Florian Ruynat
34d0451585
Update KUBESPRAY_VERSION and kube_version_min_required (with hashes cleanup) ( #9691 )
2 years ago
yanggang
826282fe89
Add k8s hashes for k8s version. ( #9685 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
2 years ago
Arthur Outhenin-Chalandre
4a6eb7eaa2
enable back kubelet_authorization_mode_webhook by default ( #9662 )
In 6db6c8678c
, this was disabled becaue
kubesrpay gave too much permissions that were not needed. This commit
re-enable back this option by default and also removes the extra
permissions that kubespray gave that were in fact not needed.
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
2 years ago
tu1h
791064a3d9
Allow custom timeout for kubeadm init ( #9617 )
Signed-off-by: tu1h <lihai.tu@daocloud.io>
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2 years ago
yanggang
f8d6b54dbb
Add hashes for 1.25.5, 1.24.9, 1.23.15 and make v1.25.5 default ( #9557 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
2 years ago
yanggang
9439487219
Add hashes for 1.25.4, 1.24.8, 1.23.14 and make v1.25.4 default ( #9479 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
2 years ago
Kay Yan
ccbe38f78c
make-kube-1.25-default ( #9364 )
2 years ago
Maxime Leroy
d9c39c274e
fix(defaults): wrong cri_socket path for containerd ( #9401 )
2 years ago
Mohamed Zaian
5ad1d9db5e
[kubernetes] Add hashes for 1.25.3, 1.24.7, 1.23.13 and make v1.24.7 default ( #9397 )
2 years ago
Unai Arríen
52904ee6ad
Avoid MetalLB speaker image download when MetalLB speaker is disabled ( #9248 )
* Avoid MetalLB speaker image download when metallb_speaker_enabled is set to
* Move metallb_speaker_enabled var to allow outside metalLB role references
* Move metallb_speaker_enabled var to allow outside metalLB role references
* Improve metallb_speaker_enabled default values
2 years ago
Kay Yan
999586a110
sysctl_additional ( #9351 )
2 years ago
Florian Ruynat
841e2f44c0
Remove references to 1.22 ( #9342 )
2 years ago
Federico Cucinella
e486151aea
cloud-provider-openstack: upgrade 1.22.0 to 1.23.4 ( #9332 )
2 years ago
Mohamed Zaian
76573bf293
[kubernetes] Add hashes for 1.24.6, 1.22.15, 1.23.12 and make v1.24.6 default ( #9308 )
2 years ago
Mohamed Zaian
680293e79c
[kubernetes] Add hashes for 1.24.5, 1.22.14, 1.23.11 and make v1.24.5 default ( #9286 )
2 years ago
Cristian Calin
6db6c8678c
disable kubelet_authorization_mode_webhook by default ( #9238 )
2 years ago
Mohamed Zaian
ab938602a9
[kubernetes] Add hashes for 1.24.4, 1.22.13, 1.23.10 and make v1.24.4 default ( #9191 )
2 years ago
Mohamed Zaian
91073d7379
[kubernetes] make v1.24.3 default ( #9101 )
2 years ago
Mohamed Zaian
e4fe679916
[kubernetes] make v1.24.2 default
3 years ago
Alessio Greggi
97b4d79ed5
feat: make kubernetes owner parametrized ( #8952 )
* feat: make kubernetes owner parametrized
* docs: update hardening guide with configuration for CIS 1.1.19
* fix: set etcd data directory permissions to be compliant to CIS 1.1.12
3 years ago
Florian Ruynat
9e7f89d2a2
Remove forgotten 1.21 references
3 years ago
Calin Cristian Andrei
24c8ba832a
[kubernetes] drop support for configuring insecure apiserver
3 years ago
Calin Cristian Andrei
2cd8c51a07
[kubeadm] use v1beta3 configuration version
* extra admission controls now don't have a version in their file names
eventratelimit.v1beta2.yaml.j2 -> eventratelimit.yaml.j2
* cri_socket variable includes the unix:// prefix to be conformat with
upstream
3 years ago
Calin Cristian Andrei
fad296616c
[docker] use cri-dockerd instead of dockershim for any kubernetes version deployed with docker as the container_manager
3 years ago
Calin Cristian Andrei
ae1dcb031f
[kubernetes] drop pre 1.22.0 workarounds
3 years ago
Calin Cristian Andrei
9535a41187
[kubernetes] make 1.22.0 the minimum version
3 years ago
Calin Cristian Andrei
d69d4a8303
[kubernetes] make 1.24.1 the new default
3 years ago
Mohamed Zaian
78aacee21b
[kubernetes] add hashes for 1.24.1 and other versions. ( #8876 )
* [kubernetes] add hashes for 1.24.1 and other versions.
