public/k3s
1
0
Fork 0
mirror of https://git.vectorsigma.ru/public/k3s.git synced 2026-08-04 21:49:46 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,141 Commits 31 Branches 949 Tags
b33e710f74d770bd13b613ebad2a3ad41da0b2fd
Commit Graph

1342 Commits

Author SHA1 Message Date
Thomas Anderson
9c075b1f42 Allow LPP to read helper logs (#9834) 
Signed-off-by: Thomas Anderson <127358482+zc-devs@users.noreply.github.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-11 12:32:13 -07:00
Brad Davidson
03c02c693c Update packaged manifests 
* Update traefik chart to bump image tag and fix quoting
* Fix image quoting in flat manifests
* Update local-path-provisioner config to stop using deprecated hostpath volume type

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-11 10:01:16 -07:00
Brad Davidson
73256e81fb Actually fix agent certificate rotation 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 4cc73b1fee)
 2024-04-11 10:01:16 -07:00
Brad Davidson
28e537f407 Don't log 'apiserver disabled' error sent by etcd-only nodes 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 08f1022663)
 2024-04-11 10:01:16 -07:00
Brad Davidson
820a8abd7d Improve etcd load-balancer startup behavior 
Prefer the address of the etcd member being joined, and seed the full address list immediately on startup.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7d9abc9f07)
 2024-04-11 10:01:16 -07:00
Brad Davidson
8b089a4ffb Move etcd snapshot management CLI to request/response 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit fe465cc832)
 2024-04-11 10:01:16 -07:00
Brad Davidson
29667f317b Add supervisor cert/key to rotate list 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 60248c42de)
 2024-04-11 10:01:16 -07:00
Brad Davidson
870030cc9a Add workaround for containerd hosts.toml bug 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f2961fb5d2)
 2024-04-11 10:01:16 -07:00
Brad Davidson
d5a85d7307 Add certificate expiry check and warnings 
* Add ADR
* Add `k3s certificate check` command.
* Add periodic check and events when certs are about to expire.
* Add metrics for certificate validity remaining, labeled by cert subject

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7f659759dd)
 2024-04-11 10:01:16 -07:00
Brad Davidson
f8e4828963 Add health-check support to loadbalancer 
* Adds support for health-checking loadbalancer servers. If a
  health-check fails when dialing, all existing connections to the
  server will be closed.
* Wires up a remotedialer tunnel connectivity check as the health check
  for supervisor/apiserver connections.
* Wires up a simple ping request to the supervisor port as the health
  check for etcd connections.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c51d7bfbd1)
 2024-04-11 10:01:16 -07:00
Brad Davidson
ba01c47611 Fix etcd snapshot reconcile for agentless nodes 
Disable cleanup of orphaned snapshots and patching of node annotations if running agentless

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit edb0440017)
 2024-04-11 10:01:16 -07:00
Brad Davidson
6d2e9314b1 Fix error when image has already been pulled 
CRI and containerd APIs disagree about the registry names - CRI supports
index.docker.io as an alias for docker.io, while containerd does not.
Use the actual stored RepoTag to determine what image to ask containerd for.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f099bfa508)
 2024-04-11 10:01:16 -07:00
Brad Davidson
8b67ddb359 Respect cloud-provider fields set by kubelet 
Don't clobber the providerID field and instance-type/region/zone labels if provided by the kubelet. This allows the user to set these to the correct values when using the embedded CCM in a real cloud environment.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 65cd606832)
 2024-04-11 10:01:16 -07:00
Brad Davidson
4d13ba9435 Send error response if member list cannot be retrieved 
Prevents joining nodes from being stuck with bad initial member list if there is a transient failure, or if they try to join themselves

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d7cdbb7d4d)
 2024-04-11 10:01:16 -07:00
Brad Davidson
2ca497e02a Move error response generation code into util 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7a2a2d075c)
 2024-04-11 10:01:16 -07:00
Derek Nola
88b2b1f6a6 Bump spegel to v0.0.20-k3s1 (#9880) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-04-09 09:03:37 -07:00
Vitor Savian
70bd37793f Add tls for kine 
* Bump kine
* Add integration tests for kine with tls

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2024-04-02 11:41:35 -03:00
Derek Nola
993f67738b Transition from deprecated pointer library to ptr (#9801) (#9824) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-30 21:30:10 -07:00
Derek Nola
1cde5b83ce Remove old pinned dependencies (#9827) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-30 21:29:45 -07:00
Vitor Savian
88df9583ca Add a new error when kine is with disable apiserver or disable etcd 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2024-03-28 09:37:12 -03:00
Brad Davidson
aa3a18ba9b Fix wildcard entry upstream fallback 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-12 23:31:33 -07:00
Brad Davidson
c15e17676d Warn and suppress duplicate registry mirror endpoints 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Brad Davidson
3cef278fcb Bump metrics-server to v0.7.0 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Vitor Savian
8202e9305e Fix wildcard with embbeded registry test 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 59c724f7a6)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Flavio Castelli
0d777dcb2f fix: use correct wasm shims names 
Fix the wasm shim detection and the containerd configuration generation.

Prior to this commit, the binary and the `RuntimeType` values were not
correct.

Signed-off-by: Flavio Castelli <fcastelli@suse.com>
(cherry picked from commit 64e4f0e6e7)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Brad Davidson
f10b4afa73 Don't register embedded registry address as an upstream registry 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 091a5c8965)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Brad Davidson
a0339c8d1f Remove filtering of wildcard mirror entry 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b5a4846e9d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Brad Davidson
6ceba8be08 Add env var to allow spegel mirroring of latest tag 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 84a071a81e)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Philip Laine
4e57230e08 Bump spegel to v0.0.18-k3s4 
Signed-off-by: Philip Laine <philip.laine@gmail.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 26feb25c40)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Brad Davidson
1e022f5986 Move snapshot-retention to EtcdSnapshotFlags in order to support loading from config 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0b3593205a)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Brad Davidson
ea81098e29 Clean up snapshotDir create/exists logic 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3576ed4327)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Brad Davidson
357be4aa02 Fix additional corner cases in registries handling 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b164d7a270)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Brad Davidson
45d36a0886 Fix issue with etcd node name missing hostname 
* Set ServerNodeName in snapshot CLI setup
* Raise errer if ServerNodeName ends up empty some other way
* Fix status controller to use etcd node name annotation instead of prefix checking

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 82432a2df7)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Brad Davidson
853473c180 Tweak netpol node wait logs 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 513c3416e7)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Brad Davidson
5ff3108ef1 Fix NodeHosts on dual-stack clusters 
* Add both dual-stack addresses to the node hosts file
* Add hostname to hosts file as alias for node name to ensure consistent resolution

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit be569f65a9)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Edgar Lee
6f5c3f8995 Rootless mode also bind service nodePort to host for LoadBalancer type 
Signed-off-by: Edgar Lee <edgarhinshunlee@gmail.com>
(cherry picked from commit 8c83b5e0f3)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:36:56 -08:00
Roberto Bonafiglia
1f44f83627 Adjust first node-ip based on configured clusterCIDR 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2024-03-06 11:11:38 +01:00
Manuel Buil
9894592e2f Update klipper-lb image version 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2024-03-05 19:45:06 +01:00
Brad Davidson
051b14b248 Fix netpol startup when flannel is disabled 
Don't break out of the poll loop if we can't get the node, RBAC might not be ready yet.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-26 17:40:44 -08:00
Derek Nola
9c0e5a5ff8 Rename AgentReady to ContainerRuntimeReady for better clarity 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-02-21 13:26:08 -08:00
Derek Nola
80baec697f Restore original order of agent startup functions 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-02-21 13:26:08 -08:00
Brooks Newberry
9f78e474d7 Update Kubernetes to v1.28.7 (#9492) 
Signed-off-by: Brooks Newberry <brooks@newberry.com>
 2024-02-15 13:15:00 -08:00
Derek Nola
45860105bb [Release-1.28] Test_UnitApplyContainerdQoSClassConfigFileIfPresent (#9440) 
* [Testing]: Test_UnitApplyContainerdQoSClassConfigFileIfPresent (Created) (#8945)

Problem:
Function not tested.

Solution:
Unit test added.

Signed-off-by: Oliver Larsson <larsson.e.oliver@gmail.com>
---------

Signed-off-by: Oliver Larsson <larsson.e.oliver@gmail.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Oliver Larsson <larsson.e.oliver@gmail.com>
 2024-02-12 09:33:32 -08:00
Derek Nola
78543f4850 [Release-1.28] Enable longer http timeout requests (#9444) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-02-12 09:31:47 -08:00
Brad Davidson
3d0674ad1c Bump kine and set NotifyInterval to what the apiserver expects 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit de825845b2)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-10 00:49:18 -08:00
Edgar Lee
a3770d21e2 Expose rootless containerd socket directories for external access 
Signed-off-by: Edgar Lee <edgarhinshunlee@gmail.com>
(cherry picked from commit 0ac4c6a056)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-10 00:49:18 -08:00
Edgar Lee
0259b8e535 Expose rootless state dir under ~/.rancher/k3s/rootless 
Signed-off-by: Edgar Lee <edgarhinshunlee@gmail.com>
(cherry picked from commit 14c6c63b30)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-10 00:49:18 -08:00
Oleg Matskiv
865b454a05 Don't verify the node password if the local host is not running an agent 
Signed-off-by: Oleg Matskiv <oleg.matskiv@gmail.com>
(cherry picked from commit e3b237fc35)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-10 00:49:18 -08:00
Brad Davidson
493ebb9517 Fix ipv6 endpoint address selection for on-demand snapshots 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 8224a3a7f6)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-10 00:49:18 -08:00
Brad Davidson
cd7c557754 Fix issue with coredns node hosts controller 
The nodes controller was reading from the configmaps cache, but doesn't add any handlers, so if no other controller added configmap handlers, the cache would remain empty.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 888f866dae)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-10 00:49:18 -08:00