Commit Graph

381 Commits

Author SHA1 Message Date
Brad Davidson
ce05681dd7 Bump kine to v0.11.11
https://github.com/k3s-io/kine/compare/v0.11.9...v0.11.11
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-07-15 10:14:40 -07:00
Brad Davidson
409fec9778 Add etcd s3 config secret implementation
* Move snapshot structs and functions into pkg/etcd/snapshot
* Move s3 client code and functions into pkg/etcd/s3
* Refactor pkg/etcd to track snapshot and s3 moves
* Add support for reading s3 client config from secret
* Add minio client cache, since S3 client configuration can now be
  changed at runtime by modifying the secret, and don't want to have to
  create a new minio client every time we read config.
* Add tests for pkg/etcd/s3

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c36db53e54)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-07-15 10:14:40 -07:00
Brad Davidson
8c67a3091e Ensure remotedialer kubelet connections use kubelet bind address
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit eb8bd15889)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-07-15 10:14:40 -07:00
dependabot[bot]
cebb31a21c Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7
Bumps [github.com/hashicorp/go-retryablehttp](https://github.com/hashicorp/go-retryablehttp) from 0.7.4 to 0.7.7.
- [Changelog](https://github.com/hashicorp/go-retryablehttp/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/go-retryablehttp/compare/v0.7.4...v0.7.7)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-retryablehttp
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit f6942f3de4)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-07-15 10:14:40 -07:00
Roberto Bonafiglia
d076d9a78c Update flannel to v0.25.4 and fixed issue with IPv6 mask
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
2024-07-01 18:59:01 +02:00
Brooks Newberry
7bd4fe1bc5 [release-1.28] Update Kubernetes to v1.28.11 (#10347)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
2024-06-13 09:09:17 -07:00
Harrison Affel
b261f298eb fix typo, use rancher/permissions
Signed-off-by: Harrison Affel <harrisonaffel@gmail.com>
2024-06-07 08:31:31 -07:00
Brad Davidson
1d4e4ea0c5 Bump klipper-helm image for tls secret support
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6683fcdb65)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-05-31 09:17:13 -07:00
Brad Davidson
b9061edfe2 Bump kine to v0.11.9 to fix pagination
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 2669d67a9b)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-05-31 09:17:13 -07:00
Brad Davidson
2472398a48 bump minio-go to v7.0.70
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit afdcc83afe)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-05-31 09:17:13 -07:00
Brad Davidson
90972eabaa Bump spegel version
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5cf4d75749)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-05-31 09:17:13 -07:00
Brad Davidson
8659d33d90 bump etcd to v3.5.13
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit bf8b15e7ae)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-05-31 09:17:13 -07:00
Brad Davidson
962299afa4 Bump containerd to v1.7.17
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit aaa578785c)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-05-31 09:17:13 -07:00
Roberto Bonafiglia
e941bb850f Update kube-router version to v2.1.2
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
2024-05-28 17:18:31 +02:00
Thomas Ferrandiz
695192e5ff Use TrafficManager interface when calling flannel
Signed-off-by: Thomas Ferrandiz <thomas.ferrandiz@suse.com>
2024-05-28 07:39:03 +00:00
Thomas Ferrandiz
a7cc980e15 Bump flannel version to v0.25.2
Signed-off-by: Thomas Ferrandiz <thomas.ferrandiz@suse.com>
2024-05-28 07:37:58 +00:00
Brian Downs
a4c5612ea3 Update to v1.28.10 (#10098) 2024-05-17 13:38:29 -07:00
Pedro Tashima
b33e710f74 Update to v1.28.9 (#9959)
Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>
2024-04-16 18:59:09 -03:00
Roberto Bonafiglia
feb211d3ce Update kube-router to v2.1.0
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
2024-04-12 12:25:15 +02:00
Brad Davidson
8b089a4ffb Move etcd snapshot management CLI to request/response
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit fe465cc832)
2024-04-11 10:01:16 -07:00
Brad Davidson
0eaee46708 Bump containerd and cri-dockerd
Bump containerd to v1.7.15
Bump cri-dockerd to v0.3.12

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0792461885)
2024-04-11 10:01:16 -07:00
Brad Davidson
d5a85d7307 Add certificate expiry check and warnings
* Add ADR
* Add `k3s certificate check` command.
* Add periodic check and events when certs are about to expire.
* Add metrics for certificate validity remaining, labeled by cert subject

