# Upgrade plan for k3s worker nodes
apiVersion: upgrade.cattle.io/v1
kind: Plan
metadata:
  name: k3s-agent
  namespace: system-upgrade
spec:
  # Target k3s version - update this to trigger upgrades
  version: v1.36.2+k3s1

  # Node selector - target worker nodes (not control plane)
  nodeSelector:
    matchExpressions:
      - key: node-role.kubernetes.io/control-plane
        operator: DoesNotExist

  # Service account with permissions to drain nodes
  serviceAccountName: system-upgrade

  # Cordon node before upgrade
  cordon: true

  # Drain pods before upgrade
  drain:
    force: true
    skipWaitForDeleteTimeout: 60
    timeout: 120s
    deleteEmptyDir: true
    ignoreDaemonSets: true

  # Only upgrade workers after control plane is done
  prepare:
    image: rancher/k3s-upgrade
    args:
      - prepare
      - k3s-server

  # Container spec for upgrade job
  upgrade:
    image: rancher/k3s-upgrade