Validated on release-1.33 branch with version v1.33.3-rc1+k3s1

Environment Details

Infrastructure

Cloud
Hosted

Node(s) CPU architecture, OS, and Version:

$ cat /etc/os-release
PRETTY_NAME="Ubuntu 24.04 LTS"

$ uname -m
x86_64

Cluster Configuration:

1 server

Config.yaml:

token: xxxx
cluster-init: true
write-kubeconfig-mode: "0644"
node-external-ip: 1.1.1.1
node-label:
- k3s-upgrade=server

Was selinux enabled: true or false

$ sestatus

Testing Steps

Copy config.yaml

$ sudo mkdir -p /etc/rancher/k3s && sudo cp config.yaml /etc/rancher/k3s

Install k3s

curl -sfL https://get.k3s.io | sudo INSTALL_K3S_VERSION='v1.33.3-rc1+k3s1' sh -s - server

Verify Cluster Status:

kubectl get nodes -o wide
kubectl get pods -A

Replication Results:

k3s version used for replication:

$ k3s -v
k3s version v1.33.2+k3s1 (6e38c8b5)
go version go1.24.4

$ kubectl explain helmchart.spec
DEBU[0000] Asset dir /var/lib/rancher/k3s/data/1b7cbbb3a5b11f87bde410c5b493eddc409ba6809dd5318a80c7cc3eadb26f48
DEBU[0000] Running /var/lib/rancher/k3s/data/1b7cbbb3a5b11f87bde410c5b493eddc409ba6809dd5318a80c7cc3eadb26f48/bin/kubectl [kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml explain helmchart.spec]
GROUP:      helm.cattle.io
KIND:       HelmChart
VERSION:    v1

FIELD: spec <Object>


DESCRIPTION:
    <empty>
FIELDS:
  authPassCredentials	<boolean>
    <no description>

  authSecret	<Object>
    <no description>

  backOffLimit	<integer>
    <no description>

  bootstrap	<boolean>
    <no description>

  chart	<string>
    <no description>

  chartContent	<string>
    <no description>

  createNamespace	<boolean>
    <no description>

  dockerRegistrySecret	<Object>
    <no description>

  failurePolicy	<string>
    <no description>

  helmVersion	<string>
    <no description>

  insecureSkipTLSVerify	<boolean>
    <no description>

  jobImage	<string>
    <no description>

  plainHTTP	<boolean>
    <no description>

  podSecurityContext	<Object>
    <no description>

  repo	<string>
    <no description>

  repoCA	<string>
    <no description>

  repoCAConfigMap	<Object>
    <no description>

  securityContext	<Object>
    <no description>

  set	<map[string]Object>
    <no description>

  targetNamespace	<string>
    <no description>

  timeout	<string>
    <no description>

  valuesContent	<string>
    <no description>

  valuesSecrets	<[]Object>
    <no description>

  version	<string>
    <no description>

Validation Results:

k3s version used for validation:

$ k3s -v
k3s version v1.33.3-rc1+k3s1 (236cbf25)
go version go1.24.4

$ kubectl explain helmchart.spec
DEBU[0000] Asset dir /var/lib/rancher/k3s/data/39181d1f10d62129cace55f7717b03c4262515ca7c3895ce83ab291c0aed1ba7
DEBU[0000] Running /var/lib/rancher/k3s/data/39181d1f10d62129cace55f7717b03c4262515ca7c3895ce83ab291c0aed1ba7/bin/kubectl [kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml explain helmchart.spec]
GROUP:      helm.cattle.io
KIND:       HelmChart
VERSION:    v1

FIELD: spec <Object>


DESCRIPTION:
    HelmChartSpec represents the user-configurable details for installation and
    upgrade of a Helm chart release.

FIELDS:
  authPassCredentials	<boolean>
    Pass Basic auth credentials to all domains.
    Helm CLI positional argument/flag: `--pass-credentials`

  authSecret	<Object>
    Reference to Secret of type kubernetes.io/basic-auth holding Basic auth
    credentials for the Chart repo.

  backOffLimit	<integer>
    Specify the number of retries before considering the helm job failed.

  bootstrap	<boolean>
    Set to True if this chart is needed to bootstrap the cluster (Cloud
    Controller Manager, CNI, etc)

  chart	<string>
    Helm Chart name in repository, or complete HTTPS URL to chart archive (.tgz)
    Helm CLI positional argument/flag: `CHART`

  chartContent	<string>
    Base64-encoded chart archive .tgz; overides `.spec.chart` and
    `.spec.version`
    Helm CLI positional argument/flag: `CHART`

  createNamespace	<boolean>
    Create target namespace if not present.
    Helm CLI positional argument/flag: `--create-namespace`

  dockerRegistrySecret	<Object>
    Reference to Secret of type kubernetes.io/dockerconfigjson holding Docker
    auth credentials for the OCI-based registry acting as the Chart repo.

  failurePolicy	<string>
  enum: abort, reinstall
    Configures handling of failed chart installation or upgrades.
    - `reinstall` will perform a clean uninstall and reinstall of the chart.
    - `abort` will take no action and leave the chart in a failed state so that
    the administrator can manually resolve the error.

  helmVersion	<string>
    DEPRECATED. Helm version to use. Only v3 is currently supported.

