Kay Yan
b7d99749b8
preinstall: generalize minimum-value semantics for managed sysctls ( #13224 )
...
* preinstall: generalize minimum-value semantics for managed sysctls
Move the hardcoded sysctl floor map out of 0080-system-configurations.yml
into a default variable, and introduce additional_sysctl_min so users can
declare their own sysctl floors. Floor semantics only apply a managed
value when the node's current value is lower; pre-tuned images (Bottlerocket,
EKS AMIs, OpenShift RHCOS, hardened distros) and newer kernels that
already set higher values are left alone.
Default floors are aligned with prior art from the OpenShift Node Tuning
Operator (TuneD '=>' floor syntax in the openshift / openshift-node
profiles) and kops. None of the floor keys are part of the kubelet
protect-kernel-defaults validation list, so the floor mechanism cannot
interfere with kubelet startup. Keys not present on the running
kernel/distro are skipped without failing.
additional_sysctl (exact-value semantics) is unchanged for backward
compatibility.
Signed-off-by: Kay Yan <kay.yan@daocloud.io >
* preinstall: refine sysctl floor handling
Keep built-in floor values internal while preserving user overrides
through additional_sysctl_min.
Use sysctl --ignore for unknown keys and filter empty results without
masking other read errors.
Signed-off-by: Kay Yan <kay.yan@daocloud.io >
---------
Signed-off-by: Kay Yan <kay.yan@daocloud.io >
2026-09-10 07:46:33 +00:00
Max Gautier
0378060c91
fix/ansible 2.19: ssl_ca_dirs: don't rely on final evaluation ( #13477 )
2026-09-09 09:13:25 +00:00
Max Gautier and github-actions[bot]
15dab0c60c
Patch versions updates ( #13458 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-09 00:48:32 +00:00
Max Gautier
ff19dbd284
fix/ansible 2.19: local vol provisioner: don't rely on final evaluation ( #13481 )
...
- also remove mitogen workaround from local_volume_provisioner since
creating the dirs is handled by kubernetes/preinstall instead
- correct the tag in kubernetes/preinstall as persistent_volumes isn't
the same thing
2026-09-08 22:46:35 +00:00
Sandaru Wijewardhana
2dd05e4841
Bump nerdctl to v2.3.5 ( #13437 )
...
Signed-off-by: sandaruwijewardhana <sandaruwijewardhana@gmail.com >
2026-09-08 07:44:30 +00:00
Ali Afsharzadeh
46dbdd3994
Patch versions updates ( #13423 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
2026-08-21 10:07:16 +00:00
ChillRedChilli
ed99c2a4cb
kata-containers: Update release artifacts to zst format. ( #13389 )
...
- Updated download URLs to fetch the kata-static<...>.zst files from github repo.
- Added zstd package in kata-continers role.
- Updated version checksums to match the new release files.
Moved zstd dependency to roles/system_package
2026-08-16 15:04:14 +00:00
Ali Afsharzadeh
ace96af930
Upgrade cilium from 1.19.6 to 1.20.0 ( #13401 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
2026-08-06 13:26:54 +00:00
Ali Afsharzadeh
9b092a4f49
Upgrade cilium from 1.19.5 to 1.19.6 ( #13376 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
2026-07-25 06:35:53 +00:00
Ali Afsharzadeh
8d69fb8f9a
Patch versions updates ( #13393 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
2026-07-24 07:01:52 +00:00
ChengHao Yang and github-actions[bot]
e15b1f2778
Patch versions updates ( #13368 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-14 03:24:19 +00:00
ChengHao Yang and github-actions[bot]
3011e19ccd
Patch versions updates ( #13305 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-13 10:28:46 +05:30
ChengHao Yang and github-actions[bot]
8b234bf138
Patch versions updates ( #13283 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-01 20:52:54 +05:30
Sumit Solanki
e914bd78c2
Bump containerd from 2.2.3 to 2.3.0 ( #13265 )
2026-05-28 14:56:55 +05:30
ChengHao Yang and github-actions[bot]
22ce2f799f
Patch versions updates ( #13254 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-14 13:26:27 +05:30
Takuya Murakami
c1768dd21b
cri-o: Bump cri-o to 1.36.0 for kubernetes 1.36 ( #13244 )
2026-05-11 19:15:51 +05:30
ChengHao Yang and github-actions[bot]
4cefd77639
Move failing youki to allow_failed and patch update ( #13241 )
...
* Patch versions updates
* fix: failing blocker youki
https://github.com/youki-dev/youki/issues/3479
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-08 18:43:20 +05:30
Takuya Murakami
28bdeb8583
[Kubernetes] Support Kubernetes v1.36.0 ( #13219 )
...
- Support Kubernetes 1.36.0
- Bump coredns to 1.14.2
2026-05-01 07:49:25 +05:30
Srishti Jaiswal
dee8a18ccc
bump- calico to v3.31.5 ( #13196 )
2026-04-21 20:21:53 +05:30
Karim Farid
19b73f4f83
Bump: CNI plugins to v1.9.1 ( #13198 )
...
* bump(download): CNI plugins v1.8.0 → v1.9.1
* bump(download): update cni-plugins to v1.9.1
2026-04-21 08:07:52 +05:30
Mohamed Omar Zaian
11a985dcd3
[runc] Add hashes for runc v1.4.2, and make it default ( #13192 )
2026-04-20 19:03:54 +05:30
Mohamed Omar Zaian
7b3486a13d
[etcd] Add hashes for etcd v3.6.10, and make it default for k8s 1.35 ( #13190 )
2026-04-19 12:21:36 +05:30
Mohamed Omar Zaian
d068ae5414
[Kubernetes] Update Kubernetes to v1.35.4 ( #13193 )
2026-04-17 17:49:05 +05:30
Kay Yan
d564e4e77d
bump containerd from 2.2.1 to 2.2.3 ( #13174 )
...
