diff --git a/contrib/offline/README.md b/contrib/offline/README.md
index 6ea7885e864..c059f5f8a20 100644
--- a/contrib/offline/README.md
+++ b/contrib/offline/README.md
@@ -27,7 +27,7 @@ manage-offline-container-images.sh   register
 
 ## generate_list.sh
 
-This script generates the list of downloaded files and the list of container images by `roles/download/defaults/main.yml` file.
+This script generates the list of downloaded files and the list of container images by `roles/download/defaults/main/main.yml` file.
 
 Run this script will execute `generate_list.yml` playbook in kubespray root directory and generate four files,
 all downloaded files url in files.list, all container images in images.list, jinja2 templates in *.template.
diff --git a/contrib/offline/generate_list.sh b/contrib/offline/generate_list.sh
index acbd9fc1486..646360f1da7 100755
--- a/contrib/offline/generate_list.sh
+++ b/contrib/offline/generate_list.sh
@@ -5,7 +5,7 @@ CURRENT_DIR=$(cd $(dirname $0); pwd)
 TEMP_DIR="${CURRENT_DIR}/temp"
 REPO_ROOT_DIR="${CURRENT_DIR%/contrib/offline}"
 
-: ${DOWNLOAD_YML:="roles/download/defaults/main.yml"}
+: ${DOWNLOAD_YML:="roles/download/defaults/main/main.yml"}
 
 mkdir -p ${TEMP_DIR}
 
@@ -19,7 +19,7 @@ sed -n '/^downloads:/,/download_defaults:/p' ${REPO_ROOT_DIR}/${DOWNLOAD_YML} \
     | sed 'N;s#\n# #g' | tr ' ' ':' | sed 's/\"//g' > ${TEMP_DIR}/images.list.template
 
 # add kube-* images to images list template
-# Those container images are downloaded by kubeadm, then roles/download/defaults/main.yml
+# Those container images are downloaded by kubeadm, then roles/download/defaults/main/main.yml
 # doesn't contain those images. That is reason why here needs to put those images into the
 # list separately.
 KUBE_IMAGES="kube-apiserver kube-controller-manager kube-scheduler kube-proxy"
diff --git a/docs/offline-environment.md b/docs/offline-environment.md
index 79200a931a8..8019d6c8654 100644
--- a/docs/offline-environment.md
+++ b/docs/offline-environment.md
@@ -90,7 +90,7 @@ If you use the settings like the one above, you'll need to define in your invent
 
 * `registry_host`: Container image registry. If you _don't_ use the same repository path for the container images that
   the ones defined
-  in [Download's role defaults](https://github.com/kubernetes-sigs/kubespray/blob/master/roles/download/defaults/main.yml)
+  in [Download's role defaults](https://github.com/kubernetes-sigs/kubespray/blob/master/roles/download/defaults/main/main.yml)
   , you need to override the `*_image_repo` for these container images. If you want to make your life easier, use the
   same repository path, you won't have to override anything else.
 * `registry_addr`: Container image registry, but only have [domain or ip]:[port].
diff --git a/roles/download/defaults/main.yml b/roles/download/defaults/main/checksums.yml
similarity index 53%
rename from roles/download/defaults/main.yml
rename to roles/download/defaults/main/checksums.yml
index 94fbf917290..b380b8d598a 100644
--- a/roles/download/defaults/main.yml
+++ b/roles/download/defaults/main/checksums.yml
@@ -1,186 +1,4 @@
 ---
-local_release_dir: /tmp/releases
-download_cache_dir: /tmp/kubespray_cache
-
-# If this is true, debug information will be displayed but
-# may contain some private data, so it is recommended to set it to false
-# in the production environment.
-unsafe_show_logs: false
-
-# do not delete remote cache files after using them
-# NOTE: Setting this parameter to TRUE is only really useful when developing kubespray
-download_keep_remote_cache: false
-
-# Only useful when download_run_once is false: Localy cached files and images are
-# uploaded to kubernetes nodes. Also, images downloaded on those nodes are copied
-# back to the ansible runner's cache, if they are not yet preset.
-download_force_cache: false
-
-# Used to only evaluate vars from download role
-skip_downloads: false
-
-# Optionally skip kubeadm images download
-skip_kubeadm_images: false
-kubeadm_images: {}
-
-# if this is set to true will only download files once. Doesn't work
-# on Flatcar Container Linux by Kinvolk unless the download_localhost is true and localhost
-# is running another OS type. Default compress level is 1 (fastest).
-download_run_once: false
-download_compress: 1
-
-# if this is set to true will download container
-download_container: true
-
-# if this is set to true, uses the localhost for download_run_once mode
-# (requires docker and sudo to access docker). You may want this option for
-# local caching of docker images or for Flatcar Container Linux by Kinvolk cluster nodes.
-# Otherwise, uses the first node in the kube_control_plane group to store images
-# in the download_run_once mode.
-download_localhost: false
-
-# Always pull images if set to True. Otherwise check by the repo's tag/digest.
-download_always_pull: false
-
-# Some problems may occur when downloading files over https proxy due to ansible bug
-# https://github.com/ansible/ansible/issues/32750. Set this variable to False to disable
-# SSL validation of get_url module. Note that kubespray will still be performing checksum validation.
-download_validate_certs: true
-
-# Use the first kube_control_plane if download_localhost is not set
-download_delegate: "{% if download_localhost %}localhost{% else %}{{ groups['kube_control_plane'][0] }}{% endif %}"
-
-# Allow control the times of download retries for files and containers
-download_retries: 4
-
-# The docker_image_info_command might seems weird but we are using raw/endraw and `{{ `{{` }}` to manage the double jinja2 processing
-docker_image_pull_command: "{{ docker_bin_dir }}/docker pull"
-docker_image_info_command: "{{ docker_bin_dir }}/docker images -q | xargs -i {{ '{{' }} docker_bin_dir }}/docker inspect -f {% raw %}'{{ '{{' }} if .RepoTags }}{{ '{{' }} join .RepoTags \",\" }}{{ '{{' }} end }}{{ '{{' }} if .RepoDigests }},{{ '{{' }} join .RepoDigests \",\" }}{{ '{{' }} end }}' {% endraw %} {} | tr '\n' ','"
-nerdctl_image_info_command: "{{ bin_dir }}/nerdctl -n k8s.io images --format '{% raw %}{{ .Repository }}:{{ .Tag }}{% endraw %}' 2>/dev/null | grep -v ^:$ | tr '\n' ','"
-nerdctl_image_pull_command: "{{ bin_dir }}/nerdctl -n k8s.io pull --quiet {{ nerdctl_extra_flags }}"
-crictl_image_info_command: "{{ bin_dir }}/crictl images --verbose | awk -F ': ' '/RepoTags|RepoDigests/ {print $2}' | tr '\n' ','"
-crictl_image_pull_command: "{{ bin_dir }}/crictl pull"
-
-image_command_tool: "{%- if container_manager == 'containerd' -%}nerdctl{%- elif container_manager == 'crio' -%}crictl{%- else -%}{{ container_manager }}{%- endif -%}"
-image_command_tool_on_localhost: "{{ image_command_tool }}"
-
-image_pull_command: "{{ lookup('vars', image_command_tool + '_image_pull_command') }}"
-image_info_command: "{{ lookup('vars', image_command_tool + '_image_info_command') }}"
-image_pull_command_on_localhost: "{{ lookup('vars', image_command_tool_on_localhost + '_image_pull_command') }}"
-image_info_command_on_localhost: "{{ lookup('vars', image_command_tool_on_localhost + '_image_info_command') }}"
-
-# Arch of Docker images and needed packages
-image_arch: "{{host_architecture | default('amd64')}}"
-
-# Nerdctl insecure flag set
-nerdctl_extra_flags: '{%- if containerd_insecure_registries is defined and containerd_insecure_registries|length>0 -%}--insecure-registry{%- else -%}{%- endif -%}'
-
-# Versions
-kubeadm_version: "{{ kube_version }}"
-crun_version: 1.4.5
-runc_version: v1.1.7
-kata_containers_version: 2.4.1
-youki_version: 0.0.1
-gvisor_version: 20210921
-containerd_version: 1.7.1
-cri_dockerd_version: 0.3.0
-
-# this is relevant when container_manager == 'docker'
-docker_containerd_version: 1.6.4
-
-# gcr and kubernetes image repo define
-gcr_image_repo: "gcr.io"
-kube_image_repo: "registry.k8s.io"
-
-# docker image repo define
-docker_image_repo: "docker.io"
-
-# quay image repo define
-quay_image_repo: "quay.io"
-
-# github image repo define (ex multus only use that)
-github_image_repo: "ghcr.io"
-
-# TODO(mattymo): Move calico versions to roles/network_plugins/calico/defaults
-# after migration to container download
-calico_version: "v3.25.1"
-calico_ctl_version: "{{ calico_version }}"
-calico_cni_version: "{{ calico_version }}"
-calico_flexvol_version: "{{ calico_version }}"
-calico_policy_version: "{{ calico_version }}"
-calico_typha_version: "{{ calico_version }}"
-calico_apiserver_version: "{{ calico_version }}"
-typha_enabled: false
-calico_apiserver_enabled: false
-
-flannel_version: "v0.21.4"
-flannel_cni_version: "v1.2.0"
-cni_version: "v1.3.0"
-weave_version: 2.8.1
-pod_infra_version: "3.9"
-
-cilium_version: "v1.13.0"
-cilium_cli_version: "v0.13.1"
-cilium_enable_hubble: false
-
-kube_ovn_version: "v1.10.7"
-kube_ovn_dpdk_version: "19.11-{{ kube_ovn_version }}"
-kube_router_version: "v1.5.1"
-multus_version: "v3.8"
-helm_version: "v3.12.0"
-nerdctl_version: "1.4.0"
-krew_version: "v0.4.3"
-skopeo_version: v1.10.0
-
-# Get kubernetes major version (i.e. 1.17.4 => 1.17)
-kube_major_version: "{{ kube_version | regex_replace('^v([0-9])+\\.([0-9]+)\\.[0-9]+', 'v\\1.\\2') }}"
-
-etcd_supported_versions:
-  v1.26: "v3.5.6"
-  v1.25: "v3.5.6"
-  v1.24: "v3.5.6"
-etcd_version: "{{ etcd_supported_versions[kube_major_version] }}"
-
-crictl_supported_versions:
-  v1.26: "v1.26.0"
-  v1.25: "v1.25.0"
-  v1.24: "v1.24.0"
-crictl_version: "{{ crictl_supported_versions[kube_major_version] }}"
-
-crio_supported_versions:
-  v1.26: v1.26.3
-  v1.25: v1.25.3
-  v1.24: v1.24.5
-crio_version: "{{ crio_supported_versions[kube_major_version] }}"
-
-yq_version: "v4.33.3"
-
-# Download URLs
-kubelet_download_url: "https://dl.k8s.io/release/{{ kube_version }}/bin/linux/{{ image_arch }}/kubelet"
-kubectl_download_url: "https://dl.k8s.io/release/{{ kube_version }}/bin/linux/{{ image_arch }}/kubectl"
-kubeadm_download_url: "https://dl.k8s.io/release/{{ kubeadm_version }}/bin/linux/{{ image_arch }}/kubeadm"
-etcd_download_url: "https://github.com/etcd-io/etcd/releases/download/{{ etcd_version }}/etcd-{{ etcd_version }}-linux-{{ image_arch }}.tar.gz"
-cni_download_url: "https://github.com/containernetworking/plugins/releases/download/{{ cni_version }}/cni-plugins-linux-{{ image_arch }}-{{ cni_version }}.tgz"
-calicoctl_download_url: "https://github.com/projectcalico/calico/releases/download/{{ calico_ctl_version }}/calicoctl-linux-{{ image_arch }}"
-calico_crds_download_url: "https://github.com/projectcalico/calico/archive/{{ calico_version }}.tar.gz"
-ciliumcli_download_url: "https://github.com/cilium/cilium-cli/releases/download/{{ cilium_cli_version }}/cilium-linux-{{ image_arch }}.tar.gz"
-crictl_download_url: "https://github.com/kubernetes-sigs/cri-tools/releases/download/{{ crictl_version }}/crictl-{{ crictl_version }}-{{ ansible_system | lower }}-{{ image_arch }}.tar.gz"
-crio_download_url: "https://storage.googleapis.com/cri-o/artifacts/cri-o.{{ image_arch }}.{{ crio_version }}.tar.gz"
-helm_download_url: "https://get.helm.sh/helm-{{ helm_version }}-linux-{{ image_arch }}.tar.gz"
-runc_download_url: "https://github.com/opencontainers/runc/releases/download/{{ runc_version }}/runc.{{ image_arch }}"
-crun_download_url: "https://github.com/containers/crun/releases/download/{{ crun_version }}/crun-{{ crun_version }}-linux-{{ image_arch }}"
-youki_download_url: "https://github.com/containers/youki/releases/download/v{{ youki_version }}/youki_v{{ youki_version | regex_replace('\\.', '_') }}_linux.tar.gz"
-kata_containers_download_url: "https://github.com/kata-containers/kata-containers/releases/download/{{ kata_containers_version }}/kata-static-{{ kata_containers_version }}-{{ ansible_architecture }}.tar.xz"
-# gVisor only supports amd64 and uses x86_64 to in the download link
-gvisor_runsc_download_url: "https://storage.googleapis.com/gvisor/releases/release/{{ gvisor_version }}/{{ ansible_architecture }}/runsc"
-gvisor_containerd_shim_runsc_download_url: "https://storage.googleapis.com/gvisor/releases/release/{{ gvisor_version }}/{{ ansible_architecture }}/containerd-shim-runsc-v1"
