kubespray

Commit Graph

Author	SHA1	Message	Date
Samuel Liu	1294fd5730	check calico ipv6 (#8738 ) * check calico ipv6 * just check ipip mode for ipv6	2 years ago
zhengtianbao	937e64d296	Update flannel use install-cni-plugin to fit upstream (#8714 ) * Update flannel use install-cni-plugin to fit upstream * Replace flannel cni repo * Remove download flannel binary	2 years ago
Cristian Calin	45262da726	[calico] call calico checks early on to prevent altering the cluster with bad configuration (#8707 )	2 years ago
Samuel Liu	424ef3b3f9	[calico] add calico apiserver (#8690 ) * [calico] add calico apiserver * fix yamllint * remove addext argument * Configure API server with the CA bundle * add check kdd	2 years ago
Cristian Calin	dd2d95ecdf	[calico] don't enable ipip encapsulation by default and use vxlan in CI (#8434 ) * [calico] make vxlan encapsulation the default * don't enable ipip encapsulation by default * set calico_network_backend by default to vxlan * update sample inventory and documentation * [CI] pin default calico parameters for upgrade tests to ensure proper upgrade * [CI] improve netchecker connectivity testing * [CI] show logs for tests * [calico] tweak task name * [CI] Don't run the provisioner from vagrant since we run it in testcases_run.sh * [CI] move kube-router tests to vagrant to avoid network connectivity issues during netchecker check * service proxy mode still fails connectivity tests so keeping it manual mode * [kube-router] account for containerd use-case	2 years ago
Qasim Mehmood	5a486a5cca	Calico: Fix Wireguard support for CentOS Stream 9/RHEL 9 Beta (#8625 )	2 years ago
Toni Tauro	5a49ac52f9	feat(calico): add configurable ipam strictaffinity (#8581 ) Signed-off-by: Toni Tauro <toni.tauro@adfinis.com>	2 years ago
Tom Janson	ddef7e1139	missing "check_mode: no"s for several read-only tasks (#8584 ) this is not complete -- there are almost certainly more instances of this issue	2 years ago
Florian Ruynat	4f1499bd23	Fixup remaining etcd_kubeadm_enabled variables (#8576 )	2 years ago
Cristian Calin	402e85ad6e	[calico] upgrade release checksums (#8544 ) * [calico] upgrade 3.19.x to 3.19.4 * [calico] upgrade 3.20.x to 3.20.4 * [calico] upgrade 3.21.x to 3.21.4 and make it the default * [calico] add 3.22.0 checksums * [calico] account for path changes in calico 3.21.4 crd archive and above	2 years ago
kakkotetsu	1ebe456f2d	add support for Calico IP6_AUTODETECTION_METHOD (#8541 )	2 years ago
Tom Stian Berget	84b93090a8	Change Cilium setting identity_allocation_mode to cilium_identity_allocation_mode (#8519 ) * Change Cilium identity_allocation_mode to cilium_identity_allocation_mode * Change inventory sample	2 years ago
Cristian Calin	ef34f5fe7d	[calico] switch default iptables backend detection to Auto (#8429 )	2 years ago
Necatican Yıldırım	caff539ccd	Add identity_allocation_mode support for Cilium (#8430 ) Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com> Signed-off-by: necatican <necaticanyildirim@gmail.com> Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>	2 years ago
Kenichi Omichi	73c889eb10	Fix failures of ansible-lint (#8401 ) This fixes the following types of failures: - empty-string-compare - literal-compare - risky-file-permissions - risky-shell-pipe - var-spacing In addition, this changes .gitlab-ci/lint.yml to block the same issue by using the same method at Kubespray CI.	2 years ago
forselli-stratio	df425ac143	Fix etcd certificates reference to support etcd_kubeadm_enabled:true (#7766 ) * Fix etcd certificates reference to support etcd_kubeadm_enabled:true * Add retries to ETCD Join Member task * Fix etcd certificates reference when etcd_kubeadm_enabled:true * Fix conflicts	2 years ago
Unai Arríen	57a1d18db3	Improve first_kube_control_plane variable management to avoid installation failures due to variable overlapping (#8388 )	2 years ago
