Max Gautier
87726faab4
Move check 'sorted pkgs list to pre-commit'
...
This is a lint check, which should not live in the playbook itself.
2025-05-04 21:22:47 +02:00
Max Gautier
1b9919547a
Split 'offline' assert into their own role
...
The preinstall assert cover a number of things, many of which depends
only on the inventory, and can be run without any ansible_facts
collected.
Split them off to simplify re-ordering.
2025-05-04 21:22:46 +02:00
Kubernetes Prow Robot
84d96d5195
Merge pull request #12165 from tico88612/fix/failing-test-coredns-autoscaler
...
Feat: add `dns_autoscaler_affinity` and remove in-place values
2025-05-03 13:17:55 -07:00
ChengHao Yang
1374a97787
Test: ubuntu22-calico-all-in-one-upgrade disable dns autoscaler
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2025-05-04 00:23:05 +08:00
bin.pan
6f0fc020e8
update containerd.options key name ( #12170 )
2025-05-02 23:27:55 -07:00
Takuya Murakami
f58a6e2057
docs: Fix offline-environment.md to add 'v' prefix of some versions ( #12166 )
...
* docs: Fix offline-environment.md to add 'v' prefix of some versions
Now some version variables (kube_version, etcd_version, etc) don't have 'v' prefix,
so you need to add 'v' prefix to download URLs.
* fix: Fix offline.yml to add 'v' prefix of some versions
2025-05-02 01:57:55 -07:00
Ali Afsharzadeh
09fad4886a
Fix path to facts.yml in node facts refresh section ( #12177 )
2025-05-02 00:39:56 -07:00
Ho Kim
c47711c2f2
fix: correct indent of cpuManagerPolicyOptions ( #12123 )
2025-05-02 00:27:56 -07:00
Karthik S
a3e6e66204
Etcd Certificates are not generated when adding nodes to an existing cluster with scale.yml ( #12120 )
...
* [Issue-12117]-Certificates for the new hosts are not generated during scale.yml
* [Issue-12117]-Certificates for the new hosts are not generated during scale.yml
* [Issue-12117]-Certificates for the new hosts are not generated during scale.yml
2025-05-02 00:03:56 -07:00
ChengHao Yang
2907936c85
Feat: add dns_autoscaler_affinity remove in-place values
...
Upstream has removed affinity, and fix upgrade failing test.
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2025-04-28 19:18:19 +08:00
ChengHao Yang
71a323039f
Fix: kubelet-csr-approver moves to regular application installation ( #12141 )
...
This commit fixed the process to ensure that CCM is installed first to
avoid the chicken-and-egg problem.
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2025-04-28 01:27:26 -07:00
ChengHao Yang
5e5e509698
Revert "Update cluster-proportional-autoscaler to v1.9.0 ( #11982 )" ( #12168 )
...
This reverts commit 16841a1fb04a9c446d2c23ecf4c569098180bd9a.
2025-04-28 01:23:32 -07:00
Takuya Murakami
4a598c1ef3
Make kubernetes 1.32.4 default ( #12161 )
2025-04-25 01:22:30 -07:00
Aviral Agarwal
1da9f0dec4
Fixed kube-vip to use kube-vip/kube-vip-iptables image instead of kube-vip/kube-vip when lb_fwdmethod or kube_vip_lb_fwdmethod is set to masquerade ( #12145 )
2025-04-24 15:54:30 -07:00
ShinyaIshitobi
629a690886
fix: Enable NRI for containerd and disable plugin when nri_enabled is false ( #12152 )
...
* fix(containerd): always render NRI plugin block with conditional disable flag
* feat: enable Node Resource Interface plugin when using containerd
* fix: remove the
* fix: fix for linter
2025-04-24 01:40:33 -07:00
Mathieu Parent
16841a1fb0
Update cluster-proportional-autoscaler to v1.9.0 ( #11982 )
2025-04-24 01:32:37 -07:00
ERIK
22c19a40fa
feat: Update containerd and nerdctl checksums to latest versions ( #12154 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2025-04-24 01:02:31 -07:00
ERIK
8f41a2886d
Update version comparison syntax and optimize whitespace ( #12146 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2025-04-24 00:56:31 -07:00
Max Gautier
38cea5b866
Patch versions updates ( #12119 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-04-23 21:48:30 -07:00
Ekko
4177289ef6
Fix typo in .gitlab-ci/kubevirt.yml ( #12134 )
...
