3f065918d9
Update verbs for volumeattachments resource ( #8731 )
* Update verbs for volumeattachments resource
Update verbs for volumeattachments resource so that the kubelet can create volumeattachments and mount volumes when deploying Kubernetes on VMware vSphere.
* Update verbs for volumeattachments resource
Update verbs for volumeattachments resource to match upstream
* Update vsphere-csi-controller-rbac.yml.j2
2 years ago
c98a0a448f
metallb: Add images to downloads ( #8715 )
For offline mode
2 years ago
d7254eead6
UpCloud integration ( #8653 )
* [upcloud] add upcloud csi-driver
* Option to use ansible_host as api ip for kubueconfig
2 years ago
9dced7133c
Fixes for Hetzner terraform and Hetzner Cloud ( #8702 )
* - add ability to specify the network_zone in hetzner terraform
- Export the network id from hetzner terraform the the generated inventory.ini
* - Add with_networks variable to allow different deployments of hcloud controller manager
- Add network id to hcloud controller secret (added via the inventory)
- Don't include extra_args if it's not set
2 years ago
0481dd946f
[cert-manager] Upgrade to v1.8.0 ( #8688 )
2 years ago
cefd1339fc
[vsphere_csi] update to 2.5.1 and make external_vsphere_version 7.0u1 by default ( #8676 )
2 years ago
a67e36703f
Update cert-manager to v1.7.2 ( #8648 )
2 years ago
ffa285c2e7
Fixed cluster roles for openstack cloud controller ( #8638 )
2 years ago
af7066d33c
Updated openstack cloud controller version to v1.22.0 ( #8629 )
* Updated openstack cloud controller version to match kubernetes version
* Rolled back file structure change
2 years ago
2b79be68e7
fix typo and duplicated declaration of ingressclasses ( #8591 )
2 years ago
51821a811f
MetalLB: update to v0.12.1 ( #8593 )
Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2 years ago
3effb008c9
improve validation conditions for MetalLB BGP Peers ( #8568 )
2 years ago
418fc00718
fix: kube-dns service deletion ( #8565 )
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2 years ago
1d635e04e4
Allow to specify a source address for metallb peerings, and target only some nodes using node selectors ( #8534 )
2 years ago
5695c892d0
Fix wrong port name in metallb.yml.j2 ( #8510 )
2 years ago
790448f48b
feat: update cert-manager to 1.7.0 ( #8491 )
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2 years ago
92d612c3e0
8487: Allow override of default CoreDNS zone cache ( #8488 )
Using the coredns_cluster_zone_cache_block variable
2 years ago
2bbe5732b7
Add node label to etcd metrics ( #8475 )
targetRef on endpoints surfaces as
__meta_kubernetes_endpoint_address_target_kind/__meta_kubernetes_endpoint_address_target_name
in prometheus and gets converted to the label `node` by
prometheus-operator
2 years ago
d31db847b7
feat: update local path to v0.0.21 ( #8492 )
2 years ago
9fce9ca42a
feat: upgrade azuredisk csi to v1.10.0 ( #8432 )
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2 years ago
e88aa7c96b
Add youki runtime support ( #8411 )
2 years ago
38d129a0b6
add external hcloud cloud controller manager ( #8440 )
2 years ago
392815d97c
[cert-manager] Fix missing RBAC rules for ClusterRole cert-manager-cainjector kubernetes-sigs#8104. ( #8444 )
2 years ago
e791089466
cert-manager: Fix incorrect leader election namespace lead to insufficient permission ( #8433 )
2 years ago
1a69f8c3ad
parameterized snaphot controller namespaces ( #8305 )
* Parameterized snaphot controller namespaces
* add ns yml
* add docs
* namespace
2 years ago
ccd3180a69
cert-manager: Allow to change leader election namespace for GKE Autopilot support ( #8424 )
More information:
- kubernetes-sigs/kubespray#8393
- jetstack/cert-manager#4102
- jetstack/cert-manager#3717
2 years ago
01dcbc18ac
feat: upgrade metallb to v0.11.0 ( #8420 )
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2 years ago
86953b2ac4
fix: add tolerations / affinity to cert-manager ( #8389 )
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2 years ago
73c889eb10
Fix failures of ansible-lint ( #8401 )
This fixes the following types of failures:
- empty-string-compare
- literal-compare
- risky-file-permissions
- risky-shell-pipe
- var-spacing
In addition, this changes .gitlab-ci/lint.yml to block the same issue
by using the same method at Kubespray CI.
