Philip Sabri
15bb5b0789
[kubernetes] Support kubernetes 1.31.1 ( #11533 )
2024-09-25 05:10:01 +01:00
Max Gautier
c87097fc35
Document how to use kubeadm patches
2024-09-12 10:31:09 +02:00
Bogdan Sass
4b324cb0f0
Rename master to control plane - non-breaking changes only ( #11394 )
...
K8s is moving away from the "master" terminology, so kubespray should follow the same naming conventions. See 65d886bb30/sig-architecture/naming/recommendations/001-master-control-plane.md
2024-09-06 07:56:19 +01:00
kokyhm
1093c76f9b
bump k8s version ( #11455 )
2024-08-19 00:12:33 -07:00
R. P. Taylor
468c5641b2
fix kube_reserved so it only controls kubeReservedCgroup ( #11367 )
2024-07-26 01:39:20 -07:00
ChengHao Yang
513e18cb90
Bump: Kubernetes from v1.30.2 to v1.30.3
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
2024-07-21 21:54:16 +08:00
Takuya Murakami
a0d03d9fa6
[kubernetes] Support kubernetes 1.30.2 ( #11343 )
2024-07-03 00:06:20 -07:00
Mohamed Omar Zaian
08293f2ef7
[kubernetes] Add hashes for kubernetes 1.29.5, 1.28.10, 1.27.14
2024-05-15 10:44:47 +02:00
Mohamed Omar Zaian
9f62f60814
[kubernetes] Add hashes for kubernetes 1.29.4, 1.28.9, 1.27.13 ( #11108 )
2024-05-03 02:20:51 -07:00
Nicolas Goudry
c6fcbf6ee0
Remove access to cluster from anonymous users ( #11016 )
...
* feat: add user facing variable with default
* feat: remove rolebinding to anonymous users after init and upgrade
* feat: use file discovery for secondary control plane nodes
* feat: use file discovery for nodes
* fix: do not fail if rolebinding does not exist
* docs: add warning about kube_api_anonymous_auth
* style: improve readability of delegate_to parameter
* refactor: rename discovery kubeconfig file
* test: enable new variable in hardening and upgrade test cases
* docs: add option to config parameters
* test: multiple instances and upgrade
2024-04-02 23:54:12 -07:00
Mohamed Omar Zaian
03ac02afe4
[kubernetes] Add hashes for kubernetes 1.29.3, 1.28.8, 1.27.12 ( #11035 )
2024-03-27 12:30:27 -07:00
Mohamed Omar Zaian
082ac10fbb
[kubernetes] Add hashes for kubernetes 1.29.2, 1.28.7, 1.27.11 ( #10919 )
2024-02-16 01:40:58 -08:00
Takuya Murakami
785366c2de
[kubernetes] Support kubernetes 1.29 ( #10820 )
...
* [kubernetes] Make kubernetes 1.29.1 default
* [cri-o]: support cri-o 1.29
Use "crio status" instead of "crio-status" for cri-o >=1.29.0
* Remove GAed feature gates SecCompDefault
The SecCompDefault feature gate was removed since k8s 1.29
https://github.com/kubernetes/kubernetes/pull/121246
2024-01-31 00:57:23 -08:00
Max Gautier
b4dd8b4313
Hopefully final batches of ipaddr deprecation cleanup ( #10822 )
2024-01-22 18:20:44 +01:00
yun
13e1f33898
Correct the POLY1305 cipher suites by adding the suffix _SHA256 ( #10641 )
2024-01-22 18:00:52 +01:00
Mohamed Omar Zaian
64447e745e
[kubernetes] Make kubernetes v1.28.6 default ( #10810 )
2024-01-19 09:07:27 +01:00
Mohamed Omar Zaian
aea150e5dc
[kubernetes] Make kubernetes v1.28.5 default ( #10739 )
...
* Add hashes for kubernetes 1.29.0, 1.28.5, 1.27.9, 1.26.12
2023-12-21 17:30:45 +01:00
Max Gautier
471326f458
Remove PodSecurityPolicy support and references ( #10723 )
...
This is removed from kubernetes since 1.25, time to cut some dead code.
