From 12d9d88dd377437106827e99040b858bf0b618ef Mon Sep 17 00:00:00 2001
From: Imadzuma <mar-gosha98@mail.ru>
Date: Thu, 5 Sep 2024 10:20:13 +0300
Subject: [PATCH 1/9] deprecated version support

---
 kubemarine/kubernetes/__init__.py             |  6 ++--
 kubemarine/procedures/check_paas.py           | 13 +++++++
 .../compatibility/kubernetes_versions.yaml    |  2 +-
 scripts/thirdparties/src/run.py               | 14 ++++++++
 scripts/thirdparties/src/software/defaults.py | 34 +++++++++++++++++++
 scripts/thirdparties/sync.py                  |  3 ++
 6 files changed, 69 insertions(+), 3 deletions(-)
 create mode 100644 scripts/thirdparties/src/software/defaults.py

diff --git a/kubemarine/kubernetes/__init__.py b/kubemarine/kubernetes/__init__.py
index 4604823be..70a4a87e6 100644
--- a/kubemarine/kubernetes/__init__.py
+++ b/kubemarine/kubernetes/__init__.py
@@ -892,11 +892,13 @@ def verify_allowed_version(version: str) -> str:
     return version
 
 
-def verify_supported_version(target_version: str, logger: log.EnhancedLogger) -> None:
+def verify_supported_version(target_version: str, logger: log.EnhancedLogger) -> bool:
     minor_version = utils.minor_version(target_version)
     supported_versions = static.KUBERNETES_VERSIONS['kubernetes_versions']
     if not supported_versions.get(minor_version, {}).get("supported", False):
-        logger.warning(f"Specified target Kubernetes version {target_version!r} - is not supported!")
+        logger.warning(f"Specified target Kubernetes version {target_version!r} - is deprecated!")
+        return False
+    return True
 
 
 def expect_kubernetes_version(cluster: KubernetesCluster, version: str,
diff --git a/kubemarine/procedures/check_paas.py b/kubemarine/procedures/check_paas.py
index ca1372061..27f659809 100755
--- a/kubemarine/procedures/check_paas.py
+++ b/kubemarine/procedures/check_paas.py
@@ -1565,6 +1565,18 @@ def kubernetes_admission_status(cluster: KubernetesCluster) -> None:
         cluster.log.debug(kube_admission_status)
         tc.success(results='enabled')
 
+def verify_kubernetes_version(cluster: KubernetesCluster) -> None:
+    """
+    The method checks if used kubernetes version is deprecated in kubemarine
+    """
+    with TestCase(cluster, '225', "Kubernetes", "Version") as tc:
+        target_version = cluster.inventory['services']['kubeadm']['kubernetesVersion']
+        if not kubernetes.verify_supported_version(target_version, cluster.log):
+            raise TestWarn(f"Kubernetes version {target_version} is deprecated",
+                           hint=f"Used kubernetes version is deprecated and will be excluded from support "
+                                f"in future kubemarine releases. Please, plan upgrade to newer version")
+
+        tc.success(results='Kubernetes version is OK')
 
 def geo_check(cluster: KubernetesCluster) -> None:
     """
@@ -1789,6 +1801,7 @@ def verify_apparmor_config(cluster: KubernetesCluster) -> None:
             'policy': kubernetes_audit_policy_configuration,
         },
         'admission': kubernetes_admission_status,
+        'version': verify_kubernetes_version,
     },
     'etcd': {
         "health_status": etcd_health_status
diff --git a/kubemarine/resources/configurations/compatibility/kubernetes_versions.yaml b/kubemarine/resources/configurations/compatibility/kubernetes_versions.yaml
index 69399f00b..c4a3b7d60 100644
--- a/kubemarine/resources/configurations/compatibility/kubernetes_versions.yaml
+++ b/kubemarine/resources/configurations/compatibility/kubernetes_versions.yaml
@@ -1,7 +1,7 @@
 # This section can be changed manually, but it is also synchronized automatically with the 'compatibility_map' section below.
 kubernetes_versions:
   v1.26:
-    supported: true
+    supported: false
   v1.27:
     supported: true
   v1.28:
diff --git a/scripts/thirdparties/src/run.py b/scripts/thirdparties/src/run.py
index 4ea9f9ee8..7c55b0291 100644
--- a/scripts/thirdparties/src/run.py
+++ b/scripts/thirdparties/src/run.py
@@ -16,6 +16,7 @@
 from kubemarine.core import static
 from .compatibility import KubernetesVersions
 from .software import InternalCompatibility, UpgradeConfig, CompatibilityMap, SoftwareType
+from .software.defaults import KubemarineDefaults
 from .software.kubernetes_images import KubernetesImagesResolver, KubernetesImages
 from .software.packages import Packages
 from .software.plugins import ManifestResolver, Plugins, ManifestsEnrichment
@@ -27,6 +28,7 @@
 
