public/k3s
1
0
Fork 0
mirror of https://git.vectorsigma.ru/public/k3s.git synced 2026-08-07 15:49:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,731 Commits 31 Branches 949 Tags
118d4323227e514aaa3719a3f1ff6d37c1bb6581
Commit Graph

2731 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Brad Davidson
118d432322 Bump kine to v0.10.1 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b32bf49541)
 2023-05-10 17:37:14 -07:00
Brad Davidson
9eeee04675 Fix token startup test 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c98137ddca)
 2023-05-10 17:37:14 -07:00
Brad Davidson
f14d33c471 Fail to validate server tokens that use bootstrap id/secret format 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit cf9ebb3259)
 2023-05-10 17:37:14 -07:00
Brad Davidson
8159076d7e Bump cni plugins to v1.2.0-k3s1 
Also add bandwidth and firewall plugins. The bandwidth plugin is
automatically registered with the appropriate capability, but the
firewall plugin must be configured by the user if they want to use it.

Ref: https://www.cni.dev/plugins/current/meta/firewall/

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit cedefeff24)
 2023-05-10 17:37:14 -07:00
Brad Davidson
173a5b9131 Fix MemberList error handling and incorrect etcd-arg passthrough 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e61fde93c1)
 2023-05-10 17:37:14 -07:00
Brad Davidson
705adedd1b Retry cluster join on "too many learners" error 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 91afb38799)
 2023-05-10 17:37:14 -07:00
Brad Davidson
82a403a0c2 Fix stack log on panic 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f1b6a3549c)
 2023-05-10 17:37:14 -07:00
Brad Davidson
bdd210e785 Fix race condition in tunnel server startup 
Several places in the code used a 5-second retry loop to wait on
Runtime.Core to be set. This caused a race condition where OnChange
handlers could be added after the Wrangler shared informers were already
started. When this happened, the handlers were never called because the
shared informers they relied upon were not started.

Fix that by requiring anything that waits on Runtime.Core to run from a
cluster controller startup hook that is guaranteed to be called before
the shared informers are started, instead of just firing it off in a
goroutine that retries until it is set.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c44d33d29b)
 2023-05-10 17:37:14 -07:00
Brad Davidson
34df1c49a5 Add e2e test for --disable-agent 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 1ca035accc)
 2023-05-10 17:37:14 -07:00
Brad Davidson
14ebfa814f Improve egress selector handling on agentless servers 
Don't set up the agent tunnel authorizer on agentless servers, and warn when agentless servers won't have a way to reach in-cluster endpoints.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 31a6386994)
 2023-05-10 17:37:14 -07:00
Brad Davidson
944beb1af3 Improve error message when CLI wrapper Exec fails 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5348b5e696)
 2023-05-10 17:37:14 -07:00
Brad Davidson
fd77c076a1 go generate 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0247794aa9)
 2023-05-10 17:37:14 -07:00
Brad Davidson
ba5d714734 Bump traefik to v2.9.10 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0bbc6ad3f0)
 2023-05-10 17:37:14 -07:00
Brad Davidson
f0d73301ba Bump k3s-root for aarch64 page size fix 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 9539147ee1)
 2023-05-10 17:37:14 -07:00
Brad Davidson
0861ce2d97 Create CRDs with schema 
Fixes an issue where CRDs were being created without schema, allowing
resources with invalid content to be created, later stalling the
controller ListWatch event channel when the invalid resources could not
be deserialized.

