External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-10-29 22:03:22 -02:30
Code Issues Packages Projects Releases Wiki Activity
8,979 Commits 61 Branches 91 Tags
6e06a10613ea99293f40bb01e4717bd425dcbc19
Commit Graph
60 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ali Afsharzadeh 6e06a10613 Update youki to 0.7.0 and download the static musl build (#13564) 
Add the 0.6.0 and 0.7.0 checksums, drop 0.4.x, and move youki back
into the blocking molecule matrix. The seccomp bug behind the old
FIXME (youki#3479) is fixed in 0.7.0.

The 0.7.0 gnu tarball is linked against glibc 2.39, because cross-rs
moved its base image to Ubuntu 24.04 and youki installs cross from
git. It does not run on EL9, Amazon Linux 2023, Ubuntu 22.04 or
Debian 12, and it needs libseccomp on the host.

The musl tarball is static, has the same default features and no
runtime requirements. It is the build upstream recommends in its
setup docs.

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-09-24 12:18:20 +00:00
Ali Afsharzadeh 635d996c2c Support Kubernetes 1.37 (#13561) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-09-24 10:22:20 +00:00
Ali Afsharzadeh dcf5d8e78f Remove obsolete .ansible-lint-ignore (#13556) 
Every entry in the file is for the jinja[spacing] rule. That rule has
been in the global skip_list of .ansible-lint since #12848, so the file
has had no effect since then.

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-09-24 06:54:19 +00:00
Ali Afsharzadeh 6f6b8b4d20 Add helm_archive to update-hashes (#13536) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-09-23 18:52:15 +00:00
Ali Afsharzadeh b1b5c3689c Bump helm to v3.22.0 (#13535) 
Add the checksums for 3.22.0, 3.21.x and 3.20.x.
Remove the checksums for 3.16.x, 3.17.x and 3.18.x, so that the list
keeps the three latest minor versions.

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-09-22 03:16:11 +00:00
Ali Afsharzadeh 0fd9672b0c Remove obsolete "Flatcar Container Linux by Kinvolk" fact checks (#13528) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-09-18 10:12:42 +00:00
Ali Afsharzadeh ddb6ee50d9 Upgrade cilium from 1.20.1 to 1.20.2 (#13515) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-09-16 14:01:23 +00:00
Ali Afsharzadeh bf2727f6fd Skip component releases published without binary artifacts (#13381) 
* Skip component releases published without binary artifacts

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

* Don't use intermediate variable

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

* Fail update-hashes when a component only returns 404s

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

---------

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-09-08 10:20:32 +00:00
Ali Afsharzadeh e125a30b16 Fix k8s-certs-renew renewing on nodes without super-admin.conf (#13414) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-09-03 14:30:21 +00:00
Ali Afsharzadeh 46dbdd3994 Patch versions updates (#13423) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-08-21 10:07:16 +00:00
Ali AfsharzadehandChengHao Yang ae329ee192 Fix k8s-certs-renew renewing all certificates on every timer run (#13413) 
* Fix k8s-certs-renew renewing all certificates on every timer run

