Commit Graph

3311 Commits (8c6d5a17e01ce77ef57df7af0f78cf2c76d81746)

Author SHA1 Message Date
Brad Davidson 8c6d5a17e0 Fix issues with defragment and alarm clear on etcd startup
* Use clientv3.NewCtxClient instead of New to avoid automatic retry of all RPCs
* Only timeout status requests; allow defrag and alarm clear requests to run to completion.
* Only clear alarms on the local cluster member, not ALL cluster members

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 095e34d816)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-11-06 13:18:20 -08:00
Brad Davidson 3a5fa71914 Bump etcd to v3.5.16-k3s1
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e34fe0343f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-11-06 13:18:20 -08:00
Derek Nola 008981138b
[Release-1.29] Backport E2E GHA fixes (#11229)
* Fix Github Actions for Ubuntu-24.04 (#11112)

* Fix vagrant/libvirt composite action for ubuntu-24.04

* Don't ignore changes to internal actions

* Fix unit tests for ubuntu 24.04, new lsof version

* Pin os version for unit and E2E workflows

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Pin vagrant to older version to avoid known issue 13527

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-11-04 20:26:42 -08:00
Brooks Newberry ae4df3117e
Update to v1.29.10 (#11160)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
2024-10-23 15:30:07 -07:00
Brad Davidson 1aa204be5b Unlink existing CNI bin symlinks
Fixes "file exists" error when upgrading k3s.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-21 10:58:59 -07:00
Derek Nola 9510ac25fe
[Release-1.29] Revert "Make svclb as simple as possible" (#11114)
* Revert "Make svclb as simple as possible"

This reverts commit 1befd65a0a.

Signed-off-by: manuelbuil <mbuil@suse.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Pin E2E tests to 22.04

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: manuelbuil <mbuil@suse.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: manuelbuil <mbuil@suse.com>
2024-10-15 22:35:21 -07:00
manuelbuil 6cbbd27367 Add the nvidia runtime cdi
Signed-off-by: manuelbuil <mbuil@suse.com>
2024-10-12 07:38:46 +02:00
manuelbuil 56a9685011 Make svclb as simple as possible
Signed-off-by: manuelbuil <mbuil@suse.com>
2024-10-11 15:50:52 +02:00
Brad Davidson ab5ecb38ef Bump containerd to v1.7.22
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 19:07:54 -07:00
Derek Nola 74ce150ee7
Allow additional Rootless CopyUpDirs through K3S_ROOTLESS_COPYUPDIRS env variable (#11043)
Signed-off-by: Ludo Stellingwerff <ludo.stellingwerff@gmail.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Ludo Stellingwerff <ludo@almende.org>
2024-10-10 13:13:48 -07:00
Brad Davidson 7ed28c08cb Bump helm-controller and klipper-helm
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7552203fc5)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 11:40:54 -07:00
Brad Davidson ddaa77f95a Bump local-path-provisioner to v0.0.30
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b0ad6d846d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 11:40:54 -07:00
github-actions[bot] a662f1d4b7 chore: Bump Local Path Provisioner version
Made with ❤️️ by updatecli

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c00af8e95e)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 11:40:54 -07:00
Brad Davidson bc636088eb Update tcpproxy for import path change
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 1ae9ca73f5)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 11:40:54 -07:00
Brad Davidson 36cc03671d Fix issue that caused passwd file and psk to be regenerated when rotating CA certs
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c6392c9ffc)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 11:40:54 -07:00
Brad Davidson 11c49f0c0b Add ca-cert rotation integration test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b1a42e5d43)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 11:40:54 -07:00
Brad Davidson 12b9e7d4b1 Fix race condition when multiple nodes reconcile S3 snapshots
Don't delete s3 etcdsnapshotfiles if they are missing from s3 but less than a minute old, its possible the other node just finished uploading it and the object key has not yet become visible.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0826ebc142)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 11:40:54 -07:00
Brad Davidson 4d0a6134a0 Fix sqlite endpoint when migrating from sqlite to etcd
Support for 'sqlite' as the endpoint was removed in
https://github.com/k3s-io/kine/pull/320 and the constant removed in
https://github.com/k3s-io/kine/pull/325

