Feat/new release 1.27.6 (#66)

* feat: add new version for 1.27.7 * feat(docs): update docs with 1.27.7 * feat(docs): fix docs 1.27.7 release * feat(kubeadm): update kubeadm api version on templates * feat(kubeadm): remove deprecate field on kubeadm template * feat: fix critools_version * chore: changed kubernetes version to 1.27.6 * chore (docs): changed release version to 1.27.6 * feat: remove support for version 1.21 * feat(docs): update compatibility matrix * feat: add correct become directive to ansible playbooks to be able to use a passwordless sudoer user * fix: use root user on keepalived.conf instead of ansible_user (breaks if using a sudoer user instead of root) * docs: update main readme with more informations about compatibility --------- Co-authored-by: Samuele Chiocca <[email protected]>
sighupio · Nov 23, 2023 · 964b65e · 964b65e
1 parent 9f67ff5
commit 964b65e
Show file tree

Hide file tree

Showing 17 changed files with 73 additions and 40 deletions.
diff --git a/README.md b/README.md
@@ -5,7 +5,7 @@
 </h1>
 <!-- markdownlint-enable MD033 -->
 
-![Release](https://img.shields.io/badge/Latest%20Release-v1.26.7-blue)
+![Release](https://img.shields.io/badge/Latest%20Release-v1.27.6-blue)
 ![License](https://img.shields.io/github/license/sighupio/fury-kubernetes-on-premises?label=License)
 ![Slack](https://img.shields.io/badge/slack-@kubernetes/fury-yellow.svg?logo=slack&label=Slack)
 
@@ -37,7 +37,7 @@ Click on each package to see its full documentation.
 
 ## Compatibility
 
-This version is compatible with Kubernetes 1.26.7
+This version is compatible with Kubernetes 1.27.6 plus the complete list in the compatibility matrix.
 
 Check the [compatibility matrix][compatibility-matrix] for additional information about previous releases of the module.
 
@@ -56,7 +56,7 @@ Check the [compatibility matrix][compatibility-matrix] for additional informatio
 ```yaml
 roles:
   - name: on-premises
-    version: v1.26.7
+    version: v1.27.6
 ```
 
 > See `furyctl` [documentation][furyctl-repo] for additional details about `Furyfile.yml` format.

diff --git a/docs/COMPATIBILITY_MATRIX.md b/docs/COMPATIBILITY_MATRIX.md
@@ -1,17 +1,17 @@
 # Compatibility Matrix
 
-| Module Version / Kubernetes Version |       1.26.7       |       1.26.3       |      1.25.12       |       1.25.6       |      1.24.16       |       1.24.7       |      1.23.12       |      1.22.13       |      1.21.14       |      1.20.15       |  1.19.X   |
-| ----------------------------------- | :----------------: | :----------------: | :----------------: | :----------------: | :----------------: | :----------------: | :----------------: | :----------------: | :----------------: | :----------------: | :-------: |
-| v1.21.14                            |                    |                    |                    |                    |                    |                    |                    |                    | :white_check_mark: | :white_check_mark: |           |
-| v1.22.13                            |                    |                    |                    |                    |                    |                    |                    |     :warning:      |     :warning:      |                    |           |
-| v1.23.12                            |                    |                    |                    |                    |                    |                    |     :warning:      |     :warning:      |     :warning:      |                    |           |
-| v1.23.12-rev.1                      |                    |                    |                    |                    |                    |                    | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |           |
-| v1.24.7                             |                    |                    |                    |                    |                    | :white_check_mark: | :white_check_mark: |                    |                    |                    |           |
-| v1.25.6                             |                    | :white_check_mark: |                    | :white_check_mark: |                    | :white_check_mark: | :white_check_mark: |                    |                    |                    |           |
-| v1.26.3                             |                    | :white_check_mark: |                    | :white_check_mark: |                    | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :warning: |
-| v1.26.7                             | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |           |
-| v1.26.7-rev.1                       | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |           |
-
+| Module Version / Kubernetes Version |       1.27.6       |       1.26.7       |       1.26.3       |      1.25.12       |       1.25.6       |      1.24.16       |       1.24.7       |      1.23.12       |      1.22.13       |      1.21.14       |      1.20.15       |  1.19.X   |
+| ----------------------------------- | :----------------: | :----------------: | :----------------: | :----------------: | :----------------: | :----------------: | :----------------: | :----------------: | :----------------: | :----------------: | :----------------: | :-------: |
+| v1.21.14                            |                    |                    |                    |                    |                    |                    |                    |                    |                    | :white_check_mark: | :white_check_mark: |           |
+| v1.22.13                            |                    |                    |                    |                    |                    |                    |                    |                    |     :warning:      |     :warning:      |                    |           |
+| v1.23.12                            |                    |                    |                    |                    |                    |                    |                    |     :warning:      |     :warning:      |     :warning:      |                    |           |
+| v1.23.12-rev.1                      |                    |                    |                    |                    |                    |                    |                    | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |           |
+| v1.24.7                             |                    |                    |                    |                    |                    |                    | :white_check_mark: | :white_check_mark: |                    |                    |                    |           |
+| v1.25.6                             |                    |                    | :white_check_mark: |                    | :white_check_mark: |                    | :white_check_mark: | :white_check_mark: |                    |                    |                    |           |
+| v1.26.3                             |                    |                    | :white_check_mark: |                    | :white_check_mark: |                    | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :warning: |
+| v1.26.7                             | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |           |
+| v1.26.7-rev.1                       | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |           |
+| v1.27.6                             | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |                    |           |
 
