408faac3c9
Pip is required for vault #3376 ( #3378 )
...
* Change execution order for pip
* Remove spaces
2018-09-26 00:28:54 -07:00
cd4a606cb1
UI is required for vault #3376 ( #3377 )
2018-09-26 00:27:38 -07:00
36898a2c39
Adding pod priority for all the components. ( #3361 )
...
* Changes to assign pod priority to kube components.
* Removed the boolean flag pod_priority_assignment
* Created new priorityclass k8s-cluster-critical
* Created new priorityclass k8s-cluster-critical
* Fixed the trailing spaces
* Fixed the trailing spaces
* Added kube version check while creating Priority Class k8s-cluster-critical
* Moved k8s-cluster-critical.yml
* Moved k8s-cluster-critical.yml to kube_config_dir
2018-09-25 07:50:22 -07:00
d6ebe8c3e7
Sync manifests with kubeadm ( #3383 )
2018-09-24 02:17:18 -07:00
02de35cfc3
Fix some typos ( #3382 )
...
Signed-off-by: Rui Cao <ruicao@alauda.io>
2018-09-23 06:33:17 -07:00
2197330727
Add check that kube-master, kube-node and etcd groups are not empty.
2018-09-21 17:02:53 +03:00
8f85ea89fa
Added `download_validate_certs` option which allows to disables SSL validation for file downloads
2018-09-21 11:51:17 +02:00
51a5f54fc4
Merge pull request #3335 from AtzeDeVries/fix/ubuntu-xenial-resolv-conf
...
Fix/ubuntu xenial resolv conf
2018-09-20 23:16:11 -07:00
a1d6078d46
remove /var/lib/cni directory
2018-09-20 15:36:25 -04:00
7fd87b95cf
Merge pull request #3368 from woopstar/fedora_fix_1
...
Fix CI issue (Fedora task introduce new lookup plugin)
2018-09-20 08:16:22 -07:00
e3d562bcdb
Support for AWS cloud-config ( #1465 )
...
* Support for AWS cloud-config
* Update docs
* Fix version incompatibilities
* Do not use shorthand `default`
* Add new cloud config variable, roleArn
2018-09-20 16:31:28 +02:00
442e6e55b6
Fix CI issue with Fedora
2018-09-20 15:45:15 +02:00
4d1055f5d5
Remove some useless files
2018-09-20 20:24:06 +08:00
68acdd71f1
Merge pull request #3172 from Atoms/additional-proxy
...
Add additional no proxy parameter for more customization
2018-09-20 03:26:29 -07:00
62b1ea2b48
Merge pull request #3360 from gabibbo97/master
...
Support Fedora 28
2018-09-20 02:22:53 -07:00
09b67c1ad5
Remove EFK from Kubespray
2018-09-20 10:44:17 +02:00
8512cc5cca
Merge pull request #3280 from wozniakjan/openstack/openstack_cacert
...
Check `openstack_cacert` for empty string
2018-09-19 22:42:37 -07:00
3a65c66a3e
Merge pull request #3355 from wwt/rr-v3
...
Uses etcdv3 for calico 3 rr_v4 resources
2018-09-19 22:35:02 -07:00
492b3e525d
Support Fedora 28
2018-09-19 20:11:07 +02:00
639010b3df
Uses environment vars for etcd cert paths
2018-09-19 12:32:16 -05:00
34d1f0bff2
Merge pull request #3351 from woopstar/kubeadm_token_basic_auth_fix
...
Mount basic auth or token auth dirs to support it on kubeadm deployments
2018-09-19 07:50:43 -07:00
a330b281e8
Check `openstack_cacert` for empty string
2018-09-19 16:37:24 +02:00
6f9f80acee
Uses etcdv3 for calico 3 rr_v4 resources
2018-09-19 09:22:52 -05:00
a8a62afd74
Merge pull request #3304 from kubernetes-incubator/gpu2
...
Add support for GPU accelerator
2018-09-19 07:12:32 -07:00
7fa682bdd5
Merge pull request #3342 from okamototk/fix_path_for_kubeadm_join
...