versions: v1.21.13, v1.22.10, v1.23.7 & v1.24.1
* [kubernetes] make v1.23.7 default1
3 years ago
Samuel Liu
f26f544ff6
[kube-ovn]: update kube-ovn version and sync some feature ( #8790 )
* [kube-ovn]: some feature
kube-ovn vlan mode
ipv6/ipv4 dual stack
...
* remove unused env
* fix readinessprobe
3 years ago
Cristian Calin
56cf163a23
[kubernetes] actually make 1.23.6 the default ( #8767 )
3 years ago
Julien Le Fur
30306d6ec7
Enable external CA mode for control-plane deployment ( #8620 )
3 years ago
Robin Wallace
d7254eead6
UpCloud integration ( #8653 )
* [upcloud] add upcloud csi-driver
* Option to use ansible_host as api ip for kubueconfig
3 years ago
Samuel Liu
424ef3b3f9
[calico] add calico apiserver ( #8690 )
* [calico] add calico apiserver
* fix yamllint
* remove addext argument
* Configure API server with the CA bundle
* add check kdd
3 years ago
Mathieu Parent
996ef98b87
Add support for kube-vip ( #8669 )
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
3 years ago
Alessio Greggi
bba91a7524
split kube_feature_gates variable for different kubernetes components ( #8677 )
* feat: split kube_feature_gates variable for different kubernetes components
* docs: add kube_feaute_gates componet variables
3 years ago
Calin Cristian Andrei
538f9df5cc
[kubernetes] make 1.23.5 the default
3 years ago
Cristian Calin
394857b5ce
[docker] add support for cri-dockerd as a replacement for dockershim ( #8623 )
3 years ago
Tom Janson
2e925f82ef
Revert "Fix: typos in docs and comments ( #7805 )" ( #8592 )
This reverts commit 417180246c
.
3 years ago
Necatican Yıldırım
e9c8913248
Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable ( #8317 )
* Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* Add etcd kubeadm deployment documentation
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* Refactor warning for the deprecated 'etcd_kubeadm_enabled' variable
Signed-off-by: necatican <necaticanyildirim@gmail.com>
3 years ago
Florian Ruynat
d4f654275b
Set default kubernetes version to 1.23.4
3 years ago
Michael Schmitz
eacd55fbca
Use sysctl_file_path variable for all sysctl_file locations ( #8395 )
* Use sysctl_file_path variable for all sysctl_file locations
* Add sysctl_file_path variable to kubespay-defaults
* Remove previously used sysctl file locations if present
* Use explicit filename in roles/kubernetes/node/defaults/main.yml
* Defaults: use explicit value
3 years ago
Samuel Liu
e6e7fbc25f
fix reset containerd_storage_dir undefined ( #8478 )
* fix reset containerd_storage_dir
* add env to kubespray-defaults
3 years ago
Ilya Margolin
7d4d554436
Document host_resolvconf as default value for resolvconf_mode ( #8493 )
refs #8247
3 years ago
Calin Cristian Andrei
ababcd5481
[kube] make 1.23.3 the new default
3 years ago
Calin Cristian Andrei
be9a1f80c1
[kube] make 1.23.2 the default version
3 years ago
Victor Morales
e88aa7c96b
Add youki runtime support ( #8411 )
3 years ago
Johann Schley
38d129a0b6
add external hcloud cloud controller manager ( #8440 )
3 years ago
Unai Arríen
57a1d18db3
Improve first_kube_control_plane variable management to avoid installation failures due to variable overlapping ( #8388 )
3 years ago
rtsp
aa4a3d7afd
Fix container engine still installed on dedicated etcd node even if `etcd_deployment_type: host` ( #8386 )
3 years ago
Kenichi Omichi
51bd9bee0d
Move containerd_version to defaults/main.yml ( #8379 )
All container image versions were defined in download/defaults/main.yml
except containerd.
The inconsistency caused the offline script(generate_list.sh) could not
output the URL of containerd image.
This moves the definition into a valid file.
In addition, this adds host_os to generate_list.sh for downloading
krew from a valid URL.
3 years ago