From 086c1504c51388094f9a03640237d38bf7faea0d Mon Sep 17 00:00:00 2001 From: okozachenko1203 Date: Fri, 3 May 2024 00:11:57 +1000 Subject: [PATCH 01/10] update patch versions and add zuul CI jobs for new versions --- magnum_cluster_api/cmd/image_builder.py | 2 +- zuul.d/jobs-flatcar.yaml | 40 +++++++++++++++++++++---- zuul.d/jobs-rockylinux-8.yaml | 40 +++++++++++++++++++++---- zuul.d/jobs-rockylinux-9.yaml | 40 +++++++++++++++++++++---- 4 files changed, 106 insertions(+), 16 deletions(-) diff --git a/magnum_cluster_api/cmd/image_builder.py b/magnum_cluster_api/cmd/image_builder.py index 4c301f77..73c545cc 100644 --- a/magnum_cluster_api/cmd/image_builder.py +++ b/magnum_cluster_api/cmd/image_builder.py @@ -59,7 +59,7 @@ def validate_version(_, __, value): @click.option( "--version", show_default=True, - default="v1.27.8", + default="v1.29.4", callback=validate_version, help="Kubernetes version", ) diff --git a/zuul.d/jobs-flatcar.yaml b/zuul.d/jobs-flatcar.yaml index bdf05a85..80cae72c 100644 --- a/zuul.d/jobs-flatcar.yaml +++ b/zuul.d/jobs-flatcar.yaml @@ -15,19 +15,49 @@ image_os_distro: flatcar - job: - name: magnum-cluster-api-image-build-flatcar-v1.27.8 + name: magnum-cluster-api-image-build-flatcar-v1.27.13 parent: magnum-cluster-api-image-build-flatcar vars: - kube_tag: v1.27.8 + kube_tag: v1.27.13 - job: - name: magnum-cluster-api-sonobuoy-flatcar-v1.27.8 + name: magnum-cluster-api-sonobuoy-flatcar-v1.27.13 parent: magnum-cluster-api-sonobuoy-flatcar dependencies: - - name: magnum-cluster-api-image-build-flatcar-v1.27.8 + - name: magnum-cluster-api-image-build-flatcar-v1.27.13 soft: true vars: - kube_tag: v1.27.8 + kube_tag: v1.27.13 + +- job: + name: magnum-cluster-api-image-build-flatcar-v1.28.9 + parent: magnum-cluster-api-image-build-flatcar + vars: + kube_tag: v1.28.9 + +- job: + name: magnum-cluster-api-sonobuoy-flatcar-v1.28.9 + parent: magnum-cluster-api-sonobuoy-flatcar + dependencies: + - name: magnum-cluster-api-image-build-flatcar-v1.28.9 + soft: true + vars: + kube_tag: v1.28.9 + +- job: + name: magnum-cluster-api-image-build-flatcar-v1.29.4 + parent: magnum-cluster-api-image-build-flatcar + vars: + kube_tag: v1.29.4 + +- job: + name: magnum-cluster-api-sonobuoy-flatcar-v1.29.4 + parent: magnum-cluster-api-sonobuoy-flatcar + dependencies: + - name: magnum-cluster-api-image-build-flatcar-v1.29.4 + soft: true + vars: + kube_tag: v1.29.4 - job: name: magnum-cluster-api-sonobuoy-flatcar-v1.27.8-calico diff --git a/zuul.d/jobs-rockylinux-8.yaml b/zuul.d/jobs-rockylinux-8.yaml index adf86ab4..a4db22bd 100644 --- a/zuul.d/jobs-rockylinux-8.yaml +++ b/zuul.d/jobs-rockylinux-8.yaml @@ -15,19 +15,49 @@ image_os_distro: ubuntu - job: - name: magnum-cluster-api-image-build-rockylinux-8-v1.27.8 + name: magnum-cluster-api-image-build-rockylinux-8-v1.27.13 parent: magnum-cluster-api-image-build-rockylinux-8 vars: - kube_tag: v1.27.8 + kube_tag: v1.27.13 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.8 + name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.13 parent: magnum-cluster-api-sonobuoy-rockylinux-8 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-8-v1.27.8 + - name: magnum-cluster-api-image-build-rockylinux-8-v1.27.13 soft: true vars: - kube_tag: v1.27.8 + kube_tag: v1.27.13 + +- job: + name: magnum-cluster-api-image-build-rockylinux-8-v1.28.9 + parent: magnum-cluster-api-image-build-rockylinux-8 + vars: + kube_tag: v1.28.9 + +- job: + name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.28.9 + parent: magnum-cluster-api-sonobuoy-rockylinux-8 + dependencies: + - name: magnum-cluster-api-image-build-rockylinux-8-v1.28.9 + soft: true + vars: + kube_tag: v1.28.9 + +- job: + name: magnum-cluster-api-image-build-rockylinux-8-v1.29.4 + parent: magnum-cluster-api-image-build-rockylinux-8 + vars: + kube_tag: v1.29.4 + +- job: + name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.29.4 + parent: magnum-cluster-api-sonobuoy-rockylinux-8 + dependencies: + - name: magnum-cluster-api-image-build-rockylinux-8-v1.29.4 + soft: true + vars: + kube_tag: v1.29.4 - job: name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.8-calico diff --git a/zuul.d/jobs-rockylinux-9.yaml b/zuul.d/jobs-rockylinux-9.yaml index 1015e148..612d3324 100644 --- a/zuul.d/jobs-rockylinux-9.yaml +++ b/zuul.d/jobs-rockylinux-9.yaml @@ -15,19 +15,49 @@ image_os_distro: ubuntu - job: - name: magnum-cluster-api-image-build-rockylinux-9-v1.27.8 + name: magnum-cluster-api-image-build-rockylinux-9-v1.27.13 parent: magnum-cluster-api-image-build-rockylinux-9 vars: - kube_tag: v1.27.8 + kube_tag: v1.27.13 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.8 + name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.13 parent: magnum-cluster-api-sonobuoy-rockylinux-9 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-9-v1.27.8 + - name: magnum-cluster-api-image-build-rockylinux-9-v1.27.13 soft: true vars: - kube_tag: v1.27.8 + kube_tag: v1.27.13 + +- job: + name: magnum-cluster-api-image-build-rockylinux-9-v1.28.9 + parent: magnum-cluster-api-image-build-rockylinux-9 + vars: + kube_tag: v1.28.9 + +- job: + name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.28.9 + parent: magnum-cluster-api-sonobuoy-rockylinux-9 + dependencies: + - name: magnum-cluster-api-image-build-rockylinux-9-v1.28.9 + soft: true + vars: + kube_tag: v1.28.9 + +- job: + name: magnum-cluster-api-image-build-rockylinux-9-v1.29.4 + parent: magnum-cluster-api-image-build-rockylinux-9 + vars: + kube_tag: v1.29.4 + +- job: + name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.29.4 + parent: magnum-cluster-api-sonobuoy-rockylinux-9 + dependencies: + - name: magnum-cluster-api-image-build-rockylinux-9-v1.29.4 + soft: true + vars: + kube_tag: v1.29.4 - job: name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.8-calico From 14b9f57b6de854ebac8386a489df0f47840db3ba Mon Sep 17 00:00:00 2001 From: Mohammed Naser Date: Fri, 7 Jun 2024 11:14:09 -0400 Subject: [PATCH 02/10] Use cloud images as base Signed-off-by: Mohammed Naser --- magnum_cluster_api/cmd/image_builder.py | 3 ++- zuul.d/playbooks/image-build/run.yml | 2 ++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/magnum_cluster_api/cmd/image_builder.py b/magnum_cluster_api/cmd/image_builder.py index 73c545cc..fff9df7d 100644 --- a/magnum_cluster_api/cmd/image_builder.py +++ b/magnum_cluster_api/cmd/image_builder.py @@ -35,6 +35,7 @@ QEMU_PACKAGES = [ "qemu-kvm", "qemu-utils", + "mkisofs", ] @@ -255,7 +256,7 @@ def main( /usr/bin/make \ -C \ {ib_path}/images/capi \ - build-qemu-{operating_system} + build-qemu-{operating_system}-cloudimg """ ).encode("utf-8"), env={ diff --git a/zuul.d/playbooks/image-build/run.yml b/zuul.d/playbooks/image-build/run.yml index e3923b0f..82db599f 100644 --- a/zuul.d/playbooks/image-build/run.yml +++ b/zuul.d/playbooks/image-build/run.yml @@ -16,3 +16,5 @@ shell: "$HOME/.local/bin/magnum-cluster-api-image-builder --operating-system {{ image_operating_system }} --version {{ kube_tag }}" args: chdir: "{{ zuul_output_dir }}/artifacts" + environment: + CI: "true" From b8dab75a2f27ebd8886e85c21c9f39dcfb66da58 Mon Sep 17 00:00:00 2001 From: Mohammed Naser Date: Fri, 7 Jun 2024 15:59:59 -0400 Subject: [PATCH 03/10] Update versions to build cleanly --- magnum_cluster_api/cmd/image_builder.py | 2 +- zuul.d/jobs-flatcar.yaml | 30 ++++++++++++------------- zuul.d/jobs-rockylinux-8.yaml | 30 ++++++++++++------------- zuul.d/jobs-rockylinux-9.yaml | 30 ++++++++++++------------- 4 files changed, 46 insertions(+), 46 deletions(-) diff --git a/magnum_cluster_api/cmd/image_builder.py b/magnum_cluster_api/cmd/image_builder.py index fff9df7d..cf0c4ea0 100644 --- a/magnum_cluster_api/cmd/image_builder.py +++ b/magnum_cluster_api/cmd/image_builder.py @@ -60,7 +60,7 @@ def validate_version(_, __, value): @click.option( "--version", show_default=True, - default="v1.29.4", + default="v1.29.5", callback=validate_version, help="Kubernetes version", ) diff --git a/zuul.d/jobs-flatcar.yaml b/zuul.d/jobs-flatcar.yaml index 80cae72c..ab93e62f 100644 --- a/zuul.d/jobs-flatcar.yaml +++ b/zuul.d/jobs-flatcar.yaml @@ -15,49 +15,49 @@ image_os_distro: flatcar - job: - name: magnum-cluster-api-image-build-flatcar-v1.27.13 + name: magnum-cluster-api-image-build-flatcar-v1.27.14 parent: magnum-cluster-api-image-build-flatcar vars: - kube_tag: v1.27.13 + kube_tag: v1.27.14 - job: - name: magnum-cluster-api-sonobuoy-flatcar-v1.27.13 + name: magnum-cluster-api-sonobuoy-flatcar-v1.27.14 parent: magnum-cluster-api-sonobuoy-flatcar dependencies: - - name: magnum-cluster-api-image-build-flatcar-v1.27.13 + - name: magnum-cluster-api-image-build-flatcar-v1.27.14 soft: true vars: - kube_tag: v1.27.13 + kube_tag: v1.27.14 - job: - name: magnum-cluster-api-image-build-flatcar-v1.28.9 + name: magnum-cluster-api-image-build-flatcar-v1.28.10 parent: magnum-cluster-api-image-build-flatcar vars: - kube_tag: v1.28.9 + kube_tag: v1.28.10 - job: - name: magnum-cluster-api-sonobuoy-flatcar-v1.28.9 + name: magnum-cluster-api-sonobuoy-flatcar-v1.28.10 parent: magnum-cluster-api-sonobuoy-flatcar dependencies: - - name: magnum-cluster-api-image-build-flatcar-v1.28.9 + - name: magnum-cluster-api-image-build-flatcar-v1.28.10 soft: true vars: - kube_tag: v1.28.9 + kube_tag: v1.28.10 - job: - name: magnum-cluster-api-image-build-flatcar-v1.29.4 + name: magnum-cluster-api-image-build-flatcar-v1.29.5 parent: magnum-cluster-api-image-build-flatcar vars: - kube_tag: v1.29.4 + kube_tag: v1.29.5 - job: - name: magnum-cluster-api-sonobuoy-flatcar-v1.29.4 + name: magnum-cluster-api-sonobuoy-flatcar-v1.29.5 parent: magnum-cluster-api-sonobuoy-flatcar dependencies: - - name: magnum-cluster-api-image-build-flatcar-v1.29.4 + - name: magnum-cluster-api-image-build-flatcar-v1.29.5 soft: true vars: - kube_tag: v1.29.4 + kube_tag: v1.29.5 - job: name: magnum-cluster-api-sonobuoy-flatcar-v1.27.8-calico diff --git a/zuul.d/jobs-rockylinux-8.yaml b/zuul.d/jobs-rockylinux-8.yaml index a4db22bd..98a3e346 100644 --- a/zuul.d/jobs-rockylinux-8.yaml +++ b/zuul.d/jobs-rockylinux-8.yaml @@ -15,49 +15,49 @@ image_os_distro: ubuntu - job: - name: magnum-cluster-api-image-build-rockylinux-8-v1.27.13 + name: magnum-cluster-api-image-build-rockylinux-8-v1.27.14 parent: magnum-cluster-api-image-build-rockylinux-8 vars: - kube_tag: v1.27.13 + kube_tag: v1.27.14 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.13 + name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14 parent: magnum-cluster-api-sonobuoy-rockylinux-8 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-8-v1.27.13 + - name: magnum-cluster-api-image-build-rockylinux-8-v1.27.14 soft: true vars: - kube_tag: v1.27.13 + kube_tag: v1.27.14 - job: - name: magnum-cluster-api-image-build-rockylinux-8-v1.28.9 + name: magnum-cluster-api-image-build-rockylinux-8-v1.28.10 parent: magnum-cluster-api-image-build-rockylinux-8 vars: - kube_tag: v1.28.9 + kube_tag: v1.28.10 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.28.9 + name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.28.10 parent: magnum-cluster-api-sonobuoy-rockylinux-8 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-8-v1.28.9 + - name: magnum-cluster-api-image-build-rockylinux-8-v1.28.10 soft: true vars: - kube_tag: v1.28.9 + kube_tag: v1.28.10 - job: - name: magnum-cluster-api-image-build-rockylinux-8-v1.29.4 + name: magnum-cluster-api-image-build-rockylinux-8-v1.29.5 