2023-12-18 14:13:43 +01:00
Mohamed Omar Zaian
b321ca3e64
[kubernetes] Add hashes for kubernetes 1.28.4, 1.27.8, 1.26.11 ( #10624 )
2023-11-24 03:22:55 +01:00
Mohamed Omar Zaian
1f47d5b74f
[kubernetes] Add hashes for kubernetes 1.28.3, 1.27.7, 1.26.10 ( #10541 )
2023-10-20 05:43:34 +02:00
Mohamed Omar Zaian
dbdc4d4123
[kubernetes] Add hashes for kubernetes 1.28.2, 1.27.6, 1.26.9 ( #10435 )
2023-09-18 05:40:32 -07:00
Takuya Murakami
748b0b294d
[kubernetes] support 1.28.0 / 1.28.1 ( #10376 ) ( #10390 )
...
* [kubernetes] support 1.28.0/1.28.1 (#10376 )
* [kubernetes] Make 1.28.1 default (#10376 )
2023-09-11 19:42:12 -07:00
Mohamed Omar Zaian
52c1826423
[kubernetes] Make 1.27.5 default ( #10392 )
...
* Add hashes for 1.27.5 1.26.8, 1.25.13
* Address CVE-2023-3955 , CVE-2023-3676
* Make kubernetes v1.27.5 default
2023-08-24 18:51:17 -07:00
Mohamed Omar Zaian
9bc7492ff2
[kubernetes] Make 1.27.4 default ( #10359 )
2023-08-16 21:12:19 -07:00
Mohamed Omar Zaian
fe32de94b9
[kubernetes] Add hashes for kubernetes 1.27.4, 1.26.7, 1.25.12 ( #10300 )
2023-07-23 19:20:10 -07:00
Arthur Outhenin-Chalandre
5d00b851ce
project: fix var-spacing ansible rule ( #10266 )
...
* project: fix var-spacing ansible rule
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
* project: fix spacing on the beginning/end of jinja template
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
* project: fix spacing of default filter
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
* project: fix spacing between filter arguments
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
* project: fix double space at beginning/end of jinja
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
* project: fix remaining jinja[spacing] ansible-lint warning
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
---------
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
2023-07-04 20:36:54 -07:00
Mohamed Omar Zaian
658d62be16
[kubernetes] upgrade versions to address CVE-2023-2728 ( #10220 )
...
* [kubernetes] Add hashes for 1.27.3, 1.26.6, 1.25.11
* [kubernetes] make 1.26.6 default
2023-06-15 19:48:18 -07:00
Mohamed Omar Zaian
d5cdae1f16
[kubernetes] Add hashes for 1.26.4-5, 1.25.9-10, 1.24.13-14 ( #9983 )
2023-05-18 20:06:28 -07:00
Mohamed Omar Zaian
7859aee735
[kubernetes] Add hashes for 1.26.3, 1.25.8, 1.24.12 ( #9900 )
2023-03-21 01:31:08 -07:00
panguicai
e175ccdde0
the url of multus has been moved ( #9850 )
...
Signed-off-by: panguicai008 <1121906548@qq.com >
2023-03-05 18:52:57 -08:00
Arthur Outhenin-Chalandre
9e2104c7d3
node: fix default kubelet/runtime cgroups when kube_reserved is false ( #9834 )
...
* node: fix default kubelet/runtime cgroups when kube_reserved is false (default)
Commit 1c4db6132d introduced a notion of
kube_reserved. This introduced a breaking change defaulting to use
kube.slice for the container_manager and the kubelet as if kube_reserved
was always enabled whereas it is disabled by default.
This commit fixes this by bringing back system.slice whenever
kube_reserved is disabled.
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
* inventory/sample: change false for kube_reserved as its the default
Changing the commented value in sample inventory to the actual default
value.
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
---------
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
2023-03-05 18:48:58 -08:00
Mohamed Zaian
8b3f3c04cc
[kubernetes] Add hashes for 1.26.2, 1.25.7, 1.24.11 ( #9829 )
2023-03-01 15:31:17 -08:00
Kay Yan
f9cc8ae10c
[kubernetes] Make kubernetes v1.26 default ( #9732 )
...
