github/k3s - k3s - https://git.xinac.net

Commit Graph

Author	SHA1	Message	Date
Matt Trachier	ea094d1d49	Update to v1.26.2-k3s1 (#7011 ) * Update to v1.26.2 * update gh workflows and docker files to proper go version --------- Signed-off-by: matttrach <matttrach@gmail.com>	2 years ago
Brad Davidson	ee28c20b62	Bump kine to v0.9.9 Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	cbe4bcfeee	Add test for filterByIPFamily Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	cc333d8d0c	Fix ServiceLB dual-stack ingress IP listing Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	2156015521	Improve default umask for certs.sh Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	23d98cec22	Fix CACertPath stripping trailing path components Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	0c302f4341	Fix etcd member deletion Turns out etcd-only nodes were never running any of the controllers, so allowing multiple controllers didn't really fix things. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Derek Nola	9efa0797b7	Don't default to local K3s for startup test (#6950 ) Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Roberto Bonafiglia	7739c8b97e	Update flannel to v0.21.1 Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>	2 years ago
Roberto Bonafiglia	b8e69712a3	Updated flannel version to v0.21.0 Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>	2 years ago
Brad Davidson	3d146d2f1b	Allow for multiple sets of leader-elected controllers Addresses an issue where etcd controllers did not run on etcd-only nodes Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	0d416d797d	Wait for server to become ready before creating token Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Paul Donohue	290d7e8fd1	Fix access to hostNetwork port on NodeIP when egress-selector-mode=agent Signed-off-by: Paul Donohue <git@PaulSD.com> Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	ddcc4d4034	go generate Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	c6d0afd0cb	Check for existing resources before creating them Prevents errors when starting with fail-closed webhooks Also, use panic instead of Fatalf so that the CloudControllerManager rescue can handle the error Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	32d62c5786	Use default address family when adding kubernetes service address to SAN list Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Byron Ruth	a92f163c9d	Add NATS to the list of supported data stores (#6876 ) Signed-off-by: Byron Ruth <byron@nats.io>	2 years ago
Brad Davidson	b43dd7746d	Add CI test Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	c900089e88	Add ADR Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	87f9c4ab11	Ensure that node exists when using node auth Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	992e64993d	Add support for kubeadm token and client certificate auth Allow bootstrapping with kubeadm bootstrap token strings or existing Kubelet certs. This allows agents to join the cluster using kubeadm bootstrap tokens, as created with the `k3s token create` command. When the token expires or is deleted, agents can successfully restart by authenticating with their kubelet certificate via node authentication. If the token is gone and the node is deleted from the cluster, node auth will fail and they will be prevented from rejoining the cluster until provided with a valid token. Servers still must be bootstrapped with the static cluster token, as they will need to know it to decrypt the bootstrap data. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	373df1c8b0	Add support for `k3s token` command Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Derek Nola	7d49202721	Ignore value conflicts when reencrypting secrets (#6850 ) * Ignore conflict secrets Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Brad Davidson	be7f751863	Add e2e tests for CA cert rotation Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	8a6404f97c	Add basic test for custom CA certs Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	9b6b72941f	Clarify ADR based on design review feedback Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	f13768c247	Add ADR Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	215fb157ff	Add `certificate rotate-ca` to write updated CA certs to datastore This command must be run on a server while the service is running. After this command completes, all the servers in the cluster should be restarted to load the new CA files. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	3c324335b2	Add utility functions for getting kubernetes client Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	58d40327b4	Fix CA cert hash for root certs Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	0919ec6755	Ensure cluster-signing CA files contain only a single CA cert Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	1ec242d816	Add example certificate generation script Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Felix Niederwanger	7e59376bb9	Fix check for (open)SUSE version (#6791 ) Fix the check, if we're running SUSE or openSUSE in the installer script. Signed-off-by: phoenix <felix.niederwanger@suse.com>	2 years ago
Paulo Gomes	ee007bc7cf	Bump deps: trivy, sonobuoy, dapper (#6807 ) - trivy v0.36.1 - sonobuoy v0.56.14 - golangci-lint v1.50.1 - gopls v0.11.0 - dapper v0.6.0 - golang v1.19.5 Signed-off-by: Paulo Gomes <paulo.gomes@suse.com>	2 years ago
Robert Schweikert	bb353f5d2b	Fix reference to documentation (#6860 ) The documentation is no longer part of the Rancher project but can be found in k3s-io/docs. Fix the wording an link in the contribution docs to point the potential contributor to the proper location Signed-off-by: Robert Schweikert <rjschwei@suse.com>	2 years ago
Derek Nola	7cad3db251	E2E: Consoldiate docker and prefer bundled tests into new startup test (#6851 ) * Convert docker E2E to startup E2E * Move preferedbundled into the e2e startup test Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Derek Nola	32086717fc	Ensure flag type consistency (#6852 ) * Convert all flags to pointers for consistency Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Derek Nola	750cff561d	Bump vagrant boxes to fedora37 (#6832 ) * Bump to generic/fedora37 * fix epic permissions * Disable sonobuoy on rootless Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Akos Elek	9fcc7c0db8	Fix cronjob example (#6707 ) Related PR: https://github.com/rancher/rke2-docs/pull/38 Signed-off-by: Akos Elek <akose73@tazerve.hu>	2 years ago
Derek Nola	0d4caf4e24	Wait for cri-dockerd socket (#6812 ) * Wait for cri-dockerd socket * Consolidate cri utility functions Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Brad Davidson	1c6fde9a52	go generate Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	369b81b45e	Honor Service ExternalTrafficPolicy Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	94d1a87509	Bump wrangler version for EndpointSlice support Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Derek Nola	86e36225f5	Consolidate E2E tests and GH Actions (#6772 ) * Consolidate cluster reset and snapshot E2E tests * Add more context to secrets-encryption test * Reuse build workflow * Convert updatecli to job level permissions * Remove dweomer microos from E2E and install testing Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Hrittik Roy	808c71a63e	Add Ayedo (#6801 ) Signed-off-by: Hrittik Roy <67012359+hrittikhere@users.noreply.github.com>	2 years ago
Derek Nola	75f77ab951	E2E Rancher and Hardened script improvements (#6778 ) * Improve test-pad rancher script Signed-off-by: Derek Nola <derek.nola@suse.com> * Improve hardened script and added kube-bench utility script Signed-off-by: Derek Nola <derek.nola@suse.com> * Apply same audits for 1.22 and older Signed-off-by: Derek Nola <derek.nola@suse.com> Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Brooks Newberry	f0655f153e	update stable channel to v1.25.6+k3s1 (#6828 )	2 years ago
Brad Davidson	3cb6fa5cc7	Set cri-dockerd version at build time Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	f72649d1bd	Bump cri-dockerd Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	89f7062431	Add build tag to disable cri-dockerd Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago

1 2 3 4 5 ...

2647 Commits (ea094d1d497b26538b61b5cbc27c1a4a1f2f3f24) All Branches Search

2647 Commits (ea094d1d497b26538b61b5cbc27c1a4a1f2f3f24)

All Branches