  insecureSkipTLSVerify	<boolean>
    Skip TLS certificate checks for the chart download.
    Helm CLI positional argument/flag: `--insecure-skip-tls-verify`

  jobImage	<string>
    Specify the image to use for tht helm job pod when installing or upgrading
    the helm chart.

  plainHTTP	<boolean>
    Use insecure HTTP connections for the chart download.
    Helm CLI positional argument/flag: `--plain-http`

  podSecurityContext	<Object>
    Custom PodSecurityContext for the helm job pod.

  repo	<string>
    Helm Chart repository URL.
    Helm CLI positional argument/flag: `--repo`

  repoCA	<string>
    Verify certificates of HTTPS-enabled servers using this CA bundle. Should be
    a string containing one or more PEM-encoded CA Certificates.
    Helm CLI positional argument/flag: `--ca-file`

  repoCAConfigMap	<Object>
    Reference to a ConfigMap containing CA Certificates to be be trusted by
    Helm. Can be used along with or instead of `.spec.repoCA`
    Helm CLI positional argument/flag: `--ca-file`

  securityContext	<Object>
    custom SecurityContext for the helm job pod.

  set	<map[string]Object>
    Override simple Chart values. These take precedence over options set via
    valuesContent.
    Helm CLI positional argument/flag: `--set`, `--set-string`

  targetNamespace	<string>
    Helm Chart target namespace.
    Helm CLI positional argument/flag: `--namespace`

  timeout	<string>
    Timeout for Helm operations.
    Helm CLI positional argument/flag: `--timeout`

  valuesContent	<string>
    Override complex Chart values via inline YAML content.
    Helm CLI positional argument/flag: `--values`

  valuesSecrets	<[]Object>
    Override complex Chart values via references to external Secrets.
    Helm CLI positional argument/flag: `--values`

  version	<string>
    Helm Chart version. Only used when installing from repository; ignored when
    .spec.chart or .spec.chartContent is used to install a specific chart
    archive.
    Helm CLI positional argument/flag: `--version`

$ kubectl explain plan.spec
DEBU[0000] Asset dir /var/lib/rancher/k3s/data/39181d1f10d62129cace55f7717b03c4262515ca7c3895ce83ab291c0aed1ba7
DEBU[0000] Running /var/lib/rancher/k3s/data/39181d1f10d62129cace55f7717b03c4262515ca7c3895ce83ab291c0aed1ba7/bin/kubectl [kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml explain plan.spec]
GROUP:      upgrade.cattle.io
KIND:       Plan
VERSION:    v1

FIELD: spec <Object>


DESCRIPTION:
    PlanSpec represents the user-configurable details of a Plan.

FIELDS:
  channel	<string>
    A URL that returns HTTP 302 with the last path element of the value returned
    in the Location header assumed to be an image tag (after munging "+" to
    "-").

  concurrency	<integer>
    The maximum number of concurrent nodes to apply this update on.

  cordon	<boolean>
    If Cordon is true, the node is cordoned before the upgrade container is run.
    If drain is specified, the value for cordon is ignored, and the node is
    cordoned.
    If neither drain nor cordon are specified and the node is marked as
    schedulable=false it will not be marked as schedulable=true when the Job
    completes.

  drain	<Object>
    Configuration for draining nodes prior to upgrade. If left unspecified, no
    drain will be performed.

  exclusive	<boolean>
    Jobs for exclusive plans cannot be run alongside any other exclusive plan.

  imagePullSecrets	<[]Object>
    Image Pull Secrets, used to pull images for the Job.

  jobActiveDeadlineSecs	<integer>
    Sets ActiveDeadlineSeconds on Jobs generated to apply this Plan.
    If the Job does not complete within this time, the Plan will stop processing
    until it is updated to trigger a redeploy.
    If set to 0, Jobs have no deadline. If not set, the controller default value
    is used.

  nodeSelector	<Object>
    Select which nodes this plan can be applied to.

  postCompleteDelay	<string>
    Time after a Job for one Node is complete before a new Job will be created
    for the next Node.

  prepare	<Object>
    The prepare init container, if specified, is run before cordon/drain which
    is run before the upgrade container.

  secrets	<[]Object>
    Secrets to be mounted into the Job Pod.

  serviceAccountName	<string>
    The service account for the pod to use. As with normal pods, if not
    specified the default service account from the namespace will be assigned.

  tolerations	<[]Object>
    Specify which node taints should be tolerated by pods applying the upgrade.
    Anything specified here is appended to the default of:
    - `{key: node.kubernetes.io/unschedulable, effect: NoSchedule, operator:
    Exists}`

  upgrade	<Object> -required-
    The upgrade container; must be specified.

  version	<string>
    Providing a value for version will prevent polling/resolution of the channel
    if specified.

  window	<Object>
    A time window in which to execute Jobs for this Plan.
    Jobs will not be generated outside this time window, but may continue
    executing into the window once started.

go.mod verification results:

github.com/k3s-io/api v0.1.2
k8s.io/apiextensions-apiserver v0.33.3
github.com/k3s-io/helm-controller v0.16.13

[Release-1.33] - Stop using wrangler CRD generation helpers #12617

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions