Commit Graph

3594 Commits

Author SHA1 Message Date
Derek Nola
62a30b52d9 Split E2E Drone pipeline into matrix (#12086)
* Split drone e2e into multiple blocks, explicit virsh cleanup

* Create multiple registries once and reuse as long as they exist

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-16 11:37:55 -07:00
Brad Davidson
f00a2b6976 Bump kine for nats-server/v2 CVE-2025-30215
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-15 17:28:57 -07:00
Brad Davidson
3b6a17bd47 Sync golang.org/x pins with upstream
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:27:56 -07:00
Brad Davidson
e3ad921996 Fix etcd socket option config
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:27:56 -07:00
Brad Davidson
d59de48243 Bump etcd to v3.5.21
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:27:56 -07:00
Aaron Dewes
2b72cc3470 fix: Use proper key when signing kubelet certificate
I assume this was a mistake when copying and the kubelet key should have been used here.

This bug was introduced in #11471.

Signed-off-by: Aaron Dewes <aaron@nirvati.org>
(cherry picked from commit 147a3c0daf)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:27:56 -07:00
Derek Nola
2b3b4dde3d Address slow arm docker node startup
Signed-off-by: Derek Nola <derek.nola@suse.com>
(cherry picked from commit b5704e2623)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:27:56 -07:00
Derek Nola
040504f154 chore: bump kine to v0.13.13
Signed-off-by: Derek Nola <derek.nola@suse.com>
(cherry picked from commit e4c8ae4248)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:27:56 -07:00
github-actions[bot]
c6748c7981 Bump Klipper Helm and Helm Controller version (#12026)
* chore: Bump Klipper Helm and Helm Controller version

Made with ❤️️ by updatecli

* chore: Bump Klipper Helm and Helm Controller version

Made with ❤️️ by updatecli

* Fix build

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>
(cherry picked from commit 2fdc6fab07)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:27:56 -07:00
Brad Davidson
26bb74fd5f Fix windows socket prefix
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f5b0d7884f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:27:56 -07:00
Brad Davidson
e3fc476a35 Move Windows test out of Install Script workflow
Placing this in the install script test, which only runs when specific files are changed, was preventing it from being run on code changes.

In addition to moving this into the integration workflow, fix codecov for Windows and upload data after running a test pod.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit cd4be0b8c1)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:27:56 -07:00
Derek Nola
e523b729e2 Consolidate build-k3s GHA workflow for OS and ARCH (#12080)
Signed-off-by: Derek Nola <derek.nola@suse.com>
(cherry picked from commit 7c552f89c8)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:27:56 -07:00
Brad Davidson
d61005692d Silence vagrant progress output
Add --no-tty flag to all `vagrant up` commands to silence the printing of box loading progress

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 08c6c7423b)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:27:56 -07:00
Brad Davidson
537c0e5952 Add ReusePort/ReuseAddr flags to etcd config
Addresses flakes in etcd CI due to the port still being in TIME_WAIT after the server is shut down between tests

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 9deef77eef)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:27:56 -07:00
Brad Davidson
1a3f9197e4 Bump to traefik/v3.3.5, coredns/v1.12.1
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7cdf0fa688)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:27:56 -07:00
manuelbuil
de2246df87 Add error in certificate check
Signed-off-by: manuelbuil <mbuil@suse.com>
2025-04-11 13:37:34 -07:00
Derek Nola
32d7b0baeb Remove double error check
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-09 01:01:12 -04:00
Derek Nola
57afa75ac6 Align Value CLI
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-09 01:01:12 -04:00
Derek Nola
204e9f0ba7 Mark rotate-keys as GA
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-09 01:01:12 -04:00
Derek Nola
b75630f5ec Implement secrets-encryption secretbox provider
- Add testlet for new provider switch
- Handle migration between providers
- Add exception for criticalcontrolargs
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-09 01:01:12 -04:00
Derek Nola
7d7a48883e Cleanup anonymous and named volumes for docker tests (#12079)
Remove named k3s-pause volume

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-09 01:00:32 -04:00
Brad Davidson
6546ba9a4a Fix flakey etcd startup tests
Increase etcd shutdown delay to avoid "bind: address already in use" errors seen in CI. Also uses test TmpDir to ensure dir is cleaned up between tests.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-02 12:24:32 -07:00
Brad Davidson
89b5ea2da6 Add tests for control-plane component arg generation
Use mocked executor to ensure the correct args are being passed to components

