64 Commits (8d4764531248f064e73944fa220ad346683b80c5)

Author	SHA1	Message	Date
Derek Nola	3eb4e12c3b	Don't use zgrep in `check-config` if apparmor porfile is enforced (#7939) ... * Don't use zgrep if apparmor is enforced for it * Bump e2e se timeouts for reencryption time Signed-off-by: Derek Nola <derek.nola@suse.com>	1 year ago
Derek Nola	d13ee64403	Enhance `k3s check-config` (#7091) ... * Move CONFIG_CGROUP_PIDS to Required Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Derek Nola	9980504196	Fix to Rotate CA e2e test (#7101) ... * Include note on service keys Signed-off-by: Derek Nola <derek.nola@suse.com> * Fix rotate cert ca test Signed-off-by: Derek Nola <derek.nola@suse.com> * Remove periods Signed-off-by: Derek Nola <derek.nola@suse.com> * Add new test to nightly script Signed-off-by: Derek Nola <derek.nola@suse.com> --------- Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Richard Steinmetz	a912902aa7	Add missing kernel config checks (#6946) ... Add additional kernel config checks for NETFILTER_XT_MATCH_COMMENT and NETFILTER_XT_MATCH_MULTIPORT as they are both required to run k3s. Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>	2 years ago
Brad Davidson	68fcb48a35	Update/rename certs.sh; add default cert rotation script ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	2156015521	Improve default umask for certs.sh ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	1ec242d816	Add example certificate generation script ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Derek Nola	fd79a1cfea	Bump testing to opensuse Leap 15.4 (#6337) ... * Bump to Leap 15.4 for testing Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Luther Monson	9a849b1bb7	[master] changing package to k3s-io (#4846) ... * changing package to k3s-io Signed-off-by: Luther Monson <luther.monson@gmail.com> Co-authored-by: Derek Nola <derek.nola@suse.com>	3 years ago
Rowan Thorpe	dccee4e87b	Fix regression from commit 137e80cd86 ... Problem: A false-negative in check-config.sh for cgroups v2 systems was fixed but the commit introduced a regression based on a small assumption that content of /sys/fs/cgroup/cgroup.controllers would have the same format as the content of /proc/self/cgroup. It doesn't. Solution: This just tweaks the regex to count occurrences of either cgroup subsystem-names on each line (as occurs in the sysfs pseudo-file), or those names with colons either side (as occurs in the procfs pseudo-file). Signed-off-by: Rowan Thorpe <rowan@rowanthorpe.com>	3 years ago
Rowan Thorpe	137e80cd86	Handle cgroup v1/2/hybrid in check-config.sh more explicitly/accurately ... Problem: In check-config.sh assumptions are made about cgroups v1/v2/hybrid, causes false-negative on pure V2 system. Solution: In check-config.sh implement the same validation as found in ./pkg/agent/run.go -> validate(), validateCgroupsV1(), validateCgroupsV2() [ which use containerd/cgroups:utils.go -> Mode() ] Signed-off-by: Rowan Thorpe <rowan@rowanthorpe.com>	3 years ago
Derek Nola	4cc781b5e3	Moved testing utils into tests directory. Improved gotests template. (#3805) ... * Moved testing utils into tests directory. Improved gotests template. * Updated cgroups2 with util folder rename Signed-off-by: dereknola <derek.nola@suse.com>	3 years ago
Brian Downs	f99b1c8798	add gotests templates (#3709) ... add gotests templates	3 years ago
Derek Nola	2afa3dbe1c	Changed iptables version check for fail if version is between 1.8.0 and 1.8.3 and using nf_tables mode (#3425) ... Signed-off-by: dereknola <derek.nola@suse.com>	4 years ago
Erik Wilson	f6153201ba	Add diagnostics collection scripts ... Signed-off-by: Erik Wilson <Erik.E.Wilson@gmail.com>	4 years ago
Erik Wilson	7f0bdf8a1e	check-config: Remove NF_NAT_IPV4 and NF_NAT_NEEDED from kernel check	4 years ago
Jean-Philippe Evrard	eabc82c724	Remove trailing whitespaces ... To please my OCD, and remove my editor flashing boxes, I am removing trailing whitespaces. They have no purpose in life.	5 years ago
Julien DOCHE	55cca7bba3	contrib/ansible: Remove duplication and redirect to new repository ... Signed-off-by: Julien DOCHE <julien.doche@gmail.com>	5 years ago
Craig Jellick	ad4c542ad5	Merge pull request #1735 from stellirin/performance ... [systemd] Add value to LimitNOFILE due to performance problems	5 years ago
David Nuzik	de48f0c43d	Merge pull request #1730 from geerlingguy/1729-ansible-changed ... Fixes #1729: Use 'is changed' instead of non-existent changed filter.	5 years ago
