github.com/voxpupuli/puppet-k8s commits | Ecosyste.ms: OpenCollective

set etcd cluster name in main class

- set etcd cluster name
- use etcd cluster name also in apiserver to collect only the matching e...

869160353cba78ec0149d4c26ddf46ce0ea32707 authored over 1 year ago

Merge pull request #48 from rwaffen/update_etcd_installation

update etcd installation

9a9cdfbaf3b661c4fa5d010351c34bea0d2750ab authored over 1 year ago

change command and update if clause

- use lowercase name in comment of etcd user
- invert if clause to be more intuitive

5068c2a992d8886cbab6bc09fab2a212dea03c82 authored over 1 year ago

update REFERENCE.md

8940bf62c32767c5a1eb1789c3205b85803eee63 authored over 1 year ago

make etcd uid/gid optional

- make etcd ids optional, so that they dont clash on different linux systems

c99d044b921ecc30c37c2960e2285b88cd124fcc authored over 1 year ago

add comment that unit_file is managed by puppet

8e704ded785c0d83670abd7178ee7950dc35cf37 authored over 1 year ago

add parameter docu

8629ad6378790f8ffa970584b3936a7364cc6e9f authored over 1 year ago

update repo.pp

- replace if-else with case
- add a "and" condition to the debian container_manager repo install...

9ecb19ea82fba12ecd7a24e09a488213b0b4e409 authored over 1 year ago

update REFERENCE.md

91fd9d8dc211b4954babd2ab73bcf3093d1924f1 authored over 1 year ago

fix typo in unit file

38576b089a1c2ab6fc4038f008697db561c5f3fa authored over 1 year ago

make binary_path optional and let puppet pick upon installation type. use different requires based on installation type.

e0c698da180b75784d13b3642a90c30ee8492bc7 authored over 1 year ago

update docu and naming

- add uid, gid parameter docu
- rename workdir_path to storage_path, which is more fitting.

62e220b7adf72db1c991ab8d2f1cf6dfe006ae37 authored over 1 year ago

update etcd installation

- make user dynamic
- make unit_file dynamic

32b7b7bef465604804fed7af00526c94ac789e76 authored almost 2 years ago

Merge pull request #34 from ananace/improve-first-run

Add a wait online class to improve the first-run experience

a444fdffe1754c009ed2b49c5bba8528f97abe6f authored almost 2 years ago

Merge pull request #44 from voxpupuli/modulesync

modulesync 5.5.0

aa3e28eca763a98b75c8c12f188a34439bba47cb authored almost 2 years ago

modulesync 5.5.0

5e05df48100c2780a065f9e1c6c8c25b03604b9f authored almost 2 years ago

Merge pull request #35 from ananace/improve-bootstrap-token

Improve bootstrap token handling

fbc5dbd8acc58e87e305327884a17e3a717bf51b authored almost 2 years ago

Handle file mode for kubeconfig files

f369e429cb07006b35882720e110fa5a322e5ac5 authored almost 2 years ago

Merge pull request #41 from rwaffen/fix_forgotten_user_group

fix forgotten user and group values

d5d5a21399e179f88238a59a6a5a9ef1da38e5ab authored almost 2 years ago

fix forgotten user and group values

cdf43c23961ff7bafa068fe49aa18a92ac7bc39c authored almost 2 years ago

Merge pull request #40 from ananace/improve-cert-gen

Fix unintentional CA recreation if missing serial

e7efb894ce8ad5bd9678ec776a7f4f07a1f50da9 authored almost 2 years ago

Fix unintentional CA recreation if missing serial

3438da0769af736ac42482789c0f9c254010717f authored almost 2 years ago

Merge pull request #39 from voxpupuli/revert-32-more_sans

Revert "Include every IP address into a cert's SAN field"