 |        Icon        | Legend       |
 | :----------------: | ------------ |

diff --git a/docs/releases/v1.27.6.md b/docs/releases/v1.27.6.md
@@ -0,0 +1,26 @@
+# On Premises add-on module release 1.27.6
+
+Welcome to the latest release of `on-premises` module of [`Kubernetes Fury Distribution`](https://github.com/sighupio/fury-distribution) maintained by SIGHUP team.
+
+This minor release adds the compatibility with Kubernetes 1.27.6.
+
+## Package Versions 🚢
+
+| Package                                        | Supported Version | Previous Version |
+| ---------------------------------------------- | ----------------- | ---------------- |
+| [etcd](roles/etcd)                             | `3.5.8`           | `No update`      |
+| [haproxy](roles/haproxy)                       | `2.6`             | `No update`      |
+| [containerd](roles/containerd)                 | `1.7.0`           | `No update`      |
+| [kube-node-common](roles/kube-node-common)     | `-`               | `Updated`        |
+| [kube-control-plane](roles/kube-control-plane) | `-`               | `Updated`        |
+| [kube-worker](roles/kube-worker)               | `-`               | `Updated`        |
+
+## Update Guide 🦮
+
+In this guide, we will try to summarize the update process from `v1.26.7` to this release.
+
+> NOTE: Each on-premises environment can be different, always double-check before updating components.
+
+1. Update Kubernetes control plane nodes (see the [example playbooks](examples/playbooks))
+2. Update workers (see the [example playbooks](examples/playbooks))
+3. Update KFD if applicable (see the [KFD `1.27.x` release notes](https://github.com/sighupio/fury-distribution/tree/master/docs/releases))
diff --git a/examples/playbooks/1.containerd.yml b/examples/playbooks/1.containerd.yml
@@ -4,6 +4,7 @@
 
 - name: Containerd install
   hosts: master,nodes
+  become: true
   roles:
     - containerd
   tags:

diff --git a/examples/playbooks/100.reset.yml b/examples/playbooks/100.reset.yml
@@ -1,5 +1,6 @@
 - name: Reset Kubernetes cluster
   hosts: master,nodes
+  become: true
   tasks:
     - name: Reset kubeadm
       shell: "kubeadm reset -f"

diff --git a/examples/playbooks/2.loadbalancer.yml b/examples/playbooks/2.loadbalancer.yml
@@ -21,6 +21,8 @@
 - name: Load balancer installation
   hosts: haproxy
   become: true
+  become_method: sudo
+  become_user: root
   roles:
     - haproxy
   tags:

diff --git a/examples/playbooks/3.cluster.yml b/examples/playbooks/3.cluster.yml
@@ -51,13 +51,15 @@
 
 - name: Kubernetes node preparation
   hosts: master,nodes
+  become: true
   roles:
     - kube-node-common
   tags:
     - kube-node-common
 
 - name: etcd cluster preparation
   hosts: master
+  become: true
   vars:
     etcd_address: "{{ ansible_host }}"
   roles:
@@ -67,6 +69,7 @@
 
