kubespray

Commit Graph

Author	SHA1	Message	Date
Arthur Outhenin-Chalandre	c4346e590f	kubeadm/etcd: use config to download certificate (#9609 ) This commit uses a kubeadm join config to pull down cert for etcd in workers nodes (which is needed in some circumstances, for instance with calico or cilium). The previous way didn't allow us to pass certain parameters which was typically given in the config in other kubeadm invokations in Kubespray. This made kubeadm produced some errors for some edge cases. For example, in our deployment we don't have a default route and even though it's only to download the certificates, kubeadm produce an error `unable to select an IP from default routes` (these command are kubeadm controlplane command, so kubeadm does some additional checks). This is fixed by specifying `advertiseAddress` within the kubeadm config. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>	1 year ago
Florian Ruynat	bd81c615c3	Add k8s 1.24.10 hashes (#9688 )	1 year ago
Mohamed Zaian	3d9fd082ff	[containerd] add hashes for 1.5.x (#9678 )	1 year ago
yanggang	826282fe89	Add k8s hashes for k8s version. (#9685 ) Signed-off-by: yanggang <gang.yang@daocloud.io> Signed-off-by: yanggang <gang.yang@daocloud.io>	1 year ago
yanggang	73774326b3	supplement the omit cni-version in readme.md (#9684 ) Signed-off-by: yanggang <gang.yang@daocloud.io> Signed-off-by: yanggang <gang.yang@daocloud.io>	1 year ago
MatthieuFin	374438a3d6	feat(calico): add possibility to enable calico floatingIPs feature (#9680 ) Add a variable `calico_felix_floatingIPs` which permit to enable calico feature `floatingIPs` (disabled per default). Signed-off-by: MatthieuFin <matthieu2717@gmail.com> #9679	1 year ago
yanggang	fd80ef1ff1	[argocd] update argocd to v2.5.7 (#9682 ) Signed-off-by: yanggang <gang.yang@daocloud.io> Signed-off-by: yanggang <gang.yang@daocloud.io>	1 year ago
Mohamed Zaian	235173bb5f	[flannel] update to v0.20.2 & make it default (#9675 )	1 year ago
Mohamed Zaian	1750dec254	[feature] add mzaian to reviewers (#9676 )	1 year ago
ERIK	52f52db8f3	Add crio-related URLs to offline.yml (#9681 ) Signed-off-by: bo.jiang <bo.jiang@daocloud.io> Signed-off-by: bo.jiang <bo.jiang@daocloud.io>	1 year ago
Cyclinder	db94812163	bump cni-plugins to v1.2.0 (#9671 ) Signed-off-by: cyclinder qifeng.guo@daocloud.io Signed-off-by: cyclinder qifeng.guo@daocloud.io	1 year ago
Arthur Outhenin-Chalandre	4a6eb7eaa2	enable back kubelet_authorization_mode_webhook by default (#9662 ) In `6db6c8678c`, this was disabled becaue kubesrpay gave too much permissions that were not needed. This commit re-enable back this option by default and also removes the extra permissions that kubespray gave that were in fact not needed. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>	1 year ago
Mathieu Parent	58fe1a0ed6	Terraform vsphere cleanup (#9672 ) * contrib/terraform/vsphere: mark vsphere_password as sensitive Signed-off-by: Mathieu Parent <math.parent@gmail.com> * contrib/terraform/vsphere: remove unused modules Signed-off-by: Mathieu Parent <math.parent@gmail.com>	1 year ago
Mathieu Parent	c80bb0007a	contrib/terraform/gcp: allow extra ingress firewalls (#9658 ) Signed-off-by: Mathieu Parent <math.parent@gmail.com> Signed-off-by: Mathieu Parent <math.parent@gmail.com>	1 year ago
rongfu.leng	8a03bb1bb4	add containerd config_path (#9566 ) Signed-off-by: rongfu.leng <rongfu.leng@daocloud.io> Signed-off-by: rongfu.leng <rongfu.leng@daocloud.io>	1 year ago
Vitaly Yakovenko	d919c58e21	[multus] added support for mixed type of container engine (#9224 ) * [multus] added support for mixed type of container engine * [multus] fixed for using with cluster/upgrade-cluster/scale playbooks	1 year ago
Mohamed Zaian	19bc610f44	Update pause image version to v3.8 (#9668 ) Signed-off-by: Mohamed Zaian <mohamedzaian@gmail.com> Signed-off-by: Mohamed Zaian <mohamedzaian@gmail.com>	1 year ago
Cyclinder	85a5a79ef5	doc: don't set calico_vxlan_mode_ipv6=vxlanAlways when kernel < 3.12 (#9645 ) Signed-off-by: cyclinder qifeng.guo@daocloud.io Signed-off-by: cyclinder qifeng.guo@daocloud.io	1 year ago
Mohamed Zaian	c7cffb14a7	[cert-manager] update cert-manager to v1.11.0 (#9661 )	1 year ago
Jochen Friedrich	6f61f3d9cb	Support OVN Interconnect (#9599 ) Mostly taken from: https://raw.githubusercontent.com/kubeovn/kube-ovn/master/yamls/ovn-ic.yaml.j2	1 year ago
yanggang	6b4bb2a121	[argocd] update argocd to v2.5.6 (#9654 ) Signed-off-by: yanggang <gang.yang@daocloud.io> Signed-off-by: yanggang <gang.yang@daocloud.io>	1 year ago
