kubespray

Commit Graph

Author	SHA1	Message	Date
rtsp	af04906b51	Ensure apparmor is installed (#8036 ) Kubespray deployment failed when using containerd backend on nodes that apparmor was not installed or previously removed. This PR ensure apparmor is installed by adding it into required_pkgs var.	3 years ago
Cristian Calin	c7e17688b9	gVisor: bump release to 20210921 version (#8015 ) * gVisor: bump release to 20210921 version * gVisor: drop support for 20210518.0 version	3 years ago
Olivier Lemasle	ac76840c5d	Upgrade ruamel.yaml.clib to work with Python 3.10 (#8034 ) ruamel.yaml.clib did not build with the upcoming Python 3.10. Cf. https://sourceforge.net/p/ruamel-yaml-clib/tickets/5/ ruamel.yaml.clib==0.2.4 fixes the issue. It does not work with Python 3.7 (cf https://sourceforge.net/p/ruamel-yaml-clib/tickets/6/) but currently Kubespray requires Python >= 3.9.	3 years ago
Peter Pan	f5885d05ea	In CentOS 8.x Docker install Step: remove podman when existing (#8016 )	3 years ago
Nicolas Goudry	af949cd967	Fix invalid documentation links (#7692 ) * Fix invalid link to Ansible documentation * Fix invalid link to mitogen doc page * Fix invalid link to calico doc page * Fix all invalid links to doc pages	3 years ago
Frank Filippone	eee2eb11d8	Update weave template to match source for 2.8.1 (#8013 )	3 years ago
Kenichi Omichi	8d3961edbe	Add metrics_server_resizer option (#8018 ) The addon-resizer container can reduce resource limits of cpu and memory of metrics-server container in the pod, and that caused OOMKilled. In addition, the original metrics-server manifest doesn't contain the addon-resizer container as [1]. So this adds metrics_server_resizer option to control the addon-resizer container deployment and the default value is false to make it stable for most environments. [1]: `527679e5e8/manifests/base/deployment.yaml`	3 years ago
Marcos Lorenzo	4c5328fd1f	Determine root filesistem device and partition before running growpart (#8024 )	3 years ago
David Louks	1472528f6d	check if 'plugins' key exists in calico_cni_config object (#7717 ) * check if 'plugins' key exists in calico_cni_config object * fix whitespace linting error * fixed when list indentation	3 years ago
Victor Morales	9416c9aa86	Enable stable and edge Docker CLI versions (#8019 )	3 years ago
Kenichi Omichi	da92c7e215	Add proxy for subscription-manager (#8012 ) If using proxy, it is necessary to configure it before running "subscription-manager status" command. This adds the step.	3 years ago
Kenichi Omichi	d27cf375af	Remove allowPrivilegeEscalation from metrics-server (#8014 ) "allowPrivilegeEscalation: false" blocks deploying metrics-server on CentOS7. In addition, the original metrics-server manifest doesn't contain it as [1]. This removes it. [1]: `527679e5e8/manifests/base/deployment.yaml`	3 years ago
Victor Morales	432a312a35	Enable stable and edge containerd versions (#8020 )	3 years ago
Cristian Calin	3a6230af6b	Kata-Containers: update versions 2.2.0 (default) and 2.1.1 (#8017 ) * Kata-Containers: add 2.2.0 hashes and make default * Kata-Containers: replace 2.1.0 with bugfix version 2.1.1 * Kata-Containers: move to q35 a more modern VM architecture as 'pc' is removed in 2.2.0	3 years ago
Florian Ruynat	ecd267854b	Move ovn4nvf crd from v1beta1 to v1 (#8006 )	3 years ago
Hugo Blom	ac846667b7	Check if openstack application credentials are empty since they always exists (#8021 )	3 years ago
Cristian Calin	33146b9481	CI: Add Calico eBPF in HA mode test (#7710 ) * Sample-Inventory: add sample for calico_bpf_enabled * Calico-Doc: note about CONFIG_NET_SCHED for eBPF support * CI: Add Calico eBPF in HA mode test	3 years ago
