Kim Hyunyoung, Abel
e1be469995
fix: do not mount hubble-ui tls volume when cilium_hubble_tls_generate is false ( #12143 )
4 months ago
Max Gautier
23d8c9a820
CI: enabled all jobs on daily CI ( #12207 )
4 months ago
Max Gautier
e618421697
Don't run upgrade-patch jobs on forks ( #12206 )
With the current github-workflow setup, workflows are triggered on every
forked repository (which is quite wasteful).
Add a condition to only run on the main repository.
4 months ago
Max Gautier
7db2aa1cba
Rename kubespray-defaults to kubespray_defaults
Role names in ansible collection should not contains hyphens.
4 months ago
Kubernetes Prow Robot
0c8dfb8e43
Merge pull request #12185 from VannTen/cleanup/iproute_with_the_rest
Move package installation to bootstrap-os
4 months ago
Max Gautier
25e4fa17a8
Split kubespray-defaults (-> `network_facts`)
kubespray-defaults currently does two things:
- records a number of default variable values (in particular values used
in several places)
- gather and compose some complex network facts (in particular,
`fallback_ip` and `no_proxy`
There is no actual reason to couple those two things, and it makes using
defaults more difficult (because computing the network facts is somewhat
expensive, we don't want to do it willy-nilly)
Split the two and adjust import paths as needed.
5 months ago
Max Gautier
bb4b2af02e
Drop install of python-libselinux for RHEL family below 8
RHEL 7 and derivates support has been removed from some time, clean up
of leftovers.
5 months ago
ChengHao Yang
27e93ee9f6
Feat: Gateway API early installation ( #12189 )
The Gateway API needs to be installed first if you want to use Cilium's
Gateway API functionality. The Gateway API is just CRD without any Pod,
Deployment, etc., so I think it can be brought forward to before the CNI
installation.
Signed-off-by: ChengHao Yang
4 months ago
dependabot[bot]
65bcddb9fd
build(deps): bump cryptography from 44.0.2 to 44.0.3 ( #12190 )
Bumps [cryptography](https://github.com/pyca/cryptography ) from 44.0.2 to 44.0.3.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/44.0.2...44.0.3 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 44.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 months ago
Chad Swenson
76707073c4
Fix indentation on AuthorizationConfiguration task ( #12197 )
4 months ago
Bas
a104fb6a00
kubedns_version no longer used ( #12201 )
This variable is documented, but not found in the rest of the sources.
4 months ago
ERIK
1c4b18b089
fix: arm64 checksums for youki and kata-containers ( #12173 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
4 months ago
Max Gautier
d6d87e9a83
Move cilium_deploy_additionnaly to kubespray-default ( #12191 )
Instead of using default(false) all over the place, use
kubespray-defaults
5 months ago
Max Gautier
985e4ebb23
Remove versions from inventory sample ( #12164 )
The recommended usage of kubespray is to use the default versions.
So putting them in inventory/sample is not really very helpful, and
causes:
- churn (keeping the inventory/sample up to date)
- support issues (mismatch between defaults and sample inventory)
Remove all concrete versions from the inventory sample.
5 months ago
Max Gautier
fcc294600c
Workaround missing etcd certds on control plane node ( #12181 )
5 months ago
Max Gautier
9631b5fd44
Move etcd inventory sample doc to role defaults
5 months ago
Max Gautier
a7d681abff
Install iputils with other packages
5 months ago
Max Gautier
5867fa1b9f
Move back iproute install to system_packages
Packages are now installed before network facts collection, so we can
install iproute with the rest.
5 months ago
Max Gautier
1e79c7b3cb
Move package install to bootstrap-os
5 months ago
Max Gautier
34d64d4d04
Remove outdated comment
bootstrap-os does not do anything in sudoers since e2ad6aad5
(bootstrap:
rework role (#4045 ), 2019-02-11).
So SSH pipelining working is effectively a pre-requisite anyway.
5 months ago
Max Gautier
87726faab4
Move check 'sorted pkgs list to pre-commit'
This is a lint check, which should not live in the playbook itself.
5 months ago
Max Gautier
1b9919547a
Split 'offline' assert into their own role
The preinstall assert cover a number of things, many of which depends
only on the inventory, and can be run without any ansible_facts
collected.
Split them off to simplify re-ordering.
5 months ago
Kubernetes Prow Robot
84d96d5195
Merge pull request #12165 from tico88612/fix/failing-test-coredns-autoscaler
Feat: add `dns_autoscaler_affinity` and remove in-place values
5 months ago
ChengHao Yang
1374a97787
Test: ubuntu22-calico-all-in-one-upgrade disable dns autoscaler
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
5 months ago
bin.pan
6f0fc020e8
update containerd.options key name ( #12170 )
5 months ago
Takuya Murakami
f58a6e2057
docs: Fix offline-environment.md to add 'v' prefix of some versions ( #12166 )
* docs: Fix offline-environment.md to add 'v' prefix of some versions
Now some version variables (kube_version, etcd_version, etc) don't have 'v' prefix,
so you need to add 'v' prefix to download URLs.
