Wong Hoi Sing Edison
a086686e9f
Support multiple artifacts under individual inventory directory
6 years ago
Wong Hoi Sing Edison
6402004018
FIXUP #2424 : local_provisioner directory should be created only if enabled
6 years ago
Chris Mildebrandt
605738757d
Fix systemd version detection
Change "command" to "shell" in order for the pipe to work correctly
6 years ago
Wong Hoi Sing Edison
3f96b2da7a
Add Custom ConfigMap Support for ingress-nginx
6 years ago
RongZhang
dbf40bbbb8
docker-ce instead of docker-engine repo ( #2423 )
* Use docker-ce 17.03.2
* Docker-engine may be discarded
6 years ago
zhengchuan hu
646d473e8e
fix the name of some variable
6 years ago
RongZhang
388b627f72
Enable OOM killing for etcd-events
Enable OOM killing like docker run etcd
6 years ago
Dominic Lam
f9019ab116
Adding ssh_private_key_file to ProxyCommand
This is trying to match what the roles/bastion-ssh-config is trying to do. When the setup is going through bastion, we want to ssh private key to be used on the bastion instance.
6 years ago
Michael Beatty
07657aecf4
add support for azure vnetResourceGroup
6 years ago
Wong Hoi Sing Edison
e65904eee3
Add labels for ingress_nginx_namespace, also only setup serviceAccountName if rbac_enabled
6 years ago
Ayaz Ahmed Khan
89847d5684
Explicitly defines the --kubelet-preferred-address-types parameter
to the API server configuration.
This solves the problem where if you have non-resolvable node names,
and try to scale the server by adding new nodes, kubectl commands
start to fail for newly added nodes, giving a TCP timeout error when
trying to resolve the node hostname against a public DNS.
7 years ago
Jonas Kongslund
585303ad66
Start with three dashes for consistency
6 years ago
Jonas Kongslund
a800ed094b
Added support for webhook authentication/authorization on the secure kubelet endpoint
6 years ago
Wong Hoi Sing Edison
fd46442188
Integrate kubernetes/ingress-nginx 0.11.0 to Kubespray
6 years ago
Matthew Mosesohn
9837b7926f
Use proper lookup of etcd host for calico ( #2408 )
Fixes #2397
6 years ago
rong.zhang
2a3b48edaf
Delete unused fedora docker repo
6 years ago
RongZhang
67ffd8e923
Add etcd-events cluster for kube-apiserver ( #2385 )
Add etcd-events cluster for kube-apiserver
6 years ago
Matthew Mosesohn
7ef9f4dfdd
Revert "Add pre-upgrade task for moving credentials file" ( #2393 )
6 years ago
Brad Beam
ad89d1c876
Update pre_upgrade.yml
6 years ago
Simon Li
6b80ac6500
Fix indexing of supplementary DNS in openssl.conf
6 years ago
Miouge1
2257dc9baa
Install latest version of Helm
6 years ago
Dmitry Vlasov
977e7ae105
remove obsolete init image, bump dashboard version 1.8.1 -> 1.8.3
6 years ago
Matthew Mosesohn
bc0fc5df98
Use node cert for etcd tasks instead of delegating to first etcd ( #2386 )
For etcdctl commands, use admin cert instead of node because this file
doesn't exist on etcd only hosts.
