Kay Yan
0f9f9fb569
support kube-proxy nftables ( #12060 )
...
Signed-off-by: Kay Yan <kay.yan@daocloud.io>
2025-03-26 01:32:33 -07:00
Max Gautier
f9a263090a
Propagate v-less version everywhere
2025-03-05 16:18:39 +01:00
Boris
a51e7dd07d
refact ip stack ( #11953 )
2025-02-11 03:37:58 -08:00
Antoine Legrand
4373c1be1d
Revert "Add support for ipv6 only cluster via "enable_ipv6only_stack_networks…" ( #11941 )
...
This reverts commit 76c0a3aa7578a3a66cdc98ba962febf6c19ddb3c.
2025-02-03 07:06:58 -08:00
Boris
76c0a3aa75
Add support for ipv6 only cluster via "enable_ipv6only_stack_networks" ( #11831 )
2025-01-27 04:15:22 -08:00
ERIK
540c6ddb96
remove legacy kubelet container pre-upgrade tasks ( #11805 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2024-12-17 09:38:54 +01:00
ChengHao Yang
38cd05c503
Refactor: simpify cloud_provider is defined condition
...
For this change, `cloud_provider` change the default value to empty
string.
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2024-11-05 08:32:39 +08:00
ChengHao Yang
c27cc33bd7
Refactor: var kube_override_hostname only reserve in kubespray-defaults
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2024-11-05 01:00:39 +08:00
ChengHao Yang
437026f514
Cleanup: remove all cloud_provider related tasks & files
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2024-11-05 00:51:00 +08:00
Kubernetes Prow Robot
3f027abae6
Merge pull request #11598 from VannTen/cleanup/fact_gathering
...
Do not serialize fact gathering for no_proxy
2024-10-31 10:59:26 +00:00
kyrie
693eb74f52
fix kube-vip container securityContext ( #11647 )
2024-10-21 17:42:52 +01:00
Max Gautier
2826b357d4
Remove serialized collect of ansible_default_ipv4
...
The fallback_ips tasks are essentially serializing the gathering of one
fact on all the hosts, which can have dramatic performance implications
on large clusters (several minutes).
This is essentially a reversal of 35f248dff0ddb430e2293af98ba73aa5062c89c1
Being able to run without refreshing the cache facts is not worth it.
We keep fallback_ip for now, simply changing the access to a normal
hostvars variable instead of a custom dictionnary.
2024-10-04 14:19:20 +02:00
Max Gautier
9f45552201
Cleanup redundancy
...
k8s_cluster = kube_control_plane + kube_node
2024-09-24 11:16:30 +02:00
Kubernetes Prow Robot
03a055c383
Merge pull request #10643 from VannTen/cleanup/k8s_node_templates
...
Refactor kubernetes/node templates
2024-09-23 14:16:00 +01:00
Max Gautier
2ec1c93897
Test group membership with group_names
...
Testing for group membership with group names makes Kubespray more
tolerant towards the structure of the inventory.
Where 'inventory_hostname in groups["some_group"] would fail if
"some_group" is not defined, '"some_group" in group_names' would not.
2024-09-21 14:09:09 +02:00
Max Gautier
c3de25c782
Move the CRI endpoint setting to kubelet config ( #11550 )
...
The `--container-runtime-endpoint` kubelet argument is deprecated in
favor of the config file alternative.
2024-09-18 01:34:45 +01:00
Max Gautier
fe60832a02
Remove kubelet_node_{custom_flags,config_extra_args}
...
There is no need to have an extra variables for this, just use different
values per host (using Ansible group_vars, for example)
2024-09-06 09:35:34 +02:00
Max Gautier
1bc61c9f35
Simplify kubelet-config template
...
Remove system|kube_master_<resource>_reserved variables.
Those variables are unnecessary because users can simply use the
variables in group_vars if they which to differentiate control plane
nodes from other nodes.
Set conservative defaults for ephemeral-storage and pids for both kube
and system reserved resources.
2024-09-06 09:33:07 +02:00
Max Gautier
1533d40411
Fix kube_reserved_cgroups_for_service_slice
...
The default value is used across kubespray but only defined in
kubernetes/node.
