External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-10-31 06:26:19 -02:30
Code Issues Packages Projects Releases Wiki Activity
1,548 Commits 61 Branches 91 Tags
8f3d9e93ce65797cd30952146ad89f6e896dd840
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Matthew Mosesohn 8f3d9e93ce Merge pull request #1111 from mattymo/use_find_for_certs 
Use find module for checking for certificates
 2017-03-03 20:08:33 +03:00
Matthew Mosesohn a244aca6a4 Merge pull request #1113 from VincentS/AWS_IAM_PROFILES 
Added Missing AWS IAM Profiles and Policies
 2017-03-03 17:35:55 +03:00
Matthew Mosesohn d176818c44 Use find module for checking for certificates 
Also generate certs only when absent on master (rather than
when absent on target node)
 2017-03-03 16:21:01 +03:00
Matthew Mosesohn 08a02af833 Merge pull request #1075 from VincentS/loadbalancer_aws 
Possibility to add Loadbalancers without static IP (e.g. AWS ELB) #1074
 2017-03-03 14:07:22 +03:00
Matthew Mosesohn cc632f2713 Merge pull request #1099 from rutsky/patch-4 
fix inline verbatim blocks formatting in markdown
 2017-03-02 17:46:52 +03:00
Matthew Mosesohn 5ebc9a380c Merge pull request #1060 from holser/etcdv3 
Allow to specify etcd backend for kube-api
 2017-03-02 17:24:09 +03:00
Matthew Mosesohn 6453650895 Merge pull request #1093 from mattymo/scaledns 
Add autoscalers for dnsmasq and kubedns
 2017-03-02 16:58:56 +03:00
Matthew Mosesohn 9cb12cf250 Add autoscalers for dnsmasq and kubedns 
By default kubedns and dnsmasq scale when installed.
Dnsmasq is no longer a daemonset. It is now a deployment.
Kubedns is no longer a replicationcluster. It is now a deployment.
Minimum replicas is two (to enable rolling updates).

