rongzhang
9eade647e6
Fix kubeadm lb
6 years ago
Phill Garrett
1babbcca85
Fix elif azure statement
6 years ago
Phill Garrett
f325d13082
Add azure-container-registry-config for Azure
Seperated out KUBELET_CLOUDPROVIDER env var assignment when cloud_provider equals azure
Appended azure-container-registry-config parameter
6 years ago
Erwan Miran
52ab54eeea
Fix missing quotes for audit-log-path and wrong placement of feature-gates
6 years ago
Takashi Okamoto
d407a590a6
container_manager variable to specify runtime.
6 years ago
Takashi Okamoto
5eb805f098
Change timeout for kubeadm 600s.
* kubeadm timeout is too short and it may interrupt by timeout.
6 years ago
Takashi Okamoto
236f066635
kubeadm cri-o support.
6 years ago
Takashi Okamoto
5ab8a712d9
Add download_container flag to avoid docker pull when use cri-o.
6 years ago
Takashi Okamoto
cf7b9cfeef
Support crio in kubelet service.
6 years ago
Takashi Okamoto
6090af29e7
Add cri-o role.
6 years ago
Takashi Okamoto
359009bb05
Download etcd and hyperkube binary.
6 years ago
Takashi Okamoto
bdbfa4d403
Add ipvs support for kubeadm 1.10 or later.
6 years ago
Takashi Okamoto
6849788ebc
Fix copy ca cert and ca key for kubeadm.
6 years ago
Takashi Okamoto
ac639b2a17
Change kubeadm config to run etcd by kubeadm.
6 years ago
Erwan Miran
b395bb953f
Fix wrong when condition that ends up with jinja error when the content of /etc/hosts contains parenthesis
6 years ago
guenhter
fff48d24ea
Replace the raw rsync command with the synchronize module
7 years ago
Maxime Brunet
33135f2ada
k8s/preinstall: Turn AND condition into a list
6 years ago
Erwan Miran
1432e511a2
same work with less lines
6 years ago
Samuele Chiocca
cb8be37f72
fix on v1alpha1
6 years ago
Samuele Chiocca
e5dd4e1e70
added on v1alpha1
6 years ago
rongzhang
7b61a0eff0
Fix kubeadm LB configure
1. join node add LB discoveryTokenAPIServers
2. kubeadm_config_api_fqdn support ipddress and domain_name
6 years ago
Aivars Sterns
23fd3461bc
calico upgrade to v3 ( #3086 )
* calico upgrade to v3
* update calico_rr version
* add missing file
* change contents of main.yml as it was left old version
* enable network policy by default
* remove unneeded task
* Fix kubelet calico settings
* fix when statement
* switch back to node-kubeconfig.yaml
6 years ago
rongzhang
5a4352657d
Fix install audit failed
1.fix audit log not write
2.fix Parameter not recognized
3.delete kubedm futuregates auditing and use apiServerExtraArgs
6 years ago
Samuele Chiocca
f13bc796d9
added nodePortAddresses on kubeadm conf v1alpha2 (not present on v1alpha1)
6 years ago
Erwan Miran
80cfeea957
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
6 years ago
Samuele Chiocca
5d9908c2c3
--nodeport-addresses added on kube-proxy.manifest.j2
Changed author
6 years ago
Erwan Miran
a7b0c454db
Localhost in hosts files should be updated (if necessary), not overriden
6 years ago
Jeff Bornemann
94df70be98
Cloud provider support for OCI (Oracle Cloud Infrastructure)
Signed-off-by: Jeff Bornemann <jeff.bornemann@oracle.com>
6 years ago
Mark Eisenblaetter
0c0a2138d9
allow '.' in hostnames
we use FQDN as inventory_hostname
6 years ago
Jonathan Craig
5bf152886b
add support for openstack trust to cloud provider config
6 years ago
Erwan Miran
fc38b6d0ca
Ability to define custom audit polcy rules
6 years ago
Erwan Miran
c34900e569
Define apiserver flags directly instead of relying on auditPolicy section in order to have the ability to redirect audit log to stdout with kubeadm
6 years ago
Tatsuyuki Ishi
3eef8dc8d0
Add bad hostname preflight check
Hostname must be a valid DNS name, which is checked as https://github.com/kubernetes/apimachinery/blob/master/pkg/util/validation/validation.go#L115
The situation I have encountered is that my hostname contained underscore which is disallowed and apiserver refused to start.
6 years ago
rongzhang
59176ebbb9
Add kubeadm controlplaneEndpoint
Nginx LB(default)
Other LB by kubeadm controlplane
6 years ago
rongzhang
b421d0ed5b
Fix install nss
6 years ago
rongzhang
095ccef8bd
Remove unused configuration
6 years ago
Seungkyu Ahn
29894293eb
Fix kubeadm client conf
Fix DiscoveryTokenCACertHashes key to discoveryTokenCACertHashes in kubeadm-client.conf
6 years ago
Jonathan Craig
4d783fff0d
resolve issues with new cacert feature
6 years ago
Erwan Miran
54548d3b95
kubeadm mounts the hostpaths itself
6 years ago
Erwan Miran
58d4d65fab
minor variable fix and reuse + handle auditlog redirected to stdout
6 years ago
rongzhang
2ffc1afe40
Support audit
6 years ago
Maxime Brunet
70b28288a3
Use delegate_to: localhost instead of local_action
Allow to use `ansible_become: true` (#2969 )
And set it to `false` for `localhost` with an `host_var`
6 years ago
Rong Zhang
a11e1eba9e
Upgrade kubernetes to V1.11.x ( #3078 )
Upgrade Kubernetes to V1.11.2
The kubeadm configuration file version has been upgraded from v1alpha1 to v1alpha2
Add bootstrap kubeadm-config.yaml with external etcd
6 years ago
Matthew Mosesohn
581a30fdec
Remove erroneous cloud-config task
6 years ago
Luis Nuñez
fd380615a0
fix bad conditional
6 years ago
rongzhang
ea6af449a8
Remove istio support
Use helm install or support in future
6 years ago
Robert Everson
4eadf3228e
Only add admission plugins if defined
6 years ago
Robert Everson
99c5aa5a02
Use k8s default plugin list
6 years ago
Robert Everson
6ed65d762b
Separate out plugins into 2 variables
6 years ago
Robert Everson
ac18f6cf8b
Add support for admission controllers in 1.10 and above
6 years ago