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 1ba19856de)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-02 09:12:30 -07:00
Brad Davidson
fb30c1f97b Fix issue caused by default authorization-mode apiserver arg
Move arg-parsing helper functions into util, and use them to see if the user has set an authorization-config flag - and do not set authorization-mode if so.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit ee036f7bc9)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-02 09:12:30 -07:00
Brad Davidson
93dd57abe3 Rework mock executor using gomock for call validation
Generate the mock executor with mockgen and convert existing uses of the mock executor to set it up properly.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0eeac6a622)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-02 09:12:30 -07:00
Brad Davidson
a524556b3d Move etcd ready channel into executor
This eliminates the final channel that was being passed around in an internal struct. The ETCD management code passes in a func that can be polled until etcd is ready; the executor is responsible for polling this after etcd is started and closing the etcd ready channel at the correct time.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d45006be66)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:06:46 -07:00
Brad Davidson
7bc833e6ac Fix etcd tests to use mock executor
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 72bbd676f1)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:06:46 -07:00
Brad Davidson
8b8b7d3714 Move container runtime ready channel into executor
Move the container runtime ready channel into the executor interface, instead of passing it awkwardly between server and agent config structs

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit a8bc412422)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:06:46 -07:00
Brad Davidson
f185f9e721 Move apiserver ready wait into common channel
Splits server startup into prepare/start phases. Server's agent is now
started after server is prepared, but before it is started. This allows
us to properly bootstrap the executor before starting server components,
and use the executor to provide a shared channel to wait on apiserver
readiness.

This allows us to replace four separate callers of WaitForAPIServerReady
with reads from a common ready channel.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 529e748ac7)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:06:46 -07:00
Brad Davidson
498922a41c Increase log output while waiting for apiserver ready
Increases log verbosity but decreases polling frequency to avoid
spamming the console. It usually takes a couple seconds for the
apiserver to come up anyway.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 2c133692b2)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:06:46 -07:00
Brad Davidson
bc72202a20 Add context to agent token validation error
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c11c06cad4)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:06:46 -07:00
Derek Nola
0c7563b1b5 Migrate to UrfaveCLI v2 (#11831) (#12031)
* Bump rootlesskit tov 1.1.1, last of the v1 line
* Migrate to urfavecli v2
* Disable StringSlice seperattion

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-31 13:39:57 -07:00
Derek Nola
079ffa8d99 [Release-1.32] Fix upgrade test container version (#12000)
* Fix upgrade test container version

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Force docker test cleanup in CI

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Bump skew test deployment times

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Bump skew test timeout

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
v1.32.3-rc4+k3s1 v1.32.3+k3s1
2025-03-21 15:32:05 -05:00
Brad Davidson
60fc6ff0ac Bump to containerd v2.0.4
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-21 12:49:24 -07:00
Brooks Newberry
5f0c20038b fix skew test container version (#11991)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
v1.32.3-rc3+k3s1
2025-03-20 02:25:35 -07:00
Brooks Newberry
f5921ea692 update kubernetes to v1.32.3-k3s2 (#11968)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
v1.32.3-rc2+k3s1
2025-03-14 12:45:37 -07:00
Brooks Newberry
c0fb0e29cc Update to v1.32.3 (#11960)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
v1.32.3-rc1+k3s1
2025-03-12 13:07:05 -07:00
Brad Davidson
f98ebbe1d3 Fix syncing empty list of apiserver addresses during initial startup
Also add more debug logging to the sync process.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 781640ecea)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-11 20:26:26 -07:00
Derek Nola
dfffdfa25f Merge pull request #11930 from dereknola/bump_klipper_lb_1.32
[Release-1.32] Bump klipper-lb image to v0.4.13
2025-03-11 08:44:23 -07:00
Derek Nola
7034b96c20 Fix flaky rootless E2E test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
7fc127640a Bump etcd to v3.5.19
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0a47df6f60)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
3ee5641f03 Add periodic background snapshot reconcile
Interval is configurable with new etcd-snapshot-reconcile-interval flag

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d694dd1db9)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
b0d6d57442 Avoid use of github.com/pkg/errors functions that capture stack
We are not making use of the stack traces that these functions capture, so we should avoid using them as unnecessary overhead.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit bed1f66880)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
c486340a3e Bump to containerd v2.0.3/runc v1.2.5
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 66d0f1604a)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Anders Larsson
c1562b4bed Add netfilter statistic module to check-config
Signed-off-by: Anders Larsson <anders.git@larsson.xyz>
(cherry picked from commit 8aa543eb87)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
2f8be6a501 Fix panic when secret-encrypt status is checked before runtime core is ready
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e7b52cd63d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
ae726c5f55 Use etcd proxy to bootstrap control-plane-only nodes, if possible
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f940368747)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
c86147c467 Use existing server-CA and hash if available
Also wraps errors along the cluster prepare path to improve tracability.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 244bfd0c35)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
6f2e1a6d38 Serve HTTP bootstrap data from datastore before disk
Fixes issue where CA rotation would fail on servers with join URL set due to using old data from disk on other server

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 53fcadc028)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00
Brad Davidson
4420e6560b Move CR APIs to k3s-io/api
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5894af30ff)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:05 -08:00