forever for joining.
Fix issue where `kubeadm join` were not reaching the user, making
impossible to find the cause of the failure.
New behaviour is to first attempt to join without bypassing the
verifications checks and to display them if needed.
If this fails it still attempts to join by ignoring the check in
order to make previous behavior.
A timeout of 60 seconds is allocated for a joining.
Related-bug: #3973
2019-02-12 13:42:56 -08:00
6a33411d65
Add an option for helm init --wait ( #4202 )
2019-02-11 14:32:26 -08:00
9a91ef8628
change permission after unarchive ( #4191 )
2019-02-11 14:21:38 -08:00
fbce6349c4
check kube_pods_subnet and kube_service_addresses to valid ip network range, not single ip address ( #4188 )
2019-02-11 14:12:06 -08:00
e2ad6aad5a
bootstrap: rework role ( #4045 )
...
* bootstrap: rework role
* support being called from a non-root user
* run some commands in check mode
* unify spelling/task names
* bootstrap: fix wording of comments for check_mode: false
* bootstrap: remove setup-pipelining task
2019-02-11 14:04:27 -08:00
038a2eb862
Merge pull request #3949 from trogeat/patch-fix-missing-ca-cert-apiserver
...
kubespray: fix missing ca-certificate path in apiserver
2019-02-11 15:40:04 -06:00
5d146e52fe
If a centos or rhel node is not configured with the extras repo installation of required packages (python-httplib2 in particular) will fail later on. ( #4213 )
2019-02-11 13:27:02 -08:00
c41c1e771f
OCI Cloud Provider Update ( #4186 )
...
* OCI subnet AD 2 is not required for CCM >= 0.7.0
Reorganize OCI provider to generate configuration, rather than pull
Add pull secret option to OCI cloud provider
* Updated oci example to document new parameters
2019-02-11 12:08:53 -08:00
85b77f7c22
Remove Ubuntu Bionic specific vars file - breaks multi-arch ( #3974 )
2019-02-11 00:04:27 -08:00
6b3f7306a4
Add support for arm64 images for hyperkube, kubeadm and cni_binary ( #4176 )
2019-02-09 02:08:57 -08:00
01d70f2c7c
Update flannel version to v0.11.0 ( #4190 )
...
Change-Id: I27d670803bea82a68d5eb0e49d4677f4afdce55f
2019-02-07 04:33:01 -08:00
6878c2af4e
Fix kube_hostname_override inconsistencies ( #4185 )
2019-02-06 22:20:11 -08:00
db2b76a22a
update k8s to 1.13.3 ( #4192 )
...
* update k8s to 1.13.3
* update README as well
2019-02-06 10:48:05 -08:00
69e5deeccc
Fix newline issue of priorityClassName when enable tolerations ( #4164 )
2019-02-04 12:59:01 -08:00
226d5ed7de
[Calico] Define FELIX_KUBENODEPORTRANGES when kube-proxy in ipvs mode ( #4173 )
...
* Define FELIX_KUBENODEPORTRANGES when kube-proxy in ipvs mode
* ensure kube_apiserver_node_port_range is defined
2019-02-04 12:42:40 -08:00
52e0aa7a80
Install the latest filesystem creation packages ( #3904 )
...
This PR ensures that the e2fsprogs and xfsprogs packages are
installed on all Kubernetes nodes and that the packages are
the latest versions. It also ensures that the nodes can
create XFS filesystems when necessary, since not all distros
install xfsprogs by default.
e2fsprogs - ext2/ext3/ext4 file system utilities
xfsprogs - Utilities for managing the XFS filesystem
2019-02-04 12:23:33 -08:00
bd9474bafd
fix kubeadm-setup when enable access_ip ( #4145 )
2019-02-01 20:10:34 -08:00
316b73178d
Add timeout to Get current version of calico cluster version ( #4149 )
...
Avoid waiting forever for this task that should be very quick.
Fixes : #4148
2019-02-01 20:09:04 -08:00
143e2272ff
Fixing an issue where trying to install docker-ce-18.09 on rhel7 nodes (or potentially centos 7) without an enabled extras repo the installation will fail because container-selinux >= 2.9 is required. The check for container-selinux upfront should obviate the need for adding an extras repo if the node is able to find it from another source. ( #4161 )
2019-01-31 16:19:48 -08:00
cd7924f8c9
Add oidc prefixes to kubeadm templates ( #4159 )
2019-01-31 15:31:43 -08:00
7f93a5a0f5
Fix deprecation warnings ( #4130 )
...
* use not deprecated ansible_play_hosts variable
* Using tests as filters is deprecated
* Fix deprecation warning about pkg list
2019-01-31 14:57:22 -08:00
f6d60a7e89
Calico: Ability to define the default IPPool CIDR (instead of kube_pods_subnet) ( #4131 )
...
* Calico: Ability to define the default IPPool CIDR (instead of kube_pods_subnet)
* Documentation for calico_pool_cidr (and calico_advertise_cluster_ips which has been forgotten...)
2019-01-31 13:39:13 -08:00
68fd7e39da
Set cluster DNS correctly in case of nodelocal dns cache ( #3879 )
...
* Set cluster DNS correctly in case of nodelocal dns cache
* Pass in cluster_ip based on dns mode
* Disable nodelocaldns by default
* Fix syntax error
* Fix syntax issue
* Add nodelocadns ip to vars of node installation
* Change location of nodelocaldns_ip
* Try to remove newlines from jinja template
* Add debug for config file
* Move parameter logic outside of template
* Adapt templates after feedback
* Remove debugging
2019-01-28 23:39:27 -08:00
a096761306
[PR-Calico]Support calico 3.4.0 ( #4102 )
...
* Suport calico 3.4.0
Signed-off-by: wangxf1987 <xiaofeix.wang@gmail.com>
* Remove symlink + cni conflist template when 3.3.0+, handle Canal, addition of install-cni: sidecar(3.3.0) or initontainer(3.4.0), KUBECONFIG_FILEPATH, calico_cert_dir, advertise cluster ips
* scheduler.alpha.kubernetes.io/critical-pod deprecated since 1.12
2019-01-28 11:03:49 -08:00
2054a98cf7
Run kubeadm and hyperkube outside of local_release_dir ( #4098 )
...
Addressing the discussion started in #4064 , this PR moves kubeadm and
hyperkube binaries to /usr/local/bin before running them on the master
nodes.
It is to address the case where local_release_dir points to /tmp
(kubespray default) and /tmp is mounted with noexec mode, preventing
any binaries to be run in that partition.
In role "node", we still move kubeadm to bin_dir only on the worker
nodes.
2019-01-28 02:00:49 -08:00
ce8ba1f170
create artifacts_dir ( #4079 )
2019-01-28 01:59:15 -08:00
595d6427ac
[Nodelocal DNS cache] Mount host /run/xtables.lock in nodelocaldns container ( #4074 )
...
* Mount host /run/xtables.lock in nodelocaldns container
* fix typo in nodelocaldns daemonset manifest yml
* Add prometheus scrape annotation, updateStrategy and reduce termination grace period
* fix indentation
* actually fix it..
* Bump k8s-dns-node-cache tag to 1.15.1 (fixes https://github.com/kubernetes/dns/issues/282 )
2019-01-28 01:57:40 -08:00
96688269f8
Support both --address and --bind-address for scheduler and controller-manager ( #4112 )
2019-01-27 23:43:34 -08:00
55aa58ee2e
Merge pull request #4025 from riverzhang/download-images
...
Fix kubeadm config images pull
2019-01-28 15:41:15 +08:00
556a8d68bc
Set IP env var to autodetect when calico_ip_auto_method is defined ( #4105 )
2019-01-27 23:09:18 -08:00
3ed5f89cf5
Add update server field in kube-proxy kubeconfig
...
I know this is a bit hack.
If you use cloud LB, you can use kubeadm's controlPlaneEndpoint to configure kube-proxy's server field.
But for nginx-proxy, it didn't start when kubeadm init.
2019-01-28 14:45:43 +08:00
8d0158ceeb
Fix kubeadm config images pull
...
Supported by kubeadm v1.11
2019-01-28 14:42:55 +08:00
4479cc48fe
Introduce `calico_upgrade_url` var for Calico upgrade tool.
...
So that binary can be sourced from anywhere - not only github.
2019-01-23 16:19:27 +08:00
881be9b741
Fix epel_enabled and RHEL support in bootstrap-os
...
Looks like `epel_enabled` was not configured for the epel install in `bootstrap-centos.yml`. Also, there were no conditionals that would trigger bootstrap for RHEL.
2019-01-22 16:40:02 -06:00
e2592f1ce2
Fix docker 18.09.1 systemd service
...
The `docker-ce` 18.09.1 packaging missed an `After` dependency on containerd in the systemd service. Upstream PR: https://github.com/docker/docker-ce-packaging/pull/290
2019-01-22 11:19:54 -06:00
77d31e679a
fixup external kube-apiserver port ( #4075 )
2019-01-21 14:43:27 +03:00
decbcdc423
Use external LB IP for external api endpoint ( #4060 )
...
* Use external LB IP for external api endpoint
Use loadbalancer_apiserver.address instead of apiserver_loadbalancer_domain_name for kudadm init --apiserver-advertise-address argument
https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-init/#options states apiserver-advertise-address needs to be a IPv4 or IPv6 address
* only use loadbalancer IP if it is defined
2019-01-21 12:27:42 +03:00
e3ffa21303
Merge pull request #4019 from chadswen/kubeadm-env
...
Fix PATH for kubeadm init
2019-01-18 11:27:57 -06:00
f2ecda6f0f
Merge pull request #4059 from chadswen/helm-version-bump
...
Update helm version for security and stablity fixes
2019-01-18 11:25:42 -06:00
26f6f1f62e
Merge pull request #4050 from chadswen/docker-18.09.1
...
Bump docker 18.09 to the latest patch
2019-01-18 11:23:44 -06:00
f97cb4e761
Add 1.12.5 checksums ( #4067 )
2019-01-18 07:16:43 -08:00
405198acd0
Update helm version for security and stablity fixes
...
Helm v2.12.2 has fixes for a security vuln, and there have been several improvements since our last update.
2019-01-16 11:03:23 -06:00
eecaba6b84
Generate external admin.conf with kubeadm ( #4056 )
...
* Generate external admin.conf with kubeadm
* Fix apiserver sans
2019-01-16 16:30:50 +03:00
83e11f9ef7
kubespray: fix missing ca-certificate path in apiserver
2019-01-16 11:48:24 +01:00
5a7ac7e5c1
Merge pull request #3984 from dannyk81/calico_xtables_lock
...
[calico/canal] mount host's xtables lock and enable calico locking for <v3.2.1
2019-01-15 23:13:02 -06:00
c15c933ce8
Bump docker 18.09 to the latest patch
...
Docker 18.09.1 is out and it includes some fixes that are quite critical for RHEL distros, details here: https://docs.docker.com/engine/release-notes/#18091
2019-01-15 13:54:58 -06:00
0697ab4b4f
Merge pull request #4048 from chadswen/readonly-writable-fix
...
Fix kubeadm config extra volumes
2019-01-15 13:02:04 -06:00
13e3e867ac
Fix kubeadm config extra volumes
...
I found a potential use case where `writable` could be null and therfore
not treated like a boolean, so this adds an extra default statement to
avoid negating a non-boolean as boolean which would lead to undefined. refs #4020
2019-01-15 12:35:22 -06:00
cc30220f01
Merge pull request #4044 from chadswen/lvp-cm-fix
...
Fix local-volume-provisioner configmap template
2019-01-15 09:08:08 -06:00
257019d424
Mount host's xtable lock and enable calico lokcing for <v3.2.1
2019-01-14 17:16:29 -05:00
4959bfc1b3
Merge pull request #3950 from elementyang/pr-registry
...
fix registry_storage_class equals empty string
2019-01-14 15:45:09 -06:00
301671ae19
Merge pull request #4026 from riverzhang/bind-address
...
Use --bind-address instead of --address
2019-01-14 15:35:00 -06:00
f10f7d0e84
Merge pull request #3975 from kskewes/arm64-urls
...
Update kubectl and etcd download urls for mult-arch
2019-01-14 15:04:29 -06:00
3ee5aa0d6b
Fix local-volume-provisioner configmap template
...
Looks like the template is removing the trailing space between storage
class entries, and since CI only has one storage class we never hit this
issue. This change will prevent the yaml from printing on a single line
when multiple storage classes are defined.
2019-01-14 14:28:00 -06:00
fce8712bff
Merge pull request #4033 from MarkusTeufelberger/pypy_portable
...
Use Pypy portable on coreos
2019-01-14 12:30:47 -06:00
87c9a871b9
bootstrap-os: use the systemd module to stop and mask locksmithd
2019-01-12 15:06:01 +01:00
5e2c14e916
bootstrap-os: simplify pip3 installation on coreos
2019-01-12 15:05:33 +01:00
5b5546adf1
bootstrap-os: Install pypy3 portable
2019-01-12 15:04:33 +01:00
0b09c8154a
Upgrade kubernetes to v1.13.2
2019-01-11 14:32:42 +08:00
bab2e5ed0d
Use --bind-address instead of --address
...
--address deprecated
2019-01-11 12:22:47 +08:00
1d9c0c7d17
Fix readOnly flag in kubeadm-config.v1beta1.yaml.j2
...
In v1beta1 of `ClusterConfiguration` the extraVolumes `writable` field was changed to `readOnly` and its boolean value must be negated.
Also, the json field for `useHyperKubeImage` was incorrectly capitalized.
2019-01-09 20:43:35 -06:00
aa1d5b8970
Fix PATH for kubeadm init
...
Right now we're consistently getting warnings about kubelet not found in
path during `kubeadm init`. We fixed this for `kubeadm join` in #3342 , and this brings the change to init
as well.
2019-01-09 18:38:02 -06:00
1d5a9464e2
Merge pull request #4009 from chadswen/lvp-fixup
...
Bugfixes for Local Volume Provisioner
2019-01-09 11:22:28 -06:00
e88b8f247a
Merge pull request #3996 from Bobonium/issue_3586_kube_router_with_external_loadbalancer_not_working
...
use api server loadbalancer ip if external loadbalancer is used (fixes kube-router deployment)
2019-01-09 11:20:38 -06:00
7633e6d582
Added pass through parameters to enable basic auth for downloads
2019-01-08 19:36:13 -06:00
72802e4d8d
Bugfixes for Local Volume Provisioner
...
- Fixed an issue where storage class host directories were looped
through excessive target hosts
- Fixes examples in the LVP `README.md` to use nested dicts instead of a
list of dicts
2019-01-08 17:45:20 -06:00
4fb8adb9e4
More dynamic local-storage-provisioner approach ( #3472 )
...
* Makes local volume provisioner more dynamic
* Correct variable name in local storage provisioner defaults
* Updates external-provisioner readme
* Updates variable naming to be more clear, more documentation, fixes sample inventory
* Variable refactor, untangled some jinja2 loops
* Corrects variable name
* No variable substitution in dict keys, replaced with anchor
* Fixes default storage_classes dict, inline docs
* Fixes spelling in inline docs
* Addresses comments in review
* Updates all the defaults
* Fix failing CI task
* Fixes external provisioner daemonset
2019-01-08 12:36:44 -08:00
5c52a830d2
Update kubernetes dashboard to latest patch ( #3995 )
2019-01-08 09:46:20 -08:00
4d5b41b8db
Allow override of bind addr for controller-manager and scheduler ( #3968 )
...
