[kubernetes] upgrade versions to address CVE-2023-2728 (#10220)

* [kubernetes] Add hashes for 1.27.3, 1.26.6, 1.25.11 * [kubernetes] make 1.26.6 default
kubernetes-sigs · Jun 16, 2023 · 658d62b · 658d62b
1 parent 0139bfd
commit 658d62b
Show file tree

Hide file tree

Showing 4 changed files with 39 additions and 3 deletions.
diff --git a/README.md b/README.md
@@ -161,7 +161,7 @@ Note: Upstart/SysV init based OS types are not supported.
 ## Supported Components
 
 - Core
-  - [kubernetes](https://github.com/kubernetes/kubernetes) v1.26.5
+  - [kubernetes](https://github.com/kubernetes/kubernetes) v1.26.6
   - [etcd](https://github.com/etcd-io/etcd) v3.5.6
   - [docker](https://www.docker.com/) v20.10 (see note)
   - [containerd](https://containerd.io/) v1.7.2

diff --git a/inventory/sample/group_vars/k8s_cluster/k8s-cluster.yml b/inventory/sample/group_vars/k8s_cluster/k8s-cluster.yml
@@ -17,7 +17,7 @@ kube_token_dir: "{{ kube_config_dir }}/tokens"
 kube_api_anonymous_auth: true
 
 ## Change this to use another Kubernetes version, e.g. a current beta release
-kube_version: v1.26.5
+kube_version: v1.26.6
 
