Devesh Kumar
eee5b5890d
feat: Add support for cilium 1.15 and updated cilium to v1.15.4 ( #11106 )
2024-04-23 19:42:11 -07:00
Nicolas Goudry
c6fcbf6ee0
Remove access to cluster from anonymous users ( #11016 )
...
* feat: add user facing variable with default
* feat: remove rolebinding to anonymous users after init and upgrade
* feat: use file discovery for secondary control plane nodes
* feat: use file discovery for nodes
* fix: do not fail if rolebinding does not exist
* docs: add warning about kube_api_anonymous_auth
* style: improve readability of delegate_to parameter
* refactor: rename discovery kubeconfig file
* test: enable new variable in hardening and upgrade test cases
* docs: add option to config parameters
* test: multiple instances and upgrade
2024-04-02 23:54:12 -07:00
Mohamed Omar Zaian
03ac02afe4
[kubernetes] Add hashes for kubernetes 1.29.3, 1.28.8, 1.27.12 ( #11035 )
2024-03-27 12:30:27 -07:00
Kay Yan
90b0151caf
support node feature discovery ( #10861 )
...
Signed-off-by: Kay Yan <kay.yan@daocloud.io >
2024-03-05 08:36:08 -08:00
ABW
a0d2bda742
feat/add default ingress-nginx service ( #10925 )
...
feat/add default ingress-nginx service
feat/add default ingress-nginx service
feat/add default ingress-nginx service
2024-02-19 02:47:36 -08:00
Mohamed Omar Zaian
082ac10fbb
[kubernetes] Add hashes for kubernetes 1.29.2, 1.28.7, 1.27.11 ( #10919 )
2024-02-16 01:40:58 -08:00
Arthur Rahmangulov
250b80ee7c
Fixed typos in inventory/sample/group_vars/k8s_cluster ( #10911 )
2024-02-12 00:27:55 -08:00
anders-elastisys
c698790122
add nat_outgoing_ipv6 to calico defaults and docs ( #10866 )
2024-02-05 23:14:22 -08:00
Takuya Murakami
785366c2de
[kubernetes] Support kubernetes 1.29 ( #10820 )
...
* [kubernetes] Make kubernetes 1.29.1 default
* [cri-o]: support cri-o 1.29
Use "crio status" instead of "crio-status" for cri-o >=1.29.0
* Remove GAed feature gates SecCompDefault
The SecCompDefault feature gate was removed since k8s 1.29
https://github.com/kubernetes/kubernetes/pull/121246
2024-01-31 00:57:23 -08:00
Max Gautier
b4dd8b4313
Hopefully final batches of ipaddr deprecation cleanup ( #10822 )
2024-01-22 18:20:44 +01:00
yun
13e1f33898
Correct the POLY1305 cipher suites by adding the suffix _SHA256 ( #10641 )
2024-01-22 18:00:52 +01:00
Mohamed Omar Zaian
64447e745e
[kubernetes] Make kubernetes v1.28.6 default ( #10810 )
2024-01-19 09:07:27 +01:00
Mohamed Omar Zaian
aea150e5dc
[kubernetes] Make kubernetes v1.28.5 default ( #10739 )
...
* Add hashes for kubernetes 1.29.0, 1.28.5, 1.27.9, 1.26.12
2023-12-21 17:30:45 +01:00
Max Gautier
471326f458
Remove PodSecurityPolicy support and references ( #10723 )
...
This is removed from kubernetes since 1.25, time to cut some dead code.
2023-12-18 14:13:43 +01:00
Mohamed Omar Zaian
b321ca3e64
[kubernetes] Add hashes for kubernetes 1.28.4, 1.27.8, 1.26.11 ( #10624 )
2023-11-24 03:22:55 +01:00
Lukáš Kubín
f46910eac3
Add helm support for custom_cni deployment ( #10529 )
...
* Add helm support for custom_cni deployment
* Linting correction
* Ansible linting correction
* Add test packet with values
Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com >
* Add custom_cni configuration file with comments
Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com >
* Default values cleanup
Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com >
* Add details to custom_cni configuration file
Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com >
* Set correct yaml type of helm values
Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com >
* Set CNI filesystem ownership to root
Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com >
* Update cilium example parameter name
Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com >
---------
Signed-off-by: Lukáš Kubín <lukas.kubin@gmail.com >
2023-11-16 00:32:21 +01:00
Boris Barnier
870065517f
[kube-router] set version to 2.0.0 ( #10503 )
...
Signed-off-by: Boris Barnier <bozzo@users.noreply.github.com >
2023-11-02 11:19:57 +01:00
Samuel Mutel
e2b62ba154
feat: Add kube-vip in sample addons.yml ( #10522 )
2023-10-30 17:45:04 +01:00
Mateus Caruccio
5da421c178
Fix metallb example yaml ( #10545 )
...
Added missing :
2023-10-30 17:37:59 +01:00
Mohamed Omar Zaian
f5f1f9478c
[argocd] update argocd to v2.8.4 ( #10568 )
2023-10-30 12:54:26 +01:00
Mohamed Omar Zaian
1f47d5b74f
[kubernetes] Add hashes for kubernetes 1.28.3, 1.27.7, 1.26.10 ( #10541 )
2023-10-20 05:43:34 +02:00
Unai Arríen
228efcba0e
Migrate node-role.kubernetes.io/master to node-role.kubernetes.io/con… ( #10464 )
...
* Migrate node-role.kubernetes.io/master to node-role.kubernetes.io/control-plane
* Migrate node-role.kubernetes.io/master to node-role.kubernetes.io/control-plane
* Migrate node-role.kubernetes.io/master to node-role.kubernetes.io/control-plane
2023-10-17 21:39:40 +02:00
Ross Kusler
acb86c23f9
[kube-router] Add option to disable bgp-graceful-restart (10488) ( #10489 )
2023-10-07 04:52:45 +02:00
Mateus Caruccio
bea5034ddf
Update metallb example configs ( #10485 )
2023-10-07 04:52:35 +02:00
Mohamed Omar Zaian
dbdc4d4123
[kubernetes] Add hashes for kubernetes 1.28.2, 1.27.6, 1.26.9 ( #10435 )
2023-09-18 05:40:32 -07:00
Takuya Murakami
748b0b294d
[kubernetes] support 1.28.0 / 1.28.1 ( #10376 ) ( #10390 )
...
* [kubernetes] support 1.28.0/1.28.1 (#10376 )
* [kubernetes] Make 1.28.1 default (#10376 )
2023-09-11 19:42:12 -07:00
Mohamed Omar Zaian
52c1826423
[kubernetes] Make 1.27.5 default ( #10392 )
...
* Add hashes for 1.27.5 1.26.8, 1.25.13
* Address CVE-2023-3955 , CVE-2023-3676
* Make kubernetes v1.27.5 default
2023-08-24 18:51:17 -07:00
Mohamed Omar Zaian
a894a5e29b
[argocd] update argocd to v2.8.0 ( #10364 )
2023-08-16 21:38:20 -07:00
Mohamed Omar Zaian
9bc7492ff2
[kubernetes] Make 1.27.4 default ( #10359 )
2023-08-16 21:12:19 -07:00
Mohamed Omar Zaian
fe32de94b9
[kubernetes] Add hashes for kubernetes 1.27.4, 1.26.7, 1.25.12 ( #10300 )
2023-07-23 19:20:10 -07:00
Arthur Outhenin-Chalandre
5d00b851ce
project: fix var-spacing ansible rule ( #10266 )
...
* project: fix var-spacing ansible rule
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
* project: fix spacing on the beginning/end of jinja template
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
* project: fix spacing of default filter
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
* project: fix spacing between filter arguments
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
* project: fix double space at beginning/end of jinja
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
* project: fix remaining jinja[spacing] ansible-lint warning
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
---------
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
2023-07-04 20:36:54 -07:00
jeremy-thuon
0405af1107
[cilium] add custom vars for clusterrole cilium operator ( #10267 )
2023-07-03 02:20:51 -07:00
Samuel Liu
db696785d5
update local path provisioner version and remove psp ( #10054 )
...
