update to latest 2.26.0 kubespray version and add dns zones settings to coredns

kubespray/project/roles/network_plugin/cilium/tasks/check.yml

@@ -61,3 +61,9 @@
   when:
     - cilium_ipsec_enabled is defined
     - cilium_ipsec_enabled
+
+- name: Stop if cilium_hubble_event_buffer_capacity is not a power of 2 minus 1 and is not between 1 and 65535
+  assert:
+    that: "cilium_hubble_event_buffer_capacity in [1, 3, 7, 15, 31, 63, 127, 255, 511, 1023, 2047, 4095, 8191, 16383, 32767, 65535]"
+    msg: "Error: cilium_hubble_event_buffer_capacity:{{ cilium_hubble_event_buffer_capacity }} is not a power of 2 minus 1 and it should be between 1 and 65535."
+  when: cilium_hubble_event_buffer_capacity is defined

kubespray/project/roles/network_plugin/cilium/tasks/install.yml

@@ -10,7 +10,7 @@
   file:
     dest: "{{ cilium_cert_dir }}"
     state: directory
-    mode: 0750
+    mode: "0750"
     owner: root
     group: root
   when:
@@ -20,9 +20,9 @@
   file:
     src: "{{ etcd_cert_dir }}/{{ item.s }}"
     dest: "{{ cilium_cert_dir }}/{{ item.d }}"
-    mode: 0644
+    mode: "0644"
     state: hard
-    force: yes
+    force: true
   loop:
     - {s: "{{ kube_etcd_cacert_file }}", d: "ca_cert.crt"}
     - {s: "{{ kube_etcd_cert_file }}", d: "cert.crt"}
@@ -36,7 +36,7 @@
     state: directory
     owner: root
     group: root
-    mode: 0755
+    mode: "0755"
   when:
     - inventory_hostname == groups['kube_control_plane'][0]
     - cilium_hubble_install
@@ -45,7 +45,7 @@
   template:
     src: "{{ item.name }}/{{ item.file }}.j2"
     dest: "{{ kube_config_dir }}/{{ item.name }}-{{ item.file }}"
-    mode: 0644
+    mode: "0644"
   loop:
     - {name: cilium, file: config.yml, type: cm}
     - {name: cilium-operator, file: crb.yml, type: clusterrolebinding}
@@ -66,7 +66,7 @@
   template:
     src: "{{ item.name }}/{{ item.file }}.j2"
     dest: "{{ kube_config_dir }}/addons/hubble/{{ item.name }}-{{ item.file }}"
-    mode: 0644
+    mode: "0644"
   loop:
     - {name: hubble, file: config.yml, type: cm}
     - {name: hubble, file: crb.yml, type: clusterrolebinding}
@@ -86,12 +86,12 @@
   template:
     src: 000-cilium-portmap.conflist.j2
     dest: /etc/cni/net.d/000-cilium-portmap.conflist
-    mode: 0644
+    mode: "0644"
   when: cilium_enable_portmap
 
 - name: Cilium | Copy Ciliumcli binary from download dir
   copy:
     src: "{{ local_release_dir }}/cilium"
     dest: "{{ bin_dir }}/cilium"
-    mode: 0755
-    remote_src: yes
+    mode: "0755"
+    remote_src: true

kubespray/project/roles/network_plugin/cilium/tasks/reset_iface.yml

@@ -2,9 +2,9 @@
 - name: "Reset | check if network device {{ iface }} is present"
   stat:
     path: "/sys/class/net/{{ iface }}"
-    get_attributes: no
-    get_checksum: no
-    get_mime: no
+    get_attributes: false
+    get_checksum: false
+    get_mime: false
   register: device_remains
 
 - name: "Reset | remove network device {{ iface }}"