Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kubeone for openSUSE:Factory checked in at 2026-08-28 19:52:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kubeone (Old) and /work/SRC/openSUSE:Factory/.kubeone.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kubeone" Fri Aug 28 19:52:32 2026 rev:19 rq:1374278 version:1.14.3 Changes: -------- --- /work/SRC/openSUSE:Factory/kubeone/kubeone.changes 2026-08-14 22:09:01.217399410 +0200 +++ /work/SRC/openSUSE:Factory/.kubeone.new.1265/kubeone.changes 2026-08-28 19:55:01.984021823 +0200 @@ -1,0 +2,14 @@ +Fri Aug 28 08:05:13 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.14.3: + * Bug or Regression + - Fix the Cilium LRP by @kron4eg in #4189 + - Fixed a bug where upgrading a vSphere cluster from an older + KubeOne version left behind a stale + validation.csi.vsphere.vmware.com + ValidatingWebhookConfiguration, blocking StorageClass changes + and all new dynamic volume provisioning/PVC deletion in #4195 + * Updates + - Update Cilium version to v1.19.7 in #4209 + +------------------------------------------------------------------- Old: ---- kubeone-1.14.2.obscpio New: ---- kubeone-1.14.3.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kubeone.spec ++++++ --- /var/tmp/diff_new_pack.dO8bzS/_old 2026-08-28 19:55:03.483074225 +0200 +++ /var/tmp/diff_new_pack.dO8bzS/_new 2026-08-28 19:55:03.487074365 +0200 @@ -20,7 +20,7 @@ %define KUBERNETES_STABLE_VERSION v1.36.3 Name: kubeone -Version: 1.14.2 +Version: 1.14.3 Release: 0 Summary: CLI for the kubeone cluster automation License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.dO8bzS/_old 2026-08-28 19:55:03.603078421 +0200 +++ /var/tmp/diff_new_pack.dO8bzS/_new 2026-08-28 19:55:03.610078666 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/kubermatic/kubeone.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v1.14.2</param> + <param name="revision">refs/tags/v1.14.3</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.dO8bzS/_old 2026-08-28 19:55:03.656080274 +0200 +++ /var/tmp/diff_new_pack.dO8bzS/_new 2026-08-28 19:55:03.660080414 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/kubermatic/kubeone</param> <param name="changesrevision">0ddfa74352d989967604c03742f82d5f98f39f6f</param></service><service name="tar_scm"> <param name="url">https://github.com/kubermatic/kubeone.git</param> - <param name="changesrevision">950b70196b7c7bf86732435b83771ae49ce3fad6</param></service></servicedata> + <param name="changesrevision">affb434261a5cd6f1649c8ae3d5ae361f5c03fcd</param></service></servicedata> (No newline at EOF) ++++++ kubeone-1.14.2.obscpio -> kubeone-1.14.3.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeone-1.14.2/.prow/postsubmits.yaml new/kubeone-1.14.3/.prow/postsubmits.yaml --- old/kubeone-1.14.2/.prow/postsubmits.yaml 2026-08-13 13:08:15.000000000 +0200 +++ new/kubeone-1.14.3/.prow/postsubmits.yaml 2026-08-24 14:27:50.000000000 +0200 @@ -14,7 +14,7 @@ preset-docker-mirror: "true" spec: containers: - - image: quay.io/kubermatic/build:go-1.26-node-22-kind-0.31-1 + - image: quay.io/kubermatic/build:go-1.26-node-22-kind-0.32-9 command: - /bin/bash - -c diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeone-1.14.2/.prow/verify.yaml new/kubeone-1.14.3/.prow/verify.yaml --- old/kubeone-1.14.2/.prow/verify.yaml 2026-08-13 13:08:15.000000000 +0200 +++ new/kubeone-1.14.3/.prow/verify.yaml 1970-01-01 01:00:00.000000000 +0100 @@ -1,117 +0,0 @@ -presubmits: - ######################################################### - # verify, build, and unit tests - ######################################################### - - name: pull-kubeone-verify-boilerplate - always_run: true - decorate: true - clone_uri: "ssh://[email protected]/kubermatic/kubeone.git" - labels: - preset-goproxy: "true" - spec: - containers: - - image: python:3 - command: - - ./hack/verify-boilerplate.sh - - name: pull-kubeone-verify-codegen - always_run: true - decorate: true - clone_uri: "ssh://[email protected]/kubermatic/kubeone.git" - path_alias: k8c.io/kubeone - labels: - preset-goproxy: "true" - spec: - containers: - - image: quay.io/kubermatic/build:go-1.26-node-22-9 - command: - - make - args: - - verify-codegen - resources: - requests: - memory: 4Gi - cpu: 2 - limits: - memory: 4Gi - cpu: 2 - - name: pull-kubeone-verify-apidocs - run_if_changed: "(pkg/apis/kubeone|hack/)" - decorate: true - clone_uri: "ssh://[email protected]/kubermatic/kubeone.git" - path_alias: k8c.io/kubeone - labels: - preset-goproxy: "true" - spec: - containers: - - image: quay.io/kubermatic/build:go-1.26-node-22-9 - command: - - make - args: - - verify-apidocs - resources: - requests: - memory: 512Mi - cpu: 500m - limits: - memory: 1Gi - cpu: 1 - - name: pull-kubeone-license-validation - always_run: true - decorate: true - clone_uri: "ssh://[email protected]/kubermatic/kubeone.git" - labels: - preset-goproxy: "true" - spec: - containers: - - image: quay.io/kubermatic/build:go-1.26-node-22-9 - command: - - make - args: - - verify-licence - resources: - requests: - memory: 1Gi - cpu: 1 - limits: - memory: 2Gi - cpu: 2 - - name: pull-kubeone-build - always_run: true - decorate: true - clone_uri: "ssh://[email protected]/kubermatic/kubeone.git" - labels: - preset-goproxy: "true" - spec: - containers: - - image: quay.io/kubermatic/build:go-1.26-node-22-9 - command: - - make - args: - - build - resources: - requests: - memory: 2Gi - cpu: 1 - limits: - memory: 3Gi - cpu: 2 - - name: pull-kubeone-test - always_run: true - decorate: true - clone_uri: "ssh://[email protected]/kubermatic/kubeone.git" - labels: - preset-goproxy: "true" - spec: - containers: - - image: quay.io/kubermatic/build:go-1.26-node-22-9 - command: - - make - args: - - test - resources: - requests: - memory: 2Gi - cpu: 1 - limits: - memory: 3Gi - cpu: 2 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeone-1.14.2/CHANGELOG/CHANGELOG-1.14.md new/kubeone-1.14.3/CHANGELOG/CHANGELOG-1.14.md --- old/kubeone-1.14.2/CHANGELOG/CHANGELOG-1.14.md 2026-08-13 13:08:15.000000000 +0200 +++ new/kubeone-1.14.3/CHANGELOG/CHANGELOG-1.14.md 2026-08-24 14:27:50.000000000 +0200 @@ -1,3 +1,18 @@ +# [v1.14.3](https://github.com/kubermatic/kubeone/releases/tag/v1.14.3) - 2026-08-24 + +## Changelog since v1.14.2 + +## Changes by Kind + +### Bug or Regression + +- Fix the Cilium LRP by [@kron4eg](https://github.com/kron4eg) in [#4189](https://github.com/kubermatic/kubeone/pull/4189) +- Fixed a bug where upgrading a vSphere cluster from an older KubeOne version left behind a stale `validation.csi.vsphere.vmware.com` ValidatingWebhookConfiguration, blocking StorageClass changes and all new dynamic volume provisioning/PVC deletion by [@steled](https://github.com/steled) in [#4195](https://github.com/kubermatic/kubeone/pull/4195) + +### Updates + +- Update Cilium version to v1.19.7 by [@archups](https://github.com/archups) in [#4209](https://github.com/kubermatic/kubeone/pull/4209) + # [v1.14.2](https://github.com/kubermatic/kubeone/releases/tag/v1.14.2) - 2026-08-13 ## Changelog since v1.14.1 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeone-1.14.2/addons/cni-cilium/Kustomization new/kubeone-1.14.3/addons/cni-cilium/Kustomization --- old/kubeone-1.14.2/addons/cni-cilium/Kustomization 2026-08-13 13:08:15.000000000 +0200 +++ new/kubeone-1.14.3/addons/cni-cilium/Kustomization 2026-08-24 14:27:50.000000000 +0200 @@ -5,7 +5,7 @@ helmCharts: - name: cilium repo: https://helm.cilium.io/ - version: 1.19.6 + version: 1.19.7 releaseName: cilium namespace: kube-system valuesFile: helm-values diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeone-1.14.2/addons/nodelocaldns-cilium/lrp.yaml new/kubeone-1.14.3/addons/nodelocaldns-cilium/lrp.yaml --- old/kubeone-1.14.2/addons/nodelocaldns-cilium/lrp.yaml 2026-08-13 13:08:15.000000000 +0200 +++ new/kubeone-1.14.3/addons/nodelocaldns-cilium/lrp.yaml 2026-08-24 14:27:50.000000000 +0200 @@ -11,7 +11,7 @@ redirectBackend: localEndpointSelector: matchLabels: - k8s-app: cilium-node-local-dns + k8s-app: node-local-dns toPorts: - port: "53" name: dns diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeone-1.14.2/go.mod new/kubeone-1.14.3/go.mod --- old/kubeone-1.14.2/go.mod 2026-08-13 13:08:15.000000000 +0200 +++ new/kubeone-1.14.3/go.mod 2026-08-24 14:27:50.000000000 +0200 @@ -1,6 +1,6 @@ module k8c.io/kubeone -go 1.26.5 +go 1.26.0 require ( dario.cat/mergo v1.0.2 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeone-1.14.2/pkg/addons/ensure.go new/kubeone-1.14.3/pkg/addons/ensure.go --- old/kubeone-1.14.2/pkg/addons/ensure.go 2026-08-13 13:08:15.000000000 +0200 +++ new/kubeone-1.14.3/pkg/addons/ensure.go 2026-08-24 14:27:50.000000000 +0200 @@ -465,6 +465,9 @@ addonsToDeploy, addonAction{ name: resources.AddonCSIVsphere, + supportFn: func() error { + return migrateVsphereCSIDriver(s) + }, }, ) default: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeone-1.14.2/pkg/addons/helpers.go new/kubeone-1.14.3/pkg/addons/helpers.go --- old/kubeone-1.14.2/pkg/addons/helpers.go 2026-08-13 13:08:15.000000000 +0200 +++ new/kubeone-1.14.3/pkg/addons/helpers.go 2026-08-24 14:27:50.000000000 +0200 @@ -27,6 +27,7 @@ "k8c.io/kubeone/pkg/state" "k8c.io/kubeone/pkg/templates/resources" + admissionregistrationv1 "k8s.io/api/admissionregistration/v1" appsv1 "k8s.io/api/apps/v1" batchv1 "k8s.io/api/batch/v1" corev1 "k8s.io/api/core/v1" @@ -50,6 +51,13 @@ openstackCinderCSIControllerPluginName = "openstack-cinder-csi-controllerplugin" openstackCinderCSINodePluginName = "openstack-cinder-csi-nodeplugin" vSphereDeploymentName = "vsphere-cloud-controller-manager" + // vsphereCSIValidatingWebhookConfigurationName is the name of the + // ValidatingWebhookConfiguration that older csi-vsphere addon versions + // used to deploy alongside a "vsphere-webhook-svc" Service. Both were + // removed from the addon (see addons/csi-vsphere/2-validatingwebhook.yaml), + // so the webhook configuration must be pruned on upgrade, otherwise it's + // left dangling and blocks all StorageClass/PV/PVC admission requests. + vsphereCSIValidatingWebhookConfigurationName = "validation.csi.vsphere.vmware.com" ) var ( @@ -296,6 +304,14 @@ ) } +func migrateVsphereCSIDriver(s *state.State) error { + return