16 Commits (bd45aa5c45977725e58840bd81fea2d41b4c176a)

Author	SHA1	Message	Date
Hussein Galal	144f5ad333	Kubernetes V1.30.0-k3s1 (#10063) ... * kubernetes 1.30.0-k3s1 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Update go version to v1.22.2 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update dynamiclistener and helm-controller Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update go in go.mod to 1.22.2 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update go in Dockerfiles Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update cri-dockerd Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Add proctitle package with linux and windows constraints Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * go mod tidy Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Fixing setproctitle function Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update dynamiclistener to v0.6.0-rc1 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> --------- Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	7 months ago
Brad Davidson	fe465cc832	Move etcd snapshot management CLI to request/response ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	8 months ago
Derek Nola	14f54d0b26	Transition from deprecated pointer library to ptr (#9801) ... Signed-off-by: Derek Nola <derek.nola@suse.com>	8 months ago
Derek Nola	fa11850563	Readd `k3s secrets-encrypt rotate-keys` with correct support for KMSv2 GA (#9340) ... * Reorder copy order for caching * Enable longer http timeout requests Signed-off-by: Derek Nola <derek.nola@suse.com> * Setup reencrypt controller to run on all apiserver nodes * Fix reencryption for disabling secrets encryption, reenable drone tests	10 months ago
Derek Nola	51f1a5a0ab	Review comments and fixes ... Signed-off-by: Derek Nola <derek.nola@suse.com>	1 year ago
Derek Nola	42c2ac95e2	CLI + Backend for Secrets Encryption v3 ... Signed-off-by: Derek Nola <derek.nola@suse.com>	1 year ago
Derek Nola	0b18a65d4f	Revert "Warn that v1.28 will deprecate reencrypt/prepare (#7848)" ... This reverts commit 4ab01f3941. Signed-off-by: Derek Nola <derek.nola@suse.com>	1 year ago
Derek Nola	4ab01f3941	Warn that v1.28 will deprecate reencrypt/prepare (#7848) ... * Warn that v1.28 will deprecate reencrypt/prepare Signed-off-by: Derek Nola <derek.nola@suse.com>	1 year ago
Brad Davidson	992e64993d	Add support for kubeadm token and client certificate auth ... Allow bootstrapping with kubeadm bootstrap token strings or existing Kubelet certs. This allows agents to join the cluster using kubeadm bootstrap tokens, as created with the `k3s token create` command. When the token expires or is deleted, agents can successfully restart by authenticating with their kubelet certificate via node authentication. If the token is gone and the node is deleted from the cluster, node auth will fail and they will be prevented from rejoining the cluster until provided with a valid token. Servers still must be bootstrapped with the static cluster token, as they will need to know it to decrypt the bootstrap data. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Derek Nola	06d81cb936	Replace deprecated ioutil package (#6230) ... * Replace ioutil package * check integration test null pointer * Remove rotate retries Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Brad Davidson	e811689df9	Fix etcd-only secrets encryption rotation ... Improve feedback when running secrets-encrypt commands on etcd-only nodes, and allow etcd-only nodes to properly restart when effecting rotation. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Luther Monson	9a849b1bb7	[master] changing package to k3s-io (#4846) ... * changing package to k3s-io Signed-off-by: Luther Monson <luther.monson@gmail.com> Co-authored-by: Derek Nola <derek.nola@suse.com>	3 years ago
Derek Nola	a698ece9c5	Add `--json` flag for `k3s secrets-encrypt status` (#5127) ... * Add json flag for secrets-encrypt status Signed-off-by: Derek Nola <derek.nola@suse.com>	3 years ago
Derek Nola	d583a99f62	Add server flag to access nonlocal/nondefault k3s server (#5016) ... Signed-off-by: Derek Nola <derek.nola@suse.com>	3 years ago
Brad Davidson	e7464a17f7	Fix use of agent creds for secrets-encrypt and config validate ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Derek Nola	bcb662926d	Secrets-encryption rotation (#4372) ... * Regular CLI framework for encrypt commands * New secrets-encryption feature * New integration test * fixes for flaky integration test CI * Fix to bootstrap on restart of existing nodes * Consolidate event recorder Signed-off-by: Derek Nola <derek.nola@suse.com>	3 years ago