b2346cdaec
[feat] Upgrade metrics server to v0.6.1 ( #8909 )
* Metrics Server now requires access to nodes/metrics RBAC resource instead of nodes/stats. See: https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.6.0
* Minimize rbac permissions.
2 years ago
01ca7293f5
support reserve ephemeral-storage ( #8895 )
2 years ago
4dfce51ded
Update dashboard to 2.6.0 (k8s 1.24 support) ( #8906 )
2 years ago
f82ed24c03
Update KUBESPRAY_VERSION ( #8922 )
As a step of release process, this updates KUBESPRAY_VERSION.
Thank you so much for creating and pushing container images of
the new version floryut !
2 years ago
1f65e6d3b5
[ingress-nginx] upgrade to 1.2.1 ( #8904 )
2 years ago
9bf7aaf6cd
Update RELEASE.md ( #8884 )
This updates RELEASE.md file to understand the release process
easily based on hands-on experience.
2 years ago
5512465b34
Revert "Set exact user for Kubelet services" ( #8872 )
This reverts commit e375678674
2 years ago
2f30ab558a
Add 1.24 mappings for etcd and snapshot_controller ( #8903 )
Map appropriate versions of etcd and snapshot_controller containers with
k8s 1.24
2 years ago
5c136ae3af
[calico] add 3.22.3 and 3.23.1 ( #8897 )
* [calico]
* add 3.22.3 and 3.23.1
* set 3.22.3 default
* fix download crd for calico 3.22.3 and upper
* update calico README.md
2 years ago
c927da00e0
Support cilium ip-masq-agent configuration ( #8893 )
* fix deploy Cilium with eBPF-based Masquerading failed
Signed-off-by: mahjonp <junpeng.man@gmail.com>
* forget to add the enable-ip-masq-agent flag
Signed-off-by: mahjonp <junpeng.man@gmail.com>
2 years ago
1600fd9082
clean up tags ( #8880 )
2 years ago
14acd124bc
fix containerd images downalod bugs ( #8894 )
2 years ago
e3cbbfb9ed
[kubernetes] make 1.23.7 the new default ( #8888 )
2 years ago
5f21e0b58b
Update components version in README.md ( #8886 )
2 years ago
d22204a59f
docs: add hardening guide ( #8868 )
2 years ago
90289b8502
add arch var in dockerfile ( #8875 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2 years ago
78aacee21b
[kubernetes] add hashes for 1.24.1 and other versions. ( #8876 )
* [kubernetes] add hashes for 1.24.1 and other versions.
versions: v1.21.13, v1.22.10, v1.23.7 & v1.24.1
* [kubernetes] make v1.23.7 default1
2 years ago
f47aca3558
Added |bool for rhel_enable_repos ( #8871 )
2 years ago
73fc70dbe8
Delete kube_version v1.20- related code ( #8869 )
Current Kubespray supports the Kubernetes version 1.21 or upper with
`kube_version_min_required: v1.21.0`
Then kube_version v1.20- related code is not used at all.
This deletes those code for cleanup.
2 years ago
dc2a18e436
Merge pull request #8815 from simplekube-ro/dont_clobber_calico
[calico] don't clobber calico options set by the user
2 years ago
82590eb087
fix remove `docker-ce.repo` failed ( #8856 )
2 years ago
4c97ce747c
Adding support for the kube-router flag --cluster-asn flag ( #8837 )
2 years ago
ebbc5ed0ce
add liupeng0518 to reviewers ( #8853 )
2 years ago
dc1af5a9c5
[etcd] Add support for setting the request size limit ( #8849 )
* [etcd] Add extra documentation for `etcd_memory_limit` and `etcd_quota_backend_bytes`
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* [etcd] Add support for setting ETCD_MAX_REQUEST_BYTES
Signed-off-by: necatican <necaticanyildirim@gmail.com>
2 years ago
85bd1eea27
fix(calico): add missing "get" verb ( #8847 )
Signed-off-by: irizzant <i.rizzante@gmail.com>
2 years ago
2b151c6aa2
cni-plugins: upgrade to 1.1.1 ( #8852 )
Signed-off-by: necatican <necaticanyildirim@gmail.com>
2 years ago
93fe3e06ef
Add support for including annotations on aws-ebs-csi-controller ( #8779 )
* Add support for including annotations on aws-ebs-csi-controller
* update comment to specify role arn
2 years ago
9d3a894991
Possible remove ippools from cni config ( #8845 )
* Possible remove ippools from cni config
* Typo
* Update roles/network_plugin/calico/templates/cni-calico.conflist.j2
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
* Update cni-calico.conflist.j2
Incorrectly deleted calico forwarding content.