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

* Strip trailing whitespace from systemd-analyze calendar output

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

* Remove issue link

Co-authored-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>

---------

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
Co-authored-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
 2026-08-21 07:07:16 +00:00
Ali Afsharzadeh c2089ae595 Upgrade cilium from 1.20.0 to 1.20.1 (#13419) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-08-21 04:31:14 +00:00
Ali Afsharzadeh ace96af930 Upgrade cilium from 1.19.6 to 1.20.0 (#13401) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-08-06 13:26:54 +00:00
Ali Afsharzadeh 9b092a4f49 Upgrade cilium from 1.19.5 to 1.19.6 (#13376) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-07-25 06:35:53 +00:00
Ali Afsharzadeh 8d69fb8f9a Patch versions updates (#13393) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-07-24 07:01:52 +00:00
Ali Afsharzadeh 648e55a379 Rename cilium certgen and envoy image variables (#13260) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-07-14 14:33:17 +00:00
Ali Afsharzadeh 4d8ecca4e7 Upgrade cilium from 1.19.4 to 1.19.5 (#13315) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-06-21 14:17:37 +00:00
Ali Afsharzadeh 6107c6ab7c Align nginx worker_rlimit_nofile with containerd defaults (#13255) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-05-21 17:10:48 +05:30
Ali Afsharzadeh 7a62933b17 Update load balancer versions to Nginx 1.30.1 and Haproxy 3.2.19 (#13258) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-05-21 14:16:46 +05:30
Ali Afsharzadeh 17f270325d Remove deprecated apiserver-count kubeadm config option (#13262) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-05-18 16:17:51 +05:30
Ali Afsharzadeh 2ac815147b Upgrade cilium from 1.19.3 to 1.19.4 (#13256) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-05-14 18:04:28 +05:30
Ali Afsharzadeh 09e9c43570 Disable controller-manager allocate-node-cidrs for cilium cluster-pool ipam (#13148) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-05-06 15:26:22 +05:30
Ali Afsharzadeh 00a29dffc8 Add myself (guoard) as reviewer (#13197) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-04-23 17:48:47 +05:30
Ali Afsharzadeh 9441a6b90d Upgrade cilium from 1.19.1 to 1.19.3 (#13187) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-04-17 16:09:03 +05:30
Ali Afsharzadeh e979e770f2 Fix calico api server permissions (#13101) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-03-17 16:19:50 +05:30
Ali Afsharzadeh b1e3816b2f Add calico-tier-getter RBAC (#13100) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-03-17 16:19:42 +05:30
Ali Afsharzadeh a51773e78f Upgrade cilium from 1.18.6 to 1.19.1 (#13095) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-03-14 09:39:34 +05:30
Ali Afsharzadeh 1bafb8e882 Update load balancer versions to Nginx 1.28.2 and Haproxy 3.2.13 (#13034) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-03-11 20:17:37 +05:30
Ali Afsharzadeh da6539c7a0 Enable create_namespace option for custom_cni with helm (#13061) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-03-05 15:12:20 +05:30
Ali Afsharzadeh cc05dd4d14 Upgrade ansible from 10.7.0 to 11.13.0 (#12903) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-02-10 19:48:07 +05:30
Ali Afsharzadeh 69e042bd9e Remove software-properties-common from pipeline.Dockerfile (#12945) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-02-02 20:04:32 +05:30
Ali Afsharzadeh 3e42b84e94 Upgrade Dockerfile base image from Ubuntu 22.04 to 24.04 (#12935) 
* Upgrade Dockerfile base image from Ubuntu 22.04 to 24.04

* Add --break-system-packages flag to testcases_run.sh file
 2026-01-30 19:57:44 +05:30
Ali Afsharzadeh c3404c3685 Upgrade cilium from 1.18.5 to 1.18.6 (#12900) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-01-26 20:21:50 +05:30
Ali Afsharzadeh 666a3a9500 Upgrade containerd and nerdctl from 2.1.6 to 2.2.1 (#12825) 2026-01-12 15:24:10 +05:30
Ali Afsharzadeh 851abbc2e3 Disable discard_unpacked_layers for containerd >= 2.1 (#12821) 
Only set `discard_unpacked_layers` in the CRI image config for containerd
versions earlier than 2.1.0.

Starting with containerd v2.1, the CRI plugin uses the Transfer Service for
image pulls by default. The `discard_unpacked_layers` option is incompatible
with the Transfer Service and triggers containerd to fall back to local
image pulls, logging a warning.

This change prevents unsupported configuration from being applied on newer
containerd versions, avoiding runtime warnings and ensuring default image
pull behavior.