Add kubelet path for kubeadm.
2018-09-19 06:17:47 -07:00
34019291b8
Merge pull request #3143 from jbcraig/add_os_trust_id
...
add support for openstack trust to cloud provider config
2018-09-19 16:07:03 +03:00
08179018d4
Merge branch 'master' into gpu2
2018-09-19 15:02:51 +02:00
b796226869
Merge pull request #3325 from firaxis/configurable_felix_healthhost
...
Make Felix healthhost configurable
2018-09-19 06:02:29 -07:00
39c567de47
Merge pull request #3307 from kaarolch/upgrade_docs
...
Calico version verification before cluster upgrade begin.
2018-09-19 05:15:55 -07:00
da4cc74498
Merge pull request #3340 from wwt/master
...
Fixes Calico 3.x BGPPeer resources
2018-09-19 04:43:35 -07:00
cac485756b
Mount basic auth or token auth dirs to support it on kubeadm deployments
2018-09-19 13:21:58 +02:00
c058e7a5ec
Remove audit again from Kubeadm 1.10.x. Write mounts not supported untill 1.11
2018-09-19 13:15:14 +02:00
e0ddabc463
Add support for kubelet_node_custom_flags
2018-09-19 12:58:06 +02:00
940d2fdbb1
Add missing enforce-node-allocatable to kubelet for kubeadm deployments
2018-09-19 11:54:34 +02:00
1c999b2a61
Move kube_kubeadm_controller_extra_args to controllerManagerExtraArgs section. It was placed in controllerManagerExtraVolumes
2018-09-19 11:24:19 +02:00
8e37841a2e
Add audit support to v1alpha1 of Kubeadm
2018-09-19 11:01:30 +02:00
8d1c0c469c
Added missing enable-aggregator-routing option
2018-09-19 10:58:46 +02:00
26d7380c2e
Sync manifests from non-kubeadm to kubeadm deploy
2018-09-19 10:01:45 +02:00
95703fb6f2
Add kubelet path for kubeadm.
2018-09-19 03:04:03 +00:00
0121bce9e5
Instead of doc update, change the verify step
2018-09-18 22:13:15 +02:00
fb1678d425
Ensures BGPPeer resource names are unique
2018-09-18 10:48:30 -05:00
884053aaa7
Make Felix healthhost configurable
2018-09-18 15:48:29 +03:00
3d27007750
Merge pull request #3329 from riverzhang/checksum
...
Keep list of k8s checksums for hyperkube and kubeadm
2018-09-18 02:42:59 -07:00
4cbd97667d
Merge remote-tracking branch 'upstream/master' into fix/ubuntu-xenial-resolv-conf
2018-09-18 09:51:46 +02:00
2730c90dcd
Merge pull request #3320 from riverzhang/kubelet
...
Support dynamic kubelet config
2018-09-18 00:16:04 -07:00
09a1bcb30b
Keep list of k8s checksums for hyperkube and kubeadm
...
Keep a list of checksums for kubeadm and hyperkube downloads.
Makes it easier to switch version
2018-09-18 15:05:17 +08:00
77e08ba204
Support dynamic kubelet config
...
https://kubernetes.io/blog/2018/07/11/dynamic-kubelet-configuration/
2018-09-18 08:44:39 +08:00
d3adf09bde
Fixes BGPPeer resource for calico >= 3.0.0
2018-09-17 15:22:28 -05:00
afa2a5f1c4
enhanced reset for contiv
2018-09-17 16:46:19 +02:00
bcaf2f9ea3
contiv 1.2.1
2018-09-17 16:45:05 +02:00
d16b562b18
Merge pull request #3316 from mattymo/tiller_override_fix
...
Fix tiller override command
2018-09-17 05:12:05 -07:00
0538f8a70d
Merge pull request #3290 from riverzhang/fix-upgrade
...
