f9df692056
Issue front proxy certs for vault
6 years ago
f193b12059
Kubeadm auto creates this
6 years ago
2cd254954c
Remove defaults of allowed names. Updated kubeadm
6 years ago
4dab92ce69
Rename from aggregator-proxy-client to front-proxy-client to match kubeadm design. Added kubeadm support too. Changed to use variables set and not hardcode paths. Still missing cert generation for Vault
6 years ago
b2d30d68e7
Rename CN for aggreator back. Add flags to apiserver when version is >= 1.9
6 years ago
82d10b882c
Added fixes from whereismyjetpack
6 years ago
0b4168cad4
WIP. Adding metrics-server support for K8s version 1.9
6 years ago
dc6a17e092
Use include/import tasks ( #2192 )
import_tasks will consume far less memory, so it should be
used whenever it is compatible.
6 years ago
240d4193ae
Update information about network sizes
6 years ago
ac66e98ae9
Upgrade to Kubernetes v1.9.1 ( #2152 )
Raise drain timeout to 5m
6 years ago
d2935ffed0
Optionally ignore the presence of extra calico pools ( #2190 )
6 years ago
714994cad8
iptables: flush nat table as well as filter table upon reset ( #2174 )
* iptables: flush nat table as well as filter table upon reset
* Indentation fix
6 years ago
bf1411060e
Add optional manual dns_mode ( #2178 )
6 years ago
a4d142368b
Renamed variable from disable_volume_zone_conflict to volume_cross_zone_attachment and removed cloud provider condition; fix identation
6 years ago
ae47b617e3
Fix 'no such host' problem ( #2148 )
Fix 'no such host' problem reported by commands *kubectl logs* and *kubectl exec*
when cloud_provider is OpenStack
Closes : #2147
6 years ago
e5b4011aa4
move hardcoded dnsmasq autoscaler image to its own variable
6 years ago
3125f93b3f
Added disable_volume_zone_conflict variable
6 years ago
1a9989ade9
move hardcoded dnsmasq autoscaler image to its own variable
6 years ago
8c45c88d15
Fix for Issue #2141 - added policy file
6 years ago
c87bb2f239
Fix for Issue #2141
6 years ago
32eeb9a0e0
Restart docker when http-proxy.conf changed.
6 years ago
df21fc8643
Remove initContainer
6 years ago
a9bb72c6fd
require-kubeconfig is depricated since k8s v1.8
6 years ago
9506c2e597
require-kubeconfig is deprecated since K8s v1.8
6 years ago
32884357ff
Add kubelet_custom_flags to kubelet.kubeadm.env.j2
6 years ago
88204642b7
updated weave to 2.1.3
6 years ago
1401286910
Add support for cert alt names for etcd ( #2139 )
* Add support for cert alt names for etcd
* Update gen_certs_vault.yml
6 years ago
12eb242224
fix fluentd template
6 years ago
df9faa1743
Add support for flex volumes plugins.
6 years ago
6ed2a60978
fix run dashboard error
6 years ago
bac3bf1a5f
Fix auto-evaluated API access endpoint for bind IP ( #2086 )
Auto configure API access endpoint with a custom bind IP, if provided.
Fix HA docs' http URLs are https in fact, clarify the insecure vs secure
API access modes as well.
Closes: #issues/2051
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
6 years ago
e3b684df21
Remove blank lines
Remove blank lines
6 years ago
e45b30d033
Add etcd key and cert environment variables for use with client auth
7 years ago
ad6fecefa8
Update Kubernetes to v1.9.0 ( #2100 )
Update checksum for kubeadm
Use v1.9.0 kubeadm params
Include hash of ca.crt for kubeadm join
Update tag for testing upgrades
Add workaround for testing upgrades
Remove scale CI scenarios because of slow inventory parsing
in ansible 2.4.x.
Change region for tests to us-central1 to
improve ansible performance
7 years ago
3fdb2ccf55
Revert back to using an empty var as default to exclude hostname ( #2110 )
7 years ago
29f5b55d42
remove unwanted whitespace for kube_override_hostname ( #2105 )
7 years ago
5aef52e8c0
fix dashboard certs secret
7 years ago
6bb46e3ecb
Fix param names in preparation for Kubernetes v1.9.0 ( #2098 )
This does not update v1.9.0, but fixes two incompatibilities
when trying to deploy v1.9.0.
7 years ago
127bc01857
Do not override kubelet hostname if cloud_provider is used ( #2095 )
Starting with Kubernetes v1.8.4, kubelet ignores the AWS cloud
provider string and uses the override hostname, which fails
Node admission checks.
Fixes #2094
7 years ago
a6975c1850
Rename runtime docker_version ( #2082 )
Renaming runtime docker_version to prevent setting that
value on the command line from breaking the play run.
This fixes #2081
7 years ago
b2cb0725ac
Default OpenStack Cinder Storage Class ( #2083 )
Add possibility to create default OpenStack Cinder Storage Class
Closes : #1609
7 years ago
b974b144a8
Add RBAC to binding Dahsboard UI
7 years ago
bfb25fa47b
Change vault cert ttl to 8y ( #2013 )
7 years ago
b135bcb9d9
Split download container task for delegate and non-delegate modes ( #2077 )
Ansible cannot seem to handle omitting delegate_to since v2.4.0.0.
Possibly related: https://github.com/ansible/ansible/issues/30760
7 years ago
0771cd8599
Remove dashboard_tls_key and dashboard_tls_cert
7 years ago
40edf8c6f5
Update dashboard version to v1.8.0
Update dependencies to be compatible with Kubernetes v1.8
7 years ago
e78562830f
Retry kube container removal during upgrade
As we have seen with other containers, sometimes container removal fails on the first attempt due to some Docker bugs. Retrying typically corrects the issue.
7 years ago
d3850a4da5
Fixing alt_names for vault cert generation
7 years ago
53a4355e60
set docker_version fact regardless of docker_dns in use
7 years ago
44b9dce134
Fix domain id for OpenStack provider
OpenStack authentication does not support using a mix of DomainID and
DomainName, only one or the other should be used.
7 years ago
woopstar
Matthew Mosesohn
Miouge1
mirwan
Virgil Chereches
Stanislav Makar
Erwan Miran
heping
rong.zhang
abelgana
Peter Slijkhuis
neith00
Lukasz Piatkowski
Philippe Chepy
Bogdan Dobrelya
Steve Mitchell
Jan Jungnickel
Evan Zeimet
Chad Swenson
Brad Beam
Spencer Smith
ArchiFleKs