 # Where the binaries will be downloaded.
 # Note: ensure that you've enough disk space (about 1G)

diff --git a/roles/download/defaults/main.yml b/roles/download/defaults/main.yml
@@ -232,13 +232,16 @@ crio_archive_checksums:
 # Kubernetes versions above Kubespray's current target version are untested and should be used with caution.
 kubelet_checksums:
   arm:
+    v1.27.3: 0
     v1.27.2: 0
+    v1.26.6: 47d9d6e7a26e70b2f446afaa81a219e14cced8046134023637018e5cf36fa0d8
     v1.26.5: dff080c8fe2b8cce04acc2762452259334b233ac41f557588663daae362db5e2
     v1.26.4: cf78ddc97894d518408bc33ec99e2f4e744d7ab26e598fa6a053b09296c80d00
     v1.26.3: 2c862e06293db71a3644728519818a5448db87347ce5862045e5f3eca6ec13e2
     v1.26.2: 24af93f03e514bb66c6bbacb9f00f393ed57df6e43b2846337518ec0b4d1b717
     v1.26.1: fe940be695f73c03275f049cb17f2bf2eb137014334930ce5c6de12573c1f21f
     v1.26.0: cabf702fc542fcbb1173c713f1cbec72fd1d9ded36cdcdbbd05d9c308d8360d1
+    v1.25.11: 36c60e804e41aae3c5c830f398c8a7743a349f887c155077f34445d402ed858e
     v1.25.10: 3078a5ed11ebb84fc613da259904db59ec3e620665602bd45af16ef9983800cc
     v1.25.9: 31cdc6043660cf6fe7c3360439ea8ed49dbc56cb2d01e65aff6d26d0ba7faacc
     v1.25.8: f9e920805ad9d2fa761010c6be94deed1885b6a1ba892ff18e57ad97d275490d
@@ -251,13 +254,16 @@ kubelet_checksums:
     v1.25.1: 6fe430ad91e1ed50cf5cc396aa204fda0889c36b8a3b84619d633cd9a6a146e2
     v1.25.0: ad45ac3216aa186648fd034dec30a00c1a2d2d1187cab8aae21aa441a13b4faa
   arm64:
+    v1.27.3: 2838fd55340d59f777d7bd7e5989fc72b7a0ca198cf4f3f723cd9956859ce942
     v1.27.2: 810cd9a611e9f084e57c9ee466e33c324b2228d4249ff38c2588a0cc3224f10d
+    v1.26.6: 44c2cd64e1317df8252bca1cf196227c543005a3b10d52fb114401cb1617f32f
     v1.26.5: 4256e46eb36bea3c31b0372c4d5b669964a2cfb1eabb7e0e2e0dcb1cdd81f2e8
     v1.26.4: a925a5d20d29c362f0c4d60cb005f21d44576837510e0bc65c817961969b4e7e
     v1.26.3: d360f919c279a05441b27178030c3d17134c1f257c95f4b22bdb28c2290993e7
     v1.26.2: 33e77f93d141d3b9e207ae50ff050186dea084ac26f9ec88280f85bab9dad310
     v1.26.1: f4b514162b52d19909cf0ddf0b816d8d7751c5f1de60eda90cd84dcccc56c399
     v1.26.0: fb033c1d079cac8babb04a25abecbc6cc1a2afb53f56ef1d73f8dc3b15b3c09e
+    v1.25.11: 0140cf3aee0b9386fc8430c32bc94c169a6e50640947933733896e01490cbf6c
     v1.25.10: 16ad59fb38337b19afa29ca7d05ccd61e859599c598445d0e11c760fc1086e6b
     v1.25.9: 5af11a2948c87076540bb78ee99563b373301c9d8bb694395e2ce7fb14a76344
     v1.25.8: 6c995b05b54cc0ce4eb6bf3097565167069b2ce45ba965972430c631c467d239
@@ -270,13 +276,16 @@ kubelet_checksums:
     v1.25.1: b6baa99b99ecc1f358660208a9a27b64c65f3314ff95a84c73091b51ac98484b
     v1.25.0: 69572a7b3d179d4a479aa2e0f90e2f091d8d84ef33a35422fc89975dc137a590
   amd64:
+    v1.27.3: c0e18da6a55830cf4910ecd7261597c66ea3f8f58cf44d4adb6bdcb6e2e6f0bf
     v1.27.2: a0d12afcab3b2836de4a427558d067bebdff040e9b306b0512c93d9d2a066579
+    v1.26.6: da82477404414eb342d6b93533f372aa1c41956a57517453ef3d39ebbfdf8cc2