7f26557a49a16a82ebe3b35b408da5b7670421c3 authored almost 2 years ago

Merge pull request #38 from rwaffen/make_user_dynamic

make user and group dynamic

bd1260640d49d11922ec7df3e680396e56cfc194 authored almost 2 years ago

Add addn_names parameter to k8s::server::etcd

Should hopefully offer a different path to perform the same task as the
reverted changes, until ...

f9aa0a2880cf9441f3c093718c9c45dd6f789c7b authored almost 2 years ago

Revert "Include every IP address into a cert's SAN field"

c4526ee87467b0df0750c01fc9c3513de74120c9 authored almost 2 years ago

updat REFERENCE.md

bf8a190d419d28dd75e8d95a23f27273609523c9 authored almost 2 years ago

make user and group dynamic

0be747a14304312ee5d684c77b5da8aaa1dd9faa authored almost 2 years ago

Merge pull request #33 from rwaffen/update_docu

Update docu

b1c53a2db301a301275cbb0e3ec478753c4bd2fa authored almost 2 years ago

fix spelling

bc8f78eba41e81255a50d5bdb23b85293687edcf authored almost 2 years ago

Make bootstrap_token secret a Sensitive value

1fe2efdda2098f4faab8eda84a402a241fd3881b authored almost 2 years ago

Fix incorrect wait online name for kubectl_apply

decd957b4689b5b5a9931019650d4fa3f7774d8e authored almost 2 years ago

Allow missing sysctl keys

The augeas provider prefetches them before the module has a chance to
load, so use the silent pa...

1e8ad6e2c44db3b192c08a6ea6ca17f9c7e54a65 authored almost 2 years ago

Remove superfluous dash in exec name

49118e1fe606af6927403bfc167aa434b33de588 authored almost 2 years ago

update after recommendations from github

dd08033cd452df90cf77ceed48170709087d5dc5 authored almost 2 years ago

Hardcode kubeconfig path for wait-online

Puppet doesn't run with the $HOME environment variable set, so kubectl
won't check the path on i...

2aa8c651c7766e044af31fda873726e57c805019 authored almost 2 years ago

Add a pattern type for bootstrap_token id as well

e7745b9a1085b945ff23fae6c1f9bded5f4a6103 authored almost 2 years ago

Support specifying default bootstrap token secret

Also adds a proper type for handling the bootstrap token secret, to
ensure that it can be used b...

020d39ef42e700e0e8f541030c25f3cfbfd405d7 authored almost 2 years ago

Give br_netfilter a moment to load before sysctls

5d79abcca39fc621dfc727a547e762b8a18ec080 authored almost 2 years ago

Require etcd before kube-apiserver - if managed

4e61f20f7bda4c2a823b894020eee1fc4509a1d9 authored almost 2 years ago

Switch to a refreshonly exec for wait online

65cfb8c33b09f6bff4502c7966e81618708dbcd5 authored almost 2 years ago

Add a wait online class to improve first-run

By default, the first run may fail to apply some resources as the
apiserver takes a few seconds ...

