Erwan Miran
|
166da2ffd0
|
Document podsecuritypolicy_enabled and kubernetes_audit
|
2018-09-13 18:07:15 +02:00 |
|
Erwan Miran
|
af74d85b7d
|
Remove --insecure-bind-address when insecure-port=0
|
2018-09-12 08:22:11 +02:00 |
|
Erwan Miran
|
e24b1220a0
|
Fix wrong sa name in crb when psp is enabled
|
2018-09-11 15:04:55 +02:00 |
|
Erwan Miran
|
04852ad753
|
Install Helm on all masters
|
2018-09-10 11:39:26 +02:00 |
|
Erwan Miran
|
1d2ae39cff
|
Precision on control machine mixed Ansible installation
|
2018-09-07 17:26:55 +02:00 |
|
Erwan Miran
|
a5509fc2ce
|
Remove insecure-port and insecure-bind-address when possible
|
2018-09-06 13:46:09 +02:00 |
|
Erwan Miran
|
ae0ed87c0f
|
Emphasis on docker recommended version
|
2018-09-04 14:34:04 +02:00 |
|
Erwan Miran
|
a644b7c267
|
Introducing credentials_dir in order to be able to override it
|
2018-09-03 18:04:50 +02:00 |
|
Erwan Miran
|
f0af7262b1
|
credentials directory should be ignored as inventory
|
2018-09-03 18:04:34 +02:00 |
|
Erwan Miran
|
c0ce875743
|
change edge to 18.06 for ubuntu
|
2018-09-03 14:11:25 +02:00 |
|
Erwan Miran
|
a22d28e1c1
|
docker 18.06 for ubuntu version before bionic
|
2018-09-03 14:10:51 +02:00 |
|
Erwan Miran
|
36a7bdfac1
|
Fix docker_options definition to remove newlines
|
2018-09-01 09:55:04 +02:00 |
|
Erwan Miran
|
059cd17b47
|
Fix target hosts generation when /etc/hosts does not contain 127.0.0.1 or ::1
|
2018-08-31 16:33:18 +02:00 |
|
Erwan Miran
|
81c3f2c971
|
etcd_events_access_address should be used for peer_url and client_url
|
2018-08-31 15:03:07 +02:00 |
|
Erwan Miran
|
82a28d6bb3
|
Add documentation about having HA for etcd
|
2018-08-31 14:40:25 +02:00 |
|
Erwan Miran
|
ceb97e5809
|
Fix wrong syntax for jinja sub list extraction and addition of missing role template
|
2018-08-29 12:58:10 +02:00 |
|
Erwan Miran
|
52ab54eeea
|
Fix missing quotes for audit-log-path and wrong placement of feature-gates
|
2018-08-28 09:05:57 +02:00 |
|
Erwan Miran
|
b395bb953f
|
Fix wrong when condition that ends up with jinja error when the content of /etc/hosts contains parenthesis
|
2018-08-27 21:20:57 +02:00 |
|
Erwan Miran
|
b652792a93
|
/root/.kube must to mounted in order for helm to read kubeconfig and not fallback to localhost:8080
|
2018-08-27 18:17:26 +02:00 |
|
Erwan Miran
|
1432e511a2
|
same work with less lines
|
2018-08-24 14:06:07 +02:00 |
|
Erwan Miran
|
a6a14e7f77
|
create the service account and roles even if the rbac is not enabled. it will just be ignored
|
2018-08-22 18:17:11 +02:00 |
|
Erwan Miran
|
80cfeea957
|
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
|
2018-08-22 18:16:13 +02:00 |
|
Erwan Miran
|
a7b0c454db
|
Localhost in hosts files should be updated (if necessary), not overriden
|
2018-08-22 12:10:49 +02:00 |
|
Erwan Miran
|
fc38b6d0ca
|
Ability to define custom audit polcy rules
|
2018-08-20 07:04:56 +02:00 |
|
Erwan Miran
|
c34900e569
|
Define apiserver flags directly instead of relying on auditPolicy section in order to have the ability to redirect audit log to stdout with kubeadm
|
2018-08-20 07:00:53 +02:00 |
|
Erwan Miran
|
98b818bbaf
|
