rongzhang
2609ec0dc3
Fix copy etcd-ssl-ca failed
6 years ago
rongzhang
16fc22a207
Fix ipvs by kubeadm v1alpha1
6 years ago
rongzhang
35e5adaf0a
Fix kubeadm v1alpha1 configure
6 years ago
Fernando Crespo Grávalos
ac4ef719cc
canal should mount xtables.lock to share the lock with other processes like kube-proxy
6 years ago
Erwan Miran
ceb97e5809
Fix wrong syntax for jinja sub list extraction and addition of missing role template
6 years ago
rongzhang
9eade647e6
Fix kubeadm lb
6 years ago
Robin Elfrink
bbdd1c8f06
Add option to change the Tiller Deployment namespace.
6 years ago
Takashi Okamoto
c0dfa72707
Separate RedHat specific vars for cri-o.
6 years ago
Arslanbekov Denis
fe1e758856
Up dashboard version to 1.10.0
6 years ago
Erwan Miran
52ab54eeea
Fix missing quotes for audit-log-path and wrong placement of feature-gates
6 years ago
Takashi Okamoto
d407a590a6
container_manager variable to specify runtime.
6 years ago
Takashi Okamoto
5eb805f098
Change timeout for kubeadm 600s.
* kubeadm timeout is too short and it may interrupt by timeout.
6 years ago
Takashi Okamoto
dfdcb56784
Delete all cri-o containers when execute reset.yml.
6 years ago
Takashi Okamoto
236f066635
kubeadm cri-o support.
6 years ago
Takashi Okamoto
5ab8a712d9
Add download_container flag to avoid docker pull when use cri-o.
6 years ago
Takashi Okamoto
cf7b9cfeef
Support crio in kubelet service.
6 years ago
Takashi Okamoto
6090af29e7
Add cri-o role.
6 years ago
Takashi Okamoto
359009bb05
Download etcd and hyperkube binary.
6 years ago
Takashi Okamoto
bdbfa4d403
Add ipvs support for kubeadm 1.10 or later.
6 years ago
Takashi Okamoto
6849788ebc
Fix copy ca cert and ca key for kubeadm.
6 years ago
Takashi Okamoto
ac639b2a17
Change kubeadm config to run etcd by kubeadm.
6 years ago
Takashi Okamoto
b18ed5922b
Add etcd default value in kubespray-default.
6 years ago
Erwan Miran
b395bb953f
Fix wrong when condition that ends up with jinja error when the content of /etc/hosts contains parenthesis
6 years ago
Erwan Miran
b652792a93
/root/.kube must to mounted in order for helm to read kubeconfig and not fallback to localhost:8080
6 years ago
Maxime Brunet
33135f2ada
k8s/preinstall: Turn AND condition into a list
6 years ago
Erwan Miran
1432e511a2
same work with less lines
6 years ago
Vasilis Remmas
b61eb7d7f3
Add ETCD_QUOTA_BACKEND_BYTES environment variable
6 years ago
Aivars Sterns
1567a977c3
Revert "gen_certs_script: refactor using stdin (Ansible 2.4+)"
6 years ago
Samuele Chiocca
cb8be37f72
fix on v1alpha1
6 years ago
Samuele Chiocca
e5dd4e1e70
added on v1alpha1
6 years ago
ant31
1da5926a94
Use xenial repo for ubuntu18
6 years ago
rongzhang
7b61a0eff0
Fix kubeadm LB configure
1. join node add LB discoveryTokenAPIServers
2. kubeadm_config_api_fqdn support ipddress and domain_name
6 years ago
Aivars Sterns
23fd3461bc
calico upgrade to v3 ( #3086 )
* calico upgrade to v3
* update calico_rr version
* add missing file
* change contents of main.yml as it was left old version
* enable network policy by default
* remove unneeded task
* Fix kubelet calico settings
* fix when statement
* switch back to node-kubeconfig.yaml
6 years ago
msimonin
e22e15afda
Fix createhome directory for adduser role
A typo in the adduser role prevents the createhome
variable to be taken into account.
Fix #3164
6 years ago
Tatsuyuki Ishi
69786b2d16
gen_certs_script: refactor using stdin (Ansible 2.4+)
6 years ago
rongzhang
5a4352657d
Fix install audit failed
1.fix audit log not write
2.fix Parameter not recognized
3.delete kubedm futuregates auditing and use apiServerExtraArgs
6 years ago
Samuele Chiocca
f13bc796d9
added nodePortAddresses on kubeadm conf v1alpha2 (not present on v1alpha1)
6 years ago
Erwan Miran
a6a14e7f77
create the service account and roles even if the rbac is not enabled. it will just be ignored
6 years ago
Erwan Miran
80cfeea957
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
6 years ago
ant31
2c90208486
Fix docker apt-repo for Ubuntu18
6 years ago
Samuele Chiocca
5d9908c2c3
--nodeport-addresses added on kube-proxy.manifest.j2
Changed author
6 years ago
Erwan Miran
a7b0c454db
Localhost in hosts files should be updated (if necessary), not overriden
6 years ago
Wong Hoi Sing Edison
c3b3572025
Always create service account even rbac_enabled = false
6 years ago
Wong Hoi Sing Edison
f897596844
Remove *_image_tag suffix from ReplicaSet/Deployment
6 years ago
john
6df71956c4
new cilium stable version: 1.2.0
6 years ago
Jeff Bornemann
94df70be98
Cloud provider support for OCI (Oracle Cloud Infrastructure)
Signed-off-by: Jeff Bornemann <jeff.bornemann@oracle.com>
6 years ago
Mark Eisenblaetter
0c0a2138d9
allow '.' in hostnames
we use FQDN as inventory_hostname
6 years ago
Erwan Miran
fc38b6d0ca
Ability to define custom audit polcy rules
6 years ago
Erwan Miran
c34900e569
Define apiserver flags directly instead of relying on auditPolicy section in order to have the ability to redirect audit log to stdout with kubeadm
6 years ago
Wong Hoi Sing Edison
71fdc257bc
cephfs-provisioner: Upgrade to v2.0.1-k8s1.11
6 years ago