Move it to kubespray-defaults
2024-09-06 09:25:23 +02:00
Bogdan Sass
4b324cb0f0
Rename master to control plane - non-breaking changes only ( #11394 )
...
K8s is moving away from the "master" terminology, so kubespray should follow the same naming conventions. See 65d886bb30/sig-architecture/naming/recommendations/001-master-control-plane.md
2024-09-06 07:56:19 +01:00
Vlad Korolev
9a7b021eb8
Do not use ‘yes/no’ for boolean values ( #11472 )
...
Consistent boolean values in ansible playbooks
2024-08-28 06:30:56 +01:00
Selçuk Arıbalı
e43e08c7d1
fix: use super-admin.conf for kube-vip on first master when it exists ( #11422 )
...
* fix: use super-admin.conf for kube-vip when it exists
* Mathieu Parent add as co-author
Co-authored-by: Mathieu Parent <math.parent@gmail.com>
* template change for readability
* fix lint error
---------
Co-authored-by: Mathieu Parent <math.parent@gmail.com>
2024-08-10 21:35:58 -07:00
R. P. Taylor
468c5641b2
fix kube_reserved so it only controls kubeReservedCgroup ( #11367 )
2024-07-26 01:39:20 -07:00
Lihai Tu
8208a3f04f
Rename systemd module to systemd_service ( #11396 )
...
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2024-07-26 01:11:39 -07:00
Bas
8f5f75211f
Improving yamllint configuration ( #11389 )
...
Signed-off-by: Bas Meijer <bas.meijer@enexis.nl>
2024-07-25 18:42:20 -07:00
Serge Hartmann
db316a566d
dependencies for kubelet.service ( #11297 )
...
Signed-off-by: serge Hartmann <serge.hartmann@gmail.com>
2024-06-26 02:30:34 -07:00
Lihai Tu
921b0c0bed
Add options to control images pulling of kubelet ( #11094 )
...
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2024-06-21 07:54:54 -07:00
Max Gautier
d50f61eae5
pre-commit: apply autofixes hooks and fix the rest manually
...
- markdownlint (manual fix)
- end-of-file-fixer
- requirements-txt-fixer
- trailing-whitespace
2024-05-28 13:26:44 +02:00
Jorge Isnardo Altamirano
40cbdceb3c
Merge branch 'kubernetes-sigs:master' into master
2024-05-20 08:32:00 +02:00
tico88612
f85111f6d4
CI: add ubuntu 24.04 support ( #11132 )
...
Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>
2024-05-18 00:35:20 -07:00
Jorge Isnardo Altamirano
a09c73a356
Update kube-vip manifests to v0.8.0
2024-05-07 11:38:13 +02:00
Jorge Isnardo Altamirano
537891a380
Update kube-vip manifests to v0.8.0
2024-05-02 16:37:49 +02:00
Jorge Isnardo Altamirano
e57e958a39
Update kube-vip to v0.8.0
2024-05-02 09:45:30 +02:00
Lihai Tu
23b56e3f89
Enclose the cpu type with quotation marks in kubelet-config.v1beta1 ( #11111 )
...
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2024-04-25 00:32:06 -07:00
Barry M
1b870a1862
Update kubelet systemd service default allowed IP addresses for cluster hardening ( #11061 )
...
Signed-off-by: bmelbourne <barry.melbourne0@gmail.com>
2024-04-11 00:58:27 -07:00
kyrie
baf4842774
make kube-vip LeaderElection variables configurable ( #11021 )
...
Signed-off-by: KubeKyrie <shaolong.qin@daocloud.io>
2024-03-25 02:24:57 -07:00
Tom M
e7d29715b4
Add kubelet_cpu_manager_policy_options ( #11023 )
2024-03-22 12:21:39 -07:00
Takuya Murakami
785366c2de
[kubernetes] Support kubernetes 1.29 ( #10820 )
...
* [kubernetes] Make kubernetes 1.29.1 default
* [cri-o]: support cri-o 1.29
Use "crio status" instead of "crio-status" for cri-o >=1.29.0
* Remove GAed feature gates SecCompDefault
The SecCompDefault feature gate was removed since k8s 1.29
https://github.com/kubernetes/kubernetes/pull/121246
2024-01-31 00:57:23 -08:00
Ugur Can Ozturk
7863fde552
[apiserver-kubelet/tracing]: add distributed tracing config variables ( #10795 )
...