Reduced memory erquirements for dnsmasq and kubedns
 2017-03-02 13:44:22 +03:00
Matthew Mosesohn 3256f4bc0f Merge pull request #1103 from mattymo/upgradesyntax 
Add upgrade-cluster and reset playbooks to syntax check
 2017-03-02 12:41:10 +03:00
Matthew Mosesohn 0e9ad8f2c7 Merge pull request #1100 from retr0h/host-vars 
Added host_vars to gitignore
 2017-03-02 12:32:22 +03:00
Matthew Mosesohn efbb5b2db3 Merge pull request #1101 from retr0h/docker-1.13.1 
Use docker-engine 1.13.1
 2017-03-02 12:31:58 +03:00
Matthew Mosesohn 85ed4157ff Add upgrade-cluster and reset playbooks to syntax check 2017-03-02 09:37:16 +04:00
Matthew Mosesohn a5cd73d047 Merge pull request #959 from galthaus/host-mode-restart 
Restart kube-controller for host_resolvconf mode
 2017-03-01 20:54:21 +03:00
Matthew Mosesohn 838adf7475 Fix vault role in upgrade-cluster.yml 2017-03-01 11:19:38 +03:00
Matthew Mosesohn cbaa6abdd0 Merge pull request #1066 from bradbeam/rkt-kubelet-cloudprovider 
Adding KUBELET_CLOUDPROVIDER to kubelet.rkt.service
 2017-02-28 20:02:56 +03:00
Matthew Mosesohn 76a4803292 Merge pull request #1084 from mattymo/fixubunturktjob 
Remove upgrade from the ubuntu-rkt-sep CI job
 2017-02-28 20:02:05 +03:00
Matthew Mosesohn 21d3d75827 Merge pull request #1086 from bradbeam/lowermem 
Lower default memory requests
 2017-02-28 13:37:28 +03:00
Matthew Mosesohn 2c3538981a Merge pull request #1077 from holser/bug/1073 
Make etcd data dir configurable.
 2017-02-28 13:19:20 +03:00
Matthew Mosesohn efb45733de Remove upgrade from the ubuntu-rkt-sep CI job 2017-02-27 18:16:22 +03:00
Matthew Mosesohn 6ae6b7cfcd Merge pull request #1072 from gkopylov/fix_doc_issue 
Fix cluster.yml file extension in docs
 2017-02-26 15:12:45 +03:00
Matthew Mosesohn c6cb0d3984 Merge pull request #1069 from holser/increase_ssl_ttl 
Increase SSL TTL to 3650 days
 2017-02-25 10:47:30 +03:00
Matthew Mosesohn 8cbf3fe5f8 Merge pull request #1020 from mattymo/synthscale 
Add synthetic scale deployment mode
 2017-02-22 19:15:46 +03:00
Matthew Mosesohn 02137f8cee Merge pull request #1059 from holser/docker_iptables 
iptables switch for docker
 2017-02-22 08:23:58 +03:00
Matthew Mosesohn 43ea281a7f Merge pull request #1061 from ivan4th/fix-shell-vars 
Fix shell special vars
 2017-02-22 08:23:44 +03:00
Matthew Mosesohn d821448e2f Merge branch 'master' into synthscale 2017-02-21 22:17:43 +03:00
Matthew Mosesohn 2ba66f0b26 Change coreos-alpha dns mode to host_resolvconf 2017-02-21 18:14:42 +03:00
Matthew Mosesohn 0afadb9149 Merge pull request #1046 from skyscooby/pedantic-syntax-cleanup 
Cleanup legacy syntax, spacing, files all to yml
 2017-02-21 17:03:16 +03:00
Matthew Mosesohn 19d0159e33 Raise timeout for get netchecker agents 2017-02-21 14:48:25 +03:00
Matthew Mosesohn d4f15ab402 Merge pull request #1055 from mattymo/etcd-preupgrade-speedup 
speed up etcd preupgrade check
 2017-02-21 12:51:42 +03:00
Matthew Mosesohn 527e030283 Merge pull request #1058 from holser/update_calico_cni 
Update calico-cni to 1.5.6
 2017-02-20 23:09:47 +03:00
Matthew Mosesohn 634e6a381c Merge pull request #1043 from rutsky/patch-3 
fix typos in azure docs
 2017-02-20 20:24:05 +03:00
Matthew Mosesohn 042d094ce7 Merge pull request #1034 from rutsky/fix-openssl-lb-index 
fix load balancer DNS name index evaluation in openssl.conf
 2017-02-20 20:23:26 +03:00
Matthew Mosesohn 3cc1491833 Merge branch 'master' into pedantic-syntax-cleanup 2017-02-20 20:19:38 +03:00
Matthew Mosesohn d19e6dec7a speed up etcd preupgrade check 2017-02-20 20:18:10 +03:00
Matthew Mosesohn 6becfc52a8 Merge pull request #1056 from mattymo/k8s153 
Update Kubernetes to v1.5.3
 2017-02-20 20:13:40 +03:00
Matthew Mosesohn 10173525d8 Update Kubernetes to v1.5.3 2017-02-20 18:14:56 +03:00
Matthew Mosesohn 43e86921e0 pin coreos-alpha to 1325 2017-02-19 16:23:35 +03:00
Matthew Mosesohn 475a42767a Suppress logging for download image 
This generates too much output and during upgrade scenarios
can bring us over the 4mb limit.
 2017-02-18 19:10:26 +04:00
Matthew Mosesohn ce4eefff6a Use first kube-master to check results 2017-02-18 14:11:51 +04:00
Matthew Mosesohn 82b247d1a4 Adapt advanced network checker for scale 
Skip nodes not in ansible play (via --limit)
 2017-02-18 14:09:57 +04:00
Matthew Mosesohn a21eb036ee Add no_log to cert tar tasks 
This works around 4MB limit for gitlab CI runner.
 2017-02-18 14:09:57 +04:00
Matthew Mosesohn 9c1701f2aa Add synthetic scale deployment mode 
New deploy modes: scale, ha-scale, separate-scale
Creates 200 fake hosts for deployment with fake hostvars.

