Max Gautier
f6d29a27fc
Remove stale TODOs ( #12298 )
...
Upstream consider it working as expected, won't fix
https://github.com/ansible-collections/community.general/issues/7717#issuecomment-2061880929
2025-06-12 20:14:57 -07:00
Ho Kim
c47711c2f2
fix: correct indent of cpuManagerPolicyOptions ( #12123 )
2025-05-02 00:27:56 -07:00
Aviral Agarwal
1da9f0dec4
Fixed kube-vip to use kube-vip/kube-vip-iptables image instead of kube-vip/kube-vip when lb_fwdmethod or kube_vip_lb_fwdmethod is set to masquerade ( #12145 )
2025-04-24 15:54:30 -07:00
Kay Yan
0f9f9fb569
support kube-proxy nftables ( #12060 )
...
Signed-off-by: Kay Yan <kay.yan@daocloud.io>
2025-03-26 01:32:33 -07:00
Max Gautier
f9a263090a
Propagate v-less version everywhere
2025-03-05 16:18:39 +01:00
Boris
a51e7dd07d
refact ip stack ( #11953 )
2025-02-11 03:37:58 -08:00
Antoine Legrand
4373c1be1d
Revert "Add support for ipv6 only cluster via "enable_ipv6only_stack_networks…" ( #11941 )
...
This reverts commit 76c0a3aa7578a3a66cdc98ba962febf6c19ddb3c.
2025-02-03 07:06:58 -08:00
Boris
76c0a3aa75
Add support for ipv6 only cluster via "enable_ipv6only_stack_networks" ( #11831 )
2025-01-27 04:15:22 -08:00
ERIK
540c6ddb96
remove legacy kubelet container pre-upgrade tasks ( #11805 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2024-12-17 09:38:54 +01:00
ChengHao Yang
38cd05c503
Refactor: simpify cloud_provider is defined condition
...
For this change, `cloud_provider` change the default value to empty
string.
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2024-11-05 08:32:39 +08:00
ChengHao Yang
c27cc33bd7
Refactor: var kube_override_hostname only reserve in kubespray-defaults
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2024-11-05 01:00:39 +08:00
ChengHao Yang
437026f514
Cleanup: remove all cloud_provider related tasks & files
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2024-11-05 00:51:00 +08:00
Kubernetes Prow Robot
3f027abae6
Merge pull request #11598 from VannTen/cleanup/fact_gathering
...
Do not serialize fact gathering for no_proxy
2024-10-31 10:59:26 +00:00
kyrie
693eb74f52
fix kube-vip container securityContext ( #11647 )
2024-10-21 17:42:52 +01:00
Max Gautier
2826b357d4
Remove serialized collect of ansible_default_ipv4
...
The fallback_ips tasks are essentially serializing the gathering of one
fact on all the hosts, which can have dramatic performance implications
on large clusters (several minutes).
This is essentially a reversal of 35f248dff0ddb430e2293af98ba73aa5062c89c1
Being able to run without refreshing the cache facts is not worth it.
We keep fallback_ip for now, simply changing the access to a normal
hostvars variable instead of a custom dictionnary.
2024-10-04 14:19:20 +02:00
Max Gautier
9f45552201
Cleanup redundancy
...
k8s_cluster = kube_control_plane + kube_node
2024-09-24 11:16:30 +02:00
Kubernetes Prow Robot
03a055c383
Merge pull request #10643 from VannTen/cleanup/k8s_node_templates
...
Refactor kubernetes/node templates
2024-09-23 14:16:00 +01:00
Max Gautier
2ec1c93897
Test group membership with group_names
...
Testing for group membership with group names makes Kubespray more
tolerant towards the structure of the inventory.
Where 'inventory_hostname in groups["some_group"] would fail if
"some_group" is not defined, '"some_group" in group_names' would not.
2024-09-21 14:09:09 +02:00
Max Gautier
c3de25c782
Move the CRI endpoint setting to kubelet config ( #11550 )
...
