set default containerd_version to v1.7.15 and add checksums (#11083)

* set default containerd_version to v1.7.15 and add checksums for v1.7.14 and v1.7.15

* update containerd version in README.md

roles/kubespray-defaults/defaults/main/download.yml

@@ -80,7 +80,7 @@ runc_version: v1.1.12
 kata_containers_version: 3.1.3
 youki_version: 0.1.0
 gvisor_version: 20240305
-containerd_version: 1.7.13
+containerd_version: 1.7.15
 cri_dockerd_version: 0.3.11
 
 # this is relevant when container_manager == 'docker'
@@ -415,7 +415,7 @@ downloads:
     tag: "{{ netcheck_server_image_tag }}"
     sha256: "{{ netcheck_server_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   netcheck_agent:
     enabled: "{{ deploy_netchecker }}"
@@ -424,7 +424,7 @@ downloads:
     tag: "{{ netcheck_agent_image_tag }}"
     sha256: "{{ netcheck_agent_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   etcd:
     container: "{{ etcd_deployment_type != 'host' }}"
@@ -442,7 +442,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - etcd
+      - etcd
 
   cni:
     enabled: true
@@ -455,7 +455,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kubeadm:
     enabled: true
@@ -468,7 +468,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kubelet:
     enabled: true
@@ -481,7 +481,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kubectl:
     enabled: true
@@ -494,7 +494,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   crictl:
     file: true
@@ -507,7 +507,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   crio:
     file: true
@@ -520,7 +520,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cri_dockerd:
     file: true
@@ -531,11 +531,11 @@ downloads:
     url: "{{ cri_dockerd_download_url }}"
     unarchive: true
     unarchive_extra_opts:
-    - --strip=1
+      - --strip=1
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   crun:
     file: true
@@ -548,7 +548,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   youki:
     file: true
@@ -561,7 +561,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   runc:
     file: true
@@ -574,7 +574,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kata_containers:
     enabled: "{{ kata_containers_enabled }}"
@@ -587,7 +587,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   containerd:
     enabled: "{{ container_manager == 'containerd' }}"
@@ -600,7 +600,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   gvisor_runsc:
     enabled: "{{ gvisor_enabled }}"
@@ -613,7 +613,7 @@ downloads:
     owner: "root"
     mode: 755
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   gvisor_containerd_shim:
     enabled: "{{ gvisor_enabled }}"
@@ -626,7 +626,7 @@ downloads:
     owner: "root"
     mode: 755
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   nerdctl:
     file: true
@@ -639,7 +639,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   skopeo:
     file: true
@@ -652,7 +652,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   cilium:
     enabled: "{{ kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool }}"
@@ -661,7 +661,7 @@ downloads:
     tag: "{{ cilium_image_tag }}"
     sha256: "{{ cilium_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cilium_operator:
     enabled: "{{ kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool }}"
@@ -670,7 +670,7 @@ downloads:
     tag: "{{ cilium_operator_image_tag }}"
     sha256: "{{ cilium_operator_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cilium_hubble_relay:
     enabled: "{{ cilium_enable_hubble }}"
@@ -679,7 +679,7 @@ downloads:
     tag: "{{ cilium_hubble_relay_image_tag }}"
     sha256: "{{ cilium_hubble_relay_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cilium_hubble_certgen:
     enabled: "{{ cilium_enable_hubble }}"
@@ -688,7 +688,7 @@ downloads:
     tag: "{{ cilium_hubble_certgen_image_tag }}"
     sha256: "{{ cilium_hubble_certgen_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cilium_hubble_ui:
     enabled: "{{ cilium_enable_hubble }}"
