Qasim Mehmood
17c72367bc
kube-vip: Fix template, drop all capabilities and use kube_vip_version ( #12835 )
...
* Drop capabilities in kube-vip and use kube_vip_version
* Preserve trailing newline for kube_vip_cidr env var
2026-01-07 07:43:38 +05:30
Max Gautier
d91c7d7576
Fix ansible-lint config error ( #12842 )
2026-01-06 20:15:11 +05:30
Kubernetes Prow Robot
14b20ad2a2
Merge pull request #12832 from VannTen/cleanup/network_facts
...
network_facts: streamline set_fact and setup calls
2026-01-06 15:01:10 +05:30
Max Gautier
72cb1356ef
ci: make opentofu elastx not optionnal
2026-01-05 15:55:01 +01:00
Max Gautier
51304d57e2
network_facts: streamline set_fact and setup calls
...
- invoke setup module only once to gather ipv4 and ipv6 addresses
- eliminate remaining use of `fallback_ip` and `fallback_ip6`, allowing
us to define (with `set_fact` all the "computed" IPs variable in one
go, since there is no longer a dependency between them.
2026-01-05 15:54:56 +01:00
Goutham K
a0d7bef90e
Remove deprecated kubelet flag ( #12639 )
2026-01-05 18:56:42 +05:30
Max Gautier
a1ec88e290
openstack-cleanup: delete old keypairs as well ( #12833 )
...
* openstack-cleanup: format and logging
* openstack-cleanup: delete old keypairs as well
2026-01-05 17:42:37 +05:30
Kubernetes Prow Robot
c9ff62944e
Merge pull request #12355 from tico88612/feat/rocky-10-support
...
RockyLinux 10 support (experimental)
2026-01-05 14:32:37 +05:30
LawiK974
20ab9179af
Update kube-vip to v1.0.3 ( #12815 )
2026-01-04 22:52:37 +05:30
ChengHao Yang
5be35c811a
Docs: Rocky Linux 10 experimental description
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2026-01-03 15:40:01 +08:00
ChengHao Yang
ad522d4aab
Docs: add rockylinux-10-extra description
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2026-01-03 00:52:30 +08:00
ChengHao Yang
9c511069cc
CI: change rockylinux 10 image with kernel-module-extra
...
How to build RockyLinux 10 + `kernel-module-extra` with dib
https://github.com/kubernetes-sigs/kubespray/pull/12355#issuecomment-3705400093
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2026-01-02 23:10:41 +08:00
ChengHao Yang
ed270fcab4
Docs: update support system RHEL-based variants
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2026-01-02 23:10:41 +08:00
ChengHao Yang
0615929727
CI: add cilium test for rockylinux 10
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2026-01-02 23:10:41 +08:00
ChengHao Yang
48c25d9ebf
CI: add calico test for rockylinux 10
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2026-01-02 23:10:40 +08:00
LawiK974
0bffcacbe7
Add rbac for calico kube-controllers to access services ( #12828 )
2026-01-02 20:04:35 +05:30
R. P. Taylor
c857252225
terraform openstack: allow ICMPv6 by default ( #12805 )
2026-01-02 14:50:38 +05:30
Ali Afsharzadeh
a0f00761ac
Removed deprecated keys from containerd config ( #12820 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2026-01-02 14:26:35 +05:30
r3m8
3a3e5d6954
fix(cilium): add dynamic api server endpoint configuration ( #12624 )
2026-01-01 17:26:34 +05:30
ChengHao Yang
2d6e508084
Fix: molecule 25.12.0 test ( #12808 )
...
* Bump molecule to 25.12.0
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
* Fixed ansible role not found in molecule after 25.2.0
Signed-off-by: ChengHao Yang
<17496418+tico88612@users.noreply.github.com>
---------
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
Signed-off-by: ChengHao Yang
2025-12-31 15:12:34 +05:30
Ali Afsharzadeh
6d850a0dc5
Update pause image to 3.10.1 for Kubernetes 1.34 ( #12827 )
2025-12-31 13:48:35 +05:30
Max Gautier
6a517e165e
Fix kubeadm init retry ( #12785 )
...
