richard/kubespray - kubespray - Gitea: RS Source Repository

k8s-sig-cluster-lifecycle aws kubespray high-availability ansible kubernetes-cluster gce kubernetes bare-metal

16 lines

339 B

Raw Normal View History

YAMLLint everything (#4576)

5 years ago

PHASE 2 - Enable Packet-CI in gitlab and move unit-tests and deploy-part1 (#4538) * PHASE 2 - Enable Packet-CI in gitlab * Add gitlab files * Reset files back and only keep Packet * Include packet * Add missing Upgrade Tests * Update GCE jobs etc * Fix bug * Yaml lint all gitlab files * Remove GCE * Test * Test again * Enable GCE again * Install requirements * Cleanup the gitlab file * Cleanup runner tags * Install requirements * Test * Test variables for gce * Test again * Test again * Fix * Update

5 years ago

[CI] use debian-11 image with more disk space to ensure successful upgrade tests

2 years ago

PHASE 2 - Enable Packet-CI in gitlab and move unit-tests and deploy-part1 (#4538) * PHASE 2 - Enable Packet-CI in gitlab * Add gitlab files * Reset files back and only keep Packet * Include packet * Add missing Upgrade Tests * Update GCE jobs etc * Fix bug * Yaml lint all gitlab files * Remove GCE * Test * Test again * Enable GCE again * Install requirements * Cleanup the gitlab file * Cleanup runner tags * Install requirements * Test * Test variables for gce * Test again * Test again * Fix * Update

5 years ago

[calico] don't enable ipip encapsulation by default and use vxlan in CI (#8434) * [calico] make vxlan encapsulation the default * don't enable ipip encapsulation by default * set calico_network_backend by default to vxlan * update sample inventory and documentation * [CI] pin default calico parameters for upgrade tests to ensure proper upgrade * [CI] improve netchecker connectivity testing * [CI] show logs for tests * [calico] tweak task name * [CI] Don't run the provisioner from vagrant since we run it in testcases_run.sh * [CI] move kube-router tests to vagrant to avoid network connectivity issues during netchecker check * service proxy mode still fails connectivity tests so keeping it manual mode * [kube-router] account for containerd use-case

2 years ago

feat: change default blockSize for calico (#9055) Signed-off-by: cyclinder qifeng.guo@daocloud.io

2 years ago

[calico] don't enable ipip encapsulation by default and use vxlan in CI (#8434) * [calico] make vxlan encapsulation the default * don't enable ipip encapsulation by default * set calico_network_backend by default to vxlan * update sample inventory and documentation * [CI] pin default calico parameters for upgrade tests to ensure proper upgrade * [CI] improve netchecker connectivity testing * [CI] show logs for tests * [calico] tweak task name * [CI] Don't run the provisioner from vagrant since we run it in testcases_run.sh * [CI] move kube-router tests to vagrant to avoid network connectivity issues during netchecker check * service proxy mode still fails connectivity tests so keeping it manual mode * [kube-router] account for containerd use-case

2 years ago

Remove access to cluster from anonymous users (#11016) * feat: add user facing variable with default * feat: remove rolebinding to anonymous users after init and upgrade * feat: use file discovery for secondary control plane nodes * feat: use file discovery for nodes * fix: do not fail if rolebinding does not exist * docs: add warning about kube_api_anonymous_auth * style: improve readability of delegate_to parameter * refactor: rename discovery kubeconfig file * test: enable new variable in hardening and upgrade test cases * docs: add option to config parameters * test: multiple instances and upgrade

7 months ago

---
# Instance settings
cloud_image: debian-11
mode: default

# Pin disabling ipip mode to ensure proper upgrade
ipip: false
calico_pool_blocksize: 26
calico_vxlan_mode: Always
calico_network_backend: bird

# Needed to bypass deprecation check
ignore_assert_errors: true

# Remove anonymous access to cluster
remove_anonymous_access: true