Jakub Husák
2beffe688a
Make etcdctl connect to localhost out of the box ( #5643 )
* Make etcdctl connect to localhost out of the box
* etcdctl envs: use admin-.pem instead of member-.pem
4 years ago
Sylvain Chateau
0ca7aa126b
added "Flatcar", "Flatcar Container Linux by Kinvolk" for all coreOS role ( #5607 )
4 years ago
Erwan Miran
339e36fbe6
Files to archive can be passed directly ( #5571 )
4 years ago
qvicksilver
ac2135e450
Fix recover-control-plane to work with etcd 3.3.x and add CI ( #5500 )
* Fix recover-control-plane to work with etcd 3.3.x and add CI
* Set default values for testcase
* Add actual test jobs
* Attempt to satisty gitlab ci linter
* Fix ansible targets
* Set etcd_member_name as stated in the docs...
* Recovering from 0 masters is not supported yet
* Add other master to broken_kube-master group as well
* Increase number of retries to see if etcd needs more time to heal
* Make number of retries for ETCD loops configurable, increase it for recovery CI and document it
4 years ago
Erwan Miran
303c3654a1
Set pipefail in case tar fails ( #5506 )
4 years ago
Maxime Guyot
b15d41a96a
Add support to Ansible 2.9 ( #5361 )
4 years ago
Sergey
932935ecc7
fix wrong path in include install_host.yml in etcd role ( #5256 )
5 years ago
Matthew Mosesohn
7abf6a6958
Allow etcd member join by checking cluster health only on first etcd ( #5032 )
Change-Id: I9cc01cef3a437893225e2d9f58495826bbce7be9
5 years ago
Matthew Mosesohn
4348e78b24
Enable kubeadm etcd mode ( #4818 )
* Enable kubeadm etcd mode
Uses cert commands from kubeadm experimental control plane to
enable non-master nodes to obtain etcd certs.
Related story: PROD-29434
Change-Id: Idafa1d223e5c6ceadf819b6f9c06adf4c4f74178
* Add validation checks and exclude calico kdd mode
Change-Id: Ic234f5e71261d33191376e70d438f9f6d35f358c
* Move etcd mode test to ubuntu flannel HA job
Change-Id: I9af6fd80a1bbb1692ab10d6da095eb368f6bc732
* rename etcd_mode to etcd_kubeadm_enabled
Change-Id: Ib196d6c8a52f48cae370b026f7687ff9ca69c172
5 years ago
MarkusTeufelberger
73c2ff17dd
Fix Ansible-lint error [E502] ( #4743 )
5 years ago
MarkusTeufelberger
e67f848abc
ansible-lint: add spaces around variables [E206] ( #4699 )
5 years ago
Stas
50bdaa573c
Apply etcd_extra_vars to etcd-events.env as well. ( #4219 )
This change ensures that etcd_extra_vars variable applies
to events etcd as well.
5 years ago
Christoffer Anselm
dcd9c9509b
Add etcd role dependency on kube user to avoid etcd role failure when running scale.yml with a fresh node. ( #3240 ) ( #4479 )
5 years ago
Andreas Krüger
38af93b60c
Remove rkt support ( #4671 )
5 years ago
gitareest
6ca2019002
Fix issue with etcd arm host installation case ( #4589 )
Use host_architecture variable.
5 years ago
Attilio Greco
6243467856
remove duble check for run this task just one time ( #4613 )
5 years ago
Matthew Mosesohn
fc072300ea
Purge legacy cleanup tasks from older than 1 year ( #4450 )
We don't need to support upgrades from 2 year old installs,
just from the last major version.
Also changed most retried tasks to 1s delay instead of longer.
5 years ago
MarkusTeufelberger
a65605b17a
ansible-lint: Don't use bare variables ( #4608 )
Circumvented one false positive from ansible-lint
Moved a block of jinja magic into its own variable
5 years ago
MarkusTeufelberger
424e59805f
ansible-lint: Fix commands that are also available as module ( #4619 )
5 years ago
Qasim Sarfraz
0a3cf1a087
Fix CA cert environment variable for ectd v3 ( #4381 )
5 years ago
Matthew Mosesohn
acbf3db233
Remove hard dependence on facts for all nodes ( #4304 )
* Remove hard dependence on facts for all nodes
* Update main.yaml
* Update main.yaml
5 years ago
Ganesh Maharaj Mahalingam
73aee004ac
Enable ClearLinux as a distro in kubespray ( #3855 )
Signed-off-by: Ganesh Maharaj Mahalingam <ganesh.mahalingam@intel.com>
5 years ago
Andrey Zhelnin
1712314fab
Setting host_architecture var ( #3846 )
Setting host_architecture to allow etcd upgrade working through: ansible-playbook -b -i inventory/sample/hosts.ini cluster.yml --tags=etcd (on other case host_architecture is missing)
6 years ago
Chad Swenson
145687a48e
Reduce log spam of verbose tasks ( #3806 )
Added a loop_control label to a few tasks that flood our logs.
