Commit Graph

3560 Commits

Author SHA1 Message Date
Brooks Newberry
5f0c20038b fix skew test container version (#11991)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
v1.32.3-rc3+k3s1
2025-03-20 02:25:35 -07:00
Brooks Newberry
f5921ea692 update kubernetes to v1.32.3-k3s2 (#11968)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
v1.32.3-rc2+k3s1
2025-03-14 12:45:37 -07:00
Brooks Newberry
c0fb0e29cc Update to v1.32.3 (#11960)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
v1.32.3-rc1+k3s1
2025-03-12 13:07:05 -07:00
Brad Davidson
f98ebbe1d3 Fix syncing empty list of apiserver addresses during initial startup
Also add more debug logging to the sync process.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 781640ecea)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-11 20:26:26 -07:00
Derek Nola
dfffdfa25f Merge pull request #11930 from dereknola/bump_klipper_lb_1.32
[Release-1.32] Bump klipper-lb image to v0.4.13
2025-03-11 08:44:23 -07:00
Derek Nola
7034b96c20 Fix flaky rootless E2E test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
7fc127640a Bump etcd to v3.5.19
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0a47df6f60)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
3ee5641f03 Add periodic background snapshot reconcile
Interval is configurable with new etcd-snapshot-reconcile-interval flag

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d694dd1db9)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
b0d6d57442 Avoid use of github.com/pkg/errors functions that capture stack
We are not making use of the stack traces that these functions capture, so we should avoid using them as unnecessary overhead.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit bed1f66880)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
c486340a3e Bump to containerd v2.0.3/runc v1.2.5
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 66d0f1604a)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Anders Larsson
c1562b4bed Add netfilter statistic module to check-config
Signed-off-by: Anders Larsson <anders.git@larsson.xyz>
(cherry picked from commit 8aa543eb87)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
2f8be6a501 Fix panic when secret-encrypt status is checked before runtime core is ready
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e7b52cd63d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
ae726c5f55 Use etcd proxy to bootstrap control-plane-only nodes, if possible
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f940368747)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
c86147c467 Use existing server-CA and hash if available
Also wraps errors along the cluster prepare path to improve tracability.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 244bfd0c35)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
6f2e1a6d38 Serve HTTP bootstrap data from datastore before disk
Fixes issue where CA rotation would fail on servers with join URL set due to using old data from disk on other server

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 53fcadc028)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
4420e6560b Move CR APIs to k3s-io/api
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5894af30ff)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Somesh Bhalsing
4a3d314001 fix: move CONFIG_SECCOMP to generally necessary category in check-config command
Signed-off-by: Somesh Bhalsing <somesh.bhalsing@gmail.com>
(cherry picked from commit 6131ea15b2)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
0123137a67 Add etcd snapshot metrics
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6199b79f4b)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
25a764777e Add static bin dir support to k3s docker image
Static bin dir is first in search path and is on /var/lib/rancher/k3s volume, which can be persisted by users. If the volume is empty it will just fall back to the legacy /bin dir.

(cherry picked from commit b2d495e17f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Derek Nola
26e3fa9775 Reenable skew test for 1.32/master
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
268ea5ab7e Move away from docker e2e images, use gcr and ghcr
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
4c2de6ddfc Migrate svcpolicies E2E test to docker
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
0be54708b8 Expand E2E test matrix to cover all possible tests that fit on GHA
Fix rootless test

Fix svc firewall E2E test, broken by #11711

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
99f584526e Replace e2e.ParseNodes function with general ParseNodes and NodesReady test functions
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
9fb132505c Add E2E AllNodes helper function
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
efcf40281d Fix typo on conformance script (#11792)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
3a35b3ac56 Migrate E2E SecretsEncryption to Docker test
Remove secrets encryption E2E from Drone

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
02abed3a72 Don't run snapshotrestore on flaky arm64 runners
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
86c84e1375 Migrate E2E autoimport to Docker test
Simplify DockerNode structs
Remove autoimport from E2E
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
6313488482 Remove unused docker tests
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
e8223b3895 Migrate hardened docker test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
071c68b9d0 Fix various E2E test function names and descriptions
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
7c824e599b Migrate E2E Token test into a Docker Token test
Remove E2E token test

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
74d1814965 Align docker and e2e variable spelling
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
b01b892e3a Only bump trivy on the minor release (#11773)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Derek Nola
8adb6dafdd Reduce cache thrashing on E2E vagrant boxes. Don't cache for windows unit tests. (#11769)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 09:15:00 -08:00
Roberto Bonafiglia
2405ceaf24 Revert "Add ability to pass configuration options to flannel backend"
This reverts commit 8643576985.

Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
2025-03-05 08:06:13 +01:00
Brad Davidson
381620efbd Bump containerd for go-cni deadlock fix
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
v1.32.2-rc3+k3s1 v1.32.2+k3s1
2025-02-21 12:25:33 -08:00
Brad Davidson
6332438269 e2e: wait for deployments before getting logs
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
v1.32.2-rc2+k3s1
2025-02-20 18:07:17 -08:00
Brad Davidson
ebd1cac98c e2e: Fix curl test timeouts
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-20 18:07:17 -08:00
Brad Davidson
4b44c0b511 Fix missing migration for containerd registry.configs plugin namespace
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-20 18:07:17 -08:00
Brad Davidson
d02b1bd8e1 Render CNI dir config whenever vars are set
RKE2 on Windows sets CNI bin dirs in node config even though embedded flannel is disabled (NoFlannel=true). We need to gate rendering this config on the vars being, set NOT on NoFlannel being false.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-20 18:07:17 -08:00
Rafael
45ac764531 [release-1.32] Update to v1.32.2-k3s1 and Go 1.23.6 (#11788)
* Update to v1.32.2

Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com>

* Increase test timeout

Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com>

---------

Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com>
v1.32.2-rc1+k3s1
2025-02-16 16:57:02 -03:00
Brad Davidson
ff6369579a Fix FetchIngressIP error checking
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:03 -08:00
Brad Davidson
c5a53bccc7 Move windows build to separate job
Don't block other linux steps on building the windows binary

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 20a9a6bfc3)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:03 -08:00
Brad Davidson
3b90bf6532 Update containerd config schema to version 3
Ref: https://github.com/containerd/containerd/blob/release/2.0/docs/cri/config.md

Since this is a breaking change, add support for a new v3 template file. If no v3 template is present, fall back to checking for the legacy v2 template and render the old structure.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit bc45972398)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:03 -08:00
Brad Davidson
8a3086bd11 Upgrade containerd to v2.0.2
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 124e46bccf)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:03 -08:00
Brad Davidson
639931cb59 Fix wasm ingress test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 04ed6c0996)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:03 -08:00
Brad Davidson
37ebcd9351 Bump traefik to 3.3.2
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 77cf99aa5f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:03 -08:00
Brad Davidson
d2f13bd9b8 Add windows smoke test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3aa24cdde8)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:03 -08:00