2609ec0dc3
Fix copy etcd-ssl-ca failed
6 years ago
16fc22a207
Fix ipvs by kubeadm v1alpha1
6 years ago
35e5adaf0a
Fix kubeadm v1alpha1 configure
6 years ago
9eade647e6
Fix kubeadm lb
6 years ago
52ab54eeea
Fix missing quotes for audit-log-path and wrong placement of feature-gates
6 years ago
d407a590a6
container_manager variable to specify runtime.
6 years ago
5eb805f098
Change timeout for kubeadm 600s.
* kubeadm timeout is too short and it may interrupt by timeout.
6 years ago
236f066635
kubeadm cri-o support.
6 years ago
5ab8a712d9
Add download_container flag to avoid docker pull when use cri-o.
6 years ago
cf7b9cfeef
Support crio in kubelet service.
6 years ago
6090af29e7
Add cri-o role.
6 years ago
359009bb05
Download etcd and hyperkube binary.
6 years ago
bdbfa4d403
Add ipvs support for kubeadm 1.10 or later.
6 years ago
6849788ebc
Fix copy ca cert and ca key for kubeadm.
6 years ago
ac639b2a17
Change kubeadm config to run etcd by kubeadm.
6 years ago
b395bb953f
Fix wrong when condition that ends up with jinja error when the content of /etc/hosts contains parenthesis
6 years ago
33135f2ada
k8s/preinstall: Turn AND condition into a list
6 years ago
1432e511a2
same work with less lines
6 years ago
cb8be37f72
fix on v1alpha1
6 years ago
e5dd4e1e70
added on v1alpha1
6 years ago
7b61a0eff0
Fix kubeadm LB configure
1. join node add LB discoveryTokenAPIServers
2. kubeadm_config_api_fqdn support ipddress and domain_name
6 years ago
23fd3461bc
calico upgrade to v3 ( #3086 )
* calico upgrade to v3
* update calico_rr version
* add missing file
* change contents of main.yml as it was left old version
* enable network policy by default
* remove unneeded task
* Fix kubelet calico settings
* fix when statement
* switch back to node-kubeconfig.yaml
6 years ago
5a4352657d
Fix install audit failed
1.fix audit log not write
2.fix Parameter not recognized
3.delete kubedm futuregates auditing and use apiServerExtraArgs
6 years ago
f13bc796d9
added nodePortAddresses on kubeadm conf v1alpha2 (not present on v1alpha1)
6 years ago
80cfeea957
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
6 years ago
5d9908c2c3
--nodeport-addresses added on kube-proxy.manifest.j2
Changed author
6 years ago
a7b0c454db
Localhost in hosts files should be updated (if necessary), not overriden
6 years ago
94df70be98
Cloud provider support for OCI (Oracle Cloud Infrastructure)
Signed-off-by: Jeff Bornemann <jeff.bornemann@oracle.com>
6 years ago
0c0a2138d9
allow '.' in hostnames
we use FQDN as inventory_hostname
6 years ago
fc38b6d0ca
Ability to define custom audit polcy rules
6 years ago
c34900e569
Define apiserver flags directly instead of relying on auditPolicy section in order to have the ability to redirect audit log to stdout with kubeadm
6 years ago
3eef8dc8d0
Add bad hostname preflight check
Hostname must be a valid DNS name, which is checked as https://github.com/kubernetes/apimachinery/blob/master/pkg/util/validation/validation.go#L115
The situation I have encountered is that my hostname contained underscore which is disallowed and apiserver refused to start.
6 years ago
59176ebbb9
Add kubeadm controlplaneEndpoint
Nginx LB(default)
Other LB by kubeadm controlplane
6 years ago
b421d0ed5b
Fix install nss
6 years ago
095ccef8bd
Remove unused configuration
6 years ago
29894293eb
Fix kubeadm client conf
Fix DiscoveryTokenCACertHashes key to discoveryTokenCACertHashes in kubeadm-client.conf
6 years ago
54548d3b95
kubeadm mounts the hostpaths itself
6 years ago
58d4d65fab
minor variable fix and reuse + handle auditlog redirected to stdout
6 years ago
2ffc1afe40
Support audit
6 years ago
70b28288a3
Use delegate_to: localhost instead of local_action
Allow to use `ansible_become: true` (#2969 )
And set it to `false` for `localhost` with an `host_var`
6 years ago
a11e1eba9e
Upgrade kubernetes to V1.11.x ( #3078 )
Upgrade Kubernetes to V1.11.2
The kubeadm configuration file version has been upgraded from v1alpha1 to v1alpha2
Add bootstrap kubeadm-config.yaml with external etcd
6 years ago
581a30fdec
Remove erroneous cloud-config task
6 years ago
fd380615a0
fix bad conditional
6 years ago
ea6af449a8
Remove istio support
Use helm install or support in future
6 years ago
4eadf3228e
Only add admission plugins if defined
6 years ago
99c5aa5a02
Use k8s default plugin list
6 years ago
6ed65d762b
Separate out plugins into 2 variables
6 years ago
ac18f6cf8b
Add support for admission controllers in 1.10 and above
6 years ago
b902602d16
Enable swap
6 years ago
ac644ed049
Fix yaml roles error
6 years ago
rongzhang
Erwan Miran
Takashi Okamoto
Maxime Brunet
Samuele Chiocca
Aivars Sterns
Jeff Bornemann
Mark Eisenblaetter
Tatsuyuki Ishi
Seungkyu Ahn
Matthew Mosesohn
Luis Nuñez
Robert Everson