rptaylor
5bec2edaf7
remove namespace from ClusterRole ( #4856 )
6 years ago
Matthew Mosesohn
f504d0ea99
Remove invalid field dnsPolicy from podSecurityPolicy ( #4863 )
Change-Id: I02864011bf5fda5dbd35c7513c73875769036f87
6 years ago
AlawnWong
69a8f91512
Update dns-autoscaler.yml.j2 ( #4857 )
Merge two tolerations. because the latest tolerations will cover the first tolerations.
6 years ago
Frank Ritchie
ab6f0012cc
Make local volume provisioner dir mode a variable ( #4821 )
* Make local volume provisioner dir mode a variable
I need to change this for Nagios monitoring. Others may
need to as well. Had to close previous commits, sorry for
the spam.
* Make local volume provisioner dir mode a variable
I need to change this for Nagios monitoring. Others may
need to as well. Had to close previous commits, sorry for
the spam.
6 years ago
mervynzhang
a8dfcbbfc7
Switch /root references to ansible_env.HOME ( #4842 )
* kube config dir for current/ansible become user
* remove extra /
* fix default value
6 years ago
Andreas Krüger
818aa7aeb1
Set dnsPolicy to ClusterFirstWithHostNet when hostNetwork is true ( #4843 )
6 years ago
Toni Pokki
54416cabfd
prefer_udp for upstream dns servers ( #4810 )
6 years ago
Andreas Krüger
7423932510
Add ready plugin for CoreDNS ( #4817 )
6 years ago
André R. de Miranda
0ef3a7914c
Added pod psp in Rancher Local Path Provisioner ( #4385 )
* Added pod psp in Rancher Local Path Provisioner
Added pod security policy (psp) in Rancher Local Path Provisioner.
Signed-off-by: André R. de Miranda <andre@miranda.work>
* Apply psp for Rancher Local Path Provisioner only when local_path_provisioner_namespace is not kube-system and also reorganized the templates
6 years ago
André R. de Miranda
4bc204925a
Error in nginx when starting registry-proxy ( #4785 )
Error starting nginx because in requiredDropCapabilities is dropped all capabilities.
The nginx requires the following capabilities:
- CHOWN
- SETGID
- SETUID
Signed-off-by: André R. de Miranda <andre@miranda.work>
6 years ago
MarkusTeufelberger
73c2ff17dd
Fix Ansible-lint error [E502] ( #4743 )
6 years ago
Aleksey Kasatkin
14749df6f3
Fix "netchecker-server" ClusterRole ( #4730 )
* Add sha256 hashes for calicoctl v3.6.1
Hashes are added to calicoctl_binary_checksums for both adm and arm platforms.
* Add rules for "network-checker.ext" resource to "netchecker-server" ClusterRole
So that it could access the resource after it is created.
Corresponding issues:
https://github.com/Mirantis/k8s-netchecker-server/issues/125
https://github.com/kubernetes-sigs/kubespray/issues/3281
6 years ago
Andreas Krüger
8a5eae94ea
Minor cleanups of CoreDNS issues and CI job ( #4719 )
* Minor cleanups
* Add comment in docs that nodelocaldns cache is enabled by default
6 years ago
MarkusTeufelberger
e67f848abc
ansible-lint: add spaces around variables [E206] ( #4699 )
6 years ago
Youngchul Bang
fbba259933
ingress-nginx: enable --report-node-internal-ip-address flag ( #4114 )
Close #4113
6 years ago
Matthew Mosesohn
741de6051c
Fix nodeselectors for contiv and nginx-ingress ( #4662 )
* Fix nodeselectors for contiv and nginx-ingress
Change-Id: Ib3eb6bd87193c69a90ee944c9164a0b6792c79ba
* Set kube proxy mode to iptables for addons task
Change-Id: Iff71a71f672405c74b4708c71db15ddc4391a53a
6 years ago
MarkusTeufelberger
88d919337e
ansible-lint: don't compare to empty string [E602] ( #4665 )
6 years ago
Andreas Krüger
3722acee85
Fix broken metrics-server deployment not starting ( #4651 )
* Fix metrics-server deployment
* Make metrics server work
* Fix sample inventory
6 years ago
grialeyur
82119ca923
Add support calico kubernetes datastore and typha. ( #4498 )
* Add support calico kubernetes datastore and typha.
* Add typha_enabled to kubespray-defaults.
6 years ago
Matthew Mosesohn
fc072300ea
Purge legacy cleanup tasks from older than 1 year ( #4450 )
We don't need to support upgrades from 2 year old installs,
just from the last major version.
Also changed most retried tasks to 1s delay instead of longer.
6 years ago
MarkusTeufelberger
424e59805f
ansible-lint: Fix commands that are also available as module ( #4619 )
6 years ago
Andreas Krüger
d588532c9b
Update probe timeouts, delays etc. ( #4612 )
* Fix merge conflict
* Add check delay
* Add more liveness and readiness options to metrics-server
6 years ago
Matthew Mosesohn
d89ecb8308
disable metrics server and fix terraform ( #4617 )
* disable metrics server in centos7-flannel-addons job
Change-Id: I1d87923547584896f64dda9ea8feb5581ad48cbe
* Fix tf facility->facilities syntax
Change-Id: I434bfe53f47e8e4a546890e0b62d24bde6e6d6a7
* Update Terraform CI for facilities
* Fix undefined variable error
6 years ago
Maxime Guyot
50751bb610
Revert "Optimize kube resources creation ( #4572 )" ( #4621 )
This reverts commit f8fdc0cd93
.