The `--container-runtime-endpoint` kubelet argument is deprecated in
favor of the config file alternative.
2024-09-18 01:34:45 +01:00
Max Gautier
fe60832a02
Remove kubelet_node_{custom_flags,config_extra_args}
...
There is no need to have an extra variables for this, just use different
values per host (using Ansible group_vars, for example)
2024-09-06 09:35:34 +02:00
Max Gautier
1bc61c9f35
Simplify kubelet-config template
...
Remove system|kube_master_<resource>_reserved variables.
Those variables are unnecessary because users can simply use the
variables in group_vars if they which to differentiate control plane
nodes from other nodes.
Set conservative defaults for ephemeral-storage and pids for both kube
and system reserved resources.
2024-09-06 09:33:07 +02:00
Max Gautier
1533d40411
Fix kube_reserved_cgroups_for_service_slice
...
The default value is used across kubespray but only defined in
kubernetes/node.
Move it to kubespray-defaults
2024-09-06 09:25:23 +02:00
Bogdan Sass
4b324cb0f0
Rename master to control plane - non-breaking changes only ( #11394 )
...
K8s is moving away from the "master" terminology, so kubespray should follow the same naming conventions. See 65d886bb30/sig-architecture/naming/recommendations/001-master-control-plane.md
2024-09-06 07:56:19 +01:00
Vlad Korolev
9a7b021eb8
Do not use ‘yes/no’ for boolean values ( #11472 )
...
Consistent boolean values in ansible playbooks
2024-08-28 06:30:56 +01:00
Selçuk Arıbalı
e43e08c7d1
fix: use super-admin.conf for kube-vip on first master when it exists ( #11422 )
...
* fix: use super-admin.conf for kube-vip when it exists
* Mathieu Parent add as co-author
Co-authored-by: Mathieu Parent <math.parent@gmail.com>
* template change for readability
* fix lint error
---------
Co-authored-by: Mathieu Parent <math.parent@gmail.com>
2024-08-10 21:35:58 -07:00
R. P. Taylor
468c5641b2
fix kube_reserved so it only controls kubeReservedCgroup ( #11367 )
2024-07-26 01:39:20 -07:00
Lihai Tu
8208a3f04f
Rename systemd module to systemd_service ( #11396 )
...
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2024-07-26 01:11:39 -07:00
Bas
8f5f75211f
Improving yamllint configuration ( #11389 )
...
Signed-off-by: Bas Meijer <bas.meijer@enexis.nl>
2024-07-25 18:42:20 -07:00
Serge Hartmann
db316a566d
dependencies for kubelet.service ( #11297 )
...
Signed-off-by: serge Hartmann <serge.hartmann@gmail.com>
2024-06-26 02:30:34 -07:00
Lihai Tu
921b0c0bed
Add options to control images pulling of kubelet ( #11094 )
...
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2024-06-21 07:54:54 -07:00
Max Gautier
d50f61eae5
pre-commit: apply autofixes hooks and fix the rest manually
...
- markdownlint (manual fix)
- end-of-file-fixer
- requirements-txt-fixer
- trailing-whitespace
2024-05-28 13:26:44 +02:00
Jorge Isnardo Altamirano
40cbdceb3c
Merge branch 'kubernetes-sigs:master' into master
2024-05-20 08:32:00 +02:00
tico88612
f85111f6d4
CI: add ubuntu 24.04 support ( #11132 )
...
Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>
2024-05-18 00:35:20 -07:00
Jorge Isnardo Altamirano
a09c73a356
Update kube-vip manifests to v0.8.0
2024-05-07 11:38:13 +02:00
Jorge Isnardo Altamirano
537891a380
Update kube-vip manifests to v0.8.0
2024-05-02 16:37:49 +02:00
Jorge Isnardo Altamirano
e57e958a39
Update kube-vip to v0.8.0
2024-05-02 09:45:30 +02:00
Lihai Tu
23b56e3f89
Enclose the cpu type with quotation marks in kubelet-config.v1beta1 ( #11111 )
...
