mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2025-12-14 05:45:06 +03:00
07cc981971
* Move front-proxy-client certs back to kube mount We want the same CA for all k8s certs * Refactor vault to use a third party module The module adds idempotency and reduces some of the repetitive logic in the vault role Requires ansible-modules-hashivault on ansible node and hvac on the vault hosts themselves Add upgrade test scenario Remove bootstrap-os tags from tasks * fix upgrade issues * improve unseal logic * specify ca and fix etcd check * Fix initialization check bump machine size
Kubespray cloud deployment tests
Amazon Web Service
| Calico | Flannel | Weave |
------------- | ------------- | ------------- | ------------- |
Debian Jessie | |
|
|
Ubuntu Trusty |
|
|
|
RHEL 7.2 |
|
|
|
CentOS 7 |
|
|
|
Test environment variables
Common
| Variable | Description | Required | Default |
|---|---|---|---|
TEST_ID |
A unique execution ID for this test | Yes | |
KUBE_NETWORK_PLUGIN |
The network plugin (calico or flannel) | Yes | |
PRIVATE_KEY_FILE |
The path to the SSH private key file | No |
AWS Tests
| Variable | Description | Required | Default |
|---|---|---|---|
AWS_ACCESS_KEY |
The Amazon Access Key ID | Yes | |
AWS_SECRET_KEY |
The Amazon Secret Access Key | Yes | |
AWS_AMI_ID |
The AMI ID to deploy | Yes | |
AWS_KEY_PAIR_NAME |
The name of the EC2 key pair to use | Yes | |
AWS_SECURITY_GROUP |
The EC2 Security Group to use | No | default |
AWS_REGION |
The EC2 region | No | eu-central-1 |
Use private ssh key
Key
openssl pkcs12 -in gce-secure.p12 -passin pass:notasecret -nodes -nocerts | openssl rsa -out gce-secure.pem
cat gce-secure.pem |base64 -w0 > GCE_PEM_FILE`