kyrie
d0f1d520ec
update calico template ( #11634 )
Signed-off-by: KubeKyrie <shaolong.qin@daocloud.io>
7 months ago
dependabot[bot]
bb7b4e0c7c
build(deps): bump tox from 4.23.0 to 4.23.2 ( #11670 )
Bumps [tox](https://github.com/tox-dev/tox ) from 4.23.0 to 4.23.2.
- [Release notes](https://github.com/tox-dev/tox/releases )
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst )
- [Commits](https://github.com/tox-dev/tox/compare/4.23.0...4.23.2 )
---
updated-dependencies:
- dependency-name: tox
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
7 months ago
Robert Volkmann
5988ba0890
Add hashes for crictl 1.30.1 and 1.31.1 ( #11661 )
7 months ago
Robert Volkmann
87270ebf26
Add hashes for Kubernetes 1.31.2 (new default), 1.30.6 and 1.29.10 ( #11662 )
7 months ago
ChengHao Yang
e119863e04
Fix `debian11-custom-cni` failing test & upgrade `debian12-custom-cni-helm` chart version ( #11654 )
* Test: update custom_cni values
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Test: fix cilium require kube_owner set to root
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Test: update custom_cni render manifests
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Test: fix render template pre-commit
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Test: update debian12-custom-cni-helm chart version to 1.16.3
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
---------
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
7 months ago
dependabot[bot]
99c620d510
build(deps): bump tox from 4.21.2 to 4.23.0 ( #11652 )
Bumps [tox](https://github.com/tox-dev/tox ) from 4.21.2 to 4.23.0.
- [Release notes](https://github.com/tox-dev/tox/releases )
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst )
- [Commits](https://github.com/tox-dev/tox/compare/4.21.2...4.23.0 )
---
updated-dependencies:
- dependency-name: tox
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
7 months ago
Erwan Miran
daa9411b91
Make cri-dockerd log level configurable ( #11646 )
7 months ago
ChengHao Yang
d1417d54ce
Feat: CoreDNS upgrade to v1.11.3 ( #11653 )
* Feat: bump CoreDNS version to v1.11.3
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Docs: update README.md CoreDNS version to v1.11.3
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
---------
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
7 months ago
kyrie
693eb74f52
fix kube-vip container securityContext ( #11647 )
7 months ago
Robert Volkmann
5aea2abc40
Bump containerd to 1.7.23 ( #11642 )
7 months ago
dependabot[bot]
87fc2b88d8
build(deps): bump ansible from 9.10.0 to 9.11.0 ( #11632 )
Bumps [ansible](https://github.com/ansible-community/ansible-build-data ) from 9.10.0 to 9.11.0.
- [Changelog](https://github.com/ansible-community/ansible-build-data/blob/main/docs/release-process.md )
- [Commits](https://github.com/ansible-community/ansible-build-data/compare/9.10.0...9.11.0 )
---
updated-dependencies:
- dependency-name: ansible
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
7 months ago
Kubernetes Prow Robot
daa2144de3
Merge pull request #11601 from tico88612/feat/crio-default-crun
Feat: CRI-O v1.31 change default runtime to crun
7 months ago
ChengHao Yang
687fa3dbed
Fix: cannot stop & remove all cri containers via remove_node.yml ( #11631 )
Before adding these changes, `ansible_facts.services["containerd.service"]` will not defined and fail to check for triggering the container stop and delete behaviors.
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
7 months ago
Alexander
616e4b40db
replace deprecated unarchive.copy with unarchive.remote_src ( #11207 )
7 months ago
Nicolas Marcq
4e62e36f3a
Multus configuration add namespace isolation ( #11605 )
#11594
7 months ago
ChengHao Yang
faa0816b95
Feat: make CRI-O's default runtime configurable
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
7 months ago
Max Gautier
b4768cfa91
Always copy cert generation scripts to first etcd ( #11612 )
If we don't, existing installation would not pick up fix to that script,
such as dc33a1971d
.
