Commit Graph

110 Commits

Author SHA1 Message Date
ChengHao Yang 4cefd77639 Move failing youki to allow_failed and patch update (#13241)
* Patch versions updates

* fix: failing blocker youki

https://github.com/youki-dev/youki/issues/3479

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-08 18:43:20 +05:30
Sumit Solanki e97333dbf8 fix: skip kube-proxy-only tasks when kube_proxy_remove is true (#13228)
* fix: skip kube-proxy-only tasks when kube_proxy_remove is true

Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>

* refactor: use  where defaults already define the var

Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>

---------

Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>
2026-05-07 18:31:20 +05:30
Ali Afsharzadeh 09e9c43570 Disable controller-manager allocate-node-cidrs for cilium cluster-pool ipam (#13148)
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2026-05-06 15:26:22 +05:30
Takuya Murakami 28bdeb8583 [Kubernetes] Support Kubernetes v1.36.0 (#13219)
- Support Kubernetes 1.36.0
- Bump coredns to 1.14.2
2026-05-01 07:49:25 +05:30
Srishti Jaiswal dee8a18ccc bump- calico to v3.31.5 (#13196) 2026-04-21 20:21:53 +05:30
Karim Farid e939d40ed9 bump(download): Flannel v0.27.3 → v0.28.4 (#13199)
* bump(download): Flannel v0.27.3 → v0.28.4

* bump(download): Update flannel to v0.28.4
2026-04-21 11:59:54 +05:30
Chad Swenson f81842d0ed Implement structured authentication configuration for API server (#13035) 2026-04-21 08:25:52 +05:30
Karim Farid 19b73f4f83 Bump: CNI plugins to v1.9.1 (#13198)
* bump(download): CNI plugins v1.8.0 → v1.9.1

* bump(download): update cni-plugins to v1.9.1
2026-04-21 08:07:52 +05:30
Mohamed Omar Zaian 11a985dcd3 [runc] Add hashes for runc v1.4.2, and make it default (#13192) 2026-04-20 19:03:54 +05:30
Mohamed Omar Zaian 7b3486a13d [etcd] Add hashes for etcd v3.6.10, and make it default for k8s 1.35 (#13190) 2026-04-19 12:21:36 +05:30
Mohamed Omar Zaian 2e655d5e64 Upgrade metrics-server to v0.8.1 (#13189) 2026-04-17 17:53:05 +05:30
Mohamed Omar Zaian d068ae5414 [Kubernetes] Update Kubernetes to v1.35.4 (#13193) 2026-04-17 17:49:05 +05:30
Kay Yan d564e4e77d bump containerd from 2.2.1 to 2.2.3 (#13174)
Also add checksums for newly released patch versions:
- containerd 2.2.2, 2.2.3
- containerd 2.1.7
- containerd 2.0.8
- containerd 1.7.31

Signed-off-by: Kay Yan <kay.yan@daocloud.io>
2026-04-17 17:11:04 +05:30
Ali Afsharzadeh 9441a6b90d Upgrade cilium from 1.19.1 to 1.19.3 (#13187)
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2026-04-17 16:09:03 +05:30
labaq 6006fe4303 feat(checksums) add Gateway API 1.5.0 1.5.1 checksums (#13138) 2026-04-03 17:01:04 +05:30
ChengHao Yang e0d4d892a3 Patch versions updates (#13143)
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2026-04-03 13:29:03 +05:30
ERIK 341da0e8cb Fix kubeadm task failure when cilium_identity_allocation_mode is undefined (#13121)
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2026-03-20 14:32:13 +05:30
Ali Afsharzadeh a51773e78f Upgrade cilium from 1.18.6 to 1.19.1 (#13095)
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2026-03-14 09:39:34 +05:30
Srishti Jaiswal ba70ed35f0 Remove kubeadm config api version: v1beta3 for kubeadm config template (#13027) 2026-03-11 20:27:38 +05:30
Ali Afsharzadeh 1bafb8e882 Update load balancer versions to Nginx 1.28.2 and Haproxy 3.2.13 (#13034)
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2026-03-11 20:17:37 +05:30
Max Gautier 0c47a6891e Remove netcheker as we now use hydrophone for network tests (#13058) 2026-03-02 19:40:54 +05:30
Srishti Jaiswal 16ad53eac5 Revert "add Helm 4.x checksums and remove 3.16.* checksums (#13018)" (#13056)
This reverts commit 5e6fbc9769.
2026-02-27 16:28:56 +05:30
Srishti Jaiswal 5e6fbc9769 add Helm 4.x checksums and remove 3.16.* checksums (#13018) 2026-02-25 13:49:43 +05:30
Max Gautier 55787bd1a2 cleanup 1.32 crio checksums (Kubernetes 1.32 is no longer supported) (#13042) 2026-02-23 20:47:36 +05:30
Takuya Murakami 0bfd43499a Update etcd to 3.6 (#12634)
* [etcd] Update etcd 3.5.x to 3.6.5

