53d87e53c5
All CNIs: support ANY toleration. ( #3391 )
Before, Nodes tainted with NoExecute policy did not have calico/weave Pod.
Network pod should run on all nodes whatever happens on a specific node.
Also always set the Pods to be critical.
Also remove deprecated scheduler.alpha.kubernetes.io/tolerations annotations.
6 years ago
232020ef96
skip-exists is an flag for create command, not for calicoctl ( #3401 )
6 years ago
6b71229d3f
Resolve issues associated with Calico deployment in policy-only mode. ( #3392 )
6 years ago
36898a2c39
Adding pod priority for all the components. ( #3361 )
* Changes to assign pod priority to kube components.
* Removed the boolean flag pod_priority_assignment
* Created new priorityclass k8s-cluster-critical
* Created new priorityclass k8s-cluster-critical
* Fixed the trailing spaces
* Fixed the trailing spaces
* Added kube version check while creating Priority Class k8s-cluster-critical
* Moved k8s-cluster-critical.yml
* Moved k8s-cluster-critical.yml to kube_config_dir
6 years ago
02de35cfc3
Fix some typos ( #3382 )
Signed-off-by: Rui Cao <ruicao@alauda.io>
6 years ago
639010b3df
Uses environment vars for etcd cert paths
6 years ago
6f9f80acee
Uses etcdv3 for calico 3 rr_v4 resources
6 years ago
fb1678d425
Ensures BGPPeer resource names are unique
6 years ago
884053aaa7
Make Felix healthhost configurable
6 years ago
d3adf09bde
Fixes BGPPeer resource for calico >= 3.0.0
6 years ago
c83350e597
refactor to base on calico_version
6 years ago
55d76ea3d8
Update install.yml
6 years ago
1091e82327
Update install.yml
6 years ago
cc79125d3e
Update install.yml
6 years ago
d91f9e14e6
Put back legacy support for calico ippools and bgp settings
6 years ago
b2a7a27dfb
Fix indent error by yamllint.
6 years ago
ea2c9d8f57
Fix yaml checks
6 years ago
f958b32c83
Fix calico health checks
6 years ago
dc3e317d20
Fix backward compatibility with calico 2.6
6 years ago
6569180654
remove capitalize filter
6 years ago
2f1fe44762
update images to use arch
6 years ago
23fd3461bc
calico upgrade to v3 ( #3086 )
* calico upgrade to v3
* update calico_rr version
* add missing file
* change contents of main.yml as it was left old version
* enable network policy by default
* remove unneeded task
* Fix kubelet calico settings
* fix when statement
* switch back to node-kubeconfig.yaml
6 years ago
80cfeea957
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
6 years ago
c3b3572025
Always create service account even rbac_enabled = false
6 years ago
1a3b9dd864
Force copy cni files
6 years ago
8fee1ab102
change create to apply
6 years ago
476b14b06e
Make Calico nodename overridable on bare metal
Signed-off-by: Daniel Mohr <daniel.mohr@supercrunch.io>
6 years ago
195d6d791a
Integrate jetstack/cert-manager 0.2.3 to Kubespray
6 years ago
03bcfa7ff5
Stop templating kube-system namespace and creating it ( #2545 )
Kubernetes makes this namespace automatically, so there is
no need for kubespray to manage it.
6 years ago
a75598b3f4
IP_AUTODETECTION_METHOD docs
6 years ago
60a057cace
Update calico-node.yml.j2
6 years ago
dd9d0c0530
optional calico_ip_auto_method variable with IP_AUTODETECTION_METHOD
can be set to one of
first-found
can-reach
interface
6 years ago
60bfc56e8e
Update Calico and Canal
- Updating to use calico-node v2.6.7
- A few updates to their manifests too
6 years ago
9837b7926f
Use proper lookup of etcd host for calico ( #2408 )
Fixes #2397
6 years ago
bc0fc5df98
Use node cert for etcd tasks instead of delegating to first etcd ( #2386 )
For etcdctl commands, use admin cert instead of node because this file
doesn't exist on etcd only hosts.
6 years ago
89ade65ad6
Fixing etcd certs for calico rr ( #2374 )
6 years ago
31659efe13
Fixing cert name in calico/canal for etcd check ( #2358 )
6 years ago
87f33a4644
Use CNI to assign kube_pods_subnet for calico
Now calico can be deployed if there are other existing pools
and not confuse IPAM and end up with pods in the wrong pools.
6 years ago
ad9049a49e
baremetal tweaks
* allow installs to not have hostname overriden with fqdn from inventory
* calico-config no longer requires local as and will default to global
* when cloudprovider is not defined, use the inventory_hostname for cni-calico
* allow reset to not restart network (buggy nodes die with this cmd)
* default kube_override_hostname to inventory_hostname instead of ansible_hostname
6 years ago
d2935ffed0
Optionally ignore the presence of extra calico pools ( #2190 )
6 years ago
e45b30d033
Add etcd key and cert environment variables for use with client auth
7 years ago
ec54b36e05
add retries for calico/canal etcd commands ( #2007 )
7 years ago
bc1a4e12ad
fix broken variable in ansible 2.4.1.0 and ensure tasks for calico-rr ( #1982 )
7 years ago
37125866ca
Make calico_node_ignorelooserpf have an effect ( #1945 )
7 years ago
86fb669fd3
Idempotency fixes ( #1838 )
7 years ago
fc9a65be2b
Refactor downloads to use download role directly ( #1824 )
* Refactor downloads to use download role directly
Also disable fact delegation so download delegate works acros OSes.
* clean up bools and ansible_os_family conditionals
7 years ago
d4b10eb9f5
Fix path for calico get node names ( #1816 )
7 years ago
6ec45b10f1
Update network-plugins to use portmap plugin ( #1763 )
Portmap allow to use hostPort with CNI plugins. Should fix #1675
7 years ago
10dd049912
Revert "Security fixes for etcd ( #1778 )" ( #1786 )
This reverts commit 4209f1cbfd
7 years ago
4209f1cbfd
Security fixes for etcd ( #1778 )
* Security fixes for etcd
* Use certs when querying etcd
7 years ago
Cédric de Saint Martin
Erwan Miran
arzarif
Kuldip Madnani
Rui Cao
Kevin Schuck
Alex Yakovenko
Matthew Mosesohn
Matthew Mosesohn
Takashi Okamoto
mlushpenko
Luis Nunez
Antoine Legrand
Aivars Sterns
Erwan Miran
Wong Hoi Sing Edison
elementyang
Daniel Mohr
Anton Fayzrahmanov
Erik Stidham
Brad Beam
Ryan Zenker
Steve Mitchell
Spencer Smith
Hyunsun Moon
Kevin Lefevre