dbf40bbbb8
docker-ce instead of docker-engine repo ( #2423 )
* Use docker-ce 17.03.2
* Docker-engine may be discarded
6 years ago
646d473e8e
fix the name of some variable
6 years ago
388b627f72
Enable OOM killing for etcd-events
Enable OOM killing like docker run etcd
6 years ago
f9019ab116
Adding ssh_private_key_file to ProxyCommand
This is trying to match what the roles/bastion-ssh-config is trying to do. When the setup is going through bastion, we want to ssh private key to be used on the bastion instance.
6 years ago
07657aecf4
add support for azure vnetResourceGroup
6 years ago
e65904eee3
Add labels for ingress_nginx_namespace, also only setup serviceAccountName if rbac_enabled
6 years ago
89847d5684
Explicitly defines the --kubelet-preferred-address-types parameter
to the API server configuration.
This solves the problem where if you have non-resolvable node names,
and try to scale the server by adding new nodes, kubectl commands
start to fail for newly added nodes, giving a TCP timeout error when
trying to resolve the node hostname against a public DNS.
7 years ago
585303ad66
Start with three dashes for consistency
6 years ago
a800ed094b
Added support for webhook authentication/authorization on the secure kubelet endpoint
6 years ago
fd46442188
Integrate kubernetes/ingress-nginx 0.11.0 to Kubespray
6 years ago
9837b7926f
Use proper lookup of etcd host for calico ( #2408 )
Fixes #2397
6 years ago
2a3b48edaf
Delete unused fedora docker repo
6 years ago
67ffd8e923
Add etcd-events cluster for kube-apiserver ( #2385 )
Add etcd-events cluster for kube-apiserver
6 years ago
7ef9f4dfdd
Revert "Add pre-upgrade task for moving credentials file" ( #2393 )
6 years ago
ad89d1c876
Update pre_upgrade.yml
6 years ago
6b80ac6500
Fix indexing of supplementary DNS in openssl.conf
6 years ago
2257dc9baa
Install latest version of Helm
6 years ago
977e7ae105
remove obsolete init image, bump dashboard version 1.8.1 -> 1.8.3
6 years ago
bc0fc5df98
Use node cert for etcd tasks instead of delegating to first etcd ( #2386 )
For etcdctl commands, use admin cert instead of node because this file
doesn't exist on etcd only hosts.
6 years ago
bb469005b2
Add pre-upgrade task for moving credentials file
6 years ago
89ade65ad6
Fixing etcd certs for calico rr ( #2374 )
6 years ago
128d3ef94c
Fix run kubectl error ( #2199 )
* Fix run kubectl error
Fix run kubectl error when first master doesn't work
* if access_ip is define use first_kube_master
else different master use a different ip
* Delete set first_kube_master and use kube_apiserver_access_address
6 years ago
b7e06085c7
Upgrade to Kubernetes v1.9.3 ( #2323 )
Upgrade to Kubernetes v1.9.3
6 years ago
31659efe13
Fixing cert name in calico/canal for etcd check ( #2358 )
6 years ago
2bd3776ddb
fix apiserver manifest when disabling insecure_port
6 years ago
c874f16c02
Fixing credential lookup for fe proxy and vault ( #2361 )
6 years ago
ba91304636
Fixed generate front proxy client certs with vault ( #2359 )
* Fixed generate front proxy client certs with vault
* fix vault cert management
* Distrebute etcd node certs to vault hosts
6 years ago
42a0f46268
Add health check to kube proxy ( #2356 )
Adding health checking to kube proxy. Fixes #2308
6 years ago
d84ff06f73
Set filemode to 0640 ( #2315 )
* Set filemode to 0640
weave-net.yml file is readable by all users on the host. It however contains the weave_password to encrypt all pod communication. It should only be readable by root.
* Set mode 0640 on users_file with basic auth
6 years ago
87f33a4644
Use CNI to assign kube_pods_subnet for calico
Now calico can be deployed if there are other existing pools
and not confuse IPAM and end up with pods in the wrong pools.
6 years ago
2d69b05c77
set local_release_dir in downloads to match others
6 years ago
2eb57ee5cd
default kube_proxy_mode in kubernetes-defaults
6 years ago
85c69c2a4a
Add check for atomic hosts in template
6 years ago
c20f38b89c
retry unmount kubelet dirs
6 years ago
d4c61d2628
Fixup for gce_centos7-flannel-addons
6 years ago
deef47c923
Upgrade Local Volume Provisioner Addon to v2.0.0
6 years ago
c19d8994b9
Set TasksMax to infinity on any OS with systemd
6 years ago
f13e76d022
Added cilium support ( #2236 )
* Added cilium support
* Fix typo in debian test config
* Remove empty lines
* Changed cilium version from <latest> to <v1.0.0-rc3>
* Add missing changes for cilium
* Add cilium to CI pipeline
* Fix wrong file name
* Check kernel version for cilium
* fixed ci error
* fixed cilium-ds.j2 template
* added waiting for cilium pods to run
* Fixed missing EOF
* Fixed trailing spaces
* Fixed trailing spaces
* Fixed trailing spaces
* Fixed too many blank lines
* Updated tolerations,annotations in cilium DS template
* Set cilium_version to iptables-1.9 to see if bug is fixed in CI
* Update cilium image tag to v1.0.0-rc4
* Update Cilium test case CI vars filenames
* Add optional prometheus flag, adjust initial readiness delay
* Update README.md with cilium info
6 years ago
95e2bde15b
set nodeName to "{{ inventory_hostname }}" in kubeadm-config
6 years ago
4c280e59d4
Use legacy policy config to apply the scheduler policy
6 years ago
ba2107ea8c
is-default-class is case sensative so we must return a lowercase string
6 years ago
3f44a33738
allow for configurable openstack storage class
6 years ago
c0aad0a6d5
Fix install etcd by host service ( #2297 )
Fix bug issues #2289
6 years ago
41ca67bf54
Added iptables lock fix and ajusted oom-score
xtables lock was missing. Added new option for oom-score to make sure it's not killed in an OOM situation before regular pods.
6 years ago
d72232f15b
Increased timeout values for k8s API server restart
6 years ago
03c61685fb
Added apiserver extra args variable for kubeadm config ( #2291 )
6 years ago
bbb1da1a83
Fix default_resolver is undefined
fix issues #2265
6 years ago
07075add3d
Add optional StorageClass name with cephfs_provisioner_storage_class
6 years ago
338238d086
Fix version comparison
`FAILED! => {"changed": false, "msg": "AnsibleFilterError: Version comparison: unorderable types: str() < int()"}`
6 years ago
03bb729fea
Making status and detection mo betta
6 years ago
RongZhang
zhengchuan hu
Dominic Lam
Michael Beatty
Wong Hoi Sing Edison
Ayaz Ahmed Khan
Jonas Kongslund
Matthew Mosesohn
Brad Beam
Simon Li
Miouge1
Dmitry Vlasov
Nedim Haveric
Maxim Krasilnikov
Andreas Krüger
Matthew Mosesohn
Dann Bohn
Chris Mildebrandt
melkosoft
Sebastian Söderqvist
Virgil Chereches
Chia-liang Kao
Brad Beam