comply with ansible syntax consistency guideline
|
2018-08-17 16:37:33 +02:00 |
|
Erwan Miran
|
7f16b46ed5
|
Reset tasks specific to a network_plugin moved inside its role directory + Reset tasks specific to cilium
|
2018-08-16 17:34:33 +02:00 |
|
Erwan Miran
|
54548d3b95
|
kubeadm mounts the hostpaths itself
|
2018-08-16 13:17:30 +02:00 |
|
Erwan Miran
|
58d4d65fab
|
minor variable fix and reuse + handle auditlog redirected to stdout
|
2018-08-16 12:51:09 +02:00 |
|
Erwan Miran
|
d3c0fe1fcb
|
Templates (even without actual templating inside) should have j2 extension but should not be rendered with j2 extension
|
2018-08-13 09:51:26 +02:00 |
|
Erwan Miran
|
494ff9522b
|
j2 extension should only be used for template filename, not target file on remote host
|
2018-08-09 11:29:45 +02:00 |
|
Erwan Miran
|
d3fdfee211
|
Only subdirectories in /var/lib/kubelet should be unmounted
|
2018-06-21 11:50:02 +02:00 |
|
Erwan Miran
|
11d87ecc37
|
removed surnumerary definition of contiv_etcd_init_image_* (already in download role)
|
2018-05-31 00:02:11 +02:00 |
|
Erwan Miran
|
3673ed6262
|
include contiv_etcd_init_image to downloads role
|
2018-05-29 17:05:33 +02:00 |
|
Erwan Miran
|
2a4fc70e1c
|
contiv-etcd-init image as default instead hardcoded
|
2018-05-28 11:11:18 +02:00 |
|
Erwan Miran
|
8ece922ef0
|
node_labels documentation + kube-ingress label handling as role_node_label
|
2018-03-31 00:36:11 +02:00 |
|
Erwan Miran
|
8b71ef8ceb
|
Labels from role (node-role.k8s.io/node) and labels from inventory are merged into node-labels parameter in kubelet
|
2018-03-21 09:19:05 +01:00 |
|
Erwan Miran
|
e9a676951b
|
storageClass name template as suggested by @eyeofthefrog
|
2018-02-09 00:11:07 +01:00 |
|
Erwan Miran
|
e1aaef7d4d
|
Removal of surnumerary slash
|
2018-02-08 09:06:17 +01:00 |
|
Erwan Miran
|
abfb147292
|
MountDir in configmap and daemonset must be the same
|
2018-02-07 18:42:42 +01:00 |
|
Erwan Miran
|
44eb03f78a
|
typo
|
2018-02-07 17:57:54 +01:00 |
|
Erwan Miran
|
857784747b
|
local-provisioner:v1.0.1 still expects json configmap
|
2018-02-07 17:47:05 +01:00 |
|
Erwan Miran
|
7a2cb5e41c
|
local-provisioner:v1.0.1 still uses VOLUME_CONFIG_NAME env to read ConfigMap
|
2018-02-07 17:01:19 +01:00 |
|
Erwan Miran
|
d53f45d4e2
|
missing double quotes for ansible
|
2018-02-07 09:24:00 +01:00 |
|
Erwan Miran
|
ca08614641
|
yamllint fix
|
2018-02-07 09:12:28 +01:00 |
|
Erwan Miran
|
e69979d5a2
|
keep local_volumes_enabled as deprecated
|
2018-02-07 07:58:50 +01:00 |
|
Erwan Miran
|
b4e264251f
|
JSON/YAML syntax fix
|
2018-02-06 17:17:10 +01:00 |
|
Erwan Miran
|
8006a6cd82
|
local_volumes_enabled replaced by local_volume_provisioner_enabled
|
2018-02-06 17:12:09 +01:00 |
|
Erwan Miran
|
5b98e15613
|
Merge branch 'hardcoded_dnsmasq-autoscaler_image' of github.com:mirwan/kubespray into hardcoded_dnsmasq-autoscaler_image
|
2018-01-18 16:04:35 +01:00 |
|
Erwan Miran
|
e5b4011aa4
|
move hardcoded dnsmasq autoscaler image to its own variable
|
2018-01-18 16:04:29 +01:00 |
|
Erwan Miran
|
1a9989ade9
|
move hardcoded dnsmasq autoscaler image to its own variable
|
2018-01-16 09:11:59 +01:00 |
|