Erik Wilson
8725798578
Merge pull request #1464 from erikwilson/selinux-update
...
Simplify SELinux detection and add --disable-selinux flag
5 years ago
Erik Wilson
a3cb9ee1f6
Simplify SELinux detection and add --disable-selinux flag
5 years ago
Erik Wilson
0aeea78060
Merge pull request #1444 from KnicKnic/k3s_build_windows
...
K3s build windows (no agents)
5 years ago
Darren Shepherd
4d32fe9959
Support SELinux
5 years ago
Erik Wilson
4210800648
Merge pull request #1343 from ibuildthecloud/rootless
...
Create pidns for rootless
5 years ago
Knic Knic
c2db115ec3
fix formatting
5 years ago
Knic Knic
2346ccc63f
get build on windows and get api_server to work
5 years ago
Knic Knic
522e08872a
do not rename inuse files
5 years ago
Erik Wilson
fe45eb008a
Merge pull request #1416 from erikwilson/device-plugins-path
...
Use default kubelet device-plugins path
5 years ago
galal-hussein
d49ef31767
Inject node config on startup
5 years ago
Erik Wilson
b15c4473cd
Use default kubelet device-plugins path
5 years ago
Darren Shepherd
782004bec9
Create pidns for rootless
5 years ago
Erik Wilson
0374c4f63d
Add --disable flag
5 years ago
Erik Wilson
3592d0bdd9
Merge pull request #1344 from ibuildthecloud/dialer-fallback
...
If tunnel session does not exist fallback to default dialer
5 years ago
Erik Wilson
1a2690d7be
Merge pull request #1192 from galal-hussein/add_encryption_config
...
Add secret encryption config
5 years ago
Darren Shepherd
bf57a7f419
Don't start node controller if coredns is not deployed
5 years ago
Darren Shepherd
3396a7b099
If tunnel session does not exist fallback to default dialer
5 years ago
Erik Wilson
1b23c891dd
Merge pull request #1304 from erikwilson/fixup-cadvisor
...
Run kubelet with containerd flag
5 years ago
Erik Wilson
4cacffd7e6
Merge pull request #1298 from erikwilson/warn-npc-fail
...
Warn if NPC can't start rather than fatal error
5 years ago
Erik Wilson
fa03a0df3c
Run kubelet with containerd flag
...
The containerd flag was accidentally added to kubelet and is
deprecated, but needed for cadvisor to properly connect with
the k3s containerd socket, so adding for now.
5 years ago
Erik Wilson
5b98d10e4b
Warn if NPC can't start rather than fatal error
...
If the ip_set kernel module is not available we should warn
that the network policy controller can not start rather than
cause a fatal error.
Also adds module probing and config checks for ip_set.
5 years ago
Erik Wilson
7675f9f85c
Clean up host-gw variable names
5 years ago
Segator
c23f12765e
hostgw flannel support
5 years ago
Segator
6736e24673
support hostgw
5 years ago
Erik Wilson
9421746ccf
Merge pull request #1235 from ibuildthecloud/master
...
Fix uint64 truncation issue in dqlite
5 years ago
galal-hussein
388cd9c4e8
Add secret encryption configuration
5 years ago
Darren Shepherd
9bda58c81a
Fix uint64 truncation issue in dqlite
5 years ago
galal-hussein
07d4c1510d
Add lease permissions to ccm cluster role
5 years ago
Erik Wilson
5c37454762
Merge pull request #1198 from narqo/tunel-addr-join-host-port
...
Respect IPv6 when building proxy address
5 years ago
Erik Wilson
9b2538c2c4
Set wireguard persistent-keepalive on wg set peer
5 years ago
Erik Wilson
3376f31fc2
Revert "Merge pull request #1190 from erikwilson/wireguard-keepalive"
...
This reverts commit e712cdf7e8
, reversing
changes made to d5929bc8c8
.
Wireguard docs fail to describe that persistent-keepalive is only valid
when peer is set.
5 years ago
Vladimir Varankin
0c5299c951
pkg/agent/tunnel: respect ipv6 when building proxy addresses
5 years ago
Erik Wilson
6875b11dd2
Fix identity_token -> identitytoken for containerd toml
5 years ago
Darren Shepherd
4acaa0740d
Small dqlite fixes
5 years ago
Erik Wilson
97383868bd
Merge pull request #1186 from erikwilson/upgrade-k8s-1.17.0
...
Upgrade k8s to v1.17.0
5 years ago
Erik Wilson
e712cdf7e8
Merge pull request #1190 from erikwilson/wireguard-keepalive
...
Set Wireguard keepalive to 25 seconds
5 years ago
Erik Wilson
5679a8bd2f
Update generated
5 years ago
Erik Wilson
76281bf731
Update k3s for k8s 1.17.0
5 years ago
Erik Wilson
814c302d7c
Merge pull request #955 from btashton/servicelb-sysctl
...
Enable ip forwarding on both all and default net config
5 years ago
Erik Wilson
7b62811f98
Set Wireguard keepalive to 25 seconds
5 years ago
Erik Wilson
d4959d53af
Merge pull request #1182 from erikwilson/docker-pause-image
...
Allow --pause-image to set docker sandbox image also
5 years ago
Erik Wilson
2eacfa75cb
Merge pull request #1180 from erikwilson/cleanup-flannel-backend-help-text
...
Cleanup --flannel-backend help text
5 years ago
Erik Wilson
56b0743653
Merge pull request #1171 from dweomer/mutable-labels
...
Mutable --node-label values for server/agent sub-commands.
5 years ago
Erik Wilson
c2be59e5f3
Allow udp protocol for service-lb ports
...
For #577
5 years ago
Brennan Ashton
a952d5c32a
Default device net config enables ip forwarding
...
The Linux kernel is inconsistent about how devconf is configured for new
network namespaces between ipv4 and ipv6. The behavior can also be
controlled via net.core.devconf_inherit_init_net in Linux 5.1+ so make
sure to enable forwarding on all and default for both ipv6 and ipv4.
This issue first came up testing on a yocto kernel that had this patch:
ipv4: net namespace does not inherit network configurations
[0] https://www.kernel.org/doc/html/latest/admin-guide/sysctl/net.html#devconf-inherit-init-net
[1] https://lkml.org/lkml/2014/7/29/119
Signed-off-by: Brennan Ashton <brennana@jfrog.com>
5 years ago
Erik Wilson
2de93d70cf
Allow --pause-image to set docker sandbox image also
5 years ago
Erik Wilson
11e4d01efe
Cleanup --flannel-backend help text
5 years ago
Jacob Blain Christen
063efb25bb
Mutable --node-label values for server/agent sub-commands.
...
Values passed in via the server/agent `--node-label` flag are treated as mutable. They are passed through to the kubelet just as before but after the kubelet comes up they are applied again. This allows for passing labels a k3s start-time that may be necessary for scheduling but may change from boot to boot, e.g. `k3os.io/version` after an upgrade.
Tested locallon on my amd64 workstation with the docker container.
Addresses #1119 .
5 years ago
yuzhiquan
24869ddf21
remove []byte trans, handle func error
5 years ago
yuzhiquan
7cc0110081
fix typo
5 years ago