Manuel Buil
00cf4578ec
Dual-stack support LB controller
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
3 years ago
Brad Davidson
1f7151ed2f
Update stable to v1.21.5+k3s2
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Marc Bachmann
9b35734e1a
Add topologySpreadConstraints to support scaling of coredns
...
Signed-off-by: Marc Bachmann <marc.brookman@gmail.com>
3 years ago
Brad Davidson
e24e1332fd
Bump containerd to v1.5.7+k3s1
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
12e675e2cc
Don't evacuate the root cgroup when rootless
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
cd5002ea37
Skip tests that violate version skew policy
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
5d1a37ee32
Send MAINPID to systemd when reexecing for logfile output
...
This allows the new process to notify systemd when it is ready.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
a16105b348
Properly handle operation as init process
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brian Downs
f4cea90cb9
set transport to skip verify if se skip flag passed ( #4102 )
3 years ago
Chris Kim
fd495a6a5f
Bump stable to v1.21.5+k3s1 ( #4068 )
...
Signed-off-by: Chris Kim <oats87g@gmail.com>
3 years ago
Michal Rostecki
4c75122585
Merge pull request #4098 from manuelbuil/enable_sysctl_inheritance
...
Enable the inheritance of sysctl network settings for ipv6
3 years ago
Manuel Buil
87524a7ac7
Enable the inheritance of settings for ipv6
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
3 years ago
Michal Rostecki
47676eff78
Merge pull request #4080 from manuelbuil/update_klipperlb2
...
Use the new klipper-lb image that has newer go and Alpine versions
3 years ago
Luther Monson
4ec71b360c
Adding fossa anaylze/test drone step
...
Signed-off-by: Luther Monson <luther.monson@gmail.com>
3 years ago
Brad Davidson
73e21e739f
Drop broken SupportNoneCgroupDriver support
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
8005885bad
Add 1.22 channel
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
539e224159
Update build images to python3 for compat with recent gsutil change
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Manuel Buil
b99b943c17
Use the new klipper-lb image that has newer go and Alpine versions
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
3 years ago
Brad Davidson
28be0de4e8
Revert "Use the newer klipper-lb image"
...
This reverts commit 1d21491094
.
3 years ago
Brad Davidson
64b502e92c
Disable automounting service account token in servicelb pods
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Hussein Galal
7826407a2e
Make sure there are no duplicates in etcd member list ( #4025 )
...
* Make sure there are no duplicates in etcd member list
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
* fix node names with hyphens
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
* use full server name for etcd node name
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
3 years ago
Manuel Buil
1d21491094
Use the newer klipper-lb image
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
3 years ago
Brad Davidson
753e11ee3c
Enable JobTrackingWithFinalizers FeatureGate
...
Works around issue with Job controller not tracking job pods that
are in CrashloopBackoff during upgrade from 1.21 to 1.22.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Rowan Thorpe
dccee4e87b
Fix regression from commit 137e80cd86
...
Problem:
A false-negative in check-config.sh for cgroups v2 systems was fixed but the
commit introduced a regression based on a small assumption that content of
/sys/fs/cgroup/cgroup.controllers would have the same format as the content
of /proc/self/cgroup. It doesn't.
Solution:
This just tweaks the regex to count occurrences of either cgroup
subsystem-names on each line (as occurs in the sysfs pseudo-file), or those
names with colons either side (as occurs in the procfs pseudo-file).
Signed-off-by: Rowan Thorpe <rowan@rowanthorpe.com>
3 years ago
Brad Davidson
7a36c3f7f2
Bump golang version
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
77dfdda909
Update Kubernetes to v1.22.2-k3s1
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Derek Nola
eda65b19d9
Remove expiremental from cluster commands ( #4024 )
...
Signed-off-by: dereknola <derek.nola@suse.com>
3 years ago
Joe Kralicky
debb508643
Nvidia container runtime discovery in containerd config template ( #3890 )
...
* Update the default containerd config template with support for adding extra container runtimes. Add logic to discover nvidia container runtimes installed via the the gpu operator or package manager.
Signed-off-by: Joe Kralicky <joe.kralicky@suse.com>
3 years ago
Brad Davidson
086ca8ba6a
Fix premature etcd shutdown when joining an existing cluster
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Manuel Buil
60cd86bc42
Merge pull request #3906 from manuelbuil/dual-stack
...
Add dual-stack support on flannel
3 years ago
Brad Davidson
85e11c47d1
Add StargzSupported stub for Windows
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Nicolas Brechet
e732517712
Retrieve "CONTAINERD_" environment variables
...
Signed-off-by: Nicolas Brechet <nicolas.brechet@swisscom.com>
3 years ago
Chris Kim
acf9036b63
No-op when etcd member was already removed and use existing name for etcd controller ( #4014 )
...
Signed-off-by: Chris Kim <oats87g@gmail.com>
3 years ago
Manuel Buil
9fcd79baae
Add tests to the dual-stack PR and enable dual-stack with flannel backend
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
3 years ago
Manuel Buil
681058bb40
Add dual-stack support
...
Signed-off-by: Manuel Buil <mbuil@suse.com>
3 years ago
Brad Davidson
5e0fae914f
Bump helm-controller and klipper-helm image version
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
b72306ce3d
Return the error since it just gets logged and retried anyways
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
5986898419
Use SubjectAccessReview to validate CCM RBAC
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
dc556cbb72
Set controller authn/authz kubeconfigs
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
199424b608
Pass context into all Executor functions
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Rowan Thorpe
137e80cd86
Handle cgroup v1/2/hybrid in check-config.sh more explicitly/accurately
...
Problem:
In check-config.sh assumptions are made about cgroups v1/v2/hybrid,
causes false-negative on pure V2 system.
Solution:
In check-config.sh implement the same validation as found in
./pkg/agent/run.go -> validate(), validateCgroupsV1(), validateCgroupsV2()
[ which use containerd/cgroups:utils.go -> Mode() ]
Signed-off-by: Rowan Thorpe <rowan@rowanthorpe.com>
3 years ago
Chris Kim
928b8531c3
[master] Add `etcd-member-management` controller to K3s ( #4001 )
...
* Initial leader elected etcd member management controller
* Bump etcd to v3.5.0-k3s2
Signed-off-by: Chris Kim <oats87g@gmail.com>
3 years ago
Brad Davidson
699ea16523
go mod tidy
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
57377d2cd4
Minor cleanup on cribbed function
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
3449d5b9f9
Wait for apiserver readyz instead of healthz
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
3d27804c77
Anything not EL7 is EL8
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
b4d8c641c6
Add exposed metrics listener instead of replacing loopback listener
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
29c8b238e5
Replace klog with non-exiting fork
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Brad Davidson
90960ebf4e
SupportPodPidsLimit is locked to true of 1.20, making pids cgroup support mandatory
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
3 years ago
Darren Shepherd
741ba95b04
Migrate sqlite data to etcd when initializing the cluster
...
Signed-off-by: Darren Shepherd <darren@rancher.com>
3 years ago