External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-10-31 06:26:19 -02:30
Code Issues Packages Projects Releases Wiki Activity
2,868 Commits 61 Branches 91 Tags
aee3ec682edcd94a55f0fcd76d611857df4be672
Commit Graph
78 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Krüger aee3ec682e Merge pull request #2587 from tossmilestone/update-ingress-nginx-version 
Bump ingress-nginx-controller to version 0.12.0
 2018-04-03 13:56:41 +02:00
Andreas Krüger cac2196ad5 Merge pull request #2575 from hswong3i/local-volume-provisioner-download 
local-volume-provisioner: container download related things should defined in the download role
 2018-04-02 10:32:43 +02:00
Andreas Krüger ba24fe3226 Merge pull request #2570 from avoidik/transfer-cloud-configs 
Move cloud config configurations to proper location
 2018-04-02 10:31:38 +02:00
Andreas Krüger 92fc2df214 Merge pull request #2574 from hswong3i/cephfs-provisioner-download 
cephfs-provisioner: container download related things should defined in the download role
 2018-04-01 18:26:08 +02:00
Andreas Krüger eb4038a6b9 Merge pull request #2573 from hswong3i/registry-download 
registry: container download related things should defined in the download role
 2018-04-01 11:39:04 +02:00
Andreas Krüger deac627dc7 Merge pull request #2571 from hswong3i/ingress-nginx-download 
ingress-nginx: container download related things should defined in the download role
 2018-03-31 20:51:50 +02:00
Andreas Krüger 6ee3c053b7 Merge pull request #2547 from bobahspb/master 
prometheus operator, metrics for k8s cluster
 2018-03-31 20:51:24 +02:00
Andreas Krüger b9b028a735 Update etcd deployment to use correct cert and key (#2572) 
* Update etcd deployment to use correct cert and key

* Update to use admin cert for etcdctl commands

* Update handler to use admin cert too
 2018-03-31 14:06:09 -04:00
Andreas Krüger 5b0da4279f Merge pull request #2543 from hswong3i/cert-manager-0.2.3 
Integrate jetstack/cert-manager 0.2.3 to Kubespray
 2018-03-31 18:15:25 +02:00
Andreas Krüger 1ac978b8fa Merge pull request #2567 from mirwan/node_labels_doc_plus_kube_ingress_handling 
node_labels documentation and kube-ingress label definition as role_node_label
 2018-03-31 18:05:52 +02:00
Andreas Krüger c1a2e9a8c6 Merge pull request #2569 from avoidik/allow-ssh-key-openstack 
Allow ansible_ssh_private_key_file for Openstack
 2018-03-31 18:05:00 +02:00
Andreas Krüger d9418b1dc4 Merge pull request #2554 from georgejdli/fix-sa-token-signing 
Fix kubespray's ServiceAccount token signing keys
 2018-03-31 09:59:22 +02:00
Andreas Krüger 2c89a02db3 Only download container/file if host is in defined group (#2565) 
* Only download container/file if host is in defined group

