gstykalin/kube-forge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update to latest 2.26.0 kubespray version and add dns zones settings to coredns

Browse Source
This commit is contained in:
George Stykalin
2024-12-14 21:56:19 +03:00
parent be9c8a28fd
commit 4294f52703
368 changed files with 37761 additions and 2942 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
kubespray/project/roles/kubernetes-apps/ansible/defaults/main.yml
View File

@@ -16,8 +16,6 @@ coredns_ordinal_suffix: ""
coredns_deployment_nodeselector: "kubernetes.io/os: linux"
coredns_default_zone_cache_block: |
cache 30
coredns_host_network: false
coredns_port: 53
coredns_pod_disruption_budget: false
# value for coredns pdb
@@ -96,6 +94,11 @@ netchecker_server_user: 1000
netchecker_agent_group: 1000
netchecker_server_group: 1000
# Log levels
netchecker_agent_log_level: 5
netchecker_server_log_level: 5
netchecker_etcd_log_level: info
# Dashboard
dashboard_replicas: 1

4
kubespray/project/roles/kubernetes-apps/ansible/tasks/coredns.yml
View File

@@ -3,7 +3,7 @@
template:
src: "{{ item.file }}.j2"
dest: "{{ kube_config_dir }}/{{ item.file }}"
mode: 0644
mode: "0644"
loop:
- { name: coredns, file: coredns-clusterrole.yml, type: clusterrole }
- { name: coredns, file: coredns-clusterrolebinding.yml, type: clusterrolebinding }
@@ -31,7 +31,7 @@
template:
src: "{{ item.src }}.j2"
dest: "{{ kube_config_dir }}/{{ item.file }}"
mode: 0644
mode: "0644"
with_items:
- { name: coredns, src: coredns-deployment.yml, file: coredns-deployment-secondary.yml, type: deployment }
- { name: coredns, src: coredns-svc.yml, file: coredns-svc-secondary.yml, type: svc }

2
kubespray/project/roles/kubernetes-apps/ansible/tasks/dashboard.yml
View File

@@ -3,7 +3,7 @@
template:
src: "{{ item.file }}.j2"
dest: "{{ kube_config_dir }}/{{ item.file }}"
mode: 0644
mode: "0644"
with_items:
- { file: dashboard.yml, type: deploy, name: kubernetes-dashboard }
register: manifests

2
kubespray/project/roles/kubernetes-apps/ansible/tasks/etcd_metrics.yml
View File

@@ -3,7 +3,7 @@
template:
src: "{{ item.file }}.j2"
dest: "{{ kube_config_dir }}/{{ item.file }}"
mode: 0644
mode: "0644"
with_items:
- { file: etcd_metrics-endpoints.yml, type: endpoints, name: etcd-metrics }
- { file: etcd_metrics-service.yml, type: service, name: etcd-metrics }

2
kubespray/project/roles/kubernetes-apps/ansible/tasks/main.yml
View File

@@ -2,7 +2,7 @@
- name: Kubernetes Apps | Wait for kube-apiserver
uri:
url: "{{ kube_apiserver_endpoint }}/healthz"
validate_certs: no
validate_certs: false
client_cert: "{{ kube_apiserver_client_cert }}"
client_key: "{{ kube_apiserver_client_key }}"
register: result

2
kubespray/project/roles/kubernetes-apps/ansible/tasks/netchecker.yml
View File

@@ -29,7 +29,7 @@
template:
src: "{{ item.file }}.j2"
dest: "{{ kube_config_dir }}/{{ item.file }}"
mode: 0644
mode: "0644"
with_items: "{{ netchecker_templates }}"
register: manifests
when:

4
kubespray/project/roles/kubernetes-apps/ansible/tasks/nodelocaldns.yml
View File

@@ -20,7 +20,7 @@
template:
src: "{{ item.file }}.j2"
dest: "{{ kube_config_dir }}/{{ item.file }}"
mode: 0644
mode: "0644"
with_items:
- { name: nodelocaldns, file: nodelocaldns-config.yml, type: configmap }
- { name: nodelocaldns, file: nodelocaldns-sa.yml, type: sa }
@@ -51,7 +51,7 @@
template:
src: "{{ item.file }}.j2"
dest: "{{ kube_config_dir }}/{{ item.file }}"
mode: 0644
mode: "0644"
with_items:
- { name: nodelocaldns, file: nodelocaldns-second-daemonset.yml, type: daemonset }
register: nodelocaldns_second_manifests

