Matthew Mosesohn
77602dbb93
Move calico to daemonset ( #1605 )
...
* Drop legacy calico logic
* add calico as a daemonset
2017-09-04 11:29:51 +03:00
Matthew Mosesohn
a3e6896a43
Add RBAC support for canal ( #1604 )
...
Refactored how rbac_enabled is set
Added RBAC to ubuntu-canal-ha CI job
Added rbac for calico policy controller
2017-09-04 11:29:40 +03:00
Brad Beam
8b151d12b9
Adding yamllinter to ci steps ( #1556 )
...
* Adding yaml linter to ci check
* Minor linting fixes from yamllint
* Changing CI to install python pkgs from requirements.txt
- adding in a secondary requirements.txt for tests
- moving yamllint to tests requirements
2017-08-24 12:09:52 +03:00
Matthew Mosesohn
ca3050ec3d
Update to Kubernetes v1.7.3 ( #1549 )
...
Change kubelet deploy mode to host
Enable cri and qos per cgroup for kubelet
Update CoreOS images
Add upgrade hook for switching from kubelet deployment from docker to host.
Bump machine type for ubuntu-rkt-sep
2017-08-21 10:53:49 +03:00
Maxim Krasilnikov
2ba285a544
Fixed deploy cluster with vault cert manager ( #1548 )
...
* Added custom ips to etcd vault distributed certificates
* Added custom ips to kube-master vault distributed certificates
* Added comment about issue_cert_copy_ca var in vault/issue_cert role file
* Generate kube-proxy, controller-manager and scheduler certificates by vault
* Revert "Disable vault from CI (#1546 )"
This reverts commit 781f31d2b8
.
* Fixed upgrade cluster with vault cert manager
* Remove vault dir in reset playbook
2017-08-20 13:53:58 +03:00
Matthew Mosesohn
781f31d2b8
Disable vault from CI ( #1546 )
...
https://github.com/kubernetes-incubator/kubespray/issues/1545
2017-08-18 16:45:27 +03:00
Matthew Mosesohn
df28db0066
Fix cert and netchecker upgrade issues ( #1543 )
...
* Bump tag for upgrade CI, fix netchecker upgrade
netchecker-server was changed from pod to deployment, so
we need an upgrade hook for it.
CI now uses v2.1.1 as a basis for upgrade.
* Fix upgrades for certs from non-rbac to rbac
2017-08-18 15:46:22 +03:00
jwfang
5fa31eaead
add '-e "${AUTHORIZATION_MODES}"' for all cluster.yml
2017-07-17 19:29:59 +08:00
jwfang
d245201614
test: change ubuntu_calico_rbac to ubuntu_flannel_rbac
2017-07-17 19:29:59 +08:00
jwfang
552b2f0635
change authorization_modes default value
2017-07-17 19:29:59 +08:00
jwfang
8d2fc88336
add ci test for rbac
2017-07-17 19:29:59 +08:00
Hans Kristian Flaatten
6bd27038cc
Set kubedns min replicas to 1 in gitlab config
2017-07-04 16:58:16 +02:00
Hans Kristian Flaatten
5df757a403
Correct indentation and line endings for gitlab config
2017-07-04 16:58:16 +02:00
Spencer Smith
b2a409fd4d
turn off coreos updates
2017-06-26 15:45:08 -04:00
Spencer Smith
11ede9f872
use latest coreos-stable for testing to avoid upgrades during deployment
2017-06-02 12:24:54 -04:00
Sergii Golovatiuk
28f55deaae
Switch CI to ansible 2.3.0
...
Closes: 1253
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-27 12:50:16 +02:00
Matthew Mosesohn
14911e0d22
Add minimal k8s upgrade playbook
2017-04-18 13:28:36 +03:00
Matthew Mosesohn
d42e4f2344
Update .gitlab-ci.yml
2017-03-30 12:19:15 +04:00
Matthew Mosesohn
0794a866a7
switch debian8-canal-ha to ubuntu
2017-03-27 13:28:37 +03:00
Matthew Mosesohn
5ed03ce7f0
Use checksum of dnsmasq config to trigger updates of dnsmasq
...
Allows config changes made by Ansible to restart dnsmasq deployment
2017-03-27 13:28:37 +03:00
Matthew Mosesohn
c1b9660ec8
Move graceful upgrade test to debian canal HA, adjust drain
...
Graceful upgrades require 3 nodes
Drain now has a command timeout of 40s
2017-03-27 13:28:37 +03:00
Matthew Mosesohn
463ef3f8bc
Merge pull request #1168 from mattymo/disable_download_delegate
...
Disable download_run_once and download_localhost for most CI scenarios
2017-03-22 12:19:24 +03:00
Matthew Mosesohn
a495bbc1db
Disable download_run_once and download_localhost for most CI scenarios
...
This adds time to deployment, so we should only test it sparingly during
daily master.
