Commit Graph

3133 Commits (0eaee46708104adc4a79fd633ad6853d240e08b6)

Author SHA1 Message Date
Brad Davidson 0eaee46708 Bump containerd and cri-dockerd
Bump containerd to v1.7.15
Bump cri-dockerd to v0.3.12

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0792461885)
2024-04-11 10:01:16 -07:00
Brad Davidson 29667f317b Add supervisor cert/key to rotate list
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 60248c42de)
2024-04-11 10:01:16 -07:00
Brad Davidson 870030cc9a Add workaround for containerd hosts.toml bug
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f2961fb5d2)
2024-04-11 10:01:16 -07:00
Brad Davidson d5a85d7307 Add certificate expiry check and warnings
* Add ADR
* Add `k3s certificate check` command.
* Add periodic check and events when certs are about to expire.
* Add metrics for certificate validity remaining, labeled by cert subject

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7f659759dd)
2024-04-11 10:01:16 -07:00
Brad Davidson f8e4828963 Add health-check support to loadbalancer
* Adds support for health-checking loadbalancer servers. If a
  health-check fails when dialing, all existing connections to the
  server will be closed.
* Wires up a remotedialer tunnel connectivity check as the health check
  for supervisor/apiserver connections.
* Wires up a simple ping request to the supervisor port as the health
  check for etcd connections.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c51d7bfbd1)
2024-04-11 10:01:16 -07:00
Brad Davidson ba01c47611 Fix etcd snapshot reconcile for agentless nodes
Disable cleanup of orphaned snapshots and patching of node annotations if running agentless

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit edb0440017)
2024-04-11 10:01:16 -07:00
Brad Davidson 06ec6e51af Add /etc/passwd and /etc/group to k3s docker image
Fixes `cannot find name for user ID 0: No such file or directory` errors when checking user info in docker image

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7474a6fa43)
2024-04-11 10:01:16 -07:00
Brad Davidson 6d2e9314b1 Fix error when image has already been pulled
CRI and containerd APIs disagree about the registry names - CRI supports
index.docker.io as an alias for docker.io, while containerd does not.
Use the actual stored RepoTag to determine what image to ask containerd for.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f099bfa508)
2024-04-11 10:01:16 -07:00
Brad Davidson 8b67ddb359 Respect cloud-provider fields set by kubelet
Don't clobber the providerID field and instance-type/region/zone labels if provided by the kubelet. This allows the user to set these to the correct values when using the embedded CCM in a real cloud environment.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 65cd606832)
2024-04-11 10:01:16 -07:00
Brad Davidson 4d13ba9435 Send error response if member list cannot be retrieved
Prevents joining nodes from being stuck with bad initial member list if there is a transient failure, or if they try to join themselves

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d7cdbb7d4d)
2024-04-11 10:01:16 -07:00
Brad Davidson 2ca497e02a Move error response generation code into util
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7a2a2d075c)
2024-04-11 10:01:16 -07:00
Derek Nola 88b2b1f6a6
Bump spegel to v0.0.20-k3s1 (#9880)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-04-09 09:03:37 -07:00
Vitor Savian 70bd37793f Add tls for kine
* Bump kine
* Add integration tests for kine with tls

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
2024-04-02 11:41:35 -03:00
Derek Nola ae8f23b7ae Fix embeddedmirror test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-30 21:30:36 -07:00
Derek Nola 53d1f50413 E2E setup: Only install jq when we need it
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-30 21:30:36 -07:00
Derek Nola 3096cf4886 Add wasm test to e2e matrix
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-30 21:30:36 -07:00
Derek Nola e5b0dbbd38 Move to ubuntu 23.10 for E2E tests (#9755)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-30 21:30:36 -07:00
Derek Nola 0ac5489d49 Use ubuntu latest for better golang caching keys (#9711)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-30 21:30:36 -07:00
Derek Nola 993f67738b
Transition from deprecated pointer library to ptr (#9801) (#9824)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-30 21:30:10 -07:00
Derek Nola 1cde5b83ce
Remove old pinned dependencies (#9827)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-30 21:29:45 -07:00
Vitor Savian 88df9583ca Add a new error when kine is with disable apiserver or disable etcd
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
2024-03-28 09:37:12 -03:00
Brian Downs 653dd61aaa
Update to v1.28.8-k3s1 and Go 1.21.8 (#9746) 2024-03-15 17:30:15 -07:00
Brad Davidson aa3a18ba9b Fix wildcard entry upstream fallback
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-12 23:31:33 -07:00
Derek Nola 31ee8501ea Fix flaky check in btrfs test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-08 11:14:14 -08:00
Derek Nola 60da5c6ca2 Fix e2e vagrant cacheing
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-08 11:14:14 -08:00
Derek Nola f68f04dc37 Run docker tests in E2E GH Action
Build image with new input option
Run most of the basic docker tests in E2E
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-08 11:14:14 -08:00
Derek Nola 83d1a2cd42 Bump upload and download actions to v4 (#9666)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-08 11:14:14 -08:00
Derek Nola 1438a7d57b Improve E2E Aftersuite cleanup
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-08 11:14:14 -08:00
ShylajaDevadiga 1a07661b9c update s3 e2e test (#9025)
Signed-off-by: ShylajaDevadiga <shylaja.devadiga@suse.com>
Co-authored-by: ShylajaDevadiga <shylaja.devadiga@suse.com>
2024-03-08 11:14:14 -08:00
Derek Nola 4f9483b8ae Move to ubuntu 2204 for all E2E tests
Simplify node roles

Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-08 11:14:14 -08:00
Derek Nola 79dacbd877 Convert snapshotter test in e2e test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-08 11:14:14 -08:00
Derek Nola 24ba387375 Migrate E2E tests to GitHub Actions
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-08 11:14:14 -08:00
Derek Nola e6364472b5 Allow non-sudo vagrant
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-08 11:14:14 -08:00
Derek Nola 1075b3ca5a Move docker tests into tests folder (#9555)
* Move docker tests into tests folder
* Remove old test certs
* Update TESTING.md with docker test inf

Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-08 11:14:14 -08:00
Brad Davidson c15e17676d Warn and suppress duplicate registry mirror endpoints
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson 3cef278fcb Bump metrics-server to v0.7.0
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson 7f1b0c2b79 Include flannel version in flannel cni plugin version
We were misreporting the flannel version as the flannel cni plugin version; restore the actual flannel version as build metadata

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6f331ea7b5)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Rishikesh Nair a40e0435fa Update contrib/util/check-config.sh
Co-authored-by: Brad Davidson <brad@oatmail.org>
Signed-off-by: Rishikesh Nair <42700059+rishinair11@users.noreply.github.com>
(cherry picked from commit 82cfacb2f3)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Rishikesh Nair 08eaf1861b Rename `RAW_OUTPUT` -> `NO_COLOR`
Also, if NO_COLOR is empty, output will be colored, otherwise not colored.

Signed-off-by: Rishikesh Nair <alienware505@gmail.com>
(cherry picked from commit ce0765c9f8)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Rishi ff81da4feb Disable color outputs using RAW_OUTPUT env var
Setting this environment variable will not wrap the text in color ANSI code, so that we can print a raw output.

Signed-off-by: Rishikesh Nair <alienware505@gmail.com>
(cherry picked from commit ff7cfa2235)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Vitor Savian 8202e9305e Fix wildcard with embbeded registry test
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 59c724f7a6)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Flavio Castelli ed5de70dd0 e2e tests: cover WebAssembly integration
Add a e2e test that runs some demo WebAssembly applications
using the dedicated containerd shims.

Note: this is not an integration test because we need to install some
binaries (the special containerd shims) on the host.

Signed-off-by: Flavio Castelli <fcastelli@suse.com>
(cherry picked from commit f82d438f39)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Flavio Castelli 0d777dcb2f fix: use correct wasm shims names
Fix the wasm shim detection and the containerd configuration generation.

Prior to this commit, the binary and the `RuntimeType` values were not
correct.

Signed-off-by: Flavio Castelli <fcastelli@suse.com>
(cherry picked from commit 64e4f0e6e7)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson f10b4afa73 Don't register embedded registry address as an upstream registry
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 091a5c8965)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson a0339c8d1f Remove filtering of wildcard mirror entry
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b5a4846e9d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson 6ceba8be08 Add env var to allow spegel mirroring of `latest` tag
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 84a071a81e)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Philip Laine 4e57230e08 Bump spegel to v0.0.18-k3s4
Signed-off-by: Philip Laine <philip.laine@gmail.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 26feb25c40)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson da998e09cb Use and version flannel/cni-plugin properly
Moves us closer to using the proper upstream for our flannel CNI plugin, instead of the snapshot that is vendored into our plugins fork.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 88d30f940d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson 1e022f5986 Move snapshot-retention to EtcdSnapshotFlags in order to support loading from config
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0b3593205a)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson ea81098e29 Clean up snapshotDir create/exists logic
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3576ed4327)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00