Kenichi Omichi
b60f65c1e8
Update sonobuoy version ( #9485 )
The latest version of sonobuoy is v0.56.11.
This updates the version to the latest.
As the file name, this makes it use certified-conformance mode
clearly for the latest version of sonobuoy.
2 years ago
Sergey Putko
943107115a
disable Centos Extras repo creation for OL9 ( #9483 )
Centos 9 doesn't exists, and Centos 9-stream also doesn't have extras repo.
2 years ago
Kenichi Omichi
ddbe9956e4
Fix pathes of offline tool on the doc ( #9486 )
If clicking the links, we faced NotFound page at the time.
This fixes the issue by specifying full pathes instead.
2 years ago
Kenichi Omichi
fdbcce3a5e
Update offline-environment.md ( #9481 )
This makes it more readable by explaining clearly what files are necessary
to be downloaded in advance from online environment.
2 years ago
Mohamed Zaian
f007c77641
[etcd] make etcd 3.5.5 default for k8s 1.23 , 1.24 ( #9482 )
2 years ago
yanggang
9439487219
Add hashes for 1.25.4, 1.24.8, 1.23.14 and make v1.25.4 default ( #9479 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
2 years ago
emiran-orange
df6da52195
Enable check mode in DNS Cleanup tasks ( #9472 )
2 years ago
cleverhu
6ca89c80af
fix error link kubernetes url ( #9475 )
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
2 years ago
Ilya Margolin
7fe0b87d83
Fix docs for node_labels ( #9471 )
2 years ago
ERIK
8a654b6955
Add cni bin when installing calico ( #9367 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2 years ago
Ilya Margolin
5a8cf824f6
[containerd] Simplify limiting number of open files per container ( #9319 )
by setting a default runtime spec with a patch for RLIMIT_NOFILE.
- Introduces containerd_base_runtime_spec_rlimit_nofile.
- Generates base_runtime_spec on-the-fly, to use the containerd version
of the node.
2 years ago
emiran-orange
5c25b57989
Ability to define options for DNS upstream servers ( #9311 )
* Ability to define options for DNS upstream servers
* Doc and sample inventory vars
2 years ago
Olivier Lemasle
5d1fe64bc8
Update local-volume-provisioner ( #9463 )
- Update and re-work the documentation:
- Update links
- Fix formatting (especially for lists)
- Remove documentation about `useAlphaApi`,
a flag only for k8s versions < v1.10
- Attempt to clarify the doc
- Update to version 1.5.0
- Remove PodSecurityPolicy (deprecated in k8s v1.21+)
- Update ClusterRole following upstream
(cf https://github.com/kubernetes-sigs/sig-storage-local-static-provisioner/pull/292 )
- Add nodeSelector to DaemonSet (following upstream)
2 years ago
Kenichi Omichi
a731e25778
Make vagrant-ubuntu20-flannel voting ( #9469 )
We made all vagrant jobs non-voting because those jobs were not stable.
However the setting allowed a pull request which broke vagrant jobs
completely merged into the master branch.
To avoid such situation, this makes one of vagrant jobs voting.
Let's see the stability of the job.
2 years ago
yanggang
0d6dc08578
upgrade argocd version 2.4.16 ( #9467 )
2 years ago
ERIK
40261fdf14
Fix iputils install failure in Kylin OS ( #9453 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2 years ago
Cyclinder
590b4aa240
adjust calico-kube-controller to non-hostnetwork pod ( #9465 )
Signed-off-by: cyclinder qifeng.guo@daocloud.io
Signed-off-by: cyclinder qifeng.guo@daocloud.io
2 years ago
ausias-armesto
2a696ddb34
Adding metrics server to use host network ( #9444 )
* Adding metrics server to use host network
* EXternalize value to a variable
2 years ago
lijin-union
d7f08d1b0c
remove the set_fact action which raise error in the CI ( #9462 )
2 years ago
Jiffs Maverick
4aa1ef28ea
Don't use coredns_server in dhclient.conf if nodelocaldns is enabled ( #9392 )
2 years ago
Fred Rolland
58faef6ff6
Flannel: fix init container image arch ( #9461 )
The install-cni-plugin image was not updated to the corresponding
arch when building the different DS.
