9d7f358d4b
Fix csi-snapshotter timeout option. Fix ebs-external-attacher-role ClusterRole. ( #6776 )
2020-10-06 06:44:21 -07:00
b1bb5a4796
Fix cinder & external_openstack cacert deployment ( #6745 )
...
The CA cert was only deployed on master nodes
2020-10-06 05:34:21 -07:00
c49bda7319
Update nginx ingress controller to 0.40.1 ( #6786 )
2020-10-06 05:10:21 -07:00
9729b6b75a
Add extra arguments variables for openstack and vsphere cloud controller manager daemonsets ( #6783 )
2020-10-02 10:14:48 -07:00
bc8e16fc69
nginx ingress: fix yaml for multiple nodeselectors ( #6768 )
...
In case multiple nodeselectors are specified in ingress_nginx_nodeselector, the generated daemonset yaml template for nginx is invalid due to missing indentation starting with the second nodeselector
2020-09-30 07:23:26 -07:00
aba63f0f9a
Added support for dynamic tags in AWS and Azure. ( #6752 )
...
* Added support for dynamic tags in AWS and Azure.
* Added examples of dynamic tags configuration.
2020-09-26 10:50:48 -07:00
77149e5d89
Fixes #6740 : Allow disabling reverse DNS lookups in coredns ( #6741 )
...
* created variable to enable/disable reverse dns lookups in coredns
* fixed linting-error in dns-stack.md
2020-09-25 02:33:11 -07:00
28073c76ac
Calico upgrade path validation and old version cleanup ( #6733 )
...
* calico: add constant calico_min_version_required
and verify current deployed version against it.
* calico: remove upgrade support with data migration
The tool was used pre v3.0.0 and is no longer needed.
* calico: remove old version support from tasks
* calico: remove old ver support from policy ctrl
* calico: remove old ver support from node
* canal: remove old ver support
* remove unused calicoctl download checksums
calico_min_version_required is the oldest version that can be installed
Older versions can be removed.
2020-09-24 09:04:06 -07:00
9a8e4381be
Fix snapshot.storage apiVersion ( #6711 )
2020-09-23 08:32:10 -07:00
5ec2467268
Add external_openstack_lbaas_provider setting for occm ( #6566 )
...
* Add external_openstack_lbaas_provider setting for occm
* Integrate with existing lbaas_provider block
* Refactor lbaas_provider config template block
* Remove external_openstack_lbaas_use_octavia from sample inventory
2020-09-21 07:04:32 -07:00
bd49c993de
Added support for setting tiller_service_account and tiller_replicas ( #6696 )
...
* Added support for setting tiller_service_account and tiller_replicas
* Specify helm 2 version to ensure we have a test path that still hits helm 2 code
* Moved tiller_service_account to defaults.yml. Fixed is tiller_replicas defined check.
2020-09-20 23:52:30 -07:00
3bf40d5db9
make metallb image repos configurable ( #6671 ) ( #6672 )
...
* Make metallb image repos configurable
* Moved metallb image repo definitions to download role defaults
* Removed comment. These are set in download defaults
2020-09-17 02:45:13 -07:00
a870dd368e
Allow configuration of nodelabels in local_volume_provisioner ( #6620 )
2020-09-17 02:44:58 -07:00
152e0162a9
Update api version, deprecated in 1.19 ( #6656 )
2020-09-11 15:12:09 -07:00
03dff09b8a
fix kubelet_flexvolumes_plugins_dir undefined ( #6645 )
2020-09-11 00:34:14 -07:00
a556f8f2bf
Remove deprecated (and removed in 1.19) flag and function --basic-auth-file ( #6655 )
2020-09-11 00:30:14 -07:00
a99ba3bb16
Allowing resource management of metrics-server container. Will allow fine-tuning of resource allocation and solving throttling issues. Setting defaults as per the current request & limit allocation: cpu: 43m, memory 55Mi for both limits & requests. ( #6652 )
...
Signed-off-by: Brendan Holmes <holmesb@users.noreply.github.com>
Co-authored-by: Brendan Holmes <holmesb@users.noreply.github.com>
2020-09-10 03:46:02 -07:00
f660c29348
Declare port 10254 in nginx ingress pod template ( #6609 )
2020-09-04 04:54:11 -07:00
fc61f8d52e
Update cert manager to 0.16.1 ( #6600 )
...
* Update cert manager to 0.16.1
* Update cert manager to 0.16.1
Co-authored-by: Barry Melbourne <9964974+bmelbourne@users.noreply.github.com>
2020-09-04 04:53:48 -07:00
2ff7ab8d40
Add snapshot-controller for CSI drivers and snapshot CRDs, add a default volumesnapshotclass when running cinder CSI ( #6537 )
...
* add snapshot-controller and v1beta1 snapshot api
* fix typo
* udpate manifest to v1beta1
* update
* update manifests
* fix spelling
* wait until crd is applied
* fix missing info in kube module
* revert snapshotclass
* add snapshot crds before applying the csi driver
* add crds, missed them in last commit
* use pull policy from kubespray
2020-09-03 04:01:43 -07:00
93698a8f73
Calico: update crds to v1 and cr ( #6360 )
...
* Update CustomResourceDefinition for kubecontrollersconfigurations.crd.projectcalico.org to v1
* Align ClusterRole for kube-controllers with upstream (calico)
2020-09-03 00:51:40 -07:00
5a8b68a429
Add support for openstack application credentials ( #6534 )
...
