Commit Graph

2519 Commits (abb8d7d44e4370f2a4ed2378debbc37907090295)

Author SHA1 Message Date
Brad Davidson 5828dcbf85 Bump traefik to v2.9.4 / chart v18.3.0
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Silvio Moioli b8be43a5e5 Disable optimizations and symbol stripping on debug builds (#6147)
Signed-off-by: Silvio Moioli <silvio@moioli.net>
Co-authored-by: Brad Davidson <brad@oatmail.org>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Petri Kivikangas df28b12a17 Convert containerd config.toml.tmpl Linux template to v2 syntax
Signed-off-by: Petri Kivikangas <36138+Kitanotori@users.noreply.github.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Brad Davidson 2c8cb2ed97 Set default kubeletPort
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Brad Davidson 2f56136056 Check for RBAC before starting tunnel controllers
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Brad Davidson 0669e12d2d Add GVK lookup to deploy controller
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Brad Davidson c6c109cf3b Update helm-controller to pull in refactor
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Brad Davidson 36c698abcb Bump Traefik helm chart to v18.0.0
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Brad Davidson daf76c4186 Add new tests to test list
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Brad Davidson 713e47c5e8 Add upgrade test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Brad Davidson a1a161aa65 Add hardened cluster test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Brad Davidson ce73c1827c Fix flakey traefik upgrade in etcd test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Brad Davidson 2a9c855685 Bump test framework versions and add hooks to helpers
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Brad Davidson 81ad2c9cb3 Bump kine to v0.9.6
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Derek Nola 34d619e890 Bump all alpine images to 3.16 (#6334)
Signed-off-by: Derek Nola <derek.nola@suse.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Derek Nola 1d3a1f8df9 Add info on libvirt ubuntu 22.04 (#6316)
Signed-off-by: Derek Nola <derek.nola@suse.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Brad Davidson ac6502f15b Bump dynamiclistener
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-03 20:56:30 -07:00
Roberto Bonafiglia 64db8d72f9 Update flannel to 0.20.1
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
2022-11-03 15:16:43 -07:00
Manuel Buil 4f379e4299
Merge pull request #6364 from manuelbuil/externalTest123
[Release 1.23] Add test for node-external-ip config parameter
2022-11-02 11:04:14 +01:00
Derek Nola 2e95008735
[Release-1.23] Bump install tests OS images (#6381)
* Bump to Leap 15.4 for testing

* Replace fedora-coreos with fedora 36 for install tests 

* Bump alpine to 3.16

Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-31 12:53:19 -07:00
Manuel Buil 29102a8c5c Add test for node-external-ip config parameter
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-31 07:34:22 +01:00
Manuel Buil 567dad04f3
Merge pull request #6357 from manuelbuil/updatekuberouter151-123
[Release 1.23] Upgrade kube-router to v1.5.1
2022-10-28 10:38:47 +02:00
Manuel Buil 70539f31a6 Update kube-router
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-27 09:47:58 +02:00
Manuel Buil 256f981271
Merge pull request #6349 from manuelbuil/netpolTest123
[Release 1.23] Add a netpol test for podSelector & ingress type
2022-10-27 09:39:59 +02:00
Manuel Buil d34ec69500
Merge pull request #6343 from manuelbuil/fixDualStackTest123
[Release 1.23] Add the gateway parameter in netplan
2022-10-26 14:07:12 +02:00
Manuel Buil 5cb0b72807 Add a netpol test for podSelector & ingress type
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-26 13:59:03 +02:00
Manuel Buil c1c880017e Add the gateway parameter in netplan
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-26 11:56:57 +02:00
Brad Davidson 66263ac7f0 Add --flannel-external-ip flag
Using the node external IP address for all CNI traffic is a breaking change from previous versions; we should make it an opt-in for distributed clusters instead of default behavior.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-24 10:12:52 -07:00
Brad Davidson d5807b6e38 Fix RBAC to allow removal of legacy finalizer
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-20 17:02:21 -07:00
Brad Davidson 206006cc33 Return ProviderID in URI format
The InstancesV1 interface handled this for us by combining the ProviderName and InstanceID values; the new interface requires us to do it manually