 - name: Control plane configuration
   hosts: master
+  become: true
   serial: 1
   roles:
     - kube-control-plane
@@ -75,6 +78,7 @@
 
 - name: Kubernetes join nodes
   hosts: nodes
+  become: true
   vars:
     kubernetes_bootstrap_token: "{{ hostvars[groups.master[0]].kubernetes_bootstrap_token.stdout }}"
     kubernetes_ca_hash: "{{ hostvars[groups.master[0]].kubernetes_ca_hash.stdout }}"

diff --git a/examples/playbooks/55.upgrade-control-plane.yml b/examples/playbooks/55.upgrade-control-plane.yml
@@ -1,6 +1,7 @@
 ---
 - name: Upgrade etcd
   hosts: master
+  become: true
   serial: 1
   roles:
     - etcd
@@ -9,6 +10,7 @@
 
 - name: Control plane upgrade
   hosts: master
+  become: true
   serial: 1
   vars:
     skip_kubelet_upgrade: true
@@ -21,6 +23,7 @@
 
 - name: Kubelet and Containerd upgrade
   hosts: master
+  become: true
   serial: 1
   vars:
     skip_kubelet_upgrade: false

diff --git a/examples/playbooks/56.upgrade-worker-nodes.yml b/examples/playbooks/56.upgrade-worker-nodes.yml
@@ -1,5 +1,6 @@
 - name: Kubernetes node preparation
   hosts: nodes
+  become: true
   vars:
     skip_kubelet_upgrade: True
   roles:
@@ -19,12 +20,14 @@
 
 - name: Kubernetes kubeadm upgrade node
   hosts: nodes
+  become: true
   tasks:
     - name: Upgrade kubelet config
       shell: "kubeadm upgrade node"
 
 - name: Kubelet and Containerd upgrade
   hosts: nodes
+  become: true
   vars:
     skip_kubelet_upgrade: False
   roles:

diff --git a/examples/playbooks/hosts.yaml b/examples/playbooks/hosts.yaml
@@ -56,8 +56,9 @@ all:
     ansible_ssh_private_key_file: "../ssh-key"
     ansible_user: root
     kubernetes_kubeconfig_path: ./
-    # kubernetes_version: '1.21.14'
     # kubernetes_version: '1.22.13'
-    kubernetes_version: '1.23.12'
+    # kubernetes_version: '1.23.12'
     # kubernetes_version: '1.24.7'
     # kubernetes_version: "1.25.6"
+    # kubernetes_version: "1.26.7"
+    kubernetes_version: "1.27.6"
diff --git a/roles/containerd/defaults/main.yml b/roles/containerd/defaults/main.yml
@@ -13,15 +13,9 @@ runc_checksum: "sha256:https://github.com/opencontainers/runc/releases/download/
 image_arch: "{{host_architecture | default('amd64')}}"
 
 # Customize versions based on Kubernetes version to maintain compatibility
-kubernetes_version: "1.25.6"
+kubernetes_version: "1.27.6"
 
 versions:
-  1.20.15:
-    containerd_version: "1.5.8"
-    runc_version: "v1.0.3"
-  1.21.14:
-    containerd_version: "1.5.8"
-    runc_version: "v1.0.3"
   1.22.13:
     containerd_version: "1.5.8"
     runc_version: "v1.0.3"
@@ -46,6 +40,9 @@ versions:
   1.26.7:
     containerd_version: "1.7.0"
     runc_version: "v1.1.7"
+  1.27.6:
+    containerd_version: "1.7.0"
+    runc_version: "v1.1.7"
 
 # Service options.
 containerd_service_state: started

diff --git a/roles/etcd/templates/kubeadm-etcd.yml.j2 b/roles/etcd/templates/kubeadm-etcd.yml.j2
@@ -1,5 +1,5 @@
 ---
-apiVersion: kubeadm.k8s.io/v1beta2
+apiVersion: kubeadm.k8s.io/v1beta3
 kind: ClusterConfiguration
 etcd:
   local:

diff --git a/roles/haproxy/templates/keepalived.conf.j2 b/roles/haproxy/templates/keepalived.conf.j2
@@ -4,7 +4,7 @@
 global_defs {
     router_id LVS_DEVEL
     enable_script_security
-    script_user {{ ansible_user }}
+    script_user root
 }
 
