Brad Davidson
703e7697b0
Tag PR image build as latest before scanning
...
This is less effort than passing the tag across steps 🤷♂️
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 378edb939d )
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-09-06 11:30:11 -07:00
Brad Davidson
88d5576be6
Fix /trivy action running against target branch instead of PR branch
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 3d6e4a793a )
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-09-06 11:30:11 -07:00
dependabot[bot]
9c537cb705
Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 ( #10795 )
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.20.0 to 0.24.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.20.0...0.24.0 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit dacc636cf4 )
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-09-06 11:30:11 -07:00
Derek Nola
be60661f18
Add trivy scanning trigger for PRs ( #10758 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
(cherry picked from commit fa6940d03d )
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-09-06 11:30:11 -07:00
Roberto Bonafiglia
e0c4e60171
Update CNI plugins version
...
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com >
2024-09-05 11:38:17 -07:00
Derek Nola
3923e0c699
Cover edge case when on new minor release for E2E upgrade test ( #10781 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-09-04 13:55:37 -07:00
Derek Nola
8bfcfd70cc
Fix deploy latest commit on E2E tests ( #10725 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-09-04 13:55:37 -07:00
Derek Nola
e8de533e90
Remove secrets encryption controller ( #10612 )
...
* Remove secrets encryption controller
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-09-04 13:55:37 -07:00
Hussein Galal
34be6d96d1
Update kubernetes to v1.31.0-k3s3 ( #10780 )
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
v1.31.0+k3s1
v1.31.0-rc2+k3s1
2024-08-30 01:47:21 +03:00
Derek Nola
c7468edbe7
Bump go dependencies to match upstream 1.31
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
v1.31.0-rc1+k3s1
2024-08-22 14:23:34 -07:00
Derek Nola
ebbb109840
Update VERSION_K8S to handle any k3s revision
...
Co-authored-by: Brad Davidson <brad@oatmail.org >
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-08-22 14:23:34 -07:00
Derek Nola
f5c6472b16
Bump Kine to v0.12.0
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-08-22 14:23:34 -07:00
Derek Nola
d358a89171
Fix secrets-encrypt metrics
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-08-22 14:23:34 -07:00
galal-hussein
178aadbe20
Add k3s-io/kubernetes tags
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2024-08-22 14:23:34 -07:00
galal-hussein
5087240e32
Downgrade Microsoft/hcsshim to v0.8.26
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2024-08-22 14:23:34 -07:00
galal-hussein
8cbcbcd044
go generate
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2024-08-22 14:23:34 -07:00
galal-hussein
20b50426ab
Update to v1.31.0
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2024-08-22 14:23:34 -07:00
github-actions[bot]
876d54cf49
chore: Bump Trivy version ( #10670 )
...
Made with ❤️ ️ by updatecli
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2024-08-16 14:12:35 -04:00
Robert Silén
518276fb77
adding MariaDB to README.md ( #10717 )
...
MariaDB is mentioned as supported in requirements, so adding to README too. Also raises a discussion earlier: https://github.com/k3s-io/k3s/issues/10686
Signed-off-by: Robert Silén <robert.silen@iki.fi >
2024-08-16 09:10:34 -07:00
Brad Davidson
649678bd89
Fix k3s-killall.sh support for custom data dir
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-08-13 09:23:12 -07:00
Derek Nola
38df76708d
Fix caching name for e2e vagrant box ( #10695 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-08-13 09:22:56 -07:00
Brooks Newberry
ae0d79c7ea
Update to v1.30.3-k3s1 and Go 1.22.5 ( #10536 )
...
Signed-off-by: Brooks Newberry <brooks@newberry.com >
(cherry picked from commit 086d9ca0fa )
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-08-13 09:21:08 -07:00
ChrisBeaker
019b0afdd8
Fix: Add $SUDO prefix to transactional-update commands in install script ( #10531 )
...
* Fix: Add $SUDO prefix to transactional-update commands in install script
This commit addresses an issue in the k3s install script where the transactional-update commands did not include the $SUDO variable. This omission caused the script to fail if sudo was not used. Adding the $SUDO prefix ensures that the script runs correctly in all environments.
Signed-off-by: ChrisBeaker <christian.siebigteroth@suse.com >
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-08-12 15:28:36 -07:00
Alireza Eskandari
22fb7049bd
Add tolerations support for DaemonSet pods
...
Signed-off-by: Alireza Eskandari <alireza.eskandari@wsd.com >
2024-08-12 13:01:27 -07:00
Brad Davidson
daf0094cc7
Bump helm-controller to v0.16.3 to drop Helm v2 support
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-08-12 11:45:13 -07:00
Derek Nola
ac247d29cf
Update to newer OS images for install testing ( #10681 )
...
