public/k3s
1
0
Fork 0
mirror of https://git.vectorsigma.ru/public/k3s.git synced 2026-08-03 08:59:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,361 Commits 31 Branches 949 Tags
b1a42e5d43f5cbfbda18dcbf9115d951ff22b206
Commit Graph

155 Commits

Author SHA1 Message Date
Brad Davidson
b1a42e5d43 Add ca-cert rotation integration test 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-10-08 17:03:31 -07:00
Derek Nola
ab89363e18 Fix trivy vex line (#10970) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-10-01 15:06:49 -07:00
Guilherme Macedo
0553a1a1d9 Pass Rancher's VEX report to Trivy to remove known false-positives CVEs (#10956) 
Signed-off-by: Guilherme Macedo <guilherme@gmacedo.com>
 2024-10-01 17:20:35 -04:00
Derek Nola
2739f50d77 Trivy workflow: Checkout repo to use gh cli (#10949) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-09-25 13:20:26 -07:00
Derek Nola
97e8486032 Fix trivy report download (#10943) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-09-25 10:09:09 -07:00
Derek Nola
3a268acb78 Check k3s-io organization membership not team membership for trivy scans (#10940) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-09-24 14:37:32 -07:00
Derek Nola
6731f4a70d Fix getMembershipForUserInOrg call (#10937) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-09-24 13:06:27 -07:00
Derek Nola
005711fad6 Breakup trivy scan and check comment author (#10935) 
* Check comment author on trivy scan
* Breakup trivy workflow for better permission security

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-09-24 12:10:31 -07:00
Derek Nola
61c7011cab Give good report if no CVEs found in trivy (#10853) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-09-06 14:58:26 -07:00
Brad Davidson
378edb939d Tag PR image build as latest before scanning 
This is less effort than passing the tag across steps 🤷‍♂️

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-09-05 15:21:56 -07:00
Brad Davidson
3d6e4a793a Fix /trivy action running against target branch instead of PR branch 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-09-04 15:57:39 -07:00
dependabot[bot]
dacc636cf4 Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 (#10795) 
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.20.0 to 0.24.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.20.0...0.24.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-03 09:14:54 -07:00
Derek Nola
fa6940d03d Add trivy scanning trigger for PRs (#10758) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-08-30 09:00:50 -07:00
Derek Nola
38df76708d Fix caching name for e2e vagrant box (#10695) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-08-13 09:22:56 -07:00
Derek Nola
ac247d29cf Update to newer OS images for install testing (#10681) 
* Update to newer OS images for install testing
* Update vagrant images used for E2E

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-08-12 09:26:19 -07:00
Vitor Savian
3aceb85c22 Add a change for killall to not unmount server and agent directory 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Add recursive search and deletion of unmounted/mounted dirs in killall

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Only clean the server and agent directory if it is uninstall

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Add uninstall test to check mount points

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Add uninstall test in CI

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2024-08-07 10:06:12 -07:00
Derek Nola
8f9ad1f992 Move test-compat to GHA (#10414) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-07-09 08:36:41 -07:00
Derek Nola
cff6f7aa1d Expand GHA go caching to includ newest release branch (#10307) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-06-06 14:51:08 -07:00
Brad Davidson
f9130d537d Fix embedded mirror blocked by SAR RBAC and re-enable test 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 08:33:18 -07:00
Derek Nola
4e26ee1f84 Match setup-go caching key in GitHub Actions (#9890) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-04-15 09:52:24 -07:00
Derek Nola
6624273a97 Fix embeddedmirror test 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-28 10:12:54 -07:00
Derek Nola
c98ca14198 Add wasm test to e2e matrix 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-28 10:12:54 -07:00
Derek Nola
41377540fd Use ubuntu latest for better golang caching keys (#9711) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-27 09:19:56 -07:00
Derek Nola
21c170512c Fix e2e vagrant cacheing 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-08 10:54:28 -08:00
Derek Nola
aea81c0822 Run docker tests in E2E GH Action 
Build image with new input option
Run most of the basic docker tests in E2E
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-08 10:54:28 -08:00
Derek Nola
9bd4c8a9fc Bump upload and download actions to v4 (#9666) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-07 15:56:43 -08:00
Derek Nola
da7312d082 Convert snapshotter test in e2e test 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-06 14:04:05 -08:00
Derek Nola
d022a506d5 Migrate E2E tests to GitHub Actions 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-06 14:04:05 -08:00
Derek Nola
75ccaf9942 Allow non-sudo vagrant 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-06 14:04:05 -08:00
Derek Nola
29c73e6965 Fix setup-go typos (#9634) 
* Fix setup-go typos

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-04 10:18:36 -08:00
Derek Nola
138a107f4c Reenable Install and Snapshotter Testing (#9601) 
* Use regular ubuntu runners for install and snapshotter tests
* Workaround for vagrant box caching
* Update testing readme
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-04 09:11:04 -08:00
Derek Nola
3e948aa0d5 Correct formatting of GH PR sha256sum artifact (#9472) 
* Conform to how the install script wants the sha256sum name
* Remove no-op sed for GH PR install