* Set correct when clause

* Fix last entries

* Update download groups
 2018-03-30 22:40:01 -04:00
Andreas Krüger 887a468d32 Merge pull request #2562 from avoidik/fix-indexes-pr-2251 
Fix kubecert_node.results indexes
 2018-03-31 00:16:11 +02:00
woopstar 859a7f32fb Fix import task. Has to be include task to evalutate etcd_cluster_setup variable at run time 2018-03-31 00:06:34 +02:00
Andreas Krüger 1f28764ca1 Merge pull request #2512 from woopstar/hyperkube-fix-1 
Switch hyperkube from CoreOS to Google
 2018-03-30 21:58:03 +02:00
Andreas Krüger 76cb37d6b5 Merge pull request #2544 from woopstar/cert-fix-2 
Update openssl.conf to count better and work with Jinja 2.9
 2018-03-30 21:57:17 +02:00
Andreas Krüger 7ddd4cd38c Merge pull request #2561 from rsmitty/no_proxy 
only set no_proxy if other proxy vars are defined
 2018-03-30 21:43:23 +02:00
Andreas Krüger c1eb975545 Merge pull request #2557 from chenhonggc/vault_health_check_delay 
Maybe vault health check needs delay
 2018-03-30 21:39:15 +02:00
Andreas Krüger 7e58b96328 Merge pull request #2525 from avoidik/openstack_subnet_fix 
Return subnet_id as defined in kubespray.tf
 2018-03-30 13:42:12 +02:00
Andreas Krüger ac4a71452e Merge pull request #2062 from wanix/ansible-vagrant-update 
replace ansible.sudo by ansible.become for vagrant
 2018-03-30 13:41:45 +02:00
Andreas Kruger af5f376163 Revert 2018-03-30 11:42:20 +02:00
woopstar 004b0a3fcf Fix merge conflict 2018-03-30 11:38:59 +02:00
Andreas Kruger 4bb7d2b566 Merge branch 'master' of https://github.com/kubernetes-incubator/kubespray into cert-fix-2 2018-03-30 11:34:05 +02:00
Andreas Krüger f619eb08b1 Merge pull request #2350 from whereismyjetpack/kubeadm-nodename 
set nodeName to "{{ inventory_hostname }}" in kubeadm-config
 2018-03-30 11:15:52 +02:00
Andreas Krüger 55195fe546 Merge pull request #2500 from gorazio/patch-1 
Add prometheus annotations to spec in ingress
 2018-03-30 11:02:31 +02:00
Andreas Krüger 270d21f5c1 Merge pull request #2540 from mattymo/cloud_config_timing 
Write cloud-config during kubelet configuration
 2018-03-29 09:12:18 +02:00
Andreas Kruger bf29198efd Fix merge conflict 2018-03-29 09:11:13 +02:00
woopstar 0b5404b2b7 Fix 2018-03-28 20:28:04 +02:00
woopstar 0df32b03ca Update openssl.conf to count better and work with Jinja 2.9 2018-03-28 17:48:56 +02:00
Andreas Krüger 03117d9572 Merge pull request #2488 from LuckySB/ingress-nginx-node-role 
Dedicated node for ingress nginx controller
 2018-03-28 14:07:40 +02:00
Andreas Krüger c78f5393c3 Merge pull request #2538 from hswong3i/weave-2.2.1-fixup 
Fixup #2523: Upgrade Weave to 2.2.1
 2018-03-28 11:06:33 +02:00
Andreas Krüger fda49564bf Merge pull request #2492 from chenhonggc/gather_all_instances 
gather all facts
 2018-03-28 09:52:39 +02:00
Andreas Krüger ed48b6e4b7 Merge pull request #2537 from hswong3i/calico-2.6.8-docs 
Fixup #2262: Update README.md for calico v2.6.8
 2018-03-28 09:50:07 +02:00
Andreas Krüger 2ca7087018 Merge pull request #2524 from avoidik/systemd_user_kubelet 
Set exact user for Kubelet services
 2018-03-27 16:41:10 +02:00
Andreas Krüger d665f14682 Merge pull request #2526 from mzehrer/patch-1 
Remove  kibana_base_url
 2018-03-27 12:40:31 +02:00
Andreas Krüger d33a482c91 Merge pull request #2529 from dvazar/bugfix/azurerm_generate_inventory 
Fixed inventory file creation
 2018-03-26 21:11:28 +02:00
Andreas Krüger d64839e7d2 Merge pull request #2532 from LuckySB/etcd_tuning 
add etc tunning options
 2018-03-26 21:10:38 +02:00
Andreas Krüger f7dc73b830 Merge pull request #2521 from f84anton/patch-1 
optional calico_ip_auto_method variable with IP_AUTODETECTION_METHOD
 2018-03-24 18:37:03 +01:00
Andreas Krüger 8eac37fabd Merge pull request #2523 from hswong3i/weave-2.2.1 
Upgrade Weave to 2.2.1
 2018-03-24 18:36:28 +01:00
Andreas Krüger f07734596e Merge pull request #2333 from hswong3i/cephfs_provisioner_fixup 
CephFS Provisioner Addon Fixup
 2018-03-23 11:57:11 +01:00
Andreas Krüger 6ac7840195 Update to correct versions in README 
Some of the versions does not match. Fix this.
 2018-03-22 11:59:58 +01:00
Andreas Krüger 30e4b89837 Merge pull request #2504 from brtknr/patch-1 
Update kube-apiserver.manifest.j2 and kubeadm-config.yaml.j2 to incorporate `endpoint-reconciler-type: lease`
 2018-03-22 09:15:55 +01:00
Andreas Krüger 405c711edb Remove v in tag 2018-03-22 09:07:28 +01:00
woopstar d3780e181e Switch hyperkube from CoreOS to Google 2018-03-21 23:27:16 +01:00
Andreas Krüger 2e202051e3 Merge pull request #2364 from whereismyjetpack/default-download 
set local_release_dir in downloads to match others
 2018-03-21 23:16:48 +01:00
Andreas Krüger ff2b8e5e60 Merge pull request #2503 from woopstar/kubelet-fix-1 
Fix duplicate --proxy-client-cert-file and --proxy-client-key-file
 2018-03-21 10:03:31 +01:00
woopstar 9d540165c0 Set kube_api_aggregator_routing to default false as we use kube-proxy 2018-03-20 16:28:05 +01:00
woopstar a94a407a43 Fix duplicate --proxy-client-cert-file and --proxy-client-key-file 2018-03-20 12:08:36 +01:00
Andreas Krüger 8b6a6a5a28 Merge pull request #2487 from MQasimSarfraz/upgrade-playbook-fix 
Mark "calico-rr" as optional in fact gather
 2018-03-19 20:25:24 +01:00
Andreas Krüger f253691a68 Merge pull request #2347 from hswong3i/multiple_artifacts_dir 
Support multiple artifacts under individual inventory directory
 2018-03-19 12:45:55 +01:00
woopstar f1d2f84043 Only apply roles from first master node to fix regression 2018-03-18 16:15:01 +01:00
woopstar b9a949820a Only copy tokens if tokens_list contains any 2018-03-18 08:42:38 +01:00
Andreas Krüger 50e5f0d28b Merge pull request #2468 from LuckySB/master 
change expirations period for generated certificate from 10y to 100 years
 2018-03-17 19:43:40 +01:00
woopstar e40368ae2b Add CoreDNS support with various fixes 
Added CoreDNS to downloads

