chore(deps): update kubezero-ci-dependencies

admin/kubezero.sh

@@ -123,6 +123,11 @@ upgrade_kubezero_config() {
   migrate_argo_values.py < "$WORKDIR"/kubezero-values.yaml > "$WORKDIR"/new-kubezero-values.yaml \
     && mv "$WORKDIR"/new-kubezero-values.yaml "$WORKDIR"/kubezero-values.yaml
 
+  # V1.32 - Inject new global.apiServerUrl
+  _API_ENDPOINT=$(kubectl config view | yq .clusters[0].cluster.server | sed -e 's,https://,,' -e 's/:6443//')
+  yq '.global.apiServerUrl="'$_API_ENDPOINT'"' -i "$WORKDIR"/kubezero-values.yaml
+  #
+
   update_kubezero_cm
 
   if [ "$ARGOCD" == "true" ]; then
@@ -211,6 +216,7 @@ control_plane_node() {
     # Only restore etcd data during "restore" and none exists already
     if [[ "$CMD" =~ ^(restore)$ ]]; then
       if [ ! -d ${HOSTFS}/var/lib/etcd/member ]; then
+      # rm -rf ${HOSTFS}/var/lib/etcd/member
         etcdctl snapshot restore ${HOSTFS}/etc/kubernetes/etcd_snapshot \
           --name $ETCD_NODENAME \
           --data-dir="${HOSTFS}/var/lib/etcd" \

admin/libhelm.sh

@@ -215,7 +215,7 @@ for manifest in yaml.safe_load_all(sys.stdin):
 # helm template | kubectl apply -f -
 # confine to one namespace if possible
 function render() {
-  helm secrets --evaluate-templates template $(chart_location $chart) -n $namespace --name-template $module $targetRevision --skip-tests --skip-crds -f $WORKDIR/values.yaml $API_VERSIONS --kube-version $KUBE_VERSION $ENV_VALUES \
+  helm secrets --evaluate-templates template $(chart_location $chart) -n $namespace --name-template $module $targetRevision --skip-tests --skip-crds --no-hooks -f $WORKDIR/values.yaml $API_VERSIONS --kube-version $KUBE_VERSION $ENV_VALUES \
     | python3 -c '
 #!/usr/bin/python3
 import yaml

admin/migrate_argo_values.py

@@ -29,6 +29,13 @@ def migrate(values):
     except KeyError:
         pass
 
+    try:
+        values["storage"]["aws-ebs-csi-driver"].pop("IamArn")
+        values["storage"]["aws-efs-csi-driver"].pop("IamArn")
+    except KeyError:
+        pass
+
+
     return values
 
 

admin/upgrade_cluster.sh

@@ -48,7 +48,7 @@ while true; do
   sleep 1
 done
 
-echo "Once all controller nodes are running on $KUBE_VERSION, <return> to continue"
+echo "Once ALL nodes, incl. workers, ALL, are running on $KUBE_VERSION, <return> to continue"
 read -r
 
 # Final control plane upgrades

charts/kubezero-ci/Chart.yaml

@@ -30,7 +30,7 @@ dependencies:
     repository: https://aquasecurity.github.io/helm-charts/
     condition: trivy.enabled
   - name: renovate
-    version: 40.61.2
+    version: 40.62.1
     repository: https://docs.renovatebot.com/helm-charts
     condition: renovate.enabled
 kubeVersion: ">= 1.25.0"

charts/kubezero-metrics/README.md

@@ -1,6 +1,6 @@
 # kubezero-metrics
 
-![Version: 0.11.1](https://img.shields.io/badge/Version-0.11.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
+![Version: 0.12.0](https://img.shields.io/badge/Version-0.12.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
 
 KubeZero Umbrella Chart for Prometheus, Grafana and Alertmanager as well as all Kubernetes integrations.
 

