- May 08, 2024
-
-
Max Gautier authored
c58497cd (Refactor bootstrap-os (#10983), 2024-03-27) refactored the boostrap-os include but didn't adapt the amazon linux tasks to the actual ID of amazon linux ('amzn') Re-enable the CI so we can avoid that kind of breakage.
-
- Feb 19, 2024
-
-
Max Gautier authored
Should free CI resources
-
- Jan 11, 2024
-
-
Kay Yan authored
-
- Dec 20, 2023
-
-
Max Gautier authored
* Add multinode ci layout * Add test case for calico using etcd datastore
-
- Dec 18, 2023
-
-
Max Gautier authored
* Rename aio to all-in-one and document it ADTM. Acronyms don't tell much. * Refactor vm_count in tests provisioning
-
- Dec 06, 2023
-
-
Max Gautier authored
Allow to fail early (pre-commit time) for jinja error, rather than waiting until executing the playbook and the invalid template. I could not find a simple jinja pre-commit hook in the wild.
-
- Nov 16, 2023
-
-
Lukáš Kubín authored
* Add helm support for custom_cni deployment * Linting correction * Ansible linting correction * Add test packet with values Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com> * Add custom_cni configuration file with comments Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com> * Default values cleanup Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com> * Add details to custom_cni configuration file Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com> * Set correct yaml type of helm values Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com> * Set CNI filesystem ownership to root Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com> * Update cilium example parameter name Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com> --------- Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com>
-
- Sep 05, 2023
-
-
Florian Ruynat authored
* Add debian12 cilium testing * Fixup recover control plane playbook
-
- Aug 17, 2023
-
-
Mohamed Omar Zaian authored
-
- Aug 14, 2023
-
-
Luke Simmons authored
-
- Aug 08, 2023
-
-
Arthur Outhenin-Chalandre authored
* tests: replace fedora35 with fedora37 Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: replace fedora36 with fedora38 Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * docs: update fedora version in docs Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * molecule: upgrade fedora version Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: upgrade fedora images for vagrant and kubevirt Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * vagrant: workaround to fix private network ip address in fedora Fedora stop supporting syconfig network script so we added a workaround here https://github.com/hashicorp/vagrant/issues/12762#issuecomment-1535957837 to fix it. * netowrkmanager: do not configure dns if using systemd-resolved We should not configure dns if we point to systemd-resolved. Systemd-resolved is using NetworkManager to infer the upstream DNS server so if we set NetworkManager to 127.0.0.53 it will prevent systemd-resolved to get the correct network DNS server. Thus if we are in this case we just don't set this setting. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * image-builder: update centos7 image Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * gitlab-ci: mark fedora packet jobs as allow failure Fedora networking is still broken on Packet, let's mark it as allow failure for now. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- Jun 26, 2023
-
-
Arthur Outhenin-Chalandre authored
* project: update all dependencies including ansible Upgrade to ansible 7.x and ansible-core 2.14.x. There seems to be issue with ansible 8/ansible-core 2.15 so we remain on those versions for now. It's quite a big bump already anyway. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: install aws galaxy collection Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * ansible-lint: disable various rules after ansible upgrade Temporarily disable a bunch of linting action following ansible upgrade. Those should be taken care of separately. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve deprecated-module ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve no-free-form ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[meta] ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[playbook] ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[tasks] ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve risky-file-permissions ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve risky-shell-pipe ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: remove deprecated warn args Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: use fqcn for non builtin tasks Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve syntax-check[missing-file] for contrib playbook Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: use arithmetic inside jinja to fix ansible 6 upgrade Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
Arthur Outhenin-Chalandre authored
* tests: cleanup stale packet namespace automatically Cancelled job on Gitlab can produce stale VMs as the delete playbook will never be executed. This commits allow removing old vms by getting all the namespace created from the same branch with an older pipeline id. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: cleanup stale packet namespace after 2 hours This ensure that we don't have any packet namespace remaining for more than 2 hours. All the jobs complete usually within 30min-1hour so 2 hours is enough to detect a stale namespace. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: ignore vm cleanup failure Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: use pipeline_id var instead of fetching namespace for cleanup packet vm Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- Jun 19, 2023
-
-
Louis Tu authored
Signed-off-by: tu1h <lihai.tu@daocloud.io>
-
Yoshitaka Fujii authored
* Add NIFCLOUD * Add tf-validate-nifcloud in gitlab-ci
-
- Jun 03, 2023
-
-
Arthur Outhenin-Chalandre authored
