- Apr 29, 2021
-
-
Cristian Calin authored
* rename ansible groups to use _ instead of - k8s-cluster -> k8s_cluster k8s-node -> k8s_node calico-rr -> calico_rr no-floating -> no_floating Note: kube-node,k8s-cluster groups in upgrade CI need clean-up after v2.16 is tagged * ensure old groups are mapped to the new ones
-
- Apr 07, 2021
-
-
Samuel Liu authored
-
- Mar 24, 2021
-
-
Kenichi Omichi authored
This replaces kube-master with kube_control_plane because of [1]: The Kubernetes project is moving away from wording that is considered offensive. A new working group WG Naming was created to track this work, and the word "master" was declared as offensive. A proposal was formalized for replacing the word "master" with "control plane". This means it should be removed from source code, documentation, and user-facing configuration from Kubernetes and its sub-projects. NOTE: The reason why this changes it to kube_control_plane not kube-control-plane is for valid group names on ansible. [1]: https://github.com/kubernetes/enhancements/blob/master/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md#motivation
-
- Mar 15, 2021
-
-
Etienne Champetier authored
"The error was: 'proxy_disable_env' is undefined\n\nThe error appears to be in '<censored>scale.yml': line 72, column 7" Fixes 067db686 Signed-off-by:
Etienne Champetier <e.champetier@ateme.com>
-
- Mar 09, 2021
-
-
Sergey Mikhaltsov authored
-
- Feb 23, 2021
-
-
Etienne Champetier authored
Since a790935d all proxy users should be properly configured Now when you have *_PROXY vars in your environment it can leads to failure if NO_PROXY is not correct, or to persistent configuration changes as seen with kubeadm in 1c5391dd Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere at the play level, and override at the task level when needed Signed-off-by:
Etienne Champetier <e.champetier@ateme.com>
-
- Feb 16, 2021
-
-
Etienne Champetier authored
* Move proxy_env to kubespray-defaults/defaults There is no reasons to use set_facts here Signed-off-by:
Etienne Champetier <e.champetier@ateme.com> * Ensure kubeadm doesn't use proxy *_proxy variables might be present in the environment (/etc/environment, bash profile, ...) When this is the case we end up with those proxy configuration in /etc/kubernetes/manifests/kube-*.yaml manifests We cannot unset env variables, but kubeadm is nice enough to ignore empty vars https://github.com/kubernetes/kubernetes/blob/93d288e2a47fa6d497b50d37c8b3a04e91da4228/cmd/kubeadm/app/util/env.go#L27 Signed-off-by:
Etienne Champetier <e.champetier@ateme.com>
-
- Jan 11, 2021
-
-
Etienne Champetier authored
no_proxy is a pain to get right, and having proxy variables present causes issues (k8s components get proxy configuration after upgrade, see #7100) It's better to only configure what require proxy: - the runtime (containerd/docker/crio) - the package manager + apt_key - the download tasks Tested with the following clusters - 4 CentOS 8 nodes - 1 Ubuntu 20.04 node Signed-off-by:
Etienne Champetier <champetier.etienne@gmail.com>
-
- Oct 21, 2020
-
-
Hans Feldt authored
'ansible.vars.hostvars.HostVarsVars object' has no attribute 'kubeadm_upload_cert' kubeadm_upload_cert will never be found as a hostvar for the first master since the task is executed for a worker. Fix by executing the upload task for the first master and register the needed key. After that, workers can read hostvars for the master Var kubeadm_etcd_refresh_cert_key removed since it no longer has any use.
-
- Aug 20, 2020
-
-
Samuel Liu authored
-
- Jun 25, 2020
-
-
Hans Feldt authored
tags are not inherited for include_role therefore the change from include to import Co-authored-by:
Hans Feldt <hafe@users.noreply.github.com>
-
- Apr 24, 2020
-
-
Sergey authored
* add strategy mitogen_linear when installed mitogen * add small docs Rename playbook file The raw action executes as a regular Mitogen connection, which requires Python on the target, so add strategy: linear to bootstrap-os role playbook. * add mitogen to CI test fix typo * enable mitogen test on deploy-part1 tests change version from master to release download tar.gz archive * run all CI tests with mitogen * disable mitogen with upgrade CI tests * enable mitogen on CI tests via env vars * disable mitogen on CI test by default, enable on some different OS * disable mitogen CI test on centos8 (get error /usr/bin/python: No such file or directory)
-
- Apr 23, 2020
-
-
Sergey authored
* bump minimal ansible version to 2.8.0 * check ansible version in separate playbook
-
- Apr 18, 2020
-
-
Lovro Seder authored
* Gather just the necessary facts * Move fact gathering to separate playbook.
-
- Apr 08, 2020
-
-
Alexander Kross authored
* Fix chicken and egg problem with proxy_env not defined on the first envinronment usage. * Disable fact gathering for the first proxy_env evaluation. * Move proxy_env var set up from the role defaults to the root playbooks as fact.
-
- Mar 05, 2020
-
-
Kubernetes Prow Robot authored
* download file * download containers * fix push image to nodes * pull if none image on host * fix * improve docker image tag checks. do not pull already cached images * rebase fix merge conflict * add support download_run_once when upgrade and scale cluster add some test with download_run_once * set default values to temp flag for every download cycle * add save,load abilty for containerd and crio when download_run_once=true * return redefine image save/load command to set_docker_image_facts.yml * move set command to set_container_facts * ctr in containerd_bin_dir * fix order of ctr image export arguments * temporary disable download_run_once for containerd and crio due https://github.com/containerd/containerd/issues/4075 * remove unused files * fix strict yaml linter warning and errors * refactor logical conditions to pull and cache container images * remove comment due lint check * document role * remove image_load_on_localhost, because cached images are always loaded to docker on remote sites * remove XXX from debug output
-
- Jan 20, 2020
-
-
jlacoline authored
-
- Dec 09, 2019
-
-
Sergey authored
* set varios node label via kubectl label command, not kubelet options * remove node_labels from KUBELET_ARGS
-
- Sep 22, 2019
-
-
Sergey authored
- do not run etcd role when etcd_kubeadm_enabled == true - remove default value 'systemd' for cgroup driver in containerd role. this value override autodetect in kubelet_cgroup_driver_detected from docker info
-
- Jun 27, 2019
-
-
Matthew Mosesohn authored
Ansible will gather facts on the preinstall/download role automatically at the start of that play.
-
- May 03, 2019
-
-
MarkusTeufelberger authored
-
- Apr 24, 2019
-
-
MarkusTeufelberger authored
* Add README to bootstrap-os role * Rework bootstrap-os once more * Document workarounds for bugs/deficiencies in Ansible modules * Unify and document role variables * Remove installation of additional packages and repositories * Merge Ubuntu and Debian tasks * Remove pipelining setting from default playbooks * Fix OpenSUSE not running its required tasks
-
- Apr 17, 2019
-
-
Maxime Guyot authored
-
- Apr 09, 2019
-
- Apr 01, 2019
-
-
MarkusTeufelberger authored
* Lint everything in the repository with yamllint * yamllint fixes: syntax fixes only * yamllint fixes: move comments to play names * yamllint fixes: indent comments in .gitlab-ci.yml file
-
- Feb 26, 2019
-
-
Andrey Zhelnin authored
-
- Jan 03, 2019
-
-
Chad Swenson authored
- Creates and defaults an ansible variable for every configuration option in the `kubeproxy.config.k8s.io/v1alpha1` type spec - Fixes vars that were orphaned by removing non-kubeadm - Fixes previously harcoded kubeadm values - Introduces a `main` directory for role default files per component (requires ansible 2.6.0+) - Split out just `kube-proxy.yml` in this first effort - Removes the kube-proxy server field patch task We should continue to pull out other components from `main.yml` into their own defaults files as I did here for `defaults/main/kube-proxy.yml`. I hope for and will need others to join me in this refactoring across the project until each component config template has a matching role defaults file, with shared defaults in `kubespray-defaults` or `downloads`
-
- Dec 06, 2018
-
-
Andreas Krüger authored
* Remove non-kubeadm deployment * More cleanup * More cleanup * More cleanup * More cleanup * Fix gitlab * Try stop gce first before absent to make the delete process work * More cleanup * Fix bug with checking if kubeadm has already run * Fix bug with checking if kubeadm has already run * More fixes * Fix test * fix * Fix gitlab checkout untill kubespray 2.8 is on quay * Fixed * Add upgrade path from non-kubeadm to kubeadm. Revert ssl path * Readd secret checking * Do gitlab checks from v2.7.0 test upgrade path to 2.8.0 * fix typo * Fix CI jobs to kubeadm again. Fix broken hyperkube path * Fix gitlab * Fix rotate tokens * More fixes * More fixes * Fix tokens
-
- Nov 26, 2018
-
-
okamototk authored
This feature was removed by PR#3061. But change flag manage_docker to deploy_container_engine.
-
Rong Zhang authored
-
- Nov 14, 2018
-
-
Mateus Caruccio authored
Use case is when kubespray runs from unprivileged user without sudo permission.
-
- Nov 10, 2018
-
-
Antoine Legrand authored
* Remove Vault * Remove reference to 'kargo' in the doc * change check order
-
Bily Zhang authored
Signed-off-by:
mooncake <xcoder@tenxcloud.com>
-
- Oct 31, 2018
-
-
Wong Hoi Sing Edison authored
Only exclude buggy Ansible v2.7.0 (https://github.com/ansible/ansible/issues/46600#issuecomment-433863628) Fixup #3589
-
- Oct 26, 2018
-
-
Antoine Legrand authored
-
- Oct 11, 2018
-
-
Antoine Legrand authored
-
- Oct 10, 2018
-
-
Antoine Legrand authored
* Fix bootstrap_os/ubuntu idempotency * Update bastion role * move container_engine in sub-roles * requires ansible 2.5 * ubuntu18 as first CI job
-
- Aug 28, 2018
-
-
Takashi Okamoto authored
-
Takashi Okamoto authored
-
- Aug 20, 2018
-
-
Mark Eisenblätter authored
-