rtsp	4bace2491d	Ensure apparmor is installed (#8011 ) Kubespray deployment failed when using containerd backend on nodes that apparmor was not installed or previously removed. This PR ensure apparmor is installed by adding it into required_pkgs var.	3 years ago
Kenichi Omichi	469b3ec525	Add definition check of disable_service_firewall (#7995 ) When not specifying disable_service_firewall, the task is failed. This adds the definition check.	3 years ago
Maxim Pogozhiy	22017b7ff0	kube-router 1.3.0 -> 1.3.1 (#8007 )	3 years ago
Florian Ruynat	88c11b5946	Revert "etcd: enable v2 api only if needed (#8001 )" (#8008 ) This reverts commit `c0e1211abe`.	3 years ago
Kenichi Omichi	843252c968	Use kube_config_dir for kubeconfig (#7996 ) The path of kubeconfig should be configurable, and its default value is /etc/kubernetes/admin.conf. Most paths of the file are configurable but some were not. This make those configurable.	3 years ago
Eric Lake	ddea79f0f0	Issue 8004: Fix typha prometheus (#8005 ) The typha prometheus settings were in the `volumeMounts` section of the spec and not in the `envs` section. This was cauing the deployment to fail because it was looking for a volumeMount. ``` failed: [controller-001.a2.da.dev.logdna.net] (item=calico-typha.yml) => {"ansible_loop_var": "item", "changed": false, "item": {"ansible_loop_var": "item", "changed": true, "checksum": "598ac79530749e8e2110793b53fc49ac208e7130", "dest": "/etc/kubernetes/calico-typha.yml", "diff": [], "failed": false, "gid": 0, "group": "root", "invocation": {"module_args": {"_original_basename": "calico-typha.yml.j2", "attributes": null, "backup": false, "checksum": "598ac79530749e8e2110793b53fc49ac208e7130", "content": null, "delimiter": null, "dest": "/etc/kubernetes/calico-typha.yml", "directory_mode": null, "follow": false, "force": true, "group": null, "local_follow": null, "mode": null, "owner": null, "regexp": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/core/.ansible/tmp/ansible-tmp-1632349768.56-75434-32452975679246/source", "unsafe_writes": null, "validate": null}}, "item": {"file": "calico-typha.yml", "name": "calico", "type": "typha"}, "md5sum": "53c00ac7f562cf9ecbbfd27899ea066d", "mode": "0644", "owner": "root", "size": 5378, "src": "/home/core/.ansible/tmp/ansible-tmp-1632349768.56-75434-32452975679246/source", "state": "file", "uid": 0}, "msg": "error running kubectl (/opt/bin/kubectl --namespace=kube-system apply --force --filename=/etc/kubernetes/calico-typha.yml) command (rc=1), out='service/calico-typha unchanged\n', err='error: error validating \"/etc/kubernetes/calico-typha.yml\": error validating data: [ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[2]): unknown field \"value\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[2]): missing required field \"mountPath\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[3]): unknown field \"value\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[3]): missing required field \"mountPath\" in io.k8s.api.core.v1.VolumeMount]; if you choose to ignore these errors, turn validation off with --validate=false\n'"} ```	3 years ago
Max Gautier	c0e1211abe	etcd: enable v2 api only if needed (#8001 ) * etcd: enable v2 api only if needed Only enable v2 API if we have a consumer (flannel) This reduce the exposed surface for etcd. * Fix bad group name	3 years ago
Florian Ruynat	c8d7f000c9	Remove k8s hooks for versions prior to 1.20 (#7998 )	3 years ago
Léopold Jacquot	598f178054	Fix cilium operator metrics activation (#8000 )	3 years ago
Florian Ruynat	6f8b24f367	Allow failure in cert manager job	3 years ago
Florian Ruynat	5d1b34bdcd	Move min k8s version to 1.20	3 years ago