 class Synchronization:
     def __init__(self,
+                 defaults: KubemarineDefaults,
                  compatibility: InternalCompatibility,
                  kubernetes_versions: KubernetesVersions,
                  images_resolver: KubernetesImagesResolver,
@@ -35,6 +37,7 @@ def __init__(self,
                  manifests_enrichment: ManifestsEnrichment,
                  upgrade_config: UpgradeConfig,
                  ):
+        self.defaults = defaults
         self.compatibility = compatibility
         self.kubernetes_versions = kubernetes_versions
         self.images_resolver = images_resolver
@@ -44,6 +47,8 @@ def __init__(self,
         self.upgrade_config = upgrade_config
 
     def run(self) -> SummaryTracker:
+        self.validate()
+
         tracker = SummaryTracker(self.kubernetes_versions.compatibility_map)
 
         software: List[SoftwareType] = [
@@ -75,3 +80,12 @@ def run(self) -> SummaryTracker:
 
         tracker.print()
         return tracker
+
+    def validate(self) -> None:
+        # Validate version
+        default_version = self.defaults.default_version()
+        if default_version not in self.kubernetes_versions.compatibility_map:
+            raise Exception(f"Kubemarine default version {default_version} "
+                            f"does not exist in compatibility map. "
+                            f"Default version should be updated before excluding it from support."
+            )
diff --git a/scripts/thirdparties/src/software/defaults.py b/scripts/thirdparties/src/software/defaults.py
new file mode 100644
index 000000000..8e56959a9
--- /dev/null
+++ b/scripts/thirdparties/src/software/defaults.py
@@ -0,0 +1,34 @@
+# Copyright 2021-2023 NetCracker Technology Corporation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+from copy import deepcopy
+from typing import Dict
+
+from ruamel.yaml import CommentedMap
+
+from kubemarine.core import utils, static
+
+# pylint: disable=bad-builtin
+
+YAML = utils.yaml_structure_preserver()
+RESOURCE_PATH = utils.get_internal_resource_path("resources/configurations/defaults.yaml")
+
+
+class KubemarineDefaults:
+    def __init__(self) -> None:
+        with utils.open_internal(RESOURCE_PATH) as stream:
+            self._defaults = YAML.load(stream)
+
+    def default_version(self) -> str:
+        return self._defaults['services']['kubeadm']['kubernetesVersion']
diff --git a/scripts/thirdparties/sync.py b/scripts/thirdparties/sync.py
index 9e8a7c532..15d397533 100644
--- a/scripts/thirdparties/sync.py
+++ b/scripts/thirdparties/sync.py
@@ -15,6 +15,8 @@
 import os
 import sys
 
+from scripts.thirdparties.src.software.defaults import KubemarineDefaults
+
 # pylint: disable=bad-builtin,wrong-import-position
 
 # Ensure to take Kubemarine modules from the project root.
@@ -46,6 +48,7 @@
 
     args = parser.parse_args()
     Synchronization(
+        KubemarineDefaults(),
         InternalCompatibility(),
         KubernetesVersions(),
         KubernetesImagesResolver(),

