Kay Yan
2a282711df
update-loadbalancers-versions ( #9100 )
2 years ago
Mohamed Zaian
91073d7379
[kubernetes] make v1.24.3 default ( #9101 )
2 years ago
Alessio Greggi
3ce5458f32
hardening: Add `SeccompDefault` admission plugin for kubelet ( #9074 )
* docs(hardening): add SeccompDefault admission plugin to kubelet feature gates
* fix(kubelet-config): enable config through kubelet_feature_gates
* feat(kubelet): add kubelet_seccomp_default variable
2 years ago
Marco Fortina
98c194735c
[kubernetes] add hashes for v1.22.12, v1.23.9 & v1.24.3 ( #9092 )
2 years ago
pil57852
626ea64f66
9052 crio add dpkg hold ( #9075 )
* Update main.yaml
* remove version in dpkg_selection name
* make lint happy
* Fix typo
* add comment / remove useless contition
* remove dpkg hold in reset tasks
2 years ago
Ajarmar
0d32c0d92b
[upcloud] Add firewall default deny policy and port allowlisting ( #9058 )
2 years ago
Mohamed Zaian
ce04fdde72
[ingress-nginx] upgrade to 1.3.0 ( #9088 )
* This release removes support for Kubernetes v1.19.0
* This release adds support for Kubernetes v1.24.0
* Starting with this release, we will need permissions on the coordination.k8s.io/leases resource for leaderelection lock
2 years ago
ERIK
4ed3c85a88
Fix calicoctl checksums for v3.23.2 ( #9087 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2 years ago
Peter Pan
14063b023c
Extend DNS memory limit. 170Mi tents to OOM ( #9084 )
2 years ago
yjqg6666
3d32f0e953
[ #9067 ] archive offline-files and support env-var NO_HTTP_SERVER to skip nginx-running ( #9068 )
2 years ago
Samuel Liu
d821bed2ea
Fix some typo ( #9056 )
* fix ingress controller task name
* fix calico word
* add check typo
2 years ago
ERIK
058e05df41
Add cri-dockerd url for offline.yml ( #9079 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2 years ago
Mohamed Zaian
a7ba7cdcd5
[calico] add v3.23.2 and make it default ( #9041 )
2 years ago
Kenichi Omichi
c01656b1e3
Allow "openSUSE Tumbleweed" to be run ( #9072 )
The commit 1ce2f04
tried to merge multiple SUSE OS checks including
"openSUSE Leap" and "openSUSE Tumbleweed" into a single SUSE, but
that was a perfect change.
Then the commit c16efc9
tried to fix it for "openSUSE Leap", but it
didn't take care of "openSUSE Tumbleweed".
Then this adds "openSUSE Tumbleweed" to the OS check.
2 years ago
Emin AKTAS
5071529a74
feat: upgrade cilium and add default variables ( #9065 )
Signed-off-by: eminaktas <eminaktas34@gmail.com>
Signed-off-by: Emin Aktas <emin.aktas@trendyol.com>
2 years ago
yasintahaerol
6d543b830a
Fix vcloud-csi bug related to #9046 ( #9066 )
* Fix vcloud-csi bug related to #9046
Signed-off-by: yasintahaerol <yasintahaerol@gmail.com>
* add supervisor-fss-namespace=kube-system flag to vsphere-csi-controller-deployment
Signed-off-by: yasintahaerol <yasintahaerol@gmail.com>
2 years ago
Cyclinder
e6154998fd
fix calico tunl0 routes test ( #9061 )
Signed-off-by: cyclinder qifeng.guo@daocloud.io
2 years ago
rptaylor
01c6239043
increase ansible fact_caching_timeout ( #9059 )
2 years ago
Emin AKTAS
4607ac2e93
fix(vsphere-csi): remove namespace env variable and set namespace as kube-system ( #9046 )
Signed-off-by: eminaktas <eminaktas34@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
Co-authored-by: Yasin Taha Erol <yasintahaerol@gmail.com>
2 years ago
Kay Yan
9ca5632582
fix-docker-option-in-centos-arm64 ( #9047 )
2 years ago
Mohamed Zaian
51195212b4
[argocd] update argocd to v2.4.3 ( #9050 )
2 years ago
Kenichi Omichi
7414409aa0
Add target components on check_readme_versions.sh ( #9045 )
This adds target components on check_readme_versions.sh after
merging https://github.com/kubernetes-sigs/kubespray/pull/9044
In addition, this fixes typo on check_readme_versions.sh
This adds `foo_version` variables for some components because
check_readme_versions.sh verifies the corresponding version for
`<component name>_version` from main.yml. This change also makes
consistency in the main.yml. In long-term, we will be able to
remove the existing `foo_image_tag` variables, but that is not now
for backwards compatibility for users.
