From 8f13f1300f15ffde927afa70c25b6daf7a54d170 Mon Sep 17 00:00:00 2001 From: Tom Wieczorek Date: Thu, 21 Sep 2023 11:40:46 +0200 Subject: [PATCH] Use new Calico images using ipset 7.17 On kernels >= 6.2, there's a new bitmask parameter for ipset. Newer ipset versions support and use that, leading to the effect that older ipset versions won't be able to cope with that. The error message is: Kernel and userspace incompatible: settype hash:ip with revision 6 not supported by userspace. K0s's current kube-proxy image ships ipset v7.17, whereas K0s's current calico-node image ships ipset v7.15. That fails on newer kernels, if kube-proxy uses IPVS. Fix this by updating to new Calico images that ship v7.17, too. See: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e9374524950512a1769f610a868fcdf89ea59b8e Signed-off-by: Tom Wieczorek --- pkg/constant/constant_shared.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/constant/constant_shared.go b/pkg/constant/constant_shared.go index a7b5deee7961..bbf1786cfc86 100644 --- a/pkg/constant/constant_shared.go +++ b/pkg/constant/constant_shared.go @@ -84,7 +84,7 @@ const ( EnvoyProxyImage = "quay.io/k0sproject/envoy-distroless" EnvoyProxyImageVersion = "v1.24.1" CalicoImage = "quay.io/k0sproject/calico-cni" - CalicoComponentImagesVersion = "v3.26.1-0" + CalicoComponentImagesVersion = "v3.26.1-1" CalicoNodeImage = "quay.io/k0sproject/calico-node" KubeControllerImage = "quay.io/k0sproject/calico-kube-controllers" KubeRouterCNIImage = "quay.io/k0sproject/kube-router"