1ff95e85f4
Rollback coredns, should not have been updated before 1.19 ( #6573 )
2020-08-26 03:30:03 -07:00
36924b63dc
Allow webhook authorization ( #6502 )
2020-08-24 06:29:41 -07:00
0c80d3d9fa
Add proxy_env calculation to reset.yml ( #6558 )
2020-08-21 02:03:46 -07:00
411510cbe6
Use proper openssl command to differentiate between host and ip in API certificate check ( #6392 )
...
* Use proper openssl command to differentiate between host and ip in current certificate check
* fixup! Use proper openssl command to differentiate between host and ip in current certificate check
2020-08-21 02:03:39 -07:00
6e2b8a5750
Add timeout to Get current version of calico cluster version, again ( #6493 )
2020-08-21 00:13:51 -07:00
ca66a96d0a
make pre-remove node draining a failable task ( #6442 )
...
and add configuration to allow ungraceful removal
2020-08-21 00:13:39 -07:00
0c09ec5d13
Bump Openstack cloud controller image verison to 1.18.2 ( #6562 )
2020-08-21 00:10:03 -07:00
a8e2110b2d
#6552 Update extras_rh_repo_base_url ( #6556 )
2020-08-21 00:09:55 -07:00
250541d29d
Use proper pypy download url in bootstrap script ( #6555 )
...
The bootstrap-os role uses a bootstrap script to provision a
python interpreter on flatcar and container os hosts. As the
pypy project switched to another hoster, the download url changed.
If applied this will use the new proper pypy download url in bootstrap script
2020-08-21 00:09:47 -07:00
142b9e1eff
Update k8s hashes and set default version to 1.18.8 ( #6532 )
2020-08-21 00:09:39 -07:00
f204212963
Add docs for 'setting up your first cluster' ( #6544 )
2020-08-21 00:05:40 -07:00
91ae87fa60
Fix setting node label if kube_override_hostname is defined ( #6557 )
2020-08-20 06:23:30 -07:00
85646c96ad
Add docs about CI setup ( #6397 )
2020-08-20 04:37:23 -07:00
d6456d13c2
Update coredns to 1.7.0 ( #6538 )
2020-08-20 04:33:44 -07:00
98f7485303
Update weave to 2.7.0 + minor update to Cilium ( #6501 )
2020-08-20 04:33:36 -07:00
a42d811420
fix scale playbook ( #6482 )
2020-08-20 04:33:23 -07:00
bf6fdce339
Fix cert-manager E305 ansible-lint error ( #6549 )
2020-08-20 04:25:45 -07:00
fa378f09c3
Edited pre-upgrade task to uncordon a node failing to drain ( #6546 )
2020-08-20 04:25:36 -07:00
d9d11e2291
Update sonobuoy dependency ( #6536 )
2020-08-20 04:25:23 -07:00
73b2683697
Allow hosts with hyphen in name ( #6529 )
2020-08-18 00:53:30 -07:00
d8a749fd27
Update apiserver-audit-policy.yaml.j2 ( #6526 )
2020-08-18 00:49:37 -07:00
f2d2d080f6
add master_volume_type variable ( #6524 )
2020-08-18 00:49:29 -07:00
78ceef6b15
Remove unused variable ( #6522 )
2020-08-18 00:45:29 -07:00
ca8e59fa85
Add new cilium options for native routing ( #6519 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-18 00:39:42 -07:00
b0210567aa
Fixed Kubespray container-engine/docker role to populate docker.service ( #6518 )
2020-08-18 00:39:30 -07:00
33ec13293b
Fix cilium_deploy_additionally with kubeadm etcd ( #6514 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-18 00:35:36 -07:00
bedb411d06
improve Cilium metrics support ( #6513 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-18 00:35:29 -07:00
ef3e98807e
tlsminversion and tlsciphersuites kubelet ( #6490 )
2020-08-13 02:48:13 -07:00
49158dbe40
Minor Ambassador docs updates ( #6503 )
...
Signed-off-by: Alvaro Saurin <alvaro.saurin@gmail.com>
2020-08-06 08:37:42 -07:00
35682b5228
Fix cilium strict kube proxy replacement in HA ( #6473 )
...
