APT ignores version pinning on Ubuntu about ansible-role-kubernetes HOT 4 CLOSED

If you are trying to achieve the same result as me, which is to pin an earlier PATCH version: 1.24.1, then I have succeeded like so:

  roles:
    - name: geerlingguy.kubernetes
      vars:
        kubernetes_version: 1.24
        # NOTE(jkinred): The way that the kubernetes role pins versions is not
        # functional enough to specify a patch version, we must be explicit here
        kubernetes_packages:
          - name: kubelet={{ kubernetes_version }}.1-00
            state: present
          - name: kubectl={{ kubernetes_version }}.1-00
            state: present
          - name: kubeadm={{ kubernetes_version }}.1-00
            state: present
          - name: kubernetes-cni
            state: present

I have found that this role is built to pin MINOR versions by using e.g. kubernetes_version: 1.23 and this works. The underlying cause is the way that the APT pinning is created with .* appended.

Specifying a MAJOR.MINOR.PATCH version in kubernetes_version generates a pinning specification like this:

root@u22:~# cat /etc/apt/preferences.d/kubernetes
Package: kubectl
Pin: version 1.24.1.*
Pin-Priority: 1000
<SNIP>

...noting that the last '.' is a literal dot and a package with version 1.24.1-00 will not match.

from ansible-role-kubernetes.

We are not using the patch level, we just specify kubernetes_version: 1.23 but still the binaries are installed with version 1.24.
But thanks for the input!

from ansible-role-kubernetes.

We are not using the patch level, we just specify kubernetes_version: 1.23 but still the binaries are installed with version 1.24. But thanks for the input!

Using the variables as above should still have the same outcome of installing the versions you want.

from ansible-role-kubernetes.

The reason for this was the following issue in Ansible Core: ansible/ansible#77969.
Closing this issue as it was something upstream and nothing in the role.
Thanks for your help @jkinred!

from ansible-role-kubernetes.