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0942e6a0c5)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 11:40:54 -07:00
Brad Davidson f8d6f06e10 Bump kine
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c9e7b05971)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 11:40:54 -07:00
Brad Davidson 7cdd4db2e7 Bump traefik to chart 27.0.2 / appVersion v2.11.10
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6c6d87d1b0)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 11:40:54 -07:00
Brad Davidson de484a04cc Bump kine to v0.13.0
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit cda31ebd67)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 11:40:54 -07:00
Brad Davidson 450a123840 Use static CNI bin dir
Maintain a separate dir for CNI binaries so that additional plugins can be installed in a predictable location that does not change every time k3s is upgraded.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit ed14f7f863)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-10-10 11:40:54 -07:00
Derek Nola 8b9c6bc337
Launch private registry with init so the container can be killed on cleanup (#11046)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-10-10 08:53:05 -07:00
manuelbuil a91257acf5 Add e2e test for advanced fields in services
Signed-off-by: manuelbuil <mbuil@suse.com>
2024-10-10 10:30:19 +02:00
Vitor Savian 9624098a4e Add user path to runtimes search
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
2024-10-08 13:19:28 -03:00
Derek Nola 9de27e958a
Bump Wharfie to v0.6.7 (#10976)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-10-03 10:23:33 -07:00
Manuel Buil d44888d0d4 Add int test for flannel-ipv6masq
Signed-off-by: Manuel Buil <mbuil@suse.com>
2024-09-26 14:48:42 +02:00
Brooks Newberry e92d3b3ba7
[release-1.29] Update Kubernetes to v1.29.9-k3s2 (#10908)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Brad Davidson <brad@oatmail.org>
2024-09-17 14:40:08 -07:00
Brian Downs f8d4f6c0d7
Update to v1.29.9 (#10885) 2024-09-13 12:11:24 -07:00
Brad Davidson 0dfad66a35 Fix hosts.toml header var
Resolves issue from 270f85e468 that prevented old hosts.toml files from being cleaned up.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-09-10 15:00:19 -07:00
Derek Nola 17201d4eb9 Increase timeout polling for secrets-encrypt metrics
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-09-06 14:58:22 -07:00
Derek Nola 2005e8679e E2E: Show journal logs on rotate-keys failure
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-09-06 14:58:22 -07:00
Derek Nola 7de30ac347 Cover edge case when on new minor release for E2E upgrade test (#10781)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-09-06 14:58:22 -07:00
Derek Nola 9969e8c133 Remove secrets encryption controller (#10612)
* Remove secrets encryption controller

Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-09-06 14:58:22 -07:00
Derek Nola 68fac3072d Fix deploy latest commit on E2E tests (#10725)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-09-06 14:58:22 -07:00
ShylajaDevadiga 1ae49401e8 Fix e2e tests (#10061)
Signed-off-by: ShylajaDevadiga <shylaja.devadiga@suse.com>
Co-authored-by: ShylajaDevadiga <shylaja.devadiga@suse.com>
2024-09-06 14:58:22 -07:00
Derek Nola 9d86578a59 Fix caching name for e2e vagrant box (#10695)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-09-06 14:58:22 -07:00
Derek Nola a701519354 Update to newer OS images for install testing (#10681)
* Update to newer OS images for install testing
* Update vagrant images used for E2E

Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-09-06 14:58:22 -07:00
Brad Davidson 1dacf77599 Only clean up containerd hosts dirs managed by k3s
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 270f85e468)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-09-06 11:30:37 -07:00
Brad Davidson d506595074 Fix rotateca validation failures when not touching default self-signed CAs
Also silences warnings about bootstrap fields that are not intended to be handled by CA rotation

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit fe3324cb84)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-09-06 11:30:37 -07:00
Brad Davidson 0da19548df Bump helm-controller for skip-verify/plain-http and updated tolerations
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 662799feec)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-09-06 11:30:37 -07:00
Brad Davidson b9082f7dc0 Bump containerd to v1.7.21, runc to v1.1.14
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d746073bd0)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-09-06 11:30:37 -07:00
Harsimran Singh Maan edd2affb83 Update coredns to 1.11.3 and metrics-server to 0.7.2
Used https://github.com/coredns/corefile-migration to
migrate the corefile. There are no changes for the
default file from 1.10.1 to 1.11.3.

Notable plugin changes include the k8s_external with fallthrough option
and rewrite with cname_target option.

These changes are not part of the default config that ships
with k3s. Customers using these two plugins can start using the new options

Metrics does not have any new features other than build tooling updates.

Requires https://github.com/rancher/image-mirror/pull/704

Signed-off-by: Harsimran Singh Maan <maan.harry@gmail.com>
(cherry picked from commit 0b4d2497e5)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-09-06 11:30:37 -07:00
Brad Davidson b926e0274f Bump traefik to v2.11.8
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit bd45aa5c45)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-09-06 11:30:37 -07:00
Brad Davidson c0877f34b6 Tag PR image build as latest before scanning
This is less effort than passing the tag across steps 🤷‍♂️

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 378edb939d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-09-06 11:30:37 -07:00
Brad Davidson ebc4e505ea Fix /trivy action running against target branch instead of PR branch
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3d6e4a793a)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-09-06 11:30:37 -07:00
dependabot[bot] bf1d3aa6ef Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 (#10795)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.20.0 to 0.24.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.20.0...0.24.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit dacc636cf4)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-09-06 11:30:37 -07:00
Derek Nola 0c26a936f5 Add trivy scanning trigger for PRs (#10758)
Signed-off-by: Derek Nola <derek.nola@suse.com>
(cherry picked from commit fa6940d03d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-09-06 11:30:37 -07:00
Roberto Bonafiglia 9973e7a157 Update CNI plugins version
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
2024-09-04 16:47:10 -07:00
Brooks Newberry 33fdc35dd6
Update to v1.29.8 (#10720) 2024-08-15 15:00:53 -07:00