Mohamed Zaian
260dad8f10
[ingress-nginx] upgrade to 1.6.4 ( #9818 )
1 year ago
Mohamed Zaian
c950bfface
[containerd] add hashes for 1.5.17, 1.5.18, 1.6.17, 1.6.8 ( #9814 )
1 year ago
JaneLiuL
4aacec4542
fix calico rbac issue ( #9806 )
1 year ago
Karl Fischer
6278b12af6
fixed clinet to client
1 year ago
Maxime Leroy
64e4de371e
fix(kubelet): no cloud config for external cloud provider ( #9793 )
1 year ago
Marijn van der Giesen
ad4958249f
fix(crio): First runc then crictl ( #9780 )
1 year ago
Mathieu Parent
3fd7d91452
Update nodelocaldns to 1.22.18 ( #9800 )
Cf. ceb37c3a5c
1 year ago
pli
4ba1df5237
Fix kubernetes-app/argocd: download related things with the download role ( #9786 )
* Fix yq install in argocd role: use download_file instead of get_url
* Fix use download_file instead of get_url to download argocd-install manifest in argocd role
* Fix order and add arm64 checksum
* Fix: Failed to template loop_control.label: 'None'
1 year ago
rongfu.leng
145c80e9ab
Fix containerd config_path error when containerd_registries is configed ( #9770 )
Signed-off-by: rongfu.leng <rongfu.leng@daocloud.io>
1 year ago
王煎饼
ab0e06eae6
Fix CentOS Extras repo url for Oracle Linux 7 aarch64 ( #9791 )
1 year ago
ERIK
6ff845a199
Enable control plane load balancing for kube-vip ( #9785 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
1 year ago
Samuel BECK
2838a7c304
add proxy_env variable to apt_key cleanup task ( #9766 )
1 year ago
Ho Kim
2788a02096
Fix a bug in removing kubelet data dir ( #9764 )
1 year ago
Denis Kasanic
d81978625c
Update cri-o archive checksum ( #9761 )
Signed-off-by: Kasanic, Denis <denisx.kasanic@intel.com>
1 year ago
Bas
2c93c997cf
pre-commit autocorrected files ( #9750 )
1 year ago
Haitian Chen
10337f2fcb
skip ensuring ntp packages in coreos ( #9742 )
Check OS when ensuring NTP package and tzdata package.
1 year ago
manzsolutions-lpr
6c41191646
Add support for PodSecurityStandards ( #9713 )
1 year ago
Chauncey
7730cfd619
fix: add ipamconfigs resource for calico ( #9755 )
Signed-off-by: chaunceyjiang <chaunceyjiang@gmail.com>
1 year ago
Kevin Huang
1853085ffe
feat(cinder-csi): Allow deletionPolicy to be configurable ( #9736 )
1 year ago
stelucz
9247137e60
Replace label `k8s-app: nodelocaldns` in DaemonSet template by `k8s-app: node-local-dns` ( #9745 )
1 year ago
杨刚 (成都)
e8f048c71d
[argocd] update argocd to v2.5.10 ( #9753 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
rongfu.leng
0707c8ea6f
fix: with_item to with_dict ( #9729 )
Signed-off-by: rongfu.leng <rongfu.leng@daocloud.io>
1 year ago
James
36c6de9abd
Fix cilium's hubble ui configuration ( #9735 )
This fixes the CrashLoopBackoff error that appears because envoy
configuration has changed a lot and upstream removed the envoy proxy to
use nginx only instead. Those changes are based on upstream cilium helm.
1 year ago
蒋航
c5debf013c
Update kubevip to v0.5.8 ( #9734 )
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
1 year ago
Kay Yan
f9cc8ae10c
[kubernetes] Make kubernetes v1.26 default ( #9732 )
* make-kube-1.26-default
* fix-bugs
1 year ago
杨刚 (成都)
94dd02121b
Update containerd version : containerd1.6.16. ( #9727 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
杨刚 (成都)
b9a34b83d4
[argocd] update argocd to v2.5.9 ( #9723 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
杨刚
8d6cfd6e53
[argocd] update argocd to v2.5.8 ( #9708 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
ERIK
ee2193d4cf
Add dns configuration for cert manager ( #9673 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
1 year ago
Tristan
5fbbcedebc
9693: Fix comma-separated-list splitting of kubelet_enforce_node_allocatable ( #9694 )
See https://github.com/kubernetes-sigs/kubespray/issues/9693
1 year ago
Florian Ruynat
18f2abad2f
Cleanup v1.23.x missing references/conditions/hashes ( #9698 )
1 year ago
Mohamed Zaian
391dd97f95
[kubernetes] support 1.26.x ( #9570 )
1 year ago
Florian Ruynat
34d0451585
Update KUBESPRAY_VERSION and kube_version_min_required (with hashes cleanup) ( #9691 )
1 year ago
Arthur Outhenin-Chalandre
c4346e590f
kubeadm/etcd: use config to download certificate ( #9609 )
This commit uses a kubeadm join config to pull down cert for etcd in
workers nodes (which is needed in some circumstances, for instance with
calico or cilium).
