fix(calico): remove pinned version

Added migration docs

Updated migration docs

Author: FredrikCarlssn

config/common/group_vars/k8s_cluster/ck8s-k8s-cluster.yaml

@@ -56,8 +56,6 @@ calico_ipip_mode: "Always"
 calico_vxlan_mode: "Never"
 calico_network_backend: "bird"
 
-calico_version: v3.27.4
-
 dns_extra_tolerations: [{effect: NoSchedule, operator: Exists}]
 coredns_additional_error_config: |
   consolidate 5m ".* i/o timeout$" warning

migration/v2.28/README.md

@@ -33,6 +33,9 @@
     > bin/ck8s-kubespray upgrade wc v2.28 prepare
     > ```
 
+    > [!IMPORTANT]
+    > This upgrade removes the pinned Calico version (`calico_version: v3.27.4`) from your configuration, allowing Kubespray to use its default version (v3.29.1). This change fixes compatibility issues with calico-accountant in Calico v3.29.x. Ensure your compliantkubernetes-apps version is v0.48+ before proceeding with this upgrade.
+
 1. Download the required files on the nodes
 
     ```bash

migration/v2.28/prepare/20-remove-calico-version-pin.sh

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+HERE="$(dirname "$(readlink -f "${0}")")"
+ROOT="$(readlink -f "${HERE}/../../../")"
+
+# shellcheck source=scripts/migration/lib.sh
+source "${ROOT}/scripts/migration/lib.sh"
+
+log_info "Removing calico_version pin to use Kubespray default (v3.29.x)"
+
+if [[ "${CK8S_CLUSTER}" =~ ^(sc|both)$ ]]; then
+  log_info "Removing calico_version from service cluster config"
+  yq4 -i 'del(.calico_version)' "${CK8S_CONFIG_PATH}/sc-config/group_vars/k8s_cluster/ck8s-k8s-cluster.yaml"
+fi
+
+if [[ "${CK8S_CLUSTER}" =~ ^(wc|both)$ ]]; then
+  log_info "Removing calico_version from workload cluster config"
+  yq4 -i 'del(.calico_version)' "${CK8S_CONFIG_PATH}/wc-config/group_vars/k8s_cluster/ck8s-k8s-cluster.yaml"
+fi
+
+log_info "Calico will now use the default version from Kubespray (v3.29.1)"
+log_info "This change requires compliantkubernetes-apps version v0.47+ that supports Calico v3.29.x"