kubespray

Commit Graph

Author	SHA1	Message	Date
ChengHao Yang	3cda93405a	Cleanup: Ubuntu 20.04 tests (#12301 ) * Test: molecule replace ubuntu2004 with ubuntu2204 ubuntu2404 cri-dockerd, adduser and bastion-ssh-config can't run ubuntu2404, maybe needs to check login. "System is booting up. Unprivileged users are not permitted to log in yet. Please come back later. For technical details, see pam_nologin(8)." Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com> * Test: replace ubuntu-2004 with ubuntu-2404 All ubuntu-2004 tests are removed. Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com> * Docs: update ci.md Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com> * Docs: update README.md Remove Ubuntu 20.04 support Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com> --------- Signed-off-by: ChengHao Yang Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>	3 months ago
Takuya Murakami	cee065920f	fix: The 'AppArmor' feature gate is removed from kubernetes 1.33 Signed-off-by: Takuya Murakami <murakami_da@nec.com>	4 months ago
Max Gautier	4f3b214ef5	CI: streamline packet jobs definition - Take advantage of `parallel:matrix` to make the jobs definition shorter and more readable. - Remove helper scripts which are no longer needed - Remove redundant indirection in the gitlab-ci pipelines definitions (only one user)	6 months ago
Vlad Korolev	9a7b021eb8	Do not use ‘yes/no’ for boolean values (#11472 ) Consistent boolean values in ansible playbooks	1 year ago
Nicolas Goudry	c6fcbf6ee0	Remove access to cluster from anonymous users (#11016 ) * feat: add user facing variable with default * feat: remove rolebinding to anonymous users after init and upgrade * feat: use file discovery for secondary control plane nodes * feat: use file discovery for nodes * fix: do not fail if rolebinding does not exist * docs: add warning about kube_api_anonymous_auth * style: improve readability of delegate_to parameter * refactor: rename discovery kubeconfig file * test: enable new variable in hardening and upgrade test cases * docs: add option to config parameters * test: multiple instances and upgrade	1 year ago
Takuya Murakami	785366c2de	[kubernetes] Support kubernetes 1.29 (#10820 ) * [kubernetes] Make kubernetes 1.29.1 default * [cri-o]: support cri-o 1.29 Use "crio status" instead of "crio-status" for cri-o >=1.29.0 * Remove GAed feature gates SecCompDefault The SecCompDefault feature gate was removed since k8s 1.29 https://github.com/kubernetes/kubernetes/pull/121246	1 year ago
yun	13e1f33898	Correct the POLY1305 cipher suites by adding the suffix _SHA256 (#10641 )	1 year ago
Max Gautier	7395c27932	CI: Document the 'all-in-one' layout + small refactoring (#10725 ) * Rename aio to all-in-one and document it ADTM. Acronyms don't tell much. * Refactor vm_count in tests provisioning	1 year ago
James	07d45e6b62	Kubelet csr approver (#9877 ) * chore(helm-apps): fix README example README shows a non-working example according to the specs for this role. * Add support for kubelet-csr-approver Co-Authored-By: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * Add tests for kubelet-csr-approver Co-Authored-By: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * Add Documentation for Kubelet CSR Approver Co-Authored-By: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Co-authored-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>	2 years ago
Kay Yan	c98e1d1b5b	add-kube-profile-to-scheduler (#9993 )	2 years ago
William Turner	eeb376460d	Fix inconsistent handling of admission plugin list (#9407 ) * Fix inconsistent handling of admission plugin list * Adjust hardening doc with the normalized admission plugin list * Add pre-check for admission plugins format change * Ignore checking admission plugins value when variable is not defined	2 years ago
Kenichi Omichi	e5ec0f18c0	Add packet_ubuntu20-calico-aio-hardening (#9359 ) To verify the hardening method works always. The configuration comes from docs/hardening.md Fix yaml format of hardening.yml Add condition to skip 040 test for hardening	3 years ago

1 Commits (3cda93405a97e7b0acad0681976fd18cfb2a201f)