7a730d42dd
Add bin_dir to PATH environment. ( #6764 )
2020-09-29 06:35:27 -07:00
109391031b
Add error msg for check of local ip ( #6761 )
...
When stopping at the check of "Stop if ip var does not match local ips"
the error message is like:
fatal: [single-k8s]: FAILED! => {
"assertion": "ip in ansible_all_ipv4_addresses",
"changed": false,
"evaluated_to": false,
"msg": "Assertion failed"
}
That doesn't contain actual IP addresses and it is difficult to understand
what was wrong. This adds the error message which contain actual IP addresses
to investigate the issue if happens.
2020-09-29 06:29:27 -07:00
e67886bf9d
add leader election timeouts and durations to available parameters ( #6691 )
2020-09-25 08:21:11 -07:00
28839f6b71
remove duplicate audit-policy-file argument in kubeadm configuration ( #6734 )
2020-09-24 09:26:06 -07:00
28073c76ac
Calico upgrade path validation and old version cleanup ( #6733 )
...
* calico: add constant calico_min_version_required
and verify current deployed version against it.
* calico: remove upgrade support with data migration
The tool was used pre v3.0.0 and is no longer needed.
* calico: remove old version support from tasks
* calico: remove old ver support from policy ctrl
* calico: remove old ver support from node
* canal: remove old ver support
* remove unused calicoctl download checksums
calico_min_version_required is the oldest version that can be installed
Older versions can be removed.
2020-09-24 09:04:06 -07:00
c0fd5b2e84
remove variable 'etcd_ionice', because ionice removed from container image etcd:v3.4.x ( #6735 )
2020-09-23 12:34:05 -07:00
edea63511d
Fix reserved memory unit in kubelet configuration ( #6725 )
...
* Fix reserved memory unit in kubelet configuration
Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>
* Move systemReserved default values from template
Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>
2020-09-22 15:20:09 -07:00
e489e70031
add new variable allowing additionnal audit webhook server options ( #6726 )
2020-09-21 06:44:32 -07:00
05c9169c70
Fix example value for etcd_quota_backend_bytes ( #6724 )
2020-09-21 05:42:31 -07:00
b7c4136702
Ignore error in check mode when disabling swap ( #6703 )
2020-09-18 07:26:46 -07:00
6da385de9d
Use "kubeadm join" to join masters to control plane ( #6661 )
...
Remove configuration variable kubeadm_control_plane
2020-09-17 04:34:45 -07:00
0cc5e3ef03
Remove workaround with kube_proxy_remove ( #6512 )
...
* kube-proxy never gets deployed so need to remove it
2020-09-17 04:30:45 -07:00
a556f8f2bf
Remove deprecated (and removed in 1.19) flag and function --basic-auth-file ( #6655 )
2020-09-11 00:30:14 -07:00
34ff39e654
NetworkManager lists must be separated by , ( #6643 )
2020-09-10 03:41:44 -07:00
2de6a5676d
Fedora coreos networkmanager global dns and bootstrapping fix ( #6577 )
...
* remove podman cni plugin
* configure networkamanger global dns
* allow installation of python3-libselinux by disabling update repo temporary
* remove ipv4 section because it is not a valid configuration
2020-09-07 02:27:41 -07:00
6613895de0
remove kubelet startup warnings for non docker container runtime ( #6605 )
...
Removes these startup warnings:
Warning: For remote container runtime, --pod-infra-container-image is ignored in kubelet, which should be set in that remote runtime instead
Using "/var/run/crio/crio.sock" as endpoint is deprecated, please consider using full url format "unix:///var/run/crio/crio.sock".
2020-09-04 04:54:04 -07:00
803d52ffce
kubernetes: remove unused variables ( #6601 )
2020-09-04 04:53:56 -07:00
f1566cb8c2
Add protectKernelDefaults option (default true) to kubelet config file ( #6611 )
2020-09-03 07:41:41 -07:00
c1ba8e1b3a
Rotate kubelet server certificate. ( #6453 )
...
* Rotate kubelet server certificate.
* CI test kubelet server cert rotation
* Approve kubelet serving certificates in tests.
2020-09-03 07:25:41 -07:00
34d88ea6d9
Fix Ansible-lint E303 ( #6409 )
2020-08-31 03:30:20 -07:00
058438a25d
Remove support for CoreOS Container Linux ( #6576 )
2020-08-28 02:28:53 -07:00
36924b63dc
Allow webhook authorization ( #6502 )
2020-08-24 06:29:41 -07:00
411510cbe6
Use proper openssl command to differentiate between host and ip in API certificate check ( #6392 )
...
* Use proper openssl command to differentiate between host and ip in current certificate check
* fixup! Use proper openssl command to differentiate between host and ip in current certificate check
2020-08-21 02:03:39 -07:00
6e2b8a5750
Add timeout to Get current version of calico cluster version, again ( #6493 )
2020-08-21 00:13:51 -07:00
142b9e1eff
Update k8s hashes and set default version to 1.18.8 ( #6532 )
2020-08-21 00:09:39 -07:00
91ae87fa60
Fix setting node label if kube_override_hostname is defined ( #6557 )
2020-08-20 06:23:30 -07:00
a42d811420
fix scale playbook ( #6482 )
2020-08-20 04:33:23 -07:00
d8a749fd27
Update apiserver-audit-policy.yaml.j2 ( #6526 )
2020-08-18 00:49:37 -07:00
78ceef6b15
Remove unused variable ( #6522 )
2020-08-18 00:45:29 -07:00
33ec13293b
Fix cilium_deploy_additionally with kubeadm etcd ( #6514 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-18 00:35:36 -07:00
ef3e98807e
tlsminversion and tlsciphersuites kubelet ( #6490 )
2020-08-13 02:48:13 -07:00
fc23f37af7
Fix E306 in roles/kubernetes ( #6500 )
2020-08-05 07:56:28 -07:00
bfe143808f
Allows tls verify skip on webhook auth url ( #6472 )
2020-08-05 05:02:29 -07:00
39b907cdfb
Remove workaround for kubeadm upgrade ( #6478 )
...
https://github.com/kubernetes/kubeadm/issues/1498 was closed
2020-08-03 01:17:40 -07:00
2364a84579
fix src for audit webhook config yaml ( #6470 )
2020-08-01 00:33:56 -07:00
ce22c0e6a4
Add option to configure IPVS timeouts in kube-proxy configration manifest. ( #6396 )
2020-08-01 00:33:40 -07:00
90e5f8ffe1
adding ovn4nfv in kubespray ( #6381 )
...
Signed-off-by: Kuralamudhan Ramakrishnan <kuralamudhan.ramakrishnan@intel.com>
2020-07-31 07:33:08 -07:00
a78e861a89
Fix test if openstack_cacert is a base64 string ( #6421 )
2020-07-30 13:15:17 -07:00
214e08f8c9
Fix ansible-lint E305 ( #6459 )
2020-07-28 01:39:08 -07:00
e70f27dd79
Add noqa and disable .ansible-lint global exclusions ( #6410 )
2020-07-27 06:24:17 -07:00
b680cdd0e4
Move healthz check to secure ports ( #6446 )
2020-07-27 00:26:17 -07:00
ea67bb6e41
Fix typo: Modprode -> Modprobe ( #6429 )
2020-07-21 23:58:25 -07:00
a7ec0ed587
add audit webhook support ( #6317 )
...
* add audit webhook support
* use generic name auditsink
2020-07-20 01:32:54 -07:00
1a1fe99669
Add a way to deploy cilium alongside another CNI ( #6373 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-17 05:57:01 -07:00
5e22574402
Remove allow-release-candidate-upgrades already include in experimental-upgrades flag ( #6349 )
2020-07-15 00:26:37 -07:00
abfa1636e4
Fix kube-proxy post deployment removal ( #5554 )
...
* Fix kube-proxy removal
* Fix unwanted skipped task for kube-proxy
* Fix kube_proxy_remove default
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add test for kube-router svc proxy
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-13 07:12:33 -07:00
05b9f14b76
Update cilium minimum kernel preinstall check ( #6376 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-13 04:44:32 -07:00
22996babcf
allow kubeadm to upgrade etcd ( #6345 )
...
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
2020-07-07 12:36:00 -07:00
57eefdd458
Fix azure-cloud-config.j2 JSON syntax ( #6364 )
2020-07-02 23:38:47 -07:00
2a82dff3ae
Remove runtime-config from kubeadm if empty ( #6311 )
2020-06-30 11:22:05 -07:00
petruha
Kenichi Omichi
Lennart Weller
orange-llajeanne
Hans Feldt
Sergey
Wang Zhen
Florian Ruynat
spaced
Lovro Seder
Maxime Guyot
Barry Melbourne
Sulochan Acharya
jeanfabrice
Florian Ruynat
Michal Petko
Samuel Liu
holmesb
Arthur Outhenin-Chalandre
Erwan Miran
Florent Monbillard
Konstantin Lebedev
fulii
Kuralamudhan Ramakrishnan
Igor Vuk