* Update the cilium svc proxy test to HA mode
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Fix cilium strict kube-proxy in HA
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add a single global endpoint variable
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add cilium docs about kube-proxy replacement
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Fix issues in docs
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-06 00:14:55 -07:00
9cc70e9e70
Upgrade JetStack Cert-Manager to v0.15.2 ( #6414 )
...
* Upgrade JetStack Cert-Manager to v0.15.2
* Add README.md table of contents
2020-08-05 23:26:55 -07:00
50598d9d47
Fix E306 in tests/ ( #6495 )
2020-08-05 13:22:55 -07:00
fc23f37af7
Fix E306 in roles/kubernetes ( #6500 )
2020-08-05 07:56:28 -07:00
bfe143808f
Allows tls verify skip on webhook auth url ( #6472 )
2020-08-05 05:02:29 -07:00
91742055e0
Fix E306 in scripts/ ( #6496 )
2020-08-05 01:56:28 -07:00
6c41f64a98
Correct sample inventory to pass yamllint ( #6499 )
...
Nit alert. Sample inventory throws an error when processed
by yamllint. The default line is currently commented out.
However, when uncommenting it our linters fail.
2020-08-05 01:52:48 -07:00
e72dbf3dfc
Option for MetalLB to talk BGP ( #6383 )
...
* Option for MetalLB to talk BGP
* Check for BGP peers when metallb_protocol is bgp
* README clarification
* Commented values as documentation only in the sample inventory
* layer 2 or BGP, not both
2020-08-05 01:52:40 -07:00
c3b78c3255
bootstrap-os for remove-node ( #6154 )
2020-08-05 01:52:28 -07:00
fb666c44b3
Quoted type constraints are deprecated ( #6497 )
2020-08-05 01:32:28 -07:00
58b5bf7886
Update base image to v2.13.3 ( #6494 )
2020-08-05 01:28:29 -07:00
cc70200a07
Fix Flexvolume mount in Openstack Controller ( #6480 )
2020-08-04 05:28:35 -07:00
ffbd98fec6
Remove hvac dependency ( #6476 )
2020-08-04 05:28:28 -07:00
f3c17361da
Create a PodDisruptionBudget for the Cinder CSI controllerplugin ( #6385 )
2020-08-04 05:28:19 -07:00
bdf0238328
Upgrade molecule to v3 ( #6468 )
...
Signed-off-by: Victor Morales <v.morales@samsung.com>
2020-08-04 05:24:19 -07:00
39b907cdfb
Remove workaround for kubeadm upgrade ( #6478 )
...
https://github.com/kubernetes/kubeadm/issues/1498 was closed
2020-08-03 01:17:40 -07:00
24a7878e7c
Update kube-router to 1.0.1 and kube-ovn to 1.3.0 ( #6479 )
2020-08-01 00:34:04 -07:00
2364a84579
fix src for audit webhook config yaml ( #6470 )
2020-08-01 00:33:56 -07:00
c6e5be91e9
crio: align template crio.conf with upstream ( #6432 )
...
* log level by default increased to 'info'
* cgroup manager by default set to 'systemd'
* stream port (used by kubelet) bound to 127.0.0.1 for security reasons
* metrics can be enabled and port specified
2020-08-01 00:33:48 -07:00
ce22c0e6a4
Add option to configure IPVS timeouts in kube-proxy configration manifest. ( #6396 )
2020-08-01 00:33:40 -07:00
bd60df97aa
Fix download calico policy condition ( #6474 )
2020-08-01 00:29:48 -07:00
Florian Ruynat
Sulochan Acharya
Florian Ruynat
jeanfabrice
Lars
Marc-Antoine
*=0=1=4=*
Christian Strack
Svendegroote91
Michal Petko
Maxime Guyot
tasekida
Samuel Liu
Barry Melbourne
Bernard Landon
holmesb
rptaylor
Arthur Outhenin-Chalandre
Erwan Miran
Alvaro
נυαη נυαηѕση
Mike Williams
Kevin Klopfenstein
bozzo
Florent Monbillard
Steven Reitsma
Victor Morales
Konstantin Lebedev
Hans Feldt
fulii
Maxime Lavandier