ecec94ee7e
Fix Docker exits prematurely
details:https://github.com/moby/moby/pull/31490/files
6 years ago
196995a1a7
Fix issues#2451 Support docker-ce and docker-engine
Support docker-ce and docker-engine include redhat/centos ubuntu debian
6 years ago
cd153a1fb3
Fix kubernetes cert permission sync
Add `state: directory` to `file` task so that `recurse: yes` will actually take effect and ensure
certs/keys have the right file mode and owner
6 years ago
b0ab92c921
Prefix system:node CRB
Change the name of `system:node` CRB to `kubespray:system:node` to avoid
conflicts with the auto-reconciled CRB also named `system:node`
Fixes #2121
6 years ago
8e36ad09b4
clean http-proxy.conf
6 years ago
96a92503cb
Fix always download calico_rr image
6 years ago
12c78e622b
Remove nodes
Drain node except daemonsets resource
Use reset cluser for delete deploy data
Then delete node
6 years ago
6402004018
FIXUP #2424 : local_provisioner directory should be created only if enabled
6 years ago
605738757d
Fix systemd version detection
Change "command" to "shell" in order for the pipe to work correctly
6 years ago
3f96b2da7a
Add Custom ConfigMap Support for ingress-nginx
6 years ago
dbf40bbbb8
docker-ce instead of docker-engine repo ( #2423 )
* Use docker-ce 17.03.2
* Docker-engine may be discarded
6 years ago
646d473e8e
fix the name of some variable
6 years ago
388b627f72
Enable OOM killing for etcd-events
Enable OOM killing like docker run etcd
6 years ago
f9019ab116
Adding ssh_private_key_file to ProxyCommand
This is trying to match what the roles/bastion-ssh-config is trying to do. When the setup is going through bastion, we want to ssh private key to be used on the bastion instance.
6 years ago
e65904eee3
Add labels for ingress_nginx_namespace, also only setup serviceAccountName if rbac_enabled
6 years ago
89847d5684
Explicitly defines the --kubelet-preferred-address-types parameter
to the API server configuration.
This solves the problem where if you have non-resolvable node names,
and try to scale the server by adding new nodes, kubectl commands
start to fail for newly added nodes, giving a TCP timeout error when
trying to resolve the node hostname against a public DNS.
7 years ago
585303ad66
Start with three dashes for consistency
6 years ago
a800ed094b
Added support for webhook authentication/authorization on the secure kubelet endpoint
6 years ago
fd46442188
Integrate kubernetes/ingress-nginx 0.11.0 to Kubespray
6 years ago
9837b7926f
Use proper lookup of etcd host for calico ( #2408 )
Fixes #2397
6 years ago
2a3b48edaf
Delete unused fedora docker repo
6 years ago
67ffd8e923
Add etcd-events cluster for kube-apiserver ( #2385 )
Add etcd-events cluster for kube-apiserver
6 years ago
7ef9f4dfdd
Revert "Add pre-upgrade task for moving credentials file" ( #2393 )
6 years ago
ad89d1c876
Update pre_upgrade.yml
6 years ago
6b80ac6500
Fix indexing of supplementary DNS in openssl.conf
6 years ago
2257dc9baa
Install latest version of Helm
6 years ago
977e7ae105
remove obsolete init image, bump dashboard version 1.8.1 -> 1.8.3
6 years ago
bc0fc5df98
Use node cert for etcd tasks instead of delegating to first etcd ( #2386 )
For etcdctl commands, use admin cert instead of node because this file
doesn't exist on etcd only hosts.
6 years ago
bb469005b2
Add pre-upgrade task for moving credentials file
6 years ago
89ade65ad6
Fixing etcd certs for calico rr ( #2374 )
6 years ago
128d3ef94c
Fix run kubectl error ( #2199 )
* Fix run kubectl error
Fix run kubectl error when first master doesn't work
* if access_ip is define use first_kube_master
else different master use a different ip
* Delete set first_kube_master and use kube_apiserver_access_address
6 years ago
b7e06085c7
Upgrade to Kubernetes v1.9.3 ( #2323 )
Upgrade to Kubernetes v1.9.3
6 years ago
31659efe13
Fixing cert name in calico/canal for etcd check ( #2358 )
6 years ago
2bd3776ddb
fix apiserver manifest when disabling insecure_port
6 years ago
c874f16c02
Fixing credential lookup for fe proxy and vault ( #2361 )
6 years ago
ba91304636
Fixed generate front proxy client certs with vault ( #2359 )
* Fixed generate front proxy client certs with vault
* fix vault cert management
* Distrebute etcd node certs to vault hosts
6 years ago
42a0f46268
Add health check to kube proxy ( #2356 )
Adding health checking to kube proxy. Fixes #2308
6 years ago
d84ff06f73
Set filemode to 0640 ( #2315 )
* Set filemode to 0640
weave-net.yml file is readable by all users on the host. It however contains the weave_password to encrypt all pod communication. It should only be readable by root.
* Set mode 0640 on users_file with basic auth
6 years ago
87f33a4644
Use CNI to assign kube_pods_subnet for calico
Now calico can be deployed if there are other existing pools
and not confuse IPAM and end up with pods in the wrong pools.
6 years ago
2eb57ee5cd
default kube_proxy_mode in kubernetes-defaults
6 years ago
85c69c2a4a
Add check for atomic hosts in template
6 years ago
c20f38b89c
retry unmount kubelet dirs
6 years ago
d4c61d2628
Fixup for gce_centos7-flannel-addons
6 years ago
deef47c923
Upgrade Local Volume Provisioner Addon to v2.0.0
6 years ago
c19d8994b9
Set TasksMax to infinity on any OS with systemd
6 years ago
f13e76d022
Added cilium support ( #2236 )
* Added cilium support
* Fix typo in debian test config
* Remove empty lines
* Changed cilium version from <latest> to <v1.0.0-rc3>
* Add missing changes for cilium
* Add cilium to CI pipeline
* Fix wrong file name
* Check kernel version for cilium
* fixed ci error
* fixed cilium-ds.j2 template
* added waiting for cilium pods to run
* Fixed missing EOF
* Fixed trailing spaces
* Fixed trailing spaces
* Fixed trailing spaces
* Fixed too many blank lines
* Updated tolerations,annotations in cilium DS template
* Set cilium_version to iptables-1.9 to see if bug is fixed in CI
* Update cilium image tag to v1.0.0-rc4
* Update Cilium test case CI vars filenames
* Add optional prometheus flag, adjust initial readiness delay
* Update README.md with cilium info
6 years ago
c0aad0a6d5
Fix install etcd by host service ( #2297 )
Fix bug issues #2289
6 years ago
41ca67bf54
Added iptables lock fix and ajusted oom-score
xtables lock was missing. Added new option for oom-score to make sure it's not killed in an OOM situation before regular pods.
6 years ago
d72232f15b
Increased timeout values for k8s API server restart
6 years ago
03c61685fb
Added apiserver extra args variable for kubeadm config ( #2291 )
6 years ago
RongZhang
chadswen
zhengchuan hu
Wong Hoi Sing Edison
Chris Mildebrandt
Dominic Lam
Ayaz Ahmed Khan
Jonas Kongslund
Matthew Mosesohn
Brad Beam
Simon Li
Miouge1
Dmitry Vlasov
Nedim Haveric
Maxim Krasilnikov
Andreas Krüger
Matthew Mosesohn
Dann Bohn
melkosoft
Virgil Chereches