6 years ago
andreyshestakov
f8fdc0cd93
Optimize kube resources creation ( #4572 )
6 years ago
Andreas Krüger
656633f784
YAMLLint everything ( #4576 )
6 years ago
Victor Morales
c6586829de
Ensure /etc/bash_completion.d/ folder exists ( #4543 )
The Stateless ClearLinux feature[1] requires the creation of folders
in /etc folder. This change ensure the existence of the
/etc/bash_completion.d/ folder for ClearLinux Distribution.
[1] https://clearlinux.org/features/stateless
6 years ago
Maxime Guyot
37eac010c8
ansible-lint: Don’t compare to literal True/False ( #4499 )
6 years ago
Maxime Guyot
ec3daedf9e
Revert "Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels ( #4320 )" ( #4553 )
This reverts commit 586ad89d50
.
6 years ago
Jugwan Eom
d83181a2be
add RBD Provisioner Addon ( #3667 ) ( #3668 )
Based on the CephFS Provisioner Addon, the following changes have been made:
- Upstream v2.1.1-k8s1.11
- Configurable Provisioner replicas
6 years ago
Maxime Guyot
46ba6a4154
ansible-lint: when lines should not include Jinja2 variables ( #4496 )
6 years ago
Andreas Krüger
15597aa493
Do not force TCP connections to upstreams. ( #4492 )
6 years ago
Neven Miculinic
a30ad1e5a5
Added generic CNI network plugin ( #4322 )
* Added generic CNI network plugin
* Added CNI network plugin documentation
* added necessary fix
6 years ago
Robert Neumann
586ad89d50
Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels ( #4320 )
* Fix the file path for all.yml and k8s-cluster.yml
* Fix --node-labels namespace error "unknown labels specified"
* Update templates and configs kubelet node-labels
6 years ago
Sidharth Anupkrishnan
6caa639243
Update CoreDNS label as specified in the kubernetes coredns repository ( #3920 )
6 years ago
Andreas Krüger
4d39c1856e
Fix jinja filters ( #4470 )
6 years ago
Xinghong Fang
d711a0c83f
[nodelocaldns] expand tolerations on the daemonset ( #4451 )
6 years ago
Victor Morales
7e4f4a96fc
Replace iteritems() to items() in Jinja2 templates ( #4437 )
The iteritems() dictionary's method has been removed in Python3. Using
this method in Jinja2 templates limits the execution to Python2 which
will be deprecated in 2020[1]. This change replaces that method for
the items() method as it's suggested in the official website[2].
[1] https://pythonclock.org/
[2] https://docs.ansible.com/ansible/latest/user_guide/playbooks_python_version.html#dict-iteritems
6 years ago
Xavi
20b12751af
add Cinder allowVolumeExpansion option ( #4415 )
6 years ago
Andreas Krüger
7a72e567d5
Update CoreDNS to 1.4.0 ( #4422 )
* Update CoreDNS to 1.4.0
* Update readme to reflect CoreDNS update
6 years ago
Andreas Krüger
3c050be0b0
Update nodelocaldns cache settings ( #4423 )
6 years ago
Andreas Krüger
41e684eb5a
Update DNS Autoscaler to 1.4.0 ( #4425 )
* Update DNS Autoscaler
* Update downloads too
* Fix yamllint
* Fix yamllint
6 years ago
Matthew Mosesohn
5f12b7aedf
Remove kubedns and dnsmasq. Move dns_late phase after apps ( #4406 )
Both kubedns and dnsmasq modes are long not maintained.
We should run dns_late steps at the end because sshd
makes DNS lookups during Ansible run and has 2s timeouts
for each failed lookup trying to connect to coredns before
it is ready.
6 years ago
Stefan Prietl
2fb27c8521
Use static files in KubeDNS templating task ( #4379 )
This commit adapts the "Lay Down KubeDNS Template" task to use the static
files moved by pull request [1]
[1] https://github.com/kubernetes-sigs/kubespray/pull/4341
6 years ago
Matthew Mosesohn
6d7f3c4405
Reduce jinja2 filters in coredns templates ( #4390 )
6 years ago
Matthew Mosesohn
b7fd462944
Fix support for ansible 2.7.9 ( #4375 )
6 years ago
Matthew Mosesohn
150a969cf4
Forcefully delete pods when necessary ( #4328 )
Pods on down/unresponsive nodes can't be deleted without
--force --grace-period=0.
Fixes #4314
6 years ago
Manuel Cintron
3c4cbf133e
Adding ability to override dashboard replica count ( #4344 )
6 years ago
Matthew Mosesohn
fd2c47b56a
Move most coredns templates to static files ( #4341 )
* Move most coredns templates to static files
This should speed up the task slightly
* yaml lint fixes
6 years ago
Matthew Mosesohn
4fe61968cf
Set default value for local_path_provisioner_enabled in role ( #4309 )
6 years ago