* allows to override the bind addresses for controller-manager and scheduler
Useful for Prometheus metrics monitoring
* Add bind addr override support in kubeadm/v1beta1
Adds support for override of bind addresses for controller-manager
and scheduler in kubeadm/v1beta1
* Move location of bind address vars
* Remove double declaration of schedulerExtraArgs
2019-01-07 20:41:54 -08:00
11d9c2e2c3
use api server loadbalancer ip if external loadbalancer is used - this fixes the broken kube-router deployment
2019-01-07 23:06:52 +01:00
39d7503069
Merge pull request #3959 from elementyang/pr-ingress
...
fix ingress nodeSelector label
2019-01-04 08:58:16 +00:00
41434ce080
Update kubectl and etcd download urls for mult-arch
2019-01-04 21:44:57 +13:00
f72ed13f3c
remove os_family variable from bootstrap-os ( #3962 )
...
* remove os_family variable from bootstrap-os
* quote the conditions another time to fix the syntax error
2019-01-03 11:28:03 -08:00
8216e821d3
Fix kubeadm v1beta1 configuration taint ( #3928 )
...
* Use master node taint same as kubeadm configuration v1alpha3 or before.
2019-01-03 03:42:23 -08:00
e25237455c
Fix mixup http/https in bootstrap-debian.yml ( #3963 )
...
* Fix mixup http/https in bootstrap-debian.yml
* Update bootstrap-debian.yml
2019-01-03 00:18:09 -08:00
a34139e19e
(Re)add line break for supplementary addr in SANs ( #3952 )
...
The change implemented in #3908 remove line breaks for supplementary
addresses in kubeadm SANs, causing errors in the config file and
failure to bring cluster up. This commit reimplement line breaks in
between supplementary addresses.
2019-01-03 00:12:00 -08:00
80379f6cab
Fix kube-proxy configuration for kubeadm ( #3958 )
...
- Creates and defaults an ansible variable for every configuration option in the `kubeproxy.config.k8s.io/v1alpha1` type spec
- Fixes vars that were orphaned by removing non-kubeadm
- Fixes previously harcoded kubeadm values
- Introduces a `main` directory for role default files per component (requires ansible 2.6.0+)
- Split out just `kube-proxy.yml` in this first effort
- Removes the kube-proxy server field patch task
We should continue to pull out other components from `main.yml` into their own defaults files as I did here for `defaults/main/kube-proxy.yml`. I hope for and will need others to join me in this refactoring across the project until each component config template has a matching role defaults file, with shared defaults in `kubespray-defaults` or `downloads`
2019-01-03 00:04:26 -08:00
d58b338bd8
Update the version of pypy used on CoreOS bootstrap-os ( #3922 )
...
* Update the version of pypy used on CoreOS bootstrap-os
* update the pip installation process on CoreOS
2019-01-02 06:17:20 -08:00
e1e13b68b3
fix ingress nodeSelector label
2018-12-29 14:41:23 +08:00
90ee5df413
fix registry_storage_class equals empty string
2018-12-29 14:31:47 +08:00
5834e609a6
Add scale master features ( #3946 )
...
* Add scale master features
* Add certificate management with kubeadm
* Add kubeadm kubeconfig
* Fix ymalroles error
* fix upgrade cluster fialed
* force update cert and keys when you reconfigure cluster
2018-12-27 23:27:27 -08:00
532e97c542
fix registry_storage_class equals empty string
2018-12-28 14:23:19 +08:00
d156449819
roles: docker: Update docker service for SUSE distributions ( #3924 )
...
The containerd service and socket files have been dropped from the
openSUSE docker package so we should not require them in the docker
service anymore. This makes the docker service file look similar to
the one shipped by the openSUSE package.
Signed-off-by: Markos Chandras <mchandras@suse.de>
2018-12-27 07:26:02 -08:00
d4bd08f82e
Install python-pip from local yum repository ( #3940 )
...
Add support install python-pip from local yum repository if local yum repository exist.
2018-12-27 06:30:59 -08:00
320f4d4d7f
Added filters for integer conversion of kubelet_max_pods and kube_network_node_prefix ( #3857 )
2018-12-26 13:58:53 -08:00
16715adfa0
Adds support for webhook token auth. ( #3939 )
...
Webhook token auth:
https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
Fixes #3063 .
2018-12-26 01:52:53 -08:00
ce63597e4a
Merge pull request #3941 from riverzhang/gpu
...
Fix GPU node Scheduling
2018-12-26 13:39:10 +08:00
5f117fb65e
Add support http/https proxy for bootstrap-debian ( #3932 )
2018-12-25 10:46:53 -08:00
1bb1ba2274
Fix GPU node Scheduling
2018-12-25 21:37:10 +08:00
6ebcaab2bb
controlPlaneEndpoint set up through load balancer should be possible … ( #3888 )
...
* controlPlaneEndpoint set up through load balancer should be possible even in single master setups
Enable load balancer for single-master setups
Fixes an issue where single-master setups are not reachable using the usual admin.conf from outside the cluster.
controlPlaneEndpoint set up through load balancer should be possible even in single master setups
* add fix to other api versions
* remove obsolete check completely
* remove check, pass 2
* removes checks in client configuration
* delete 'and'
2018-12-25 00:03:32 -08:00
cd42e649a7
Fix reconfigure and upgrade cluster ( #3938 )
2018-12-24 23:06:27 -08:00
8167e5b690
Fix kubeadm images templates ( #3936 )
...
download v1.12.3 kubernetes images failed
2018-12-23 06:35:06 -08:00
de014422bf
Add k8s 1.12.4 checksums ( #3929 )
2018-12-23 01:09:09 -08:00
2f5c0d10bb
Merge pull request #3934 from riverzhang/delete-kubeamd-client
...
Delete unused controlPlane for join node
2018-12-23 12:07:26 +08:00
dd4159fe65
Delete unused controlPlane for join node
...
it is used for join master or use --experimental-control-plane argments
2018-12-23 00:31:01 +08:00
62a8961d8f
Fix installation using CRIO about download images failed
2018-12-23 00:20:39 +08:00
e7b835eb4c
Fix duplicate storage-backend ( #3906 )
2018-12-20 01:01:39 -08:00
fbe9e0ac1a
Fix docker_options definition when docker_version is 'latest' rather than a number ( #3919 )
...
- NOTE: it assumes that the 'latest' version is newer than 17.05
2018-12-20 00:58:21 -08:00
40feb120e4
Merge pull request #3895 from riverzhang/v1.13.1
...
Upgrade kubernetes to v1.13.1
2018-12-20 16:53:31 +08:00
6362211860
Add images downloader to download roles ( #3914 )
...
* Add images downloader to download roles
* Use single jinja2 templates
* add kube_version to templates
2018-12-19 05:17:58 -08:00
925a820b56
Fix skip upgrade first master ( #3915 )
2018-12-19 05:16:14 -08:00
50b884a32d
Fixup line breaks for kubeadm SANs ( #3908 )
2018-12-19 02:47:31 -08:00
435ef14379
Upgrade kubernetes to v1.13.1
2018-12-19 15:13:43 +08:00
3c44ffcf80
set kubespray-defaults kube_api_anonymous_auth to true ( #3909 )
2018-12-18 06:53:58 -08:00
73aee004ac
Enable ClearLinux as a distro in kubespray ( #3855 )
...
Signed-off-by: Ganesh Maharaj Mahalingam <ganesh.mahalingam@intel.com>
2018-12-18 01:39:25 -08:00
30a9149b52
add vars for cilium init container ( #3893 )
...
* add vars for cilium init container
* make yamllint happy
* add var cilium_init in downloads
2018-12-18 00:34:19 -08:00
dc8a8011be
Load nf_conntrack module if nf_conntrack_ipv4 failed ( #3764 )
2018-12-12 05:33:54 -08:00
5e84dabb46
Fix assertion for alone etcd nodes ( #3847 )
2018-12-12 05:21:54 -08:00
3e8f4c1545
Use recommended defaults for dns autoscale ( #3884 )
2018-12-12 05:05:46 -08:00
1a50a1a733
cri-o reset all containers and pods ( #3856 )
...
Signed-off-by: Ganesh Maharaj Mahalingam <ganesh.mahalingam@intel.com>
2018-12-12 01:59:55 -08:00
951e4675c6
Fix error with ipvs on cluster reset task ( #3848 )
2018-12-12 01:43:16 -08:00
c04e8b57b9
Metrics server resizer addon needs to target metrics server deployment ( #3867 )
...
* Metrics server resizer addon should target metrics server deployment
* Target metrics server deployment without version
2018-12-12 00:09:09 -08:00
32d47c836d
Adding is_atomic in centos bootstrap-os ( #3873 )
...
Adding fact is_atomic in bootstrap-centos.yml.
Fix issue: #3538
2018-12-11 02:43:21 -08:00
90a7941d56
Fix disabling swap on ubuntu systems ( #3864 )
2018-12-11 02:42:00 -08:00
3e3ee0aeb1
Add support for running a nodelocal dns cache ( #3861 )
...
* Add support for running a nodelocal dns cache
After encountering dns issues in a cluster I was recently working on I
noticed Kubernetes 1.13 introduced support for running a nodelocal dns
cache.
I believe this can usefull for more people.
73b548db06https://github.com/kubernetes/enhancements/blob/master/keps/sig-network/0030-nodelocal-dns-cache.md
* Add requested changes
* Add additional requested changes + documentation
* Add requested changes after review
* Replace incorrect variable
2018-12-10 17:28:03 -08:00
7b674e0607
Add proxy to /etc/apt/apt.conf for ubuntu ( #3869 )
2018-12-10 02:33:45 -08:00
593a9a262d
Add metrics service to kube-dns ( #3852 )
...
Metrics port is exposed through a service for CoreDNS but not for kube-dns.
2018-12-10 01:45:00 -08:00
456596710e
kube-router manifest DSR adjustments ( #3828 )
2018-12-10 00:40:39 -08:00
1712314fab
Setting host_architecture var ( #3846 )
...
Setting host_architecture to allow etcd upgrade working through: ansible-playbook -b -i inventory/sample/hosts.ini cluster.yml --tags=etcd (on other case host_architecture is missing)
2018-12-07 05:41:30 -08:00
7da9880ff7
Move node-cidr-mask-size to ControllerManagerextraArgs ( #3845 )
2018-12-07 04:23:17 -08:00
d42b37b77d
Added RBAC rights for metrics_server. Fixes #3829 ( #3843 )
2018-12-07 03:11:35 -08:00
1550c05a7a
Add docker 18.09 support ( #3844 )
2018-12-07 02:02:39 -08:00
ea833a4cd7
Fix apiServerCertSANs in kubeadm config file ( #3839 )
2018-12-07 00:11:08 -08:00
2d8e04dca7
Added v1.10.11 v1.11.5 support ( #3837 )
2018-12-07 00:09:51 -08:00
d5ce5874e8
Streamline path to certs dir ( #3836 )
...
* Streamline path to certs dir
* More fixes
* Set path to etcd certs in kubernetes defaults instead
2018-12-06 23:11:53 -08:00
225f765b56
Upgrade kubernetes to v1.13.0 ( #3810 )
...
* Upgrade kubernetes to v1.13.0
* Remove all precense of scheduler.alpha.kubernetes.io/critical-pod in templates
* Fix cert dir
* Use kubespray v2.8 as baseline for gitlab
2018-12-06 12:11:48 -08:00
ddffdb63bf
Remove non-kubeadm deployment ( #3811 )
...
* Remove non-kubeadm deployment
* More cleanup
* More cleanup
* More cleanup
* More cleanup
* Fix gitlab
* Try stop gce first before absent to make the delete process work
* More cleanup
* Fix bug with checking if kubeadm has already run
* Fix bug with checking if kubeadm has already run
* More fixes
* Fix test
* fix
* Fix gitlab checkout untill kubespray 2.8 is on quay
* Fixed
* Add upgrade path from non-kubeadm to kubeadm. Revert ssl path
* Readd secret checking
* Do gitlab checks from v2.7.0 test upgrade path to 2.8.0
* fix typo
* Fix CI jobs to kubeadm again. Fix broken hyperkube path
* Fix gitlab
* Fix rotate tokens
* More fixes
* More fixes
* Fix tokens
2018-12-06 02:33:38 -08:00
0d1be39a97
Reset: Check for kube-ipvs0 presence before remove it ( #3816 )
2018-12-04 19:18:50 -08:00
2c1dd69891
Reset tasks specific to Calico ( #3813 )
2018-12-04 11:37:45 -08:00
145687a48e
Reduce log spam of verbose tasks ( #3806 )
...
Added a loop_control label to a few tasks that flood our logs.
2018-12-04 10:35:44 -08:00
432f8e9841
Fix basic auth tokens for kubeadm deployment. ( #3801 )
...
* Fix basic auth tokens for kubeadm deployment.
* Tokens should be a dependancy on master, not nodes
2018-12-03 10:44:29 -08:00
19792cfae7
Remove iface kube-ipvs0 on reset when kube_proxy_mode is ipvs ( #3802 )
2018-12-03 10:38:51 -08:00
9463b70edd
Cleanup defaults file from kubernetes-apps and add dashboard to download role ( #3800 )
...
* Remove variables defined in download role. Fixes #3799
* Cleanup some more variables
* Fix bad templating
* Minor fix
* Add dashboard to download role. Fixes #3736
2018-12-03 10:29:42 -08:00
b109f52dab
Set configure-cloud-routes=false as default if no network plugin is used ( #3788 )
...
* Set configure-cloud-routes=false as default if no network plugin is used
As configure-cloud-routes default value is `true`, so it need to be set to `false` when not required to avoid error messages like:
"Couldn't reconcile node routes: error listing routes: unable to find route table for AWS cluster"
on, for example, AWS installations that don't use cloud native routing.
* Update kube-controller-manager.manifest.j2
remove extra spaces
2018-12-03 05:04:03 -08:00
e0781483fa
Use download binary instead of copying from the container ( #3786 )
2018-12-03 02:22:17 -08:00
deff6a82fa
ingress-nginx: Upgrade to 0.21.0 ( #3789 )
...
Upstream Changes:
- ingress-nginx 0.21.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.21.0 )
Our Changes:
- Sync templates with upstream changes
- Remove --default-backend-service requirement. Use the flag only for custom default backends
2018-11-30 02:48:50 -08:00
487cfa5e6c
Add options for configuring control plane component extra volumes ( #3779 )
...
This takes care of a few arbitrary use cases that may require custom mounts
inside of apiserver, controller manager, or scheduler.
2018-11-28 23:16:55 -08:00
f2635776cd
Make Calico Felix log level configurable ( #3781 )
2018-11-28 00:55:01 -08:00
b59d5c35bc
Fix kubeadm_controller_extra_args ( #3778 )
2018-11-27 19:30:43 -08:00
8331f7b056
Add support for setting custom node taints ( #3774 )
...
Introduced variable node_taints which can be set in inventory for
specific hosts or in group_vars, which generates --register-with-taints
command line argument for kubelet.
2018-11-27 15:56:49 -08:00
551317f1cd
Fix docker_options jinja syntax ( #3770 )
2018-11-27 07:13:15 -08:00
ddc19f43ba
Add cloud provider config to kubeadm deployments ( #3766 )
2018-11-27 05:03:03 -08:00
993b8e2791
Add support to set tolerations for ingress-nginx ( #3742 )
...
Introduced variable `ingress_nginx_tolerations` to set custom
tolerations for Ingress nginx daemonset, to be able to schedule
ingress-nginx on dedicated nodes with taints.
2018-11-27 03:30:16 -08:00
9a5438ce2f
Fix kubeadm-config: add kube_network_node_prefix ( #3761 )
2018-11-27 00:12:16 -08:00
d33434647b
Fix node selector for contiv etcd proxy ( #3765 )
2018-11-27 00:10:33 -08:00
02169e8f85
Upgrade kubernetes to 1.12.3 ( #3767 )
2018-11-26 23:22:15 -08:00
b07e93e08b
Merge pull request #3754 from MiaoZhou/fix-aws-node-label-error
...
