Sergey
1c75ec9ec1
do not run etcd role in scale.yml playbook when etcd installed by kubeadm ( #9210 )
2022-08-24 00:16:24 -07:00
Sergey
a86d9bd8e8
do not remove package in validate container engine role when Fedora CoreOS distr ( #8626 )
2022-03-17 06:49:20 -07:00
Sergey
0b441ade2c
nginx ingress controller should watch kind:ingress without class ( #8128 )
2021-10-28 11:48:59 -07:00
Sergey
89993e4833
fix error metrics server capabilities name ( #7905 )
2021-08-25 12:06:15 -07:00
Sergey
c49dd50ef3
add tags: always to all included sevice playbook ( #7906 )
2021-08-25 12:01:54 -07:00
Sergey
5336943a8c
add cilium_operator_api_serve_addr to cilium operator config ( #7901 )
2021-08-24 03:49:13 -07:00
Sergey
b46a69f5e1
add python requirement ruamel.yaml.clib==0.2.2 to keep python 2.7 compatible ( #7754 )
2021-06-30 08:19:04 -07:00
Sergey
3fe6dbb65c
fix image pull url for coredns v1.8.0 ( #7702 )
2021-06-16 17:00:19 -07:00
Sergey
d9d29af87f
update containerd to version 1.4.6 ( #7674 )
2021-06-03 10:55:38 -07:00
Sergey
6c3d1649a6
fixed MarkupSafe version to 1.1.1 ( #7607 )
2021-05-12 06:52:17 -07:00
Sergey
d26191373a
add default empty value for etc_hosts_localhosts_dict_target ( #7567 )
2021-04-28 11:34:50 -07:00
Sergey
cce0940e1f
add CI test for auto_renew_certificates ( #7472 )
...
* add CI test for auto_renew_certificates
* change timer value
fix typo error in rotate cert script
2021-04-09 00:42:47 -07:00
Sergey
2c9fc18903
template crun manifest ( #7305 )
...
add missing else to if inline
2021-03-02 01:57:19 -08:00
Sergey
42947c9840
return the ability to update calico from 3.x.x version ( #7290 )
...
version check fixed
2021-02-17 00:07:06 -08:00
Sergey
a21ee33180
fix typo error in role ingress-nginx ( #7272 )
2021-02-09 07:53:13 -08:00
Sergey
e3caff833c
Add prompt to upgrade node or delay before upgrade ( #7168 )
...
* Add prompt to upgrade node or delay before upgrade
* add docs
2021-01-17 23:53:43 -08:00
Sergey
b2995e4ec4
Adding other masters sequentially, not in parallel ( #7166 )
2021-01-15 17:19:43 -08:00
Sergey
02213d6e07
change nodeSelector label from deprecated beta.kubernetes.io/os and arch to kubernetes.io prefix ( #7138 )
2021-01-13 13:55:02 -08:00
Sergey
096bcdd078
Download once for crio ( #6998 )
...
* download run once feature for CRI-O
* fix typo
* fix test
2020-12-21 01:54:25 -08:00
Sergey
c36df6a78b
fix typo in containerd doc ( #7057 )
2020-12-18 00:34:24 -08:00
Sergey
85982dc8e9
add support crio version for varios k8s vers ( #7003 )
...
* add support crio version for various k8s vers
* regexp in pkg versions
2020-12-09 01:22:50 -08:00
Sergey
a69f2b09da
download run once feature for containerd ( #6997 )
2020-12-07 01:09:25 -08:00
Sergey
ed6cef85d8
add crio registry mirror support ( #6977 )
...
* add crio registry mirror support
* mdlint fix
2020-12-03 13:57:25 -08:00
Sergey
06ec5393d7
up vagrant box to fedora/33-cloud-base in cri-o molecule tests ( #6992 )
2020-12-03 11:25:26 -08:00
Sergey
4a8a52bad9
containerd docker hub registry mirror support ( #6962 )
...
* containerd docker hub registry mirror support
* add docs
* fix typo
* fix yamllint
* fix indent in sample
and ansible-playbook param in testcases_run
* fix md
* mv common vars to tests/common/_docker_hub_registry_mirror.yml
* checkout vars to upgrade tests
2020-11-30 00:22:49 -08:00
Sergey
d739a6bb2f
add Google proxy-mirror-cache for docker hub to CI tests ( #6957 )
2020-11-27 03:24:48 -08:00
Sergey
e49330d6ee
change owner to root for bin_dir directory ( #6814 )
2020-10-12 18:13:22 -07:00
Sergey
6a4d322a7c
Do not install etcd and etcdctl on master with scale.yml playbook. ( #6798 )
...
