Use new Calico images using ipset 7.17

On kernels >= 6.2, there's a new bitmask parameter for ipset. Newer ipset versions support and use that, leading to the effect that older ipset versions won't be able to cope with that. The error message is: Kernel and userspace incompatible: settype hash:ip with revision 6 not supported by userspace. K0s's current kube-proxy image ships ipset v7.17, whereas K0s's current calico-node image ships ipset v7.15. That fails on newer kernels, if kube-proxy uses IPVS. Fix this by updating to new Calico images that ship v7.17, too. See: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e9374524950512a1769f610a868fcdf89ea59b8e Signed-off-by: Tom Wieczorek <[email protected]>
twz123 · Sep 21, 2023 · 8f13f13 · 8f13f13
1 parent f22108f
commit 8f13f13
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/constant/constant_shared.go b/pkg/constant/constant_shared.go
@@ -84,7 +84,7 @@ const (
 	EnvoyProxyImage                    = "quay.io/k0sproject/envoy-distroless"
 	EnvoyProxyImageVersion             = "v1.24.1"
 	CalicoImage                        = "quay.io/k0sproject/calico-cni"
-	CalicoComponentImagesVersion       = "v3.26.1-0"
+	CalicoComponentImagesVersion       = "v3.26.1-1"
 	CalicoNodeImage                    = "quay.io/k0sproject/calico-node"
 	KubeControllerImage                = "quay.io/k0sproject/calico-kube-controllers"
 	KubeRouterCNIImage                 = "quay.io/k0sproject/kube-router"