- upgrade to Cilium
v1.15.8
- replace Vagrant
alvistack/ubuntu-22.04
boxes withalvistack/ubuntu-24.04
- changes in
templates/cilium_values_default.yml.j2
: - added
kubeProxyReplacement
,nodePort
andsocketLB
(this is needed because BPF masquerade requires NodePort)
- upgrade to Cilium
v1.15.3
- replace Vagrant
generic/ubuntu2204
boxes withalvistack/ubuntu-22.04
- upgrade to Cilium
v1.15.0
- refactor Molecule setup
- introduce
cilium_chart_values_directory
variable
- fix Github action
- upgrade to Cilium
v1.14.5
- upgrade to Cilium
v1.14.4
- upgrade to Cilium
v1.14.3
- rename
githubixx.harden-linux
togithubixx.harden_linux
- rename
githubixx.kubernetes-ca
togithubixx.kubernetes_ca
- upgrade to Cilium
v1.14.1
- refactor Molecule tests
- upgrade to Cilium
v1.13.4
- upgrade to Cilium
v1.13.2
- upgrade to Cilium
v1.13.0
. Please check for possible incompatible changes and deprecations. - added
force:true
in case of Helm chart upgrade to make sure the upgrade happens no matter what tasks/pre_flight_check.yml
+upgrade.yml
: fix ansible-lint issues
- BREAKING: The
action
variable was renamed tocilium_action
variable. This avoids variable collisions with other roles. - BREAKING: Allow to set Helm values for pre-flight-check in
cilium_values_user_pre_flight_check.yml.j2
orcilium_values_default_pre_flight_check.yml.j2
templates. In previous versions these values were hard-coded intasks/upgrade.yml
. This change comes together with the next one: - BREAKING: In previous versions the Helm values for pre-flight-check were:
agent: false
preflight:
enabled: true
operator:
enabled: false
This was changed to:
agent: false
preflight:
enabled: true
tolerations:
- operator: Exists
operator:
enabled: false
By default Cilium gets installed on all nodes including the control plane nodes. That's because the toleration
is set to operator: Exists
which ignores all taints set on all Kubernetes nodes. Since the "pre-flight-check" expects that the number of current Cilium pods equals the number of "pre-flight-check" pods, the "pre-flight-check" pods needs to run on all nodes where the current Cilium pods are running. The default Helm chart values disallow running "pre-flight-check" pods running on the control-plane nodes. If you've different taints you might need to adjust the "pre-flight-check" tolerations.
- upgrade to Cilium
v1.12.5
- added
.gitignore
- added
.yamlint
- upgrade to Cilium
v1.12.3
- introduce
cilium_delegate_to
variable. Previously this was hard coded to127.0.0.1
and it's also the default of this variable. - introduce
cilium_helm_show_commands
variable (see README for more information) - introduce
cilium_template_output_directory
variable (see README for more information) - introduce
Molecule
tests - don't use
shell
module anymore to executehelm
command. Nowkubernetes.core.helm*
modules are used. - use two underscores for internal variables
- ansible-lint: fix various issues like using FQDN Ansible module names now
- add
requirements.yml
- add
collections.yml
- fix YAML syntax in
tasks/main.yml
- use FQN Ansible module names for
include_tasks
- fix various ansible-lint issues
- upgrade to Cilium
v1.12.1
- add Github release action to push new release to Ansible Galaxy
- upgrade to Cilium
v1.11.6
- upgrade to Cilium
v1.11.5
- upgrade to Cilium
v1.11.4
- upgrade to Cilium
v1.11.1
- make sure Cilium Helm chart is installed before rendering (contribution by @tiagoblackcode)
- upgrade to Cilium
v1.11.0
- remove unneeded directories
- fix some linting issues
- upgrade to Cilium v1.10.4
- add
bpf.masquerade: true
option to enable native IP masquerade support in eBPF. The eBPF-based masquerading implementation is the most efficient implementation. It requires Linux kernel >= 4.19. See: Cilium Masquerading
- upgrade to Cilium v1.10.1
- upgrade to Cilium v1.9.7
- introduce variables
cilium_release_name
andcilium_repo_name
cilium_chart_name
had the wrong value. Thecilium_chart_name
was actually thecilium_release_name
. If you used the defaultcilium_chart_name: "cilium"
nothing will change for you. Otherwise you may needcilium_release_name
,cilium_repo_name
andcilium_chart_name
accordingly.
- upgrade to Cilium v1.9.1
- refactor
cilium_values_default.yml.j2
because re-scoped in Cilium v1.9 (see 1.9 Upgrade Notes and values.yaml). Esp. value names likeagent.*
,config.*
andglobal.*
have changed. - small changes in Helm values for pre-flight check
- rename extra vars
cilium_(install|upgrade|delete)=true
toaction=(install|upgrade|delete)
- upgrade to Cilium v1.8.4
- upgrade to Cilium v1.8.1
- handle Cilium pre-flight check leftover
- add new options to
cilium_values_default.yml.j2
as recommended in upgrade guide upgradeCompatibility
variable value needs to be string- increase retries for pre-flight-check from 30 to 60
- formatting / make ansible-lint happy
- initial commit