kubespray

Commit Graph

Author	SHA1	Message	Date
Florian Ruynat	c8d9afce1a	Update a bunch of tools (#8061 )	3 years ago
Florian Ruynat	285983a555	Update docker version to 20.10.9 - CVE fixes (#8060 )	3 years ago
Cristian Calin	ab4356aa69	Calico: bump default version to 3.20.2 (#8058 )	3 years ago
Maxim Pogozhiy	5fcf047191	local-volume-provisioner quay.io -> k8s.gcr.io (#8054 )	3 years ago
Rene Luria	e707f78899	After upgrade, allow cilium to be back before uncordoning (#7978 ) * After upgrade, allow cilium to be back before uncordoning * add eol * use kube_config_dir variable resolves https://github.com/kubernetes-sigs/kubespray/pull/7978#discussion_r721685549	3 years ago
Ilya Margolin	41e0ca3f85	Move kube_feature_gates to kubelet config (#8048 ) to remove deprecation warning: > Flag --feature-gates has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag.	3 years ago
Iago Santos	43958614e3	Fix kubespray flatcar ansible_os_family and ansible_distribution (#8029 ) Closes https://github.com/kubernetes-sigs/kubespray/issues/8028 Signed-off-by: Iago Santos <iago.santos.pardo@adfinis.com>	3 years ago
rtsp	af04906b51	Ensure apparmor is installed (#8036 ) Kubespray deployment failed when using containerd backend on nodes that apparmor was not installed or previously removed. This PR ensure apparmor is installed by adding it into required_pkgs var.	3 years ago
Cristian Calin	c7e17688b9	gVisor: bump release to 20210921 version (#8015 ) * gVisor: bump release to 20210921 version * gVisor: drop support for 20210518.0 version	3 years ago
Peter Pan	f5885d05ea	In CentOS 8.x Docker install Step: remove podman when existing (#8016 )	3 years ago
Frank Filippone	eee2eb11d8	Update weave template to match source for 2.8.1 (#8013 )	3 years ago
Kenichi Omichi	8d3961edbe	Add metrics_server_resizer option (#8018 ) The addon-resizer container can reduce resource limits of cpu and memory of metrics-server container in the pod, and that caused OOMKilled. In addition, the original metrics-server manifest doesn't contain the addon-resizer container as [1]. So this adds metrics_server_resizer option to control the addon-resizer container deployment and the default value is false to make it stable for most environments. [1]: `527679e5e8/manifests/base/deployment.yaml`	3 years ago
Marcos Lorenzo	4c5328fd1f	Determine root filesistem device and partition before running growpart (#8024 )	3 years ago
David Louks	1472528f6d	check if 'plugins' key exists in calico_cni_config object (#7717 ) * check if 'plugins' key exists in calico_cni_config object * fix whitespace linting error * fixed when list indentation	3 years ago
Victor Morales	9416c9aa86	Enable stable and edge Docker CLI versions (#8019 )	3 years ago
Kenichi Omichi	da92c7e215	Add proxy for subscription-manager (#8012 ) If using proxy, it is necessary to configure it before running "subscription-manager status" command. This adds the step.	3 years ago
Kenichi Omichi	d27cf375af	Remove allowPrivilegeEscalation from metrics-server (#8014 ) "allowPrivilegeEscalation: false" blocks deploying metrics-server on CentOS7. In addition, the original metrics-server manifest doesn't contain it as [1]. This removes it. [1]: `527679e5e8/manifests/base/deployment.yaml`	3 years ago
Victor Morales	432a312a35	Enable stable and edge containerd versions (#8020 )	3 years ago
Cristian Calin	3a6230af6b	Kata-Containers: update versions 2.2.0 (default) and 2.1.1 (#8017 ) * Kata-Containers: add 2.2.0 hashes and make default * Kata-Containers: replace 2.1.0 with bugfix version 2.1.1 * Kata-Containers: move to q35 a more modern VM architecture as 'pc' is removed in 2.2.0	3 years ago
Florian Ruynat	ecd267854b	Move ovn4nvf crd from v1beta1 to v1 (#8006 )	3 years ago
Hugo Blom	ac846667b7	Check if openstack application credentials are empty since they always exists (#8021 )	3 years ago
rtsp	4bace2491d	Ensure apparmor is installed (#8011 ) Kubespray deployment failed when using containerd backend on nodes that apparmor was not installed or previously removed. This PR ensure apparmor is installed by adding it into required_pkgs var.	3 years ago
Maxim Pogozhiy	22017b7ff0	kube-router 1.3.0 -> 1.3.1 (#8007 )	3 years ago
Florian Ruynat	88c11b5946	Revert "etcd: enable v2 api only if needed (#8001 )" (#8008 ) This reverts commit `c0e1211abe`.	3 years ago
Kenichi Omichi	843252c968	Use kube_config_dir for kubeconfig (#7996 ) The path of kubeconfig should be configurable, and its default value is /etc/kubernetes/admin.conf. Most paths of the file are configurable but some were not. This make those configurable.	3 years ago