Fix upgrade k8s
2018-09-17 04:26:47 -07:00
1a426ada3c
Merge pull request #3324 from alvistack/cert-manager-v0.5.0
...
cert-manager: Upgrade to 0.5.0
2018-09-17 04:20:56 -07:00
a544e54578
weave: Upgrade to 2.4.1
...
Upstream Changes:
- weave 2.4.1 (https://github.com/weaveworks/weave/releases/tag/v2.4.1 )
Our Changes:
- Templates sync with upstream manifests
2018-09-17 17:09:19 +08:00
f34a6699ef
cert-manager: Upgrade to 0.5.0
...
Upstream Changes:
- cert-manager 0.5.0 (https://github.com/jetstack/cert-manager/releases/tag/v0.5.0 )
Our Changes:
- Templates sync with upstream manifests
2018-09-17 16:58:04 +08:00
482857611a
added extra var for ubuntu 18 netplan resolv
2018-09-17 09:01:55 +02:00
8d8bbc294a
fix for resolvconf in ubuntu18
2018-09-17 09:00:55 +02:00
7f91f6e034
Merge pull request #3287 from Kami-no/coredns_metrics
...
Monitor CoreDNS over svc
2018-09-16 23:39:59 -07:00
84c4c7dc82
Use synchronize module
2018-09-16 20:36:44 +08:00
1d4aa7abcc
Fix upgrade k8s
2018-09-16 10:35:12 +08:00
fe35c32c62
Fix tiller override command
2018-09-15 16:35:19 +03:00
aa0da221e9
Merge pull request #2880 from hfinucane/rh7-paths
...
Fix #2261 by supporting Red Hat's limited PATH
2018-09-15 19:27:22 +08:00
f1403493df
Merge pull request #3296 from rabi/fix_cilium_crio
...
Add volume and volumeMount for crio-socket
2018-09-15 03:23:02 -07:00
36901d8394
Merge pull request #3309 from ant31/fix_download_file
...
Fix download file
2018-09-15 03:18:23 -07:00
e6a2e34dd1
Merge pull request #3315 from riverzhang/upgrade-kubedns
...
Upgrade kubedns to 1.14.11
2018-09-15 02:08:20 -07:00
934d92f09c
Upgrade kubedns to 1.14.11
2018-09-15 15:22:38 +08:00
5e59541faa
Merge pull request #3258 from okamototk/fix_kubectl_path
...
absolute path for kubectl.
2018-09-13 14:38:20 -07:00
d94b7fd57c
Don't download binary if docker is selected
2018-09-13 22:06:51 +02:00
9964ba77ee
Merge pull request #3305 from mattymo/fixup_upgrade
...
Fixes for upgrade mode
2018-09-13 12:57:23 -07:00
153661cc47
Merge pull request #3284 from mattymo/more_calico_legacy
...
Put back legacy support for calico ippools and bgp settings
2018-09-13 09:25:26 -07:00
8becd905b8
Fixes for upgrade mode
...
Uses correct flag for draining with a pod selector
Verifies minimum kubectl version for compatibility
2018-09-13 18:42:01 +03:00
c83350e597
refactor to base on calico_version
2018-09-13 18:05:10 +03:00
ffbe9e7fd8
Merge pull request #1973 from guenhter/rsync-cmd-to-synchronize
...
Replace the raw rsync command with the synchronize module
2018-09-13 03:12:05 -07:00
91b02c057e
Add support for GPU accelerator
2018-09-13 11:53:11 +02:00
55d76ea3d8
Update install.yml
2018-09-13 12:04:53 +03:00
1df0b67ec1
Add volume and volumeMount for crio-socket
...
This commit fixes #3295
2018-09-13 14:34:44 +05:30
218e527363
Merge pull request #3243 from mirwan/helm_binary_should_be_installed_on_all_masters
...
Install Helm client on all masters
2018-09-13 00:39:36 -07:00
27fc391f71
Merge pull request #3291 from mirwan/remove_insecure-bind-address_when_insecure_port_is_0
...
