7bec169d58
Fix ansible syntax to avoid ansible deprecation warnings ( #3512 )
* failed
* version_compare
* succeeded
* skipped
* success
* version_compare becomes version since ansible 2.5
* ansible minimal version updated in doc and spec
* last version_compare
6 years ago
bfd4ccbeaa
Calico: Ability to define global peers ( #3493 )
6 years ago
6549b8f8ae
Ability to define the asNumber on a per node basis when route reflectors are not used in order to peer directly with routers ( #3492 )
6 years ago
232020ef96
skip-exists is an flag for create command, not for calicoctl ( #3401 )
6 years ago
02de35cfc3
Fix some typos ( #3382 )
Signed-off-by: Rui Cao <ruicao@alauda.io>
6 years ago
fb1678d425
Ensures BGPPeer resource names are unique
6 years ago
d3adf09bde
Fixes BGPPeer resource for calico >= 3.0.0
6 years ago
c83350e597
refactor to base on calico_version
6 years ago
55d76ea3d8
Update install.yml
6 years ago
1091e82327
Update install.yml
6 years ago
cc79125d3e
Update install.yml
6 years ago
d91f9e14e6
Put back legacy support for calico ippools and bgp settings
6 years ago
b2a7a27dfb
Fix indent error by yamllint.
6 years ago
ea2c9d8f57
Fix yaml checks
6 years ago
dc3e317d20
Fix backward compatibility with calico 2.6
6 years ago
6569180654
remove capitalize filter
6 years ago
2f1fe44762
update images to use arch
6 years ago
23fd3461bc
calico upgrade to v3 ( #3086 )
* calico upgrade to v3
* update calico_rr version
* add missing file
* change contents of main.yml as it was left old version
* enable network policy by default
* remove unneeded task
* Fix kubelet calico settings
* fix when statement
* switch back to node-kubeconfig.yaml
6 years ago
c3b3572025
Always create service account even rbac_enabled = false
6 years ago
1a3b9dd864
Force copy cni files
6 years ago
8fee1ab102
change create to apply
6 years ago
9837b7926f
Use proper lookup of etcd host for calico ( #2408 )
Fixes #2397
6 years ago
bc0fc5df98
Use node cert for etcd tasks instead of delegating to first etcd ( #2386 )
For etcdctl commands, use admin cert instead of node because this file
doesn't exist on etcd only hosts.
6 years ago
31659efe13
Fixing cert name in calico/canal for etcd check ( #2358 )
6 years ago
87f33a4644
Use CNI to assign kube_pods_subnet for calico
Now calico can be deployed if there are other existing pools
and not confuse IPAM and end up with pods in the wrong pools.
6 years ago
d2935ffed0
Optionally ignore the presence of extra calico pools ( #2190 )
6 years ago
e45b30d033
Add etcd key and cert environment variables for use with client auth
7 years ago
ec54b36e05
add retries for calico/canal etcd commands ( #2007 )
7 years ago
bc1a4e12ad
fix broken variable in ansible 2.4.1.0 and ensure tasks for calico-rr ( #1982 )
7 years ago
86fb669fd3
Idempotency fixes ( #1838 )
7 years ago
d4b10eb9f5
Fix path for calico get node names ( #1816 )
7 years ago
6ec45b10f1
Update network-plugins to use portmap plugin ( #1763 )
Portmap allow to use hostPort with CNI plugins. Should fix #1675
7 years ago
10dd049912
Revert "Security fixes for etcd ( #1778 )" ( #1786 )
This reverts commit 4209f1cbfd
7 years ago
4209f1cbfd
Security fixes for etcd ( #1778 )
* Security fixes for etcd
* Use certs when querying etcd
7 years ago
f14f04c5ea
Upgrade to kubernetes v1.8.0 ( #1730 )
* Upgrade to kubernetes v1.8.0
hyperkube no longer contains rsync, so now use cp
* Enable node authorization mode
* change kube-proxy cert group name
7 years ago
9c86da1403
Normalize tags in all places to prepare for tag fixing in future ( #1739 )
7 years ago
d94e3a81eb
Use api lookup for kubelet hostname when using cloudprovider ( #1686 )
The value cannot be determined properly via local facts, so
checking k8s api is the most reliable way to look up what hostname
is used when using a cloudprovider.
7 years ago
77602dbb93
Move calico to daemonset ( #1605 )
* Drop legacy calico logic
* add calico as a daemonset
7 years ago
0b3badf3d8
revert calico-related changes
7 years ago
1eaf0e1c63
rename task
7 years ago
2cda982345
binding group system:nodes to clusterrole calico-role
7 years ago
a742d10c54
Allow calico ipPool to be created with mode "cross-subnet"
7 years ago
61b74f9a5b
updated to direct control over ipip
7 years ago
7332679678
Give more control over IPIP, but with same default behaviour
7 years ago
af55e179c7
adding --skip-exists flag for peer_with_router
7 years ago
674b71b535
Ansible 2.3 support
- Fix when clauses in various places
- Update requirements.txt
- Fix README.md
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
7 years ago
a422ad0d50
More idempotency fixes
Fixed sync_tokens fact
Fixed sync_certs for k8s tokens fact
Disabled register docker images changability
Fixed CNI dir permission
Fix idempotency for etcd pre upgrade checks
7 years ago
712872efba
Rework inventory all by real groups' vars
* Leave all.yml to keep only optional vars
* Store groups' specific vars by existing group names
* Fix optional vars casted as mandatory (add default())
* Fix missing defaults for an optional IP var
* Relink group_vars for terraform to reflect changes
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
8 years ago
ca9ea097df
Cleanup legacy syntax, spacing, files all to yml
Migrate older inline= syntax to pure yml syntax for module args as to be consistant with most of the rest of the tasks
Cleanup some spacing in various files
Rename some files named yaml to yml for consistancy
7 years ago
e91e58aec9
Fix fact tags
Ansible playbook fails when tags are limited to "facts,etcd" or to
"facts". This patch allows to run ansible-playbook to gather facts only
that don't require calico/flannel/weave components to be verified. This
allows to run ansible with 'facts,bootstrap-os' or just 'facts' to
gether facts that don't require specific components.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
7 years ago
Erwan Miran
Rui Cao
Kevin Schuck
Matthew Mosesohn
Matthew Mosesohn
Takashi Okamoto
mlushpenko
Luis Nunez
Antoine Legrand
Aivars Sterns
Wong Hoi Sing Edison
elementyang
Brad Beam
Steve Mitchell
Spencer Smith
Kevin Lefevre
Matthew Mosesohn
jwfang
Kevin Jing Qiu
AtzeDeVries
Justin Hunthrop
Sergii Golovatiuk
Bogdan Dobrelya
Andrew Greenwood