- Aug 18, 2023
-
-
Louis Tu authored
Signed-off-by:tu1h <lihai.tu@daocloud.io>
-
- Aug 10, 2023
-
-
Arthur Outhenin-Chalandre authored
Signed-off-by:Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- Jul 26, 2023
-
-
Arthur Outhenin-Chalandre authored
* project: fix ansible-lint name Signed-off-by:
-
- Jul 25, 2023
-
-
Kay Yan authored
-
- Jul 24, 2023
-
-
satandyh authored
Benchmark item number 4.1.9
-
- Jul 05, 2023
-
-
Arthur Outhenin-Chalandre authored
* project: fix var-spacing ansible rule Signed-off-by:
-
- Jun 26, 2023
-
-
Arthur Outhenin-Chalandre authored
* project: update all dependencies including ansible Upgrade to ansible 7.x and ansible-core 2.14.x. There seems to be issue with ansible 8/ansible-core 2.15 so we remain on those versions for now. It's quite a big bump already anyway. Signed-off-by:
-
- Jun 12, 2023
-
-
ERIK authored
Signed-off-by:bo.jiang <bo.jiang@daocloud.io>
-
- Jun 08, 2023
-
-
Pat Riehecky authored
Signed-off-by:Pat Riehecky <riehecky@fnal.gov>
-
- Jun 02, 2023
-
-
Samuel Liu authored
-
- May 29, 2023
-
-
Victor Login authored
* Fix `The task includes an option with an undefined variable` for 1.27 * delete old flag --container-runtime Signed-off-by:
Victor Login <batazor@evrone.com> --------- Signed-off-by:
-
- May 11, 2023
-
-
Manuelraa authored
-
- Apr 23, 2023
-
-
蒋航 authored
Signed-off-by:hang.jiang <hang.jiang@daocloud.io>
-
- Mar 28, 2023
-
-
Kay Yan authored
-
- Mar 22, 2023
-
-
Kay Yan authored
-
- Mar 06, 2023
-
-
Arthur Outhenin-Chalandre authored
* node: fix default kubelet/runtime cgroups when kube_reserved is false (default) Commit 1c4db613 introduced a notion of kube_reserved. This introduced a breaking change defaulting to use kube.slice for the container_manager and the kubelet as if kube_reserved was always enabled whereas it is disabled by default. This commit fixes this by bringing back system.slice whenever kube_reserved is disabled. Signed-off-by:
-
panguicai authored
Signed-off-by:panguicai008 <1121906548@qq.com>
-
- Feb 27, 2023
-
-
Jack authored
-
- Feb 20, 2023
-
-
Maxime Leroy authored
-
- Feb 13, 2023
-
-
ERIK authored
Signed-off-by:
-
- Feb 06, 2023
-
-
Bas authored
-
- Jan 31, 2023
-
-
蒋航 authored
Signed-off-by:
-
- Jan 24, 2023
-
-
- Jan 23, 2023
-
-
Mohamed Zaian authored
-
- Jan 03, 2023
-
-
mKlaris authored
-
- Dec 30, 2022
-
-
Shelming.Song authored
* optimize cgroups settings for node reserved * fix * set cgroup slice for multi container engine * set cgroup slice for crio * add reserved cgroups variables to sample files * Compatible with cgroup path for different container managers * add cgroups doc * fix markdown
-
- Oct 27, 2022
-
-
蒋航 authored
Signed-off-by:
-
- Oct 24, 2022
-
-
Wouter Goedhart authored
variable Fix wrong referenced variable on bgp_peers Fix bgp_peeras field to be a string Set default value for bgp_peeras
-
- Oct 19, 2022
-
-
Cristian Calin authored
* [cri-o] use cri-o from upstream instead of kubic/OBS * [cri-o] add proper molecule coverage * [skopeo] download skopeo from upstream build * [cri-o] clean up legacy deployments * disable cri-o per-distribution variables
-
- Oct 06, 2022
-
-
William Turner authored
-
- Aug 30, 2022
-
-
Alessio Greggi authored
* feat: add kubelet systemd service hardening option * refactor: move variable name to kubelet_secure_addresses Co-authored-by:
Cristian Calin <6627509+cristicalin@users.noreply.github.com> * docs: add diagram about kubelet_secure_addresses variable Co-authored-by:
-
Kay Yan authored
* fix-kube-vip-strict-arp * fix-kube-vip-strict-arp
-
- Aug 23, 2022
-
-
Shelming.Song authored
-
- Jul 31, 2022
-
-
Samuel Liu authored
-
- Jul 19, 2022
-
-
Alessio Greggi authored
* docs(hardening): add SeccompDefault admission plugin to kubelet feature gates * fix(kubelet-config): enable config through kubelet_feature_gates * feat(kubelet): add kubelet_seccomp_default variable
-
- Jul 05, 2022
-
-
h9-HSFRQDH authored
-
- Jun 15, 2022
-
-
Calin Cristian Andrei authored
-
Calin Cristian Andrei authored
* extra admission controls now don't have a version in their file names eventratelimit.v1beta2.yaml.j2 -> eventratelimit.yaml.j2 * cri_socket variable includes the unix:// prefix to be conformat with upstream
-
Calin Cristian Andrei authored
-
Calin Cristian Andrei authored
[docker] use cri-dockerd instead of dockershim for any kubernetes version deployed with docker as the container_manager
-
