86be784aa0
Replace deprecated k8s registry references.
...
Problem:
Previously all of Kubernetes' image hosting has been out of gcr.io. There were significant egress costs associated with this when images were pulled from entities outside gcp. Refer to https://github.com/kubernetes/k8s.io/wiki/New-Registry-url-for-Kubernetes-(registry.k8s.io)
Solution:
As highlighted at KubeCon NA 2022 k8s infra SIG update, the replacement for k8s.gcr.io which is registry.k8s.io is now ready for mainstream use and the old k8s.gcr.io has been formally deprecated. This commit migrates all references for k3s to registry.k8s.io.
Signed-off-by: James Blair <mail@jamesblair.net>
2022-11-01 16:06:50 -07:00
cb86d2c1f0
Bump traefik to v2.9.4 / chart v18.3.0
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-01 16:05:45 -07:00
43709420a3
Remove vagrant dev env ( #6395 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-11-01 14:47:10 -07:00
d3c675f4e9
Expand nightly E2E tests ( #6354 )
...
Signed-off-by: Shylaja Devadiga <shylaja@rancher.com>
2022-10-31 11:02:44 -07:00
ce5dfdfae0
Merge pull request #6359 from manuelbuil/externalTest
...
Add test for node-external-ip config parameter
2022-10-31 07:35:24 +01:00
dbc7c72416
Disable optimizations and symbol stripping on debug builds ( #6147 )
...
Signed-off-by: Silvio Moioli <silvio@moioli.net>
Co-authored-by: Brad Davidson <brad@oatmail.org>
2022-10-28 09:17:49 -07:00
abaa6c9023
Add test for node-external-ip config parameter
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-28 15:08:50 +02:00
6156059136
Convert containerd config.toml.tmpl Linux template to v2 syntax
...
Signed-off-by: Petri Kivikangas <36138+Kitanotori@users.noreply.github.com>
2022-10-27 16:55:03 -07:00
9a9f1f2d5e
Replace fedora-coreos with fedora 36 for install tests ( #6315 )
...
* Move to fedora 36 on install tests
Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-27 08:11:57 -07:00
44b12c02f2
Merge pull request #6345 from manuelbuil/updateKubeRouter151
...
Update kube-router and add extra logging
2022-10-27 11:03:24 +02:00
1f96f27cdf
Merge pull request #6247 from manuelbuil/netpolTest
...
Netpol test for podSelector & ingress
2022-10-27 09:32:07 +02:00
76729d813b
Set default kubeletPort
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 15:08:13 -07:00
269563e4d2
Check for RBAC before starting tunnel controllers
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 15:08:13 -07:00
68a56ff8d8
Add GVK lookup to deploy controller
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 15:08:13 -07:00
8d28a38a18
Update helm-controller to pull in refactor
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 15:03:13 -07:00
647c1ab7e7
mark v1.25.3+k3s1 as stable ( #6338 )
...
* mark v1.24.7+k3s1 as stable
* Update channel.yaml
2022-10-26 16:03:54 -05:00
16a8b6d6f1
Bump Traefik helm chart to v18.0.0
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:38:13 -07:00
02bd026dda
Add new tests to test list
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:33:18 -07:00
eb24f8f81c
Add upgrade test
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:33:18 -07:00
3b0c6ff320
Add hardened cluster test
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:33:18 -07:00
4d3912a0f8
Fix flakey traefik upgrade in etcd test
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:33:18 -07:00
f96d86f077
Bump test framework versions and add hooks to helpers
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:33:18 -07:00
31539b7937
Bump kine to v0.9.6
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:30:54 -07:00
c0c9fa2954
Bump all alpine images to 3.16 ( #6334 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-26 09:31:09 -07:00
487d08ad11
Add a netpol test for podSelector & ingress type
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-26 17:52:28 +02:00
18688407d9
Add info on libvirt ubuntu 22.04 ( #6316 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-26 08:40:02 -07:00
fd79a1cfea
Bump testing to opensuse Leap 15.4 ( #6337 )
...