* Add support for openstack application credentials
* Add some lines for readability
* Update external_openstack_tenant_id check
Do not check external_openstack_tenant_id when application credentials are defined
* Add check for external_openstack_domain_id
* Fix typo
2020-08-31 03:30:28 -07:00
058438a25d
Remove support for CoreOS Container Linux ( #6576 )
2020-08-28 02:28:53 -07:00
6e938a3106
Fix E306 in other roles ( #6517 )
2020-08-28 01:20:53 -07:00
2f93d62aa5
Update nginx ingress to 0.34.1 ( #6571 )
2020-08-27 10:15:53 -07:00
8e2bae0f2a
Fix Ansible Lint warnings (No such file or directory) ( #6581 )
2020-08-26 23:19:10 -07:00
2f2ed116f7
Improve metallb template for bgp peers ( #6574 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-08-26 23:15:03 -07:00
0c09ec5d13
Bump Openstack cloud controller image verison to 1.18.2 ( #6562 )
2020-08-21 00:10:03 -07:00
bf6fdce339
Fix cert-manager E305 ansible-lint error ( #6549 )
2020-08-20 04:25:45 -07:00
9cc70e9e70
Upgrade JetStack Cert-Manager to v0.15.2 ( #6414 )
...
* Upgrade JetStack Cert-Manager to v0.15.2
* Add README.md table of contents
2020-08-05 23:26:55 -07:00
e72dbf3dfc
Option for MetalLB to talk BGP ( #6383 )
...
* Option for MetalLB to talk BGP
* Check for BGP peers when metallb_protocol is bgp
* README clarification
* Commented values as documentation only in the sample inventory
* layer 2 or BGP, not both
2020-08-05 01:52:40 -07:00
cc70200a07
Fix Flexvolume mount in Openstack Controller ( #6480 )
2020-08-04 05:28:35 -07:00
f3c17361da
Create a PodDisruptionBudget for the Cinder CSI controllerplugin ( #6385 )
2020-08-04 05:28:19 -07:00
90e5f8ffe1
adding ovn4nfv in kubespray ( #6381 )
...
Signed-off-by: Kuralamudhan Ramakrishnan <kuralamudhan.ramakrishnan@intel.com>
2020-07-31 07:33:08 -07:00
8425c2363b
Replaced a broken link ( #6467 )
2020-07-30 00:58:31 -07:00
15ec44901d
azure csi typo ( #6469 )
2020-07-30 00:52:31 -07:00
214e08f8c9
Fix ansible-lint E305 ( #6459 )
2020-07-28 01:39:08 -07:00
e70f27dd79
Add noqa and disable .ansible-lint global exclusions ( #6410 )
2020-07-27 06:24:17 -07:00
1f9841f609
update cinder csi manifests ( #6434 )
2020-07-26 23:32:17 -07:00
1a1fe99669
Add a way to deploy cilium alongside another CNI ( #6373 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-07-17 05:57:01 -07:00
29312a3ec0
Add oomichi to reviwers of MetalLB addon ( #6393 )
...
I'd like to review PRs related to metallb addon as possible to make
it better, and it would be easy to track related PRs if becoming the
reviewer.
2020-07-14 20:44:37 -07:00
deca5ec903
Remove old csi-attacher flag and fix RBAC for Cinder CSI ( #6358 )
...
Add proper RBAC for new csi-attacher version
2020-07-13 04:48:32 -07:00
4cb576da19
Add readiness probe to dns-autoscaler ( #6382 )
2020-07-13 02:50:34 -07:00
9433fe46c8
Add workaround with include_task for mitogen ( #6312 )
2020-07-07 08:09:59 -07:00
060d25fc79
Update MetalLB README.md ( #6350 )
...
Recently MetalLB becomes one of addons with renaming the options.
This updates MetalLB README.md for this change.
2020-07-02 07:12:54 -07:00
017df7113d
Patch Calico for V3.14.0 missing CR and CRD ( #6276 )
2020-07-01 08:44:16 -07:00
bcac3c62a2
Add additional metadata configuration options to external Openstack CCM (kubernetes-sigs#6338) ( #6339 )
...
* Add additional metadata configuration option to external Openstack CCM (kubernetes-sigs#6338)
* Set the variable external_openstack_metadata_search_order undefined by default
2020-07-01 04:52:17 -07:00
16ec5939c2
Update deprecated api ( #6245 )
2020-06-30 09:00:07 -07:00
25bab0e976
Change MetalLB to one of addons ( #6238 )
...
This changes MetalLB contrib to one of addons for deploying MetalLB with
Kubernetes cluster deployment. By the default, Kubespray doesn't deploy
MetalLB addon.
2020-06-29 15:11:59 -07:00
4c1e0b188d
Add .editorconfig file ( #6307 )
2020-06-29 12:39:59 -07:00
1892cd65f6
Add support for dns_etchosts ( #6236 )
2020-06-26 00:03:31 -07:00
a6a6e843af
Add /dev volume ( #6319 )
2020-06-25 06:22:38 -07:00
80d16e6c91
Support for Ambassador OSS as an Ingress ( #6135 )
...
Support for Ambassador OSS as an Ingress Controller when
settings `ingress_ambassador_enabled: true`.
Signed-off-by: Alvaro Saurin <alvaro.saurin@gmail.com>
2020-06-24 07:39:17 -07:00
8f5c4dcd2e
Add support for Kata Containers ( #6256 )
...