parent: magnum-cluster-api-image-build-rockylinux-8 vars: - kube_tag: v1.29.4 + kube_tag: v1.29.5 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.29.4 + name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.29.5 parent: magnum-cluster-api-sonobuoy-rockylinux-8 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-8-v1.29.4 + - name: magnum-cluster-api-image-build-rockylinux-8-v1.29.5 soft: true vars: - kube_tag: v1.29.4 + kube_tag: v1.29.5 - job: name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.8-calico diff --git a/zuul.d/jobs-rockylinux-9.yaml b/zuul.d/jobs-rockylinux-9.yaml index 612d3324..a27b47c6 100644 --- a/zuul.d/jobs-rockylinux-9.yaml +++ b/zuul.d/jobs-rockylinux-9.yaml @@ -15,49 +15,49 @@ image_os_distro: ubuntu - job: - name: magnum-cluster-api-image-build-rockylinux-9-v1.27.13 + name: magnum-cluster-api-image-build-rockylinux-9-v1.27.14 parent: magnum-cluster-api-image-build-rockylinux-9 vars: - kube_tag: v1.27.13 + kube_tag: v1.27.14 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.13 + name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14 parent: magnum-cluster-api-sonobuoy-rockylinux-9 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-9-v1.27.13 + - name: magnum-cluster-api-image-build-rockylinux-9-v1.27.14 soft: true vars: - kube_tag: v1.27.13 + kube_tag: v1.27.14 - job: - name: magnum-cluster-api-image-build-rockylinux-9-v1.28.9 + name: magnum-cluster-api-image-build-rockylinux-9-v1.28.10 parent: magnum-cluster-api-image-build-rockylinux-9 vars: - kube_tag: v1.28.9 + kube_tag: v1.28.10 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.28.9 + name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.28.10 parent: magnum-cluster-api-sonobuoy-rockylinux-9 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-9-v1.28.9 + - name: magnum-cluster-api-image-build-rockylinux-9-v1.28.10 soft: true vars: - kube_tag: v1.28.9 + kube_tag: v1.28.10 - job: - name: magnum-cluster-api-image-build-rockylinux-9-v1.29.4 + name: magnum-cluster-api-image-build-rockylinux-9-v1.29.5 parent: magnum-cluster-api-image-build-rockylinux-9 vars: - kube_tag: v1.29.4 + kube_tag: v1.29.5 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.29.4 + name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.29.5 parent: magnum-cluster-api-sonobuoy-rockylinux-9 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-9-v1.29.4 + - name: magnum-cluster-api-image-build-rockylinux-9-v1.29.5 soft: true vars: - kube_tag: v1.29.4 + kube_tag: v1.29.5 - job: name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.8-calico From 7b876408ad77a8b28034931b2feefcb445737245 Mon Sep 17 00:00:00 2001 From: okozachenko1203 Date: Fri, 2 Aug 2024 13:42:07 +1000 Subject: [PATCH 04/10] use kustomize to enable keystone webhook after kubeadm init it does not add the --authorization-* arguments until after kubeadm init run. Once kubeadm init has finished, run kustomize to add the arguments to the kube-apiserver.yaml manifest. ref: https://github.com/kubernetes/cloud-provider-openstack/issues/2575 --- magnum_cluster_api/cmd/image_builder.py | 87 +++++++------------------ magnum_cluster_api/conf.py | 10 +++ magnum_cluster_api/resources.py | 43 ++++++++++-- zuul.d/jobs-flatcar.yaml | 14 ++-- zuul.d/jobs-rockylinux-8.yaml | 15 +++-- zuul.d/jobs-rockylinux-9.yaml | 15 +++-- 6 files changed, 95 insertions(+), 89 deletions(-) diff --git a/magnum_cluster_api/cmd/image_builder.py b/magnum_cluster_api/cmd/image_builder.py index cf0c4ea0..d1d84d39 100644 --- a/magnum_cluster_api/cmd/image_builder.py +++ b/magnum_cluster_api/cmd/image_builder.py @@ -67,7 +67,7 @@ def validate_version(_, __, value): @click.option( "--image-builder-version", show_default=True, - default="v0.1.30", + default="v0.1.31", help="Image builder tag (or commit) to use for building image", ) @click.option( @@ -165,67 +165,30 @@ def main( "node_custom_roles_pre": f"{node_custom_roles_pre}", } - # NOTE(mnaser): We use the latest tested daily ISO for Ubuntu 22.04 in order - # to avoid a lengthy upgrade process. - if operating_system == "ubuntu-2204": - iso = "jammy-live-server-amd64.iso" - - customization["iso_url"] = ( - f"http://cdimage.ubuntu.com/ubuntu-server/jammy/daily-live/current/{iso}" - ) - - # Get the SHA256 sum for the ISO - r = requests.get( - "http://cdimage.ubuntu.com/ubuntu-server/jammy/daily-live/current/SHA256SUMS" - ) - r.raise_for_status() - for line in r.text.splitlines(): - if iso in line: - customization["iso_checksum"] = line.split()[0] - break - - # Assert that we have the checksum - assert "iso_checksum" in customization - - if operating_system == "rockylinux-8": - iso = "Rocky-x86_64-minimal.iso" - - customization["iso_url"] = ( - f"https://download.rockylinux.org/pub/rocky/8/isos/x86_64/{iso}" - ) - - # Get the SHA256 sum for the ISO - r = requests.get( - "https://download.rockylinux.org/pub/rocky/8/isos/x86_64/Rocky-x86_64-minimal.iso.CHECKSUM" - ) - r.raise_for_status() - for line in r.text.splitlines(): - if iso in line and "SHA256" in line: - customization["iso_checksum"] = line.split()[3] - break - - # Assert that we have the checksum - assert "iso_checksum" in customization - - if operating_system == "rockylinux-9": - iso = "Rocky-x86_64-minimal.iso" - - customization["iso_url"] = ( - f"https://download.rockylinux.org/pub/rocky/9/isos/x86_64/{iso}" - ) - - # Get the SHA256 sum for the ISO - r = requests.get( - "https://download.rockylinux.org/pub/rocky/9/isos/x86_64/Rocky-x86_64-minimal.iso.CHECKSUM" - ) - r.raise_for_status() - for line in r.text.splitlines(): - if iso in line and "SHA256" in line: - customization["iso_checksum"] = line.split()[3] - break - - # Assert