12 Commits

Author SHA1 Message Date
James E. Blair
300ee42863 Revert "Revert cri-dockerd changes"
This reverts commit c4a666991207f9434a819da9bac8b3603ad3d66e.

The change was originally reverted because it broke testing on Jammy.
Jammy broke because it was attempting to install cri-o using the Bionic
method via a PPA. This is no longer valid for newer Ubuntu, and Focal
uses a different process too. We update the cri-o installation for Jammy
to match Focal and make this method the default so that new Ubuntu
releases default to modern installation methods. Bionic continues to
install from a PPA.

Additionally we bump the cri-o version from 1.15 to 1.24 to get a
version that has packages for both Focal and Jammy. This new version
requires we also install cri-o-runc separately as they don't seem to
have proper package dependencies in place between these two packages.
The crio systemd service fails to start without cri-o-runc installed.

Change-Id: Ic29576e26be094744cc1b169a3c8f0bca814f089
2022-07-28 11:57:28 -07:00
James E. Blair
c4a6669912 Revert cri-dockerd changes
This was apparently not tested on Ubuntu jammy and has broken
Nodepool testing.

https://zuul.opendev.org/t/zuul/build/9ae631c37a384b4bb63515c6c5f04a00

Revert "ensure-kubernetes: pull cri-dockerd systemd from tag"

This reverts commit ad0ea28b6a2cbc8d68ee1a05e6a1d2712102dca4.

Revert "ensure-kubernetes: install cri-dockerd; fix networking"

This reverts commit 08c922fd988e98bd93d5a6d488a98e5b76797e18.

Change-Id: Ic20b8840c478b6d81626f728b8661ef5946e12d4
2022-07-28 07:22:40 -07:00
Ian Wienand
ad0ea28b6a ensure-kubernetes: pull cri-dockerd systemd from tag
Pull from the tag, instead of master, to avoid going out of sync

Change-Id: I5d3c612b1f8daed6f54c24fd70dc449dbc83ec8a
2022-07-28 08:26:13 +10:00
Ian Wienand
08c922fd98 ensure-kubernetes: install cri-dockerd; fix networking
For ... reasons ... kubernetes deprecated docker as a container
runtime, and requires this cri-dockerd daemon to make docker cri-ish
enough to work.  Install and start it so the docker path keeps
working, although long-term I guess they're saying to move away from
this (from what I read it the "none" driver will also have problems
with cgroupsv2, which makes it's future on Jaunty look interesting).

Honestly I don't really know why the cri-o now needs the
--network-plugin flag.  Without it I get

 X Exiting due to RUNTIME_ENABLE: unknown network plugin:

which isn't described anywhere I can see.  Improvements welcome :)

Change-Id: I8ff34fa116aca14abee7e71f510bc49ffc547524
2022-07-27 10:51:33 +10:00
Mohammed Naser
65a3a8245b ensure-kubernetes: fix missing 02-crio.conf
There was some recent changes to Minikube that added a hard
dependency on that file being there which are not caught by
upstream testing since they don't test with the "none" VM
driver.

This adds the file to workaround the issue so that it can
complete the bootstrap of the cluster.

Change-Id: I3869350ae620721ea4e755e50facd0291a7772d3
2022-03-24 20:01:30 -04:00
Guillaume Chauvel
911fe88a9f Fix buildset-registry test on focal
Fix ensure-kubernetes role for focal
As focal doesn't exist for project atomic ppa [1]
Install is performed from opensuse repository only

As cri-o package 1.15 for ubuntu focal doesn't exist, update to 1.16

[1] http://ppa.launchpad.net/projectatomic/ppa/ubuntu/dists/
[2] https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/

Change-Id: I7f02b7337a5f51a86be1a2332f2305b0ae722934
2021-05-25 16:38:00 +02:00
Sorin Sbarnea
7325aca987 More E208 (22)
Change-Id: I8cbb919c39bdb099eaec076c7bcf2ea0b84a6475
2020-11-09 14:40:00 +00:00
okozachenko
e664a0215e Add addons args in ensure-kubernetes role
Minikube provides addons and we can enable specific addons by passing the --addons arg when using minikube cli

Change-Id: I8d10e3a3dde1070b5c79406285035dacb59dddc8
2020-06-02 22:49:00 +03:00
okozachenko
23e20c857e Patch CoreDNS corefile
The minikube v1.10.x is appending the systemd-resolved conf always.
So to workaround this problem, do a patch after deployment.

Change-Id: I813151761ebeb24b3d78f2a5a6c96ca6ffd81f21
2020-05-21 01:53:54 +03:00
Mohammed Naser
90d9b9b7d9 ensure-kubernetes: refactor to use ensure-package-repositories
This patch refactors ensure-kubernetes to use the new generic role
to allow it to be cross-platform in the future.

Change-Id: Ic90c8973431823814c7e6b122f4ef25a67d64c2f
2020-05-01 15:49:30 +02:00
Albin Vass
d0e2016592 Add loop var policy to ansible-lint
This adds a custom ansible-lint rule at .rules/ZuulJobsNamespaceLoopVar.py
that enforces the loop var policy described at:
https://zuul-ci.org/docs/zuul-jobs/policy.html#ansible-loops-in-roles

It also updates existing roles to follow the policy.

Change-Id: I92b2ff56a1c2702542fc07b316f1809087a4c92f
2020-04-29 17:20:59 +02:00
vass
fcf3202ba4 Rename install-kubernetes to ensure-kubernetes for consistency
The old role will be kept and include ensure-kubernetes for backwards compatability.

Change-Id: Ic0c18a833f4a07e123f8313673bd9c864d7d2919
2020-04-04 15:41:29 -04:00