Merge remote-tracking branch 'origin/development/133.0' into HEAD

Author: ezekiel-alexrod

.github/workflows/build.yaml

@@ -137,7 +137,7 @@ jobs:
         uses: actions/checkout@v6
       - name: Upload final status
         if: always()
-        uses: scality/actions/upload_final_status@1.15.0
+        uses: scality/actions/upload_final_status@1.17.0
         with:
           ARTIFACTS_USER: ${{ secrets.ARTIFACTS_USER }}
           ARTIFACTS_PASSWORD: ${{ secrets.ARTIFACTS_PASSWORD }}

.github/workflows/cron-clean-ovh-cloud.yaml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Clean up old VMs in OpenStack
-        uses: scality/actions/actions-cleanup-openstack-vms@1.15.0
+        uses: scality/actions/actions-cleanup-openstack-vms@1.17.0
         with:
           AUTH_URL: ${{ secrets.OVH_AUTH_URL }}
           AGE_HOURS: 6

.github/workflows/crons.yaml

@@ -90,7 +90,7 @@ jobs:
           access_token: ${{ secrets.GITHUB_TOKEN }}
       - name: Notify Slack on retry triggered
         if: matrix.type == 'retry' && steps.retry.outputs.was-retried == 'true'
-        uses: slackapi/slack-github-action@v1
+        uses: slackapi/slack-github-action@v3
         with:
           channel-id: "#squad-metalk8s"
           slack-message: |
@@ -104,7 +104,7 @@ jobs:
           SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
       - name: Notify Slack on manual action needed
         if: matrix.type == 'retry' && steps.retry.outputs.retry-count != '' && fromJSON(steps.retry.outputs.retry-count) >= fromJSON(env.MAX_RETRIES)
-        uses: slackapi/slack-github-action@v1
+        uses: slackapi/slack-github-action@v3
         with:
           channel-id: "#squad-metalk8s"
           slack-message: |

.github/workflows/lifecycle-dev.yaml

@@ -58,6 +58,9 @@ jobs:
     needs:
       - get-dev-artifacts-url
     uses: ./.github/workflows/downgrade-test.yaml
+    # NOTE: Downgrade is not supported from 133 to 132 (see CHANGELOG.md)
+    # Should be removed in `development/134.0`
+    if: ${{ ! startsWith(inputs.dev-branch, 'development/132') }}
     secrets: inherit
     with:
       from-artifacts-url: ${{ inputs.artifacts-url }}

.github/workflows/lifecycle-promoted.yaml

@@ -208,6 +208,9 @@ jobs:
 
   promoted-downgrade:
     uses: ./.github/workflows/downgrade-test.yaml
+    # NOTE: Downgrade is not supported from 133 to 132 (see CHANGELOG.md)
+    # Should be removed in `development/134.0`
+    if: ${{ ! startsWith(inputs.promoted-version, '132.') }}
     secrets: inherit
     with:
       from-artifacts-url: ${{ inputs.artifacts-url }}

.github/workflows/nightly.yaml

@@ -244,7 +244,7 @@ jobs:
         uses: actions/checkout@v6
       - name: Upload final status
         if: always()
-        uses: scality/actions/upload_final_status@1.15.0
+        uses: scality/actions/upload_final_status@1.17.0
         with:
           ARTIFACTS_USER: ${{ secrets.ARTIFACTS_USER }}
           ARTIFACTS_PASSWORD: ${{ secrets.ARTIFACTS_PASSWORD }}

.github/workflows/pre-merge.yaml

@@ -158,7 +158,7 @@ jobs:
           node-version: "20"
       - name: Cache node modules
         id: cache-npm
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         env:
           cache-name: cache-node-modules
         with:
@@ -201,7 +201,7 @@ jobs:
           node-version: "20"
       - name: Cache node modules
         id: cache-npm
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         env:
           cache-name: cache-node-modules
         with:
@@ -236,7 +236,7 @@ jobs:
         with:
           node-version: "20"
       - name: Cache node modules
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         env:
           cache-name: cache-node-modules
         with:
@@ -377,7 +377,7 @@ jobs:
           node-version: "20"
       - name: Cache node modules
         id: cache-npm
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         env:
           cache-name: cache-node-modules
         with:
@@ -456,7 +456,7 @@ jobs:
           node-version: "20"
       - name: Cache node modules
         id: cache-npm
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         env:
           cache-name: cache-node-modules
         with:
@@ -535,7 +535,7 @@ jobs:
         uses: actions/checkout@v6
       - name: Upload final status
         if: always()
-        uses: scality/actions/upload_final_status@1.15.0
+        uses: scality/actions/upload_final_status@1.17.0
         with:
           ARTIFACTS_USER: ${{ secrets.ARTIFACTS_USER }}
           ARTIFACTS_PASSWORD: ${{ secrets.ARTIFACTS_PASSWORD }}

.pylint-dict

@@ -78,6 +78,7 @@ scality
 sdk
 skopeo
 sls
+sosreport
 srv
 Thanos
 timestamp

BUMPING.md

@@ -148,7 +148,7 @@ This guide is applied for both `metalk8s-operator` and `storage-operator`.
 