Signed-off-by: Ekko Tu <lihai.tu@daocloud.io>
2025-04-18 03:59:06 -07:00
Kubernetes Prow Robot
4ad9f9b535
Merge pull request #11763 from tico88612/feat/gateway-api-v1.2.1
...
Refactor Gateway API installation process and bump Gateway API v1.2.1
2025-04-11 08:38:42 -07:00
ChengHao Yang
6f58b33de0
Deprecate gateway_api_experimental_channel
...
Please use `gateway_api_channel` and set `experimental`.
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2025-04-11 23:04:01 +08:00
ChengHao Yang
9456e792f1
Remove unused Gateway API template
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2025-04-11 22:57:00 +08:00
ChengHao Yang
7f60dda565
Refactor Gateway API manifests installation process
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2025-04-11 22:57:00 +08:00
ChengHao Yang
582fe2cbde
Add Gateway API download information in kubespray-default
...
Remove old variables in kubernetes-apps/gateway_api
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2025-04-11 22:57:00 +08:00
Max Gautier
79fbfdf271
component_hash_update: support calico_crds ( #12122 )
...
- add support for "no_arch" downloads: arch-indendendant files such as
YAML manifests, helm charts, etc.
- wire calico_crds with it.
2025-04-10 02:18:47 -07:00
ChengHao Yang
cfaf397d4a
Bump: OpenStack Cloud Controller Manager upgrade to v1.32.0 ( #12121 )
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2025-04-10 01:44:41 -07:00
Kubernetes Prow Robot
2f404de77c
Merge pull request #12037 from VannTen/ci/convert_vagrant_to_kubevirt_2
...
CI: convert remaining vagrant jobs (except IPv6) to kubevirt + cleanups
2025-04-09 01:16:42 -07:00
Mohammd Reza Mollasalehi
d304966d75
doc: fix a broken link in the Calico documentation ( #12108 ) ( #12109 )
2025-04-08 06:32:46 -07:00
ChengHao Yang
4ce5510c1a
[rbd-provisioner] deprecate outdated application and documentation ( #12114 )
...
* Cleanup: deprecate rbd-provisioner application
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Docs: remove rbd-provisioner application
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
---------
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2025-04-08 06:22:44 -07:00
ChengHao Yang
8032b8281d
[cephfs-provisioner] deprecate outdated application and documentation ( #12113 )
...
* Cleanup: deprecated CephFS application
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Docs: Remove CephFS Application
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
---------
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2025-04-08 03:08:39 -07:00
Farshad Asadpour
45ecceb3e1
docs(terraform): update command for destroying infrastructure in README ( #12111 )
2025-04-08 02:16:39 -07:00
Max Gautier
5a6ef1dafa
Timeout on RHEL subscription check ( #12115 )
...
subscription-manager status can in some circumstances just never
terminates, with nothing indicating the problem from the Ansible
playbook log.
This makes it difficult to find the hosts misbehaving.
Add a timeout to the subscription checks (defaulting to 3 minutes). This
should be more than enough for normal circumstances while allowing
easier troubleshooting, as the hosts will be FAILED instead of the
playbook just waiting indefinitely.
2025-04-08 01:24:44 -07:00
Max Gautier
0ae9ab36ce
CI: Pin github actions for security ( #12105 )
...
Dependabot can still upgrade the action version.
2025-04-03 06:22:38 -07:00
Bas
cf48915657
Documenting offline installation with secure files repo and registry. ( #11993 )
...
* Add config for addon helm and local_path_provisioner
* Documenting offline installation with secure files_repo
* Documenting offline installation with secure registry
2025-04-03 02:06:37 -07:00
Fredrik Liv
6f74ef17f7
Upcloud: Add possibility to setup cluster using nodes with no public IPs ( #11696 )
...
* terraform upcloud: Added possibility to set up nodes with only private IPs
* terraform upcloud: add support for gateway in private zone
* terraform upcloud: split LB proxy protocol config per backend
* terraform upcloud: fix flexible plans
* terraform upcloud: Removed overview of cluster setup
---------
Co-authored-by: davidumea <david.andersson@elastisys.com>
2025-04-01 07:58:42 -07:00
Max Gautier
fe2ab898b8
component_hash_update: remove obsolete todos ( #12098 )
2025-03-31 15:18:35 -07:00
dependabot[bot]
c8b8567781
build(deps): bump actions/checkout from 3 to 4 ( #12089 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-31 01:40:34 -07:00
dependabot[bot]
bf86c14d35
build(deps): bump redhat-plumbers-in-action/advanced-issue-labeler ( #12090 )
...
