6c954df636
move when condition to main.yml
6 years ago
3535c29e59
Fix apiserver manifest for kube version < 1.9
6 years ago
88765f62e6
Updating order
https://kubernetes.io/docs/admin/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use
6 years ago
0f35e17e23
Fix new envvar for setting openstack_tenant_id ( #2641 )
Changed from OS_PROJECT_ID to OS_PROJECT_NAME.
6 years ago
77b3f9bb97
Removing default for volume-plugins mountpoint ( #2618 )
All checks test if this is defined meaning there is no way to undefine it.
6 years ago
45f15bf753
Revert "Fix new envvar for setting openstack_tenant_id" ( #2640 )
6 years ago
0c0f6b755d
Fix new envvar for setting openstack_tenant_id
Changed from OS_PROJECT_ID to OS_PROJECT_NAME.
6 years ago
94eb18b3d9
Replaced ansible_ssh_host with ansible_host in sample inventory file as the former is deprecated since Ansible v2.0
Fixed the reference of ansible_user in kubespray-defaults role
References:
- http://docs.ansible.com/ansible/latest/intro_inventory.html
7 years ago
4c12b273ac
Enabling MutatingAdmissionWebhook for Istio Automatic sidecar injection
https://istio.io/docs/setup/kubernetes/sidecar-injection.html#automatic-sidecar-injection
6 years ago
b68854f79d
fix kubectl download location and kubectl.sh helper owner/group remove
6 years ago
f954bc0a5a
Remove jinja2 dependency of do
While `do` looks cleaner, forcing this extra option in ansible.cfg
seems to be more invasive. It would be better to keep the traditional
approach of `set dummy = ` instead.
6 years ago
66b61866cd
Fix check docker error for atomic
Fix issues #2611
6 years ago
dfc46f02d7
Adding missing service-account certificate for vault
Missed in #2554
6 years ago
ca40d51bc6
Fix typos (no logic changes)
6 years ago
973e7372b4
content: |
6 years ago
b54e091886
Persist ip_vs modules
6 years ago
428a554ddb
istio: container download related things should defined in the download role
7 years ago
32f4194cf8
Bump ingress-nginx-controller to version 0.12.0
7 years ago
76bb5f8d75
check if dedicated service account token signing key exists
7 years ago
4b98537f79
Properly check vsphere_cloud_provider.rc
7 years ago
3004791c64
Add pre-upgrade task for moving credentials file ( #2394 )
* Add pre-upgrade task for moving credentials file
This reverts commit 7ef9f4dfdd
7 years ago
b1a7889ff5
local-volume-provisioner: container download related things should defined in the download role
7 years ago
86e3506ae6
Etcd cluster setup makeover
The current way to setup the etc cluster is messy and buggy.
- It checks for cluster is healthy before the cluster is even created.
- The unit files are started on handlers, not in the task, so you mess with "flush handlers".
- The join_member.yml is not used.
- etcd events cluster is not configured for kubeadm
- remove duplicate runs between running the role on etcd nodes and k8s nodes
7 years ago
4f714b07b8
cephfs-provisioner: container download related things should defined in the download role
7 years ago
4c0e9ba890
registry: container download related things should defined in the download role
7 years ago
b9b028a735
Update etcd deployment to use correct cert and key ( #2572 )
* Update etcd deployment to use correct cert and key
* Update to use admin cert for etcdctl commands
* Update handler to use admin cert too
7 years ago
5fe144aa0f
ingress-nginx: container download related things should defined in the download role
7 years ago
195d6d791a
Integrate jetstack/cert-manager 0.2.3 to Kubespray
7 years ago
aa301c31d1
Move credential checks into proper folder
7 years ago
2c89a02db3
Only download container/file if host is in defined group ( #2565 )
* Only download container/file if host is in defined group
* Set correct when clause
* Fix last entries
* Update download groups
7 years ago
15efdf0c16
Move credential checks
7 years ago
ab8760cc83
Move credentials pre-check
7 years ago
b6da596ec1
Move default configuration parameters for cloud-config
7 years ago
3c12c6beb3
Move cloud config configurations to proper location
7 years ago
8ece922ef0
node_labels documentation + kube-ingress label handling as role_node_label
7 years ago
859a7f32fb
Fix import task. Has to be include task to evalutate etcd_cluster_setup variable at run time
7 years ago
572ab650db
copy dedicated service account token signing key for kubeadm migration
7 years ago
72c2a8982b
Fix kubecert_node.results indexes
7 years ago
13c57147eb
only set no_proxy if other proxy vars are defined
7 years ago
03bcfa7ff5
Stop templating kube-system namespace and creating it ( #2545 )
Kubernetes makes this namespace automatically, so there is
no need for kubespray to manage it.
7 years ago
af5f376163
Revert
7 years ago
004b0a3fcf
Fix merge conflict
7 years ago
4a705b3fba
May vault health check needs delay
7 years ago
4d85e3765e
remove redundancy code
7 years ago
f0a04b4d65
wait 5 * 4 secs until Tiller starts
7 years ago
760ca1c3a9
adding checking for prometheus_operator_enabled
7 years ago
23b3833806
running on the first master only.
7 years ago
daeeae1a91
Added retries in pre-upgrade.yml and retries while applying kube-dns.yml ( #2553 )
* Added retries in pre-upgrade.yml and retries while applying kube-dns.yml
* Removed trailing spaces
7 years ago
c8f857eae4
configure kubespray to sign service account tokens with a dedicated and stable key
7 years ago
9ebbf1c3cd
Added a fix in openssl.conf template to check if IP of loadbalncer is available or not.
7 years ago
Atoms
Christian Phu
Marcelo Grebois
Robin Skahjem-Eriksen
Brad Beam
Matthew Mosesohn
Vikas Kumar
Matthew Mosesohn
rongzhang
Brad Beam
Daniel Hoherd
Chen Hong
Wong Hoi Sing Edison
Xiaoxi He
georgejdli
vterdunov
woopstar
avoidik
Erwan Miran
Spencer Smith
Vladimir Vasilkin
Kuldip Madnani