that we have the checksum - assert "iso_checksum" in customization + # NOTE(mnaser): Inside our CI, we use a local image in order speed up the + # process, so we will not download the image from the internet. + if os.environ.get("CI") == "true": + if operating_system == "ubuntu-2204": + customization["iso_checksum"] = ( + "https://static.atmosphere.dev/ubuntu/jammy/20240605.1/SHA256SUMS" + ) + customization["iso_url"] = ( + "https://static.atmosphere.dev/ubuntu/jammy/20240605.1/jammy-server-cloudimg-amd64.img" + ) + elif operating_system == "rockylinux-8": + customization["iso_checksum"] = ( + "https://static.atmosphere.dev/rocky/8/images/x86_64/CHECKSUM" + ) + customization["iso_url"] = ( + "https://static.atmosphere.dev/rocky/8/images/x86_64/Rocky-8-GenericCloud-Base.latest.x86_64.qcow2" + ) + elif operating_system == "rockylinux-9": + customization["iso_checksum"] = ( + "https://static.atmosphere.dev/rocky/9/images/x86_64/CHECKSUM" + ) + customization["iso_url"] = ( + "https://static.atmosphere.dev/rocky/9/images/x86_64/Rocky-9-GenericCloud-Base.latest.x86_64.qcow2" + ) # NOTE(mnaser): Let's set number of CPUs to equal the number of CPUs on the # host to speed up the build process. diff --git a/magnum_cluster_api/conf.py b/magnum_cluster_api/conf.py index a3418a65..ea88ebcf 100644 --- a/magnum_cluster_api/conf.py +++ b/magnum_cluster_api/conf.py @@ -69,6 +69,16 @@ default="$image_repository/cluster-autoscaler:v1.28.5", help="Image for the cluster auto-scaler for Kubernetes v1.28.", ), + cfg.StrOpt( + "v1_29_image", + default="$image_repository/cluster-autoscaler:v1.29.3", + help="Image for the cluster auto-scaler for Kubernetes v1.29.", + ), + cfg.StrOpt( + "v1_30_image", + default="$image_repository/cluster-autoscaler:v1.30.1", + help="Image for the cluster auto-scaler for Kubernetes v1.30.", + ), ] diff --git a/magnum_cluster_api/resources.py b/magnum_cluster_api/resources.py index 8f5538f1..1b8289eb 100644 --- a/magnum_cluster_api/resources.py +++ b/magnum_cluster_api/resources.py @@ -736,6 +736,9 @@ def get_object(self) -> objects.KubeadmControlPlaneTemplate: "rm /var/lib/etcd/lost+found -rf", "bash /run/kubeadm/configure-kube-proxy.sh", ], + "postKubeadmCommands": [ + "echo PLACEHOLDER", + ], }, }, }, @@ -1999,18 +2002,46 @@ def get_object(self) -> objects.ClusterClass: "jsonPatches": [ { "op": "add", - "path": "/spec/template/spec/kubeadmConfigSpec/clusterConfiguration/apiServer/extraArgs/authentication-token-webhook-config-file", # noqa: E501 - "value": "/etc/kubernetes/webhooks/webhookconfig.yaml", + "path": "/spec/template/spec/kubeadmConfigSpec/files/-", + "value": { + "path": "/etc/kubernetes/keystone-kustomization/kustomization.yml", + "permissions": "0644", + "owner": "root:root", + "content": textwrap.dedent( + """\ + resources: + - kube-apiserver.yaml + patches: + - patch: |- + - op: add + path: /spec/containers/0/command/- + value: --authentication-token-webhook-config-file=/etc/kubernetes/webhooks/webhookconfig.yaml + - op: add + path: /spec/containers/0/command/- + value: --authorization-webhook-config-file=/etc/kubernetes/webhooks/webhookconfig.yaml + - op: add + path: /spec/containers/0/command/- + value: --authorization-mode=Node,RBAC,Webhook + target: + kind: Pod + """ + ), + }, + }, + { + "op": "add", + "path": "/spec/template/spec/kubeadmConfigSpec/preKubeadmCommands/-", + "value": "mkdir /etc/kubernetes/keystone-kustomization", }, { "op": "add", - "path": "/spec/template/spec/kubeadmConfigSpec/clusterConfiguration/apiServer/extraArgs/authorization-webhook-config-file", # noqa: E501 - "value": "/etc/kubernetes/webhooks/webhookconfig.yaml", + "path": "/spec/template/spec/kubeadmConfigSpec/postKubeadmCommands/-", + "value": "cp /etc/kubernetes/manifests/kube-apiserver.yaml /etc/kubernetes/keystone-kustomization/kube-apiserver.yaml", }, { "op": "add", - "path": "/spec/template/spec/kubeadmConfigSpec/clusterConfiguration/apiServer/extraArgs/authorization-mode", # noqa: E501 - "value": "Node,RBAC,Webhook", + "path": "/spec/template/spec/kubeadmConfigSpec/postKubeadmCommands/-", + "value": "kubectl kustomize /etc/kubernetes/keystone-kustomization -o /etc/kubernetes/manifests/kube-apiserver.yaml", }, ], } diff --git a/zuul.d/jobs-flatcar.yaml b/zuul.d/jobs-flatcar.yaml index ab93e62f..0a247c4b 100644 --- a/zuul.d/jobs-flatcar.yaml +++ b/zuul.d/jobs-flatcar.yaml @@ -60,14 +60,14 @@ kube_tag: v1.29.5 - job: - name: magnum-cluster-api-sonobuoy-flatcar-v1.27.8-calico - parent: magnum-cluster-api-sonobuoy-flatcar-v1.27.8 + name: magnum-cluster-api-sonobuoy-flatcar-v1.27.14-calico + parent: magnum-cluster-api-sonobuoy-flatcar-v1.27.14 vars: network_driver: calico - job: - name: magnum-cluster-api-sonobuoy-flatcar-v1.27.8-cilium - parent: magnum-cluster-api-sonobuoy-flatcar-v1.27.8 + name: magnum-cluster-api-sonobuoy-flatcar-v1.27.14-cilium + parent: magnum-cluster-api-sonobuoy-flatcar-v1.27.14 vars: network_driver: cilium @@ -75,6 +75,6 @@ name: magnum-cluster-api-flatcar check: jobs: - - magnum-cluster-api-image-build-flatcar-v1.27.8 - - magnum-cluster-api-sonobuoy-flatcar-v1.27.8-calico - - magnum-cluster-api-sonobuoy-flatcar-v1.27.8-cilium + - magnum-cluster-api-image-build-flatcar-v1.27.14 + - magnum-cluster-api-sonobuoy-flatcar-v1.27.14-calico + - magnum-cluster-api-sonobuoy-flatcar-v1.27.14-cilium diff --git a/zuul.d/jobs-rockylinux-8.yaml b/zuul.d/jobs-rockylinux-8.yaml index 98a3e346..d13b43eb 100644 --- a/zuul.d/jobs-rockylinux-8.yaml +++ b/zuul.d/jobs-rockylinux-8.yaml @@ -60,14 +60,14 @@ kube_tag: v1.29.5 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.8-calico - parent: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.8 + name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14-calico + parent: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14 vars: network_driver: calico - job: - name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.8-cilium - parent: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.8 + name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14-cilium + parent: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14 vars: network_driver: cilium @@ -75,6 +75,7 @@ name: magnum-cluster-api-rockylinux-8 check: jobs: - - magnum-cluster-api-image-build-rockylinux-8-v1.27.8 - - magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.8-calico - - magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.8-cilium + - magnum-cluster-api-image-build-rockylinux-8-v1.27.14 + - magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14-calico + - magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14-cilium + diff --git a/zuul.d/jobs-rockylinux-9.yaml b/zuul.d/jobs-rockylinux-9.yaml index a27b47c6..8ed2e56d 100644 --- a/zuul.d/jobs-rockylinux-9.yaml +++ b/zuul.d/jobs-rockylinux-9.yaml @@ -60,14 +60,14 @@ kube_tag: v1.29.5 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.8-calico - parent: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.8 + name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14-calico + parent: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14 vars: network_driver: calico - job: - name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.8-cilium - parent: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.8 + name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14-cilium + parent: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14 vars: network_driver: cilium @@ -75,6 +75,7 @@ name: magnum-cluster-api-rockylinux-9 check: jobs: - - magnum-cluster-api-image-build-rockylinux-9-v1.27.8 - - magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.8-calico - - magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.8-cilium + - magnum-cluster-api-image-build-rockylinux-9-v1.27.14 + - magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14-calico + - magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14-cilium + From 57f525494a12927cd33b866f4296d3d506c90e78 Mon Sep 17 00:00:00 2001 From: okozachenko1203 Date: Sat, 3 Aug 2024 00:00:05 +1000 Subject: [PATCH 05/10] fix lint error and add 1.29 and 1.30 jobs --- magnum_cluster_api/resources.py | 8 +++---- zuul.d/jobs-ubuntu-2204.yaml | 42 +++++++++++++++++++++++++++++++++ 2 files changed, 46 insertions(+), 4 deletions(-) diff --git a/magnum_cluster_api/resources.py b/magnum_cluster_api/resources.py index 1b8289eb..90af01f9 100644 --- a/magnum_cluster_api/resources.py +++ b/magnum_cluster_api/resources.py @@ -2015,10 +2015,10 @@ def get_object(self) -> objects.ClusterClass: - patch: |- - op: add path: /spec/containers/0/command/- - value: --authentication-token-webhook-config-file=/etc/kubernetes/webhooks/webhookconfig.yaml + value: --authentication-token-webhook-config-file=/etc/kubernetes/webhooks/webhookconfig.yaml # noqa: E501 - op: add path: /spec/containers/0/command/- - value: --authorization-webhook-config-file=/etc/kubernetes/webhooks/webhookconfig.yaml + value: --authorization-webhook-config-file=/etc/kubernetes/webhooks/webhookconfig.yaml # noqa: E501 - op: add path: /spec/containers/0/command/- value: --authorization-mode=Node,RBAC,Webhook @@ -2036,12 +2036,12 @@ def get_object(self) -> objects.ClusterClass: { "op": "add", "path": "/spec/template/spec/kubeadmConfigSpec/postKubeadmCommands/-", - "value": "cp /etc/kubernetes/manifests/kube-apiserver.yaml /etc/kubernetes/keystone-kustomization/kube-apiserver.yaml", + "value": "cp /etc/kubernetes/manifests/kube-apiserver.yaml /etc/kubernetes/keystone-kustomization/kube-apiserver.yaml", # noqa: E501 }, { "op": "add", "path": "/spec/template/spec/kubeadmConfigSpec/postKubeadmCommands/-", - "value": "kubectl kustomize /etc/kubernetes/keystone-kustomization -o /etc/kubernetes/manifests/kube-apiserver.yaml", + "value": "kubectl kustomize /etc/kubernetes/keystone-kustomization -o /etc/kubernetes/manifests/kube-apiserver.yaml", # noqa: E501 }, ], } diff --git a/zuul.d/jobs-ubuntu-2204.yaml b/zuul.d/jobs-ubuntu-2204.yaml index e81c184a..bec469b2 100644 --- a/zuul.d/jobs-ubuntu-2204.yaml +++ b/zuul.d/jobs-ubuntu-2204.yaml @@ -44,6 +44,44 @@ vars: network_driver: cilium +- job: + name: magnum-cluster-api-sonobuoy-ubuntu-2204-v1.29.6 + parent: magnum-cluster-api-sonobuoy-ubuntu-2204 + vars: + kube_tag: v1.29.6 + image_url: https://static.atmosphere.dev/artifacts/magnum-cluster-api/ubuntu-jammy-kubernetes-1-29-6-1720107687.qcow2 + +- job: + name: magnum-cluster-api-sonobuoy-ubuntu-2204-v1.29.6-calico + parent: magnum-cluster-api-sonobuoy-ubuntu-2204-v1.29.6 + vars: + network_driver: calico + +- job: + name: magnum-cluster-api-sonobuoy-ubuntu-2204-v1.29.6-cilium + parent: magnum-cluster-api-sonobuoy-ubuntu-2204-v1.29.6 + vars: + network_driver: cilium + +- job: + name: magnum-cluster-api-sonobuoy-ubuntu-2204-v1.30.2 + parent: magnum-cluster-api-sonobuoy-ubuntu-2204 + vars: + kube_tag: v1.30.2 + image_url: https://static.atmosphere.dev/artifacts/magnum-cluster-api/ubuntu-jammy-kubernetes-1-30-2-1720107688.qcow2 + +- job: + name: magnum-cluster-api-sonobuoy-ubuntu-2204-v1.30.2-calico + parent: magnum-cluster-api-sonobuoy-ubuntu-2204-v1.30.2 + vars: + network_driver: calico + +- job: + name: magnum-cluster-api-sonobuoy-ubuntu-2204-v1.30.2-cilium + parent: magnum-cluster-api-sonobuoy-ubuntu-2204-v1.30.2 + vars: + network_driver: cilium + - project-template: name: magnum-cluster-api-ubuntu-2204 check: @@ -52,3 +90,7 @@ - magnum-cluster-api-sonobuoy-ubuntu-2204-v1.27.15-cilium - magnum-cluster-api-sonobuoy-ubuntu-2204-v1.28.11-calico - magnum-cluster-api-sonobuoy-ubuntu-2204-v1.28.11-cilium + - magnum-cluster-api-sonobuoy-ubuntu-2204-v1.29.6-calico + - magnum-cluster-api-sonobuoy-ubuntu-2204-v1.29.6-cilium + - magnum-cluster-api-sonobuoy-ubuntu-2204-v1.30.2-calico + - magnum-cluster-api-sonobuoy-ubuntu-2204-v1.30.2-cilium From 09d69dc8be905634053c0458e81ad286219fd342 Mon Sep 17 00:00:00 2001 From: okozachenko1203 Date: Mon, 5 Aug 2024 20:22:50 +1000 Subject: [PATCH 06/10] append webhook authz mode only to avoid duplication with defaults api-server sets Node and RBAC as default authz modes in its command args. And does not allow the mode specified more than once. --- magnum_cluster_api/resources.py | 29 ++++++++++++---------- zuul.d/jobs-flatcar.yaml | 44 ++++++++++++++++----------------- zuul.d/jobs-rockylinux-8.yaml | 44 ++++++++++++++++----------------- zuul.d/jobs-rockylinux-9.yaml | 44 ++++++++++++++++----------------- 4 files changed, 82 insertions(+), 79 deletions(-) diff --git a/magnum_cluster_api/resources.py b/magnum_cluster_api/resources.py index 90af01f9..5b6c1d9c 100644 --- a/magnum_cluster_api/resources.py +++ b/magnum_cluster_api/resources.py @@ -2010,20 +2010,23 @@ def get_object(self) -> objects.ClusterClass: "content": textwrap.dedent( """\ resources: - - kube-apiserver.yaml + - kube-apiserver.yaml patches: - - patch: |- - - op: add - path: /spec/containers/0/command/- - value: --authentication-token-webhook-config-file=/etc/kubernetes/webhooks/webhookconfig.yaml # noqa: E501 - - op: add - path: /spec/containers/0/command/- - value: --authorization-webhook-config-file=/etc/kubernetes/webhooks/webhookconfig.yaml # noqa: E501 - - op: add - path: /spec/containers/0/command/- - value: --authorization-mode=Node,RBAC,Webhook - target: - kind: Pod + - target: + group: "" + version: v1 + kind: Pod + name: kube-apiserver + patch: |- + - op: add + path: /spec/containers/0/command/- + value: --authentication-token-webhook-config-file=/etc/kubernetes/webhooks/webhookconfig.yaml # noqa: E501 + - op: add + path: /spec/containers/0/command/- + value: --authorization-webhook-config-file=/etc/kubernetes/webhooks/webhookconfig.yaml # noqa: E501 + - op: add + path: /spec/containers/0/command/- + value: --authorization-mode=Webhook """ ), }, diff --git a/zuul.d/jobs-flatcar.yaml b/zuul.d/jobs-flatcar.yaml index 0a247c4b..7bbfd416 100644 --- a/zuul.d/jobs-flatcar.yaml +++ b/zuul.d/jobs-flatcar.yaml @@ -15,59 +15,59 @@ image_os_distro: flatcar - job: - name: magnum-cluster-api-image-build-flatcar-v1.27.14 + name: magnum-cluster-api-image-build-flatcar-v1.27.15 parent: magnum-cluster-api-image-build-flatcar vars: - kube_tag: v1.27.14 + kube_tag: v1.27.15 - job: - name: magnum-cluster-api-sonobuoy-flatcar-v1.27.14 + name: magnum-cluster-api-sonobuoy-flatcar-v1.27.15 parent: magnum-cluster-api-sonobuoy-flatcar dependencies: - - name: magnum-cluster-api-image-build-flatcar-v1.27.14 + - name: magnum-cluster-api-image-build-flatcar-v1.27.15 soft: true vars: - kube_tag: v1.27.14 + kube_tag: v1.27.15 - job: - name: magnum-cluster-api-image-build-flatcar-v1.28.10 + name: magnum-cluster-api-image-build-flatcar-v1.28.11 parent: magnum-cluster-api-image-build-flatcar vars: - kube_tag: v1.28.10 + kube_tag: v1.28.11 - job: - name: magnum-cluster-api-sonobuoy-flatcar-v1.28.10 + name: magnum-cluster-api-sonobuoy-flatcar-v1.28.11 parent: magnum-cluster-api-sonobuoy-flatcar dependencies: - - name: magnum-cluster-api-image-build-flatcar-v1.28.10 + - name: magnum-cluster-api-image-build-flatcar-v1.28.11 soft: true vars: - kube_tag: v1.28.10 + kube_tag: v1.28.11 - job: - name: magnum-cluster-api-image-build-flatcar-v1.29.5 + name: magnum-cluster-api-image-build-flatcar-v1.29.6 parent: magnum-cluster-api-image-build-flatcar vars: - kube_tag: v1.29.5 + kube_tag: v1.29.6 - job: - name: magnum-cluster-api-sonobuoy-flatcar-v1.29.5 + name: magnum-cluster-api-sonobuoy-flatcar-v1.29.6 parent: magnum-cluster-api-sonobuoy-flatcar dependencies: - - name: magnum-cluster-api-image-build-flatcar-v1.29.5 + - name: magnum-cluster-api-image-build-flatcar-v1.29.6 soft: true vars: - kube_tag: v1.29.5 + kube_tag: v1.29.6 - job: - name: magnum-cluster-api-sonobuoy-flatcar-v1.27.14-calico - parent: magnum-cluster-api-sonobuoy-flatcar-v1.27.14 + name: magnum-cluster-api-sonobuoy-flatcar-v1.27.15-calico + parent: magnum-cluster-api-sonobuoy-flatcar-v1.27.15 vars: network_driver: calico - job: - name: magnum-cluster-api-sonobuoy-flatcar-v1.27.14-cilium - parent: magnum-cluster-api-sonobuoy-flatcar-v1.27.14 + name: magnum-cluster-api-sonobuoy-flatcar-v1.27.15-cilium + parent: magnum-cluster-api-sonobuoy-flatcar-v1.27.15 vars: network_driver: cilium @@ -75,6 +75,6 @@ name: magnum-cluster-api-flatcar check: jobs: - - magnum-cluster-api-image-build-flatcar-v1.27.14 - - magnum-cluster-api-sonobuoy-flatcar-v1.27.14-calico - - magnum-cluster-api-sonobuoy-flatcar-v1.27.14-cilium + - magnum-cluster-api-image-build-flatcar-v1.27.15 + - magnum-cluster-api-sonobuoy-flatcar-v1.27.15-calico + - magnum-cluster-api-sonobuoy-flatcar-v1.27.15-cilium diff --git a/zuul.d/jobs-rockylinux-8.yaml b/zuul.d/jobs-rockylinux-8.yaml index d13b43eb..975b0c46 100644 --- a/zuul.d/jobs-rockylinux-8.yaml +++ b/zuul.d/jobs-rockylinux-8.yaml @@ -15,59 +15,59 @@ image_os_distro: ubuntu - job: - name: magnum-cluster-api-image-build-rockylinux-8-v1.27.14 + name: magnum-cluster-api-image-build-rockylinux-8-v1.27.15 parent: magnum-cluster-api-image-build-rockylinux-8 vars: - kube_tag: v1.27.14 + kube_tag: v1.27.15 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14 + name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.15 