Commit Graph
70 Commits
Author SHA1 Message Date
Kay Yan b7d99749b8 preinstall: generalize minimum-value semantics for managed sysctls (#13224)
* preinstall: generalize minimum-value semantics for managed sysctls

Move the hardcoded sysctl floor map out of 0080-system-configurations.yml
into a default variable, and introduce additional_sysctl_min so users can
declare their own sysctl floors. Floor semantics only apply a managed
value when the node's current value is lower; pre-tuned images (Bottlerocket,
EKS AMIs, OpenShift RHCOS, hardened distros) and newer kernels that
already set higher values are left alone.

Default floors are aligned with prior art from the OpenShift Node Tuning
Operator (TuneD '=>' floor syntax in the openshift / openshift-node
profiles) and kops. None of the floor keys are part of the kubelet
protect-kernel-defaults validation list, so the floor mechanism cannot
interfere with kubelet startup. Keys not present on the running
kernel/distro are skipped without failing.

additional_sysctl (exact-value semantics) is unchanged for backward
compatibility.

Signed-off-by: Kay Yan <kay.yan@daocloud.io>

* preinstall: refine sysctl floor handling

Keep built-in floor values internal while preserving user overrides
through additional_sysctl_min.

Use sysctl --ignore for unknown keys and filter empty results without
masking other read errors.

Signed-off-by: Kay Yan <kay.yan@daocloud.io>

---------

Signed-off-by: Kay Yan <kay.yan@daocloud.io>
2026-09-10 07:46:33 +00:00
Max Gautier 0378060c91 fix/ansible 2.19: ssl_ca_dirs: don't rely on final evaluation (#13477) 2026-09-09 09:13:25 +00:00
Max Gautierandgithub-actions[bot] 15dab0c60c Patch versions updates (#13458)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-09 00:48:32 +00:00
Max Gautier ff19dbd284 fix/ansible 2.19: local vol provisioner: don't rely on final evaluation (#13481)
- also remove mitogen workaround from local_volume_provisioner since
  creating the dirs is handled by kubernetes/preinstall instead
- correct the tag in kubernetes/preinstall as persistent_volumes isn't
  the same thing
2026-09-08 22:46:35 +00:00
Sandaru Wijewardhana 2dd05e4841 Bump nerdctl to v2.3.5 (#13437)
Signed-off-by: sandaruwijewardhana <sandaruwijewardhana@gmail.com>
2026-09-08 07:44:30 +00:00
Ali Afsharzadeh 46dbdd3994 Patch versions updates (#13423)
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2026-08-21 10:07:16 +00:00
ChillRedChilli ed99c2a4cb kata-containers: Update release artifacts to zst format. (#13389)
- Updated download URLs to fetch the kata-static<...>.zst files from github repo.
- Added zstd package in kata-continers role.
- Updated version checksums to match the new release files.

Moved zstd dependency to roles/system_package
2026-08-16 15:04:14 +00:00
Ali Afsharzadeh ace96af930 Upgrade cilium from 1.19.6 to 1.20.0 (#13401)
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2026-08-06 13:26:54 +00:00
Ali Afsharzadeh 9b092a4f49 Upgrade cilium from 1.19.5 to 1.19.6 (#13376)
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2026-07-25 06:35:53 +00:00
Ali Afsharzadeh 8d69fb8f9a Patch versions updates (#13393)
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
2026-07-24 07:01:52 +00:00
ChengHao Yangandgithub-actions[bot] e15b1f2778 Patch versions updates (#13368)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-14 03:24:19 +00:00
ChengHao Yangandgithub-actions[bot] 3011e19ccd Patch versions updates (#13305)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-13 10:28:46 +05:30
ChengHao Yangandgithub-actions[bot] 8b234bf138 Patch versions updates (#13283)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-01 20:52:54 +05:30
Sumit Solanki e914bd78c2 Bump containerd from 2.2.3 to 2.3.0 (#13265) 2026-05-28 14:56:55 +05:30
ChengHao Yangandgithub-actions[bot] 22ce2f799f Patch versions updates (#13254)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-14 13:26:27 +05:30
Takuya Murakami c1768dd21b cri-o: Bump cri-o to 1.36.0 for kubernetes 1.36 (#13244) 2026-05-11 19:15:51 +05:30
ChengHao Yangandgithub-actions[bot] 4cefd77639 Move failing youki to allow_failed and patch update (#13241)
* Patch versions updates

* fix: failing blocker youki

https://github.com/youki-dev/youki/issues/3479

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-08 18:43:20 +05:30
Takuya Murakami 28bdeb8583 [Kubernetes] Support Kubernetes v1.36.0 (#13219)
- Support Kubernetes 1.36.0
- Bump coredns to 1.14.2
2026-05-01 07:49:25 +05:30
Srishti Jaiswal dee8a18ccc bump- calico to v3.31.5 (#13196) 2026-04-21 20:21:53 +05:30
Karim Farid 19b73f4f83 Bump: CNI plugins to v1.9.1 (#13198)
* bump(download): CNI plugins v1.8.0 → v1.9.1

* bump(download): update cni-plugins to v1.9.1
2026-04-21 08:07:52 +05:30
Mohamed Omar Zaian 11a985dcd3 [runc] Add hashes for runc v1.4.2, and make it default (#13192) 2026-04-20 19:03:54 +05:30
Mohamed Omar Zaian 7b3486a13d [etcd] Add hashes for etcd v3.6.10, and make it default for k8s 1.35 (#13190) 2026-04-19 12:21:36 +05:30
Mohamed Omar Zaian d068ae5414 [Kubernetes] Update Kubernetes to v1.35.4 (#13193) 2026-04-17 17:49:05 +05:30
Kay Yan d564e4e77d bump containerd from 2.2.1 to 2.2.3 (#13174)
Also add checksums for newly released patch versions:
- containerd 2.2.2, 2.2.3
- containerd 2.1.7
- containerd 2.0.8
- containerd 1.7.31