* make-kube-1.26-default
* fix-bugs
2023-01-31 00:24:48 -08:00
yanggang
826282fe89
Add k8s hashes for k8s version. ( #9685 )
...
Signed-off-by: yanggang <gang.yang@daocloud.io >
Signed-off-by: yanggang <gang.yang@daocloud.io >
2023-01-19 05:30:35 -08:00
Marijn van der Giesen
0d5bcd3e20
feat(coredns): Forward extra domains to coredns kubernetes plugin ( #9635 )
2023-01-05 06:57:58 -08:00
Shelming.Song
1c4db6132d
optimize cgroups settings for node reserved ( #9209 )
...
* optimize cgroups settings for node reserved
* fix
* set cgroup slice for multi container engine
* set cgroup slice for crio
* add reserved cgroups variables to sample files
* Compatible with cgroup path for different container managers
* add cgroups doc
* fix markdown
2022-12-30 08:05:30 -08:00
Marijn van der Giesen
ab80342750
[feat] Add custom options to coredns kubernets plugin ( #9608 )
2022-12-27 18:21:27 -08:00
yanggang
f8d6b54dbb
Add hashes for 1.25.5, 1.24.9, 1.23.15 and make v1.25.5 default ( #9557 )
...
Signed-off-by: yanggang <gang.yang@daocloud.io >
Signed-off-by: yanggang <gang.yang@daocloud.io >
2022-12-11 16:45:33 -08:00
yanggang
9439487219
Add hashes for 1.25.4, 1.24.8, 1.23.14 and make v1.25.4 default ( #9479 )
...
Signed-off-by: yanggang <gang.yang@daocloud.io >
Signed-off-by: yanggang <gang.yang@daocloud.io >
2022-11-10 20:00:09 -08:00
emiran-orange
5c25b57989
Ability to define options for DNS upstream servers ( #9311 )
...
* Ability to define options for DNS upstream servers
* Doc and sample inventory vars
2022-11-08 06:44:25 -08:00
Kay Yan
ccbe38f78c
make-kube-1.25-default ( #9364 )
2022-10-20 00:56:57 -07:00
Mohamed Zaian
5ad1d9db5e
[kubernetes] Add hashes for 1.25.3, 1.24.7, 1.23.13 and make v1.24.7 default ( #9397 )
2022-10-17 05:59:07 -07:00
Huang Chen-Yi
d689f57c94
Features/support kubeadm patches v1beta3 ( #9326 )
...
* Support kubeadm patches in v1beta3
* Update kubeadm patches sample files in inventory
* Fix pre-commit syntax
* Set kubeadm_patches enabled to false in sample inventory
2022-10-06 00:39:52 -07:00
Emin AKTAS
9468642269
feat: allows users to have more control on DNS ( #9270 )
...
Signed-off-by: eminaktas <eminaktas34@gmail.com >
Signed-off-by: eminaktas <eminaktas34@gmail.com >
2022-09-23 10:28:26 -07:00
Mohamed Zaian
76573bf293
[kubernetes] Add hashes for 1.24.6, 1.22.15, 1.23.12 and make v1.24.6 default ( #9308 )
2022-09-22 04:13:03 -07:00
Mohamed Zaian
680293e79c
[kubernetes] Add hashes for 1.24.5, 1.22.14, 1.23.11 and make v1.24.5 default ( #9286 )
2022-09-19 02:10:31 -07:00
Michael Schmitz
be2bfd867c
Add Support for Rewrite Plugin to CoreDNS/NodelocalDNS ( #9245 )
2022-09-03 16:16:35 -07:00
Kay Yan
b46ddf35fc
kube-vip shoud fail if kube_proxy_strict_arp is false in arp mod ( #9223 )
...
* fix-kube-vip-strict-arp
* fix-kube-vip-strict-arp
2022-08-30 00:21:02 -07:00
Mohamed Zaian
ab938602a9
[kubernetes] Add hashes for 1.24.4, 1.22.13, 1.23.10 and make v1.24.4 default ( #9191 )
2022-08-21 23:11:44 -07:00
Mohamed Zaian
91073d7379
[kubernetes] make v1.24.3 default ( #9101 )
2022-07-19 02:58:06 -07:00