kubespray/tests/files
Nicolas Goudry c6fcbf6ee0
Remove access to cluster from anonymous users (#11016)
* feat: add user facing variable with default

* feat: remove rolebinding to anonymous users after init and upgrade

* feat: use file discovery for secondary control plane nodes

* feat: use file discovery for nodes

* fix: do not fail if rolebinding does not exist

* docs: add warning about kube_api_anonymous_auth

* style: improve readability of delegate_to parameter

* refactor: rename discovery kubeconfig file

* test: enable new variable in hardening and upgrade test cases

* docs: add option to config parameters

* test: multiple instances and upgrade
2024-04-02 23:54:12 -07:00
..
custom_cni Network plugin custom (#9819) 2023-03-03 00:23:08 -08:00
packet_almalinux8-calico-ha-ebpf.yml calico: cilium: use localhost lb by default on kube-proxy replacement (#9718) 2023-03-07 04:28:36 -08:00
packet_almalinux8-calico-nodelocaldns-secondary.yml [calico] switch default iptables backend detection to Auto (#8429) 2022-01-23 23:47:57 -08:00
packet_almalinux8-calico-remove-node.yml [CI] add remove node job 2022-05-04 06:35:51 -07:00
packet_almalinux8-calico.yml Add scheduler plugins support (#10747) 2024-01-23 07:42:33 +01:00
packet_almalinux8-crio.yml [calico] switch default iptables backend detection to Auto (#8429) 2022-01-23 23:47:57 -08:00
packet_almalinux8-docker.yml [docker] use cri-dockerd instead of dockershim for any kubernetes version deployed with docker as the container_manager 2022-06-15 00:57:20 -07:00
packet_almalinux8-kube-ovn.yml CI: Replace CentOS 8 with AlmaLinux 8 before CentOS 8 EOL end of 2021 (#8297) 2022-01-05 02:20:33 -08:00
packet_amazon-linux-2-all-in-one.yml CI: Document the 'all-in-one' layout + small refactoring (#10725) 2023-12-18 11:33:13 +01:00
packet_centos7-calico-ha-once-localhost.yml [calico] add calico apiserver (#8690) 2022-04-08 00:02:42 -07:00
packet_centos7-calico-ha.yml [calico] add calico apiserver (#8690) 2022-04-08 00:02:42 -07:00
packet_centos7-flannel-addons-ha.yml Update MetalLB deployment, wait for resource. (#9995) 2023-05-30 11:37:49 -07:00
packet_centos7-multus-calico.yml Cleanup tests (#8234) 2021-11-26 09:00:51 -08:00
packet_centos7-weave-upgrade-ha.yml [CI] use debian-11 image with more disk space to ensure successful upgrade tests 2022-06-17 08:00:32 -07:00
packet_debian10-calico.yml CI: fix test name debian10-aio was a 2 instance default (#8286) 2021-12-13 14:50:25 -08:00
packet_debian10-cilium-svc-proxy.yml Cleanup tests (#8234) 2021-11-26 09:00:51 -08:00
packet_debian10-docker.yml containerd: change default resolvconf_mode to host_resolvconf (#8247) 2021-12-09 14:09:06 -08:00
packet_debian10-macvlan.yml Remove the Support of Debian 9 because Debian 9 is EOF (#10097) 2023-05-18 15:42:33 -07:00
packet_debian11-calico-upgrade-once.yml feat: change default blockSize for calico (#9055) 2022-07-19 13:05:27 -07:00
packet_debian11-calico-upgrade.yml Remove access to cluster from anonymous users (#11016) 2024-04-02 23:54:12 -07:00
packet_debian11-calico.yml Cleanup tests (#8234) 2021-11-26 09:00:51 -08:00
packet_debian11-custom-cni.yml Fix search path for custom-cni (#10088) 2023-05-22 05:22:30 -07:00
packet_debian11-docker.yml containerd: change default resolvconf_mode to host_resolvconf (#8247) 2021-12-09 14:09:06 -08:00
packet_debian11-kubelet-csr-approver.yml Kubelet csr approver (#9877) 2023-05-10 17:49:09 -07:00
packet_debian12-calico.yml Add test for coredns_dual in CI (#10903) 2024-02-08 02:52:10 -08:00
packet_debian12-cilium.yml Fixup recover control plane playbook + add debian12/cilium test (#10411) 2023-09-05 10:42:52 -07:00
packet_debian12-custom-cni-helm.yml Add helm support for custom_cni deployment (#10529) 2023-11-16 00:32:21 +01:00
packet_debian12-docker.yml Ability to define GPG key path for Docker APT (#10513) 2023-10-13 04:06:04 +02:00
packet_fedora37-calico-selinux.yml Use supported version of fedora in CI (#10108) 2023-08-08 00:50:12 -07:00
packet_fedora37-calico-swap-selinux.yml Use supported version of fedora in CI (#10108) 2023-08-08 00:50:12 -07:00
packet_fedora37-crio.yml Use supported version of fedora in CI (#10108) 2023-08-08 00:50:12 -07:00
packet_fedora38-docker-calico.yml Use supported version of fedora in CI (#10108) 2023-08-08 00:50:12 -07:00
