Brad Davidson
409fec9778
Add etcd s3 config secret implementation
...
* Move snapshot structs and functions into pkg/etcd/snapshot
* Move s3 client code and functions into pkg/etcd/s3
* Refactor pkg/etcd to track snapshot and s3 moves
* Add support for reading s3 client config from secret
* Add minio client cache, since S3 client configuration can now be
changed at runtime by modifying the secret, and don't want to have to
create a new minio client every time we read config.
* Add tests for pkg/etcd/s3
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c36db53e54
)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
4 months ago
Brad Davidson
d5a85d7307
Add certificate expiry check and warnings
...
* Add ADR
* Add `k3s certificate check` command.
* Add periodic check and events when certs are about to expire.
* Add metrics for certificate validity remaining, labeled by cert subject
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7f659759dd
)
8 months ago
Brad Davidson
ece564ec93
Add ADR for embedded registry
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b8f3967ad1
)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
11 months ago
Vitor Savian
875a9d19c6
Added ADR for etcd status
...
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
1 year ago
Brad Davidson
d885162967
Add server token hash to CR and S3
...
This required pulling the token hash stuff out of the cluster package, into util.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
1 year ago
Brad Davidson
64107b54e4
Minor updates as per design review discussion
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
1 year ago
Brad Davidson
22065affa2
Add ADR for etcd snapshot CRD migration
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
1 year ago
Derek Nola
bd9dad87d5
Typo fix
...
Signed-off-by: Derek Nola <derek.nola@suse.com>
1 year ago
Derek Nola
5c5d957e73
Set server-token adr to accepted
...
Signed-off-by: Derek Nola <derek.nola@suse.com>
1 year ago
Derek Nola
6398c38690
Server token rotation ADR
...
Signed-off-by: Derek Nola <derek.nola@suse.com>
1 year ago
Derek Nola
946c8ea842
ADR on secrets encryption v3 ( #7938 )
...
* ADR on secrets encryption v3
Signed-off-by: Derek Nola <derek.nola@suse.com>
* Update adr based off design meeting discussion
Signed-off-by: Derek Nola <derek.nola@suse.com>
* Update with acceptance
Signed-off-by: Derek Nola <derek.nola@suse.com>
---------
Signed-off-by: Derek Nola <derek.nola@suse.com>
1 year ago
Manuel Buil
bca0adbca8
Fix code spell check
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
1 year ago
Manuel Buil
869e030bdd
VPN PoC
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
1 year ago
Brad Davidson
612473755d
Add ADR
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2 years ago
Brad Davidson
607cbf0ad6
Bump containerd to v1.7.0 and move back into multicall binary
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2 years ago
Derek Nola
c78dc4db71
Add flannel adr ( #6973 )
...
* Add flannel adr
Signed-off-by: Derek Nola <derek.nola@suse.com>
* Incorporate Brads comments
Signed-off-by: Derek Nola <derek.nola@suse.com>
* Remove the "s"
Signed-off-by: Derek Nola <derek.nola@suse.com>
* Updated table with more info on flags
Signed-off-by: Derek Nola <derek.nola@suse.com>
* Update docs/adrs/flannel-options.md
Co-authored-by: Roberto Bonafiglia <roberto.bonafiglia@gmail.com>
---------
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Roberto Bonafiglia <roberto.bonafiglia@gmail.com>
2 years ago
Brad Davidson
c900089e88
Add ADR
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2 years ago
Brad Davidson
9b6b72941f
Clarify ADR based on design review feedback
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2 years ago
Brad Davidson
f13768c247
Add ADR
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2 years ago
Guilherme Macedo
9d8260a3f6
Add ADR for security bumps automation ( #6559 )
...
Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com>
2 years ago
Brad Davidson
a5fe5e370c
Add ADR for new repo
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2 years ago
Brad Davidson
746904eb03
Add ADR for ServiceLB move to CCM
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2 years ago
Brad Davidson
aadab55145
Add ADR for inclusion of cri-dockerd
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2 years ago
Derek Nola
90016c208d
ADR: Depreciating and Removing Old Flags ( #5890 )
...
* Update naming on old adrs
* New adr for removing deprecated flags
Signed-off-by: Derek Nola <derek.nola@suse.com>
2 years ago
Brad Davidson
baf865b836
Add ADR
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Michal Rostecki
73725a0882
docs: adrs: Dual-stack in network policy agent
...
Proposal about implementing dual stack in k3s network policy agent,
kube-router and the procedure of that implementation.
Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
3 years ago
Chris Wayne
2f3bfc27c0
Add in docs/adr to ensure we capture decisions properly during design calls ( #4707 )
...
Signed-off-by: Chris Wayne <cwayne18@gmail.com>
3 years ago