We currently always fail on the kubeadm init retry, because of the
remnants of the first try.
Ignore the related errors in the retry to unblock it.
2025-12-25 15:14:31 +05:30
Qasim Mehmood
aaaf82f308
Fix cilium portmap ( #12814 )
2025-12-24 18:12:31 +05:30
Bas
e80087df93
Fix for #12435 - setting timezone under SELinux. ( #12436 )
...
Signed-off-by: Bas Meijer <bas.meijer@enexis.nl>
2025-12-24 16:40:31 +05:30
Max Gautier
b7491b957b
CI: move vagrant tests to ci-full ( #12803 )
...
Those tests are unfortunately broken, move them to ci-full
2025-12-21 19:16:32 -08:00
Max Gautier
5cf8f3eefc
Patch versions updates ( #12799 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-20 02:54:31 -08:00
Ali Afsharzadeh
1cbccf40a5
Upgrade cilium from 1.18.4 to 1.18.5 ( #12796 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2025-12-19 07:24:32 -08:00
Max Gautier
bcdd702e19
Enable hash updates on 2.28 (2 latest releases) ( #12801 )
2025-12-19 01:30:36 -08:00
Max Gautier
20693afe82
cleanup tags deprecated tags 'master' ( #12795 )
2025-12-17 03:34:08 -08:00
dependabot[bot]
1bbcfd8dd6
build(deps): bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 ( #12792 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 7.0.11 to 8.0.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](22a9089034...98357b18bf
2025-12-16 07:12:12 -08:00
dependabot[bot]
8d948f918f
build(deps): bump actions/cache from 4 to 5 ( #12791 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-16 06:00:11 -08:00
dependabot[bot]
4d8d1b8aff
build(deps): bump octokit/graphql-action from 3.0.0 to 3.0.2 ( #12790 )
...
Bumps [octokit/graphql-action](https://github.com/octokit/graphql-action ) from 3.0.0 to 3.0.2.
- [Release notes](https://github.com/octokit/graphql-action/releases )
- [Commits](abaeca7ba4...ddde8ebb24
2025-12-16 05:56:18 -08:00
r3m8
d80318301d
docs(cilium): update documentation for unprivileged agent configuration ( #12628 )
2025-12-13 19:39:44 -08:00
Ali Afsharzadeh
31cce09fbc
Check calico version in check mode ( #12586 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2025-12-10 00:39:29 -08:00
Max Gautier
9a90c9d6c8
Upgrade elastx ubuntu version ( #12776 )
...
This could fix the glibc version error we're currently having in CI.
2025-12-09 01:19:32 -08:00
dependabot[bot]
b9e1e8577f
build(deps): bump peter-evans/create-pull-request from 7.0.9 to 7.0.11 ( #12774 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 7.0.9 to 7.0.11.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](84ae59a2cd...22a9089034
2025-12-08 04:29:33 -08:00
dependabot[bot]
5d1dd83b07
build(deps): bump stefanbuck/github-issue-parser from 3.2.1 to 3.2.2 ( #12773 )
...
Bumps [stefanbuck/github-issue-parser](https://github.com/stefanbuck/github-issue-parser ) from 3.2.1 to 3.2.2.
- [Release notes](https://github.com/stefanbuck/github-issue-parser/releases )
- [Commits](2ea9b35a8c...25f1485edf
2025-12-07 21:37:27 -08:00
dependabot[bot]
b203586d6b
build(deps): bump actions/checkout from 6.0.0 to 6.0.1 ( #12772 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](1af3b93b68...8e8c483db8
2025-12-07 21:25:28 -08:00
Max Gautier
88df61357b
Use run_once for kubeadm init phase upload-certs ( #12759 )
...
Before "5ca23e3bf (Changed to use first_kube_control_plane to parse
kubeadm_certificate_key (#11875 ), 2025-01-14)", kubespray would have
problem adding new control planes when the order of the nodes in kubectl
output and the ansible inventory were not the same.