* Install Kata Containers as additional container runtime
* Create RuntimeClasses for Kata Containers
* Updated Vagrant to optionally run without Docker as container manager
* Updated Vagrant to optionally use Libvirt nested virtualization
* Add Kata Containers documentation
* Fix lint errors
* Add kata_containers_enabled to kubespray-defaults
* Fixed typo error
* Fixed typo error
2020-06-22 00:28:39 -07:00
19d4b5dd04
Update various dependencies ( #6265 )
2020-06-16 01:08:03 -07:00
78251b0304
Fix check external_openstack_tenant_name value ( #6270 )
...
We need to specify either external_openstack_tenant_name or
external_openstack_tenant_id. Those values were checked by seeing they
are defined or they have actual values separately.
However those values are always defined because of the following code
of openstack/defaults/main.yml:
external_openstack_tenant_id: "{{ lookup('env','OS_TENANT_ID')| default(lookup('env','OS_PROJECT_ID'),true) }}"
external_openstack_tenant_name: "{{ lookup('env','OS_TENANT_NAME')| default(lookup('env','OS_PROJECT_NAME'),true) }}"
So even if not specifying both values, those checks could not detect
the misconfiguration. This fixes this to detect the misconfiguration.
2020-06-16 01:02:03 -07:00
10a17cfe54
Look up OS_PROJECT_NAME for OpenStack project name ( #6262 )
...
On OpenStack history, we used to call "tenant" for separeted namespace.
However we use "project" now instead.
Then we have replaced "tenant" with "project". Then all "TENANT" variables
also are renamed to "PROJECT".
This makes Kubespray search "PROJECT" variable also for newer OpenStack
clouds.
2020-06-12 00:47:56 -07:00
101686c665
Remove outdated CriticalAddonsOnly toleration and critical-pod annotation ( #6202 )
2020-06-09 05:23:30 -07:00
6852f821a5
Update nginx ingress to 0.32.0 ( #6063 )
2020-06-09 02:45:18 -07:00
3f443f3878
set allowVolumeExpansion in cinder csi ( #6220 )
2020-06-05 08:27:43 -07:00
85b3526617
Fix vSphere CPI configMap and vSphere CSI secret re-deploy ( #6209 ) ( #6210 )
2020-06-02 05:42:15 -07:00
be3283c9ba
Fix conflicting clusterIP fact between coredns and nodelocaldns ( #6195 )
2020-05-29 04:27:15 -07:00
f959cc296f
Fix metrics-server rules ( #6165 )
2020-05-28 03:18:02 -07:00
6179405e84
Update docker default to 19.03 - cleanup docker docs & refs ( #6153 )
2020-05-28 00:52:02 -07:00
d62836f2ab
Replace seccomp profile docker/default with runtime/default ( #6170 )
...
Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>
2020-05-27 14:02:02 -07:00
437189c213
Fix missing permissions for OpenStack cloud-controller-manager preventing metrics scraping ( #6124 )
2020-05-18 02:35:45 -07:00
b5aaaf864d
Add additional network configuration options to external Openstack CCM ( #6083 ) ( #6085 )
...
* Add additional network configuration options to external Openstack CCM (#6083 )
* Change the default version of external openstack cloud controller image to v1.18.1 since there was an issue in v1.18.0 where some IPs of the private network were ignored
* Change Network section in external-openstack-cloud-config.j2 to Networking
* Add networking customization information in the openstack documentation
2020-05-18 02:31:36 -07:00
ed12936be2
Add missing RBAC rule #6116 ( #6121 )
2020-05-11 04:25:51 -07:00
7c00ce5f30
Update metrics-server tag and template ( #6090 )
2020-05-11 03:55:50 -07:00
9ce7fc9b2c
Create namespace when dashboard deployment uses customized namespace. ( #6107 )
...
* Create namespace when dashboard deployment uses customized namespace.
* Fix syntax.
2020-05-10 11:38:02 -07:00
b6243bfc1c
Fix ImagePullPolicy missing variable usage ( #6091 )
2020-05-10 11:37:50 -07:00
367566adaa
Fix kubernetes-dashboard template identation ( #6066 )
...
The 98e7a07fba
2020-05-06 11:17:17 -07:00
680aa60429
Specify tag for OpenStack Cloud Controller image ( #6048 )
2020-04-30 02:02:17 -07:00
e41766fd58
Fix broken Octavia integration in OpenStack External Cloud Provider ( #6046 )
2020-04-29 11:30:25 -07:00
db5f83f8c9
update dashboard access doc for 2.0.x ( #6036 )
...
* update dashboard access doc for 2.0.x
* make metrics scrapper system-cluster-critical
2020-04-29 07:20:25 -07:00
a3d3f27aaa
allow dns autoscaler limits to be specified via variables ( #6020 )
2020-04-28 23:34:25 -07:00
724a316204
Cinder-CSI default storageclass and volumeBindingMode ( #6026 )
...
* Set volumeBindingMode in cinder CSI template (#22 )
* make sure true/false is lowercase in cinder-csi storageclass
2020-04-28 00:12:04 -07:00
98e7a07fba
bump to dashboard 2.0.0 with metrics scrapper support ( #5821 )
...