-nerdctl_download_url: "https://github.com/containerd/nerdctl/releases/download/v{{ nerdctl_version }}/nerdctl-{{ nerdctl_version }}-{{ ansible_system | lower }}-{{ image_arch }}.tar.gz"
-krew_download_url: "https://github.com/kubernetes-sigs/krew/releases/download/{{ krew_version }}/krew-{{ host_os }}_{{ image_arch }}.tar.gz"
-containerd_download_url: "https://github.com/containerd/containerd/releases/download/v{{ containerd_version }}/containerd-{{ containerd_version }}-linux-{{ image_arch }}.tar.gz"
-cri_dockerd_download_url: "https://github.com/Mirantis/cri-dockerd/releases/download/v{{ cri_dockerd_version }}/cri-dockerd-{{ cri_dockerd_version }}.{{ image_arch }}.tgz"
-skopeo_download_url: "https://github.com/lework/skopeo-binary/releases/download/{{ skopeo_version }}/skopeo-linux-{{ image_arch }}"
-yq_download_url: "https://github.com/mikefarah/yq/releases/download/{{ yq_version }}/yq_linux_{{ image_arch }}"
-
 crictl_checksums:
   arm:
     v1.26.0: 88891ee29eab097ab1ed88d55094e7bf464f3347bc9f056140e45efeddd15b33
@@ -1066,999 +884,3 @@ yq_checksums:
     v4.33.3: 4ee662847c588c3ef2fec8bfb304e8739e3dbaba87ccb9a608d691c88f5b64dc
     v4.33.2: fbcc9551afd66622ffd68ad417837139741b2ad0eef9af1bb4b64e3596679ffa
     v4.30.6: 2aabdd748d301fc2286ea9f73eb20477b4ce173fbf072e0102fff1fcbed05985
-
-etcd_binary_checksum: "{{ etcd_binary_checksums[image_arch][etcd_version] }}"
-cni_binary_checksum: "{{ cni_binary_checksums[image_arch][cni_version] }}"
-kubelet_binary_checksum: "{{ kubelet_checksums[image_arch][kube_version] }}"
-kubectl_binary_checksum: "{{ kubectl_checksums[image_arch][kube_version] }}"
-kubeadm_binary_checksum: "{{ kubeadm_checksums[image_arch][kubeadm_version] }}"
-yq_binary_checksum: "{{ yq_checksums[image_arch][yq_version] }}"
-calicoctl_binary_checksum: "{{ calicoctl_binary_checksums[image_arch][calico_ctl_version] }}"
-calico_crds_archive_checksum: "{{ calico_crds_archive_checksums[calico_version] }}"
-ciliumcli_binary_checksum: "{{ ciliumcli_binary_checksums[image_arch][cilium_cli_version] }}"
-crictl_binary_checksum: "{{ crictl_checksums[image_arch][crictl_version] }}"
-crio_archive_checksum: "{{ crio_archive_checksums[image_arch][crio_version] }}"
-cri_dockerd_archive_checksum: "{{ cri_dockerd_archive_checksums[image_arch][cri_dockerd_version] }}"
-helm_archive_checksum: "{{ helm_archive_checksums[image_arch][helm_version] }}"
-runc_binary_checksum: "{{ runc_checksums[image_arch][runc_version] }}"
-crun_binary_checksum: "{{ crun_checksums[image_arch][crun_version] }}"
-youki_archive_checksum: "{{ youki_checksums[image_arch][youki_version] }}"
-kata_containers_binary_checksum: "{{ kata_containers_binary_checksums[image_arch][kata_containers_version] }}"
-gvisor_runsc_binary_checksum: "{{ gvisor_runsc_binary_checksums[image_arch][gvisor_version] }}"
-gvisor_containerd_shim_binary_checksum: "{{ gvisor_containerd_shim_binary_checksums[image_arch][gvisor_version] }}"
-nerdctl_archive_checksum: "{{ nerdctl_archive_checksums[image_arch][nerdctl_version] }}"
-krew_archive_checksum: "{{ krew_archive_checksums[host_os][image_arch][krew_version] }}"
-containerd_archive_checksum: "{{ containerd_archive_checksums[image_arch][containerd_version] }}"
-skopeo_binary_checksum: "{{ skopeo_binary_checksums[image_arch][skopeo_version] }}"
-
-# Containers
-# In some cases, we need a way to set --registry-mirror or --insecure-registry for docker,
-# it helps a lot for local private development or bare metal environment.
-# So you need define --registry-mirror or --insecure-registry, and modify the following url address.
-# example:
-# You need to deploy kubernetes cluster on local private development.
-# Also provide the address of your own private registry.
-# And use --insecure-registry options for docker
-kube_proxy_image_repo: "{{ kube_image_repo }}/kube-proxy"
-etcd_image_repo: "{{ quay_image_repo }}/coreos/etcd"
-etcd_image_tag: "{{ etcd_version }}"
-flannel_image_repo: "{{ docker_image_repo }}/flannel/flannel"
-flannel_image_tag: "{{ flannel_version }}"
-flannel_init_image_repo: "{{ docker_image_repo }}/flannelcni/flannel-cni-plugin"
-flannel_init_image_tag: "{{ flannel_cni_version }}"
-calico_node_image_repo: "{{ quay_image_repo }}/calico/node"
-calico_node_image_tag: "{{ calico_version }}"
-calico_cni_image_repo: "{{ quay_image_repo }}/calico/cni"
-calico_cni_image_tag: "{{ calico_cni_version }}"
-calico_flexvol_image_repo: "{{ quay_image_repo }}/calico/pod2daemon-flexvol"
-calico_flexvol_image_tag: "{{ calico_flexvol_version }}"
-calico_policy_image_repo: "{{ quay_image_repo }}/calico/kube-controllers"
-calico_policy_image_tag: "{{ calico_policy_version }}"
-calico_typha_image_repo: "{{ quay_image_repo }}/calico/typha"
-calico_typha_image_tag: "{{ calico_typha_version }}"
-calico_apiserver_image_repo: "{{ quay_image_repo }}/calico/apiserver"
-calico_apiserver_image_tag: "{{ calico_apiserver_version }}"
-pod_infra_image_repo: "{{ kube_image_repo }}/pause"
-pod_infra_image_tag: "{{ pod_infra_version }}"
-netcheck_version: "v1.2.2"
-netcheck_agent_image_repo: "{{ docker_image_repo }}/mirantis/k8s-netchecker-agent"
-netcheck_agent_image_tag: "{{ netcheck_version }}"
-netcheck_server_image_repo: "{{ docker_image_repo }}/mirantis/k8s-netchecker-server"
-netcheck_server_image_tag: "{{ netcheck_version }}"
-netcheck_etcd_image_tag: "v3.4.17"
-weave_kube_image_repo: "{{ docker_image_repo }}/weaveworks/weave-kube"
-weave_kube_image_tag: "{{ weave_version }}"
-weave_npc_image_repo: "{{ docker_image_repo }}/weaveworks/weave-npc"
-weave_npc_image_tag: "{{ weave_version }}"
-cilium_image_repo: "{{ quay_image_repo }}/cilium/cilium"
-cilium_image_tag: "{{ cilium_version }}"
-cilium_operator_image_repo: "{{ quay_image_repo }}/cilium/operator"
-cilium_operator_image_tag: "{{ cilium_version }}"
-cilium_hubble_relay_image_repo: "{{ quay_image_repo }}/cilium/hubble-relay"
-cilium_hubble_relay_image_tag: "{{ cilium_version }}"
-cilium_hubble_certgen_image_repo: "{{ quay_image_repo }}/cilium/certgen"
-cilium_hubble_certgen_image_tag: "v0.1.8"
-cilium_hubble_ui_image_repo: "{{ quay_image_repo }}/cilium/hubble-ui"
-cilium_hubble_ui_image_tag: "v0.11.0"
-cilium_hubble_ui_backend_image_repo: "{{ quay_image_repo }}/cilium/hubble-ui-backend"
-cilium_hubble_ui_backend_image_tag: "v0.11.0"
-cilium_hubble_envoy_image_repo: "{{ docker_image_repo }}/envoyproxy/envoy"
-cilium_hubble_envoy_image_tag: "v1.22.5"
-kube_ovn_container_image_repo: "{{ docker_image_repo }}/kubeovn/kube-ovn"
-kube_ovn_container_image_tag: "{{ kube_ovn_version }}"
-kube_ovn_dpdk_container_image_repo: "{{ docker_image_repo }}/kubeovn/kube-ovn-dpdk"
-kube_ovn_dpdk_container_image_tag: "{{ kube_ovn_dpdk_version }}"
-kube_router_image_repo: "{{ docker_image_repo }}/cloudnativelabs/kube-router"
-kube_router_image_tag: "{{ kube_router_version }}"
-multus_image_repo: "{{ github_image_repo }}/k8snetworkplumbingwg/multus-cni"
-multus_image_tag: "{{ multus_version }}"
-
-kube_vip_image_repo: "{{ github_image_repo }}/kube-vip/kube-vip"
-kube_vip_image_tag: v0.5.12
-nginx_image_repo: "{{ docker_image_repo }}/library/nginx"
-nginx_image_tag: 1.23.2-alpine
-haproxy_image_repo: "{{ docker_image_repo }}/library/haproxy"
-haproxy_image_tag: 2.6.6-alpine
-
-# Coredns version should be supported by corefile-migration (or at least work with)
-# bundle with kubeadm; if not 'basic' upgrade can sometimes fail
-
-coredns_version: "{{ 'v1.9.3' if (kube_version is version('v1.25.0','>=')) else 'v1.8.6' }}"
-coredns_image_is_namespaced: "{{ (coredns_version is version('v1.7.1','>=')) }}"
-
-coredns_image_repo: "{{ kube_image_repo }}{{'/coredns/coredns' if (coredns_image_is_namespaced | bool) else '/coredns' }}"
-coredns_image_tag: "{{ coredns_version if (coredns_image_is_namespaced | bool) else (coredns_version | regex_replace('^v', '')) }}"
-
-nodelocaldns_version: "1.22.18"
-nodelocaldns_image_repo: "{{ kube_image_repo }}/dns/k8s-dns-node-cache"
-nodelocaldns_image_tag: "{{ nodelocaldns_version }}"
-
-dnsautoscaler_version: v1.8.8
-dnsautoscaler_image_repo: "{{ kube_image_repo }}/cpa/cluster-proportional-autoscaler"
-dnsautoscaler_image_tag: "{{ dnsautoscaler_version }}"
-
-registry_version: "2.8.1"
-registry_image_repo: "{{ docker_image_repo }}/library/registry"
-registry_image_tag: "{{ registry_version }}"
-metrics_server_version: "v0.6.3"
-metrics_server_image_repo: "{{ kube_image_repo }}/metrics-server/metrics-server"
-metrics_server_image_tag: "{{ metrics_server_version }}"
-local_volume_provisioner_version: "v2.5.0"
-local_volume_provisioner_image_repo: "{{ kube_image_repo }}/sig-storage/local-volume-provisioner"
-local_volume_provisioner_image_tag: "{{ local_volume_provisioner_version }}"
-cephfs_provisioner_version: "v2.1.0-k8s1.11"
-cephfs_provisioner_image_repo: "{{ quay_image_repo }}/external_storage/cephfs-provisioner"
-cephfs_provisioner_image_tag: "{{ cephfs_provisioner_version }}"
-rbd_provisioner_version: "v2.1.1-k8s1.11"
-rbd_provisioner_image_repo: "{{ quay_image_repo }}/external_storage/rbd-provisioner"
-rbd_provisioner_image_tag: "{{ rbd_provisioner_version }}"
-local_path_provisioner_version: "v0.0.23"
-local_path_provisioner_image_repo: "{{ docker_image_repo }}/rancher/local-path-provisioner"
-local_path_provisioner_image_tag: "{{ local_path_provisioner_version }}"
-ingress_nginx_version: "v1.7.1"
-ingress_nginx_controller_image_repo: "{{ kube_image_repo }}/ingress-nginx/controller"
-ingress_nginx_controller_image_tag: "{{ ingress_nginx_version }}"
-ingress_nginx_kube_webhook_certgen_image_repo: "{{ kube_image_repo }}/ingress-nginx/kube-webhook-certgen"
-ingress_nginx_kube_webhook_certgen_image_tag: "v20230312-helm-chart-4.5.2-28-g66a760794"
-alb_ingress_image_repo: "{{ docker_image_repo }}/amazon/aws-alb-ingress-controller"
-alb_ingress_image_tag: "v1.1.9"
-cert_manager_version: "v1.11.1"
-cert_manager_controller_image_repo: "{{ quay_image_repo }}/jetstack/cert-manager-controller"
-cert_manager_controller_image_tag: "{{ cert_manager_version }}"
-cert_manager_cainjector_image_repo: "{{ quay_image_repo }}/jetstack/cert-manager-cainjector"
-cert_manager_cainjector_image_tag: "{{ cert_manager_version }}"
-cert_manager_webhook_image_repo: "{{ quay_image_repo }}/jetstack/cert-manager-webhook"
-cert_manager_webhook_image_tag: "{{ cert_manager_version }}"
-
-csi_attacher_image_repo: "{{ kube_image_repo }}/sig-storage/csi-attacher"
-csi_attacher_image_tag: "v3.3.0"
-csi_provisioner_image_repo: "{{ kube_image_repo }}/sig-storage/csi-provisioner"
-csi_provisioner_image_tag: "v3.0.0"
-csi_snapshotter_image_repo: "{{ kube_image_repo }}/sig-storage/csi-snapshotter"
-csi_snapshotter_image_tag: "v5.0.0"
-csi_resizer_image_repo: "{{ kube_image_repo }}/sig-storage/csi-resizer"
-csi_resizer_image_tag: "v1.3.0"
-csi_node_driver_registrar_image_repo: "{{ kube_image_repo }}/sig-storage/csi-node-driver-registrar"
-csi_node_driver_registrar_image_tag: "v2.4.0"
-csi_livenessprobe_image_repo: "{{ kube_image_repo }}/sig-storage/livenessprobe"
-csi_livenessprobe_image_tag: "v2.5.0"
-
-snapshot_controller_supported_versions:
-  v1.26: "v4.2.1"
-  v1.25: "v4.2.1"
-  v1.24: "v4.2.1"
-snapshot_controller_image_repo: "{{ kube_image_repo }}/sig-storage/snapshot-controller"
-snapshot_controller_image_tag: "{{ snapshot_controller_supported_versions[kube_major_version] }}"
-
-cinder_csi_plugin_version: "v1.22.0"
-cinder_csi_plugin_image_repo: "{{ docker_image_repo }}/k8scloudprovider/cinder-csi-plugin"
-cinder_csi_plugin_image_tag: "{{ cinder_csi_plugin_version }}"
-
-aws_ebs_csi_plugin_version: "v0.5.0"
-aws_ebs_csi_plugin_image_repo: "{{ docker_image_repo }}/amazon/aws-ebs-csi-driver"
-aws_ebs_csi_plugin_image_tag: "{{ aws_ebs_csi_plugin_version }}"
-
-gcp_pd_csi_plugin_version: "v1.4.0"
-gcp_pd_csi_plugin_image_repo: "{{ kube_image_repo }}/cloud-provider-gcp/gcp-compute-persistent-disk-csi-driver"
-gcp_pd_csi_plugin_image_tag: "{{ gcp_pd_csi_plugin_version }}"
-
-azure_csi_image_repo: "mcr.microsoft.com/oss/kubernetes-csi"
-azure_csi_provisioner_image_tag: "v2.2.2"
-azure_csi_attacher_image_tag: "v3.3.0"
-azure_csi_resizer_image_tag: "v1.3.0"
-azure_csi_livenessprobe_image_tag: "v2.5.0"
-azure_csi_node_registrar_image_tag: "v2.4.0"
-azure_csi_snapshotter_image_tag: "v3.0.3"
