Brad Davidson
82125e6580
Bump runc to v1.0.3
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-12-08 15:28:51 -08:00
Brad Davidson
3c0eaf2953
Bump wharfie to v0.5.1 and use shared decompression code
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 7d3447ceff )
2021-12-08 10:51:33 -08:00
Brad Davidson
3c88ea8c1a
bump kine to v0.8.1
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 05d43278e2 )
2021-12-08 10:51:33 -08:00
Brad Davidson
2c45e735b1
Update dynamiclistener
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 3b6a3fe905 )
2021-12-08 10:51:33 -08:00
Hussein Galal
2dc4e2c3a0
Add cert rotation command ( #4495 ) ( #4635 )
...
* Add cert rotation command
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* add function to check for dynamic listener file
Signed-off-by: Brian Downs <brian.downs@gmail.com >
* Add dynamiclistener cert rotation support
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fixes to the cert rotation
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fix ci tests
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fixes to certificate rotation command
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* more fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
Co-authored-by: Brian Downs <brian.downs@gmail.com >
Co-authored-by: Brian Downs <brian.downs@gmail.com >
2021-12-06 20:53:29 +02:00
Chris Kim
f528a5c718
[release-1.22] Bump Kubernetes to v1.22.4-k3s1 ( #4530 )
...
* Update to v1.22.4
* Bump containerd to v1.5.8
* Bump golang version to 1.16.10
Signed-off-by: Chris Kim <oats87g@gmail.com >
2021-11-18 19:16:40 -08:00
Luther Monson
cb0918ae3c
[release-1.22] updating to new signals package in wrangler ( #4422 )
...
* updating to new signals package in wrangler
Signed-off-by: Luther Monson <luther.monson@gmail.com >
2021-11-08 11:52:54 -07:00
galal-hussein
61a2aab25e
Upgrade containerd
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-11-02 20:15:57 -07:00
Brad Davidson
06b8639068
Bump klipper-helm version
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-10-22 14:43:27 -07:00
Manuel Buil
7ede7d2e7c
Update to the newest flannel
...
Fixes issues such as the internode connectivity
Signed-off-by: Manuel Buil <mbuil@suse.com >
2021-10-21 09:03:58 +02:00
Brad Davidson
3f5774b41e
Bump containerd to v1.5.7+k3s1
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-10-04 14:19:28 -07:00
Brad Davidson
77dfdda909
Update Kubernetes to v1.22.2-k3s1
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-09-16 15:48:29 -07:00
Manuel Buil
681058bb40
Add dual-stack support
...
Signed-off-by: Manuel Buil <mbuil@suse.com >
2021-09-15 11:44:48 +02:00
Brad Davidson
5e0fae914f
Bump helm-controller and klipper-helm image version
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-09-15 00:09:22 -07:00
Kohei Tokunaga
8b857eef9c
Ship Stargz Snapshotter ( #2936 )
...
* Ship Stargz Snapshotter
Signed-off-by: ktock <ktokunaga.mail@gmail.com >
* Bump github.com/containerd/stargz-snapshotter to v0.8.0
Signed-off-by: Kohei Tokunaga <ktokunaga.mail@gmail.com >
2021-09-01 16:27:42 -07:00
Brad Davidson
b8add39b07
Bump kine for metrics/tls changes
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-09-01 01:51:30 -07:00
Akihiro Suda
331c6fed71
Remove runtime V1 (containerd-shim)
...
Fix issue 3105
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2021-08-26 11:50:33 -07:00
Akihiro Suda
c23e63aeea
Update RootlessKit to v0.14.5 ( #3902 )
...
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2021-08-25 07:28:59 -07:00
Brad Davidson
dc14f370c4
Update wrangler to v0.8.5
...
Required to support apiextensions.v1 as v1beta1 has been deleted. Also
update helm-controller and dynamiclistener to track wrangler versions.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-08-20 18:47:16 -07:00
Brad Davidson
641ab26fde
Update containerd to 1.5
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-08-20 18:47:16 -07:00
Brad Davidson
54a7c860c7
Update kine for etcd v3.5 compat
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-08-20 18:47:16 -07:00
Brad Davidson
872855015c
Update etcd to v3.5.0
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-08-20 18:47:16 -07:00
Brad Davidson
e204d863a5
Update Kubernetes to v1.22.1
...
* Update Kubernetes to v1.22.1
* Update dependent modules to track with upstream
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-08-20 18:47:16 -07:00
Brad Davidson
544cf406aa
Bump containerd to v1.4.9-k3s1
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-08-16 13:33:41 -07:00
Brad Davidson
a1097984c0
Bump helm-controller to work around tiller crashes
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-08-13 12:40:41 -07:00
Brad Davidson
338f9cae3f
Bump helm-controller to v0.10.2
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-08-05 09:54:34 -07:00
Derek Nola
21c8a33647
Introduction of Integration Tests ( #3695 )
...
* Commit of new etcd snapshot integration tests.
* Updated integration github action to not run on doc changes.
* Update Drone runner to only run unit tests
Signed-off-by: dereknola <derek.nola@suse.com >
2021-07-26 09:59:33 -07:00
Brad Davidson
b352d73511
Bump containerd to v1.4.8-k3s1
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-07-20 15:44:06 -07:00
Chris Kim
ad28d18b19
Bump helm-controller to v0.10.1 ( #3644 )
...
Signed-off-by: Chris Kim <oats87g@gmail.com >
2021-07-15 11:31:44 -07:00
William Zhang
a4c992ce52
🐳 burp to inetaf/tcpproxy
...
Problem:
tcpproxy repository has been moved out of the github.com/google org to github.com/inetaf.
Solution:
Switch to the new repo.
