Skip to content
  1. Jan 25, 2024
  2. Jan 24, 2024
  3. Jan 22, 2024
  4. Dec 18, 2023
  5. Dec 12, 2023
    • jandres - moscardo's avatar
      New PR default node selector (#10607) · cb848fa7
      jandres - moscardo authored
      cb848fa7
    • Max Gautier's avatar
      Disable podCIDR allocation from control-plane when using calico (#10639) · 8abf49ae
      Max Gautier authored
      * Disable control plane allocating podCIDR for nodes when using calico
      
      Calico does not use the .spec.podCIDR field for its IP address
      management.
      Furthermore, it can false positives from the kube controller manager if
      kube_network_node_prefix and calico_pool_blocksize are unaligned, which
      is the case with the default shipped by kubespray.
      
      If the subnets obtained from using kube_network_node_prefix are bigger,
      this would result at some point in the control plane thinking it does
      not have subnets left for a new node, while calico will work without
      problems.
      
      Explicitely set a default value of false for calico_ipam_host_local to
      facilitate its use in templates.
      
      * Don't default to kube_network_node_prefix for calico_pool_blocksize
      
      They have different semantics: kube_network_node_prefix is intended to
      be the size of the subnet for all pods on a node, while there can be
      more than on calico block of the specified size (they are allocated on
      demand).
      
      Besides, this commit does not actually change anything, because the
      current code is buggy: we don't ever default to
      kube_network_node_prefix, since the variable is defined in the role
      defaults.
      8abf49ae
    • Max Gautier's avatar
      Revert "Update etcd-servers for apiserver (#8253)" (#10652) · 81a3f81a
      Max Gautier authored
      This reverts commit ee0f1e9d.
      
      Avoid restarting all api servers at once by changing their config.
      81a3f81a
  6. Nov 27, 2023
  7. Nov 17, 2023
    • Max Gautier's avatar
      Validate systemd unit files (#10597) · 0d4f57aa
      Max Gautier authored
      * Validate systemd unit files
      
      This ensure that we fail early if we have a bad systemd unit file
      (syntax error, using a version not available in the local version, etc)
      
      * Hack to check systemd version for service files validation
      
      factory-reset.target was introduced in system 250, same version as the
      aliasing feature we need for verifying systemd services with ansible.
      So we only actually executes the validation if that target is present.
      
      This is an horrible hack which should be reverted as soon as we drop
      support for distributions with systemd<250.
      0d4f57aa
  8. Nov 08, 2023
    • Max Gautier's avatar
      Move control plane certs renewal "spread out" into the systemd timer (#10596) · b3f6d051
      Max Gautier authored
      * Use RandomizedDelaySec to spread out control certificates renewal plane
      
      If the number of control plane node is superior to 6, using (index * 10
      minutes) will fail (03:60:00 is not a valid timestamp).
      
      Compared to just fixing the jinja expression (to use a modulo for
      example), this should avoid having two control planes certificates
      update node being triggered at the same time.
      
      * Make k8s-certs-renew.timer Persistent
      
      If the control plane happens to be offline during the scheduled
      certificates renewal (node failure or anything like that), we still want
      the renewal to happen.
      b3f6d051
    • Max Gautier's avatar
      Refactor "multi" handlers to use listen (#10542) · 8ebeb88e
      Max Gautier authored
      * containerd: refactor handlers to use 'listen'
      
      * cri-dockerd: refactor handlers to use 'listen'
      
      * cri-o: refactor handlers to use 'listen'
      
      * docker: refactor handlers to use 'listen'
      
      * etcd: refactor handlers to use 'listen'
      
      * control-plane: refactor handlers to use 'listen'
      
      * kubeadm: refactor handlers to use 'listen'
      
      * node: refactor handlers to use 'listen'
      
      * preinstall: refactor handlers to use 'listen'
      
      * calico: refactor handlers to use 'listen'
      
      * kube-router: refactor handlers to use 'listen'
      
      * macvlan: refactor handlers to use 'listen'
      8ebeb88e
  9. Oct 30, 2023
  10. Oct 17, 2023
  11. Sep 29, 2023
  12. Sep 21, 2023
  13. Aug 23, 2023
  14. Aug 10, 2023
  15. Aug 08, 2023
  16. Jul 26, 2023
  17. Jul 05, 2023
  18. Jun 30, 2023
  19. Jun 26, 2023
  20. Jun 13, 2023
  21. Jun 12, 2023
  22. Apr 18, 2023
  23. Apr 11, 2023
  24. Mar 29, 2023
  25. Mar 27, 2023
  26. Mar 10, 2023
  27. Mar 03, 2023
  28. Feb 06, 2023
  29. Dec 28, 2022
  30. Dec 27, 2022
  31. Dec 20, 2022
  32. Dec 15, 2022
  33. Dec 05, 2022
  34. Oct 26, 2022
  35. Oct 14, 2022
Loading