From 7197433c2bc29ccd12927d4ba8f001ba302bc377 Mon Sep 17 00:00:00 2001
From: Imadzuma <mar-gosha98@mail.ru>
Date: Thu, 5 Sep 2024 10:22:01 +0300
Subject: [PATCH 2/9] import fix

---
 scripts/thirdparties/sync.py | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/scripts/thirdparties/sync.py b/scripts/thirdparties/sync.py
index 15d397533..fea4e8e2a 100644
--- a/scripts/thirdparties/sync.py
+++ b/scripts/thirdparties/sync.py
@@ -15,8 +15,6 @@
 import os
 import sys
 
-from scripts.thirdparties.src.software.defaults import KubemarineDefaults
-
 # pylint: disable=bad-builtin,wrong-import-position
 
 # Ensure to take Kubemarine modules from the project root.
@@ -34,7 +32,7 @@
 from src.software.kubernetes_images import KubernetesImagesResolver
 from src.software.plugins import ManifestResolver, ManifestsEnrichment
 from src.software.thirdparties import ThirdpartyResolver
-
+from src.software.defaults import KubemarineDefaults
 
 if __name__ == '__main__':
     if platform.system() != 'Linux':

From 2231a4ee8b96288347694087e96e238aba08f54d Mon Sep 17 00:00:00 2001
From: Imadzuma <mar-gosha98@mail.ru>
Date: Thu, 5 Sep 2024 10:38:50 +0300
Subject: [PATCH 3/9] mypy fix

---
 scripts/thirdparties/src/software/defaults.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/thirdparties/src/software/defaults.py b/scripts/thirdparties/src/software/defaults.py
index 8e56959a9..b057929f4 100644
--- a/scripts/thirdparties/src/software/defaults.py
+++ b/scripts/thirdparties/src/software/defaults.py
@@ -31,4 +31,4 @@ def __init__(self) -> None:
             self._defaults = YAML.load(stream)
 
     def default_version(self) -> str:
-        return self._defaults['services']['kubeadm']['kubernetesVersion']
+        return str(self._defaults['services']['kubeadm']['kubernetesVersion'])

From cb886df3d68a3c2004f7350e8c32596bee1c56de Mon Sep 17 00:00:00 2001
From: Imadzuma <mar-gosha98@mail.ru>
Date: Thu, 5 Sep 2024 11:16:21 +0300
Subject: [PATCH 4/9] fix docker build