* Update to newer OS images for install testing
* Update vagrant images used for E2E
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-08-12 09:26:19 -07:00
Brad Davidson
0ee714d62b
Bump containerd to v1.7.20 ( #10659 )
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-08-07 13:05:13 -07:00
Derek Nola
acb71ee379
Allow Amazon Linux 2 rpm installs
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-08-07 13:03:53 -07:00
Derek Nola
79ec016b6d
Allow kylin V10 rpm installs
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
Co-Authored-By: ErikJang <81848652+erikjang@users.noreply.github.com >
2024-08-07 13:03:53 -07:00
Derek Nola
8ff7d162cc
Allow fedora iot rpm installs
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
Co-Authored-By: Blayne Campbell <5565939+bcambl@users.noreply.github.com >
2024-08-07 13:03:53 -07:00
Derek Nola
45c04f3502
Allow Amazon Linux 2023 rpm installs
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
Co-Authored-By: ahmedali6 <87921765+ahmedali6@users.noreply.github.com >
2024-08-07 13:03:53 -07:00
Vitor Savian
3aceb85c22
Add a change for killall to not unmount server and agent directory
...
Signed-off-by: Vitor Savian <vitor.savian@suse.com >
Add recursive search and deletion of unmounted/mounted dirs in killall
Signed-off-by: Vitor Savian <vitor.savian@suse.com >
Only clean the server and agent directory if it is uninstall
Signed-off-by: Vitor Savian <vitor.savian@suse.com >
Add uninstall test to check mount points
Signed-off-by: Vitor Savian <vitor.savian@suse.com >
Add uninstall test in CI
Signed-off-by: Vitor Savian <vitor.savian@suse.com >
2024-08-07 10:06:12 -07:00
Brad Davidson
82ba778a86
bump docker/docker to v25.0.6
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-08-02 14:38:02 -07:00
Brooks Newberry
38e8b01b8f
update stable channel to v1.30.3+k3s1 ( #10647 )
2024-08-01 18:09:28 -07:00
Brad Davidson
bffdf463e1
Fix cloudprovider controller name
...
Looking at metrics revealed the cloudprovider controller name was anempty string.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-07-29 21:54:20 -07:00
Brad Davidson
e168438d44
Wire lasso metrics up to common gatherer
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-07-29 21:54:20 -07:00
Will Andrews
e2179aa957
Update pkg/cluster/managed.go
...
Co-authored-by: Derek Nola <derek.nola@suse.com >
Signed-off-by: Will Andrews <will7989@hotmail.com >
2024-07-29 16:23:17 -07:00
Will Andrews
3ec086f6f7
Update pkg/secretsencrypt/config.go
...
Co-authored-by: Brad Davidson <brad@oatmail.org >
Signed-off-by: Will Andrews <will7989@hotmail.com >
2024-07-29 16:23:17 -07:00
Will
e4f3cc7b54
remove deprecated use of wait functions
...
Signed-off-by: Will <will7989@hotmail.com >
2024-07-29 16:23:17 -07:00
Brad Davidson
e514940020
Fix inconsistent loading of config dropins when config file does not exist
...
FindString would silently skip parsing dropins if the main config file
didn't exist. If a custom config file path was passed it would raise an
error, but if we were parsing the default config file and it didn't
exist it would just silently fail to load the dropins.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-07-29 15:23:52 -07:00
Brad Davidson
9111b1f77e
Add K3S_DATA_DIR as env var for --data-dir flag
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-07-29 15:23:52 -07:00
Brad Davidson
a26a5ab1d7
Don't set K3S_DATA_DIR env var
...
This was only used to pass the bundled strongswan path through to the flannel ipsec backend, and is no longer needed. Ref: #719
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-07-29 15:23:52 -07:00
Derek Nola
59e0761043
Use higher QPS for secrets reencryption ( #10571 )
...
* Use higher QPS for secrets reencryption
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-07-26 12:07:26 -07:00
Derek Nola
a70157c12e
Allow Pprof and Superisor metrics in standalone mode ( #10576 )
...
* Allow pprof to run on server with `--disable-agent`
* Allow supervisor metrics to run on server with `--disable-agent`
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-07-26 11:23:57 -07:00
Derek Nola
ecff337e00
Enhance E2E Hardened option ( #10558 )
...
* Remove unnecessary hardened arguments
Signed-off-by: Derek Nola <derek.nola@suse.com >
* slim down hardened arguments
Signed-off-by: Derek Nola <derek.nola@suse.com >
---------
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-07-25 09:37:03 -07:00
Brad Davidson
d4c3422a85
Fix ipv6 sysctl required by non-ipv6 LoadBalancer service
...
This is a partial revert of 095ecdb034 ,
with the workaround moved into klipper-lb.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-07-24 13:40:33 -07:00
Brad Davidson
21611c5665
Cap length of generated name used for servicelb daemonset
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-07-24 13:40:33 -07:00
Brad Davidson
891e72f90f
Update secretsencrypt pagination
...
Make secretsencrypt page size and iteration consistent with other paginators
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-07-24 12:44:29 -07:00
Brad Davidson
c2216a62ad
Use pagination when retrieving etcd snapshot list
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-07-24 12:44:29 -07:00
Brad Davidson
37830fe170
Don't use server and token values from config file for etcd-snapshot commands
...
Fixes an issue where running etcd-snapshot commands on a node that has a server address set in the config will manage snapshots on that server, instead of on the local node as intended.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-07-15 10:12:50 -07:00