杨刚 (成都)
8523f525aa
fix docs for cert_manager.md ( #9724 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
杨刚 (成都)
b9a34b83d4
[argocd] update argocd to v2.5.9 ( #9723 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
杨刚 (成都)
2a24c2e359
fix moved url in multus.md ( #9722 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
杨刚
8d6cfd6e53
[argocd] update argocd to v2.5.8 ( #9708 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
Florian Ruynat
1f36df666d
Update fedora35 vagrant box url ( #9699 )
* Update fedora35 vagrant box url
* Update Terraform to 1.3.7
* Update Vagrant to 2.3.4
1 year ago
Cristian Calin
64dbf2e429
update equinox terraform code to fix kubespray CI ( #9702 )
* add terraform lock files to ignore list
* move contrib/terraform/metal to contrib/terraform/equinix to reflect upstream change
1 year ago
Florian Ruynat
6881398941
Add ruamel.yaml to docker image ( #9707 )
1 year ago
Cristian Calin
57638124c5
document the CI environment ( #9714 )
1 year ago
ERIK
ee2193d4cf
Add dns configuration for cert manager ( #9673 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
1 year ago
Florian Ruynat
eb56130433
Add jmespath back to Dockerfile image ( #9697 )
1 year ago
Tristan
5fbbcedebc
9693: Fix comma-separated-list splitting of kubelet_enforce_node_allocatable ( #9694 )
See https://github.com/kubernetes-sigs/kubespray/issues/9693
1 year ago
Florian Ruynat
18f2abad2f
Cleanup v1.23.x missing references/conditions/hashes ( #9698 )
1 year ago
Mohamed Zaian
391dd97f95
[kubernetes] support 1.26.x ( #9570 )
1 year ago
Tom Janson
44243eada9
reword confusing etcd download url comment ( #9686 )
It is quite confusing that there's an all-caps, bolded comment that seems to imply that `etcd_download_url` is relevant only when not using host-based deployment. The opposite is true: of course the artifact download URL is relevant and required for host-based etcd.
Perhaps the entire comment can be read in a different way, and should perhaps be reworded entirely, cf. 374438a3d6/docs/offline-environment.md?plain=1 (L38)
Removing the "**DON'T**" matches the way the other comments in this file are written and matches my personal interpretation.
1 year ago
Florian Ruynat
34d0451585
Update KUBESPRAY_VERSION and kube_version_min_required (with hashes cleanup) ( #9691 )
1 year ago
Arthur Outhenin-Chalandre
c4346e590f
kubeadm/etcd: use config to download certificate ( #9609 )
This commit uses a kubeadm join config to pull down cert for etcd in
workers nodes (which is needed in some circumstances, for instance with
calico or cilium).
The previous way didn't allow us to pass certain parameters which was
typically given in the config in other kubeadm invokations in Kubespray.
This made kubeadm produced some errors for some edge cases.
For example, in our deployment we don't have a default route and even
though it's only to download the certificates, kubeadm produce an error
`unable to select an IP from default routes` (these command are kubeadm
controlplane command, so kubeadm does some additional checks). This is
fixed by specifying `advertiseAddress` within the kubeadm config.
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
1 year ago
Florian Ruynat
bd81c615c3
Add k8s 1.24.10 hashes ( #9688 )
1 year ago
Mohamed Zaian
3d9fd082ff
[containerd] add hashes for 1.5.x ( #9678 )
1 year ago
yanggang
826282fe89
Add k8s hashes for k8s version. ( #9685 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
yanggang
73774326b3
supplement the omit cni-version in readme.md ( #9684 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
MatthieuFin
374438a3d6
feat(calico): add possibility to enable calico floatingIPs feature ( #9680 )
Add a variable `calico_felix_floatingIPs` which permit to enable calico feature `floatingIPs`
(disabled per default).
Signed-off-by: MatthieuFin <matthieu2717@gmail.com>
#9679
1 year ago
yanggang
fd80ef1ff1
[argocd] update argocd to v2.5.7 ( #9682 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
Mohamed Zaian
235173bb5f
[flannel] update to v0.20.2 & make it default ( #9675 )
1 year ago
Mohamed Zaian
1750dec254
[feature] add mzaian to reviewers ( #9676 )
1 year ago
ERIK
52f52db8f3
Add crio-related URLs to offline.yml ( #9681 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
1 year ago
Cyclinder
db94812163
bump cni-plugins to v1.2.0 ( #9671 )
Signed-off-by: cyclinder qifeng.guo@daocloud.io
Signed-off-by: cyclinder qifeng.guo@daocloud.io
1 year ago
Arthur Outhenin-Chalandre
4a6eb7eaa2
enable back kubelet_authorization_mode_webhook by default ( #9662 )
In 6db6c8678c
, this was disabled becaue
kubesrpay gave too much permissions that were not needed. This commit
re-enable back this option by default and also removes the extra
permissions that kubespray gave that were in fact not needed.
