f912a4ece5
Fix compare AnsibleUnsafeText with int ( #2828 )
7 years ago
d1e66f9cc8
Add label to kubelet env for kubeadm deploy cluster ( #2841 )
7 years ago
11d87ecc37
removed surnumerary definition of contiv_etcd_init_image_* (already in download role)
7 years ago
7433348aae
wip pr for improved cert sync
7 years ago
3673ed6262
include contiv_etcd_init_image to downloads role
7 years ago
f88cd27686
Add dashboard url as part of `kubectl cluster-info` output
7 years ago
2a4fc70e1c
contiv-etcd-init image as default instead hardcoded
7 years ago
38f7ba2584
Fix enough network address space assert
7 years ago
095d33bc51
Remove KPM support
7 years ago
821966b319
Update Helm version to 2.9.1
7 years ago
c1bc4615fe
assert that number of pods on node does not exceed CIDR address range
The number of pods on a given node is determined by the --max-pods=k
directive. When the address space is exhausted, no more pods can be
scheduled even if from the --max-pods-perspective, the node still has
capacity.
The special case that a pod is scheduled and uses the node IP in the
host network namespace is too "soft" to derive a guarantee.
Comparing kubelet_max_pods with kube_network_node_prefix when given
allows to assert that pod limits match the CIDR address space.
7 years ago
eba486f229
add posibility to provide different yum repository directory ( #2787 )
7 years ago
7c93e71801
Upgrade k8s to 1.10.2 ( #2748 )
* Upgrade k8s to 1.10.2
Bumped etcd version to 3.2.16 as recommended
* Add ipvs fix for v1.10
* change flannel addons test to ha
7 years ago
eae4fa040a
Added docker_mount_flags option ( fixes #2624 )
7 years ago
73800ef111
make certificates non-executable
7 years ago
742a8782dd
Bump kube-dns to 1.14.10
Upgrade kube-dns to 1.14.10
https://github.com/kubernetes/kubernetes/tree/master/cluster/addons/dns
7 years ago
49d106f615
make admin.conf -> .kube/config non-executable
Almost certainly, the .kube/config file (YAML) should not be executable.
7 years ago
ad48606e4e
Restart scheduler when policy changes
7 years ago
07cc981971
refactor vault role ( #2733 )
* Move front-proxy-client certs back to kube mount
We want the same CA for all k8s certs
* Refactor vault to use a third party module
The module adds idempotency and reduces some of the repetitive
logic in the vault role
Requires ansible-modules-hashivault on ansible node and hvac
on the vault hosts themselves
Add upgrade test scenario
Remove bootstrap-os tags from tasks
* fix upgrade issues
* improve unseal logic
* specify ca and fix etcd check
* Fix initialization check
bump machine size
7 years ago
7df5edef52
Fix path for pip and python
7 years ago
7507031cb1
CoreOS bootstrap: set bin_dir and PATH for pip.
7 years ago
066016cd3e
opensuse: Fix OpenSSL package name
OpenSSL 1.1 package in openSUSE Tumbleweed is named openssl-1_1,
not openssl-1_1_0.
7 years ago
1a47a9b850
Update CoreDNS to version 1.1.2
7 years ago
32a8ea8094
Fix wrong var used
7 years ago
fb465f8b4b
Use 'items()' for python compatibility
7 years ago
3501eb6916
ingress-nginx: Upgrade to 0.14.0
7 years ago
00db751646
Add Openstack tenant name
7 years ago
59789ae02a
ISSUE-2706: Provide consistent usage of supplementary_addresses_in_ssl_keys across vault and script mode ( #2707 )
7 years ago
06cdb260f6
labelvalue must be formatted to handle non string values ( #2722 )
7 years ago
c3c5817af6
sysctl file should be in defaults so that it can be overriden ( #2475 )
* sysctl file should be in defaults so that it can be overriden
* Change sysctl_file_path to be consistent with roles/kubernetes/preinstall/defaults/main.yml
7 years ago
9168c71359
Revert "Revert "Add openSUSE support" ( #2697 )" ( #2699 )
This reverts commit 51f4e6585a
7 years ago
1a14f1ecc1
Fix vol format for local volume provisioner in rkt ( #2698 )
7 years ago
44cb126e7d
Update netchecker to v1.2.2.
Using official image from mirantis at dockerhub.
7 years ago
51f4e6585a
Revert "Add openSUSE support" ( #2697 )
7 years ago
f81e6d2ccf
Add oidc-user-prefix and oidc-group-prefix args
7 years ago
80dd230a65
sync certs tasks ( fix #2596 #2667 )
7 years ago
75950344fb
run_once pre_upgrade tasks which are executing in localhost
7 years ago
0945eb990a
Make it possible to skip docker role as a var ( #2686 )
7 years ago
49c6bf8fa6
support custom env vars for etcd
7 years ago
296b92dbd4
Replaced 'mem' with 'memory/ in elasticsearch and kibana deployment
7 years ago
756af57787
Properly check need_pip, always run pip to check if needed
pip was always being downloaded on subsequent runs, This PR always runs the pip command, and checks the rc of it before downloading pip
Fix in favor of #2582
7 years ago
d435e17681
cephfs-provisioner: Upgrade to a71a49d4
7 years ago
23e9737b85
ingress-nginx: Upgrade to 0.13.0
7 years ago
54beb27eaa
cert-manager: Upgrade to v0.2.4
7 years ago
7968437a65
Weave: Upgrade to 2.3.0
7 years ago
02cd5418c2
Weave limits ( #2660 )
* Raise limits for weave
* Adjust weave limits
7 years ago
49e3665d96
Remove prometheus operator from Kubespray ( #2658 )
Kubespray should not install any helm charts. This is a task
that a user should do on his/her own through ansible or another
tool. It opens the door to wrapping installation of any helm
chart.
7 years ago
e95ba800ea
Define local volume provisioner dirs in defaults ( #2656 )
7 years ago
f73717ea35
Mount local volume provisioner dirs for containerized kubelet ( #2648 )
7 years ago
d87b6fd9f3
Use dedicated front-proxy-ca for front-proxy-client
7 years ago
Dmitry
Rong Zhang
Erwan Miran
Matthew Mosesohn
Julien Girardin
Oleg Ozimok
Miouge1
Mikhail Vasilenko
Christopher J. Ruwe
Aivars Sterns
Matthew Mosesohn
Anatoly Rugalev
woopstar
Cédric de Saint Martin
Michal Rostecki
ashon
Wong Hoi Sing Edison
Maxime Gaillard
Tomasz Majchrowski
mirwan
Markos Chandras
Cédric de Saint Martin
Suzuka Asagiri
Romain DEQUIDT
Paul Montero
Spencer Smith
Samuel Vandamme
Chad Swenson