Ref: kubernetes/kubeadm/issues/2051

See: https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/kubernetes-sig-release/ew-k9PEBckQ/T7dFepHdCAAJ



Signed-off-by: Nguyen Hai Truong <truongnh@vn.fujitsu.com>

* Add metrics exporting in containerd config

* Add containerd.yml with containerd configuration example to the sample group_vars

Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>

exists role kubernetes/preinstall and not exists role container-engine

 error 'yum_repo_dir' is undefined

* Run 'container-engine' after drain.

Move possibly disruptive role 'container-engine' to run after the node
is drained.

As that role have to be run on non-cluster nodes as well (etcd and
calico-rr), and those nodes are not drained, add play for that case.

* Check if api is up before upgrade.

If container engine is restarted in previous role, api controller can
take some time to start. This check ensures api is up before upgrade.

- Add support for manage-security-groups flag
- Add support for internal-lb flag

* make cinder csi topology aware

* change feature description do better reflect whats being done

* remove sameas true since it isn't required

Although it is spelling mistakes, it might make affect while reading.

Signed-off-by: Nguyen Hai Truong <truongnh@vn.fujitsu.com>

When kube-router is used as cni, rules might be added to the mangle table
to support external IPs. Therefore, mangle table should be flushed during
reset as well.

This 38688a44 change replaces the
value for dockerproject_.+_repo_.+ docker variables but their new
value was previously defined in other variables. This change removes
the dockerproject_.+_repo_.+ docker variables in favor of the older
ones.

* Fix HAproxy config to avoid client offered only unsupported versions error

* Add HAproxy SSL check interval

* Fix ha mode document markdown

* Fix incorrect assertion comparison for kube_network_node_prefix

* Ignore assertion comparison for kube_network_node_prefix when using calico

* Adding more var docs description for kube_network_node_prefix

* Fixing trailing whitespaces

Replace deprecated callback plugin `skippy` with `default`, which
also supports ignoring skipped hosts.

Adds `calico_iptables_lock_timeout_secs` variable to calico DS yaml.

* External OpenStack Cloud Controller Manager implementation

* Adding controller image tag

* Minor fixes

* Restructuring the external cloud controller to work with KubeADM

* rebase and add az_list_node variable to specify different AZs for kubelets

* fix missing variable name change

* helm default version 3.1.0

* fix newline
try to retest2

Sets a 2 hour timeout value for facts caching.

Fixing and issue where if the pids in the orphan list no longer exist then all systemd child processes would be killed. (#5636)

Add Cinder images to download role

* Ability to define plugins.cri.containerd params

* addition of containerd field commented as an example

* documentation of containerd_config

* Added in code to allow control over pull policy for local path provisioner

* change to imagePullPolicy to use globally used variable k8s_image_pull_policy

* removed unusued variable from defaults

* updated contiv-etcd and cinder-csi-controllerplugin to use k8s_image_pull_policy variable

UPdate docs to match actuall required settings to perform an unsafe upgrade using cluster.yml playbook. Relates to https://github.com/kubernetes-sigs/kubespray/issues/4736 and https://github.com/kubernetes-sigs/kubespray/issues/4139 (#5609)