From 4baa2c8704fe4f091e91630809dc189920b5a1a4 Mon Sep 17 00:00:00 2001
From: Alexander <payback159@gmail.com>
Date: Wed, 17 Apr 2024 04:33:15 +0200
Subject: [PATCH] set default containerd_version to v1.7.15 and add checksums
 (#11083)

* set default containerd_version to v1.7.15 and add checksums for v1.7.14 and v1.7.15

* update containerd version in README.md
---
 README.md                                     |   2 +-
 .../defaults/main/checksums.yml               |   8 +
 .../defaults/main/download.yml                | 160 +++++++++---------
 3 files changed, 89 insertions(+), 81 deletions(-)

diff --git a/README.md b/README.md
index 790a5e55f..09e6319d4 100644
--- a/README.md
+++ b/README.md
@@ -163,7 +163,7 @@ Note: Upstart/SysV init based OS types are not supported.
   - [kubernetes](https://github.com/kubernetes/kubernetes) v1.29.3
   - [etcd](https://github.com/etcd-io/etcd) v3.5.12
   - [docker](https://www.docker.com/) v24.0 (see [Note](#container-runtime-notes))
-  - [containerd](https://containerd.io/) v1.7.13
+  - [containerd](https://containerd.io/) v1.7.15
   - [cri-o](http://cri-o.io/) v1.29.1 (experimental: see [CRI-O Note](docs/cri-o.md). Only on fedora, ubuntu and centos based OS)
 - Network Plugin
   - [cni-plugins](https://github.com/containernetworking/plugins) v1.2.0
diff --git a/roles/kubespray-defaults/defaults/main/checksums.yml b/roles/kubespray-defaults/defaults/main/checksums.yml
index b4c40ec5d..81ce64c9b 100644
--- a/roles/kubespray-defaults/defaults/main/checksums.yml
+++ b/roles/kubespray-defaults/defaults/main/checksums.yml
@@ -962,6 +962,8 @@ nerdctl_archive_checksums:
     1.6.1: 3924467d9430df991ebdf4e78211bac2b29e9a066d5000d98f8d4ebde2bb7b4c
 containerd_archive_checksums:
   arm:
+    1.7.15: 0
+    1.7.14: 0
     1.7.13: 0
     1.7.12: 0
     1.7.11: 0
@@ -993,6 +995,8 @@ containerd_archive_checksums:
     1.6.15: 0
     1.6.14: 0
   arm64:
+    1.7.15: 5cc8bd8f3d9803ef0ef701596e89d62ad6850a2544e722842f4533642df36d87
+    1.7.14: 44df66d0a0332465e7d15e90b974cd4f08d059dfa26652218ed9485390f47f9e
     1.7.13: 118759e398f35337109592b4d237538872dc12a207d38832b9d04515d0acbc4d
     1.7.12: 8a1b35a521d071a8828f63fe007a51e5b7ac863a1195f5dee32543b1a9d5f2b6
     1.7.11: 5eae27cce38a14be5390d4035127aa11416bc5ae592a9ff25b11870872ce1159
@@ -1024,6 +1028,8 @@ containerd_archive_checksums:
     1.6.15: d63e4d27c51e33cd10f8b5621c559f09ece8a65fec66d80551b36cac9e61a07d
     1.6.14: 3ccb61218e60cbba0e1bbe1e5e2bf809ac1ead8eafbbff36c3195d3edd0e4809
   amd64:
+    1.7.15: ea27e6454954bd9cb62a70b0a40eb085ae9c96cb8c075a74910102b33586e07d
+    1.7.14: 48e0d9747cd51cb90e0b278d100397653d9f2e765effca194427e4796395b240
     1.7.13: c2371c009dd8b7738663333d91e5ab50d204f8bcae24201f45d59060d12c3a23
     1.7.12: 6a24d8b996533fa1b0d7348fe9813a78cd01fa16cff865a961ad0d556f5cd665
     1.7.11: d66161d54546fad502fd50a13fcb79efff033fcd895adc9c44762680dcde4e69
@@ -1055,6 +1061,8 @@ containerd_archive_checksums:
     1.6.15: 191bb4f6e4afc237efc5c85b5866b6fdfed731bde12cceaa6017a9c7f8aeda02
     1.6.14: 7da626d46c4edcae1eefe6d48dc6521db3e594a402715afcddc6ac9e67e1bfcd
   ppc64le:
+    1.7.15: b38641d9bd18139495cf9839999039b19941f53d36a6d72efe4577c489dfda0c
+    1.7.14: b84b523909b9dd0c0b2bc40bd2b9af543ec9f1186df69c220ae3749e34623dbb
     1.7.13: 89605ed2365d5eb779477d11947101236eb44e5244f1e58bb162a9e68d242798
     1.7.12: 80f16891b387d86712026234de7d4d0365a38106dbe5e51b65b1200b24822721
     1.7.11: 6f91c5dabdccd1fc75aae8687381bb185b9eb4200beb29d0993dea8175f5fa61
diff --git a/roles/kubespray-defaults/defaults/main/download.yml b/roles/kubespray-defaults/defaults/main/download.yml
index 7d6ae184f..a464993be 100644
--- a/roles/kubespray-defaults/defaults/main/download.yml
+++ b/roles/kubespray-defaults/defaults/main/download.yml
@@ -80,7 +80,7 @@ runc_version: v1.1.12
 kata_containers_version: 3.1.3
 youki_version: 0.1.0
 gvisor_version: 20240305
-containerd_version: 1.7.13
+containerd_version: 1.7.15
 cri_dockerd_version: 0.3.11
 
 # this is relevant when container_manager == 'docker'
@@ -415,7 +415,7 @@ downloads:
     tag: "{{ netcheck_server_image_tag }}"
     sha256: "{{ netcheck_server_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   netcheck_agent:
     enabled: "{{ deploy_netchecker }}"
@@ -424,7 +424,7 @@ downloads:
     tag: "{{ netcheck_agent_image_tag }}"
     sha256: "{{ netcheck_agent_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   etcd:
     container: "{{ etcd_deployment_type != 'host' }}"
@@ -442,7 +442,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - etcd
+      - etcd
 
   cni:
     enabled: true
@@ -455,7 +455,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kubeadm:
     enabled: true
@@ -468,7 +468,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kubelet:
     enabled: true
@@ -481,7 +481,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kubectl:
     enabled: true
@@ -494,7 +494,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   crictl:
     file: true
@@ -507,7 +507,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   crio:
     file: true
@@ -520,7 +520,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cri_dockerd:
     file: true
@@ -531,11 +531,11 @@ downloads:
     url: "{{ cri_dockerd_download_url }}"
     unarchive: true
     unarchive_extra_opts:
-    - --strip=1
+      - --strip=1
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   crun:
     file: true
@@ -548,7 +548,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   youki:
     file: true
@@ -561,7 +561,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   runc:
     file: true
@@ -574,7 +574,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kata_containers:
     enabled: "{{ kata_containers_enabled }}"
@@ -587,7 +587,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   containerd:
     enabled: "{{ container_manager == 'containerd' }}"
@@ -600,7 +600,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   gvisor_runsc:
     enabled: "{{ gvisor_enabled }}"
@@ -613,7 +613,7 @@ downloads:
     owner: "root"
     mode: 755
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   gvisor_containerd_shim:
     enabled: "{{ gvisor_enabled }}"
@@ -626,7 +626,7 @@ downloads:
     owner: "root"
     mode: 755
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   nerdctl:
     file: true
@@ -639,7 +639,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   skopeo:
     file: true
@@ -652,7 +652,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   cilium:
     enabled: "{{ kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool }}"
@@ -661,7 +661,7 @@ downloads:
     tag: "{{ cilium_image_tag }}"
     sha256: "{{ cilium_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cilium_operator:
     enabled: "{{ kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool }}"
@@ -670,7 +670,7 @@ downloads:
     tag: "{{ cilium_operator_image_tag }}"
     sha256: "{{ cilium_operator_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cilium_hubble_relay:
     enabled: "{{ cilium_enable_hubble }}"
@@ -679,7 +679,7 @@ downloads:
     tag: "{{ cilium_hubble_relay_image_tag }}"
     sha256: "{{ cilium_hubble_relay_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cilium_hubble_certgen:
     enabled: "{{ cilium_enable_hubble }}"
@@ -688,7 +688,7 @@ downloads:
     tag: "{{ cilium_hubble_certgen_image_tag }}"
     sha256: "{{ cilium_hubble_certgen_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cilium_hubble_ui:
     enabled: "{{ cilium_enable_hubble }}"
@@ -697,7 +697,7 @@ downloads:
     tag: "{{ cilium_hubble_ui_image_tag }}"
     sha256: "{{ cilium_hubble_ui_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cilium_hubble_ui_backend:
     enabled: "{{ cilium_enable_hubble }}"
@@ -706,7 +706,7 @@ downloads:
     tag: "{{ cilium_hubble_ui_backend_image_tag }}"
     sha256: "{{ cilium_hubble_ui_backend_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   cilium_hubble_envoy:
     enabled: "{{ cilium_enable_hubble }}"
@@ -715,7 +715,7 @@ downloads:
     tag: "{{ cilium_hubble_envoy_image_tag }}"
     sha256: "{{ cilium_hubble_envoy_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   ciliumcli:
     enabled: "{{ kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool }}"
@@ -728,7 +728,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   multus:
     enabled: "{{ kube_network_plugin_multus }}"
@@ -737,7 +737,7 @@ downloads:
     tag: "{{ multus_image_tag }}"
     sha256: "{{ multus_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   flannel:
     enabled: "{{ kube_network_plugin == 'flannel' }}"
@@ -746,7 +746,7 @@ downloads:
     tag: "{{ flannel_image_tag }}"
     sha256: "{{ flannel_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   flannel_init:
     enabled: "{{ kube_network_plugin == 'flannel' }}"
@@ -755,7 +755,7 @@ downloads:
     tag: "{{ flannel_init_image_tag }}"
     sha256: "{{ flannel_init_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calicoctl:
     enabled: "{{ kube_network_plugin == 'calico' }}"
@@ -768,7 +768,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_node:
     enabled: "{{ kube_network_plugin == 'calico' }}"
@@ -777,7 +777,7 @@ downloads:
     tag: "{{ calico_node_image_tag }}"
     sha256: "{{ calico_node_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_cni:
     enabled: "{{ kube_network_plugin == 'calico' }}"
@@ -786,7 +786,7 @@ downloads:
     tag: "{{ calico_cni_image_tag }}"
     sha256: "{{ calico_cni_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_flexvol:
     enabled: "{{ kube_network_plugin == 'calico' }}"
@@ -795,7 +795,7 @@ downloads:
     tag: "{{ calico_flexvol_image_tag }}"
     sha256: "{{ calico_flexvol_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_policy:
     enabled: "{{ enable_network_policy and kube_network_plugin in ['calico'] }}"
@@ -804,7 +804,7 @@ downloads:
     tag: "{{ calico_policy_image_tag }}"
     sha256: "{{ calico_policy_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_typha:
     enabled: "{{ typha_enabled }}"
@@ -813,7 +813,7 @@ downloads:
     tag: "{{ calico_typha_image_tag }}"
     sha256: "{{ calico_typha_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_apiserver:
     enabled: "{{ calico_apiserver_enabled }}"
@@ -822,7 +822,7 @@ downloads:
     tag: "{{ calico_apiserver_image_tag }}"
     sha256: "{{ calico_apiserver_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   calico_crds:
     file: true
@@ -833,13 +833,13 @@ downloads:
     url: "{{ calico_crds_download_url }}"
     unarchive: true
     unarchive_extra_opts:
-    - "{{ '--strip=6' if (calico_version is version('v3.22.3', '<')) else '--strip=3' }}"
-    - "--wildcards"
-    - "{{ '*/_includes/charts/calico/crds/kdd/' if (calico_version is version('v3.22.3', '<')) else '*/libcalico-go/config/crd/' }}"
+      - "{{ '--strip=6' if (calico_version is version('v3.22.3', '<')) else '--strip=3' }}"
+      - "--wildcards"
+      - "{{ '*/_includes/charts/calico/crds/kdd/' if (calico_version is version('v3.22.3', '<')) else '*/libcalico-go/config/crd/' }}"
     owner: "root"
     mode: "0755"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   weave_kube:
     enabled: "{{ kube_network_plugin == 'weave' }}"
@@ -848,7 +848,7 @@ downloads:
     tag: "{{ weave_kube_image_tag }}"
     sha256: "{{ weave_kube_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   weave_npc:
     enabled: "{{ kube_network_plugin == 'weave' }}"
@@ -857,7 +857,7 @@ downloads:
     tag: "{{ weave_npc_image_tag }}"
     sha256: "{{ weave_npc_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kube_ovn:
     enabled: "{{ kube_network_plugin == 'kube-ovn' }}"
@@ -866,7 +866,7 @@ downloads:
     tag: "{{ kube_ovn_container_image_tag }}"
     sha256: "{{ kube_ovn_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kube_router:
     enabled: "{{ kube_network_plugin == 'kube-router' }}"
@@ -875,7 +875,7 @@ downloads:
     tag: "{{ kube_router_image_tag }}"
     sha256: "{{ kube_router_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   pod_infra:
     enabled: true
@@ -884,7 +884,7 @@ downloads:
     tag: "{{ pod_infra_image_tag }}"
     sha256: "{{ pod_infra_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   kube-vip:
     enabled: "{{ kube_vip_enabled }}"
@@ -893,7 +893,7 @@ downloads:
     tag: "{{ kube_vip_image_tag }}"
     sha256: "{{ kube_vip_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   nginx:
     enabled: "{{ loadbalancer_apiserver_localhost and loadbalancer_apiserver_type == 'nginx' }}"
@@ -902,7 +902,7 @@ downloads:
     tag: "{{ nginx_image_tag }}"
     sha256: "{{ nginx_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   haproxy:
     enabled: "{{ loadbalancer_apiserver_localhost and loadbalancer_apiserver_type == 'haproxy' }}"
@@ -911,7 +911,7 @@ downloads:
     tag: "{{ haproxy_image_tag }}"
     sha256: "{{ haproxy_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   coredns:
     enabled: "{{ dns_mode in ['coredns', 'coredns_dual'] }}"
@@ -920,7 +920,7 @@ downloads:
     tag: "{{ coredns_image_tag }}"
     sha256: "{{ coredns_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   nodelocaldns:
     enabled: "{{ enable_nodelocaldns }}"
@@ -929,7 +929,7 @@ downloads:
     tag: "{{ nodelocaldns_image_tag }}"
     sha256: "{{ nodelocaldns_digest_checksum | default(None) }}"
     groups:
-    - k8s_cluster
+      - k8s_cluster
 
   dnsautoscaler:
     enabled: "{{ dns_mode in ['coredns', 'coredns_dual'] }}"
@@ -938,7 +938,7 @@ downloads:
     tag: "{{ dnsautoscaler_image_tag }}"
     sha256: "{{ dnsautoscaler_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   helm:
     enabled: "{{ helm_enabled }}"
@@ -951,7 +951,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   krew:
     enabled: "{{ krew_enabled }}"
@@ -964,7 +964,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   registry:
     enabled: "{{ registry_enabled }}"
@@ -973,7 +973,7 @@ downloads:
     tag: "{{ registry_image_tag }}"
     sha256: "{{ registry_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   metrics_server:
     enabled: "{{ metrics_server_enabled }}"
@@ -982,7 +982,7 @@ downloads:
     tag: "{{ metrics_server_image_tag }}"
     sha256: "{{ metrics_server_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   local_volume_provisioner:
     enabled: "{{ local_volume_provisioner_enabled }}"
@@ -991,7 +991,7 @@ downloads:
     tag: "{{ local_volume_provisioner_image_tag }}"
     sha256: "{{ local_volume_provisioner_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   cephfs_provisioner:
     enabled: "{{ cephfs_provisioner_enabled }}"
@@ -1000,7 +1000,7 @@ downloads:
     tag: "{{ cephfs_provisioner_image_tag }}"
     sha256: "{{ cephfs_provisioner_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   rbd_provisioner:
     enabled: "{{ rbd_provisioner_enabled }}"
@@ -1009,7 +1009,7 @@ downloads:
     tag: "{{ rbd_provisioner_image_tag }}"
     sha256: "{{ rbd_provisioner_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   local_path_provisioner:
     enabled: "{{ local_path_provisioner_enabled }}"
@@ -1018,7 +1018,7 @@ downloads:
     tag: "{{ local_path_provisioner_image_tag }}"
     sha256: "{{ local_path_provisioner_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   ingress_nginx_controller:
     enabled: "{{ ingress_nginx_enabled }}"
@@ -1027,7 +1027,7 @@ downloads:
     tag: "{{ ingress_nginx_controller_image_tag }}"
     sha256: "{{ ingress_nginx_controller_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   ingress_alb_controller:
     enabled: "{{ ingress_alb_enabled }}"
@@ -1036,7 +1036,7 @@ downloads:
     tag: "{{ alb_ingress_image_tag }}"
     sha256: "{{ ingress_alb_controller_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   cert_manager_controller:
     enabled: "{{ cert_manager_enabled }}"
@@ -1045,7 +1045,7 @@ downloads:
     tag: "{{ cert_manager_controller_image_tag }}"
     sha256: "{{ cert_manager_controller_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   cert_manager_cainjector:
     enabled: "{{ cert_manager_enabled }}"
@@ -1054,7 +1054,7 @@ downloads:
     tag: "{{ cert_manager_cainjector_image_tag }}"
     sha256: "{{ cert_manager_cainjector_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   cert_manager_webhook:
     enabled: "{{ cert_manager_enabled }}"
@@ -1063,7 +1063,7 @@ downloads:
     tag: "{{ cert_manager_webhook_image_tag }}"
     sha256: "{{ cert_manager_webhook_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   csi_attacher:
     enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
@@ -1072,7 +1072,7 @@ downloads:
     tag: "{{ csi_attacher_image_tag }}"
     sha256: "{{ csi_attacher_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   csi_provisioner:
     enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
@@ -1081,7 +1081,7 @@ downloads:
     tag: "{{ csi_provisioner_image_tag }}"
     sha256: "{{ csi_provisioner_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   csi_snapshotter:
     enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
@@ -1090,7 +1090,7 @@ downloads:
     tag: "{{ csi_snapshotter_image_tag }}"
     sha256: "{{ csi_snapshotter_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   snapshot_controller:
     enabled: "{{ csi_snapshot_controller_enabled }}"
@@ -1099,7 +1099,7 @@ downloads:
     tag: "{{ snapshot_controller_image_tag }}"
     sha256: "{{ snapshot_controller_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   csi_resizer:
     enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
@@ -1108,7 +1108,7 @@ downloads:
     tag: "{{ csi_resizer_image_tag }}"
     sha256: "{{ csi_resizer_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   csi_node_driver_registrar:
     enabled: "{{ cinder_csi_enabled or aws_ebs_csi_enabled }}"
@@ -1117,7 +1117,7 @@ downloads:
     tag: "{{ csi_node_driver_registrar_image_tag }}"
     sha256: "{{ csi_node_driver_registrar_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   cinder_csi_plugin:
     enabled: "{{ cinder_csi_enabled }}"
@@ -1126,7 +1126,7 @@ downloads:
     tag: "{{ cinder_csi_plugin_image_tag }}"
     sha256: "{{ cinder_csi_plugin_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   aws_ebs_csi_plugin:
     enabled: "{{ aws_ebs_csi_enabled }}"
@@ -1135,7 +1135,7 @@ downloads:
     tag: "{{ aws_ebs_csi_plugin_image_tag }}"
     sha256: "{{ aws_ebs_csi_plugin_digest_checksum | default(None) }}"
     groups:
-    - kube_node
+      - kube_node
 
   dashboard:
     enabled: "{{ dashboard_enabled }}"
@@ -1144,7 +1144,7 @@ downloads:
     tag: "{{ dashboard_image_tag }}"
     sha256: "{{ dashboard_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   dashboard_metrics_scrapper:
     enabled: "{{ dashboard_enabled }}"
@@ -1153,7 +1153,7 @@ downloads:
     tag: "{{ dashboard_metrics_scraper_tag }}"
     sha256: "{{ dashboard_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   metallb_speaker:
     enabled: "{{ metallb_speaker_enabled }}"
@@ -1162,7 +1162,7 @@ downloads:
     tag: "{{ metallb_version }}"
     sha256: "{{ metallb_speaker_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   metallb_controller:
     enabled: "{{ metallb_enabled }}"
@@ -1171,7 +1171,7 @@ downloads:
     tag: "{{ metallb_version }}"
     sha256: "{{ metallb_controller_digest_checksum | default(None) }}"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
   yq:
     enabled: "{{ argocd_enabled }}"
@@ -1184,7 +1184,7 @@ downloads:
     owner: "root"
     mode: "0755"
     groups:
-    - kube_control_plane
+      - kube_control_plane
 
 download_defaults:
   container: false