mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-10-29 22:03:22 -02:30
* Enable AlmaLinux 8 and Rocky Linux 8 Calico CI Install Python 3.12 with yum before gathering facts when the interpreter selected by Ansible is missing or older than Python 3.9, and add bootstrap_os_install_python to control distribution-specific Python bootstrap installation. EL8 only ships the libselinux Python bindings for the distribution Python 3.6, so ansible.posix.selinux fails once Kubespray runs with Python 3.12. Keep using the module when the bindings are importable and otherwise set the policy in /etc/selinux/config and apply the runtime state with setenforce. Enable rockylinux8-calico in regular PR CI, add almalinux8-calico as a manual job, and document the RHEL 8 family lifecycle. Signed-off-by: Kay Yan <kay.yan@daocloud.io> * Fix EL8 containerd compatibility and SELinux runtime transitions Signed-off-by: Kay Yan <kay.yan@daocloud.io> --------- Signed-off-by: Kay Yan <kay.yan@daocloud.io>
55 lines
1.8 KiB
YAML
55 lines
1.8 KiB
YAML
---
|
|
## CentOS/RHEL/AlmaLinux specific variables
|
|
# Use the fastestmirror yum plugin
|
|
centos_fastestmirror_enabled: false
|
|
# Timeout (in seconds) for checking RHEL subscription status
|
|
rh_subscription_check_timeout: 180
|
|
|
|
## Flatcar Container Linux specific variables
|
|
# Disable locksmithd or leave it in its current state
|
|
coreos_locksmithd_disable: false
|
|
|
|
# Install epel repo on Centos/RHEL
|
|
epel_enabled: false
|
|
|
|
## openEuler specific variables
|
|
# Enable metalink for openEuler repos (auto-selects fastest mirror by location)
|
|
openeuler_metalink_enabled: false
|
|
# Override the default baseurl host for openEuler repos.
|
|
# Used as fallback when metalink is unavailable (502/timeout).
|
|
# Default repo.openeuler.org (Hong Kong) is slow from many CI/cloud environments.
|
|
openeuler_repo_baseurl: ""
|
|
|
|
## Oracle Linux specific variables
|
|
# Install public repo on Oracle Linux
|
|
use_oracle_public_repo: true
|
|
|
|
## RHEL specific variables
|
|
# Enable RHEL subscription repos
|
|
rhel_enable_repos: true
|
|
|
|
## Ubuntu specific variables
|
|
# Disable unattended-upgrades for Linux kernel and all packages start with linux- on Ubuntu
|
|
ubuntu_kernel_unattended_upgrades_disabled: false
|
|
# Stop unattended-upgrades if it is currently running on Ubuntu
|
|
ubuntu_stop_unattended_upgrades: false
|
|
|
|
fedora_coreos_packages:
|
|
- python
|
|
- python3-libselinux
|
|
- ethtool # required in kubeadm preflight phase for verifying the environment
|
|
- ipset # required in kubeadm preflight phase for verifying the environment
|
|
- conntrack-tools # required by kube-proxy
|
|
- containernetworking-plugins # required by crio
|
|
|
|
## General
|
|
# Install Python through the distribution-specific bootstrap tasks
|
|
bootstrap_os_install_python: true
|
|
|
|
# Set the hostname to inventory_hostname
|
|
override_system_hostname: true
|
|
|
|
is_fedora_coreos: false
|
|
|
|
skip_http_proxy_on_os_packages: false
|