Bernard Landon
fa378f09c3
Edited pre-upgrade task to uncordon a node failing to drain ( #6546 )
4 years ago
holmesb
d8a749fd27
Update apiserver-audit-policy.yaml.j2 ( #6526 )
4 years ago
Florian Ruynat
78ceef6b15
Remove unused variable ( #6522 )
4 years ago
Arthur Outhenin-Chalandre
ca8e59fa85
Add new cilium options for native routing ( #6519 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Bernard Landon
b0210567aa
Fixed Kubespray container-engine/docker role to populate docker.service ( #6518 )
4 years ago
Arthur Outhenin-Chalandre
33ec13293b
Fix cilium_deploy_additionally with kubeadm etcd ( #6514 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Arthur Outhenin-Chalandre
bedb411d06
improve Cilium metrics support ( #6513 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Erwan Miran
ef3e98807e
tlsminversion and tlsciphersuites kubelet ( #6490 )
4 years ago
Arthur Outhenin-Chalandre
35682b5228
Fix cilium strict kube proxy replacement in HA ( #6473 )
* Update the cilium svc proxy test to HA mode
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Fix cilium strict kube-proxy in HA
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add a single global endpoint variable
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Add cilium docs about kube-proxy replacement
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
* Fix issues in docs
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Barry Melbourne
9cc70e9e70
Upgrade JetStack Cert-Manager to v0.15.2 ( #6414 )
* Upgrade JetStack Cert-Manager to v0.15.2
* Add README.md table of contents
4 years ago
Maxime Guyot
fc23f37af7
Fix E306 in roles/kubernetes ( #6500 )
4 years ago
Sulochan Acharya
bfe143808f
Allows tls verify skip on webhook auth url ( #6472 )
4 years ago
Mike Williams
e72dbf3dfc
Option for MetalLB to talk BGP ( #6383 )
* Option for MetalLB to talk BGP
* Check for BGP peers when metallb_protocol is bgp
* README clarification
* Commented values as documentation only in the sample inventory
* layer 2 or BGP, not both
4 years ago
bozzo
cc70200a07
Fix Flexvolume mount in Openstack Controller ( #6480 )
4 years ago
Steven Reitsma
f3c17361da
Create a PodDisruptionBudget for the Cinder CSI controllerplugin ( #6385 )
4 years ago
Victor Morales
bdf0238328
Upgrade molecule to v3 ( #6468 )
Signed-off-by: Victor Morales <v.morales@samsung.com>
4 years ago
Florent Monbillard
39b907cdfb
Remove workaround for kubeadm upgrade ( #6478 )
https://github.com/kubernetes/kubeadm/issues/1498 was closed
4 years ago
Florian Ruynat
24a7878e7c
Update kube-router to 1.0.1 and kube-ovn to 1.3.0 ( #6479 )
4 years ago
Konstantin Lebedev
2364a84579
fix src for audit webhook config yaml ( #6470 )
4 years ago
Hans Feldt
c6e5be91e9
crio: align template crio.conf with upstream ( #6432 )
* log level by default increased to 'info'
* cgroup manager by default set to 'systemd'
* stream port (used by kubelet) bound to 127.0.0.1 for security reasons
* metrics can be enabled and port specified
4 years ago
fulii
ce22c0e6a4
Add option to configure IPVS timeouts in kube-proxy configration manifest. ( #6396 )
4 years ago
Maxime Lavandier
bd60df97aa
Fix download calico policy condition ( #6474 )
4 years ago
Cristian Chiru
94df580674
Moved docker_dns_options to defaults so it can be overridden ( #6394 )
* Moved docker_dns_options to defaults so it can be overridden
* Fixed yaml indentation and markdown
* Moved docker_dns_search_domains to defaults
4 years ago
Kuralamudhan Ramakrishnan
90e5f8ffe1
adding ovn4nfv in kubespray ( #6381 )
Signed-off-by: Kuralamudhan Ramakrishnan <kuralamudhan.ramakrishnan@intel.com>
4 years ago
Florian Ruynat
bf6168fca8
Move fedora30 jobs to fedora32 ( #6426 )
4 years ago
Florian Ruynat
a78e861a89
Fix test if openstack_cacert is a base64 string ( #6421 )
4 years ago
Arthur Outhenin-Chalandre
3550e3c145
Adding kube-proxy-replacement support in cilium ( #6334 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Vladimir Masarik
8425c2363b
Replaced a broken link ( #6467 )
4 years ago
Samuel Liu
15ec44901d
azure csi typo ( #6469 )
4 years ago
Florent Monbillard
924cc11af6
Upgrade to kubernetes 1.18.6 ( #6405 )
- Add 1.17.9 and 1.16.13 SHAs
4 years ago
Maxime Guyot
fe46349786
Fix ansible-lint E301 for commands fetching data ( #6465 )
4 years ago
Maxime Guyot
214e08f8c9
Fix ansible-lint E305 ( #6459 )
4 years ago
Maxime Guyot
8bd3b50e31
Fix ansible-lint E404 ( #6417 )
4 years ago
Maxime Guyot
e70f27dd79
Add noqa and disable .ansible-lint global exclusions ( #6410 )
4 years ago
Florian Ruynat
b680cdd0e4
Move healthz check to secure ports ( #6446 )
4 years ago
Florian Ruynat
c9f63e5016
Update multus version & crio conf ( #6444 )
4 years ago
Florian Ruynat
d8a197ca51
Fix remove etcd broken with etcdctl_api 3 ( #6448 )
4 years ago
Hugo Blom
1f9841f609
update cinder csi manifests ( #6434 )
4 years ago
Florian Ruynat
aa21edeb53
Update docker package to 19.03.12 ( #6439 )
4 years ago
Konstantin Lebedev
4b80a7f6fe
Felix configuration via extraenvs of calico node ( #6433 )
4 years ago
Michael Sheinberg
e06e6895da
Remove dbus-tools from coreos bootstrap ( #6428 )
Trying to layer this package on Fedora 32 causes the install to crash
and furthermore it looks like the original bug linked to in the comment
has been resolved for Fedora 31
4 years ago
Florian Ruynat
50fc82acdc
Minor update to Cilium and Calico ( #6438 )
4 years ago
Igor Vuk
ea67bb6e41
Fix typo: Modprode -> Modprobe ( #6429 )
4 years ago
Minjong Kim
b19f2e2d3d
Update the calico_veth_mtu setting to affect IP-in-IP users ( #6419 )
* Update calico_veth_mtu to FELIX_IPINIP variable
calico_veth_mtu is specified in the configuration, but since it only works for wireguard, modify it to work for IP-in-IP users.
* Update template with more cleaner expression
4 years ago
chenguoquan1024
9c48f666ec
change /etc/ssl/etcd to etcd_config_dir param ( #6408 )
* change /etc/ssl/etcd to etcd_config_dir param
* add use etcd_events_data_dir param
4 years ago
Florent Monbillard
bf8c8976dd
Upgrade etcd to 3.4.3 ( #5998 )
4 years ago
Konstantin Lebedev
a7ec0ed587
add audit webhook support ( #6317 )
* add audit webhook support
* use generic name auditsink
4 years ago
Arthur Outhenin-Chalandre
1a1fe99669
Add a way to deploy cilium alongside another CNI ( #6373 )
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
4 years ago
Florian Ruynat
5e22574402
Remove allow-release-candidate-upgrades already include in experimental-upgrades flag ( #6349 )
4 years ago
chenguoquan1024
e1873ab872
add calico-node selinux ( #6359 )
4 years ago