Useful for testing certificate generation and propagation to other
master nodes.

Updated test cases descriptions.
 2017-02-18 14:09:55 +04:00
Matthew Mosesohn a510e7b8f3 Use gce hostname as inventory name 
Calico does not allow renaming hosts
 2017-02-17 20:21:58 +03:00
Matthew Mosesohn 80c0e747a7 Fix references to CoreOS and Container Linux by CoreOS 
Fixes #967
 2017-02-16 19:25:17 +03:00
Matthew Mosesohn 617edda9ba Adjust weave daemonset for serial deployment 2017-02-16 18:24:30 +03:00
Matthew Mosesohn 97ebbb9672 Add graceful upgrade process 
Based on #718 introduced by rsmitty.

Includes all roles and all options to support deployment of
new hosts in case they were added to inventory.

Main difference here is that master role is evaluated first
so that master components get upgraded first.

Fixes #694
 2017-02-16 17:18:38 +03:00
Matthew Mosesohn d92d955aeb Merge pull request #985 from rutsky/check-mode-for-shell-commands 
set "check_mode: on" for read-only "shell" steps that registers result
 2017-02-15 17:53:41 +03:00
Matthew Mosesohn 7ac84d386c Merge pull request #1030 from rutsky/remove-swp 
remove temporary file
 2017-02-15 17:44:41 +03:00
Matthew Mosesohn 2d65554cb9 Change default network plugin to Calico 2017-02-15 16:15:22 +03:00
Matthew Mosesohn 64e40d471c Merge pull request #1028 from holser/ansible.cfg 
Add timings to RECAP output.
 2017-02-15 12:41:49 +03:00
Matthew Mosesohn 948d9bdadb Merge pull request #1019 from mattymo/issue1011 
Update calico to v1.0.2
 2017-02-14 14:01:25 +03:00
Matthew Mosesohn b7258ec3bb Merge pull request #1013 from mattymo/remove_masqerade_all 
Disable kube_proxy_masquerade_all
 2017-02-14 14:00:29 +03:00
Matthew Mosesohn f5e27f1a21 Merge pull request #1021 from holser/remove_deprecated 
Replace always_run with check_mode
 2017-02-14 11:25:58 +03:00
Matthew Mosesohn bb6415ddc4 Merge pull request #1015 from holser/rkt_ssl_ca_dirs 
Set ssl_ca_dirs for rkt based on fact
 2017-02-14 11:25:17 +03:00
Matthew Mosesohn 203ddfcd43 Merge pull request #1023 from mattymo/fix_dnsmasq_cleanup 
Clean up dnsmasq purge task
 2017-02-13 19:50:01 +03:00
Matthew Mosesohn b5be335db3 Clean up dnsmasq purge task 2017-02-13 17:30:15 +03:00
Matthew Mosesohn ec567bd53c Update calico to v1.0.2 
Also calico-cni to v1.5.6, calico-policy to v0.5.2