2
kubespray/project/roles/kubernetes-apps/ansible/templates/coredns-config.yml.j2
View File

@@ -34,7 +34,7 @@ data:
}
{% endfor %}
{% endif %}
.:{{ coredns_port }} {
.:53 {
{% if coredns_additional_configs is defined %}
{{ coredns_additional_configs | indent(width=8, first=False) }}
{% endif %}

5
kubespray/project/roles/kubernetes-apps/ansible/templates/coredns-deployment.yml.j2
View File

@@ -24,7 +24,6 @@ spec:
annotations:
createdby: 'kubespray'
spec:
hostNetwork: {{ coredns_host_network | default(false) }}
securityContext:
seccompProfile:
type: RuntimeDefault
@@ -76,10 +75,10 @@ spec:
- name: config-volume
mountPath: /etc/coredns
ports:
- containerPort: {{ coredns_port }}
- containerPort: 53
name: dns
protocol: UDP
- containerPort: {{ coredns_port }}
- containerPort: 53
name: dns-tcp
protocol: TCP
- containerPort: 9153

2
kubespray/project/roles/kubernetes-apps/ansible/templates/coredns-svc.yml.j2
View File

@@ -20,11 +20,9 @@ spec:
- name: dns
port: 53
protocol: UDP
targetPort: "dns"
- name: dns-tcp
port: 53
protocol: TCP
targetPort: "dns-tcp"
- name: metrics
port: 9153
protocol: TCP

6
kubespray/project/roles/kubernetes-apps/ansible/templates/dashboard.yml.j2
View File

@@ -247,7 +247,7 @@ spec:
k8s-app: kubernetes-dashboard
---
# ------------------- Metrics Scrapper Service Account ------------------- #
# ------------------- Metrics Scraper Service Account ------------------- #
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
@@ -263,7 +263,7 @@ rules:
---
# ------------------- Metrics Scrapper Service ------------------- #
# ------------------- Metrics Scraper Service ------------------- #
kind: Service
apiVersion: v1
metadata:
@@ -280,7 +280,7 @@ spec:
---
# ------------------- Metrics Scrapper Deployment ------------------- #
# ------------------- Metrics Scraper Deployment ------------------- #
kind: Deployment
apiVersion: apps/v1
metadata:

2
kubespray/project/roles/kubernetes-apps/ansible/templates/netchecker-agent-ds.yml.j2
View File

@@ -35,7 +35,7 @@ spec:
fieldRef:
fieldPath: spec.nodeName
args:
- "-v=5"
- "-v={{ netchecker_agent_log_level }}"
- "-alsologtostderr=true"
- "-serverendpoint=netchecker-service:8081"
- "-reportinterval={{ agent_report_interval }}"

2
kubespray/project/roles/kubernetes-apps/ansible/templates/netchecker-agent-hostnet-ds.yml.j2
View File

@@ -37,7 +37,7 @@ spec:
fieldRef:
fieldPath: spec.nodeName
args:
- "-v=5"
- "-v={{ netchecker_agent_log_level }}"
- "-alsologtostderr=true"
- "-serverendpoint=netchecker-service:8081"
- "-reportinterval={{ agent_report_interval }}"

5
kubespray/project/roles/kubernetes-apps/ansible/templates/netchecker-server-deployment.yml.j2
View File

@@ -43,7 +43,7 @@ spec:
ports:
- containerPort: 8081
args:
- -v=5
- -v={{ netchecker_server_log_level }}
- -logtostderr
- -kubeproxyinit=false
- -endpoint=0.0.0.0:8081
@@ -51,6 +51,9 @@ spec:
- name: etcd
image: "{{ etcd_image_repo }}:{{ netcheck_etcd_image_tag }}"
imagePullPolicy: {{ k8s_image_pull_policy }}
env:
- name: ETCD_LOG_LEVEL
value: "{{ netchecker_etcd_log_level }}"
command:
- etcd
- --listen-client-urls=http://127.0.0.1:2379

2
kubespray/project/roles/kubernetes-apps/ansible/templates/nodelocaldns-daemonset.yml.j2
View File

@@ -20,7 +20,7 @@ spec:
spec:
nodeSelector:
{{ nodelocaldns_ds_nodeselector }}
priorityClassName: system-cluster-critical
priorityClassName: system-node-critical
serviceAccountName: nodelocaldns
hostNetwork: true
dnsPolicy: Default # Don't use cluster DNS.