github/k3s - k3s - https://git.xinac.net

Commit Graph

Author	SHA1	Message	Date
Derek Nola	bcb662926d	Secrets-encryption rotation (#4372 ) * Regular CLI framework for encrypt commands * New secrets-encryption feature * New integration test * fixes for flaky integration test CI * Fix to bootstrap on restart of existing nodes * Consolidate event recorder Signed-off-by: Derek Nola <derek.nola@suse.com>	3 years ago
Hussein Galal	77fd3e99ec	Add cert rotation command (#4495 ) * Add cert rotation command Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * add function to check for dynamic listener file Signed-off-by: Brian Downs <brian.downs@gmail.com> * Add dynamiclistener cert rotation support Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fixes to the cert rotation Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fix ci tests Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fixes to certificate rotation command Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * more fixes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> Co-authored-by: Brian Downs <brian.downs@gmail.com>	3 years ago
Chris Kim	ae4a1a144a	etcd snapshot functionality enhancements (#4453 ) Signed-off-by: Chris Kim <oats87g@gmail.com>	3 years ago
Hussein Galal	03485632ea	Fix regression with cluster reset (#4521 ) * Fix regression with cluster reset Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * typo Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	3 years ago
Chris Kim	f18b3252c0	[master] Add etcd extra args support for K3s (#4463 ) * Add etcd extra args support for K3s Signed-off-by: Chris Kim <oats87g@gmail.com> * Add etcd custom argument integration test Signed-off-by: Chris Kim <oats87g@gmail.com> * go generate Signed-off-by: Chris Kim <oats87g@gmail.com>	3 years ago
Derek Nola	4b57951fb0	Fix to allow etcd-snapshot to use config file with flags that are only used with k3s server. (#4464 ) * Enabled skipping of unknown flags from config in parser * Added new unit test, expanded existing Signed-off-by: Derek Nola <derek.nola@suse.com>	3 years ago
Manuel Buil	8271d98a76	Merge pull request #4437 from manuelbuil/fix_svclb_ipv6_rh Allow svclb pod to enable ipv6 forwarding	3 years ago
Manuel Buil	5d168a1d59	Allow svclb pod to enable ipv6 forwarding Signed-off-by: Manuel Buil <mbuil@suse.com>	3 years ago
Brian Downs	adaeae351c	update bootstrap logic (#4438 ) * update bootstrap logic resolving a startup bug and account for etcd	3 years ago
Luther Monson	36c6634cce	[master] updating to new signals package in wrangler (#4399 ) * updating to new signals package in wrangler Signed-off-by: Luther Monson <luther.monson@gmail.com>	3 years ago
Brad Davidson	f9f1cabe9c	Fix log/reap reexec Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Derek Nola	918945da45	Added configuration input to etcd-snapshot (#4280 ) Signed-off-by: dereknola <derek.nola@suse.com>	3 years ago
Brian Downs	e11a4bf8bb	set duration to second (#4231 )	3 years ago
Brian Downs	0452f017c1	Add etcd s3 timeout (#4207 )	3 years ago
Brad Davidson	5a923ab8dc	Add containerd ready channel to delay etcd node join Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Brad Davidson	dc18ef2e51	Refactor log and reaper exec to omit MAINPID Using MAINPID breaks systemd's exit detection, as it stops watching the original pid, but is unable to watch the new pid as it is not a child of systemd itself. The best we can do is just notify when execing the child process. We also need to consolidate forking into a sigle place so that we don't end up with multiple levels of child processes if both redirecting log output and reaping child processes. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Brian Downs	ac7a8d89c6	Add ability to reconcile bootstrap data between datastore and disk (#3398 )	3 years ago
Derek Nola	b6919adf62	Add "etcd-" prefix to etcd-snapshot commands as aliases (#4161 ) * Add "etcd-" prefix to etcd-snapshot commands as alias Signed-off-by: dereknola <derek.nola@suse.com>	3 years ago
Brad Davidson	12e675e2cc	Don't evacuate the root cgroup when rootless Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Brad Davidson	5d1a37ee32	Send MAINPID to systemd when reexecing for logfile output This allows the new process to notify systemd when it is ready. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Brad Davidson	a16105b348	Properly handle operation as init process Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Hussein Galal	7826407a2e	Make sure there are no duplicates in etcd member list (#4025 ) * Make sure there are no duplicates in etcd member list Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fix node names with hyphens Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * use full server name for etcd node name Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	3 years ago
Derek Nola	eda65b19d9	Remove expiremental from cluster commands (#4024 ) Signed-off-by: dereknola <derek.nola@suse.com>	3 years ago
Manuel Buil	9fcd79baae	Add tests to the dual-stack PR and enable dual-stack with flannel backend Signed-off-by: Manuel Buil <mbuil@suse.com>	3 years ago
Devin Buhl	a1ec43e0b7	feat: add option to disable s3 over https Signed-off-by: Devin Buhl <devin.kray@gmail.com>	3 years ago