@@ -697,7 +697,7 @@ downloads:
     tag: "{{ cilium_hubble_ui_image_tag }}"
     sha256: "{{ cilium_hubble_ui_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cilium_hubble_ui_backend:
     enabled: "{{ cilium_enable_hubble }}"
@@ -706,7 +706,7 @@ downloads:
     tag: "{{ cilium_hubble_ui_backend_image_tag }}"
     sha256: "{{ cilium_hubble_ui_backend_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cilium_hubble_envoy:
     enabled: "{{ cilium_enable_hubble }}"
@@ -715,7 +715,7 @@ downloads:
     tag: "{{ cilium_hubble_envoy_image_tag }}"
     sha256: "{{ cilium_hubble_envoy_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   ciliumcli:
     enabled: "{{ kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool }}"
@@ -728,7 +728,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   multus:
     enabled: "{{ kube_network_plugin_multus }}"
@@ -737,7 +737,7 @@ downloads:
     tag: "{{ multus_image_tag }}"
     sha256: "{{ multus_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   flannel:
     enabled: "{{ kube_network_plugin == 'flannel' }}"
@@ -746,7 +746,7 @@ downloads:
     tag: "{{ flannel_image_tag }}"
     sha256: "{{ flannel_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   flannel_init:
     enabled: "{{ kube_network_plugin == 'flannel' }}"
@@ -755,7 +755,7 @@ downloads:
     tag: "{{ flannel_init_image_tag }}"
     sha256: "{{ flannel_init_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calicoctl:
     enabled: "{{ kube_network_plugin == 'calico' }}"
@@ -768,7 +768,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_node:
     enabled: "{{ kube_network_plugin == 'calico' }}"
@@ -777,7 +777,7 @@ downloads:
     tag: "{{ calico_node_image_tag }}"
     sha256: "{{ calico_node_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_cni:
     enabled: "{{ kube_network_plugin == 'calico' }}"
@@ -786,7 +786,7 @@ downloads:
     tag: "{{ calico_cni_image_tag }}"
     sha256: "{{ calico_cni_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_flexvol:
     enabled: "{{ kube_network_plugin == 'calico' }}"
@@ -795,7 +795,7 @@ downloads:
     tag: "{{ calico_flexvol_image_tag }}"
     sha256: "{{ calico_flexvol_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_policy:
     enabled: "{{ enable_network_policy and kube_network_plugin in ['calico'] }}"
@@ -804,7 +804,7 @@ downloads:
     tag: "{{ calico_policy_image_tag }}"
     sha256: "{{ calico_policy_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_typha:
     enabled: "{{ typha_enabled }}"
@@ -813,7 +813,7 @@ downloads:
     tag: "{{ calico_typha_image_tag }}"
     sha256: "{{ calico_typha_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_apiserver:
     enabled: "{{ calico_apiserver_enabled }}"
@@ -822,7 +822,7 @@ downloads:
     tag: "{{ calico_apiserver_image_tag }}"
     sha256: "{{ calico_apiserver_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_crds:
     file: true
@@ -833,13 +833,13 @@ downloads:
     url: "{{ calico_crds_download_url }}"
     unarchive: true
     unarchive_extra_opts:
-    - "{{ '--strip=6' if (calico_version is version('v3.22.3', '<')) else '--strip=3' }}"
-    - "--wildcards"
-    - "{{ '*/_includes/charts/calico/crds/kdd/' if (calico_version is version('v3.22.3', '<')) else '*/libcalico-go/config/crd/' }}"
+      - "{{ '--strip=6' if (calico_version is version('v3.22.3', '<')) else '--strip=3' }}"
+      - "--wildcards"
+      - "{{ '*/_includes/charts/calico/crds/kdd/' if (calico_version is version('v3.22.3', '<')) else '*/libcalico-go/config/crd/' }}"
     owner: "root"
     mode: "0755"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   weave_kube:
     enabled: "{{ kube_network_plugin == 'weave' }}"
@@ -848,7 +848,7 @@ downloads:
     tag: "{{ weave_kube_image_tag }}"
     sha256: "{{ weave_kube_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   weave_npc:
     enabled: "{{ kube_network_plugin == 'weave' }}"
@@ -857,7 +857,7 @@ downloads:
     tag: "{{ weave_npc_image_tag }}"
     sha256: "{{ weave_npc_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kube_ovn:
     enabled: "{{ kube_network_plugin == 'kube-ovn' }}"
@@ -866,7 +866,7 @@ downloads:
     tag: "{{ kube_ovn_container_image_tag }}"
     sha256: "{{ kube_ovn_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kube_router:
     enabled: "{{ kube_network_plugin == 'kube-router' }}"
@@ -875,7 +875,7 @@ downloads:
     tag: "{{ kube_router_image_tag }}"
     sha256: "{{ kube_router_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   pod_infra:
     enabled: true
@@ -884,7 +884,7 @@ downloads:
     tag: "{{ pod_infra_image_tag }}"
     sha256: "{{ pod_infra_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kube-vip:
     enabled: "{{ kube_vip_enabled }}"
@@ -893,7 +893,7 @@ downloads:
     tag: "{{ kube_vip_image_tag }}"
     sha256: "{{ kube_vip_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   nginx:
     enabled: "{{ loadbalancer_apiserver_localhost and loadbalancer_apiserver_type == 'nginx' }}"
@@ -902,7 +902,7 @@ downloads:
     tag: "{{ nginx_image_tag }}"
     sha256: "{{ nginx_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   haproxy:
     enabled: "{{ loadbalancer_apiserver_localhost and loadbalancer_apiserver_type == 'haproxy' }}"
@@ -911,7 +911,7 @@ downloads:
     tag: "{{ haproxy_image_tag }}"
     sha256: "{{ haproxy_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   coredns:
     enabled: "{{ dns_mode in ['coredns', 'coredns_dual'] }}"
@@ -920,7 +920,7 @@ downloads:
     tag: "{{ coredns_image_tag }}"
     sha256: "{{ coredns_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   nodelocaldns:
     enabled: "{{ enable_nodelocaldns }}"
@@ -929,7 +929,7 @@ downloads:
     tag: "{{ nodelocaldns_image_tag }}"
     sha256: "{{ nodelocaldns_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   dnsautoscaler:
     enabled: "{{ dns_mode in ['coredns', 'coredns_dual'] }}"
@@ -938,7 +938,7 @@ downloads:
     tag: "{{ dnsautoscaler_image_tag }}"
     sha256: "{{ dnsautoscaler_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   helm:
     enabled: "{{ helm_enabled }}"
@@ -951,7 +951,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   krew:
     enabled: "{{ krew_enabled }}"
@@ -964,7 +964,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   registry:
     enabled: "{{ registry_enabled }}"
@@ -973,7 +973,7 @@ downloads:
     tag: "{{ registry_image_tag }}"
     sha256: "{{ registry_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   metrics_server:
     enabled: "{{ metrics_server_enabled }}"
@@ -982,7 +982,7 @@ downloads:
     tag: "{{ metrics_server_image_tag }}"
     sha256: "{{ metrics_server_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   local_volume_provisioner:
     enabled: "{{ local_volume_provisioner_enabled }}"
@@ -991,7 +991,7 @@ downloads:
     tag: "{{ local_volume_provisioner_image_tag }}"
     sha256: "{{ local_volume_provisioner_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   cephfs_provisioner:
     enabled: "{{ cephfs_provisioner_enabled }}"
@@ -1000,7 +1000,7 @@ downloads:
     tag: "{{ cephfs_provisioner_image_tag }}"
     sha256: "{{ cephfs_provisioner_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   rbd_provisioner:
     enabled: "{{ rbd_provisioner_enabled }}"
@@ -1009,7 +1009,7 @@ downloads:
     tag: "{{ rbd_provisioner_image_tag }}"
     sha256: "{{ rbd_provisioner_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   local_path_provisioner:
     enabled: "{{ local_path_provisioner_enabled }}"
@@ -1018,7 +1018,7 @@ downloads:
     tag: "{{ local_path_provisioner_image_tag }}"
     sha256: "{{ local_path_provisioner_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   ingress_nginx_controller:
     enabled: "{{ ingress_nginx_enabled }}"
@@ -1027,7 +1027,7 @@ downloads:
     tag: "{{ ingress_nginx_controller_image_tag }}"
     sha256: "{{ ingress_nginx_controller_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   ingress_alb_controller:
     enabled: "{{ ingress_alb_enabled }}"
@@ -1036,7 +1036,7 @@ downloads:
     tag: "{{ alb_ingress_image_tag }}"
     sha256: "{{ ingress_alb_controller_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   cert_manager_controller:
     enabled: "{{ cert_manager_enabled }}"
@@ -1045,7 +1045,7 @@ downloads:
     tag: "{{ cert_manager_controller_image_tag }}"
     sha256: "{{ cert_manager_controller_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   cert_manager_cainjector:
     enabled: "{{ cert_manager_enabled }}"
@@ -1054,7 +1054,7 @@ downloads:
     tag: "{{ cert_manager_cainjector_image_tag }}"
     sha256: "{{ cert_manager_cainjector_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   cert_manager_webhook:
     enabled: "{{ cert_manager_enabled }}"
@@ -1063,7 +1063,7 @@ downloads:
     tag: "{{ cert_manager_webhook_image_tag }}"
     sha256: "{{ cert_manager_webhook_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   csi_attacher:
     enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
@@ -1072,7 +1072,7 @@ downloads:
     tag: "{{ csi_attacher_image_tag }}"
     sha256: "{{ csi_attacher_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   csi_provisioner:
     enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
@@ -1081,7 +1081,7 @@ downloads:
     tag: "{{ csi_provisioner_image_tag }}"
     sha256: "{{ csi_provisioner_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   csi_snapshotter:
     enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
@@ -1090,7 +1090,7 @@ downloads:
     tag: "{{ csi_snapshotter_image_tag }}"
     sha256: "{{ csi_snapshotter_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   snapshot_controller:
     enabled: "{{ csi_snapshot_controller_enabled }}"
@@ -1099,7 +1099,7 @@ downloads:
     tag: "{{ snapshot_controller_image_tag }}"
     sha256: "{{ snapshot_controller_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   csi_resizer:
     enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
@@ -1108,7 +1108,7 @@ downloads:
     tag: "{{ csi_resizer_image_tag }}"
     sha256: "{{ csi_resizer_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   csi_node_driver_registrar:
     enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
@@ -1117,7 +1117,7 @@ downloads:
     tag: "{{ csi_node_driver_registrar_image_tag }}"
     sha256: "{{ csi_node_driver_registrar_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   cinder_csi_plugin:
     enabled: "{{ cinder_csi_enabled }}"
@@ -1126,7 +1126,7 @@ downloads:
     tag: "{{ cinder_csi_plugin_image_tag }}"
     sha256: "{{ cinder_csi_plugin_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   aws_ebs_csi_plugin:
     enabled: "{{ aws_ebs_csi_enabled }}"
@@ -1135,7 +1135,7 @@ downloads:
     tag: "{{ aws_ebs_csi_plugin_image_tag }}"
     sha256: "{{ aws_ebs_csi_plugin_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   dashboard:
     enabled: "{{ dashboard_enabled }}"
@@ -1144,7 +1144,7 @@ downloads:
     tag: "{{ dashboard_image_tag }}"
     sha256: "{{ dashboard_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   dashboard_metrics_scrapper:
     enabled: "{{ dashboard_enabled }}"
@@ -1153,7 +1153,7 @@ downloads:
     tag: "{{ dashboard_metrics_scraper_tag }}"
     sha256: "{{ dashboard_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   metallb_speaker:
     enabled: "{{ metallb_speaker_enabled }}"
@@ -1162,7 +1162,7 @@ downloads:
     tag: "{{ metallb_version }}"
     sha256: "{{ metallb_speaker_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   metallb_controller:
     enabled: "{{ metallb_enabled }}"
@@ -1171,7 +1171,7 @@ downloads:
     tag: "{{ metallb_version }}"
     sha256: "{{ metallb_controller_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   yq:
     enabled: "{{ argocd_enabled }}"
@@ -1184,7 +1184,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
 download_defaults:
   container: false