Remove --insecure-bind-address when insecure-port=0
2018-09-13 00:34:39 -07:00
1091e82327
Update install.yml
2018-09-12 22:15:46 +03:00
a5cc8537f9
Merge pull request #3283 from mattymo/more_upgrade_options
...
Extra options for upgrade mode
2018-09-12 10:50:33 -07:00
d692737a13
Extra options for upgrade mode
...
Optionally do not drain nodes by setting drain_nodes to false
Optionally set a labelselector to target which pods should be drained.
2018-09-12 17:05:41 +03:00
cc79125d3e
Update install.yml
2018-09-12 17:03:55 +03:00
a801e02cea
Merge pull request #3261 from mattymo/etcd_ssl_dir_perms
...
Ensure etcd file permissions are correct when using vault
2018-09-12 01:10:26 -07:00
29c7775ea1
Monitor CoreDNS over svc
2018-09-12 10:24:15 +03:00
cbf099de4d
Merge pull request #3285 from mirwan/fix_netchecker_sa_when_psp
...
Fix wrong sa name in crb when psp is enabled
2018-09-12 00:20:38 -07:00
c8630f46fd
Merge pull request #3286 from fritchie/master
...
Change update strategy to RollingUpdate
2018-09-12 00:18:05 -07:00
af74d85b7d
Remove --insecure-bind-address when insecure-port=0
2018-09-12 08:22:11 +02:00
97e5f28537
Revert "Remove insecure-port and insecure-bind-address when possible"
2018-09-11 17:42:12 -05:00
f42e0a4711
Change update strategy to RollingUpdate.
...
When enable_network_policy is set to True with Calico 3 kubectl
apply fails with the error:
The Deployment "calico-kube-controllers" is invalid:
spec.strategy.rollingUpdate: Forbidden: may not be specified when
strategy type is 'Recreate'
See
https://github.com/kubernetes-incubator/kubespray/issues/3267
Changing the update strategy to RollingUpdate avoids this error.
2018-09-11 12:03:42 -04:00
d91f9e14e6
Put back legacy support for calico ippools and bgp settings
2018-09-11 16:40:11 +03:00
e24b1220a0
Fix wrong sa name in crb when psp is enabled
2018-09-11 15:04:55 +02:00
0a720b35af
Merge pull request #3270 from riverzhang/fix-registry
...
Add insecure_registry config to docker options
2018-09-10 04:28:52 -07:00
f557b54489
Add `docker_` to values
2018-09-10 18:05:49 +08:00
04852ad753
Install Helm on all masters
2018-09-10 11:39:26 +02:00
aaa9a4efac
Ensure vault file permissions are correct
2018-09-10 12:04:04 +03:00
0140cf71c8
Upgrade kubernetes to v1.11.3
2018-09-10 15:52:49 +08:00
51794e4c13
Deploying k8s clusters in a private environment
2018-09-09 11:06:00 +08:00
b249b06036
Move docker options to kubespray-defaults
2018-09-09 10:21:18 +08:00
20caaf9d1f
Delete gitignore file
2018-09-09 02:09:02 +08:00
c41ca22a78
Planning the configuration of docker parameters
2018-09-09 00:59:59 +08:00
b891d77679
add option to secure helm tiller with tls
2018-09-07 10:29:31 -05:00
5c2e9a5376
Merge pull request #3252 from mirwan/remove_insecure-bind-address_when_insecure-bind-port_is_0
...
Remove insecure-port and insecure-bind-address when possible
2018-09-07 07:41:21 -07:00
b3a689658b
Merge pull request #3255 from mlushpenko/calico_check
...
Fix calico health checks
2018-09-07 07:39:20 -07:00
d182d4f979
absolute path for kubectl.
2018-09-07 09:33:43 -04:00
9c49e071d3
Merge pull request #3260 from riverzhang/discoverytimeout
...