* update local_path_provisioner_version
* remove psp and update cm
2023-06-19 11:44:21 -07:00
Mohamed Omar Zaian
ad3f84df98
[argocd] update argocd to v2.7.4 ( #10226 )
2023-06-19 07:20:22 -07:00
Mohamed Omar Zaian
658d62be16
[kubernetes] upgrade versions to address CVE-2023-2728 ( #10220 )
...
* [kubernetes] Add hashes for 1.27.3, 1.26.6, 1.25.11
* [kubernetes] make 1.26.6 default
2023-06-15 19:48:18 -07:00
Rob Tongue
f264426646
cert-manager controller args: ( #10049 )
...
- Adding in the ability to feed extra-args to cert-manager-controller.
2023-05-24 08:12:53 -07:00
Mathias Petermann
862fd2c5c4
feature(ingress_nginx) Add ingressclass for ingress_nginx ( #10091 )
...
Add option to configure class as the default class
Add option to disable wathcing for ingresses without class
Remove redundant if that always evaluates to true
Fix default value missing for ingress_nginx_default
2023-05-24 04:12:50 -07:00
Mohamed Omar Zaian
708677caf1
[argocd] update argocd to v2.7.2 ( #10086 )
2023-05-19 02:18:29 -07:00
Mohamed Omar Zaian
d5cdae1f16
[kubernetes] Add hashes for 1.26.4-5, 1.25.9-10, 1.24.13-14 ( #9983 )
2023-05-18 20:06:28 -07:00
Kenichi Omichi
7afbdb3e1e
Drop canal network_plugin ( #10100 )
...
According to the canal github[1] the repo is not maintained over 5 years.
In addition, the README says
```
Originally, we thought we might more deeply integrate the two projects
(possibly even going as far as a rebranding!). However, over time it
became clear that that wasn't really necessary to fulfil our goal of
making them work well together. Ultimately, we decided to focus on
adding features to both projects rather than doing work just to
combine them.
```
So it is difficult to support canal by Kubespray at this situation.
[1]: https://github.com/projectcalico/canal
2023-05-18 03:40:33 -07:00
Mohamed Omar Zaian
a505a4c71f
[feat] Update metrics server to v0.6.3 ( #10026 )
2023-04-26 04:10:16 -07:00
Jeroen Rijken
709ae1d244
Update MetalLB and switch to CRD notation. ( #9120 )
...
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl >
2023-04-14 01:14:41 -07:00
Mohamed Omar Zaian
dff58023d9
[argocd] update argocd to v2.6.7 ( #9953 )
2023-04-04 12:01:43 -07:00
Mathias Petermann
3450865d3f
docs(argocd): ArgoCD no longer uses the pod name as initial password
2023-03-28 09:47:45 +02:00
xiuguang.huang
4020a93d7e
delete the probe option of cilium_kube_proxy_replacement ( #9929 )
2023-03-27 08:08:28 -07:00
Mohamed Omar Zaian
7859aee735
[kubernetes] Add hashes for 1.26.3, 1.25.8, 1.24.12 ( #9900 )
2023-03-21 01:31:08 -07:00
panguicai
3a675393dc
upgrade rancher local-path-provisioner to v0.0.23 ( #9855 )
...
Signed-off-by: panguicai008 <1121906548@qq.com >
2023-03-06 16:54:17 -08:00
panguicai
e175ccdde0
the url of multus has been moved ( #9850 )
...
Signed-off-by: panguicai008 <1121906548@qq.com >
2023-03-05 18:52:57 -08:00
Arthur Outhenin-Chalandre
9e2104c7d3
node: fix default kubelet/runtime cgroups when kube_reserved is false ( #9834 )
...
* node: fix default kubelet/runtime cgroups when kube_reserved is false (default)
Commit 1c4db6132darthur.outhenin-chalandre@proton.ch >
* inventory/sample: change false for kube_reserved as its the default
Changing the commented value in sample inventory to the actual default
value.
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
---------
Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch >
2023-03-05 18:48:58 -08:00
panguicai
1555d78155
upgrade argocd to v2.6.3 ( #9848 )
...
Signed-off-by: panguicai008 <1121906548@qq.com >
2023-03-03 06:44:58 -08:00
