External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-10-31 06:26:19 -02:30
Code Issues Packages Projects Releases Wiki Activity
5,308 Commits 61 Branches 91 Tags
34ff39e6547dc456b3652eee53b42ed098d7108a
Commit Graph
10 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Hans Feldt 6613895de0 remove kubelet startup warnings for non docker container runtime (#6605) 
Removes these startup warnings:

Warning: For remote container runtime, --pod-infra-container-image is ignored in kubelet, which should be set in that remote runtime instead
Using "/var/run/crio/crio.sock" as endpoint is deprecated, please consider using full url format "unix:///var/run/crio/crio.sock".
 2020-09-04 04:54:04 -07:00
Hans Feldt 803d52ffce kubernetes: remove unused variables (#6601) 2020-09-04 04:53:56 -07:00
Hans Feldt 93698a8f73 Calico: update crds to v1 and cr (#6360) 
* Update CustomResourceDefinition for kubecontrollersconfigurations.crd.projectcalico.org to v1
* Align ClusterRole for kube-controllers with upstream (calico)
 2020-09-03 00:51:40 -07:00
Hans Feldt 9e2d282709 cri-o: add variable to configure unsecure pull (#6568) 
By default do not allow "unqualified" (without a registry) images
because it is considered unsecure and subject to mitm attacks.

To enable insecure pull configure for example:

crio_registries:
  - "docker.io"
  - "quay.io"
 2020-08-27 09:09:53 -07:00
Hans Feldt c6e5be91e9 crio: align template crio.conf with upstream (#6432) 
* log level by default increased to 'info'
* cgroup manager by default set to 'systemd'
* stream port (used by kubelet) bound to 127.0.0.1 for security reasons
* metrics can be enabled and port specified
 2020-08-01 00:33:48 -07:00
Hans FeldtandHans Feldt 22996babcf allow kubeadm to upgrade etcd (#6345) 
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-07-07 12:36:00 -07:00
Hans FeldtandHans Feldt 75ad868cbd crio: harden downloads with retry (#6374) 
CI job 624031102 failed with:

fatal: [ubuntu1804]: FAILED! => {"changed": false, "msg": "Failed to download key at https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/xUbuntu_18.04/Release.key: Request failed: <urlopen error [Errno -3] Temporary failure in name resolution>"}

Assuming its a temporary problem it should get more robust with a
couple of retries like in other roles.

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-07-07 12:32:01 -07:00
Hans FeldtandHans Feldt ae003af262 Fix kubelet cgroup driver detection for crio (#6331) 
* Fix kubelet cgroup driver detection for crio

Remove fact standalone_kubelet since it is not used

* Fix yamllint complaints of roles/kubernetes/node/tasks/facts.yml

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-06-30 02:32:05 -07:00
Hans FeldtandHans Feldt 93951f2ed5 fix use of ansible tags (#6316) 
tags are not inherited for include_role therefore the change
from include to import

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-06-25 03:00:37 -07:00
Hans FeldtandHans Feldt a8740c6e13 fix a few tasks falsely reporting "changed" (#6269) 
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-06-16 00:24:03 -07:00