- Apr 30, 2024
-
-
dependabot[bot] authored
Bumps [tzdata](https://github.com/python/tzdata) from 2023.3 to 2024.1. - [Release notes](https://github.com/python/tzdata/releases) - [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md) - [Commits](https://github.com/python/tzdata/compare/2023.3...2024.1 ) --- updated-dependencies: - dependency-name: tzdata dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by:
dependabot[bot] <support@github.com> Co-authored-by:
dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
dependabot[bot] authored
Bumps [molecule-plugins[vagrant]](https://github.com/ansible-community/molecule-plugins) from 23.5.0 to 23.5.3. - [Release notes](https://github.com/ansible-community/molecule-plugins/releases) - [Commits](https://github.com/ansible-community/molecule-plugins/compare/v23.5.0...v23.5.3 ) --- updated-dependencies: - dependency-name: molecule-plugins[vagrant] dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by:
dependabot[bot] <support@github.com> Co-authored-by:
dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
dependabot[bot] authored
Bumps [tox](https://github.com/tox-dev/tox) from 4.11.3 to 4.15.0. - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](https://github.com/tox-dev/tox/compare/4.11.3...4.15.0 ) --- updated-dependencies: - dependency-name: tox dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by:
dependabot[bot] <support@github.com> Co-authored-by:
dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
- Apr 03, 2024
-
-
Nicolas Goudry authored
* feat: add user facing variable with default * feat: remove rolebinding to anonymous users after init and upgrade * feat: use file discovery for secondary control plane nodes * feat: use file discovery for nodes * fix: do not fail if rolebinding does not exist * docs: add warning about kube_api_anonymous_auth * style: improve readability of delegate_to parameter * refactor: rename discovery kubeconfig file * test: enable new variable in hardening and upgrade test cases * docs: add option to config parameters * test: multiple instances and upgrade
-
- Mar 15, 2024
-
-
Max Gautier authored
-
- Mar 14, 2024
-
-
Max Gautier authored
* upgrade ansible version Needed for with_first_found to work correctly: https://github.com/ansible/ansible/issues/70772 fixed in 2.16 * Remove unused google cloud cloud_playbook * Fix dpkg_selection on non-existing packages Needed since ansible-core>2.16, see: https://github.com/ansible/ansible/commit/f10d11bcdc54c9b7edc0111eb38c59a88e396d0a
-
- Mar 05, 2024
-
-
Kay Yan authored
Signed-off-by:
Kay Yan <kay.yan@daocloud.io>
-
- Feb 08, 2024
-
-
Max Gautier authored
-
- Jan 31, 2024
-
-
Takuya Murakami authored
* [kubernetes] Make kubernetes 1.29.1 default * [cri-o]: support cri-o 1.29 Use "crio status" instead of "crio-status" for cri-o >=1.29.0 * Remove GAed feature gates SecCompDefault The SecCompDefault feature gate was removed since k8s 1.29 https://github.com/kubernetes/kubernetes/pull/121246
-
- Jan 23, 2024
-
-
Louis Tu authored
Signed-off-by:
tu1h <lihai.tu@daocloud.io>
-
- Jan 22, 2024
-
-
yun authored
-
- Jan 16, 2024
-
-
Max Gautier authored
* ci: redefine multinode to node-etcd-client This should allow to catch several class of problem rather than just one -> from network plugin such as calico or cilium talking directly to the etcd. * Dynamically define etcd host range This has two benefits: - We don't play the etcd role twice for no reason - We have access to the whole cluster (if needed) to use things like group_by.
-
- Jan 11, 2024
-
-
Max Gautier authored
* Remove checks for docs using exact tags Instead use a more generic documentation for installing kubespray as a collection from git. * Check that we upgraded galaxy.yml to next version This is only intented to check for human error. The version in galaxy should be the next (which does not mean the same if we're on master or a release branch). * Set collection version to KUBESPRAY_NEXT_VERSION
-
- Dec 21, 2023
-
-
Kay Yan authored
-
- Dec 20, 2023
-
-
Max Gautier authored
* Add multinode ci layout * Add test case for calico using etcd datastore
-
- Dec 18, 2023
-
-
Max Gautier authored
* Rename aio to all-in-one and document it ADTM. Acronyms don't tell much. * Refactor vm_count in tests provisioning
-
- Dec 11, 2023
-
-
Max Gautier authored
* Decouple role kubespray-defaults from download Avoids doing re-importing the download role on every invocation of kubespray-defaults (and skipping everything). This has a measurable effect on playbook performance. * Update docs refering to moved download defaults
-
- Dec 06, 2023
-
-
Max Gautier authored
Followup of #10518
-
Max Gautier authored
Allow to fail early (pre-commit time) for jinja error, rather than waiting until executing the playbook and the invalid template. I could not find a simple jinja pre-commit hook in the wild.