ERIK	e288449c5d	Update cri-dockerd version (#9659 ) * Skip retry operation with containerd when etcd installed on host VM (#9560) Signed-off-by: bo.jiang <bo.jiang@daocloud.io> * Update cri-dockerd version Signed-off-by: bo.jiang <bo.jiang@daocloud.io> Signed-off-by: bo.jiang <bo.jiang@daocloud.io> Co-authored-by: Eugene Artemenko <artemenko.evgeniy@gmail.com>	1 year ago
László Rafael	ea35021c96	Add defaults for external_vsphere_user and external_vsphere_password in the vsphere csi_driver (#9664 )	1 year ago
luksi1	754424eca7	Push pipeline image even on master and schedules	1 year ago
Luke Simmons	4ad56e2772	Fix for creating VirtualMachine (#9657 )	1 year ago
Eugene Artemenko	6f1352eb53	Skip retry operation with containerd when etcd installed on host VM (#9560 )	1 year ago
Cyclinder	bf8c64af08	feature request: add cyclinder to reviewers (#9646 ) Signed-off-by: cyclinder qifeng.guo@daocloud.io Signed-off-by: cyclinder qifeng.guo@daocloud.io	1 year ago
Luke Simmons	a98ab40434	Adds pipeline image (#9606 )	1 year ago
yanggang	6549bb12fc	follow containerd1 1.16.15 (#9644 ) Signed-off-by: yanggang <gang.yang@daocloud.io> Signed-off-by: yanggang <gang.yang@daocloud.io>	1 year ago
Kay Yan	1329d3f03b	add-test-for-rockylinux9-cilium (#9562 )	1 year ago
Kay Yan	843e908fa4	update-calico-VXLAN-docs (#9639 )	1 year ago
R. P. Taylor	0ff883afeb	streamline ansible_default_ipv4 gathering loop (#9281 )	1 year ago
Marijn van der Giesen	0d5bcd3e20	feat(coredns): Forward extra domains to coredns kubernetes plugin (#9635 )	1 year ago
tu1h	a8cef962e2	Add retry to avoid 'unknown' state for calicoctl (#9633 ) Signed-off-by: tu1h <lihai.tu@daocloud.io> Signed-off-by: tu1h <lihai.tu@daocloud.io>	1 year ago
Cyclinder	b50890172b	calico: add vxlan-v6.calico to the list of NM unmanaged interfaces (#9631 ) Signed-off-by: cyclinder qifeng.guo@daocloud.io Signed-off-by: cyclinder qifeng.guo@daocloud.io	1 year ago
Fredrik Liv	ffad2152b3	Added override variable, additional server groups and cloudinit config (#9452 )	1 year ago
Kay Yan	6674438849	fix-ci-issue (#9640 )	1 year ago
Ho Kim	4bc5e8d912	Skip removing nodes if cluster is not set (#9430 )	1 year ago
Anthony D'Atri	8ca0bfffe0	Minor cleanup of README.md and two other docs (#9621 ) Signed-off-by: Anthony D'Atri <anthony.datri@gmail.com> Signed-off-by: Anthony D'Atri <anthony.datri@gmail.com>	1 year ago
Florian Ruynat	48282a344f	Fix wording in amazonlinux.md	1 year ago
mKlaris	050fde6327	Add enableServicesElection env variable. (#9595 )	1 year ago
Jochen Friedrich	4d3104b334	Reset role: Remove kube-ovn log directories (#9625 )	1 year ago
my-git9	85fa6af313	cleanup: replace node-role.kubernetes.io/master (#9627 ) Signed-off-by: xin.li <xin.li@daocloud.io> Signed-off-by: xin.li <xin.li@daocloud.io>	1 year ago
Shelming.Song	1c4db6132d	optimize cgroups settings for node reserved (#9209 ) * optimize cgroups settings for node reserved * fix * set cgroup slice for multi container engine * set cgroup slice for crio * add reserved cgroups variables to sample files * Compatible with cgroup path for different container managers * add cgroups doc * fix markdown	1 year ago
Jochen Friedrich	744c81d451	Remove ovn.kubernetes.io/ovs_dp_type from nodeSelector (#9594 ) Remove extra tag requirement preventing openvswitch container to start.	1 year ago
Kenichi Omichi	61be93b173	Drop calico v3.21 support (#9515 ) At the upstream calico development, the v3.21 branch is not updated over 2 monthes. In addition, unnecessary error message is output at Kubespray deployment due to different URLs for calico v3.21 or v3.22+ This drops the v3.21 support to solve the issue.	1 year ago
ERIK	406fbdb4e7	Update the tag of the flannel image (#9528 ) Signed-off-by: bo.jiang <bo.jiang@daocloud.io> Signed-off-by: bo.jiang <bo.jiang@daocloud.io>	1 year ago
Jochen Friedrich	136f14dec4	Cluster support for ovn-central. (#9596 ) Without minimal cluster configuration, even on a one node control plane, the health check of the ovn-cental container always fails as it queries the cluster/status.	1 year ago
Marijn van der Giesen	ab80342750	[feat] Add custom options to coredns kubernets plugin (#9608 )	1 year ago
Kevin Huang	2c2e608eac	fix(k8s-certs-renew): Use kube_apiserver_port instead of hard-coding (#9620 ) Signed-off-by: Kevin Huang <git@kevin.huang.to> Signed-off-by: Kevin Huang <git@kevin.huang.to>	1 year ago

... 5 6 7 8 9 ...

7242 Commits (f8b93fa88a28042510ebec7587937c66786573b9) All Branches Search

7242 Commits (f8b93fa88a28042510ebec7587937c66786573b9)

All Branches