Commit Graph

3097 Commits (7f1b0c2b7906a885366fb17493bcb6bb12777d29)

Author SHA1 Message Date
Brad Davidson 7f1b0c2b79 Include flannel version in flannel cni plugin version
We were misreporting the flannel version as the flannel cni plugin version; restore the actual flannel version as build metadata

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6f331ea7b5)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Rishikesh Nair a40e0435fa Update contrib/util/check-config.sh
Co-authored-by: Brad Davidson <brad@oatmail.org>
Signed-off-by: Rishikesh Nair <42700059+rishinair11@users.noreply.github.com>
(cherry picked from commit 82cfacb2f3)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Rishikesh Nair 08eaf1861b Rename `RAW_OUTPUT` -> `NO_COLOR`
Also, if NO_COLOR is empty, output will be colored, otherwise not colored.

Signed-off-by: Rishikesh Nair <alienware505@gmail.com>
(cherry picked from commit ce0765c9f8)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Rishi ff81da4feb Disable color outputs using RAW_OUTPUT env var
Setting this environment variable will not wrap the text in color ANSI code, so that we can print a raw output.

Signed-off-by: Rishikesh Nair <alienware505@gmail.com>
(cherry picked from commit ff7cfa2235)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Vitor Savian 8202e9305e Fix wildcard with embbeded registry test
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 59c724f7a6)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Flavio Castelli ed5de70dd0 e2e tests: cover WebAssembly integration
Add a e2e test that runs some demo WebAssembly applications
using the dedicated containerd shims.

Note: this is not an integration test because we need to install some
binaries (the special containerd shims) on the host.

Signed-off-by: Flavio Castelli <fcastelli@suse.com>
(cherry picked from commit f82d438f39)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Flavio Castelli 0d777dcb2f fix: use correct wasm shims names
Fix the wasm shim detection and the containerd configuration generation.

Prior to this commit, the binary and the `RuntimeType` values were not
correct.

Signed-off-by: Flavio Castelli <fcastelli@suse.com>
(cherry picked from commit 64e4f0e6e7)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson f10b4afa73 Don't register embedded registry address as an upstream registry
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 091a5c8965)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson a0339c8d1f Remove filtering of wildcard mirror entry
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b5a4846e9d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson 6ceba8be08 Add env var to allow spegel mirroring of `latest` tag
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 84a071a81e)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Philip Laine 4e57230e08 Bump spegel to v0.0.18-k3s4
Signed-off-by: Philip Laine <philip.laine@gmail.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 26feb25c40)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson da998e09cb Use and version flannel/cni-plugin properly
Moves us closer to using the proper upstream for our flannel CNI plugin, instead of the snapshot that is vendored into our plugins fork.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 88d30f940d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson 1e022f5986 Move snapshot-retention to EtcdSnapshotFlags in order to support loading from config
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0b3593205a)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson ea81098e29 Clean up snapshotDir create/exists logic
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3576ed4327)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson 357be4aa02 Fix additional corner cases in registries handling
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b164d7a270)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson 2ae8aa48aa Bump helm-controller/klipper-helm versions
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 109e3e454c)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson 45d36a0886 Fix issue with etcd node name missing hostname
* Set ServerNodeName in snapshot CLI setup
* Raise errer if ServerNodeName ends up empty some other way
* Fix status controller to use etcd node name annotation instead of prefix checking

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 82432a2df7)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson 853473c180 Tweak netpol node wait logs
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 513c3416e7)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson 5ff3108ef1 Fix NodeHosts on dual-stack clusters
* Add both dual-stack addresses to the node hosts file
* Add hostname to hosts file as alias for node name to ensure consistent resolution

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit be569f65a9)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Edgar Lee 6f5c3f8995 Rootless mode also bind service nodePort to host for LoadBalancer type
Signed-off-by: Edgar Lee <edgarhinshunlee@gmail.com>
(cherry picked from commit 8c83b5e0f3)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Manuel Buil 0726758c6c Improve tailscale e2e test
Signed-off-by: Manuel Buil <mbuil@suse.com>
2024-03-06 13:06:13 +01:00
Roberto Bonafiglia 1f44f83627 Adjust first node-ip based on configured clusterCIDR
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
2024-03-06 11:11:38 +01:00
Derek Nola 29de58c778
[Release-1.28] chore(deps): Remediating CVE-2023-45142 CVE-2023-48795 (#9647)
Signed-off-by: Tal Yitzhak <taly@lightrun.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Tal Yitzhak <yitzhtal@gmail.com>
Co-authored-by: Tal Yitzhak <taly@lightrun.com>
2024-03-05 14:59:00 -08:00
Manuel Buil 9894592e2f Update klipper-lb image version
Signed-off-by: Manuel Buil <mbuil@suse.com>
2024-03-05 19:45:06 +01:00
Derek Nola 33fe9bea0e Fix setup-go typos (#9634)
* Fix setup-go typos

Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-04 14:44:05 -08:00
Derek Nola f92bce4769 Reenable Install and Snapshotter Testing (#9601)
* Use regular ubuntu runners for install and snapshotter tests
* Workaround for vagrant box caching
* Update testing readme
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-04 14:44:05 -08:00
Derek Nola d8cb9d8796 Better GitHub CI caching strategy for golang (#9495)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-04 14:44:05 -08:00
Derek Nola 15c13739b8 Update install test OS matrix (#9480)
* Remove old cgroupsv2 test
* Consolidate install test clauses into functions
* Unpin vagrant-k3s plugin version, run latest
* Add ubuntu-2204 as install test, remove ubuntu-focal
* Update nightly install matrix
* Move to Leap 15.5
* Consolidate vagrant box caching key to improve cache hits on all VM testing

Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-04 14:44:05 -08:00
Derek Nola dfb7625f6e Unit Testing Matrix and Actions bump (#9479)
cache is now on by default

Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-04 14:44:05 -08:00
Manuel Buil e4fc6743bf Add an integration test for flannel-backend=none
Signed-off-by: Manuel Buil <mbuil@suse.com>
2024-03-04 11:53:21 +01:00
Brad Davidson 051b14b248 Fix netpol startup when flannel is disabled
Don't break out of the poll loop if we can't get the node, RBAC might not be ready yet.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-26 17:40:44 -08:00
Brad Davidson 4c1b91e3f9 Use 3/2/1 cluster for split role test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-21 13:26:08 -08:00
Derek Nola 16ad3bc39c Change default number of etcd nodes in E2E splitserver test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-02-21 13:26:08 -08:00
Derek Nola 9c0e5a5ff8 Rename AgentReady to ContainerRuntimeReady for better clarity
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-02-21 13:26:08 -08:00
Derek Nola 80baec697f Restore original order of agent startup functions
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-02-21 13:26:08 -08:00
Brooks Newberry f19db855bf
remove e2e logs drone step (#9516)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
2024-02-16 06:32:48 -08:00
Derek Nola 25e12bc10c
[Release-1.28] Fix drone publish for arm (#9508)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-02-15 17:26:07 -08:00
Brooks Newberry 9f78e474d7
Update Kubernetes to v1.28.7 (#9492)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
2024-02-15 13:15:00 -08:00
Derek Nola 1ca64a81be
[Release-1.28] Support PR testing installs (#9469)
* Upload sha256sum artifact for k3s binary during GH Actions build
* Trigger integration test on changes to build-k3s workflow

Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-02-12 12:56:28 -08:00
Derek Nola 45860105bb
[Release-1.28] Test_UnitApplyContainerdQoSClassConfigFileIfPresent (#9440)
* [Testing]: Test_UnitApplyContainerdQoSClassConfigFileIfPresent (Created) (#8945)

Problem:
Function not tested.

Solution:
Unit test added.

Signed-off-by: Oliver Larsson <larsson.e.oliver@gmail.com>
---------

Signed-off-by: Oliver Larsson <larsson.e.oliver@gmail.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Oliver Larsson <larsson.e.oliver@gmail.com>
2024-02-12 09:33:32 -08:00
Derek Nola 78543f4850
[Release-1.28] Enable longer http timeout requests (#9444)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-02-12 09:31:47 -08:00
Brad Davidson 3d0674ad1c Bump kine and set NotifyInterval to what the apiserver expects
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit de825845b2)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-10 00:49:18 -08:00
Edgar Lee a3770d21e2 Expose rootless containerd socket directories for external access
Signed-off-by: Edgar Lee <edgarhinshunlee@gmail.com>
(cherry picked from commit 0ac4c6a056)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-10 00:49:18 -08:00
Edgar Lee 0259b8e535 Expose rootless state dir under ~/.rancher/k3s/rootless
Signed-off-by: Edgar Lee <edgarhinshunlee@gmail.com>
(cherry picked from commit 14c6c63b30)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-10 00:49:18 -08:00
Oleg Matskiv 865b454a05 Don't verify the node password if the local host is not running an agent
Signed-off-by: Oleg Matskiv <oleg.matskiv@gmail.com>
(cherry picked from commit e3b237fc35)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-10 00:49:18 -08:00
Brad Davidson 493ebb9517 Fix ipv6 endpoint address selection for on-demand snapshots
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 8224a3a7f6)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-10 00:49:18 -08:00
Brad Davidson cd7c557754 Fix issue with coredns node hosts controller
The nodes controller was reading from the configmaps cache, but doesn't add any handlers, so if no other controller added configmap handlers, the cache would remain empty.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 888f866dae)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-10 00:49:18 -08:00
Brad Davidson 3d46c7da70 Bump CNI plugins to v1.4.0
Ref: https://github.com/rancher/plugins/compare/v1.3.0-k3s1...v1.4.0-k3s2

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 77ba9904d1)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-10 00:49:18 -08:00
Brad Davidson b620348998 Add check for etcd-snapshot-dir and fix panic in Walk
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6ec1926f88)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-10 00:49:18 -08:00
Brad Davidson 6b2c1ecb0f Retry startup snapshot reconcile
The reconcile may run before the kubelet has created the node object; retry until it succeeds

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 82e3c32c9f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-10 00:49:18 -08:00