github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
1,890 Commits
33 Branches
863 Tags
625 MiB
Commit Graph

1890 Commits (b4eca61aeb833724dd0bb277bff8982e7d9ee9b7)

Author SHA1 Message Date
Brian Downs 2554c213db
Merge pull request #3405 from briandowns/issue-430 
add log message indicating etcd snapshots are disabled
 2021-06-04 10:38:17 -07:00
Brian Downs 2682183773 add log message indicating etcd snapshots are disabled 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-04 09:18:16 -07:00
Derek Nola 664a98919b
Fix RBAC cloud-controller-manager name 3308 (#3388) 
* Changed cloud-controller-manager user name in ccm.yaml

Signed-off-by: dereknola <derek.nola@suse.com>

* Changed RBAC name in server.go

Signed-off-by: dereknola <derek.nola@suse.com>

* Changed "k3s" string prefix to version.Program to prevent static hardcoding

Signed-off-by: dereknola <derek.nola@suse.com>

* Changed user in ccm.yaml to k3s-cloud-controller-manager

Signed-off-by: dereknola <derek.nola@suse.com>
 2021-06-02 14:50:11 -07:00
Manuel Buil b4542d4317
Merge pull request #3376 from manuelbuil/flannelv0.14 
Update flannel version
 2021-06-02 09:45:00 +02:00
Manuel Buil 5153088286
Merge pull request #3385 from manuelbuil/wireguard-fix 
Move wireguard's privatekey to flannel config directory
 2021-06-02 09:44:27 +02:00
Erik Wilson e5244f375c
Merge pull request #3386 from erikwilson/bump-channel-stable-1.21.1 
Bump stable version to v1.21.1+k3s1 and add v1.21 channel
 2021-06-01 13:52:06 -07:00
Akihiro Suda 5e0527f304 cgroup2 CI: add rootless 
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2021-06-01 13:13:21 -07:00
Akihiro Suda daf527ccaf k3s-rootless.service: use fuse-overlayfs snapshotter 
Kernel 5.11 added support for rootless overlayfs, but still incompatible
with SELinux, so we should always use fuse-overlayfs.

Related: moby/moby issue 42333

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2021-06-01 13:13:21 -07:00
Manuel Buil 1576030d6b Add a path for wireguard's privatekey 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-06-01 21:54:17 +02:00
Jamie Phillips 7345ac35ae
Initial windows support for agent (#3375) 
Signed-off-by: Jamie Phillips <jamie.phillips@suse.com>
 2021-06-01 12:29:46 -07:00
Erik Wilson 3abe7c7cef
Bump stable version to v1.21.1+k3s1 and add v1.21 channel 2021-06-01 10:37:29 -07:00
Manuel Buil d415e41337 Update flannel version 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-06-01 19:21:15 +02:00
Erik Wilson c2e561f25e
Merge pull request #3358 from dweomer/fix/3296/caps 
containerd: v1.4.4-k3s2
 2021-05-20 13:01:19 -07:00
David Nuzik 99c7d5125c
Merge pull request #3357 from erikwilson/bump-channel-stable-1.20.7 
Bump channel stable version to v1.20.7+k3s1
 2021-05-20 11:58:36 -07:00
Jacob Blain Christen cb25835d84 containerd: v1.4.4-k3s2 
Pull in backport of containerd/containerd#5017

Addresses #3296

Signed-off-by: Jacob Blain Christen <dweomer5@gmail.com>
 2021-05-20 11:37:37 -07:00
Erik Wilson 79cf4a7c83
Bump channel stable version to v1.20.7+k3s1 2021-05-20 11:29:49 -07:00
Brad Davidson 25c2888d28 Fix shell expansion and file permission issues install.sh 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-05-19 19:00:31 -07:00
Jacob Blain Christen f11cbc5a8e
runc: v1.0.0-rc95 (#3348) 
- Addresses #3299

Signed-off-by: Jacob Blain Christen <dweomer5@gmail.com>
 2021-05-19 11:34:44 -07:00
Brian Downs 0ccdbe4ffb
Merge pull request #3346 from briandowns/issue-3240-2 
Move object channel defer close to goroutine
 2021-05-19 07:58:33 -07:00
Brian Downs ecbf17e2ed move object channel defer close to goroutine 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-05-18 19:58:30 -07:00
Brian Downs 5bf4d9f687
Merge pull request #3340 from briandowns/issue-3278-2 
add retention default and wire in s3 prune
 2021-05-18 16:18:04 -07:00
Brian Downs 254b52077e add retention default and wire in s3 prune 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-05-18 13:57:40 -07:00
Brad Davidson 7e175e8ad4 Handle conntrack-related sysctls in supervisor agent setup 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-05-18 13:40:44 -07:00
Brian Downs 424d75ad43
Merge pull request #3336 from briandowns/issue-3309 
Add etcd snapshot save subcommand
 2021-05-18 09:18:07 -07:00
Brad Davidson c824c3bcc1 Add support for multiple env files for systemd unit 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-05-17 14:18:40 -07:00
Brian Downs e8ecc00fc8 add etcd snapshot save subcommand 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-05-17 10:55:13 -07:00
Erik Wilson fd4d226e3d
Merge pull request #3328 from erikwilson/v1.21.1-k3s1 
Update Kubernetes to v1.21.1-k3s1
 2021-05-14 13:54:28 -07:00
Erik Wilson 11c5effca2
Bump to go 1.16.4 2021-05-14 10:36:13 -07:00
Erik Wilson 70430b53a8
Update Kubernetes to v1.21.1-k3s1 2021-05-14 10:12:55 -07:00
Brian Downs 6ee28214fa
Add the ability to prune etcd snapshots (#3310) 
* add prune subcommand to force rentention policy enforcement
 2021-05-13 13:36:33 -07:00
Brad Davidson 079620ded0 Fix passthrough of SystemDefaultRegistry from server config 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-05-13 02:18:09 -07:00
Menna Elmasry f76d6208e4
Merge pull request #3316 from MonzElmasry/disable-apiserver-flag 
change --disable-api-server flag to --disable-apiserver
 2021-05-13 01:10:55 +02:00
MonzElmasry 24474c5734
change --disable-apiserver flag 
Signed-off-by: MonzElmasry <menna.elmasry@rancher.com>
 2021-05-13 00:00:11 +02:00
Jacob Blain Christen 0d05b14b71
runc: v1.0.0-rc94 (#3305) 
- bump the runc version to v1.0.0-rc94
- build runc from its own source tree instead of from ./vendor/
  - side-steps incompatibility with upstream kubelet container manager