Updated with labels. Should now work without RBAC too

Fix DNS settings on hosts

Rename CoreDNS service from kube-dns to coredns

Add rotate based on http://edgeofsanity.net/rant/2017/12/20/systemd-resolved-is-broken.html

Updated docs with CoreDNS info

Added labels and fixed minor settings from official yaml file: https://github.com/kubernetes/kubernetes/blob/release-1.9/cluster/addons/dns/coredns.yaml.sed

Added a secondary deployment and secondary service ip. This is to mitigate dns timeouts and create high resitency for failures. See discussion at 'https://github.com/coreos/coreos-kubernetes/issues/641#issuecomment-281174806'

Set dns list correct. Thanks to @whereismyjetpack

Only download KubeDNS or CoreDNS if selected

Move dns cleanup to its own file and import tasks based on dns mode

Fix install of KubeDNS when dnsmask_kubedns mode is selected

Add new dns option coredns_dual for dual stack deployment. Added variable to configure replicas deployed. Updated docs for dual stack deployment. Removed rotate option in resolv.conf.

Run DNS manifests for CoreDNS and KubeDNS

Set skydns servers on dual stack deployment

Use only one template for CoreDNS dual deployment

Set correct cluster ip for the dns server
 2018-03-16 21:51:37 +01:00
Andreas Krüger d29a1db134 Merge pull request #2461 from woopstar/patch-11 
Add support to kubeadm too
 2018-03-16 08:24:31 +01:00
Andreas Krüger 653d97dda4 Merge pull request #2472 from woopstar/patch-12 
Make sure output from extra args is strings
 2018-03-16 08:23:50 +01:00
Andreas Krüger 5364160d6a Merge pull request #2476 from woopstar/patch-13 
Enable encrypting the secrets
 2018-03-16 08:22:54 +01:00
Andreas Krüger 1a35948ff6 Enable encrypting the secrets 
Enable the CI test to check the encryption of secrets
 2018-03-15 20:33:57 +01:00
woopstar 40c0f3756b Encapsulate item instead of casting to string 2018-03-15 20:27:21 +01:00
Andreas Krüger 3d6fd49179 Added option for encrypting secrets to etcd v.2 (#2428) 
* Added option for encrypting secrets to etcd