Add discovery_timeout to join configuration
2018-09-07 05:20:19 -07:00
0f63924ed4
Add discovery_timeout to join configuration
...
https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha2#JoinConfiguration
2018-09-07 16:28:53 +08:00
ea2c9d8f57
Fix yaml checks
2018-09-06 16:26:57 +02:00
f958b32c83
Fix calico health checks
2018-09-06 15:57:21 +02:00
2faa8f1e37
Merge pull request #3254 from mattymo/calico_upgrade_tweaks
...
Fix backward compatibility with calico 2.6
2018-09-06 06:20:52 -07:00
ab462d92b8
Merge pull request #3249 from mattymo/fix_missing_var_kube_proxy_nodeport
...
Add missing variable kube_proxy_nodeport_addresses
2018-09-06 06:18:23 -07:00
27905bbddf
Merge pull request #3250 from mattymo/openstack_cacert
...
Fix openstack cacert task
2018-09-06 06:15:59 -07:00
dc3e317d20
Fix backward compatibility with calico 2.6
2018-09-06 15:54:20 +03:00
a5509fc2ce
Remove insecure-port and insecure-bind-address when possible
2018-09-06 13:46:09 +02:00
b614a3504b
Fix openstack cacert task
2018-09-06 14:06:06 +03:00
cd8e469b9c
Add missing variable kube_proxy_nodeport_addresses
2018-09-06 13:36:17 +03:00
991b3dbe54
put back endif in kubelet rkt template
2018-09-06 13:21:22 +03:00
f5251f7d27
Merge pull request #3247 from mattymo/kubelet_rkt_Fix
...
remove broken endifs in kubelet rkt mode
2018-09-06 02:49:35 -07:00
faedfb6307
remove broken endifs in kubelet rkt mode
2018-09-06 11:59:25 +03:00
1940495817
Merge pull request #3246 from riverzhang/pause
...
Upgrade pause image to 3.1
2018-09-06 00:48:05 -07:00
b979fb0116
Upgrade pause image to 3.1
2018-09-06 14:15:51 +08:00
7e140e5f3c
Merge pull request #3122 from jbcraig/fix_cacert_feature
...
resolve issues with new cacert feature
2018-09-05 23:31:53 +02:00
435e098751
Fix feature-gates
2018-09-05 22:55:51 +08:00
055e80f846
Merge pull request #3244 from ant31/calico31
...
Reverts calico update to 3.2.0, fixes #3223
2018-09-05 11:45:22 +02:00
15363530ae
Reverts calico update to 3.2.0, fixes #3223
2018-09-05 11:44:32 +02:00
83838b7fbc
Add new OCI cloud controls
2018-09-04 14:03:17 -04:00
6569180654
remove capitalize filter
2018-09-04 14:56:53 +02:00
ad33f71ac2
Merge pull request #3228 from mirwan/credentials_dir
...
Introducing credentials_dir variable in order to be able to override it
2018-09-04 04:35:11 -07:00
50c6a98b15
Merge pull request #3229 from mirwan/docker_1806_ubuntu_under_bionic
...
Docker 18.06 for ubuntu versions before bionic
2018-09-03 11:37:13 -07:00
a644b7c267
Introducing credentials_dir in order to be able to override it
2018-09-03 18:04:50 +02:00
8c9588ab59
Add additional no proxy parameter for more customization
2018-09-03 17:09:58 +03:00
c0ce875743
change edge to 18.06 for ubuntu
2018-09-03 14:11:25 +02:00
a22d28e1c1
docker 18.06 for ubuntu version before bionic
2018-09-03 14:10:51 +02:00
c32145057d
Merge pull request #3178 from gitphill/patch-1
...
Add azure-container-registry-config for Azure
2018-09-03 05:06:01 -07:00
fbb98b0070
Fix the jinja expression for openstack_tenant_id ( #3151 )
...
OS_PROJECT_ID is obsolete in keystone v3 and jinja expression
doesn't set openstack_tenant_id as expected because of
undefined env var. Fixed the expression.
2018-09-03 14:59:49 +03:00
db11394711
Merge pull request #3200 from pablodav/feature/k8s_win_v1.11
...