Signed-off-by: Jacob Blain Christen <dweomer5@gmail.com>
 2021-05-12 11:50:24 -07:00
Brad Davidson e10524a6b1 Add executor.Bootstrap hook for pre-execution setup 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-05-11 18:46:15 -07:00
Brian Downs bcd8b67db4
Add the ability to list etcd snapshots (#3303) 
* add ability to list local and s3 etcd snapshots
 2021-05-11 16:59:33 -07:00
Brad Davidson 02a5bee62f
Add system-default-registry support and remove shared code (#3285) 
* Move registries.yaml handling out to rancher/wharfie
* Add system-default-registry support
* Add CLI support for kubelet image credential providers

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-05-10 15:58:41 -07:00
Hussein Galal 948295e8e8
Fix cluster restoration in rke2 (#3295) 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-05-11 00:06:33 +02:00
Brad Davidson fc037e87f8 Use config file values in node-args annotation 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-05-10 14:08:02 -07:00
Brian Downs e998cd110d
Add the ability to delete an etcd snapshot locally or from S3 (#3277) 
* Add the ability to delete a given set of etcd snapshots from the CLI for locally stored and S3 store snapshots.
 2021-05-07 16:10:04 -07:00
Siegfried Weber e77fd18270 Sign CSRs for kubelet-serving with the server CA 
Problem:
Only the client CA is passed to the kube-controller-manager and
therefore CSRs with the signer name "kubernetes.io/kubelet-serving" are
signed with the client CA. Serving certificates must be signed with the
server CA otherwise e.g. "kubectl logs" fails with the error message
"x509: certificate signed by unknown authority".

Solution:
Instead of providing only one CA via the kube-controller-manager
parameter "--cluster-signing-cert-file", the corresponding CA for every
signer is set with the parameters
"--cluster-signing-kube-apiserver-client-cert-file",
"--cluster-signing-kubelet-client-cert-file",
"--cluster-signing-kubelet-serving-cert-file", and
"--cluster-signing-legacy-unknown-cert-file".

Signed-off-by: Siegfried Weber <mail@siegfriedweber.net>
 2021-05-05 15:59:57 -07:00
Akihiro Suda 3cfa76fcbf Add cgroup2 CI (Fedora on Vagrant on GHA) 
Add `.github/workflows/cgroup2.yaml` for running Fedora on Vagrant on
GitHub Actions to test cgroup2 environment.

Only very basic smoke tests are executed, as Vagrant is too slow to run
the entire sonobuoy.

Relevant:
- kubernetes-sigs/kind PR 2017
- https://github.com/rootless-containers/usernetes/blob/v20210201.0/.github/workflows/main.yaml

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2021-05-05 15:53:47 -07:00
Menna Elmasry 17d91c5148
Merge pull request #3270 from MonzElmasry/validate-go-mod-ci 
Add ci step to validate incorrect replacement fork
 2021-05-05 20:00:45 +02:00
Menna Elmasry 91c5797016
add new-line 
Co-authored-by: Brian Downs <brian.downs@gmail.com>
 2021-05-05 19:06:12 +02:00
Hussein Galal f410fc7d1e
Invoke cluster reset function when only reset flag is passed (#3276) 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-05-05 17:40:04 +02:00
MonzElmasry 45265620c1
Add ci step to validate incorerct replacement fork 
Signed-off-by: MonzElmasry <menna.elmasry@rancher.com>
 2021-05-05 17:10:40 +02:00
Brian Downs e1b9067d21
Merge pull request #3268 from briandowns/fix_node_name 
Reference node name when needed
 2021-05-04 10:48:26 -07:00
Brian Downs beb0d8397a reference node name when needed 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-05-04 10:03:28 -07:00
Vegetto 64577a070d fixes #3264 - unmount CSI plugins on uninstall 
Signed-off-by: angelnu <git@angelnucom>
 2021-05-03 20:05:26 -07:00
Brian Downs 245efe0d66
Merge pull request #3257 from briandowns/remove_dapperfile 
remove accidentially commited dapper files
 2021-04-30 20:38:40 -07:00