* bump to dashboard 2.0 rc6 with metrics scrapper
* fix missing yaml seperator making Replicaset complaining about missing ServiceAccount
* unwanted legay gross hack forgot to remove before
* no need namespace on CrBinding
* bump to 2.0.0 release
* remove dashboard_metrics_scrapper_enabled
2020-04-25 03:55:28 -07:00
299e35ebe4
Cleanup unused/erroneous variables ( #6003 )
2020-04-24 01:54:07 -07:00
b8cd9403df
Fix nginx template missing latest changes ( #6000 )
2020-04-22 08:41:52 -07:00
1c187e9729
Downgrade coredns to 1.6.5 due to upgrade errors while migrating coredns configmap (Corefile) ( #5960 )
2020-04-22 05:27:52 -07:00
03c8d0113c
Add vSphere external cloud provider ( #5959 )
2020-04-20 08:47:39 -07:00
32fec3bb74
Update minor version for tools (helm, busybox, registry etc...) ( #5961 )
2020-04-18 07:59:36 -07:00
83fe607f62
Cleanup deprecated labels beta.kubernetes.io/arch and beta.kubernetes.io/os ( #5964 )
2020-04-17 05:51:06 -07:00
0924c2510c
Use role to copy CNI bin ( #5953 )
2020-04-16 10:06:45 -07:00
00efc63f74
Customize PodSecurityPolicies from inventory ( #5920 )
...
* Customize PodSecurityPolicies from inventory
* Fixed yaml indentation
2020-04-15 03:18:02 -07:00
b5125e59ab
update rbac.authorization.k8s.io to non deprecated api-groups ( #5517 )
2020-04-14 13:14:04 -07:00
7910198b93
fix error in templating in local-path-provisioner ( #5950 )
2020-04-14 06:52:12 -07:00
45a177e2a0
add local-path-provosioner helper image def ( #5817 )
2020-04-07 23:51:43 -07:00
9b1980cfff
Change docker.io repo to variable and upgrade alb image ( #5898 )
2020-04-07 08:07:42 -07:00
937adec515
Azure Disk CSI deployment ( #5833 )
...
* Azure Disk CSI deployment
* Mention Azure CSI support
* Fix: remove unnecessary file
* Typo in documentation
* Add newline to end of file
2020-04-01 00:53:27 -07:00
484df62c5a
GCP Persistent Disk CSI Driver deployment ( #5857 )
...
* GCP Persistent Disk CSI Driver deployment
* Fix MD lint
* Fix Yaml lint
2020-03-31 00:06:40 -07:00
79a6b72a13
Removed deprecated label kubernetes.io/cluster-service ( #5372 )
2020-03-30 01:19:53 -07:00
8800eb3492
Remove unicode chars from coredns template ( #5848 )
2020-03-27 11:39:54 -07:00
3237b2702f
Add config coredns_external_zones ( #5280 )
...
Allows to add custom zone resolving servers.
2020-03-26 23:34:23 -07:00
a8a05a21a4
AWS EBS CSI implementation ( #5549 )
...
* AWS EBS CSI implementation
* Fixing image repos
* Add OWNERS file
* Fix expressions
* Add csi-driver tag
* Add AWS EBS prefix to variables
* Add AWS EBS CSI Driver documentation
2020-03-25 13:10:25 -07:00
820d8e6ce6
Adding new registry_port option ( #5779 )
...
New override are added to allow installation of the registry
on different ports than ``5000``. The default port is unchanged
from previous versions
2020-03-17 05:52:22 -07:00
3cefd60c37
Add OWNERS file for kube-router ( #5782 )
...
I propose also my help as a reviewer
2020-03-17 04:14:22 -07:00
29128eb316
Add AWS ALB Ingress Controller ( #5489 )
...
* Add AWS ALB Ingress Controller Ansible role
* remove trailing spaces
* update owners
* ALB ingress: update rbac clusterrole and remove role
* Move alb-ingress role to roles/kubernetes-apps/ingress_controller folder
2020-03-16 02:58:35 -07:00
d69db3469e
Add external zones in nodelocaldns configuration ( #5591 )
...
Allows to configure additionnal zone for domains not resolved by `upstream_dns_servers`.
2020-03-14 06:26:34 -07:00
f53ac2a5a0
Update metrics addon for 1.16 ( #5706 )
...
* upgrade metrics server and resizer images version
* scope "apps" api group for addon resizer
2020-03-13 06:46:40 -07:00
d0af5979c8
install csi-driver not just cinder ( #5766 )
2020-03-13 05:34:39 -07:00
19865e81db
Add OWNERS file for OpenStack CSI driver and cloud controller ( #5753 )
2020-03-13 02:52:39 -07:00
62b418cd16
Use 'k8s.gcr.io' instead of 'gcr.io/google-containers' ( #5709 )
...
Ref: kubernetes/kubeadm/issues/2051
See: https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/kubernetes-sig-release/ew-k9PEBckQ/T7dFepHdCAAJ
Signed-off-by: Nguyen Hai Truong <truongnh@vn.fujitsu.com>
2020-03-05 05:44:37 -08:00
588896712e
Fix kube-router config generation ( #5531 )
...
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
2020-03-04 02:11:47 -08:00
6221b94fdf
Fix variable naming bug in OpenStack CCM ( #5702 )
2020-03-03 06:45:38 -08:00
efef80f67b
Add support for HA deployment of OpenStack Cinder CSI plugin ( #5691 )
2020-03-03 06:33:38 -08:00
0c1a0ab966
implement max-volumes for cinder csi ( #5666 )
2020-03-02 03:30:43 -08:00
d1acf7f192
Add additional configuration options to external Openstack CCM ( #5661 )
...
