ddea433411
[Release-1.30] Backport E2E GHA fixes ( #11227 )
...
* Fix Github Actions for Ubuntu-24.04 (#11112 )
* Fix vagrant/libvirt composite action for ubuntu-24.04
* Don't ignore changes to internal actions
* Fix unit tests for ubuntu 24.04, new lsof version
* Pin os version for unit and E2E workflows
Signed-off-by: Derek Nola <derek.nola@suse.com>
* Pin vagrant to older version to avoid known issue 13527
Signed-off-by: Derek Nola <derek.nola@suse.com>
---------
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-11-05 08:36:52 -08:00
1829eaae52
Update to v1.30.6 ( #11162 )
...
Signed-off-by: Brooks Newberry <brooks@newberry.com>
2024-10-23 15:29:49 -07:00
8e1701dfa8
Unlink existing CNI bin symlinks
...
Fixes "file exists" error when upgrading k3s.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-21 10:58:53 -07:00
5ec454f50e
[Release-1.30] Revert "Make svclb as simple as possible" ( #11113 )
...
* Revert "Make svclb as simple as possible"
This reverts commit 1befd65a0a
2024-10-15 22:35:33 -07:00
29fd916cc9
Add the nvidia runtime cdi
...
Signed-off-by: manuelbuil <mbuil@suse.com>
2024-10-12 07:37:48 +02:00
e9bb624c92
Make svclb as simple as possible
...
Signed-off-by: manuelbuil <mbuil@suse.com>
2024-10-11 15:51:01 +02:00
5391ad736a
Bump containerd to v1.7.22
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 16:07:04 -07:00
737f5946c0
Allow additional Rootless CopyUpDirs through K3S_ROOTLESS_COPYUPDIRS env variable ( #11044 )
...
Signed-off-by: Ludo Stellingwerff <ludo.stellingwerff@gmail.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Ludo Stellingwerff <ludo@almende.org>
2024-10-10 13:13:40 -07:00
7b084d4c12
Bump helm-controller and klipper-helm
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7552203fc5
2024-10-10 11:40:39 -07:00
53369c52fb
Bump local-path-provisioner to v0.0.30
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b0ad6d846d
2024-10-10 11:40:39 -07:00
51a609bf22
chore: Bump Local Path Provisioner version
...
Made with ❤️ ️ by updatecli
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c00af8e95e
2024-10-10 11:40:39 -07:00
72b0eb5f5a
Update tcpproxy for import path change
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 1ae9ca73f5
2024-10-10 11:40:39 -07:00
6131cd9abf
Fix issue that caused passwd file and psk to be regenerated when rotating CA certs
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c6392c9ffc
2024-10-10 11:40:39 -07:00
ddba4cd801
Add ca-cert rotation integration test
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b1a42e5d43
2024-10-10 11:40:39 -07:00
97df5ce8d2
Fix race condition when multiple nodes reconcile S3 snapshots
...
Don't delete s3 etcdsnapshotfiles if they are missing from s3 but less than a minute old, its possible the other node just finished uploading it and the object key has not yet become visible.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0826ebc142
2024-10-10 11:40:39 -07:00
cc4e044bb6
Fix sqlite endpoint when migrating from sqlite to etcd
...
Support for 'sqlite' as the endpoint was removed in
https://github.com/k3s-io/kine/pull/320 and the constant removed in
https://github.com/k3s-io/kine/pull/325
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0942e6a0c5
2024-10-10 11:40:39 -07:00
f35165d434
Bump kine
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c9e7b05971
2024-10-10 11:40:39 -07:00
b0f98b28e5
Bump traefik to chart 27.0.2 / appVersion v2.11.10
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6c6d87d1b0
2024-10-10 11:40:39 -07:00
ad4145b1bf
Bump kine to v0.13.0
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit cda31ebd67
2024-10-10 11:40:39 -07:00
b91b8371bc
Use static CNI bin dir
...
Maintain a separate dir for CNI binaries so that additional plugins can be installed in a predictable location that does not change every time k3s is upgraded.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit ed14f7f863
2024-10-10 11:40:39 -07:00
e73db99a88
Launch private registry with init so the container can be killed on cleanup ( #11047 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-10-10 08:52:43 -07:00
0019d61a58
Add e2e test for advanced fields in services
...
Signed-off-by: manuelbuil <mbuil@suse.com>
2024-10-10 10:30:26 +02:00
0a2b383a32
Add user path to runtimes search
...
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
2024-10-08 13:19:18 -03:00
647fc892db
Bump Wharfie to v0.6.7 ( #10975 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-10-03 12:08:01 -07:00
7f90785abe
Add int test for flannel-ipv6masq
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
2024-09-26 14:48:28 +02:00
9b586704a2
[release-1.30] Update Kubernetes to v1.30.5-k3s2 ( #10909 )
...