Fix AWS Node Labels Error
2018-11-27 09:09:54 +02:00
bad886ca9b
Update defaults to match k8s 1.12 suggestions ( #3760 )
...
* Update defaults to match k8s 1.12 suggestions
* Test if Netchecker works with node ip instead of localhost
* Update defaults to ipvs and coredns
* Update defaults for kube_apiserver_insecure_port
* Update main.yaml
2018-11-26 15:36:39 -08:00
967a042321
Add flag to deploy container engine manually. ( #3753 )
...
This feature was removed by PR#3061. But change flag manage_docker to deploy_container_engine.
2018-11-26 07:26:40 -08:00
a585318b1a
Fix Sync Container Permission ( #3752 )
...
When `ansible_user` is not root, using `-b` option.
And with `download_run_once` and `download_localhost` set `true`.
Ansible will executes `container_download | upload container images to nodes` task.
It uses rsync to upload images to `/tmp/release/container/`, but the
`container` directory owned by `root`.
2018-11-26 07:00:34 -08:00
b15e685a0b
sysctl related PodSecurityPolicy spec since 1.12 ( #3743 )
2018-11-26 00:13:51 -08:00
885c6cff71
Fix AWS Node Labels Error
...
Now the `kubespray-aws-inventory.py` script always set a node_labels key
to ansible_host.
When AWS instance did not set property labels, it would be an empty
string.
The TASK `Write kubelet config file (kubeadm or non-kubeadm)` will
failed with a msg:
`AnsibleUndefinedVariable: 'unicode object' has no attribute 'items'`.
2018-11-23 17:37:41 +08:00
c5e425b02b
Support Metrics Server as addon ( #3560 ). ( #3563 )
...
* Support Metrics Server as addon (#3560 ).
* Update metrics server v0.3.1.
* Add metrics server test.
* Replace metrics server manifests with kubernetes/cluster/addons's.
* Modify metrics server manifests for kubespray.
* Follow PR#3558 node label node-role.kubernetes.io/master change
* Fix metrics server parameters base_metrics_server_... to metrics_server_...
* Fix too hard corded metrics_server_memory_per_node
* Add configurable insecure tls for metrics-apiservice
* Downloadable addon-resizer and extract parameter as variables
* Remove metrics server version from deployment name
* Metrics Server work when all masters has node role
* Download metrics-server and add-resizer container only on master
* ServiceAccount and ConfigMap is separated and fix application name
* Remove old metrics server clusterrole template
* Fix addon-resizer image specify
* Make InternalIP default for metrics_server_kubelet_preferred_address_types
Make InternalIP default because multiple preferrred address types does not work.
2018-11-23 00:36:21 -08:00
3fa81bb86e
Fix dns-autoscaler nodeAffinity: set to empty ( #3747 )
2018-11-22 05:29:09 -08:00
5daadc022d
Fix: nodeAffinity for coredns-deployment and kubedns-deployment ( #3746 )
2018-11-22 05:27:25 -08:00
0cfcd39d55
Switch to kubeadm deployment mode ( #3461 )
...
* Switch to kubeadm deployment mode
Discuss:https://github.com/kubernetes-incubator/kubespray/issues/3301
* Add non-kubeadm upgrage to kubeadm cluster
2018-11-21 01:35:40 -08:00
edfec26988
cert-manager: Upgrade to 0.5.2 ( #3741 )
...
Upstream Changes:
- cert-manager 0.5.2 (https://github.com/jetstack/cert-manager/releases/tag/v0.5.2 )
Our Changes:
- Templates sync with upstream manifests
2018-11-20 05:13:01 -08:00
daa290100c
Fix helper script to refer to admin.conf as relative path ( #3738 )
2018-11-19 18:28:51 -08:00
b4eb25197b
Merge pull request #3730 from elementyang/pr-docker-options
...
fix modify deprecated --graph flag
2018-11-20 10:23:16 +08:00
ac00d23b80
Skip etcd upgrade steps in kubeadm because it is not used ( #3737 )
2018-11-19 06:29:58 -08:00
9ae2eefb9a
Add resource-container flag to kube-proxy manifest ( #3519 )
...
* Add resource-container flag to kube-proxy manifest
* add resourceContainer: "" to kubeadm kube-proxy configs
2018-11-19 00:39:29 -08:00
8c18f053aa
Fix DNS Autoscaler for coredns_dual deployment ( #3726 )
...
* Fix DNS Autoscaler for coredns_dual deployment
* Fix templating
* Fix templating again
2018-11-19 00:35:53 -08:00
2aefa25448
fix args peer router ips and asns ( #3644 )
2018-11-19 00:34:05 -08:00
6e01c1e377
Fix missing run_once ( #3733 )
2018-11-18 21:39:29 -08:00
0e2d3fb923
Fix OpenSuse set hostname
2018-11-17 20:41:07 +08:00
af5e05d08d
etcd_log_package_levels for /etc/etcd.env ( #3700 )
2018-11-16 23:59:40 -08:00
c83bfc9df6
fix `dns_prevent_single_point_failure` variable ( #3728 )
...
comparison that happens during `TASK [kubernetes-apps/ansible : Kubernetes Apps | Lay Down CoreDNS Template]` where the `dns-autoscaler` template is deployed causes coredns to fail deployment. The error is caused by the variable `dns_prevent_single_point_failure` where an integer is being compared with a string. The resulting error:
```bash
'>' not supported between instances of 'int' and 'str'
```
prevents successful deployment of CoreDNS.
The change makes the comparison happen between integers and allows CoreDNS to succeed.
2018-11-16 23:57:47 -08:00
1ebb670141
fix modify deprecated --graph flag
2018-11-17 14:22:14 +08:00
53bde23a5e
fixed ansible include/import inheritance issue ( #3716 )
2018-11-16 04:33:23 -08:00
1540bc9759
Fix patch type in kubectl patch for hostnameOverride ( #3725 )
2018-11-16 02:35:02 -08:00
618ab93b42
added rpm caching for to docker repo ( #3718 )
2018-11-16 02:33:23 -08:00
3e6d0a50e8
Addition of the missing patch file hostnameOverride-patch.json from PR#3708 ( #3714 )
2018-11-15 10:37:57 -08:00
ff09141a14
Retry kubeadm proxy and secondary master init tasks ( #3715 )
...
Due to suboptimal external loadbalancer configs, the LoadBalancer
might point to a downed kube-apiserver that is not set up yet.
2018-11-15 10:03:23 -08:00
d188876a91
Added feature-gates flags in kubelet.env (for kubeadm) ( #3713 )
2018-11-15 10:01:53 -08:00
6f6274d0d9
Update CoreDNS, KubeDNS and Autoscaler to newest templates ( #3711 )
...
* Update DNS Autoscaler to latest
* Update CoreDNS to latest
* Update KubeDNS to latest
* Add KubeDNS config map
* Fix filename
* Add missing selector to DNS Autoscaler
* Add missing tolerations
2018-11-15 09:52:12 -08:00
17f07e2613
Enable DNS AutoScaler for CoreDNS ( #3707 )
...
* Enable AutoScaler for CoreDNS
* Only use one template for dns autoscaler
* Rename a few variables for replicas and minimum pods
* Rename a few variables for replicas and minimum pods
* Remove replicas to make autoscale work
* Cleanup kubedns-autoscaler as it has been renamed
2018-11-15 01:28:03 -08:00
9ebdf0e3cf
weave: Upgrade to 2.5.0 ( #3660 )
...
* weave: Upgrade to 2.5.0
Upstream Changes:
- weave 2.5.0 (https://github.com/weaveworks/weave/releases/tag/v2.5.0 )
- Adds support for Kubernetes `hostPort` mapping
- Adds support for Kubernetes `ipBlock` NetworkPolicy feature
Our Changes:
- Templates sync with upstream manifests
- Remove legacy nodePort fix
* BC for weave < 2.5.0
2018-11-14 23:38:51 -08:00
730caa3d58
Add PriorityClasses on the last master. ( #3706 )
2018-11-14 15:59:20 -08:00
7deb842030
calico-node: add prometheus annotations ( #3645 )
...
add prometheus annotations to calico-node if
calico_felix_prometheusmetricsenabled is enabled.
This will allow a kubernetes_sd to automaticly find the pods and start
scraping.
2018-11-14 15:01:35 -08:00
931c76e58f
Add DNS entries to node certs ( #3710 )
2018-11-14 13:58:17 -08:00
3fafa583d1
hostnameOverride on a per-node basis ( #3708 )
2018-11-14 09:37:53 -08:00
d8e9b0f675
Netchecker version and namespace ( #3705 )
...
* Revert netchecker image and version
* Create namespace for netchecker
* Remove extra slashes
2018-11-14 09:27:45 -08:00
98d766c68e
Moves apiserver port to bindPort when using controlPlaneEndpoint ( #3449 )
2018-11-14 00:23:30 -08:00
d3ef41b603
Upgrade helm from 2.9 to 2.11 ( #3638 )
2018-11-13 11:24:29 -08:00
633bfa7ebc
Bring static tokens and user back to 1.12 ( #3593 )
2018-11-13 10:25:59 -08:00
afc3f7dce4
Create certificates for each node too ( #3698 )
2018-11-13 07:10:59 -08:00
e8901a2422
Apply linux node selector to coreDNS deployment ( #3688 )
...
* Apply linux node selector to coreDNS deployment
* Remove comment before linux node selector on manifests
* mend
2018-11-13 04:54:15 -08:00
c888de8b38
fix: Coredns tag wasn't updated in #3619 ( #3634 )
2018-11-13 00:30:29 -08:00
fefa1670a6
fix calico_version wrong get ( #3694 )
...
the ':' makes wrong return of calico_version after the calicoctl downloaded && before the cluster is up
2018-11-12 07:35:21 -08:00
3dcb914607
Remove Vault ( #3684 )
...
* Remove Vault
* Remove reference to 'kargo' in the doc
* change check order
2018-11-10 08:51:24 -08:00
b2b421840c
Fix some typos ( #3690 )
...
Signed-off-by: mooncake <xcoder@tenxcloud.com>
2018-11-10 15:53:58 +01:00
5c7eef70b4
Fix kube-router annotations: add conditions ( #3670 )
2018-11-09 08:15:27 -08:00
c2710899ed
Fixes network restart for Ubuntu Bionic Beaver ( #3600 )
...
As Ubuntu Bionic Beaver uses systemd-networkd the step fails
if it tries to restart networking, as it is nonexistent.
2018-11-09 08:13:57 -08:00
e5d07f3a3d
use force umount when reset cluster ( #3672 )
...
reset role hang and can't umount PersistenceVolume (ceph cluster)
2018-11-09 02:30:55 -08:00
9f7c2b08a5
Idempotency fixes to roles/pre-upgrade ( #3497 )
2018-11-07 16:31:29 -08:00
a6932b6b81
Install ipvsadm when kube_proxy_mode is ipvs ( #3548 )
2018-11-07 14:04:11 -08:00
77d705ca9f
cluster_name is to be set in initConfiguration too ( #3661 )
2018-11-07 12:41:11 -08:00
1e22c83f0f
kube_override_hostname must be in kubernetes/master role defaults ( #3647 )
2018-11-07 12:38:19 -08:00
1ad1e80ae3
Checking new CA key presence is not relevant to determine if kubeadm has already run ( #3653 )
2018-11-07 11:46:11 -08:00
dfdf530723
Fix work yum in Install packages requirements for bootstrap ( #3630 )
...
* Fix Failure talking to yum: Cannot find a valid baseurl for repo: base/7/x86_64 if Install packages in CentOS using proxy
* Add proxy to /etc/yum.conf if http_proxy is defined
2018-11-06 22:44:37 -08:00
33f33a7358
Fix docker-storage was not found issue ( #3584 )
2018-11-06 17:50:14 -08:00
113dd2146a
Added some minor changes to the docker orphan clean up process. ( #3657 )
...
* Added changes to clean up orphan containers and reload docker & kubelet directories.
* Added new files for cleaning up orphans and docker & kubelet directories
* Added new lines at the end of these files
* removed the trailing whitespaces from main.yml and clean-up.yml
* Updated as per the review comments
* Updated as per the review comments
* Removed service_facts and package_facts because they are not supported in ansible 2.4.0
* Corrected yaml syntax errors
* Removed the use of json_query filter and utilized selectattr
* Removed trailing spaces
* Changed the default value of docker_clean_up to false
* Added Changes to only include cleanup-docker-orphans.sh
* Reverted back changes done inside handler.
* Removed trailing spaces and made default value of docker_orphan_clean_up as true
* Reverted the default value of docker_orphan_clean_up as false
* Made the docker clean up as drop in
* Made the docker clean up as drop in
* Reverted the value of boolean docker_orphan_clean_up to false
* Converted ExecStop to ExecSTartPost. Removed the live restore check from the orphan script
2018-11-06 16:50:19 -08:00
14c2df0418
Replace raw module with shell to avoid warning ( #3652 )
2018-11-06 11:07:11 -08:00
b316518864
Bump coredns to 1.2.6 ( #3641 )
2018-11-06 05:58:20 -08:00
6c14f35f00
Fix some typos ( #3636 )
...
Signed-off-by: mooncake <xcoder@tenxcloud.com>
2018-11-05 15:22:16 -08:00
bc9e14a762
Adds support for Multus (multiple interfaces) CNI plugin ( #3166 )
...
* Adds support for Multus (multiple interfaces) CNI plugin
Multus is a latin word for "Multi". As the name suggests, it acts as a
Multi plugin in Kubernetes and provides multiple network interface
support in a pod. Multus uses the concept of invoking delegates by
grouping multiple plugins into delegates and invoking them in the
sequential order of the CNI configuration file provided in json format.
* Change CNI version (0.1.0->0.3.1) of Contiv to be compatible with Multus
2018-11-04 01:07:38 -08:00
9c83551a0e
add certificate authority file ( #3433 )
2018-11-02 08:27:53 -07:00
99c139dd5a
Merge pull request #3621 from elementyang/pr-check-docker-packages
...
fix modify the way of the command 'yum remove xxx', e.g. docker-selin…
2018-11-02 18:48:33 +08:00
2ba4e9bda5
Skip most of kubernetes/preinstall role during late DNS config ( #3627 )
...
When using resolvconf_mode host_resolvconf, there is an early DNS
config stage where Kubernetes cluster DNS is not injected for host
DNS intially. Later, the cluster DNS is enabled, but we do not
need to run every task from the kubernetes/preinstall role.
2018-11-01 08:08:50 -07:00
2a00c931e4
Added the missing environment for proxy for get_url ( #3603 )
...
* Added the missing environment for proxy for get_url
* Update upgrade.yml
* Fixed spaces
* Fixed spaces
* Update upgrade.yml
2018-11-01 06:20:57 -07:00
1e6ad5acb6
Fixup #3595 : coredns: Upgrade to v1.2.5 ( #3619 )
...
Upstream Changes:
- coredns v1.2.5 (https://github.com/coredns/coredns/releases/tag/v1.2.5 )
NOTE:
- Switch image repo to https://hub.docker.com/r/coredns/coredns/ (https://github.com/kubernetes-incubator/kubespray/pull/3595#issuecomment-433962973 )
2018-11-01 06:05:17 -07:00
bc74a37696
Calculate etcd client cert serial for appropriate groups ( #3605 )
...
Standalone etcd nodes do not generate node-$hostname certs and do
not need this serial calculated.