Florian Ruynat	8efde799e1	Update kubernetes version to 1.22.2	3 years ago
Florian Ruynat	96b61a5f53	Update KUBE_VERSION in gitlab-ci following release	3 years ago
Cristian Calin	a517a8db01	Drop chech for kubelet_shutdown_grace_period (#7993 ) and kubelet_shutdown_grace_period_critical_pods as ansible cannot do sane time interval calculations	3 years ago
Wang Zhen	2211504790	Fix k8s-certs-renew cp path (#7992 ) Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>	3 years ago
Cristian Calin	fb8662ec19	Calico: update versions 3.20.1, 3.19.3 (#7984 ) * make Calico 3.20.1 the default version * drop Calico 3.17.x support	3 years ago
Cristian Calin	6f7911264f	Calico: make calico_min_version check relevant (#7939 ) * Calico: make calico_min_version check relevant * Calico: only check currently installed version against the oldest supported version by the previous release	3 years ago
Cristian Calin	ae44aff330	Calico: increase calico node probe timeouts and allow tunning (#7981 )	3 years ago
Florian Ruynat	b83e8b020a	Fix default version (#7977 )	3 years ago
Hari Hud	30cd91dc6b	Add option to kubeadm upgrade command to control certificates renewal during control plane upgrade (#7976 ) * Add option to kubeadm upgrade command to control certificates renewal during control plane upgrade * Remove training whitespace	3 years ago
Florian Ruynat	09af3ab074	Set Kubernetes default version to 1.21.5	3 years ago
Florian Ruynat	f2fa9c3b31	Update hashes with new versions	3 years ago
Florian Ruynat	30a7dfa4f8	Fix ubuntu16/centos8 CI jobs (#7972 )	3 years ago
Samuel Liu	62ab477838	remove kube_proxy_conntrack_max var (#7971 )	3 years ago
Ray Terrill	1edb7d771f	Modify connection_strings_etcd to only return etcd nodes (#7966 ) Modify connection_strings_etcd to only return etcd nodes - not master nodes - since this results in duplicate hosts in the generated Ansible inventory and is unnecessary.	3 years ago
rtsp	f8a57f7598	Fix iptables missing on Debian 11 if APT::Install-Recommends=0 (#7964 ) On Debian 11, `ipset` just recommend `iptables` so on the system that apt is configured with `APT::Install-Recommends "0";` iptables will not install automatically.	3 years ago
andrew.k	85d18fc107	add node-based upgrade (#7785 )	3 years ago
Fredrik Liv	aa00c1d91a	Updated UpCloud terraform script to use private network and dynamic (#7779 ) additional disks	3 years ago
Vladimir Masarik	a5a88e41af	Fix: adding new ips with inventory builder (#7577 ) (#7583 ) * Fix: adding new ips with inventory builder (#7577) * moved conflig loading logic to after checking whether the config should be loaded, and added check for whether the config should be loaded * added check for removing nodes from config if the user wants to remove a node, we need to load the config * Fix tox errors	3 years ago
Bryan Hundven	35c928798d	Fix missing file mode (risky-file-permissions) (#7959 ) * Fix missing file mode (risky-file-permissions) Found this using ansible-lint. Signed-off-by: Bryan Hundven <bryanhundven@gmail.com> * Fix another missing file mode (risky-file-permissions) This one fixes `/etc/crio/config.json` Signed-off-by: Bryan Hundven <bryanhundven@gmail.com>	3 years ago
jhchong92	83f64a7ff9	Bugfix/cinder csi cloud config template (#7955 ) * Fix invalid condition for username and password inclusion * Use length filter to test variable conditions	3 years ago
Florian Ruynat	60853fa682	Update kube-ovn to 1.7.2	3 years ago
Florian Ruynat	b66356be65	Update cilium to 1.9.10	3 years ago

... 39 40 41 42 43 ...

8032 Commits (331671ac309c2f39e75b72fd0d0a966fbfe23324) All Branches Search

8032 Commits (331671ac309c2f39e75b72fd0d0a966fbfe23324)

All Branches