---
 .github/workflows/integration_tests.yaml | 14 +++++++-------
 .github/workflows/tests.yaml             |  6 +++---
 Dockerfile                               |  4 ++--
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/integration_tests.yaml b/.github/workflows/integration_tests.yaml
index c930926c2..e529bcc8d 100644
--- a/.github/workflows/integration_tests.yaml
+++ b/.github/workflows/integration_tests.yaml
@@ -12,10 +12,10 @@ jobs:
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v3
-      - name: Set up Python 3.9
+      - name: Set up Python 3.12
         uses: actions/setup-python@v4
         with:
-          python-version: "3.9"
+          python-version: "3.12"
       - name: Install software
         run: pip3 install yq
       - name: Parse kubernetes versions
@@ -48,10 +48,10 @@ jobs:
           ssh-keyscan -H 172.17.0.1 >> ~/.ssh/known_hosts
       - name: Test ssh connection
         run: ssh -i ~/.ssh/id_rsa 172.17.0.1 echo "Test"
-      - name: Set up Python 3.9
+      - name: Set up Python 3.12
         uses: actions/setup-python@v4
         with:
-          python-version: "3.9"
+          python-version: "3.12"
       - name: Install Kubemarine with dependencies
         run: |
           python -m pip install --upgrade pip
@@ -110,10 +110,10 @@ jobs:
         run: sudo ifconfig docker0:0 172.17.1.1 up
       - name: Test ssh connection
         run: ssh -i ~/.ssh/id_rsa 172.17.0.1 echo "Test"
-      - name: Set up Python 3.9
+      - name: Set up Python 3.12
         uses: actions/setup-python@v4
         with:
-          python-version: "3.9"
+          python-version: "3.12"
       - name: Install Kubemarine with dependencies
         run: |
           python -m pip install --upgrade pip
@@ -160,7 +160,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-python@v4
         with:
-          python-version: "3.9"
+          python-version: "3.12"
       - name: Install dependencies
         run: pip install . && pip uninstall -y kubemarine
       - name: Run scripts/thirdparties/sync.py
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 557875ad4..8deeacb06 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -30,7 +30,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-python@v4
         with:
-          python-version: "3.9"
+          python-version: "3.12"
       # Install coverage and kubemarine with all dependencies except ansible.
       # Then uninstall only kubemarine to avoid ambiguity and to surely run coverage on sources.
       - run: pip install coverage . && pip uninstall -y kubemarine
@@ -41,7 +41,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-python@v4
         with:
-          python-version: "3.9"
+          python-version: "3.12"
       # Install pylint and kubemarine with all dependencies except ansible.
       # Then uninstall only kubemarine to avoid ambiguity and to surely run pylint on sources.
       - run: pip install .[pylint] && pip install -r requirements-pyinstaller.txt && pip uninstall -y kubemarine
@@ -56,7 +56,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-python@v4
         with:
-          python-version: "3.9"
+          python-version: "3.12"
       - run: pip install radon xenon
         # Use `radon cc {paths} -a` locally for full report per function
         # xenon checks, if radon absolute result is A
diff --git a/Dockerfile b/Dockerfile
index 0d669f621..a3fd85cde 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1
 
 # Build ipip_check binary
-FROM golang:1.22 AS go-build
+FROM golang:1.22.5 AS go-build
 
 WORKDIR /opt
 
@@ -11,7 +11,7 @@ RUN go mod download && \
     GOOS=linux CGO_ENABLED=1 go build -ldflags="-linkmode external -extldflags='-static'" -o ipip_check -buildvcs=false && \
     gzip ipip_check
 
-FROM python:3.12-slim-bullseye AS python-build
+FROM python:3.12.4-slim-bullseye AS python-build
 
 ARG BUILD_TYPE
 

From 2915c0b6a50a9eacc626742cf9bdc0cbb5a6d43c Mon Sep 17 00:00:00 2001
From: Imadzuma <mar-gosha98@mail.ru>
Date: Thu, 5 Sep 2024 11:33:56 +0300
Subject: [PATCH 5/9] fix tools tests

---
 test/unit/tools/thirdparties/stub.py      | 4 ++++
 test/unit/tools/thirdparties/test_sync.py | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/test/unit/tools/thirdparties/stub.py b/test/unit/tools/thirdparties/stub.py
index 4e8ead1c6..c3d7a8eb7 100644
--- a/test/unit/tools/thirdparties/stub.py
+++ b/test/unit/tools/thirdparties/stub.py
@@ -28,6 +28,8 @@
 from scripts.thirdparties.src.software.kubernetes_images import KubernetesImagesResolver
 from scripts.thirdparties.src.software.plugins import ManifestResolver, ManifestsEnrichment
 from scripts.thirdparties.src.software.thirdparties import ThirdpartyResolver
+from scripts.thirdparties.src.software.defaults import KubemarineDefaults
+
 from scripts.thirdparties.src.tracker import SummaryTracker
 
 
@@ -163,6 +165,7 @@ def store(self):
 
