DevAndTools/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-07-07 18:58:05 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,606 Commits 56 Branches 90 Tags
f26cc9f75bfc82f3190cdf7ddce2b67a51b6a570
Commit Graph

547 Commits

Author SHA1 Message Date
Etienne Champetier f26cc9f75b Only use stat get_checksum: yes when needed (#7270) 
By default Ansible stat module compute checksum, list extended attributes and find mime type
To find all stat invocations that really use one of those:
git grep -F stat. | grep -vE 'stat.(islnk|exists|lnk_source|writeable)'

Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
(cherry picked from commit de1d9df787)

Conflicts:
	roles/etcd/tasks/check_certs.yml
 2021-03-15 07:07:05 -07:00
Etienne Champetier fbdc2b3e20 Fix proxy usage when *_PROXY are present in environment (#7309) 
Since a790935d02 all proxy users
should be properly configured

Now when you have *_PROXY vars in your environment it can leads to failure
if NO_PROXY is not correct, or to persistent configuration changes
as seen with kubeadm in 1c5391dda7

Instead of playing constant whack-a-bug, inject empty *_PROXY vars everywhere
at the play level, and override at the task level when needed

Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
(cherry picked from commit 067db686f6)
 2021-03-02 08:33:19 -08:00
Etienne Champetier 3292887cae Fix "api is up" check (#7295) 
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
(cherry picked from commit 662a37ab4f)
 2021-03-02 08:33:19 -08:00
Etienne Champetier 40857b9859 Ensure kubeadm doesn't use proxy (#7275) 
* Move proxy_env to kubespray-defaults/defaults

There is no reasons to use set_facts here

Signed-off-by: Etienne Champetier <e.champetier@ateme.com>

* Ensure kubeadm doesn't use proxy

*_proxy variables might be present in the environment (/etc/environment, bash profile, ...)
When this is the case we end up with those proxy configuration in /etc/kubernetes/manifests/kube-*.yaml manifests

We cannot unset env variables, but kubeadm is nice enough to ignore empty vars
https://github.com/kubernetes/kubernetes/blob/93d288e2a47fa6d497b50d37c8b3a04e91da4228/cmd/kubeadm/app/util/env.go#L27

Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
(cherry picked from commit 1c5391dda7)
 2021-02-22 06:01:43 -08:00
Sergey dee0594d74 Adding other masters sequentially, not in parallel (#7166) 
(cherry picked from commit b2995e4ec4)
 2021-02-22 06:01:43 -08:00
Rick Haan 8a5139e54c Check kube-apiserver up on all masters before upgrade (#7193) (#7217) 
Only checking the kubernetes api on the first master when upgrading is not enough.
Each master needs to be checked before it's upgrade.

Signed-off-by: Rick Haan <rickhaan94@gmail.com>
 2021-01-26 07:20:35 -08:00
holmesb b0ad8ec023 Fixed issue #7112.  Created new API Server vars that replace defunct Controller Manager one (#7114) 
Signed-off-by: Brendan Holmes <5072156+holmesb@users.noreply.github.com>
 2021-01-08 07:20:53 -08:00
Dmitry Chusovitin 75f0aaf4a1 Fixed waiting for scheduler and controller manager (#6893) 2020-12-18 07:38:25 -08:00
Florian Ruynat db4e942b0d Remove hyperkube from codebase (#6965) 2020-12-02 13:50:59 -08:00
Hans Feldt 80eb1ad936 fix ansible password authentication (#6907) 
* copying ssh key no longer required, works with password auth
* use copy module instead of synchronize (which requires sshpass)
* less tasks and always changed tasks
 2020-11-30 15:12:50 -08:00
Alexander D. Kanevskiy d4204a42fd Fix crictl paths and some of docker paths (#6961) 
If crictl (and docker) binaries are deployed to the directories
that are not in standard PATH (e.g. /usr/local/bin), it is required
to specify full path to the binaries.
 2020-11-28 08:30:47 -08:00
Hans Feldt 544aa00c17 install etcdctl to host when etcd deployment type is kubeadm (#6857) 
* create a wrapper script with pki options
* supports all kubespray managed container engines

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-11-04 00:20:04 -08:00
Maciej c6e2a4ebd8 Set feature gates in kube-proxy ConfigMap (#6851) 
Command line flags aren't added to kube-proxy which results in missing
feature gates set in this component. Add appropriate setting to
ConfigMap instead.

Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
 2020-10-22 03:39:34 -07:00
Bogdan Peste 5e32655830 Added option to force apiserver and respective client certificate to … (#6403) 
* Added option to force apiserver and respective client certificate to be regenerated without necessarily needing to bump the K8S cluster version