Eric Lake	ddea79f0f0	Issue 8004: Fix typha prometheus (#8005 ) The typha prometheus settings were in the `volumeMounts` section of the spec and not in the `envs` section. This was cauing the deployment to fail because it was looking for a volumeMount. ``` failed: [controller-001.a2.da.dev.logdna.net] (item=calico-typha.yml) => {"ansible_loop_var": "item", "changed": false, "item": {"ansible_loop_var": "item", "changed": true, "checksum": "598ac79530749e8e2110793b53fc49ac208e7130", "dest": "/etc/kubernetes/calico-typha.yml", "diff": [], "failed": false, "gid": 0, "group": "root", "invocation": {"module_args": {"_original_basename": "calico-typha.yml.j2", "attributes": null, "backup": false, "checksum": "598ac79530749e8e2110793b53fc49ac208e7130", "content": null, "delimiter": null, "dest": "/etc/kubernetes/calico-typha.yml", "directory_mode": null, "follow": false, "force": true, "group": null, "local_follow": null, "mode": null, "owner": null, "regexp": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/core/.ansible/tmp/ansible-tmp-1632349768.56-75434-32452975679246/source", "unsafe_writes": null, "validate": null}}, "item": {"file": "calico-typha.yml", "name": "calico", "type": "typha"}, "md5sum": "53c00ac7f562cf9ecbbfd27899ea066d", "mode": "0644", "owner": "root", "size": 5378, "src": "/home/core/.ansible/tmp/ansible-tmp-1632349768.56-75434-32452975679246/source", "state": "file", "uid": 0}, "msg": "error running kubectl (/opt/bin/kubectl --namespace=kube-system apply --force --filename=/etc/kubernetes/calico-typha.yml) command (rc=1), out='service/calico-typha unchanged\n', err='error: error validating \"/etc/kubernetes/calico-typha.yml\": error validating data: [ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[2]): unknown field \"value\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[2]): missing required field \"mountPath\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[3]): unknown field \"value\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[3]): missing required field \"mountPath\" in io.k8s.api.core.v1.VolumeMount]; if you choose to ignore these errors, turn validation off with --validate=false\n'"} ```	3 years ago
Max Gautier	c0e1211abe	etcd: enable v2 api only if needed (#8001 ) * etcd: enable v2 api only if needed Only enable v2 API if we have a consumer (flannel) This reduce the exposed surface for etcd. * Fix bad group name	3 years ago
Florian Ruynat	c8d7f000c9	Remove k8s hooks for versions prior to 1.20 (#7998 )	3 years ago
Léopold Jacquot	598f178054	Fix cilium operator metrics activation (#8000 )	3 years ago
Florian Ruynat	5d1b34bdcd	Move min k8s version to 1.20	3 years ago
Florian Ruynat	8efde799e1	Update kubernetes version to 1.22.2	3 years ago
Cristian Calin	a517a8db01	Drop chech for kubelet_shutdown_grace_period (#7993 ) and kubelet_shutdown_grace_period_critical_pods as ansible cannot do sane time interval calculations	3 years ago
Wang Zhen	2211504790	Fix k8s-certs-renew cp path (#7992 ) Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>	3 years ago
Cristian Calin	fb8662ec19	Calico: update versions 3.20.1, 3.19.3 (#7984 ) * make Calico 3.20.1 the default version * drop Calico 3.17.x support	3 years ago
Cristian Calin	6f7911264f	Calico: make calico_min_version check relevant (#7939 ) * Calico: make calico_min_version check relevant * Calico: only check currently installed version against the oldest supported version by the previous release	3 years ago
Cristian Calin	ae44aff330	Calico: increase calico node probe timeouts and allow tunning (#7981 )	3 years ago
Florian Ruynat	b83e8b020a	Fix default version (#7977 )	3 years ago
Hari Hud	30cd91dc6b	Add option to kubeadm upgrade command to control certificates renewal during control plane upgrade (#7976 ) * Add option to kubeadm upgrade command to control certificates renewal during control plane upgrade * Remove training whitespace	3 years ago
Florian Ruynat	f2fa9c3b31	Update hashes with new versions	3 years ago
Florian Ruynat	30a7dfa4f8	Fix ubuntu16/centos8 CI jobs (#7972 )	3 years ago
Samuel Liu	62ab477838	remove kube_proxy_conntrack_max var (#7971 )	3 years ago
rtsp	f8a57f7598	Fix iptables missing on Debian 11 if APT::Install-Recommends=0 (#7964 ) On Debian 11, `ipset` just recommend `iptables` so on the system that apt is configured with `APT::Install-Recommends "0";` iptables will not install automatically.	3 years ago
Bryan Hundven	35c928798d	Fix missing file mode (risky-file-permissions) (#7959 ) * Fix missing file mode (risky-file-permissions) Found this using ansible-lint. Signed-off-by: Bryan Hundven <bryanhundven@gmail.com> * Fix another missing file mode (risky-file-permissions) This one fixes `/etc/crio/config.json` Signed-off-by: Bryan Hundven <bryanhundven@gmail.com>	3 years ago
jhchong92	83f64a7ff9	Bugfix/cinder csi cloud config template (#7955 ) * Fix invalid condition for username and password inclusion * Use length filter to test variable conditions	3 years ago
Florian Ruynat	60853fa682	Update kube-ovn to 1.7.2	3 years ago
Florian Ruynat	b66356be65	Update cilium to 1.9.10	3 years ago
jhchong92	efae2dbad6	Update snapshot-controller repository and image versions (#7957 )	3 years ago
jhchong92	bd8b8916a8	Remove invalid spec - deployment.spec.serviceName (#7949 )	3 years ago
jhchong92	57063b6828	Replace incorrect {% end %} tags with {% endif %} in csi_crd templates (#7947 )	3 years ago
Ole Mathias Aa. Heggem	69b67a293a	Calico: Add kube_service_addresses_ipv6 to serviceClusterIPs (#7889 ) (#7944 ) Add IPv6 Service Addresses to BGP advertisement when calico_advertise_cluster_ips is true.	3 years ago

... 2 3 4 5 6 ...

4096 Commits (3314f95be4832cd8b165ae9f009faa9fcf5fe95e)