[Release-1.31] Verifying image bumps

[aganesh-suse]

PRs without issues:
#7098
#7104

[aganesh-suse]

Validated on release-1.31 branch with version v1.31.2-rc4+rke2r1

Environment Details

Infrastructure

• Cloud
• Hosted

Node(s) CPU architecture, OS, and Version:

$ cat /etc/os-release
PRETTY_NAME="Ubuntu 24.04 LTS"

$ uname -m
x86_64

Cluster Configuration:

HA : 3 server / 1 agent

Config.yaml:

token: xxxx
write-kubeconfig-mode: "0644"
node-external-ip: 1.1.1.1

Testing Steps

1. Copy config.yaml

$ sudo mkdir -p /etc/rancher/rke2 && sudo cp config.yaml /etc/rancher/rke2

2. Install RKE2

curl -sfL https://get.rke2.io | sudo INSTALL_RKE2_VERSION='v1.31.2-rc4+rke2r1' INSTALL_RKE2_TYPE='server' INSTALL_RKE2_METHOD=tar sh -

3. Start the RKE2 service

$ sudo systemctl enable --now rke2-server
or 
$ sudo systemctl enable --now rke2-agent

4. Verify Cluster Status:

kubectl get nodes -o wide
kubectl get pods -A

Validation Results:

• rke2 version used for validation:

$ rke2 -v
rke2 version v1.31.2-rc4+rke2r1 (dc4219f5755bb1deb91619550b3565892b57ecdb)
go version go1.22.8 X:boringcrypto

Image checks:

hardened-cluster-autoscaler:
$ /var/lib/rancher/rke2/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml get node -o yaml | grep 'hardened-cluster-autoscaler' -A1
      - docker.io/rancher/hardened-cluster-autoscaler@sha256:d4b0e678fd2295144ce563f2d375fdfa9f183171bb95a00fe6b51300cd23cbeb
      - docker.io/rancher/hardened-cluster-autoscaler:v1.8.11-build20241014
      sizeBytes: 12148478

hardened-k8s-metrics-server:
$ /var/lib/rancher/rke2/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml get node -o yaml | grep 'hardened-k8s-metrics-server' -A1
      - docker.io/rancher/hardened-k8s-metrics-server@sha256:5e4bbe1800cabdc7ea79af493210638e6bec9e48defc783615d39dc1dd1ad180
      - docker.io/rancher/hardened-k8s-metrics-server:v0.7.1-build20241008
      sizeBytes: 18765881

nginx-ingress-controller:
$ /var/lib/rancher/rke2/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml get node -o yaml | grep 'nginx-ingress-controller' -A1
      - docker.io/rancher/nginx-ingress-controller@sha256:b8476647dceaec770e246ea3068662b2817723e0fd28a498c5a87056050120bc
      - docker.io/rancher/nginx-ingress-controller:v1.10.5-hardened3
      sizeBytes: 297174360

hardened-calico:
$ /var/lib/rancher/rke2/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml get node -o yaml | grep 'calico' -A1
      - docker.io/rancher/hardened-calico@sha256:2f4c453aa2ff9b7dd366748a0c8af4cf71d558ef69fb6eb4ee8ff00a8e420388
      - docker.io/rancher/hardened-calico:v3.28.2-build20241016
      sizeBytes: 206698187

hardened-flannel:
$ /var/lib/rancher/rke2/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml get node -o yaml | grep 'hardened-flannel' -A1
      - docker.io/rancher/hardened-flannel@sha256:dfb3e174a5b1c47639acdf1322988251d0f90492e4b196ca6aa5279ec4954d2e
      - docker.io/rancher/hardened-flannel:v0.25.7-build20241008
      sizeBytes: 80865835

Verified images from https://github.com/rancher/rke2/releases/download/v1.31.2-rc4%2Brke2r1/rke2-images-all.linux-amd64.txt:

hardened-addon-resizer:
    docker.io/rancher/hardened-addon-resizer:1.8.20-build20241001
hardened-dns-node-cache: 
    docker.io/rancher/hardened-dns-node-cache:1.23.1-build20241008
hardened-multus-cni:
    docker.io/rancher/hardened-multus-cni:v4.1.2-build20241011
hardened-whereabouts:
    docker.io/rancher/hardened-whereabouts:v0.8.0-build20241011

$ /var/lib/rancher/rke2/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml get node -o yaml | grep 'hardened-kubernetes' -A1
      - docker.io/rancher/hardened-kubernetes@sha256:372e41ba6e89a25e1c9598f7d5755ff56a621782de14513af65025877f0878d0
      - docker.io/rancher/hardened-kubernetes:v1.31.2-rke2r1-build20241023
      sizeBytes: 162108420