public/k3s
1
0
Fork 0
mirror of https://git.vectorsigma.ru/public/k3s.git synced 2026-08-06 02:39:23 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,102 Commits 31 Branches 949 Tags
b721a3e05d09f9c59dbc78dfd67f3fb01ecf0eca
Commit Graph

1329 Commits

Author SHA1 Message Date
Brad Davidson
b721a3e05d Fix 10 second etcd-snapshot request timeout 
The default clientaccess request timeout is too short. Wait longer by default, and add the s3 timeout if s3 is enabled.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d3b60543e7)
 2024-04-22 11:25:08 -07:00
Brad Davidson
08a1ee5150 Fix on-demand snapshots not honoring folder 
Also fix etcd s3 tests to actually check that the files are saved to s3 🙃

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5b431ca531)
 2024-04-22 11:25:08 -07:00
Thomas Anderson
2d48b19624 Allow LPP to read helper logs (#9834) 
Signed-off-by: Thomas Anderson <127358482+zc-devs@users.noreply.github.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-11 13:50:35 -07:00
Brad Davidson
a302dae4b5 Update packaged manifests 
* Update traefik chart to bump image tag and fix quoting
* Fix image quoting in flat manifests
* Update local-path-provisioner config to stop using deprecated hostpath volume type

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-11 10:01:23 -07:00
Brad Davidson
12c6d6a5cf Actually fix agent certificate rotation 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 4cc73b1fee)
 2024-04-11 10:01:23 -07:00
Brad Davidson
2ae9eaccd5 Don't log 'apiserver disabled' error sent by etcd-only nodes 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 08f1022663)
 2024-04-11 10:01:23 -07:00
Brad Davidson
d25523fc94 Improve etcd load-balancer startup behavior 
Prefer the address of the etcd member being joined, and seed the full address list immediately on startup.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7d9abc9f07)
 2024-04-11 10:01:23 -07:00
Brad Davidson
0990716e8f Move etcd snapshot management CLI to request/response 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit fe465cc832)
 2024-04-11 10:01:23 -07:00
Brad Davidson
82bc741643 Add supervisor cert/key to rotate list 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 60248c42de)
 2024-04-11 10:01:23 -07:00
Brad Davidson
44e77dacc6 Add workaround for containerd hosts.toml bug 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f2961fb5d2)
 2024-04-11 10:01:23 -07:00
Brad Davidson
b8b95493af Add certificate expiry check and warnings 
* Add ADR
* Add `k3s certificate check` command.
* Add periodic check and events when certs are about to expire.
* Add metrics for certificate validity remaining, labeled by cert subject

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7f659759dd)
 2024-04-11 10:01:23 -07:00
Brad Davidson
347fb0064c Add health-check support to loadbalancer 
* Adds support for health-checking loadbalancer servers. If a
  health-check fails when dialing, all existing connections to the
  server will be closed.
* Wires up a remotedialer tunnel connectivity check as the health check
  for supervisor/apiserver connections.
* Wires up a simple ping request to the supervisor port as the health
  check for etcd connections.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c51d7bfbd1)
 2024-04-11 10:01:23 -07:00
Brad Davidson
5344e45dc4 Fix etcd snapshot reconcile for agentless nodes 
Disable cleanup of orphaned snapshots and patching of node annotations if running agentless

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit edb0440017)
 2024-04-11 10:01:23 -07:00
Brad Davidson
d3e8c49ec6 Fix error when image has already been pulled 
CRI and containerd APIs disagree about the registry names - CRI supports
index.docker.io as an alias for docker.io, while containerd does not.
Use the actual stored RepoTag to determine what image to ask containerd for.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f099bfa508)
 2024-04-11 10:01:23 -07:00
Brad Davidson
3287cab8e5 Respect cloud-provider fields set by kubelet 
Don't clobber the providerID field and instance-type/region/zone labels if provided by the kubelet. This allows the user to set these to the correct values when using the embedded CCM in a real cloud environment.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 65cd606832)
 2024-04-11 10:01:23 -07:00
Brad Davidson
a75951ba29 Send error response if member list cannot be retrieved 
Prevents joining nodes from being stuck with bad initial member list if there is a transient failure, or if they try to join themselves

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d7cdbb7d4d)
 2024-04-11 10:01:23 -07:00
Brad Davidson
349cd3b871 Move error response generation code into util 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7a2a2d075c)
 2024-04-11 10:01:23 -07:00
Derek Nola
01461afd57 Bump spegel to v0.0.20-k3s1 (#9881) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-04-09 09:03:34 -07:00
Vitor Savian
9176d7f68a Add tls for kine 
* Bump kine
* Add integration tests for kine with tls

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2024-04-02 11:40:16 -03:00
Derek Nola
a81bc3325b Transition from deprecated pointer library to ptr (#9801) (#9825) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-30 21:30:05 -07:00
Derek Nola
513fc0f28f Remove old pinned dependencies (#9828) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-30 21:29:39 -07:00
Vitor Savian
992d182bb4 Add a new error when kine is with disable apiserver or disable etcd 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2024-03-28 09:36:45 -03:00
Brad Davidson
06ecbe8071 Fix wildcard entry upstream fallback 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-12 23:31:50 -07:00
Brad Davidson
4761befc83 Warn and suppress duplicate registry mirror endpoints 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Brad Davidson
58ec70772a Bump metrics-server to v0.7.0 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Vitor Savian
023475a11c Fix wildcard with embbeded registry test 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 59c724f7a6)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Flavio Castelli
0dde325501 fix: use correct wasm shims names 
Fix the wasm shim detection and the containerd configuration generation.

Prior to this commit, the binary and the `RuntimeType` values were not
correct.

Signed-off-by: Flavio Castelli <fcastelli@suse.com>
(cherry picked from commit 64e4f0e6e7)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Brad Davidson
eec7e227f7 Don't register embedded registry address as an upstream registry 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 091a5c8965)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Brad Davidson
8ef8ea53e4 Remove filtering of wildcard mirror entry 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b5a4846e9d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Brad Davidson
194b20d0f0 Add env var to allow spegel mirroring of latest tag 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 84a071a81e)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Philip Laine
b30b271de6 Bump spegel to v0.0.18-k3s4 
Signed-off-by: Philip Laine <philip.laine@gmail.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 26feb25c40)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Brad Davidson
66f1109253 Move snapshot-retention to EtcdSnapshotFlags in order to support loading from config 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0b3593205a)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Brad Davidson
87eae0a664 Clean up snapshotDir create/exists logic 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3576ed4327)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Brad Davidson
1a82cf9358 Fix additional corner cases in registries handling 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b164d7a270)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Brad Davidson
135e76d272 Fix issue with etcd node name missing hostname 
* Set ServerNodeName in snapshot CLI setup
* Raise errer if ServerNodeName ends up empty some other way
* Fix status controller to use etcd node name annotation instead of prefix checking

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 82432a2df7)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Brad Davidson
bebd5c2ffc Tweak netpol node wait logs 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 513c3416e7)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Brad Davidson
eef782c443 Fix NodeHosts on dual-stack clusters 
* Add both dual-stack addresses to the node hosts file
* Add hostname to hosts file as alias for node name to ensure consistent resolution

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit be569f65a9)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Edgar Lee
4484760cb5 Rootless mode also bind service nodePort to host for LoadBalancer type 
Signed-off-by: Edgar Lee <edgarhinshunlee@gmail.com>
(cherry picked from commit 8c83b5e0f3)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:37:15 -08:00
Roberto Bonafiglia
923aac5e9f Adjust first node-ip based on configured clusterCIDR 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2024-03-06 11:13:06 +01:00
Manuel Buil
f605ede835 Update klipper-lb image version 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2024-03-05 19:45:13 +01:00
Brad Davidson
06d6bc80b4 Fix netpol startup when flannel is disabled 
Don't break out of the poll loop if we can't get the node, RBAC might not be ready yet.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-26 17:55:58 -08:00
Derek Nola
5efbb06874 Rename AgentReady to ContainerRuntimeReady for better clarity 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-02-21 13:50:47 -08:00
Derek Nola
4a787b6642 Restore original order of agent startup functions 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-02-21 13:50:47 -08:00
Brooks Newberry
b3b0a25c0d Update Kubernetes to v1.27.11 (#9491) 
Signed-off-by: Brooks Newberry <brooks@newberry.com>
 2024-02-15 13:14:34 -08:00
Derek Nola
dd89199581 [Release-1.27] Test_UnitApplyContainerdQoSClassConfigFileIfPresent (#9441) 
* [Testing]: Test_UnitApplyContainerdQoSClassConfigFileIfPresent (Created) (#8945)

Problem:
Function not tested.

Solution:
Unit test added.

Signed-off-by: Oliver Larsson <larsson.e.oliver@gmail.com>

Signed-off-by: Oliver Larsson <larsson.e.oliver@gmail.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Oliver Larsson <larsson.e.oliver@gmail.com>
 2024-02-12 09:33:40 -08:00
Derek Nola
ee8e1b4a1e [Release-1.27] Enable longer http timeout requests (#9445) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-02-12 09:31:56 -08:00
Hussein Galal
1228fea1ae Update flannel to v0.24.0 and remove multiclustercidr flag (#9075) 
* update flannel to v0.24.0

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* remove multiclustercidr flag

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2024-02-11 17:14:36 +01:00
Brad Davidson
f6303cf14d Bump kine and set NotifyInterval to what the apiserver expects 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit de825845b2)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-10 00:49:41 -08:00
Edgar Lee
8e343cdec1 Expose rootless containerd socket directories for external access 
Signed-off-by: Edgar Lee <edgarhinshunlee@gmail.com>
(cherry picked from commit 0ac4c6a056)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-10 00:49:41 -08:00
Edgar Lee
c323088120 Expose rootless state dir under ~/.rancher/k3s/rootless 
Signed-off-by: Edgar Lee <edgarhinshunlee@gmail.com>
(cherry picked from commit 14c6c63b30)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-10 00:49:41 -08:00