7919a47165
[metallb] add config option for IPAddressPool avoidBuggyIPs ( #10458 )
...
* Add avoid_buggy_ips as optional
* Revert avoid_buggy_ips default back to false
* Change auto_assign to optional, default true
2023-09-21 20:29:49 -07:00
7b2586943b
Fix: kube-apiserver tag will overwrite secrets-at-rest token if used independently ( #10460 )
...
Signed-off-by: Jason Witkowski <jwitko1@gmail.com>
2023-09-21 06:55:29 -07:00
f964b3438d
Add configuration option for NRI in crio & containerd ( #10454 )
...
* [containerd] Add Configuration option for Node Resource Interface
Node Resource Interface (NRI) is a common is a common framework for
plugging domain or vendor-specific custom logic into container
runtime like containerd. With this commit, we introduce the
containerd_disable_nri configuration flag, providing cluster
administrators the flexibility to opt in or out (defaulted to 'out')
of this feature in containerd. In line with containerd's default
configuration, NRI is disabled by default in this containerd role
defaults.
Signed-off-by: Feruzjon Muyassarov <feruzjon.muyassarov@intel.com>
* [cri-o] Add configuration option for Node Resource Interface
Node Resource Interface (NRI) is a common is a common framework for
plugging domain or vendor-specific custom logic into container
runtimes like containerd/crio. With this commit, we introduce the
crio_enable_nri configuration flag, providing cluster
administrators the flexibility to opt in or out (defaulted to 'out')
of this feature in cri-o runtime. In line with crio's default
configuration, NRI is disabled by default in this cri-o role
defaults.
Signed-off-by: Feruzjon Muyassarov <feruzjon.muyassarov@intel.com>
---------
Signed-off-by: Feruzjon Muyassarov <feruzjon.muyassarov@intel.com>
2023-09-21 00:30:19 -07:00
09f3caedaa
[download] Don't fail on 304 Not Modified ( #10452 )
...
i.e when file was not modified since last download
2023-09-21 00:20:20 -07:00
fe4b1f6dee
[ingress-nginx] upgrade to 1.8.2 ( #10455 )
2023-09-20 19:17:56 -07:00
bc5e33791f
[vsphere_csi] Update to 3.1.0 ( #10451 )
2023-09-20 04:56:00 -07:00
d669b93c4f
terraform-openstack: Added possibility to enable dhcp flag critical on one interface ( #10446 )
...
* terraform-openstack: Updated extra partitions to use empty list by default
* terraform-openstack: Added possibility to enable dhcp flag critical on one interface
2023-09-20 03:22:01 -07:00
a81c6d5448
Add a way to configure reseted networking service name. ( #10428 )
2023-09-20 02:28:01 -07:00
6b34e3ef08
[calico] Make version 3.26.1 default ( #10416 )
...
* [calico] Make version 3.26.1 default
* [calico] Separate calico-node and calico-cni-plugin service accounts
See: https://github.com/projectcalico/calico/pull/7106
2023-09-19 02:49:06 -07:00
dbdc4d4123
[kubernetes] Add hashes for kubernetes 1.28.2, 1.27.6, 1.26.9 ( #10435 )
2023-09-18 05:40:32 -07:00
c24c279df7
[containerd] add hashes for version 1.7.6, 1.6.24 ( #10439 )
2023-09-18 05:28:31 -07:00
0f243d751f
Use correct env var name for kube-vip per service leader election ( #10433 )
2023-09-14 02:22:17 -07:00
31f6d38cd2
[cilium] fix: invalid hubble yaml if cilium_hubble_tls_generate is enabled ( #10430 )
2023-09-13 04:16:15 -07:00
c31bb9aca7
docs: add Cilium CNI to sidebar ( #10431 )
2023-09-12 08:06:12 -07:00
748b0b294d
[kubernetes] support 1.28.0 / 1.28.1 ( #10376 ) ( #10390 )
...
* [kubernetes] support 1.28.0/1.28.1 (#10376 )
* [kubernetes] Make 1.28.1 default (#10376 )
2023-09-11 19:42:12 -07:00
af8210dfea
fix: add kubelet tag in task of fetch facts to avoid kubelet config inconsistencies ( #10423 )
...
when people run playbook with option `--tags=kubelet`, the kubelet config may changed, because some variables used in task populating `kubelet-config.yml` could be different with running task(`Fetch facts`)
2023-09-11 05:12:11 -07:00
493969588e
Use cluster_name variable instead of hardcoded value in cinder-csi controller plugin ( #10422 )
2023-09-08 07:18:16 -07:00
293573c665
update-docs-for-calico-in-centos ( #10417 )
2023-09-08 05:18:14 -07:00
5ffdb7355a
cleanup-for-2.23.0 ( #10420 )
2023-09-08 04:40:13 -07:00
c33e4d7bb7
fix-resolv.conf-nameserver-inline-comments ( #10415 )
2023-09-07 05:34:59 -07:00
24b82917d1
[calico] add v3.25.2 and make it default ( #10414 )
2023-09-06 19:50:56 -07:00
9696936b59
Fixup recover control plane playbook + add debian12/cilium test ( #10411 )
...
