Kenichi Omichi
cd7381d8de
Drop Ansible support for v2.9 and v2.10 ( #8925 )
Ansible v2.9 and v2.10 are EOL as [1].
This drops those version supports by following the upstream Ansible.
This sets use_ssh_args true always because that is required to use
ssh_args on ansible.cfg on Ansible v2.11 or later[2].
ansible_ssh_host is replaced with ansible_host because ansible_ssh_host
has been deprecated already and cenots7 jobs were failed due to the
deprecated ansible_ssh_host.
[1]: https://docs.ansible.com/ansible/devel/reference_appendices/release_and_maintenance.html#ansible-core-changelogs
[2]: https://docs.ansible.com/ansible/latest/collections/ansible/posix/synchronize_module.html#parameter-use_ssh_args
2 years ago
Mathieu Parent
f53764f949
calicoctl repo has been merged in calico ( #8920 )
2 years ago
Kenichi Omichi
57c3aa4560
Merge pull request #8943 from ErikJiang/update-etcd-download-url
update etcd download url in offline.yml
2 years ago
Mohamed Zaian
bb530da5c2
[registry] Switch registry to use registry.k8s.io
Please see the conversation here: https://groups.google.com/a/kubernetes.io/g/dev/c/DYZYNQ_A6_c
2 years ago
Ilya Margolin
cc6cbfbe71
Allow disabling calico CNI logs with calico_cni_log_file_path ( #8921 )
* Allow disabling calico CNI logs with calico_cni_log_file_path
Calico CNI logs up to 1G if it log a lot with current default settings:
log_file_max_size 100 Max file size in MB log files can reach before they are rotated.
log_file_max_age 30 Max age in days that old log files will be kept on the host before they are removed.
log_file_max_count 10 Max number of rotated log files allowed on the host before they are cleaned up.
See https://projectcalico.docs.tigera.io/reference/cni-plugin/configuration#logging
To save disk space, make the path configurable and allow disabling this log by setting
`calico_cni_log_file_path: false`
* Fix markdown
* Update roles/network_plugin/canal/templates/cni-canal.conflist.j2
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
2 years ago
bo.jiang
6f556f5451
update etcd download url in offline.yml
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2 years ago
Kenichi Omichi
9074bd297b
Update RELEASE.md ( #8937 )
If opening https://groups.google.com/g/kubernetes-dev we can see the
following message:
As of January 2, 2022, this group will be sunset in favor of dev@kubernetes.io .
So this replaces kubernetes-dev@googlegroups.com with the new one.
In addition, this adds actual steps to know how to create container images easily.
2 years ago
mahjonp
8030e6f76c
fix 8893#issuecomment-1147154353 ( #8933 )
Signed-off-by: mahjonp <junpeng.man@gmail.com>
2 years ago
ERIK
27bd7fd737
update kubespray image tag in readme to v2.19.0 ( #8934 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2 years ago
Ho Kim
77f436fa39
Fix: set fallback value of kubelet ip6 ( #8858 ) ( #8926 )
* Fix: set fallback value of kubelet ip6 (#8858 )
* Prune the spurious comma in the end of kubelet_address
- Update `roles/kubernetes/node/defaults/main.yml`
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
* Fix: set fallback value of kubelet ip6 (#8858 )
- Apply the lint: 132606368e
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
2 years ago
Kenichi Omichi
814760ba25
Use blocks for macvlan tasks for each distribution ( #8918 )
For the code readability, this adds blocks for each distribution.
2 years ago
zhougw
14c0f368b6
the KUESPRAYDIR defined but never used ( #8930 )
* fix dir error
* the command line should align
2 years ago
Boris Barnier
0761659a43
Update Kube-router version to 1.5.0 ( #8928 )
https://github.com/cloudnativelabs/kube-router/releases/tag/v1.5.0
2 years ago
vanyasvl
a4f752fb02
Add subjectAltName to calico-apiserver certificate ( #8907 )
* Add AltName to calico-apiserver certificate
* fix support for centos7 openssl
2 years ago
Mohamed Zaian
b2346cdaec
[feat] Upgrade metrics server to v0.6.1 ( #8909 )
* Metrics Server now requires access to nodes/metrics RBAC resource instead of nodes/stats. See: https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.6.0
* Minimize rbac permissions.
2 years ago
Thearas
01ca7293f5
support reserve ephemeral-storage ( #8895 )
2 years ago
Florian Ruynat
4dfce51ded
Update dashboard to 2.6.0 (k8s 1.24 support) ( #8906 )
2 years ago
Kenichi Omichi
f82ed24c03
Update KUBESPRAY_VERSION ( #8922 )
As a step of release process, this updates KUBESPRAY_VERSION.
Thank you so much for creating and pushing container images of
the new version floryut !
2 years ago
rtsp
1f65e6d3b5
[ingress-nginx] upgrade to 1.2.1 ( #8904 )
2 years ago
Kenichi Omichi
9bf7aaf6cd
Update RELEASE.md ( #8884 )
This updates RELEASE.md file to understand the release process
easily based on hands-on experience.
2 years ago
Max Gautier
5512465b34
Revert "Set exact user for Kubelet services" ( #8872 )
This reverts commit e375678674
.
The workaround of explicitly specifying root for the kubelet unit was
for pulling images from private registry. Kubernetes now have a
dedicated mechanism with imagePullSecret.