 ## Containerd
 
-Instructions to bump Containerd version are in its [spec file](./packages/redhat/common/containerd.spec)
+The version just needs to be updated in `buildchain/buildchain/versions.py`.
 
 ## Update the sls state
 

CHANGELOG.md

@@ -2,11 +2,21 @@
 
 ## Release 133.0.0 (in development)
 
+### Breaking changes
+
+- Due to the migration from our own RPM for containerd v1 to the official
+  containerd.io RPM from docker.io, downgrading from 133 to 132 will not be
+  possible.
+
 ### Enhancements
 
 - Bump Kubernetes version to [1.33.7](https://github.com/kubernetes/kubernetes/releases/tag/v1.33.7)
   (PR[#4769](https://github.com/scality/metalk8s/pull/4769))
 
+- Move from our own RPM for containerd v1 to the official containerd.io RPM from docker.io
+  to version [v2.2.2](https://github.com/containerd/containerd/releases/tag/v2.2.2)
+  (PR[#4821](https://github.com/scality/metalk8s/pull/4821))
+
 - Bump etcd version to [3.5.26](https://github.com/etcd-io/etcd/releases/tag/v3.5.26)
   (PR[#4769](https://github.com/scality/metalk8s/pull/4769))
 
@@ -16,9 +26,9 @@
 - Support etcd distroless images for Kubernetes 1.33+. Above etcd 3.5.21, etcd images are now distroless and upstreamed to the etcd project.
   (PR[#4740](https://github.com/scality/metalk8s/pull/4740))
 
-- Bump Fluent Bit image version to [4.2.2](https://github.com/fluent/fluent-bit/releases/tag/v4.2.2)
-  and Fluent Bit Helm chart version to [0.55.0](https://github.com/fluent/helm-charts/releases/tag/fluent-bit-0.55.0)
-  (PR[#4778](https://github.com/scality/metalk8s/pull/4778))
+- Bump Fluent Bit image version to [4.2.3](https://github.com/fluent/fluent-bit/releases/tag/v4.2.3)
+  and Fluent Bit Helm chart version to [0.56.0](https://github.com/fluent/helm-charts/releases/tag/fluent-bit-0.56.0)
+  (PR[#4812](https://github.com/scality/metalk8s/pull/4812))
 
 - Bump dex chart version to
   [0.24.0](https://github.com/dexidp/helm-charts/releases/tag/dex-0.24.0)
@@ -30,12 +40,19 @@
   and Loki image version to [3.6.5](https://github.com/grafana/loki/releases/tag/v3.6.5)
   (PR[#4792](https://github.com/scality/metalk8s/pull/4792))
 
+- Configure containerd using `config_path` for registries so that changes of
+  registries mirrors does no longer require a restart of the containerd service
+  (PR[#4821](https://github.com/scality/metalk8s/pull/4821))
+
 - Allow to enable metrics collection for the solutions operators
   (PR[#4813](https://github.com/scality/metalk8s/pull/4813))
 
 - Bump solution-operator-lib Go version to 1.24
   (PR[#4817](https://github.com/scality/metalk8s/pull/4817))
 
+- Bump prometheus-adapter chart version to [5.3.0](https://github.com/prometheus-community/helm-charts/releases/tag/prometheus-adapter-5.3.0)
+  (PR[#4825](https://github.com/scality/metalk8s/pull/4825))
+
 - Bump ingress-nginx chart version to [4.15.0](https://github.com/kubernetes/ingress-nginx/releases/tag/helm-chart-4.15.0)
   and ingress-nginx controller to [v1.15.0](https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.15.0)
   (PR[#4824](https://github.com/scality/metalk8s/pull/4824))
@@ -47,6 +64,9 @@
   and `k8s.io/*` dependencies have been bumped to [0.33.9](https://github.com/kubernetes/kubernetes/releases/tag/v1.33.9)
   (PR[#4818](https://github.com/scality/metalk8s/pull/4818))
 
+- Implement ability to add certificates to fluent-bit by mounting a fluent-bit-certs secret
+  (PR[#4812](https://github.com/scality/metalk8s/pull/4812))
+
 ### Bug Fixes
 
 - Fix a bug where part of the upgrade process would silently be skipped
@@ -55,6 +75,12 @@
 
 ## Release 132.0.3 (in development)
 
+### Bug Fixes
+
+- Fix a bug where Salt master process may report an error about `VerboseLogger`
+  not having attributes `trace`
+  (PR[#4831](https://github.com/scality/metalk8s/pull/4831))
+
 ## Release 132.0.2
 
 ## Release 132.0.1