7 months ago
ChengHao Yang
a16d7b4365
Test: revert accidental deletion Fedora 39 CRI-O CI ( #11611 )
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
7 months ago
Seena Fallah
7f90fc7b12
containerd: simplify registry mirror template ( #11326 )
Simplify registry mirror rendering in config.toml.
The map filter can extract the host list from mirrors so we can
just unique them and render them without needing to construct vars
for it.
For the registry mirror tls section, we can first extract mirrors
from the dict then filter on only the ones having skip_veridy defined
first and then filter on the ones having true (as the dict might not
have skip_verify defined and that would cause errors of undefined var).
This will speed up and simply the templating.
Signed-off-by: Seena Fallah <seenafallah@gmail.com>
7 months ago
Kay Yan
fb312e5179
cleanup kube 1.28 and cri-o 1.28 ( #11609 )
7 months ago
Kubernetes Prow Robot
9204f60b19
Merge pull request #11606 from VannTen/cleanup/pre_commit_ansible_lint
Reduce pre-commit hooks dependencies
7 months ago
Max Gautier
4f27bc2bf9
pre-commit: drop redundant ansible-syntax-check
ansible-lint hook already check syntax on the playbooks.
8 months ago
Max Gautier
07e551ab77
pre-commit: auto-update all hooks
8 months ago
Max Gautier
a7ace2e55b
ansible-lint: Adjust pre-commit hooks dependencies
Dropping the ansible dependencies for ansible-lint will allow us to
catch missing dependencies collections in galaxy.yml. For collections
needed for contrib/ or tests/ (i.e: not part of core kubespray
dependencies), we can just configure ansible-lint to mock them.
This mean it won't check the mocked module parameters, but for those
area of the code base it's an acceptable trade-off.
8 months ago
ChengHao Yang
8aa4c9ac0c
Cleanup: Fedora 37/38 CI tests & docs ( #11600 )
* Feat: update the remaining Fedora 37 vagrant CI
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Cleanup: remove EOL Fedora 37/38 CI tests
Signed-off-by: ChengHao Yang
<17496418+tico88612@users.noreply.github.com>
* Docs: remove EOL Fedora 37/38
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
---------
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
8 months ago
dependabot[bot]
fb92206918
Bump tox from 4.20.0 to 4.21.2 ( #11602 )
Bumps [tox](https://github.com/tox-dev/tox ) from 4.20.0 to 4.21.2.
- [Release notes](https://github.com/tox-dev/tox/releases )
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst )
- [Commits](https://github.com/tox-dev/tox/compare/4.20.0...4.21.2 )
---
updated-dependencies:
- dependency-name: tox
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
8 months ago
ChengHao Yang
e008e8ee01
Test: fix Molecule CRI-O default runtime to crun
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
8 months ago
ChengHao Yang
f3d4377a16
Feat: add skopeo new version hash & upgrade skopeo version to v1.16.1
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
8 months ago
ChengHao Yang
2717a2e585
Feat: add crun new version hash & upgrade crun version to 1.17
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
8 months ago
ChengHao Yang
461a480887
Feat: complete the missing hash crun ppc64le
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
8 months ago
ChengHao Yang
24e115c8b9
Feat: change cri-o default runtime to crun
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
8 months ago
Max Gautier
6b3eaf8312
Use correct secret name for csi-upcloud pull secret ( #11597 )
8 months ago
Kubernetes Prow Robot
ddd92c998c
Merge pull request #11507 from VannTen/cleanup/shell_etcd_reset
Refactor remove-etcd-node
8 months ago
Max Gautier
80b2765f20
Fix dynamic groups definition when using --limit ( #11577 )
Using the hosts directive at the play level prevent those tasks from
being run when using --limit and the group in question is not part of
the limit (ex: running scale.yml on new worker nodes only)
Instead, run on all hosts, and for each group, partition between that
group and '_' (generic group name which is not used; using an empty
string as the group is not supported by ansible.builtin.group_by)
Reported-by: asteppat <asteppat@cisco.com>
8 months ago
Baargav
bb4f1b1168
update cilium to 1.15.9 ( #11593 )
8 months ago
Olivier Boudry
583583942c
Fix Flatcar bug #11268 missing default value for ansible_interpreter_python_fallback variable ( #11270 )
8 months ago
ChengHao Yang
b0563c20b0
Feat: support Fedora 39/40 ( #11573 )
* Add Fedora 39/40 to Vagrantfile
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Add CI tests for Fedora 39/40
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Update CI tests documentation
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Update support OS version in README.md
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
---------
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
8 months ago
peterw
6b499186b0
add cilium hubble-ui enable flag ( #10939 )
8 months ago
dependabot[bot]
1ccf0df540
Bump tzdata from 2024.1 to 2024.2 ( #11590 )
Bumps [tzdata](https://github.com/python/tzdata ) from 2024.1 to 2024.2.
