c12s-kubespray/docs/centos.md

# CentOS and derivatives

## CentOS 7

The maximum python version offically supported in CentOS is 3.6. Ansible as of version 5 (ansible core 2.12.x) increased their python requirement to python 3.8 and above.
Kubespray supports multiple ansible versions but only the default (5.x) gets wide testing coverage. If your deployment host is CentOS 7 it is recommended to use one of the earlier versions still supported.

## CentOS 8

CentOS 8 / Oracle Linux 8,9 / AlmaLinux 8,9 / Rocky Linux 8,9 ship only with iptables-nft (ie without iptables-legacy similar to RHEL8)
The only tested configuration for now is using Calico CNI
You need to add `calico_iptables_backend: "NFT"` to your configuration.

If you have containers that are using iptables in the host network namespace (`hostNetwork=true`),
you need to ensure they are using iptables-nft.
An example how k8s do the autodetection can be found [in this PR](https://github.com/kubernetes/kubernetes/pull/82966)
[docs] document support for ansible versions (#8827) drop note about not supporting ansible 2.9 since we still cover it in nightly CI 2022-05-16 07:50:17 +00:00			`# CentOS and derivatives`

			`## CentOS 7`

			`The maximum python version offically supported in CentOS is 3.6. Ansible as of version 5 (ansible core 2.12.x) increased their python requirement to python 3.8 and above.`
			`Kubespray supports multiple ansible versions but only the default (5.x) gets wide testing coverage. If your deployment host is CentOS 7 it is recommended to use one of the earlier versions still supported.`

			`## CentOS 8`
CentOS 8 CI (#5842) * requirements.txt: Bump versions Ansible 2.8+ allow ansible_python_interpreter autodetection Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com> * tests: do not force ansible_python_interpreter we do not expect people to set ansible_python_interpreter, so we should not set it in the CI Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com> * Add CentOS 8 Calico to CI Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com> 2020-04-07 12:49:43 +00:00
add-Rocky-9-support (#9212) 2022-09-04 23:54:36 +00:00			`CentOS 8 / Oracle Linux 8,9 / AlmaLinux 8,9 / Rocky Linux 8,9 ship only with iptables-nft (ie without iptables-legacy similar to RHEL8)`
CentOS 8 CI (#5842) * requirements.txt: Bump versions Ansible 2.8+ allow ansible_python_interpreter autodetection Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com> * tests: do not force ansible_python_interpreter we do not expect people to set ansible_python_interpreter, so we should not set it in the CI Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com> * Add CentOS 8 Calico to CI Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com> 2020-04-07 12:49:43 +00:00			`The only tested configuration for now is using Calico CNI`
suggest-to-use-nft-in-centos8 (#8987) 2022-06-17 08:30:32 +00:00			You need to add `calico_iptables_backend: "NFT"` to your configuration.
CentOS 8 CI (#5842) * requirements.txt: Bump versions Ansible 2.8+ allow ansible_python_interpreter autodetection Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com> * tests: do not force ansible_python_interpreter we do not expect people to set ansible_python_interpreter, so we should not set it in the CI Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com> * Add CentOS 8 Calico to CI Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com> 2020-04-07 12:49:43 +00:00
			If you have containers that are using iptables in the host network namespace (`hostNetwork=true`),
			`you need to ensure they are using iptables-nft.`
Fix some typos and outdated docs (#6071) 2020-05-06 18:17:25 +00:00			`An example how k8s do the autodetection can be found [in this PR](https://github.com/kubernetes/kubernetes/pull/82966)`