Signed-off-by: Brooks Newberry <brooks@newberry.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Brad Davidson <brad@oatmail.org>
2024-09-17 14:40:20 -07:00
dbbb73e020
Update to v1.30.5 ( #10888 )
2024-09-13 12:12:36 -07:00
ca84f13846
Fix hosts.toml header var
...
Resolves issue from 270f85e468
2024-09-10 15:00:04 -07:00
9e06189a7c
Only clean up containerd hosts dirs managed by k3s
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 270f85e468
2024-09-06 11:30:23 -07:00
507f728491
Fix rotateca validation failures when not touching default self-signed CAs
...
Also silences warnings about bootstrap fields that are not intended to be handled by CA rotation
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit fe3324cb84
2024-09-06 11:30:23 -07:00
3ed73a0efe
Bump helm-controller for skip-verify/plain-http and updated tolerations
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 662799feec
2024-09-06 11:30:23 -07:00
5bcd734677
Bump containerd to v1.7.21, runc to v1.1.14
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d746073bd0
2024-09-06 11:30:23 -07:00
f65b540eec
Update coredns to 1.11.3 and metrics-server to 0.7.2
...
Used https://github.com/coredns/corefile-migration to
migrate the corefile. There are no changes for the
default file from 1.10.1 to 1.11.3.
Notable plugin changes include the k8s_external with fallthrough option
and rewrite with cname_target option.
These changes are not part of the default config that ships
with k3s. Customers using these two plugins can start using the new options
Metrics does not have any new features other than build tooling updates.
Requires https://github.com/rancher/image-mirror/pull/704
Signed-off-by: Harsimran Singh Maan <maan.harry@gmail.com>
(cherry picked from commit 0b4d2497e5
2024-09-06 11:30:23 -07:00
2989a7d430
Bump traefik to v2.11.8
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit bd45aa5c45
2024-09-06 11:30:23 -07:00
0c3a384148
Tag PR image build as latest before scanning
...
This is less effort than passing the tag across steps 🤷♂️
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 378edb939d
2024-09-06 11:30:23 -07:00
dd12197379
Fix /trivy action running against target branch instead of PR branch
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3d6e4a793a
2024-09-06 11:30:23 -07:00
925e95efe4
Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 ( #10795 )
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.20.0 to 0.24.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.20.0...0.24.0 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit dacc636cf4
2024-09-06 11:30:23 -07:00
05dcd7f325
Add trivy scanning trigger for PRs ( #10758 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com>
(cherry picked from commit fa6940d03d
2024-09-06 11:30:23 -07:00
ae5e25f531
Update CNI plugins version
...
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
2024-09-04 16:47:21 -07:00
01faf4ed39
Cover edge case when on new minor release for E2E upgrade test ( #10781 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-09-04 11:50:40 -07:00
e562d883d6
Remove secrets encryption controller ( #10612 )
...
* Remove secrets encryption controller
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-09-04 11:50:40 -07:00
14e11631ca
Fix secrets-encrypt metrics
...
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-09-04 11:50:40 -07:00
6f099943fc
Fix caching name for e2e vagrant box ( #10695 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-09-04 11:50:40 -07:00
6f91699a69
Update to newer OS images for install testing ( #10681 )
...
* Update to newer OS images for install testing
* Update vagrant images used for E2E
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-09-04 11:50:40 -07:00
98262b5dee
Update to v1.30.4 ( #10721 )
2024-08-15 15:01:04 -07:00
a125b7f623
Add tolerations support for DaemonSet pods
...
Signed-off-by: Alireza Eskandari <alireza.eskandari@wsd.com>
(cherry picked from commit 22fb7049bd
2024-08-12 17:09:45 -07:00
b11486d3cd
Bump containerd to v1.7.20 ( #10660 )
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-08-06 08:52:01 -07:00
6965b5d1a9
Allow Pprof and Superisor metrics in standalone mode ( #10576 )
...
* Allow pprof to run on server with `--disable-agent`
* Allow supervisor metrics to run on server with `--disable-agent`
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-08-06 08:51:16 -07:00
cebd9dcc2d
Use higher QPS for secrets reencryption ( #10571 )
...
* Use higher QPS for secrets reencryption
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-08-06 08:51:16 -07:00
60b2f5ab16
Enhance E2E Hardened option ( #10558 )
...
* Remove unnecessary hardened arguments
Signed-off-by: Derek Nola <derek.nola@suse.com>
* slim down hardened arguments
Signed-off-by: Derek Nola <derek.nola@suse.com>
---------
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-08-06 08:51:16 -07:00
Derek Nola