f7ef452d8a
Merge pull request #1160 from mattymo/simpler_idempotency
...
Make reset check on idempotency check optional
2017-03-20 17:04:51 +03:00
0f64f8db90
Merge pull request #1155 from mattymo/helm
...
Add helm deployment
2017-03-20 17:00:06 +03:00
c04a6254b9
Backup etcd data before restarting etcd
...
etcd is crucial part of kubernetes cluster. Ansible restarts etcd on
reconfiguration. Backup helps operator to restore cluster manually in
case of any issues.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-03-20 14:50:52 +01:00
485e17d6ed
Bump CoreOS stable to latest version
...
1298.6.0 fixes some sporadic network issues. It also includes docker
1.12.6 which includes several stability fixes for kubernetes.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-03-20 14:31:33 +01:00
952ab03d2a
Fixes for AWS Terraform Deployment
2017-03-20 12:08:17 +01:00
bbb524018e
Make reset check on idempotency check optional
...
By default we do not test reset.yml now.
2017-03-20 13:16:58 +03:00
859c08620b
Merge pull request #1105 from VincentS/aws_deployment
...
AWS Terraform for Kargo
2017-03-20 12:55:11 +03:00
f6cd42e6e0
Merge pull request #1158 from rutsky/patch-6
...
limit jinja2 version to <2.9
2017-03-19 23:42:11 +01:00
61ee67d612
limit jinja2 version to <2.9
...
Ansible 2.2.1 requires jinja2<2.9, see <https://github.com/ansible/ansible/blob/v2.2.1.0-1/setup.py#L25 >,
but without explicit limiting upper jinja2 version here pip ignores
Ansible requirements and installs latest available jinja2
(pip is not very smart here), which is incompatible with with
Ansible 2.2.1.
With incompatible jinja2 version "ansible-vault create" (and probably other parts)
fails with:
ERROR! Unexpected Exception: The 'jinja2<2.9' distribution was not found
and is required by ansible
This upper limit should be removed in 2.2.2 release, see:
<978311bf3f
2017-03-20 01:33:08 +03:00
939c1def5d
Merge pull request #1152 from mattymo/redhat_weave
...
Fix weave on RHEL deployment
2017-03-19 16:45:20 +03:00
b7ab80e8ea
Merge pull request #1149 from mattymo/centos-retries
...
Retry yum/apt/rpm download commands
2017-03-18 11:12:36 +03:00
b69d4b0ecc
Add helm deployment
2017-03-17 20:24:41 +03:00
2f437d7452
Merge pull request #1157 from rutsky/remove-change-k8s-version
...
remove obsolete script
2017-03-17 20:23:34 +03:00
d761216ec1
remove obsolete script
...
Currently Kubernetes version can be selected using "kube_version" variable.
2017-03-17 20:09:36 +03:00
088e9be931
Merge pull request #1156 from rutsky/patch-5
...
fix jinja package name
2017-03-17 20:08:36 +03:00
32ecac6464
fix jinja package name
...
Jinja 2.* releases are published under `Jinja2` name.
2017-03-17 20:07:49 +03:00
7760c3e4aa
Retry yum/apt/rpm download commands, fix succeeded filter
2017-03-17 18:56:26 +03:00
3cfb76e57f
Merge pull request #1146 from mattymo/resolvconf_optimize
...
Condense resolvconf sources before starting loop
2017-03-17 18:42:32 +03:00
e1faeb0f6c
Fix weave on RHEL deployment
...
Reduce retry delay checking weave
Always load br_netfilter module
2017-03-17 18:17:47 +03:00
25bff851dd
Merge pull request #1136 from adidenko/fix-calico-policy-order
...
Move calico-policy-controller into separate role
2017-03-17 17:32:14 +03:00
3a39904011
Move calico-policy-controller into separate role
...
By default Calico CNI does not create any network access policies
or profiles if 'policy' is enabled in CNI config. And without any
policies/profiles network access to/from PODs is blocked.
K8s related policies are created by calico-policy-controller in
such case. So we need to start it as soon as possible, before any
real workloads.
This patch also fixes kube-api port in calico-policy-controller
yaml template.
Closes #1132
2017-03-17 11:21:52 +01:00
7e1fbfba64
Merge pull request #1147 from mattymo/calico-update
...
Update calico to 1.1.0-rc8
2017-03-17 13:17:41 +03:00
a52064184e
Condense resolvconf sources before starting loop
2017-03-17 13:06:56 +03:00
b4a1ba828a
Merge pull request #1148 from VincentS/patch-1
...
Fixed Formatting / Ansbile-Playbook Command Upgrade Cluster
2017-03-16 19:55:59 +03:00
c8c6105ee2
Fixed Formatting / Ansbile-Playbook Command
...
