- revert rke2::params container_archive_source to the upstream github default
so the module stays generic and portable
- set the artifactapi override in the k8s role hiera
(rke2::container_archive_source) where the estate-specific, pre-CNI-reachable
source belongs
Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
New el9_8 nodes boot rke2 v1.33.11 (flannel v0.28.4 / calico v3.31.5) from
the rolling latest/1.33 repo, but the airgap preload pinned v1.33.4
(flannel v0.27.2 / calico v3.30.2), so canal's images were never on disk and
containerd fell back to the artifactapi mirror VIP, which is unreachable until
the flannel overlay it would provide is up. Classic bootstrap deadlock.
- bump pinned rke2_version 1.33.4 -> 1.33.11 so the versionlock, RPM and
preloaded bundle all match the canal image tags the running binary requests
(the default rke2-images bundle already contains the canal CNI images)
- wire the airgap archive source to the container_archive_source parameter
(previously declared but unused) and refresh its default to the artifactapi
github remote, so the pre-CNI-reachable source is hiera-overridable per node
Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
unkinben