Erwan Miran
fcd8d850dc
Fix ansible syntax to avoid ansible warnings (again) ( #3509 )
* Fix ansible syntax to avoid ansible warnings (again)
* warn: false on tar -cfz
* wrong placement of warn:false
6 years ago
Matthew Mosesohn
0b4fcc83bd
Fix up warnings and deprecations ( #1848 )
7 years ago
Brad Beam
8b151d12b9
Adding yamllinter to ci steps ( #1556 )
* Adding yaml linter to ci check
* Minor linting fixes from yamllint
* Changing CI to install python pkgs from requirements.txt
- adding in a secondary requirements.txt for tests
- moving yamllint to tests requirements
7 years ago
Aleksandr Didenko
58acbe7caf
Fix multiline when condition in sync_certs task
Folded style in multiline 'when' condition causes error with
unexpected ident. Changing it to literal style should fix
the issue.
Closes #1190
7 years ago
Matthew Mosesohn
a422ad0d50
More idempotency fixes
Fixed sync_tokens fact
Fixed sync_certs for k8s tokens fact
Disabled register docker images changability
Fixed CNI dir permission
Fix idempotency for etcd pre upgrade checks
7 years ago
Matthew Mosesohn
4c6829513c
Fix etcd idempotency
7 years ago
Matthew Mosesohn
d176818c44
Use find module for checking for certificates
Also generate certs only when absent on master (rather than
when absent on target node)
7 years ago
Matthew Mosesohn
9c1701f2aa
Add synthetic scale deployment mode
New deploy modes: scale, ha-scale, separate-scale
Creates 200 fake hosts for deployment with fake hostvars.
Useful for testing certificate generation and propagation to other
master nodes.
Updated test cases descriptions.
7 years ago
Matthew Mosesohn
e5779ab786
Fix check for node-NODEID certs existence
Fixes upgrade from pre-individual node cert envs.
7 years ago
Matthew Mosesohn
f0c0390646
Fix creation and sync of etcd certs
Admin certs only go to etcd nodes
Only generate cert-data for nodes that need sync
8 years ago
Matthew Mosesohn
6d9cd2d720
Fix calico-rr to use etcd certs instead of kube certs
8 years ago
Matthew Mosesohn
ad796d188d
Individual etcd ssl certs
Includes hooks for triggering calico, kubelet, and kube-apiserver restarts
if etcd certs changed.
8 years ago
Matthew Mosesohn
a32cd85eb7
Add etcd TLS support
8 years ago
Paul Czarkowski
d8bebcd201
Fix issue with check_certs playbook
check_certs task "Check_certs | Set 'sync_certs' to true" was failing
due to the dict not existing, this sets defaults that allows the
correct behavior of the conditionals.
8 years ago
Smana
ae5ff890d4
fix flannel deployment, remove docker bridge before restarting
8 years ago
Smana
48a85ce8f8
use docker repository to install on CentOS
8 years ago
Smana
5c22133492
fix add nodes to the cluster
8 years ago