Kenichi Omichi	f80fd24a55	Fix risky-file-permissions (#8370 ) When running ansible-lint directly, we can see a lot of warning message like risky-file-permissions File permissions unset or incorrect This fixes the warning messages.	2 years ago
Max Gautier	cb54eb40ce	Use a variable for standardizing kubectl invocation (#8329 ) * Add kubectl variable * Replace kubectl usage by kubectl variable in roles * Remove redundant --kubeconfig on kubectl usage * Replace unecessary shell usage with command	2 years ago
Necatican Yıldırım	bf00550388	Upgrade Cilium to 1.11.0 (#8354 ) * Remove kvstore args from Cilium DaemonSet Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com> Signed-off-by: necatican <necaticanyildirim@gmail.com> * Bump Cilium to 1.11.0 Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com> Signed-off-by: necatican <necaticanyildirim@gmail.com> Co-authored-by: Emin Aktaş <eminaktas34@gmail.com> Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>	2 years ago
Cristian Calin	ed3932b7d5	[cni-plugins] upgrade to stable 1.0.1 (#8331 ) * [cni-plugins] upgrade to stable 1.0.1 * [flannel] use binary from dedicated project	2 years ago
emiran-orange	2b5c185826	calico_pool_blocksize must be cast as well in assertion when defined (#8321 ) * calico_pool_blocksize must be cast as string in assertion when defined * Cast as int rather than string	2 years ago
kakkotetsu	c59407f105	add support for Calico BGPPeer sourceAddress (#8306 )	2 years ago
Alvaro Campesino	27ab364df5	Improve control plane scale flow (#13 ) (#7989 ) * Improve control plane scale flow (#13) * Added version 1.20.10 of K8s * Setting first_kube_control_plane to a existing one * Setting first_kube_control_plane to a existing one * change first_kube_master for first_kube_control_plane * Ansible-lint changes	2 years ago
Cristian Calin	dfdebda0b6	Calico: remove duplicate values for CALICO_DISABLE_FILE_LOGGING and FELIX_DEFAULTENDPOINTTOHOSTACTION (#8269 )	2 years ago
Florian Ruynat	e19ce27352	Remove ovn4nfv support (#8265 )	2 years ago
Cristian Calin	31c7b6747b	Calico: add dependencies for 3.21.x (#8250 )	2 years ago
khatrig	3ea496013f	Create reset.yml (#8227 )	2 years ago
zhengtianbao	a08d82d94e	calico add support for container ip forwarding setting (#8184 )	3 years ago
Hyojun Jeon	61c2ae5549	Add vxlanEnabled spec in FelixConfiguration (#8167 )	3 years ago
brainfair	465ffa3c9f	Weave: add extra_args for weave-npc (#8140 ) * add weave_npc_extra_args in template * add defaults weave_npc_extra_args * add sample for weave_npc_extra_args	3 years ago
Julio H Morimoto	d42b7228c2	Convert numbers to string for calico's inventory check. (#8120 ) Fix https://github.com/kubernetes-sigs/kubespray/issues/8119 Signed-off-by: Julio Morimoto <julio@morimoto.net.br>	3 years ago
Kenichi Omichi	19d07a4f2e	Fix ownership related to Calico (#8072 ) kube-bench scan outputs warning related to Calico like: * text: "Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)" * text: "Ensure that the Container Network Interface file ownership is set to root:root (Manual)" This fixes these warnings.	3 years ago
Florian Ruynat	16bf3549c1	Update kube-ovn to 1.8.1	3 years ago
Florian Ruynat	b912dafd7a	Update multus to 3.8.0	3 years ago
Iago Santos	43958614e3	Fix kubespray flatcar ansible_os_family and ansible_distribution (#8029 ) Closes https://github.com/kubernetes-sigs/kubespray/issues/8028 Signed-off-by: Iago Santos <iago.santos.pardo@adfinis.com>	3 years ago
Frank Filippone	eee2eb11d8	Update weave template to match source for 2.8.1 (#8013 )	3 years ago
David Louks	1472528f6d	check if 'plugins' key exists in calico_cni_config object (#7717 ) * check if 'plugins' key exists in calico_cni_config object * fix whitespace linting error * fixed when list indentation	3 years ago
