17 Commits (ea094d1d497b26538b61b5cbc27c1a4a1f2f3f24)

Author	SHA1	Message	Date
Brad Davidson	2156015521	Improve default umask for certs.sh ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	1ec242d816	Add example certificate generation script ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Derek Nola	fd79a1cfea	Bump testing to opensuse Leap 15.4 (#6337) ... * Bump to Leap 15.4 for testing Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Rowan Thorpe	dccee4e87b	Fix regression from commit 137e80cd86 ... Problem: A false-negative in check-config.sh for cgroups v2 systems was fixed but the commit introduced a regression based on a small assumption that content of /sys/fs/cgroup/cgroup.controllers would have the same format as the content of /proc/self/cgroup. It doesn't. Solution: This just tweaks the regex to count occurrences of either cgroup subsystem-names on each line (as occurs in the sysfs pseudo-file), or those names with colons either side (as occurs in the procfs pseudo-file). Signed-off-by: Rowan Thorpe <rowan@rowanthorpe.com>	3 years ago
Rowan Thorpe	137e80cd86	Handle cgroup v1/2/hybrid in check-config.sh more explicitly/accurately ... Problem: In check-config.sh assumptions are made about cgroups v1/v2/hybrid, causes false-negative on pure V2 system. Solution: In check-config.sh implement the same validation as found in ./pkg/agent/run.go -> validate(), validateCgroupsV1(), validateCgroupsV2() [ which use containerd/cgroups:utils.go -> Mode() ] Signed-off-by: Rowan Thorpe <rowan@rowanthorpe.com>	3 years ago
Derek Nola	2afa3dbe1c	Changed iptables version check for fail if version is between 1.8.0 and 1.8.3 and using nf_tables mode (#3425) ... Signed-off-by: dereknola <derek.nola@suse.com>	4 years ago
Erik Wilson	f6153201ba	Add diagnostics collection scripts ... Signed-off-by: Erik Wilson <Erik.E.Wilson@gmail.com>	4 years ago
Erik Wilson	7f0bdf8a1e	check-config: Remove NF_NAT_IPV4 and NF_NAT_NEEDED from kernel check	4 years ago
Jean-Philippe Evrard	eabc82c724	Remove trailing whitespaces ... To please my OCD, and remove my editor flashing boxes, I am removing trailing whitespaces. They have no purpose in life.	5 years ago
Erik Wilson	5b98d10e4b	Warn if NPC can't start rather than fatal error ... If the ip_set kernel module is not available we should warn that the network policy controller can not start rather than cause a fatal error. Also adds module probing and config checks for ip_set.	5 years ago
Erik Wilson	3c945476f6	Revert check-config's "Silence modprobe warnings" ... This reverts commit 8edbe30c8c.	5 years ago
Erik Wilson	8edbe30c8c	Silence modprobe warnings	5 years ago
Erik Wilson	c83ec56cbe	Non-fatal warning for check-config modules	5 years ago
Erik Wilson	7b3a2d33d1	Clean up check-config exit code & text	5 years ago
Erik Wilson	cc4026e1e2	Search system path for iptables in check-config	5 years ago
Erik Wilson	a73f8b1773	Update check-config.sh for k3s	5 years ago
Erik Wilson	b0d1ca9c21	Add check-config.sh from moby	5 years ago