charts/kubezero-metrics/jsonnet/jsonnetfile.lock.json

@@ -78,7 +78,7 @@
           "subdir": "grafana-builder"
         }
       },
-      "version": "c014522d7d2c9ccba70556ec75a31cdde8907fe1",
+      "version": "c29b27c792561c8e6086c1ba187e9f708ec1c9de",
       "sum": "G7B6E5sqWirDbMWRhifbLRfGgRFbIh9WCYa6X3kMh6g="
     },
     {
@@ -88,7 +88,7 @@
           "subdir": "mixin-utils"
         }
       },
-      "version": "c014522d7d2c9ccba70556ec75a31cdde8907fe1",
+      "version": "c29b27c792561c8e6086c1ba187e9f708ec1c9de",
       "sum": "iu4NT+YOgpxQnxElKML76cSxgTA0cwTmFfI0hOfHHmw="
     },
     {
@@ -128,7 +128,7 @@
           "subdir": "jsonnet/kube-state-metrics"
         }
       },
-      "version": "dbf6e9b4e2f9e1ab744a23aad87665214c4d9205",
+      "version": "97bfa326abe54600a6b9ad4c6238b9fc1d559d55",
       "sum": "3bioG7CfTfY9zeu5xU4yon6Zt3kYvNkyl492nOhQxnM="
     },
     {
@@ -138,7 +138,7 @@
           "subdir": "jsonnet/kube-state-metrics-mixin"
         }
       },
-      "version": "dbf6e9b4e2f9e1ab744a23aad87665214c4d9205",
+      "version": "97bfa326abe54600a6b9ad4c6238b9fc1d559d55",
       "sum": "qclI7LwucTjBef3PkGBkKxF0mfZPbHnn4rlNWKGtR4c="
     },
     {
@@ -158,7 +158,7 @@
           "subdir": "jsonnet/mixin"
         }
       },
-      "version": "71440266018206a8d2cdc840ab10edca12b0cdbe",
+      "version": "fb494cffd5117aaa895eaedfae8397a96691466f",
       "sum": "gi+knjdxs2T715iIQIntrimbHRgHnpM8IFBJDD1gYfs=",
       "name": "prometheus-operator-mixin"
     },
@@ -169,7 +169,7 @@
           "subdir": "jsonnet/prometheus-operator"
         }
       },
-      "version": "71440266018206a8d2cdc840ab10edca12b0cdbe",
+      "version": "fb494cffd5117aaa895eaedfae8397a96691466f",
       "sum": "dtH2oiXvUttHg2fz6uITHKuZflkQ832ddkdnhVu0drY="
     },
     {
@@ -200,7 +200,7 @@
           "subdir": "documentation/prometheus-mixin"
         }
       },
-      "version": "f69c83f5f1dce5f0b2f90172d5f6f9e2bda91fec",
+      "version": "69906bb4f5f9e62255bced373c56fc13a3f61093",
       "sum": "lT5n+8i4q20LuvlmtIs/GXdlX6fQiwwuZkeOtnAPT50=",
       "name": "prometheus"
     },

charts/kubezero-metrics/jsonnet/k8s-dashboards.yaml

@@ -41,8 +41,6 @@ dashboards:
   tags: ['kubernetes', 'csi']
 - name: pod-total
   url: file://dashboards/pod-total.json
-- name: proxy
-  url: file://dashboards/proxy.json
 - name: scheduler
   url: file://dashboards/scheduler.json
 - name: workload-total

charts/kubezero-metrics/templates/grafana-dashboards-k8s.yaml

@@ -43,8 +43,6 @@ binaryData:
     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
   pod-total.json.gz:
     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
-  proxy.json.gz:
-    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
   scheduler.json.gz:
     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
   workload-total.json.gz:

charts/kubezero-operators/templates/cloudnative-pg/ClusterImageCatalog-bookworm.yaml

@@ -1,3 +1,4 @@
+{{- if index .Values "cloudnative-pg" "enabled" }}
 apiVersion: postgresql.cnpg.io/v1
 kind: ClusterImageCatalog
 metadata:
@@ -14,3 +15,4 @@ spec:
       image: ghcr.io/cloudnative-pg/postgresql:16.9-1-bookworm@sha256:cf533c5f141b13a327d4678f49a1ace3bd5475f847e08d33b33255fde85717dc
     - major: 17
       image: ghcr.io/cloudnative-pg/postgresql:17.5-1-bookworm@sha256:c860bf22cc86b8033c0aa77299e6c8df41cddf4a884b72115153aeb2f4574e94
+{{- end }}

charts/kubezero-policy/values.yaml

@@ -33,9 +33,14 @@ kyverno:
 
   admissionController:
     revisionHistoryLimit: 2
+    container:
+      extraArgs:
+        leaderElectionRetryPeriod: 30s
 
