kubespray

Commit Graph

Author	SHA1	Message	Date
Matthew Mosesohn	5f12b7aedf	Remove kubedns and dnsmasq. Move dns_late phase after apps (#4406 ) Both kubedns and dnsmasq modes are long not maintained. We should run dns_late steps at the end because sshd makes DNS lookups during Ansible run and has 2s timeouts for each failed lookup trying to connect to coredns before it is ready.	5 years ago
Andreas Krüger	ddffdb63bf	Remove non-kubeadm deployment (#3811 ) * Remove non-kubeadm deployment * More cleanup * More cleanup * More cleanup * More cleanup * Fix gitlab * Try stop gce first before absent to make the delete process work * More cleanup * Fix bug with checking if kubeadm has already run * Fix bug with checking if kubeadm has already run * More fixes * Fix test * fix * Fix gitlab checkout untill kubespray 2.8 is on quay * Fixed * Add upgrade path from non-kubeadm to kubeadm. Revert ssl path * Readd secret checking * Do gitlab checks from v2.7.0 test upgrade path to 2.8.0 * fix typo * Fix CI jobs to kubeadm again. Fix broken hyperkube path * Fix gitlab * Fix rotate tokens * More fixes * More fixes * Fix tokens	6 years ago
Erwan Miran	a644b7c267	Introducing credentials_dir in order to be able to override it	6 years ago
mirwan	ee8f678010	Addition of the .creds extension to the credentials files generated by password lookup in order for Ansible not to consider them as inventory files with inventory_ignore_extensions set accordingly (#2446 )	6 years ago
Wong Hoi Sing Edison	1a1d154e14	Support multiple inventory files under individual inventory directory	6 years ago
Matthew Mosesohn	d487b2f927	Security best practice fixes (#1783 ) * Disable basic and token auth by default * Add recommended security params * allow basic auth to fail in tests * Enable TLS authentication for kubelet	7 years ago
Matthew Mosesohn	8e731337ba	Enable HA deploy of kubeadm (#1658 ) * Enable HA deploy of kubeadm * raise delay to 60s for starting gce hosts	7 years ago
Matthew Mosesohn	0f231f0e76	Improve method to create and wait for gce instances (#1645 )	7 years ago
Matthew Mosesohn	f29a42721f	Clean up debug in check apiserver test (#1638 ) * Clean up debug in check apiserver test * Change password generation for kube_user Special characters are not allowed in known_users.csv file	7 years ago
Matthew Mosesohn	7117614ee5	Use a generated password for kube user (#1624 ) Removed unnecessary root user	7 years ago
Sergii Golovatiuk	d31c040dc0	Change kube-api default port from 443 to 6443 Operator can specify any port for kube-api (6443 default) This helps in case where some pods such as Ingress require 443 exclusively. Closes: 820 Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>	7 years ago
Smana	0b67c23d42	test the apiserver from the masters instead of the deployment machine	8 years ago
ant31	caa2555b1d	Add complete test integration	8 years ago

13 Commits (d8a023a92cbc638c97d3b3242b8dfe49860a032c)