This also requires moving Addon GVK tracking from a status field to
an annotation, as the GroupVersionKind type has special handling
internal to Kubernetes that prevents it from being serialized to the CRD
when schema validation is enabled.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit ad41fb8c96)
 2023-05-10 17:37:14 -07:00
Brad Davidson
7ece0d9599 Bump containerd to v1.7.0 and move back into multicall binary 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-05-10 14:57:53 -07:00
Derek Nola
c206088d20 local-storage: Fix permission (#7217) (#7474) 
* local-storage: Fix permission

/var/lib/rancher/k3s/storage/ should be 700
/var/lib/rancher/k3s/storage/* should be 777

Fixes #2348



* Fix pod command field type

* Fix to int test



---------

Signed-off-by: Boleyn Su <boleyn.su@gmail.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Boleyn Su <boleyn.su@gmail.com>
Co-authored-by: Brad Davidson <brad@oatmail.org>
 2023-05-10 11:08:38 -07:00
thomasferrandiz
ef0b820ef2 Merge pull request #7360 from thomasferrandiz/backport-1.26-netpol-log-level 
[release-1.26] ensure that klog verbosity is set to the same level as logrus
 2023-05-10 15:01:32 +02:00
Ian Cardoso
414cc27528 add kube-* server flags integration tests (#7416) 
This commit adds SearchK3sLog function to find specific strings in integration tests log file and also removes FindStringInCmdAsync function since it was not being used.

Signed-off-by: Ian Cardoso <osodracnai@gmail.com>
 2023-05-09 16:50:14 -03:00
Brooks Newberry
21a96c64cc Add longhorn storage test (#6445) 
Signed-off-by: Brooks Newberry <brooks@newberry.com>
Signed-off-by: Ian Cardoso <osodracnai@gmail.com>
 2023-05-09 16:50:14 -03:00
Roberto Bonafiglia
218844aa7c Bump kube-router version to fix a bug when a port name is used 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2023-05-09 18:21:56 +02:00
Manuel Buil
743a0dd804 Merge pull request #7432 from manuelbuil/netutil1.26 
[Release 1.26] Migrate netutil methods into /utils/net.go
 2023-05-05 09:14:38 +02:00
Manuel Buil
b8619527a2 Migrate netutil methods into /utils/net.go 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2023-05-05 07:23:41 +02:00
Derek Nola
5ddb3ccaff [Release-1.26] CLI + Config Enhancement (#7403) 
* Handle multiple arguments with StringSlice flags (#7380)
* Cleanup server setup with util function

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Enable FindString to search dotD config files (#7323)
* Address multiple arg cases

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2023-05-02 15:09:35 -07:00
Derek Nola
6bda083c6c Bump Runc and Containerd (#7399) 
* Bump runc
* Bump to containerd, recombine build and go.mod version
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2023-05-02 14:04:17 -07:00
Ian Cardoso
42fd1bf090 Add integration tests for etc-snapshot server flags and refactor /tests/integration/integration.go/K3sStartServer (#7300) (#7377) 
This adds integration tests for the following flags: "--etcd-snapshot-name","--etcd-snapshot-dir","--etcd-snapshot-retention","--etcd-snapshot-schedule-cron" and "--etcd-snapshot-compress". It also refactors K3sStartServer to stop applying strings.Fields() into inputArgs, so it can accept arguments that have space in their definition.

Signed-off-by: Ian Cardoso <osodracnai@gmail.com>
(cherry picked from commit 1ac03aad43)
 2023-05-02 10:13:07 -03:00
Derek Nola
e5a199a861 Prepend release branch to dependabot (#7374) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2023-05-01 09:45:54 -07:00
Thomas Ferrandiz
0b256f08d9 ensure that klog verbosity is set to the same level as logrus 
by repeatedly settting it every second during k3s startup

Signed-off-by: Thomas Ferrandiz <thomas.ferrandiz@suse.com>
 2023-04-27 08:11:38 +00:00
github-actions[bot]
8d0255af07 Bump Trivy version (#7257) 
* chore: Bump Trivy version

Made with ❤️️ by updatecli

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v1.26.4+k3s1 		2023-04-18 09:48:27 -07:00
github-actions[bot]
779d5f3aa2 chore: Updated the content of the file "/tmp/updatecli/github/k3s-io/... (#7256) 
... k3s/conformance/Dockerfile"
Updated the content of the file "/tmp/updatecli/github/k3s-io/k3s/Dockerfile.test"

