Upgrades k8s to v1.28.14 (#904)

* Upgrades k8s to v1.28.14
* Updates download paths for some of the core components
* Upgrades various other cluster components to latest compatible versions

manage-cluster/k8s_deploy.conf

@@ -28,25 +28,25 @@ PROM_BASE_NAME="prometheus-${GCE_BASE_NAME}"
 # we learn more.
 GCE_API_SCOPES="cloud-platform"
 
-K8S_VERSION="v1.27.12" # https://github.com/kubernetes/kubernetes/releases
-K8S_CNI_VERSION="v1.4.1" # https://github.com/containernetworking/plugins/releases
-K8S_CRICTL_VERSION="v1.27.1" # https://github.com/kubernetes-sigs/cri-tools/releases
+K8S_VERSION="v1.28.14" # https://github.com/kubernetes/kubernetes/releases
+K8S_CNI_VERSION="v1.5.1" # https://github.com/containernetworking/plugins/releases
+K8S_CRICTL_VERSION="v1.28.0" # https://github.com/kubernetes-sigs/cri-tools/releases
 # FLANNEL is for the flannel DaemonSet, whereas FLANNELCNI is for the CNI
 # plugin located at /opt/cni/bin (used by the kubelet).
-K8S_FLANNEL_VERSION="v0.25.0" # https://github.com/flannel-io/flannel/releases
-K8S_FLANNELCNI_VERSION="v1.4.0-flannel1" # https://github.com/flannel-io/cni-plugin/releases
-K8S_TOOLING_VERSION="v0.16.7" # https://github.com/kubernetes/release/releases
+K8S_FLANNEL_VERSION="v0.25.6" # https://github.com/flannel-io/flannel/releases
+K8S_FLANNELCNI_VERSION="v1.5.1-flannel3" # https://github.com/flannel-io/cni-plugin/releases
+K8S_TOOLING_VERSION="v0.17.7" # https://github.com/kubernetes/release/releases
 # kubeadm installs and managed etcd automatically. Try to keep this version of
 # etcdctl more or less in line with the default etcd version that kubeadm uses
 # for any given release of k8s. For example, see this:
-# https://github.com/kubernetes/kubernetes/blob/v1.26.11/cmd/kubeadm/app/constants/constants.go#L314
-ETCDCTL_VERSION="v3.5.12"
-K8S_HELM_VERSION="v3.14.3" # https://github.com/helm/helm/releases
-K8S_VECTOR_VERSION="0.37.0-debian" # https://github.com/vectordotdev/vector/releases
-K8S_VECTOR_CHART="0.32.0" # https://github.com/vectordotdev/helm-charts/releases
-K8S_KURED_VERSION="1.15.1" # https://github.com/kubereboot/kured/releases
-K8S_KURED_CHART="5.4.5" # https://github.com/kubereboot/charts/releases
-K8S_CERTMANAGER_VERSION="v1.14.4" # https://github.com/cert-manager/cert-manager/releases
+# https://github.com/kubernetes/kubernetes/blob/v1.28.14/cmd/kubeadm/app/constants/constants.go#L308
+ETCDCTL_VERSION="v3.5.15"
+K8S_HELM_VERSION="v3.16.1" # https://github.com/helm/helm/releases
+K8S_VECTOR_VERSION="0.41.1-debian" # https://github.com/vectordotdev/vector/releases
+K8S_VECTOR_CHART="0.36.1" # https://github.com/vectordotdev/helm-charts/releases
+K8S_KURED_VERSION="1.16.0" # https://github.com/kubereboot/kured/releases
+K8S_KURED_CHART="5.5.0" # https://github.com/kubereboot/charts/releases
+K8S_CERTMANAGER_VERSION="v1.15.3" # https://github.com/cert-manager/cert-manager/releases
 K8S_CERTMANAGER_DNS01_SA="cert-manager-dns01-solver"
 K8S_CERTMANAGER_SA_KEY="cert-manager-credentials.json"
 K8S_CA_FILES="ca.crt ca.key sa.key sa.pub front-proxy-ca.crt front-proxy-ca.key etcd/ca.crt etcd/ca.key"

manage-cluster/upgrade_api_cluster.sh

@@ -116,11 +116,11 @@ for zone in $GCE_ZONES; do
     curl -L "https://github.com/containernetworking/plugins/releases/download/${K8S_CNI_VERSION}/cni-plugins-linux-amd64-${K8S_CNI_VERSION}.tgz" | tar -C /opt/cni/bin -xz
 
     # Upgrade crictl.
-    curl -L "https://github.com/kubernetes-incubator/cri-tools/releases/download/${K8S_CRICTL_VERSION}/crictl-${K8S_CRICTL_VERSION}-linux-amd64.tar.gz" | tar -C /opt/bin -xz
+    curl -L "https://github.com/kubernetes-sigs/cri-tools/releases/download/${K8S_CRICTL_VERSION}/crictl-${K8S_CRICTL_VERSION}-linux-amd64.tar.gz" | tar -C /opt/bin -xz
 
     # Upgrade kubeadm.
     pushd /opt/bin
-    curl -L --remote-name-all https://storage.googleapis.com/kubernetes-release/release/${K8S_VERSION}/bin/linux/amd64/kubeadm
+    curl -L --remote-name-all https://dl.k8s.io/release/${K8S_VERSION}/bin/linux/amd64/kubeadm
     chmod +x kubeadm
     popd
 
@@ -140,7 +140,7 @@ for zone in $GCE_ZONES; do
 
     # Upgrade kubelet and kubectl.
     pushd /opt/bin
-    curl -L --remote-name-all https://storage.googleapis.com/kubernetes-release/release/${K8S_VERSION}/bin/linux/amd64/{kubelet,kubectl}
+    curl -L --remote-name-all https://dl.k8s.io/release/${K8S_VERSION}/bin/linux/amd64/{kubelet,kubectl}
     chmod +x {kubelet,kubectl}
     popd