Adam Farden	b4335630b7	[systemd] Add value to LimitNOFILE due to performance problems ... When k3s is installed on an OS with default high ulimits, performance issues can be observed. This was discovered on CoreOS where the default value is 1073741816. Symptoms include very slow file operations such as installing a Rook/Ceph cluster will take ~6 hours instead of ~10 minutes. A google search for 'container LimitNOFILE' will show that most major projects set this already, including the (unused) containerd systemd unit found in this repository at /vendor/github.com/containerd/containerd/containerd.service k3OS is not affected becuasse the default there is already 1048576. See description in coreos/fedora-coreos-tracker#329	5 years ago
Jeff Geerling	3fef74bcb9	Fix typo in Ansible README file scp command.	5 years ago
Jeff Geerling	27215a5ec0	Fixes #1729: Use 'is changed' instead of non-existent changed filter.	5 years ago
Julien DOCHE	3c98290f0b	contrib/ansible: Add reset role and playbook to reset a node (#1565) ... Signed-off-by: Julien DOCHE <julien.doche@gmail.com>	5 years ago
Joakim Roubert	4286ba7163	Fix markdown files according to markdownlint recommendations ... There are some issues and quirks in the markdown documentation files suggested by the markdownlint project checker that might benefit from being fixed, which this patch does. Change-Id: I33245825e5bb543b5ce1732204984d4a0b169668 Signed-off-by: Joakim Roubert <joakimr@axis.com>	5 years ago
Arpan Kapoor	d01978147e	Add ExecStartPre to ansible systemd node unit files	5 years ago
Arpan Kapoor	4f57cdd5e0	Add Type and TimeoutStartSec to ansible systemd unit files	5 years ago
Erik Wilson	9a1f9a8a4c	Merge pull request #1430 from St0rmingBr4in/fix-home ... contrib/ansible: Fix home path and use kubectl to set the server url in conf	5 years ago
Julien DOCHE	cddcbe7833	contrib/ansible: Add extra_server_args variable ... Signed-off-by: Julien DOCHE <julien.doche@gmail.com>	5 years ago
Julien DOCHE	afbef43efd	contrib/ansible: Use kubectl to set the server url in conf ... Sometimes https://127.0.0.1:6443 can be written in the conf, the regexp does not account for that. Signed-off-by: Julien DOCHE <julien.doche@gmail.com>	5 years ago
Julien DOCHE	9c23860ce8	contrib/ansible: Fix home is not necessarily in /home ... Signed-off-by: Julien DOCHE <julien.doche@gmail.com>	5 years ago
Julien DOCHE	fd891d0bd9	contrib/ansible: Move example inventory to its own subdirectory ... Signed-off-by: Julien DOCHE <julien.doche@gmail.com>	5 years ago
Erik Wilson	5b98d10e4b	Warn if NPC can't start rather than fatal error ... If the ip_set kernel module is not available we should warn that the network policy controller can not start rather than cause a fatal error. Also adds module probing and config checks for ip_set.	5 years ago
Erik Wilson	3c945476f6	Revert check-config's "Silence modprobe warnings" ... This reverts commit 8edbe30c8c.	5 years ago
Erik Wilson	8edbe30c8c	Silence modprobe warnings	5 years ago
Erik Wilson	c83ec56cbe	Non-fatal warning for check-config modules	5 years ago
Erik Wilson	7b3a2d33d1	Clean up check-config exit code & text	5 years ago
Erik Wilson	cc4026e1e2	Search system path for iptables in check-config	5 years ago
Erik Wilson	a73f8b1773	Update check-config.sh for k3s	5 years ago
Erik Wilson	b0d1ca9c21	Add check-config.sh from moby	5 years ago
James Harrington	8431b0ead0	Fix indentation	5 years ago
Matthias Riegler	5c870d18da	CentOS/RHEL compatibility for Ansible roles ... - Setting IPv4 & IPv6 forwarding - Setting `sysctl:net.bridge.bridge-nf-call-iptables` and `bridge-nf-call-ip6tables` to enabled since it is disabled by default on some CentOS systems	5 years ago
Erik Wilson	9c99578bd6	Update k3s v0.8.0 to v0.8.1	5 years ago
Erik Wilson	7028320ca3	Update v0.7.0 to v0.8.0	5 years ago
Erik Wilson	23501c08cb	Merge pull request #662 from cryptk/systemd-delay ... Add a little extra delay between restart attempts	5 years ago
Chris Jowett	612b2c1596	Add RestartSec to ansible systemd unit files	5 years ago
Thorsten Schifferdecker	f2654b039f	bump k3s versions to v0.7.0	5 years ago
Pieter van der Merwe	db5f6c6e5c	Createsymlinks for kubectl and crictl	5 years ago
Pieter van der Merwe	2714ae68f9	Add wait for node-token file	5 years ago
Ted Wexler	122b8c36b0	Fix an inconsistency in contrib/ansible/README.md ... The example inventory uses the group `kube-cluster`, but the playbooks references `k3s-cluster`. This resolves the inconsistency.	6 years ago