b2d30d68e7
Rename CN for aggreator back. Add flags to apiserver when version is >= 1.9
6 years ago
82d10b882c
Added fixes from whereismyjetpack
6 years ago
24ae85fa56
Merge pull request #2255 from rsmitty/kubespray-cli
remove references to deprecated kubespray-cli
6 years ago
1869aa3985
remove references to deprecated kubespray cli
6 years ago
95b8ac5f62
Added optional controller and scheduler extra args to kubeadm config ( #2205 )
6 years ago
0b4168cad4
WIP. Adding metrics-server support for K8s version 1.9
6 years ago
3289472e31
Added option to set MTU on Weave
6 years ago
4ad53339f6
KubeDNS template should not suffix with .yml.j2
6 years ago
a4d3da6a8e
Dashboard template should not suffix with .yml.j2
6 years ago
7954ea2525
Migrate Kubernetes v1.9.1 cluster/addons/registry to Kubespray
6 years ago
bd1f0bcfd7
Merge pull request #2201 from riverzhang/ipvs
Support ipvs mode for kube-proxy
6 years ago
bc2e26d7ef
update apiVersion
6 years ago
fd80013917
lint and cleanup local_volume_provisioner
6 years ago
f7d52564aa
Merge pull request #2084 from riverzhang/devicemapper
Fix can not use devicemapper driver
6 years ago
f7e8d1149a
Merge pull request #2229 from whereismyjetpack/etcd-quorum-read
--etcd-quorum-read is depricated in kube >= 1.9
6 years ago
bd091caaf9
Merge pull request #2200 from riverzhang/hyperkube
Upgrade to Kubernetes v1.9.2
6 years ago
b455a1bf76
Merge pull request #2212 from mattymo/missing_defaults
Add missing group var default values to kubespray-defaults
6 years ago
c0a3bcf9b3
Merge pull request #2221 from Xuxe/patch-vcp-v1.9.2
Updated vSphere cloud provider config for Kubernetes >= v1.9.2 and added resource pool deployment variable
6 years ago
5eedb5562f
Merge pull request #2228 from mattymo/vault_etcd_secure
Vault should use cert auth for etcd
6 years ago
dc6c703741
--etcd-quorum-read is depricated in kube >= 1.9
6 years ago
16629d0b8e
Vault should use cert auth for etcd
6 years ago
7f79210ed1
reworked vsphere-cloud-config template
6 years ago
27a1a697e7
supplementary_addresses_in_ssl_keys can be a hostname
7 years ago
c1267004ef
Merge pull request #2130 from ArchiFleKs/simplify_os_provider
Simplify and update OpenStack cloud provider
6 years ago
9cdd2214f9
render vsphere_resource_pool only if defined
6 years ago
fc29764911
fixed broken variables table
6 years ago
989e9174c2
Added vSphere cloud provider config update for Kubernetes >= 1.9.2
6 years ago
3993e12335
Fix can not be used devicemapper driver
Fix can not be used devicemapper driver
7 years ago
ac4d782937
Merge pull request #2074 from fangzhen/fix-domains-split
Make spliting system_search_domains more robust
6 years ago
32d18ca992
remove trailing space
6 years ago
2df4b6c5d2
Rename default_resolver to cloud_resolver ( #2209 )
Cloud resolvers are mandatory for hosts on GCE and OpenStack
clouds. The 8.8.8.8 alternative resolver was dropped because
there is already a default nameserver. The new var name
reflects the purpose better.
Also restart apiserver when modifying dns settings.
6 years ago
088d36da09
Increase the idx counter
Fix the idx counter to increase too, or you will end up with two same indexes.
6 years ago
6f36faa4f9
Loadbalancer Apiserver Address is missing
If you configure your external loadbalancer to do a simple tcp pass-through to the api servers, and you do not use a DNS FQDN but just the ip, then you need to add the ip adress to the certificates too.
Example config:
```
## External LB example config
apiserver_loadbalancer_domain_name: "10.50.63.10"
loadbalancer_apiserver:
address: 10.50.63.10
port: 8383
```
6 years ago
3846384d56
Bump kube-dns to 1.14.8 ( #2204 )
Bump kube-dns to 1.14.8
6 years ago
331f141f63
Fix DNS entries in etcd's openssl.conf by adding a newline. ( #2208 )
DNS entries generated from 'etcd_cert_alt_names' variable in etcd's
openssl.conf are not terminated by a newline.
This fixes issue #2207 .
6 years ago
62dd3d2a9d
Add missing group var default values to kubespray-defaults
6 years ago
fa8a128e49
etcd: ability to enable/disable ETCD_PEER_CLIENT_CERT_AUTH
Some installation are failing to authenticate with peers due to
etcd picking up/resoling the wrong node.
By setting 'etcd_peer_client_auth' to "False" you can disable peer client cert
authentication.
Signed-off-by: Sébastien Han <seb@redhat.com>
6 years ago
b10c308a5a
Support ipvs mode for kube-proxy
Support ipvs mode for kube-proxy
6 years ago
e22c70e431
Upgrade to Kubernetes v1.9.2
6 years ago
f4fe9e3421
Merge pull request #2171 from ArchiFleKs/kubeproxy-lvs
Add lib/modules to kube-proxy to enable LVS
6 years ago
da173615e4
Merge pull request #2048 from xizhibei/master
Fix: always only one container got synced after download
6 years ago
dc6a17e092
Use include/import tasks ( #2192 )
import_tasks will consume far less memory, so it should be
used whenever it is compatible.
6 years ago
f4180503c8
Merge pull request #2196 from Miouge1/network-size-large-deploy
Network size large deploy documentation
6 years ago
240d4193ae
Update information about network sizes
6 years ago
ac66e98ae9
Upgrade to Kubernetes v1.9.1 ( #2152 )
Raise drain timeout to 5m
6 years ago
d2935ffed0
Optionally ignore the presence of extra calico pools ( #2190 )
6 years ago
c6e0fcea31
Merge pull request #1948 from sgmitchell/secured-etcd
Enable etcd secure client to prevent etcdctl access without cert and key
6 years ago
5d014d986b
Merge pull request #1992 from manics/flannel-hairpin
Enable flannel hairpin mode
6 years ago
714994cad8
iptables: flush nat table as well as filter table upon reset ( #2174 )
* iptables: flush nat table as well as filter table upon reset
* Indentation fix
6 years ago
08fe61e058
Merge pull request #2071 from riverzhang/dashboard
Update dashboard version to v1.8.1
6 years ago
woopstar
Spencer Smith
Spencer Smith
Maxim Krasilnikov
Wong Hoi Sing Edison
Chad Swenson
Dann Bohn
Matthew Mosesohn
Julian Hübenthal
Simon Li
Aivars Sterns
rong.zhang
Brad Beam
Dmitri Rubinstein
Sébastien Han
Antoine Legrand
Miouge1
mirwan