Remove task with install etcdctl from etcd role when etcd_kubeadm_enabled=true
2020-10-06 07:04:20 -07:00
Sergey
c0fd5b2e84
remove variable 'etcd_ionice', because ionice removed from container image etcd:v3.4.x ( #6735 )
2020-09-23 12:34:05 -07:00
Sergey
cc507d7ace
disable bird-check flag for probes of calico-node pods when calico_network_backend is not 'bird'. ( #6217 )
2020-06-01 12:44:14 -07:00
Sergey
69603aed34
add strategy mitogen_linear when installed mitogen ( #5985 )
...
* add strategy mitogen_linear when installed mitogen
* add small docs
Rename playbook file
The raw action executes as a regular Mitogen connection, which requires Python on the target, so add strategy: linear to bootstrap-os role playbook.
* add mitogen to CI test
fix typo
* enable mitogen test on deploy-part1 tests
change version from master to release
download tar.gz archive
* run all CI tests with mitogen
* disable mitogen with upgrade CI tests
* enable mitogen on CI tests via env vars
* disable mitogen on CI test by default, enable on some different OS
* disable mitogen CI test on centos8
(get error /usr/bin/python: No such file or directory)
2020-04-24 05:20:07 -07:00
Sergey
aead0e3a69
bump minimal ansible version to 2.8.0 ( #5984 )
...
* bump minimal ansible version to 2.8.0
* check ansible version in separate playbook
2020-04-22 13:33:44 -07:00
Sergey
6e29a47784
generate flannel manifest only on first master ( #5983 )
2020-04-20 01:33:38 -07:00
Sergey
baff4e61cf
remove image flannel cni ( #5980 )
2020-04-19 06:13:37 -07:00
Sergey
6318bb9f96
Return the ability to start control plain from the hyperkube image ( #5422 )
2020-04-18 05:59:36 -07:00
Sergey
35f248dff0
assembly fallback_ips and no_proxy var only one time on localhost and… ( #5957 )
...
* assembly fallback_ips and no_proxy var only one time on localhost and populate result on all hosts
* add tag always, fix ansible lint errors
* workaround to mitogen issue dw/mitogen#663
* do not gather fact before install python on coreos like distros
* try to pass docker molecule test
2020-04-16 07:22:47 -07:00
Sergey
3a63aa6b1e
downgrade nodelocaldns version due bug with flood to error log ( #5931 )
...
https://github.com/kubernetes/kubernetes/issues/90043
2020-04-10 23:41:55 -07:00
Sergey
337499d772
Remove hashes only for EOL version in RELEASE cycle. ( #5924 )
2020-04-10 23:41:47 -07:00
Sergey
8f3d820664
always download docker image on download_host when download_run_once=true ( #5921 )
2020-04-10 01:59:47 -07:00
Sergey
b8d628c5f3
rename handler to fix ansible 2.8 issue ( #5801 )
2020-03-20 13:54:08 -07:00
Sergey
03d1b56a8f
fix check exists download cache ( #5776 )
2020-03-16 03:34:35 -07:00
Sergey
1cb03a184b
kubernetes 1.15.11 ( #5775 )
2020-03-14 07:16:34 -07:00
Sergey
e60b9f796e
add calico VXLAN mode, update docs and vars in sample inventory ( #5731 )
...
* calico VXLAN mode
* check vars if calico backend defined
2020-03-12 01:20:37 -07:00
Sergey
9f3ed7d855
change ignore_errors: to when: in assert tasks ( #5716 )
2020-03-10 08:09:36 -07:00
Sergey
221b429c24
move var preinstall_selinux_state: to roles/kubespray-defaults/defaults/main.yaml ( #5715 )
2020-03-10 07:45:35 -07:00
Sergey
678ed5ced5
fix upgrade procedure when in playbook ( #5695 )
...
exists role kubernetes/preinstall and not exists role container-engine
error 'yum_repo_dir' is undefined
2020-02-28 01:56:38 -08:00
Sergey
ee8e88b111
Require a complete inventory with all variables in the bugreport ( #5655 )
2020-02-25 23:58:25 -08:00
Sergey
12bc634ec3
helm default version 3.1.0 ( #5634 )
...
