chore(flannel): remove legacy flannel wrapper

[Garrett Settles (gsettles01)]

Summary

This PR removes ACL's legacy Quay-dependent Flannel wrapper from ACL RPM images. The upstream app-admin/flannel-wrapper package and coreos-0.0.1.ebuild dependency remain unchanged; only ACL's RPM-mode installation paths are removed. ACL #74 and Mantle #43 are merged. A separate work item will add replacement coverage. See more info in plan document.

Change Log

• Remove flannel-wrapper packaging, units, network configs and RPM/sysext integration.

Type of Change

• New kola test
• Kola test fix/update
• Platform integration change (Azure, QEMU, etc.)
• CLI/command change
• CI/automation change
• Bug fix
• Documentation update
• Image build / package removal — additional category for this ACL change

Associated Issues

• Prerequisite enforcement change: test(flannel): disable enforcement of legacy flannel wrapper tests #74.
• Prerequisite test exclusions and published Mantle image: [Depends on ACL #74] test(flannel): exclude legacy flannel wrapper tests azure-container-linux-mantle#43.
• ADO work item - Remove ACL Flannel quay.io image references

Test Methodology

• Required CI checks pass

Merge Checklist

All applicable boxes should be checked before merging.

• Prerequisite PR merged - ([Depends on ACL #74] test(flannel): exclude legacy flannel wrapper tests azure-container-linux-mantle#43)
• Required CI checks pass
• Ready to merge

[Copilot]

🔵 Needs a closer look

The prerequisite changes and CI conditions required for safe approval are not confirmed.

Pull request overview

This pull request removes the legacy Quay-dependent Flannel wrapper and its integrations.

Changes:

• Deletes Flannel packaging, services, scripts, and network configuration.
• Removes RPM, sysext, and image-build integration.
• Removes legacy Flannel enforcement tests.

File summaries

File	Description
sdk_container/src/third_party/coreos-overlay/coreos-base/coreos/coreos-0.0.1.ebuild	Removes the wrapper dependency.
sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/metadata.xml	Deletes package metadata.
sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/flannel-wrapper-0.14.0-r1.ebuild	Deletes the package definition.
sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/flanneld.service	Deletes the Flannel service unit.
sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/flannel-wrapper	Deletes the wrapper script.
sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/flannel-docker-opts.service	Deletes the Docker options service.
sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/50-flannel.network	Deletes network configuration.
sdk_container/src/third_party/coreos-overlay/app-admin/flannel-wrapper/files/50-flannel.link	Deletes link configuration.
build_library/rpm/sysext_mangle_docker-flatcar.sh	Removes sysext installation logic.
build_library/rpm/package_catalog.yaml	Removes the package catalog entry.
build_library/rpm/build_image_util.sh	Removes RPM service installation logic.
acl/tests/kola_enforcing.yaml	Removes legacy Flannel enforcement entries.

Review details

• Files reviewed: 12/12 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Jiri Appl (jiria)]

nit: this depends on a draft pr, so you have a bit of an inversion of the state of the prs.

[Garrett Settles (gsettles01)]

> nit: this depends on a draft pr, so you have a bit of an inversion of the state of the prs.

Jiri Appl (@jiria) Good catch. Yep, Mantle #43 is now out of draft. I'll hold #75 until #43 merges and CI uses the updated Mantle image.

[Copilot]

🔵 Needs a closer look

Approval depends on the unmerged Mantle #43 image and coordinated test-exclusion rollout.

Review details

• Files reviewed: 2/2 changed files
• Comments generated: 0 new
• Review effort level: Lite

[Jiri Appl (jiria)]

Small housekeeping before this merges: the description still has "NOTE - currently rebased on the first ACL PR #74 to show all changes", but #74 is merged and this is now rebased on aclmain — the diff is just the 2 files / -49 lines. Worth dropping that note and ticking the #74 prerequisite so the squash commit message reflects the final scope (the first automated review summarised the old 12-file diff, which makes the stale note a bit of a trap for the next reviewer). Also a typo in the checklist: "Prerequiste" -> "Prerequisite".

It would also help to state explicitly in the summary that the upstream app-admin/flannel-wrapper package and the coreos-0.0.1.ebuild dependency are deliberately left in place, and that only ACL's RPM-mode install steps are removed — that context currently lives only in the review threads.

[Garrett Settles (gsettles01)]

Small housekeeping before this merges: the description still has "NOTE - currently rebased on the first ACL PR #74 to show all changes", but #74 is merged and this is now rebased on aclmain — the diff is just the 2 files / -49 lines. Worth dropping that note and ticking the #74 prerequisite so the squash commit message reflects the final scope (the first automated review summarised the old 12-file diff, which makes the stale note a bit of a trap for the next reviewer). Also a typo in the checklist: "Prerequiste" -> "Prerequisite".

It would also help to state explicitly in the summary that the upstream app-admin/flannel-wrapper package and the coreos-0.0.1.ebuild dependency are deliberately left in place, and that only ACL's RPM-mode install steps are removed — that context currently lives only in the review threads.

Ah, that makes sense. I agree that removing shared Flannel references would create unnecessary upstream-sync churn. I removed the stale note, fixed the typo, marked prerequisites merged, and clarified the ACL-only RPM scope. Code wise got it so the shared package and dependency remain, limited the PR to ACL RPM install paths. Thanks for helping me understand the distinction between shared upstream sources and ACL-specific installation paths.