     v1.26.5: ad5e318ff0e81bc2bef874b2038489722cfcc117bd31726d0193056458c18bff
     v1.26.4: 1e29fe7a097066cfbc1c1d2ab37f8b883c8f3fec414bafe8f2c7b960b0fb60fe
     v1.26.3: 992d6298bd494b65f54c838419773c4976aca72dfb36271c613537efae7ab7d2
     v1.26.2: e6dd2ee432a093492936ff8505f084b5ed41662f50231f1c11ae08ee8582a3f5
     v1.26.1: 8b99dd73f309ca1ac4005db638e82f949ffcfb877a060089ec0e729503db8198
     v1.26.0: b64949fe696c77565edbe4100a315b6bf8f0e2325daeb762f7e865f16a6e54b5
+    v1.25.11: 4801700e29405e49a7e51cccb806decd65ca3a5068d459a40be3b4c5846b9a46
     v1.25.10: 280515c431b8c966e475de1b953b960242549cb86f0821ad819224085b449c9b
     v1.25.9: 0eb951237379ef023aa52deedb0df5eae54fa71caeb52bdb30a4660806bed23e
     v1.25.8: 3aa821165da6f1bb9fdb82a91b294b7f4abfc4fdfb21a94fa1e09a9785876516
@@ -289,13 +298,16 @@ kubelet_checksums:
     v1.25.1: 63e38bcbc4437ce10227695f8722371ec0d178067f1031d09fe1f59b6fcf214a
     v1.25.0: 7f9183fce12606818612ce80b6c09757452c4fb50aefea5fc5843951c5020e24
   ppc64le:
+    v1.27.3: a8ea8f9e857d1140b569fff88d8d750dccaea0aa33d624befbb67f725b5340a0
     v1.27.2: 3af92edd687f7932e7fce877944dfe5efa437bf5f171fc8331725c631a1a86ef
+    v1.26.6: 1ca83394b04d3017803a30671eb699a61201e00b656e1fc5b833bd83f8835ff4
     v1.26.5: 787a27855228760a6eeeb200a0e7eab82cb7603b0045ddbadcc1a24f9dc2f178
     v1.26.4: a0d653ed1f5f90d380edb5d6ff77ff61e39e8f1a39dd68719c0126ef6f19c381
     v1.26.3: a12a78b68ec8ac76d482d8a95e0d927ffedac62e630af5fef704f5fecf8e92d9
     v1.26.2: 6f03bc34a34856a3e0e667bea8d6817596c53c7093482d44516163639ce39625
     v1.26.1: bf795bec9b01a9497f46f47b2f3466628fba11f7834c9b2a0f3fa1028c061144
     v1.26.0: df13099611f4eada791e5f41948ef94f7b52c468dff1a6fcad54f4c56b467a7f
+    v1.25.11: 5e3aad37146dfd7ea39df39ce4d3e5b32b975d1ff74b2fef61af61c295af3838
     v1.25.10: 933aa6e25c5d1401705eca42d6b98592c920178a8bc7517c9c97cb42722c14c9
     v1.25.9: 090c3ab9eeab564a8191954c041e9e4e840b835bbaa134e42752337b3e652d0a
     v1.25.8: 98927a677d63079da20a1101f892d977a84b25bab5f811aebcd66687566a4b2a
@@ -309,13 +321,16 @@ kubelet_checksums:
     v1.25.0: 8015f88d1364cf77436c157de8a5d3ab87f1cb2dfaa9289b097c92a808845491
 kubectl_checksums:
   arm:
+    v1.27.3: 0
     v1.27.2: 0
+    v1.26.6: 1d67bdd384d382decb5b61a3c28d5b05ef0251296551bbc46102c02518c41c02
     v1.26.5: eb3e9bac15ebd31f7e4c21782f60ce9285f59ad4072a78bb53b27029b33609b6
     v1.26.4: 69fccd21b6f7a27d96cda7e6e0cfd3741e3a5bcd7348f2f6e2e9c7550809f030
     v1.26.3: cdb3f670396a775119eb84436d6c0e7e29f24ec511681049200eeb39df9960fb
     v1.26.2: a8944021fc9022f73976d8ab2736f21b64b30de3b2a6ccfddd0316ca1d3c6a1d
     v1.26.1: e067d59ac19e287026b5c2b75a1077b1312ba82ad64ee01dff2cdafd57720f39
     v1.26.0: 8eef310d0de238c582556d81ab8cbe8d6fca3c0e43ee337a905dcdd3578f9dda
+    v1.25.11: e405402a30caccc22fad9d5b51b5a03c3ebf96815c2a724d7cf322f9485c83be
     v1.25.10: 252dcefaa23709524db6554870877831c6208f1023beca6fb2dd2bb3d271673b
     v1.25.9: 56040c7eb3b5f0a0a11cec70e4170ce71985e33ee30292d020b083d303c39eb2
