public/k3s
1
0
Fork 0
mirror of https://git.vectorsigma.ru/public/k3s.git synced 2026-08-03 10:09:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,720 Commits 31 Branches 949 Tags
c44d33d29b84e116a4840cc6909be5e9ddcdaeaa
Commit Graph

2720 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Brad Davidson
c44d33d29b Fix race condition in tunnel server startup 
Several places in the code used a 5-second retry loop to wait on
Runtime.Core to be set. This caused a race condition where OnChange
handlers could be added after the Wrangler shared informers were already
started. When this happened, the handlers were never called because the
shared informers they relied upon were not started.

Fix that by requiring anything that waits on Runtime.Core to run from a
cluster controller startup hook that is guaranteed to be called before
the shared informers are started, instead of just firing it off in a
goroutine that retries until it is set.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-28 11:24:34 -07:00
Brad Davidson
1ca035accc Add e2e test for --disable-agent 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-28 11:24:34 -07:00
Brad Davidson
31a6386994 Improve egress selector handling on agentless servers 
Don't set up the agent tunnel authorizer on agentless servers, and warn when agentless servers won't have a way to reach in-cluster endpoints.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-28 11:24:34 -07:00
Brad Davidson
5348b5e696 Improve error message when CLI wrapper Exec fails 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-28 11:21:30 -07:00
Brooks Newberry
bbda54b332 Add longhorn storage test (#6445) 
Signed-off-by: Brooks Newberry <brooks@newberry.com>
 2023-04-28 11:17:19 -07:00
Brad Davidson
0247794aa9 go generate 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-28 11:13:47 -07:00
Brad Davidson
0bbc6ad3f0 Bump traefik to v2.9.10 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-28 11:13:47 -07:00
Ian Cardoso
1ac03aad43 Add integration tests for etc-snapshot server flags and refactor /tests/integration/integration.go/K3sStartServer (#7300) 
This adds integration tests for the following flags: "--etcd-snapshot-name","--etcd-snapshot-dir","--etcd-snapshot-retention","--etcd-snapshot-schedule-cron" and "--etcd-snapshot-compress". It also refactors K3sStartServer to stop applying strings.Fields() into inputArgs, so it can accept arguments that have space in their definition.

Signed-off-by: Ian Cardoso <osodracnai@gmail.com>
 2023-04-28 14:07:11 -03:00
Derek Nola
ef648b7a5d Bump Runc and Containerd (#7339) 
* Bump runc

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Bump to containerd, recombine build and go.mod version

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2023-04-28 09:37:32 -07:00
Brad Davidson
9539147ee1 Bump k3s-root for aarch64 page size fix 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-27 20:43:22 -07:00
Brad Davidson
ad41fb8c96 Create CRDs with schema 
Fixes an issue where CRDs were being created without schema, allowing
resources with invalid content to be created, later stalling the
controller ListWatch event channel when the invalid resources could not
be deserialized.

This also requires moving Addon GVK tracking from a status field to
an annotation, as the GroupVersionKind type has special handling
internal to Kubernetes that prevents it from being serialized to the CRD
when schema validation is enabled.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-27 20:42:46 -07:00
Derek Nola
bc5b42c279 Cleanup help messages (#7369) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
v1.27.1-rc3+k3s1 v1.27.1+k3s1 		2023-04-27 13:36:11 -07:00
Derek Nola
f076080b2b Bump cri-dockerd (#7347) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
v1.27.1-rc2+k3s1 		2023-04-24 15:57:14 -07:00
Brian Downs
87f0dc5dd3 update channel server for april 2023 (#7327) 2023-04-24 14:27:09 -04:00
Roberto Bonafiglia
36699bbd60 Changed command -v redirection for iptables bin check 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2023-04-21 10:31:01 +02:00
Derek Nola
944f811dc5 v1.27.1 CLI Deprecation (#7311) 
* Remove Flannel Wireguard
* Remove etcd-snapshot (implicit save)
* Convert ipsec and multiple backend to fatal

Signed-off-by: Derek Nola <derek.nola@suse.com>
v1.27.1-rc1+k3s1 		2023-04-19 12:02:05 -07:00
Derek Nola
f2bde63eea Kubernetes v1.27.1 (#7271) 
* Bump go version to 1.20.3 to match upstream
* Bump cri-dockerd
* Bump golanci-lint
* go generate
* Bump selinux in cgroup test
* Bump to v1.27.1 tags
* Release documentation improvements
* Only run upgrade e2e test on PR

Signed-off-by: Derek Nola <derek.nola@suse.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
Co-authored-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-18 21:48:36 -07:00
github-actions[bot]
8d0255af07 Bump Trivy version (#7257) 
* chore: Bump Trivy version

Made with ❤️️ by updatecli

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v1.26.4+k3s1 		2023-04-18 09:48:27 -07:00
github-actions[bot]
779d5f3aa2 chore: Updated the content of the file "/tmp/updatecli/github/k3s-io/... (#7256) 
... k3s/conformance/Dockerfile"
Updated the content of the file "/tmp/updatecli/github/k3s-io/k3s/Dockerfile.test"

Made with ❤️️ by updatecli

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2023-04-18 09:46:56 -07:00
github-actions[bot]
554ad87c8d chore: Bump golang:alpine version (#7292) 
Made with ❤️️ by updatecli

