public/k3s
1
0
Fork 0
mirror of https://git.vectorsigma.ru/public/k3s.git synced 2026-08-09 13:19:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,189 Commits 31 Branches 949 Tags
7168f7282cd6cd56874e195b9fcb8ec00c4e1139
Commit Graph

38 Commits

Author SHA1 Message Date
Derek Nola
0663681a3d Replace rancher with k3s-io (#5585) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2022-05-19 15:54:21 -07:00
Brad Davidson
508a358d49 Print a helpful error when trying to join additional servers but etcd is not in use 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5b2c14b123)
 2022-04-15 11:15:00 -07:00
Brad Davidson
8408d19bd6 Use core constants for cert user/group values 
Also update cert gen to ensure leaf certs are regenerated if other key fields change.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 99851b0f84)
 2022-04-15 11:15:00 -07:00
Brad Davidson
b61cdce8c6 Allow agents to query non-apiserver supervisors for apiserver endpoints 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 49544e0d49)
 2022-04-15 11:15:00 -07:00
Brad Davidson
58b65cbeb1 Defer ensuring node passwords on etcd-only nodes during initial cluster bootstrap 
This allows secondary etcd nodes to bootstrap the kubelet before an
apiserver joins the cluster. Rancher waits for all the etcd nodes to
come up before adding the control-plane nodes, so this needs to be
handled properly.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 38706eeec0)
 2022-03-18 13:24:23 -07:00
Brad Davidson
5cb6b1ecbc Fix adding etcd-only node to existing cluster 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5014c9e0e8)
 2022-03-15 18:08:33 -07:00
Brad Davidson
34ba028da5 Fix use of agent creds for secrets-encrypt and config validate 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-01-06 13:11:25 -08:00
Derek Nola
2561285e8e Backport of https://github.com/k3s-io/k3s/pull/4372 (#4654) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2021-12-07 15:29:31 -08:00
Brad Davidson
3988edef25 Add containerd ready channel to delay etcd node join 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 88178ae65e)
 2021-10-20 13:05:40 -07:00
Brad Davidson
dc14f370c4 Update wrangler to v0.8.5 
Required to support apiextensions.v1 as v1beta1 has been deleted. Also
update helm-controller and dynamiclistener to track wrangler versions.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-08-20 18:47:16 -07:00
Brad Davidson
869b98bc4c Sync DisableKubeProxy into control struct 
Sync DisableKubeProxy from cfg into control before sending control to clients,
as it may have been modified by a startup hook.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-07-30 12:26:50 -07:00
Brad Davidson
90445bd581 Wait until server is ready before configuring kube-proxy (#3716) 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-07-27 14:56:05 -07:00
Brad Davidson
2705431d96 Add support for dual-stack Pod/Service CIDRs and node IP addresses (#3212) 
* Add support for dual-stack cluster/service CIDRs and node addresses

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-04-21 15:56:20 -07:00
Erik Wilson
4245fd7b67 Return http.StatusOK instead of 0 
Signed-off-by: Erik Wilson <Erik.E.Wilson@gmail.com>
 2020-12-23 16:55:47 -07:00
Erik Wilson
2fb411fc83 Fix spelling mistake 
Signed-off-by: Erik Wilson <Erik.E.Wilson@gmail.com>
 2020-12-23 15:08:07 -07:00
Erik Wilson
09eb44ba53 Bootstrap node password with local file 
Signed-off-by: Erik Wilson <Erik.E.Wilson@gmail.com>
 2020-12-23 15:08:06 -07:00
Erik Wilson
1230d7b7df Fix HA server initialization 
Signed-off-by: Erik Wilson <Erik.E.Wilson@gmail.com>
 2020-12-15 16:08:28 -08:00
Erik Wilson
92d04355f4 Use secrets for node-passwd entries and cleanup 2020-11-05 09:48:53 -07:00
Brian Downs
bb8e5374ea conform to repo conventions 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2020-09-03 18:48:30 -07:00
Brian Downs
00831f9bc8 use version.Program 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2020-09-03 08:51:17 -07:00
Brian Downs
301fb73952 add node ip to the request header for cert gen 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2020-09-02 19:15:09 -07:00
Darren Shepherd
7e59c0801e Make program name a variable to be changed at compile time 2020-06-06 16:39:41 -07:00
Darren Shepherd
ff34c5c5cf Download cert/key to agent with single HTTP request 
Since generated cert/keys are stored locally, each server has a different
copy.  In a HA setup we need to ensure we download the cert and key from
the same server so we combined HTTP requests to do that.
 2019-11-15 21:51:51 -07:00
Darren Shepherd
0ae20eb7a3 Support both http and db based bootstrap 2019-11-12 01:12:24 +00:00
Darren Shepherd
e2431bdf9d Add dqlite support 2019-11-10 03:49:56 +00:00
Darren Shepherd
ba240d0611 Refactor tokens, bootstrap, and cli args 2019-10-30 19:06:49 -07:00
Darren Shepherd
f0382329a5 Drop openapi hack 2019-08-28 20:53:39 -07:00
Erik Wilson
fdb997b4ee Fix missing early returns on routes 2019-07-30 15:44:34 -07:00
Erik Wilson
7090a7d551 Move node password to separate file 2019-06-25 15:04:04 -07:00
Erik Wilson
2c9444399b Refactor certs 2019-06-25 15:04:04 -07:00
Darren Shepherd
c0702b0492 Port to wrangler 2019-05-26 22:28:50 -07:00
Erik Wilson
e64c0298f2 Add cert per-node password authentication 2019-04-23 11:02:35 -07:00
Erik Wilson
1b2db423de Add node name to node cert generation 2019-04-19 18:20:34 +00:00
Erik Wilson
608f3a4e80 Serve static assets 
Provide a static assets route for use with helm or other air-gap needs.
 2019-03-20 00:24:27 +00:00
Darren Shepherd
1826084b24 Add ping handler 2019-02-04 16:47:53 -07:00
Darren Shepherd
1502ad2530 Package serialized version of openapi 2019-01-25 22:09:46 -07:00
Darren Shepherd
62c62cc7b4 Continued refactoring 2019-01-11 21:52:30 -07:00
Darren Shepherd
9bb7c27c62 Initial Commit 2019-01-01 01:23:01 -07:00