     v1.25.8: 0d2563c2656be268c977a79e076b6b4eb95eef17f16ac6723da61768f638c8d3
@@ -328,13 +343,16 @@ kubectl_checksums:
     v1.25.1: e8c6bfd8797e42501d14c7d75201324630f15436f712c4f7e46ce8c8067d9adc
     v1.25.0: 0b907cfdcabafae7d2d4ac7de55e3ef814df999acdf6b1bd0ecf6abbef7c7131
   arm64:
+    v1.27.3: 7bb7fec4e28e0b50b603d64e47629e812408751bd1e0ce059b2fee83b0e3ff6f
     v1.27.2: 1b0966692e398efe71fe59f913eaec44ffd4468cc1acd00bf91c29fa8ff8f578
+    v1.26.6: 8261d35cd374c438104bb5257e6c9dafb8443cd0eed8272b219ec5aa17b8ca40
     v1.26.5: c3b3de6a2d7f7e1902c65f6774754e62e86d464ed259509ba29a2a209a515ddf
     v1.26.4: eea4054825a4c20cc09bc15abcb1354725ad886338e6892141a071caab91d4b6
     v1.26.3: 0f62cbb6fafa109f235a08348d74499a57bb294c2a2e6ee34be1fa83432fec1d
     v1.26.2: 291e85bef77e8440205c873686e9938d7f87c0534e9a491de64e3cc0584295b6
     v1.26.1: 4027cb0a2840bc14ec3f18151b3360dd2d1f6ce730ed5ac28bd846c17e7d73f5
     v1.26.0: 79b14e4ddada9e81d2989f36a89faa9e56f8abe6e0246e7bdc305c93c3731ea4
+    v1.25.11: 2eb5109735c1442dd3b91a15ff74e24748efd967a3d7bf1a2b16e7aa78400677
     v1.25.10: d5ade4f3962dc89ac80fb47010231f79b3f83b2c9569183941c0189157e514fa
     v1.25.9: 741e65b681a22074aaf9459b57dbcef6a9e993472b3019a87f57c191bc68575f
     v1.25.8: 28cf5f666cb0c11a8a2b3e5ae4bf93e56b74ab6051720c72bb231887bfc1a7c6
@@ -347,13 +365,16 @@ kubectl_checksums:
     v1.25.1: 73602eabf20b877f88642fafcbe1eda439162c2c1dbcc9ed09fdd4d7ac9919ea
     v1.25.0: 24db547bbae294c5c44f2b4a777e45f0e2f3d6295eace0d0c4be2b2dfa45330d
   amd64:
+    v1.27.3: fba6c062e754a120bc8105cde1344de200452fe014a8759e06e4eec7ed258a09
     v1.27.2: 4f38ee903f35b300d3b005a9c6bfb9a46a57f92e89ae602ef9c129b91dc6c5a5
+    v1.26.6: ee23a539b5600bba9d6a404c6d4ea02af3abee92ad572f1b003d6f5a30c6f8ab
     v1.26.5: 5080bb2e9631fe095139f7e973df9a31eb73e668d1785ffeb524832aed8f87c3
     v1.26.4: 636ac0eaa467dbceda4b2c4e33662adc9709f5ce40341c9fc1a687fc276ac02d
     v1.26.3: 026c8412d373064ab0359ed0d1a25c975e9ce803a093d76c8b30c5996ad73e75
     v1.26.2: fcf86d21fb1a49b012bce7845cf00081d2dd7a59f424b28621799deceb5227b3
     v1.26.1: d57be22cfa25f7427cfb538cfc8853d763878f8b36c76ce93830f6f2d67c6e5d
     v1.26.0: b6769d8ac6a0ed0f13b307d289dc092ad86180b08f5b5044af152808c04950ae
+    v1.25.11: d12bc7d26313546827683ff7b79d0cb2e7ac17cdad4dce138ed518e478b148a7
     v1.25.10: 62129056c9e390b23253aadfce1fe23e43316cb3d79a73303d687d86d73707f2
     v1.25.9: aaa5ea3b3630730d2b8a8ef3cccb14b47754602c7207c7b0717158ae83c7cb10
     v1.25.8: 80e70448455f3d19c3cb49bd6ff6fc913677f4f240d368fa2b9f0d400c8cd16e
@@ -366,13 +387,16 @@ kubectl_checksums:
     v1.25.1: 9cc2d6ce59740b6acf6d5d4a04d4a7d839b0a81373248ef0ce6c8d707143435b
     v1.25.0: e23cc7092218c95c22d8ee36fb9499194a36ac5b5349ca476886b7edc0203885
   ppc64le:
+    v1.27.3: b2da3d262e61ffc3e70511977a933b344b18efa5c238bfa388438bc321bc5e11
     v1.27.2: efee037a276f72c77cc230194d7dadf943a5778be46b7985edeb414d27894266
+    v1.26.6: b56f4422fcf0dc095e777d29eb7eb18cf080098ea47ffdd0a1797a0f8e897fac
