27527fdb00
refactor(roles): remove redundant default filters ( #13380 )
2026-07-17 16:35:28 +00:00
2d8f15f95a
fix(calico): Add missing permissions in RBAC for calico-kube-controllers ( #13375 )
...
* fix(calico): Add namespace rbac for calico-kube-controllers
* fix(calico): Add missing RBAC resource for calico-kube-controllers
2026-07-17 15:19:30 +00:00
cbcda6ea8d
Reboot only when required, add the option to clean packages. ( #13327 )
...
* Reboot only when required, add the option to clean packages.
* Update docs to reflect only Debian based distribution can be apt
autocleaned
* Add apt cleanup to upgrade tests
2026-07-16 16:25:26 +00:00
0355ed62b9
fix(cilium): wire scrape port variables to Helm values template ( #13370 )
...
Signed-off-by: somaz <genius5711@gmail.com >
2026-07-15 09:57:33 +00:00
971e5f561b
Support authentication for custom CNI Helm repositories ( #13294 )
...
* Add authentication support for custom CNI Helm repository
Pass optional Helm repository username and password values to the custom CNI chart configuration. These values use default(omit) so authentication fields are only included when explicitly defined by the user.
* Document custom CNI Helm repository authentication variables
Add commented sample variables for configuring a username and password when the custom CNI Helm repository requires authentication.
* Address Copilot documentation feedback
Document paired repository credentials and secure password storage.
Remove authentication placeholders from the public Cilium example.
2026-07-15 04:05:20 +00:00
648e55a379
Rename cilium certgen and envoy image variables ( #13260 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
2026-07-14 14:33:17 +00:00
e15b1f2778
Patch versions updates ( #13368 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-14 03:24:19 +00:00
451957822e
Replace injected Ansible fact variables in kubernetes-apps role ( #13339 )
2026-07-14 02:38:18 +00:00
9254afbdc7
Remove dangling 'list' from mutually_exclusive in kube.py ( #13352 )
...
The mutually_exclusive constraint referenced 'list', a parameter that does not exist in argument_spec. Remove the dead constraint.
Signed-off-by: Adesh Deshmukh <adeshkd123@gmail.com >
2026-07-09 05:52:31 +00:00
338d288653
Replace injected Ansible fact variables in kubespray-defaults role ( #13340 )
2026-07-08 10:08:29 +00:00
0c7ccdd6cf
Merge pull request #13361 from tico88612/fix/1.36-extend-websocket
...
fix: ExtendWebSocketsToKubelet when container_manager set docker
2026-07-07 09:18:29 +00:00
63bdde2ade
Fix inverted ignore_errors condition for etcd-events service startup ( #13343 )
...
The ignore_errors condition on the etcd-events service startup task
(Configure | Ensure etcd-events is running) uses != instead of ==,
which is the inverse of the correct pattern used for the main etcd
service on the line above.
This was introduced in commit 7516fe142
2026-07-07 07:50:27 +00:00
c1ee4bdef8
test: move openeuler24-calico to pr-full
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
2026-07-06 22:08:20 +08:00
cf80a0c409
build(deps): bump molecule from 26.4.0 to 26.6.0 in the molecule group ( #13359 )
...
Bumps the molecule group with 1 update: [molecule](https://github.com/ansible-community/molecule ).
Updates `molecule` from 26.4.0 to 26.6.0
- [Release notes](https://github.com/ansible-community/molecule/releases )
- [Commits](https://github.com/ansible-community/molecule/compare/v26.4.0...v26.6.0 )
---
updated-dependencies:
- dependency-name: molecule
dependency-version: 26.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: molecule
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-06 11:22:25 +00:00
80b3345ed8
fix: cri-dockerd doesn't support ExtendWebSocketsToKubelet
...
Disabled the FG ExtendWebSocketsToKubelet when `container_manager` set `docker`, let CI can passed.
2026-07-06 16:57:50 +08:00
4832c44bb3
fix(tests): use kube_network_plugin in fedora43-flannel-crio test ( #13350 )
...
* fix(tests): use kube_network_plugin in fedora43-flannel-crio test
The fedora43-flannel-crio-collection-scale.yml test config set
'network_plugin: flannel', but all Kubespray roles read
'kube_network_plugin' (defaulting to 'calico'). The test silently
ran Calico instead of Flannel.