-azure_csi_plugin_version: "v1.10.0"
-azure_csi_plugin_image_repo: "mcr.microsoft.com/k8s/csi"
-azure_csi_plugin_image_tag: "{{ azure_csi_plugin_version }}"
-
-gcp_pd_csi_image_repo: "gke.gcr.io"
-gcp_pd_csi_driver_image_tag: "v0.7.0-gke.0"
-gcp_pd_csi_provisioner_image_tag: "v1.5.0-gke.0"
-gcp_pd_csi_attacher_image_tag: "v2.1.1-gke.0"
-gcp_pd_csi_resizer_image_tag: "v0.4.0-gke.0"
-gcp_pd_csi_registrar_image_tag: "v1.2.0-gke.0"
-
-dashboard_image_repo: "{{ docker_image_repo }}/kubernetesui/dashboard"
-dashboard_image_tag: "v2.7.0"
-dashboard_metrics_scraper_repo: "{{ docker_image_repo }}/kubernetesui/metrics-scraper"
-dashboard_metrics_scraper_tag: "v1.0.8"
-
-metallb_speaker_image_repo: "{{ quay_image_repo }}/metallb/speaker"
-metallb_controller_image_repo: "{{ quay_image_repo }}/metallb/controller"
-metallb_version: v0.13.9
-
-downloads:
-  netcheck_server:
-    enabled: "{{ deploy_netchecker }}"
-    container: true
-    repo: "{{ netcheck_server_image_repo }}"
-    tag: "{{ netcheck_server_image_tag }}"
-    sha256: "{{ netcheck_server_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  netcheck_agent:
-    enabled: "{{ deploy_netchecker }}"
-    container: true
-    repo: "{{ netcheck_agent_image_repo }}"
-    tag: "{{ netcheck_agent_image_tag }}"
-    sha256: "{{ netcheck_agent_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  etcd:
-    container: "{{ etcd_deployment_type != 'host' }}"
-    file: "{{ etcd_deployment_type == 'host' }}"
-    enabled: true
-    version: "{{ etcd_version }}"
-    dest: "{{ local_release_dir }}/etcd-{{ etcd_version }}-linux-{{ image_arch }}.tar.gz"
-    repo: "{{ etcd_image_repo }}"
-    tag: "{{ etcd_image_tag }}"
-    sha256: >-
-      {{ etcd_binary_checksum if (etcd_deployment_type == 'host')
-      else etcd_digest_checksum|d(None) }}
-    url: "{{ etcd_download_url }}"
-    unarchive: "{{ etcd_deployment_type == 'host' }}"
-    owner: "root"
-    mode: "0755"
-    groups:
-    - etcd
-
-  cni:
-    enabled: true
-    file: true
-    version: "{{ cni_version }}"
-    dest: "{{ local_release_dir }}/cni-plugins-linux-{{ image_arch }}-{{ cni_version }}.tgz"
-    sha256: "{{ cni_binary_checksum }}"
-    url: "{{ cni_download_url }}"
-    unarchive: false
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  kubeadm:
-    enabled: true
-    file: true
-    version: "{{ kubeadm_version }}"
-    dest: "{{ local_release_dir }}/kubeadm-{{ kubeadm_version }}-{{ image_arch }}"
-    sha256: "{{ kubeadm_binary_checksum }}"
-    url: "{{ kubeadm_download_url }}"
-    unarchive: false
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  kubelet:
-    enabled: true
-    file: true
-    version: "{{ kube_version }}"
-    dest: "{{ local_release_dir }}/kubelet-{{ kube_version }}-{{ image_arch }}"
-    sha256: "{{ kubelet_binary_checksum }}"
-    url: "{{ kubelet_download_url }}"
-    unarchive: false
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  kubectl:
-    enabled: true
-    file: true
-    version: "{{ kube_version }}"
-    dest: "{{ local_release_dir }}/kubectl-{{ kube_version }}-{{ image_arch }}"
-    sha256: "{{ kubectl_binary_checksum }}"
-    url: "{{ kubectl_download_url }}"
-    unarchive: false
-    owner: "root"
-    mode: "0755"
-    groups:
-    - kube_control_plane
-
-  crictl:
-    file: true
-    enabled: true
-    version: "{{ crictl_version }}"
-    dest: "{{ local_release_dir }}/crictl-{{ crictl_version }}-linux-{{ image_arch }}.tar.gz"
-    sha256: "{{ crictl_binary_checksum }}"
-    url: "{{ crictl_download_url }}"
-    unarchive: true
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  crio:
-    file: true
-    enabled: "{{ container_manager == 'crio' }}"
-    version: "{{ crio_version }}"
-    dest: "{{ local_release_dir }}/cri-o.{{ image_arch }}.{{ crio_version }}tar.gz"
-    sha256: "{{ crio_archive_checksum }}"
-    url: "{{ crio_download_url }}"
-    unarchive: true
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  cri_dockerd:
-    file: true
-    enabled: "{{ container_manager == 'docker' }}"
-    version: "{{ cri_dockerd_version }}"
-    dest: "{{ local_release_dir }}/cri-dockerd-{{ cri_dockerd_version }}.{{ image_arch }}.tar.gz"
-    sha256: "{{ cri_dockerd_archive_checksum }}"
-    url: "{{ cri_dockerd_download_url }}"
-    unarchive: true
-    unarchive_extra_opts:
-    - --strip=1
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  crun:
-    file: true
-    enabled: "{{ crun_enabled }}"
-    version: "{{ crun_version }}"
-    dest: "{{ local_release_dir }}/crun"
-    sha256: "{{ crun_binary_checksum }}"
-    url: "{{ crun_download_url }}"
-    unarchive: false
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  youki:
-    file: true
-    enabled: "{{ youki_enabled }}"
-    version: "{{ youki_version }}"
-    dest: "{{ local_release_dir }}/youki_v{{ youki_version | regex_replace('\\.', '_') }}_linux.tar.gz"
-    sha256: "{{ youki_archive_checksum }}"
-    url: "{{ youki_download_url }}"
-    unarchive: true
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  runc:
-    file: true
-    enabled: "{{ container_manager == 'containerd' }}"
-    version: "{{ runc_version }}"
-    dest: "{{ local_release_dir }}/runc"
-    sha256: "{{ runc_binary_checksum }}"
-    url: "{{ runc_download_url }}"
-    unarchive: false
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  kata_containers:
-    enabled: "{{ kata_containers_enabled }}"
-    file: true
-    version: "{{ kata_containers_version }}"
-    dest: "{{ local_release_dir }}/kata-static-{{ kata_containers_version }}-{{ image_arch }}.tar.xz"
-    sha256: "{{ kata_containers_binary_checksum }}"
-    url: "{{ kata_containers_download_url }}"
-    unarchive: false
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  containerd:
-    enabled: "{{ container_manager == 'containerd' }}"
-    file: true
-    version: "{{ containerd_version }}"
-    dest: "{{ local_release_dir }}/containerd-{{ containerd_version }}-linux-{{ image_arch }}.tar.gz"
-    sha256: "{{ containerd_archive_checksum }}"
-    url: "{{ containerd_download_url }}"
-    unarchive: false
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  gvisor_runsc:
-    enabled: "{{ gvisor_enabled }}"
-    file: true
-    version: "{{ gvisor_version }}"
-    dest: "{{ local_release_dir }}/gvisor-runsc"
-    sha256: "{{ gvisor_runsc_binary_checksum }}"
-    url: "{{ gvisor_runsc_download_url }}"
-    unarchive: false
-    owner: "root"
-    mode: 755
-    groups:
-    - k8s_cluster
-
-  gvisor_containerd_shim:
-    enabled: "{{ gvisor_enabled }}"
-    file: true
-    version: "{{ gvisor_version }}"
-    dest: "{{ local_release_dir }}/gvisor-containerd-shim-runsc-v1"
-    sha256: "{{ gvisor_containerd_shim_binary_checksum }}"
-    url: "{{ gvisor_containerd_shim_runsc_download_url }}"
-    unarchive: false
-    owner: "root"
-    mode: 755
-    groups:
-    - k8s_cluster
-
-  nerdctl:
-    file: true
-    enabled: "{{ container_manager == 'containerd' }}"
-    version: "{{ nerdctl_version }}"
-    dest: "{{ local_release_dir }}/nerdctl-{{ nerdctl_version }}-linux-{{ image_arch }}.tar.gz"
-    sha256: "{{ nerdctl_archive_checksum }}"
-    url: "{{ nerdctl_download_url }}"
-    unarchive: true
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  skopeo:
-    file: true
-    enabled: "{{ container_manager == 'crio' }}"
-    version: "{{ skopeo_version }}"
-    dest: "{{ local_release_dir }}/skopeo"
-    sha256: "{{ skopeo_binary_checksum }}"
-    url: "{{ skopeo_download_url }}"
-    unarchive: false
-    owner: "root"
-    mode: "0755"
-    groups:
-    - kube_control_plane
-
-  cilium:
-    enabled: "{{ kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool }}"
-    container: true
-    repo: "{{ cilium_image_repo }}"
-    tag: "{{ cilium_image_tag }}"
-    sha256: "{{ cilium_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  cilium_operator:
-    enabled: "{{ kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool }}"
-    container: true
-    repo: "{{ cilium_operator_image_repo }}"
-    tag: "{{ cilium_operator_image_tag }}"
-    sha256: "{{ cilium_operator_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  cilium_hubble_relay:
-    enabled: "{{ cilium_enable_hubble }}"
-    container: true
-    repo: "{{ cilium_hubble_relay_image_repo }}"
-    tag: "{{ cilium_hubble_relay_image_tag }}"
-    sha256: "{{ cilium_hubble_relay_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  cilium_hubble_certgen:
-    enabled: "{{ cilium_enable_hubble }}"
-    container: true
-    repo: "{{ cilium_hubble_certgen_image_repo }}"
-    tag: "{{ cilium_hubble_certgen_image_tag }}"
-    sha256: "{{ cilium_hubble_certgen_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  cilium_hubble_ui:
-    enabled: "{{ cilium_enable_hubble }}"
-    container: true
-    repo: "{{ cilium_hubble_ui_image_repo }}"
-    tag: "{{ cilium_hubble_ui_image_tag }}"
-    sha256: "{{ cilium_hubble_ui_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  cilium_hubble_ui_backend:
-    enabled: "{{ cilium_enable_hubble }}"
-    container: true
-    repo: "{{ cilium_hubble_ui_backend_image_repo }}"
-    tag: "{{ cilium_hubble_ui_backend_image_tag }}"
-    sha256: "{{ cilium_hubble_ui_backend_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  cilium_hubble_envoy:
-    enabled: "{{ cilium_enable_hubble }}"
-    container: true
-    repo: "{{ cilium_hubble_envoy_image_repo }}"
-    tag: "{{ cilium_hubble_envoy_image_tag }}"
-    sha256: "{{ cilium_hubble_envoy_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  ciliumcli:
-    enabled: "{{ kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool }}"
-    file: true
-    version: "{{ cilium_cli_version }}"
-    dest: "{{ local_release_dir }}/cilium"
-    sha256: "{{ ciliumcli_binary_checksum }}"
-    url: "{{ ciliumcli_download_url }}"
-    unarchive: true
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  multus:
-    enabled: "{{ kube_network_plugin_multus }}"
-    container: true
-    repo: "{{ multus_image_repo }}"
-    tag: "{{ multus_image_tag }}"
-    sha256: "{{ multus_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  flannel:
-    enabled: "{{ kube_network_plugin == 'flannel' }}"
-    container: true
-    repo: "{{ flannel_image_repo }}"
-    tag: "{{ flannel_image_tag }}"
-    sha256: "{{ flannel_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  flannel_init:
-    enabled: "{{ kube_network_plugin == 'flannel' }}"
-    container: true
-    repo: "{{ flannel_init_image_repo }}"
-    tag: "{{ flannel_init_image_tag }}"
-    sha256: "{{ flannel_init_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  calicoctl:
-    enabled: "{{ kube_network_plugin == 'calico' }}"
-    file: true
-    version: "{{ calico_ctl_version }}"
-    dest: "{{ local_release_dir }}/calicoctl"
-    sha256: "{{ calicoctl_binary_checksum }}"
-    url: "{{ calicoctl_download_url }}"
-    mirrors:
-    - "{{ calicoctl_download_url }}"
-    unarchive: false
-    owner: "root"
-    mode: "0755"
-    groups:
-    - k8s_cluster
-
-  calico_node:
-    enabled: "{{ kube_network_plugin == 'calico' }}"
-    container: true
-    repo: "{{ calico_node_image_repo }}"
-    tag: "{{ calico_node_image_tag }}"
-    sha256: "{{ calico_node_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  calico_cni:
-    enabled: "{{ kube_network_plugin == 'calico' }}"
-    container: true
-    repo: "{{ calico_cni_image_repo }}"
-    tag: "{{ calico_cni_image_tag }}"
-    sha256: "{{ calico_cni_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  calico_flexvol:
-    enabled: "{{ kube_network_plugin == 'calico' }}"
-    container: true
-    repo: "{{ calico_flexvol_image_repo }}"
-    tag: "{{ calico_flexvol_image_tag }}"
-    sha256: "{{ calico_flexvol_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  calico_policy:
-    enabled: "{{ enable_network_policy and kube_network_plugin in ['calico'] }}"
-    container: true
-    repo: "{{ calico_policy_image_repo }}"
-    tag: "{{ calico_policy_image_tag }}"
-    sha256: "{{ calico_policy_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  calico_typha:
-    enabled: "{{ typha_enabled }}"