- Add hashes for etcd 3.6.5
- Remove etcd v2 backup task for etcd 3.6
  The etcd 3.6 removes 'etcdctl backup' command with ETCDCTL_API=2
- Downgrade etcd to 3.5 in netchecker
  The netchecker does not work with etcd 3.6 becaust it removes v2 API support (--enable-v2).
  And netchekcer does not support v3 API.

* Fix: Change etcd config to clean up v2 store before upgrading etcd to 3.6

* Bump etcd to 3.6.8
2026-02-16 19:16:01 +05:30
Max Gautier 005bdce7f1 Patch versions updates (#12993)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-02-14 10:07:59 +05:30
labaq 169eb4201e fix gateway api checksums (#13006) 2026-02-14 08:43:59 +05:30
Srishti Jaiswal 31c33015c4 Use calico crds.yaml for KDD CRDs and drop tarball artifacts (#12985) 2026-02-12 20:40:00 +05:30
Meza 8bd5045ecf cleanup: Deprecate Ingress-Nginx from kubernetes-apps (#12767)
* [docs] Remove ingress-nginx references in docs and scripts jinja

Signed-off-by: Meza <meza-xyz@proton.me>

* Remove ingress-nginx doc and remove references in readme and sidebar

Signed-off-by: Meza <meza-xyz@proton.me>

* Delete ingress-nginx dir from kubernetes-apps

Signed-off-by: Meza <meza-xyz@proton.me>

* Delete ingress-nginx from inventory addons

Signed-off-by: Meza <meza-xyz@proton.me>

* Delete ingress_nginx_enabled from default main

Signed-off-by: Meza <meza-xyz@proton.me>

* Delete ingress_nginx from download

Signed-off-by: Meza <meza-xyz@proton.me>

* Delete ingress_nginx from dependencies

Signed-off-by: Meza <meza-xyz@proton.me>

* Remove ingress_nginx from registry task

Signed-off-by: Meza <meza-xyz@proton.me>

---------

Signed-off-by: Meza <meza-xyz@proton.me>
2026-02-10 20:22:04 +05:30
Mark Tsai 9582ab3dcd image_updates: update openstack-cloud-controller to v1.35.0 (#12972) 2026-02-10 14:58:01 +05:30
Mohamed Omar Zaian a77221d12b [kubernetes] Support Kubernetes v1.35.0 (#12812) 2026-02-10 14:54:02 +05:30
Max Gautier 57364f4085 Patch versions updates (#12973)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-02-09 21:13:25 +05:30
neo a563431c68 Remove Kubernetes Dashboard support (#12858) 2026-02-07 22:49:08 +05:30
chun 9bbef44e32 Bump: Prometheus Operator CRD to 0.88.1 (#12968)
Signed-off-by: hcc429 <dev.hcc29@gmail.com>
2026-02-06 08:36:30 +05:30
Max Gautier fff7f10a85 Patch versions updates (#12912)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-01-27 20:21:53 +05:30
Ali Afsharzadeh c3404c3685 Upgrade cilium from 1.18.5 to 1.18.6 (#12900)
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2026-01-26 20:21:50 +05:30
Kubernetes Prow Robot 62e90b3122 Merge pull request #12872 from VannTen/fix/defaut_lb_address
Use loadbalancer IP as default apiserver endpoint if no LB hostname is used
2026-01-19 21:45:50 +05:30
Max Gautier 6b5cc5bdfb Fix defaults for apiserver_loadbalancer_domain_name
Since we're not longer injecting pseudo DNS into /etc/hosts,
'lb-apiserver.kubernetes.local' (the previous default) won't resolve to
anything.

