Merge pull request #21 from Ferlab-Ste-Justine/feat/k8s-upgrade

feat: INFRA-703 prepare k8s upgrade

Author: ihannache

kubespray/configurations/all/etcd.yml

@@ -16,21 +16,46 @@ etcd_data_dir: /var/lib/etcd
 etcd_deployment_type: host
 
 etcd_supported_versions:
-  v1.25: "v3.5.14"
-  v1.24: "v3.5.14"
-  v1.23: "v3.5.14"
+  v1.29: "v3.5.14"
+  v1.28: "v3.5.14"
+  v1.27: "v3.5.14"
 
 etcd_binary_checksums:
   # Etcd does not have arm32 builds at the moment, having some dummy value is
   # required to avoid "no attribute" error
   arm:
+    v3.5.14: 0
+    v3.5.12: 0
+    v3.5.11: 0
+    v3.5.10: 0
+    v3.5.9: 0
+    v3.5.8: 0
+    v3.5.7: 0
     v3.5.6: 0
   arm64:
-    v3.5.6: 888e25c9c94702ac1254c7655709b44bb3711ebaabd3cb05439f3dd1f2b51a87
     v3.5.14: 90510c79c4aae3c3313691f5770fc53b3ac883338fc0254bf8d22460acd3c19d
+    v3.5.12: 31f30c01918771ece28d6e553e0f33be9483ced989896ecf6bbe1edb07786141
+    v3.5.11: 6edf0cddc8fa2d7674129abe2e44d5a37cc3a6e3b500c13c6cbc2ed2ecf08bf4
+    v3.5.10: ff74a6018d9b2a1320bff30e5a11b4f2f5c2a3d147df8a8bad53c01b9f800ee1
+    v3.5.9: bb201c106a61bbab59e2d9f37f4bdff99d50201f513c66b4578741eab581fb28
+    v3.5.8: 3f4441b293a2d0d4d2f8b2cd9504376e15818f7b865ef4b436e8e6f865f895ff
+    v3.5.7: 1a35314900da7db006b198dd917e923459b462128101736c63a3cda57ecdbf51
+    v3.5.6: 888e25c9c94702ac1254c7655709b44bb3711ebaabd3cb05439f3dd1f2b51a87
   amd64:
-    v3.5.6: 4db32e3bc06dd0999e2171f76a87c1cffed8369475ec7aa7abee9023635670fb
     v3.5.14: b0b34298f53f6830f08e7ddc57fc74dc45563216a66e94d9e6b0b9e0b0281b34
+    v3.5.12: f2ff0cb43ce119f55a85012255609b61c64263baea83aa7c8e6846c0938adca5
+    v3.5.11: e256885e753dc99001335e099d3c2eb8cf21a865a087ee4d7e3665752ae5929a
+    v3.5.10: 26e90d024fa2310bc52bb40e7f2132e81640b55f8fc446c00ae07e30af2a44fd
+    v3.5.9: d59017044eb776597eca480432081c5bb26f318ad292967029af1f62b588b042
+    v3.5.8: d4c1b8d90ad53658f12ffc293afc5694b7bc6cb093af609188649a799e1cc8dc
+    v3.5.7: a43119af79c592a874e8f59c4f23832297849d0c479338f9df36e196b86bc396
+    v3.5.6: 4db32e3bc06dd0999e2171f76a87c1cffed8369475ec7aa7abee9023635670fb
   ppc64le:
-    v3.5.6: e235cb885996b8aac133975e0077eaf0a2f8dc7062ad052fa7395668a365906b
-    v3.5.14: 01681d4d33bba5130c9cffca42c35b0f68e0d991b0b4ee65dab6fd36568d4fee
+    v3.5.14: 01681d4d33bba5130c9cffca42c35b0f68e0d991b0b4ee65dab6fd36568d4fee
+    v3.5.12: ebd8060508d572678d8d1e4f90f87863e3a6cfcba856ceca32379b03251c0597
+    v3.5.11: a2e70b291811fa8ccc34cc7d297bf7d31e3af790bc31e54cad034a49e9db2eb7
+    v3.5.10: 10cd8e4ecf6718b9712bf2edfac2e4924d7f21dbe58d368e6e10578c85bd8c01
+    v3.5.9: 551539ebb344ebdc77f170ea51512a6cda35877ffdcbd8b3316b2495a8b2bd87
+    v3.5.8: 20e28302c1424b1a3daf7d817f2662e4c64e395a82765d1696cb53cb6bc37a4e
+    v3.5.7: e861aa6acd4d326ec01bfa06fffb80d33f3f8c26e0eb8b73e4424578d149bd04
+    v3.5.6: e235cb885996b8aac133975e0077eaf0a2f8dc7062ad052fa7395668a365906b

kubespray/configurations/k8s_cluster/addons.yml

@@ -114,8 +114,6 @@ ingress_publish_status_address: ""
 ingress_nginx_namespace: "ingress-nginx"
 ingress_nginx_insecure_port: ${ingress_http_port}
 ingress_nginx_secure_port: ${ingress_https_port}
-ingress_nginx_configmap:
-  ssl-redirect: "false"
 #   map-hash-bucket-size: "128"
 #   ssl-protocols: "TLSv1.2 TLSv1.3"
 # ingress_nginx_configmap_tcp_services:

kubespray/configurations/k8s_cluster/k8s-cluster.yml

@@ -243,15 +243,6 @@ kubernetes_audit: false
 # kubelet_config_dir:
 default_kubelet_config_dir: "{{ kube_config_dir }}/dynamic_kubelet_dir"
 
-# pod security policy (RBAC must be enabled either by having 'RBAC' in authorization_modes or kubeadm enabled)
-podsecuritypolicy_enabled: false
-
-# Custom PodSecurityPolicySpec for restricted policy
-# podsecuritypolicy_restricted_spec: {}
-
-# Custom PodSecurityPolicySpec for privileged policy
-# podsecuritypolicy_privileged_spec: {}
-
 # Make a copy of kubeconfig on the host that runs Ansible in {{ inventory_dir }}/artifacts
 kubeconfig_localhost: true
 artifacts_dir: ${artifacts_dir}

variables.tf

@@ -99,7 +99,7 @@ variable "k8_cluster_name" {
 variable "k8_version" {
   description = "Kubernetes version to install"
   type = string
-  default = "v1.25.6"
+  default = "v1.29.5"
 }
 
 variable "custom_container_repos" {
@@ -173,13 +173,13 @@ variable "kubespray_repo" {
 variable "kubespray_repo_ref" {
   description = "Tag or branch to checkout once the repository is cloned"
   type = string
-  default = "v2.21.0"
+  default = "v2.25.0"
 }
 
 variable "kubespray_image" {
   description = "Docker image of kubespray"
   type = string
-  default = "ferlabcrsj/kubespray:2.21.0"
+  default = "quay.io/kubespray/kubespray:v2.25.0"
 }
 
 variable "ingress_arguments" {