-    container: true
-    repo: "{{ calico_typha_image_repo }}"
-    tag: "{{ calico_typha_image_tag }}"
-    sha256: "{{ calico_typha_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  calico_apiserver:
-    enabled: "{{ calico_apiserver_enabled }}"
-    container: true
-    repo: "{{ calico_apiserver_image_repo }}"
-    tag: "{{ calico_apiserver_image_tag }}"
-    sha256: "{{ calico_apiserver_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  calico_crds:
-    file: true
-    enabled: "{{ kube_network_plugin == 'calico' and calico_datastore == 'kdd' }}"
-    version: "{{ calico_version }}"
-    dest: "{{ local_release_dir }}/calico-{{ calico_version }}-kdd-crds/{{ calico_version }}.tar.gz"
-    sha256: "{{ calico_crds_archive_checksum }}"
-    url: "{{ calico_crds_download_url }}"
-    unarchive: true
-    unarchive_extra_opts:
-    - "{{ '--strip=6' if (calico_version is version('v3.22.3','<')) else '--strip=3' }}"
-    - "--wildcards"
-    - "{{ '*/_includes/charts/calico/crds/kdd/' if (calico_version is version('v3.22.3','<')) else '*/libcalico-go/config/crd/' }}"
-    owner: "root"
-    mode: "0755"
-    groups:
-    - kube_control_plane
-
-  weave_kube:
-    enabled: "{{ kube_network_plugin == 'weave' }}"
-    container: true
-    repo: "{{ weave_kube_image_repo }}"
-    tag: "{{ weave_kube_image_tag }}"
-    sha256: "{{ weave_kube_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  weave_npc:
-    enabled: "{{ kube_network_plugin == 'weave' }}"
-    container: true
-    repo: "{{ weave_npc_image_repo }}"
-    tag: "{{ weave_npc_image_tag }}"
-    sha256: "{{ weave_npc_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  kube_ovn:
-    enabled: "{{ kube_network_plugin == 'kube-ovn' }}"
-    container: true
-    repo: "{{ kube_ovn_container_image_repo }}"
-    tag: "{{ kube_ovn_container_image_tag }}"
-    sha256: "{{ kube_ovn_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  kube_router:
-    enabled: "{{ kube_network_plugin == 'kube-router' }}"
-    container: true
-    repo: "{{ kube_router_image_repo }}"
-    tag: "{{ kube_router_image_tag }}"
-    sha256: "{{ kube_router_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  pod_infra:
-    enabled: true
-    container: true
-    repo: "{{ pod_infra_image_repo }}"
-    tag: "{{ pod_infra_image_tag }}"
-    sha256: "{{ pod_infra_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  kube-vip:
-    enabled: "{{ kube_vip_enabled }}"
-    container: true
-    repo: "{{ kube_vip_image_repo }}"
-    tag: "{{ kube_vip_image_tag }}"
-    sha256: "{{ kube_vip_digest_checksum|default(None) }}"
-    groups:
-    - kube_control_plane
-
-  nginx:
-    enabled: "{{ loadbalancer_apiserver_localhost and loadbalancer_apiserver_type == 'nginx' }}"
-    container: true
-    repo: "{{ nginx_image_repo }}"
-    tag: "{{ nginx_image_tag }}"
-    sha256: "{{ nginx_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  haproxy:
-    enabled: "{{ loadbalancer_apiserver_localhost and loadbalancer_apiserver_type == 'haproxy' }}"
-    container: true
-    repo: "{{ haproxy_image_repo }}"
-    tag: "{{ haproxy_image_tag }}"
-    sha256: "{{ haproxy_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  coredns:
-    enabled: "{{ dns_mode in ['coredns', 'coredns_dual'] }}"
-    container: true
-    repo: "{{ coredns_image_repo }}"
-    tag: "{{ coredns_image_tag }}"
-    sha256: "{{ coredns_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  nodelocaldns:
-    enabled: "{{ enable_nodelocaldns }}"
-    container: true
-    repo: "{{ nodelocaldns_image_repo }}"
-    tag: "{{ nodelocaldns_image_tag }}"
-    sha256: "{{ nodelocaldns_digest_checksum|default(None) }}"
-    groups:
-    - k8s_cluster
-
-  dnsautoscaler:
-    enabled: "{{ dns_mode in ['coredns', 'coredns_dual'] }}"
-    container: true
-    repo: "{{ dnsautoscaler_image_repo }}"
-    tag: "{{ dnsautoscaler_image_tag }}"
-    sha256: "{{ dnsautoscaler_digest_checksum|default(None) }}"
-    groups:
-    - kube_control_plane
-
-  helm:
-    enabled: "{{ helm_enabled }}"
-    file: true
-    version: "{{ helm_version }}"
-    dest: "{{ local_release_dir }}/helm-{{ helm_version }}/helm-{{ helm_version }}-linux-{{ image_arch }}.tar.gz"
-    sha256: "{{ helm_archive_checksum }}"
-    url: "{{ helm_download_url }}"
-    unarchive: true
-    owner: "root"
-    mode: "0755"
-    groups:
-    - kube_control_plane
-
-  krew:
-    enabled: "{{ krew_enabled }}"
-    file: true
-    version: "{{ krew_version }}"
-    dest: "{{ local_release_dir }}/krew-{{ host_os }}_{{ image_arch }}.tar.gz"
-    sha256: "{{ krew_archive_checksum }}"
-    url: "{{ krew_download_url }}"
-    unarchive: true
-    owner: "root"
-    mode: "0755"
-    groups:
-    - kube_control_plane
-
-  registry:
-    enabled: "{{ registry_enabled }}"
-    container: true
-    repo: "{{ registry_image_repo }}"
-    tag: "{{ registry_image_tag }}"
-    sha256: "{{ registry_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  metrics_server:
-    enabled: "{{ metrics_server_enabled }}"
-    container: true
-    repo: "{{ metrics_server_image_repo }}"
-    tag: "{{ metrics_server_image_tag }}"
-    sha256: "{{ metrics_server_digest_checksum|default(None) }}"
-    groups:
-    - kube_control_plane
-
-  local_volume_provisioner:
-    enabled: "{{ local_volume_provisioner_enabled }}"
-    container: true
-    repo: "{{ local_volume_provisioner_image_repo }}"
-    tag: "{{ local_volume_provisioner_image_tag }}"
-    sha256: "{{ local_volume_provisioner_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  cephfs_provisioner:
-    enabled: "{{ cephfs_provisioner_enabled }}"
-    container: true
-    repo: "{{ cephfs_provisioner_image_repo }}"
-    tag: "{{ cephfs_provisioner_image_tag }}"
-    sha256: "{{ cephfs_provisioner_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  rbd_provisioner:
-    enabled: "{{ rbd_provisioner_enabled }}"
-    container: true
-    repo: "{{ rbd_provisioner_image_repo }}"
-    tag: "{{ rbd_provisioner_image_tag }}"
-    sha256: "{{ rbd_provisioner_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  local_path_provisioner:
-    enabled: "{{ local_path_provisioner_enabled }}"
-    container: true
-    repo: "{{ local_path_provisioner_image_repo }}"
-    tag: "{{ local_path_provisioner_image_tag }}"
-    sha256: "{{ local_path_provisioner_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  ingress_nginx_controller:
-    enabled: "{{ ingress_nginx_enabled }}"
-    container: true
-    repo: "{{ ingress_nginx_controller_image_repo }}"
-    tag: "{{ ingress_nginx_controller_image_tag }}"
-    sha256: "{{ ingress_nginx_controller_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  ingress_alb_controller:
-    enabled: "{{ ingress_alb_enabled }}"
-    container: true
-    repo: "{{ alb_ingress_image_repo }}"
-    tag: "{{ alb_ingress_image_tag }}"
-    sha256: "{{ ingress_alb_controller_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  cert_manager_controller:
-    enabled: "{{ cert_manager_enabled }}"
-    container: true
-    repo: "{{ cert_manager_controller_image_repo }}"
-    tag: "{{ cert_manager_controller_image_tag }}"
-    sha256: "{{ cert_manager_controller_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  cert_manager_cainjector:
-    enabled: "{{ cert_manager_enabled }}"
-    container: true
-    repo: "{{ cert_manager_cainjector_image_repo }}"
-    tag: "{{ cert_manager_cainjector_image_tag }}"
-    sha256: "{{ cert_manager_cainjector_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  cert_manager_webhook:
-    enabled: "{{ cert_manager_enabled }}"
-    container: true
-    repo: "{{ cert_manager_webhook_image_repo }}"
-    tag: "{{ cert_manager_webhook_image_tag }}"
-    sha256: "{{ cert_manager_webhook_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  csi_attacher:
-    enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
-    container: true
-    repo: "{{ csi_attacher_image_repo }}"
-    tag: "{{ csi_attacher_image_tag }}"
-    sha256: "{{ csi_attacher_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  csi_provisioner:
-    enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
-    container: true
-    repo: "{{ csi_provisioner_image_repo }}"
-    tag: "{{ csi_provisioner_image_tag }}"
-    sha256: "{{ csi_provisioner_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  csi_snapshotter:
-    enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
-    container: true
-    repo: "{{ csi_snapshotter_image_repo }}"
-    tag: "{{ csi_snapshotter_image_tag }}"
-    sha256: "{{ csi_snapshotter_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  snapshot_controller:
-    enabled: "{{ csi_snapshot_controller_enabled }}"
-    container: true
-    repo: "{{ snapshot_controller_image_repo }}"
-    tag: "{{ snapshot_controller_image_tag }}"
-    sha256: "{{ snapshot_controller_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  csi_resizer:
-    enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
-    container: true
-    repo: "{{ csi_resizer_image_repo }}"
-    tag: "{{ csi_resizer_image_tag }}"
-    sha256: "{{ csi_resizer_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  csi_node_driver_registrar:
-    enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
-    container: true
-    repo: "{{ csi_node_driver_registrar_image_repo }}"
-    tag: "{{ csi_node_driver_registrar_image_tag }}"
-    sha256: "{{ csi_node_driver_registrar_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  cinder_csi_plugin:
-    enabled: "{{ cinder_csi_enabled }}"
-    container: true
-    repo: "{{ cinder_csi_plugin_image_repo }}"
-    tag: "{{ cinder_csi_plugin_image_tag }}"
-    sha256: "{{ cinder_csi_plugin_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  aws_ebs_csi_plugin:
-    enabled: "{{ aws_ebs_csi_enabled }}"
-    container: true
-    repo: "{{ aws_ebs_csi_plugin_image_repo }}"
-    tag: "{{ aws_ebs_csi_plugin_image_tag }}"
-    sha256: "{{ aws_ebs_csi_plugin_digest_checksum|default(None) }}"
-    groups:
-    - kube_node
-
-  dashboard:
-    enabled: "{{ dashboard_enabled }}"
-    container: true
-    repo: "{{ dashboard_image_repo }}"
-    tag: "{{ dashboard_image_tag }}"
-    sha256: "{{ dashboard_digest_checksum|default(None) }}"
-    groups:
-    - kube_control_plane
-
-  dashboard_metrics_scrapper:
-    enabled: "{{ dashboard_enabled }}"
-    container: true
-    repo: "{{ dashboard_metrics_scraper_repo }}"
-    tag: "{{ dashboard_metrics_scraper_tag }}"
-    sha256: "{{ dashboard_digest_checksum|default(None) }}"
-    groups:
-    - kube_control_plane
-
-  metallb_speaker:
-    enabled: "{{ metallb_speaker_enabled }}"
-    container: true
-    repo: "{{ metallb_speaker_image_repo }}"
-    tag: "{{ metallb_version }}"
-    sha256: "{{ metallb_speaker_digest_checksum|default(None) }}"
-    groups:
-    - kube_control_plane
-
-  metallb_controller:
-    enabled: "{{ metallb_enabled }}"
-    container: true
-    repo: "{{ metallb_controller_image_repo }}"
-    tag: "{{ metallb_version }}"
-    sha256: "{{ metallb_controller_digest_checksum|default(None) }}"
-    groups:
-    - kube_control_plane
-
-  yq:
-    enabled: "{{ argocd_enabled }}"
-    file: true
-    version: "{{ yq_version }}"
-    dest: "{{ local_release_dir }}/yq"
-    sha256: "{{ yq_binary_checksum|default(None) }}"
-    url: "{{ yq_download_url }}"
-    unarchive: false
-    owner: "root"
-    mode: "0755"
-    groups:
-    - kube_control_plane
-
-download_defaults:
-  container: false
-  file: false
-  repo: None
-  tag: None
-  enabled: false
-  dest: None
-  version: None
-  url: None
-  unarchive: false
-  owner: "{{ kube_owner }}"
-  mode: None
diff --git a/roles/download/defaults/main/main.yml b/roles/download/defaults/main/main.yml
new file mode 100644
index 00000000000..4b951577f2e
--- /dev/null
+++ b/roles/download/defaults/main/main.yml
@@ -0,0 +1,1178 @@
+---
+local_release_dir: /tmp/releases
+download_cache_dir: /tmp/kubespray_cache
+
+# If this is true, debug information will be displayed but
+# may contain some private data, so it is recommended to set it to false
+# in the production environment.
