Hussein Galal
6d3c31adf1
[Release-1.20] Add cert rotation command ( #4633 )
...
* Add cert rotation command (#4495 )
* Add cert rotation command
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* add function to check for dynamic listener file
Signed-off-by: Brian Downs <brian.downs@gmail.com >
* Add dynamiclistener cert rotation support
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fixes to the cert rotation
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fix ci tests
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fixes to certificate rotation command
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* more fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
Co-authored-by: Brian Downs <brian.downs@gmail.com >
* Upgrade dynamic listener
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* go mod tidy
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
Co-authored-by: Brian Downs <brian.downs@gmail.com >
2021-12-06 19:44:57 +02:00
Manuel Buil
be62f43986
Merge pull request #4618 from manuelbuil/loggingFlannel1.20
...
[Release 1.20] Improve flannel logging
2021-12-03 21:14:31 +01:00
Manuel Buil
e34e7cc164
Improve flannel logging
...
Signed-off-by: Manuel Buil <mbuil@suse.com >
2021-12-02 17:35:18 +01:00
Brad Davidson
b8a1f45550
go generate
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-11-23 16:39:51 -08:00
Brad Davidson
261a9b1464
Fix rancher traefik upgrade suggestion
...
* Backport traefik repackaging logic from release-1.21
* Fix rancher traefik upgrade suggestion
* Add package version to traefik helm chart
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-11-23 16:39:51 -08:00
Chris Kim
a8382564e6
[release-1.20] Bump Kubernetes to v1.20.13-k3s1 ( #4532 )
...
* Update to v1.20.13
* Bump sonobuoy and golang
* Change test timeout to 60m
* Bump containerd to v1.14.12-k3s1
Signed-off-by: Chris Kim <oats87g@gmail.com >
2021-11-18 17:07:00 -08:00
Brad Davidson
2f3d398cef
Fix log/reap reexec
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-11-01 14:59:23 -07:00
Hussein Galal
6223e3e8ec
Update to v1.20.12 ( #4351 )
...
* Update to v1.20.12
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* Update to v1.20.12
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-10-28 22:38:29 +02:00
galal-hussein
c57c7646b9
Update peer address when running cluster-reset
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-10-25 15:49:16 -07:00
Brad Davidson
a621c766f3
Bump klipper-helm version
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-10-22 15:06:03 -07:00
Manuel Buil
81b531efde
Merge pull request #4268 from manuelbuil/update_flannel_dual_stack_1.20
...
[Release-1.20] Update to the newest flannel
2021-10-22 15:24:47 +02:00
Manuel Buil
f399bd29b1
Update to flannel v0.14.1
...
Signed-off-by: Manuel Buil <mbuil@suse.com >
2021-10-22 09:05:50 +02:00
Brad Davidson
5196ebe32a
Refactor log and reaper exec to omit MAINPID
...
Using MAINPID breaks systemd's exit detection, as it stops watching the
original pid, but is unable to watch the new pid as it is not a child
of systemd itself. The best we can do is just notify when execing the child
process.
We also need to consolidate forking into a sigle place so that we don't
end up with multiple levels of child processes if both redirecting log
output and reaping child processes.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit dc18ef2e51
2021-10-20 13:09:35 -07:00
Brian Downs
9c5236189a
[Release-1.20] - Add etcd s3 timeout ( #4207 ) ( #4227 )
2021-10-18 10:45:29 -07:00
Brian Downs
2e9c9e8856
set transport to skip verify if se skip flag passed ( #4102 ) ( #4105 )
2021-10-07 12:47:24 -07:00
Brad Davidson
9cb5fb5716
Bump containerd to v1.4.11+k3s1
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-10-04 13:28:35 -07:00
Brad Davidson
e1bd9f30d8
Don't evacuate the root cgroup when rootless
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-10-01 16:21:07 -07:00
Brad Davidson
a2efb6eb3c
Skip tests that violate version skew policy
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-09-30 11:06:56 -07:00
Brad Davidson
b74cdd7261
Fix PREVIOUS_CHANNEL lookup when current minor release is not stable
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 156bae2940
2021-09-30 11:06:56 -07:00
Brad Davidson
2f9a89c8c0
Update rootless-containers
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-09-29 13:18:57 -07:00
Brad Davidson
2907fb1efe
Properly handle operation as init process
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-09-29 13:18:57 -07:00
Brad Davidson
bc6ad5a90d
Update build images to python3 for compat with recent gsutil change
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-09-23 16:11:51 -07:00
Manuel Buil
b247e74e36
Merge pull request #4030 from manuelbuil/v1.20.11-k3s1
...
