kubespray

Commit Graph

Author	SHA1	Message	Date
lijin-union	c272421910	Add UOS linux support (#9432 )	2 years ago
biqiang Wu	78624c5bcb	When using cilium CNI, install Cilium CLI (#9436 ) Signed-off-by: dcwbq <biqiang.wu@daocloud.io> Signed-off-by: dcwbq <biqiang.wu@daocloud.io>	2 years ago
biqiang Wu	c681435432	Add switch cilium_enable_bandwidth_manager (#9441 ) Signed-off-by: dcwbq <biqiang.wu@daocloud.io> Signed-off-by: dcwbq <biqiang.wu@daocloud.io>	2 years ago
杨刚	4d3f637684	Remove PodSecurityPolicies in Metallb for kubernetes 1.25 (#9442 )	2 years ago
Olivier Lemasle	5e14398af4	Upgrade ruamel.yaml.clib to work with Python 3.11 (#9426 ) ruamel.yaml.clib did not build with the upcoming Python 3.11. Cf. https://sourceforge.net/p/ruamel-yaml-clib/tickets/9/ ruamel.yaml.clib==0.2.7 fixes the issue.	2 years ago
蒋航	990f87acc8	Update kube-vip to v0.5.5 (#9437 ) Signed-off-by: hang.jiang <hang.jiang@daocloud.io> Signed-off-by: hang.jiang <hang.jiang@daocloud.io>	2 years ago
William Turner	eeb376460d	Fix inconsistent handling of admission plugin list (#9407 ) * Fix inconsistent handling of admission plugin list * Adjust hardening doc with the normalized admission plugin list * Add pre-check for admission plugins format change * Ignore checking admission plugins value when variable is not defined	2 years ago
Kay Yan	ef707b3461	update-containerd-1.6.9 (#9427 )	2 years ago
Mohamed Zaian	2af918132e	Update kubernetes dashboard to 2.7.0 (k8s 1.25 support) (#9425 )	2 years ago
Mohamed Zaian	b9b654714e	[nerdctl] upgrade to version 1.0.0 (#9424 )	2 years ago
Mohamed Zaian	fe399e0e0c	[etcd] add 3.5.5 hashes, make it default for k8s 1.25 (#9419 )	2 years ago
杨刚	b192053e28	as argocd 2.4.15 is releasesd , update the version (#9420 )	2 years ago
杨刚	a84271aa7e	etcd arch can support arm64 and amd64 (#9421 )	2 years ago
Wouter Goedhart	1901b512d2	Make the port of kube-vip dynamic based on the kube_apiserver_port (#9414 ) variable Fix wrong referenced variable on bgp_peers Fix bgp_peeras field to be a string Set default value for bgp_peeras	2 years ago
ERIK	9fdda7eca8	Fix iputils install failure in Kylin OS (#9416 ) Signed-off-by: bo.jiang <bo.jiang@daocloud.io> Signed-off-by: bo.jiang <bo.jiang@daocloud.io>	2 years ago
ERIK	a68ed897f0	Update kubelet checksum (#9413 ) Signed-off-by: bo.jiang <bo.jiang@daocloud.io> Signed-off-by: bo.jiang <bo.jiang@daocloud.io>	2 years ago
Florian Ruynat	582ff96d19	Update docker version to 20.10.20 (#9410 )	2 years ago
Kenichi Omichi	0374a55eb3	Specify securityContext for cert-manager (#9404 ) On hardening environments, cert-manager pods could not be created from the corresponding deployments. This adds the securityContext to solve the issue.	2 years ago
Kay Yan	ccbe38f78c	make-kube-1.25-default (#9364 )	2 years ago
Vladimir	958840da89	Add var for control initialDelaySeconds in nginx ingress probe (#9405 ) Signed-off-by: Zemtsov Vladimir <vl.zemtsov@gmail.com> Signed-off-by: Zemtsov Vladimir <vl.zemtsov@gmail.com>	2 years ago
Cristian Calin	1530411218	use cri-o from upstream instead of kubic/OBS (#9374 ) * [cri-o] use cri-o from upstream instead of kubic/OBS * [cri-o] add proper molecule coverage * [skopeo] download skopeo from upstream build * [cri-o] clean up legacy deployments * disable cri-o per-distribution variables	2 years ago
Kenichi Omichi	e5ec0f18c0	Add packet_ubuntu20-calico-aio-hardening (#9359 ) To verify the hardening method works always. The configuration comes from docs/hardening.md Fix yaml format of hardening.yml Add condition to skip 040 test for hardening	2 years ago
Mohamed Zaian	0f44e8c812	[ingress-nginx] upgrade to 1.4.0 (#9403 )	2 years ago
Kay Yan	1cc0f3c8c9	mirror-for-china	2 years ago
Maxime Leroy	d9c39c274e	fix(defaults): wrong cri_socket path for containerd (#9401 )	2 years ago
Kenichi Omichi	c38fb866b7	Update securityContext of netchecker (#9398 ) To run netchecker with necessary privilege, this updates the securityContext.	2 years ago
