orange-llajeanne
28839f6b71
remove duplicate audit-policy-file argument in kubeadm configuration ( #6734 )
4 years ago
Hans Feldt
28073c76ac
Calico upgrade path validation and old version cleanup ( #6733 )
* calico: add constant calico_min_version_required
and verify current deployed version against it.
* calico: remove upgrade support with data migration
The tool was used pre v3.0.0 and is no longer needed.
* calico: remove old version support from tasks
* calico: remove old ver support from policy ctrl
* calico: remove old ver support from node
* canal: remove old ver support
* remove unused calicoctl download checksums
calico_min_version_required is the oldest version that can be installed
Older versions can be removed.
4 years ago
Sergey
c0fd5b2e84
remove variable 'etcd_ionice', because ionice removed from container image etcd:v3.4.x ( #6735 )
4 years ago
Wang Zhen
edea63511d
Fix reserved memory unit in kubelet configuration ( #6725 )
* Fix reserved memory unit in kubelet configuration
Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>
* Move systemReserved default values from template
Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>
4 years ago
orange-llajeanne
e489e70031
add new variable allowing additionnal audit webhook server options ( #6726 )
4 years ago
Florian Ruynat
05c9169c70
Fix example value for etcd_quota_backend_bytes ( #6724 )
4 years ago
Florian Ruynat
b7c4136702
Ignore error in check mode when disabling swap ( #6703 )
4 years ago
Hans Feldt
6da385de9d
Use "kubeadm join" to join masters to control plane ( #6661 )
Remove configuration variable kubeadm_control_plane
4 years ago
Hans Feldt
0cc5e3ef03
Remove workaround with kube_proxy_remove ( #6512 )
* kube-proxy never gets deployed so need to remove it
4 years ago
Florian Ruynat
a556f8f2bf
Remove deprecated (and removed in 1.19) flag and function --basic-auth-file ( #6655 )
4 years ago
spaced
34ff39e654
NetworkManager lists must be separated by , ( #6643 )
4 years ago
spaced
2de6a5676d
Fedora coreos networkmanager global dns and bootstrapping fix ( #6577 )
* remove podman cni plugin
* configure networkamanger global dns
* allow installation of python3-libselinux by disabling update repo temporary
* remove ipv4 section because it is not a valid configuration
4 years ago
Hans Feldt
6613895de0
remove kubelet startup warnings for non docker container runtime ( #6605 )
Removes these startup warnings:
Warning: For remote container runtime, --pod-infra-container-image is ignored in kubelet, which should be set in that remote runtime instead
Using "/var/run/crio/crio.sock" as endpoint is deprecated, please consider using full url format "unix:///var/run/crio/crio.sock".
4 years ago
Hans Feldt
803d52ffce
kubernetes: remove unused variables ( #6601 )
4 years ago
Florian Ruynat
f1566cb8c2
Add protectKernelDefaults option (default true) to kubelet config file ( #6611 )
4 years ago
Lovro Seder
c1ba8e1b3a
Rotate kubelet server certificate. ( #6453 )
* Rotate kubelet server certificate.
* CI test kubelet server cert rotation
* Approve kubelet serving certificates in tests.
4 years ago
Maxime Guyot
34d88ea6d9
Fix Ansible-lint E303 ( #6409 )
4 years ago
Barry Melbourne
058438a25d
Remove support for CoreOS Container Linux ( #6576 )
4 years ago
Sulochan Acharya
36924b63dc
Allow webhook authorization ( #6502 )
4 years ago
jeanfabrice
411510cbe6
Use proper openssl command to differentiate between host and ip in API certificate check ( #6392 )
* Use proper openssl command to differentiate between host and ip in current certificate check
* fixup! Use proper openssl command to differentiate between host and ip in current certificate check
4 years ago
Florian Ruynat
6e2b8a5750
Add timeout to Get current version of calico cluster version, again ( #6493 )
4 years ago
Florian Ruynat
142b9e1eff
Update k8s hashes and set default version to 1.18.8 ( #6532 )
4 years ago
Michal Petko
91ae87fa60
Fix setting node label if kube_override_hostname is defined ( #6557 )
4 years ago
Samuel Liu
a42d811420
fix scale playbook ( #6482 )
4 years ago
holmesb
d8a749fd27
Update apiserver-audit-policy.yaml.j2 ( #6526 )
4 years ago
Florian Ruynat
78ceef6b15
Remove unused variable ( #6522 )
4 years ago
Arthur Outhenin-Chalandre
33ec13293b
Fix cilium_deploy_additionally with kubeadm etcd ( #6514 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Erwan Miran
ef3e98807e
tlsminversion and tlsciphersuites kubelet ( #6490 )
4 years ago
Maxime Guyot
fc23f37af7
Fix E306 in roles/kubernetes ( #6500 )
4 years ago
Sulochan Acharya
bfe143808f
Allows tls verify skip on webhook auth url ( #6472 )
4 years ago
Florent Monbillard
39b907cdfb
Remove workaround for kubeadm upgrade ( #6478 )
https://github.com/kubernetes/kubeadm/issues/1498 was closed
4 years ago
Konstantin Lebedev
2364a84579
fix src for audit webhook config yaml ( #6470 )
4 years ago
fulii
ce22c0e6a4
Add option to configure IPVS timeouts in kube-proxy configration manifest. ( #6396 )
4 years ago
Kuralamudhan Ramakrishnan
90e5f8ffe1
adding ovn4nfv in kubespray ( #6381 )
Signed-off-by: Kuralamudhan Ramakrishnan <kuralamudhan.ramakrishnan@intel.com>
4 years ago
Florian Ruynat
a78e861a89
Fix test if openstack_cacert is a base64 string ( #6421 )
4 years ago
Maxime Guyot
214e08f8c9
Fix ansible-lint E305 ( #6459 )
4 years ago
Maxime Guyot
e70f27dd79
Add noqa and disable .ansible-lint global exclusions ( #6410 )
4 years ago
Florian Ruynat
b680cdd0e4
Move healthz check to secure ports ( #6446 )
4 years ago
Igor Vuk
ea67bb6e41
Fix typo: Modprode -> Modprobe ( #6429 )
4 years ago
Konstantin Lebedev
a7ec0ed587
add audit webhook support ( #6317 )
* add audit webhook support
* use generic name auditsink
4 years ago
Arthur Outhenin-Chalandre
1a1fe99669
Add a way to deploy cilium alongside another CNI ( #6373 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Florian Ruynat
5e22574402
Remove allow-release-candidate-upgrades already include in experimental-upgrades flag ( #6349 )
4 years ago
Arthur Outhenin-Chalandre
abfa1636e4
Fix kube-proxy post deployment removal ( #5554 )
* Fix kube-proxy removal
* Fix unwanted skipped task for kube-proxy
* Fix kube_proxy_remove default
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add test for kube-router svc proxy
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Arthur Outhenin-Chalandre
05b9f14b76
Update cilium minimum kernel preinstall check ( #6376 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Hans Feldt
22996babcf
allow kubeadm to upgrade etcd ( #6345 )
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
4 years ago
Maxime Guyot
57eefdd458
Fix azure-cloud-config.j2 JSON syntax ( #6364 )
4 years ago
Florian Ruynat
2a82dff3ae
Remove runtime-config from kubeadm if empty ( #6311 )
4 years ago
Hans Feldt
ae003af262
Fix kubelet cgroup driver detection for crio ( #6331 )
* Fix kubelet cgroup driver detection for crio
Remove fact standalone_kubelet since it is not used
* Fix yamllint complaints of roles/kubernetes/node/tasks/facts.yml
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
4 years ago
Joel Seguillon
4c1e0b188d
Add .editorconfig file ( #6307 )
4 years ago
bozzo
09b23f96d7
Use NetworkManager to manage resolv.conf in FedoraCoreOS ( #6291 )
4 years ago