Update Kubernetes to v1.20.11
2021-09-17 11:32:28 +02:00
Manuel Buil
0bff86bc84
Update to v1.20.11
...
Signed-off-by: Manuel Buil <mbuil@suse.com >
2021-09-16 23:15:17 +02:00
Derek Nola
e9d418cdb6
Removed experimental from cluster commands ( #4034 )
...
Signed-off-by: dereknola <derek.nola@suse.com >
2021-09-16 11:07:29 -07:00
Manuel Buil
c6077f017d
Update to v1.20.11
...
Signed-off-by: Manuel Buil <mbuil@suse.com >
2021-09-16 18:26:26 +02:00
Hussein Galal
c9a11a3c8d
[release-1.20] Fix condition for adding kubernetes endpoints ( #3947 )
...
* Fix condition for adding kubernetes endpoints (#3941 )
* Fix condition for adding kubernetes endpoints
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* Fix condition for adding kubernetes endpoints
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fix get addresses
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-08-31 20:32:56 +02:00
Hussein Galal
5ff22d0e7b
Reset load balancer state during restoraion ( #3879 )
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
Reset load balancer state during restoraion
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-08-18 18:58:57 +02:00
Brad Davidson
fedc68f73d
Update Kubernetes to v1.20.10-k3s1
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-08-16 14:35:56 -07:00
Brad Davidson
82f7488aa1
Bump containerd to v1.4.9-k3s1
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-08-16 13:34:08 -07:00
Brad Davidson
93c20fa4a4
Bump helm-controller to work around tiller crashes
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-08-13 12:57:13 -07:00
Malte Starostik
5f042d1010
Fix URL pruning when joining an etcd member
...
* Fix URL pruning when joining an etcd member
Problem:
Existing member clientURLs were checked if they contain the joining
node's IP. In some edge cases this would prune valid URLs when the
joining IP is a substring match of the only existing member's IP.
Because of this, it was impossible to e.g. join 10.0.0.2 to an existing
node that has an IP of 10.0.0.2X or 10.0.0.2XX:
level=fatal msg="starting kubernetes: preparing server: start managed database:
joining etcd cluster: etcdclient: no available endpoints"
Solution:
Fixed by properly parsing the URLs and comparing the IPs for equality
instead of substring match.
Signed-off-by: Malte Starostik <info@stellaware.de >
(cherry picked from commit b23955e835brad.davidson@rancher.com >
2021-08-13 11:49:45 -07:00
Brian Downs
6c39336afc
account for an s3 folder when listing objects ( #3807 ) ( #3813 )
...
* account for an s3 folder when listing objects
2021-08-09 17:34:57 -07:00
Hussein Galal
a13c952b33
[Release-1.20] fix Node stuck at deletion ( #3776 )
...
* fix Node stuck at deletion
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fix Node stuck at deletion
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-08-06 21:20:48 +02:00
Brad Davidson
1769e7edab
Bump helm-controller to v0.10.2
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-08-05 09:35:55 -07:00
David Nuzik
e365bc712c
Merge pull request #3691 from galal-hussein/fix_multiple_bootstrap_keys_120
...
[Release-1.20] Fix multiple bootstrap keys found
2021-07-21 15:00:42 -07:00
galal-hussein
ece389b64f
Fix multiple bootstrap keys found
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
migrate empty string key properly
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
simplifying the code
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
migrate old token key format
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
fix warning msg
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
replace error with warn in delete
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
more fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
more fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-07-21 22:58:48 +02:00
Brad Davidson
f7a0256170
Bump containerd to v1.4.8-k3s1
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-07-20 15:04:49 -07:00
Derek Nola
6c6adcb5eb
Fix to allow prune to correctly cleanup custom named snapshots ( #3649 ) ( #3673 )
...