Made with ❤️️ by updatecli

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2023-04-18 09:46:56 -07:00
github-actions[bot]
554ad87c8d chore: Bump golang:alpine version (#7292) 
Made with ❤️️ by updatecli

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2023-04-18 09:46:42 -07:00
Brian Downs
257fa2c54c Update to v1.26.4-k3s1 (#7282) v1.26.4-rc1+k3s1 2023-04-13 13:51:37 -07:00
Roberto Bonafiglia
d9f40d4f5b Update install script to clean iptables rules before start 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2023-04-12 22:33:10 +02:00
Roberto Bonafiglia
0c683720ad Update kube-router to insert iptables rules right after kubernetes ones 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2023-04-12 22:33:10 +02:00
Hussein Galal
6b51ed478d Fix call for k3s-selinux versions in airgapped environments (#7264) 
* Fix call for k3s-selinux versions in airgapped environments

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* use timeout options in the donwloader

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* more fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* run verify_downloader in case binary was skipped

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2023-04-11 22:32:48 +02:00
Hussein Galal
027cc187ce Add coreos and sle micro to selinux support (#6945) 
* Add coreos and sle micro to selinux support

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Add fix for rpm-ostree

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add uninstall for rpm-ostree (coreos)

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Don't start k3s on coreos

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Don't apply live

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Typo fix

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>
 2023-04-06 23:44:07 +02:00
Hussein Galal
30638072c9 Update klipper lb to v0.4.2 (#7210) 
* Update klipper lb to v0.4.2

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update klipper lb to v0.4.3

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update klipper lb to v0.4.3 in airgap list

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2023-04-06 19:02:00 +02:00
fmoral2
6c394abb32 Add make commands to terraform automation and fix external dbs related issue (#7159) 
* test: add make commands and dependencies

Signed-off-by: Francisco <francisco.moral@suse.com>

* fix: fix issue on logic for using external dbs and dependencies

Signed-off-by: Francisco <francisco.moral@suse.com>

---------

Signed-off-by: Francisco <francisco.moral@suse.com>
 2023-04-06 12:17:13 -03:00
Roberto Bonafiglia
3e3512bdae Updated kube-route version to move the iptables ACCEPT default rule at the end of the chain 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2023-04-06 09:55:34 +02:00
Brad Davidson
d95980bba3 Lock bootstrap data with empty key to prevent conflicts 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-05 10:56:57 -07:00
dependabot[bot]
12091fc724 Bump actions/setup-go from 3 to 4 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3 to 4.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-04 16:45:13 -07:00
Brad Davidson
2992477c4b Debounce kubernetes service endpoint updates 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-04 12:02:22 -07:00
Brad Davidson
ece4d8e45c Fix tests to not hide failure location in dummp assert functions 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-04 12:02:22 -07:00
Brad Davidson
e54ceaa497 Fix issue with stale connections to removed LB server 
Track LB connections through each server so that they can be closed when it is removed.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-04 12:02:22 -07:00
Brad Davidson
5dece799df Update remotedialer to silence errors when disconnecting 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-04 12:02:22 -07:00
Guilherme Macedo
4182dcaac8 [UpdateCLI] Improve Klipper Helm and Helm controller bumps (#7146) 
Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com>
 2023-04-04 13:43:12 -05:00
Hussein Galal
127cea1f3f Upgrade helm-controller to v0.13.3 (#7209) 
* Upgrade helm-controller to v0.13.3

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Upgrade klipper-helm image in the airgap list

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2023-04-04 20:20:40 +02:00
Derek Nola
d2e04b826a Don't apply hardened args to agent (#7089) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2023-04-04 09:35:28 -07:00
Brad Davidson
d388b82d25 go generate 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-03 19:47:06 -07:00
Brad Davidson
de80c07053 Ensure that loopback is used for the advertised address when resetting 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-03 19:47:06 -07:00