fix: add CentOS 9 support, python3.11 fallback, and ipvs module const…

core/inventory/metadata/all.yml

@@ -55,18 +55,23 @@ loadbalancer_apiserver_healthcheck_port: 8081
 # external_cloud_provider:
 
 ## Set these proxy values in order to update package manager and docker daemon to use proxies and custom CA for https_proxy if needed
-# http_proxy: ""
-# https_proxy: ""
+http_proxy: "http://proxy-us.intel.com:912"
+https_proxy: "http://proxy-us.intel.com:912"
 # https_proxy_cert_file: ""
 
 # DO NOT CHANGE INDENTATION - used by Automation
 env_proxy:
-  http_proxy: ""
-  https_proxy: ""
-  no_proxy: ""
+  http_proxy: "http://proxy-us.intel.com:912"
+  https_proxy: "http://proxy-us.intel.com:912"
+  no_proxy: "intel.com,.intel.com,10.0.0.0/8,192.168.0.0/16,localhost,.local,127.0.0.0/8,134.134.0.0/16,127.0.0.1,::1,10.233.0.1,10.233.0.0/18,10.233.64.0/18,svc,svc.cluster.local,.svc,.svc.cluster.local,169.254.0.0/16,10.140.158.5,.default,.genai-gateway,.redis,.ingress-nginx,.agent-sandbox,.flowise,api.example.com"
 
 ## Refer to roles/kubespray-defaults/defaults/main/main.yml before modifying no_proxy
-# no_proxy: ""
+no_proxy: "intel.com,.intel.com,10.0.0.0/8,192.168.0.0/16,localhost,.local,127.0.0.0/8,134.134.0.0/16,127.0.0.1,::1,10.233.0.1,10.233.0.0/18,10.233.64.0/18,svc,svc.cluster.local,.svc,.svc.cluster.local,169.254.0.0/16,10.140.158.5,.default,.genai-gateway,.redis,.ingress-nginx,.agent-sandbox,.flowise,api.example.com"
+
+# Limit IPVS modules to those available in custom kernels (ip_vs, ip_vs_rr)
+kube_proxy_ipvs_modules:
+  - ip_vs
+  - ip_vs_rr
 
 ## Some problems may occur when downloading files over https proxy due to ansible bug
 ## https://github.com/ansible/ansible/issues/32750. Set this variable to False to disable

core/lib/system/precheck/prereq-check.sh

@@ -68,6 +68,11 @@ run_system_prerequisites_check() {
 
 
 
+    # Ensure python3_interpreter points to Python 3.10+
+    if ! command -v "${python3_interpreter:-python3}" &>/dev/null || ! "${python3_interpreter:-python3}" -c "import sys; sys.exit(0 if sys.version_info >= (3, 10) else 1)" 2>/dev/null; then
+        python3_interpreter="$(command -v python3.11 || command -v python3)"
+    fi
+
     # Check for python3 (version 3.10 or above) using configured interpreter
     if [ -z "$python3_interpreter" ]; then
         echo -e "${RED}✗ python3_interpreter not configured${NC}"

core/lib/system/precheck/read-config-file.sh

@@ -42,6 +42,11 @@ read_config_file() {
             echo "Enterprise Inference Metadata configuration file not found"
             exit 1        
         fi
+
+        # Default to python3.11 if configured interpreter is missing or Python < 3.10
+        if ! command -v "${python3_interpreter:-python3}" &>/dev/null || ! "${python3_interpreter:-python3}" -c "import sys; sys.exit(0 if sys.version_info >= (3, 10) else 1)" 2>/dev/null; then
+            python3_interpreter="$(command -v python3.11 || command -v python3)"
+        fi
 
         echo -n "place-holder-123" > "$HOMEDIR/inventory/.vault-passfile"
         vault_pass_file="$HOMEDIR/inventory/.vault-passfile"        

core/roles/inference-precheck/tasks/main.yml

@@ -9,6 +9,7 @@
       - distribution
       - distribution_version
       - distribution_major_version
+      - os_family
 
   tags: always
 
@@ -39,7 +40,7 @@
         os_supported: >-
           {{
             (ansible_distribution == "Ubuntu" and (ansible_distribution_version == "22.04" or ansible_distribution_version == "24.04")) or
-            (ansible_distribution == "RedHat" and ansible_distribution_major_version == "9")
+            ((ansible_distribution in ["RedHat", "CentOS", "CentOS Stream", "Rocky", "AlmaLinux"] or ansible_os_family == "RedHat") and ansible_distribution_major_version == "9")
           }}
 
     - name: Display OS support status

deploy-agentic-stack.sh

@@ -274,23 +274,27 @@ install_prereqs() {
             pkg_install \
                 git curl wget openssl sshpass python3 python3-pip python3-venv \
                 software-properties-common apt-transport-https ca-certificates \
-                jq unzip
+                jq unzip conntrack socat ebtables
             ;;
         dnf)
             sudo dnf makecache -q 2>/dev/null || true
             pkg_install epel-release 2>/dev/null || true
             pkg_install \
                 git curl wget openssl sshpass python3 python3-pip \
-                ca-certificates jq unzip
+                ca-certificates jq unzip conntrack-tools socat ebtables \
+                python3.11 python3.11-pip 2>/dev/null || true
             ;;
         yum)
             sudo yum makecache -q 2>/dev/null || true
             pkg_install epel-release 2>/dev/null || true
             pkg_install \
                 git curl wget openssl python3 python3-pip \
-                ca-certificates jq unzip
+                ca-certificates jq unzip conntrack-tools socat ebtables \
+                python3.11 python3.11-pip 2>/dev/null || true
             ;;
     esac
+    [[ -f /usr/local/bin/kubectl ]] && sudo ln -sf /usr/local/bin/kubectl /usr/bin/kubectl 2>/dev/null || true
+    [[ -f /usr/local/bin/helm ]] && sudo ln -sf /usr/local/bin/helm /usr/bin/helm 2>/dev/null || true
     success "System packages installed"
 }
 
@@ -1134,4 +1138,4 @@ main() {
     print_summary
 }
 
-[[ "${DEPLOY_SOURCED:-0}" == "1" ]] || main "$@"
+[[ "${DEPLOY_SOURCED:-0}" == "1" ]] || main "$@"