2018-11-01 05:50:26 -07:00
5da18854a3
fix modify the way of the command 'yum remove xxx', e.g. docker-selinux and docker-engine-selinux packages
2018-10-31 17:16:35 +08:00
d269e7f46c
cilium v1.3.0 ( #3564 )
2018-10-31 00:42:56 -07:00
8c636f67af
Added support proxy to 'Install pip for bootstrap' ( #3609 )
2018-10-31 00:35:57 -07:00
a84508d6b9
remove deprecated parameters of blockinfile module ( #3581 )
2018-10-30 05:56:58 -07:00
22c234040e
Merge pull request #3608 from xichengliudui/fix181030
...
Correct the wrong word
2018-10-30 20:52:02 +08:00
306c61a968
Remove duplicate words
2018-10-30 04:51:36 -04:00
2149bfbc5b
Revert "CoreDNS v1.2.5 ( #3595 )"
...
This reverts commit 8ba6b601b0
2018-10-29 16:33:52 +01:00
0acb823d96
Distribute node etcd certificates like it's done in kubernetes/secrets ( #3486 )
...
* do it like in kubernetes/secrets
* fix indentation
* processed comments
* missed one, sorry
* trailing space fix
2018-10-29 11:45:32 +01:00
8ba6b601b0
CoreDNS v1.2.5 ( #3595 )
2018-10-29 03:20:03 -07:00
8371beb915
fix bootstrap os_family error in multi-plantform ( #3594 )
2018-10-29 09:37:30 +01:00
b39b32a48c
Fix set coreos hostname failed ( #3599 )
...
need set hostname by kubeadm
2018-10-29 00:59:25 -07:00
dbe99b59a7
Upgrade kubernetes to v1.12.2 ( #3597 )
2018-10-29 00:58:24 -07:00
7abd4eeafd
Merge pull request #3578 from LinuxGit/Louis/fix-typo
...
fix typo
2018-10-24 13:45:31 +08:00
ce2a3a80db
Merge pull request #3577 from fritchie/master
...
Add bin_dir to kubectl version check
2018-10-24 08:33:03 +03:00
79bf74e90f
Offline deployment: PyPi repo ( #3542 )
2018-10-23 22:22:09 -07:00
4f12ba00d1
Fix calico peering with router(s) ( #3547 )
2018-10-23 22:19:50 -07:00
93104d9224
fix typo
2018-10-24 11:39:15 +08:00
b5f4a79365
Add bin_dir to kubectl version check
2018-10-23 15:51:17 -04:00
7e84de2ae1
Purge /root/.kube/config when migrating to kubeadm ( #3566 )
2018-10-23 05:09:11 -07:00
06e1f81801
ingress-nginx: Upgrade to 0.20.0 ( #3565 )
...
Upstream Changes:
- ingress-nginx 0.20.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.20.0 )
Our Changes:
- Sync templates with upstream changes
2018-10-23 05:08:03 -07:00
ccc3f89060
Add kube-router annotations ( #3533 )
2018-10-21 00:35:52 -07:00
8a17de327e
Not necessary run on Nginx proxy all cpu cores ( #3559 )
2018-10-20 13:56:53 -07:00
3b787123e3
Fix tasks to avoid ansible warning about raw module environment ( #3545 )
2018-10-20 07:13:54 -07:00
127969d65f
Align node-role value for kubeadm compatibility ( #3558 )
...
kubeadm sets node label node-role.kubernetes.io/master=''
and this is not configurable. We should use it everywhere.
2018-10-20 07:12:54 -07:00
2a3aa591e0
Download role ( #3553 )
...
* codestyle tests
* Download destination can be different than local_release_dir
2018-10-20 13:56:55 +02:00
4bdd0ce417
Allow kubeadm master untaint to fail ( #3549 )
2018-10-19 00:38:12 -07:00
66fddb2d52
[jjo] upgrade kube-router to v0.2.1 ( #3535 )
...
kube-router v0.2.1 highlights from changelog:
- IPv6 WIP but pretty close to full working functionality
- fully support network policy semantics with addition of support for
ipblock and except
2018-10-18 00:09:42 -07:00
87193fd270
Fix ansible syntax to avoid ansible warnings (one more) ( #3536 )
...
* warning on meta flush_handlers
* avoid rm
* avoid "Module remote_tmp /root/.ansible/tmp did not exist and was created with a mode of 0700, this may cause issues when running as another user. To avoid this, create the remote_tmp dir with the correct permissions manually" warning on subsequent tasks using blockinfile
* is match
2018-10-17 12:27:11 -07:00
5a5cf15c04
Add clear ipvs virtual server table when reset k8s ( #3530 )
2018-10-16 16:29:43 -07:00
4d2b6b71f2
Fix contiv api certificate generation ( #3531 )
2018-10-16 15:34:33 -07:00
7bec169d58
Fix ansible syntax to avoid ansible deprecation warnings ( #3512 )
...
* failed
* version_compare
* succeeded
* skipped
* success
* version_compare becomes version since ansible 2.5
* ansible minimal version updated in doc and spec
* last version_compare
2018-10-16 15:33:30 -07:00
bfd4ccbeaa
Calico: Ability to define global peers ( #3493 )
2018-10-16 15:32:26 -07:00
76fe84fe93
Use imageRepository instead of the unifiedControlPlaneImage ( #3484 )
2018-10-16 07:26:04 -07:00
cf4dd645a7
fix --etcd-servers-overrides invalid ( #3470 )
2018-10-16 07:25:03 -07:00
a5edd0d709
[jjo] add kube-router support ( #3339 )
...
* [jjo] add kube-router support
Fixes cloudnativelabs/kube-router#147 .
* add kube-router as another network_plugin choice
* support most used kube-router flags via
`kube_router_foo` vars as other plugins
* implement replacing kube-proxy (--run-service-proxy=true) via
`kube_proxy_mode: none`, verified in a _non kubeadm_enabled_
install, should also work for recent kubeadm releases via
`skipKubeProxyInstall: true` config
* [jjo] address PR#3339 review from @woopstar
* add busybox image used by kube-router to downloads
* fix busybox download groups key
* rework kubeadm_enabled + kube_router_run_service_proxy
- verify it working ok w/the kubeadm_enabled and
kube_router_run_service_proxy true or false
- introduce `kube_proxy_remove` fact, to decouple logic
from kube_proxy_mode (which affects kubeadm configmap
settings, thus no-good to ab-use it to 'none')
* improve kube-router.md re: kubeadm_enabled and kube_router_run_service_proxy
* address @woopstar latest review
* add inventory/sample/group_vars/k8s-cluster/k8s-net-kube-router.yml
* fix kube_router_run_service_proxy conditional for kube-proxy removal
* fix kube_proxy_remove fact (w/ |bool), add some needed kube-proxy tags on my and existing changes
* update kube-router tolerations for 1.12 compatibility
* add PriorityClass to kube-router DaemonSet
2018-10-16 07:15:05 -07:00
c33e08c3fa
show FQDN first in /etc/hosts ( closes : #3521 ) ( #3522 )
...
The hosts(5) manpage clearly states that the first entry is the
"canonical name", or FQDN (Fully-Qualified Domain Name):
IP_address canonical_hostname [aliases...]
By using the alias as a first entry, `hostname -f` does not return the
correct domain which breaks all sorts of unrelated functionality (it
has impact over email server configuration, for example).
2018-10-16 03:55:55 -07:00
9b773185c3
Merge pull request #3184 from oracle/new_oci_controls
...
Add new OCI cloud controls
2018-10-16 11:29:13 +03:00
b4e2b85745
Replace shell with command in order to allow the task to fail when openssl x509 does return zero ( #3516 )
2018-10-15 23:48:12 -07:00
fcd8d850dc
Fix ansible syntax to avoid ansible warnings (again) ( #3509 )
...
* Fix ansible syntax to avoid ansible warnings (again)
* warn: false on tar -cfz
* wrong placement of warn:false
2018-10-15 23:47:04 -07:00
6549b8f8ae
Ability to define the asNumber on a per node basis when route reflectors are not used in order to peer directly with routers ( #3492 )
2018-10-15 23:44:49 -07:00
1ea7ec3189
Fix nginx_config_dir value not defined when use reset.yml ( #3524 )
2018-10-15 01:46:55 -07:00
4077934519
[jjo] add DIND support to contrib/ ( #3468 )
...
* [jjo] add DIND support to contrib/
- add contrib/dind with ansible playbook to
create "node" containers, and setup them to mimic
host nodes as much as possible (using Ubuntu images),
see contrib/dind/README.md
- nodes' /etc/hosts editing via `blockinfile` and
`lineinfile` need `unsafe_writes: yes` because /etc/hosts
are mounted by docker, and thus can't be handled atomically
(modify copy + rename)
* dind-host role: set node container hostname on creation
* add "Resulting deployment" section with some CLI outputs
* typo
* selectable node_distro: debian, ubuntu
* some fixes for node_distro: ubuntu
* cpu optimization: add early `pkill -STOP agetty`
* typo
* add centos dind support ;)
* add kubespray-dind.yaml, support fedora
- add kubespray-dind.yaml (former custom.yaml at README.md)
- rework README.md as per above
- use some YAML power to share distros' commonality
- add fedora support
* create unique /etc/machine-id and other updates
- create unique /etc/machine-id in each docker node,
used as seed for e.g. weave mac addresses
- with above, now netchecker 100% passes WoHooOO!
🎉 🎉 🎉
- updated README.md output from (1.12.1, verified
netcheck)
* minor typos
* fix centos node creation, needs earlier udevadm removal to avoid flaky facts, also verified netcheck Ok \o/
* add Q&D test-distros.sh, back to manual /etc/machine-id hack
* run-test-distros.sh cosmetics and minor fixes
* run-test-distros.sh: $rc fix and minor formatting changes
* run-test-distros.sh output cosmetics
2018-10-15 09:44:02 +02:00
fd422a0646
Add Priority class for tiller and fix tiller override. ( #3494 )
...
* Added Priority class to tiller installation and also fixed tiller override implementation.
* Added changes to handle priority classes separately in tiller, instead of using the variable tiller_override
2018-10-12 11:46:39 -07:00
d7bb4d954a
Handling docker clean up during docker upgrade and docker config changes. ( #3321 )
...
* Added changes to clean up orphan containers and reload docker & kubelet directories.
* Added new files for cleaning up orphans and docker & kubelet directories
* Added new lines at the end of these files
* removed the trailing whitespaces from main.yml and clean-up.yml
* Updated as per the review comments
* Updated as per the review comments
* Removed service_facts and package_facts because they are not supported in ansible 2.4.0
* Corrected yaml syntax errors
* Removed the use of json_query filter and utilized selectattr
* Removed trailing spaces
* Changed the default value of docker_clean_up to false
* Added Changes to only include cleanup-docker-orphans.sh
* Reverted back changes done inside handler.
* Removed trailing spaces and made default value of docker_orphan_clean_up as true
* Reverted the default value of docker_orphan_clean_up as false
* Made the docker clean up as drop in
* Made the docker clean up as drop in
* Reverted the value of boolean docker_orphan_clean_up to false
2018-10-12 10:29:51 -07:00
36322901a6
fix kube-controller-manager config with openstack-cacert ( #3435 )
2018-10-12 06:39:58 -07:00
3ce933051a
calico CALICO_IPV4POOL_IPIP overriding variable ( #3507 )
2018-10-12 00:09:36 -07:00
1911fe5ca8
fix nginx proxy configuration conflicts ( #3489 )
...
* Allow configuration of nginx proxy config path
* Fix the internal nginx configuration location
Signed-off-by: Johann Queuniet <contact@lordran.net>
2018-10-11 06:33:18 -07:00
2117e8167d
Update pre-install verify settings with network checks and etc. ( #3504 )
...
* Update pre-install verify settings with network checks and etc.
* Remove upstream dns server check. It's bogus
2018-10-11 06:28:21 -07:00
dd5327ef9e
Fix ansible syntax to avoid ansible warnings ( #3499 )
2018-10-11 00:45:00 -07:00
cdce8c81da
Update CoreDNS templates to newest version and fix kubedns-autoscaler ( #3483 )
...
* Update CoreDNS templates to newest version
* Add watch to ClusterRole. Fixes #3460
2018-10-11 00:12:58 -07:00
3f786542d3
Automatically infer bootstrap_os ( #3498 )
...
* Automatically infer bootstrap_os
* Rename bootstrap os to os_family
2018-10-10 23:32:10 -07:00
b35a9fcb04
#3475 - make dnsmasq to send queries to all servers in upstream. Make… ( #3481 )
...
* #3475 - make dnsmasq to send queries to all servers in upstream. Make dnsmasq config file customizable.
* Code style fixes. Return current behaviour for dnsmasq strict-order flag.
2018-10-09 23:29:06 -07:00
c27a91f7f0
Split deploy steps in separate playbooks: part1 ( #3451 )
...
* Fix bootstrap_os/ubuntu idempotency
* Update bastion role
* move container_engine in sub-roles
* requires ansible 2.5
* ubuntu18 as first CI job
2018-10-09 19:14:33 -07:00
2ab2f3a0a3
Ability to define SSL certificates duration and SSL key size ( #3482 )
...
* Ability to specify ssl certificate duration and ssl key size - etcd/secrets
* Ability to specify ssl certificate duration and ssl key size - helm/contiv + fix contiv missing copy certs generation script
2018-10-09 04:43:30 -07:00
c825f4d180
Untaint master when it has node role ( #3466 )
2018-10-09 01:40:43 -07:00
7e195b06a6
Fix DNS loop when resolvconf_mode is set to host_resolvconf ( #3390 )
...
* Fix DNS loop when resolvconf_mode is set to host_resolvconf
* Make sure upstream_dns_servers is defined when using resolvconf_mode == 'host_resolvconf'
* Only set upstream dns servers on KubeDNS and CoreDNS if they are defined
* Only set upstream dns servers on KubeDNS and CoreDNS if they are defined
2018-10-08 07:08:51 -07:00
30132d8c35
Removed hostname truncation. ( #3409 )
2018-10-08 05:14:01 -07:00
4b7d59224d
Fix tag based deploy of apps by skipping kubeadm dns tasks ( #3462 )
2018-10-08 01:22:57 -07:00
4f51607145
Upgrade kubernetes to v1.12.1 ( #3463 )
...
https://github.com/kubernetes/kubernetes/issues/69214
2018-10-07 13:33:13 -07:00
6602760a48
Support multiple local volume provisioner StorageClasses ( #3450 )
...
- Local Volume StorageClass configuration is now manged by `local_volume_provisioner_storage_classes`, a list of maps that specifies local storage classes with `name` `host_dir` and `mount_dir` keys per entry
- Tasks and templates updated to loop through local volume storage classes
- Previous defaults for path/class names were not changed
- Fixed an issue where a `kubernetes/preinstall` was creating directories inconsistently with the `kubernetes-apps/external_provisioner/local_volume_provisioner` task
2018-10-05 05:52:25 -07:00
9232261665
serviceaccounts is required in resources list of cluster role ( #3455 )
2018-10-04 11:32:37 -07:00
af97febb04
Upgrade kubernetes to v1.12.0 ( #3410 )
...
* Upgrade kubernetes to v1.12.0
Use kubeadm v1alpha3 config
* Upgrade coredns and etcd
* Upgrage docker to 18.06
2018-10-04 02:05:55 -07:00
05dabb7e7b
Fix Bionic networking restart error #3430 ( #3431 )
2018-10-02 03:10:52 -07:00
66e304c41b
Fixed Ubuntu 18.04's docker version( fixes #3424 ). ( #3425 )
2018-10-01 04:26:51 -07:00
192f7967c9
Remove excess space ( #3421 )
2018-10-01 00:09:45 -07:00
3cfbc1a79a
Add Pod IP to Flannel manifest. ( #3379 )
2018-10-01 00:06:13 -07:00
d9f495d391
Fix the dic iteration method in the kubelet template ( #3415 )
...