- [Release notes](https://github.com/python/tzdata/releases )
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md )
- [Commits](https://github.com/python/tzdata/compare/2024.1...2024.2 )
---
updated-dependencies:
- dependency-name: tzdata
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
8 months ago
kyrie
d59a5bf431
update containerd_max_container_log_line_size default value ( #11585 )
Signed-off-by: KubeKyrie <shaolong.qin@daocloud.io>
8 months ago
Kay Yan
fcbcf3c03b
cri-o Switch to libexecdir ( #11584 )
Signed-off-by: Kay Yan <kay.yan@daocloud.io>
8 months ago
Serge Hartmann
0eeac591ad
variables cilium_enable_host_firewall and cilium_policy_audit_mode for configmap/cilium-config ( #11230 )
capitalise values for Host Firewall and Policy Audit Mode
fix missing quotes
8 months ago
ChengHao Yang
fabf17a10c
Add Fedora 39/40 images in test-infra ( #11578 )
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
8 months ago
Baargav
860c15cec1
Update cluster-role for cilium to prevent errors in agent startup ( #11466 )
* Update cluster-role for cilium to prevent errors in agent startup
ciliumloadbalancerippools permissions exists in the cilium helm chart for version 1.13.0
https://github.com/cilium/cilium/blob/v1.13.0/install/kubernetes/cilium/templates/cilium-agent/clusterrole.yaml#L71
The agent also needs permissions to read/watch secrets for bgp auth secrets when using CiliumBGPPeeringPolicy with a secret.
* Remove list/watch permissions for secrets
* Remove secrets from list/watch permissions
8 months ago
Erwan Miran
8c3b2851f6
feat(calico): add support for numAllowedLocalASNumbers on bgppeers per node definition ( #11570 )
8 months ago
M. Hamzah Khan
24e1765ae2
Added containernetworking-plugins to fcos bootstrap packages ( #11273 )
8 months ago
Andrea Zonca
d3113ad869
[doc] Add previously undocumented options in Terraform/Openstack ( #11477 )
These options are available in 6ba3656410/contrib/terraform/openstack/modules/compute/variables.tf (L204-L218)
but are currently undocumented in the README.md
8 months ago
Kubernetes Prow Robot
bbd90f7657
Merge pull request #11568 from VannTen/cleanup/dont_rely_on_kube_node_existing
Only require minimum structure in inventory, part II
8 months ago
DirkTheDaring
3281c47f98
[kubernetes] Add hashes for kubernetes 1.29.8, 1.29.9, 1.30.5 ( #11581 )
* [kubernetes] Add hashes for kubernetes 1.29.8, 1.29.9, 1.30.5
* Update checksums.yml
reintroduce --- for yaml
8 months ago
janosbabik
6352fee0fd
Update nerdctl version to 1.7.7 ( #11575 )
8 months ago