FYI: https://godoc.org/inet.af/tcpproxy/
Signed-off-by: William Zhang <warmchang@outlook.com >
2021-07-08 16:58:09 -07:00
Derek Nola
8faa70dced
Update to v1.21.2
...
Signed-off-by: dereknola <derek.nola@suse.com >
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 5a67e8dc47 )
2021-07-02 08:59:16 -07:00
Brad Davidson
246b378a27
Bump kine to resolve race condition and unrevisioned delete
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-06-30 09:54:46 -07:00
Jamie Phillips
82394d7d36
Basic windows agent that will join a cluster without CNI.
...
Signed-off-by: Jamie Phillips <jamie.phillips@suse.com >
2021-06-23 09:07:50 -07:00
Hussein Galal
136dddca11
Fix storing bootstrap data with empty token string ( #3422 )
...
* Fix storing bootstrap data with empty token string
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* delete node password secret after restoration
fixes to bootstrap key
vendor update
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fix comment
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fix typo
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* more fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* typos
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* Removing dynamic listener file after restoration
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* go mod tidy
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-06-22 22:42:34 +02:00
Jacob Blain Christen
cb25835d84
containerd: v1.4.4-k3s2
...
Pull in backport of containerd/containerd#5017
Addresses #3296
Signed-off-by: Jacob Blain Christen <dweomer5@gmail.com >
2021-05-20 11:37:37 -07:00
Brad Davidson
02a5bee62f
Add system-default-registry support and remove shared code ( #3285 )
...
* Move registries.yaml handling out to rancher/wharfie
* Add system-default-registry support
* Add CLI support for kubelet image credential providers
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-05-10 15:58:41 -07:00
Brad Davidson
4fbc241679
Update to forked protobuf 1.4.3-k3s1
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-04-14 14:51:42 -07:00
Brad Davidson
e8381db778
Update Kubernetes to v1.21.0
...
* Update Kubernetes to v1.21.0
* Update to golang v1.16.2
* Update dependent modules to track with upstream
* Switch to upstream flannel
* Track changes to upstream cloud-controller-manager and FeatureGates
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-04-14 14:51:42 -07:00
Jacob Blain Christen
93b18b343a
Update to Kubernetes v1.20.5 ( #3094 )
...
* Update to Kubernetes v1.20.5
* vendor: bumps for some containerd deps
* go: bump to 1.16.2 for arm
Signed-off-by: Jacob Blain Christen <jacob@rancher.com >
(cherry picked from commit 355fff3017 )
2021-03-31 14:18:41 -07:00
Akihiro Suda
cb73461a5b
AkihiroSuda/containerd-fuse-overlayfs -> containerd/fuse-overlayfs-snapshotter
...
The repo has been moved.
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2021-03-24 10:34:34 -07:00
Akihiro Suda
11ef43011a
bump up RootlessKit
...
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2021-03-24 00:37:30 -07:00
Jacob Blain Christen
59a39e9a3b
containerd: v1.4.4-k3s1 ( #3090 )
...
Addresses k3s-io/k3s#3066 and CVE-2021-21334
Signed-off-by: Jacob Blain Christen <jacob@rancher.com >
2021-03-17 14:38:42 -07:00
Jacob Blain Christen
618b0f98bf
registry mirror repository rewrites ( #3064 )
...
Support repository regex rewrite rules when fetching image content.
Example configuration:
```yaml
# /etc/rancher/k3s/registries.yaml
mirrors:
"docker.io":
endpoint:
- "https://registry-1.docker.io/v2 "
rewrite:
"^library/alpine$": "my-org/alpine"
```
This will instruct k3s containerd to fetch content for `alpine` images
from `docker.io/my-org/alpine` instead of the default
`docker.io/library/alpine` locations.
Signed-off-by: Jacob Blain Christen <jacob@rancher.com >
2021-03-15 16:17:27 -07:00
Brad Davidson
7cdfaad6ce
Always use static ports for client load-balancers ( #3026 )
...
* Always use static ports for the load-balancers
This fixes an issue where RKE2 kube-proxy daemonset pods were failing to
communicate with the apiserver when RKE2 was restarted because the
load-balancer used a different port every time it started up.
This also changes the apiserver load-balancer port to be 1 below the
supervisor port instead of 1 above it. This makes the apiserver port
consistent at 6443 across servers and agents on RKE2.
Additional fixes below were required to successfully test and use this change
on etcd-only nodes.
* Actually add lb-server-port flag to CLI
* Fix nil pointer when starting server with --disable-etcd but no --server
* Don't try to use full URI as initial load-balancer endpoint
* Fix etcd load-balancer pool updates
* Update dynamiclistener to fix cert updates on etcd-only nodes
* Handle recursive initial server URL in load balancer
* Don't run the deploy controller on etcd-only nodes
2021-03-06 02:29:57 -08:00
Brian Downs
4d1f9eda9d
Etcd Snapshot/Restore to/from S3 Compatible Backends ( #2902 )
...
* Add functionality for etcd snapshot/restore to and from S3 compatible backends.
* Update etcd restore functionality to extract and write certificates and configs from snapshot.
2021-03-03 11:14:12 -07:00
galal-hussein
885b7391a2
update dynamiclistener
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-03-01 23:51:07 +02:00
galal-hussein
fad2a046c3
update master to 1.20.4
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-02-23 23:31:08 -08:00
Brad Davidson
6c472b5942
Use zstd instead of gzip for embedded tarball
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-02-08 21:08:35 -08:00
Brad Davidson
740b654d47
Update containerd to fix AppArmor on SLES
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-01-29 16:33:33 -08:00
Brad Davidson
1d4adb0301
Update Kubernetes to v1.20.2-k3s1
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-01-13 21:31:53 -08:00