Sulochan Acharya
36924b63dc
Allow webhook authorization ( #6502 )
4 years ago
jeanfabrice
411510cbe6
Use proper openssl command to differentiate between host and ip in API certificate check ( #6392 )
* Use proper openssl command to differentiate between host and ip in current certificate check
* fixup! Use proper openssl command to differentiate between host and ip in current certificate check
4 years ago
Florian Ruynat
6e2b8a5750
Add timeout to Get current version of calico cluster version, again ( #6493 )
4 years ago
Florian Ruynat
142b9e1eff
Update k8s hashes and set default version to 1.18.8 ( #6532 )
4 years ago
Michal Petko
91ae87fa60
Fix setting node label if kube_override_hostname is defined ( #6557 )
4 years ago
Samuel Liu
a42d811420
fix scale playbook ( #6482 )
4 years ago
holmesb
d8a749fd27
Update apiserver-audit-policy.yaml.j2 ( #6526 )
4 years ago
Florian Ruynat
78ceef6b15
Remove unused variable ( #6522 )
4 years ago
Arthur Outhenin-Chalandre
33ec13293b
Fix cilium_deploy_additionally with kubeadm etcd ( #6514 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Erwan Miran
ef3e98807e
tlsminversion and tlsciphersuites kubelet ( #6490 )
4 years ago
Maxime Guyot
fc23f37af7
Fix E306 in roles/kubernetes ( #6500 )
4 years ago
Sulochan Acharya
bfe143808f
Allows tls verify skip on webhook auth url ( #6472 )
4 years ago
Florent Monbillard
39b907cdfb
Remove workaround for kubeadm upgrade ( #6478 )
https://github.com/kubernetes/kubeadm/issues/1498 was closed
4 years ago
Konstantin Lebedev
2364a84579
fix src for audit webhook config yaml ( #6470 )
4 years ago
fulii
ce22c0e6a4
Add option to configure IPVS timeouts in kube-proxy configration manifest. ( #6396 )
4 years ago
Kuralamudhan Ramakrishnan
90e5f8ffe1
adding ovn4nfv in kubespray ( #6381 )
Signed-off-by: Kuralamudhan Ramakrishnan <kuralamudhan.ramakrishnan@intel.com>
4 years ago
Florian Ruynat
a78e861a89
Fix test if openstack_cacert is a base64 string ( #6421 )
4 years ago
Maxime Guyot
214e08f8c9
Fix ansible-lint E305 ( #6459 )
4 years ago
Maxime Guyot
e70f27dd79
Add noqa and disable .ansible-lint global exclusions ( #6410 )
4 years ago
Florian Ruynat
b680cdd0e4
Move healthz check to secure ports ( #6446 )
4 years ago
Igor Vuk
ea67bb6e41
Fix typo: Modprode -> Modprobe ( #6429 )
4 years ago
Konstantin Lebedev
a7ec0ed587
add audit webhook support ( #6317 )
* add audit webhook support
* use generic name auditsink
4 years ago
Arthur Outhenin-Chalandre
1a1fe99669
Add a way to deploy cilium alongside another CNI ( #6373 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Florian Ruynat
5e22574402
Remove allow-release-candidate-upgrades already include in experimental-upgrades flag ( #6349 )
4 years ago
Arthur Outhenin-Chalandre
abfa1636e4
Fix kube-proxy post deployment removal ( #5554 )
* Fix kube-proxy removal
* Fix unwanted skipped task for kube-proxy
* Fix kube_proxy_remove default
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add test for kube-router svc proxy
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Arthur Outhenin-Chalandre
05b9f14b76
Update cilium minimum kernel preinstall check ( #6376 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Hans Feldt
22996babcf
allow kubeadm to upgrade etcd ( #6345 )
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
4 years ago
Maxime Guyot
57eefdd458
Fix azure-cloud-config.j2 JSON syntax ( #6364 )
4 years ago
Florian Ruynat
2a82dff3ae
Remove runtime-config from kubeadm if empty ( #6311 )
4 years ago
Hans Feldt
ae003af262
Fix kubelet cgroup driver detection for crio ( #6331 )
* Fix kubelet cgroup driver detection for crio
Remove fact standalone_kubelet since it is not used
* Fix yamllint complaints of roles/kubernetes/node/tasks/facts.yml
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
4 years ago
Joel Seguillon
4c1e0b188d
Add .editorconfig file ( #6307 )
4 years ago
bozzo
09b23f96d7
Use NetworkManager to manage resolv.conf in FedoraCoreOS ( #6291 )
4 years ago
Erwan Miran
d3ca9d1db9
kube_encryption_resources must be output as yaml ( #6309 )
4 years ago
Mike Dziedziela
8ca2a9a7d5
added azure_cloud parameter to Azure's cloud_config ( #6321 )
4 years ago
bozzo
276c450759
Use `connection: local` when `delegate_to: localhost` ( #6322 )
This will avoid SSH connection on the local host
4 years ago
Samuel Liu
c29b21717d
Add event-ttl duration ( #6310 )
* Add event-ttl duration
* Fix wrong location
4 years ago
Maxime Guyot
c6588856c7
Add Ubuntu 20.04 support and use Python 3 ( #6157 )
4 years ago
Samuel Liu
dba645421f
ADD tls cipher suites support ( #6024 )
* ADD tls cipher suites support
yaml lint
yamllint
* update test case
* update test case
4 years ago
mohsen
10e54eca26
make better condition for applying nf_conntrack kernel tweak ( #6267 )
* MINOR: Check kernel version before enable modprobe nf_conntrack
* CLEANUP: no more need to ignore error of this task
* MINOR: Fixing yaml and ansible lint error - remove trailling-space
4 years ago
Hans Feldt
a8740c6e13
fix a few tasks falsely reporting "changed" ( #6269 )
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
4 years ago
Y0UZ45
06391b6dd9
Fix kubectl.sh parameter quoting ( #6239 )
If the special parameter "$@" is not quoted, the following command will not work:
./kubectl.sh patch storageclass my-storage-class -p '{"metadata": {"annotations":{"storageclass.kubernetes.io/is-default-class":"true"}}}'
4 years ago
Florian Ruynat
a9de6dde33
Cleanup unneeded elif in kubelet env file ( #6261 )
4 years ago
Unai Arríen
1912df7e3e
Create /etc/gai.conf if not exists when disable_ipv6_dns is 'true' ( #6258 )
4 years ago
404notfoundhard
d036a04d4d
restart kubelet service when kube-config.yml is changed ( #5402 )
* fix(kubelet): exec notify restart kubelet service when kube-config.yml changed
* Revert "refactor(kubelet handler): change task name("reload kubelet") this is misleading"
This reverts commit 8f5d295608
.
* fix(handlers,kubelet): setting right notify task name
4 years ago
bozzo
d948839320
Fix resolv.conf configuration for Fedora CoreOS. ( #6138 )
4 years ago
Mateus Caruccio
a5af58c05a
Fix apiserver port when upgrading ( #6136 )
4 years ago
Matthew Mosesohn
fda05df5f1
Only fix kube-proxy address on evaluating kube_master hosts ( #6152 )
Change-Id: I83a7101a6cd99eb531d8385de5c31aee4f474469
4 years ago
Florent Monbillard
324106e91e
Remove Kubernetes <1.16 conditionals ( #6088 )
4 years ago
Florian Ruynat
ca45d5ffbe
Fix retries keyword missing until instruction ( #5989 )
4 years ago
Maxime Guyot
3134dd4c0d
Drop support for Fedora 28 and add Fedora 30 and 31 ( #5969 )
4 years ago