6 years ago
Zohar Mamedov
af5e05d08d
etcd_log_package_levels for /etc/etcd.env ( #3700 )
6 years ago
Antoine Legrand
3dcb914607
Remove Vault ( #3684 )
* Remove Vault
* Remove reference to 'kargo' in the doc
* change check order
6 years ago
Bily Zhang
b2b421840c
Fix some typos ( #3690 )
Signed-off-by: mooncake <xcoder@tenxcloud.com>
6 years ago
ankitcharolia
9c83551a0e
add certificate authority file ( #3433 )
6 years ago
Matthew Mosesohn
bc74a37696
Calculate etcd client cert serial for appropriate groups ( #3605 )
Standalone etcd nodes do not generate node-$hostname certs and do
not need this serial calculated.
6 years ago
Bart Laarhoven
0acb823d96
Distribute node etcd certificates like it's done in kubernetes/secrets ( #3486 )
* do it like in kubernetes/secrets
* fix indentation
* processed comments
* missed one, sorry
* trailing space fix
6 years ago
Erwan Miran
b4e2b85745
Replace shell with command in order to allow the task to fail when openssl x509 does return zero ( #3516 )
6 years ago
Erwan Miran
fcd8d850dc
Fix ansible syntax to avoid ansible warnings (again) ( #3509 )
* Fix ansible syntax to avoid ansible warnings (again)
* warn: false on tar -cfz
* wrong placement of warn:false
6 years ago
Erwan Miran
2ab2f3a0a3
Ability to define SSL certificates duration and SSL key size ( #3482 )
* Ability to specify ssl certificate duration and ssl key size - etcd/secrets
* Ability to specify ssl certificate duration and ssl key size - helm/contiv + fix contiv missing copy certs generation script
6 years ago
刘旭
145e5c8943
use copy and slurp module ( #3313 )
6 years ago
rongzhang
84c4c7dc82
Use synchronize module
6 years ago
Matthew Mosesohn
aaa9a4efac
Ensure vault file permissions are correct
6 years ago
Pablo Estigarribia
7cbe3c2171
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
remove empty when line
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
force kubeadm upgrade due to failure without --force flag
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
added nodeSelector to have compatibility with hybrid cluster with win nodes, also fix for download with missing container type
fixes in syntax and LF for newline in files
fix on yamllint check
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version
some cleanup for innecesary lines
remove conditions for nodeselector
6 years ago
Erwan Miran
82a28d6bb3
Add documentation about having HA for etcd
6 years ago
Antoine Legrand
da06c8e5a9
etcd UNSUPPORTED for all arch
6 years ago
Antoine Legrand
19268ded23
Fix some arm64 errors
6 years ago
Antoine Legrand
f67933d2ac
add ETCD_UNSUPPORTED_ARCH=arm64 flag
6 years ago
Takashi Okamoto
359009bb05
Download etcd and hyperkube binary.
6 years ago
Vasilis Remmas
b61eb7d7f3
Add ETCD_QUOTA_BACKEND_BYTES environment variable
6 years ago
Aivars Sterns
1567a977c3
Revert "gen_certs_script: refactor using stdin (Ansible 2.4+)"
6 years ago
Tatsuyuki Ishi
69786b2d16
gen_certs_script: refactor using stdin (Ansible 2.4+)
6 years ago
Sergey Bondarev
ce6854e726
add version to environment file
Trigger reboot handler when version upgrade during update script
6 years ago
Mathieu Herbert
59d89a37cc
add until option for etcd backup commands
6 years ago
Matthew Mosesohn
97e0de7e29
Fix vault file owner issues and k8s apiserver cert creation ( #2985 )
apiserver cert should be created only once
6 years ago
Matthew Mosesohn
5c617c5a8b
Add tags to deploy components by --tags option ( #2960 )
* Add tags for cert serial tasks
This will help facilitate tag-based deployment of specific components.
* fixup kubernetes node
6 years ago
elementyang
7c22def422
add etcd_events_access_address
6 years ago