Instead, default to the loadbalancer IP if defined, or to the node local
loadbalancer if it's in use.

Make the necessary adjustements in use site to deal with ip addresses as
well as hostnames.
2026-01-19 09:43:48 +01:00
Max Gautier bc5528f585 Patch versions updates (#12854)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-01-17 23:57:09 +05:30
Ali Afsharzadeh 666a3a9500 Upgrade containerd and nerdctl from 2.1.6 to 2.2.1 (#12825) 2026-01-12 15:24:10 +05:30
Qasim Mehmood 17c72367bc kube-vip: Fix template, drop all capabilities and use kube_vip_version (#12835)
* Drop capabilities in kube-vip and use kube_vip_version

* Preserve trailing newline for kube_vip_cidr env var
2026-01-07 07:43:38 +05:30
LawiK974 20ab9179af Update kube-vip to v1.0.3 (#12815) 2026-01-04 22:52:37 +05:30
Ali Afsharzadeh 6d850a0dc5 Update pause image to 3.10.1 for Kubernetes 1.34 (#12827) 2025-12-31 13:48:35 +05:30
Max Gautier 5cf8f3eefc Patch versions updates (#12799)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-20 02:54:31 -08:00
Ali Afsharzadeh 1cbccf40a5 Upgrade cilium from 1.18.4 to 1.18.5 (#12796)
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2025-12-19 07:24:32 -08:00
Max Gautier 118b2dce02 Remove checksums for old versions of various components (#12735)
We only keep 3 minor versions for most stuff
2025-12-05 06:30:59 -08:00
Max Gautier 2512e0c50c Patch versions updates (#12762)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-04 06:44:57 -08:00
Max Gautier 4d87ac1032 Simplify collection of SubjectAlternativeNames for apiserver (#12507)
Remove a bunch of intermediate variables, which fixes a
"'UndefinedMarker' concatenation" error in ansible-lint v25.8.1.
2025-12-04 02:06:57 -08:00
Chris Ricker 2342d0cd57 Calico: populate kubernetes-services-endpoint for localhost LB (#12598)
When loadbalancer_apiserver_localhost is enabled, Calico falls back to the
Kubernetes service IP because the kubernetes-services-endpoint ConfigMap is
empty. CNI then fails to reach the API server even though an nginx proxy is
listening on localhost.

Update kube_apiserver_global_endpoint to always reference the localhost load
balancer (respecting the configured port) and populate the ConfigMap for both
eBPF and localhost LB modes.
2025-12-03 07:22:19 -08:00
Seena Fallah 5789dc839c control-plane: fix first_kube_control_plane delegation with kube_override_hostname (#12636)
* control-plane: fix first_kube_control_plane delegation with kube_override_hostname

When kube_override_hostname is configured, the node names reported by
`kubectl get nodes` differ from the inventory_hostname known to Ansible.
This causes delegation failures in subsequent tasks since Ansible cannot
resolve the hostname from kubectl output to an inventory host.

Signed-off-by: Seena Fallah <seenafallah@gmail.com>

* control-plane: remove fragile first_control_plane selection logic

Current implementation breaks with kube_override_hostname and has
multiple edge cases. Drop until proper kubectl-based node lookup
can be implemented.

Signed-off-by: Seena Fallah <seenafallah@gmail.com>

---------

Signed-off-by: Seena Fallah <seenafallah@gmail.com>
2025-11-25 08:10:38 -08:00