github/k3s - k3s - https://git.xinac.net

Commit Graph

Author	SHA1	Message	Date
Luther Monson	9a849b1bb7	[master] changing package to k3s-io (#4846 ) * changing package to k3s-io Signed-off-by: Luther Monson <luther.monson@gmail.com> Co-authored-by: Derek Nola <derek.nola@suse.com>	3 years ago
Joe Kralicky	debb508643	Nvidia container runtime discovery in containerd config template (#3890 ) * Update the default containerd config template with support for adding extra container runtimes. Add logic to discover nvidia container runtimes installed via the the gpu operator or package manager. Signed-off-by: Joe Kralicky <joe.kralicky@suse.com>	3 years ago
Jamie Phillips	82394d7d36	Basic windows agent that will join a cluster without CNI. Signed-off-by: Jamie Phillips <jamie.phillips@suse.com>	3 years ago
Brad Davidson	02a5bee62f	Add system-default-registry support and remove shared code (#3285 ) * Move registries.yaml handling out to rancher/wharfie * Add system-default-registry support * Add CLI support for kubelet image credential providers Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	4 years ago
Akihiro Suda	6e8284e3d4	rootless: enable resource limitation (requires cgroup v2, systemd) Now rootless mode can be used with cgroup v2 resource limitations. A pod is executed in a cgroup like "/user.slice/user-1001.slice/user@1001.service/k3s-rootless.service/kubepods/podd0eb6921-c81a-4214-b36c-d3b9bb212fac/63b5a253a1fd4627da16bfce9bec58d72144cf30fe833e0ca9a6d60ebf837475". This is accomplished by running `kubelet` in a cgroup namespace, and enabling `cgroupfs` driver for the cgroup hierarchy delegated by systemd. To enable cgroup v2 resource limitation, `k3s server --rootless` needs to be launched as `systemctl --user` service. Please see the comment lines in `k3s-rootless.service` for the usage. Running `k3s server --rootless` via a terminal is not supported. When it really needs to be launched via a terminal, `systemd-run --user -p Delegate --tty` needs to be prepended to create a systemd scope. Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>	4 years ago
Jacob Blain Christen	618b0f98bf	registry mirror repository rewrites (#3064 ) Support repository regex rewrite rules when fetching image content. Example configuration: ```yaml # /etc/rancher/k3s/registries.yaml mirrors: "docker.io": endpoint: - "https://registry-1.docker.io/v2" rewrite: "^library/alpine$": "my-org/alpine" ``` This will instruct k3s containerd to fetch content for `alpine` images from `docker.io/my-org/alpine` instead of the default `docker.io/library/alpine` locations. Signed-off-by: Jacob Blain Christen <jacob@rancher.com>	4 years ago
Brad Davidson	d1424626ac	Disable containerd experimental snapshot labels Related to #2455 and containerd/containerd#4684 These were not meant to be enabled by default, break images with many layers, and will be disabled by default on the next containerd release. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	4 years ago
Jacob Blain Christen	e2089bea18	cli: add --selinux flag to agent/server sub-cmds (#2111 ) * cli: add --selinux flag to agent/server sub-cmds Introduces --selinux flag to affirmatively enable SELinux in containerd. Deprecates --disable-selinux flag which now defaults to true which auto-detection of SELinux configuration for containerd is no longer supported. Specifying both --selinux and --disable-selinux will result in an error message encouraging you to pick a side. * Update pkg/agent/containerd/containerd.go update log warning message about enabled selinux host but disabled runtime Co-authored-by: Brad Davidson <brad@oatmail.org> Signed-off-by: Jacob Blain Christen <jacob@rancher.com>	4 years ago
Thorsten Klein	cf8c101b70	registry template: add insecure_skip_verify field Signed-off-by: Thorsten Klein <iwilltry42@gmail.com>	4 years ago
Jason	e3f8789114	Add containerd snapshotter flag (#1991 ) * Add containerd snapshotter flag Signed-off-by: Jason-ZW <zhenyang@rancher.com> * Fix CamelCase nit and option description Signed-off-by: Brad Davidson <brad.davidson@rancher.com> Signed-off-by: Jason-ZW <zhenyang@rancher.com> Co-authored-by: Brad Davidson <brad@oatmail.org>	4 years ago
Dario Nieuwenhuis	cd0b58e920	Correctly quote auth strings in containerd config. Fixes #1610	5 years ago
Darren Shepherd	4d32fe9959	Support SELinux	5 years ago
Erik Wilson	6875b11dd2	Fix identity_token -> identitytoken for containerd toml	5 years ago
Erik Wilson	2de93d70cf	Allow --pause-image to set docker sandbox image also	5 years ago
Guangbo Chen	8ff4c3c256	Update base pause image to rancher repo	5 years ago
Erik Wilson	aed163b338	Remove trailing whitespace trimming from containerd template	5 years ago
Erik Wilson	1df72d14b8	Cleanup containerd config template spacing	5 years ago
Erik Wilson	90df4a1921	Use containerd-shim-run-v2	5 years ago
galal-hussein	5ccc880ddb	Add private registry to containerd	5 years ago
Erik Wilson	a76ca2e887	Remove hostname requirement in `/etc/hosts`	5 years ago
haokang.ke	52f845ec84	Make pause image configurable (#345 )	6 years ago
galal-hussein	bdf8a355e1	Add containerd config go template	6 years ago

23 Commits (9a849b1bb7c5cc20032a77aafa9db083a6f0443e)