kubespray

mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2025-12-14 13:54:37 +03:00

Files

Chris Ricker 47140083dc Update Calico apiserver RBAC for Kubernetes 1.33+ (#12654 )

Add missing RBAC permissions for Calico apiserver to function correctly
with Kubernetes 1.33+

Changes:

1. Add K8s 1.33 ValidatingAdmissionPolicy resources to calico-webhook-reader
   - validatingadmissionpolicies
   - validatingadmissionpolicybindings

Kubernetes 1.33 introduced ValidatingAdmissionPolicy resources (KEP-3488)
that require explicit RBAC permissions. Without these changes, Calico
apiserver on k8s 1.33+ will not work and needless errors are logged

2025-11-14 00:23:38 -08:00

calico

Update Calico apiserver RBAC for Kubernetes 1.33+ (#12654 )

2025-11-14 00:23:38 -08:00

calico_defaults/defaults

Remove unused Calico CNI pool variables (#12369 )

2025-07-02 18:43:24 -07:00

cilium

Fix cilium_policy_audit_mode variable (#12569 )

2025-10-07 09:15:02 -07:00

cni

Do not use ‘yes/no’ for boolean values (#11472 )