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2024-04-25 00:32:06 -07:00
Barry M
1b870a1862
Update kubelet systemd service default allowed IP addresses for cluster hardening ( #11061 )
...
Signed-off-by: bmelbourne <barry.melbourne0@gmail.com>
2024-04-11 00:58:27 -07:00
kyrie
baf4842774
make kube-vip LeaderElection variables configurable ( #11021 )
...
Signed-off-by: KubeKyrie <shaolong.qin@daocloud.io>
2024-03-25 02:24:57 -07:00
Tom M
e7d29715b4
Add kubelet_cpu_manager_policy_options ( #11023 )
2024-03-22 12:21:39 -07:00
Takuya Murakami
785366c2de
[kubernetes] Support kubernetes 1.29 ( #10820 )
...
* [kubernetes] Make kubernetes 1.29.1 default
* [cri-o]: support cri-o 1.29
Use "crio status" instead of "crio-status" for cri-o >=1.29.0
* Remove GAed feature gates SecCompDefault
The SecCompDefault feature gate was removed since k8s 1.29
https://github.com/kubernetes/kubernetes/pull/121246
2024-01-31 00:57:23 -08:00
Ugur Can Ozturk
7863fde552
[apiserver-kubelet/tracing]: add distributed tracing config variables ( #10795 )
...
* [apiserver-kubelet/tracing]: add distributed tracing config flags
Signed-off-by: Ugur Ozturk <ugurozturk918@gmail.com>
* [apiserver-kubelet/tracing]: add distributed tracing config flags - fix
Signed-off-by: Ugur Ozturk <ugurozturk918@gmail.com>
* [apiserver-kubelet/tracing]: add distributed tracing config flags - fix
Signed-off-by: Ugur Ozturk <ugurozturk918@gmail.com>
---------
Signed-off-by: Ugur Ozturk <ugurozturk918@gmail.com>
2024-01-25 10:24:35 +01:00
Maxime Leroy
ab0163a3ad
fix(kubernetes): taint nodes with kubectl ( #10705 )
...
Signed-off-by: Maxime Leroy <19607336+maxime1907@users.noreply.github.com>
2024-01-23 15:46:13 +01:00
yun
13e1f33898
Correct the POLY1305 cipher suites by adding the suffix _SHA256 ( #10641 )
2024-01-22 18:00:52 +01:00
Max Gautier
22bb0976d5
Adjust kubelet_event_record_qps to K8S default ( #10826 )
...
Also remove redundant check in the kubelet config template (we define a
default, so the setting will always be "true")
2024-01-22 17:49:14 +01:00
Louis Tu
a656b7ed9a
Add kube_vip_lb_fwdmethod option for kube-vip ( #10762 )
...
Signed-off-by: tu1h <lihai.tu@daocloud.io>
2024-01-09 08:22:13 +01:00
Andrei Costescu
c3b674526d
Fix modprobe module on Flatcar ( #10678 )
...
* Fix modprobe module on Flatcar
* Add todo about upstream issue report
2023-12-21 16:16:34 +01:00
Max Gautier
471326f458
Remove PodSecurityPolicy support and references ( #10723 )
...
This is removed from kubernetes since 1.25, time to cut some dead code.
2023-12-18 14:13:43 +01:00
Max Gautier
612cfdceb1
Check conntrack module presence instead of kernel version ( #10662 )
...
* Try both conntrack modules instead of checking kernel version
Depending on kernel distributor, the kernel version might not be a
correct indicator of the conntrack module use.
Instead, we check both (and use the first found).
* Use modproble.persistent rather than manual persistence
2023-11-28 18:31:02 +01:00
AbhishekKr
6b1188e3dc
[fix] modprobe_nf_conntrack for new Linux Kernel, when using ipvs ( #10625 )
...
Signed-off-by: AbhishekKr <abhikumar163@gmail.com>
2023-11-20 09:48:06 +01:00
