Commits · 9e2d282709630874f558a249e1d43f9d8a678183 · Mirror / Kubespray

Aug 27, 2020
- cri-o: add variable to configure unsecure pull (#6568) · 9e2d2827
  Hans Feldt authored Aug 27, 2020
```
By default do not allow "unqualified" (without a registry) images
because it is considered unsecure and subject to mitm attacks.

To enable insecure pull configure for example:

crio_registries:
  - "docker.io"
  - "quay.io"
```
  9e2d2827
- etcd should not fail when adding an already existing member (#6587) · 706c7cb4
  Florian Ruynat authored Aug 27, 2020
  
  706c7cb4
- Remove ethtool workaround, issue is now fixed (#6579) · 5884eeb6
  Florian Ruynat authored Aug 27, 2020
  
  5884eeb6
- Update bunch of dependencies with minor fixes (#6570) · e7ee19bd
  Florian Ruynat authored Aug 27, 2020
  
  e7ee19bd
- make it possible to open additional ports on master nodes (#6547) · 2f8fc921
  Hugo Blom authored Aug 27, 2020
  
  2f8fc921
- Deviceroutesourceaddress (#6508) · f59d3fc4
  nic0las authored Aug 27, 2020
```
* add FELIX_DEVICEROUTESOURCEADDRESS calico option

* add calico_use_default_route_src_ipaddr option 

add calico_use_default_route_src_ipaddr option to use FELIX_DEVICEROUTESOURCEADDRESS calico option

* Update k8s-net-calico.yml
```
  f59d3fc4
- Fix Ansible Lint warnings (No such file or directory) (#6581) · 8e2bae0f
  Barry Melbourne authored Aug 27, 2020
  
  8e2bae0f
- Add cilium hubble server in config (#6575) · e6dae03a
  Arthur Outhenin-Chalandre authored Aug 27, 2020
```
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
```
  e6dae03a
- Improve metallb template for bgp peers (#6574) · 2f2ed116
  Arthur Outhenin-Chalandre authored Aug 27, 2020
```
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
```
  2f2ed116
- update the ovn4nfv-k8s-plugin image version to v1.1.0 (#6531) · e91c6a7b
  Kuralamudhan Ramakrishnan authored Aug 26, 2020
```
Signed-off-by: Kuralamudhan Ramakrishnan <kuralamudhan.ramakrishnan@intel.com>
```
  e91c6a7b
Aug 26, 2020
- Rollback coredns, should not have been updated before 1.19 (#6573) · 1ff95e85
  Florian Ruynat authored Aug 26, 2020
  
  1ff95e85
Aug 24, 2020
- Allow webhook authorization (#6502) · 36924b63
  Sulochan Acharya authored Aug 24, 2020
  
  36924b63
Aug 21, 2020
- Add proxy_env calculation to reset.yml (#6558) · 0c80d3d9
  Florian Ruynat authored Aug 21, 2020
  
  0c80d3d9
- Use proper openssl command to differentiate between host and ip in API certificate check (#6392) · 411510cb
  jeanfabrice authored Aug 21, 2020
```
* Use proper openssl command to differentiate between host and ip in current certificate check

* fixup! Use proper openssl command to differentiate between host and ip in current certificate check
```
  411510cb
- Add timeout to Get current version of calico cluster version, again (#6493) · 6e2b8a57
  Florian Ruynat authored Aug 21, 2020
  
  6e2b8a57
- make pre-remove node draining a failable task (#6442) · ca66a96d
  Lars authored Aug 21, 2020
```
and add configuration to allow ungraceful removal
```
  ca66a96d
- Bump Openstack cloud controller image verison to 1.18.2 (#6562) · 0c09ec5d
  Marc-Antoine authored Aug 21, 2020
  
