Kay Yan a254f5ea68 network_plugin/cilium: fail fast when Gateway API CRDs are incompatible (#13223) ...

Cilium < 1.20 unconditionally registers a field indexer for TLSRoute
v1alpha2 when the Gateway API controller is enabled, but Gateway API
>= 1.5.0 ships TLSRoute v1alpha2 with served=false in the standard
channel. The result is cilium-operator CrashLoopBackOff with:

  no matches for kind "TLSRoute" in version "gateway.networking.k8s.io/v1alpha2"

The fix landed in Cilium 1.20 only and will not be backported.

Add a preflight assert that triggers only when all of the following
hold: cilium_gateway_api_enabled, gateway_api_enabled, cilium_version
< 1.20.0, gateway_api_version >= 1.5.0, and gateway_api_channel ==
"standard". Users hit by this combo get a clear error and two
workarounds (pin gateway_api_version to 1.4.1, or switch
gateway_api_channel to "experimental") instead of debugging a crash
loop after the fact.

Signed-off-by: Kay Yan <kay.yan@daocloud.io>

2026-04-30 11:43:26 +05:30

..

adduser

…

bastion-ssh-config

…

bootstrap_os

…

bootstrap-os/tasks

…

container-engine

…

download

…

dynamic_groups/tasks

…

etcd

…

etcd_defaults

…

etcdctl_etcdutl

…

helm-apps

…

kubernetes

…

kubernetes-apps

…

kubespray_defaults

…

kubespray-defaults/tasks

…

network_facts

…

network_plugin

network_plugin/cilium: fail fast when Gateway API CRDs are incompatible (#13223)

2026-04-30 11:43:26 +05:30

recover_control_plane

…

remove_node/pre_remove

…

remove-node

…

reset

…

system_packages

…

upgrade

…

validate_inventory

…

win_nodes/kubernetes_patch

…