* Fix keylength to 32

* Forgot the default

* Rename secrets.yaml to secrets_encryption.yaml

* Fix static path for secrets file to use ansible variable

* Rename secrets.yaml.j2 to secrets_encryption.yaml.j2

* Base64 encode the token

* Fixed merge error

* Changed path to credentials dir

* Update path to secrets file which is now readable inside the apiserver container. Set better file permissions

* Add encryption option to k8s-cluster.yml
 2018-03-15 22:20:05 +03:00
Andreas Krüger 788e41a315 Make sure output from extra args is strings 
Setting the following:

```
kube_kubeadm_controller_extra_args:
  address: 0.0.0.0
  terminated-pod-gc-threshold: "100"
```

Results in `terminated-pod-gc-threshold: 100` in the kubeadm config file. But it has to be a string to work.
 2018-03-14 19:23:43 +01:00
Andreas Krüger 39d247a238 Add support to kubeadm too 
Explicitly defines the --kubelet-preferred-address-types parameter #2418

Fixes #2453
 2018-03-13 10:31:15 +01:00
Andreas Krüger 42a0f46268 Add health check to kube proxy (#2356) 
Adding health checking to kube proxy. Fixes #2308
 2018-02-21 23:14:45 +03:00
Andreas Krüger d84ff06f73 Set filemode to 0640 (#2315) 
* Set filemode to 0640

weave-net.yml file is readable by all users on the host. It however contains the weave_password to encrypt all pod communication. It should only be readable by root.

* Set mode 0640 on users_file with basic auth
 2018-02-21 23:13:46 +03:00
Andreas Krüger 41ca67bf54 Added iptables lock fix and ajusted oom-score 
xtables lock was missing. Added new option for oom-score to make sure it's not killed in an OOM situation before regular pods.
 2018-02-12 10:21:38 +01:00
woopstar f9df692056 Issue front proxy certs for vault 2018-02-07 11:03:10 +01:00
woopstar f193b12059 Kubeadm auto creates this 2018-02-07 10:50:34 +01:00
woopstar 2cd254954c Remove defaults of allowed names. Updated kubeadm 2018-02-07 10:07:55 +01:00
woopstar 4dab92ce69 Rename from aggregator-proxy-client to front-proxy-client to match kubeadm design. Added kubeadm support too. Changed to use variables set and not hardcode paths. Still missing cert generation for Vault 2018-02-07 09:50:19 +01:00
Andreas Krüger 5cd6b0c753 Adding missing defaults for weave 
The PR #2203 add's missing defaults for weave, but no signed CLA. So this PR fixes it.
 2018-02-06 14:25:07 +01:00
Andreas Krüger bb339265fc Set default registry_enabled to false 
In PR #2244 the `registry_enabled` is missing in defaults, causing a deployment to fail, if it is not set in k8s-cluster.yml
 2018-02-06 14:17:06 +01:00
woopstar b2d30d68e7 Rename CN for aggreator back. Add flags to apiserver when version is >= 1.9 2018-02-05 20:37:14 +01:00
woopstar 82d10b882c Added fixes from whereismyjetpack 2018-02-05 20:07:12 +01:00
woopstar 0b4168cad4 WIP. Adding metrics-server support for K8s version 1.9 2018-02-05 10:37:41 +01:00
woopstar 3289472e31 Added option to set MTU on Weave 2018-02-05 10:23:48 +01:00
Andreas Krüger 088d36da09 Increase the idx counter 
Fix the idx counter to increase too, or you will end up with two same indexes.
 2018-01-30 21:48:13 +01:00
Andreas Krüger 6f36faa4f9 Loadbalancer Apiserver Address is missing 
If you configure your external loadbalancer to do a simple tcp pass-through to the api servers, and you do not use a DNS FQDN but just the ip, then you need to add the ip adress to the certificates too.

Example config:

```
## External LB example config
apiserver_loadbalancer_domain_name: "10.50.63.10"
loadbalancer_apiserver:
  address: 10.50.63.10
  port: 8383
```
 2018-01-30 17:33:00 +01:00