 class FakeSynchronization(Synchronization):
     def __init__(self,
+                 defaults: KubemarineDefaults,
                  compatibility: FakeInternalCompatibility,
                  kubernetes_versions: FakeKubernetesVersions,
                  images_resolver: FakeKubernetesImagesResolver,
@@ -171,6 +174,7 @@ def __init__(self,
                  upgrade_config=FakeUpgradeConfig(),
                  ):
         super().__init__(
+            defaults,
             compatibility,
             kubernetes_versions,
             images_resolver,
diff --git a/test/unit/tools/thirdparties/test_sync.py b/test/unit/tools/thirdparties/test_sync.py
index 768e4cb02..93a9ebd64 100644
--- a/test/unit/tools/thirdparties/test_sync.py
+++ b/test/unit/tools/thirdparties/test_sync.py
@@ -19,6 +19,8 @@
 from copy import deepcopy
 from typing import List, Dict, ContextManager
 from unittest import mock
+
+from scripts.thirdparties.src.software.defaults import KubemarineDefaults
 from test.unit import utils as test_utils
 from test.unit.tools.thirdparties.stub import (
     FakeSynchronization, FakeInternalCompatibility, FakeKubernetesVersions,
@@ -47,6 +49,7 @@
 
 class SynchronizationTest(unittest.TestCase):
     def setUp(self) -> None:
+        self.defaults = KubemarineDefaults()
         self.compatibility = FakeInternalCompatibility()
         self.kubernetes_versions = FakeKubernetesVersions()
         self.images_resolver = FakeKubernetesImagesResolver()
@@ -580,6 +583,7 @@ def load_compatibility_map_mocked(filename: str) -> dict:
 
     def run_sync(self) -> SummaryTracker:
         return FakeSynchronization(
+            self.defaults,
             self.compatibility,
             self.kubernetes_versions,
             self.images_resolver,

From 1b3e612e1eff7fbdcace47bbfc58ac8636ad8c0b Mon Sep 17 00:00:00 2001
From: Imadzuma <mar-gosha98@mail.ru>
Date: Thu, 5 Sep 2024 13:58:23 +0300
Subject: [PATCH 6/9] fix imports

---
 scripts/thirdparties/src/software/defaults.py | 7 +------
 test/unit/tools/thirdparties/test_sync.py     | 2 +-
 2 files changed, 2 insertions(+), 7 deletions(-)

diff --git a/scripts/thirdparties/src/software/defaults.py b/scripts/thirdparties/src/software/defaults.py
index b057929f4..6d21c86b3 100644
--- a/scripts/thirdparties/src/software/defaults.py
+++ b/scripts/thirdparties/src/software/defaults.py
@@ -12,12 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-from copy import deepcopy
-from typing import Dict
-
-from ruamel.yaml import CommentedMap
-
-from kubemarine.core import utils, static
+from kubemarine.core import utils
 
 # pylint: disable=bad-builtin
 
diff --git a/test/unit/tools/thirdparties/test_sync.py b/test/unit/tools/thirdparties/test_sync.py
index 93a9ebd64..3786eae85 100644
--- a/test/unit/tools/thirdparties/test_sync.py
+++ b/test/unit/tools/thirdparties/test_sync.py
@@ -20,7 +20,6 @@
 from typing import List, Dict, ContextManager
 from unittest import mock
 
-from scripts.thirdparties.src.software.defaults import KubemarineDefaults
 from test.unit import utils as test_utils
 from test.unit.tools.thirdparties.stub import (
     FakeSynchronization, FakeInternalCompatibility, FakeKubernetesVersions,
@@ -32,6 +31,7 @@
 from kubemarine.plugins import builtin
 from kubemarine.plugins.manifest import Manifest, Processor, Identity
 from scripts.thirdparties.src.software import thirdparties, plugins, kubernetes_images
+from scripts.thirdparties.src.software.defaults import KubemarineDefaults
 from scripts.thirdparties.src.software.plugins import (
     ManifestResolver, ManifestsEnrichment,
     ERROR_UNEXPECTED_IMAGE, ERROR_SUSPICIOUS_ABA_VERSIONS

From 4b0672d861204d9fe49941c97e30d615a173a856 Mon Sep 17 00:00:00 2001
From: Imadzuma <mar-gosha98@mail.ru>
Date: Tue, 10 Sep 2024 09:16:47 +0300
Subject: [PATCH 7/9] return to unspecified patch version in base images

---
 Dockerfile | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index a3fd85cde..e246482cb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1
 
