Derek Nola
e562d883d6
Remove secrets encryption controller ( #10612 )
...
* Remove secrets encryption controller
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-09-04 11:50:40 -07:00
Derek Nola
14e11631ca
Fix secrets-encrypt metrics
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2024-09-04 11:50:40 -07:00
Brad Davidson
7190c74acc
[release-1.30] Backports for 2024-08 release cycle ( #10664 )
...
* Use pagination when retrieving etcd snapshot list
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit c2216a62adbrad.davidson@rancher.com >
* Update secretsencrypt pagination
Make secretsencrypt page size and iteration consistent with other paginators
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 891e72f90fbrad.davidson@rancher.com >
* Cap length of generated name used for servicelb daemonset
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 21611c5665brad.davidson@rancher.com >
* Fix ipv6 sysctl required by non-ipv6 LoadBalancer service
This is a partial revert of 095ecdb034brad.davidson@rancher.com >
(cherry picked from commit d4c3422a85brad.davidson@rancher.com >
* remove deprecated use of wait functions
Signed-off-by: Will <will7989@hotmail.com >
(cherry picked from commit e4f3cc7b54brad.davidson@rancher.com >
* Update pkg/secretsencrypt/config.go
Co-authored-by: Brad Davidson <brad@oatmail.org >
Signed-off-by: Will Andrews <will7989@hotmail.com >
(cherry picked from commit 3ec086f6f7brad.davidson@rancher.com >
* Update pkg/cluster/managed.go
Co-authored-by: Derek Nola <derek.nola@suse.com >
Signed-off-by: Will Andrews <will7989@hotmail.com >
(cherry picked from commit e2179aa957brad.davidson@rancher.com >
* Wire lasso metrics up to common gatherer
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit e168438d44brad.davidson@rancher.com >
* Fix cloudprovider controller name
Looking at metrics revealed the cloudprovider controller name was anempty string.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit bffdf463e1brad.davidson@rancher.com >
---------
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
Signed-off-by: Will <will7989@hotmail.com >
Signed-off-by: Will Andrews <will7989@hotmail.com >
Co-authored-by: Will <will7989@hotmail.com >
Co-authored-by: Derek Nola <derek.nola@suse.com >
2024-08-05 09:35:00 -07:00
Hussein Galal
144f5ad333
Kubernetes V1.30.0-k3s1 ( #10063 )
...
* kubernetes 1.30.0-k3s1
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* Update go version to v1.22.2
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* update dynamiclistener and helm-controller
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* update go in go.mod to 1.22.2
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* update go in Dockerfiles
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* update cri-dockerd
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* Add proctitle package with linux and windows constraints
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* go mod tidy
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* Fixing setproctitle function
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* update dynamiclistener to v0.6.0-rc1
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
---------
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2024-05-06 19:42:27 +03:00
Derek Nola
fa11850563
Readd k3s secrets-encrypt rotate-keys with correct support for KMSv2 GA ( #9340 )
...
* Reorder copy order for caching
* Enable longer http timeout requests
Signed-off-by: Derek Nola <derek.nola@suse.com >
* Setup reencrypt controller to run on all apiserver nodes
* Fix reencryption for disabling secrets encryption, reenable drone tests
2024-02-09 11:37:37 -08:00
Derek Nola
42c2ac95e2
CLI + Backend for Secrets Encryption v3
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-08-25 14:17:00 -06:00
Derek Nola
b967f92785
Replace os.Write with AtomicWrite function
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-08-25 14:17:00 -06:00
Derek Nola
06d81cb936
Replace deprecated ioutil package ( #6230 )
...
* Replace ioutil package
* check integration test null pointer
* Remove rotate retries
Signed-off-by: Derek Nola <derek.nola@suse.com >
2022-10-07 17:36:57 -07:00
Derek Nola
035c03cfaa
Remove codespell from Drone, add to GH Actions ( #6004 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2022-08-18 09:21:56 -07:00
Luther Monson
9a849b1bb7
[master] changing package to k3s-io ( #4846 )
...
* changing package to k3s-io
Signed-off-by: Luther Monson <luther.monson@gmail.com >
Co-authored-by: Derek Nola <derek.nola@suse.com >
2022-03-02 15:47:27 -08:00
Derek Nola
bcb662926d
Secrets-encryption rotation ( #4372 )
...
* Regular CLI framework for encrypt commands
* New secrets-encryption feature
* New integration test
* fixes for flaky integration test CI
* Fix to bootstrap on restart of existing nodes
* Consolidate event recorder
Signed-off-by: Derek Nola <derek.nola@suse.com >
2021-12-07 14:31:32 -08:00