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-01 08:45:01 -08:00
Derek Nola
8f777d04f8 Better GitHub CI caching strategy for golang (#9495) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-01 08:41:09 -08:00
Manuel Buil
736fb2bc8d Add an integration test for flannel-backend=none 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2024-03-01 12:08:09 +01:00
Derek Nola
fa37d03395 Update install test OS matrix (#9480) 
* Remove old cgroupsv2 test
* Consolidate install test clauses into functions
* Unpin vagrant-k3s plugin version, run latest
* Add ubuntu-2204 as install test, remove ubuntu-focal
* Update nightly install matrix
* Move to Leap 15.5
* Consolidate vagrant box caching key to improve cache hits on all VM testing

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-02-29 15:41:56 -08:00
Derek Nola
922c5a6bed Unit Testing Matrix and Actions bump (#9479) 
cache is now on by default

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-02-29 15:41:05 -08:00
Brooks Newberry
3e13e3619c Update Kubernetes to v1.29.2 (#9493) 
Signed-off-by: Brooks Newberry <brooks@newberry.com>
 2024-02-15 12:48:20 -08:00
Derek Nola
b1323935dc Add codcov secret for integration tests on Push (#9422) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-02-08 09:01:36 -08:00
dependabot[bot]
5c92345423 Bump codecov/codecov-action from 3 to 4 (#9353) 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3 to 4.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-06 16:33:59 -08:00
Derek Nola
fcd1108e73 Add ability to install K3s PR Artifact from GitHub (#9185) 
* Add support for INSTALL_K3s_PR

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add sha256sum to K3s PR artifacts

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Update install sha256sum

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Revert whitespace changes

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-02-06 16:30:12 -08:00
caroline-suse-rancher
2d98c44fb3 Delete old stalebot 
delete .github/stale.yml

Signed-off-by: caroline-suse-rancher <caroline.davis@suse.com>
 2024-01-19 16:06:18 -05:00
caroline-suse-rancher
cef7e9e2dc New stale action 
This PR adds a new github stale action. This will replace our previous (and now deprecated) stalebot. Two notable differences are that issues will now go stale after 45 days of inactivity, and the most commonly used priority labels have been added for exemption.

Docs and list of inputs for stale action for reference here.

Signed-off-by: caroline-suse-rancher <caroline.davis@suse.com>
 2024-01-19 16:04:46 -05:00
Pedro Tashima
d8907ce62c Update to v1.29.1 (#9259) 
Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>
Co-authored-by: Pedro Tashima <pedro.tashima@suse.com>
 2024-01-18 10:15:18 -03:00
dependabot[bot]
9d9fbf4ff4 Bump actions/setup-go from 4 to 5 (#9036) 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4 to 5.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-02 11:04:25 -05:00
Hussein Galal
7101af36bb Update Kubernetes to v1.29.0+k3s1 (#9052) 
* Update to v1.29.0

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update to v1.29.0

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update go to 1.21.5

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update golangci-lint

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update flannel to 0.23.0-k3s1

This update uses k3s' fork of flannel to allow the removal of
multicluster cidr flag logic from the code

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix flannel calls

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update cri-tools to version v1.29.0-k3s1

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Remove GOEXPERIMENT=nounified from arm builds

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Skip golangci-lint

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Fix setup logging with newer go version

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Move logging flags to components arguments

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* add sysctl commands to the test script

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update scripts/test

Signed-off-by: Brad Davidson <brad@oatmail.org>

* disable secretsencryption tests

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
Signed-off-by: Brad Davidson <brad@oatmail.org>
Co-authored-by: Brad Davidson <brad@oatmail.org>
 2023-12-19 05:14:02 +02:00
Johnatas
3f23723035 Update to v1.28.4 (#8920) 
Signed-off-by: Johnatas <johnatas.santos@suse.com>
 2023-11-22 15:01:45 -03:00
Johnatas
6aef26e94b Update to v1.28.3 (#8682) 2023-10-19 16:54:48 -07:00
Chris Wayne
b010c941cf Fix .github regex to skip drone runs on gh action bumps (#8433) 
* Fix .github regex to skip drone runs on gh action bumps

Signed-off-by: Chris Wayne <cwayne18@gmail.com>
 2023-09-26 08:46:37 -04:00
Johnatas
6330a5b49c Update to v1.28.2 and go v1.20.8 (#8364) 
* Update to v1.28.2

Signed-off-by: Johnatas <johnatasr@hotmail.com>

* Bump containerd and stargz versions

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

* Print message on upgrade fail

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

* Send Bad Gateway instead of Service Unavailable when tunnel dial fails

Works around new handling for Service Unavailable by apiserver aggregation added in kubernetes/kubernetes#119870

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

* Add 60 seconds to server upgrade wait to account for delays in apiserver readiness

Also change cleanup helper to ensure upgrade test doesn't pollute the
images for the rest of the tests.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

---------

Signed-off-by: Johnatas <johnatasr@hotmail.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
Co-authored-by: Brad Davidson <brad.davidson@rancher.com>
 2023-09-19 10:18:47 -03:00
Hussein Galal
af50e1b096 Update to v1.28.0-k3s1 (#8199) 
* Update to v1.28.0

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update golang to v1.20.7

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* more changes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update wrangler

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update wrangler

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix nodepassword test

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix nodepassword test

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* disable CGO before running golangci-lint

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* execlude CGO Enabled checks

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Ignore reapply change error with logging

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update google api client

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2023-08-23 00:09:31 +03:00