- Add support for manage-security-groups flag
- Add support for internal-lb flag
2020-02-26 13:03:19 -08:00
171d2ce59c
Implement topology support for Cinder CSI ( #5667 )
...
* make cinder csi topology aware
* change feature description do better reflect whats being done
* remove sameas true since it isn't required
2020-02-26 05:12:25 -08:00
4c803d579b
@ #5008 | Local path provisioner boolean annotation is rendered incorrectly and not applied ( #5669 )
2020-02-22 07:08:47 -08:00
a5445d9c5c
Add stable repo on all masters with helm 3.x.x ( #5659 )
2020-02-19 14:05:46 -08:00
646fd5f47b
External OpenStack Cloud Controller Manager implementation ( #5491 )
...
* External OpenStack Cloud Controller Manager implementation
* Adding controller image tag
* Minor fixes
* Restructuring the external cloud controller to work with KubeADM
2020-02-18 04:47:28 -08:00
0ca7aa126b
added "Flatcar", "Flatcar Container Linux by Kinvolk" for all coreOS role ( #5607 )
2020-02-18 00:15:29 -08:00
fa245ffdd5
Fix some minor issues with the Cinder CSI plugin ( #5561 )
...
Add Cinder images to download role
2020-02-17 03:47:28 -08:00
579976260f
Added in code to allow control over pull policy for local path provis… ( #5334 )
...
* Added in code to allow control over pull policy for local path provisioner
* change to imagePullPolicy to use globally used variable k8s_image_pull_policy
* removed unusued variable from defaults
* updated contiv-etcd and cinder-csi-controllerplugin to use k8s_image_pull_policy variable
2020-02-17 02:13:30 -08:00
d56e9f6b80
Fix Cinder CSI bugs ( #5492 )
2020-02-17 01:49:28 -08:00
339e36fbe6
Files to archive can be passed directly ( #5571 )
2020-02-12 07:50:51 -08:00
099341582a
Update nginx image to latest ( #5590 )
2020-02-07 02:07:44 -08:00
2ab5cc73cd
Fix typo in Multus plugin. ( #5568 )
2020-01-29 01:28:13 -08:00
d640a57f9b
update api-version for PriorityClass following removal in 1.17 ( #5450 )
2020-01-16 01:52:22 -08:00
beb47e1c63
update ingress_nginx install guide ( #5502 )
2020-01-06 02:27:35 -08:00
370a0635fa
Bump nodelocaldns version to 1.15.8 ( #5447 )
...
* Bump nodelocaldns version
* Add missing upstreamsvc
2019-12-13 02:22:55 -08:00
db2ca014cb
Add Helm 3.x support ( #5441 )
...
* Add Helm 3.x support
* tiller enabled when helm < 3.0.0
2019-12-12 09:24:32 -08:00
b15d41a96a
Add support to Ansible 2.9 ( #5361 )
2019-12-05 07:24:32 -08:00
18cee65c4b
Add support for k8s v1.17.0-rc.1, remove hyperkube ( #5378 )
...
Change-Id: I3fff04f0211cd9c2e8235acaf51c3aa98abc8bb7
2019-11-28 05:41:03 -08:00
80418a44d5
CoreDNS deployment extra tolerations ( #5364 )
...
* Add extra tolerations for coredns
* dns_extra_tolerations option
* dns_extra_tolerations
* missing starting space in comment
2019-11-27 05:49:21 -08:00
97764921ed
Fix calico name resolution ( #5291 )
2019-11-11 04:01:41 -08:00
0200138a5d
Pass `ingress_nginx_extra_args` when deploying the nginx-ingress addon ( #5321 )
2019-11-11 03:51:40 -08:00
b0ee1f6cc6
Deploy Cinder CSI driver to provision volumes over OpenStack ( #5184 )
...
* Deploy Cinder CSI driver to provision volumes over OpenStack
* Deploy Cinder CSI StorageClass
* Cinder CSI doc
2019-11-01 00:59:24 -07:00
2c4e6b65d7
Raise delay and retry for rotate tokens ( #5304 )
...
Change-Id: I87844b43b9a18064e7a99567ce57c1ca1ffcc4a8
2019-10-30 01:56:52 -07:00
81d57fe658
set calico_datastore default value in role kubespray-default ( #5259 )
2019-10-17 05:58:38 -07:00
8031c6c1e7
Update template for dashboard to support v2.x ( #5187 )
...
Secrets and ConfigMap should be created before dashboard pod run.
2019-10-16 04:29:41 -07:00
0ba336b04e
install helm client separately ( #5212 )
2019-10-04 05:14:02 -07:00
89f1223f64
Fix selector workaround for helm install ( #5237 )
...
Change-Id: I826337b59814674c3feb4cd6a4904d9d53e01652
2019-10-03 23:41:56 -07:00
8bc0710073
clean up document ( #5214 )
2019-10-02 04:41:07 -07:00
99dbc6d780
clean-up doc,spelling mistakes ( #5206 )
2019-09-26 04:25:08 -07:00
2fc02ed456
fix-typo ( #5199 )
2019-09-25 04:04:00 -07:00
1ce7831f6d
Update main.yml ( #5166 )
2019-09-17 05:36:24 -07:00
cb4f797d32
Fix macro on local_volume_provisioner ( #5168 )
...
mydict.keys() should be converted to list,
otherwise it causes errors in loop iteration.
Remove extra space after class name, which broke configmap.
