github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
1,851 Commits
31 Branches
881 Tags
633 MiB
Commit Graph

700 Commits (41b0997e31166c1e3a5ec6cac49d1897b2cac376)

Author SHA1 Message Date
Manuel Buil 41b0997e31 Add dual-stack support 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-10-21 10:29:03 +02:00
Brad Davidson a18c2efb4c Refactor log and reaper exec to omit MAINPID 
Using MAINPID breaks systemd's exit detection, as it stops watching the
original pid, but is unable to watch the new pid as it is not a child
of systemd itself. The best we can do is just notify when execing the child
process.

We also need to consolidate forking into a sigle place so that we don't
end up with multiple levels of child processes if both redirecting log
output and reaping child processes.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit dc18ef2e51)
 2021-10-20 14:36:54 -07:00
Brad Davidson 504e249a5e Add containerd ready channel to delay etcd node join 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 88178ae65e)
 2021-10-20 11:06:12 -07:00
Brad Davidson e814850eef Fix premature etcd shutdown when joining an existing cluster 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 086ca8ba6a)
 2021-10-20 11:06:12 -07:00
Brad Davidson 557d425010 Minor cleanup on cribbed function 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 57377d2cd4)
 2021-10-20 11:06:12 -07:00
Brad Davidson 4f28561e34 Wait for apiserver readyz instead of healthz 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3449d5b9f9)
 2021-10-20 11:06:12 -07:00
Manuel Buil 89f5721a3a Fix race condition in cloud provider 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-10-19 10:25:34 +02:00
Brian Downs 4aa9553978
[Release-1.21] - Add etcd s3 timeout (#4207) (#4228) 2021-10-18 10:45:38 -07:00
Hussein Galal 22f7f1c41a
Make sure there are no duplicates in etcd member list (#4025) (#4213) 
* Make sure there are no duplicates in etcd member list

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix node names with hyphens

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* use full server name for etcd node name

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-10-14 23:39:24 +02:00
Hussein Galal e7bf7b141f
Display cluster tls error only in debug mode (#4201) 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-10-13 01:10:54 +02:00
Brian Downs aa5a0a8c78
set transport to skip verify if se skip flag passed (#4102) (#4104) 2021-10-07 12:47:32 -07:00
Derek Nola 3ee5098225
Add "etcd-" prefix to etcd-snapshot commands as aliases (#4161) (#4171) 
* Add "etcd-" prefix to etcd-snapshot commands as alias

Signed-off-by: dereknola <derek.nola@suse.com>
 2021-10-07 12:26:36 -07:00
Brad Davidson 69a9f46bce Don't evacuate the root cgroup when rootless 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-01 16:19:07 -07:00
Brad Davidson 38ddda587a Properly handle operation as init process 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-09-28 11:33:45 -07:00
Manuel Buil 15f3a2ebfb Enable the inheritance of settings for ipv6 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-09-28 18:05:33 +02:00
dereknola 8c2f7ac41c Remove experimental from cluster commands 
Signed-off-by: dereknola <derek.nola@suse.com>
 2021-09-17 15:37:45 -07:00
Chris Kim acad8ef840
[release-1.21] Update Kubernetes to v1.21.5 (#4032) 
* Update to v1.21.5

Signed-off-by: Chris Kim <oats87g@gmail.com>
 2021-09-17 09:21:32 -07:00
Chris Kim 6acee2e2f5
No-op when etcd member was already removed and use existing name for etcd controller (#4015) 
Signed-off-by: Chris Kim <oats87g@gmail.com>
 2021-09-15 07:36:10 -07:00
Chris Kim 863512e055
Initial leader elected etcd member management controller (#4010) 
Signed-off-by: Chris Kim <oats87g@gmail.com>
 2021-09-14 10:19:42 -07:00
Brad Davidson 37caf87d6d Add exposed metrics listener instead of replacing loopback listener 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-09-10 10:03:49 -07:00
Brad Davidson a8a6edfb0d Add missing node name entry to apiserver SAN list 
Also honor node-ip when adding the node address to the SAN list, instead
of hardcoding the autodetected IP address.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-09-01 13:22:50 -07:00
Hussein Galal 659307d327
Fix condition for adding kubernetes endpoints (#3941) (#3946) 
* Fix condition for adding kubernetes endpoints

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Fix condition for adding kubernetes endpoints

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-08-31 19:37:42 +02:00
Brad Davidson 7cf85c235a Fix issue where addon checksum was never stored 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-08-27 10:26:38 -07:00
Hussein Galal 656c190629
Reset load balancer state during restoraion (#3878) 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Reset load balancer state during restoraion

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-08-18 18:59:03 +02:00
Malte Starostik e45726f610 Fix URL pruning when joining an etcd member 
* Fix URL pruning when joining an etcd member

Problem:
Existing member clientURLs were checked if they contain the joining
node's IP. In some edge cases this would prune valid URLs when the
joining IP is a substring match of the only existing member's IP.
Because of this, it was impossible to e.g. join 10.0.0.2 to an existing
node that has an IP of 10.0.0.2X or 10.0.0.2XX:

level=fatal msg="starting kubernetes: preparing server: start managed database:
joining etcd cluster: etcdclient: no available endpoints"

Solution:
Fixed by properly parsing the URLs and comparing the IPs for equality
instead of substring match.