2 years ago
Kay Yan
adfd77f11d
add-test-for-kubeadm-etcd-deployment ( #9007 )
2 years ago
Kenichi Omichi
f3ea8cf45e
Add Rocky Linux 8 support for vagrant ( #8905 )
To test Kubespray on Rocky Linux 8 with vagrant, this adds it to
the Vagrantfile.
2 years ago
h9-HSFRQDH
3bb9542606
Adding support for node & pod pid limit ( #9038 )
2 years ago
Kay Yan
1d0b3829ed
remove-etcd-unsupported-arch ( #9049 )
2 years ago
Samuel Liu
a5d7178bf8
[docs] update supported components ( #9044 )
2 years ago
Calin Cristian Andrei
cbef8ea407
[etcd] drop hashes for 3.5.2
2 years ago
Calin Cristian Andrei
2ff4ae1f08
[etcd] drop hashes for 3.5.1
2 years ago
Calin Cristian Andrei
edf7f53f76
[etcd] add etcd 3.5.4 and make it the default for 1.24.x
2 years ago
Samuel Liu
f58816c33c
[krew] update krew ( #9043 )
2 years ago
忘尘
1562a9c2ec
add missing verbs ( #9032 )
2 years ago
Kenichi Omichi
6cd243f14e
Add component version check for README.md ( #9042 )
During code-review, reviwers needed to take care of README.md also
should be updated when the pull request updated component versions.
This adds the corresponding check to reduce reviwer's burden.
2 years ago
Kay Yan
4b03f6c20f
add-managed-ntp-support ( #9027 )
2 years ago
boeto
d0a2ba37e8
update deprecated syntax ( #9040 )
* `ansible.builtin.include` removed in version 2.16
Read the `ansible.builtin.include DEPRECATED` doc:
https://docs.ansible.com/ansible/latest/collections/ansible/builtin/include_module.html#deprecated
* Update integration.md
2 years ago
Samuel Liu
e8ccbebd6f
add ingress nginx webhook ( #9033 )
* add ingress nginx webhook
* fix ingress nginx template
2 years ago
Kay Yan
d4de9d096f
fix-the-issue-of-miss-the-etcd-user ( #9016 )
2 years ago
Tom Stian Berget
e1f06dd406
Add support for the updated (startup|liveness|readiness)Probe.Port numbers in Cilium ( #9031 )
2 years ago
rptaylor
6f82cf12f5
let containerd_default_runtime be undefined by default ( #9026 )
2 years ago
Calin Cristian Andrei
ca8080a695
[crun] drop old crun versions 1.2 and 1.3
2 years ago
Calin Cristian Andrei
55d14090d0
[crun] add 1.4.5 and make it the default
2 years ago
rtsp
da8498bb6f
[cert-manager] Upgrade to v1.8.2 ( #9029 )
2 years ago
orange-llajeanne
b33896844e
apply calico bgp peer definition task to all nodes, but delegate to ( #8974 )
first control plane node
2 years ago
Calin Cristian Andrei
ca212c08de
[runc] drop hashes for 1.0.2 and 1.0.3
2 years ago
Calin Cristian Andrei
784439dccf
[runc] make 1.1.3 the new default
2 years ago
Calin Cristian Andrei
d818c1c6d9
[runc] add hashes for 1.1.3
2 years ago
Calin Cristian Andrei
b9384ad913
[runc] add hashes for 1.1.2
2 years ago
Cristian Calin
76b0cbcb4e
bump pause container to 3.6 ( #9024 )
* [pod-infra] bump pod infra container version to 3.6
* [cri-dockerd] align pod infra container image with other CRIs
2 years ago
Florian Ruynat
6bf3306401
Fixed concatenate str & int in auto_renew_certificates_systemd_calendar var ( #8979 )
2 years ago
Robin Wallace
bf477c24d3
Chnage from deprecated variable
2 years ago