Issue upgrading Kubernetes cluster from 1.26 to 1.27 due to expired APT keys

[BerkayIlhan]

I'm experiencing an issue while upgrading my Kubernetes cluster from version 1.26 to 1.27 with KubeOne. The old APT keys required for the upgrade have expired, blocking the process. I see that a fix is available using a new key, as discussed in kubernetes/release issue #3818 , but this update hasn’t been integrated into KubeOne yet. Could you please update the key in KubeOne or suggest a workaround?

Thanks for your help!

[xmudrii]

Hello @BerkayIlhan, thanks for the report!

As described in the upstream issue, this is because the Kubernetes v1.27 repository doesn't have the latest GPG key. KubeOne is always downloading the key from the repository for the target Kubernetes version (v1.27 in your case).

Unfortunately, there's no easy way to mitigate this within KubeOne, but we're working with the upstream community to fix this as soon as possible. If it doesn't get fixed by the end of the week, we'll issue a fix for KubeOne to mitigate this issue.

Thank you for your patience!

/assign

[BerkayIlhan]

Any update on this?

[xmudrii]

I don't have capacity to work on this issue at the moment, but if anyone would like to pick it up, I would be happy to provide guidance!
/unassign
/good-first-issue