Signed-off-by: Kay Yan <kay.yan@daocloud.io>
2026-04-17 17:11:04 +05:30
labaq 6006fe4303 feat(checksums) add Gateway API 1.5.0 1.5.1 checksums (#13138) 2026-04-03 17:01:04 +05:30
ChengHao Yang e0d4d892a3 Patch versions updates (#13143)
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2026-04-03 13:29:03 +05:30
Srishti Jaiswal 16ad53eac5 Revert "add Helm 4.x checksums and remove 3.16.* checksums (#13018)" (#13056)
This reverts commit 5e6fbc9769.
2026-02-27 16:28:56 +05:30
Srishti Jaiswal 5e6fbc9769 add Helm 4.x checksums and remove 3.16.* checksums (#13018) 2026-02-25 13:49:43 +05:30
Max Gautier 55787bd1a2 cleanup 1.32 crio checksums (Kubernetes 1.32 is no longer supported) (#13042) 2026-02-23 20:47:36 +05:30
Takuya Murakami 0bfd43499a Update etcd to 3.6 (#12634)
* [etcd] Update etcd 3.5.x to 3.6.5

- Add hashes for etcd 3.6.5
- Remove etcd v2 backup task for etcd 3.6
  The etcd 3.6 removes 'etcdctl backup' command with ETCDCTL_API=2
- Downgrade etcd to 3.5 in netchecker
  The netchecker does not work with etcd 3.6 becaust it removes v2 API support (--enable-v2).
  And netchekcer does not support v3 API.

* Fix: Change etcd config to clean up v2 store before upgrading etcd to 3.6

* Bump etcd to 3.6.8
2026-02-16 19:16:01 +05:30
Max Gautierandgithub-actions[bot] 005bdce7f1 Patch versions updates (#12993)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-02-14 10:07:59 +05:30
labaq 169eb4201e fix gateway api checksums (#13006) 2026-02-14 08:43:59 +05:30
Srishti Jaiswal 31c33015c4 Use calico crds.yaml for KDD CRDs and drop tarball artifacts (#12985) 2026-02-12 20:40:00 +05:30
Mohamed Omar Zaian a77221d12b [kubernetes] Support Kubernetes v1.35.0 (#12812) 2026-02-10 14:54:02 +05:30
Max Gautierandgithub-actions[bot] 57364f4085 Patch versions updates (#12973)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-02-09 21:13:25 +05:30
chun 9bbef44e32 Bump: Prometheus Operator CRD to 0.88.1 (#12968)
Signed-off-by: hcc429 <dev.hcc29@gmail.com>
2026-02-06 08:36:30 +05:30
Max Gautierandgithub-actions[bot] fff7f10a85 Patch versions updates (#12912)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-01-27 20:21:53 +05:30
Max Gautierandgithub-actions[bot] bc5528f585 Patch versions updates (#12854)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-01-17 23:57:09 +05:30
Ali Afsharzadeh 666a3a9500 Upgrade containerd and nerdctl from 2.1.6 to 2.2.1 (#12825) 2026-01-12 15:24:10 +05:30
Ali Afsharzadeh 6d850a0dc5 Update pause image to 3.10.1 for Kubernetes 1.34 (#12827) 2025-12-31 13:48:35 +05:30
Max Gautierandgithub-actions[bot] 5cf8f3eefc Patch versions updates (#12799)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-20 02:54:31 -08:00
Max Gautier 118b2dce02 Remove checksums for old versions of various components (#12735)
We only keep 3 minor versions for most stuff
2025-12-05 06:30:59 -08:00
Max Gautierandgithub-actions[bot] 2512e0c50c Patch versions updates (#12762)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-04 06:44:57 -08:00
Max Gautierandgithub-actions[bot] 3de6fa7220 Patch versions updates (#12743)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-11-25 01:04:37 -08:00
ChengHao Yangandgithub-actions[bot] 7436d63faa Patch versions updates (#12678)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-11-17 05:01:39 -08:00
ChengHao Yang 5c6ee4852a Bump: Gateway API to 1.4.0 and set latest version
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2025-11-16 21:53:59 +08:00
Max Gautier db599b3475 Patch version updates (#12696) 2025-11-14 04:41:45 -08:00
i-yasudaandTakuya Murakami 0d88532f3d [kubernetes] Support kubernetes 1.34 (#12549)
* [kubernetes] Support kubernetes 1.34.0

Update hashes for kubernetes 1.34.0 except for cri-o

* [kubernetes] Support kubernetes 1.34.1

Update hashes for kubernetes 1.34.1

* [cri-o] Update cri-o to 1.34.1

---------

Co-authored-by: Takuya Murakami <tmurakam@tmurakam.org>
2025-10-17 01:56:42 -07:00
ChengHao Yangandgithub-actions[bot] aa255f8831 Patch versions updates (#12602)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-10-07 07:25:02 -07:00
Takuya Murakami 1d91e47878 Fix: Fix calico_crds_archive checksum (#12564)
It looks like the checksum was changed due to Github's compress algorithm change.
See #12523 for details.
2025-09-18 23:14:11 -07:00