kubespray

Commit Graph

Author	SHA1	Message	Date
rtsp	4bace2491d	Ensure apparmor is installed (#8011 ) Kubespray deployment failed when using containerd backend on nodes that apparmor was not installed or previously removed. This PR ensure apparmor is installed by adding it into required_pkgs var.	3 years ago
Kenichi Omichi	469b3ec525	Add definition check of disable_service_firewall (#7995 ) When not specifying disable_service_firewall, the task is failed. This adds the definition check.	3 years ago
Maxim Pogozhiy	22017b7ff0	kube-router 1.3.0 -> 1.3.1 (#8007 )	3 years ago
Florian Ruynat	88c11b5946	Revert "etcd: enable v2 api only if needed (#8001 )" (#8008 ) This reverts commit `c0e1211abe`.	3 years ago
Kenichi Omichi	843252c968	Use kube_config_dir for kubeconfig (#7996 ) The path of kubeconfig should be configurable, and its default value is /etc/kubernetes/admin.conf. Most paths of the file are configurable but some were not. This make those configurable.	3 years ago
Eric Lake	ddea79f0f0	Issue 8004: Fix typha prometheus (#8005 ) The typha prometheus settings were in the `volumeMounts` section of the spec and not in the `envs` section. This was cauing the deployment to fail because it was looking for a volumeMount. ``` failed: [controller-001.a2.da.dev.logdna.net] (item=calico-typha.yml) => {"ansible_loop_var": "item", "changed": false, "item": {"ansible_loop_var": "item", "changed": true, "checksum": "598ac79530749e8e2110793b53fc49ac208e7130", "dest": "/etc/kubernetes/calico-typha.yml", "diff": [], "failed": false, "gid": 0, "group": "root", "invocation": {"module_args": {"_original_basename": "calico-typha.yml.j2", "attributes": null, "backup": false, "checksum": "598ac79530749e8e2110793b53fc49ac208e7130", "content": null, "delimiter": null, "dest": "/etc/kubernetes/calico-typha.yml", "directory_mode": null, "follow": false, "force": true, "group": null, "local_follow": null, "mode": null, "owner": null, "regexp": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/core/.ansible/tmp/ansible-tmp-1632349768.56-75434-32452975679246/source", "unsafe_writes": null, "validate": null}}, "item": {"file": "calico-typha.yml", "name": "calico", "type": "typha"}, "md5sum": "53c00ac7f562cf9ecbbfd27899ea066d", "mode": "0644", "owner": "root", "size": 5378, "src": "/home/core/.ansible/tmp/ansible-tmp-1632349768.56-75434-32452975679246/source", "state": "file", "uid": 0}, "msg": "error running kubectl (/opt/bin/kubectl --namespace=kube-system apply --force --filename=/etc/kubernetes/calico-typha.yml) command (rc=1), out='service/calico-typha unchanged\n', err='error: error validating \"/etc/kubernetes/calico-typha.yml\": error validating data: [ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[2]): unknown field \"value\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[2]): missing required field \"mountPath\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[3]): unknown field \"value\" in io.k8s.api.core.v1.VolumeMount, ValidationError(Deployment.spec.template.spec.containers[0].volumeMounts[3]): missing required field \"mountPath\" in io.k8s.api.core.v1.VolumeMount]; if you choose to ignore these errors, turn validation off with --validate=false\n'"} ```	3 years ago
Max Gautier	c0e1211abe	etcd: enable v2 api only if needed (#8001 ) * etcd: enable v2 api only if needed Only enable v2 API if we have a consumer (flannel) This reduce the exposed surface for etcd. * Fix bad group name	3 years ago
Florian Ruynat	c8d7f000c9	Remove k8s hooks for versions prior to 1.20 (#7998 )	3 years ago
Léopold Jacquot	598f178054	Fix cilium operator metrics activation (#8000 )	3 years ago
Florian Ruynat	6f8b24f367	Allow failure in cert manager job	3 years ago
Florian Ruynat	5d1b34bdcd	Move min k8s version to 1.20	3 years ago
Florian Ruynat	8efde799e1	Update kubernetes version to 1.22.2	3 years ago
Florian Ruynat	96b61a5f53	Update KUBE_VERSION in gitlab-ci following release	3 years ago
Cristian Calin	a517a8db01	Drop chech for kubelet_shutdown_grace_period (#7993 ) and kubelet_shutdown_grace_period_critical_pods as ansible cannot do sane time interval calculations	3 years ago
Wang Zhen	2211504790	Fix k8s-certs-renew cp path (#7992 ) Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>	3 years ago
Cristian Calin	fb8662ec19	Calico: update versions 3.20.1, 3.19.3 (#7984 ) * make Calico 3.20.1 the default version * drop Calico 3.17.x support	3 years ago
Cristian Calin	6f7911264f	Calico: make calico_min_version check relevant (#7939 ) * Calico: make calico_min_version check relevant * Calico: only check currently installed version against the oldest supported version by the previous release	3 years ago
Cristian Calin	ae44aff330	Calico: increase calico node probe timeouts and allow tunning (#7981 )	3 years ago
Florian Ruynat	b83e8b020a	Fix default version (#7977 )	3 years ago
Hari Hud	30cd91dc6b	Add option to kubeadm upgrade command to control certificates renewal during control plane upgrade (#7976 ) * Add option to kubeadm upgrade command to control certificates renewal during control plane upgrade * Remove training whitespace	3 years ago