 # Build ipip_check binary
-FROM golang:1.22.5 AS go-build
+FROM golang:1.22 AS go-build
 
 WORKDIR /opt
 
@@ -11,7 +11,7 @@ RUN go mod download && \
     GOOS=linux CGO_ENABLED=1 go build -ldflags="-linkmode external -extldflags='-static'" -o ipip_check -buildvcs=false && \
     gzip ipip_check
 
-FROM python:3.12.4-slim-bullseye AS python-build
+FROM python:3.12-slim-bullseye AS python-build
 
 ARG BUILD_TYPE
 
@@ -25,6 +25,7 @@ COPY --from=go-build /opt/ipip_check.gz /opt/kubemarine/kubemarine/resources/scr
 WORKDIR /opt/kubemarine/
 
 RUN apt update && \
+    pip3 install --no-cache-dir setuptools wheel && \
     pip3 install --no-cache-dir build && \
     python3 -m build -n && \
     # In any if branch delete source code, but preserve specific directories for different service aims

From e133fe7121405d4b3c39501d39aa6ad73907fd08 Mon Sep 17 00:00:00 2001
From: disa1217 <167318560+disa1217@users.noreply.github.com>
Date: Tue, 10 Sep 2024 17:16:16 +0530
Subject: [PATCH 8/9] Update check_paas.py

---
 kubemarine/procedures/check_paas.py | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/kubemarine/procedures/check_paas.py b/kubemarine/procedures/check_paas.py
index 27f659809..299acbe7e 100755
--- a/kubemarine/procedures/check_paas.py
+++ b/kubemarine/procedures/check_paas.py
@@ -109,7 +109,7 @@ def _check_same_os(cluster: KubernetesCluster) -> None:
     different_os = set(os_ids.values())
     if len(different_os) > 1:
         cluster.log.warning(
-            f"Nodes have different OS families or versions, packages versions cannot be checked. "
+            f"Nodes have different OS families or versions, packages versions cannot be checked."
             f"List of (OS family, version): {list(different_os)}")
         raise TestFailure(f"Nodes have different OS families or versions")
 
@@ -1021,7 +1021,7 @@ def verify_modprobe_rules(cluster: KubernetesCluster) -> None:
         else:
             raise TestFailure('invalid',
                               hint=f"Modprobe rules do not match those loaded in modprobe on cluster nodes. Check "
-                                   f"manually what the differences are and make changes on the appropriate nodes.")
+                                   f"the differences manually and make changes on the appropriate nodes.")
 
 
 def verify_sysctl_config(cluster: KubernetesCluster) -> None:
@@ -1042,7 +1042,7 @@ def verify_sysctl_config(cluster: KubernetesCluster) -> None:
         else:
             raise TestFailure('invalid',
                               hint=f"Some configured kernel parameters are not loaded on the cluster nodes.\n"
-                                   f"Check manually what the differences are, and make changes on the appropriate nodes.")
+                                   f"Check the differences manually and make changes on the appropriate nodes.")
 
 
 def verify_system_audit_rules(cluster: KubernetesCluster) -> None:
@@ -1063,7 +1063,7 @@ def verify_system_audit_rules(cluster: KubernetesCluster) -> None:
         else:
             raise TestFailure('invalid',
                               hint=f"Some configured Audit rules are not loaded on the cluster nodes.\n"
-                                   f"Check manually what the differences are, and make changes on the appropriate nodes.")
+                                   f"Check the differences manually and make changes on the appropriate nodes.")
 
 
 def etcd_health_status(cluster: KubernetesCluster) -> None:
@@ -1573,8 +1573,8 @@ def verify_kubernetes_version(cluster: KubernetesCluster) -> None:
         target_version = cluster.inventory['services']['kubeadm']['kubernetesVersion']
         if not kubernetes.verify_supported_version(target_version, cluster.log):
             raise TestWarn(f"Kubernetes version {target_version} is deprecated",
-                           hint=f"Used kubernetes version is deprecated and will be excluded from support "
-                                f"in future kubemarine releases. Please, plan upgrade to newer version")
+                           hint=f"Used Kubernetes version is deprecated and will be excluded from support "
+                                f"in future Kubemarine releases. Please plan upgrade to the newer version.")
 