+unsafe_show_logs: false
+
+# do not delete remote cache files after using them
+# NOTE: Setting this parameter to TRUE is only really useful when developing kubespray
+download_keep_remote_cache: false
+
+# Only useful when download_run_once is false: Localy cached files and images are
+# uploaded to kubernetes nodes. Also, images downloaded on those nodes are copied
+# back to the ansible runner's cache, if they are not yet preset.
+download_force_cache: false
+
+# Used to only evaluate vars from download role
+skip_downloads: false
+
+# Optionally skip kubeadm images download
+skip_kubeadm_images: false
+kubeadm_images: {}
+
+# if this is set to true will only download files once. Doesn't work
+# on Flatcar Container Linux by Kinvolk unless the download_localhost is true and localhost
+# is running another OS type. Default compress level is 1 (fastest).
+download_run_once: false
+download_compress: 1
+
+# if this is set to true will download container
+download_container: true
+
+# if this is set to true, uses the localhost for download_run_once mode
+# (requires docker and sudo to access docker). You may want this option for
+# local caching of docker images or for Flatcar Container Linux by Kinvolk cluster nodes.
+# Otherwise, uses the first node in the kube_control_plane group to store images
+# in the download_run_once mode.
+download_localhost: false
+
+# Always pull images if set to True. Otherwise check by the repo's tag/digest.
+download_always_pull: false
+
+# Some problems may occur when downloading files over https proxy due to ansible bug
+# https://github.com/ansible/ansible/issues/32750. Set this variable to False to disable
+# SSL validation of get_url module. Note that kubespray will still be performing checksum validation.
+download_validate_certs: true
+
+# Use the first kube_control_plane if download_localhost is not set
+download_delegate: "{% if download_localhost %}localhost{% else %}{{ groups['kube_control_plane'][0] }}{% endif %}"
+
+# Allow control the times of download retries for files and containers
+download_retries: 4
+
+# The docker_image_info_command might seems weird but we are using raw/endraw and `{{ `{{` }}` to manage the double jinja2 processing
+docker_image_pull_command: "{{ docker_bin_dir }}/docker pull"
+docker_image_info_command: "{{ docker_bin_dir }}/docker images -q | xargs -i {{ '{{' }} docker_bin_dir }}/docker inspect -f {% raw %}'{{ '{{' }} if .RepoTags }}{{ '{{' }} join .RepoTags \",\" }}{{ '{{' }} end }}{{ '{{' }} if .RepoDigests }},{{ '{{' }} join .RepoDigests \",\" }}{{ '{{' }} end }}' {% endraw %} {} | tr '\n' ','"
+nerdctl_image_info_command: "{{ bin_dir }}/nerdctl -n k8s.io images --format '{% raw %}{{ .Repository }}:{{ .Tag }}{% endraw %}' 2>/dev/null | grep -v ^:$ | tr '\n' ','"
+nerdctl_image_pull_command: "{{ bin_dir }}/nerdctl -n k8s.io pull --quiet {{ nerdctl_extra_flags }}"
+crictl_image_info_command: "{{ bin_dir }}/crictl images --verbose | awk -F ': ' '/RepoTags|RepoDigests/ {print $2}' | tr '\n' ','"
+crictl_image_pull_command: "{{ bin_dir }}/crictl pull"
+
+image_command_tool: "{%- if container_manager == 'containerd' -%}nerdctl{%- elif container_manager == 'crio' -%}crictl{%- else -%}{{ container_manager }}{%- endif -%}"
+image_command_tool_on_localhost: "{{ image_command_tool }}"
+
+image_pull_command: "{{ lookup('vars', image_command_tool + '_image_pull_command') }}"
+image_info_command: "{{ lookup('vars', image_command_tool + '_image_info_command') }}"
+image_pull_command_on_localhost: "{{ lookup('vars', image_command_tool_on_localhost + '_image_pull_command') }}"
+image_info_command_on_localhost: "{{ lookup('vars', image_command_tool_on_localhost + '_image_info_command') }}"
+
+# Arch of Docker images and needed packages
+image_arch: "{{host_architecture | default('amd64')}}"
+
+# Nerdctl insecure flag set
+nerdctl_extra_flags: '{%- if containerd_insecure_registries is defined and containerd_insecure_registries|length>0 -%}--insecure-registry{%- else -%}{%- endif -%}'
+
+# Versions
+kubeadm_version: "{{ kube_version }}"
+crun_version: 1.4.5
+runc_version: v1.1.7
+kata_containers_version: 2.4.1
+youki_version: 0.0.1
+gvisor_version: 20210921
+containerd_version: 1.7.1
+cri_dockerd_version: 0.3.0
+
+# this is relevant when container_manager == 'docker'
+docker_containerd_version: 1.6.4
+
+# gcr and kubernetes image repo define
+gcr_image_repo: "gcr.io"
+kube_image_repo: "registry.k8s.io"
+
+# docker image repo define
+docker_image_repo: "docker.io"
+
+# quay image repo define
+quay_image_repo: "quay.io"
+
+# github image repo define (ex multus only use that)
+github_image_repo: "ghcr.io"
+
+# TODO(mattymo): Move calico versions to roles/network_plugins/calico/defaults
+# after migration to container download
+calico_version: "v3.25.1"
+calico_ctl_version: "{{ calico_version }}"
+calico_cni_version: "{{ calico_version }}"
+calico_flexvol_version: "{{ calico_version }}"
+calico_policy_version: "{{ calico_version }}"
+calico_typha_version: "{{ calico_version }}"
+calico_apiserver_version: "{{ calico_version }}"
+typha_enabled: false
+calico_apiserver_enabled: false
+
+flannel_version: "v0.21.4"
+flannel_cni_version: "v1.2.0"
+cni_version: "v1.3.0"
+weave_version: 2.8.1
+pod_infra_version: "3.9"
+
+cilium_version: "v1.13.0"
+cilium_cli_version: "v0.13.1"
+cilium_enable_hubble: false
+
+kube_ovn_version: "v1.10.7"
+kube_ovn_dpdk_version: "19.11-{{ kube_ovn_version }}"
+kube_router_version: "v1.5.1"
+multus_version: "v3.8"
+helm_version: "v3.12.0"
+nerdctl_version: "1.4.0"
+krew_version: "v0.4.3"
+skopeo_version: v1.10.0
+
+# Get kubernetes major version (i.e. 1.17.4 => 1.17)
+kube_major_version: "{{ kube_version | regex_replace('^v([0-9])+\\.([0-9]+)\\.[0-9]+', 'v\\1.\\2') }}"
+
+etcd_supported_versions:
+  v1.26: "v3.5.6"
+  v1.25: "v3.5.6"
+  v1.24: "v3.5.6"
+etcd_version: "{{ etcd_supported_versions[kube_major_version] }}"
+
+crictl_supported_versions:
+  v1.26: "v1.26.0"
+  v1.25: "v1.25.0"
+  v1.24: "v1.24.0"
+crictl_version: "{{ crictl_supported_versions[kube_major_version] }}"
+
+crio_supported_versions:
+  v1.26: v1.26.3
+  v1.25: v1.25.3
+  v1.24: v1.24.5
+crio_version: "{{ crio_supported_versions[kube_major_version] }}"
+
+yq_version: "v4.33.3"
+
+# Download URLs
+kubelet_download_url: "https://dl.k8s.io/release/{{ kube_version }}/bin/linux/{{ image_arch }}/kubelet"
+kubectl_download_url: "https://dl.k8s.io/release/{{ kube_version }}/bin/linux/{{ image_arch }}/kubectl"
+kubeadm_download_url: "https://dl.k8s.io/release/{{ kubeadm_version }}/bin/linux/{{ image_arch }}/kubeadm"
+etcd_download_url: "https://github.com/etcd-io/etcd/releases/download/{{ etcd_version }}/etcd-{{ etcd_version }}-linux-{{ image_arch }}.tar.gz"
+cni_download_url: "https://github.com/containernetworking/plugins/releases/download/{{ cni_version }}/cni-plugins-linux-{{ image_arch }}-{{ cni_version }}.tgz"
+calicoctl_download_url: "https://github.com/projectcalico/calico/releases/download/{{ calico_ctl_version }}/calicoctl-linux-{{ image_arch }}"
+calico_crds_download_url: "https://github.com/projectcalico/calico/archive/{{ calico_version }}.tar.gz"
+ciliumcli_download_url: "https://github.com/cilium/cilium-cli/releases/download/{{ cilium_cli_version }}/cilium-linux-{{ image_arch }}.tar.gz"
+crictl_download_url: "https://github.com/kubernetes-sigs/cri-tools/releases/download/{{ crictl_version }}/crictl-{{ crictl_version }}-{{ ansible_system | lower }}-{{ image_arch }}.tar.gz"
+crio_download_url: "https://storage.googleapis.com/cri-o/artifacts/cri-o.{{ image_arch }}.{{ crio_version }}.tar.gz"
+helm_download_url: "https://get.helm.sh/helm-{{ helm_version }}-linux-{{ image_arch }}.tar.gz"
+runc_download_url: "https://github.com/opencontainers/runc/releases/download/{{ runc_version }}/runc.{{ image_arch }}"
+crun_download_url: "https://github.com/containers/crun/releases/download/{{ crun_version }}/crun-{{ crun_version }}-linux-{{ image_arch }}"
+youki_download_url: "https://github.com/containers/youki/releases/download/v{{ youki_version }}/youki_v{{ youki_version | regex_replace('\\.', '_') }}_linux.tar.gz"
+kata_containers_download_url: "https://github.com/kata-containers/kata-containers/releases/download/{{ kata_containers_version }}/kata-static-{{ kata_containers_version }}-{{ ansible_architecture }}.tar.xz"
+# gVisor only supports amd64 and uses x86_64 to in the download link
+gvisor_runsc_download_url: "https://storage.googleapis.com/gvisor/releases/release/{{ gvisor_version }}/{{ ansible_architecture }}/runsc"
+gvisor_containerd_shim_runsc_download_url: "https://storage.googleapis.com/gvisor/releases/release/{{ gvisor_version }}/{{ ansible_architecture }}/containerd-shim-runsc-v1"
+nerdctl_download_url: "https://github.com/containerd/nerdctl/releases/download/v{{ nerdctl_version }}/nerdctl-{{ nerdctl_version }}-{{ ansible_system | lower }}-{{ image_arch }}.tar.gz"
+krew_download_url: "https://github.com/kubernetes-sigs/krew/releases/download/{{ krew_version }}/krew-{{ host_os }}_{{ image_arch }}.tar.gz"
+containerd_download_url: "https://github.com/containerd/containerd/releases/download/v{{ containerd_version }}/containerd-{{ containerd_version }}-linux-{{ image_arch }}.tar.gz"
+cri_dockerd_download_url: "https://github.com/Mirantis/cri-dockerd/releases/download/v{{ cri_dockerd_version }}/cri-dockerd-{{ cri_dockerd_version }}.{{ image_arch }}.tgz"
+skopeo_download_url: "https://github.com/lework/skopeo-binary/releases/download/{{ skopeo_version }}/skopeo-linux-{{ image_arch }}"
+yq_download_url: "https://github.com/mikefarah/yq/releases/download/{{ yq_version }}/yq_linux_{{ image_arch }}"
+
+etcd_binary_checksum: "{{ etcd_binary_checksums[image_arch][etcd_version] }}"
+cni_binary_checksum: "{{ cni_binary_checksums[image_arch][cni_version] }}"
+kubelet_binary_checksum: "{{ kubelet_checksums[image_arch][kube_version] }}"
+kubectl_binary_checksum: "{{ kubectl_checksums[image_arch][kube_version] }}"
+kubeadm_binary_checksum: "{{ kubeadm_checksums[image_arch][kubeadm_version] }}"
+yq_binary_checksum: "{{ yq_checksums[image_arch][yq_version] }}"
+calicoctl_binary_checksum: "{{ calicoctl_binary_checksums[image_arch][calico_ctl_version] }}"
+calico_crds_archive_checksum: "{{ calico_crds_archive_checksums[calico_version] }}"
+ciliumcli_binary_checksum: "{{ ciliumcli_binary_checksums[image_arch][cilium_cli_version] }}"
+crictl_binary_checksum: "{{ crictl_checksums[image_arch][crictl_version] }}"
+crio_archive_checksum: "{{ crio_archive_checksums[image_arch][crio_version] }}"
+cri_dockerd_archive_checksum: "{{ cri_dockerd_archive_checksums[image_arch][cri_dockerd_version] }}"
+helm_archive_checksum: "{{ helm_archive_checksums[image_arch][helm_version] }}"
+runc_binary_checksum: "{{ runc_checksums[image_arch][runc_version] }}"
+crun_binary_checksum: "{{ crun_checksums[image_arch][crun_version] }}"
+youki_archive_checksum: "{{ youki_checksums[image_arch][youki_version] }}"
+kata_containers_binary_checksum: "{{ kata_containers_binary_checksums[image_arch][kata_containers_version] }}"
+gvisor_runsc_binary_checksum: "{{ gvisor_runsc_binary_checksums[image_arch][gvisor_version] }}"
+gvisor_containerd_shim_binary_checksum: "{{ gvisor_containerd_shim_binary_checksums[image_arch][gvisor_version] }}"
+nerdctl_archive_checksum: "{{ nerdctl_archive_checksums[image_arch][nerdctl_version] }}"
+krew_archive_checksum: "{{ krew_archive_checksums[host_os][image_arch][krew_version] }}"
+containerd_archive_checksum: "{{ containerd_archive_checksums[image_arch][containerd_version] }}"
+skopeo_binary_checksum: "{{ skopeo_binary_checksums[image_arch][skopeo_version] }}"
+
+# Containers
+# In some cases, we need a way to set --registry-mirror or --insecure-registry for docker,
+# it helps a lot for local private development or bare metal environment.
