Matthew Mosesohn
23ae6027ab
remove support for calico v2.x ( #4974 )
* Remove support for calico below version v3.0.0
Change-Id: If8fe3036b9e054901a8b2c48516eff1e1271970f
* Update main.yml
* fixup node peering
Change-Id: Ifac4d363deba826f0c80e390ce80a28df9827323
* fixups
Change-Id: Ic35417330af6741962003b3930604393c90804d1
* fixups
Change-Id: I0ea82d634bb0c81d9b7dc50569c70988bc8d3a3b
5 years ago
Matthew Mosesohn
fd9bbcb157
Enable nodes to run calicoctl for calico kdd mode ( #4956 )
* Enable nodes to run calicoctl
per-node tasks require waiting for calico-node to be applied
Change-Id: Ibe1076b7334a2da0332f2dd766fde0c3f172d1f2
* cleanup tasks that should run on master
Change-Id: I43a837879ef41596f14657ecd7f813899b6865ae
* Switch run_once calico logic to just run on first master
Change-Id: I6893711e354f63c5e1eaf6ac2e23d9a6347a555d
5 years ago
Julian Tabel
dc16ab92f4
fix for calico with kdd datastore ( #4922 )
* fix for calico with kdd datastore
* remove AS number from daemonset
* revert changes to canal
* additionnal fixes for kdd datastore in calico
5 years ago
Matthew Mosesohn
4348e78b24
Enable kubeadm etcd mode ( #4818 )
* Enable kubeadm etcd mode
Uses cert commands from kubeadm experimental control plane to
enable non-master nodes to obtain etcd certs.
Related story: PROD-29434
Change-Id: Idafa1d223e5c6ceadf819b6f9c06adf4c4f74178
* Add validation checks and exclude calico kdd mode
Change-Id: Ic234f5e71261d33191376e70d438f9f6d35f358c
* Move etcd mode test to ubuntu flannel HA job
Change-Id: I9af6fd80a1bbb1692ab10d6da095eb368f6bc732
* rename etcd_mode to etcd_kubeadm_enabled
Change-Id: Ib196d6c8a52f48cae370b026f7687ff9ca69c172
6 years ago
MarkusTeufelberger
e67f848abc
ansible-lint: add spaces around variables [E206] ( #4699 )
6 years ago
grialeyur
82119ca923
Add support calico kubernetes datastore and typha. ( #4498 )
* Add support calico kubernetes datastore and typha.
* Add typha_enabled to kubespray-defaults.
6 years ago
Matthew Mosesohn
05dc2b3a09
Use K8s 1.14 and add kubeadm experimental control plane mode ( #4514 )
* Use K8s 1.14 and add kubeadm experimental control plane mode
This reverts commit d39c273d96
.
* Cleanup kubeadm setup run on first master
* pin kubeadm_certificate_key in test
* Remove kubelet autolabel of kube-node, add symlink for pki dir
Change-Id: Id5e74dd667c60675dbfe4193b0bc9fb44380e1ca
6 years ago
andreyshestakov
78f6f6b889
Mark "Calico | Set global as_num" as "unchanged" ( #4539 )
This command executes with "--skip-exists" parameter, so it is idempotent
and should not be marked as "changed".
6 years ago
Matthew Mosesohn
c5fb734098
Switch calicoctl from a container to a binary ( #4524 )
6 years ago
Matthew Mosesohn
d39c273d96
Revert "Use K8s 1.14 and add kubeadm experimental control plane mode ( #4317 )" ( #4510 )
This reverts commit 316508626d
.
6 years ago
Matthew Mosesohn
316508626d
Use K8s 1.14 and add kubeadm experimental control plane mode ( #4317 )
* Use Kubernetes 1.14 and experimental control plane support
* bump to v1.14.0
6 years ago
Matthew Mosesohn
4fe2aa6bf7
Use install_cni init container for cni copy for calico/canal ( #4416 )
6 years ago
chadswilson
d469282f1c
add blockSize to IPPool spec for Calico >= v3.3.0 ( #4224 )
* add blockSize to IPPool spec for Calico >= v3.3.0
* fix "cidr" spec in Calico IPPool resource for my PR
6 years ago
Matthew Mosesohn
acbf3db233
Remove hard dependence on facts for all nodes ( #4304 )
* Remove hard dependence on facts for all nodes
* Update main.yaml
* Update main.yaml
6 years ago
hikoz
67832aada9
changed_when:false ( #4189 )
6 years ago
hikoz
9a91ef8628
change permission after unarchive ( #4191 )
6 years ago
Erwan Miran
f6d60a7e89
Calico: Ability to define the default IPPool CIDR (instead of kube_pods_subnet) ( #4131 )
* Calico: Ability to define the default IPPool CIDR (instead of kube_pods_subnet)
* Documentation for calico_pool_cidr (and calico_advertise_cluster_ips which has been forgotten...)