Also allow set reclaimPolicy property.
2019-09-13 00:50:33 -07:00
27ec548b88
Add support for k8s v1.16.0-beta.2 ( #5148 )
...
Cleaned up deprecated APIs:
apps/v1beta1
apps/v1beta2
extensions/v1beta1 for ds,deploy,rs
Add workaround for deploying helm using incompatible
deployment manifest.
Change-Id: I78b36741348f47a999df3841ee63cf4e6f377830
2019-09-10 12:06:54 -07:00
53bc80bb59
Ingress nginx ( #5066 )
...
* remove svc-default-backend
* update ingress-nginx clusterrole
2019-08-15 02:34:33 -07:00
56fa46716e
Add missing coredns tag. ( #5054 )
2019-08-09 02:29:27 -07:00
973afef96e
Fix variable for rbd_provisioner_user_secret ( #5042 )
...
* Update main.yml
* fix dead link 404
2019-08-08 20:03:25 -07:00
b710c72f04
Add ability to setup virtual ip for ingress-controller ( #5044 )
2019-08-06 19:24:50 -07:00
92bfcf0467
Add CoreDNS endpoint_pod_names option ( #5012 )
2019-07-31 11:26:15 -07:00
1be788f785
add Kube-OVN cni to kubespray ( #5020 )
2019-07-30 20:10:20 -07:00
8afbf339f7
fix broken link ( #5023 )
2019-07-30 19:18:22 -07:00
70dc222719
Upgrade local volume provisioner to v2.3.2 ( #4983 )
2019-07-16 05:27:26 -07:00
de9443a694
remove unused code ( #4981 )
2019-07-16 01:39:24 -07:00
99c5f7e013
add k8s_external plugin to CoreDNS configuration ( #4704 )
2019-07-16 00:53:23 -07:00
fd9bbcb157
Enable nodes to run calicoctl for calico kdd mode ( #4956 )
...
* Enable nodes to run calicoctl
per-node tasks require waiting for calico-node to be applied
Change-Id: Ibe1076b7334a2da0332f2dd766fde0c3f172d1f2
* cleanup tasks that should run on master
Change-Id: I43a837879ef41596f14657ecd7f813899b6865ae
* Switch run_once calico logic to just run on first master
Change-Id: I6893711e354f63c5e1eaf6ac2e23d9a6347a555d
2019-07-15 01:59:06 -07:00
29307740dd
Enable containerd to deploy vanilla containerd package ( #4951 )
...
* Enable containerd to deploy vanilla containerd package
Fixes kubeadm references to CRI socket for containerd
Fixes download role cache feature to work with containerd
Change-Id: I2ab8f0031107e2f0d1a85c39b4beb66f08509a01
* use containerd for flannel-addons job
Change-Id: Ied375c7d65e64a625ffbd995ff16f2374067dee6
* add containerd vars
Change-Id: Ib9a8a04e501c481a86235413cbec63f3672baf91
* fixup vars
Change-Id: Ibea64e4b18405a578b52a13da100384582aa24c2
* more fixes
* fix rh repo
Change-Id: I00575a77cfb7b81d6095db5d918a52023c8f13ba
* Adjust helm host install for containerd
2019-07-10 23:46:54 -07:00
20c7e31ea3
Add calico 3.7.3 support ( #4953 )
...
* Add calico 3.7.3 support
* add calico_datastore variable to policy controller role
* add missing clusterrole rules for calico policy controller
* disable calico kube controller when kdd mode is used for versions < 3.6
2019-07-09 12:42:28 -07:00
a67a50f9c0
nodelocaldns: allow to set health port, switch to 9254 by default ( #4902 )
...
8080 is a pretty common port, using nodelocaldns_ip:8080 still
prevents node processes or hostNetwork=true processes to bind to *:8080
so switch to 9254 by default (prometheus port is 9253)
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2019-07-09 00:52:01 -07:00
f2b8a3614d
Use K8s 1.15 ( #4905 )
...
* Use K8s 1.15
* Use Kubernetes 1.15 and use kubeadm.k8s.io/v1beta2 for
InitConfiguration.
* bump to v1.15.0
* Remove k8s 1.13 checksums.
* Update README kubernetes version 1.15.0.
* Update metrics server 0.3.3 for k8s 1.15
* Remove less than k8s 1.14 related code
* Use kubeadm with --upload-certs instead of --experimental-upload-certs due to depricate
* Update dnsautoscaler 1.6.0
* Skip certificateKey if it's not defined
* Add kubeadm-conftolplane.v2beta2 for k8s 1.15 or later
* Support kubeadm control plane for k8s 1.15
* Update sonobuoy version 0.15.0 for k8s 1.15
2019-07-02 01:51:08 -07:00
2849191e67
CNI plugins: use last version 0.8.1 ( #4878 )
...
* CNI plugins: bump version 0.8.1
* cni plugins : update checksums
* cni : update readme
2019-06-14 02:42:23 -07:00
c8d95a1586
Remove dnsPolicy from PSP ( #4864 )
2019-06-10 23:34:16 -07:00
5bec2edaf7
remove namespace from ClusterRole ( #4856 )
2019-06-10 11:15:12 -07:00
f504d0ea99
Remove invalid field dnsPolicy from podSecurityPolicy ( #4863 )
...
Change-Id: I02864011bf5fda5dbd35c7513c73875769036f87
2019-06-10 07:11:10 -07:00
69a8f91512
Update dns-autoscaler.yml.j2 ( #4857 )
...