2017-03-21 16:41:30 +03:00
Matthew Mosesohn
771aef0b44
Merge pull request #1162 from holser/bump_coreos_ci
...
Bump CoreOS stable to latest version
2017-03-20 17:45:04 +03:00
Sergii Golovatiuk
485e17d6ed
Bump CoreOS stable to latest version
...
1298.6.0 fixes some sporadic network issues. It also includes docker
1.12.6 which includes several stability fixes for kubernetes.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-03-20 14:31:33 +01:00
Matthew Mosesohn
bbb524018e
Make reset check on idempotency check optional
...
By default we do not test reset.yml now.
2017-03-20 13:16:58 +03:00
Matthew Mosesohn
85ed4157ff
Add upgrade-cluster and reset playbooks to syntax check
2017-03-02 09:37:16 +04:00
Matthew Mosesohn
efb45733de
Remove upgrade from the ubuntu-rkt-sep CI job
2017-02-27 18:16:22 +03:00
Matthew Mosesohn
2ba66f0b26
Change coreos-alpha dns mode to host_resolvconf
2017-02-21 18:14:42 +03:00
Matthew Mosesohn
43e86921e0
pin coreos-alpha to 1325
2017-02-19 16:23:35 +03:00
Matthew Mosesohn
ce4eefff6a
Use first kube-master to check results
2017-02-18 14:11:51 +04:00
Matthew Mosesohn
9c1701f2aa
Add synthetic scale deployment mode
...
New deploy modes: scale, ha-scale, separate-scale
Creates 200 fake hosts for deployment with fake hostvars.
Useful for testing certificate generation and propagation to other
master nodes.
Updated test cases descriptions.
2017-02-18 14:09:55 +04:00
Antoine Legrand
b84cc14694
Merge pull request #1029 from mattymo/graceful
...
Add graceful upgrade process
2017-02-17 21:24:32 +01:00
Matthew Mosesohn
a510e7b8f3
Use gce hostname as inventory name
...
Calico does not allow renaming hosts
2017-02-17 20:21:58 +03:00
Matthew Mosesohn
617edda9ba
Adjust weave daemonset for serial deployment
2017-02-16 18:24:30 +03:00
Matthew Mosesohn
97ebbb9672
Add graceful upgrade process
...
Based on #718 introduced by rsmitty.
Includes all roles and all options to support deployment of
new hosts in case they were added to inventory.
Main difference here is that master role is evaluated first
so that master components get upgraded first.
Fixes #694
2017-02-16 17:18:38 +03:00
Vladimir Rutsky
c02213e4af
force reset confirmation in CI
2017-02-16 16:35:01 +03:00
Matthew Mosesohn
ee15f99dd7
Add CI cases for testing upgrade from v2.0.1 release
...
These are manual trigger jobs, but should be run if any PR
impacts upgrades.
2017-02-10 10:20:58 +04:00
Josh Conant
245e05ce61
Vault security hardening and role isolation
2017-02-08 21:41:36 +00:00
Sergii Golovatiuk
5122697f0b
Improve Weave
...
- Remove weave CPU limits from .gitlab-ci.yml. Closes : #975
- Fix weave version in documentation
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-06 13:24:40 +01:00
Bogdan Dobrelya
e7c03ba66a
Merge pull request #955 from mattymo/disable-idempotency-check
...
Disable idempotency for ubuntu-weave-sep
2017-01-31 14:55:27 +01:00
Matthew Mosesohn
6463a01e04
Merge pull request #880 from bradbeam/weave-kube
...
Weave kube
2017-01-31 13:31:09 +03:00
Matthew Mosesohn
0cf1850465
Disable idempotency for ubuntu-weave-sep
...
CI is failing 40% of the time due to errors in reset.
Let's disable idempotency check per-patch until we fix it.
Fixes #953
2017-01-31 13:23:27 +03:00
Bogdan Dobrelya
71a3c97d6f
Merge pull request #943 from bradbeam/cilint
...
Fixing lint check for ci
2017-01-30 09:19:44 +01:00
Brad Beam
a11b9d28bd
Upgrading weave to weave-kube
2017-01-27 17:05:25 -06:00
Bogdan Dobrelya
dc8ff413f9
Merge pull request #948 from mattymo/update_coreos
...
Update coreos-stable image
2017-01-27 17:53:17 +01:00
Matthew Mosesohn
a2079a9ca9
Update coreos-stable image
...
Our old coreos-stable image has docker 1.10
2017-01-27 16:20:40 +04:00
Brad Beam
fe83e70074
Fixing lint check for ci
2017-01-25 09:54:32 -06:00
Brad Beam
2333ec4d1f
Splitting out moderator check from syntax check
...
- Attempt to clarify CI runs from contributors
2017-01-24 23:05:12 -06:00
Bogdan Dobrelya
1bdf34e7dc
Merge pull request #915 from bradbeam/ci
...
Sorting ansible args, fixed ci cluster_mode
2017-01-20 09:43:10 +01:00