parent: magnum-cluster-api-sonobuoy-rockylinux-8 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-8-v1.27.14 + - name: magnum-cluster-api-image-build-rockylinux-8-v1.27.15 soft: true vars: - kube_tag: v1.27.14 + kube_tag: v1.27.15 - job: - name: magnum-cluster-api-image-build-rockylinux-8-v1.28.10 + name: magnum-cluster-api-image-build-rockylinux-8-v1.28.11 parent: magnum-cluster-api-image-build-rockylinux-8 vars: - kube_tag: v1.28.10 + kube_tag: v1.28.11 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.28.10 + name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.28.11 parent: magnum-cluster-api-sonobuoy-rockylinux-8 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-8-v1.28.10 + - name: magnum-cluster-api-image-build-rockylinux-8-v1.28.11 soft: true vars: - kube_tag: v1.28.10 + kube_tag: v1.28.11 - job: - name: magnum-cluster-api-image-build-rockylinux-8-v1.29.5 + name: magnum-cluster-api-image-build-rockylinux-8-v1.29.6 parent: magnum-cluster-api-image-build-rockylinux-8 vars: - kube_tag: v1.29.5 + kube_tag: v1.29.6 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.29.5 + name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.29.6 parent: magnum-cluster-api-sonobuoy-rockylinux-8 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-8-v1.29.5 + - name: magnum-cluster-api-image-build-rockylinux-8-v1.29.6 soft: true vars: - kube_tag: v1.29.5 + kube_tag: v1.29.6 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14-calico - parent: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14 + name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.15-calico + parent: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.15 vars: network_driver: calico - job: - name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14-cilium - parent: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14 + name: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.15-cilium + parent: magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.15 vars: network_driver: cilium @@ -75,7 +75,7 @@ name: magnum-cluster-api-rockylinux-8 check: jobs: - - magnum-cluster-api-image-build-rockylinux-8-v1.27.14 - - magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14-calico - - magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.14-cilium + - magnum-cluster-api-image-build-rockylinux-8-v1.27.15 + - magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.15-calico + - magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.15-cilium diff --git a/zuul.d/jobs-rockylinux-9.yaml b/zuul.d/jobs-rockylinux-9.yaml index 8ed2e56d..e5ca1028 100644 --- a/zuul.d/jobs-rockylinux-9.yaml +++ b/zuul.d/jobs-rockylinux-9.yaml @@ -15,59 +15,59 @@ image_os_distro: ubuntu - job: - name: magnum-cluster-api-image-build-rockylinux-9-v1.27.14 + name: magnum-cluster-api-image-build-rockylinux-9-v1.27.15 parent: magnum-cluster-api-image-build-rockylinux-9 vars: - kube_tag: v1.27.14 + kube_tag: v1.27.15 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14 + name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.15 parent: magnum-cluster-api-sonobuoy-rockylinux-9 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-9-v1.27.14 + - name: magnum-cluster-api-image-build-rockylinux-9-v1.27.15 soft: true vars: - kube_tag: v1.27.14 + kube_tag: v1.27.15 - job: - name: magnum-cluster-api-image-build-rockylinux-9-v1.28.10 + name: magnum-cluster-api-image-build-rockylinux-9-v1.28.11 parent: magnum-cluster-api-image-build-rockylinux-9 vars: - kube_tag: v1.28.10 + kube_tag: v1.28.11 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.28.10 + name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.28.11 parent: magnum-cluster-api-sonobuoy-rockylinux-9 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-9-v1.28.10 + - name: magnum-cluster-api-image-build-rockylinux-9-v1.28.11 soft: true vars: - kube_tag: v1.28.10 + kube_tag: v1.28.11 - job: - name: magnum-cluster-api-image-build-rockylinux-9-v1.29.5 + name: magnum-cluster-api-image-build-rockylinux-9-v1.29.6 parent: magnum-cluster-api-image-build-rockylinux-9 vars: - kube_tag: v1.29.5 + kube_tag: v1.29.6 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.29.5 + name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.29.6 parent: magnum-cluster-api-sonobuoy-rockylinux-9 dependencies: - - name: magnum-cluster-api-image-build-rockylinux-9-v1.29.5 + - name: magnum-cluster-api-image-build-rockylinux-9-v1.29.6 soft: true vars: - kube_tag: v1.29.5 + kube_tag: v1.29.6 - job: - name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14-calico - parent: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14 + name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.15-calico + parent: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.15 vars: network_driver: calico - job: - name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14-cilium - parent: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14 + name: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.15-cilium + parent: magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.15 vars: network_driver: cilium @@ -75,7 +75,7 @@ name: magnum-cluster-api-rockylinux-9 check: jobs: - - magnum-cluster-api-image-build-rockylinux-9-v1.27.14 - - magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14-calico - - magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.14-cilium + - magnum-cluster-api-image-build-rockylinux-9-v1.27.15 + - magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.15-calico + - magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.15-cilium From be1b16fdc0d487e73db7d5120ee30fcf7973861f Mon Sep 17 00:00:00 2001 From: okozachenko1203 Date: Mon, 5 Aug 2024 20:43:14 +1000 Subject: [PATCH 07/10] fix typo --- magnum_cluster_api/resources.