The previous way didn't allow us to pass certain parameters which was
typically given in the config in other kubeadm invokations in Kubespray.
This made kubeadm produced some errors for some edge cases.
For example, in our deployment we don't have a default route and even
though it's only to download the certificates, kubeadm produce an error
`unable to select an IP from default routes` (these command are kubeadm
controlplane command, so kubeadm does some additional checks). This is
fixed by specifying `advertiseAddress` within the kubeadm config.
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
1 year ago
Florian Ruynat
bd81c615c3
Add k8s 1.24.10 hashes ( #9688 )
1 year ago
Mohamed Zaian
3d9fd082ff
[containerd] add hashes for 1.5.x ( #9678 )
1 year ago
yanggang
826282fe89
Add k8s hashes for k8s version. ( #9685 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
MatthieuFin
374438a3d6
feat(calico): add possibility to enable calico floatingIPs feature ( #9680 )
Add a variable `calico_felix_floatingIPs` which permit to enable calico feature `floatingIPs`
(disabled per default).
Signed-off-by: MatthieuFin <matthieu2717@gmail.com>
#9679
1 year ago
yanggang
fd80ef1ff1
[argocd] update argocd to v2.5.7 ( #9682 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
Mohamed Zaian
235173bb5f
[flannel] update to v0.20.2 & make it default ( #9675 )
1 year ago
Cyclinder
db94812163
bump cni-plugins to v1.2.0 ( #9671 )
Signed-off-by: cyclinder qifeng.guo@daocloud.io
Signed-off-by: cyclinder qifeng.guo@daocloud.io
1 year ago
Arthur Outhenin-Chalandre
4a6eb7eaa2
enable back kubelet_authorization_mode_webhook by default ( #9662 )
In 6db6c8678c
, this was disabled becaue
kubesrpay gave too much permissions that were not needed. This commit
re-enable back this option by default and also removes the extra
permissions that kubespray gave that were in fact not needed.
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
1 year ago
rongfu.leng
8a03bb1bb4
add containerd config_path ( #9566 )
Signed-off-by: rongfu.leng <rongfu.leng@daocloud.io>
Signed-off-by: rongfu.leng <rongfu.leng@daocloud.io>
1 year ago
Vitaly Yakovenko
d919c58e21
[multus] added support for mixed type of container engine ( #9224 )
* [multus] added support for mixed type of container engine
* [multus] fixed for using with cluster/upgrade-cluster/scale playbooks
1 year ago
Mohamed Zaian
19bc610f44
Update pause image version to v3.8 ( #9668 )
Signed-off-by: Mohamed Zaian <mohamedzaian@gmail.com>
Signed-off-by: Mohamed Zaian <mohamedzaian@gmail.com>
1 year ago
Mohamed Zaian
c7cffb14a7
[cert-manager] update cert-manager to v1.11.0 ( #9661 )
1 year ago
Jochen Friedrich
6f61f3d9cb
Support OVN Interconnect ( #9599 )
Mostly taken from: https://raw.githubusercontent.com/kubeovn/kube-ovn/master/yamls/ovn-ic.yaml.j2
1 year ago
yanggang
6b4bb2a121
[argocd] update argocd to v2.5.6 ( #9654 )
Signed-off-by: yanggang <gang.yang@daocloud.io>
Signed-off-by: yanggang <gang.yang@daocloud.io>
1 year ago
ERIK
e288449c5d
Update cri-dockerd version ( #9659 )
* Skip retry operation with containerd when etcd installed on host VM (#9560 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
* Update cri-dockerd version
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
Co-authored-by: Eugene Artemenko <artemenko.evgeniy@gmail.com>
1 year ago
László Rafael
ea35021c96
Add defaults for external_vsphere_user and external_vsphere_password in the vsphere csi_driver ( #9664 )
1 year ago