* Update roles/network_plugin/calico/templates/cni-calico.conflist.j2
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
2 years ago
0e6b727e53
Update docs for using venv ( #8842 )
Due many patterns of Linux distributions, it is difficult to install
ansible dependencies as system-wide stably.
Apart of Kubespray doc[1] recommends to use venv to avoid such issue,
and this applies venv usage to the other parts of the doc.
[1]: https://github.com/kubernetes-sigs/kubespray/blob/master/docs/setting-up-your-first-cluster.md#set-up-kubespray
2 years ago
e42a01f203
Fixed systemd-networkd restart for ubuntu 22.04, when using reset.yml ( #8841 )
* Fixed systemd-networkd restart for ubuntu 22.04
* fixed systemd-networkd restart for all Ubuntu
2 years ago
a28b58dbd0
[calico]use ipamconfig instead of calico ipam command ( #8839 )
* use ipamconfig instead of calico ipam command
* fix ansible lint
2 years ago
a26a9ee14f
set apparmor_enabled in netchecker task ( #8844 )
2 years ago
c09fcd4f92
Skip gathering facts when reset_nodes is false ( #8843 )
The doc[1] explains we need to specify
"-e reset_nodes=false -e allow_ungraceful_removal=true"
to delete offline node. However the task "Gather facts"
tried to gather facts of offline node also and the task
was failed.
This adds a condition to skip gathering facts when reset_nodes
is false on remove-node.yml.
[1]: https://github.com/kubernetes-sigs/kubespray/blob/master/docs/nodes.md#3-remove-an-old-node-with-remove-nodeyml
2 years ago
593359ec77
fix kube-ovn image ( #8838 )
2 years ago
34ec4d5d40
Move woopstar to emeritus approver ( #8809 )
2 years ago
3d8f3bc0b7
Fix the invalid kube vip manifest ( #8831 )
* add Feature synchronized time checking
* fix-invalid-kube-vip-manifest
2 years ago
eea7bb7692
only need run this once ( #8833 )
calicoctl ipam xx
calicoctl apply xx
2 years ago
3a89e31dee
[ansible] update ansible and cryptography requirements to work on ubuntu 22.04 ( #8826 )
2 years ago
0c504e4984
[docs] document support for ansible versions ( #8827 )
drop note about not supporting ansible 2.9 since we still cover it in
nightly CI
2 years ago
0bf070c33b
doc: write how to use kata-container for pods ( #8817 )
kata-container is not used by default even if enabling kata_containers_enabled.
This updates the doc for writing how to do that.
2 years ago
dc8ad78206
fix: incorrect condition type ( #8822 )
Signed-off-by: cyclinder qifeng.guo@daocloud.io
2 years ago
48e938660d
Allow replacement of address prefixes for all images ( #8764 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2 years ago
632d457f78
[ingress-nginx] upgrade to 1.2.0 ( #8814 )
2 years ago
569a319ff5
[calico] don't clobber user set bgp configuration options that are not managed by kubespray
2 years ago
47812ec002
[calico] don't clobber user set ippool options that are not managed by kubespray
2 years ago
c27dee57ea
[calico] don't clobber user set felixconfig options that are not managed by kubespray
2 years ago
b289f533b3
get wrong server name of coredns ( #8811 )
Signed-off-by: weizhou.lan@daocloud.io <weizhou.lan@daocloud.io>
2 years ago
3eb0a4071a
set default value of name to "k8s-pod-network" ( #8813 )
Signed-off-by: cyclinder qifeng.guo@daocloud.io
2 years ago
5684610a55
Support metallb peer password ( #8792 )
* support metallb peer password
* add MetalLB BGP password example
2 years ago
f26f544ff6
[kube-ovn]: update kube-ovn version and sync some feature ( #8790 )
* [kube-ovn]: some feature
kube-ovn vlan mode
ipv6/ipv4 dual stack
...
* remove unused env
* fix readinessprobe
2 years ago
Mohamed Zaian
Thearas
Florian Ruynat
Kenichi Omichi
rtsp
Max Gautier
Chris Ricker
Daniil Muidinov
mahjonp
Samuel Liu
Alessio Greggi
ERIK
Gleb Galkin
Ross Kusler
Necatican Yıldırım
irizzant
David Louks
Tamas Pasztor
Andrey
orange-llajeanne
Maxime Guyot
Kay Yan
Cristian Calin
Cyclinder
Calin Cristian Andrei
weizhoublue
Oogy