fix: Always upgrade to latest patch version

Author: adskyiproger

infrastructure/server-setup/tasks/k8s/install-kubernetes.yml

@@ -1,20 +1,25 @@
 - name: Create keyrings directory
-  shell: mkdir -p /etc/apt/keyrings
+  ansible.builtin.file:
+    path: /etc/apt/keyrings
+    state: directory
+    mode: '0755'
 
 - name: Download Kubernetes APT key
   get_url:
     url: "https://pkgs.k8s.io/core:/stable:/{{ kubernetes_version }}/deb/Release.key"
     dest: /tmp/kubernetes.key
     mode: '0644'
 
-- name: Remove Kubernetes APT key if it exists
-  shell: rm -f /etc/apt/keyrings/kubernetes-apt-keyring.gpg
-  
-- name: Add Kubernetes APT key
-  shell: gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg /tmp/kubernetes.key
+- name: Convert and install Kubernetes APT key
+  ansible.builtin.shell: gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg /tmp/kubernetes.key
+  args:
+    creates: /etc/apt/keyrings/kubernetes-apt-keyring.gpg
 
 - name: Add Kubernetes APT repository
-  shell: echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/{{ kubernetes_version }}/deb/ /' | tee /etc/apt/sources.list.d/kubernetes.list
+  ansible.builtin.apt_repository:
+    repo: "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/{{ kubernetes_version }}/deb/ /"
+    filename: kubernetes
+    state: present
 
 - name: Install specific Kubernetes version
   become: yes
@@ -24,7 +29,7 @@
       - kubelet
       - kubeadm
       - kubectl
-    state: present
+    state: latest
 
 - name: Enable kubelet service
   become: yes

infrastructure/server-setup/tasks/k8s/upgrade-k8s-workers.yml

@@ -1,15 +1,7 @@
-
-- name: Display upgrade status
-  ansible.builtin.debug:
-    msg: |
-      Kubelet version: {{ kubelet_version }}
-      Server version: {{ current_k8s_version }}
-      Target version: {{ kubernetes_version }}
-      Upgrade needed: {{ upgrade_needed }}
-
+# NOTE: Nodes are not cordoned and workloads keep running while kubelet restart
+#       Application may become not available if upgrade fails.
 - name: Restart kubelet
   become: yes
-  when: upgrade_needed
   ansible.builtin.systemd:
     name: kubelet
     state: restarted