     v1.26.5: 85f18cad385df01f1758d17c0a0b7f865288121dcc64229a07abb32279b0e44b
     v1.26.4: 4f5686ea674d37a639389d95c2a32661986f6f06b530076da2b178839b213414
     v1.26.3: dbfc55dcb86e3e7a2ca01df0317d27b8026861d472bcc7bffa33f45dee693927
     v1.26.2: 88ab57859ac8c4559834d901884ed906c88ea4fa41191e576b34b6c8bd6b7a16
     v1.26.1: 5cfd9fea8dea939a2bd914e1caa7829aa537702ddf14e02a59bf451146942fde
     v1.26.0: 9e2b2a03ee5fc726ebd39b6a09498b6508ade8831262859c280d39df33f8830d
+    v1.25.11: 46eb5c04ab0e7c42fcc453828e2fd0997233a07693d27beb80169da586c9ee97
     v1.25.10: f5fb1795d7397318e41a73fedc9158edece5a7476cc1d681292cdfa9db7673f5
     v1.25.9: 07ce8e81e6d511df81778d40df1234e01b7796dcbe64f0b01480059269531086
     v1.25.8: 4a86d6b9dcc0ce19f9299c62c1e93d52e4d50004d21eb219b9bb0a5ebba6df6f
@@ -386,13 +410,16 @@ kubectl_checksums:
     v1.25.0: dffe15c626d7921d77e85f390b15f13ebc3a9699785f6b210cd13fa6f4653513
 kubeadm_checksums:
   arm:
+    v1.27.3: 0
     v1.27.2: 0
+    v1.26.6: 345775290b5379ab24c6cb333bc26d9bc934a1ce8b795c2948d28608b9d6cb9c
     v1.26.5: 7915c12580524fe9e15e35849c77c7a6981849b26ea9324b21efc7b2d66727d1
     v1.26.4: 5517d64c030bc48211b9025b8b70bee1430cc278c3e1dc520967b189f6fa66f9
     v1.26.3: 7ceaf94361e6e7a9f877388df30e424604504de4e36f24aafe30f31f2a27600c
     v1.26.2: 84982a359967571baf572aa1a61397906f987d989854ebb67a03b09ea4502af4
     v1.26.1: 0dbd0a197013a3fdc5cb3e012fa8b0d50f38fd3dda56254f4648e08ac867fb60
     v1.26.0: 3368537a5e78fdbfa3cbcae0d19102372a0f4eb6b6a78e7b6b187d5db86d6c9e
+    v1.25.11: 0179f8650321fce8b51f3969edb4c923c62b1ddc4480ea0e784d018287a5d458
     v1.25.10: d76e23ed5b3c041c58f7dd3829d3ef40ef4ed57f7d91d4e90371bd743b192743
     v1.25.9: 653641f84fb5152858f2f2c8817e37a0216b2882dc35e545b6bdf77aa3b7048c
     v1.25.8: 3ea26bc2f880db6c3e462601fc639b34501373ee849a364f5aaa6eb263c6ffba
@@ -405,13 +432,16 @@ kubeadm_checksums:
     v1.25.1: ecb7a459ca23dfe527f4eedf33fdb0df3d55519481a8be3f04a5c3a4d41fa588
     v1.25.0: 67b6b58cb6abd5a4c9024aeaca103f999077ce6ec8e2ca13ced737f5139ad2f0
   arm64:
+    v1.27.3: 495e2193ed779d25584b4b532796c2270df0f7139ef15fb89dc7980603615ef4
     v1.27.2: 8f01f363f7c7f92de2f2276124a895503cdc5a60ff549440170880f296b087eb
+    v1.26.6: 003c7740750ad92d2ff3d58d4a15015906c120c93c7aa605ba98edd936061542
     v1.26.5: d7eede9b44850e16cbe4bb8946a79c03c2c0272f7adc726e63b3a1ac09f13b55
     v1.26.4: a97052d393e60027c354e97c88493aa14a76c8cfb7418bbdf8425b3711d86e3a
     v1.26.3: e9a7dbca77f9576a98af1db8747e9dc13e930e40295eaa259dd99fd6e17a173f
     v1.26.2: f210d8617acf7c601196294f7ca97e4330b75dad00df6b8dd12393730c501473
     v1.26.1: db101c4bb8e33bd69241de227ed317feee6d44dbd674891e1b9e11c6e8b369bb
     v1.26.0: 652844c9518786273e094825b74a1988c871552dc6ccf71366558e67409859d1
+    v1.25.11: 570d87d56a24778bd0854270eeddc8bcfb275f1c711cced5b5948f631e0c3ede
     v1.25.10: 373766681e012768d7302ce571f06c82ea18636ae95fe0b6f0fa474e51bf4deb
