Florian Ruynat
0665b45e61
Update nginx ingress to 0.35.0 ( #6599 )
4 years ago
Maxime Guyot
648fcf3a2e
Fix E306 in roles/etcd ( #6515 )
4 years ago
Barry Melbourne
058438a25d
Remove support for CoreOS Container Linux ( #6576 )
4 years ago
Maxime Guyot
6e938a3106
Fix E306 in other roles ( #6517 )
4 years ago
Florian Ruynat
2f93d62aa5
Update nginx ingress to 0.34.1 ( #6571 )
4 years ago
Florian Ruynat
8ba3d7ec75
Add Kubernetes 1.19 hashes ( #6593 )
4 years ago
Hans Feldt
9e2d282709
cri-o: add variable to configure unsecure pull ( #6568 )
By default do not allow "unqualified" (without a registry) images
because it is considered unsecure and subject to mitm attacks.
To enable insecure pull configure for example:
crio_registries:
- "docker.io"
- "quay.io"
4 years ago
Florian Ruynat
706c7cb4f1
etcd should not fail when adding an already existing member ( #6587 )
4 years ago
Florian Ruynat
5884eeb606
Remove ethtool workaround, issue is now fixed ( #6579 )
4 years ago
Florian Ruynat
e7ee19bd66
Update bunch of dependencies with minor fixes ( #6570 )
4 years ago
Hugo Blom
2f8fc92182
make it possible to open additional ports on master nodes ( #6547 )
4 years ago
nic0las
f59d3fc4a3
Deviceroutesourceaddress ( #6508 )
* add FELIX_DEVICEROUTESOURCEADDRESS calico option
* add calico_use_default_route_src_ipaddr option
add calico_use_default_route_src_ipaddr option to use FELIX_DEVICEROUTESOURCEADDRESS calico option
* Update k8s-net-calico.yml
4 years ago
Barry Melbourne
8e2bae0f2a
Fix Ansible Lint warnings (No such file or directory) ( #6581 )
4 years ago
Arthur Outhenin-Chalandre
e6dae03a0d
Add cilium hubble server in config ( #6575 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Arthur Outhenin-Chalandre
2f2ed116f7
Improve metallb template for bgp peers ( #6574 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Kuralamudhan Ramakrishnan
e91c6a7bd1
update the ovn4nfv-k8s-plugin image version to v1.1.0 ( #6531 )
Signed-off-by: Kuralamudhan Ramakrishnan <kuralamudhan.ramakrishnan@intel.com>
4 years ago
Florian Ruynat
1ff95e85f4
Rollback coredns, should not have been updated before 1.19 ( #6573 )
4 years ago
Sulochan Acharya
36924b63dc
Allow webhook authorization ( #6502 )
4 years ago
Florian Ruynat
0c80d3d9fa
Add proxy_env calculation to reset.yml ( #6558 )
4 years ago
jeanfabrice
411510cbe6
Use proper openssl command to differentiate between host and ip in API certificate check ( #6392 )
* Use proper openssl command to differentiate between host and ip in current certificate check
* fixup! Use proper openssl command to differentiate between host and ip in current certificate check
4 years ago
Florian Ruynat
6e2b8a5750
Add timeout to Get current version of calico cluster version, again ( #6493 )
4 years ago
Lars
ca66a96d0a
make pre-remove node draining a failable task ( #6442 )
and add configuration to allow ungraceful removal
4 years ago
Marc-Antoine
0c09ec5d13
Bump Openstack cloud controller image verison to 1.18.2 ( #6562 )
4 years ago
*=0=1=4=*
a8e2110b2d
#6552 Update extras_rh_repo_base_url ( #6556 )
4 years ago
Christian Strack
250541d29d
Use proper pypy download url in bootstrap script ( #6555 )
The bootstrap-os role uses a bootstrap script to provision a
python interpreter on flatcar and container os hosts. As the
pypy project switched to another hoster, the download url changed.
If applied this will use the new proper pypy download url in bootstrap script
4 years ago
Florian Ruynat
142b9e1eff
Update k8s hashes and set default version to 1.18.8 ( #6532 )
4 years ago
Svendegroote91
f204212963
Add docs for 'setting up your first cluster' ( #6544 )
4 years ago
Michal Petko
91ae87fa60
Fix setting node label if kube_override_hostname is defined ( #6557 )
4 years ago
Maxime Guyot
85646c96ad
Add docs about CI setup ( #6397 )
4 years ago
tasekida
d6456d13c2
Update coredns to 1.7.0 ( #6538 )
4 years ago
Florian Ruynat
98f7485303
Update weave to 2.7.0 + minor update to Cilium ( #6501 )
4 years ago
Samuel Liu
a42d811420
fix scale playbook ( #6482 )
4 years ago
Barry Melbourne
bf6fdce339
Fix cert-manager E305 ansible-lint error ( #6549 )
4 years ago
Bernard Landon
fa378f09c3
Edited pre-upgrade task to uncordon a node failing to drain ( #6546 )
4 years ago
Florian Ruynat
d9d11e2291
Update sonobuoy dependency ( #6536 )
4 years ago
Florian Ruynat
73b2683697
Allow hosts with hyphen in name ( #6529 )
4 years ago
holmesb
d8a749fd27
Update apiserver-audit-policy.yaml.j2 ( #6526 )
4 years ago
rptaylor
f2d2d080f6
add master_volume_type variable ( #6524 )
4 years ago
Florian Ruynat
78ceef6b15
Remove unused variable ( #6522 )
4 years ago
Arthur Outhenin-Chalandre
ca8e59fa85
Add new cilium options for native routing ( #6519 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Bernard Landon
b0210567aa
Fixed Kubespray container-engine/docker role to populate docker.service ( #6518 )
4 years ago
Arthur Outhenin-Chalandre
33ec13293b
Fix cilium_deploy_additionally with kubeadm etcd ( #6514 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Arthur Outhenin-Chalandre
bedb411d06
improve Cilium metrics support ( #6513 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Erwan Miran
ef3e98807e
tlsminversion and tlsciphersuites kubelet ( #6490 )
4 years ago
Alvaro
49158dbe40
Minor Ambassador docs updates ( #6503 )
Signed-off-by: Alvaro Saurin <alvaro.saurin@gmail.com>
4 years ago
Arthur Outhenin-Chalandre
35682b5228
Fix cilium strict kube proxy replacement in HA ( #6473 )
* Update the cilium svc proxy test to HA mode
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Fix cilium strict kube-proxy in HA
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add a single global endpoint variable
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add cilium docs about kube-proxy replacement
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Fix issues in docs
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Barry Melbourne
9cc70e9e70
Upgrade JetStack Cert-Manager to v0.15.2 ( #6414 )
* Upgrade JetStack Cert-Manager to v0.15.2
* Add README.md table of contents
4 years ago
Maxime Guyot
50598d9d47
Fix E306 in tests/ ( #6495 )
4 years ago
Maxime Guyot
fc23f37af7
Fix E306 in roles/kubernetes ( #6500 )
4 years ago
Sulochan Acharya
bfe143808f
Allows tls verify skip on webhook auth url ( #6472 )
4 years ago