Signed-off-by: Adesh Deshmukh <adeshkd123@gmail.com >
* Update CI matrix to reflect fedora43-flannel-crio test correctly
---------
Signed-off-by: Adesh Deshmukh <adeshkd123@gmail.com >
2026-07-05 10:44:22 +00:00
c263d746b6
Fix Multus manifest generation with global inventory ( #13309 )
...
* Fix Multus manifest generation with global inventory
* Update roles/network_plugin/multus/tasks/main.yml
Co-authored-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
---------
Co-authored-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
2026-06-30 12:50:11 +00:00
30e39560e5
build(deps): bump actions/setup-python from 6.2.0 to 6.3.0 ( #13331 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/a309ff8b426b58ec0e2a45f0f869d46889d02405...ece7cb06caefa5fff74198d8649806c4678c61a1 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: 6.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-29 09:24:10 +00:00
8f3baa4e18
build(deps): bump actions/cache from 5.0.5 to 6.1.0 ( #13330 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 5.0.5 to 6.1.0.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-29 08:52:07 +00:00
925f60247a
Make cordon/uncordon confirmation prompts consistent ( #13313 )
...
Mention cordon explicitly in the pre-upgrade prompt and add the node
name plus the same continue/cancel hint to the uncordon prompt so both
prompts share consistent wording.
2026-06-24 11:38:21 +00:00
60929432f5
flannel: set EnableNFTables when kube_proxy_mode use nftables ( #13291 )
...
* flannel: set EnableNFTables when kube_proxy_mode use nftables
* Clean up cni-flannel.yml.j2 by removing comments
Removed commented-out environment variable for cache readiness.
* update cni-flannel.yml.j2
---------
Co-authored-by: ric-mb <noreply@github.com >
2026-06-24 02:50:17 +00:00
07960e8bb6
fix: Jinja version test warning ( #13322 )
...
The jinja version test conditional uses jinja in the condition, which is
deprecated. I have removed the assertion since ansible 2.18 has a dependency
on jinja2>=3.0.0.
2026-06-23 09:38:37 +00:00
c76137d89e
dependabot: ignore ansible major version updates ( #13320 )
...
Ansible major versions are upgraded manually to support multiple
OS/Python versions. Configure Dependabot to still propose minor and
patch updates while skipping semver-major bumps.
Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com >
2026-06-23 07:01:33 +00:00
edeeb95f22
fix(cilium): sync operator-generic image for offline registries ( #13270 )
...
The Cilium Helm chart appends a -generic suffix to the operator image
repository for non-cloud deployments. Sync the operator-generic image
to offline registries so it matches what the chart requests.
Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com >
2026-06-22 12:49:55 +00:00
9dde36546c
build(deps): update bcrypt requirement from <5 to <6 ( #13318 )
...
Updates the requirements on [bcrypt](https://github.com/pyca/bcrypt ) to permit the latest version.
- [Changelog](https://github.com/pyca/bcrypt/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/bcrypt/compare/v1.0.0...5.0.0 )
---
updated-dependencies:
- dependency-name: bcrypt
dependency-version: 5.0.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-22 06:21:41 +00:00
99be103567
build(deps): bump actions/checkout from 6.0.3 to 7.0.0 ( #13319 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-22 06:11:40 +00:00
4d8ecca4e7
Upgrade cilium from 1.19.4 to 1.19.5 ( #13315 )
...
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com >
2026-06-21 14:17:37 +00:00
8a5cfe8d77
Change failure condition for image container download ( #12321 )
...
When installing with `download_run_once`, nerdctl will log to stderr and
cause a failure even if the image was saved successfully. Instead we
rely on the shell exit code to detect the failure.
Signed-off-by: Alejandro Macedo <alex.macedopereira@gmail.com >
2026-06-21 10:51:41 +00:00
9f7ea6632c
Replace injected Ansible fact variables in bootstrap_os role ( #13264 )
...
* Replace injected Ansible fact variables in bootstrap_os role
* Restore stale setup task in opensuse role
2026-06-19 11:44:49 +05:30
a553d48c73
Fix missing dependency for ArgoCD master password hashing ( #12920 )
...