 {% if keepalived_on_k8s_master %}

diff --git a/roles/kube-control-plane/defaults/main.yml b/roles/kube-control-plane/defaults/main.yml
@@ -15,7 +15,7 @@ kubernetes_api_SAN:
   - localhost
   - kubernetes.local
 kubernetes_control_plane_address: "{{ ansible_hostname }}"
-kubernetes_version: "1.26.7"
+kubernetes_version: "1.27.6"
 kubernetes_image_registry: "{{ dependencies[kubernetes_version].kubernetes_image_registry }}"
 coredns_image_prefix: "{{ dependencies[kubernetes_version].coredns_image_prefix | default('/coredns') }}"
 kubernetes_hostname: "{{ ansible_fqdn }}"
@@ -43,8 +43,6 @@ upgrade: False
 
 dependencies:
   # To pin dependencies for each Kubernetes version
-  "1.21.14":
-    kubernetes_image_registry: "registry.sighup.io/fury/on-premises"
   "1.22.13":
     kubernetes_image_registry: "registry.sighup.io/fury/on-premises"
   "1.23.12":
@@ -61,3 +59,5 @@ dependencies:
     kubernetes_image_registry: "registry.sighup.io/fury/on-premises"
   "1.26.7":
     kubernetes_image_registry: "registry.sighup.io/fury/on-premises"
+  "1.27.6":
+    kubernetes_image_registry: "registry.sighup.io/fury/on-premises"
diff --git a/roles/kube-control-plane/templates/kubeadm.yml.j2 b/roles/kube-control-plane/templates/kubeadm.yml.j2
@@ -1,4 +1,4 @@
-apiVersion: kubeadm.k8s.io/v1beta2
+apiVersion: kubeadm.k8s.io/v1beta3
 kind: InitConfiguration
 nodeRegistration:
   name: {{ kubernetes_hostname }}
@@ -8,7 +8,7 @@ localAPIEndpoint:
   advertiseAddress: {{ kubernetes_apiserver_advertise_address }}
   bindPort: 6443
 ---
-apiVersion: kubeadm.k8s.io/v1beta2
+apiVersion: kubeadm.k8s.io/v1beta3
 kind: ClusterConfiguration
 etcd:
   external:
@@ -22,7 +22,6 @@ kubernetesVersion: {{ kubernetes_version }}
 imageRepository: "{{ kubernetes_image_registry }}"
 controlPlaneEndpoint: {{ kubernetes_control_plane_address }}
 dns:
-  type: CoreDNS
 {% if coredns_image_prefix != "" %}
   imageRepository: {{ kubernetes_image_registry }}{{ coredns_image_prefix }}
 {% endif %}

diff --git a/roles/kube-node-common/defaults/main.yml b/roles/kube-node-common/defaults/main.yml
@@ -2,7 +2,7 @@
 # Kubernetes components versions
 kubernetes_repo_distribution: "xenial"
 
-kubernetes_version: "1.26.7"
+kubernetes_version: "1.27.6"
 kubelet_version: "{{ kubernetes_version }}"
 kubectl_version: "{{ kubernetes_version }}"
 kubeadm_version: "{{ kubernetes_version }}"
@@ -15,12 +15,6 @@ skip_kubelet_upgrade: False
 
 dependencies:
   # To pin dependencies for each Kubernetes version
-  "1.19.16":
-    critools_version: "1.25.0"
-  "1.20.15":
-    critools_version: "1.25.0"
-  "1.21.14":
-    critools_version: "1.25.0"
   "1.22.13":
     critools_version: "1.25.0"
   "1.23.12":
@@ -37,3 +31,5 @@ dependencies:
     critools_version: "1.26.0"
   "1.26.7":
     critools_version: "1.26.0"
+  "1.27.6":
+    critools_version: "1.26.0"
diff --git a/roles/kube-worker/templates/kubeadm.yml.j2 b/roles/kube-worker/templates/kubeadm.yml.j2
@@ -1,4 +1,4 @@
-apiVersion: kubeadm.k8s.io/v1beta2
+apiVersion: kubeadm.k8s.io/v1beta3
 kind: JoinConfiguration
 discovery:
   bootstrapToken: