1432e511a2
same work with less lines
6 years ago
b61eb7d7f3
Add ETCD_QUOTA_BACKEND_BYTES environment variable
6 years ago
1567a977c3
Revert "gen_certs_script: refactor using stdin (Ansible 2.4+)"
6 years ago
cb8be37f72
fix on v1alpha1
6 years ago
e5dd4e1e70
added on v1alpha1
6 years ago
1da5926a94
Use xenial repo for ubuntu18
6 years ago
7b61a0eff0
Fix kubeadm LB configure
1. join node add LB discoveryTokenAPIServers
2. kubeadm_config_api_fqdn support ipddress and domain_name
6 years ago
23fd3461bc
calico upgrade to v3 ( #3086 )
* calico upgrade to v3
* update calico_rr version
* add missing file
* change contents of main.yml as it was left old version
* enable network policy by default
* remove unneeded task
* Fix kubelet calico settings
* fix when statement
* switch back to node-kubeconfig.yaml
6 years ago
e22e15afda
Fix createhome directory for adduser role
A typo in the adduser role prevents the createhome
variable to be taken into account.
Fix #3164
6 years ago
69786b2d16
gen_certs_script: refactor using stdin (Ansible 2.4+)
6 years ago
5a4352657d
Fix install audit failed
1.fix audit log not write
2.fix Parameter not recognized
3.delete kubedm futuregates auditing and use apiServerExtraArgs
6 years ago
f13bc796d9
added nodePortAddresses on kubeadm conf v1alpha2 (not present on v1alpha1)
6 years ago
a6a14e7f77
create the service account and roles even if the rbac is not enabled. it will just be ignored
6 years ago
80cfeea957
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
6 years ago
2c90208486
Fix docker apt-repo for Ubuntu18
6 years ago
5d9908c2c3
--nodeport-addresses added on kube-proxy.manifest.j2
Changed author
6 years ago
a7b0c454db
Localhost in hosts files should be updated (if necessary), not overriden
6 years ago
c3b3572025
Always create service account even rbac_enabled = false
6 years ago
f897596844
Remove *_image_tag suffix from ReplicaSet/Deployment
6 years ago
6df71956c4
new cilium stable version: 1.2.0
6 years ago
94df70be98
Cloud provider support for OCI (Oracle Cloud Infrastructure)
Signed-off-by: Jeff Bornemann <jeff.bornemann@oracle.com>
6 years ago
0c0a2138d9
allow '.' in hostnames
we use FQDN as inventory_hostname
6 years ago
fc38b6d0ca
Ability to define custom audit polcy rules
6 years ago
c34900e569
Define apiserver flags directly instead of relying on auditPolicy section in order to have the ability to redirect audit log to stdout with kubeadm
6 years ago
71fdc257bc
cephfs-provisioner: Upgrade to v2.0.1-k8s1.11
6 years ago
3eef8dc8d0
Add bad hostname preflight check
Hostname must be a valid DNS name, which is checked as https://github.com/kubernetes/apimachinery/blob/master/pkg/util/validation/validation.go#L115
The situation I have encountered is that my hostname contained underscore which is disallowed and apiserver refused to start.
6 years ago
59176ebbb9
Add kubeadm controlplaneEndpoint
Nginx LB(default)
Other LB by kubeadm controlplane
6 years ago
b421d0ed5b
Fix install nss
6 years ago
35efc387c4
Fix pull dns image error
6 years ago
1d4f88eea8
Fix typo in image url
6 years ago
e9b8c8956d
Fix k8s-dns-dnsmasq-nanny repo path
6 years ago
095ccef8bd
Remove unused configuration
6 years ago
98b818bbaf
comply with ansible syntax consistency guideline
6 years ago
ce6854e726
add version to environment file
Trigger reboot handler when version upgrade during update script
6 years ago
59d89a37cc
add until option for etcd backup commands
6 years ago
1a07c87af7
cephfs-provisioner: Upgrade to v2.0.0-k8s1.11
Upstream Changes:
- cephfs-provisioner v2.0.0-k8s1.11 (https://github.com/kubernetes-incubator/external-storage/releases/tag/cephfs-provisioner-v2.0.0-k8s1.11 )
- Update ClusterRole
Our Changes:
- Fix typo in defaults/main.yml (rs -> deploy)
- Manifests cleanup
6 years ago
29894293eb
Fix kubeadm client conf
Fix DiscoveryTokenCACertHashes key to discoveryTokenCACertHashes in kubeadm-client.conf
6 years ago
7f16b46ed5
Reset tasks specific to a network_plugin moved inside its role directory + Reset tasks specific to cilium
6 years ago
54548d3b95
kubeadm mounts the hostpaths itself
6 years ago
58d4d65fab
minor variable fix and reuse + handle auditlog redirected to stdout
6 years ago
2ffc1afe40
Support audit
6 years ago
18612b3501
cert-manager: Upgrade to 0.4.1
Upstream Changes:
- cert-manager 0.4.1 (https://github.com/jetstack/cert-manager/releases/tag/v0.4.1 )
Our Changes:
- Better templates sync with upstream manifests
- Remove fancy resources requests/limits customization
6 years ago
9da5d67728
Update CoreDNS to 1.2.0
6 years ago
bd413e36a3
ingress-nginx: Upgrade to 0.18.0
Upstream Changes:
- ingress-nginx 0.18.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.18.0 )
6 years ago
b50b3430be
Disable locksmithd on CoreOS if coreos_auto_upgrade set to false ( #3088 )
* Disable locksmithd on CoreOS if coreos_auto_upgrade set to false
* change when format to support multiple-condition
6 years ago
48b6128814
Upgrade coredns to 1.1.3
6 years ago
70b28288a3
Use delegate_to: localhost instead of local_action
Allow to use `ansible_become: true` (#2969 )
And set it to `false` for `localhost` with an `host_var`
6 years ago
a11e1eba9e
Upgrade kubernetes to V1.11.x ( #3078 )
Upgrade Kubernetes to V1.11.2
The kubeadm configuration file version has been upgraded from v1alpha1 to v1alpha2
Add bootstrap kubeadm-config.yaml with external etcd
6 years ago
2dfa928c90
Uninstall old versions of Docker
6 years ago
d3c0fe1fcb
Templates (even without actual templating inside) should have j2 extension but should not be rendered with j2 extension
6 years ago
Erwan Miran
Vasilis Remmas
Aivars Sterns
Samuele Chiocca
ant31
rongzhang
msimonin
Tatsuyuki Ishi
Wong Hoi Sing Edison
john
Jeff Bornemann
Mark Eisenblaetter
Victor Antonovich
Sergey Bondarev
Mathieu Herbert
Seungkyu Ahn
Andreas Kruger
JohnZheng
Maxime Brunet
Chen Hong