Fixes: #1011
 2017-02-13 15:39:25 +03:00
Matthew Mosesohn 2f0f0006e3 Merge pull request #988 from mattymo/feat/rolling3 
Add CI cases for testing upgrade from v2.0.1 release
 2017-02-10 18:09:43 +03:00
Matthew Mosesohn de047a2b8c Merge pull request #983 from vwfs/centos_kernel_upgrade 
Add kernel upgrade for CentOS
 2017-02-10 14:40:27 +03:00
Matthew Mosesohn 6ae70e03cb fixup upgrades for canal and weave 2017-02-10 13:27:41 +03:00
Matthew Mosesohn 2c532cb74d Disable kube_proxy_masquerade_all 
Fixes #1012
 2017-02-10 13:16:39 +03:00
Matthew Mosesohn 779f20d64e Merge pull request #1010 from bogdando/fixes 
Fix misleading HA docs
 2017-02-10 13:01:29 +03:00
Matthew Mosesohn a44a0990f5 Enable reset of dnsmasq if manifest or config changes 2017-02-10 10:40:07 +04:00
Matthew Mosesohn 2f88c9eefe Merge pull request #989 from holser/kubelet_remedy 
Kubernetes Reliability Improvements
 2017-02-10 09:29:29 +03:00
Matthew Mosesohn 60f1936a62 Merge pull request #1004 from galthaus/kubelet-load-modules 
Allow kubelet to load kernel modules
 2017-02-10 09:28:16 +03:00
Matthew Mosesohn ee15f99dd7 Add CI cases for testing upgrade from v2.0.1 release 
These are manual trigger jobs, but should be run if any PR
impacts upgrades.
 2017-02-10 10:20:58 +04:00
Matthew Mosesohn b0ee27ba46 Merge pull request #1006 from mattymo/fix_weave_upgrade 
Enable weave upgrade from previous versions
 2017-02-10 09:03:49 +03:00
Matthew Mosesohn 29fd957352 Enable weave upgrade from previous versions 
Raise readiness probe initial time to 60 (was 30)
 2017-02-09 21:39:31 +03:00
Matthew Mosesohn ef10ce04e2 Merge pull request #1005 from rutsky/patch-2 
fix kube_apiserver_ip/kube_apiserver_port description
 2017-02-09 21:08:15 +03:00
Matthew Mosesohn 0a7c6eb9dc Merge pull request #998 from mattymo/fix_upgrade_daemonsets 
Fix upgrade for all daemonset type resources
 2017-02-09 20:02:21 +03:00
Matthew Mosesohn 17dfae6d4e Merge pull request #999 from holser/decrease_weave_ram_limits 
Lower weave RAM settings.
 2017-02-09 13:19:12 +03:00
Matthew Mosesohn 3c713a3f53 Fix upgrade for all daemonset type resources 
Daemonsets cannot be simply upgraded through a single API call,
regardless of any kubectl documentation. The resource must be
purged and then recreated in order to make any changes.
 2017-02-08 18:16:00 +03:00
Matthew Mosesohn 16674774c7 Merge pull request #994 from mattymo/docker_save 
Change docker save compress level to 1
 2017-02-08 15:13:15 +03:00
Matthew Mosesohn 0180ad7f38 Merge pull request #990 from mattymo/fix_cert_upgrade 
Fix check for node-NODEID certs existence
 2017-02-08 14:44:09 +03:00
Matthew Mosesohn bfd1ea1da1 Merge pull request #971 from bradbeam/efk 
Adding EFK logging stack
 2017-02-08 14:28:04 +03:00
Matthew Mosesohn d587270293 Merge pull request #992 from vwfs/host_mount_dev 
Host mount /dev for kubelet
 2017-02-08 13:45:22 +03:00
Matthew Mosesohn 3eb13e83cf Change docker save compress level to 1 
Faster gzip improves CI deploy times by at least 2 mins.

Fixes #982
 2017-02-08 13:25:11 +03:00
Matthew Mosesohn bad6076905 Merge pull request #987 from mattymo/etcd-retune 
Re-tune ETCD performance params
 2017-02-08 13:00:25 +03:00
Matthew Mosesohn e5779ab786 Fix check for node-NODEID certs existence 
Fixes upgrade from pre-individual node cert envs.
 2017-02-07 21:06:48 +03:00
Matthew Mosesohn 71e14a13b4 Re-tune ETCD performance params 
Reduce election timeout to 5000ms (was 10000ms)
Raise heartbeat interval to 250ms (was 100ms)
Remove etcd cpu share (was 300)
Make etcd_cpu_limit and etcd_memory_limit optional.
 2017-02-07 20:15:14 +03:00
Matthew Mosesohn 491074aab1 Merge pull request #969 from mattymo/port_reserve 
Prevent dynamic port allocation in nodePort range
 2017-02-07 18:24:57 +03:00
Matthew Mosesohn 4f13043d14 Merge pull request #976 from holser/bug/975 
Improve Weave
 2017-02-06 22:48:13 +03:00
Matthew Mosesohn f3a0f73588 Prevent dynamic port allocation in nodePort range 
kube_apiserver_node_port_range should be accessible only
to kube-proxy and not be taken by a dynamic port allocation.