* Add debian12 cilium testing
* Fixup recover control plane playbook
2023-09-05 10:42:52 -07:00
aeca9304f4
Update etcd version on README ( #10410 )
2023-09-04 03:11:49 -07:00
8fef156e8f
fix: specify owner to kube_owner in task of copy cni plugins ( #10407 )
...
if not set owner to kube_owner in unarchive module, the owner of /opt/cni/bin will changed to root, which is inconsistent with the previous task.
2023-09-04 02:29:49 -07:00
8497528240
update-load-balancers-versions ( #10409 )
2023-09-03 23:57:49 -07:00
ebd71f6ad7
Fix Typo kubelet_topology_manager_policy ( #10384 )
...
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
2023-09-03 23:39:48 -07:00
c677438189
docs: add command to restart nginx-proxy container when adding node ( #10406 )
2023-09-01 09:24:32 -07:00
d646053c0e
[feat] Update metrics server to v0.6.4 ( #10400 )
2023-08-30 00:44:47 -07:00
c9a7ae1cae
Update README.md ( #10398 )
2023-08-29 02:33:22 -07:00
e84c1004df
[containerd] add hashes for 1.7.4-5 ( #10397 )
2023-08-28 19:29:20 -07:00
b19b727fe7
change maximal_ansible_version to 2.15 ( #10395 )
2023-08-28 04:35:45 -07:00
0932318b85
fix not-found service error ( #10391 )
...
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2023-08-24 19:05:17 -07:00
e573a2f6d4
Add huawei cloud controller ( #10198 )
...
* Add huaweicloud as external cloud controller
* Add huaweicloud example config
* Rename AK,SK to ACCESS_KEY and SECRET_KEY
* Add reference to huaweicloud
* Fix variable naming
* Fix env var name
* Update example
* Fix variable naming
* Fix cloud_config path
* Add namespace for leader election
* Revert reviewers
* Delete OWNERS
Delete owners who are not responsible here.
* Fix build validation
2023-08-24 18:55:17 -07:00
52c1826423
[kubernetes] Make 1.27.5 default ( #10392 )
...
* Add hashes for 1.27.5 1.26.8, 1.25.13
* Address CVE-2023-3955 , CVE-2023-3676
* Make kubernetes v1.27.5 default
2023-08-24 18:51:17 -07:00
e1881fae02
Install etcdutl file by default ( #10385 )
2023-08-23 07:04:22 -07:00
5ed85094c2
Update checksum values ( #10369 )
...
The following binaries has been updated:
* crio
* krew
* runc
* crun
* gvisor
* nerdctl
* skopeo
* yq
Signed-off-by: Victor Morales <chipahuac@hotmail.com>
2023-08-18 09:46:29 -07:00
bf29ea55cf
fix: flatcar bootstrap ( #10363 )
2023-08-18 08:14:29 -07:00
cafe4f1352
Add kubelet topology manager policy on the node ( #10370 )
...
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2023-08-18 01:26:28 -07:00
a9ee1c4167
fix argocd install not working using the kubespray docker image ( #10371 )
2023-08-17 18:30:28 -07:00
a8c1bccdd5
Move runroot from crio.conf to storage.conf ( #10372 )
2023-08-17 10:17:22 -07:00
71cf553aa8
[containerd] add hashes for 1.7.3 , 1.6.22 , 1.6.23 ( #10368 )
2023-08-17 05:05:24 -07:00
a894a5e29b
[argocd] update argocd to v2.8.0 ( #10364 )
2023-08-16 21:38:20 -07:00
9bc7492ff2
[kubernetes] Make 1.27.4 default ( #10359 )
2023-08-16 21:12:19 -07:00
77bda0df1c
Fix containerd config_path mirrors and remove nerdctl insecure_registry ( #10196 )
...
* Fix containerd_registries in config_path for mirrors and remove nerdctl global insecure_registry setting
* Make containerd hosts.toml mode 0640
* Add containerd_registries_mirrors and keep containerd_registries to pass packet_debian11-calico-upgrade
2023-08-16 05:18:27 -07:00
4c37399c75
fix hcloud-cloud-controller-manager not working in certain setups ( #10297 )
2023-08-16 05:14:27 -07:00
cd69283184
[helm] upgrade to 3.12.3 ( #10365 )
2023-08-16 05:10:29 -07:00
cf3b3ca6fd
clean up /etc/hosts file if populate_inventory_to_hosts_file is false ( #10144 )
...
* de-populate hosts file if populate_inventory_to_hosts_file is false
keep newline
* fix when condition
2023-08-15 20:22:28 -07:00
1955943d4a
Removes Ansible reinstall from pipeline ( #10032 )
2023-08-14 05:11:21 -07:00
3b68d63643
fix: not mount tls when disable ( #10357 )
2023-08-11 09:01:27 -07:00
d21bfb84ad
project: resolve ansible-lint key-order rule ( #10314 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
2023-08-10 00:57:27 -07:00
Christian
Jason Witkowski
Feruzjon Muyassarov
Mathieu Parent
Mohamed Omar Zaian
Fredrik Liv
Romain
Qasim Mehmood
Toon Albers
Takuya Murakami
NierYYDS
Florian Ruynat
Kay Yan
蔣 航
Nicolas Goudry
Uri Zafrir
Louis Tu
Daniel Strufe
Samuel Liu
Victor Morales
tenni
cortex3
yun
R. P. Taylor
Luke Simmons
charlychiu
Arthur Outhenin-Chalandre