  0c09ec5d
- #6552 Update extras_rh_repo_base_url (#6556) · a8e2110b
  *=0=1=4=* authored Aug 21, 2020
  
  a8e2110b
- Use proper pypy download url in bootstrap script (#6555) · 250541d2
  Christian Strack authored Aug 21, 2020
```
The bootstrap-os role uses a bootstrap script to provision a
python interpreter on flatcar and container os hosts. As the
pypy project switched to another hoster, the download url changed.

If applied this will use the new proper pypy download url in bootstrap script
```
  250541d2
- Update k8s hashes and set default version to 1.18.8 (#6532) · 142b9e1e
  Florian Ruynat authored Aug 21, 2020
  
  142b9e1e
- Add docs for 'setting up your first cluster' (#6544) · f2042129
  Svendegroote91 authored Aug 21, 2020
  
  f2042129
Aug 20, 2020
- Fix setting node label if kube_override_hostname is defined (#6557) · 91ae87fa
  Michal Petko authored Aug 20, 2020
  
  91ae87fa
- Add docs about CI setup (#6397) · 85646c96
  Maxime Guyot authored Aug 20, 2020
  
  85646c96
- Update coredns to 1.7.0 (#6538) · d6456d13
  tasekida authored Aug 20, 2020
  
  d6456d13
- Update weave to 2.7.0 + minor update to Cilium (#6501) · 98f74853
  Florian Ruynat authored Aug 20, 2020
  
  98f74853
- fix scale playbook (#6482) · a42d8114
  Samuel Liu authored Aug 20, 2020
  
  a42d8114
- Fix cert-manager E305 ansible-lint error (#6549) · bf6fdce3
  Barry Melbourne authored Aug 20, 2020
  
  bf6fdce3
- Edited pre-upgrade task to uncordon a node failing to drain (#6546) · fa378f09
  Bernard Landon authored Aug 20, 2020
  
  fa378f09
- Update sonobuoy dependency (#6536) · d9d11e22
  Florian Ruynat authored Aug 20, 2020
  
  d9d11e22
Aug 18, 2020
- Allow hosts with hyphen in name (#6529) · 73b26836
  Florian Ruynat authored Aug 18, 2020
  
  73b26836
- Update apiserver-audit-policy.yaml.j2 (#6526) · d8a749fd
  holmesb authored Aug 18, 2020
  
  d8a749fd
- add master_volume_type variable (#6524) · f2d2d080
  rptaylor authored Aug 18, 2020
  
  f2d2d080
- Remove unused variable (#6522) · 78ceef6b
  Florian Ruynat authored Aug 18, 2020
  
  78ceef6b
- Add new cilium options for native routing (#6519) · ca8e59fa
  Arthur Outhenin-Chalandre authored Aug 18, 2020
```
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
```
  ca8e59fa
- Fixed Kubespray container-engine/docker role to populate docker.service (#6518) · b0210567
  Bernard Landon authored Aug 18, 2020
  
  b0210567
- Fix cilium_deploy_additionally with kubeadm etcd (#6514) · 33ec1329
  Arthur Outhenin-Chalandre authored Aug 18, 2020
```
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
```
  33ec1329
- improve Cilium metrics support (#6513) · bedb411d
  Arthur Outhenin-Chalandre authored Aug 18, 2020
```
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
```
  bedb411d
Aug 13, 2020
- tlsminversion and tlsciphersuites kubelet (#6490) · ef3e9880
  Erwan Miran authored Aug 13, 2020
  
  ef3e9880
Aug 06, 2020

Minor Ambassador docs updates (#6503) · 49158dbe
Alvaro authored Aug 06, 2020
```
Signed-off-by: Alvaro Saurin <alvaro.saurin@gmail.com>
```
49158dbe

Fix cilium strict kube proxy replacement in HA (#6473) · 35682b52

Arthur Outhenin-Chalandre authored Aug 06, 2020



* Update the cilium svc proxy test to HA mode

Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>

* Fix cilium strict kube-proxy in HA

Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>

* Add a single global endpoint variable

Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>

* Add cilium docs about kube-proxy replacement

Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>

* Fix issues in docs

Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>

35682b52