Florian Ruynat	ecd267854b	Move ovn4nvf crd from v1beta1 to v1 (#8006 )	3 years ago
Eric Lake	ddea79f0f0	Issue 8004: Fix typha prometheus (#8005 ) The typha prometheus settings were in the `volumeMounts` section of the spec and not in the `envs` section. This was cauing the deployment to fail because it was looking for a volumeMount. ``` failed: [controller-001.a2.da.dev.logdna.net] (item=calico-typha.yml) => {"ansible_loop_var": "item", "changed": false, "item": {"ansible_loop_var": "item", "changed": true, "checksum": "598ac79530749e8e2110793b53fc49ac208e7130", "dest": "/etc/kubernetes/calico-typha.yml", "diff": [], "failed": false, "gid": 0, "group": "root", "invocation": {"module_args": {"_original_basename": "calico-typha.yml.j2", "attributes": null, "backup": false, "checksum": "598ac79530749e8e2110793b53fc49ac208e7130", "content": null, "delimiter": null, "dest": "/etc/kubernetes/calico-typha.yml", "directory_mode": null, "follow": false, "force": true, "group": null, "local_follow": null, "mode": null, "owner": null, "regexp": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/core/.ansible/tmp/ansible-tmp-1632349768.56-75434-32452975679246/source", "unsafe_writes": null, "validate": null}}, "item": {"file": "calico-typha.yml", "name": "calico", "type": "typha"}, "md5sum": "53c00ac7f562cf9ecbbfd27899ea066d", "mode": "0644", "owner": "root", "size": 5378, "src": "/home/core/.ansible/tmp/ansible-tmp-1632349768.56-75434-32452975679246/source", "state": "file", "uid": 0}, "msg": "error running kubectl (/opt/bin/kubectl --namespace=kube-system apply --force --filename=/etc/kubernetes/calico-typha.yml) command (rc=1), out='service/calico-typha unchanged\n', err='error: error validating \"/etc/kubernetes/calico-typha.yml\": error validating data: [ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[2]): unknown field \"value\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[2]): missing required field \"mountPath\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[3]): unknown field \"value\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[3]): missing required field \"mountPath\" in io.k8s.api.core.v1.VolumeMount]; if you choose to ignore these errors, turn validation off with --validate=false\n'"} ```	3 years ago
Léopold Jacquot	598f178054	Fix cilium operator metrics activation (#8000 )	3 years ago
Cristian Calin	fb8662ec19	Calico: update versions 3.20.1, 3.19.3 (#7984 ) * make Calico 3.20.1 the default version * drop Calico 3.17.x support	3 years ago
Cristian Calin	ae44aff330	Calico: increase calico node probe timeouts and allow tunning (#7981 )	3 years ago
Florian Ruynat	60853fa682	Update kube-ovn to 1.7.2	3 years ago
Ole Mathias Aa. Heggem	69b67a293a	Calico: Add kube_service_addresses_ipv6 to serviceClusterIPs (#7889 ) (#7944 ) Add IPv6 Service Addresses to BGP advertisement when calico_advertise_cluster_ips is true.	3 years ago
Olivier Lemasle	497d2ca306	Fix Calico's FelixConfiguration when "IP in IP" is disabled (#7926 ) When using Calico with: - `calico_network_backend: vxlan`, - `calico_ipip_mode: "Never"`, - `calico_vxlan_mode: "Always"`, the `FelixConfiguration` object has `ipipEnabled: true`, when it should be false: This is caused by an error in the `\| bool` conversion in the install task: when `calico_ipip_mode` is `Never`, `{{ calico_ipip_mode != 'Never' \| bool }}` evaluates to `true`:	3 years ago
Cristian Calin	1c3d33e146	Calico: 3.20.0 policy update to allow access to endpointslices (#7899 )	3 years ago
Sergey	5336943a8c	add cilium_operator_api_serve_addr to cilium operator config (#7901 )	3 years ago
Cristian Calin	0ac364dfae	Calico: use --allow-version-mismatch in calicoctl.sh to allow upgrades (#7873 )	3 years ago
Florian Ruynat	000b4565c2	Fix erroneous ansible args	3 years ago

1 2 3 4 5 ...

634 Commits (b6e2c56ae616a12dfd21c3775e7f36773681da9f)