Cristian Calin
dd2d95ecdf
[calico] don't enable ipip encapsulation by default and use vxlan in CI ( #8434 )
* [calico] make vxlan encapsulation the default
* don't enable ipip encapsulation by default
* set calico_network_backend by default to vxlan
* update sample inventory and documentation
* [CI] pin default calico parameters for upgrade tests to ensure proper upgrade
* [CI] improve netchecker connectivity testing
* [CI] show logs for tests
* [calico] tweak task name
* [CI] Don't run the provisioner from vagrant since we run it in testcases_run.sh
* [CI] move kube-router tests to vagrant to avoid network connectivity issues during netchecker check
* service proxy mode still fails connectivity tests so keeping it manual mode
* [kube-router] account for containerd use-case
2 years ago
Cristian Calin
394857b5ce
[docker] add support for cri-dockerd as a replacement for dockershim ( #8623 )
2 years ago
Tom Janson
2e925f82ef
Revert "Fix: typos in docs and comments ( #7805 )" ( #8592 )
This reverts commit 417180246c
.
2 years ago
Tom Janson
3e8e64a3e5
fix typo / error regarding etcd and k8s_cluster groups ( #8580 )
As far as I can tell this is simply a typo that has existed from the beginning. Having it this way around (`etcd` group as a child and thus subset of `k8s_cluster`) mirrors what is written in the preceeding sentence.
2 years ago
Alex
36393d77d3
Encrypting Secret Data at Rest ( #8574 )
* change default value for Encrypting Secret Data at Rest to secretbox, remove experimental flag and add documentation
* fix MD012/no-multiple-blanks
2 years ago
Necatican Yıldırım
e9c8913248
Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable ( #8317 )
* Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* Add etcd kubeadm deployment documentation
Signed-off-by: necatican <necaticanyildirim@gmail.com>
* Refactor warning for the deprecated 'etcd_kubeadm_enabled' variable
Signed-off-by: necatican <necaticanyildirim@gmail.com>
2 years ago
Mac Chaffee
0f73d87509
Allow pausing after upgrade but before uncordon ( #8530 )
* Allow pausing after upgrade but before uncordon
* Expand docs for upgrade pausing vars
Signed-off-by: Mac Chaffee <me@macchaffee.com>
2 years ago
kakkotetsu
98d5d0cdd5
add support for Dual Stack node InternalIP ( #8542 )
2 years ago
Takuya Murakami
da8522af64
docs: Update offline-environment.md for containerd ( #8520 ) ( #8523 )
* Add containerd/runc/nerdctl download url
* Add insecure registries configuration for containerd
2 years ago
Krystian Młynek
87928baa31
CRI-O: fix unqualified-search registries ( #8496 )
2 years ago
Julio H Morimoto
eac799f589
Amend documentation for docker to containerd migration ( #8477 )
* Amend PR https://github.com/kubernetes-sigs/kubespray/pull/8471 with missing inventory configuration.
Signed-off-by: Julio Morimoto <julio@morimoto.net.br>
* Amend PR https://github.com/kubernetes-sigs/kubespray/pull/8471 with missing inventory configuration.
Signed-off-by: Julio Morimoto <julio@morimoto.net.br>
2 years ago
Tristan
92d612c3e0
8487: Allow override of default CoreDNS zone cache ( #8488 )
Using the coredns_cluster_zone_cache_block variable
2 years ago
Ilya Margolin
7d4d554436
Document host_resolvconf as default value for resolvconf_mode ( #8493 )
refs #8247
2 years ago
Cristian Calin
c40b43de01
[mitogent] update to 0.3.2 ( #8470 )
2 years ago
Julio H Morimoto
b0eb5650da
Provide initial guidelines for a container engine migration (docker-2-containerd), with special emphasis on the fact that the procedure is still not officially supported. ( #8471 )
Follow up from https://github.com/kubernetes-sigs/kubespray/issues/8431 .
Signed-off-by: Julio Morimoto <julio@morimoto.net.br>
2 years ago
Florian Ruynat
d580014c66
Fix CI for Fedora (followup) + OpenSUSE Leap (update to 15.3) ( #8407 )
* Fix fedora jobs - followup
* Update OpenSUSE Leap to 15.3
* Fix cilium version in README + update minor 1.11.1
2 years ago
Victor Morales
e88aa7c96b
Add youki runtime support ( #8411 )
2 years ago
Pav K
6e2e61012a
Docs - Removed incorrect info on calico_rr. ( #8437 )
2 years ago
Necatican Yıldırım
caff539ccd
Add identity_allocation_mode support for Cilium ( #8430 )
Co-authored-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
Signed-off-by: necatican <necaticanyildirim@gmail.com>
Co-authored-by: Emin Aktaş <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
2 years ago
Mathieu Parent
43d128362f
Document image_command_tool and image_command_tool_on_localhost ( #8409 )
Signed-off-by: Mathieu Parent <mathieu.parent@insee.fr>
2 years ago
Tovin Seven
e0d67367ed
Update installation doc with vagrant ( #8406 )
2 years ago
Bart Sloeserwij
59f62473c9
Update configuration of registries in cri-o ( #7852 )
* Update configuration of registries in cri-o
* Update docs to match new registry configuration
2 years ago
Cristian Calin
3eab1129b9
CI: Replace CentOS 8 with AlmaLinux 8 before CentOS 8 EOL end of 2021 ( #8297 )
2 years ago
Kenichi Omichi
78c83a8f26
Update containerd doc ( #8369 )
This is a follow-up change for https://github.com/kubernetes-sigs/kubespray/pull/7911
2 years ago
Nguyễn Trung
e72f8e0412
Update node about container_manager variable ( #7911 )
I was deploy my cluster with separate etcd cluster and not intersect with kube_control_plane or kube_node. And I want to run etcd cluster in docker but still used containerd to make container runtime for all other nodes. Therefore, I was added note to this doc for everyone
Thank !
