c3b3572025
Always create service account even rbac_enabled = false
6 years ago
f897596844
Remove *_image_tag suffix from ReplicaSet/Deployment
6 years ago
6df71956c4
new cilium stable version: 1.2.0
6 years ago
94df70be98
Cloud provider support for OCI (Oracle Cloud Infrastructure)
Signed-off-by: Jeff Bornemann <jeff.bornemann@oracle.com>
6 years ago
0c0a2138d9
allow '.' in hostnames
we use FQDN as inventory_hostname
6 years ago
5bf152886b
add support for openstack trust to cloud provider config
6 years ago
fc38b6d0ca
Ability to define custom audit polcy rules
6 years ago
c34900e569
Define apiserver flags directly instead of relying on auditPolicy section in order to have the ability to redirect audit log to stdout with kubeadm
6 years ago
71fdc257bc
cephfs-provisioner: Upgrade to v2.0.1-k8s1.11
6 years ago
3eef8dc8d0
Add bad hostname preflight check
Hostname must be a valid DNS name, which is checked as https://github.com/kubernetes/apimachinery/blob/master/pkg/util/validation/validation.go#L115
The situation I have encountered is that my hostname contained underscore which is disallowed and apiserver refused to start.
6 years ago
59176ebbb9
Add kubeadm controlplaneEndpoint
Nginx LB(default)
Other LB by kubeadm controlplane
6 years ago
b421d0ed5b
Fix install nss
6 years ago
35efc387c4
Fix pull dns image error
6 years ago
1d4f88eea8
Fix typo in image url
6 years ago
e9b8c8956d
Fix k8s-dns-dnsmasq-nanny repo path
6 years ago
095ccef8bd
Remove unused configuration
6 years ago
98b818bbaf
comply with ansible syntax consistency guideline
6 years ago
ce6854e726
add version to environment file
Trigger reboot handler when version upgrade during update script
6 years ago
59d89a37cc
add until option for etcd backup commands
6 years ago
1a07c87af7
cephfs-provisioner: Upgrade to v2.0.0-k8s1.11
Upstream Changes:
- cephfs-provisioner v2.0.0-k8s1.11 (https://github.com/kubernetes-incubator/external-storage/releases/tag/cephfs-provisioner-v2.0.0-k8s1.11 )
- Update ClusterRole
Our Changes:
- Fix typo in defaults/main.yml (rs -> deploy)
- Manifests cleanup
6 years ago
29894293eb
Fix kubeadm client conf
Fix DiscoveryTokenCACertHashes key to discoveryTokenCACertHashes in kubeadm-client.conf
6 years ago
4d783fff0d
resolve issues with new cacert feature
6 years ago
7f16b46ed5
Reset tasks specific to a network_plugin moved inside its role directory + Reset tasks specific to cilium
6 years ago
54548d3b95
kubeadm mounts the hostpaths itself
6 years ago
58d4d65fab
minor variable fix and reuse + handle auditlog redirected to stdout
6 years ago
2ffc1afe40
Support audit
6 years ago
18612b3501
cert-manager: Upgrade to 0.4.1
Upstream Changes:
- cert-manager 0.4.1 (https://github.com/jetstack/cert-manager/releases/tag/v0.4.1 )
Our Changes:
- Better templates sync with upstream manifests
- Remove fancy resources requests/limits customization
6 years ago
9da5d67728
Update CoreDNS to 1.2.0
6 years ago
bd413e36a3
ingress-nginx: Upgrade to 0.18.0
Upstream Changes:
- ingress-nginx 0.18.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.18.0 )
6 years ago
b50b3430be
Disable locksmithd on CoreOS if coreos_auto_upgrade set to false ( #3088 )
* Disable locksmithd on CoreOS if coreos_auto_upgrade set to false
* change when format to support multiple-condition
6 years ago
48b6128814
Upgrade coredns to 1.1.3
6 years ago
70b28288a3
Use delegate_to: localhost instead of local_action
Allow to use `ansible_become: true` (#2969 )
And set it to `false` for `localhost` with an `host_var`
6 years ago
a11e1eba9e
Upgrade kubernetes to V1.11.x ( #3078 )
Upgrade Kubernetes to V1.11.2
The kubeadm configuration file version has been upgraded from v1alpha1 to v1alpha2
Add bootstrap kubeadm-config.yaml with external etcd
6 years ago
2dfa928c90
Uninstall old versions of Docker
6 years ago
d3c0fe1fcb
Templates (even without actual templating inside) should have j2 extension but should not be rendered with j2 extension
6 years ago
c0221c2e72
Add --dns-loop-detect to dnsmasq used in kube-dns
It prevents DNS loops when host's DNS server is a localhost DNS server,
or when DNS server of cluster is also added as an upstream DNS server
6 years ago
9cef20187c
Add the path to kubectl binary
The post-remove action fails during the kubectl delete node action because with rc: 2, command not found. The kubectl is not in the system PATH and the full path to the binary is required
6 years ago
95f1e4634a
local-volume-provisioner: use mountPropagation HostToContainer and version bump ( #3081 )
* Update local-volume-provisioner-ds.yml.j2
After v1.10.2 default mountPropagation is "None"
* local_volume_provisioner version bump
v2.1.0 uses the beta nodeAffinity API by default which is available starting 1.10
* Update local-volume-provisioner-ds.yml.j2
MY_NAMESPACE env
* Update README.md
Raw block devices docs.
6 years ago
581a30fdec
Remove erroneous cloud-config task
6 years ago
e3dcd96301
kubedns & kubedns-autoscaler: Stick to master nodes. ( #2909 )
* kubedns & kubedns-autoscaler: Stick to master nodes.
- Tolerate only master nodes and not any NoSchedule taint
- Pods are on different nodes
- Pods are required to be on a master node.
* kubedns: use soft nodeAffinity.
Prefer to be on a master node, don't require.
* coredns: Stick to (different) master nodes.
- Pods are on different nodes
- Pods are preferred to be on a master node.
6 years ago
494ff9522b
j2 extension should only be used for template filename, not target file on remote host
6 years ago
fd380615a0
fix bad conditional
6 years ago
22b89edbbc
cilium v1.1.2
Update all configs to current upstream state.
Add more resources (unable to pass tests now)...
6 years ago
ea6af449a8
Remove istio support
Use helm install or support in future
6 years ago
d285565475
Add tags for coredns and kubedns
6 years ago
4eadf3228e
Only add admission plugins if defined
6 years ago
99c5aa5a02
Use k8s default plugin list
6 years ago
6ed65d762b
Separate out plugins into 2 variables
6 years ago
ac18f6cf8b
Add support for admission controllers in 1.10 and above
6 years ago
b902602d16
Enable swap
6 years ago
Wong Hoi Sing Edison
john
Jeff Bornemann
Mark Eisenblaetter
Jonathan Craig
Erwan Miran
Tatsuyuki Ishi
rongzhang
Antoine Legrand
Victor Antonovich
Sergey Bondarev
Mathieu Herbert
Seungkyu Ahn
Andreas Kruger
JohnZheng
Maxime Brunet
Chen Hong
Hedayat Vatankhah
mauromedda
Anton Fayzrahmanov
Matthew Mosesohn
Cédric de Saint Martin
Luis Nuñez
Zinin D.A
Robert Everson