2692 Commits (d95980bba3bf4f587bb7491b442402ba5e6aed10)

 

All Branches   

Search

Author	SHA1	Message	Date
Brad Davidson	23d98cec22	Fix CACertPath stripping trailing path components ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	0c302f4341	Fix etcd member deletion ... Turns out etcd-only nodes were never running **any** of the controllers, so allowing multiple controllers didn't really fix things. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Derek Nola	9efa0797b7	Don't default to local K3s for startup test (#6950) ... Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Roberto Bonafiglia	7739c8b97e	Update flannel to v0.21.1 ... Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>	2 years ago
Roberto Bonafiglia	b8e69712a3	Updated flannel version to v0.21.0 ... Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>	2 years ago
Brad Davidson	3d146d2f1b	Allow for multiple sets of leader-elected controllers ... Addresses an issue where etcd controllers did not run on etcd-only nodes Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	0d416d797d	Wait for server to become ready before creating token ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Paul Donohue	290d7e8fd1	Fix access to hostNetwork port on NodeIP when egress-selector-mode=agent ... Signed-off-by: Paul Donohue <git@PaulSD.com> Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	ddcc4d4034	go generate ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	c6d0afd0cb	Check for existing resources before creating them ... Prevents errors when starting with fail-closed webhooks Also, use panic instead of Fatalf so that the CloudControllerManager rescue can handle the error Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	32d62c5786	Use default address family when adding kubernetes service address to SAN list ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Byron Ruth	a92f163c9d	Add NATS to the list of supported data stores (#6876) ... Signed-off-by: Byron Ruth <byron@nats.io>	2 years ago
Brad Davidson	b43dd7746d	Add CI test ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	c900089e88	Add ADR ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	87f9c4ab11	Ensure that node exists when using node auth ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	992e64993d	Add support for kubeadm token and client certificate auth ... Allow bootstrapping with kubeadm bootstrap token strings or existing Kubelet certs. This allows agents to join the cluster using kubeadm bootstrap tokens, as created with the `k3s token create` command. When the token expires or is deleted, agents can successfully restart by authenticating with their kubelet certificate via node authentication. If the token is gone and the node is deleted from the cluster, node auth will fail and they will be prevented from rejoining the cluster until provided with a valid token. Servers still must be bootstrapped with the static cluster token, as they will need to know it to decrypt the bootstrap data. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	373df1c8b0	Add support for `k3s token` command ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Derek Nola	7d49202721	Ignore value conflicts when reencrypting secrets (#6850) ... * Ignore conflict secrets Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Brad Davidson	be7f751863	Add e2e tests for CA cert rotation ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	8a6404f97c	Add basic test for custom CA certs ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	9b6b72941f	Clarify ADR based on design review feedback ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	f13768c247	Add ADR ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	215fb157ff	Add `certificate rotate-ca` to write updated CA certs to datastore ... This command must be run on a server while the service is running. After this command completes, all the servers in the cluster should be restarted to load the new CA files. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	3c324335b2	Add utility functions for getting kubernetes client ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	58d40327b4	Fix CA cert hash for root certs ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	0919ec6755	Ensure cluster-signing CA files contain only a single CA cert ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	1ec242d816	Add example certificate generation script ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Felix Niederwanger	7e59376bb9	Fix check for (open)SUSE version (#6791) ... Fix the check, if we're running SUSE or openSUSE in the installer script. Signed-off-by: phoenix <felix.niederwanger@suse.com>	2 years ago
Paulo Gomes	ee007bc7cf	Bump deps: trivy, sonobuoy, dapper (#6807) ... - trivy v0.36.1 - sonobuoy v0.56.14 - golangci-lint v1.50.1 - gopls v0.11.0 - dapper v0.6.0 - golang v1.19.5 Signed-off-by: Paulo Gomes <paulo.gomes@suse.com>	2 years ago
Robert Schweikert	bb353f5d2b	Fix reference to documentation (#6860) ... The documentation is no longer part of the Rancher project but can be found in k3s-io/docs. Fix the wording an link in the contribution docs to point the potential contributor to the proper location Signed-off-by: Robert Schweikert <rjschwei@suse.com>	2 years ago
Derek Nola	7cad3db251	E2E: Consoldiate docker and prefer bundled tests into new startup test (#6851) ... * Convert docker E2E to startup E2E * Move preferedbundled into the e2e startup test Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Derek Nola	32086717fc	Ensure flag type consistency (#6852) ... * Convert all flags to pointers for consistency Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Derek Nola	750cff561d	Bump vagrant boxes to fedora37 (#6832) ... * Bump to generic/fedora37 * fix epic permissions * Disable sonobuoy on rootless Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Akos Elek	9fcc7c0db8	Fix cronjob example (#6707) ... Related PR: https://github.com/rancher/rke2-docs/pull/38 Signed-off-by: Akos Elek <akose73@tazerve.hu>	2 years ago
Derek Nola	0d4caf4e24	Wait for cri-dockerd socket (#6812) ... * Wait for cri-dockerd socket * Consolidate cri utility functions Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Brad Davidson	1c6fde9a52	go generate ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	369b81b45e	Honor Service ExternalTrafficPolicy ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	94d1a87509	Bump wrangler version for EndpointSlice support ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Derek Nola	86e36225f5	Consolidate E2E tests and GH Actions (#6772) ... * Consolidate cluster reset and snapshot E2E tests * Add more context to secrets-encryption test * Reuse build workflow * Convert updatecli to job level permissions * Remove dweomer microos from E2E and install testing Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Hrittik Roy	808c71a63e	Add Ayedo (#6801) ... Signed-off-by: Hrittik Roy <67012359+hrittikhere@users.noreply.github.com>	2 years ago
Derek Nola	75f77ab951	E2E Rancher and Hardened script improvements (#6778) ... * Improve test-pad rancher script Signed-off-by: Derek Nola <derek.nola@suse.com> * Improve hardened script and added kube-bench utility script Signed-off-by: Derek Nola <derek.nola@suse.com> * Apply same audits for 1.22 and older Signed-off-by: Derek Nola <derek.nola@suse.com> Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Brooks Newberry	f0655f153e	update stable channel to v1.25.6+k3s1 (#6828)	2 years ago
Brad Davidson	3cb6fa5cc7	Set cri-dockerd version at build time ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	f72649d1bd	Bump cri-dockerd ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	89f7062431	Add build tag to disable cri-dockerd ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brooks Newberry	f10af367c3	Update to v1.26.1-k3s1 (#6774)	2 years ago
Brooks Newberry	f19892c2d2	drone correct plugins/docker tag supporting linux/arm (#6769)	2 years ago
Derek Nola	291f8bfe00	Slow dependency CI to weekly (#6764) ... * Add labels to updatecli PRs * Run weekly Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
ShylajaDevadiga	2007cdd54f	generate report and upload test results (#6737) ... Signed-off-by: ShylajaDevadiga <shylaja.devadiga@suse.com> Signed-off-by: ShylajaDevadiga <shylaja.devadiga@suse.com> Co-authored-by: ShylajaDevadiga <shylaja.devadiga@suse.com>	2 years ago
Derek Nola	7bbcac92fd	Bump download action to v3 (#6746) ... Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago