Robert Liotta
2a00c931e4
Added the missing environment for proxy for get_url ( #3603 )
* Added the missing environment for proxy for get_url
* Update upgrade.yml
* Fixed spaces
* Fixed spaces
* Update upgrade.yml
6 years ago
Erwan Miran
4f12ba00d1
Fix calico peering with router(s) ( #3547 )
6 years ago
Erwan Miran
87193fd270
Fix ansible syntax to avoid ansible warnings (one more) ( #3536 )
* warning on meta flush_handlers
* avoid rm
* avoid "Module remote_tmp /root/.ansible/tmp did not exist and was created with a mode of 0700, this may cause issues when running as another user. To avoid this, create the remote_tmp dir with the correct permissions manually" warning on subsequent tasks using blockinfile
* is match
6 years ago
Erwan Miran
7bec169d58
Fix ansible syntax to avoid ansible deprecation warnings ( #3512 )
* failed
* version_compare
* succeeded
* skipped
* success
* version_compare becomes version since ansible 2.5
* ansible minimal version updated in doc and spec
* last version_compare
6 years ago
Erwan Miran
bfd4ccbeaa
Calico: Ability to define global peers ( #3493 )
6 years ago
Erwan Miran
6549b8f8ae
Ability to define the asNumber on a per node basis when route reflectors are not used in order to peer directly with routers ( #3492 )
6 years ago
Erwan Miran
232020ef96
skip-exists is an flag for create command, not for calicoctl ( #3401 )
6 years ago
Rui Cao
02de35cfc3
Fix some typos ( #3382 )
Signed-off-by: Rui Cao <ruicao@alauda.io>
6 years ago
Kevin Schuck
fb1678d425
Ensures BGPPeer resource names are unique
6 years ago
Kevin Schuck
d3adf09bde
Fixes BGPPeer resource for calico >= 3.0.0
6 years ago
Matthew Mosesohn
c83350e597
refactor to base on calico_version
6 years ago
Matthew Mosesohn
55d76ea3d8
Update install.yml
6 years ago
Matthew Mosesohn
1091e82327
Update install.yml
6 years ago
Matthew Mosesohn
cc79125d3e
Update install.yml
6 years ago
Matthew Mosesohn
d91f9e14e6
Put back legacy support for calico ippools and bgp settings
6 years ago
Takashi Okamoto
b2a7a27dfb
Fix indent error by yamllint.
6 years ago
mlushpenko
ea2c9d8f57
Fix yaml checks
6 years ago
Matthew Mosesohn
dc3e317d20
Fix backward compatibility with calico 2.6
6 years ago
Luis Nunez
6569180654
remove capitalize filter
6 years ago
Antoine Legrand
2f1fe44762
update images to use arch
6 years ago
Aivars Sterns
23fd3461bc
calico upgrade to v3 ( #3086 )
* calico upgrade to v3
* update calico_rr version
* add missing file
* change contents of main.yml as it was left old version
* enable network policy by default
* remove unneeded task
* Fix kubelet calico settings
* fix when statement
* switch back to node-kubeconfig.yaml
6 years ago
Wong Hoi Sing Edison
c3b3572025
Always create service account even rbac_enabled = false
6 years ago
Matthew Mosesohn
1a3b9dd864
Force copy cni files
6 years ago
elementyang
8fee1ab102
change create to apply
6 years ago
Matthew Mosesohn
9837b7926f
Use proper lookup of etcd host for calico ( #2408 )
Fixes #2397
6 years ago
Matthew Mosesohn
bc0fc5df98
Use node cert for etcd tasks instead of delegating to first etcd ( #2386 )
For etcdctl commands, use admin cert instead of node because this file
doesn't exist on etcd only hosts.
6 years ago
Brad Beam
31659efe13
Fixing cert name in calico/canal for etcd check ( #2358 )
6 years ago
Matthew Mosesohn
87f33a4644
Use CNI to assign kube_pods_subnet for calico
Now calico can be deployed if there are other existing pools
and not confuse IPAM and end up with pods in the wrong pools.
6 years ago
Matthew Mosesohn
d2935ffed0
Optionally ignore the presence of extra calico pools ( #2190 )
6 years ago
Steve Mitchell
e45b30d033
Add etcd key and cert environment variables for use with client auth
7 years ago
Matthew Mosesohn
ec54b36e05
add retries for calico/canal etcd commands ( #2007 )
7 years ago
Spencer Smith
bc1a4e12ad
fix broken variable in ansible 2.4.1.0 and ensure tasks for calico-rr ( #1982 )
7 years ago
Matthew Mosesohn
86fb669fd3
Idempotency fixes ( #1838 )
7 years ago
Matthew Mosesohn
d4b10eb9f5
Fix path for calico get node names ( #1816 )
7 years ago
Kevin Lefevre
6ec45b10f1
Update network-plugins to use portmap plugin ( #1763 )
Portmap allow to use hostPort with CNI plugins. Should fix #1675
7 years ago
Matthew Mosesohn
10dd049912
Revert "Security fixes for etcd ( #1778 )" ( #1786 )
This reverts commit 4209f1cbfd
.
7 years ago
Matthew Mosesohn
4209f1cbfd
Security fixes for etcd ( #1778 )
* Security fixes for etcd
* Use certs when querying etcd
7 years ago
Matthew Mosesohn
f14f04c5ea
Upgrade to kubernetes v1.8.0 ( #1730 )
* Upgrade to kubernetes v1.8.0
hyperkube no longer contains rsync, so now use cp
* Enable node authorization mode
* change kube-proxy cert group name
7 years ago
Aivars Sterns
9c86da1403
Normalize tags in all places to prepare for tag fixing in future ( #1739 )
7 years ago
Matthew Mosesohn
d94e3a81eb
Use api lookup for kubelet hostname when using cloudprovider ( #1686 )
The value cannot be determined properly via local facts, so
checking k8s api is the most reliable way to look up what hostname
is used when using a cloudprovider.
7 years ago
Matthew Mosesohn
77602dbb93
Move calico to daemonset ( #1605 )
* Drop legacy calico logic
* add calico as a daemonset
7 years ago
jwfang
0b3badf3d8
revert calico-related changes
7 years ago
jwfang
1eaf0e1c63
rename task
7 years ago
jwfang
2cda982345
binding group system:nodes to clusterrole calico-role
7 years ago
Kevin Jing Qiu
a742d10c54
Allow calico ipPool to be created with mode "cross-subnet"
7 years ago
AtzeDeVries
61b74f9a5b
updated to direct control over ipip
7 years ago
AtzeDeVries
7332679678
Give more control over IPIP, but with same default behaviour
7 years ago
Justin Hunthrop
af55e179c7
adding --skip-exists flag for peer_with_router
7 years ago
Sergii Golovatiuk
674b71b535
Ansible 2.3 support
- Fix when clauses in various places
- Update requirements.txt
- Fix README.md
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
7 years ago
Matthew Mosesohn
a422ad0d50
More idempotency fixes
Fixed sync_tokens fact
Fixed sync_certs for k8s tokens fact
Disabled register docker images changability
Fixed CNI dir permission
Fix idempotency for etcd pre upgrade checks
7 years ago