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2023-04-18 09:46:42 -07:00
Brian Downs
257fa2c54c Update to v1.26.4-k3s1 (#7282) v1.26.4-rc1+k3s1 2023-04-13 13:51:37 -07:00
Roberto Bonafiglia
d9f40d4f5b Update install script to clean iptables rules before start 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2023-04-12 22:33:10 +02:00
Roberto Bonafiglia
0c683720ad Update kube-router to insert iptables rules right after kubernetes ones 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2023-04-12 22:33:10 +02:00
Hussein Galal
6b51ed478d Fix call for k3s-selinux versions in airgapped environments (#7264) 
* Fix call for k3s-selinux versions in airgapped environments

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* use timeout options in the donwloader

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* more fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* run verify_downloader in case binary was skipped

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2023-04-11 22:32:48 +02:00
Hussein Galal
027cc187ce Add coreos and sle micro to selinux support (#6945) 
* Add coreos and sle micro to selinux support

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Add fix for rpm-ostree

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add uninstall for rpm-ostree (coreos)

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Don't start k3s on coreos

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Don't apply live

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Typo fix

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>
 2023-04-06 23:44:07 +02:00
Hussein Galal
30638072c9 Update klipper lb to v0.4.2 (#7210) 
* Update klipper lb to v0.4.2

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update klipper lb to v0.4.3

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update klipper lb to v0.4.3 in airgap list

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2023-04-06 19:02:00 +02:00
fmoral2
6c394abb32 Add make commands to terraform automation and fix external dbs related issue (#7159) 
* test: add make commands and dependencies

Signed-off-by: Francisco <francisco.moral@suse.com>

* fix: fix issue on logic for using external dbs and dependencies

Signed-off-by: Francisco <francisco.moral@suse.com>

---------

Signed-off-by: Francisco <francisco.moral@suse.com>
 2023-04-06 12:17:13 -03:00
Roberto Bonafiglia
3e3512bdae Updated kube-route version to move the iptables ACCEPT default rule at the end of the chain 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2023-04-06 09:55:34 +02:00
Brad Davidson
d95980bba3 Lock bootstrap data with empty key to prevent conflicts 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-05 10:56:57 -07:00
dependabot[bot]
12091fc724 Bump actions/setup-go from 3 to 4 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3 to 4.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-04 16:45:13 -07:00
Brad Davidson
2992477c4b Debounce kubernetes service endpoint updates 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-04 12:02:22 -07:00
Brad Davidson
ece4d8e45c Fix tests to not hide failure location in dummp assert functions 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-04 12:02:22 -07:00
Brad Davidson
e54ceaa497 Fix issue with stale connections to removed LB server 
Track LB connections through each server so that they can be closed when it is removed.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-04 12:02:22 -07:00
Brad Davidson
5dece799df Update remotedialer to silence errors when disconnecting 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-04 12:02:22 -07:00
Guilherme Macedo
4182dcaac8 [UpdateCLI] Improve Klipper Helm and Helm controller bumps (#7146) 
Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com>
 2023-04-04 13:43:12 -05:00
Hussein Galal
127cea1f3f Upgrade helm-controller to v0.13.3 (#7209) 
* Upgrade helm-controller to v0.13.3

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Upgrade klipper-helm image in the airgap list

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2023-04-04 20:20:40 +02:00
Derek Nola
d2e04b826a Don't apply hardened args to agent (#7089) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2023-04-04 09:35:28 -07:00
Brad Davidson
d388b82d25 go generate 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-03 19:47:06 -07:00
Brad Davidson
de80c07053 Ensure that loopback is used for the advertised address when resetting 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-03 19:47:06 -07:00
Brad Davidson
b010db0cff Ensure that loopback is used for the advertised address when resetting 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-03 17:01:43 -07:00
Brad Davidson
877247a691 Bump runc to v1.1.5 
Addresses GHSA-m8cg-xc2p-r3fc GHSA-vpvm-3wq2-2wvm GHSA-g2j6-57v7-gm8c

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-03 17:00:44 -07:00
Brad Davidson
eb982bbbde Bump etcd to v3.5.7 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-04-03 17:00:30 -07:00
Brad Davidson
cee3ddbc4a Bump Local Path Provisioner version (#7167) 
* chore: Bump Local Path Provisioner version
* go generate

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2023-04-03 16:00:16 -07:00
Guilherme Macedo
ddd9665fed Improve Trivy configuration (#7154) 
Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com>
 2023-04-03 14:09:21 -05:00
Guilherme Macedo
fdf994dc35 [UpdateCLI] Improve workflow (#7142) 
* Improve UpdateCLI workflow
* Update Go version to stable in workflow

Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com>
 2023-04-03 13:40:49 -05:00
Guilherme Macedo
37b3f4d25c Run go generate in local-path-provisioner Updatecli pipeline (#7181) 
Signed-off-by: Guilherme Macedo <guilherme.macedo@suse.com>
 2023-04-03 09:30:56 -07:00
ShylajaDevadiga
8ec7d5e6b0 fix_get_sha_url (#7187) 
Signed-off-by: ShylajaDevadiga <shylaja@rancher.com>
 2023-03-31 13:26:29 -07:00
Derek Nola
a99376663b Drone Pipelines enhancement (#7169) 
* Dont run most pipelines on nightly cron

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Don't run skipfiles on push to master for arch pipelines

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2023-03-31 09:06:16 -07:00
Brooks Newberry
fb491f5ebf Update stable channel to v1.26.3+k3s1 (#7161) 2023-03-29 15:49:08 -07:00
Derek Nola
d13ee64403 Enhance k3s check-config (#7091) 
* Move  CONFIG_CGROUP_PIDS to Required

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2023-03-29 09:55:08 -07:00