         tc.success(results='Kubernetes version is OK')
 
@@ -1614,7 +1614,7 @@ def geo_check(cluster: KubernetesCluster) -> None:
 
         peers = yaml.safe_load(io.StringIO(peers_result))
         if len(peers) == 0:
-            raise TestFailure("configuration error", hint="geo-monitor instance has no peers")
+            raise TestFailure("configuration error", hint="geo-monitor instance has no peers.")
 
         for peer in peers:
             status = peer["clusterIpStatus"]
@@ -1644,7 +1644,7 @@ def geo_check(cluster: KubernetesCluster) -> None:
 
     with TestCase(cluster, '226', "Geo Monitor", "Geo check - Pod-to-service") as tc_svc:
         if not status_collected:
-            raise TestFailure("configuration error", hint="DNS check failed with error, statuses not collected")
+            raise TestFailure("configuration error", hint="DNS check failed with error, statuses not collected.")
 
         if svc_status["failed"]:
             raise TestFailure("found unavailable peer services",
@@ -1655,7 +1655,7 @@ def geo_check(cluster: KubernetesCluster) -> None:
 
     with TestCase(cluster, '226', "Geo Monitor", "Geo check - Pod-to-pod") as tc_pod:
         if not status_collected:
-            raise TestFailure("configuration error", hint="DNS check failed with error, statuses not collected")
+            raise TestFailure("configuration error", hint="DNS check failed with error, statuses not collected.")
 
         if pod_status["failed"]:
             raise TestFailure("found unavailable peer pod",
@@ -1711,7 +1711,7 @@ def verify_apparmor_config(cluster: KubernetesCluster) -> None:
                 tc.success(results='valid')
             else:
                 raise TestFailure('invalid',
-                        hint=f"Some nodes do not have properly configured Apparmor service")
+                        hint=f"Some nodes do not have properly configured Apparmor service.")
         else:
             tc.success(results='skipped')
 

From 85acb9c467d0dd4e99754fbd0eb9ae79590ddb44 Mon Sep 17 00:00:00 2001
From: Imadzuma <mar-gosha98@mail.ru>
Date: Wed, 11 Sep 2024 15:39:02 +0300
Subject: [PATCH 9/9] add docs description for kubenrnetes.version paas-check
 task

---
 documentation/Kubecheck.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/documentation/Kubecheck.md b/documentation/Kubecheck.md
index a64811e24..41637950b 100644
--- a/documentation/Kubecheck.md
+++ b/documentation/Kubecheck.md
@@ -82,6 +82,7 @@ This section provides information about the Kubecheck functionality.
     - [229 Audit Policy Configuration](#229-audit-policy-configuration)
     - [231 Audit Daemon Rules](#231-audit-daemon-rules)
     - [232 Kernel Parameters Configuration](#232-kernel-parameters-configuration)
+    - [235 Kubernetes version](#235-kubernetes-version)
 - [Report File Generation](#report-file-generation)
   - [HTML Report](#html-report)
   - [CSV Report](#csv-report)
@@ -437,6 +438,7 @@ The task tree is as follows:
   * audit
     * policy
   * admission
+  * version
 * etcd
   * health_status
 * control_plane
@@ -778,6 +780,14 @@ This test compares the kernel parameters on the nodes
 with the parameters specified in the inventory or with the default parameters.
 If the configured parameters are not presented, the test fails.
 
+##### 235 Kubernetes version
+
+*Task*: `kubernetes.version`
+
+This test checks if used kubernetes version is deprecated in current kubemarine release.
+It means, that this version is going to be excluded from support in future kubemarine soon.
+So it's recommended to update kubernetes version to new one.
+
 ### Report File Generation
 
 In addition to the resulting table in the log output, the same report is presented in the form of files.