Mohamed Zaian	5ad1d9db5e	[kubernetes] Add hashes for 1.25.3, 1.24.7, 1.23.13 and make v1.24.7 default (#9397 )	2 years ago
Kay Yan	32f3d92d6b	Remove PodSecurityPolicies in Calico (#9395 )	2 years ago
Kenichi Omichi	72b45eec2e	Use agnhost instead of busybox for network test (#9390 ) busybox container requires a root permission for ping. For testing hardening method at CI, we need to switch to another image which doesn't require the root permission for network testing. On kubernetes/kubernetes repo, we are using agnhost which doesn't require it. So this makes the test use aghhost image. In addition, this updates the test manifest to specify securityContext without any privilege.	2 years ago
Cristian Calin	23716b0eff	don't define kubeadm_patches by default (#9372 )	2 years ago
Kay Yan	859df84b45	remove-psp-in-flannel (#9365 )	2 years ago
Kay Yan	131bd933a6	Fix ensure ping package error in fedora CoreOS & Flatcar (#9370 ) * fix-ensure-package-in-coreos * clean blank line	2 years ago
Unai Arríen	52904ee6ad	Avoid MetalLB speaker image download when MetalLB speaker is disabled (#9248 ) * Avoid MetalLB speaker image download when metallb_speaker_enabled is set to * Move metallb_speaker_enabled var to allow outside metalLB role references * Move metallb_speaker_enabled var to allow outside metalLB role references * Improve metallb_speaker_enabled default values	2 years ago
Kay Yan	e3339fe3d8	update_calico_doc_for_the_ChecksumOffloadBroken (#9388 )	2 years ago
ghostloda	547ef747da	fix helm install with password authentication (#9343 )	2 years ago
Kenichi Omichi	63b27ea067	Fix YAML format in hardening.md (#9387 ) When trying to add a hardening CI job by copying configuration from hardening.md, yamllint CI job deleted invalid format. This fixes it for maintaining the CI job.	2 years ago
ERIK	bc5881b70a	Add the cilium hubble images to download role (#9376 ) Signed-off-by: bo.jiang <bo.jiang@daocloud.io> Signed-off-by: bo.jiang <bo.jiang@daocloud.io>	2 years ago
Kenichi Omichi	f4b95d42a6	Add note for containerd oom_score (#9384 ) When we saw 0 as the default value of containerd_oom_score, we had a question why the value was not -999. This adds the note to explain it.	2 years ago
Unai Arríen	ef76a578a4	Change dns upstream condition for nodelocaldns (#9378 )	2 years ago
Piotr Kowalczyk	3b99d24ceb	Fix: install calico-kube-controller on kdd (#9358 ) * Fix: install policy controller on kdd too * Remove the calico_policy_version condition altogether * Install policy controller both on canal and calico under same condition	2 years ago
Kay Yan	4701abff4c	upgrade-api-version-for-PodDisruptionBudget (#9369 )	2 years ago
Joe Siponen	717b8daafe	Download coredns image to all hosts in k8s_cluster (#9316 ) Coredns image must be available everywhere as it may be rescheduled to a non-control-plane-node.	2 years ago
Kevin Huang	c346e46022	fix(cinder-csi-nodeplugin): Remove the pods-cloud-data volume (#9362 )	2 years ago
Kenichi Omichi	24632ae81b	Add check_typo job (#9361 ) To block merging pull requests which contain typo automatically.	2 years ago
JSpon	befde271eb	Use hostname override in post-remove role, just as pre-remove role does (#9360 )	2 years ago
Huang Chen-Yi	d689f57c94	Features/support kubeadm patches v1beta3 (#9326 ) * Support kubeadm patches in v1beta3 * Update kubeadm patches sample files in inventory * Fix pre-commit syntax * Set kubeadm_patches enabled to false in sample inventory	2 years ago
William Turner	ad3f503c0c	Fix default value for kubelet_secure_addresses (#9355 )	2 years ago
Kay Yan	ae6c780af6	add-Kubean (#9352 )	2 years ago
Eugene Artemenko	8b9cd3959a	Add possibility to skip adding load balancer name in the hosts file (#9331 )	2 years ago
Emin AKTAS	dffeab320e	feat: add a paramater to disable host nameservers (#9357 ) Signed-off-by: eminaktas <eminaktas34@gmail.com> Signed-off-by: eminaktas <eminaktas34@gmail.com>	2 years ago

1 2 3 4 5 ...

6849 Commits (bca601d37739b4e6d1837eeb1dacc36adea35109) All Branches Search

6849 Commits (bca601d37739b4e6d1837eeb1dacc36adea35109)

All Branches