6 years ago
wangxf
a096761306
[PR-Calico]Support calico 3.4.0 ( #4102 )
* Suport calico 3.4.0
Signed-off-by: wangxf1987 <xiaofeix.wang@gmail.com>
* Remove symlink + cni conflist template when 3.3.0+, handle Canal, addition of install-cni: sidecar(3.3.0) or initontainer(3.4.0), KUBECONFIG_FILEPATH, calico_cert_dir, advertise cluster ips
* scheduler.alpha.kubernetes.io/critical-pod deprecated since 1.12
6 years ago
Rong Zhang
e0781483fa
Use download binary instead of copying from the container ( #3786 )
6 years ago
Erwan Miran
4f12ba00d1
Fix calico peering with router(s) ( #3547 )
6 years ago
Erwan Miran
7bec169d58
Fix ansible syntax to avoid ansible deprecation warnings ( #3512 )
* failed
* version_compare
* succeeded
* skipped
* success
* version_compare becomes version since ansible 2.5
* ansible minimal version updated in doc and spec
* last version_compare
6 years ago
Erwan Miran
bfd4ccbeaa
Calico: Ability to define global peers ( #3493 )
6 years ago
Erwan Miran
6549b8f8ae
Ability to define the asNumber on a per node basis when route reflectors are not used in order to peer directly with routers ( #3492 )
6 years ago
Erwan Miran
232020ef96
skip-exists is an flag for create command, not for calicoctl ( #3401 )
6 years ago
Kevin Schuck
fb1678d425
Ensures BGPPeer resource names are unique
6 years ago
Kevin Schuck
d3adf09bde
Fixes BGPPeer resource for calico >= 3.0.0
6 years ago
Matthew Mosesohn
c83350e597
refactor to base on calico_version
6 years ago
Matthew Mosesohn
55d76ea3d8
Update install.yml
6 years ago
Matthew Mosesohn
1091e82327
Update install.yml
6 years ago
Matthew Mosesohn
cc79125d3e
Update install.yml
6 years ago
Matthew Mosesohn
d91f9e14e6
Put back legacy support for calico ippools and bgp settings
6 years ago
Takashi Okamoto
b2a7a27dfb
Fix indent error by yamllint.
6 years ago
mlushpenko
ea2c9d8f57
Fix yaml checks
6 years ago
Matthew Mosesohn
dc3e317d20
Fix backward compatibility with calico 2.6
6 years ago
Luis Nunez
6569180654
remove capitalize filter
6 years ago
Aivars Sterns
23fd3461bc
calico upgrade to v3 ( #3086 )
* calico upgrade to v3
* update calico_rr version
* add missing file
* change contents of main.yml as it was left old version
* enable network policy by default
* remove unneeded task
* Fix kubelet calico settings
* fix when statement
* switch back to node-kubeconfig.yaml
6 years ago
Wong Hoi Sing Edison
c3b3572025
Always create service account even rbac_enabled = false
6 years ago
Matthew Mosesohn
1a3b9dd864
Force copy cni files
7 years ago
elementyang
8fee1ab102
change create to apply
7 years ago
Matthew Mosesohn
9837b7926f
Use proper lookup of etcd host for calico ( #2408 )
Fixes #2397
7 years ago
Matthew Mosesohn
bc0fc5df98
Use node cert for etcd tasks instead of delegating to first etcd ( #2386 )
For etcdctl commands, use admin cert instead of node because this file
doesn't exist on etcd only hosts.
7 years ago
Brad Beam
31659efe13
Fixing cert name in calico/canal for etcd check ( #2358 )
7 years ago
Matthew Mosesohn
87f33a4644
Use CNI to assign kube_pods_subnet for calico
Now calico can be deployed if there are other existing pools
and not confuse IPAM and end up with pods in the wrong pools.
7 years ago
Matthew Mosesohn
d2935ffed0
Optionally ignore the presence of extra calico pools ( #2190 )
7 years ago
Steve Mitchell
e45b30d033
Add etcd key and cert environment variables for use with client auth
7 years ago
Matthew Mosesohn
ec54b36e05
add retries for calico/canal etcd commands ( #2007 )
7 years ago
Spencer Smith
bc1a4e12ad
fix broken variable in ansible 2.4.1.0 and ensure tasks for calico-rr ( #1982 )
7 years ago
Matthew Mosesohn
86fb669fd3
Idempotency fixes ( #1838 )
7 years ago
Matthew Mosesohn
d4b10eb9f5
Fix path for calico get node names ( #1816 )
7 years ago
Kevin Lefevre
6ec45b10f1
Update network-plugins to use portmap plugin ( #1763 )
Portmap allow to use hostPort with CNI plugins. Should fix #1675
7 years ago