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/magnum_cluster_api/resources.py b/magnum_cluster_api/resources.py index 5b6c1d9c..11e20a6c 100644 --- a/magnum_cluster_api/resources.py +++ b/magnum_cluster_api/resources.py @@ -2023,7 +2023,7 @@ def get_object(self) -> objects.ClusterClass: value: --authentication-token-webhook-config-file=/etc/kubernetes/webhooks/webhookconfig.yaml # noqa: E501 - op: add path: /spec/containers/0/command/- - value: --authorization-webhook-config-file=/etc/kubernetes/webhooks/webhookconfig.yaml # noqa: E501 + value: --authorization-webhook-config-file=/etc/kubernetes/webhooks/webhookconfig.yaml # noqa: E501 - op: add path: /spec/containers/0/command/- value: --authorization-mode=Webhook From b63dd50f6b7c4a698fedcf717f7ebf01fd1df4ee Mon Sep 17 00:00:00 2001 From: okozachenko1203 Date: Mon, 5 Aug 2024 22:33:53 +1000 Subject: [PATCH 08/10] fix lint error --- zuul.d/jobs-rockylinux-8.yaml | 1 - zuul.d/jobs-rockylinux-9.yaml | 1 - zuul.d/jobs-ubuntu-2204.yaml | 2 +- 3 files changed, 1 insertion(+), 3 deletions(-) diff --git a/zuul.d/jobs-rockylinux-8.yaml b/zuul.d/jobs-rockylinux-8.yaml index 975b0c46..4a6ca624 100644 --- a/zuul.d/jobs-rockylinux-8.yaml +++ b/zuul.d/jobs-rockylinux-8.yaml @@ -78,4 +78,3 @@ - magnum-cluster-api-image-build-rockylinux-8-v1.27.15 - magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.15-calico - magnum-cluster-api-sonobuoy-rockylinux-8-v1.27.15-cilium - diff --git a/zuul.d/jobs-rockylinux-9.yaml b/zuul.d/jobs-rockylinux-9.yaml index e5ca1028..156474bf 100644 --- a/zuul.d/jobs-rockylinux-9.yaml +++ b/zuul.d/jobs-rockylinux-9.yaml @@ -78,4 +78,3 @@ - magnum-cluster-api-image-build-rockylinux-9-v1.27.15 - magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.15-calico - magnum-cluster-api-sonobuoy-rockylinux-9-v1.27.15-cilium - diff --git a/zuul.d/jobs-ubuntu-2204.yaml b/zuul.d/jobs-ubuntu-2204.yaml index bec469b2..021ff11c 100644 --- a/zuul.d/jobs-ubuntu-2204.yaml +++ b/zuul.d/jobs-ubuntu-2204.yaml @@ -49,7 +49,7 @@ parent: magnum-cluster-api-sonobuoy-ubuntu-2204 vars: kube_tag: v1.29.6 - image_url: https://static.atmosphere.dev/artifacts/magnum-cluster-api/ubuntu-jammy-kubernetes-1-29-6-1720107687.qcow2 + image_url: https://static.atmosphere.dev/artifacts/magnum-cluster-api/ubuntu-jammy-kubernetes-1-29-6-1720107687.qcow2 - job: name: magnum-cluster-api-sonobuoy-ubuntu-2204-v1.29.6-calico From 494a20dcc186552e951a8ee07cb145de6406636e Mon Sep 17 00:00:00 2001 From: okozachenko1203 Date: Tue, 6 Aug 2024 21:07:51 +1000 Subject: [PATCH 09/10] make a workaround for cilium conformance test failures https://github.com/cilium/cilium/issues/29913 https://github.com/kubernetes/kubernetes/pull/120069 https://github.com/cilium/cilium/issues/9207 --- magnum_cluster_api/resources.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/magnum_cluster_api/resources.py b/magnum_cluster_api/resources.py index 11e20a6c..a0745b22 100644 --- a/magnum_cluster_api/resources.py +++ b/magnum_cluster_api/resources.py @@ -214,6 +214,11 @@ def get_object(self) -> pykube.ConfigMap: "image": { "tag": cilium_version, }, + # NOTE(okozachenko1203): cilium has a limitation https://github.com/cilium/cilium/issues/9207 + # Because of that, it fails on the test + # `Services should serve endpoints on same port and different protocols`. + # https://github.com/kubernetes/kubernetes/pull/120069#issuecomment-2111252221 + "k8s": {"serviceProxyName": "cilium"}, "operator": { "image": { "tag": cilium_version, From 3b014dc25e49b7b3b51c496cdb29c3cf3f4337eb Mon Sep 17 00:00:00 2001 From: okozachenko1203 Date: Tue, 6 Aug 2024 21:46:25 +1000 Subject: [PATCH 10/10] fix flake8 errors --- magnum_cluster_api/resources.py | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/magnum_cluster_api/resources.py b/magnum_cluster_api/resources.py index a0745b22..19e9e7f7 100644 --- a/magnum_cluster_api/resources.py +++ b/magnum_cluster_api/resources.py @@ -214,22 +214,22 @@ def get_object(self) -> pykube.ConfigMap: "image": { "tag": cilium_version, }, - # NOTE(okozachenko1203): cilium has a limitation https://github.com/cilium/cilium/issues/9207 - # Because of that, it fails on the test - # `Services should serve endpoints on same port and different protocols`. - # https://github.com/kubernetes/kubernetes/pull/120069#issuecomment-2111252221 + # NOTE(okozachenko): cilium has a limitation https://github.com/cilium/cilium/issues/9207 + # Because of that, it fails on the test + # `Services should serve endpoints on same port and different protocols`. + # https://github.com/kubernetes/kubernetes/pull/120069#issuecomment-2111252221 "k8s": {"serviceProxyName": "cilium"}, "operator": { "image": { "tag": cilium_version, }, }, - # NOTE(okozachenko1203): For users who run with kube-proxy (i.e. with Cilium's kube-proxy - # replacement disabled), the ClusterIP service loadbalancing when a - # request is sent from a pod running in a non-host network namespace - # is still performed at the pod network interface (until - # https://github.com/cilium/cilium/issues/16197 is fixed). For this - # case the session affinity support is disabled by default. + # NOTE(okozachenko): For users who run with kube-proxy (i.e. with Cilium's kube-proxy + # replacement disabled), the ClusterIP service loadbalancing when a + # request is sent from a pod running in a non-host network namespace + # is still performed at the pod network interface (until + # https://github.com/cilium/cilium/issues/16197 is fixed). For this + # case the session affinity support is disabled by default. "sessionAffinity": "true", "ipam": { "operator": {