-
- Dec 04, 2023
-
-
Max Gautier authored
Skippy is deprecated as its functionality has been incorporated into the default callback plugin.
-
- Nov 16, 2023
-
-
Lukáš Kubín authored
* Add helm support for custom_cni deployment * Linting correction * Ansible linting correction * Add test packet with values Signed-off-by:
Lukáš Kubín <lukas.kubin@gmail.com> * Add custom_cni configuration file with comments Signed-off-by:
Lukáš Kubín <lukas.kubin@gmail.com> * Default values cleanup Signed-off-by:
Lukáš Kubín <lukas.kubin@gmail.com> * Add details to custom_cni configuration file Signed-off-by:
Lukáš Kubín <lukas.kubin@gmail.com> * Set correct yaml type of helm values Signed-off-by:
Lukáš Kubín <lukas.kubin@gmail.com> * Set CNI filesystem ownership to root Signed-off-by:
Lukáš Kubín <lukas.kubin@gmail.com> * Update cilium example parameter name Signed-off-by:
Lukáš Kubín <lukas.kubin@gmail.com> --------- Signed-off-by:
Lukáš Kubín <lukas.kubin@gmail.com>
-
- Nov 15, 2023
-
-
Arthur Outhenin-Chalandre authored
* ansible: upgrade to version >= 2.15.5 Signed-off-by:
Arthur Outhenin-Chalandre <arthur@cri.epita.fr> * tests: update requirements Signed-off-by:
Arthur Outhenin-Chalandre <arthur@cri.epita.fr> * contrib/openstack: fix wrong gitignore pattern Signed-off-by:
Arthur Outhenin-Chalandre <arthur@cri.epita.fr> * tests: add missing tzdata requirement Signed-off-by:
Arthur Outhenin-Chalandre <arthur@cri.epita.fr> * tests: remove some molecules tests Those doesn't work in Ansible 2.15. Ansible can't load builtin now apparently and these tests are not worth it. Signed-off-by:
Arthur Outhenin-Chalandre <arthur@cri.epita.fr> --------- Signed-off-by:
Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
-
- Oct 13, 2023
-
-
emiran-orange authored
-
- Sep 05, 2023
-
-
Florian Ruynat authored
* Add debian12 cilium testing * Fixup recover control plane playbook
-
- Aug 16, 2023
-
-
yun authored
* Fix containerd_registries in config_path for mirrors and remove nerdctl global insecure_registry setting * Make containerd hosts.toml mode 0640 * Add containerd_registries_mirrors and keep containerd_registries to pass packet_debian11-calico-upgrade
-
- Aug 14, 2023
-
-
Luke Simmons authored
-
- Aug 10, 2023
-
-
Arthur Outhenin-Chalandre authored
Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- Aug 08, 2023
-
-
Arthur Outhenin-Chalandre authored
'/' doesn't work in kubernetes label so we replace it. Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
Arthur Outhenin-Chalandre authored
* tests: replace fedora35 with fedora37 Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: replace fedora36 with fedora38 Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * docs: update fedora version in docs Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * molecule: upgrade fedora version Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: upgrade fedora images for vagrant and kubevirt Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * vagrant: workaround to fix private network ip address in fedora Fedora stop supporting syconfig network script so we added a workaround here https://github.com/hashicorp/vagrant/issues/12762#issuecomment-1535957837 to fix it. * netowrkmanager: do not configure dns if using systemd-resolved We should not configure dns if we point to systemd-resolved. Systemd-resolved is using NetworkManager to infer the upstream DNS server so if we set NetworkManager to 127.0.0.53 it will prevent systemd-resolved to get the correct network DNS server. Thus if we are in this case we just don't set this setting. Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * image-builder: update centos7 image Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * gitlab-ci: mark fedora packet jobs as allow failure Fedora networking is still broken on Packet, let's mark it as allow failure for now. Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- Jul 26, 2023
-
-
Arthur Outhenin-Chalandre authored
* project: fix ansible-lint name Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: ignore jinja template error in names Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: capitalize ansible name Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: update notify after name capitalization Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- Jul 05, 2023
-
-
Arthur Outhenin-Chalandre authored
* project: fix var-spacing ansible rule Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix spacing on the beginning/end of jinja template Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix spacing of default filter Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix spacing between filter arguments Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix double space at beginning/end of jinja Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix remaining jinja[spacing] ansible-lint warning Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- Jun 30, 2023
