Skip to content

Bump containerd from 2.2.3 to 2.3.0#13265

Open
isumitsolanki wants to merge 8 commits into
kubernetes-sigs:masterfrom
isumitsolanki:bump_containerd
Open

Bump containerd from 2.2.3 to 2.3.0#13265
isumitsolanki wants to merge 8 commits into
kubernetes-sigs:masterfrom
isumitsolanki:bump_containerd

Conversation

@isumitsolanki
Copy link
Copy Markdown
Contributor

@isumitsolanki isumitsolanki commented May 15, 2026 •
edited
Loading

What type of PR is this?
/kind feature

What this PR does / why we need it:

Bumps the default containerd version from 2.2.3 to 2.3.0, the first annual LTS release under containerd’s new release cadence.

  • Add 2.3.0 checksums for containerd_archive_checksums and containerd_static_archive_checksums on arm64, amd64, and ppc64le
  • Update the README component list to reflect the new default version

The default containerd_version is derived from the newest entry in containerd_archive_checksums, so no change to download.yml is required.

Which issue(s) this PR fixes:

Fixes #13236

Special notes for your reviewer:

Checksums were taken from the official v2.3.0 release .sha256sum files on GitHub. scripts/assert-sorted-checksums.yml passes.

Does this PR introduce a user-facing change?:

NONE

@isumitsolanki
Bump containerd from 2.2.3 to 2.3.0
809887e 
Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>
@k8s-ci-robot k8s-ci-robot added kind/feature Categorizes issue or PR as related to a new feature. do-not-merge/release-note-label-needed Indicates that a PR should not merge because it's missing one of the release note labels. labels May 15, 2026
@k8s-ci-robot k8s-ci-robot requested review from ErikJiang and guoard May 15, 2026 06:51
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

k8s-ci-robot commented May 15, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: isumitsolanki
Once this PR has been reviewed and has the lgtm label, please assign vannten for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels May 15, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

k8s-ci-robot commented May 15, 2026

Hi @isumitsolanki. Thanks for your PR.

I'm waiting for a kubernetes-sigs member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Tip

We noticed you've done this a few times! Consider joining the org to skip this step and gain /lgtm and other bot rights. We recommend asking approvers on your previous PRs to sponsor you.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@guoard
Copy link
Copy Markdown
Contributor

guoard commented May 15, 2026

Thank you for your contribution.

Don't we need to add nerdctl checksums too?

@tico88612
Copy link
Copy Markdown
Member

tico88612 commented May 15, 2026

@isumitsolanki could you check this do-not-merge/release-note-label-needed

@isumitsolanki
Copy link
Copy Markdown
Contributor Author

isumitsolanki commented May 18, 2026

could you check this
Thanks for the review @guoard — you’re right, we should add nerdctl checksums as well.

Kubespray installs nerdctl alongside containerd (container-engine/nerdctl is a dependency of the containerd role), and the default nerdctl_version is taken from the newest entry in nerdctl_archive_checksums, same pattern as containerd. Without 2.3.0 entries there, clusters would get containerd 2.3.0 but nerdctl 2.2.2.

I’ve added 2.3.0 checksums for nerdctl on arm64, amd64, and ppc64le (from the official nerdctl v2.3.0 release .sha256sum files). I also updated nerdctl_version to use image_arch so the default version matches the per-arch checksum lookup.

@isumitsolanki
added nerdctl 2.3.0 checksums for arm64, amd64, and ppc64le so nerdct…
da15a31 
…l stays aligned with the containerd 2.3.0 bump

Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>
@k8s-ci-robot k8s-ci-robot added size/S Denotes a PR that changes 10-29 lines, ignoring generated files. release-note Denotes a PR that will be considered when it comes time to generate release notes. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. do-not-merge/release-note-label-needed Indicates that a PR should not merge because it's missing one of the release note labels. labels May 18, 2026
@isumitsolanki
Copy link
Copy Markdown
Contributor Author

isumitsolanki commented May 19, 2026

@isumitsolanki could you check this do-not-merge/release-note-label-needed

Hi @tico88612 , do-not-merge/release-note-label-needed label has been removed now.

@tico88612
Copy link
Copy Markdown
Member

tico88612 commented May 19, 2026

/ok-to-test

@k8s-ci-robot k8s-ci-robot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels May 19, 2026
@isumitsolanki
Merge branch 'master' into bump_containerd
2c69d35
@isumitsolanki
ci: pin ansible-core in pre-commit to match collection runtime
21d8063 
ansible-lint and collection-build-install hooks were resolving
ansible-core 2.21, which conflicts with requires_ansible in
meta/runtime.yml (>=2.18.0,<2.19.0) and breaks pre-commit on cold
cache runs.
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

k8s-ci-robot commented May 22, 2026

Adding label do-not-merge/contains-merge-commits because PR contains merge commits, which are not allowed in this repository.
Use git rebase to reapply your commits on top of the target branch. Detailed instructions for doing so can be found here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@isumitsolanki
Bump containerd from 2.2.3 to 2.3.0
8f5e465 
Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>
@isumitsolanki
added nerdctl 2.3.0 checksums for arm64, amd64, and ppc64le so nerdct…
52fda24 
…l stays aligned with the containerd 2.3.0 bump

Signed-off-by: Sumit Solanki <sumit.solanki@ibm.com>
@isumitsolanki
ci: pin ansible-core in pre-commit to match collection runtime
9eb19d8 
ansible-lint and collection-build-install hooks were resolving
ansible-core 2.21, which conflicts with requires_ansible in
meta/runtime.yml (>=2.18.0,<2.19.0) and breaks pre-commit on cold
cache runs.
@isumitsolanki
Merge branch 'bump_containerd' of https://github.com/isumitsolanki/ku…
9f856fd 
…bespray into bump_containerd
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ErikJiang ErikJiang Awaiting requested review from ErikJiang

@guoard guoard Awaiting requested review from guoard

Assignees

No one assigned

Labels

cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. do-not-merge/contains-merge-commits kind/feature Categorizes issue or PR as related to a new feature. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/S Denotes a PR that changes 10-29 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Bump: containerd to v2.3.0 (first annual LTS)

4 participants

@isumitsolanki @k8s-ci-robot @guoard @tico88612