kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
4,300 Commits
29 Branches
81 Tags
163 MiB
Commit Graph

229 Commits (b218e17f44fcd331e272b8f46aa8dddfa7be9317)

Author SHA1 Message Date
Maxime Guyot b218e17f44 ansible-lint: E403 Package installs should not use latest (#4500) 2019-04-18 01:34:08 -07:00
Maxime Guyot 1cf76a10db Disable usage of default security group (#4533) 2019-04-17 02:10:03 -07:00
Andreas Holmsten 7f1d9ff543 [contrib/terraform/openstack] Add k8s_allowed_remote_ips variable (#4506) 
* Add k8s_allowed_remote_ips variable

Useful for defining CIDRs allowed to initiate a SSH connection when
you don't want to use a bastion.

* Add TF_VAR_k8s_allowed_remote_ips variable to tf-apply-ovh
 2019-04-15 07:22:08 -07:00
Remous-Aris Koutsiamanis 27958e4247 Fix "Prevent inventory.py from configuring an even number of nodes in etcd" #4399 (#4465) 
by making clusters with fewer than 3 nodes have only 1 etcd node
 2019-04-10 05:52:14 -07:00
Maxime Guyot e865c50574 Fix terraform fmt on contrib/terraform/aws (#4484) 2019-04-10 04:32:14 -07:00
Maxime Guyot 80f31818df Add terraform validate for contrib/terraform/aws (#4438) 2019-04-10 02:14:14 -07:00
Karen Almog 20ebb49568 Don't create security groups for a bastion host on openstack, if doesn't exist (#4291) 2019-04-09 04:01:09 -07:00
Andreas Holmsten 01cf11b961 Run terraform fmt and add step to CI (#4405) 
* Run terraform fmt

* Add terraform fmt to .terraform-validate CI step

* Add tf-validate-aws CI step

* Revert "Add tf-validate-aws CI step"

This reverts commit e007225fac.
 2019-04-08 02:22:24 -07:00
Andreas Holmsten 3da392d1cf Add OWNERS to contrib/terraform (#4441) 2019-04-08 00:36:24 -07:00
Maxime Guyot 9155339cf0 Fix pep8 warnings (#4368) 2019-04-05 12:51:22 -07:00
Maxime Guyot e485fab7eb Add CI for contrib/terraform/ (#4133) 2019-04-04 01:42:52 -07:00
MarkusTeufelberger 9ffc65f8f3 Yamllint fixes (#4410) 
* Lint everything in the repository with yamllint

* yamllint fixes: syntax fixes only

* yamllint fixes: move comments to play names

* yamllint fixes: indent comments in .gitlab-ci.yml file
 2019-04-01 02:38:33 -07:00
tikitavi 1babba753d adapt inventory script to python 2.7 version (#4407) 2019-03-29 06:08:13 -07:00
Matthew Mosesohn ec08303f82 Revert "Fix #4237: update kube cert path (#4354)" (#4369) 
This reverts commit ea7a6f1cf1.

This change modified the certs dir for Kubernetes, but did not move the directories for existing clusters.
 2019-03-20 05:56:57 -07:00
Maxime Guyot e640233947 Use sample inventory file in doc (#4052) 2019-03-18 01:43:15 -07:00
Dmitry Chepurovskiy ea7a6f1cf1 Fix #4237: update kube cert path (#4354) 2019-03-17 23:55:11 -07:00
Peter Metz 38009a215a fix(contrib/metallb): adds missing become: true in role (#4356) 
On CoreOS, without this, it fails to kubectl apply MetalLB due to lack of privileges.
 2019-03-17 18:15:09 -07:00
tikitavi 2560c4dda3 fixing dump of ordered dictionaries in inventory script (#4343) 2019-03-13 02:57:34 +03:00
tikitavi 254a0ab69d fix inventory script (#4342) 
hosts are ordered dictionary
remove ansible_user from inventory file
 2019-03-13 01:46:46 +03:00
tikitavi 7b3e59ed0a fix inventory script (#4339) 
- fix order of entries when the new yaml file is created
- fix group in case there are no hosts in it
 2019-03-12 11:02:44 -07:00
tikitavi 44de04be89 update inventory builder for public and private IP per node (#4323) 2019-03-07 18:30:12 +03:00
tikitavi b73f009c07 rewrite inventory script to create inventory file in YAML format (#4303) 
* rewrite inventory script to create inventory file in YAML format

* minor fixes to inventory script

* change requirments for the inventory script
 2019-02-28 17:28:27 +03:00
Christian Berendt 44ee4b507c terraform: use openstackclient instead of novaclient (#4280) 
The openstackclient is the preferred CLI for OpenStack
environments and should be used instead of novaclient.
 2019-02-25 20:13:16 -08:00
Maxime Guyot bb495006c8 Update MetalLB to v0.7.3 (#4194) 2019-02-25 20:05:45 -08:00
Christian Berendt c386172be7 terraform: correct the spelling of Betacloud (#4282) 2019-02-25 19:38:32 -08:00
Ted Wexler b5a895d1ec Run 'terraform fmt' in contrib/terraform/openstack (#4242) 2019-02-17 21:04:41 -08:00
Robert Neumann 8b289ad9e1 Fix the file path for all.yml and k8s-cluster.yml (#4210) 2019-02-11 14:55:41 -08:00
Maxime Guyot 954676b3d8 Update the admin cert paths (#4135) 2019-02-11 14:10:10 -08:00
tikitavi befa8a6cbd fix error with delete host in inventory.py script (#4203) 
* fix error with delete host in inventory.py script

* minor fix
 2019-02-11 15:57:51 +03:00
Maxime Guyot 7e974f1401 Fix MetaLB library (#4195) 2019-02-07 17:31:53 +03:00
tikitavi 263c8731f2 add to inventory.py script ability to indicate ip ranges (#4182) 
* add to inventory.py script ability to indicate ip ranges

* add test for range2ip function for inventory.py script

some fixes

* add negative test for range2ip function for inventory.py script
 2019-02-06 18:22:13 +03:00
Petr Ruzicka 91e2d61cf2 Adding link to ../../contrib in README (#4097) 2019-01-31 14:44:06 -08:00
Maxime Guyot 40f1c51ec3 Add support for Packet with Terraform (#4043) 
* Add support for Packet with Terraform

Co-Author: johnstudarus <john@jhlconsulting.com>

* removed advanced features to streamline

* clarifying usage

* Update README.md

provide a better test to validate things are working OK

* Update README.md

clarifying what to set

* minor wordsmithing

* Fix admin cert path

* clarifying how to configure keys

* enabling kubeconfig_localhost

pull over the configuration file via playbooks rather than the key files individually

* Create output.tf

* Add support for node specific plans
 2019-01-31 07:24:36 -08:00
Sascha Marcel Schmidt 435993891b fix assertions, use msg instead of message (#3913) 2019-01-09 11:01:47 -08:00
Đào Hoàng Sơn 01cd4cf1c6 Remove vault role from inventory_builder. (#3863) 
Related to https://github.com/kubernetes-sigs/kubespray/pull/3684
 2018-12-09 18:13:42 +01:00
Andreas Krüger ddffdb63bf Remove non-kubeadm deployment (#3811) 
* Remove non-kubeadm deployment

* More cleanup

* More cleanup

* More cleanup

* More cleanup

* Fix gitlab

* Try stop gce first before absent to make the delete process work

* More cleanup

* Fix bug with checking if kubeadm has already run

* Fix bug with checking if kubeadm has already run

* More fixes

* Fix test

* fix

* Fix gitlab checkout untill kubespray 2.8 is on quay

* Fixed

* Add upgrade path from non-kubeadm to kubeadm. Revert ssl path

* Readd secret checking

* Do gitlab checks from v2.7.0 test upgrade path to 2.8.0

* fix typo

* Fix CI jobs to kubeadm again. Fix broken hyperkube path

* Fix gitlab

* Fix rotate tokens

* More fixes

* More fixes

* Fix tokens
 2018-12-06 02:33:38 -08:00
Miao Zhou 885c6cff71 Fix AWS Node Labels Error 
Now the `kubespray-aws-inventory.py` script always set a node_labels key
to ansible_host.

When AWS instance did not set property labels, it would be an empty
string.

The TASK `Write kubelet config file (kubeadm or non-kubeadm)` will
failed with a msg:

`AnsibleUndefinedVariable: 'unicode object' has no attribute 'items'`.
 2018-11-23 17:37:41 +08:00
Evgeny Zislis 29ee581067 pin hvac version to 0.6.4 (#3692) 2018-11-15 02:08:33 -08:00
Mateus Caruccio 087b7fa38e Set node labels from AWS instance tag (#3544) 
Set kubernetes node labels from a given comma-separated list of `key=value` from AWS instance tag `kubespray-node-labels`.
 2018-11-14 00:21:56 -08:00
Antoine Legrand 3dcb914607 Remove Vault (#3684) 
* Remove Vault

* Remove reference to 'kargo' in the doc

* change check order
 2018-11-10 08:51:24 -08:00
Thomas Nys fb9155c450 Add the option to create a DNS record for bastion deployed to Azure (#3675) 
This is rather convenient if you want to configure exceptions on a
company firewall.
 2018-11-09 11:30:35 +01:00
Thomas Nys dc3195310c Add the option to add multiple ssh public keys for Azure infrastructure (#3674) 
This give users the option to define multiple ssh public keys when
deploying the base infrastructure on Azure.
 2018-11-08 15:25:07 +01:00
Erwan Miran 89ac53acd7 _ansible_item_label is not necessarily set (#3646) 2018-11-07 12:39:44 -08:00
Andreas Holmsten 289be0a0db
Fix capitalisation 2018-11-05 12:47:23 +01:00
Aivars Sterns 3c5f20190f
Merge pull request #3629 from holmsten/terraform-ops-worker-allowed-ports 
[contrib/terraform/openstack] Allow user defined port ranges for worker security group
 2018-11-03 17:52:00 +02:00
Andreas Holmsten 6c34745958
Add worker_allowed_ports 
* [contrib/terraform/openstack] Add worker_allowed_ports

  Allow user to define in terraform template which ports and remote
  IPs that are allowed to access worker nodes. This is useful when you
  don't want to open up whole NodePort range to the outside world, or
  ports outside NodePort range.
 2018-11-01 17:48:37 +01:00
Ye Ben d8b357ce49
fix typo doesnt -> doesn't 
fix typos in line 114 and 116: doesnt -> doesn't
 2018-10-31 21:27:58 +08:00
AdamDang b8bafb2893 Fix a typo in dind/README.md (#3620) 
appropiate->appropriate
 2018-10-31 11:01:13 +01:00
Ted Wexler 58b4fea2b1 Add an 'access_ip' for openstack resources to the terraform inventory builder script (#3592) 
* Add an 'access_ip' for openstack resources to the terraform inventory builder script

* Update Openstack README

* Only use ipv4

* If there's a floating IP assigned to an openstack instance, use that for access_ip
 2018-10-29 19:28:23 +01:00
Maxime Guyot 38beab8fe8 Add support for router less deployments 2018-10-19 12:39:34 +02:00