Pin calico images to version 3.28.0 for k0s < 1.31 (#2701)

Pin calico 3.28.0 for k0s < 1.31

Author: screspod

cmd/buildtools/k0s.go

@@ -154,11 +154,21 @@ func getCalicoTag(opts addonComponentOptions) (string, error) {
 	if opts.upstreamVersion.Major() == 3 && opts.upstreamVersion.Minor() == 29 {
 		return "v3.29.3", nil
 	}
-
-	constraints := mustParseSemverConstraints(latestPatchConstraint(opts.upstreamVersion))
+	calicoVersion := getCalicoVersion(opts)
+	constraints := mustParseSemverConstraints(latestPatchConstraint(calicoVersion))
 	tag, err := GetGreatestGitHubTag(opts.ctx, "projectcalico", "calico", constraints)
 	if err != nil {
 		return "", fmt.Errorf("failed to get calico release: %w", err)
 	}
 	return tag, nil
 }
+
+func getCalicoVersion(opts addonComponentOptions) *semver.Version {
+	// TODO: remove this check once we drop support for 1.31 (needed for building previous k0s version 1.30 in the k0s-1-31 branch)
+	// k0s versions prior to 1.31 use calico versions < 3.28,
+	// but securebuild doesn't have versions prior to 3.28
+	if opts.k0sVersion.LessThan(semver.MustParse("1.31")) {
+		return semver.MustParse("3.28.0")
+	}
+	return opts.upstreamVersion
+}