* helm default version 3.1.0
* fix newline
try to retest2
2020-02-18 03:21:29 -08:00
Sergey
36c1f32ef9
remove legacy docker repo in kubernetes/preinstall before any packages installed ( #5640 )
2020-02-17 08:59:28 -08:00
Sergey
14b1cab5d2
force rotate control plane certifcate on master node when upgrade cluster ( #5596 )
2020-02-10 06:09:54 -08:00
Sergey
2798adc837
Remove stale legacy yum docker repo /etc/yum.repos.d/docker.repo ( #5569 )
...
* Remove stale legacy yum docker repo /etc/yum.repos.d/docker.repo
* move task 'Remove legacy docker repo file' to pre-upgrade.yml
2020-01-28 02:31:40 -08:00
Sergey
9fda84b1c9
set node label via kubectl label command ( #5257 )
...
* set varios node label via kubectl label command, not kubelet options
* remove node_labels from KUBELET_ARGS
2019-12-09 01:43:09 -08:00
Sergey
81d57fe658
set calico_datastore default value in role kubespray-default ( #5259 )
2019-10-17 05:58:38 -07:00
Sergey
3118437e10
check on all cluster node - kubelet_max_pods <= (2 ** (32 - kube_network_node_prefix | int)) - 2 ( #5279 )
2019-10-17 05:48:38 -07:00
Sergey
65e461a7c0
download container always been on download_delegate host ( #5177 )
...
* download container always been on download_delegate host
* fix also check pull required
2019-10-17 05:38:38 -07:00
Sergey
932935ecc7
fix wrong path in include install_host.yml in etcd role ( #5256 )
2019-10-13 18:16:34 -07:00
Sergey
1cf6a99df4
generate kubeadm download image list with options useHyperKubeImage ( #5203 )
2019-09-25 18:03:06 -07:00
Sergey
8cb54cd74d
fix broken scale procedure: ( #5193 )
...
- do not run etcd role when etcd_kubeadm_enabled == true
- remove default value 'systemd' for cgroup driver in containerd role.
this value override autodetect in kubelet_cgroup_driver_detected from docker info
2019-09-22 01:07:22 -07:00
Sergey
8984096f35
use hyperkubeimage to run controlplane containers ( #5178 )
2019-09-17 18:33:28 -07:00
Sergey
494a6512b8
fix bug: run Copy image to ansible host cache on download_delegate host ( #5094 )
...
* run 'task download_container | Copy image to ansible host cache' with synchronize on download_delegate host
* try to run task copy file to ansible host on all inventory, not only on first random host
2019-08-21 23:38:30 -07:00
Sergey Bondarev
e766dd5582
move calico options from all.yml to k8s-cluster/k8s-net-calico.yml
2018-09-18 21:30:49 +03:00
Sergey Bondarev
93429bc661
create separate options files for network plugins
...
remove plugin options from common files
2018-09-18 14:29:53 +03:00
Sergey Bondarev
ce6854e726
add version to environment file
...
Trigger reboot handler when version upgrade during update script
2018-08-17 17:25:35 +03:00
Sergey Bondarev
4f7479d94d
add etc tunning options
...
https://coreos.com/etcd/docs/latest/tuning.html
etcd_snapshot_count
and
ionice priority
2018-03-26 17:25:51 +03:00
Sergey Bondarev
038da7255f
check if group kube-ingress is not empty
...
fix spelling mistaker ingress_nginx_host_network
set default value for ingress_nginx_host_network: false
2018-03-19 12:59:38 +03:00
Sergey Bondarev
1481f7d64b
Dedicated node for ingress nginx controller
...
The ability to create dedicated node for ingress nginx controller
host type network for nginx controller
and add from example https://github.com/kubernetes/ingress-nginx/blob/master/docs/examples/static-ip/nginx-ingress-controller.yaml
terminationGracePeriodSeconds: 60
2018-03-17 02:54:46 +03:00
Sergey Bondarev
b7e6dd0dd4
Add --iface-regex options to flannel
...
Flannel use interface for inter-host communication setted on --iface options
Defaults to the interface for the default route on the machine.
flannel config set via daemonset, and flannel config on all nodes is the same.
But different nodes can have different interface names for the inter-host communication network
The option --iface-regex allows the flannel to find the interface on which the address is set from the inter-host communication network
2018-03-16 21:44:36 +03:00
Sergey Bondarev
3fac550090
Merge remote-tracking branch 'upstream/master'
2018-03-16 14:09:54 +03:00
Sergey Bondarev
f8fed0f308
change expirations period for generated certificate from 10 years to 100 years
2018-03-14 13:33:36 +03:00