-
-
Arthur Outhenin-Chalandre authored
* project: fix outdated tag and experimental Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: remove no longer useful noqa 301 Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: replace unnamed-task by name[missing] Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix daemon-reload -> daemon_reload Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- Jun 26, 2023
-
-
Arthur Outhenin-Chalandre authored
* project: update all dependencies including ansible Upgrade to ansible 7.x and ansible-core 2.14.x. There seems to be issue with ansible 8/ansible-core 2.15 so we remain on those versions for now. It's quite a big bump already anyway. Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: install aws galaxy collection Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * ansible-lint: disable various rules after ansible upgrade Temporarily disable a bunch of linting action following ansible upgrade. Those should be taken care of separately. Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve deprecated-module ansible-lint error Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve no-free-form ansible-lint error Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[meta] ansible-lint error Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[playbook] ansible-lint error Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[tasks] ansible-lint error Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve risky-file-permissions ansible-lint error Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve risky-shell-pipe ansible-lint error Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: remove deprecated warn args Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: use fqcn for non builtin tasks Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve syntax-check[missing-file] for contrib playbook Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: use arithmetic inside jinja to fix ansible 6 upgrade Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
Arthur Outhenin-Chalandre authored
* tests: cleanup stale packet namespace automatically Cancelled job on Gitlab can produce stale VMs as the delete playbook will never be executed. This commits allow removing old vms by getting all the namespace created from the same branch with an older pipeline id. Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: cleanup stale packet namespace after 2 hours This ensure that we don't have any packet namespace remaining for more than 2 hours. All the jobs complete usually within 30min-1hour so 2 hours is enough to detect a stale namespace. Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: ignore vm cleanup failure Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: use pipeline_id var instead of fetching namespace for cleanup packet vm Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- Jun 22, 2023
-
-
Victor Morales authored
-
- Jun 21, 2023
-
-
Louis Tu authored
Signed-off-by:
tu1h <lihai.tu@daocloud.io>
-
- Jun 19, 2023
-
-
Samuel Liu authored
* update local_path_provisioner_version * remove psp and update cm
-
Louis Tu authored
Signed-off-by:
tu1h <lihai.tu@daocloud.io>
-
- Jun 03, 2023
-
-
Arthur Outhenin-Chalandre authored
Molecule 5.0 require ansible-core 2.12.10. So this commit we update ansible-core from 2.12.5 to 2.12.10. We also drop supporting two ansible-core version. Also we now use the "oldest" still supported ansible-core version as both 2.11 is EOL and not supported by molecule. tests/molecule: remove linting in molecule to support molecule 5 tests/molecule: remove role name check for molecule 5 support Kubespray doesn't use ansible galaxy style naming so we have to disable that check. contrib/inventory_builder: fix tox.ini for tox4 tests/molecule: fix get_playbook in testinfra tests tests: upgrade most tests requirements Exclude ansible-lint for now, I will do that in a separate PR. tests/molecule: force kvm driver option If we don't do this it fallbacks to qemu emulated on our CI for some reasons. Signed-off-by:
Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
-
- May 30, 2023
-
-
Jeroen Rijken authored
* Update MetalLB deployment, wait for resource. Signed-off-by:
Jeroen Rijken <jeroen.rijken@xs4all.nl> * yml to yaml, add basic test for metallb Signed-off-by:
Jeroen Rijken <jeroen.rijken@xs4all.nl> --------- Signed-off-by:
Jeroen Rijken <jeroen.rijken@xs4all.nl>
-