emma034186-stack 5d17ea45a9 fix(cilium): stop early if kube_owner is not root (#13385) ...

Cilium's init containers run as UID 0 with capabilities (including
CAP_DAC_OVERRIDE) dropped, so host paths it writes to (e.g. /opt/cni/bin)
must be owned by root or it will fail with a permission error.

Add a pre-flight assert that fails fast with a clear message when
kube_network_plugin == cilium and kube_owner != root, instead of
changing CNI bin ownership defaults for all network plugins.

2026-07-22 14:17:51 +00:00

..

client

use admin.conf for local kubeconfig (#12997)

2026-02-12 22:08:01 +05:30

control-plane

fix: cri-dockerd doesn't support ExtendWebSocketsToKubelet

2026-07-06 16:57:50 +08:00

kubeadm

Remove kubeadm config api version: v1beta3 for kubeadm config template (#13027)

2026-03-11 20:27:38 +05:30

kubeadm_common

kubeadm_patches: remove old patches on inventory change (#13019)

2026-02-17 09:56:01 +05:30

node

fix: cri-dockerd doesn't support ExtendWebSocketsToKubelet

2026-07-06 16:57:50 +08:00

node-label/tasks

Do not use ‘yes/no’ for boolean values (#11472)

2024-08-28 06:30:56 +01:00

node-taint

Move inline defaults to defaults/main.yml (#12926)

2026-02-03 14:14:29 +05:30

preinstall

fix(cilium): stop early if kube_owner is not root (#13385)

2026-07-22 14:17:51 +00:00