- Nov 08, 2023
-
-
Max Gautier authored
* containerd: refactor handlers to use 'listen' * cri-dockerd: refactor handlers to use 'listen' * cri-o: refactor handlers to use 'listen' * docker: refactor handlers to use 'listen' * etcd: refactor handlers to use 'listen' * control-plane: refactor handlers to use 'listen' * kubeadm: refactor handlers to use 'listen' * node: refactor handlers to use 'listen' * preinstall: refactor handlers to use 'listen' * calico: refactor handlers to use 'listen' * kube-router: refactor handlers to use 'listen' * macvlan: refactor handlers to use 'listen'
-
- Sep 14, 2023
-
-
Qasim Mehmood authored
-
- Sep 11, 2023
-
-
NierYYDS authored
when people run playbook with option `--tags=kubelet`, the kubelet config may changed, because some variables used in task populating `kubelet-config.yml` could be different with running task(`Fetch facts`)
-
- Sep 04, 2023
-
-
蔣 航 authored
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
-
- Aug 18, 2023
-
-
Louis Tu authored
Signed-off-by: tu1h <lihai.tu@daocloud.io>
-
- Aug 10, 2023
-
-
Arthur Outhenin-Chalandre authored
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- Jul 26, 2023
-
-
Arthur Outhenin-Chalandre authored
* project: fix ansible-lint name Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: ignore jinja template error in names Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: capitalize ansible name Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: update notify after name capitalization Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- Jul 25, 2023
-
-
Kay Yan authored
-
- Jul 24, 2023
-
-
satandyh authored
Benchmark item number 4.1.9
-
- Jul 05, 2023
-
-
Arthur Outhenin-Chalandre authored
* project: fix var-spacing ansible rule Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix spacing on the beginning/end of jinja template Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix spacing of default filter Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix spacing between filter arguments Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix double space at beginning/end of jinja Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix remaining jinja[spacing] ansible-lint warning Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- Jun 26, 2023
-
-
Arthur Outhenin-Chalandre authored
* project: update all dependencies including ansible Upgrade to ansible 7.x and ansible-core 2.14.x. There seems to be issue with ansible 8/ansible-core 2.15 so we remain on those versions for now. It's quite a big bump already anyway. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: install aws galaxy collection Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * ansible-lint: disable various rules after ansible upgrade Temporarily disable a bunch of linting action following ansible upgrade. Those should be taken care of separately. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve deprecated-module ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve no-free-form ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[meta] ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[playbook] ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[tasks] ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve risky-file-permissions ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve risky-shell-pipe ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: remove deprecated warn args Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: use fqcn for non builtin tasks Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve syntax-check[missing-file] for contrib playbook Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: use arithmetic inside jinja to fix ansible 6 upgrade Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- Jun 12, 2023
-
-
ERIK authored
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
-
- Jun 08, 2023
-
-
Pat Riehecky authored
Signed-off-by: Pat Riehecky <riehecky@fnal.gov>
-
- Jun 02, 2023
-
-
Samuel Liu authored
-
- May 29, 2023
-
-
Victor Login authored
* Fix `The task includes an option with an undefined variable` for 1.27 * delete old flag --container-runtime Signed-off-by: Victor Login <batazor@evrone.com> --------- Signed-off-by: Victor Login <batazor@evrone.com>
-
- May 11, 2023
-
-
Manuelraa authored
-
- Apr 23, 2023
-
-
蒋航 authored
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
-
- Mar 28, 2023
-
-
Kay Yan authored
-
- Mar 22, 2023
-
-
Kay Yan authored
-
- Mar 06, 2023
-
-
Arthur Outhenin-Chalandre authored
* node: fix default kubelet/runtime cgroups when kube_reserved is false (default) Commit 1c4db613 introduced a notion of kube_reserved. This introduced a breaking change defaulting to use kube.slice for the container_manager and the kubelet as if kube_reserved was always enabled whereas it is disabled by default. This commit fixes this by bringing back system.slice whenever kube_reserved is disabled. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * inventory/sample: change false for kube_reserved as its the default Changing the commented value in sample inventory to the actual default value. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
panguicai authored
Signed-off-by: panguicai008 <1121906548@qq.com>
-
- Feb 27, 2023
-
-
Jack authored
-
- Feb 20, 2023
-
-
Maxime Leroy authored
-
- Feb 13, 2023
-
-
ERIK authored
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
-
- Feb 06, 2023
-
-
Bas authored
-
- Jan 31, 2023
-
-
蒋航 authored
Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
-
- Jan 24, 2023
-
-
- Jan 23, 2023
-
-
Mohamed Zaian authored
-
- Jan 03, 2023
-
-
mKlaris authored
-
- Dec 30, 2022
-
-
Shelming.Song authored
* optimize cgroups settings for node reserved * fix * set cgroup slice for multi container engine * set cgroup slice for crio * add reserved cgroups variables to sample files * Compatible with cgroup path for different container managers * add cgroups doc * fix markdown
-
- Oct 27, 2022
-
-
蒋航 authored
Signed-off-by: hang.jiang <hang.jiang@daocloud.io> Signed-off-by: hang.jiang <hang.jiang@daocloud.io>
-
- Oct 24, 2022
-
-
Wouter Goedhart authored
variable Fix wrong referenced variable on bgp_peers Fix bgp_peeras field to be a string Set default value for bgp_peeras
-
- Oct 19, 2022
-
-
Cristian Calin authored
* [cri-o] use cri-o from upstream instead of kubic/OBS * [cri-o] add proper molecule coverage * [skopeo] download skopeo from upstream build * [cri-o] clean up legacy deployments * disable cri-o per-distribution variables
-
- Oct 06, 2022
-
-
William Turner authored
-
- Aug 30, 2022
-
-
Alessio Greggi authored
* feat: add kubelet systemd service hardening option * refactor: move variable name to kubelet_secure_addresses Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com> * docs: add diagram about kubelet_secure_addresses variable Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
-
Kay Yan authored
* fix-kube-vip-strict-arp * fix-kube-vip-strict-arp
-
- Aug 23, 2022
-
-
Shelming.Song authored
-
- Jul 31, 2022
-
-
Samuel Liu authored
-
- Jul 19, 2022
-
-
Alessio Greggi authored
* docs(hardening): add SeccompDefault admission plugin to kubelet feature gates * fix(kubelet-config): enable config through kubelet_feature_gates * feat(kubelet): add kubelet_seccomp_default variable
-
- Jul 05, 2022
-
-
h9-HSFRQDH authored
-