* Fix the jinja expression for openstack_tenant_id
OS_PROJECT_ID is obsolete in keystone v3 and jinja expression
doesn't set openstack_tenant_id as expected because of
undefined env var. Fixed the expression.
* Fix the dic iteration method in the kubelet template
Kubelet template rendering errors when additional Node lables are
added and using Python3. Update the method to be compatible to both
python2/3
Node lables doesn't work
2018-09-30 05:10:12 -07:00
71f6c018ce
fix typo: remove repeated words(is) ( #3419 )
2018-09-29 21:04:43 -07:00
0401f4afff
remove the redundant space ( #3420 )
2018-09-29 21:03:27 -07:00
b4989b5a2a
Fix netcheck agent/server image variable names ( #3417 )
...
According to the documentation, container images are described
by vars like `foo_image_repo` and `foo_image_tag`.
The variables netcheck_{agent,server}_{img_repo,tag} do not
follow that convention.
2018-09-29 20:44:01 -07:00
0232e755f3
Upgrade kubedns and kubednsautoscaler ( #3407 )
2018-09-28 01:20:08 -07:00
0536125f75
Better fix for openstack cinder zone issue using ignore-volume-az option ( #2980 )
...
* Better fix for openstack cinder zone issue[1][2]
using ignore-volume-az option[3].
[1]: https://github.com/kubernetes-incubator/kubespray/pull/2155
[2]: https://github.com/kubernetes-incubator/kubespray/pull/2346
[3]: https://github.com/kubernetes/kubernetes/pull/53523
* Remove kube-scheduler-policy.yaml
2018-09-27 22:15:47 -07:00
53d87e53c5
All CNIs: support ANY toleration. ( #3391 )
...
Before, Nodes tainted with NoExecute policy did not have calico/weave Pod.
Network pod should run on all nodes whatever happens on a specific node.
Also always set the Pods to be critical.
Also remove deprecated scheduler.alpha.kubernetes.io/tolerations annotations.
2018-09-27 05:28:54 -07:00
232020ef96
skip-exists is an flag for create command, not for calicoctl ( #3401 )
2018-09-27 04:57:02 -07:00
8b8e534769
remove the redundant space ( #3400 )
2018-09-27 03:32:26 -07:00
6b71229d3f
Resolve issues associated with Calico deployment in policy-only mode. ( #3392 )
2018-09-27 03:31:14 -07:00
145e5c8943
use copy and slurp module ( #3313 )
2018-09-27 02:12:02 -07:00
dced082e5f
fixes roles/docker/vars/ubuntu-bionic.yml points to xenial ( #3395 )
...
* fixes : #3387
2018-09-27 01:08:39 -07:00
408faac3c9
Pip is required for vault #3376 ( #3378 )
...
* Change execution order for pip
* Remove spaces
2018-09-26 00:28:54 -07:00
cd4a606cb1
UI is required for vault #3376 ( #3377 )
2018-09-26 00:27:38 -07:00
36898a2c39
Adding pod priority for all the components. ( #3361 )
...
* Changes to assign pod priority to kube components.
* Removed the boolean flag pod_priority_assignment
* Created new priorityclass k8s-cluster-critical
* Created new priorityclass k8s-cluster-critical
* Fixed the trailing spaces
* Fixed the trailing spaces
* Added kube version check while creating Priority Class k8s-cluster-critical
* Moved k8s-cluster-critical.yml
* Moved k8s-cluster-critical.yml to kube_config_dir
2018-09-25 07:50:22 -07:00
d6ebe8c3e7
Sync manifests with kubeadm ( #3383 )
2018-09-24 02:17:18 -07:00
02de35cfc3
Fix some typos ( #3382 )
...
Signed-off-by: Rui Cao <ruicao@alauda.io>
2018-09-23 06:33:17 -07:00
2197330727
Add check that kube-master, kube-node and etcd groups are not empty.
2018-09-21 17:02:53 +03:00
8f85ea89fa
Added `download_validate_certs` option which allows to disables SSL validation for file downloads
2018-09-21 11:51:17 +02:00
51a5f54fc4
Merge pull request #3335 from AtzeDeVries/fix/ubuntu-xenial-resolv-conf
...
Fix/ubuntu xenial resolv conf
2018-09-20 23:16:11 -07:00
a1d6078d46
remove /var/lib/cni directory
2018-09-20 15:36:25 -04:00
7fd87b95cf
Merge pull request #3368 from woopstar/fedora_fix_1
...
Fix CI issue (Fedora task introduce new lookup plugin)
2018-09-20 08:16:22 -07:00
e3d562bcdb
Support for AWS cloud-config ( #1465 )
...
* Support for AWS cloud-config
* Update docs
* Fix version incompatibilities
* Do not use shorthand `default`
* Add new cloud config variable, roleArn
2018-09-20 16:31:28 +02:00
442e6e55b6
Fix CI issue with Fedora
2018-09-20 15:45:15 +02:00
4d1055f5d5
Remove some useless files
2018-09-20 20:24:06 +08:00
68acdd71f1
Merge pull request #3172 from Atoms/additional-proxy
...
Add additional no proxy parameter for more customization
2018-09-20 03:26:29 -07:00
62b1ea2b48
Merge pull request #3360 from gabibbo97/master
...
Support Fedora 28
2018-09-20 02:22:53 -07:00
09b67c1ad5
Remove EFK from Kubespray
2018-09-20 10:44:17 +02:00
8512cc5cca
Merge pull request #3280 from wozniakjan/openstack/openstack_cacert
...
Check `openstack_cacert` for empty string
2018-09-19 22:42:37 -07:00
3a65c66a3e
Merge pull request #3355 from wwt/rr-v3
...
Uses etcdv3 for calico 3 rr_v4 resources
2018-09-19 22:35:02 -07:00
492b3e525d
Support Fedora 28
2018-09-19 20:11:07 +02:00
639010b3df
Uses environment vars for etcd cert paths
2018-09-19 12:32:16 -05:00
34d1f0bff2
Merge pull request #3351 from woopstar/kubeadm_token_basic_auth_fix
...
Mount basic auth or token auth dirs to support it on kubeadm deployments
2018-09-19 07:50:43 -07:00
a330b281e8
Check `openstack_cacert` for empty string
2018-09-19 16:37:24 +02:00
6f9f80acee
Uses etcdv3 for calico 3 rr_v4 resources
2018-09-19 09:22:52 -05:00
a8a62afd74
Merge pull request #3304 from kubernetes-incubator/gpu2
...
Add support for GPU accelerator
2018-09-19 07:12:32 -07:00
7fa682bdd5
Merge pull request #3342 from okamototk/fix_path_for_kubeadm_join
...
Add kubelet path for kubeadm.
2018-09-19 06:17:47 -07:00
34019291b8
Merge pull request #3143 from jbcraig/add_os_trust_id
...
add support for openstack trust to cloud provider config
2018-09-19 16:07:03 +03:00
08179018d4
Merge branch 'master' into gpu2
2018-09-19 15:02:51 +02:00
b796226869
Merge pull request #3325 from firaxis/configurable_felix_healthhost
...
Make Felix healthhost configurable
2018-09-19 06:02:29 -07:00
39c567de47
Merge pull request #3307 from kaarolch/upgrade_docs
...
Calico version verification before cluster upgrade begin.
2018-09-19 05:15:55 -07:00
da4cc74498
Merge pull request #3340 from wwt/master
...
Fixes Calico 3.x BGPPeer resources
2018-09-19 04:43:35 -07:00
cac485756b
Mount basic auth or token auth dirs to support it on kubeadm deployments
2018-09-19 13:21:58 +02:00
c058e7a5ec
Remove audit again from Kubeadm 1.10.x. Write mounts not supported untill 1.11
2018-09-19 13:15:14 +02:00
e0ddabc463
Add support for kubelet_node_custom_flags
2018-09-19 12:58:06 +02:00
940d2fdbb1
Add missing enforce-node-allocatable to kubelet for kubeadm deployments
2018-09-19 11:54:34 +02:00
1c999b2a61
Move kube_kubeadm_controller_extra_args to controllerManagerExtraArgs section. It was placed in controllerManagerExtraVolumes
2018-09-19 11:24:19 +02:00
8e37841a2e
Add audit support to v1alpha1 of Kubeadm
2018-09-19 11:01:30 +02:00
8d1c0c469c
Added missing enable-aggregator-routing option
2018-09-19 10:58:46 +02:00
26d7380c2e
Sync manifests from non-kubeadm to kubeadm deploy
2018-09-19 10:01:45 +02:00
95703fb6f2
Add kubelet path for kubeadm.
2018-09-19 03:04:03 +00:00
0121bce9e5
Instead of doc update, change the verify step
2018-09-18 22:13:15 +02:00
fb1678d425
Ensures BGPPeer resource names are unique
2018-09-18 10:48:30 -05:00
884053aaa7
Make Felix healthhost configurable
2018-09-18 15:48:29 +03:00
3d27007750
Merge pull request #3329 from riverzhang/checksum
...
Keep list of k8s checksums for hyperkube and kubeadm
2018-09-18 02:42:59 -07:00
4cbd97667d
Merge remote-tracking branch 'upstream/master' into fix/ubuntu-xenial-resolv-conf
2018-09-18 09:51:46 +02:00
2730c90dcd
Merge pull request #3320 from riverzhang/kubelet
...
Support dynamic kubelet config
2018-09-18 00:16:04 -07:00
09a1bcb30b
Keep list of k8s checksums for hyperkube and kubeadm
...
Keep a list of checksums for kubeadm and hyperkube downloads.
Makes it easier to switch version
2018-09-18 15:05:17 +08:00
77e08ba204
Support dynamic kubelet config
...
https://kubernetes.io/blog/2018/07/11/dynamic-kubelet-configuration/
2018-09-18 08:44:39 +08:00
d3adf09bde
Fixes BGPPeer resource for calico >= 3.0.0
2018-09-17 15:22:28 -05:00
afa2a5f1c4
enhanced reset for contiv
2018-09-17 16:46:19 +02:00
bcaf2f9ea3
contiv 1.2.1
2018-09-17 16:45:05 +02:00
d16b562b18
Merge pull request #3316 from mattymo/tiller_override_fix
...
Fix tiller override command
2018-09-17 05:12:05 -07:00
0538f8a70d
Merge pull request #3290 from riverzhang/fix-upgrade
...
Fix upgrade k8s
2018-09-17 04:26:47 -07:00
1a426ada3c
Merge pull request #3324 from alvistack/cert-manager-v0.5.0
...
cert-manager: Upgrade to 0.5.0
2018-09-17 04:20:56 -07:00
a544e54578
weave: Upgrade to 2.4.1
...
Upstream Changes:
- weave 2.4.1 (https://github.com/weaveworks/weave/releases/tag/v2.4.1 )
Our Changes:
- Templates sync with upstream manifests
2018-09-17 17:09:19 +08:00
f34a6699ef
cert-manager: Upgrade to 0.5.0
...
Upstream Changes:
- cert-manager 0.5.0 (https://github.com/jetstack/cert-manager/releases/tag/v0.5.0 )
Our Changes:
- Templates sync with upstream manifests
2018-09-17 16:58:04 +08:00
482857611a
added extra var for ubuntu 18 netplan resolv
2018-09-17 09:01:55 +02:00
8d8bbc294a
fix for resolvconf in ubuntu18
2018-09-17 09:00:55 +02:00
7f91f6e034
Merge pull request #3287 from Kami-no/coredns_metrics
...
Monitor CoreDNS over svc
2018-09-16 23:39:59 -07:00
84c4c7dc82
Use synchronize module
2018-09-16 20:36:44 +08:00
1d4aa7abcc
Fix upgrade k8s
2018-09-16 10:35:12 +08:00
fe35c32c62
Fix tiller override command
2018-09-15 16:35:19 +03:00
aa0da221e9
Merge pull request #2880 from hfinucane/rh7-paths
...
Fix #2261 by supporting Red Hat's limited PATH
2018-09-15 19:27:22 +08:00
f1403493df
Merge pull request #3296 from rabi/fix_cilium_crio
...
Add volume and volumeMount for crio-socket
2018-09-15 03:23:02 -07:00
36901d8394
Merge pull request #3309 from ant31/fix_download_file
...
Fix download file
2018-09-15 03:18:23 -07:00
e6a2e34dd1
Merge pull request #3315 from riverzhang/upgrade-kubedns
...
Upgrade kubedns to 1.14.11
2018-09-15 02:08:20 -07:00
934d92f09c
Upgrade kubedns to 1.14.11
2018-09-15 15:22:38 +08:00
5e59541faa
Merge pull request #3258 from okamototk/fix_kubectl_path
...
absolute path for kubectl.
2018-09-13 14:38:20 -07:00
d94b7fd57c
Don't download binary if docker is selected
2018-09-13 22:06:51 +02:00
9964ba77ee
Merge pull request #3305 from mattymo/fixup_upgrade
...
Fixes for upgrade mode
2018-09-13 12:57:23 -07:00
153661cc47
Merge pull request #3284 from mattymo/more_calico_legacy
...
Put back legacy support for calico ippools and bgp settings
2018-09-13 09:25:26 -07:00
8becd905b8
Fixes for upgrade mode
...
Uses correct flag for draining with a pod selector
Verifies minimum kubectl version for compatibility
2018-09-13 18:42:01 +03:00
c83350e597
refactor to base on calico_version
2018-09-13 18:05:10 +03:00
ffbe9e7fd8
Merge pull request #1973 from guenhter/rsync-cmd-to-synchronize
...
Replace the raw rsync command with the synchronize module
2018-09-13 03:12:05 -07:00
91b02c057e
Add support for GPU accelerator
2018-09-13 11:53:11 +02:00
55d76ea3d8
Update install.yml
2018-09-13 12:04:53 +03:00
1df0b67ec1
Add volume and volumeMount for crio-socket
...
This commit fixes #3295
2018-09-13 14:34:44 +05:30
218e527363
Merge pull request #3243 from mirwan/helm_binary_should_be_installed_on_all_masters
...
Install Helm client on all masters
2018-09-13 00:39:36 -07:00
27fc391f71
Merge pull request #3291 from mirwan/remove_insecure-bind-address_when_insecure_port_is_0
...
Remove --insecure-bind-address when insecure-port=0
2018-09-13 00:34:39 -07:00
1091e82327
Update install.yml
2018-09-12 22:15:46 +03:00
a5cc8537f9
Merge pull request #3283 from mattymo/more_upgrade_options
...
Extra options for upgrade mode
2018-09-12 10:50:33 -07:00
d692737a13
Extra options for upgrade mode
...
Optionally do not drain nodes by setting drain_nodes to false
Optionally set a labelselector to target which pods should be drained.
2018-09-12 17:05:41 +03:00
cc79125d3e
Update install.yml
2018-09-12 17:03:55 +03:00
a801e02cea
Merge pull request #3261 from mattymo/etcd_ssl_dir_perms
...
Ensure etcd file permissions are correct when using vault
2018-09-12 01:10:26 -07:00
29c7775ea1
Monitor CoreDNS over svc
2018-09-12 10:24:15 +03:00
cbf099de4d
Merge pull request #3285 from mirwan/fix_netchecker_sa_when_psp
...
Fix wrong sa name in crb when psp is enabled
2018-09-12 00:20:38 -07:00
c8630f46fd
Merge pull request #3286 from fritchie/master
...