* fix: Fix offline.yml to add 'v' prefix of some versions
5 months ago
Ali Afsharzadeh
09fad4886a
Fix path to facts.yml in node facts refresh section ( #12177 )
5 months ago
Ho Kim
c47711c2f2
fix: correct indent of cpuManagerPolicyOptions ( #12123 )
5 months ago
Karthik S
a3e6e66204
Etcd Certificates are not generated when adding nodes to an existing cluster with scale.yml ( #12120 )
* [Issue-12117]-Certificates for the new hosts are not generated during scale.yml
* [Issue-12117]-Certificates for the new hosts are not generated during scale.yml
* [Issue-12117]-Certificates for the new hosts are not generated during scale.yml
5 months ago
ChengHao Yang
2907936c85
Feat: add dns_autoscaler_affinity remove in-place values
Upstream has removed affinity, and fix upgrade failing test.
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
5 months ago
ChengHao Yang
71a323039f
Fix: kubelet-csr-approver moves to regular application installation ( #12141 )
This commit fixed the process to ensure that CCM is installed first to
avoid the chicken-and-egg problem.
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
5 months ago
ChengHao Yang
5e5e509698
Revert "Update cluster-proportional-autoscaler to v1.9.0 ( #11982 )" ( #12168 )
This reverts commit 16841a1fb0
.
5 months ago
Takuya Murakami
4a598c1ef3
Make kubernetes 1.32.4 default ( #12161 )
5 months ago
Aviral Agarwal
1da9f0dec4
Fixed kube-vip to use `kube-vip/kube-vip-iptables` image instead of `kube-vip/kube-vip` when `lb_fwdmethod` or `kube_vip_lb_fwdmethod` is set to `masquerade` ( #12145 )
5 months ago
ShinyaIshitobi
629a690886
fix: Enable NRI for containerd and disable plugin when nri_enabled is false ( #12152 )
* fix(containerd): always render NRI plugin block with conditional disable flag
* feat: enable Node Resource Interface plugin when using containerd
* fix: remove the
* fix: fix for linter
5 months ago
Mathieu Parent
16841a1fb0
Update cluster-proportional-autoscaler to v1.9.0 ( #11982 )
5 months ago
ERIK
22c19a40fa
feat: Update containerd and nerdctl checksums to latest versions ( #12154 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
5 months ago
ERIK
8f41a2886d
Update version comparison syntax and optimize whitespace ( #12146 )
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
5 months ago
Max Gautier
38cea5b866
Patch versions updates ( #12119 )
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
5 months ago
Ekko
4177289ef6
Fix typo in .gitlab-ci/kubevirt.yml ( #12134 )
Signed-off-by: Ekko Tu <lihai.tu@daocloud.io>
5 months ago
Kubernetes Prow Robot
4ad9f9b535
Merge pull request #11763 from tico88612/feat/gateway-api-v1.2.1
Refactor Gateway API installation process and bump Gateway API v1.2.1
5 months ago
ChengHao Yang
6f58b33de0
Deprecate `gateway_api_experimental_channel`
Please use `gateway_api_channel` and set `experimental`.
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
5 months ago
ChengHao Yang
9456e792f1
Remove unused Gateway API template
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
10 months ago
ChengHao Yang
7f60dda565
Refactor Gateway API manifests installation process
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
5 months ago
ChengHao Yang
582fe2cbde
Add Gateway API download information in kubespray-default
Remove old variables in kubernetes-apps/gateway_api
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
10 months ago
Max Gautier
79fbfdf271
component_hash_update: support calico_crds ( #12122 )
- add support for "no_arch" downloads: arch-indendendant files such as
YAML manifests, helm charts, etc.
- wire calico_crds with it.
5 months ago
ChengHao Yang
cfaf397d4a
Bump: OpenStack Cloud Controller Manager upgrade to v1.32.0 ( #12121 )
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
5 months ago
Kubernetes Prow Robot
2f404de77c
Merge pull request #12037 from VannTen/ci/convert_vagrant_to_kubevirt_2
CI: convert remaining vagrant jobs (except IPv6) to kubevirt + cleanups
5 months ago
Mohammd Reza Mollasalehi
d304966d75
doc: fix a broken link in the Calico documentation ( #12108 ) ( #12109 )
5 months ago
ChengHao Yang
4ce5510c1a
[rbd-provisioner] deprecate outdated application and documentation ( #12114 )
* Cleanup: deprecate rbd-provisioner application
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Docs: remove rbd-provisioner application
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
---------
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
5 months ago