23 Commits

Author	SHA1	Message	Date
Brad Davidson	2989b8b2c5	Remove unnecessary copies of runtime struct ... Several types contained redundant references to ControlRuntime data. Switch to consistently accessing this via config.Runtime instead. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2022-02-28 12:05:16 -08:00
Hussein Galal	77fd3e99ec	Add cert rotation command (#4495) ... * Add cert rotation command Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * add function to check for dynamic listener file Signed-off-by: Brian Downs <brian.downs@gmail.com> * Add dynamiclistener cert rotation support Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fixes to the cert rotation Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fix ci tests Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fixes to certificate rotation command Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * more fixes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> Co-authored-by: Brian Downs <brian.downs@gmail.com>	2021-12-02 23:19:16 +02:00
Brian Downs	0a0b915921	reset buffer after use (#4279)	2021-10-22 15:56:01 -07:00
Hussein Galal	b282528ee2	Display cluster tls error only in debug mode (#4124) ... * Display cluster tls error only in debug mode Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fix Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	2021-10-13 00:00:28 +02:00
Brad Davidson	29c8b238e5	Replace klog with non-exiting fork ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2021-09-10 09:36:16 -07:00
Brad Davidson	cf12a13175	Add missing node name entry to apiserver SAN list ... Also honor node-ip when adding the node address to the SAN list, instead of hardcoding the autodetected IP address. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2021-09-01 13:22:32 -07:00
Brad Davidson	dc14f370c4	Update wrangler to v0.8.5 ... Required to support apiextensions.v1 as v1beta1 has been deleted. Also update helm-controller and dynamiclistener to track wrangler versions. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2021-08-20 18:47:16 -07:00
Hussein Galal	136dddca11	Fix storing bootstrap data with empty token string (#3422) ... * Fix storing bootstrap data with empty token string Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * delete node password secret after restoration fixes to bootstrap key vendor update Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fix comment Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fix typo Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * more fixes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fixes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fixes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * typos Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Removing dynamic listener file after restoration Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * go mod tidy Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	2021-06-22 22:42:34 +02:00
Brad Davidson	f6cec4e75d	Add kubernetes.default.svc to serving certs ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2021-06-08 12:55:20 -07:00
JenTing Hsiao	57041f0239	Add codespell CI test and fix codespell error (#2740) ... * Add codespell CI test * Fix codespell error	2020-12-22 12:35:58 -08:00
Brad Davidson	9074da7405	Fix misc nits and missing/unused imports ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2020-09-27 03:10:00 -07:00
Brad Davidson	703ba5cde7	Add a bunch of doc comments ... Also change identical error messages to clarify where problems are occurring. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2020-09-27 03:10:00 -07:00
Brad Davidson	ae916c2dec	Use const for kube-system namespace ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2020-09-27 03:10:00 -07:00
Brad Davidson	97eb28a01a	Remove unnecessary listener arg from managed DB setup ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2020-09-27 03:09:45 -07:00
Menna Elmasry	edb3e5b7a7	Add error logger to http server (#2242) ... * add error logger to http server Signed-off-by: MonzElmasry <menna.elmasry@rancher.com>	2020-09-14 23:14:30 +02:00
Brad Davidson	b1d017f892	Update dynamiclistener ... Second round of fixes for #1621 Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2020-08-18 10:38:47 -07:00
Brad Davidson	3e8141dc65	Update dynamiclistener ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2020-08-04 13:05:37 -07:00
Darren Shepherd	a18d387390	Refactor clustered DB framework	2020-06-06 16:39:41 -07:00
Darren Shepherd	7e59c0801e	Make program name a variable to be changed at compile time	2020-06-06 16:39:41 -07:00
Chuck Schweizer	ca9c9c2e1e	Adding support for TLS MinVersion and CipherSuites ... This will watch for the following kube-apiserver-arg variables and apply them to the k3s kube-apiserver https listener. --kube-apiserver-arg=tls-cipher-suites=XXXXXXX --kube-apiserver-arg=tls-min-version=XXXXXXX	2020-05-07 09:27:09 -05:00
Darren Shepherd	2f5ee914f9	Add supervisor port ... In k3s today the kubernetes API and the /v1-k3s API are combined into one http server. In rke2 we are running unmodified, non-embedded Kubernetes and as such it is preferred to run k8s and the /v1-k3s API on different ports. The /v1-k3s API port is called the SupervisorPort in the code. To support this separation of ports a new shim was added on the client in then pkg/agent/proxy package that will launch two load balancers instead of just one load balancer. One load balancer for 6443 and the other for 9345 (which is the supervisor port).	2020-05-05 15:54:51 -07:00
Darren Shepherd	6063317144	Add a couple more known SANs	2019-11-13 06:05:31 +00:00
Darren Shepherd	ba240d0611	Refactor tokens, bootstrap, and cli args	2019-10-30 19:06:49 -07:00