Signed-off-by: Malte Starostik <info@stellaware.de>
(cherry picked from commit b23955e835)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-08-13 11:49:26 -07:00
Brian Downs 18bc38d838
account for an s3 folder when listing objects (#3807) (#3812) 
* account for an s3 folder when listing objects
 2021-08-09 17:35:14 -07:00
Hussein Galal 12ec437605
fix Node stuck at deletion (#3775) 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-08-05 23:23:34 +02:00
Hussein Galal cc694b1f09
Notify systemd for etcd only node (#3733) 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-07-30 00:41:52 +02:00
Derek Nola e6247d583c
[Backport 1.21] Cannot write data to local PVC (#3721) 
* Fix to allow non-root users access to storage volumes. (#3714)

* Fix to prevent non-root users from accessing storage directory, while allowing non-root users access to subdirectories.

Signed-off-by: dereknola <derek.nola@suse.com>
 2021-07-28 13:47:22 -07:00
galal-hussein 786f91b997 Fix multiple bootstrap keys found 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

migrate empty string key properly

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

simplifying the code

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

migrate old token key format

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

fix warning msg

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

replace error with warn in delete

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

more fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

more fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-07-21 22:54:25 +02:00
Derek Nola c15259d925
Fix to allow prune to correctly cleanup custom named snapshots (#3649) (#3672) 
Signed-off-by: dereknola <derek.nola@suse.com>
 2021-07-20 12:17:10 -07:00
Hussein Galal 9859ec7a81
[release-1.21] - Backport Fix storing bootstrap data with empty token string (#3514) 
* Fix storing bootstrap data with empty token string (#3422)

* Fix storing bootstrap data with empty token string

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* delete node password secret after restoration

fixes to bootstrap key

vendor update

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix comment

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix typo

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* more fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* typos

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Removing dynamic listener file after restoration

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* go mod tidy

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix a runtime core panic

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update kine

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Fix calling delete in kine

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-07-13 22:28:38 +02:00
Brad Davidson 5a88b5b3ea Emit events for AddOn lifecycle 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit a7d1159ba6)
 2021-07-12 12:12:11 -07:00
Brad Davidson ab0520f44e Add comments, clean up imports and function names 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit ea2cd6d727)
 2021-07-12 12:12:11 -07:00
Brad Davidson 411d7e6753 Tidy up function calls with many args 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6e48ca9b53)
 2021-07-12 12:12:11 -07:00
Brad Davidson ff0451c4dd Add nodename to UA string for deploy controller 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6ef000091a)
 2021-07-09 14:27:29 -07:00
Brian Downs c3d134a405
prevent snapshot save when snapshots are disabled (#3475) (#3610) 
* prevent snapshot save when snapshots are disabled
 2021-07-09 12:09:35 -07:00
Chris Kim 42ab13a869
Update etcd snapshot error message to be more informative when etcd database is not found (#3592) 
Signed-off-by: Chris Kim <oats87g@gmail.com>
 2021-07-08 15:01:05 -07:00
Derek Nola 0c5577a8ec
[Backport 1.21] Update embedded kube-router (#3557) (#3595) 
* Update embedded kube-router

Signed-off-by: dereknola <derek.nola@suse.com>
 2021-07-07 15:04:23 -07:00
Derek Nola 0c2d8376d0
Changes local storage pods to have 700 permissions (#3537) (#3548) 
* Changes local storage pods to have 700 permissions

Signed-off-by: dereknola <derek.nola@suse.com>
 2021-06-30 09:22:44 -07:00
Chris Kim 65e521140a
[Backport 1.21] Move cloud-controller-manager into an embedded executor (#3530) 
* Move cloud-controller-manager into an embedded executor
* Import K3s cloud provider and clean up imports

Signed-off-by: Chris Kim <oats87g@gmail.com>
 2021-06-29 07:28:55 -07:00
Brian Downs 3224f6b56d fix possible race where bootstrap data might not save 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-24 11:05:35 -07:00
Derek Nola c35761d169
Renamed client-cloud-controller crt and key (#3472) 
Signed-off-by: dereknola <derek.nola@suse.com>
 2021-06-16 14:55:43 -07:00
Brian Downs 8651d6af5f
Send systemd notifications for both server and agent (#3430) (#3460) 
* update agent to sent systemd notify after everything starts
 2021-06-15 12:16:15 -07:00
Brad Davidson eac48f69bc Add kubernetes.default.svc to serving certs 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-06-08 16:24:16 -07:00
Brian Downs 3db7f98853
Merge pull request #3354 from briandowns/backport_etcd_subcommands-1.21 
[ Backport 1.21 ] - etcd subcommands 1.21
 2021-06-08 10:23:20 -07:00
Derek Nola 16ae282c7a
Fix RBAC cloud-controller-manager name 3308 (#3388) (#3408) 
* Changed cloud-controller-manager user name in ccm.yaml
* Changed RBAC name in server.go and deps.go

Signed-off-by: dereknola <derek.nola@suse.com>
 2021-06-07 08:46:24 -07:00
Manuel Buil ff54d8c96d Add a path for wireguard's privatekey 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-06-04 09:00:35 +02:00
Brian Downs 8fd180e0d9 move object channel defer close to goroutine 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-05-19 14:49:48 -07:00
Brian Downs 69795277be add retention default and wire in s3 prune 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-05-19 14:49:44 -07:00