Unnecessary installation of kube-proxy in v2.28.0

[rdavyd]

What happened?

Kube-proxy daemonset appeared in the cluster when upgrading 2.27.0 -> 2.28.0

What did you expect to happen?

Kube-proxy should be disabled when kube-router CNI is used or explicitly disabled via kube_proxy_remove: true

How can we reproduce it (as minimally and precisely as possible)?

Set kube-router plugin or explicitly disable kube-proxy.

OS

Ubuntu 22

Version of Ansible

ansible [core 2.16.14]

Version of Python

python version = 3.11.7

Version of Kubespray (commit)

63cdf87

Network plugin used

kube-router

Full inventory with variables

Not required

Command used to invoke ansible

Not required

Output of ansible run

Not required

Anything else we need to know

Problem is here

kubespray/roles/kubernetes/control-plane/tasks/kubeadm-upgrade.yml

Lines 6 to 41 in 63cdf87

	- name: Kubeadm | Upgrade first control plane node
	command: >-
	timeout -k 600s 600s
	{{ bin_dir }}/kubeadm upgrade apply -y v{{ kube_version }}
	{%- if kubeadm_config_api_version == 'v1beta3' %}
	--certificate-renewal={{ kubeadm_upgrade_auto_cert_renewal }}
	--ignore-preflight-errors={{ kubeadm_ignore_preflight_errors | join(',') }}
	--allow-experimental-upgrades
	--etcd-upgrade={{ (etcd_deployment_type == "kubeadm") | lower }}
	{% if kubeadm_patches | length > 0 %}--patches={{ kubeadm_patches_dir }}{% endif %}
	--force
	{%- else %}
	--config={{ kube_config_dir }}/kubeadm-config.yaml
	{%- endif -%}
	register: kubeadm_upgrade
	when: inventory_hostname == first_kube_control_plane
	failed_when: kubeadm_upgrade.rc != 0 and "field is immutable" not in kubeadm_upgrade.stderr
	environment:
	PATH: "{{ bin_dir }}:{{ ansible_env.PATH }}"
	- name: Kubeadm | Upgrade other control plane nodes
	command: >-
	{{ bin_dir }}/kubeadm upgrade node
	{%- if kubeadm_config_api_version == 'v1beta3' %}
	--certificate-renewal={{ kubeadm_upgrade_auto_cert_renewal }}
	--ignore-preflight-errors={{ kubeadm_ignore_preflight_errors | join(',') }}
	--etcd-upgrade={{ (etcd_deployment_type == "kubeadm") | lower }}
	{% if kubeadm_patches | length > 0 %}--patches={{ kubeadm_patches_dir }}{% endif %}
	{%- else %}
	--config={{ kube_config_dir }}/kubeadm-config.yaml
	{%- endif -%}
	register: kubeadm_upgrade
	when: inventory_hostname != first_kube_control_plane
	failed_when: kubeadm_upgrade.rc != 0 and "field is immutable" not in kubeadm_upgrade.stderr
	environment:
	PATH: "{{ bin_dir }}:{{ ansible_env.PATH }}"

This should be added to both commands

    {%- endif %}
    --skip-phases={{ kubeadm_init_phases_skip | join(',') }}