ae5328c500
Update calico to 3.16.1 ( #6644 )
4 years ago
bf8c8976dd
Upgrade etcd to 3.4.3 ( #5998 )
4 years ago
101686c665
Remove outdated CriticalAddonsOnly toleration and critical-pod annotation ( #6202 )
4 years ago
7d497e46c5
Update calico to 3.13.3 ( #6061 )
4 years ago
299e35ebe4
Cleanup unused/erroneous variables ( #6003 )
4 years ago
ca45d5ffbe
Fix retries keyword missing until instruction ( #5989 )
4 years ago
b5125e59ab
update rbac.authorization.k8s.io to non deprecated api-groups ( #5517 )
4 years ago
79a6b72a13
Removed deprecated label kubernetes.io/cluster-service ( #5372 )
4 years ago
81f07c3783
Disable IPv6 support for canal's calico-node ( #5684 )
This implements the same behavior as a15a0b5eb9/roles/network_plugin/calico/templates/calico-node.yml.j2https://github.com/projectcalico/felix/issues/1447
4 years ago
3bcdf46937
fix-up some spelling mistakes ( #5202 )
5 years ago
27ec548b88
Add support for k8s v1.16.0-beta.2 ( #5148 )
Cleaned up deprecated APIs:
apps/v1beta1
apps/v1beta2
extensions/v1beta1 for ds,deploy,rs
Add workaround for deploying helm using incompatible
deployment manifest.
Change-Id: I78b36741348f47a999df3841ee63cf4e6f377830
5 years ago
49d921cf91
Restart canal after scale or upgrade. Just like PR#4531, but for canal ( #4992 )
5 years ago
23ae6027ab
remove support for calico v2.x ( #4974 )
* Remove support for calico below version v3.0.0
Change-Id: If8fe3036b9e054901a8b2c48516eff1e1271970f
* Update main.yml
* fixup node peering
Change-Id: Ifac4d363deba826f0c80e390ce80a28df9827323
* fixups
Change-Id: Ic35417330af6741962003b3930604393c90804d1
* fixups
Change-Id: I0ea82d634bb0c81d9b7dc50569c70988bc8d3a3b
5 years ago
818aa7aeb1
Set dnsPolicy to ClusterFirstWithHostNet when hostNetwork is true ( #4843 )
5 years ago
e67f848abc
ansible-lint: add spaces around variables [E206] ( #4699 )
5 years ago
d588532c9b
Update probe timeouts, delays etc. ( #4612 )
* Fix merge conflict
* Add check delay
* Add more liveness and readiness options to metrics-server
5 years ago
05dc2b3a09
Use K8s 1.14 and add kubeadm experimental control plane mode ( #4514 )
* Use K8s 1.14 and add kubeadm experimental control plane mode
This reverts commit d39c273d96
5 years ago
a6dc50e7cb
Add host information for canal readiness probe ( #4548 )
5 years ago
c5fb734098
Switch calicoctl from a container to a binary ( #4524 )
5 years ago
d39c273d96
Revert "Use K8s 1.14 and add kubeadm experimental control plane mode ( #4317 )" ( #4510 )
This reverts commit 316508626d
5 years ago
316508626d
Use K8s 1.14 and add kubeadm experimental control plane mode ( #4317 )
* Use Kubernetes 1.14 and experimental control plane support
* bump to v1.14.0
5 years ago
b15f3e182d
add default routing to canal and disable bird checks ( #4468 )
Co-Author: Paweł Skrzyński
5 years ago
4fe2aa6bf7
Use install_cni init container for cni copy for calico/canal ( #4416 )
5 years ago
a096761306
[PR-Calico]Support calico 3.4.0 ( #4102 )
* Suport calico 3.4.0
Signed-off-by: wangxf1987 <xiaofeix.wang@gmail.com>
* Remove symlink + cni conflist template when 3.3.0+, handle Canal, addition of install-cni: sidecar(3.3.0) or initontainer(3.4.0), KUBECONFIG_FILEPATH, calico_cert_dir, advertise cluster ips
* scheduler.alpha.kubernetes.io/critical-pod deprecated since 1.12
5 years ago
257019d424
Mount host's xtable lock and enable calico lokcing for <v3.2.1
5 years ago
d5ce5874e8
Streamline path to certs dir ( #3836 )
* Streamline path to certs dir
* More fixes
* Set path to etcd certs in kubernetes defaults instead
6 years ago
225f765b56
Upgrade kubernetes to v1.13.0 ( #3810 )
* Upgrade kubernetes to v1.13.0
* Remove all precense of scheduler.alpha.kubernetes.io/critical-pod in templates
* Fix cert dir
* Use kubespray v2.8 as baseline for gitlab
6 years ago
e0781483fa
Use download binary instead of copying from the container ( #3786 )
6 years ago
7bec169d58
Fix ansible syntax to avoid ansible deprecation warnings ( #3512 )
* failed
* version_compare
* succeeded
* skipped
* success
* version_compare becomes version since ansible 2.5
* ansible minimal version updated in doc and spec
* last version_compare
6 years ago
53d87e53c5
All CNIs: support ANY toleration. ( #3391 )
Before, Nodes tainted with NoExecute policy did not have calico/weave Pod.