Also add checksums for newly released patch versions:
- containerd 2.2.2, 2.2.3
- containerd 2.1.7
- containerd 2.0.8
- containerd 1.7.31
Signed-off-by: Kay Yan <kay.yan@daocloud.io >
2026-04-17 17:11:04 +05:30
labaq
6006fe4303
feat(checksums) add Gateway API 1.5.0 1.5.1 checksums ( #13138 )
2026-04-03 17:01:04 +05:30
ChengHao Yang
e0d4d892a3
Patch versions updates ( #13143 )
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
2026-04-03 13:29:03 +05:30
Srishti Jaiswal
16ad53eac5
Revert "add Helm 4.x checksums and remove 3.16.* checksums ( #13018 )" ( #13056 )
...
This reverts commit 5e6fbc9769 .
2026-02-27 16:28:56 +05:30
Srishti Jaiswal
5e6fbc9769
add Helm 4.x checksums and remove 3.16.* checksums ( #13018 )
2026-02-25 13:49:43 +05:30
Max Gautier
55787bd1a2
cleanup 1.32 crio checksums (Kubernetes 1.32 is no longer supported) ( #13042 )
2026-02-23 20:47:36 +05:30
Takuya Murakami
0bfd43499a
Update etcd to 3.6 ( #12634 )
...
* [etcd] Update etcd 3.5.x to 3.6.5
- Add hashes for etcd 3.6.5
- Remove etcd v2 backup task for etcd 3.6
The etcd 3.6 removes 'etcdctl backup' command with ETCDCTL_API=2
- Downgrade etcd to 3.5 in netchecker
The netchecker does not work with etcd 3.6 becaust it removes v2 API support (--enable-v2).
And netchekcer does not support v3 API.
* Fix: Change etcd config to clean up v2 store before upgrading etcd to 3.6
* Bump etcd to 3.6.8
2026-02-16 19:16:01 +05:30
Max Gautier and github-actions[bot]
005bdce7f1
Patch versions updates ( #12993 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-02-14 10:07:59 +05:30
labaq
169eb4201e
fix gateway api checksums ( #13006 )
2026-02-14 08:43:59 +05:30
Srishti Jaiswal
31c33015c4
Use calico crds.yaml for KDD CRDs and drop tarball artifacts ( #12985 )
2026-02-12 20:40:00 +05:30
Mohamed Omar Zaian
a77221d12b
[kubernetes] Support Kubernetes v1.35.0 ( #12812 )
2026-02-10 14:54:02 +05:30
Max Gautier and github-actions[bot]
57364f4085
Patch versions updates ( #12973 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-02-09 21:13:25 +05:30
chun
9bbef44e32
Bump: Prometheus Operator CRD to 0.88.1 ( #12968 )
...
Signed-off-by: hcc429 <dev.hcc29@gmail.com >
2026-02-06 08:36:30 +05:30
Max Gautier and github-actions[bot]
fff7f10a85
Patch versions updates ( #12912 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-01-27 20:21:53 +05:30
Max Gautier and github-actions[bot]
bc5528f585
Patch versions updates ( #12854 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-01-17 23:57:09 +05:30
Ali Afsharzadeh
666a3a9500
Upgrade containerd and nerdctl from 2.1.6 to 2.2.1 ( #12825 )
2026-01-12 15:24:10 +05:30
Ali Afsharzadeh
6d850a0dc5
Update pause image to 3.10.1 for Kubernetes 1.34 ( #12827 )
2025-12-31 13:48:35 +05:30
Max Gautier and github-actions[bot]
5cf8f3eefc
Patch versions updates ( #12799 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-20 02:54:31 -08:00
Max Gautier
118b2dce02
Remove checksums for old versions of various components ( #12735 )
...
We only keep 3 minor versions for most stuff
2025-12-05 06:30:59 -08:00
Max Gautier and github-actions[bot]
2512e0c50c
Patch versions updates ( #12762 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-04 06:44:57 -08:00
Max Gautier and github-actions[bot]
3de6fa7220
Patch versions updates ( #12743 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-11-25 01:04:37 -08:00
ChengHao Yang and github-actions[bot]
7436d63faa
Patch versions updates ( #12678 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-11-17 05:01:39 -08:00
ChengHao Yang
5c6ee4852a
Bump: Gateway API to 1.4.0 and set latest version
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
2025-11-16 21:53:59 +08:00
Max Gautier
db599b3475
Patch version updates ( #12696 )
2025-11-14 04:41:45 -08:00
i-yasuda and Takuya Murakami
0d88532f3d
[kubernetes] Support kubernetes 1.34 ( #12549 )
...
* [kubernetes] Support kubernetes 1.34.0
Update hashes for kubernetes 1.34.0 except for cri-o
* [kubernetes] Support kubernetes 1.34.1
Update hashes for kubernetes 1.34.1
* [cri-o] Update cri-o to 1.34.1
---------
Co-authored-by: Takuya Murakami <tmurakam@tmurakam.org >
2025-10-17 01:56:42 -07:00
ChengHao Yang and github-actions[bot]
aa255f8831
Patch versions updates ( #12602 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-10-07 07:25:02 -07:00
Takuya Murakami
1d91e47878
Fix: Fix calico_crds_archive checksum ( #12564 )
...
It looks like the checksum was changed due to Github's compress algorithm change.
See #12523 for details.
2025-09-18 23:14:11 -07:00