Change update strategy to RollingUpdate
2018-09-12 00:18:05 -07:00
af74d85b7d
Remove --insecure-bind-address when insecure-port=0
2018-09-12 08:22:11 +02:00
97e5f28537
Revert "Remove insecure-port and insecure-bind-address when possible"
2018-09-11 17:42:12 -05:00
f42e0a4711
Change update strategy to RollingUpdate.
...
When enable_network_policy is set to True with Calico 3 kubectl
apply fails with the error:
The Deployment "calico-kube-controllers" is invalid:
spec.strategy.rollingUpdate: Forbidden: may not be specified when
strategy type is 'Recreate'
See
https://github.com/kubernetes-incubator/kubespray/issues/3267
Changing the update strategy to RollingUpdate avoids this error.
2018-09-11 12:03:42 -04:00
d91f9e14e6
Put back legacy support for calico ippools and bgp settings
2018-09-11 16:40:11 +03:00
e24b1220a0
Fix wrong sa name in crb when psp is enabled
2018-09-11 15:04:55 +02:00
0a720b35af
Merge pull request #3270 from riverzhang/fix-registry
...
Add insecure_registry config to docker options
2018-09-10 04:28:52 -07:00
f557b54489
Add `docker_` to values
2018-09-10 18:05:49 +08:00
04852ad753
Install Helm on all masters
2018-09-10 11:39:26 +02:00
aaa9a4efac
Ensure vault file permissions are correct
2018-09-10 12:04:04 +03:00
0140cf71c8
Upgrade kubernetes to v1.11.3
2018-09-10 15:52:49 +08:00
51794e4c13
Deploying k8s clusters in a private environment
2018-09-09 11:06:00 +08:00
b249b06036
Move docker options to kubespray-defaults
2018-09-09 10:21:18 +08:00
20caaf9d1f
Delete gitignore file
2018-09-09 02:09:02 +08:00
c41ca22a78
Planning the configuration of docker parameters
2018-09-09 00:59:59 +08:00
b891d77679
add option to secure helm tiller with tls
2018-09-07 10:29:31 -05:00
5c2e9a5376
Merge pull request #3252 from mirwan/remove_insecure-bind-address_when_insecure-bind-port_is_0
...
Remove insecure-port and insecure-bind-address when possible
2018-09-07 07:41:21 -07:00
b3a689658b
Merge pull request #3255 from mlushpenko/calico_check
...
Fix calico health checks
2018-09-07 07:39:20 -07:00
d182d4f979
absolute path for kubectl.
2018-09-07 09:33:43 -04:00
9c49e071d3
Merge pull request #3260 from riverzhang/discoverytimeout
...
Add discovery_timeout to join configuration
2018-09-07 05:20:19 -07:00
0f63924ed4
Add discovery_timeout to join configuration
...
https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha2#JoinConfiguration
2018-09-07 16:28:53 +08:00
ea2c9d8f57
Fix yaml checks
2018-09-06 16:26:57 +02:00
f958b32c83
Fix calico health checks
2018-09-06 15:57:21 +02:00
2faa8f1e37
Merge pull request #3254 from mattymo/calico_upgrade_tweaks
...
Fix backward compatibility with calico 2.6
2018-09-06 06:20:52 -07:00
ab462d92b8
Merge pull request #3249 from mattymo/fix_missing_var_kube_proxy_nodeport
...
Add missing variable kube_proxy_nodeport_addresses
2018-09-06 06:18:23 -07:00
27905bbddf
Merge pull request #3250 from mattymo/openstack_cacert
...
Fix openstack cacert task
2018-09-06 06:15:59 -07:00
dc3e317d20
Fix backward compatibility with calico 2.6
2018-09-06 15:54:20 +03:00
a5509fc2ce
Remove insecure-port and insecure-bind-address when possible
2018-09-06 13:46:09 +02:00
b614a3504b
Fix openstack cacert task
2018-09-06 14:06:06 +03:00
cd8e469b9c
Add missing variable kube_proxy_nodeport_addresses
2018-09-06 13:36:17 +03:00
991b3dbe54
put back endif in kubelet rkt template
2018-09-06 13:21:22 +03:00
f5251f7d27
Merge pull request #3247 from mattymo/kubelet_rkt_Fix
...
remove broken endifs in kubelet rkt mode
2018-09-06 02:49:35 -07:00
faedfb6307
remove broken endifs in kubelet rkt mode
2018-09-06 11:59:25 +03:00
1940495817
Merge pull request #3246 from riverzhang/pause
...
Upgrade pause image to 3.1
2018-09-06 00:48:05 -07:00
b979fb0116
Upgrade pause image to 3.1
2018-09-06 14:15:51 +08:00
7e140e5f3c
Merge pull request #3122 from jbcraig/fix_cacert_feature
...
resolve issues with new cacert feature
2018-09-05 23:31:53 +02:00
435e098751
Fix feature-gates
2018-09-05 22:55:51 +08:00
055e80f846
Merge pull request #3244 from ant31/calico31
...
Reverts calico update to 3.2.0, fixes #3223
2018-09-05 11:45:22 +02:00
15363530ae
Reverts calico update to 3.2.0, fixes #3223
2018-09-05 11:44:32 +02:00
83838b7fbc
Add new OCI cloud controls
2018-09-04 14:03:17 -04:00
6569180654
remove capitalize filter
2018-09-04 14:56:53 +02:00
ad33f71ac2
Merge pull request #3228 from mirwan/credentials_dir
...
Introducing credentials_dir variable in order to be able to override it
2018-09-04 04:35:11 -07:00
50c6a98b15
Merge pull request #3229 from mirwan/docker_1806_ubuntu_under_bionic
...
Docker 18.06 for ubuntu versions before bionic
2018-09-03 11:37:13 -07:00
a644b7c267
Introducing credentials_dir in order to be able to override it
2018-09-03 18:04:50 +02:00
8c9588ab59
Add additional no proxy parameter for more customization
2018-09-03 17:09:58 +03:00
c0ce875743
change edge to 18.06 for ubuntu
2018-09-03 14:11:25 +02:00
a22d28e1c1
docker 18.06 for ubuntu version before bionic
2018-09-03 14:10:51 +02:00
c32145057d
Merge pull request #3178 from gitphill/patch-1
...
Add azure-container-registry-config for Azure
2018-09-03 05:06:01 -07:00
fbb98b0070
Fix the jinja expression for openstack_tenant_id ( #3151 )
...
OS_PROJECT_ID is obsolete in keystone v3 and jinja expression
doesn't set openstack_tenant_id as expected because of
undefined env var. Fixed the expression.
2018-09-03 14:59:49 +03:00
db11394711
Merge pull request #3200 from pablodav/feature/k8s_win_v1.11
...
Required support to start working on windows node support
2018-09-03 04:51:23 -07:00
fd57fde075
Always run helm init to allow for settings changes
2018-09-03 11:16:01 +03:00
9fc8f9a07d
ingress-nginx: Upgrade to 0.19.0
...
Upstream Changes:
- ingress-nginx 0.19.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.19.0 )
Our Changes:
- Sync templates with upstream changes
2018-09-03 08:00:08 +08:00
7cbe3c2171
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
...
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
remove empty when line
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
force kubeadm upgrade due to failure without --force flag
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
added nodeSelector to have compatibility with hybrid cluster with win nodes, also fix for download with missing container type
fixes in syntax and LF for newline in files
fix on yamllint check
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
some cleanup for innecesary lines
remove conditions for nodeselector
2018-09-02 12:47:06 -03:00
a47c9239e8
Merge pull request #3221 from alvistack/cephfs-provisioner-v2.1.0-k8s1.11
...
cephfs-provisioner: Upgrade to v2.1.0-k8s1.11
2018-09-02 04:16:17 -07:00
635ca1a0b8
Merge pull request #3220 from alvistack/coredns-1.2.2
...
coredns: Upgrade to v1.2.2
2018-09-02 04:13:53 -07:00
32fdfbcd5a
cephfs-provisioner: Upgrade to v2.1.0-k8s1.11
...
Upstream Changes:
- cephfs-provisioner v2.1.0-k8s1.11 (https://github.com/kubernetes-incubator/external-storage/releases/tag/cephfs-provisioner-v2.1.0-k8s1.11 )
Our Changes:
- Sync clusterrole and role with upstream changes
2018-09-02 11:51:28 +08:00
df8b27c03c
coredns: Upgrade to v1.2.2
...
Upstream Changes:
- coredns v1.2.2 (https://github.com/coredns/coredns/releases/tag/v1.2.2 )
NOTE:
- coredns image for 1.2.0 and 1.2.1 had been removed from https://console.cloud.google.com/gcr/images/google-containers/GLOBAL/coredns
2018-09-02 11:37:21 +08:00
8e95974930
Fix ports for kubeadm client and master configs for ha setups
2018-09-01 18:02:52 +02:00
13dda0e36e
Merge pull request #3207 from mirwan/fix_3206
...
Fix target hosts generation when /etc/hosts does not contain 127.0.0.1 or ::1
2018-08-31 17:50:56 -07:00
6e7100f283
Merge pull request #3208 from mirwan/etcd_ha_doc_n_cleaning
...
Add documentation about having HA for etcd
2018-08-31 08:06:05 -07:00
059cd17b47
Fix target hosts generation when /etc/hosts does not contain 127.0.0.1 or ::1
2018-08-31 16:33:18 +02:00
fb7b3305dc
Merge pull request #3209 from mirwan/use_etcd_events_access_address
...
etcd_events_access_address should be used for peer_url and client_url
2018-08-31 07:26:25 -07:00
81c3f2c971
etcd_events_access_address should be used for peer_url and client_url
2018-08-31 15:03:07 +02:00
82a28d6bb3
Add documentation about having HA for etcd
2018-08-31 14:40:25 +02:00
22f9114630
update calico to 3.2.0
2018-08-31 13:45:08 +02:00
f2f0cdd0ff
add arch vars for docker
2018-08-31 13:45:08 +02:00
da06c8e5a9
etcd UNSUPPORTED for all arch
2018-08-31 13:45:08 +02:00
2f1fe44762
update images to use arch
2018-08-31 13:45:08 +02:00
19268ded23
Fix some arm64 errors
2018-08-31 13:45:08 +02:00
f67933d2ac
add ETCD_UNSUPPORTED_ARCH=arm64 flag
2018-08-31 13:45:08 +02:00
247b9e83d8
etcd arch-image
2018-08-31 13:45:08 +02:00
9c2098b8fa
fix kubelet_max_pod assert
2018-08-31 13:45:08 +02:00
48c0c8d854
Update dir list
2018-08-31 13:45:08 +02:00
2609ec0dc3
Fix copy etcd-ssl-ca failed
2018-08-31 15:06:03 +08:00
aafd034ab8
Merge pull request #3202 from riverzhang/fix-ipvs
...
Fix ipvs by kubeadm v1alpha1
2018-08-30 13:26:02 -07:00
d14394c691
Merge pull request #3185 from mirwan/helm_install_docker_insecureport_0
...
Mount /root/.kube to helm container
2018-08-30 08:11:33 -07:00
16fc22a207
Fix ipvs by kubeadm v1alpha1
2018-08-30 23:04:57 +08:00
d9ea937493
Merge pull request #3187 from mirwan/kubeadm-config_syntax
...
Fix kubeadm-config for audit-log-path and feature-gates
2018-08-30 06:55:43 -07:00
a96a0ee307
Merge pull request #3198 from riverzhang/fix-kubeadm-v1alpha1
...
Fix kubeadm v1alpha1 configure
2018-08-30 04:11:37 -07:00
f48468b83b
Merge pull request #3195 from mirwan/fix_psp_templates
...
Fix some addons when PodSecurityPolicy is enabled
2018-08-30 03:37:52 -07:00
35e5adaf0a
Fix kubeadm v1alpha1 configure
2018-08-30 17:44:00 +08:00
a247c2c713
Merge pull request #3191 from fcgravalos/make-canal-mount-xtables-lock
...
canal should mount xtables.lock to share the lock with other processe…
2018-08-29 08:57:32 -07:00
4feb62f6bf
Merge pull request #3193 from riverzhang/fix-lb-kubeadm
...
Fix kubeadm lb
2018-08-29 04:22:40 -07:00
ac4ef719cc
canal should mount xtables.lock to share the lock with other processes like kube-proxy
2018-08-29 13:08:51 +02:00
ceb97e5809
Fix wrong syntax for jinja sub list extraction and addition of missing role template
2018-08-29 12:58:10 +02:00
3bfda55fca
Merge pull request #3061 from okamototk/crio
...
cri-o support
2018-08-29 03:48:40 -07:00
9eade647e6
Fix kubeadm lb
2018-08-29 18:29:24 +08:00
bbdd1c8f06
Add option to change the Tiller Deployment namespace.
2018-08-29 11:20:41 +02:00
f876c89081
Merge pull request #3189 from Arslanbekov/up-dashboard-version
...
Up dashboard version to 1.10.0
2018-08-29 02:08:40 -07:00
1babbcca85
Fix elif azure statement
2018-08-28 15:43:03 +01:00
c0dfa72707
Separate RedHat specific vars for cri-o.
2018-08-28 13:36:14 +00:00
fe1e758856
Up dashboard version to 1.10.0
2018-08-28 14:10:19 +03:00
f325d13082
Add azure-container-registry-config for Azure
...
Seperated out KUBELET_CLOUDPROVIDER env var assignment when cloud_provider equals azure
Appended azure-container-registry-config parameter
2018-08-28 10:23:25 +00:00
52ab54eeea
Fix missing quotes for audit-log-path and wrong placement of feature-gates
2018-08-28 09:05:57 +02:00
d407a590a6
container_manager variable to specify runtime.
2018-08-28 06:23:38 +00:00
5eb805f098
Change timeout for kubeadm 600s.
...
* kubeadm timeout is too short and it may interrupt by timeout.
2018-08-28 04:51:38 +00:00
dfdcb56784
Delete all cri-o containers when execute reset.yml.
2018-08-28 02:25:33 +00:00
236f066635
kubeadm cri-o support.
2018-08-28 02:24:45 +00:00
5ab8a712d9
Add download_container flag to avoid docker pull when use cri-o.
2018-08-28 01:24:26 +00:00
cf7b9cfeef
Support crio in kubelet service.
2018-08-28 01:24:26 +00:00
6090af29e7
Add cri-o role.
2018-08-28 01:24:26 +00:00
359009bb05
Download etcd and hyperkube binary.
2018-08-28 01:24:26 +00:00
bdbfa4d403
Add ipvs support for kubeadm 1.10 or later.
2018-08-28 01:24:26 +00:00
6849788ebc
Fix copy ca cert and ca key for kubeadm.
2018-08-28 01:24:25 +00:00
ac639b2a17
Change kubeadm config to run etcd by kubeadm.
2018-08-28 01:24:25 +00:00
b18ed5922b
Add etcd default value in kubespray-default.
2018-08-28 01:24:25 +00:00
b395bb953f
Fix wrong when condition that ends up with jinja error when the content of /etc/hosts contains parenthesis
2018-08-27 21:20:57 +02:00
b652792a93
/root/.kube must to mounted in order for helm to read kubeconfig and not fallback to localhost:8080
2018-08-27 18:17:26 +02:00
7efe287c74
Merge pull request #2474 from mirwan/localhost_in_etc_hosts
...
Localhost in hosts files should be updated (if necessary), not overriden
2018-08-27 06:25:43 -07:00
881b46f458
Merge pull request #3095 from mirwan/dnsmasq_template_rendering_filename
...
Dnsmasq manifests should not have j2 extension but templates should
2018-08-27 02:51:43 -07:00
d43cd9a24c
Merge pull request #3104 from maxbrunet/hotfix/replace-local_actions
...
