External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-10-31 14:36:20 -02:30
Code Issues Packages Projects Releases Wiki Activity
5,274 Commits 61 Branches 91 Tags
9e2d282709630874f558a249e1d43f9d8a678183
Commit Graph
7 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Hans Feldt 9e2d282709 cri-o: add variable to configure unsecure pull (#6568) 
By default do not allow "unqualified" (without a registry) images
because it is considered unsecure and subject to mitm attacks.

To enable insecure pull configure for example:

crio_registries:
  - "docker.io"
  - "quay.io"
 2020-08-27 09:09:53 -07:00
Hans Feldt c6e5be91e9 crio: align template crio.conf with upstream (#6432) 
* log level by default increased to 'info'
* cgroup manager by default set to 'systemd'
* stream port (used by kubelet) bound to 127.0.0.1 for security reasons
* metrics can be enabled and port specified
 2020-08-01 00:33:48 -07:00
Hans FeldtandHans Feldt 22996babcf allow kubeadm to upgrade etcd (#6345) 
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-07-07 12:36:00 -07:00
Hans FeldtandHans Feldt 75ad868cbd crio: harden downloads with retry (#6374) 
CI job 624031102 failed with:

fatal: [ubuntu1804]: FAILED! => {"changed": false, "msg": "Failed to download key at https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/xUbuntu_18.04/Release.key: Request failed: <urlopen error [Errno -3] Temporary failure in name resolution>"}

Assuming its a temporary problem it should get more robust with a
couple of retries like in other roles.

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-07-07 12:32:01 -07:00
Hans FeldtandHans Feldt ae003af262 Fix kubelet cgroup driver detection for crio (#6331) 
* Fix kubelet cgroup driver detection for crio

Remove fact standalone_kubelet since it is not used

* Fix yamllint complaints of roles/kubernetes/node/tasks/facts.yml

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-06-30 02:32:05 -07:00
Hans FeldtandHans Feldt 93951f2ed5 fix use of ansible tags (#6316) 
tags are not inherited for include_role therefore the change
from include to import

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-06-25 03:00:37 -07:00
Hans FeldtandHans Feldt a8740c6e13 fix a few tasks falsely reporting "changed" (#6269) 
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-06-16 00:24:03 -07:00