* [apiserver-kubelet/tracing]: add distributed tracing config flags
Signed-off-by: Ugur Ozturk <ugurozturk918@gmail.com>
* [apiserver-kubelet/tracing]: add distributed tracing config flags - fix
Signed-off-by: Ugur Ozturk <ugurozturk918@gmail.com>
* [apiserver-kubelet/tracing]: add distributed tracing config flags - fix
Signed-off-by: Ugur Ozturk <ugurozturk918@gmail.com>
---------
Signed-off-by: Ugur Ozturk <ugurozturk918@gmail.com>
2024-01-25 10:24:35 +01:00
Maxime Leroy
ab0163a3ad
fix(kubernetes): taint nodes with kubectl ( #10705 )
...
Signed-off-by: Maxime Leroy <19607336+maxime1907@users.noreply.github.com>
2024-01-23 15:46:13 +01:00
yun
13e1f33898
Correct the POLY1305 cipher suites by adding the suffix _SHA256 ( #10641 )
2024-01-22 18:00:52 +01:00
Max Gautier
22bb0976d5
Adjust kubelet_event_record_qps to K8S default ( #10826 )
...
Also remove redundant check in the kubelet config template (we define a
default, so the setting will always be "true")
2024-01-22 17:49:14 +01:00
Louis Tu
a656b7ed9a
Add kube_vip_lb_fwdmethod option for kube-vip ( #10762 )
...
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2024-01-09 08:22:13 +01:00
Andrei Costescu
c3b674526d
Fix modprobe module on Flatcar ( #10678 )
...
* Fix modprobe module on Flatcar
* Add todo about upstream issue report
2023-12-21 16:16:34 +01:00
Max Gautier
471326f458
Remove PodSecurityPolicy support and references ( #10723 )
...
This is removed from kubernetes since 1.25, time to cut some dead code.
2023-12-18 14:13:43 +01:00
Max Gautier
612cfdceb1
Check conntrack module presence instead of kernel version ( #10662 )
...
* Try both conntrack modules instead of checking kernel version
Depending on kernel distributor, the kernel version might not be a
correct indicator of the conntrack module use.
Instead, we check both (and use the first found).
* Use modproble.persistent rather than manual persistence
2023-11-28 18:31:02 +01:00
AbhishekKr
6b1188e3dc
[fix] modprobe_nf_conntrack for new Linux Kernel, when using ipvs ( #10625 )
...
Signed-off-by: AbhishekKr <abhikumar163@gmail.com>
2023-11-20 09:48:06 +01:00
Max Gautier
0d4f57aa22
Validate systemd unit files ( #10597 )
...
* Validate systemd unit files
This ensure that we fail early if we have a bad systemd unit file
(syntax error, using a version not available in the local version, etc)
* Hack to check systemd version for service files validation
factory-reset.target was introduced in system 250, same version as the
aliasing feature we need for verifying systemd services with ansible.
So we only actually executes the validation if that target is present.
This is an horrible hack which should be reverted as soon as we drop
support for distributions with systemd<250.
2023-11-17 20:01:23 +01:00
borgiacis
802da0bcb0
Create variables for ipvs kernel modules ( #10580 )
...
* Create variables for ipvs kernel modules
* Corrected kubernetes role node task missing name
* Added changes as suggested during review by VannTen
2023-11-08 12:44:02 +01:00
Max Gautier
8ebeb88e57
Refactor "multi" handlers to use listen ( #10542 )
...
* containerd: refactor handlers to use 'listen'
* cri-dockerd: refactor handlers to use 'listen'
* cri-o: refactor handlers to use 'listen'
* docker: refactor handlers to use 'listen'
* etcd: refactor handlers to use 'listen'
* control-plane: refactor handlers to use 'listen'
* kubeadm: refactor handlers to use 'listen'
* node: refactor handlers to use 'listen'
* preinstall: refactor handlers to use 'listen'
* calico: refactor handlers to use 'listen'
* kube-router: refactor handlers to use 'listen'
* macvlan: refactor handlers to use 'listen'
2023-11-08 12:28:30 +01:00