Signed-off-by: dereknola <derek.nola@suse.com >
2021-07-20 10:03:36 -07:00
Manuel Buil
12a78da30a
Merge pull request #3666 from manuelbuil/issue_3634
...
[release-1.20] Upgrade k3s-root version
2021-07-19 21:50:40 +02:00
Manuel Buil
3966b7ab3e
[release-1.20] Upgrade k3s-root version
...
Bump k3s-root to 0.9.1
Linked issue: https://github.com/k3s-io/k3s/issues/3634
Signed-off-by: Manuel Buil <mbuil@suse.com >
2021-07-19 20:44:35 +02:00
Chris Kim
12be663c53
[release-1.20] Bump Kubernetes to v1.20.9 ( #3655 )
...
* Bump golang to 1.15.14
* Update to v1.20.9
Signed-off-by: Chris Kim <oats87g@gmail.com >
2021-07-16 09:55:59 -07:00
Hussein Galal
bd62da1310
Fix cluster reset ( #3650 )
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-07-16 03:40:33 +02:00
Hussein Galal
e45dea3b14
Fix delete issue for etcd s3 snapshots ( #3647 )
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-07-16 01:34:39 +02:00
Hussein Galal
cd6e3ccd31
[release-1.20] - Backport K3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a token ( #3516 )
...
* Fix storing bootstrap data with empty token string (#3422 )
* Fix storing bootstrap data with empty token string
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* delete node password secret after restoration
fixes to bootstrap key
vendor update
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fix comment
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fix typo
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* more fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* typos
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* Removing dynamic listener file after restoration
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* go mod tidy
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* go mod vendor
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fix a runtime core panic
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* update kine
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* revert the helm controller update
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* Fix calling delete in kine
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-07-13 22:58:58 +02:00
Brian Downs
5b791c1387
Backport issue 3414 release 1.20 2 ( #3623 )
...
* Add the ability to list etcd snapshots (#3303 )
* add ability to list local and s3 etcd snapshots
* Add the ability to prune etcd snapshots (#3310 )
* add prune subcommand to force rentention policy enforcement
* add etcd snapshot save subcommand
* add retention default and wire in s3 prune
2021-07-13 06:47:54 -07:00
Brian Downs
c15434c2dd
prevent snapshot save when snapshots are disabled ( #3475 ) ( #3611 )
...
* prevent snapshot save when snapshots are disabled
2021-07-09 12:09:59 -07:00
Siegfried Weber
2b2f3182db
Sign CSRs for kubelet-serving with the server CA
...
Problem:
Only the client CA is passed to the kube-controller-manager and
therefore CSRs with the signer name "kubernetes.io/kubelet-serving" are
signed with the client CA. Serving certificates must be signed with the
server CA otherwise e.g. "kubectl logs" fails with the error message
"x509: certificate signed by unknown authority".
Solution:
Instead of providing only one CA via the kube-controller-manager
parameter "--cluster-signing-cert-file", the corresponding CA for every
signer is set with the parameters
"--cluster-signing-kube-apiserver-client-cert-file",
"--cluster-signing-kubelet-client-cert-file",
"--cluster-signing-kubelet-serving-cert-file", and
"--cluster-signing-legacy-unknown-cert-file".
Signed-off-by: Siegfried Weber <mail@siegfriedweber.net >
(cherry picked from commit e77fd18270
2021-07-08 16:53:40 -07:00
Ricardo Weir
f8311d6ff3
[release-1.20] Update coredns ( #3541 )
...
* Update coredns from 1.6.9 to 1.8.3
Signed-off-by: Ricardo Weir <ricardo.weir@suse.com >
2021-07-08 16:33:48 -07:00
Brian Downs
1a964eff80
Merge pull request #3509 from briandowns/backport_issue-3414_release_1.20
...
[Backport 1.20] - fix possible race where bootstrap data might not save
2021-06-30 08:49:40 -07:00