Required support to start working on windows node support
2018-09-03 04:51:23 -07:00
fd57fde075
Always run helm init to allow for settings changes
2018-09-03 11:16:01 +03:00
9fc8f9a07d
ingress-nginx: Upgrade to 0.19.0
...
Upstream Changes:
- ingress-nginx 0.19.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.19.0 )
Our Changes:
- Sync templates with upstream changes
2018-09-03 08:00:08 +08:00
7cbe3c2171
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
...
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
remove empty when line
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
force kubeadm upgrade due to failure without --force flag
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
added nodeSelector to have compatibility with hybrid cluster with win nodes, also fix for download with missing container type
fixes in syntax and LF for newline in files
fix on yamllint check
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
some cleanup for innecesary lines
remove conditions for nodeselector
2018-09-02 12:47:06 -03:00
a47c9239e8
Merge pull request #3221 from alvistack/cephfs-provisioner-v2.1.0-k8s1.11
...
cephfs-provisioner: Upgrade to v2.1.0-k8s1.11
2018-09-02 04:16:17 -07:00
635ca1a0b8
Merge pull request #3220 from alvistack/coredns-1.2.2
...
coredns: Upgrade to v1.2.2
2018-09-02 04:13:53 -07:00
32fdfbcd5a
cephfs-provisioner: Upgrade to v2.1.0-k8s1.11
...
Upstream Changes:
- cephfs-provisioner v2.1.0-k8s1.11 (https://github.com/kubernetes-incubator/external-storage/releases/tag/cephfs-provisioner-v2.1.0-k8s1.11 )
Our Changes:
- Sync clusterrole and role with upstream changes
2018-09-02 11:51:28 +08:00
df8b27c03c
coredns: Upgrade to v1.2.2
...
Upstream Changes:
- coredns v1.2.2 (https://github.com/coredns/coredns/releases/tag/v1.2.2 )
NOTE:
- coredns image for 1.2.0 and 1.2.1 had been removed from https://console.cloud.google.com/gcr/images/google-containers/GLOBAL/coredns
2018-09-02 11:37:21 +08:00
8e95974930
Fix ports for kubeadm client and master configs for ha setups
2018-09-01 18:02:52 +02:00
13dda0e36e
Merge pull request #3207 from mirwan/fix_3206
...
Fix target hosts generation when /etc/hosts does not contain 127.0.0.1 or ::1
2018-08-31 17:50:56 -07:00
6e7100f283
Merge pull request #3208 from mirwan/etcd_ha_doc_n_cleaning
...
Add documentation about having HA for etcd
2018-08-31 08:06:05 -07:00
059cd17b47
Fix target hosts generation when /etc/hosts does not contain 127.0.0.1 or ::1
2018-08-31 16:33:18 +02:00
fb7b3305dc
Merge pull request #3209 from mirwan/use_etcd_events_access_address
...
etcd_events_access_address should be used for peer_url and client_url
2018-08-31 07:26:25 -07:00
81c3f2c971
etcd_events_access_address should be used for peer_url and client_url
2018-08-31 15:03:07 +02:00
82a28d6bb3
Add documentation about having HA for etcd
2018-08-31 14:40:25 +02:00
22f9114630
update calico to 3.2.0
2018-08-31 13:45:08 +02:00
Tupin Laurent
Kuldip Madnani
Andreas Krüger
Rui Cao
Sergey Magidovich
Anatoly Rugalev
k8s-ci-robot
Chris Randles
Rajitha Perera
rongzhang
Giacomo Longo
Kevin Schuck
Jan Wozniak
Aivars Sterns
Antoine Legrand
Takashi Okamoto
Karol Chrapek
Alex Yakovenko
AtzeDeVries
Erwan Miran
Wong Hoi Sing Edison
Matthew Mosesohn
Matthew Mosesohn
rabi
Zinin D.A
Chad Swenson
Frank Ritchie
georgejdli
mlushpenko
Jeff Bornemann
Luis Nunez
Atoms
rboyapat
Pablo Estigarribia