But the underlying problem is that the operation is fundamentally
something that should be done only once, and recorded for all host in
play.
Since `register` and `sef_fact` when used with `run_once` set the
variable for all the hosts, use it. Also allows to use the variable
directly instead of relying on hostvars to make the task more readable.
2025-12-07 21:07:27 -08:00
AFz
2edf176294
docs: fixed rendering issue by using generic markdown format ( #12652 )
...
* docs: fix github markdown style
* docs: use generic markdown format for quotes
2025-12-07 12:38:57 -08:00
Ali Afsharzadeh
39744146b4
Remove legacy cilium_remove_old_resources task ( #12771 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2025-12-07 07:36:55 -08:00
Max Gautier
118b2dce02
Remove checksums for old versions of various components ( #12735 )
...
We only keep 3 minor versions for most stuff
2025-12-05 06:30:59 -08:00
Ali Afsharzadeh
4c5eda9f1e
Remove legacy tasks that were scheduled for cleanup ( #12765 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2025-12-04 23:50:58 -08:00
Max Gautier
2512e0c50c
Patch versions updates ( #12762 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-04 06:44:57 -08:00
Max Gautier
633d39448e
Add a default (empty) value for supplementary_addresses_in_ssl_keys ( #12761 )
...
Most variables should have a default instead of relying on the default
filter.
(Note that the variable is misnomed, this should be certs and not keys,
but it's not worth breaking compat).
2025-12-04 05:28:57 -08:00
Max Gautier
4d87ac1032
Simplify collection of SubjectAlternativeNames for apiserver ( #12507 )
...
Remove a bunch of intermediate variables, which fixes a
"'UndefinedMarker' concatenation" error in ansible-lint v25.8.1.
2025-12-04 02:06:57 -08:00
Chris Ricker
2342d0cd57
Calico: populate kubernetes-services-endpoint for localhost LB ( #12598 )
...
When loadbalancer_apiserver_localhost is enabled, Calico falls back to the
Kubernetes service IP because the kubernetes-services-endpoint ConfigMap is
empty. CNI then fails to reach the API server even though an nginx proxy is
listening on localhost.
Update kube_apiserver_global_endpoint to always reference the localhost load
balancer (respecting the configured port) and populate the ConfigMap for both
eBPF and localhost LB modes.
2025-12-03 07:22:19 -08:00
Azhan Latif
e6a5266bad
feat: add noCompileLinks option to Docsify configuration ( #12751 )
2025-12-02 08:24:26 -08:00
dependabot[bot]
57f7c44718
build(deps): bump redhat-plumbers-in-action/advanced-issue-labeler ( #12756 )
...
Bumps [redhat-plumbers-in-action/advanced-issue-labeler](https://github.com/redhat-plumbers-in-action/advanced-issue-labeler ) from 3.2.3 to 3.2.4.
- [Release notes](https://github.com/redhat-plumbers-in-action/advanced-issue-labeler/releases )
- [Commits](e38e6809c5...b80ae64e3e
2025-12-01 06:54:26 -08:00
Seena Fallah
5789dc839c
control-plane: fix first_kube_control_plane delegation with kube_override_hostname ( #12636 )
...
* control-plane: fix first_kube_control_plane delegation with kube_override_hostname
When kube_override_hostname is configured, the node names reported by
`kubectl get nodes` differ from the inventory_hostname known to Ansible.
This causes delegation failures in subsequent tasks since Ansible cannot
resolve the hostname from kubectl output to an inventory host.
Signed-off-by: Seena Fallah <seenafallah@gmail.com>
* control-plane: remove fragile first_control_plane selection logic
Current implementation breaks with kube_override_hostname and has
multiple edge cases. Drop until proper kubectl-based node lookup
can be implemented.
Signed-off-by: Seena Fallah <seenafallah@gmail.com>
---------
Signed-off-by: Seena Fallah <seenafallah@gmail.com>
2025-11-25 08:10:38 -08:00