Florian Ruynat	09af3ab074	Set Kubernetes default version to 1.21.5	3 years ago
Florian Ruynat	f2fa9c3b31	Update hashes with new versions	3 years ago
Florian Ruynat	30a7dfa4f8	Fix ubuntu16/centos8 CI jobs (#7972 )	3 years ago
Samuel Liu	62ab477838	remove kube_proxy_conntrack_max var (#7971 )	3 years ago
Ray Terrill	1edb7d771f	Modify connection_strings_etcd to only return etcd nodes (#7966 ) Modify connection_strings_etcd to only return etcd nodes - not master nodes - since this results in duplicate hosts in the generated Ansible inventory and is unnecessary.	3 years ago
rtsp	f8a57f7598	Fix iptables missing on Debian 11 if APT::Install-Recommends=0 (#7964 ) On Debian 11, `ipset` just recommend `iptables` so on the system that apt is configured with `APT::Install-Recommends "0";` iptables will not install automatically.	3 years ago
andrew.k	85d18fc107	add node-based upgrade (#7785 )	3 years ago
Fredrik Liv	aa00c1d91a	Updated UpCloud terraform script to use private network and dynamic (#7779 ) additional disks	3 years ago
Vladimir Masarik	a5a88e41af	Fix: adding new ips with inventory builder (#7577 ) (#7583 ) * Fix: adding new ips with inventory builder (#7577) * moved conflig loading logic to after checking whether the config should be loaded, and added check for whether the config should be loaded * added check for removing nodes from config if the user wants to remove a node, we need to load the config * Fix tox errors	3 years ago
Bryan Hundven	35c928798d	Fix missing file mode (risky-file-permissions) (#7959 ) * Fix missing file mode (risky-file-permissions) Found this using ansible-lint. Signed-off-by: Bryan Hundven <bryanhundven@gmail.com> * Fix another missing file mode (risky-file-permissions) This one fixes `/etc/crio/config.json` Signed-off-by: Bryan Hundven <bryanhundven@gmail.com>	3 years ago
jhchong92	83f64a7ff9	Bugfix/cinder csi cloud config template (#7955 ) * Fix invalid condition for username and password inclusion * Use length filter to test variable conditions	3 years ago
Florian Ruynat	60853fa682	Update kube-ovn to 1.7.2	3 years ago
Florian Ruynat	b66356be65	Update cilium to 1.9.10	3 years ago
jhchong92	efae2dbad6	Update snapshot-controller repository and image versions (#7957 )	3 years ago
Florian Ruynat	a7b56a616d	Fix README for containerd/calico/certmanager/nginx (#7950 )	3 years ago
jhchong92	bd8b8916a8	Remove invalid spec - deployment.spec.serviceName (#7949 )	3 years ago
jhchong92	57063b6828	Replace incorrect {% end %} tags with {% endif %} in csi_crd templates (#7947 )	3 years ago
Ole Mathias Aa. Heggem	69b67a293a	Calico: Add kube_service_addresses_ipv6 to serviceClusterIPs (#7889 ) (#7944 ) Add IPv6 Service Addresses to BGP advertisement when calico_advertise_cluster_ips is true.	3 years ago
Cristian Calin	d57ddf0be8	Feature DynamicKubeletConfig is deprecated in 1.22 and will not move to GA (#7938 ) * Feature DynamicKubeletConfig is deprecated in 1.22 and will not move to GA * Add check for dynamic_kubelet_configuration with kube >= 1.22	3 years ago
Cristian Calin	43e7e2d663	nginx-ingress: bump to 1.0.0 to support kube 1.22 (#7942 )	3 years ago
Cristian Calin	d355b43dce	ContainerD: bump containerd version to 1.4.9 (#7940 )	3 years ago
Cristian Calin	5d52025266	crictl: add hashes for 1.22 (#7936 )	3 years ago
Cristian Calin	db470f8529	Update CSI snaphotter and make it independent (#7943 ) * CSI: update CSI snapshot CRDs * CSI: update snapshot controller tag version with kubernetes specific versions * CSI: allow enabling csi_snapshot_controller independent of Cinder CSI * CSI: Align csi-snapshot-controller with upstream and use a Deployment instead of a StatefulSet	3 years ago
Florian Ruynat	c8f3d88288	Retry vagrant and periodic packet jobs too	3 years ago
Florian Ruynat	b54cf5bd0a	Add git to kubespray image	3 years ago
Florian Ruynat	7e4b176323	Update Ansible tags in documentation (#7933 )	3 years ago
kranthi guttikonda	81bf4f9304	cri-o registry auth support (#7837 ) * cri-o registry auth support * yaml lint for comments * crio_registry_auth from registry_auth * crio_registry_auth as defaults	3 years ago
Maciej Wereski	e1967b0700	MetalLB: keep nodeSelector in one place (#7931 ) Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>	3 years ago
Olivier Lemasle	507091ec8b	Replace cluster_name by dns_domain (#7923 ) `cluster_name` defaults to `dns_domain` value (see [here][1] and [here][2]) but they could have different values. `dns_domain` should be used here instead of `cluster_name` because the DNS resolution is configured to use `dns_domain`. [1]: `0ef7af76bc/roles/kubespray-defaults/defaults/main.yaml (L104)` [2]: `1afdb05ea9/inventory/sample/group_vars/k8s_cluster/k8s-cluster.yml (L196)`	3 years ago
Florian Ruynat	c7529270ff	Fix CI script for Terraform >0.15 (#7928 )	3 years ago

... 7 8 9 10 11 ...

6415 Commits (fcb4c8fb613cbff702147e749b257b972e0e7859) All Branches Search

6415 Commits (fcb4c8fb613cbff702147e749b257b972e0e7859)

All Branches