Spencer Smith
72d5db92a8
remove stray spaces in templating
7 years ago
Spencer Smith
3f302c8d47
ensure spacing on string of flags
7 years ago
Spencer Smith
04a769bb37
ensure spacing on string of flags
7 years ago
Spencer Smith
f9d4a1c1d8
update to safeguard against accidentally passing string instead of list
7 years ago
gbolo
49be805001
allow admission control plug-ins to be easily customized
7 years ago
Spencer Smith
94596388f7
add ability for custom flags
7 years ago
Matthew Mosesohn
d7b8fb3113
Update start_vault_temp.yml
7 years ago
Sergii Golovatiuk
45044c2d75
Reschedule netchecker-server in case of HW failure.
Pod opbject is not reschedulable by kubernetes. It means that if node
with netchecker-server goes down, netchecker-server won't be scheduled
somewhere. This commit changes the type of netchecker-server to
Deployment, so netchecker-server will be scheduled on other nodes in
case of failures.
7 years ago
Joe Duhamel
a9f260d135
Update dnsmasq-autoscaler
changed target to be a deployment rather than a replicationcontroller.
7 years ago
Joe Duhamel
072b3b9d8c
Update kubedns-autoscaler change target
The target was a replicationcontroller but kubedns is currently a deployment
7 years ago
Matthew Mosesohn
ae7f59e249
Skip vault cert task evaluation completely when using script cert generation
7 years ago
Brad Beam
bce1c62308
Updating calico versions
7 years ago
zouyee
0bcecae2a3
upgrade etcd version from v3.0.6 to v3.0.17
7 years ago
Brad Beam
bd130315b6
Excluding bash completion for helm on CoreOS
7 years ago
Brad Beam
504711647e
Fixing resource type for kibana
7 years ago
Matthew Mosesohn
1c45d37348
Update kubelet.j2
7 years ago
Matthew Mosesohn
b521255ec9
Unbreak 1.5 deployment with kubelet
1.5 kubelet fails to start when using unknown params
7 years ago
Matthew Mosesohn
ff2fb9196f
Fix flannel for 1.6 and apply fixes to enable containerized kubelet
7 years ago
Matthew Mosesohn
ccc11e5680
Upgrade to Kubernetes 1.6.1
7 years ago
Sergii Golovatiuk
2670eefcd4
Refactoring resolv.conf
- Renaming templates for netchecker
- Add dnsPolicy: ClusterFirstWithHostNet to kube-proxy
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
7 years ago
Matthew Mosesohn
a29182a010
Restart kubelet when updating /etc/resolv.conf on all k8s nodes
7 years ago
Sergii Golovatiuk
1cfe0beac0
Set ClusterFirstWithHostNet for Pods with hostnetwork: true
In kubernetes 1.6 ClusterFirstWithHostNet was added as an option. In
accordance to it kubelet will generate resolv.conf based on own
resolv.conf. However, this doesn't create 'options', thus the proper
solution requires some investigation.
This patch sets the same resolv.conf for kubelet as host
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
7 years ago
Matthew Mosesohn
b4d06ff8dd
Add /var/lib/cni to kubelet
Necessary to persist this directory for host-local IPAM used by Canal
Add pre-upgrade task to copy /var/lib/cni out of old kubelet.
7 years ago
Matthew Mosesohn
5a5707159a
Fix multiline condition for k8s check certs
Fixes #1190
7 years ago
Paweł Skrzyński
61b2d7548a
Use hostname module to set hostname, and do it for all Os not only CoreOS
7 years ago
Matthew Mosesohn
80828a7c77
use etcd2 when upgrading unless forced
7 years ago
Aleksandr Didenko
58acbe7caf
Fix multiline when condition in sync_certs task
Folded style in multiline 'when' condition causes error with
unexpected ident. Changing it to literal style should fix
the issue.
Closes #1190
7 years ago
Matthew Mosesohn
d42e4f2344
Update .gitlab-ci.yml
7 years ago
Matthew Mosesohn
fb467df47c
fix etcd restart
7 years ago
Matthew Mosesohn
48beef25fa
delete master containers forcefully
7 years ago
Matthew Mosesohn
a3f568fc64
restart scheduler and controller-manager too
7 years ago
Matthew Mosesohn
57ee304260
ensure post-upgrade purge ones only once
7 years ago
Matthew Mosesohn
0794a866a7
switch debian8-canal-ha to ubuntu
7 years ago
Matthew Mosesohn
49e4d344da
move network plugins out of grouped upgrades
7 years ago
Matthew Mosesohn
6e505c0c3f
Fix delegate tasks for kubectl and etcdctl
7 years ago
Matthew Mosesohn
e9a294fd9c
Significantly reduce memory requirements
Canal runs more pods and upgrades need a bit of extra
room to load new pods in and get the old ones out.
7 years ago
Matthew Mosesohn
44d851d5bb
Only cordon Ready nodes
7 years ago
Matthew Mosesohn
c1b9660ec8
Move graceful upgrade test to debian canal HA, adjust drain
Graceful upgrades require 3 nodes
Drain now has a command timeout of 40s
7 years ago
Sergii Golovatiuk
f144fd1ed3
Refactor etcd role
- Run docker run from script rather than directly from systemd target
- Refactoring styling/templates
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
7 years ago
Artem Panchenko
e96557f410
Bump calico policy controller version
Latest released version of kube-policy-controller
contains important bug fixes and should be used
by default.
7 years ago
Antoine Legrand
6e1de9d820
Add missing defaults
7 years ago
Vladimir Rutsky
c4e57477fb
replace non-breakable space with regular space
Non-brekable space is 0xc2 0xa0 byte sequence in UTF-8.
To find one:
$ git grep -I -P '\xc2\xa0'
To replace with regular space:
$ git grep -l -I -P '\xc2\xa0' | xargs sed -i 's/\xc2\xa0/ /g'
This commit doesn't include changes that will overlap with commit f1c59a91a1
.
7 years ago
Brad Beam
5d3414a40b
Setting defaults for docker log rotation
7 years ago
Roger Welin
f4638c7580
add iptables --flush to reset role
7 years ago
Matthew Mosesohn
8b0b500c89
Use checksum of dnsmasq config to trigger updates of dnsmasq
Allows config changes made by Ansible to restart dnsmasq deployment
7 years ago
Josh Lothian
5e2f78424f
1169 - fix docker systemd unit
The docker-network environment file masks the new values
put into /etc/systemd/system/docker.service.d/flannel-options.conf
to renumber the docker0 to work correctly with flannel.
7 years ago
Matthew Mosesohn
1887e984a0
Change wait for dnsmasq to skip if there are no kube-nodes in play
Also changed unnecessary delay to a max timeout (now defaulting to 1s sleep
between tries)
Also rename play_hosts to ansible_play_hosts
7 years ago
Sergii Golovatiuk
c04a6254b9
Backup etcd data before restarting etcd
etcd is crucial part of kubernetes cluster. Ansible restarts etcd on
reconfiguration. Backup helps operator to restore cluster manually in
case of any issues.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
7 years ago
Matthew Mosesohn
b69d4b0ecc
Add helm deployment
7 years ago
Matthew Mosesohn
7760c3e4aa
Retry yum/apt/rpm download commands, fix succeeded filter
7 years ago