6 years ago
Matthew Mosesohn
bb469005b2
Add pre-upgrade task for moving credentials file
6 years ago
Brad Beam
89ade65ad6
Fixing etcd certs for calico rr ( #2374 )
6 years ago
RongZhang
128d3ef94c
Fix run kubectl error ( #2199 )
* Fix run kubectl error
Fix run kubectl error when first master doesn't work
* if access_ip is define use first_kube_master
else different master use a different ip
* Delete set first_kube_master and use kube_apiserver_access_address
6 years ago
RongZhang
b7e06085c7
Upgrade to Kubernetes v1.9.3 ( #2323 )
Upgrade to Kubernetes v1.9.3
6 years ago
Brad Beam
31659efe13
Fixing cert name in calico/canal for etcd check ( #2358 )
6 years ago
Nedim Haveric
2bd3776ddb
fix apiserver manifest when disabling insecure_port
6 years ago
Brad Beam
c874f16c02
Fixing credential lookup for fe proxy and vault ( #2361 )
6 years ago
Maxim Krasilnikov
ba91304636
Fixed generate front proxy client certs with vault ( #2359 )
* Fixed generate front proxy client certs with vault
* fix vault cert management
* Distrebute etcd node certs to vault hosts
6 years ago
Andreas Krüger
42a0f46268
Add health check to kube proxy ( #2356 )
Adding health checking to kube proxy. Fixes #2308
6 years ago
Andreas Krüger
d84ff06f73
Set filemode to 0640 ( #2315 )
* Set filemode to 0640
weave-net.yml file is readable by all users on the host. It however contains the weave_password to encrypt all pod communication. It should only be readable by root.
* Set mode 0640 on users_file with basic auth
6 years ago
Matthew Mosesohn
87f33a4644
Use CNI to assign kube_pods_subnet for calico
Now calico can be deployed if there are other existing pools
and not confuse IPAM and end up with pods in the wrong pools.
6 years ago
Dann Bohn
2d69b05c77
set local_release_dir in downloads to match others
6 years ago
Dann Bohn
2eb57ee5cd
default kube_proxy_mode in kubernetes-defaults
6 years ago
Chris Mildebrandt
85c69c2a4a
Add check for atomic hosts in template
6 years ago
Matthew Mosesohn
c20f38b89c
retry unmount kubelet dirs
6 years ago
Wong Hoi Sing Edison
d4c61d2628
Fixup for gce_centos7-flannel-addons
6 years ago
Wong Hoi Sing Edison
deef47c923
Upgrade Local Volume Provisioner Addon to v2.0.0
6 years ago
Chris Mildebrandt
c19d8994b9
Set TasksMax to infinity on any OS with systemd
6 years ago
melkosoft
f13e76d022
Added cilium support ( #2236 )
* Added cilium support
* Fix typo in debian test config
* Remove empty lines
* Changed cilium version from <latest> to <v1.0.0-rc3>
* Add missing changes for cilium
* Add cilium to CI pipeline
* Fix wrong file name
* Check kernel version for cilium
* fixed ci error
* fixed cilium-ds.j2 template
* added waiting for cilium pods to run
* Fixed missing EOF
* Fixed trailing spaces
* Fixed trailing spaces
* Fixed trailing spaces
* Fixed too many blank lines
* Updated tolerations,annotations in cilium DS template
* Set cilium_version to iptables-1.9 to see if bug is fixed in CI
* Update cilium image tag to v1.0.0-rc4
* Update Cilium test case CI vars filenames
* Add optional prometheus flag, adjust initial readiness delay
* Update README.md with cilium info
6 years ago
Dann Bohn
95e2bde15b
set nodeName to "{{ inventory_hostname }}" in kubeadm-config
6 years ago
Miouge1
4c280e59d4
Use legacy policy config to apply the scheduler policy
6 years ago
RongZhang
c0aad0a6d5
Fix install etcd by host service ( #2297 )
Fix bug issues #2289
6 years ago
Andreas Krüger
41ca67bf54
Added iptables lock fix and ajusted oom-score
xtables lock was missing. Added new option for oom-score to make sure it's not killed in an OOM situation before regular pods.
6 years ago
Virgil Chereches
d72232f15b
Increased timeout values for k8s API server restart
6 years ago
Maxim Krasilnikov
03c61685fb
Added apiserver extra args variable for kubeadm config ( #2291 )
6 years ago
RongZhang
bbb1da1a83
Fix default_resolver is undefined
fix issues #2265
6 years ago
Wong Hoi Sing Edison
07075add3d
Add optional StorageClass name with cephfs_provisioner_storage_class
6 years ago