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-01-08 19:39:40 +05:30
Ali Afsharzadeh a0f00761ac Removed deprecated keys from containerd config (#12820) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-01-02 14:26:35 +05:30
Ali Afsharzadeh 6d850a0dc5 Update pause image to 3.10.1 for Kubernetes 1.34 (#12827) 2025-12-31 13:48:35 +05:30
Ali Afsharzadeh 1cbccf40a5 Upgrade cilium from 1.18.4 to 1.18.5 (#12796) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-12-19 07:24:32 -08:00
Ali Afsharzadeh 31cce09fbc Check calico version in check mode (#12586) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-12-10 00:39:29 -08:00
Ali Afsharzadeh 39744146b4 Remove legacy cilium_remove_old_resources task (#12771) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-12-07 07:36:55 -08:00
Ali Afsharzadeh 4c5eda9f1e Remove legacy tasks that were scheduled for cleanup (#12765) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-12-04 23:50:58 -08:00
Ali Afsharzadeh bce107ce3d Upgrade cilium from 1.18.3 to 1.18.4 (#12717) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-11-18 19:51:59 -08:00
Ali Afsharzadeh b3ee6d6b75 Adjust hubble export values for cilium 1.18 schema change (#12665) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-11-18 00:07:37 -08:00
Ali Afsharzadeh f5a480fdc4 Upgrade cilium from 1.18.2 to 1.18.3 (#12649) 2025-11-06 21:42:52 -08:00
Ali Afsharzadeh f8e74aafb9 Fix cilium_policy_audit_mode variable (#12569) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-10-07 09:15:02 -07:00
Ali Afsharzadeh 8b62a71f31 Upgrade cilium related images (#12568) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-09-29 10:04:19 -07:00
Ali Afsharzadeh fae4e08f35 Upgrade cilium from 1.18.1 to 1.18.2 (#12559) 2025-09-18 23:56:12 -07:00
Ali Afsharzadeh 6b973d072c Upgrade haproxy load balancer from 3.1.7 to 3.2.4 (#12557) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-09-17 01:18:12 -07:00
Ali Afsharzadeh 2955dfe69f Upgrade flannel from 0.26.7 to 0.27.3 (#12543) 2025-09-11 00:22:07 -07:00
Ali AfsharzadehandChengHao Yang 0a35c624ad Upgrade local-path-provisioner from 0.0.24 to 0.0.32 (#12545) 
* Upgrade local-path-provisioner from 0.0.24 to 0.0.32

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

* Remove local_path_provisioner_image_tag variable

Co-authored-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>

---------

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
Co-authored-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
 2025-09-10 04:25:57 -07:00
Ali Afsharzadeh 456a3dda09 Upgrade cilium from 1.17.7 to 1.18.1 (#12542) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-09-09 19:47:59 -07:00
Ali Afsharzadeh 7d79f17b12 Fix duplicate dict key warning in bootstrap_os task includes (#12488) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-08-26 01:32:11 -07:00
Ali Afsharzadeh 4a4201c84d Remove ara_default from callbacks_enabled (#12490) 
The option ara_default was still present in ansible.cfg under callbacks_enabled.
This is a leftover from commit b9e9364 ("Remove ara support in CI") and should
have been removed together with the rest of the ara integration.

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-08-24 22:49:06 -07:00
Ali Afsharzadeh 303dd1cbc1 Enable reserved variable name checks and fix violations (#12463) 
* Enable reserved variable name checks and fix violations

Updated .ansible-lint configuration to skip only var-naming[pattern]
and var-naming[no-role-prefix] instead of skipping the entire var-naming rule.
This enables the check for reserved variable names.

Renamed variables that used reserved names to avoid conflicts.
Updated all references in tasks, variables, and templates.

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

* Rename namespace variable inside tasks instead of deleting it

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

* Change hosts variable to vm_hosts

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

* Use k8s_namespace instead of dashboard_namespace in dashboard.yml.j2 template

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

---------

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-08-21 00:47:07 -07:00
Ali Afsharzadeh 7d3e0d4fe5 Simplify group_by logic by moving conditional to when clause (#12469) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-08-18 07:39:11 -07:00
Ali Afsharzadeh fa22f9e5ab Ensure apt cache is updated before dist-upgrade (#12465) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-08-18 07:13:12 -07:00
Ali Afsharzadeh 51764b208b Upgrade cilium from 1.17.3 to 1.17.7 (#12470) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2025-08-16 10:53:07 -07:00
Ali Afsharzadeh c89c34f4d6 Update load balancers versions to Nginx 1.28.0, Haproxy 3.1.7 (#12178) 2025-05-23 20:50:34 -07:00
Ali Afsharzadeh 09fad4886a Fix path to facts.yml in node facts refresh section (#12177) 2025-05-02 00:39:56 -07:00
Ali Afsharzadeh d10a2cd4c6 Update load balancers versions to Nginx 1.27, Haproxy 3.1 (#11928) 2025-02-07 19:11:57 -08:00