Merge two tolerations. because the latest tolerations will cover the first tolerations.
2019-06-09 11:39:04 -07:00
ab6f0012cc
Make local volume provisioner dir mode a variable ( #4821 )
...
* Make local volume provisioner dir mode a variable
I need to change this for Nagios monitoring. Others may
need to as well. Had to close previous commits, sorry for
the spam.
* Make local volume provisioner dir mode a variable
I need to change this for Nagios monitoring. Others may
need to as well. Had to close previous commits, sorry for
the spam.
2019-06-06 04:36:14 -07:00
a8dfcbbfc7
Switch /root references to ansible_env.HOME ( #4842 )
...
* kube config dir for current/ansible become user
* remove extra /
* fix default value
2019-06-06 02:06:11 -07:00
818aa7aeb1
Set dnsPolicy to ClusterFirstWithHostNet when hostNetwork is true ( #4843 )
2019-06-05 03:17:55 -07:00
54416cabfd
prefer_udp for upstream dns servers ( #4810 )
2019-06-04 23:27:55 -07:00
7423932510
Add ready plugin for CoreDNS ( #4817 )
2019-05-28 06:47:56 -07:00
0ef3a7914c
Added pod psp in Rancher Local Path Provisioner ( #4385 )
...
* Added pod psp in Rancher Local Path Provisioner
Added pod security policy (psp) in Rancher Local Path Provisioner.
Signed-off-by: André R. de Miranda <andre@miranda.work>
* Apply psp for Rancher Local Path Provisioner only when local_path_provisioner_namespace is not kube-system and also reorganized the templates
2019-05-22 00:16:08 -07:00
4bc204925a
Error in nginx when starting registry-proxy ( #4785 )
...
Error starting nginx because in requiredDropCapabilities is dropped all capabilities.
The nginx requires the following capabilities:
- CHOWN
- SETGID
- SETUID
Signed-off-by: André R. de Miranda <andre@miranda.work>
2019-05-20 11:27:15 -07:00
73c2ff17dd
Fix Ansible-lint error [E502] ( #4743 )
2019-05-16 00:27:43 -07:00
14749df6f3
Fix "netchecker-server" ClusterRole ( #4730 )
...
* Add sha256 hashes for calicoctl v3.6.1
Hashes are added to calicoctl_binary_checksums for both adm and arm platforms.
* Add rules for "network-checker.ext" resource to "netchecker-server" ClusterRole
So that it could access the resource after it is created.
Corresponding issues:
https://github.com/Mirantis/k8s-netchecker-server/issues/125
https://github.com/kubernetes-sigs/kubespray/issues/3281
2019-05-09 01:30:49 -07:00
8a5eae94ea
Minor cleanups of CoreDNS issues and CI job ( #4719 )
...
* Minor cleanups
* Add comment in docs that nodelocaldns cache is enabled by default
2019-05-07 13:20:36 -07:00
e67f848abc
ansible-lint: add spaces around variables [E206] ( #4699 )
2019-05-02 14:24:21 -07:00
fbba259933
ingress-nginx: enable --report-node-internal-ip-address flag ( #4114 )
...
Close #4113
2019-04-29 01:44:22 -07:00
741de6051c
Fix nodeselectors for contiv and nginx-ingress ( #4662 )
...
* Fix nodeselectors for contiv and nginx-ingress
Change-Id: Ib3eb6bd87193c69a90ee944c9164a0b6792c79ba
* Set kube proxy mode to iptables for addons task
Change-Id: Iff71a71f672405c74b4708c71db15ddc4391a53a
2019-04-28 23:36:19 -07:00
88d919337e
ansible-lint: don't compare to empty string [E602] ( #4665 )
2019-04-28 23:00:20 -07:00
3722acee85
Fix broken metrics-server deployment not starting ( #4651 )
...
* Fix metrics-server deployment
* Make metrics server work
* Fix sample inventory
2019-04-26 00:44:26 -07:00
82119ca923
Add support calico kubernetes datastore and typha. ( #4498 )
...
* Add support calico kubernetes datastore and typha.
* Add typha_enabled to kubespray-defaults.
2019-04-25 05:00:48 -07:00
fc072300ea
Purge legacy cleanup tasks from older than 1 year ( #4450 )
...
We don't need to support upgrades from 2 year old installs,
just from the last major version.
Also changed most retried tasks to 1s delay instead of longer.
2019-04-24 00:08:05 -07:00
424e59805f
ansible-lint: Fix commands that are also available as module ( #4619 )
2019-04-23 22:18:00 -07:00
d588532c9b
Update probe timeouts, delays etc. ( #4612 )
...
* Fix merge conflict
* Add check delay
* Add more liveness and readiness options to metrics-server
2019-04-23 14:46:02 -07:00
d89ecb8308
disable metrics server and fix terraform ( #4617 )
...
* disable metrics server in centos7-flannel-addons job
Change-Id: I1d87923547584896f64dda9ea8feb5581ad48cbe
* Fix tf facility->facilities syntax
Change-Id: I434bfe53f47e8e4a546890e0b62d24bde6e6d6a7
* Update Terraform CI for facilities
* Fix undefined variable error
2019-04-23 12:06:03 -07:00
50751bb610
Revert "Optimize kube resources creation ( #4572 )" ( #4621 )
...
