Commit Graph

3 Commits

Author SHA1 Message Date
unkinben 408b363e05 fix: preload correct rke2 airgap images to break CNI bootstrap deadlock
ci/woodpecker/pr/puppet-validate Pipeline failed
ci/woodpecker/pr/yamllint Pipeline failed
ci/woodpecker/pr/ruby-validate Pipeline failed
ci/woodpecker/pr/erb-validate Pipeline failed
ci/woodpecker/pr/epp-validate Pipeline failed
ci/woodpecker/pr/puppet-lint Pipeline was successful
ci/woodpecker/pr/bolt-validate Pipeline was successful
ci/woodpecker/pr/ruby-check Pipeline was successful
New el9_8 nodes boot rke2 v1.33.11 (flannel v0.28.4 / calico v3.31.5) from
the rolling latest/1.33 repo, but the airgap preload pinned v1.33.4
(flannel v0.27.2 / calico v3.30.2), so canal's images were never on disk and
containerd fell back to the artifactapi mirror VIP, which is unreachable until
the flannel overlay it would provide is up. Classic bootstrap deadlock.

- bump pinned rke2_version 1.33.4 -> 1.33.11 so the versionlock, RPM and
  preloaded tarball all match the canal image tags the running binary requests
- preload the canal-specific tarball alongside the default bundle so the
  flannel/calico images are guaranteed on disk regardless of bundle layout

Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
2026-08-08 17:51:49 +10:00
unkinben 1077bdcbc1 chore: update ceph gpgkey (#438)
- stop checking ceph gpgkey (fixme)
- use artifactapi for retrieving large rke image bundle

Reviewed-on: #438
2026-01-16 23:51:11 +11:00
unkinben 6e4bc9fbc7 feat: adding rke2 (#394)
- manage rke2 repos
- add rke2 module (init, params, install, config, service)
- split roles::infra::k8s::node -> control/compute roles
- moved common k8s config into k8s.yaml
- add bootstrap_node, manage server and token fields in rke2 config
- manage install of helm
- manage node attributes (from puppet facts)
- manage frr exclusions for service/cluster network

Reviewed-on: #394
2025-09-14 13:27:49 +10:00