github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
3,154 Commits
31 Branches
881 Tags
633 MiB
Commit Graph

3154 Commits (cb36c910a6d1b111d13a9e39b9158703bf8f3274)

Author SHA1 Message Date
Brad Davidson cb36c910a6 Fix agent supervisor port using apiserver port instead 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-06-13 16:34:04 -07:00
Brooks Newberry 102e42a55d
[release-1.27] Update Kubernetes to v1.27.15 (#10346) 
Signed-off-by: Brooks Newberry <brooks@newberry.com>
 2024-06-13 09:09:09 -07:00
Harrison Affel 76ba9db245 fix typo, use rancher/permissions 
Signed-off-by: Harrison Affel <harrisonaffel@gmail.com>
 2024-06-07 08:31:36 -07:00
Brad Davidson bdf076b2e5 Fix race condition panic in loadbalancer.nextServer 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-06-07 07:40:42 -07:00
fmoral2 6d6cf86656
Add test for `isValidResolvConf` (#10302) 
Signed-off-by: Francisco <francisco.moral@suse.com>
 2024-06-07 11:07:35 -03:00
Vitor Savian 88c20d8b9a Add snapshot retention etcd-s3-folder fix 
* Add snapshot retention folder fix

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* Add snapshot retention E2E test

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

---------

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2024-06-06 19:41:35 -03:00
Brad Davidson 5f656d12fb Fix bug that caused agents to bypass local loadbalancer 
If proxy.SetAPIServerPort was called multiple times, all calls after the
first one would cause the apiserver address to be set to the default
server address, bypassing the local load-balancer. This was most likely
to occur on RKE2, where the supervisor may be up for a period of time
before it is ready to manage node password secrets, causing the agent
to retry.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 1661f1024a)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-06-04 13:40:41 -07:00
Koen de Laat e8d6c88155 fix: Use actual warningPeriod in certmonitor 
Signed-off-by: Koen de Laat <koen.de.laat@philips.com>
(cherry picked from commit 79ba10f5ec)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-06-04 13:40:41 -07:00
github-actions[bot] 4e3eda5526 Bump Local Path Provisioner version (#10268) 
* chore: Bump Local Path Provisioner version

Made with ❤️️ by updatecli

(cherry picked from commit 1268779ea0)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-06-04 13:40:41 -07:00
Katherine Door 30401ec352 Add write-kubeconfig-group flag to server (#9233) 
* Add write-kubeconfig-group flag to server
* update kubectl unable to read config message for kubeconfig mode/group

Signed-off-by: Katherine Pata <me@kitty.sh>
(cherry picked from commit 7a0ea3c953)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 6e9ca34246 Fix embedded mirror blocked by SAR RBAC and re-enable test 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 19692f5d17 Fix issue caused by sole server marked as failed under load 
If health checks are failing for all servers, make a second pass through the server list with health-checks ignored before returning failure

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit ca39614d4e)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson da89ab5052 Fix netpol crash when node remains tained unintialized 
It is concievable that users might take more than 60 seconds to deploy their own cloud-provider. Instead of exiting, we should wait forever, but with more logging to indicate what's being waited on.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit ed23a2bb48)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
github-actions[bot] 6c7e503bea chore: Bump Trivy version 
Made with ❤️️ by updatecli

(cherry picked from commit f2e7c01acf)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
dependabot[bot] 9ea2260bee Bump ubuntu from 22.04 to 24.04 in /tests/e2e/scripts 
Bumps ubuntu from 22.04 to 24.04.

---
updated-dependencies:
- dependency-name: ubuntu
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 4cb4542c3a)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 3e5de3426c Use busybox tar to avoid issues with fchmodat2 on arm 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 84b578ec74)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
dependabot[bot] b9e3c5f5e9 Bump alpine from 3.18 to 3.20 in /package 
Bumps alpine from 3.18 to 3.20.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 86875c97bb)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
dependabot[bot] 8257e71ce3 Bump alpine from 3.18 to 3.20 in /conformance 
Bumps alpine from 3.18 to 3.20.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit de4cda57e6)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson e5468c930a Update golangci-lint to stop using deprecated skip files/dirs 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 2eca3f1e2c)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 9d044760ee Convert remaining http handlers over to use util.SendError 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f8e0648304)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 103778ce1a Refactor supervisor listener startup and add metrics 
* Refactor agent supervisor listener startup and authn/authz to use upstream
  auth delegators to perform for SubjectAccessReview for access to
  metrics.
* Convert spegel and pprof handlers over to new structure.
* Promote bind-address to agent flag to allow setting supervisor bind
  address for both agent and server.
* Promote enable-pprof to agent flag to allow profiling agents. Access
  to the pprof endpoint now requires client cert auth, similar to the
  spegel registry api endpoint.
* Add prometheus metrics handler.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit ff679fb3ab)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
galal-hussein b65fad2d1c Add proctitle package with linux and windows constraints 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
(cherry picked from commit 48ff3bcddb)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 07c2bd4cc2 Fix issue with k3s-etcd informers not starting 
Start shared informer caches when k3s-etcd controller wins leader election. Previously, these were only started when the main k3s apiserver controller won an election. If the leaders ended up going to different nodes, some informers wouldn't be started

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3d14092f76)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Anuj Garg ec397ef351 Updating the script binary_size_check to complete the command name by adding .exe extension to the k3s binary name to make it available to run stat command 
Signed-off-by: Anuj Garg <anujgarg@microsoft.com>
(cherry picked from commit eb192197eb)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 2c2a6ee982 Bump klipper-helm image for tls secret support 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6683fcdb65)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
huangzy 4fa7991664 allow helm controller set owner reference 
Signed-off-by: huangzy <huangzynn@outlook.com>
(cherry picked from commit 6fcaad553d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Robert Rose edad9c6873 Follow directory symlinks in auto deploying manifests (#9288) 
Signed-off-by: Robert Rose <robert.rose@mailbox.org>
(cherry picked from commit 6886c0977f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
zouxianyu 92d59a0e03 add missing kernel config check 
Signed-off-by: zouxianyu <2979121738@qq.com>
(cherry picked from commit c1cb5d63b9)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
linxin 6781d660bf Validate resolv.conf for presence of nameserver entries 
Co-authored-by: Brad Davidson <brad@oatmail.org>
Signed-off-by: linxin <linxin@geedgenetworks.com>
(cherry picked from commit f24ba9d3a9)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 13eafdd23a Bump kine to v0.11.9 to fix pagination 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 2669d67a9b)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 153a4991bb bump minio-go to v7.0.70 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit afdcc83afe)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 884673c8e1 Add support for svclb pod PriorityClassName 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 37f97b33c9)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 064c9cfcdc Update local-path-provisioner helper script 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b453630478)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 783528867a Fix issue with local traffic policy for single-stack services on dual-stack nodes. 
Just enable IP forwarding for all address families regardless of service address families.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 095ecdb034)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 9f909e6b9d Bump spegel version 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5cf4d75749)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 92b7a0b46f bump etcd to v3.5.13 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit bf8b15e7ae)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 63532fee4b Bump containerd to v1.7.17 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit aaa578785c)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 3579301899 Switch stargz over to cri registry config_path 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 30999f9a07)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 4fae0011e3 Use fixed stream server bind address for cri-dockerd 
Will now use 127.0.0.1:10010, same as containerd's CRI

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7374010c0c)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Brad Davidson 59c1b2d280 Add WithSkipMissing to not fail import on missing blobs 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5f6b813cc8)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 09:17:58 -07:00
Nikos Pitsillos 331ce70666 Improve tailscale test & add extra log in e2e tests 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2024-05-28 22:24:28 +02:00
Roberto Bonafiglia d53cf93ad8 Update kube-router version to v2.1.2 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2024-05-28 17:02:54 +02:00
thomasferrandiz 4d6f662cc4
Merge pull request #10222 from thomasferrandiz/issue-9957-release-1.27 
[release 1.27] Bump flannel version to v0.25.2
 2024-05-28 11:44:04 +02:00
Thomas Ferrandiz e5eea95ca7 Use TrafficManager interface when calling flannel 
Signed-off-by: Thomas Ferrandiz <thomas.ferrandiz@suse.com>
 2024-05-28 08:49:35 +00:00
Thomas Ferrandiz 1da6b9aacd Bump flannel version to v0.25.2 
Signed-off-by: Thomas Ferrandiz <thomas.ferrandiz@suse.com>
 2024-05-28 08:49:35 +00:00
Manuel Buil 2593230e51 Fix bug when using tailscale config by file 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2024-05-24 07:56:33 +02:00
Manuel Buil 0029d7a71e Replace deprecated ruby function 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2024-05-23 11:54:49 +02:00
Brian Downs b0b34e4d92
Update to v1.27.14 (#10103) 2024-05-17 13:38:12 -07:00
Harrison Affel 2a6f762bc7 windows changes 
Signed-off-by: Harrison Affel <harrisonaffel@gmail.com>
 2024-05-16 16:57:26 -07:00
Derek Nola 37c4634cf1 Set release channel for e2e upgrade test 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-05-15 11:12:01 -07:00