459fcaeba7d3498a46584abbdb29cbae551f63cb authored almost 2 years ago

Merge pull request #30 from ananace/improve-cert-gen

Some improvements to certificate generation

fcda40c9c03084ce42fa36f655c161a2b3d3ba80 authored almost 2 years ago

Fix collectors for etcd CA/certs

652bb6b659dc9556ae64ca04ce69a996a8cd8d52 authored almost 2 years ago

Improve copying of etcd secrets for k8s use

cbe431f49234f433ea8732ecef62dffd57bafb25 authored almost 2 years ago

Fix CA spec

4a39b62decec5f4131e1c363b246b476d4b2b2b2 authored almost 2 years ago

Remove unnecessare chaining on etcd setup

23a0326bda11eeff5252664096f70569444b4c5d authored almost 2 years ago

Fix faulty indentation in k8s::server::tls::ca

eda355ff18f9e9b7ab83934ba1568a9017b60753 authored almost 2 years ago

Improve etcd cert chaining

60d1e671d1961bf48056beed1185750736467b5d authored almost 2 years ago

Always ensure CA certificates are valid

eecea850063c0b1eb811face70a773bb5d08ab89 authored almost 2 years ago

ignore autoload_format in examples

af211f3241ace9a4e500beb35100bfc555408983 authored almost 2 years ago

add cilium docu

1cda0752a47edbfbdae2317ff9115134f4744f7d authored almost 2 years ago

add example of simple bridged setup

a27730556b563ba96dad150cf61edba1a3f87496 authored almost 2 years ago

Merge pull request #32 from jay7x/more_sans

Include every IP address into a cert's SAN field

be7e0e5c9eaf3064e5a0d949d4c7839b4e13420a authored almost 2 years ago

Include every IP address into a cert's SAN field

Just localhost and default routed IPs were added to a SAN before. That
causes a problem on a ser...

71d620cda6477afdc12d253ba3e722d0063f2849 authored almost 2 years ago

Clean up path and ensure handling for TLS

f077b83d2451e21c65dccfad5101ca3c91305e14 authored almost 2 years ago

Retool ca/cert generation

Will now replace invalidate existing certificate information on
changes, and replace invalid cer...

4285c5e30af21afc5e12fd54d590ebe54f7bce57 authored almost 2 years ago

Make rubocop happier

0eae0784d2615e839f0effe4c98ddcd9c0a6bc3f authored almost 2 years ago

Fix tests

449817189a11be651af9bc85e7974a215f6753a5 authored almost 2 years ago

Improve generation of CA/TLS certs

If the user provides their own key data then the generation should
require it to be in-place bef...

c41068120aa533574d74f3b6e52ba72a37666a0e authored almost 2 years ago

Merge pull request #29 from ananace/cleanup-proxy

Improve the kube-proxy management flag

586148451ccf7cbc9f2027ce1b1d5745a48b56d8 authored almost 2 years ago

Update reference

c69f4d23d31b64243d620ca4b6df4afa5ba452ab authored almost 2 years ago

Improve the kube-proxy management flag

The component can be installed in multiple mutually exclusive manners,
so expressing this fact i...

