public/k3s
1
0
Fork 0
mirror of https://git.vectorsigma.ru/public/k3s.git synced 2026-07-30 07:29:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,793 Commits 31 Branches 949 Tags
6d3c31adf10000ee50003bf2cedf8d3cc17f8cc1
Commit Graph

675 Commits

Author SHA1 Message Date
Hussein Galal
6d3c31adf1 [Release-1.20] Add cert rotation command (#4633) 
* Add cert rotation command (#4495)

* Add cert rotation command

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* add function to check for dynamic listener file

Signed-off-by: Brian Downs <brian.downs@gmail.com>

* Add dynamiclistener cert rotation support

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fixes to the cert rotation

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix ci tests

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fixes to certificate rotation command

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* more fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Co-authored-by: Brian Downs <brian.downs@gmail.com>

* Upgrade dynamic listener

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* go mod tidy

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Co-authored-by: Brian Downs <brian.downs@gmail.com>
 2021-12-06 19:44:57 +02:00
Manuel Buil
e34e7cc164 Improve flannel logging 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-12-02 17:35:18 +01:00
Brad Davidson
b8a1f45550 go generate 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-11-23 16:39:51 -08:00
Brad Davidson
2f3d398cef Fix log/reap reexec 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-11-01 14:59:23 -07:00
galal-hussein
c57c7646b9 Update peer address when running cluster-reset 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-10-25 15:49:16 -07:00
Manuel Buil
f399bd29b1 Update to flannel v0.14.1 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-10-22 09:05:50 +02:00
Brad Davidson
5196ebe32a Refactor log and reaper exec to omit MAINPID 
Using MAINPID breaks systemd's exit detection, as it stops watching the
original pid, but is unable to watch the new pid as it is not a child
of systemd itself. The best we can do is just notify when execing the child
process.

We also need to consolidate forking into a sigle place so that we don't
end up with multiple levels of child processes if both redirecting log
output and reaping child processes.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit dc18ef2e51)
 2021-10-20 13:09:35 -07:00
Brian Downs
9c5236189a [Release-1.20] - Add etcd s3 timeout (#4207) (#4227) 2021-10-18 10:45:29 -07:00
Brian Downs
2e9c9e8856 set transport to skip verify if se skip flag passed (#4102) (#4105) 2021-10-07 12:47:24 -07:00
Brad Davidson
e1bd9f30d8 Don't evacuate the root cgroup when rootless 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-01 16:21:07 -07:00
Brad Davidson
2f9a89c8c0 Update rootless-containers 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-09-29 13:18:57 -07:00
Brad Davidson
2907fb1efe Properly handle operation as init process 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-09-29 13:18:57 -07:00
Derek Nola
e9d418cdb6 Removed experimental from cluster commands (#4034) 
Signed-off-by: dereknola <derek.nola@suse.com>
 2021-09-16 11:07:29 -07:00
Hussein Galal
c9a11a3c8d [release-1.20] Fix condition for adding kubernetes endpoints (#3947) 
* Fix condition for adding kubernetes endpoints (#3941)

* Fix condition for adding kubernetes endpoints

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Fix condition for adding kubernetes endpoints

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix get addresses

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-08-31 20:32:56 +02:00
Hussein Galal
5ff22d0e7b Reset load balancer state during restoraion (#3879) 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Reset load balancer state during restoraion

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-08-18 18:58:57 +02:00
Malte Starostik
5f042d1010 Fix URL pruning when joining an etcd member 
* Fix URL pruning when joining an etcd member

Problem:
Existing member clientURLs were checked if they contain the joining
node's IP. In some edge cases this would prune valid URLs when the
joining IP is a substring match of the only existing member's IP.
Because of this, it was impossible to e.g. join 10.0.0.2 to an existing
node that has an IP of 10.0.0.2X or 10.0.0.2XX:

level=fatal msg="starting kubernetes: preparing server: start managed database:
joining etcd cluster: etcdclient: no available endpoints"

Solution:
Fixed by properly parsing the URLs and comparing the IPs for equality
instead of substring match.

Signed-off-by: Malte Starostik <info@stellaware.de>
(cherry picked from commit b23955e835)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-08-13 11:49:45 -07:00
Brian Downs
6c39336afc account for an s3 folder when listing objects (#3807) (#3813) 
* account for an s3 folder when listing objects
 2021-08-09 17:34:57 -07:00
Hussein Galal
a13c952b33 [Release-1.20] fix Node stuck at deletion (#3776) 
* fix Node stuck at deletion