Fixes issue #9460
Signed-off-by: Fred Rolland <frolland@nvidia.com>
Signed-off-by: Fred Rolland <frolland@nvidia.com>
2 years ago
cleverhu
34a52a7028
update cilium cli offline download url example ( #9458 )
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
2 years ago
yanggang
ce751cb89d
add variable condition snapshot in vSphere CSI ( #9429 )
2 years ago
cleverhu
5cf2883444
add retry for start calico kube controller ( #9450 )
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
2 years ago
charlychiu
6bff338bad
fix: hubble relay tls error ( #9457 )
2 years ago
Olivier Lemasle
c78862052c
Stop using python 'test' internal package ( #9454 )
`test` is is a internal Python package (see [doc]), and as such should not be
used here. It make tests fail in some environments.
[doc]: https://docs.python.org/3/library/test.html
2 years ago
William Turner
1f54cef71c
Add variable to set direct routing on flannel VXLAN ( #9438 )
2 years ago
yanggang
d00508105b
Removed PodSecurityPolicy from ingress-nginx ( #9448 )
2 years ago
lijin-union
c272421910
Add UOS linux support ( #9432 )
2 years ago
biqiang Wu
78624c5bcb
When using cilium CNI, install Cilium CLI ( #9436 )
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
2 years ago
biqiang Wu
c681435432
Add switch cilium_enable_bandwidth_manager ( #9441 )
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
2 years ago
杨刚
4d3f637684
Remove PodSecurityPolicies in Metallb for kubernetes 1.25 ( #9442 )
2 years ago
Olivier Lemasle
5e14398af4
Upgrade ruamel.yaml.clib to work with Python 3.11 ( #9426 )
ruamel.yaml.clib did not build with the upcoming Python 3.11.
Cf. https://sourceforge.net/p/ruamel-yaml-clib/tickets/9/
ruamel.yaml.clib==0.2.7 fixes the issue.
2 years ago
蒋航
990f87acc8
Update kube-vip to v0.5.5 ( #9437 )
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
2 years ago
William Turner
eeb376460d
Fix inconsistent handling of admission plugin list ( #9407 )
* Fix inconsistent handling of admission plugin list
* Adjust hardening doc with the normalized admission plugin list
* Add pre-check for admission plugins format change
* Ignore checking admission plugins value when variable is not defined
2 years ago
Kay Yan
ef707b3461
update-containerd-1.6.9 ( #9427 )
2 years ago
Mohamed Zaian
2af918132e
Update kubernetes dashboard to 2.7.0 (k8s 1.25 support) ( #9425 )
2 years ago
Mohamed Zaian
b9b654714e
[nerdctl] upgrade to version 1.0.0 ( #9424 )
2 years ago
Mohamed Zaian
fe399e0e0c
[etcd] add 3.5.5 hashes, make it default for k8s 1.25 ( #9419 )
2 years ago
杨刚
b192053e28
as argocd 2.4.15 is releasesd , update the version ( #9420 )
2 years ago
杨刚
a84271aa7e
etcd arch can support arm64 and amd64 ( #9421 )
2 years ago
Wouter Goedhart
1901b512d2
Make the port of kube-vip dynamic based on the kube_apiserver_port ( #9414 )
variable
Fix wrong referenced variable on bgp_peers
Fix bgp_peeras field to be a string
Set default value for bgp_peeras
2 years ago
ERIK
9fdda7eca8
Fix iputils install failure in Kylin OS ( #9416 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2 years ago
ERIK
a68ed897f0
Update kubelet checksum ( #9413 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2 years ago
Florian Ruynat
582ff96d19
Update docker version to 20.10.20 ( #9410 )
2 years ago
Kenichi Omichi
0374a55eb3
Specify securityContext for cert-manager ( #9404 )
On hardening environments, cert-manager pods could not be created
from the corresponding deployments. This adds the securityContext
to solve the issue.
2 years ago
Kay Yan
ccbe38f78c
make-kube-1.25-default ( #9364 )
2 years ago
Vladimir
958840da89
Add var for control initialDelaySeconds in nginx ingress probe ( #9405 )
Signed-off-by: Zemtsov Vladimir <vl.zemtsov@gmail.com>
Signed-off-by: Zemtsov Vladimir <vl.zemtsov@gmail.com>
2 years ago
Cristian Calin
1530411218
use cri-o from upstream instead of kubic/OBS ( #9374 )
* [cri-o] use cri-o from upstream instead of kubic/OBS
* [cri-o] add proper molecule coverage
* [skopeo] download skopeo from upstream build
* [cri-o] clean up legacy deployments
* disable cri-o per-distribution variables
2 years ago
Kenichi Omichi
e5ec0f18c0
Add packet_ubuntu20-calico-aio-hardening ( #9359 )
To verify the hardening method works always.
The configuration comes from docs/hardening.md
Fix yaml format of hardening.yml
Add condition to skip 040 test for hardening
2 years ago