Bumps [redhat-plumbers-in-action/advanced-issue-labeler](https://github.com/redhat-plumbers-in-action/advanced-issue-labeler ) from 2 to 3.
- [Release notes](https://github.com/redhat-plumbers-in-action/advanced-issue-labeler/releases )
- [Commits](https://github.com/redhat-plumbers-in-action/advanced-issue-labeler/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: redhat-plumbers-in-action/advanced-issue-labeler
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-31 01:14:35 -07:00
dependabot[bot]
e47eb4bc7f
build(deps): bump pytest-testinfra from 10.1.1 to 10.2.2 ( #12096 )
...
Bumps [pytest-testinfra](https://github.com/pytest-dev/pytest-testinfra ) from 10.1.1 to 10.2.2.
- [Release notes](https://github.com/pytest-dev/pytest-testinfra/releases )
- [Changelog](https://github.com/pytest-dev/pytest-testinfra/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest-testinfra/compare/10.1.1...10.2.2 )
---
updated-dependencies:
- dependency-name: pytest-testinfra
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-31 01:10:35 -07:00
Max Gautier
5222f48978
auto-update: use a branch prefix rather than suffix ( #12097 )
...
This is more in-line with dependabot and similar auto-updaters.
Reduce ci coverage on github action updating (it does not change
kubespray code, no need for testing).
2025-03-31 01:04:36 -07:00
Max Gautier
7b6b7318b2
Remove unused manifest (docs) ( #12092 )
...
This file is no longer referenced since e0d67367e (Update installation
doc with vagrant (#8406 ), 2022-01-11).
2025-03-29 11:26:34 -07:00
Kubernetes Prow Robot
f02d313fee
Merge pull request #12093 from VannTen/cleanup/contrib
...
Cleanup old things in contrib/
2025-03-29 10:16:34 -07:00
Max Gautier
7c9870d15b
Remove contrib/mitogen
...
- the playbook does not work
- the mitogen version is not up to date
This strongly suggests this is not used ; let's drop it.
2025-03-28 09:49:28 +01:00
Max Gautier
c8ea1468d1
Remove unmaintained contrib: kvm-setup
2025-03-28 09:39:30 +01:00
Max Gautier
ad26fe77f5
[contrib] Remove heketi and glusterfs ( #12091 )
...
* Remove heketi
Heketi is no longer developed or supported and should not be used
anymore.
Remove the contrib playbook.
* Remove contrib glusterfs
Glusterfs integration with glusterfs is now either deprecated or
unsupported.
Other storage solutions should be preferred.
2025-03-27 15:32:38 -07:00
Max Gautier
aae53a9df5
Add github workflow to auto update hashes daily ( #12053 )
2025-03-27 14:10:34 -07:00
Farshad Asadpour
1513254622
fix(remove-node): Ensure safety and validation for node removal process ( #12085 )
...
This commit enhances the node removal playbook's reliability and safety by implementing the following changes:
1. **Node Validation**: Added a validation step using assert to ensure the `node` variable is defined and contains nodes. If the list is empty or undefined, the playbook fails early, preventing accidental operations on the entire cluster.
2. **Removed Defaulting for Hosts**: Updated tasks to enforce explicit `node` variable input without defaulting to critical groups (e.g., `etcd:k8s_cluster:calico_rr`). By validating `node` beforehand, tasks now solely rely on user-provided input and safely avoid unintended targeting.
3. **Explicit User Confirmation**: Enhanced the confirmation prompt to clarify the scope of the operation. The admin is now required to explicitly confirm node state deletion, ensuring a deliberate decision before proceeding.
These improvements strengthen the reliability and safety of the `remove-node.yml` playbook by eliminating ambiguous behavior, preventing misconfigurations, and ensuring clear interaction during node removal tasks.
2025-03-27 06:10:34 -07:00
Ricky Kwan
4a5b524b98
Ensure metrics port exists for nodelocaldns/nodelocaldns-second daemonsets ( #11998 )
...
- update metrics port to use port variable
- unconditionally define ports
2025-03-27 04:14:34 -07:00
Max Gautier
aa0c0851f8
Upgrade kube-router ( #12066 )
...
- This happens to fix the fact that kube-router is broken when using the
service proxy: https://github.com/cloudnativelabs/kube-router/issues/1558
2025-03-26 17:04:38 -07:00