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
1 year ago
Mathieu Parent
58fe1a0ed6
Terraform vsphere cleanup ( #9672 )
* contrib/terraform/vsphere: mark vsphere_password as sensitive
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
* contrib/terraform/vsphere: remove unused modules
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
1 year ago
Mathieu Parent
c80bb0007a
contrib/terraform/gcp: allow extra ingress firewalls ( #9658 )
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
1 year ago
rongfu.leng
8a03bb1bb4
add containerd config_path ( #9566 )
Signed-off-by: rongfu.leng <rongfu.leng@daocloud.io>
Signed-off-by: rongfu.leng <rongfu.leng@daocloud.io>
1 year ago
Vitaly Yakovenko
d919c58e21
[multus] added support for mixed type of container engine ( #9224 )
* [multus] added support for mixed type of container engine
* [multus] fixed for using with cluster/upgrade-cluster/scale playbooks
1 year ago
Mohamed Zaian
19bc610f44
Update pause image version to v3.8 ( #9668 )
Signed-off-by: Mohamed Zaian <mohamedzaian@gmail.com>
Signed-off-by: Mohamed Zaian <mohamedzaian@gmail.com>
1 year ago
Cyclinder
85a5a79ef5
doc: don't set calico_vxlan_mode_ipv6=vxlanAlways when kernel < 3.12 ( #9645 )
Signed-off-by: cyclinder qifeng.guo@daocloud.io
Signed-off-by: cyclinder qifeng.guo@daocloud.io
1 year ago
Mohamed Zaian
c7cffb14a7
[cert-manager] update cert-manager to v1.11.0 ( #9661 )
1 year ago
Jochen Friedrich
6f61f3d9cb
Support OVN Interconnect ( #9599 )
Mostly taken from: https://raw.githubusercontent.com/kubeovn/kube-ovn/master/yamls/ovn-ic.yaml.j2
1 year ago
yanggang
6b4bb2a121
[argocd] update argocd to v2.5.6 ( #9654 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
ERIK
e288449c5d
Update cri-dockerd version ( #9659 )
* Skip retry operation with containerd when etcd installed on host VM (#9560 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
* Update cri-dockerd version
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Co-authored-by: Eugene Artemenko <artemenko.evgeniy@gmail.com>
1 year ago
László Rafael
ea35021c96
Add defaults for external_vsphere_user and external_vsphere_password in the vsphere csi_driver ( #9664 )
1 year ago
luksi1
754424eca7
Push pipeline image even on master and schedules
1 year ago
Luke Simmons
4ad56e2772
Fix for creating VirtualMachine ( #9657 )
1 year ago
Eugene Artemenko
6f1352eb53
Skip retry operation with containerd when etcd installed on host VM ( #9560 )
1 year ago
Cyclinder
bf8c64af08
feature request: add cyclinder to reviewers ( #9646 )
Signed-off-by: cyclinder qifeng.guo@daocloud.io
Signed-off-by: cyclinder qifeng.guo@daocloud.io
1 year ago
Luke Simmons
a98ab40434
Adds pipeline image ( #9606 )
1 year ago
yanggang
6549bb12fc
follow containerd1 1.16.15 ( #9644 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
Kay Yan
1329d3f03b
add-test-for-rockylinux9-cilium ( #9562 )
1 year ago
Kay Yan
843e908fa4
update-calico-VXLAN-docs ( #9639 )
1 year ago
R. P. Taylor
0ff883afeb
streamline ansible_default_ipv4 gathering loop ( #9281 )
1 year ago
Marijn van der Giesen
0d5bcd3e20
feat(coredns): Forward extra domains to coredns kubernetes plugin ( #9635 )
1 year ago
tu1h
a8cef962e2
Add retry to avoid 'unknown' state for calicoctl ( #9633 )
Signed-off-by: tu1h <lihai.tu@daocloud.io>
Signed-off-by: tu1h <lihai.tu@daocloud.io>
1 year ago
Cyclinder
b50890172b
calico: add vxlan-v6.calico to the list of NM unmanaged interfaces ( #9631 )
Signed-off-by: cyclinder qifeng.guo@daocloud.io
Signed-off-by: cyclinder qifeng.guo@daocloud.io
1 year ago