* Removed extra blank line
 2020-10-12 06:02:48 -07:00
petruha 7a730d42dd Add bin_dir to PATH environment. (#6764) 2020-09-29 06:35:27 -07:00
Lennart Weller e67886bf9d add leader election timeouts and durations to available parameters (#6691) 2020-09-25 08:21:11 -07:00
orange-llajeanne 28839f6b71 remove duplicate audit-policy-file argument in kubeadm configuration (#6734) 2020-09-24 09:26:06 -07:00
Sergey c0fd5b2e84 remove variable 'etcd_ionice', because ionice removed from container image etcd:v3.4.x (#6735) 2020-09-23 12:34:05 -07:00
orange-llajeanne e489e70031 add new variable allowing additionnal audit webhook server options (#6726) 2020-09-21 06:44:32 -07:00
Florian Ruynat 05c9169c70 Fix example value for etcd_quota_backend_bytes (#6724) 2020-09-21 05:42:31 -07:00
Hans Feldt 6da385de9d Use "kubeadm join" to join masters to control plane (#6661) 
Remove configuration variable kubeadm_control_plane
 2020-09-17 04:34:45 -07:00
Hans Feldt 0cc5e3ef03 Remove workaround with kube_proxy_remove (#6512) 
* kube-proxy never gets deployed so need to remove it
 2020-09-17 04:30:45 -07:00
Florian Ruynat a556f8f2bf Remove deprecated (and removed in 1.19) flag and function --basic-auth-file (#6655) 2020-09-11 00:30:14 -07:00
Hans Feldt 803d52ffce kubernetes: remove unused variables (#6601) 2020-09-04 04:53:56 -07:00
Lovro Seder c1ba8e1b3a Rotate kubelet server certificate. (#6453) 
* Rotate kubelet server certificate.

* CI test kubelet server cert rotation

* Approve kubelet serving certificates in tests.
 2020-09-03 07:25:41 -07:00
Sulochan Acharya 36924b63dc Allow webhook authorization (#6502) 2020-08-24 06:29:41 -07:00
jeanfabrice 411510cbe6 Use proper openssl command to differentiate between host and ip in API certificate check (#6392) 
* Use proper openssl command to differentiate between host and ip in current certificate check

* fixup! Use proper openssl command to differentiate between host and ip in current certificate check
 2020-08-21 02:03:39 -07:00
holmesb d8a749fd27 Update apiserver-audit-policy.yaml.j2 (#6526) 2020-08-18 00:49:37 -07:00
Florian Ruynat 78ceef6b15 Remove unused variable (#6522) 2020-08-18 00:45:29 -07:00
Maxime Guyot fc23f37af7 Fix E306 in roles/kubernetes (#6500) 2020-08-05 07:56:28 -07:00
Sulochan Acharya bfe143808f Allows tls verify skip on webhook auth url (#6472) 2020-08-05 05:02:29 -07:00
Florent Monbillard 39b907cdfb Remove workaround for kubeadm upgrade (#6478) 
https://github.com/kubernetes/kubeadm/issues/1498 was closed
 2020-08-03 01:17:40 -07:00
Konstantin Lebedev 2364a84579 fix src for audit webhook config yaml (#6470) 2020-08-01 00:33:56 -07:00
fulii ce22c0e6a4 Add option to configure IPVS timeouts in kube-proxy configration manifest. (#6396) 2020-08-01 00:33:40 -07:00
Maxime Guyot e70f27dd79 Add noqa and disable .ansible-lint global exclusions (#6410) 2020-07-27 06:24:17 -07:00
Florian Ruynat b680cdd0e4 Move healthz check to secure ports (#6446) 2020-07-27 00:26:17 -07:00
Konstantin Lebedev a7ec0ed587 add audit webhook support (#6317) 
* add audit webhook support

* use generic name auditsink
 2020-07-20 01:32:54 -07:00
Florian Ruynat 5e22574402 Remove allow-release-candidate-upgrades already include in experimental-upgrades flag (#6349) 2020-07-15 00:26:37 -07:00
Hans Feldt 22996babcf allow kubeadm to upgrade etcd (#6345) 
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-07-07 12:36:00 -07:00
Florian Ruynat 2a82dff3ae Remove runtime-config from kubeadm if empty (#6311) 2020-06-30 11:22:05 -07:00
Joel Seguillon 4c1e0b188d Add .editorconfig file (#6307) 2020-06-29 12:39:59 -07:00
Erwan Miran d3ca9d1db9 kube_encryption_resources must be output as yaml (#6309) 2020-06-25 23:59:31 -07:00
Samuel Liu c29b21717d Add event-ttl duration (#6310) 
* Add event-ttl duration

* Fix wrong location
 2020-06-24 08:15:17 -07:00
Samuel Liu dba645421f ADD tls cipher suites support (#6024) 
* ADD tls cipher suites support

yaml lint

yamllint

* update test case

* update test case
 2020-06-16 04:10:05 -07:00
Hans Feldt a8740c6e13 fix a few tasks falsely reporting "changed" (#6269) 
Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>
 2020-06-16 00:24:03 -07:00
Mateus Caruccio a5af58c05a Fix apiserver port when upgrading (#6136) 2020-05-18 01:21:36 -07:00
Florent Monbillard 324106e91e Remove Kubernetes <1.16 conditionals (#6088) 2020-05-08 00:45:43 -07:00
Florian Ruynat ca45d5ffbe Fix retries keyword missing until instruction (#5989) 2020-04-21 07:20:56 -07:00
Sergey 6318bb9f96 Return the ability to start control plain from the hyperkube image (#5422) 2020-04-18 05:59:36 -07:00
spaced 157c247563 fix readonly flexvolume in fcos and coreos (#5885) 2020-04-08 01:41:43 -07:00