2 years ago
f80fd24a55
Fix risky-file-permissions ( #8370 )
When running ansible-lint directly, we can see a lot of warning
message like
risky-file-permissions File permissions unset or incorrect
This fixes the warning messages.
2 years ago
52266406f8
Bump cert-manager version to v1.6.1 ( #8377 )
2 years ago
cd601c77c7
feat: upgrade metrics server to v0.5.2 ( #8338 )
Signed-off-by: Cyril Corbon <corboncyril@gmail.com>
2 years ago
6abae713f7
Update helm / kube-router and coredns ( #8382 )
* Update kube-router to 1.4.0
* Update Helm to 3.7.2
* Up coredns to 1.8.6 when k8s is 1.23.x
2 years ago
cb54eb40ce
Use a variable for standardizing kubectl invocation ( #8329 )
* Add kubectl variable
* Replace kubectl usage by kubectl variable in roles
* Remove redundant --kubeconfig on kubectl usage
* Replace unecessary shell usage with command
2 years ago
0e98814732
Configure PriorityClassName for MetalLB deployment ( #8362 )
2 years ago
c3c128352f
Remove registry-proxy ( #8327 )
2 years ago
02a89543d6
registry: add ingress support ( #8311 )
2 years ago
6aafb9b2d4
fix bad indentation ( #8314 )
2 years ago
aa9b8453a0
registry: service add clusterIP, nodePort, loadBalancer support ( #8291 )
* registry: service add clusterIP, nodePort, loadBalancer support
* modify camelcase name to underscore
* Add registry service type compatibility check
2 years ago
0e969c0b72
vSphere-CSI: update to 2.4.0 ( #8295 )
2 years ago
b396801e28
Update Cinder CSI to v1.22 ( #8296 )
2 years ago
4ef2cf4c28
Registry add TLS and authentication support ( #8229 )
* Add registry TLS support
* Add registry configmap and htpasswd auth
2 years ago
9afca43807
change dns upstream condition for coredns ( #8263 )
upstream_dns_servers should change corefile config even resolvconf_mode=docker_dns
2 years ago
46b1b7ab34
Fix k8scsi/csi-resizer repo ( #8270 )
If trying to pull k8scsi/csi-resizer image from gcr.io, we face the error
like:
$ docker pull gcr.io/k8scsi/csi-resizer:v1.0.0
Error response from daemon: Head https://gcr.io/v2/k8scsi/csi-resizer/
manifests/v1.0.0: unknown: Project 'project:k8scsi' not found or deleted.
$
We can pull the image from quay.io instead.
This fixes the issue.
2 years ago
e19ce27352
Remove ovn4nfv support ( #8265 )
2 years ago
785324827c
Set ingress-nginx default terminationGracePeriodSeconds to 5 min ( #8252 )
* set ingress-nginx default terminationGracePeriodSeconds to 5 min for the drain of connection
* Add ingress_nginx_termination_grace_period_seconds at sample inventory
2 years ago
31c7b6747b
Calico: add dependencies for 3.21.x ( #8250 )
2 years ago
7e1873d927
DeprecationWarning occurs when indentfirst=None is specified in coredns-config.yml.j2 ( #8224 )
2 years ago
e35a87e3eb
Update registry template ( #8198 )
* Add registry replica setting
* Add registry liveness and readiness probe
* Set the security context for registry
* Add registry pvc access mode option
* registry add replica requirement check
* docs: add registry replicas setting note
* Update docs/kubernetes-apps/registry.md
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
2 years ago
0263c649f4
Allow to scrape etcd metrics using a service ( #8203 )
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
3 years ago
Mulugeta Ayalew Tamiru
Mathieu Parent
Robin Wallace
Anthony Bible
rtsp
Cristian Calin
Fredrik Liv
spaced
Maciej Wereski
kakkotetsu
cyril-corbon
Tony Fouchard
Byeonggon Lee
Tristan
Ilya Margolin
Victor Morales
Johann Schley
onock
Samuel Liu
Kenichi Omichi
Florian Ruynat
Max Gautier
Unai Arríen
zhengtianbao
Antoine Gatineau
Steven Reitsma
toplordsaito
ishizuka
Mathieu Parent