kubespray

Commit Graph

Author	SHA1	Message	Date
刘旭	de9443a694	remove unused code (#4981 )	5 years ago
jlacoline	20c7e31ea3	Add calico 3.7.3 support (#4953 ) * Add calico 3.7.3 support * add calico_datastore variable to policy controller role * add missing clusterrole rules for calico policy controller * disable calico kube controller when kdd mode is used for versions < 3.6	5 years ago
Andreas Krüger	818aa7aeb1	Set dnsPolicy to ClusterFirstWithHostNet when hostNetwork is true (#4843 )	6 years ago
Maxime Guyot	ec3daedf9e	Revert "Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels (#4320 )" (#4553 ) This reverts commit `586ad89d50`.	6 years ago
Robert Neumann	586ad89d50	Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels (#4320 ) * Fix the file path for all.yml and k8s-cluster.yml * Fix --node-labels namespace error "unknown labels specified" * Update templates and configs kubelet node-labels	6 years ago
wangxf	a096761306	[PR-Calico]Support calico 3.4.0 (#4102 ) * Suport calico 3.4.0 Signed-off-by: wangxf1987 <xiaofeix.wang@gmail.com> * Remove symlink + cni conflist template when 3.3.0+, handle Canal, addition of install-cni: sidecar(3.3.0) or initontainer(3.4.0), KUBECONFIG_FILEPATH, calico_cert_dir, advertise cluster ips * scheduler.alpha.kubernetes.io/critical-pod deprecated since 1.12	6 years ago
Rong Zhang	225f765b56	Upgrade kubernetes to v1.13.0 (#3810 ) * Upgrade kubernetes to v1.13.0 * Remove all precense of scheduler.alpha.kubernetes.io/critical-pod in templates * Fix cert dir * Use kubespray v2.8 as baseline for gitlab	6 years ago
Erwan Miran	7bec169d58	Fix ansible syntax to avoid ansible deprecation warnings (#3512 ) * failed * version_compare * succeeded * skipped * success * version_compare becomes version since ansible 2.5 * ansible minimal version updated in doc and spec * last version_compare	6 years ago
Erwan Miran	9232261665	serviceaccounts is required in resources list of cluster role (#3455 )	6 years ago
Kuldip Madnani	36898a2c39	Adding pod priority for all the components. (#3361 ) * Changes to assign pod priority to kube components. * Removed the boolean flag pod_priority_assignment * Created new priorityclass k8s-cluster-critical * Created new priorityclass k8s-cluster-critical * Fixed the trailing spaces * Fixed the trailing spaces * Added kube version check while creating Priority Class k8s-cluster-critical * Moved k8s-cluster-critical.yml * Moved k8s-cluster-critical.yml to kube_config_dir	6 years ago
Frank Ritchie	f42e0a4711	Change update strategy to RollingUpdate. When enable_network_policy is set to True with Calico 3 kubectl apply fails with the error: The Deployment "calico-kube-controllers" is invalid: spec.strategy.rollingUpdate: Forbidden: may not be specified when strategy type is 'Recreate' See https://github.com/kubernetes-incubator/kubespray/issues/3267 Changing the update strategy to RollingUpdate avoids this error.	6 years ago
Aivars Sterns	23fd3461bc	calico upgrade to v3 (#3086 ) * calico upgrade to v3 * update calico_rr version * add missing file * change contents of main.yml as it was left old version * enable network policy by default * remove unneeded task * Fix kubelet calico settings * fix when statement * switch back to node-kubeconfig.yaml	6 years ago
Wong Hoi Sing Edison	c3b3572025	Always create service account even rbac_enabled = false	6 years ago
Matthew Mosesohn	03bcfa7ff5	Stop templating kube-system namespace and creating it (#2545 ) Kubernetes makes this namespace automatically, so there is no need for kubespray to manage it.	7 years ago
Kevin Lefevre	9368dbe0e7	update calico to 2.6.2 (#1874 ) Move RS to deployment so no need to take care of the revision history limits : - Delete the old RS - Make Calico manifest a deployment - move deployments to apps/v1beta2 API since Kubernetes 1.8	7 years ago
Matthew Mosesohn	a56738324a	Move set_facts to kubespray-defaults defaults These facts can be generated in defaults with a performance boost. Also cleaned up duplicate etcd var names.	7 years ago
Matthew Mosesohn	a3e6896a43	Add RBAC support for canal (#1604 ) Refactored how rbac_enabled is set Added RBAC to ubuntu-canal-ha CI job Added rbac for calico policy controller	7 years ago
Matthew Mosesohn	6bb3463e7c	Enable scheduling of critical pods and network plugins on master Added toleration to DNS, netchecker, fluentd, canal, and calico policy. Also small fixes to make yamllint pass.	7 years ago
jwfang	0b3badf3d8	revert calico-related changes	8 years ago
jwfang	c9734b6d7b	run calico-policy-controller with proper sa/role/rolebinding	8 years ago
Aleksandr Didenko	3a39904011	Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132	8 years ago

19 Commits (b0ee1f6cc6a59b59a570030b472e7effa3e7c35f)