packet_fedora38-docker-weave.yml Use supported version of fedora in CI (#10108) 2023-08-08 00:50:12 -07:00
packet_fedora38-kube-ovn.yml Use supported version of fedora in CI (#10108) 2023-08-08 00:50:12 -07:00
packet_opensuse-docker-cilium.yml Move opensuse CI to docker and fix ubuntu16 containerd version for docker (#8257) 2021-12-02 08:01:34 -08:00
packet_rockylinux8-calico.yml Add Rocky Linux 8 support for vagrant (#8905) 2022-07-05 07:50:47 -07:00
packet_rockylinux9-calico.yml add-Rocky-9-support (#9212) 2022-09-04 16:54:36 -07:00
packet_rockylinux9-cilium.yml support node feature discovery (#10861) 2024-03-05 08:36:08 -08:00
packet_ubuntu20-all-in-one-docker.yml CI: Document the 'all-in-one' layout + small refactoring (#10725) 2023-12-18 11:33:13 +01:00
packet_ubuntu20-calico-all-in-one-ansible-2_11.yml CI: Document the 'all-in-one' layout + small refactoring (#10725) 2023-12-18 11:33:13 +01:00
packet_ubuntu20-calico-all-in-one-hardening.yml Remove access to cluster from anonymous users (#11016) 2024-04-02 23:54:12 -07:00
packet_ubuntu20-calico-all-in-one.yml CI: Document the 'all-in-one' layout + small refactoring (#10725) 2023-12-18 11:33:13 +01:00
packet_ubuntu20-calico-etcd-kubeadm-upgrade-ha.yml Add ignore_assert_error to ubuntu20 etcd ha job (#9108) 2022-07-26 10:45:09 -07:00
packet_ubuntu20-calico-etcd-kubeadm.yml Remove access to cluster from anonymous users (#11016) 2024-04-02 23:54:12 -07:00
packet_ubuntu20-calico-ha-recover-noquorum.yml Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
packet_ubuntu20-calico-ha-recover.yml Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
packet_ubuntu20-calico-ha-wireguard.yml [CI] kube 1.24 requires at least 1775Mi of memory, might as well leave the default of 2048 2022-06-15 00:57:20 -07:00
packet_ubuntu20-cilium-sep.yml Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
packet_ubuntu20-crio.yml Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
packet_ubuntu20-docker-weave-sep.yml Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
packet_ubuntu20-flannel-ha-once.yml Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
packet_ubuntu20-flannel-ha.yml Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
packet_ubuntu22-all-in-one-docker.yml CI: Document the 'all-in-one' layout + small refactoring (#10725) 2023-12-18 11:33:13 +01:00
packet_ubuntu22-calico-all-in-one.yml remove containerd registries (#10738) 2023-12-21 10:01:12 +01:00
packet_ubuntu22-calico-etcd-datastore.yml Fix etcd client generation (#10769) 2024-01-16 15:50:41 +01:00
tf-elastx_ubuntu20-calico.yml Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
tf-ovh_ubuntu20-calico.yml Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
vagrant_centos7-kube-router.rb [calico] don't enable ipip encapsulation by default and use vxlan in CI (#8434) 2022-03-17 18:05:39 -07:00
vagrant_centos7-kube-router.yml [calico] don't enable ipip encapsulation by default and use vxlan in CI (#8434) 2022-03-17 18:05:39 -07:00
vagrant_fedora37-kube-router.rb Use supported version of fedora in CI (#10108) 2023-08-08 00:50:12 -07:00
vagrant_fedora37-kube-router.yml Use supported version of fedora in CI (#10108) 2023-08-08 00:50:12 -07:00
vagrant_ubuntu20-calico-dual-stack.rb Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
vagrant_ubuntu20-calico-dual-stack.yml Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
vagrant_ubuntu20-flannel-collection.rb Adds support for Ansible collections (#9582) 2023-03-27 02:25:55 -07:00
vagrant_ubuntu20-flannel-collection.yml Adds support for Ansible collections (#9582) 2023-03-27 02:25:55 -07:00
vagrant_ubuntu20-flannel.rb pre-commit autocorrected files (#9750) 2023-02-06 01:35:16 -08:00
vagrant_ubuntu20-flannel.yml Cleanup tests (#8234) 2021-11-26 09:00:51 -08:00
vagrant_ubuntu20-kube-router-sep.rb Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
vagrant_ubuntu20-kube-router-sep.yml Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
vagrant_ubuntu20-kube-router-svc-proxy.rb Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
vagrant_ubuntu20-kube-router-svc-proxy.yml Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
vagrant_ubuntu20-weave-medium.rb Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00
vagrant_ubuntu20-weave-medium.yml Remove end of life ubuntu versions in CI (#10107) 2023-05-24 19:56:50 -07:00