     v1.25.9: cd15d440685f54a2c7a6cf1d96093fa7a55b9dfae8c48448b3ea92a922c07c72
     v1.25.8: e7f0c738e48d905eae145631497a9ef59e792300e5247be2a1fbaa0a8907b308
@@ -424,13 +454,16 @@ kubeadm_checksums:
     v1.25.1: f4d57d89c53b7fb3fe347c9272ed40ec55eab120f4f09cd6b684e97cb9cbf1f0
     v1.25.0: 07d9c6ffd3676502acd323c0ca92f44328a1f0e89a7d42a664099fd3016cf16b
   amd64:
+    v1.27.3: 2cd663f25c2490bd614a6c0ad9089a47ef315caf0dbdf78efd787d5653b1c6e3
     v1.27.2: 95c4bfb7929900506a42de4d92280f06efe6b47e0a32cbc1f5a1ed737592977a
+    v1.26.6: ba699c3c26aaf64ef46d34621de9f3b62e37656943e09f23dc3bf5aa7b3f5094
     v1.26.5: 793767419c382bae2dc2c9396baafbf051bfa3214accf40dcd7c5ea405583802
     v1.26.4: aa1a137aa2c3427f199ff652c96b11d6b124358296996eb7b8cbde220607b2fe
     v1.26.3: 87a1bf6603e252a8fa46be44382ea218cb8e4f066874d149dc589d0f3a405fed
     v1.26.2: 277d880dc6d79994fd333e49d42943b7c9183b1c4ffdbf9da59f806acec7fd82
     v1.26.1: 1531abfe96e2e9d8af9219192c65d04df8507a46a081ae1e101478e95d2b63da
     v1.26.0: 72631449f26b7203701a1b99f6914f31859583a0e247c3ac0f6aaf59ca80af19
+    v1.25.11: 6ff43cc8266a21c7b62878a0a9507b085bbb079a37b095fab5bcd31f2dbd80e0
     v1.25.10: 7300211efa962d1ca27121ae68be6f06c7f2dca4ca8e5087a2a69f36daa6b9dc
     v1.25.9: 157be24d998111a51d52db016f9010cd6418506a028f87b5a712f518b392a3f3
     v1.25.8: 2ae844776ac48273d868f92a7ed9d54b4a6e9b0e4d05874d77b7c0f4bfa60379
@@ -443,13 +476,16 @@ kubeadm_checksums:
     v1.25.1: adaa1e65c1cf9267a01e889d4c13884f883cf27948f00abb823f10486f1a8420
     v1.25.0: 10b30b87af2cdc865983d742891eba467d038f94f3926bf5d0174f1abf6628f8
   ppc64le:
+    v1.27.3: 3f174f096a5aaa62fe0298e9a16b3af9031cb1d2a29fc3823f80f9a2144d5fd4
     v1.27.2: 412bccd310f4976201d359f0637745944944c0fb2ace315e5e07b180445530c7
+    v1.26.6: d09b5e2221c26f47e2f048b0c375540db14090a4d7b71a708fe51a2b3d0e2b81
     v1.26.5: d6296ca1be9ab7914e9fcd770ce46184db41f5613cec5b1b3de9d51439052fba
     v1.26.4: f573ce081e884cc642750f8915d3fdf0ce5696c0d5b4f918d0ff20e76e482739
     v1.26.3: 80b00286e54a87645908c7fd284caef0b1cd7fab5a1948518a6a8d6b0852d49d
     v1.26.2: f5d610c4a8a4f99ac6dd07f8cbc0db1de602d5a8895cdaa282c72e36183e310b
     v1.26.1: 89ad4d60d266e32147c51e7fb972a9aa6c382391822fa00e27a20f769f3586e8
     v1.26.0: 2431061b3980caa9950a9faaafdfb5cd641e0f787d381db5d10737c03ad800c6
+    v1.25.11: 96e9f98ed3808e82548f9aceda746680692e395cdabc483080d61aefe7899a56
     v1.25.10: 62a7eaac2b478e8ed42789ba30c77685700e90290586123f2226aa70a2d13de4
     v1.25.9: 0be1986ce05fba717fb59b281fb6cddc98daf580ab466cf43b511b1d0b826a43
     v1.25.8: b3ea1579aa1b44d8499e35d6daa7da56a90387b99068a6e0692d6fba0899728d

diff --git a/roles/kubespray-defaults/defaults/main.yaml b/roles/kubespray-defaults/defaults/main.yaml
@@ -16,7 +16,7 @@ kubelet_fail_swap_on: true
 kubelet_swap_behavior: LimitedSwap
 
 ## Change this to use another Kubernetes version, e.g. a current beta release
-kube_version: v1.26.5
+kube_version: v1.26.6
 
 ## The minimum version working
 kube_version_min_required: v1.25.0