External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-10-31 06:26:19 -02:30
Code Issues Packages Projects Releases Wiki Activity
8,937 Commits 61 Branches 91 Tags
local_provisionner_keys
Commit Graph
140 Commits
Author SHA1 Message Date
Max Gautier c482df9bc2 local_volume_provisioner: match upstream storage class syntax 
Use the upstream keys without converting them to snake case. This avoids
converting back to camel case when rendering, and aligns ourselves more
with our upstream.
 2026-09-10 16:57:30 +02:00
Max Gautier 16ad6da94e fix: ansible 2.19: etcd_events_address final evaluation list (#13498) 2026-09-10 13:40:35 +00:00
Kay Yan b7d99749b8 preinstall: generalize minimum-value semantics for managed sysctls (#13224) 
* preinstall: generalize minimum-value semantics for managed sysctls

Move the hardcoded sysctl floor map out of 0080-system-configurations.yml
into a default variable, and introduce additional_sysctl_min so users can
declare their own sysctl floors. Floor semantics only apply a managed
value when the node's current value is lower; pre-tuned images (Bottlerocket,
EKS AMIs, OpenShift RHCOS, hardened distros) and newer kernels that
already set higher values are left alone.

Default floors are aligned with prior art from the OpenShift Node Tuning
Operator (TuneD '=>' floor syntax in the openshift / openshift-node
profiles) and kops. None of the floor keys are part of the kubelet
protect-kernel-defaults validation list, so the floor mechanism cannot
interfere with kubelet startup. Keys not present on the running
kernel/distro are skipped without failing.

additional_sysctl (exact-value semantics) is unchanged for backward
compatibility.

Signed-off-by: Kay Yan <kay.yan@daocloud.io>

* preinstall: refine sysctl floor handling

Keep built-in floor values internal while preserving user overrides
through additional_sysctl_min.

Use sysctl --ignore for unknown keys and filter empty results without
masking other read errors.

Signed-off-by: Kay Yan <kay.yan@daocloud.io>

---------

Signed-off-by: Kay Yan <kay.yan@daocloud.io>
 2026-09-10 07:46:33 +00:00
ERIK 26aa4586e9 fix(flannel): make image tag prefix version-aware (#13476) 
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
 2026-09-10 07:12:34 +00:00
Max Gautier 0378060c91 fix/ansible 2.19: ssl_ca_dirs: don't rely on final evaluation (#13477) 2026-09-09 09:13:25 +00:00
Max Gautierandgithub-actions[bot] 15dab0c60c Patch versions updates (#13458) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-09-09 00:48:32 +00:00
Max Gautier ff19dbd284 fix/ansible 2.19: local vol provisioner: don't rely on final evaluation (#13481) 
- also remove mitogen workaround from local_volume_provisioner since
  creating the dirs is handled by kubernetes/preinstall instead
- correct the tag in kubernetes/preinstall as persistent_volumes isn't
  the same thing
 2026-09-08 22:46:35 +00:00
Sandaru Wijewardhana 2dd05e4841 Bump nerdctl to v2.3.5 (#13437) 
Signed-off-by: sandaruwijewardhana <sandaruwijewardhana@gmail.com>
 2026-09-08 07:44:30 +00:00
Dhakshin Raghav 1daa5c4af0 Bump Flannel version to v0.28.9 (#13436) 2026-09-03 12:32:19 +00:00
Ali Afsharzadeh 46dbdd3994 Patch versions updates (#13423) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-08-21 10:07:16 +00:00
Ali Afsharzadeh c2089ae595 Upgrade cilium from 1.20.0 to 1.20.1 (#13419) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-08-21 04:31:14 +00:00
ChillRedChilli ed99c2a4cb kata-containers: Update release artifacts to zst format. (#13389) 
- Updated download URLs to fetch the kata-static<...>.zst files from github repo.
- Added zstd package in kata-continers role.
- Updated version checksums to match the new release files.

Moved zstd dependency to roles/system_package
 2026-08-16 15:04:14 +00:00
Ali Afsharzadeh ace96af930 Upgrade cilium from 1.19.6 to 1.20.0 (#13401) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-08-06 13:26:54 +00:00
Debasish Mohanty f713813c55 fix(csi): update CSI sidecar image versions (#13395) 
* feat(csi): update CSI sidecar image versions

* docs(openstack): update sample Cinder CSI sidecar image tags

* chore: trigger CI
 2026-08-02 14:53:22 +00:00
Ali Afsharzadeh 9b092a4f49 Upgrade cilium from 1.19.5 to 1.19.6 (#13376) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-07-25 06:35:53 +00:00
Ali Afsharzadeh 8d69fb8f9a Patch versions updates (#13393) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-07-24 07:01:52 +00:00
Jeroen Rijken cbcda6ea8d Reboot only when required, add the option to clean packages. (#13327) 
* Reboot only when required, add the option to clean packages.

* Update docs to reflect only Debian based distribution can be apt
autocleaned

* Add apt cleanup to upgrade tests
 2026-07-16 16:25:26 +00:00
Ali Afsharzadeh 648e55a379 Rename cilium certgen and envoy image variables (#13260) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-07-14 14:33:17 +00:00
ChengHao Yangandgithub-actions[bot] e15b1f2778 Patch versions updates (#13368) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-07-14 03:24:19 +00:00
Nikhil Kumar 338d288653 Replace injected Ansible fact variables in kubespray-defaults role (#13340) 2026-07-08 10:08:29 +00:00
Sumit Solanki edeeb95f22 fix(cilium): sync operator-generic image for offline registries (#13270) 
The Cilium Helm chart appends a -generic suffix to the operator image
repository for non-cloud deployments. Sync the operator-generic image
to offline registries so it matches what the chart requests.

Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>
 2026-06-22 12:49:55 +00:00
Ali Afsharzadeh 4d8ecca4e7 Upgrade cilium from 1.19.4 to 1.19.5 (#13315) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-06-21 14:17:37 +00:00
ChengHao Yangandgithub-actions[bot] 3011e19ccd Patch versions updates (#13305) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-06-13 10:28:46 +05:30
ChengHao Yangandgithub-actions[bot] 8b234bf138 Patch versions updates (#13283) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-06-01 20:52:54 +05:30
Sumit Solanki e914bd78c2 Bump containerd from 2.2.3 to 2.3.0 (#13265) 2026-05-28 14:56:55 +05:30
Ali Afsharzadeh 7a62933b17 Update load balancer versions to Nginx 1.30.1 and Haproxy 3.2.19 (#13258) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-05-21 14:16:46 +05:30
Ali Afsharzadeh 17f270325d Remove deprecated apiserver-count kubeadm config option (#13262) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-05-18 16:17:51 +05:30
Ali Afsharzadeh 2ac815147b Upgrade cilium from 1.19.3 to 1.19.4 (#13256) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-05-14 18:04:28 +05:30
ChengHao Yangandgithub-actions[bot] 22ce2f799f Patch versions updates (#13254) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-05-14 13:26:27 +05:30
Takuya Murakami c1768dd21b cri-o: Bump cri-o to 1.36.0 for kubernetes 1.36 (#13244) 2026-05-11 19:15:51 +05:30
ChengHao Yangandgithub-actions[bot] 4cefd77639 Move failing youki to allow_failed and patch update (#13241) 
* Patch versions updates

* fix: failing blocker youki

https://github.com/youki-dev/youki/issues/3479

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-05-08 18:43:20 +05:30
Sumit Solanki e97333dbf8 fix: skip kube-proxy-only tasks when kube_proxy_remove is true (#13228) 
* fix: skip kube-proxy-only tasks when kube_proxy_remove is true

Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>

* refactor: use  where defaults already define the var

Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>

---------

Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>
 2026-05-07 18:31:20 +05:30
Ali Afsharzadeh 09e9c43570 Disable controller-manager allocate-node-cidrs for cilium cluster-pool ipam (#13148) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-05-06 15:26:22 +05:30
Takuya Murakami 28bdeb8583 [Kubernetes] Support Kubernetes v1.36.0 (#13219) 
- Support Kubernetes 1.36.0
- Bump coredns to 1.14.2
 2026-05-01 07:49:25 +05:30
Srishti Jaiswal dee8a18ccc bump- calico to v3.31.5 (#13196) 2026-04-21 20:21:53 +05:30
Karim Farid e939d40ed9 bump(download): Flannel v0.27.3 → v0.28.4 (#13199) 
* bump(download): Flannel v0.27.3 → v0.28.4

* bump(download): Update flannel to v0.28.4
 2026-04-21 11:59:54 +05:30
Chad Swenson f81842d0ed Implement structured authentication configuration for API server (#13035) 2026-04-21 08:25:52 +05:30
Karim Farid 19b73f4f83 Bump: CNI plugins to v1.9.1 (#13198) 
* bump(download): CNI plugins v1.8.0 → v1.9.1

* bump(download): update cni-plugins to v1.9.1
 2026-04-21 08:07:52 +05:30
Mohamed Omar Zaian 11a985dcd3 [runc] Add hashes for runc v1.4.2, and make it default (#13192) 2026-04-20 19:03:54 +05:30
Mohamed Omar Zaian 7b3486a13d [etcd] Add hashes for etcd v3.6.10, and make it default for k8s 1.35 (#13190) 2026-04-19 12:21:36 +05:30
Mohamed Omar Zaian 2e655d5e64 Upgrade metrics-server to v0.8.1 (#13189) 2026-04-17 17:53:05 +05:30
Mohamed Omar Zaian d068ae5414 [Kubernetes] Update Kubernetes to v1.35.4 (#13193) 2026-04-17 17:49:05 +05:30
Kay Yan d564e4e77d bump containerd from 2.2.1 to 2.2.3 (#13174) 
Also add checksums for newly released patch versions:
- containerd 2.2.2, 2.2.3
- containerd 2.1.7
- containerd 2.0.8
- containerd 1.7.31

Signed-off-by: Kay Yan <kay.yan@daocloud.io>
 2026-04-17 17:11:04 +05:30
Ali Afsharzadeh 9441a6b90d Upgrade cilium from 1.19.1 to 1.19.3 (#13187) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-04-17 16:09:03 +05:30
labaq 6006fe4303 feat(checksums) add Gateway API 1.5.0 1.5.1 checksums (#13138) 2026-04-03 17:01:04 +05:30
ChengHao Yang e0d4d892a3 Patch versions updates (#13143) 
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
 2026-04-03 13:29:03 +05:30
ERIK 341da0e8cb Fix kubeadm task failure when cilium_identity_allocation_mode is undefined (#13121) 
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
 2026-03-20 14:32:13 +05:30
Ali Afsharzadeh a51773e78f Upgrade cilium from 1.18.6 to 1.19.1 (#13095) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-03-14 09:39:34 +05:30
Srishti Jaiswal ba70ed35f0 Remove kubeadm config api version: v1beta3 for kubeadm config template (#13027) 2026-03-11 20:27:38 +05:30
Ali Afsharzadeh 1bafb8e882 Update load balancer versions to Nginx 1.28.2 and Haproxy 3.2.13 (#13034) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-03-11 20:17:37 +05:30