Skip to content
Snippets Groups Projects
  1. Jul 02, 2019
    • okamototk's avatar
      Use K8s 1.15 (#4905) · f2b8a361
      okamototk authored
      * Use K8s 1.15
      
      * Use Kubernetes 1.15 and use kubeadm.k8s.io/v1beta2 for
        InitConfiguration.
      * bump to v1.15.0
      
      * Remove k8s 1.13 checksums.
      
      * Update README kubernetes version 1.15.0.
      
      * Update metrics server 0.3.3 for k8s 1.15
      
      * Remove less than k8s 1.14 related code
      
      * Use kubeadm with --upload-certs instead of --experimental-upload-certs due to depricate
      
      * Update dnsautoscaler 1.6.0
      
      * Skip certificateKey if it's not defined
      
      * Add kubeadm-conftolplane.v2beta2 for k8s 1.15 or later
      
      * Support kubeadm control plane for k8s 1.15
      
      * Update sonobuoy version 0.15.0 for k8s 1.15
      f2b8a361
  2. Jun 28, 2019
  3. Jun 20, 2019
    • Matthew Mosesohn's avatar
      Enable kubeadm etcd mode (#4818) · 4348e78b
      Matthew Mosesohn authored
      * Enable kubeadm etcd mode
      
      Uses cert commands from kubeadm experimental control plane to
      enable non-master nodes to obtain etcd certs.
      
      Related story: PROD-29434
      
      Change-Id: Idafa1d223e5c6ceadf819b6f9c06adf4c4f74178
      
      * Add validation checks and exclude calico kdd mode
      
      Change-Id: Ic234f5e71261d33191376e70d438f9f6d35f358c
      
      * Move etcd mode test to ubuntu flannel HA job
      
      Change-Id: I9af6fd80a1bbb1692ab10d6da095eb368f6bc732
      
      * rename etcd_mode to etcd_kubeadm_enabled
      
      Change-Id: Ib196d6c8a52f48cae370b026f7687ff9ca69c172
      4348e78b
  4. Apr 24, 2019
  5. Apr 19, 2019
  6. Apr 11, 2019
  7. Apr 04, 2019
  8. Apr 03, 2019
  9. Feb 19, 2019
    • Manuel Cintron's avatar
      Adding ability to maintain existing Encryption Secrets at Rest. (#4255) · 07b28940
      Manuel Cintron authored
      * Adding ability to maintain existing Encryption Secrets at Rest.
      
      If secrets_encryption.yaml is present it will not be overriten with a new kube_encrypt_token.
      
      This should allow for it to be set ahead of a playbook running or maintain it if cluster.yml is ran on the same cluster and the ansible host does not have access to the secrets.
      
      * Setting existing kube_encrypt_token across all master nodes in case it was missing in one or more nodes.
      07b28940
  10. Jan 10, 2019
  11. Jan 08, 2019
    • Andreas Holmsten's avatar
      Allow override of bind addr for controller-manager and scheduler (#3968) · 4d5b41b8
      Andreas Holmsten authored
      * allows to override the bind addresses for controller-manager and scheduler
      
      Useful for Prometheus metrics monitoring
      
      * Add bind addr override support in kubeadm/v1beta1
      
      Adds support for override of bind addresses for controller-manager
      and scheduler in kubeadm/v1beta1
      
      * Move location of bind address vars
      
      * Remove double declaration of schedulerExtraArgs
      4d5b41b8
  12. Jan 03, 2019
    • Chad Swenson's avatar
      Fix kube-proxy configuration for kubeadm (#3958) · 80379f6c
      Chad Swenson authored
      - Creates and defaults an ansible variable for every configuration option in the `kubeproxy.config.k8s.io/v1alpha1` type spec
        - Fixes vars that were orphaned by removing non-kubeadm
        - Fixes previously harcoded kubeadm values
      - Introduces a `main` directory for role default files per component (requires ansible 2.6.0+)
        - Split out just `kube-proxy.yml` in this first effort
      - Removes the kube-proxy server field patch task
      
      We should continue to pull out other components from `main.yml` into their own defaults files as I did here for `defaults/main/kube-proxy.yml`. I hope for and will need others to join me in this refactoring across the project until each component config template has a matching role defaults file, with shared defaults in `kubespray-defaults` or `downloads`
      80379f6c
Loading