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-17 10:26:22 -07:00
Brad Davidson 128b882b69 Add ServiceAccount for svclb pods
For 1.24 and earlier, the svclb pods need a ServiceAccount so that we can allow their sysctls in PSPs

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f25419ca2c)
2022-10-14 16:35:31 -07:00
Matt Trachier 65476a1a87
Update to v1.23.13-k3s1 (#6271)
Signed-off-by: matttrach <matttrach@gmail.com>
2022-10-13 21:19:50 -05:00
Manuel Buil e1fbbd01b6
Merge pull request #6251 from manuelbuil/fixDs123
[Release 1.23] Fix dualStack test
2022-10-10 18:35:12 +02:00
Manuel Buil 62b1e87455 Fix dualStack test
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-10 17:27:25 +02:00
Derek Nola 39361a8053
[Release-1.23] Replace deprecated ioutil package (#6236)
* check integration test null pointer

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Remove rotate retries

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Replace ioutil package

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Rebase fix

Signed-off-by: Derek Nola <derek.nola@suse.com>

Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-07 19:02:58 -07:00
Brad Davidson 8752dbdce6 Fix flakey etcd test
Taint the first node so that the helm job doesn't run on it. In a real
cluster the helm job would eventually succeed once all the servers were
upgraded and had the new chart tarball.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:58:35 -07:00
Brad Davidson 26775f25f1 Fix helm job failure on multi-server tests
Replace ETCD-JOIN-STABLE-SECOND with ETCD-JOIN-LATEST-FIRST. We don't
support joining down-level servers to existing clusters, as the new
down-level server will try to deploy older versions of the packaged
manifests.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:58:35 -07:00
Brad Davidson 72177d42ca Bump traefik to 2.9.1 / chart 12.0.0
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:58:35 -07:00
Vladimir Pouzanov 100e114fa3 Fix the typo in the test
CA cert will never be equal to the serving-kube-apiserver cert so it seems like a copy-paste error.

Signed-off-by: Vladimir Pouzanov <farcaller@gmail.com>
2022-10-07 16:58:35 -07:00
Brad Davidson d814456e90 Handle custom kubelet port in agent tunnel
The kubelet port can be overridden by users; we shouldn't assume its always 10250

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:58:35 -07:00
Brad Davidson dddd06da5c Fix occasional "TLS handshake error" in apiserver network proxy.
We should be reading from the hijacked bufio.ReaderWriter instead of
directly from the net.Conn. There is a race condition where the
underlying http handler may consume bytes from the hijacked request
stream, if it comes in the same packet as the CONNECT header. These
bytes are left in the buffered reader, which we were not using. This was
causing us to occasionally drop a few bytes from the start of the
tunneled connection's client data stream.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:58:35 -07:00
Brad Davidson 95f216a5b0 Use structured logging instead of logrus for event recorders
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:58:35 -07:00
Brad Davidson 0bd8674dbb Dump info on coredns when deployment rollout fails
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:58:35 -07:00
Brad Davidson 12b9cd525c Add ADR for ServiceLB move to CCM
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:58:35 -07:00
Brad Davidson 75303fe579 Disable cloud-node and cloud-node-lifecycle if CCM is disabled
If CCM and ServiceLB are both disabled, don't run the cloud-controller-manager at all;
this should provide the same CLI flag behavior as previous releases, and not create
problems when users disable the CCM but still want ServiceLB.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:58:35 -07:00
Brad Davidson d59b8407a7 Move servicelb into cloudprovider LoadBalancer interface
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:58:35 -07:00
Brad Davidson 53fede31e2 Move DisableServiceLB/Rootless/ServiceLBNamespace into config.Control
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:58:35 -07:00
Brad Davidson 806a8989e5 Implement InstancesV2 instead of Instances
... and drop legacy ClusterID support.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:58:35 -07:00
Brad Davidson 5d9c826133 Bump metrics-server to v0.6.1
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:58:35 -07:00
Derek Nola 7cbb7a98ff Remove codespell from Drone, add to GH Actions (#6004)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-07 16:58:35 -07:00