2 years ago
Chris Ricker
2f30ab558a
Add 1.24 mappings for etcd and snapshot_controller ( #8903 )
Map appropriate versions of etcd and snapshot_controller containers with
k8s 1.24
2 years ago
Daniil Muidinov
5c136ae3af
[calico] add 3.22.3 and 3.23.1 ( #8897 )
* [calico]
* add 3.22.3 and 3.23.1
* set 3.22.3 default
* fix download crd for calico 3.22.3 and upper
* update calico README.md
2 years ago
mahjonp
c927da00e0
Support cilium ip-masq-agent configuration ( #8893 )
* fix deploy Cilium with eBPF-based Masquerading failed
Signed-off-by: mahjonp <junpeng.man@gmail.com>
* forget to add the enable-ip-masq-agent flag
Signed-off-by: mahjonp <junpeng.man@gmail.com>
2 years ago
Samuel Liu
1600fd9082
clean up tags ( #8880 )
2 years ago
Samuel Liu
14acd124bc
fix containerd images downalod bugs ( #8894 )
2 years ago
rtsp
e3cbbfb9ed
[kubernetes] make 1.23.7 the new default ( #8888 )
2 years ago
rtsp
5f21e0b58b
Update components version in README.md ( #8886 )
2 years ago
Alessio Greggi
d22204a59f
docs: add hardening guide ( #8868 )
2 years ago
ERIK
90289b8502
add arch var in dockerfile ( #8875 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2 years ago
Mohamed Zaian
78aacee21b
[kubernetes] add hashes for 1.24.1 and other versions. ( #8876 )
* [kubernetes] add hashes for 1.24.1 and other versions.
versions: v1.21.13, v1.22.10, v1.23.7 & v1.24.1
* [kubernetes] make v1.23.7 default1
2 years ago
Gleb Galkin
f47aca3558
Added |bool for rhel_enable_repos ( #8871 )
2 years ago
Kenichi Omichi
73fc70dbe8
Delete kube_version v1.20- related code ( #8869 )
Current Kubespray supports the Kubernetes version 1.21 or upper with
`kube_version_min_required: v1.21.0`
Then kube_version v1.20- related code is not used at all.
This deletes those code for cleanup.
2 years ago
Kenichi Omichi
dc2a18e436
Merge pull request #8815 from simplekube-ro/dont_clobber_calico
[calico] don't clobber calico options set by the user
2 years ago
Thearas
82590eb087
fix remove `docker-ce.repo` failed ( #8856 )
2 years ago
Ross Kusler
4c97ce747c
Adding support for the kube-router flag --cluster-asn flag ( #8837 )
2 years ago
Samuel Liu
ebbc5ed0ce
add liupeng0518 to reviewers ( #8853 )
2 years ago
Necatican Yıldırım
dc1af5a9c5
[etcd] Add support for setting the request size limit ( #8849 )
* [etcd] Add extra documentation for `etcd_memory_limit` and `etcd_quota_backend_bytes`
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* [etcd] Add support for setting ETCD_MAX_REQUEST_BYTES
Signed-off-by: necatican <necaticanyildirim@gmail.com>
2 years ago
irizzant
85bd1eea27
fix(calico): add missing "get" verb ( #8847 )
Signed-off-by: irizzant <i.rizzante@gmail.com>
2 years ago
Necatican Yıldırım
2b151c6aa2
cni-plugins: upgrade to 1.1.1 ( #8852 )
Signed-off-by: necatican <necaticanyildirim@gmail.com>
2 years ago
David Louks
93fe3e06ef
Add support for including annotations on aws-ebs-csi-controller ( #8779 )
* Add support for including annotations on aws-ebs-csi-controller
* update comment to specify role arn
2 years ago
Tamas Pasztor
9d3a894991
Possible remove ippools from cni config ( #8845 )
* Possible remove ippools from cni config
* Typo
* Update roles/network_plugin/calico/templates/cni-calico.conflist.j2
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
* Update cni-calico.conflist.j2
Incorrectly deleted calico forwarding content.
* Update roles/network_plugin/calico/templates/cni-calico.conflist.j2
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
2 years ago
Kenichi Omichi
0e6b727e53
Update docs for using venv ( #8842 )
Due many patterns of Linux distributions, it is difficult to install
ansible dependencies as system-wide stably.
Apart of Kubespray doc[1] recommends to use venv to avoid such issue,
and this applies venv usage to the other parts of the doc.
[1]: https://github.com/kubernetes-sigs/kubespray/blob/master/docs/setting-up-your-first-cluster.md#set-up-kubespray
2 years ago
Andrey
e42a01f203
Fixed systemd-networkd restart for ubuntu 22.04, when using reset.yml ( #8841 )
* Fixed systemd-networkd restart for ubuntu 22.04
* fixed systemd-networkd restart for all Ubuntu
2 years ago
Samuel Liu
a28b58dbd0
[calico]use ipamconfig instead of calico ipam command ( #8839 )
* use ipamconfig instead of calico ipam command
* fix ansible lint
2 years ago
orange-llajeanne
a26a9ee14f
set apparmor_enabled in netchecker task ( #8844 )
2 years ago
Kenichi Omichi
c09fcd4f92
Skip gathering facts when reset_nodes is false ( #8843 )
The doc[1] explains we need to specify
"-e reset_nodes=false -e allow_ungraceful_removal=true"
to delete offline node. However the task "Gather facts"
tried to gather facts of offline node also and the task
was failed.
This adds a condition to skip gathering facts when reset_nodes
is false on remove-node.yml.
[1]: https://github.com/kubernetes-sigs/kubespray/blob/master/docs/nodes.md#3-remove-an-old-node-with-remove-nodeyml
2 years ago
Samuel Liu
593359ec77
fix kube-ovn image ( #8838 )
2 years ago
Maxime Guyot
34ec4d5d40
Move woopstar to emeritus approver ( #8809 )
2 years ago
Kay Yan
3d8f3bc0b7
Fix the invalid kube vip manifest ( #8831 )
* add Feature synchronized time checking
* fix-invalid-kube-vip-manifest
2 years ago