Potentially temporary if https://github.com/kubernetes/kubernetes/issues/40920
gets fixed.
 2017-02-06 20:01:16 +03:00
Matthew Mosesohn be1e1b41bd Merge pull request #981 from kubernetes-incubator/revert-911-DROP_CAPS 
Revert "Drop linux capabilities and rework users/groups"
 2017-02-06 17:52:58 +03:00
Matthew Mosesohn fd30131dc2 Revert "Drop linux capabilities and rework users/groups" 2017-02-06 15:58:54 +03:00
Matthew Mosesohn 10f924a617 Merge pull request #927 from holser/nsenter_fix 
Remove nsenter workaround
 2017-02-02 18:18:15 +03:00
Matthew Mosesohn 3dd6a01c8b Merge pull request #901 from galthaus/dns-tweak 
DHCP Hook protections
 2017-02-02 16:47:16 +03:00
Matthew Mosesohn bdc65990e1 Merge pull request #958 from holser/fix_weave_cpu 
Fix CPU out of scope for Weave-net
 2017-02-02 16:05:47 +03:00
Matthew Mosesohn ae66b6e648 Merge pull request #957 from mattymo/weave-net-naming 
Rename weave-kube to weave-net
 2017-02-02 10:18:02 +03:00
Matthew Mosesohn 0f6e08d34f Merge pull request #951 from mattymo/k8s-certs-scale 
Fix cert distribution at scale
 2017-01-31 18:49:26 +03:00
Matthew Mosesohn 4889a3e2e1 Merge pull request #954 from artem-panchenko/improve_dnsmasq 
Explicitly set config path for DNSMasq
 2017-01-31 18:48:46 +03:00
Matthew Mosesohn 39d87a96aa Rename weave-kube to weave-net 
Cleans up upgrade to weave 1.82. The original WeaveWorks
daemonset definition uses weave-net name.
 2017-01-31 18:47:27 +03:00
Matthew Mosesohn 08822ec684 Fix cert distribution at scale 
Use stdin instead of bash args to pass node filenames and base64 data.
Use tempfile for master cert data
 2017-01-31 16:27:45 +03:00
Matthew Mosesohn 6463a01e04 Merge pull request #880 from bradbeam/weave-kube 
Weave kube
 2017-01-31 13:31:09 +03:00
Matthew Mosesohn 0cf1850465 Disable idempotency for ubuntu-weave-sep 
CI is failing 40% of the time due to errors in reset.
Let's disable idempotency check per-patch until we fix it.

Fixes #953
 2017-01-31 13:23:27 +03:00
Matthew Mosesohn e4eda88ca9 Merge pull request #944 from tureus/skip-cloud-config-on-etcd 
Bugfix: skip cloud_config on etcd
 2017-01-30 20:12:36 +03:00
Matthew Mosesohn a2079a9ca9 Update coreos-stable image 
Our old coreos-stable image has docker 1.10
 2017-01-27 16:20:40 +04:00
Matthew Mosesohn a627299468 Merge pull request #941 from adidenko/use_ansible_hostname_in_calico 
Switch to ansible_hostname in calico
 2017-01-26 13:06:35 +03:00
Matthew Mosesohn f4b7474ade Merge pull request #926 from adidenko/fix-calico-rr-for-masters 
Fix calico-rr peering with k8s masters
 2017-01-24 12:38:52 +03:00
Matthew Mosesohn 9428321607 Merge pull request #932 from vwfs/centos_pin_docker_version 
Pin docker version on RedHat and CentOS to the desired version
 2017-01-24 12:21:50 +03:00