Chris Ricker 47140083dc Update Calico apiserver RBAC for Kubernetes 1.33+ (#12654) ...

Add missing RBAC permissions for Calico apiserver to function correctly
with Kubernetes 1.33+

Changes:

1. Add K8s 1.33 ValidatingAdmissionPolicy resources to calico-webhook-reader
   - validatingadmissionpolicies
   - validatingadmissionpolicybindings

Kubernetes 1.33 introduced ValidatingAdmissionPolicy resources (KEP-3488)
that require explicit RBAC permissions. Without these changes, Calico
apiserver on k8s 1.33+ will not work and needless errors are logged

2025-11-14 00:23:38 -08:00

..

adduser

Cleanup: Ubuntu 20.04 tests (#12301)

2025-06-19 18:54:51 -07:00

bastion-ssh-config

Cleanup: Ubuntu 20.04 tests (#12301)

2025-06-19 18:54:51 -07:00

bootstrap_os

Fix duplicate dict key warning in bootstrap_os task includes (#12488)

2025-08-26 01:32:11 -07:00

bootstrap-os/tasks

Add compat and deprecation warning for boostrap-os

2025-05-13 09:39:59 +02:00

container-engine

Let containerd create storage / state dir (#12681)

2025-11-10 03:42:56 -08:00

download

fix missing directory when run with download_run_once (#12275)

2025-10-09 02:01:02 -07:00

dynamic_groups/tasks

Simplify group_by logic by moving conditional to when clause (#12469)

2025-08-18 07:39:11 -07:00

etcd

Do not suppress output during cert generation (#12479)

2025-08-28 19:43:09 -07:00

etcd_defaults

Decouple etcd defaults in a separate role

2025-05-16 14:51:29 +02:00

etcdctl_etcdutl

Propagate v-less version everywhere

2025-03-05 16:18:39 +01:00

helm-apps

Fix kubelet-csr-approver deployment failes if kube_network_plugin=cni(generic) (#11704)

2024-11-16 14:54:54 +00:00

kubernetes

Get conf checksum directly for localhost CP loadbalancer (#12632)

2025-10-23 22:57:36 -07:00

kubernetes-apps

Factor kubectl_apply_stdin into separate "vars only" role

2025-11-07 09:34:57 +01:00

kubespray_defaults

Update cinder-csi image tag for offline install (#12627)

2025-11-08 21:38:52 -08:00

kubespray-defaults/tasks

Add compat and deprecation warning for kubespray-defaults

2025-05-12 09:46:07 +02:00

network_facts

Make main_ip cacheable in facts (#12243)

2025-06-05 01:58:38 -07:00

network_plugin

Update Calico apiserver RBAC for Kubernetes 1.33+ (#12654)

2025-11-14 00:23:38 -08:00

recover_control_plane

refact ip stack (#11953)

2025-02-11 03:37:58 -08:00

remove_node/pre_remove

Rename remove-node/pre-remove (no hypens for role in collection)

2025-05-12 22:19:50 +02:00

remove-node

Remove etcd member by peerURLs (#12682)

2025-11-10 03:52:56 -08:00

reset

reset: set v4/v6 default policies to ACCEPT and drop user chains (#12552)

2025-09-24 20:14:15 -07:00

system_packages

Fix(system_packages): Avoid version comparison error on non-numeric versions (#12512)

2025-08-28 00:19:10 -07:00

upgrade

show node name to be more clear which node is going to be upgraded (#12399)

2025-10-09 00:19:07 -07:00

validate_inventory

Remove tag 'master' (#12228)

2025-05-22 01:20:36 -07:00

win_nodes/kubernetes_patch

Do not use ‘yes/no’ for boolean values (#11472)

2024-08-28 06:30:56 +01:00