Use delegate_to: localhost instead of local_action
2018-08-27 02:50:42 -07:00
fff48d24ea
Replace the raw rsync command with the synchronize module
2018-08-27 10:00:21 +02:00
f4feb17629
Merge pull request #2958 from elementyang/etcd-pr
...
change the way that getting etcd_member_name
2018-08-26 23:55:04 -07:00
33135f2ada
k8s/preinstall: Turn AND condition into a list
2018-08-25 14:33:31 -04:00
d6f4d10075
Merge pull request #3153 from alvistack/remove-image_tag-suffix
...
Remove *_image_tag suffix from ReplicaSet/Deployment
2018-08-25 04:42:19 -07:00
f97515352b
Merge pull request #3161 from nutellinoit/kube_proxy_nodeport_addresses
...
--nodeport-addresses added on kube-proxy.manifest.j2 and on k8s-cluster.yml
2018-08-25 02:00:19 -07:00
f7f58bf070
Merge pull request #3173 from msimonin/fix-3164
...
Fix createhome directory for adduser role
2018-08-24 16:34:57 +03:00
1432e511a2
same work with less lines
2018-08-24 14:06:07 +02:00
b61eb7d7f3
Add ETCD_QUOTA_BACKEND_BYTES environment variable
2018-08-24 12:17:34 +02:00
1567a977c3
Revert "gen_certs_script: refactor using stdin (Ansible 2.4+)"
2018-08-24 12:35:31 +03:00
cb8be37f72
fix on v1alpha1
2018-08-24 11:19:06 +02:00
e5dd4e1e70
added on v1alpha1
2018-08-24 10:59:06 +02:00
6d74a3db7a
Merge pull request #3163 from kubernetes-incubator/fix-docker-ubuntu1804
...
Fix docker apt-repo for Ubuntu18
2018-08-24 00:51:59 +02:00
1da5926a94
Use xenial repo for ubuntu18
2018-08-23 22:34:44 +00:00
4882531c29
Merge pull request #3115 from oracle/oracle_oci_controller
...
Cloud provider support for OCI (Oracle Cloud Infrastructure)
2018-08-23 18:22:45 +02:00
f59b80b80b
Merge pull request #3147 from ishitatsuyuki/etcd-cleanup
...
gen_certs_script: refactor using stdin (Ansible 2.4+)
2018-08-23 18:19:28 +02:00
7b61a0eff0
Fix kubeadm LB configure
...
1. join node add LB discoveryTokenAPIServers
2. kubeadm_config_api_fqdn support ipddress and domain_name
2018-08-23 22:22:34 +08:00
23fd3461bc
calico upgrade to v3 ( #3086 )
...
* calico upgrade to v3
* update calico_rr version
* add missing file
* change contents of main.yml as it was left old version
* enable network policy by default
* remove unneeded task
* Fix kubelet calico settings
* fix when statement
* switch back to node-kubeconfig.yaml
2018-08-23 17:17:18 +03:00
e22e15afda
Fix createhome directory for adduser role
...
A typo in the adduser role prevents the createhome
variable to be taken into account.
Fix #3164
2018-08-23 08:55:11 +02:00
f453567cce
Merge pull request #3144 from riverzhang/fix-audit-log
...
Fix install audit failed
2018-08-23 14:41:37 +08:00
69786b2d16
gen_certs_script: refactor using stdin (Ansible 2.4+)
2018-08-23 11:19:17 +09:00
5a4352657d
Fix install audit failed
...
1.fix audit log not write
2.fix Parameter not recognized
3.delete kubedm futuregates auditing and use apiServerExtraArgs
2018-08-23 01:47:15 +08:00
f13bc796d9
added nodePortAddresses on kubeadm conf v1alpha2 (not present on v1alpha1)
2018-08-22 18:43:03 +02:00
a6a14e7f77
create the service account and roles even if the rbac is not enabled. it will just be ignored
2018-08-22 18:17:11 +02:00
80cfeea957
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
2018-08-22 18:16:13 +02:00
2c90208486
Fix docker apt-repo for Ubuntu18
2018-08-22 15:53:14 +00:00
4eea7f7eb9
Merge pull request #3152 from johnzheng1975/cilium_1.2.0
...
new cilium stable version: 1.2.0
2018-08-22 17:11:42 +02:00
5d9908c2c3
--nodeport-addresses added on kube-proxy.manifest.j2
...
Changed author
2018-08-22 15:32:07 +02:00
a7b0c454db
Localhost in hosts files should be updated (if necessary), not overriden
2018-08-22 12:10:49 +02:00
c3b3572025
Always create service account even rbac_enabled = false
2018-08-22 11:41:29 +08:00
f897596844
Remove *_image_tag suffix from ReplicaSet/Deployment
2018-08-22 11:02:56 +08:00
6df71956c4
new cilium stable version: 1.2.0
2018-08-22 10:52:24 +08:00
94df70be98
Cloud provider support for OCI (Oracle Cloud Infrastructure)
...
Signed-off-by: Jeff Bornemann <jeff.bornemann@oracle.com>
2018-08-21 17:36:42 -04:00
0c0a2138d9
allow '.' in hostnames
...
we use FQDN as inventory_hostname
2018-08-21 08:24:33 +02:00
5bf152886b
add support for openstack trust to cloud provider config
2018-08-20 12:51:25 -04:00
497db69c9f
Merge pull request #3130 from riverzhang/add-control-plane
...
Add kubeadm controlplaneEndpoint
2018-08-20 10:43:50 +02:00
c7de737551
Merge pull request #3133 from mirwan/auditlog_to_stdout_w_kubeadm
...
Audit log to stdout with kubeadm
2018-08-20 10:43:22 +02:00
69749a5b7b
Merge pull request #3132 from mirwan/custom_audit_policy
...
Custom audit policy
2018-08-20 10:42:38 +02:00
b3e32c1393
Merge pull request #3094 from hedayat/master
...
Add --dns-loop-detect to dnsmasq used in kube-dns
2018-08-20 09:27:15 +02:00
fc38b6d0ca
Ability to define custom audit polcy rules
2018-08-20 07:04:56 +02:00
c34900e569
Define apiserver flags directly instead of relying on auditPolicy section in order to have the ability to redirect audit log to stdout with kubeadm
2018-08-20 07:00:53 +02:00
855f2a55cb
Merge pull request #3135 from ishitatsuyuki/patch-1
...
Add bad hostname preflight check
2018-08-20 12:08:02 +08:00
71fdc257bc
cephfs-provisioner: Upgrade to v2.0.1-k8s1.11
2018-08-20 11:55:04 +08:00
fd16f77e20
Merge pull request #3017 from seungkyua/fix_kubeadm_client_conf
...
Fix kubeadm client conf
2018-08-20 10:51:02 +08:00
3eef8dc8d0
Add bad hostname preflight check
...
Hostname must be a valid DNS name, which is checked as https://github.com/kubernetes/apimachinery/blob/master/pkg/util/validation/validation.go#L115
The situation I have encountered is that my hostname contained underscore which is disallowed and apiserver refused to start.
2018-08-20 09:09:00 +09:00
59176ebbb9
Add kubeadm controlplaneEndpoint
...
Nginx LB(default)
Other LB by kubeadm controlplane
2018-08-20 00:57:13 +08:00
b421d0ed5b
Fix install nss
2018-08-20 00:07:31 +08:00
35efc387c4
Fix pull dns image error
2018-08-19 22:47:17 +08:00
fb309ca446
Merge pull request #3128 from riverzhang/delete-kubeadm
...
Remove unused configuration
2018-08-19 10:01:33 +08:00
1d4f88eea8
Fix typo in image url
2018-08-19 01:30:54 +02:00
095ccef8bd
Remove unused configuration
2018-08-19 01:23:20 +08:00
0df969ad19
Merge pull request #3117 from mirwan/audit_usecases
...
Audit support improvement
2018-08-19 01:13:22 +08:00
3e5b6a5481
Merge pull request #3105 from mirwan/remove_cilium_device_at_reset_plus_move_network_to_network_plugin_roles
...
Move network_plugin specific reset tasks to its role directory
2018-08-17 22:27:16 +02:00
c36744e96d
Merge pull request #3120 from alvistack/cephfs-provisioner-v2.0.0-k8s1.11
...
cephfs-provisioner: Upgrade to v2.0.0-k8s1.11
2018-08-17 22:11:15 +02:00
e51c5dc0a6
Merge pull request #3123 from mathieuherbert/until-restart-etcd
...
add until option for etcd backup commands
2018-08-17 22:09:08 +02:00
d297b82e82
Merge pull request #3126 from LuckySB/etcd_restart_on_update
...
add etcd version to etcd environment file to trigger a reload
2018-08-17 22:05:34 +02:00
98b818bbaf
comply with ansible syntax consistency guideline
2018-08-17 16:37:33 +02:00
26bf719a02
Merge branch 'master' into multi-arch-support
2018-08-17 16:35:50 +02:00
7e37aa4aca
Merge pull request #2103 from xd007/docker_aarch64_pkg
...
Update docker package info for aarch64
2018-08-17 16:26:56 +02:00
ce6854e726
add version to environment file
...
Trigger reboot handler when version upgrade during update script
2018-08-17 17:25:35 +03:00
ac49bbb336
Merge pull request #2168 from xd007/docker_arm64
...
fix docker opts incompatible running on aarch64 Redhat/Centos
2018-08-17 16:24:07 +02:00
6c7eabb53b
Merge pull request #2001 from b0r1sp/patch-3
...
Quote false and yes, otherwise they'll be transformed to 'False', 'Yes'
2018-08-17 15:52:15 +02:00
7a0f0126f7
Merge pull request #1295 from xuhuilong/master
...
fix curl get calico status error ( error in tls version, centos 7.3 1611)
2018-08-17 14:29:01 +02:00
59d89a37cc
add until option for etcd backup commands
2018-08-17 11:05:57 +02:00
1a07c87af7
cephfs-provisioner: Upgrade to v2.0.0-k8s1.11
...
Upstream Changes:
- cephfs-provisioner v2.0.0-k8s1.11 (https://github.com/kubernetes-incubator/external-storage/releases/tag/cephfs-provisioner-v2.0.0-k8s1.11 )
- Update ClusterRole
Our Changes:
- Fix typo in defaults/main.yml (rs -> deploy)
- Manifests cleanup
2018-08-17 12:41:56 +08:00
29894293eb
Fix kubeadm client conf
...
Fix DiscoveryTokenCACertHashes key to discoveryTokenCACertHashes in kubeadm-client.conf
2018-08-17 04:40:08 +00:00
4d783fff0d
resolve issues with new cacert feature
2018-08-16 23:31:21 -04:00
7f16b46ed5
Reset tasks specific to a network_plugin moved inside its role directory + Reset tasks specific to cilium
2018-08-16 17:34:33 +02:00
58ee5f1cc9
Merge pull request #3089 from mattymo/cloudconfig
...
Remove erroneous cloud-config task
2018-08-16 16:17:01 +02:00
253dc4f606
Merge pull request #3114 from woopstar/coredns-1.2.0
...
Update CoreDNS to 1.2.0
2018-08-16 16:14:13 +02:00
54548d3b95
kubeadm mounts the hostpaths itself
2018-08-16 13:17:30 +02:00
58d4d65fab
minor variable fix and reuse + handle auditlog redirected to stdout
2018-08-16 12:51:09 +02:00
364ab2a6b7
Merge pull request #3113 from riverzhang/support-audit
...
Support audit
2018-08-16 15:33:43 +08:00
2ffc1afe40
Support audit
2018-08-16 14:38:07 +08:00
18612b3501
cert-manager: Upgrade to 0.4.1
...
Upstream Changes:
- cert-manager 0.4.1 (https://github.com/jetstack/cert-manager/releases/tag/v0.4.1 )
Our Changes:
- Better templates sync with upstream manifests
- Remove fancy resources requests/limits customization
2018-08-16 08:47:01 +08:00
9da5d67728
Update CoreDNS to 1.2.0
2018-08-15 13:39:05 +02:00
bd413e36a3
ingress-nginx: Upgrade to 0.18.0
...
Upstream Changes:
- ingress-nginx 0.18.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.18.0 )
2018-08-15 11:40:42 +08:00
2c5781ace1
Merge pull request #2932 from wiremind/efk-fluentd-no-nodeselector
...
fluentd daemonset: do not set old nodeSelector.
2018-08-14 13:48:30 -05:00
b50b3430be
Disable locksmithd on CoreOS if coreos_auto_upgrade set to false ( #3088 )
...
* Disable locksmithd on CoreOS if coreos_auto_upgrade set to false
* change when format to support multiple-condition
2018-08-14 13:42:16 -05:00
0e3518f2ca
Merge pull request #2871 from fritchie/lptolerate
...
Local volume provisioner: tolerate NoSchedule
2018-08-14 13:39:57 -05:00
3a85a2f81c
Merge pull request #3080 from mirwan/netchecker_template_rendering_filename
...
Netchecker manifests should not have j2 extension
2018-08-14 13:24:16 -05:00
5dbfa0384e
Merge pull request #3101 from chenhonggc/uninstall_old_versions_of_docker
...
Uninstall old versions of Docker
2018-08-14 11:32:23 -05:00
48b6128814
Upgrade coredns to 1.1.3
2018-08-15 00:05:55 +08:00
70b28288a3
Use delegate_to: localhost instead of local_action
...
Allow to use `ansible_become: true` (#2969 )
And set it to `false` for `localhost` with an `host_var`
2018-08-14 10:08:43 -04:00
a11e1eba9e
Upgrade kubernetes to V1.11.x ( #3078 )
...
Upgrade Kubernetes to V1.11.2
The kubeadm configuration file version has been upgraded from v1alpha1 to v1alpha2
Add bootstrap kubeadm-config.yaml with external etcd
2018-08-14 15:13:44 +03:00
2dfa928c90
Uninstall old versions of Docker
2018-08-14 17:48:30 +08:00
d3c0fe1fcb
Templates (even without actual templating inside) should have j2 extension but should not be rendered with j2 extension
2018-08-13 09:51:26 +02:00
c0221c2e72
Add --dns-loop-detect to dnsmasq used in kube-dns
...
It prevents DNS loops when host's DNS server is a localhost DNS server,
or when DNS server of cluster is also added as an upstream DNS server
2018-08-12 20:36:33 +04:30
9cef20187c
Add the path to kubectl binary
...
The post-remove action fails during the kubectl delete node action because with rc: 2, command not found. The kubectl is not in the system PATH and the full path to the binary is required
2018-08-12 10:50:50 +02:00
95f1e4634a
local-volume-provisioner: use mountPropagation HostToContainer and version bump ( #3081 )
...
* Update local-volume-provisioner-ds.yml.j2
After v1.10.2 default mountPropagation is "None"
* local_volume_provisioner version bump
v2.1.0 uses the beta nodeAffinity API by default which is available starting 1.10
* Update local-volume-provisioner-ds.yml.j2
MY_NAMESPACE env
* Update README.md
Raw block devices docs.
2018-08-10 17:14:34 +03:00
581a30fdec
Remove erroneous cloud-config task
2018-08-10 15:59:18 +03:00
d8e77600e2
Merge pull request #3066 from luisyonaldo/fix-conditional
...
fix bad conditional
2018-08-10 10:38:52 +02:00
e3dcd96301
kubedns & kubedns-autoscaler: Stick to master nodes. ( #2909 )
...
* kubedns & kubedns-autoscaler: Stick to master nodes.
- Tolerate only master nodes and not any NoSchedule taint
- Pods are on different nodes
- Pods are required to be on a master node.
* kubedns: use soft nodeAffinity.