* Bump to Leap 15.4 for testing
Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-26 08:38:18 -07:00
ffdf96fd22
Update maintainers ( #6298 )
...
s/Kathy/Caroline/
Signed-off-by: Chris Wayne <cwayne18@gmail.com>
2022-10-26 10:04:51 -04:00
fbba3ba88f
Update kube-router
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-26 12:21:13 +02:00
5063821ec4
Merge pull request #6292 from manuelbuil/netplan-ubuntu-gw
...
Add the gateway parameter in netplan
2022-10-26 12:02:23 +02:00
a05320dbf0
Bump dynamiclistener
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-25 13:28:43 -07:00
f2585c1671
Add --flannel-external-ip flag
...
Using the node external IP address for all CNI traffic is a breaking change from previous versions; we should make it an opt-in for distributed clusters instead of default behavior.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-24 10:10:49 -07:00
e8c250b8dc
Fix RBAC to allow removal of legacy finalizer
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-20 16:12:28 -07:00
6b804fe224
Add the gateway parameter in netplan
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-18 13:14:10 +02:00
3c0cd6f2dc
Return ProviderID in URI format
...
The InstancesV1 interface handled this for us by combining the ProviderName and InstanceID values; the new interface requires us to do it manually
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-17 11:05:09 -07:00
64403978cd
Update to v1.25.3-k3s1 ( #6269 )
...
Signed-off-by: matttrach <matttrach@gmail.com>
2022-10-13 19:26:57 -05:00
f25419ca2c
Add ServiceAccount for svclb pods
...
For 1.24 and earlier, the svclb pods need a ServiceAccount so that we can allow their sysctls in PSPs
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-10 17:40:39 -07:00
8016ae2b69
Merge pull request #6245 from manuelbuil/fix_dS_test
...
Fix dualStack test
2022-10-10 17:26:24 +02:00
dd3f3dba92
Fix dualStack test
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-10 10:52:30 +02:00
06d81cb936
Replace deprecated ioutil package ( #6230 )
...
* Replace ioutil package
* check integration test null pointer
* Remove rotate retries
Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-07 17:36:57 -07:00
d650645944
Fix flakey etcd test
...
Taint the first node so that the helm job doesn't run on it. In a real cluster the helm job would eventually succeed once all the servers were upgraded and had the new chart tarball.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:55:16 -07:00
934d013614
Merge pull request #6220 from jongwooo/chore/use-setup-go-action-to-cache-dependencies
...
Use setup-go action to cache dependencies
2022-10-07 10:54:39 -07:00
3b4bbcaec5
Merge pull request #6224 from dereknola/journalctl_e2e
...
Add journalctl logs to E2E tests
2022-10-07 09:24:22 -07:00
00cbb7ed21
Fix helm job failure on multi-server tests
...
Replace ETCD-JOIN-STABLE-SECOND with ETCD-JOIN-LATEST-FIRST. We don't
support joining down-level servers to existing clusters, as the new
down-level server will try to deploy older versions of the packaged
manifests.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-06 16:20:21 -07:00
25e83cfa4f
Bump traefik to 2.9.1 / chart 12.0.0
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-06 16:20:21 -07:00
307d4310a3
Add journalctl logs to E2E tests
...
Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-06 12:27:44 -07:00
0fd84deb11
Use setup-go action to cache dependencies
...
Signed-off-by: jongwooo <han980817@gmail.com>
2022-10-07 02:51:03 +09:00
b44d81a6f3
Fix the typo in the test
...
CA cert will never be equal to the serving-kube-apiserver cert so it seems like a copy-paste error.
Signed-off-by: Vladimir Pouzanov <farcaller@gmail.com>
2022-10-05 21:25:02 -07:00
b411864be5
Handle custom kubelet port in agent tunnel
...
The kubelet port can be overridden by users; we shouldn't assume its always 10250
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-05 21:10:38 -07:00
11072e2516
Fix occasional "TLS handshake error" in apiserver network proxy.
...
We should be reading from the hijacked bufio.ReaderWriter instead of
directly from the net.Conn. There is a race condition where the
underlying http handler may consume bytes from the hijacked request
stream, if it comes in the same packet as the CONNECT header. These
bytes are left in the buffered reader, which we were not using. This was
causing us to occasionally drop a few bytes from the start of the
tunneled connection's client data stream.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-05 21:10:38 -07:00
James Blair