   cleanupController:
     revisionHistoryLimit: 2
+    extraArgs:
+      leaderElectionRetryPeriod: 30s
     rbac:
       clusterRole:
         extraResources:
@@ -51,6 +56,8 @@ kyverno:
 
   backgroundController:
     revisionHistoryLimit: 2
+    extraArgs:
+      leaderElectionRetryPeriod: 30s
 
   reportsController:
     revisionHistoryLimit: 2

charts/kubezero-storage/values.yaml

@@ -104,7 +104,7 @@ aws-ebs-csi-driver:
     replicaCount: 1
 
     loggingFormat: json
-    revisionHistoryLimit: 3
+    revisionHistoryLimit: 2
 
     defaultFsType: xfs
 
@@ -172,6 +172,7 @@ aws-ebs-csi-driver:
       operator: Exists
 
     enableMetrics: false
+    enableWindows: false
 
     resources:
       requests:

charts/kubezero/templates/_app.tpl

@@ -45,7 +45,7 @@ spec:
       - ServerSideApply=true
   info:
     - name: "Source:"
-      value: "https://git.zero-downtime.net/ZeroDownTime/KubeZero/src/branch/release/v1.31/charts/kubezero-{{ $name }}"
+      value: "https://git.zero-downtime.net/ZeroDownTime/KubeZero/src/branch/release/v1.32/charts/kubezero-{{ $name }}"
 {{- include (print $name "-argo") $ }}
 {{- end }}
 

charts/kubezero/templates/storage.yaml

@@ -35,7 +35,7 @@ aws-ebs-csi-driver:
     region: {{ .Values.global.aws.region }}
     env:
     - name: AWS_ROLE_ARN
-      value: {{ index .Values "storage" "aws-ebs-csi-driver" "IamArn" | quote }}
+      value: "arn:aws:iam::{{ .Values.global.aws.accountId }}:role/{{ .Values.global.aws.region }}.{{ .Values.global.clusterName }}.ebs-csi-controller-sa"
     - name: AWS_WEB_IDENTITY_TOKEN_FILE
       value: "/var/run/secrets/sts.amazonaws.com/serviceaccount/token"
     - name: AWS_STS_REGIONAL_ENDPOINTS
@@ -69,13 +69,11 @@ aws-efs-csi-driver:
       enabled: true
     {{- end }}
 
-    {{- with index .Values "storage" "aws-efs-csi-driver" "IamArn" }}
     extraEnv:
     - name: AWS_ROLE_ARN
-      value: {{ . | quote }}
+      value: "arn:aws:iam::{{ .Values.global.aws.accountId }}:role/{{ .Values.global.aws.region }}.{{ .Values.global.clusterName }}.efs-csi-controller-sa"
     - name: AWS_WEB_IDENTITY_TOKEN_FILE
       value: "/var/run/secrets/sts.amazonaws.com/serviceaccount/token"
-    {{- end }}
 
     # The EFS controller steel needs hostnetwork and cannot update on single node control planes otherwise
     {{- if not .Values.global.highAvailable }}

charts/kubezero/values.yaml

@@ -117,8 +117,6 @@ logging:
   enabled: false
   namespace: logging
   targetRevision: 0.8.14
-  annotations:
-    argocd.argoproj.io/compare-options: ServerSideDiff=false
 
 argo:
   enabled: false

docs/v1.32.md

@@ -0,0 +1,20 @@
+# ![k8s-v1.32](images/k8s-1.32.png)  KubeZero 1.32 - Penelope
+
+## What's new - Major themes
+- full eBPF network data plane, removed multus and kube-proxy
+- Kyverno policy & governance engine integrated into the control-plane
+- ArgoCD upgraded to V3 incl. various performance optimizations, eg. ServerSideApply etc.
+
+## Features and fixes
+- enabled PSI metrics to get better insight on root cause of performance issues
+
+## Version upgrades
+- cilium 1.17.4
+- istio 1.26.1
+- ArgoCD 3.0.5
+- Prometheus 3.4.1 / Grafana 12.0.1
+- Nvidia container toolkit 1.17.8, drivers 570.148.08, Cuda 12.8
+- AWS Neuron 2.21.37
+
+## Resources
+- [Kubernetes v1.32 upstream release blog](https://kubernetes.io/blog/2024/12/11/kubernetes-v1-32-release/)