What happened?

With this commit 6b5cc5b ,we got an issue with wrong rendered etc/systemd/system/containerd.service.d/http-proxy.conf

given:

kubespray v2.30
kubernetes 1.34.3

In group_vars/all/all.yml

http_proxy: "http://proxy. mycompany.de:9080"
https_proxy: "http://proxy.mycompany.de:9080"
additional_no_proxy: mycompany.de

When kubespray pipeline run, we get this http-proxy.conf

[Service]
Environment="HTTP_PROXY=http://proxy.mycompany.de:9080" "HTTPS_PROXY=http://proxy.mycompany.de:9080" 
"NO_PROXY=['1', '7', '2', '.', '3', '1', '.', '1', '3', '2', '.', '8', '8', ','.....', 's', 'v', 'c', ',', 's', 'v', 'c', '.', 'c', 'l', 'u', 's', 't', 'e', 'r', '.', 'l', 'o', 'c', 'a', 'l']"

What did you expect to happen?

Wie expect a http-proxy.conf like this

[Service]
Environment="HTTP_PROXY=http://proxy.mycompany.de:9080" "HTTPS_PROXY=http://proxy.mycompany.de:9080" "NO_PROXY=172.31.132.88,...,svc,svc.cluster.local"

How can we reproduce it (as minimally and precisely as possible)?

In group_vars/all/all.yml

http_proxy: "http://proxy. mycompany.de:9080"
https_proxy: "http://proxy.mycompany.de:9080"
additional_no_proxy: mycompany.de

OS

Ubuntu 24

Version of Ansible

ansible==10.5.0
ansible-core==2.17.5

Version of Python

3.12

Version of Kubespray (commit)

f4ccdb5

Network plugin used

calico

Full inventory with variables

{
"__environment_production": [
"vxintk8s01.hcp-dev-infra.mycompany.de",
"vxintk8s02.hcp-dev-infra.mycompany.de",
"vxintk8s03.hcp-dev-infra.mycompany.de"
],
"__hostgroup_integration_master": [
"vxintk8s01.hcp-dev-infra.mycompany.de",
"vxintk8s02.hcp-dev-infra.mycompany.de",
"vxintk8s03.hcp-dev-infra.mycompany.de"
],
"__hostgroup_integration_worker": [
"vxintk8s04.hcp-dev-infra.mycompany.de",
"vxintk8s05.hcp-dev-infra.mycompany.de",
"vxintk8s06.hcp-dev-infra.mycompany.de",
"vxintk8s07.hcp-dev-infra.mycompany.de"
],
"__location_defaultlocation": [
"vxintk8s01.hcp-dev-infra.mycompany.de",
"vxintk8s02.hcp-dev-infra.mycompany.de",
"vxintk8s03.hcp-dev-infra.mycompany.de",
"vxintk8s04.hcp-dev-infra.mycompany.de",
"vxintk8s05.hcp-dev-infra.mycompany.de",
"vxintk8s06.hcp-dev-infra.mycompany.de",
"vxintk8s07.hcp-dev-infra.mycompany.de"
],
"__organization_defaultorganization": [
"vxintk8s01.hcp-dev-infra.mycompany.de",
"vxintk8s02.hcp-dev-infra.mycompany.de",
"vxintk8s03.hcp-dev-infra.mycompany.de",
"vxintk8s04.hcp-dev-infra.mycompany.de",
"vxintk8s05.hcp-dev-infra.mycompany.de",
"vxintk8s06.hcp-dev-infra.mycompany.de",
"vxintk8s07.hcp-dev-infra.mycompany.de"
],
"all": [
"vxintk8s01.hcp-dev-infra.mycompany.de",
"vxintk8s02.hcp-dev-infra.mycompany.de",
"vxintk8s03.hcp-dev-infra.mycompany.de",
"vxintk8s04.hcp-dev-infra.mycompany.de",
"vxintk8s05.hcp-dev-infra.mycompany.de",
"vxintk8s06.hcp-dev-infra.mycompany.de",
"vxintk8s07.hcp-dev-infra.mycompany.de"
],
"etcd": [
"vxintk8s01.hcp-dev-infra.mycompany.de",
"vxintk8s02.hcp-dev-infra.mycompany.de",
"vxintk8s03.hcp-dev-infra.mycompany.de"
],
"kube_master": [
"vxintk8s01.hcp-dev-infra.mycompany.de",
"vxintk8s02.hcp-dev-infra.mycompany.de",
"vxintk8s03.hcp-dev-infra.mycompany.de"
],
"kube_node": [
"vxintk8s04.hcp-dev-infra.mycompany.de",
"vxintk8s05.hcp-dev-infra.mycompany.de",
"vxintk8s06.hcp-dev-infra.mycompany.de",
"vxintk8s07.hcp-dev-infra.mycompany.de"
],
"k8s_cluster": {
"children": [
"kube_control_plane",
"kube_node"
]
},
"kube_control_plane": [
"vxintk8s01.hcp-dev-infra.mycompany.de",
"vxintk8s02.hcp-dev-infra.mycompany.de",
"vxintk8s03.hcp-dev-infra.mycompany.de"
]
}

Command used to invoke ansible

ansible-playbook -i /ansible/dynamic_inventory/my-inventory.sh upgrade-cluster.yml

Output of ansible run

see above/expected

Anything else we need to know

No response