v2.0.0

2.0.0 (2026-10-18)

⚠ BREAKING CHANGES

• cluster: a github_runner_cluster_dir or github_runner_cluster_compose_files
  path with a colon in it is refused, since COMPOSE_FILE separates paths with colons.
  Move the file or directory to a path without one.
• cluster: a cluster that runs a newer k3s than the version the role is
  given, such as one built from latest before the pins, is refused until
  github_runner_cluster_k3s_version names the tag it runs. A deliberate downgrade,
  a cluster being replaced or one that cannot be read needs
  -e github_runner_cluster_allow_k3s_version_jump=true for that run.
• cluster: latest is no longer accepted for github_runner_cluster_k3s_version
  or K3S_VERSION in .env.bootstrap. Set the rancher/k3s tag the cluster runs
  (k3s --version in a node's container, with + written as -), once for the whole
  group, or leave it unset for the default; set github_runner_cluster_tailscale_version
  if the nodes run another Tailscale. The next run rewrites each node's .env and
  recreates nothing.

Features

• cluster: name the node's Compose files and project in its .env (88f7e9c)
• cluster: pin the k3s and tailscale images every node is built from (1a37eac)
• cluster: refuse a k3s version outside the upgrade path from what runs (cc7255c)

Documentation

• cluster: document the version pins, their checks and an upgrade (d70a5ad)

Tests

• bootstrap: check bootstrap.sh leaves unset image versions to the role (04350ce)
• renewal: suspend the renewer's CronJob while the test runs its Jobs (adca1e1)

Continuous Integration

• run the unit tests' playbooks with the ansible-core their filters import (381db70)