Use previous Calico version v3.27.4

Author: davidumea

changelog/2.27.0.md

@@ -41,3 +41,4 @@ Released 2025-03-24
 - [#419](https://github.com/elastisys/compliantkubernetes-kubespray/pull/419) - bug: fix readme @Eliastisys
 - [#420](https://github.com/elastisys/compliantkubernetes-kubespray/pull/420) - documentation: Update Ubuntu 24.04 migration guide to include instructions for UpCloud @Ajarmar
 - [#424](https://github.com/elastisys/compliantkubernetes-kubespray/pull/424) - documentation: Fix LICENSE @cristiklein
+- [#427](https://github.com/elastisys/compliantkubernetes-kubespray/pull/427) - Kept previous Calico version `v3.27` due to newer versions being incompatible with Calico-Accountant

config/common/group_vars/k8s_cluster/ck8s-k8s-cluster.yaml

@@ -56,6 +56,8 @@ calico_ipip_mode: "Always"
 calico_vxlan_mode: "Never"
 calico_network_backend: "bird"
 
+calico_version: v3.27.4
+
 dns_extra_tolerations: [{effect: NoSchedule, operator: Exists}]
 coredns_additional_error_config: |
   consolidate 5m ".* i/o timeout$" warning

migration/v2.27/prepare/20-keep-calico-version.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+HERE="$(dirname "$(readlink -f "${0}")")"
+ROOT="$(readlink -f "${HERE}/../../../")"
+
+# shellcheck source=scripts/migration/lib.sh
+source "${ROOT}/scripts/migration/lib.sh"
+
+if [[ "${CK8S_CLUSTER}" =~ ^(sc|both)$ ]]; then
+  log_info "Setting calico version for service cluster"
+  yq4 -i '.calico_version = "v3.27.4"' "${CK8S_CONFIG_PATH}/sc-config/group_vars/k8s_cluster/ck8s-k8s-cluster.yaml"
+fi
+if [[ "${CK8S_CLUSTER}" =~ ^(wc|both)$ ]]; then
+  log_info "Setting calico version for workload cluster"
+  yq4 -i '.calico_version = "v3.27.4"' "${CK8S_CONFIG_PATH}/wc-config/group_vars/k8s_cluster/ck8s-k8s-cluster.yaml"
+fi