Prefer to be on a master node, don't require.
* coredns: Stick to (different) master nodes.
- Pods are on different nodes
- Pods are preferred to be on a master node.
2018-08-09 10:42:53 -05:00
001cae5894
Merge pull request #3028 from Kami-no/cilium
...
cilium v1.1.2
2018-08-09 10:35:29 -05:00
494ff9522b
j2 extension should only be used for template filename, not target file on remote host
2018-08-09 11:29:45 +02:00
fd380615a0
fix bad conditional
2018-08-09 10:20:45 +02:00
039180b2ca
Merge pull request #3022 from alvistack/weave-2.4.0
...
weave: Upgrade to 2.4.0
2018-08-09 15:01:05 +08:00
22b89edbbc
cilium v1.1.2
...
Update all configs to current upstream state.
Add more resources (unable to pass tests now)...
2018-08-08 22:42:50 +03:00
94ae945bea
Merge pull request #2904 from mirwan/var_lib_kubelet_should_not_be_unmounted_when_having_its_own_partition
...
Only subdirectories in /var/lib/kubelet should be unmounted at reset time
2018-08-08 15:00:54 +08:00
5c039d87aa
Merge pull request #3054 from reverson/1.10-admission
...
Add support for admission controllers in 1.10 and above
2018-08-08 14:32:11 +08:00
08dfb7b59f
Merge pull request #3073 from riverzhang/delete-istio
...
Remove istio support
2018-08-08 13:00:57 +08:00
ea6af449a8
Remove istio support
...
Use helm install or support in future
2018-08-08 11:10:09 +08:00
d285565475
Add tags for coredns and kubedns
2018-08-07 20:55:38 +02:00
4eadf3228e
Only add admission plugins if defined
2018-08-07 11:25:03 -07:00
99c5aa5a02
Use k8s default plugin list
2018-08-07 11:25:03 -07:00
6ed65d762b
Separate out plugins into 2 variables
2018-08-07 11:25:03 -07:00
ac18f6cf8b
Add support for admission controllers in 1.10 and above
2018-08-07 11:25:03 -07:00
e71f261935
Merge pull request #3068 from riverzhang/swap
...
Enable swap
2018-08-07 21:29:41 +08:00
b902602d16
Enable swap
2018-08-07 21:13:12 +08:00
538cb3b1bd
weave: Upgrade to 2.4.0
...
Upstream Changes:
- weave 2.4.0 (https://github.com/weaveworks/weave/releases/tag/v2.4.0 )
- Support `externalTrafficPolicy: Local` (https://github.com/weaveworks/weave/issues/2924 )
- Make the ipset list size bigger (https://github.com/weaveworks/weave/pull/3305 )
- Break out of kube rm-peers loop if nothing changes (https://github.com/weaveworks/weave/pull/3317 )
Our Changes:
- Revamp weave-net.yml.j2 with upstream changes
- Add more variables for customization
- Replace WEAVE_PASSWORD with k8s secret
- Remove hard-corded seed mode support, in favor of variables customization
2018-08-07 18:34:51 +08:00
17e335c6a7
ingress-nginx: Upgrade to 0.17.1
...
Upstream Changes:
- ingress-nginx 0.17.1 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.17.1 )
- Remove duplicated `securityContext` (https://github.com/kubernetes/ingress-nginx/pull/2705 )
- Remove --publish-service flag, in favor of DaemonSet + hostPort
Close #2998
Close #2999
2018-08-07 18:31:08 +08:00
280d6cac1a
Merge pull request #2997 from alvistack/cert-manager-0.4.0
...
cert-manager: Upgrade to 0.4.0
2018-08-07 18:00:46 +08:00
c288ffc55d
Merge pull request #2342 from southquist/add-ca-cert
...
allow for setting the cacert on openstack cloud provider
2018-08-07 17:46:01 +08:00
9075dbdd3c
Merge pull request #2875 from bradbeam/movault
...
Adding cluster_name to api cert alt name for vault
2018-08-07 17:36:04 +08:00
7850bce254
Merge pull request #2994 from DBLaci/master
...
dashboard_token_ttl option override possibility with default
2018-08-07 17:16:25 +08:00
3d19e03294
Merge pull request #3015 from podnov/kube_proxy_healthz_bind_address
...
Variablize kube_proxy_healthz_bind_address
2018-08-07 17:10:33 +08:00
b1f8bfdf7c
Merge pull request #3055 from reverson/17.09-docker
...
Add support for docker 17.09
2018-08-07 16:57:50 +08:00
0f400a113c
cert-manager: Upgrade to 0.4.0
...
Upstream Changes:
- cert-manager 0.4.0 (https://github.com/jetstack/cert-manager/releases/tag/v0.4.0 )
2018-08-07 14:29:28 +08:00
e8447e3d71
Service file binary place mismatch
...
According to cluster/binary.yml vault binary will be placed to `{{ bin_dir }}` and according to `inventory/sample/group_vars/all.yml` that is
`inventory/sample/group_vars/all.yml`
2018-08-06 14:44:13 +03:00
ac644ed049
Fix yaml roles error
2018-08-05 18:48:07 +08:00
453fea1977
Merge pull request #3034 from cornelius-keller/library_fix
...
fix missing libraries on newer coreos versions
2018-08-05 12:54:03 +08:00
4b5cb1185f
fix missing libraries on newer coreos versions
2018-08-03 15:29:05 +02:00
275cdc1ce3
Add support for docker 17.09
2018-08-02 11:35:16 -07:00
d43f09081e
Merge pull request #1 from kubernetes-incubator/master
...
Follow upstream
2018-08-01 16:34:10 +02:00
72074f283b
set local for growpart part 2
2018-07-31 06:56:09 +08:00
a5db3dbea9
set locale for growpart
2018-07-31 06:52:56 +08:00
9b349a9049
Fix label of registry in README
2018-07-27 11:42:21 +02:00
0366600b45
Remove double slash
...
Even without this PR, the operation works well.
However, it is better to use a single slash rather than
a double slash in the path.
2018-07-20 07:34:33 +00:00
6a4ce96b7d
Variablize kube_proxy_healthz_bind_address
...
This fixes #3014
2018-07-19 14:19:09 -05:00
b61c64a8ea
token-ttl default value is int in seconds
2018-07-19 12:15:47 +02:00
37ccf7e405
Fixed kubectl path.
2018-07-13 15:32:08 +00:00
cb91003cea
dashboard_token_ttl option override possibility with default
2018-07-13 15:26:18 +02:00
97e0de7e29
Fix vault file owner issues and k8s apiserver cert creation ( #2985 )
...
apiserver cert should be created only once
2018-07-11 14:58:02 +03:00
cf445fd4fe
Merge pull request #2930 from alvistack/ingress-nginx-0.16.1
...
ingress-nginx: Upgrade to 0.16.2
2018-07-10 14:42:37 +08:00
72f053d9bb
Merge pull request #2972 from mattymo/force_cni_cp
...
Force copy cni files
2018-07-10 09:40:10 +03:00
a0defefb3f
ingress-nginx: Upgrade to 0.16.2
...
ingress-nginx 0.16.2 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.16.2 )
This patch simplify ingress-nginx deployment by default deploy on
master, with customizable options; on the other hand, remove the
additional Ansible group "kube-ingress" and its k8s node label
injection.
Reference to https://kubernetes.io/docs/concepts/services-networking/ingress/#prerequisites :
GCE/Google Kubernetes Engine deploys an ingress controller on the master.
By changing `ingress_nginx_nodeselector` plus custom k8s node
label, user could customize the DaemonSet deployment target.
If `ingress_nginx_nodeselector` is empty, will deploy DaemonSet on
every k8s node.
2018-07-10 12:26:06 +08:00
62b1166911
cert-manager: Upgrade to 0.3.2
...
Upstream Changes:
- cert-manager 0.3.2 (https://github.com/jetstack/cert-manager/releases/tag/v0.3.2 )
Our Changes:
- Remove legacy addon dir, manifests and namespace before upgrade
2018-07-10 08:48:44 +08:00
810596c6d8
Merge pull request #2974 from alvistack/cephfs-provisioner-1.1.0-k8s1.10
...
cephfs-provisioner: Upgrade to 1.1.0-k8s1.10
2018-07-09 13:53:07 +08:00
a488d55c2c
Merge pull request #2975 from daohoangson/remove_force_disable_kube_basic_auth
...
Remove step that disables `kube_basic_auth`.
2018-07-08 21:18:36 +08:00
e63bc65a9d
Fix 2976
...
Fix failure when the container attribute is not set for a download
2018-07-08 13:36:47 +03:00
d306c9708c
Remove step that force disable `kube_basic_auth`.
...
The referenced issue (https://github.com/kubernetes/kubeadm/issues/441 ) has already been fixed.
2018-07-08 16:57:43 +07:00
6a65345ef3
cephfs-provisioner: Upgrade to 1.1.0-k8s1.10
...
Upstream Changes:
- Update CEPH_VERSION to mimic (https://github.com/kubernetes-incubator/external-storage/pull/841 )
Our Changes:
- Using image from official repo which contain latest changes (https://quay.io/repository/external_storage/cephfs-provisioner )
2018-07-08 00:37:08 +08:00
1a3b9dd864
Force copy cni files
2018-07-06 16:39:42 +03:00
8fee1ab102
change create to apply
2018-07-06 19:36:19 +08:00
5c617c5a8b
Add tags to deploy components by --tags option ( #2960 )
...
* Add tags for cert serial tasks
This will help facilitate tag-based deployment of specific components.
* fixup kubernetes node
2018-07-06 09:12:13 +03:00
0b939a495b
Improve vault etcd initialization check ( #2959 )
2018-07-05 12:27:45 +03:00
5a4f07adca
change the way of getting etcd_member_name
2018-07-05 00:06:37 +08:00
4092f96dd8
Merge pull request #2946 from Miouge1/remove-pid-predicate
...
CheckNodePIDPressure is not supported in v1.10
2018-07-04 18:30:19 +03:00
effd27a5f6
change the way that getting etcd_member_name
2018-07-03 22:02:44 +08:00
77c870b7d0
Merge pull request #2951 from alvistack/cephfs-provisioner-06fddbe2
...
cephfs-provisioner: Upgrade to 06fddbe2
2018-07-03 19:36:42 +08:00
32a6ca4fd6
Merge pull request #2948 from qeqar/remove-node-limit
...
move node selection from --limit to --extra-vars=node<nodename>"
2018-07-03 18:41:57 +08:00
728024e8ff
cephfs-provisioner: Upgrade to 06fddbe2
...
- cephfs-provisioner 06fddbe2 (https://github.com/kubernetes-incubator/external-storage/tree/06fddbe2/ceph/cephfs )
Noteable changes from upstream:
- Added storage class parameters to specify a root path within the backing cephfs and, optionally, use deterministic directory and user names (https://github.com/kubernetes-incubator/external-storage/pull/696 )
- Support capacity (https://github.com/kubernetes-incubator/external-storage/pull/770 )
- Enable metrics server (https://github.com/kubernetes-incubator/external-storage/pull/797 )
Other noteable changes:
- Clean up legacy manifests file naming
- Remove legacy manifests, namespace and storageclass before upgrade
- `cephfs_provisioner_monitors` simplified as string
- Default to new deterministic naming
- Add `reclaimPolicy` support in StorageClass
With legacy non-deterministic naming style (where $UUID are generated ramdonly):
- cephfs_provisioner_claim_root: /volumes/kubernetes
- cephfs_provisioner_deterministic_names: false
- Generated CephFS volume: /volumes/kubernetes/kubernetes-dynamic-pvc-$UUID
- Generated CephFS user: kubernetes-dynamic-user-$UUID
With new default deterministic naming style (where $NAMESPACE and $PVC are predictable):
- cephfs_provisioner_claim_root: /volumes
- cephfs_provisioner_deterministic_names: true
- Generated CephFS volume: /volumes/$NAMESPACE/$PVC
- Generated CephFS user: k8s.$NAMESPACE.$PVC
2018-07-03 10:15:24 +08:00
b548f6f320
move node selection from --limit to --extra-vars=node<nodename>"
2018-07-02 20:04:36 +02:00
andreyshestakov
Matthew Mosesohn
Victor Morales
Vedran Bartonicek
Rabi Mishra
Aleksey Kasatkin
Andreas Krüger
Maxime Guyot
Jugwan Eom
Qasim Sarfraz
Sergey
Neven Miculinic
Robert Neumann
Sidharth Anupkrishnan
MarkusTeufelberger
André R. de Miranda
Abdulaziz AlMalki
Markos Chandras
rptaylor
Erwan Miran
Xinghong Fang
Xavi
Gautam Divgi
Chad Swenson
Bort Verwilst
ml
Dmitry Chepurovskiy
Stefan Prietl
Bart Verwilst
Etienne
Manuel Cintron
chadswilson
Anupam Basak
Peter Metz
hikoz
Wong Hoi Sing Edison
Ryler Hockenbury
Gabor Lekeny
Vasilis Remmas
Kaoet
Frank Ritchie
Seungkyu Ahn
Rong Zhang
Florent Monbillard
Sorin Sbarnea
Jeff Bornemann
Karl
joakimr-axis
peerapach
Danny Kulchinsky
Earl C. Ruby III
Thomas Nys
wangxf
Douglas Hellinger
Thomas Rogeat
Markus Teufelberger
Manuel Cintron
Wilmar den Ouden
Andreas Holmsten
Bobonium
Aivars Sterns
okamototk
Anton Patsev
elementyang
Seongjin Cho
Zefool
Hedayat Vatankhah (هدایت)
Ganesh Maharaj Mahalingam
ihard
Egor
Maxim Snezhkov
gdoucet
Anton Patsev
Julien C
Zohar Mamedov
Andrey Zhelnin
Bjorn Skovlund Ryden
pasqualet
Tagir
karbyshevds
Joost Cassee
Michal Belica
Miao Zhou
Miao Zhou
Oleg Dolya
marcstreeter
Johnny Halfmoon
Arslanbekov Denis
Mark Eisenblätter
Dann
Arnaud MAZIN
Antoine Legrand
Bily Zhang
RuriRyan
Igor Ivanov
Giacomo Longo
Lear Li
Kuldip Madnani
Louis Woods
ankitcharolia
Robert Liotta
Dmitriy Zinin
Louis
xichengliudui
wilmardo
Bart Laarhoven
Maxim Makarov
JuanJo Ciarlante
Samina Fu
刘旭
anarcat
Loic Gouarin
Johann Queuniet
Andreas Krüger
pastushenko
Dylan
Tupin Laurent
LiuDui
Luke Seelenbinder
rboyapat
SataQiu
Mikael Berthe
sangwook
Cédric de Saint Martin
arzarif
Victor Palma
Rui Cao
Sergey Magidovich
Anatoly Rugalev
k8s-ci-robot
Chris Randles
Rajitha Perera
Kevin Schuck
Jan Wozniak
Karol Chrapek
Alex Yakovenko
AtzeDeVries
Erwan Miran
Matthew Mosesohn
georgejdli
mlushpenko
Jeff Bornemann
Luis Nunez
Atoms
Pablo Estigarribia
Fernando Crespo Grávalos
Robin Elfrink
Phill Garrett
guenhter
Maxime Brunet
Samuele Chiocca
msimonin
Tatsuyuki Ishi
john
Jonathan Craig
Sergey Bondarev
Mathieu Herbert
JohnZheng
Chen Hong
mauromedda
Anton Fayzrahmanov
Robert Everson
Aleksey Shirokih
cornelius-keller
DBLaci
woosley.xu
Alexandre Ardhuin
Evan Zeimet
Alexandru Bogdan Pica
Dao Hoang Son