e52c6039bfce90878a9178af164062a75ef9ef99 authored almost 2 years ago

Merge pull request #27 from ananace/fix-kube-proxy

Fix generated kube-proxy configmap

9d18200001e9a05eff7277593ddc0042a7c7ddd9 authored almost 2 years ago

Update spec fixtures for kube-proxy args changes

93134bba8ab207f62158581834dbd77ccb66a987 authored almost 2 years ago

Use kube-proxy.conf to specify the kubeconfig file

78ec840dbbc12e40526627bb90508859b71bcb1c authored almost 2 years ago

Fix generated kube-proxy configmap for dual-stack

44d13f68712f83b4cf537e6437081fd0fafc633f authored almost 2 years ago

Merge pull request #26 from ananace/split-resources

Split out managed resources into separate classes

8a121d0a6f6af53ede32de4efbee8fa616e2f94a authored almost 2 years ago

Add reason comment for kubeconfig-in-cluster

5f9bb9923311de576ec26f71445f813025f0d2c7 authored almost 2 years ago

Use the correct managed-by label for bootstrap

f338a10148bc6ed8574360a953aa1512312c57f8 authored almost 2 years ago

Pass ensure through to managed resources

5600bb3b8c3523acc0df55a75919e30ed55c09ae authored almost 2 years ago

Fix flannel /run mount

3563b53a6d4cce18320495458a6841d75fe0f4a4 authored almost 2 years ago

Fix generated flannel configuration

b3041f706d8cddf02c7b347f9848ceccc8f4e57d authored almost 2 years ago

Merge pull request #24 from rwaffen/patching

add features

daf558655725885140c6eb5ff508af3b2f475a3e authored almost 2 years ago

Make rubocop happier with the spec tests

c2d64365e8a03ce093d2d64c00589539390ac3e9 authored almost 2 years ago

Split bootstrap token into separate resource class

2765e7132b6b447b9aa2f872d653b06d6e9be57c authored almost 2 years ago

Split out flannel into its own resource class

39367c1a9302e1542d2423d19935b0f73411e3b5 authored almost 2 years ago

Split out kube-proxy to a separate resource class

06d034cbaaf992861c5539ae409b1bb9e77be870 authored almost 2 years ago

Some fixes for coredns

3b5813646c5d5ba145722a3177882cead0efaf66 authored almost 2 years ago

remove cilium from this pr

- will be added again later
- simplify pr

d881657e3a2b24522902003d20653b6695ad3718 authored almost 2 years ago

Rebuild REFERENCE.md with puppet-strings 3

a515b293d299f724ba50d5c33c26b5cc606b6368 authored almost 2 years ago

Update REFERENCE.md

241713e6d025e4b3ccabfac20a87072e72ef8fdb authored almost 2 years ago

Split out CoreDNS deployment into a separate class

Having a class structure for K8s resources would make it more obvious
where to put other Puppet-...

b98ff7ba7776b3dc0b4f72b3ec2c4e401a52dfa0 authored almost 2 years ago

Merge pull request #25 from ananace/update-cascade

Use cascade=orphan for kubectl_apply resources when told to recreate

83e54a675becfcee0bceed43fc0f2ddfb4304f86 authored almost 2 years ago

containerd config: the runtime_type is required field.

0ff43f615eab9fac8e7c0c03225ec6df9ee9610b authored almost 2 years ago

require repo before installing cri-tools as package

9f1d3fb391522fd639d37d3c6a2d7285e6d0fd74 authored almost 2 years ago

use fact() instead of $facts for if clause

dbd399b298b9ff9be20c1545f4ecf27817b6b143 authored almost 2 years ago

switch from toggle to fact for if-"resolved fix"

bfe067c1f0d694f2218dcc0bf9f6c2f45080f408 authored almost 2 years ago

do not start kublet before container runtime is installed

4b374d8b310eb8a3b9590216abd323d465945ffc authored almost 2 years ago

update patchset upon github recommandations

- simplify containerd config
- make if statement os indipendent
- remove docker support as CRI
-...

103bc65c77eca0c53a6a534d8281db09317677ed authored almost 2 years ago

Use cascade=orphan for kubectl_apply with recreate

The old cascade=false option is being removed from Kubernetes, and is
in fact deprecated on all ...

c86e5c42407eeafb4df435d13a113b8f7100e2dd authored almost 2 years ago

add features

- prepare for cilium
- add crictl debugging tool
- add containerd as cri option
- add simple bri...

beadf07850e39c4ec11de5698a14f6a689ff7efb authored almost 2 years ago

Merge pull request #21 from rwaffen/patching

Patching v3

84cea8d51b6602d1929b6e2a0b0b8f6b11fc7301 authored almost 2 years ago

fix spec tests

654b12302f0318a57fa8ffccd629a443ec843031 authored almost 2 years ago

rebuild firewall setup with better UX

157e0e75963d12fb18dc21501082b44abba7a8c1 authored almost 2 years ago

add parameter documentation

08e57dd68bfa703def0e130ab8f30137199093ad authored almost 2 years ago

update REFERENCE.md

44ba963e8352683373b7d5b448ed1a5584305a62 authored almost 2 years ago

change firewall selection

c5b2e5f88e2a8e8926e064733f2b9ecb62c298a1 authored almost 2 years ago

document ensure parameter better

4bcee55cacaf2ab8bf99e9e57ded306c60ad41ef authored almost 2 years ago

add parameters to server class

- add firewall selection
- add toggle for kubeadm
- document ensure parameter

5a58db2ec50019387b94c17b55b5e381f2f673bc authored almost 2 years ago