- added -b and fixed typo in ansible-playbook command
- fixed formatting issue
2017-03-16 17:53:48 +01:00
0b49eeeba3
Update calico to 1.1.0-rc8
...
Fixes bug in CentOS/RHEL in felix related to overlayfs driver.
2017-03-16 19:23:36 +03:00
b0830f0cd7
Merge pull request #1087 from bradbeam/openstack
...
Adding openstack domain id
2017-03-16 17:53:14 +03:00
565d4a53b0
Merge pull request #1108 from idcrook/issue_1107-docker-versioning
...
Adding Docker CE 'stable' and 'edge' version packages
2017-03-16 16:32:13 +03:00
9624662bf6
Merge pull request #1141 from mattymo/idempotency2
...
More idempotency fixes
2017-03-16 12:29:42 +03:00
8195957461
Merge branch 'master' into idempotency2
2017-03-16 09:29:43 +03:00
02fed4a082
Merge pull request #1138 from mattymo/idempotency-fixes
...
Idempotency fixes for etcd certs and resolvconf tasks
2017-03-16 09:20:28 +03:00
34ecf4ea51
Merge pull request #1109 from pcm32/feature/fixTerraformOS
...
Restores working order of contrib/terraform/openstack
2017-03-15 17:15:35 +01:00
a422ad0d50
More idempotency fixes
...
Fixed sync_tokens fact
Fixed sync_certs for k8s tokens fact
Disabled register docker images changability
Fixed CNI dir permission
Fix idempotency for etcd pre upgrade checks
2017-03-15 19:06:39 +03:00
096d96e344
Merge pull request #1137 from holser/bug/1135
...
Turn on iptables for flannel
2017-03-15 17:06:42 +03:00
e61310bc89
Merge pull request #1140 from VincentS/jinja28
...
Added Jinja 2.8 to Docs
2017-03-15 13:18:53 +01:00
111ca9584e
Added Jinja 2.8 to Docs
...
Added Jinja 2.8 Requirements to docs and pip requirements file which
is needed to run the current Ansible Playbooks.
2017-03-15 13:11:09 +01:00
7d35c4592c
Merge pull request #1139 from VincentS/docu_fix
...
Fix for CoreOS Docu
2017-03-15 15:06:41 +03:00
3e8386cbf3
Fixed CoreOS Docu
...
CoreOS docu was referencing outdated bootstrap playbook that
is now part of kargo itself.
2017-03-15 13:04:01 +01:00
4354162067
Merge pull request #1080 from VincentS/Granular_Auth_Control
...
Granular authentication Control
2017-03-15 13:12:51 +03:00
a62a444229
Merge pull request #1117 from mattymo/etcd3-upgrade
...
Migrate k8s data to etcd3 api store
2017-03-15 12:56:06 +03:00
f6b72fa830
Make resolvconf preinstall idempotent
2017-03-15 01:20:13 +04:00
9667e8615f
Turn on iptables for flannel
...
Closes : #1135
Closes : #1026
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-03-14 17:54:55 +01:00
026da060f2
Granular authentication Control
...
It is now possible to deactivate selected authentication methods
(basic auth, token auth) inside the cluster by adding
removing the required arguments to the Kube API Server and generating
the secrets accordingly.
The x509 authentification is currently not optional because disabling it
would affect the kubectl clients deployed on the master nodes.
2017-03-14 16:57:35 +01:00
3feab1cb2d
Merge pull request #1134 from mattymo/1.6-support
...
Explicitly set cni-bin-dir
2017-03-14 17:53:08 +03:00
804e9a09c0
Migrate k8s data to etcd3 api store
...
Default backend is now etcd3 (was etcd2).
The migration process consists of the following steps:
* check if migration is necessary
* stop etcd on first etcd server
* run migration script
* start etcd on first etcd server
* stop kube-apiserver until configuration is updated
* update kube-apiserver
* purge old etcdv2 data
2017-03-14 17:50:20 +03:00
4c6829513c
Fix etcd idempotency
2017-03-14 17:23:29 +03:00
4038954f96
Merge pull request #1078 from VincentS/oidc_support
...
Added Support for OpenID Connect Authentication
2017-03-14 12:07:21 +03:00
52a6dd5427
Explicitly set cni-bin-dir
2017-03-13 20:13:21 +03:00
c301dd5d94
Merge pull request #1118 from mattymo/noderolelabels
...
Add node labels in kubelet
2017-03-13 19:04:21 +03:00
7cb7eee29d
Merge pull request #1116 from kubernetes-incubator/contrib_docs
...
Reference external documentation sources
2017-03-07 13:33:25 +01:00
Matthew Mosesohn
Sergii Golovatiuk
Vincent Schwarzer
Antoine Legrand
Vladimir Rutsky
Vladimir Rutsky
Aleksandr Didenko
Bogdan Dobrelya