2 years ago
Nicolas MASSE
f01f7c54aa
Add support for CRI-O user namespaces ( #8268 )
* add support for cri-o user namespaces
* comply with yamllint rules
2 years ago
kakkotetsu
c59407f105
add support for Calico BGPPeer sourceAddress ( #8306 )
2 years ago
Hanna Bledai
615216f397
Fix if bind-address is not set to 0.0.0.0 ( #8262 )
* if bind-address is not set to 0.0.0.0
* Update docs and left comments
* fix yamllist check: remove space
2 years ago
Florian Ruynat
e19ce27352
Remove ovn4nfv support ( #8265 )
2 years ago
Florian Ruynat
e82443241b
Move opensuse CI to docker and fix ubuntu16 containerd version for docker ( #8257 )
2 years ago
Florian Ruynat
b38382a68f
Move cri-o default package to 1.22 ( #8258 )
2 years ago
Florian Ruynat
30ec03259d
Remove fedora33 - eol ( #8246 )
2 years ago
Cristian Calin
ee882fa462
Add capability to use swap, requires Kube 1.22 ( #8241 )
* Alpha-NodeSwap: allow nodes to use swap
* CI: Add Fedora 35 with experimental swap job
2 years ago
Cristian Calin
52ee5d0fff
Various documentation updates ( #8243 )
* Docs: update CONTRIBUTING.md
* Docs: clean up outdated roadmap and point to github issues instead
* Docs: update note on kubelet_cgroup_driver
* Docs: update kata containers docs with note about cgroup driver
* Docs: note about CI specific overrides
2 years ago
Florian Ruynat
a5f88e14d0
Cleanup tests ( #8234 )
* Add Fedora 35 image, support and CI
* Cleanup tests and allow_failure for vagrant
2 years ago
Cristian Calin
e78bda65fe
Defaults: replace docker with containerd as our default container_manager ( #8175 )
* Defaults: replace docker with containerd as our default container_manager
* CI: Use docker for download_localhost test
* Defaults: with container_manager=containerd we need etcd_deployment_type=host
* CI: Run weave jobs with docker
* CI: Vagrant don't download_force_cache
* CI: Fix upgrade tests
* should run compatible with old settings, this means docker
* we need to run with a distro that has at least modern containerd,
this means move from debian9 to debian10 to allow `containerd_version`
to match between 2.17 and master
2 years ago
zhengtianbao
e35a87e3eb
Update registry template ( #8198 )
* Add registry replica setting
* Add registry liveness and readiness probe
* Set the security context for registry
* Add registry pvc access mode option
* registry add replica requirement check
* docs: add registry replicas setting note
* Update docs/kubernetes-apps/registry.md
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
2 years ago
Karthikeya Viswanath
25316825b1
docs: remove basic auth reference in getting-started ( #7823 )
3 years ago
Mathieu Parent
0263c649f4
Allow to scrape etcd metrics using a service ( #8203 )
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
3 years ago
Lubos Mercl
424163c7d3
add gce support ( #8179 )
Author: lmercl <lubos.mercl@gmail.com>
Date: Wed Nov 10 15:30:04 2021 +0000
fix markdown
3 years ago
EDGsheryl
4d79a55904
Remove extra parameter kube_proxy_remove ( #8158 )
Signed-off-by: EDGsheryl <edgsheryl@gmail.com>
3 years ago
Cristian Calin
039205560a
nodelocaldns: allow a secondary pod for nodelocaldns for local-HA ( #8100 )
* nodelocaldns: allow a secondary pod for nodelocaldns for local-HA
* CI: add job to test nodelocaldns secondary
3 years ago
Cristian Calin
4a8757161e
Docker: replace the use of containerd_version with docker_containerd_version to avoid causing conflicts when bumping containerd_version ( #8130 )
3 years ago
Antoine Gatineau
b7eb1cf936
cert-manager: add trusted internal ca when configured ( #8135 )
* cert-manager: add trusted internal ca when configured
* wrong check for inventory variable
* Update documentation
3 years ago
Pasquale Toscano
6e5b9e0ebf
Fix Kubelet and Containerd when using cgroupfs as cgroup driver ( #8123 )
3 years ago
Cristian Calin
8d553f7e91
Mitogen: deprecate the use of mitogen and remove coverage from CI ( #8147 )
3 years ago
Erkan Zileli
8d82033bff
fix(doc): update typo ( #8148 )
I guess `kubernetes-the-hard-way` should be `kubernetes-the-kubespray-way` because of recently created network name is `kubernetes-the-kubespray-way`.
3 years ago
Florian Ruynat
331647f4ab
Remove deprecated Ambassador ingress code ( #8086 )
3 years ago
Cristian Calin
3c30be1320
cert-manager: update docs to reflect 1.5.x links ( #8117 )
3 years ago
Cristian Calin
6a5b87dda4
netchecker: update images to 1.2.2 from Mirantis ( #8074 )
* netchecker: update images to 1.2.2 from Mirantis which is slightly less ancinet than the l23networks images
* Netchecker: use local etcd instead of kubernetes v1beta1 crds which are no longer suported by kube 1.22+
3 years ago