Ali Afsharzadeh
9441a6b90d
Upgrade cilium from 1.19.1 to 1.19.3 ( #13187 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
2026-04-17 16:09:03 +05:30
Kay Yan
817c0a6eda
fix(cilium): wire cilium_enable_prometheus to Helm values template ( #13142 )
...
The cilium_enable_prometheus variable was defined in defaults and
documented in sample inventory but never mapped to the Helm values
template, making it a no-op. Add the prometheus.enabled field to
values.yaml.j2 so that setting cilium_enable_prometheus: true
correctly enables Prometheus metrics on the Cilium agent.
Signed-off-by: Kay Yan <kay.yan@daocloud.io >
2026-04-14 07:28:36 +05:30
Yang-Ming Lin
00a0479078
Refactor(defaults): centralize bootstrap_os defaults ( #13155 )
2026-04-09 08:35:38 +05:30
ahmed moghazy
f0c965f1ed
fix: correct OCI CCM template filename in lookup ( #13151 )
2026-04-09 08:35:31 +05:30
Karim Farid
47bb0301e4
Fix undefined variable error for CiliumBGPAdvertisement labels ( #13149 )
2026-04-09 08:13:31 +05:30
Yang-Ming Lin
65352fef39
Fix Flatcar flaky CI by enabling apiserver wait after DNS handler ( #13063 )
...
Remove the Flatcar/Fedora CoreOS exclusion from the wait handler
and unify the Flatcar-specific notify channel into the shared
"propagate resolvconf to k8s components" channel.
2026-04-03 20:17:03 +05:30
labaq
6006fe4303
feat(checksums) add Gateway API 1.5.0 1.5.1 checksums ( #13138 )
2026-04-03 17:01:04 +05:30
ChengHao Yang
e0d4d892a3
Patch versions updates ( #13143 )
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
2026-04-03 13:29:03 +05:30
ChengHao Yang
6850c731db
Fix openeuler metalink url ( #13144 )
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
2026-04-03 12:59:04 +05:30
ERIK
341da0e8cb
Fix kubeadm task failure when cilium_identity_allocation_mode is undefined ( #13121 )
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io >
2026-03-20 14:32:13 +05:30
VoidQuark
fae47ab9e6
fix(cilium): quote empty string defaults to prevent null in Helm values ( #13109 )
2026-03-18 12:43:42 +05:30
Ali Afsharzadeh
e979e770f2
Fix calico api server permissions ( #13101 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
2026-03-17 16:19:50 +05:30
Ali Afsharzadeh
b1e3816b2f
Add calico-tier-getter RBAC ( #13100 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
2026-03-17 16:19:42 +05:30
Vitaly
391b08c645
fix: use nodelocaldns_ip with ipv6 address ( #13087 )
2026-03-17 16:07:38 +05:30
NoNE
39b97464be
Use async/poll on drain tasks to prevent SSH connection timeouts ( #13081 )
2026-03-17 14:31:36 +05:30
Kay Yan
3c6d368397
ci(openeuler): improve mirror selection and stabilize CI checks ( #13094 )
...
Enable openEuler metalink and clear dnf cache after repo updates so package downloads use refreshed mirror metadata. Keep openeuler24-calico in the main CI matrix with a longer package timeout, and clean up failed pods before running-state checks to reduce transient CI noise.
Made-with: Cursor
Made-with: Cursor
Made-with: Cursor
Made-with: Cursor
Signed-off-by: Kay Yan <kay.yan@daocloud.io >
2026-03-17 13:29:37 +05:30
Max Gautier
03d17fea92
proxy: Fix the no_proxy variable ( #12981 )
...
* CI: add no_proxy regression test
* proxy: Fix the no_proxy variable
Since 2.29, probably due to a change in ansible templating, the no_proxy
variable is rendered as an array of character rather than a string.
This results in broken cluster in some case.
Eliminate the custom jinja looping to use filters and list flatteing +
join instead.
Also simplify some things (no separate tasks file, just use `run_once`
instead of delegating to localhost)
2026-03-17 03:45:37 +05:30
Shaleen Bathla
7acdc4df64
cilium: honor resource limits and requests by default ( #13092 )
...
Signed-off-by: Shaleen Bathla <shaleen.bathla@servicenow.com >
2026-03-16 08:49:40 +05:30
Ali Afsharzadeh
a51773e78f
Upgrade cilium from 1.18.6 to 1.19.1 ( #13095 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
2026-03-14 09:39:34 +05:30
Jannick Kappelmann
096dd1875a
Added kube_version check ( #13071 )
2026-03-13 17:25:36 +05:30
Viktor
e3b5c41ced
fix: update volumesnapshotclass to v1 ( #12775 )
2026-03-11 20:31:38 +05:30
Srishti Jaiswal
ba70ed35f0
Remove kubeadm config api version: v1beta3 for kubeadm config template ( #13027 )
2026-03-11 20:27:38 +05:30
Ali Afsharzadeh
1bafb8e882
Update load balancer versions to Nginx 1.28.2 and Haproxy 3.2.13 ( #13034 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
2026-03-11 20:17:37 +05:30
Cheprasov Daniil
3bdd70c5d8
Feat: make kube-vip BGP source configurable ( #13044 )
2026-03-11 19:17:38 +05:30
Shaleen Bathla
979fe25521
cilium: remove unused bpf clock probe variable ( #13050 )
...
Signed-off-by: Shaleen Bathla <shaleen.bathla@servicenow.com >
2026-03-11 16:39:38 +05:30
Ali Afsharzadeh
da6539c7a0
Enable create_namespace option for custom_cni with helm ( #13061 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
2026-03-05 15:12:20 +05:30
Max Gautier
0c47a6891e
Remove netcheker as we now use hydrophone for network tests ( #13058 )
2026-03-02 19:40:54 +05:30
Srishti Jaiswal
16ad53eac5
Revert "add Helm 4.x checksums and remove 3.16.* checksums ( #13018 )" ( #13056 )
...