clientutil.DeleteIfExists( + s.Context, + s.DynamicClient, + genNamedObject[admissionregistrationv1.ValidatingWebhookConfiguration](vsphereCSIValidatingWebhookConfigurationName), + ) +} + func migratePacketToEquinixCCM(s *state.State) error { return DeleteAddonByName(s, resources.AddonCCMPacket) } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeone-1.14.2/pkg/templates/images/images.go new/kubeone-1.14.3/pkg/templates/images/images.go --- old/kubeone-1.14.2/pkg/templates/images/images.go 2026-08-13 13:08:15.000000000 +0200 +++ new/kubeone-1.14.3/pkg/templates/images/images.go 2026-08-24 14:27:50.000000000 +0200 @@ -392,15 +392,15 @@ WeaveNetCNINPC: {"*": "docker.io/weaveworks/weave-npc:2.8.1"}, // Cilium - Cilium: {"*": "quay.io/cilium/cilium:v1.19.6@sha256:0df5b2750b64c49843aba1d649e9eaf61467cb0645ad3171db6f6962c095ac92"}, - CiliumOperator: {"*": "quay.io/cilium/operator-generic:v1.19.6@sha256:0db4ca4e06969d8904ee036617795d0e9c3228cf7b8d902ba74fc2bb98d2d665"}, - CiliumEnvoy: {"*": "quay.io/cilium/cilium-envoy:v1.36.9-1782267392-edeb3f2af56c37c407efa1f63f0b32f595399bbc@sha256:767101fb8a5e38f055778cb43b7aa8eed80450b37f8121effac3d9de9e06dc99"}, + Cilium: {"*": "quay.io/cilium/cilium:v1.19.7@sha256:1b58bcb81c723cf130a0dd2fb2e1132c57f8fbc2ef7bdb85519cfcc36111c77e"}, + CiliumOperator: {"*": "quay.io/cilium/operator-generic:v1.19.7@sha256:61e773bfc25a448f1ad3ead605af94b3ef176ba2925cf4bd1b11e09794b72bed"}, + CiliumEnvoy: {"*": "quay.io/cilium/cilium-envoy:v1.36.9-1786864149-07e8503ff34b9190d7bbe4e57d4e185c4ef8b1de@sha256:beccdf3c119f299cf696885188584bbd0531d74bca08096113207999aff95e87"}, // Hubble - HubbleRelay: {"*": "quay.io/cilium/hubble-relay:v1.19.6@sha256:6782a49e3f28eba015701c4410a5ec7fa096fe9a562f879b4372dbecd827ea44"}, + HubbleRelay: {"*": "quay.io/cilium/hubble-relay:v1.19.7@sha256:db4b384d0f6aba261e809d58bee54885c70a7e958173a125ebb215391af55e74"}, HubbleUI: {"*": "quay.io/cilium/hubble-ui:v0.13.5@sha256:f7d514fc54d784ed6df9d58cf0e97648b143f92b766dd1780ed3fc845bd4c516"}, HubbleUIBackend: {"*": "quay.io/cilium/hubble-ui-backend:v0.13.5@sha256:fac0c300ae119274edca11fd89b1ad23c788792d8bc4ea2ba631c709e8d3c688"}, - CiliumCertGen: {"*": "quay.io/cilium/certgen:v0.4.6@sha256:511cedee817713fdf72db7e32fffb4b90da7747661b95180064f18198877626c"}, + CiliumCertGen: {"*": "quay.io/cilium/certgen:v0.4.9@sha256:6213a4c54a1f36e14a9280765f058aaa2017550c28bc122f5b09ad146fd0da2b"}, // Cluster-autoscaler addon ClusterAutoscaler: { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeone-1.14.2/test/e2e/helpers.go new/kubeone-1.14.3/test/e2e/helpers.go --- old/kubeone-1.14.2/test/e2e/helpers.go 2026-08-13 13:08:15.000000000 +0200 +++ new/kubeone-1.14.3/test/e2e/helpers.go 2026-08-24 14:27:50.000000000 +0200 @@ -136,7 +136,8 @@ } func makeBinWithPath(path string, args ...string) *testexec.Exec { - return testexec.NewExec("make", + return testexec.NewExec( + "make", testexec.WithArgs(args...), testexec.WithEnv(os.Environ()), testexec.InDir(path), ++++++ kubeone.obsinfo ++++++ --- /var/tmp/diff_new_pack.dO8bzS/_old 2026-08-28 19:55:04.560111880 +0200 +++ /var/tmp/diff_new_pack.dO8bzS/_new 2026-08-28 19:55:04.569112195 +0200 @@ -1,5 +1,5 @@ name: kubeone -version: 1.14.2 -mtime: 1786619295 -commit: 950b70196b7c7bf86732435b83771ae49ce3fad6 +version: 1.14.3 +mtime: 1787574470 +commit: affb434261a5cd6f1649c8ae3d5ae361f5c03fcd ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/kubeone/vendor.tar.gz /work/SRC/openSUSE:Factory/.kubeone.new.1265/vendor.tar.gz differ: char 26, line 1