Brad Davidson	cf12a13175	Add missing node name entry to apiserver SAN list Also honor node-ip when adding the node address to the SAN list, instead of hardcoding the autodetected IP address. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Brad Davidson	b8add39b07	Bump kine for metrics/tls changes Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Hussein Galal	e322924781	Reset load balancer state during restoraion (#3877 ) * Reset load balancer state during restoraion Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Reset load balancer state during restoraion Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	3 years ago
Jiaqi Luo	3b01157a3a	Use New Image Names (#3749 ) * switch image names to the ones with the prefix mirrored * bump rancher/mirrored-coredns-coredns to 1.8.4 Signed-off-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>	3 years ago
Hussein Galal	2069cdf4ee	Fix initial start of etcd only nodes (#3748 ) * Fix initial start of etcd only nodes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * more fixes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * more fixes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	3 years ago
Brad Davidson	869b98bc4c	Sync DisableKubeProxy into control struct Sync DisableKubeProxy from cfg into control before sending control to clients, as it may have been modified by a startup hook. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Hussein Galal	b1b5f72dc3	Notify systemd for etcd only node (#3732 ) Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	3 years ago
Derek Nola	21c8a33647	Introduction of Integration Tests (#3695 ) * Commit of new etcd snapshot integration tests. * Updated integration github action to not run on doc changes. * Update Drone runner to only run unit tests Signed-off-by: dereknola <derek.nola@suse.com>	3 years ago
Luther Monson	37fcb61f5e	move go routines for api server ready beneath wait group Signed-off-by: Luther Monson <luther.monson@gmail.com>	3 years ago
Luther Monson	18bc98f60c	adding startup hooks args to access to Disables and Skips (#3674 ) Signed-off-by: Luther Monson <luther.monson@gmail.com>	3 years ago
Jamie Phillips	aef8a6aafd	Adding support for waitgroup to the Startuphooks (#3654 ) The startup hooks where executing after the deploy controller. We needed the deploy controller to wait until the startup hooks had completed.	3 years ago
Brian Downs	238dc2086e	prevent snapshot save when snapshots are disabled (#3475 ) * prevent snapshot save when snapshots are disabled	3 years ago
Chris Kim	ada145641c	Update etcd snapshot error message to be more informative when etcd database is not found (#3568 ) Signed-off-by: Chris Kim <oats87g@gmail.com>	3 years ago
Hussein Galal	f5fbb9a9a8	Export cli server flags and etcd restoration functions (#3527 ) * Export cli server flags and etfd restoration functions Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * export S3 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	3 years ago
Joe Kralicky	a84c75af62	Adds a command-line flag '--disable-helm-controller' that will disable the server's built-in helm controller. Problem: Testing installation and uninstallation of the Helm Controller on k3s is not possible if the Helm Controller is baked into the k3s server. Solution: The Helm Controller can optionally be disabled, which will allow users to manage its installation manually. Signed-off-by: Joe Kralicky <joe.kralicky@suse.com>	3 years ago
Jamie Phillips	82394d7d36	Basic windows agent that will join a cluster without CNI. Signed-off-by: Jamie Phillips <jamie.phillips@suse.com>	3 years ago
Hussein Galal	136dddca11	Fix storing bootstrap data with empty token string (#3422 ) * Fix storing bootstrap data with empty token string Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * delete node password secret after restoration fixes to bootstrap key vendor update Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fix comment Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fix typo Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * more fixes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fixes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fixes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * typos Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Removing dynamic listener file after restoration Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * go mod tidy Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	3 years ago
Brian Downs	88f95ec409	Send systemd notifications for both server and agent (#3430 ) * update agent to sent systemd notify after everything starts	3 years ago
Brian Downs	2682183773	add log message indicating etcd snapshots are disabled Signed-off-by: Brian Downs <brian.downs@gmail.com>	4 years ago
Jamie Phillips	7345ac35ae	Initial windows support for agent (#3375 ) Signed-off-by: Jamie Phillips <jamie.phillips@suse.com>	4 years ago
Brian Downs	254b52077e	add retention default and wire in s3 prune Signed-off-by: Brian Downs <brian.downs@gmail.com>	4 years ago
Brian Downs	e8ecc00fc8	add etcd snapshot save subcommand Signed-off-by: Brian Downs <brian.downs@gmail.com>	4 years ago
Brian Downs	6ee28214fa	Add the ability to prune etcd snapshots (#3310 ) * add prune subcommand to force rentention policy enforcement	4 years ago
MonzElmasry	24474c5734	change --disable-apiserver flag Signed-off-by: MonzElmasry <menna.elmasry@rancher.com>	4 years ago
Brian Downs	bcd8b67db4	Add the ability to list etcd snapshots (#3303 ) * add ability to list local and s3 etcd snapshots	4 years ago

1 2 3 4 5

220 Commits (bcb662926d005dd65275bc462d4664ff5994ce07)