* add passlib dependency
* add constrained bcrypt version
2026-06-16 13:55:30 +05:30
e0add9ee0d
Replace injected Ansible fact variables in container-engine role ( #13296 )
2026-06-16 08:51:24 +05:30
a76a475a5b
build(deps): bump distlib from 0.4.1 to 0.4.3 ( #13307 )
...
Bumps [distlib](https://github.com/pypa/distlib ) from 0.4.1 to 0.4.3.
- [Release notes](https://github.com/pypa/distlib/releases )
- [Changelog](https://github.com/pypa/distlib/blob/master/CHANGES.rst )
- [Commits](https://github.com/pypa/distlib/compare/0.4.1...0.4.3 )
---
updated-dependencies:
- dependency-name: distlib
dependency-version: 0.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-15 09:34:32 +05:30
701f4be3c1
build(deps): bump cryptography from 48.0.0 to 49.0.0 ( #13306 )
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 48.0.0 to 49.0.0.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/48.0.0...49.0.0 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 49.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-15 09:30:35 +05:30
f2a7181f99
fix: make assert test for netaddr actually return a boolean ( #13304 )
...
* fix: make assert test for netaddr actually return a boolean
The netaddr test returns a string when the netaddr is installed. This makes
Ansible 2.20 angry. Here's a fix to make sure the true case also returns a
boolean instead of a string.
* fix: more fixes for non-boolean conditions
The `cloud_provider` assertion change is a little more involved. The only two
allowed values are "" and "external". Let's just always check the assertion
instead of skipping it when it's the default value, which is "".
All the other changes should be fairly obvious.
2026-06-14 13:56:32 +05:30
3011e19ccd
Patch versions updates ( #13305 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-13 10:28:46 +05:30
9f39517507
fix: make offline containerd URL generation respect containerd_static_binary in sample inventory ( #13293 )
2026-06-09 09:41:45 +05:30
36eba216f6
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 ( #13300 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-08 21:39:52 +05:30
03378afd18
build(deps): bump distlib from 0.4.0 to 0.4.1 ( #13298 )
...
Bumps [distlib](https://github.com/pypa/distlib ) from 0.4.0 to 0.4.1.
- [Release notes](https://github.com/pypa/distlib/releases )
- [Changelog](https://github.com/pypa/distlib/blob/master/CHANGES.rst )
- [Commits](https://github.com/pypa/distlib/compare/0.4.0...0.4.1 )
---
updated-dependencies:
- dependency-name: distlib
dependency-version: 0.4.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-08 21:14:03 +05:30
84eede8630
image-builder: add staging OCI publish path ( #13273 )
2026-06-05 12:05:59 +05:30
a72ea49b2e
Fix: use config version 4 for containerd 2.3+ ( #13285 ) ( #13286 )
...
Signed-off-by: longyuxiang <longyuxiang@kylinos.cn >
2026-06-05 08:19:58 +05:30
bd21d04c4f
Update dns-autoscaler.yml.j2 fix duplicate nodeSelector ( #13290 )
2026-06-04 12:17:48 +05:30
7c8f928405
fix-absent-cni-kubeadm-join-control-planes ( #13280 )
2026-06-02 07:34:59 +05:30
2ffff07887
Replace injected Ansible fact variables in node and control-plane roles ( #13240 )
2026-06-02 07:34:51 +05:30
8b234bf138
Patch versions updates ( #13283 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-01 20:52:54 +05:30
e914bd78c2
Bump containerd from 2.2.3 to 2.3.0 ( #13265 )
2026-05-28 14:56:55 +05:30
9049703ce0
roles: rely on configured defaults ( #13249 )
...
Signed-off-by: Zakhar Dvurechensky <72825626+Zakharden@users.noreply.github.com >
2026-05-27 15:09:50 +05:30
03ae25e410
Merge pull request #13269 from tico88612/fix/pre-commit
...
Fixed pre-commit and pin Python Client version in pipeline
2026-05-26 13:41:26 +05:30
d2ca095505
Chore: Pipeline kubernetes-python client version pin 35.0.0
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
2026-05-25 20:51:18 +08:00
1b111e06b1
Fix kata-containers job name duplicated
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
2026-05-25 20:50:38 +08:00
4e6e63d49d
Chore: pin the pre-commit ansible-core version
...
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com >
2026-05-25 20:49:52 +08:00
Frank