This reverts commit 5e6fbc9769 .
2026-02-27 16:28:56 +05:30
Srishti Jaiswal
5e6fbc9769
add Helm 4.x checksums and remove 3.16.* checksums ( #13018 )
2026-02-25 13:49:43 +05:30
Chen-Hsien, Huang
ba55ece670
Fix typo in variable name: ssh_bastion_confing__name -> ssh_bastion_config_name ( #13046 )
2026-02-24 18:15:37 +05:30
Max Gautier
4ca7c2f5c5
system_packages: skip action if package set is empty ( #13015 )
...
We currently invoke the package module even if the set of package is
empty.
This apparently make the package manager of OpenEuler to regularly time
out.
2026-02-24 09:13:33 +05:30
Max Gautier
55787bd1a2
cleanup 1.32 crio checksums (Kubernetes 1.32 is no longer supported) ( #13042 )
2026-02-23 20:47:36 +05:30
Max Gautier
9cce89dc5e
kubeadm: delete unused node-kubeconfig template ( #13012 )
2026-02-17 23:41:38 +05:30
Max Gautier
e7f4c9f9f6
kubeadm_patches: remove old patches on inventory change ( #13019 )
...
Currently, if changing the inventory variable `kubeadm_patches`, new
patches will be created, but the existing ones will also be left on the
filesystem, and applied by kubeadm ; this means that removed or changed
configuration can linger.
Cleanup old patches (which are the difference between existing patches
on filesystem and the one created for the current runs).
2026-02-17 09:56:01 +05:30
Takuya Murakami
0bfd43499a
Update etcd to 3.6 ( #12634 )
...
* [etcd] Update etcd 3.5.x to 3.6.5
- Add hashes for etcd 3.6.5
- Remove etcd v2 backup task for etcd 3.6
The etcd 3.6 removes 'etcdctl backup' command with ETCDCTL_API=2
- Downgrade etcd to 3.5 in netchecker
The netchecker does not work with etcd 3.6 becaust it removes v2 API support (--enable-v2).
And netchekcer does not support v3 API.
* Fix: Change etcd config to clean up v2 store before upgrading etcd to 3.6
* Bump etcd to 3.6.8
2026-02-16 19:16:01 +05:30
Chad Swenson
8af9f37b28
Undefined check for apiserver_loadbalancer_domain_name in apiserver_sans ( #13009 )
2026-02-16 15:22:01 +05:30
Tushar240503
b41157cad0
Refactor container-engine dependencies ( #12946 )
...
Signed-off-by: Tushar Sharma <tusharkumargzb6@gmail.com >
2026-02-14 19:46:04 +05:30
Max Gautier
a4215cbef9
Remove workaround for kubeadm bug which is no longer necessary ( #12991 )
...
Introduced in 14b63ede8 (Fixup kubelet.conf to point to
kubelet-client-current.pem (#7347 ), 2021-03-09)
2026-02-14 19:37:59 +05:30
Max Gautier
005bdce7f1
Patch versions updates ( #12993 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-02-14 10:07:59 +05:30
labaq
169eb4201e
fix gateway api checksums ( #13006 )
2026-02-14 08:43:59 +05:30
Srishti Jaiswal
e76eecc442
centralize remove node defaults ( #13004 )
2026-02-14 02:42:00 +05:30
Tushar240503
1efd3e4f69
StartLimitBurst=10 ( #13005 )
...
Signed-off-by: Tushar Sharma <tusharkumargzb6@gmail.com >
2026-02-13 19:40:01 +05:30
Kubernetes Prow Robot
5070ffaea3
Merge pull request #12878 from VannTen/ci/handle_flakes
...
CI: Separate matrix job for flakey tests
2026-02-13 18:58:01 +05:30
Max Gautier
bf3fef05fd
control-plane: do not adjust apiserver endpoint ( #12870 )
...
This essentially revert the functionnality of 9b0f57a0a (Adjust
endpoints for kube-proxy,controller,scheduler to proper ip (#5150 ),
2019-09-09).
This is no longer needed since kubeadm now default to use the local
kube-apiserver for control plane components (feature gate
"ControlPlaneKubeletLocalMode")
https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-init/#feature-gates
2026-02-13 15:52:01 +05:30
Max Gautier
efdff890ed
Introduce a timeout for package installation
...
Sometimes package installations can get into weird state and stuck for a
very long time.
Timeout the tasks to fail early, with a customizable timeout duration.
2026-02-13 10:52:40 +01:00
Srishti Jaiswal
054f7bf07b
use admin.conf for local kubeconfig ( #12997 )
2026-02-12 22:08:01 +05:30
Srishti Jaiswal
31c33015c4
Use calico crds.yaml for KDD CRDs and drop tarball artifacts ( #12985 )
2026-02-12 20:40:00 +05:30
Srishti Jaiswal
46058349ce
use kubeadm:cluster-admins for admin kubeconfig ( #12998 )
2026-02-12 19:06:01 +05:30
Srishti Jaiswal
d5b91828a3
Use kubeam kubeconfig user instead of generating a kubeconfig with Ansible ( #12958 )
2026-02-12 15:16:01 +05:30
ChengHao Yang
6965d8ded9
Support Fedora 41 ( #12138 )
...
* Add Fedora 41 CI support
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
* Docs: add fedora41 support
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
* Add Fedora 41 local vagrant test
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
* Fix: Fedora 41+ need python3-libdnf5 for package management
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
---------
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
2026-02-11 08:26:01 +05:30