+# So you need define --registry-mirror or --insecure-registry, and modify the following url address.
+# example:
+# You need to deploy kubernetes cluster on local private development.
+# Also provide the address of your own private registry.
+# And use --insecure-registry options for docker
+kube_proxy_image_repo: "{{ kube_image_repo }}/kube-proxy"
+etcd_image_repo: "{{ quay_image_repo }}/coreos/etcd"
+etcd_image_tag: "{{ etcd_version }}"
+flannel_image_repo: "{{ docker_image_repo }}/flannel/flannel"
+flannel_image_tag: "{{ flannel_version }}"
+flannel_init_image_repo: "{{ docker_image_repo }}/flannelcni/flannel-cni-plugin"
+flannel_init_image_tag: "{{ flannel_cni_version }}"
+calico_node_image_repo: "{{ quay_image_repo }}/calico/node"
+calico_node_image_tag: "{{ calico_version }}"
+calico_cni_image_repo: "{{ quay_image_repo }}/calico/cni"
+calico_cni_image_tag: "{{ calico_cni_version }}"
+calico_flexvol_image_repo: "{{ quay_image_repo }}/calico/pod2daemon-flexvol"
+calico_flexvol_image_tag: "{{ calico_flexvol_version }}"
+calico_policy_image_repo: "{{ quay_image_repo }}/calico/kube-controllers"
+calico_policy_image_tag: "{{ calico_policy_version }}"
+calico_typha_image_repo: "{{ quay_image_repo }}/calico/typha"
+calico_typha_image_tag: "{{ calico_typha_version }}"
+calico_apiserver_image_repo: "{{ quay_image_repo }}/calico/apiserver"
+calico_apiserver_image_tag: "{{ calico_apiserver_version }}"
+pod_infra_image_repo: "{{ kube_image_repo }}/pause"
+pod_infra_image_tag: "{{ pod_infra_version }}"
+netcheck_version: "v1.2.2"
+netcheck_agent_image_repo: "{{ docker_image_repo }}/mirantis/k8s-netchecker-agent"
+netcheck_agent_image_tag: "{{ netcheck_version }}"
+netcheck_server_image_repo: "{{ docker_image_repo }}/mirantis/k8s-netchecker-server"
+netcheck_server_image_tag: "{{ netcheck_version }}"
+netcheck_etcd_image_tag: "v3.4.17"
+weave_kube_image_repo: "{{ docker_image_repo }}/weaveworks/weave-kube"
+weave_kube_image_tag: "{{ weave_version }}"
+weave_npc_image_repo: "{{ docker_image_repo }}/weaveworks/weave-npc"
+weave_npc_image_tag: "{{ weave_version }}"
+cilium_image_repo: "{{ quay_image_repo }}/cilium/cilium"
+cilium_image_tag: "{{ cilium_version }}"
+cilium_operator_image_repo: "{{ quay_image_repo }}/cilium/operator"
+cilium_operator_image_tag: "{{ cilium_version }}"
+cilium_hubble_relay_image_repo: "{{ quay_image_repo }}/cilium/hubble-relay"
+cilium_hubble_relay_image_tag: "{{ cilium_version }}"
+cilium_hubble_certgen_image_repo: "{{ quay_image_repo }}/cilium/certgen"
+cilium_hubble_certgen_image_tag: "v0.1.8"
+cilium_hubble_ui_image_repo: "{{ quay_image_repo }}/cilium/hubble-ui"
+cilium_hubble_ui_image_tag: "v0.11.0"
+cilium_hubble_ui_backend_image_repo: "{{ quay_image_repo }}/cilium/hubble-ui-backend"
+cilium_hubble_ui_backend_image_tag: "v0.11.0"
+cilium_hubble_envoy_image_repo: "{{ docker_image_repo }}/envoyproxy/envoy"
+cilium_hubble_envoy_image_tag: "v1.22.5"
+kube_ovn_container_image_repo: "{{ docker_image_repo }}/kubeovn/kube-ovn"
+kube_ovn_container_image_tag: "{{ kube_ovn_version }}"
+kube_ovn_dpdk_container_image_repo: "{{ docker_image_repo }}/kubeovn/kube-ovn-dpdk"
+kube_ovn_dpdk_container_image_tag: "{{ kube_ovn_dpdk_version }}"
+kube_router_image_repo: "{{ docker_image_repo }}/cloudnativelabs/kube-router"
+kube_router_image_tag: "{{ kube_router_version }}"
+multus_image_repo: "{{ github_image_repo }}/k8snetworkplumbingwg/multus-cni"
+multus_image_tag: "{{ multus_version }}"
+
+kube_vip_image_repo: "{{ github_image_repo }}/kube-vip/kube-vip"
+kube_vip_image_tag: v0.5.12
+nginx_image_repo: "{{ docker_image_repo }}/library/nginx"
+nginx_image_tag: 1.23.2-alpine
+haproxy_image_repo: "{{ docker_image_repo }}/library/haproxy"
+haproxy_image_tag: 2.6.6-alpine
+
+# Coredns version should be supported by corefile-migration (or at least work with)
+# bundle with kubeadm; if not 'basic' upgrade can sometimes fail
+
+coredns_version: "{{ 'v1.9.3' if (kube_version is version('v1.25.0','>=')) else 'v1.8.6' }}"
+coredns_image_is_namespaced: "{{ (coredns_version is version('v1.7.1','>=')) }}"
+
+coredns_image_repo: "{{ kube_image_repo }}{{'/coredns/coredns' if (coredns_image_is_namespaced | bool) else '/coredns' }}"
+coredns_image_tag: "{{ coredns_version if (coredns_image_is_namespaced | bool) else (coredns_version | regex_replace('^v', '')) }}"
+
+nodelocaldns_version: "1.22.18"
+nodelocaldns_image_repo: "{{ kube_image_repo }}/dns/k8s-dns-node-cache"
+nodelocaldns_image_tag: "{{ nodelocaldns_version }}"
+
+dnsautoscaler_version: v1.8.8
+dnsautoscaler_image_repo: "{{ kube_image_repo }}/cpa/cluster-proportional-autoscaler"
+dnsautoscaler_image_tag: "{{ dnsautoscaler_version }}"
+
+registry_version: "2.8.1"
+registry_image_repo: "{{ docker_image_repo }}/library/registry"
+registry_image_tag: "{{ registry_version }}"
+metrics_server_version: "v0.6.3"
+metrics_server_image_repo: "{{ kube_image_repo }}/metrics-server/metrics-server"
+metrics_server_image_tag: "{{ metrics_server_version }}"
+local_volume_provisioner_version: "v2.5.0"
+local_volume_provisioner_image_repo: "{{ kube_image_repo }}/sig-storage/local-volume-provisioner"
+local_volume_provisioner_image_tag: "{{ local_volume_provisioner_version }}"
+cephfs_provisioner_version: "v2.1.0-k8s1.11"
+cephfs_provisioner_image_repo: "{{ quay_image_repo }}/external_storage/cephfs-provisioner"
+cephfs_provisioner_image_tag: "{{ cephfs_provisioner_version }}"
+rbd_provisioner_version: "v2.1.1-k8s1.11"
+rbd_provisioner_image_repo: "{{ quay_image_repo }}/external_storage/rbd-provisioner"
+rbd_provisioner_image_tag: "{{ rbd_provisioner_version }}"
+local_path_provisioner_version: "v0.0.23"
+local_path_provisioner_image_repo: "{{ docker_image_repo }}/rancher/local-path-provisioner"
+local_path_provisioner_image_tag: "{{ local_path_provisioner_version }}"
+ingress_nginx_version: "v1.7.1"
+ingress_nginx_controller_image_repo: "{{ kube_image_repo }}/ingress-nginx/controller"
+ingress_nginx_controller_image_tag: "{{ ingress_nginx_version }}"
+ingress_nginx_kube_webhook_certgen_image_repo: "{{ kube_image_repo }}/ingress-nginx/kube-webhook-certgen"
+ingress_nginx_kube_webhook_certgen_image_tag: "v20230312-helm-chart-4.5.2-28-g66a760794"
+alb_ingress_image_repo: "{{ docker_image_repo }}/amazon/aws-alb-ingress-controller"
+alb_ingress_image_tag: "v1.1.9"
+cert_manager_version: "v1.11.1"
+cert_manager_controller_image_repo: "{{ quay_image_repo }}/jetstack/cert-manager-controller"
+cert_manager_controller_image_tag: "{{ cert_manager_version }}"
+cert_manager_cainjector_image_repo: "{{ quay_image_repo }}/jetstack/cert-manager-cainjector"
+cert_manager_cainjector_image_tag: "{{ cert_manager_version }}"
+cert_manager_webhook_image_repo: "{{ quay_image_repo }}/jetstack/cert-manager-webhook"
+cert_manager_webhook_image_tag: "{{ cert_manager_version }}"
+
+csi_attacher_image_repo: "{{ kube_image_repo }}/sig-storage/csi-attacher"
+csi_attacher_image_tag: "v3.3.0"
+csi_provisioner_image_repo: "{{ kube_image_repo }}/sig-storage/csi-provisioner"
+csi_provisioner_image_tag: "v3.0.0"
+csi_snapshotter_image_repo: "{{ kube_image_repo }}/sig-storage/csi-snapshotter"
+csi_snapshotter_image_tag: "v5.0.0"
+csi_resizer_image_repo: "{{ kube_image_repo }}/sig-storage/csi-resizer"
+csi_resizer_image_tag: "v1.3.0"
+csi_node_driver_registrar_image_repo: "{{ kube_image_repo }}/sig-storage/csi-node-driver-registrar"
+csi_node_driver_registrar_image_tag: "v2.4.0"
+csi_livenessprobe_image_repo: "{{ kube_image_repo }}/sig-storage/livenessprobe"
+csi_livenessprobe_image_tag: "v2.5.0"
+
+snapshot_controller_supported_versions:
+  v1.26: "v4.2.1"
+  v1.25: "v4.2.1"
+  v1.24: "v4.2.1"
+snapshot_controller_image_repo: "{{ kube_image_repo }}/sig-storage/snapshot-controller"
+snapshot_controller_image_tag: "{{ snapshot_controller_supported_versions[kube_major_version] }}"
+
+cinder_csi_plugin_version: "v1.22.0"
+cinder_csi_plugin_image_repo: "{{ docker_image_repo }}/k8scloudprovider/cinder-csi-plugin"
+cinder_csi_plugin_image_tag: "{{ cinder_csi_plugin_version }}"
+
+aws_ebs_csi_plugin_version: "v0.5.0"
+aws_ebs_csi_plugin_image_repo: "{{ docker_image_repo }}/amazon/aws-ebs-csi-driver"
+aws_ebs_csi_plugin_image_tag: "{{ aws_ebs_csi_plugin_version }}"
+
+gcp_pd_csi_plugin_version: "v1.4.0"
+gcp_pd_csi_plugin_image_repo: "{{ kube_image_repo }}/cloud-provider-gcp/gcp-compute-persistent-disk-csi-driver"
+gcp_pd_csi_plugin_image_tag: "{{ gcp_pd_csi_plugin_version }}"
+
+azure_csi_image_repo: "mcr.microsoft.com/oss/kubernetes-csi"
+azure_csi_provisioner_image_tag: "v2.2.2"
+azure_csi_attacher_image_tag: "v3.3.0"
+azure_csi_resizer_image_tag: "v1.3.0"
+azure_csi_livenessprobe_image_tag: "v2.5.0"
+azure_csi_node_registrar_image_tag: "v2.4.0"
+azure_csi_snapshotter_image_tag: "v3.0.3"
+azure_csi_plugin_version: "v1.10.0"
+azure_csi_plugin_image_repo: "mcr.microsoft.com/k8s/csi"
+azure_csi_plugin_image_tag: "{{ azure_csi_plugin_version }}"
+
+gcp_pd_csi_image_repo: "gke.gcr.io"
+gcp_pd_csi_driver_image_tag: "v0.7.0-gke.0"
+gcp_pd_csi_provisioner_image_tag: "v1.5.0-gke.0"
+gcp_pd_csi_attacher_image_tag: "v2.1.1-gke.0"
+gcp_pd_csi_resizer_image_tag: "v0.4.0-gke.0"
+gcp_pd_csi_registrar_image_tag: "v1.2.0-gke.0"
+
+dashboard_image_repo: "{{ docker_image_repo }}/kubernetesui/dashboard"
+dashboard_image_tag: "v2.7.0"
+dashboard_metrics_scraper_repo: "{{ docker_image_repo }}/kubernetesui/metrics-scraper"
+dashboard_metrics_scraper_tag: "v1.0.8"
+
+metallb_speaker_image_repo: "{{ quay_image_repo }}/metallb/speaker"
+metallb_controller_image_repo: "{{ quay_image_repo }}/metallb/controller"
+metallb_version: v0.13.9
+
+downloads:
+  netcheck_server:
+    enabled: "{{ deploy_netchecker }}"
+    container: true
+    repo: "{{ netcheck_server_image_repo }}"
+    tag: "{{ netcheck_server_image_tag }}"
+    sha256: "{{ netcheck_server_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  netcheck_agent:
+    enabled: "{{ deploy_netchecker }}"
+    container: true
+    repo: "{{ netcheck_agent_image_repo }}"
+    tag: "{{ netcheck_agent_image_tag }}"
+    sha256: "{{ netcheck_agent_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  etcd:
+    container: "{{ etcd_deployment_type != 'host' }}"
+    file: "{{ etcd_deployment_type == 'host' }}"
+    enabled: true
+    version: "{{ etcd_version }}"
+    dest: "{{ local_release_dir }}/etcd-{{ etcd_version }}-linux-{{ image_arch }}.tar.gz"
+    repo: "{{ etcd_image_repo }}"
+    tag: "{{ etcd_image_tag }}"
+    sha256: >-
+      {{ etcd_binary_checksum if (etcd_deployment_type == 'host')
+      else etcd_digest_checksum|d(None) }}
+    url: "{{ etcd_download_url }}"
+    unarchive: "{{ etcd_deployment_type == 'host' }}"
+    owner: "root"
+    mode: "0755"
+    groups:
+    - etcd
+
+  cni:
+    enabled: true
+    file: true
+    version: "{{ cni_version }}"
+    dest: "{{ local_release_dir }}/cni-plugins-linux-{{ image_arch }}-{{ cni_version }}.tgz"
+    sha256: "{{ cni_binary_checksum }}"
+    url: "{{ cni_download_url }}"
+    unarchive: false
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  kubeadm:
+    enabled: true
+    file: true
+    version: "{{ kubeadm_version }}"
+    dest: "{{ local_release_dir }}/kubeadm-{{ kubeadm_version }}-{{ image_arch }}"
+    sha256: "{{ kubeadm_binary_checksum }}"
+    url: "{{ kubeadm_download_url }}"
