d1e6632e6a
Fix err in kubelet.kubeadm.env.j2
1. 404 link url
2. kubelet_authentication_token_webhook is not work
3. kube_reserved variable set twice
7 years ago
f3788525ff
fixes yamllint for docker defaults, and weave network plugin
7 years ago
39d247a238
Add support to kubeadm too
Explicitly defines the --kubelet-preferred-address-types parameter #2418
Fixes #2453
7 years ago
d264da8f08
Fix yamllint roles error for #2188 commit
7 years ago
9a4aa4288c
Fix vsphere cloud_provider RBAC permissions
7 years ago
50e3ccfa2b
uses new kube_memory_reserved/kube_cpu_reserved variables in kubelt
7 years ago
ecec94ee7e
Fix Docker exits prematurely
details:https://github.com/moby/moby/pull/31490/files
7 years ago
196995a1a7
Fix issues#2451 Support docker-ce and docker-engine
Support docker-ce and docker-engine include redhat/centos ubuntu debian
7 years ago
cd153a1fb3
Fix kubernetes cert permission sync
Add `state: directory` to `file` task so that `recurse: yes` will actually take effect and ensure
certs/keys have the right file mode and owner
7 years ago
b0ab92c921
Prefix system:node CRB
Change the name of `system:node` CRB to `kubespray:system:node` to avoid
conflicts with the auto-reconciled CRB also named `system:node`
Fixes #2121
7 years ago
8e36ad09b4
clean http-proxy.conf
7 years ago
96a92503cb
Fix always download calico_rr image
7 years ago
12c78e622b
Remove nodes
Drain node except daemonsets resource
Use reset cluser for delete deploy data
Then delete node
7 years ago
a086686e9f
Support multiple artifacts under individual inventory directory
7 years ago
6402004018
FIXUP #2424 : local_provisioner directory should be created only if enabled
7 years ago
605738757d
Fix systemd version detection
Change "command" to "shell" in order for the pipe to work correctly
7 years ago
3f96b2da7a
Add Custom ConfigMap Support for ingress-nginx
7 years ago
dbf40bbbb8
docker-ce instead of docker-engine repo ( #2423 )
* Use docker-ce 17.03.2
* Docker-engine may be discarded
7 years ago
646d473e8e
fix the name of some variable
7 years ago
388b627f72
Enable OOM killing for etcd-events
Enable OOM killing like docker run etcd
7 years ago
f9019ab116
Adding ssh_private_key_file to ProxyCommand
This is trying to match what the roles/bastion-ssh-config is trying to do. When the setup is going through bastion, we want to ssh private key to be used on the bastion instance.
7 years ago
07657aecf4
add support for azure vnetResourceGroup
7 years ago
e65904eee3
Add labels for ingress_nginx_namespace, also only setup serviceAccountName if rbac_enabled
7 years ago
89847d5684
Explicitly defines the --kubelet-preferred-address-types parameter
to the API server configuration.
This solves the problem where if you have non-resolvable node names,
and try to scale the server by adding new nodes, kubectl commands
start to fail for newly added nodes, giving a TCP timeout error when
trying to resolve the node hostname against a public DNS.
7 years ago
585303ad66
Start with three dashes for consistency
7 years ago
a800ed094b
Added support for webhook authentication/authorization on the secure kubelet endpoint
7 years ago
fd46442188
Integrate kubernetes/ingress-nginx 0.11.0 to Kubespray
7 years ago
9837b7926f
Use proper lookup of etcd host for calico ( #2408 )
Fixes #2397
7 years ago
2a3b48edaf
Delete unused fedora docker repo
7 years ago
67ffd8e923
Add etcd-events cluster for kube-apiserver ( #2385 )
Add etcd-events cluster for kube-apiserver
7 years ago
7ef9f4dfdd
Revert "Add pre-upgrade task for moving credentials file" ( #2393 )
7 years ago
ad89d1c876
Update pre_upgrade.yml
7 years ago
6b80ac6500
Fix indexing of supplementary DNS in openssl.conf
7 years ago
2257dc9baa
Install latest version of Helm
7 years ago
977e7ae105
remove obsolete init image, bump dashboard version 1.8.1 -> 1.8.3
7 years ago
bc0fc5df98
Use node cert for etcd tasks instead of delegating to first etcd ( #2386 )
For etcdctl commands, use admin cert instead of node because this file
doesn't exist on etcd only hosts.
7 years ago
bb469005b2
Add pre-upgrade task for moving credentials file
7 years ago
89ade65ad6
Fixing etcd certs for calico rr ( #2374 )
7 years ago
128d3ef94c
Fix run kubectl error ( #2199 )
* Fix run kubectl error
Fix run kubectl error when first master doesn't work
* if access_ip is define use first_kube_master
else different master use a different ip
* Delete set first_kube_master and use kube_apiserver_access_address
7 years ago
b7e06085c7
Upgrade to Kubernetes v1.9.3 ( #2323 )
Upgrade to Kubernetes v1.9.3
7 years ago
31659efe13
Fixing cert name in calico/canal for etcd check ( #2358 )
7 years ago
2bd3776ddb
fix apiserver manifest when disabling insecure_port
7 years ago
c874f16c02
Fixing credential lookup for fe proxy and vault ( #2361 )
7 years ago
ba91304636
Fixed generate front proxy client certs with vault ( #2359 )
* Fixed generate front proxy client certs with vault
* fix vault cert management
* Distrebute etcd node certs to vault hosts
7 years ago
42a0f46268
Add health check to kube proxy ( #2356 )
Adding health checking to kube proxy. Fixes #2308
7 years ago
d84ff06f73
Set filemode to 0640 ( #2315 )
* Set filemode to 0640
weave-net.yml file is readable by all users on the host. It however contains the weave_password to encrypt all pod communication. It should only be readable by root.
* Set mode 0640 on users_file with basic auth
7 years ago
87f33a4644
Use CNI to assign kube_pods_subnet for calico
Now calico can be deployed if there are other existing pools
and not confuse IPAM and end up with pods in the wrong pools.
7 years ago
2d69b05c77
set local_release_dir in downloads to match others
7 years ago
2eb57ee5cd
default kube_proxy_mode in kubernetes-defaults
7 years ago
85c69c2a4a
Add check for atomic hosts in template
7 years ago
zhengchuan hu
Dann Bohn
Andreas Krüger
rong.zhang
MQasimSarfraz
chadswen
Wong Hoi Sing Edison
Chris Mildebrandt
Dominic Lam
Michael Beatty
Ayaz Ahmed Khan
Jonas Kongslund
Matthew Mosesohn
Brad Beam
Simon Li
Miouge1
Dmitry Vlasov
Nedim Haveric
Maxim Krasilnikov
Matthew Mosesohn