a59e27cb6b
Update kube-vip to v0.5.12 ( #10005 )
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
1 year ago
b3ed25ee35
use string for ipv6 forward conf ( #9992 )
1 year ago
c7072b48dc
add calico kubeconfig wait timeout ( #9994 )
Signed-off-by: tu1h <lihai.tu@daocloud.io>
1 year ago
c98e1d1b5b
add-kube-profile-to-scheduler ( #9993 )
1 year ago
e907d55621
fix calico checksums mismatch ( #9990 )
1 year ago
709ae1d244
Update MetalLB and switch to CRD notation. ( #9120 )
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
1 year ago
6682a843b4
Support multi-arch using the same image name ( #9978 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
1 year ago
dc33a1971d
[etcd] fix make-ssl-etcd.sh.j2; move pem files only if any new certs exist ( #9974 )
1 year ago
ed6f8df784
[feature] Update CoreDNS manifests ( #9977 )
1 year ago
43216436ab
disable rhsm repo when rhel_enable_repos is false ( #9973 )
Signed-off-by: tu1h <lihai.tu@daocloud.io>
1 year ago
cdc25523bf
Change nerdctl snapshotter to overlayfs by default ( #9979 )
1 year ago
2985b129fc
remove invalid character ( #9970 )
Signed-off-by: tu1h <lihai.tu@daocloud.io>
1 year ago
0104396c50
use var: kube_apiserver_address ( #9967 )
1 year ago
eecaec2919
[vSphere-csi-driver] Custom namespace fails playbook ( #9946 )
* Fix: vSphere Error: `Apply a CSI secret manifest`
This PR will fix an issue that you will see on 2nd deploy when deploying External vSphere
How to re-produce:
1. Set custom `vsphere_csi_namespace: "vmware-system-csi"`
2. Deploy as usual
3. Observe no errors
4. Deploy 2nd time without `reset`
5. Playbook fails with:
```
TASK [kubernetes-apps/csi_driver/vsphere : vSphere CSI Driver | Apply a CSI secret manifest]
fatal: [node-00]: FAILED! => changed=true
censored: 'the output has been hidden due to the fact that ''no_log: true'' was specified for this result'
```
* create namespace if does not exist
* lint fix
* try to fix lint errors
* fix `too few spaces before comment`
* change the order of applied manifests
* typo
1 year ago
4a03d13d08
[cilium] fix rbac and upgrade hubble v0.11.0 ( #3 ) ( #9959 )
* [cilium] fix rbac and upgrade hubble v0.11.0 (#3 )
* [cilium] fix rbac for LB bgp ipam
* [cilium] Upgrade Hubble to v0.11.0 and add mTLS between Hubble UI and Hubble Relay
* fix dns domain hubble for tls
---------
Co-authored-by: Thuon Jeremy <d107869@olinfra1.infra.bdm.outscale.c1.dav.fr>
* Fix blank line
---------
Co-authored-by: Thuon Jeremy <d107869@olinfra1.infra.bdm.outscale.c1.dav.fr>
1 year ago
fcb5e77338
[cert-manager] Upgrade to v1.11.1 ( #9964 )
1 year ago
ece174da7c
fix resatrt k8s components ( #9962 )
1 year ago
a94b893e2c
[containerd] add hashes for 1.6.20 ( #9954 )
1 year ago
5e2cb4d244
Add bind address variable to OCCM ( #9958 )
1 year ago
dff58023d9
[argocd] update argocd to v2.6.7 ( #9953 )
1 year ago
766d3696c9
[calico] add v3.25.1 and make it default ( #9950 )
1 year ago
b88229a662
[ingress-nginx] upgrade to 1.7.0 ( #9952 )
1 year ago
c00cea7b17
[helm] upgrade to 3.11.2 ( #9951 )
1 year ago
0c4f57a093
Support extended settings for the Debian os family ( #9943 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
1 year ago
e8f0fb82fe
fix-kube-bench-1.2.20 ( #9939 )
1 year ago
19856cf692
fix-kube-bench-1.1.19 ( #9937 )
1 year ago
deb532ce27
fix-kube-bench-4.1.1 ( #9934 )
1 year ago
1bb4f88af1
cilium: Additional fix the configuration of tls for hubble #9880 ( #9932 )
1 year ago
dcc04e54f3
fix(cert manager): Fix manifest if cert_manager_trusted_internal_ca is provided ( #9922 )
1 year ago
4020a93d7e
delete the probe option of cilium_kube_proxy_replacement ( #9929 )
1 year ago
a676c106d3
change bash for loop for SAN check ( #9060 )
fix merge conflict
1 year ago
baed5f0b32
Remove deprecated udpIdleTimeout field in KubeProxyConfiguration ( #9925 )
1 year ago
8afd74ce1f
cilium: Fix the configuration of tls for hubble ( #9880 )
Signed-off-by: utam0k <k0ma@utam0k.jp>
1 year ago
f6e4a231cb
fix(download): validate mirrors on localhost ( #9669 )
1 year ago
3a5f5692ca
Cilium v1.13.0 ( #9879 )
Signed-off-by: utam0k <k0ma@utam0k.jp>
1 year ago
9b37699d0d
Cilium Operator replicas configuration ( #9894 )
Signed-off-by: Fiala, JiriX <jirix.fiala@intel.com>
1 year ago
cc382f2412
haproxy-proxy-ipv6 ( #9674 )
1 year ago
97dfdcd8fe
feat: support cilium 1.13.1 ( #9914 )
Cilium 1.13.1 changed how the cilium-cni binary gets placed in /opt/cni/bin,
so that it takes place in an init container rather than in the main agent.
1 year ago
a9f52060c9
Fix ciliums hubble relay configuration ( #9876 )
* Fix ciliums hubble relay configuration
* Fixed the tls from code review
* Updated to dna_domain instead of hardcoding
1 year ago
8cf5fefe84
Add download retries option ( #9911 )
Signed-off-by: tu1h <lihai.tu@daocloud.io>
1 year ago
fb8631cdf6
fix allow unsupported distribution ( #9904 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
1 year ago
7859aee735
[kubernetes] Add hashes for 1.26.3, 1.25.8, 1.24.12 ( #9900 )
1 year ago
83c3ce7f8f
Add Retry for Checking calico exists ( #9883 )
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
1 year ago
309aaee427
fix-cilium-error ( #9902 )
1 year ago
349c8901f8
[containerd] add hashes for 1.7.0 ( #9892 )
1 year ago
df9aba6298
fix typo word
1 year ago
2ae3ea9ee3
Modified the default value of cilium IPAM and added the support for related parameters ( #9443 )
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
1 year ago
99115ad04b
Fix Get current calico version ( #9873 )
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
1 year ago
7747ff2572
Fix uniontech os installation failure ( #9862 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
1 year ago
eb4bd36f73
fix(kubernetes): Also apply kubeadm patches during upgrade ( #9781 )
1 year ago
蒋航
Samuel Liu
Louis Tu
Kay Yan
pli
Jeroen Rijken
ERIK
Kei Kori
Mohamed Omar Zaian
pingrulkin
Eugene Marchanka
jeremy-thuon
rtsp
Dominykas Norkus
Anton
Mathias Petermann
xiuguang.huang
R. P. Taylor
HirazawaUi
Toru Komatsu
Maxime Picaud
Jiri Fiala
Will Hegedus
prashantchitta
biqiang Wu
Marijn van der Giesen