+    unarchive: false
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  kubelet:
+    enabled: true
+    file: true
+    version: "{{ kube_version }}"
+    dest: "{{ local_release_dir }}/kubelet-{{ kube_version }}-{{ image_arch }}"
+    sha256: "{{ kubelet_binary_checksum }}"
+    url: "{{ kubelet_download_url }}"
+    unarchive: false
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  kubectl:
+    enabled: true
+    file: true
+    version: "{{ kube_version }}"
+    dest: "{{ local_release_dir }}/kubectl-{{ kube_version }}-{{ image_arch }}"
+    sha256: "{{ kubectl_binary_checksum }}"
+    url: "{{ kubectl_download_url }}"
+    unarchive: false
+    owner: "root"
+    mode: "0755"
+    groups:
+    - kube_control_plane
+
+  crictl:
+    file: true
+    enabled: true
+    version: "{{ crictl_version }}"
+    dest: "{{ local_release_dir }}/crictl-{{ crictl_version }}-linux-{{ image_arch }}.tar.gz"
+    sha256: "{{ crictl_binary_checksum }}"
+    url: "{{ crictl_download_url }}"
+    unarchive: true
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  crio:
+    file: true
+    enabled: "{{ container_manager == 'crio' }}"
+    version: "{{ crio_version }}"
+    dest: "{{ local_release_dir }}/cri-o.{{ image_arch }}.{{ crio_version }}tar.gz"
+    sha256: "{{ crio_archive_checksum }}"
+    url: "{{ crio_download_url }}"
+    unarchive: true
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  cri_dockerd:
+    file: true
+    enabled: "{{ container_manager == 'docker' }}"
+    version: "{{ cri_dockerd_version }}"
+    dest: "{{ local_release_dir }}/cri-dockerd-{{ cri_dockerd_version }}.{{ image_arch }}.tar.gz"
+    sha256: "{{ cri_dockerd_archive_checksum }}"
+    url: "{{ cri_dockerd_download_url }}"
+    unarchive: true
+    unarchive_extra_opts:
+    - --strip=1
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  crun:
+    file: true
+    enabled: "{{ crun_enabled }}"
+    version: "{{ crun_version }}"
+    dest: "{{ local_release_dir }}/crun"
+    sha256: "{{ crun_binary_checksum }}"
+    url: "{{ crun_download_url }}"
+    unarchive: false
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  youki:
+    file: true
+    enabled: "{{ youki_enabled }}"
+    version: "{{ youki_version }}"
+    dest: "{{ local_release_dir }}/youki_v{{ youki_version | regex_replace('\\.', '_') }}_linux.tar.gz"
+    sha256: "{{ youki_archive_checksum }}"
+    url: "{{ youki_download_url }}"
+    unarchive: true
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  runc:
+    file: true
+    enabled: "{{ container_manager == 'containerd' }}"
+    version: "{{ runc_version }}"
+    dest: "{{ local_release_dir }}/runc"
+    sha256: "{{ runc_binary_checksum }}"
+    url: "{{ runc_download_url }}"
+    unarchive: false
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  kata_containers:
+    enabled: "{{ kata_containers_enabled }}"
+    file: true
+    version: "{{ kata_containers_version }}"
+    dest: "{{ local_release_dir }}/kata-static-{{ kata_containers_version }}-{{ image_arch }}.tar.xz"
+    sha256: "{{ kata_containers_binary_checksum }}"
+    url: "{{ kata_containers_download_url }}"
+    unarchive: false
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  containerd:
+    enabled: "{{ container_manager == 'containerd' }}"
+    file: true
+    version: "{{ containerd_version }}"
+    dest: "{{ local_release_dir }}/containerd-{{ containerd_version }}-linux-{{ image_arch }}.tar.gz"
+    sha256: "{{ containerd_archive_checksum }}"
+    url: "{{ containerd_download_url }}"
+    unarchive: false
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  gvisor_runsc:
+    enabled: "{{ gvisor_enabled }}"
+    file: true
+    version: "{{ gvisor_version }}"
+    dest: "{{ local_release_dir }}/gvisor-runsc"
+    sha256: "{{ gvisor_runsc_binary_checksum }}"
+    url: "{{ gvisor_runsc_download_url }}"
+    unarchive: false
+    owner: "root"
+    mode: 755
+    groups:
+    - k8s_cluster
+
+  gvisor_containerd_shim:
+    enabled: "{{ gvisor_enabled }}"
+    file: true
+    version: "{{ gvisor_version }}"
+    dest: "{{ local_release_dir }}/gvisor-containerd-shim-runsc-v1"
+    sha256: "{{ gvisor_containerd_shim_binary_checksum }}"
+    url: "{{ gvisor_containerd_shim_runsc_download_url }}"
+    unarchive: false
+    owner: "root"
+    mode: 755
+    groups:
+    - k8s_cluster
+
+  nerdctl:
+    file: true
+    enabled: "{{ container_manager == 'containerd' }}"
+    version: "{{ nerdctl_version }}"
+    dest: "{{ local_release_dir }}/nerdctl-{{ nerdctl_version }}-linux-{{ image_arch }}.tar.gz"
+    sha256: "{{ nerdctl_archive_checksum }}"
+    url: "{{ nerdctl_download_url }}"
+    unarchive: true
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  skopeo:
+    file: true
+    enabled: "{{ container_manager == 'crio' }}"
+    version: "{{ skopeo_version }}"
+    dest: "{{ local_release_dir }}/skopeo"
+    sha256: "{{ skopeo_binary_checksum }}"
+    url: "{{ skopeo_download_url }}"
+    unarchive: false
+    owner: "root"
+    mode: "0755"
+    groups:
+    - kube_control_plane
+
+  cilium:
+    enabled: "{{ kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool }}"
+    container: true
+    repo: "{{ cilium_image_repo }}"
+    tag: "{{ cilium_image_tag }}"
+    sha256: "{{ cilium_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  cilium_operator:
+    enabled: "{{ kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool }}"
+    container: true
+    repo: "{{ cilium_operator_image_repo }}"
+    tag: "{{ cilium_operator_image_tag }}"
+    sha256: "{{ cilium_operator_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  cilium_hubble_relay:
+    enabled: "{{ cilium_enable_hubble }}"
+    container: true
+    repo: "{{ cilium_hubble_relay_image_repo }}"
+    tag: "{{ cilium_hubble_relay_image_tag }}"
+    sha256: "{{ cilium_hubble_relay_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  cilium_hubble_certgen:
+    enabled: "{{ cilium_enable_hubble }}"
+    container: true
+    repo: "{{ cilium_hubble_certgen_image_repo }}"
+    tag: "{{ cilium_hubble_certgen_image_tag }}"
+    sha256: "{{ cilium_hubble_certgen_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  cilium_hubble_ui:
+    enabled: "{{ cilium_enable_hubble }}"
+    container: true
+    repo: "{{ cilium_hubble_ui_image_repo }}"
+    tag: "{{ cilium_hubble_ui_image_tag }}"
+    sha256: "{{ cilium_hubble_ui_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  cilium_hubble_ui_backend:
+    enabled: "{{ cilium_enable_hubble }}"
+    container: true
+    repo: "{{ cilium_hubble_ui_backend_image_repo }}"
+    tag: "{{ cilium_hubble_ui_backend_image_tag }}"
+    sha256: "{{ cilium_hubble_ui_backend_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  cilium_hubble_envoy:
+    enabled: "{{ cilium_enable_hubble }}"
+    container: true
+    repo: "{{ cilium_hubble_envoy_image_repo }}"
+    tag: "{{ cilium_hubble_envoy_image_tag }}"
+    sha256: "{{ cilium_hubble_envoy_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  ciliumcli:
+    enabled: "{{ kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool }}"
+    file: true
+    version: "{{ cilium_cli_version }}"
+    dest: "{{ local_release_dir }}/cilium"
+    sha256: "{{ ciliumcli_binary_checksum }}"
+    url: "{{ ciliumcli_download_url }}"
+    unarchive: true
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  multus:
+    enabled: "{{ kube_network_plugin_multus }}"
+    container: true
+    repo: "{{ multus_image_repo }}"
+    tag: "{{ multus_image_tag }}"
+    sha256: "{{ multus_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  flannel:
+    enabled: "{{ kube_network_plugin == 'flannel' }}"
+    container: true
+    repo: "{{ flannel_image_repo }}"
+    tag: "{{ flannel_image_tag }}"
+    sha256: "{{ flannel_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  flannel_init:
+    enabled: "{{ kube_network_plugin == 'flannel' }}"
+    container: true
+    repo: "{{ flannel_init_image_repo }}"
+    tag: "{{ flannel_init_image_tag }}"
+    sha256: "{{ flannel_init_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  calicoctl:
+    enabled: "{{ kube_network_plugin == 'calico' }}"
+    file: true
+    version: "{{ calico_ctl_version }}"
+    dest: "{{ local_release_dir }}/calicoctl"
+    sha256: "{{ calicoctl_binary_checksum }}"
+    url: "{{ calicoctl_download_url }}"
+    mirrors:
+    - "{{ calicoctl_download_url }}"
+    unarchive: false
+    owner: "root"
+    mode: "0755"
+    groups:
+    - k8s_cluster
+
+  calico_node:
+    enabled: "{{ kube_network_plugin == 'calico' }}"
+    container: true
+    repo: "{{ calico_node_image_repo }}"
+    tag: "{{ calico_node_image_tag }}"
+    sha256: "{{ calico_node_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  calico_cni:
+    enabled: "{{ kube_network_plugin == 'calico' }}"
+    container: true
+    repo: "{{ calico_cni_image_repo }}"
+    tag: "{{ calico_cni_image_tag }}"
+    sha256: "{{ calico_cni_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  calico_flexvol:
+    enabled: "{{ kube_network_plugin == 'calico' }}"
+    container: true
+    repo: "{{ calico_flexvol_image_repo }}"
+    tag: "{{ calico_flexvol_image_tag }}"
+    sha256: "{{ calico_flexvol_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  calico_policy:
+    enabled: "{{ enable_network_policy and kube_network_plugin in ['calico'] }}"
+    container: true
+    repo: "{{ calico_policy_image_repo }}"
+    tag: "{{ calico_policy_image_tag }}"
+    sha256: "{{ calico_policy_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  calico_typha:
+    enabled: "{{ typha_enabled }}"
+    container: true
+    repo: "{{ calico_typha_image_repo }}"
+    tag: "{{ calico_typha_image_tag }}"
+    sha256: "{{ calico_typha_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  calico_apiserver:
+    enabled: "{{ calico_apiserver_enabled }}"
+    container: true
+    repo: "{{ calico_apiserver_image_repo }}"
+    tag: "{{ calico_apiserver_image_tag }}"
+    sha256: "{{ calico_apiserver_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  calico_crds:
+    file: true
+    enabled: "{{ kube_network_plugin == 'calico' and calico_datastore == 'kdd' }}"
+    version: "{{ calico_version }}"
+    dest: "{{ local_release_dir }}/calico-{{ calico_version }}-kdd-crds/{{ calico_version }}.tar.gz"
+    sha256: "{{ calico_crds_archive_checksum }}"
+    url: "{{ calico_crds_download_url }}"
+    unarchive: true
+    unarchive_extra_opts:
+    - "{{ '--strip=6' if (calico_version is version('v3.22.3','<')) else '--strip=3' }}"
+    - "--wildcards"
+    - "{{ '*/_includes/charts/calico/crds/kdd/' if (calico_version is version('v3.22.3','<')) else '*/libcalico-go/config/crd/' }}"
+    owner: "root"
+    mode: "0755"
+    groups:
+    - kube_control_plane
+
+  weave_kube:
+    enabled: "{{ kube_network_plugin == 'weave' }}"
+    container: true
+    repo: "{{ weave_kube_image_repo }}"
+    tag: "{{ weave_kube_image_tag }}"
+    sha256: "{{ weave_kube_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  weave_npc:
+    enabled: "{{ kube_network_plugin == 'weave' }}"
+    container: true
+    repo: "{{ weave_npc_image_repo }}"
+    tag: "{{ weave_npc_image_tag }}"
+    sha256: "{{ weave_npc_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  kube_ovn:
+    enabled: "{{ kube_network_plugin == 'kube-ovn' }}"
+    container: true
+    repo: "{{ kube_ovn_container_image_repo }}"
+    tag: "{{ kube_ovn_container_image_tag }}"
+    sha256: "{{ kube_ovn_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  kube_router:
+    enabled: "{{ kube_network_plugin == 'kube-router' }}"
+    container: true
+    repo: "{{ kube_router_image_repo }}"
+    tag: "{{ kube_router_image_tag }}"
+    sha256: "{{ kube_router_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  pod_infra:
+    enabled: true
+    container: true
+    repo: "{{ pod_infra_image_repo }}"
+    tag: "{{ pod_infra_image_tag }}"
+    sha256: "{{ pod_infra_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  kube-vip:
+    enabled: "{{ kube_vip_enabled }}"
+    container: true
+    repo: "{{ kube_vip_image_repo }}"
+    tag: "{{ kube_vip_image_tag }}"
+    sha256: "{{ kube_vip_digest_checksum|default(None) }}"
+    groups:
+    - kube_control_plane
+
+  nginx:
+    enabled: "{{ loadbalancer_apiserver_localhost and loadbalancer_apiserver_type == 'nginx' }}"
+    container: true
+    repo: "{{ nginx_image_repo }}"
+    tag: "{{ nginx_image_tag }}"
+    sha256: "{{ nginx_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  haproxy:
+    enabled: "{{ loadbalancer_apiserver_localhost and loadbalancer_apiserver_type == 'haproxy' }}"
+    container: true
+    repo: "{{ haproxy_image_repo }}"
+    tag: "{{ haproxy_image_tag }}"
+    sha256: "{{ haproxy_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  coredns:
+    enabled: "{{ dns_mode in ['coredns', 'coredns_dual'] }}"
+    container: true
+    repo: "{{ coredns_image_repo }}"
+    tag: "{{ coredns_image_tag }}"
+    sha256: "{{ coredns_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  nodelocaldns:
+    enabled: "{{ enable_nodelocaldns }}"
+    container: true
+    repo: "{{ nodelocaldns_image_repo }}"
+    tag: "{{ nodelocaldns_image_tag }}"
+    sha256: "{{ nodelocaldns_digest_checksum|default(None) }}"
+    groups:
+    - k8s_cluster
+
+  dnsautoscaler:
+    enabled: "{{ dns_mode in ['coredns', 'coredns_dual'] }}"
+    container: true
+    repo: "{{ dnsautoscaler_image_repo }}"
+    tag: "{{ dnsautoscaler_image_tag }}"
+    sha256: "{{ dnsautoscaler_digest_checksum|default(None) }}"
+    groups:
+    - kube_control_plane
+
+  helm:
+    enabled: "{{ helm_enabled }}"
+    file: true
+    version: "{{ helm_version }}"
+    dest: "{{ local_release_dir }}/helm-{{ helm_version }}/helm-{{ helm_version }}-linux-{{ image_arch }}.tar.gz"
+    sha256: "{{ helm_archive_checksum }}"
+    url: "{{ helm_download_url }}"
+    unarchive: true
+    owner: "root"
+    mode: "0755"
+    groups:
+    - kube_control_plane
+
+  krew:
+    enabled: "{{ krew_enabled }}"
+    file: true
+    version: "{{ krew_version }}"
+    dest: "{{ local_release_dir }}/krew-{{ host_os }}_{{ image_arch }}.tar.gz"
+    sha256: "{{ krew_archive_checksum }}"
+    url: "{{ krew_download_url }}"
+    unarchive: true
+    owner: "root"
+    mode: "0755"
+    groups:
+    - kube_control_plane
+
+  registry:
+    enabled: "{{ registry_enabled }}"
+    container: true
+    repo: "{{ registry_image_repo }}"
+    tag: "{{ registry_image_tag }}"
+    sha256: "{{ registry_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  metrics_server:
+    enabled: "{{ metrics_server_enabled }}"
+    container: true
+    repo: "{{ metrics_server_image_repo }}"
+    tag: "{{ metrics_server_image_tag }}"
+    sha256: "{{ metrics_server_digest_checksum|default(None) }}"
+    groups:
+    - kube_control_plane
+
+  local_volume_provisioner:
+    enabled: "{{ local_volume_provisioner_enabled }}"
+    container: true
+    repo: "{{ local_volume_provisioner_image_repo }}"
+    tag: "{{ local_volume_provisioner_image_tag }}"
+    sha256: "{{ local_volume_provisioner_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  cephfs_provisioner:
+    enabled: "{{ cephfs_provisioner_enabled }}"
+    container: true
+    repo: "{{ cephfs_provisioner_image_repo }}"
+    tag: "{{ cephfs_provisioner_image_tag }}"
+    sha256: "{{ cephfs_provisioner_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  rbd_provisioner:
+    enabled: "{{ rbd_provisioner_enabled }}"
+    container: true
+    repo: "{{ rbd_provisioner_image_repo }}"
+    tag: "{{ rbd_provisioner_image_tag }}"
+    sha256: "{{ rbd_provisioner_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  local_path_provisioner:
+    enabled: "{{ local_path_provisioner_enabled }}"
+    container: true
+    repo: "{{ local_path_provisioner_image_repo }}"
+    tag: "{{ local_path_provisioner_image_tag }}"
+    sha256: "{{ local_path_provisioner_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  ingress_nginx_controller:
+    enabled: "{{ ingress_nginx_enabled }}"
+    container: true
+    repo: "{{ ingress_nginx_controller_image_repo }}"
+    tag: "{{ ingress_nginx_controller_image_tag }}"
+    sha256: "{{ ingress_nginx_controller_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  ingress_alb_controller:
+    enabled: "{{ ingress_alb_enabled }}"
+    container: true
+    repo: "{{ alb_ingress_image_repo }}"
+    tag: "{{ alb_ingress_image_tag }}"
+    sha256: "{{ ingress_alb_controller_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  cert_manager_controller:
+    enabled: "{{ cert_manager_enabled }}"
+    container: true
+    repo: "{{ cert_manager_controller_image_repo }}"
+    tag: "{{ cert_manager_controller_image_tag }}"
+    sha256: "{{ cert_manager_controller_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  cert_manager_cainjector:
+    enabled: "{{ cert_manager_enabled }}"
+    container: true
+    repo: "{{ cert_manager_cainjector_image_repo }}"
+    tag: "{{ cert_manager_cainjector_image_tag }}"
+    sha256: "{{ cert_manager_cainjector_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  cert_manager_webhook:
+    enabled: "{{ cert_manager_enabled }}"
+    container: true
+    repo: "{{ cert_manager_webhook_image_repo }}"
+    tag: "{{ cert_manager_webhook_image_tag }}"
+    sha256: "{{ cert_manager_webhook_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  csi_attacher:
+    enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
+    container: true
+    repo: "{{ csi_attacher_image_repo }}"
+    tag: "{{ csi_attacher_image_tag }}"
+    sha256: "{{ csi_attacher_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  csi_provisioner:
+    enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
+    container: true
+    repo: "{{ csi_provisioner_image_repo }}"
+    tag: "{{ csi_provisioner_image_tag }}"
+    sha256: "{{ csi_provisioner_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  csi_snapshotter:
+    enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
+    container: true
+    repo: "{{ csi_snapshotter_image_repo }}"
+    tag: "{{ csi_snapshotter_image_tag }}"
+    sha256: "{{ csi_snapshotter_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  snapshot_controller:
+    enabled: "{{ csi_snapshot_controller_enabled }}"
+    container: true
+    repo: "{{ snapshot_controller_image_repo }}"
+    tag: "{{ snapshot_controller_image_tag }}"
+    sha256: "{{ snapshot_controller_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  csi_resizer:
+    enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
+    container: true
+    repo: "{{ csi_resizer_image_repo }}"
+    tag: "{{ csi_resizer_image_tag }}"
+    sha256: "{{ csi_resizer_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  csi_node_driver_registrar:
+    enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
+    container: true
+    repo: "{{ csi_node_driver_registrar_image_repo }}"
+    tag: "{{ csi_node_driver_registrar_image_tag }}"
+    sha256: "{{ csi_node_driver_registrar_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  cinder_csi_plugin:
+    enabled: "{{ cinder_csi_enabled }}"
+    container: true
+    repo: "{{ cinder_csi_plugin_image_repo }}"
+    tag: "{{ cinder_csi_plugin_image_tag }}"
+    sha256: "{{ cinder_csi_plugin_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  aws_ebs_csi_plugin:
+    enabled: "{{ aws_ebs_csi_enabled }}"
+    container: true
+    repo: "{{ aws_ebs_csi_plugin_image_repo }}"
+    tag: "{{ aws_ebs_csi_plugin_image_tag }}"
+    sha256: "{{ aws_ebs_csi_plugin_digest_checksum|default(None) }}"
+    groups:
+    - kube_node
+
+  dashboard:
+    enabled: "{{ dashboard_enabled }}"
+    container: true
+    repo: "{{ dashboard_image_repo }}"
+    tag: "{{ dashboard_image_tag }}"
+    sha256: "{{ dashboard_digest_checksum|default(None) }}"
+    groups:
+    - kube_control_plane
+
+  dashboard_metrics_scrapper:
+    enabled: "{{ dashboard_enabled }}"
+    container: true
+    repo: "{{ dashboard_metrics_scraper_repo }}"
+    tag: "{{ dashboard_metrics_scraper_tag }}"
+    sha256: "{{ dashboard_digest_checksum|default(None) }}"
+    groups:
+    - kube_control_plane
+
+  metallb_speaker:
+    enabled: "{{ metallb_speaker_enabled }}"
+    container: true
+    repo: "{{ metallb_speaker_image_repo }}"
+    tag: "{{ metallb_version }}"
+    sha256: "{{ metallb_speaker_digest_checksum|default(None) }}"
+    groups:
+    - kube_control_plane
+
+  metallb_controller:
+    enabled: "{{ metallb_enabled }}"
+    container: true
+    repo: "{{ metallb_controller_image_repo }}"
+    tag: "{{ metallb_version }}"
+    sha256: "{{ metallb_controller_digest_checksum|default(None) }}"
+    groups:
+    - kube_control_plane
+
+  yq:
+    enabled: "{{ argocd_enabled }}"
+    file: true
+    version: "{{ yq_version }}"
+    dest: "{{ local_release_dir }}/yq"
+    sha256: "{{ yq_binary_checksum|default(None) }}"
+    url: "{{ yq_download_url }}"
+    unarchive: false
+    owner: "root"
+    mode: "0755"
+    groups:
+    - kube_control_plane
+
+download_defaults:
+  container: false
+  file: false
+  repo: None
+  tag: None
+  enabled: false
+  dest: None
+  version: None
+  url: None
+  unarchive: false
+  owner: "{{ kube_owner }}"
+  mode: None
diff --git a/scripts/download_hash.py b/scripts/download_hash.py
index 7c5685c9ee9..a3b306d44ab 100644
--- a/scripts/download_hash.py
+++ b/scripts/download_hash.py
@@ -10,7 +10,7 @@
 import requests
 from ruamel.yaml import YAML
 
-MAIN_YML = "../roles/download/defaults/main.yml"
+MAIN_YML = "../roles/download/defaults/main/main.yml"
 
 def open_main_yaml():
     yaml = YAML()
diff --git a/tests/scripts/check_readme_versions.sh b/tests/scripts/check_readme_versions.sh
index a0fbd7bb94d..d796d9c437f 100755
--- a/tests/scripts/check_readme_versions.sh
+++ b/tests/scripts/check_readme_versions.sh
@@ -17,7 +17,7 @@ fi
 
 for component in $(echo ${TARGET_COMPONENTS}); do
 	echo checking ${component}..
-	version_from_default=$(grep "^$(echo ${component} | sed s/"-"/"_"/g)_version:" ./roles/download/defaults/main.yml | awk '{print $2}' | sed s/\"//g | sed s/^v//)
+	version_from_default=$(grep "^$(echo ${component} | sed s/"-"/"_"/g)_version:" ./roles/download/defaults/main/main.yml | awk '{print $2}' | sed s/\"//g | sed s/^v//)
 	if [ "${version_from_default}" = "" ]; then
 		version_from_default=$(grep "^$(echo ${component} | sed s/"-"/"_"/g)_version:" ./roles/kubernetes/node/defaults/main.yml | awk '{print $2}' | sed s/\"//g | sed s/^v//)
 	fi