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix Node stuck at deletion

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-08-06 21:20:48 +02:00
Brad Davidson
1769e7edab Bump helm-controller to v0.10.2 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-08-05 09:35:55 -07:00
galal-hussein
ece389b64f Fix multiple bootstrap keys found 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

migrate empty string key properly

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

simplifying the code

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

migrate old token key format

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

fix warning msg

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

replace error with warn in delete

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

more fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

more fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-07-21 22:58:48 +02:00
Derek Nola
6c6adcb5eb Fix to allow prune to correctly cleanup custom named snapshots (#3649) (#3673) 
Signed-off-by: dereknola <derek.nola@suse.com>
 2021-07-20 10:03:36 -07:00
Hussein Galal
bd62da1310 Fix cluster reset (#3650) 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-07-16 03:40:33 +02:00
Hussein Galal
e45dea3b14 Fix delete issue for etcd s3 snapshots (#3647) 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-07-16 01:34:39 +02:00
Hussein Galal
cd6e3ccd31 [release-1.20] - Backport K3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a token (#3516) 
* Fix storing bootstrap data with empty token string (#3422)

* Fix storing bootstrap data with empty token string

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* delete node password secret after restoration

fixes to bootstrap key

vendor update

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix comment

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix typo

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* more fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* typos

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Removing dynamic listener file after restoration

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* go mod tidy

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* go mod vendor

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix a runtime core panic

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update kine

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* revert the helm controller update

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Fix calling delete in kine

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-07-13 22:58:58 +02:00
Brian Downs
5b791c1387 Backport issue 3414 release 1.20 2 (#3623) 
* Add the ability to list etcd snapshots (#3303)
* add ability to list local and s3 etcd snapshots
* Add the ability to prune etcd snapshots (#3310)
* add prune subcommand to force rentention policy enforcement
* add etcd snapshot save subcommand
* add retention default and wire in s3 prune
 2021-07-13 06:47:54 -07:00
Brian Downs
c15434c2dd prevent snapshot save when snapshots are disabled (#3475) (#3611) 
* prevent snapshot save when snapshots are disabled
 2021-07-09 12:09:59 -07:00
Siegfried Weber
2b2f3182db Sign CSRs for kubelet-serving with the server CA 
Problem:
Only the client CA is passed to the kube-controller-manager and
therefore CSRs with the signer name "kubernetes.io/kubelet-serving" are
signed with the client CA. Serving certificates must be signed with the
server CA otherwise e.g. "kubectl logs" fails with the error message
"x509: certificate signed by unknown authority".

Solution:
Instead of providing only one CA via the kube-controller-manager
parameter "--cluster-signing-cert-file", the corresponding CA for every
signer is set with the parameters
"--cluster-signing-kube-apiserver-client-cert-file",
"--cluster-signing-kubelet-client-cert-file",
"--cluster-signing-kubelet-serving-cert-file", and
"--cluster-signing-legacy-unknown-cert-file".

Signed-off-by: Siegfried Weber <mail@siegfriedweber.net>
(cherry picked from commit e77fd18270)
 2021-07-08 16:53:40 -07:00
Ricardo Weir
f8311d6ff3 [release-1.20] Update coredns (#3541) 
* Update coredns from 1.6.9 to 1.8.3

Signed-off-by: Ricardo Weir <ricardo.weir@suse.com>
 2021-07-08 16:33:48 -07:00
Brian Downs
1a964eff80 Merge pull request #3509 from briandowns/backport_issue-3414_release_1.20 
[Backport 1.20] - fix possible race where bootstrap data might not save
 2021-06-30 08:49:40 -07:00
Brian Downs
90e8156910 err func call 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 11:33:15 -07:00
Brian Downs
4c22ed1f73 fix possible race where bootstrap data might not save 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 10:24:09 -07:00
Brian Downs
96a9521dab add log message indicating etcd snapshots are disabled 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 10:22:20 -07:00
Brian Downs
d4ca53e426 reference node name when needed 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 10:19:50 -07:00
Brian Downs
67bf031818 update 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 10:08:48 -07:00
Brian Downs
c814c05c76 update comment 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 10:08:32 -07:00
Brian Downs
9276c122cd remove debug line 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 10:08:25 -07:00
Brian Downs
ea2b314272 pr remediations 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 10:08:18 -07:00
Brian Downs
2fff8da520 remove debug line 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 10:08:12 -07:00
Brian Downs
7e6778efe5 remove unnecessary code 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 10:08:04 -07:00
Brian Downs
49073cd2ff add timeouts around s3 operations 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 10:07:55 -07:00
Brian Downs
78067d4d95 update comments, remove unneeded code 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 10:07:48 -07:00
Brian Downs
605473e259 fix delete logic, update subcommand functionality 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 10:07:41 -07:00
Brian Downs
bfea9247cf initial 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 10:07:33 -07:00
Brian Downs
f0a752ef80 move snapshot save into if nil check 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 09:54:13 -07:00
Brian Downs
80b1ca2586 move map nil check 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 09:53:58 -07:00
Brian Downs
e9bc6bdc09 initialize map if nil 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 09:53:52 -07:00
Brian Downs
59b52a157d refactor snapshot storage processing logic 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 09:53:43 -07:00
Brian Downs
3a834aae59 change string interpolation var in error msg 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 09:53:29 -07:00
Brian Downs
574648ef6f update error message with context about failure 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 09:53:21 -07:00
Brian Downs
b60ee806f5 add nodeName to etcd struct, update refs 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-06-29 09:53:13 -07:00