kubernetes-sigs/kubespray

Bump: containerd to v2.3.0 (first annual LTS)

Open

#13236 opened on May 7, 2026

View on GitHub
 (5 comments) (0 reactions) (1 assignee)HTML (10,380 stars) (4,419 forks)batch import
help wantedkind/featuretriage/accepted

Description

What would you like to be added

Bump the default containerd version from v2.2.x to v2.3.0.

  • Add checksums for v2.3.0 to roles/kubespray_defaults/vars/main/checksums.yml
  • Update default containerd_version to 2.3.0

Release notes: https://github.com/containerd/containerd/releases/tag/v2.3.0 Diff: https://github.com/containerd/containerd/compare/v2.2.0...v2.3.0

Why is this needed

v2.3.0 is the first annual LTS (Long Term Stable) release of containerd under its new release cadence, with support planned for at least two years. The cadence is now aligned with the Kubernetes release schedule (a new minor release roughly every 4 months), and direct upgrades between sequential LTS releases (e.g. 1.7 -> 2.3) will be tested and supported.

Adopting v2.3.0 as the default lets Kubespray users:

  • Stay on a release line with long-term support and security backports
  • Benefit from the upstream-supported LTS-to-LTS upgrade path
  • Pick up CRI / NRI / runtime improvements landed in 2.3 (e.g. user namespaces with host networking, UpdatePodSandboxResources wired to the Sandbox API, EROFS layer support, expanded NRI plugin capabilities)

References:

Contributor guide

Tech stack
pythonshell
Domain
devopsinfrastructurecloud
Issue type
chore
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
1
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
under 1 hour
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
blocked
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
AnsibleYAML editingGit
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60
Research direction
The issue provides clear steps: update the checksums file at roles/kubespray defaults/vars/main/checksums.yml and set the default containerd version to 2.3.0. Review the provided release notes and diff to ensure no breaking changes. Note that the issue is assigned, so collaboration with the assignee may be needed.