External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-10-31 06:26:19 -02:30
Code Issues Packages Projects Releases Wiki Activity
5,410 Commits 61 Branches 91 Tags
f323d70c0fec716d1a7b614dca1746f7042e4244
Commit Graph
21 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Hans Feldt 4781df587c bump crio version to 1.19 (#6758) 
* bump crio version to 1.19

* crio package name has changed for debian/ubuntu
* crio upgrade does not work, see #6757

* update crio info in docs
 2020-10-13 02:08:26 -07:00
Hans Feldt e6effb8245 Make reset work for crio (#6812) 
crio refuses to delete pods when cni is unavailable which is the
case e.g. using calico with kdd datastore. See:

https://github.com/cri-o/cri-o/issues/4084

Fix by deleting storage associated with containers. Stop and disable
crio service so switching container runtime can be done.
 2020-10-12 15:47:22 -07:00
Hans Feldt 270f91e577 cleanup kubelet_deployment_type (#6815) 
No longer used/supported
 2020-10-12 00:04:47 -07:00
Hans Feldt 92b1166dd0 Disable dashboard by default (#6804) 
Users should opt in for features and not opt out.
 2020-10-11 08:06:47 -07:00
Hans Feldt 99b8f0902e crio: ensure service is started and enabled (#6753) 2020-10-07 00:10:42 -07:00
Hans Feldt b0097fd0c1 harden reset to work in more cases (#6781) 
reset playbook fails and does not continue cleanup after for
example a host reboot with kubelet stopped/disabled
 2020-10-05 12:55:21 -07:00
Hans Feldt 28073c76ac Calico upgrade path validation and old version cleanup (#6733) 
* calico: add constant calico_min_version_required

and verify current deployed version against it.

* calico: remove upgrade support with data migration

The tool was used pre v3.0.0 and is no longer needed.

* calico: remove old version support from tasks

* calico: remove old ver support from policy ctrl

* calico: remove old ver support from node

* canal: remove old ver support

* remove unused calicoctl download checksums

calico_min_version_required is the oldest version that can be installed
Older versions can be removed.
 2020-09-24 09:04:06 -07:00
Hans Feldt 6141b98bf8 calico: default to using kdd datastore (#6693) 
If already deployed, get current datastore from CNI config file
 2020-09-23 08:38:09 -07:00
Hans Feldt 6da385de9d Use "kubeadm join" to join masters to control plane (#6661) 
Remove configuration variable kubeadm_control_plane
 2020-09-17 04:34:45 -07:00
Hans Feldt 0cc5e3ef03 Remove workaround with kube_proxy_remove (#6512) 
* kube-proxy never gets deployed so need to remove it
 2020-09-17 04:30:45 -07:00
Hans Feldt a2d4dbeee4 crio: use system default for storage driver by default (#6637) 
After host reboot kubelet and crio goes into a loop and no container is started.

storage_driver in crio.conf overrides system defaults in etc/containers/storage.conf

/etc/containers/storage.conf is installed by package containers-common dependency
installed from cri-o (centos7) and contains "overlay".

Hosts already configured with overlay2 should be reconfigured and the
/var/lib/containers content removed.
 2020-09-10 05:29:45 -07:00
Hans Feldt 6613895de0 remove kubelet startup warnings for non docker container runtime (#6605) 
Removes these startup warnings:

Warning: For remote container runtime, --pod-infra-container-image is ignored in kubelet, which should be set in that remote runtime instead
Using "/var/run/crio/crio.sock" as endpoint is deprecated, please consider using full url format "unix:///var/run/crio/crio.sock".
 2020-09-04 04:54:04 -07:00
Hans Feldt 803d52ffce kubernetes: remove unused variables (#6601) 2020-09-04 04:53:56 -07:00
Hans Feldt 93698a8f73 Calico: update crds to v1 and cr (#6360) 
* Update CustomResourceDefinition for kubecontrollersconfigurations.crd.projectcalico.org to v1
* Align ClusterRole for kube-controllers with upstream (calico)
 2020-09-03 00:51:40 -07:00
Hans Feldt 9e2d282709 cri-o: add variable to configure unsecure pull (#6568) 
By default do not allow "unqualified" (without a registry) images
because it is considered unsecure and subject to mitm attacks.

To enable insecure pull configure for example:

crio_registries:
  - "docker.io"
  - "quay.io"
 2020-08-27 09:09:53 -07:00
Hans Feldt c6e5be91e9 crio: align template crio.conf with upstream (#6432) 
* log level by default increased to 'info'
* cgroup manager by default set to 'systemd'
* stream port (used by kubelet) bound to 127.0.0.1 for security reasons
* metrics can be enabled and port specified
 2020-08-01 00:33:48 -07:00
Hans FeldtandHans Feldt 22996babcf allow kubeadm to upgrade etcd (#6345) 
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-07-07 12:36:00 -07:00
Hans FeldtandHans Feldt 75ad868cbd crio: harden downloads with retry (#6374) 
CI job 624031102 failed with:

fatal: [ubuntu1804]: FAILED! => {"changed": false, "msg": "Failed to download key at https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/xUbuntu_18.04/Release.key: Request failed: <urlopen error [Errno -3] Temporary failure in name resolution>"}

Assuming its a temporary problem it should get more robust with a
couple of retries like in other roles.

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-07-07 12:32:01 -07:00
Hans FeldtandHans Feldt ae003af262 Fix kubelet cgroup driver detection for crio (#6331) 
* Fix kubelet cgroup driver detection for crio

Remove fact standalone_kubelet since it is not used

* Fix yamllint complaints of roles/kubernetes/node/tasks/facts.yml

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-06-30 02:32:05 -07:00
Hans FeldtandHans Feldt 93951f2ed5 fix use of ansible tags (#6316) 
tags are not inherited for include_role therefore the change
from include to import

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-06-25 03:00:37 -07:00
Hans FeldtandHans Feldt a8740c6e13 fix a few tasks falsely reporting "changed" (#6269) 
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-06-16 00:24:03 -07:00