Network pod should run on all nodes whatever happens on a specific node.
Also always set the Pods to be critical.
Also remove deprecated scheduler.alpha.kubernetes.io/tolerations annotations.
6 years ago
36898a2c39
Adding pod priority for all the components. ( #3361 )
* Changes to assign pod priority to kube components.
* Removed the boolean flag pod_priority_assignment
* Created new priorityclass k8s-cluster-critical
* Created new priorityclass k8s-cluster-critical
* Fixed the trailing spaces
* Fixed the trailing spaces
* Added kube version check while creating Priority Class k8s-cluster-critical
* Moved k8s-cluster-critical.yml
* Moved k8s-cluster-critical.yml to kube_config_dir
6 years ago
ac4ef719cc
canal should mount xtables.lock to share the lock with other processes like kube-proxy
6 years ago
23fd3461bc
calico upgrade to v3 ( #3086 )
* calico upgrade to v3
* update calico_rr version
* add missing file
* change contents of main.yml as it was left old version
* enable network policy by default
* remove unneeded task
* Fix kubelet calico settings
* fix when statement
* switch back to node-kubeconfig.yaml
6 years ago
80cfeea957
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
6 years ago
c3b3572025
Always create service account even rbac_enabled = false
6 years ago
1a3b9dd864
Force copy cni files
6 years ago
03bcfa7ff5
Stop templating kube-system namespace and creating it ( #2545 )
Kubernetes makes this namespace automatically, so there is
no need for kubespray to manage it.
6 years ago
60bfc56e8e
Update Calico and Canal
- Updating to use calico-node v2.6.7
- A few updates to their manifests too
6 years ago
bc0fc5df98
Use node cert for etcd tasks instead of delegating to first etcd ( #2386 )
For etcdctl commands, use admin cert instead of node because this file
doesn't exist on etcd only hosts.
6 years ago
31659efe13
Fixing cert name in calico/canal for etcd check ( #2358 )
6 years ago
e45b30d033
Add etcd key and cert environment variables for use with client auth
7 years ago
ec54b36e05
add retries for calico/canal etcd commands ( #2007 )
7 years ago
86fb669fd3
Idempotency fixes ( #1838 )
7 years ago
fc9a65be2b
Refactor downloads to use download role directly ( #1824 )
* Refactor downloads to use download role directly
Also disable fact delegation so download delegate works acros OSes.
* clean up bools and ansible_os_family conditionals
7 years ago
6ec45b10f1
Update network-plugins to use portmap plugin ( #1763 )
Portmap allow to use hostPort with CNI plugins. Should fix #1675
7 years ago
f14f04c5ea
Upgrade to kubernetes v1.8.0 ( #1730 )
* Upgrade to kubernetes v1.8.0
hyperkube no longer contains rsync, so now use cp
* Enable node authorization mode
* change kube-proxy cert group name
7 years ago
9c86da1403
Normalize tags in all places to prepare for tag fixing in future ( #1739 )
7 years ago
a56738324a
Move set_facts to kubespray-defaults defaults
These facts can be generated in defaults with a performance
boost.
Also cleaned up duplicate etcd var names.
7 years ago
b294db5aed
fix apply for netchecker upgrade ( #1659 )
* fix apply for netchecker upgrade and graceful upgrade
* Speed up daemonset upgrades. Make check wait for ds upgrades.
7 years ago
a3e6896a43
Add RBAC support for canal ( #1604 )
Refactored how rbac_enabled is set
Added RBAC to ubuntu-canal-ha CI job
Added rbac for calico policy controller
7 years ago
Florian Ruynat
Florent Monbillard
Florian Ruynat
Anshul Sharma
Mateus Caruccio
陈谭军
Matthew Mosesohn
nico-netminded
Andreas Krüger
MarkusTeufelberger
Maxime Guyot
wangxf
Danny Kulchinsky
Rong Zhang
Erwan Miran
Cédric de Saint Martin
Kuldip Madnani
Fernando Crespo Grávalos
Aivars Sterns
Erwan Miran
Wong Hoi Sing Edison
Matthew Mosesohn
Erik Stidham
Brad Beam
Steve Mitchell
Kevin Lefevre
Matthew Mosesohn