This reverts commit f8fdc0cd93
2019-04-23 20:37:23 +03:00
f8fdc0cd93
Optimize kube resources creation ( #4572 )
2019-04-22 23:34:10 -07:00
656633f784
YAMLLint everything ( #4576 )
2019-04-18 23:59:54 -07:00
c6586829de
Ensure /etc/bash_completion.d/ folder exists ( #4543 )
...
The Stateless ClearLinux feature[1] requires the creation of folders
in /etc folder. This change ensure the existence of the
/etc/bash_completion.d/ folder for ClearLinux Distribution.
[1] https://clearlinux.org/features/stateless
2019-04-18 02:24:10 -07:00
37eac010c8
ansible-lint: Don’t compare to literal True/False ( #4499 )
2019-04-17 08:42:03 -07:00
ec3daedf9e
Revert "Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels ( #4320 )" ( #4553 )
...
This reverts commit 586ad89d50
2019-04-17 07:58:06 -07:00
d83181a2be
add RBD Provisioner Addon ( #3667 ) ( #3668 )
...
Based on the CephFS Provisioner Addon, the following changes have been made:
- Upstream v2.1.1-k8s1.11
- Configurable Provisioner replicas
2019-04-16 23:14:02 -07:00
46ba6a4154
ansible-lint: when lines should not include Jinja2 variables ( #4496 )
2019-04-11 03:06:10 -07:00
15597aa493
Do not force TCP connections to upstreams. ( #4492 )
2019-04-10 12:40:09 -07:00
a30ad1e5a5
Added generic CNI network plugin ( #4322 )
...
* Added generic CNI network plugin
* Added CNI network plugin documentation
* added necessary fix
2019-04-10 04:16:15 -07:00
586ad89d50
Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels ( #4320 )
...
* Fix the file path for all.yml and k8s-cluster.yml
* Fix --node-labels namespace error "unknown labels specified"
* Update templates and configs kubelet node-labels
2019-04-10 04:14:12 -07:00
6caa639243
Update CoreDNS label as specified in the kubernetes coredns repository ( #3920 )
2019-04-10 04:12:13 -07:00
4d39c1856e
Fix jinja filters ( #4470 )
2019-04-09 02:19:06 -07:00
d711a0c83f
[nodelocaldns] expand tolerations on the daemonset ( #4451 )
2019-04-08 02:24:26 -07:00
7e4f4a96fc
Replace iteritems() to items() in Jinja2 templates ( #4437 )
...
The iteritems() dictionary's method has been removed in Python3. Using
this method in Jinja2 templates limits the execution to Python2 which
will be deprecated in 2020[1]. This change replaces that method for
the items() method as it's suggested in the official website[2].
[1] https://pythonclock.org/
[2] https://docs.ansible.com/ansible/latest/user_guide/playbooks_python_version.html#dict-iteritems
2019-04-08 00:32:26 -07:00
20b12751af
add Cinder allowVolumeExpansion option ( #4415 )
2019-04-04 02:36:50 -07:00
7a72e567d5
Update CoreDNS to 1.4.0 ( #4422 )
...
* Update CoreDNS to 1.4.0
* Update readme to reflect CoreDNS update
2019-04-04 00:40:50 -07:00
3c050be0b0
Update nodelocaldns cache settings ( #4423 )
2019-04-04 00:38:51 -07:00
41e684eb5a
Update DNS Autoscaler to 1.4.0 ( #4425 )
...
* Update DNS Autoscaler
* Update downloads too
* Fix yamllint
* Fix yamllint
2019-04-04 00:36:51 -07:00
rafal-jan
bozzo
Florian Ruynat
Joren Zandstra
dlandtwing
Mateusz Adamek
axelgobletbdr
Hans Feldt
Marc-Antoine
David Louks
Lukas Grossar
w33dw0r7d
holmesb
Julien Pervillé
tasekida
Hugo Blom
Barry Melbourne
Maxime Guyot
Arthur Outhenin-Chalandre
Mike Williams
Steven Reitsma
Kuralamudhan Ramakrishnan
Vladimir Masarik
Samuel Liu
Kenichi Omichi
petruha
spaced
nurekage
Paul Rey
Florian Ruynat
Joel Seguillon
Mateus Caruccio
irizzant
Alvaro
Pasquale Toscano
Aleksandr Loktionov
jeanfabrice
Wang Zhen
qvicksilver
Anton Kulikov
Victor Morales
Lee Spottiswood
Pierre Lebrun
MikeG
Ali Sanhaji
Anshul Sharma
Bjoern Teipel
Michael Shnit
Kubernetes Prow Robot
Hoat Le
Erwan Miran
Ali Sanhaji
Sylvain Chateau
lcooper40
andreyshestakov
zhanwang
Andreas Krüger
Bort Verwilst
Matthew Mosesohn
Anton Fayzrahmanov
Jacopo Secchiero
Ali Sanhaji
Sergey
andreyshestakov
陈谭军
刘旭
Danilo Riecken P. de Morais
Maxim Snezhkov
Oilbeater
rptaylor
Alex Barcelo
jlacoline
champtar
okamototk
Simon Lelievre
AlawnWong
Frank Ritchie
mervynzhang
Toni Pokki
André R. de Miranda
MarkusTeufelberger
Aleksey Kasatkin
Youngchul Bang
grialeyur
MarkusTeufelberger
Victor Morales
Jugwan Eom
Neven Miculinic
Robert Neumann
Sidharth Anupkrishnan
Xinghong Fang
Xavi