Molecule 5.0 require ansible-core 2.12.10. So this commit we update ansible-core from 2.12.5 to 2.12.10. We also drop supporting two ansible-core version. Also we now use the "oldest" still supported ansible-core version as both 2.11 is EOL and not supported by molecule. tests/molecule: remove linting in molecule to support molecule 5 tests/molecule: remove role name check for molecule 5 support Kubespray doesn't use ansible galaxy style naming so we have to disable that check. contrib/inventory_builder: fix tox.ini for tox4 tests/molecule: fix get_playbook in testinfra tests tests: upgrade most tests requirements Exclude ansible-lint for now, I will do that in a separate PR. tests/molecule: force kvm driver option If we don't do this it fallbacks to qemu emulated on our CI for some reasons. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- May 25, 2023
-
-
Arthur Outhenin-Chalandre authored
* tests: replace ubuntu16 with ubuntu20 Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: replace ubuntu18 with ubuntu20 Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * docs: update docs to remove support for ubuntu 16 and 18 Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * molecule: upgrade ubuntu versions Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * vagrant: upgrade ubuntu versions Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: cleanup ubuntu{16,18} Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: increase ubuntu22 ram to allow molecule creation Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
Kay Yan authored
-
- May 22, 2023
-
-
Vasubabu authored
-
- May 19, 2023
-
-
Kay Yan authored
* remove-debian9-support * Add six module into openstack-cleanup/requirements.txt (#10099) To fix tf-elastx_cleanup job which was failed with the following error: File "/usr/local/lib/python3.11/site-packages/keystoneauth1/identity/generic/password.py", line 16, in <module> from keystoneauth1.identity import v3 File "/usr/local/lib/python3.11/site-packages/keystoneauth1/identity/v3/__init__.py", line 27, in <module> from keystoneauth1.identity.v3.oauth2_mtls_client_credential import * # noqa ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/local/lib/python3.11/site-packages/keystoneauth1/identity/v3/oauth2_mtls_client_credential.py", line 17, in <module> import six ModuleNotFoundError: No module named 'six' --------- Co-authored-by: Kenichi Omichi <ken1ohmichi@gmail.com>
-
- May 17, 2023
-
-
Kenichi Omichi authored
* Drop CI jobs related to canal According to the canal github[1] the repo is not maintained over 5 years. In addition, the README says Originally, we thought we might more deeply integrate the two projects (possibly even going as far as a rebranding!). However, over time it became clear that that wasn't really necessary to fulfil our goal of making them work well together. Ultimately, we decided to focus on adding features to both projects rather than doing work just to combine them. So we don't need to run CI jobs related to the canal at this situation. [1]: https://github.com/projectcalico/canal * Update ci.md
-
- May 11, 2023
-
-
James authored
* chore(helm-apps): fix README example README shows a non-working example according to the specs for this role. * Add support for kubelet-csr-approver Co-Authored-By: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * Add tests for kubelet-csr-approver Co-Authored-By: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * Add Documentation for Kubelet CSR Approver Co-Authored-By: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Co-authored-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- May 08, 2023
-
-
Qasim Mehmood authored
Remove deprecated provider, fix flatcar configs, enable CI tests and refactor hetzner terraform (#10002) * Remove deprecated provider and fix flatcar configs * Refactor for DRYness * Add missing line endings * Enable tests for hetzner terraform in CI * Add missing inventory for CI tests
-
- May 02, 2023
-
-
Luke Simmons authored
-
- Apr 24, 2023
-
-
Denis Kasanic authored
Signed-off-by: Kasanic, Denis <denisx.kasanic@intel.com>
-
- Mar 27, 2023
-
-
Luke Simmons authored
-
- Mar 03, 2023
-
-
Arthur Outhenin-Chalandre authored
* network_plugin/custom_cni: add CNI to apply provided manifests Add a new simple custom_cni to install provided Kubernetes manifests. This could be useful to use manifests directly provided by a CNI when there are not support by Kubespray (i.e.: helm chart or any other manifests generation method). Co-authored-by: James Landrein <james.landrein@proton.ch> Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * network_plugin/custom_cni: add test with cilium Co-authored-by: James Landrein <james.landrein@proton.ch> Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> Co-authored-by: James Landrein <james.landrein@proton.ch>
-
- Jan 27, 2023
-
-
Florian Ruynat authored
* Update fedora35 vagrant box url * Update Terraform to 1.3.7 * Update Vagrant to 2.3.4
-
Cristian Calin authored
* add terraform lock files to ignore list * move contrib/terraform/metal to contrib/terraform/equinix to reflect upstream change
-
- Jan 14, 2023
-
-
luksi1 authored
-
- Jan 09, 2023
-
-
Luke Simmons authored
-
- Jan 07, 2023
-
-
Kay Yan authored
-
- Nov 07, 2022
-
-
Kenichi Omichi authored
We made all vagrant jobs non-voting because those jobs were not stable. However the setting allowed a pull request which broke vagrant jobs completely merged into the master branch. To avoid such situation, this makes one of vagrant jobs voting. Let's see the stability of the job.
-
- Oct 19, 2022
-
-
Kenichi Omichi authored
To verify the hardening method works always. The configuration comes from docs/hardening.md Fix yaml format of hardening.yml Add condition to skip 040 test for hardening
-
- Oct 07, 2022
-
-
Kenichi Omichi authored
To block merging pull requests which contain typo automatically.
-
- Sep 05, 2022
-
-
Kay Yan authored
-
- Aug 03, 2022
-
-
Florian Ruynat authored
-
- Jul 27, 2022
-
-
Kenichi Omichi authored
Today we have many contributions to contrib/offline/ and some PRs contained invalid coding style for those scripts. This enables shellcheck to make such invalid coding style easily.
-
- Jul 22, 2022
-
-
Florian Ruynat authored
-
Florian Ruynat authored
-