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7f659759dd)
2024-04-11 10:01:16 -07:00
Derek Nola
88b2b1f6a6 Bump spegel to v0.0.20-k3s1 (#9880)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-04-09 09:03:37 -07:00
Vitor Savian
70bd37793f Add tls for kine
* Bump kine
* Add integration tests for kine with tls

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
2024-04-02 11:41:35 -03:00
Derek Nola
1cde5b83ce Remove old pinned dependencies (#9827)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-03-30 21:29:45 -07:00
Brian Downs
653dd61aaa Update to v1.28.8-k3s1 and Go 1.21.8 (#9746) 2024-03-15 17:30:15 -07:00
Philip Laine
4e57230e08 Bump spegel to v0.0.18-k3s4
Signed-off-by: Philip Laine <philip.laine@gmail.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 26feb25c40)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Brad Davidson
2ae8aa48aa Bump helm-controller/klipper-helm versions
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 109e3e454c)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-03-07 16:36:56 -08:00
Derek Nola
29de58c778 [Release-1.28] chore(deps): Remediating CVE-2023-45142 CVE-2023-48795 (#9647)
Signed-off-by: Tal Yitzhak <taly@lightrun.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Tal Yitzhak <yitzhtal@gmail.com>
Co-authored-by: Tal Yitzhak <taly@lightrun.com>
2024-03-05 14:59:00 -08:00
Brooks Newberry
9f78e474d7 Update Kubernetes to v1.28.7 (#9492)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
2024-02-15 13:15:00 -08:00
Brad Davidson
3d0674ad1c Bump kine and set NotifyInterval to what the apiserver expects
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit de825845b2)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-10 00:49:18 -08:00
Roberto Bonafiglia
dda9780f23 Update Kube-router to v2.0.1
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
2024-02-09 20:15:42 +01:00
Hussein Galal
034ee89344 Update flannel to v0.24.0 and remove multiclustercidr flag (#9075)
* update flannel to v0.24.0

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* remove multiclustercidr flag

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
2024-02-09 09:20:39 +01:00
Manuel Buil
6ff57ab749 Bump flannel version
Signed-off-by: Manuel Buil <mbuil@suse.com>
2024-02-09 09:20:39 +01:00
Brad Davidson
5857584463 Bump cri-dockerd
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-07 17:13:00 -08:00
Brad Davidson
c9f49a3b06 Bump helm-controller to fix issue with ChartContent
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-02 12:41:14 -08:00
Brad Davidson
2f9788ab55 Bump runc and helm-controller versions
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-02-01 18:52:07 -08:00
Pedro Tashima
c236c9ff77 Update to v1.28.6 (#9260)
Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>
Co-authored-by: Pedro Tashima <pedro.tashima@suse.com>
2024-01-18 10:15:30 -03:00
Pierre
04ce0ac0a9 Rebase & Squash (#9070)
Signed-off-by: Yodo <pierre@azmed.co>
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-01-12 10:41:28 -08:00
Derek Nola
4724315b8c Pin opa version for missing dependency chain (#9216)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2024-01-12 08:14:21 -08:00
Brad Davidson
2858f89a5b Bump quic-go for CVE-2023-49295
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-01-11 16:29:20 -08:00
Brad Davidson
f3c6250b28 Add embedded registry implementation
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 37e9b87f62)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-01-11 16:29:20 -08:00
Brad Davidson
fe19faaf9a Handle logging flags when parsing kube-proxy args
Also adds a test to ensure this continues to work.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit db7091b3f6)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2024-01-11 16:29:20 -08:00
Pedro Tashima
19b361f30b Update to v1.28.5-k3s1 (#9081)
* Update to v1.28.5

Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>

* Update Golang to 1.20.12

Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>

---------

Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>
Co-authored-by: Pedro Tashima <pedro.tashima@suse.com>
2023-12-20 20:47:19 -03:00
Brad Davidson
71a3c35fb7 Bump containerd to v1.7.11
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2023-12-11 17:04:52 -08:00
Brad Davidson
b9c288f702 Bump containerd/runc to v1.7.10-k3s1/v1.1.10
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2023-12-08 18:17:19 -08:00
Johnatas
3f23723035 Update to v1.28.4 (#8920)
Signed-off-by: Johnatas <johnatas.santos@suse.com>
2023-11-22 15:01:45 -03:00
Brad Davidson
3a6284e2b9 Bump dynamiclistener to fix secret sync race
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2023-11-17 10:09:01 -08:00
Brad Davidson
6c544a4679 Add jitter to client config retry
Also:
* Replaces labeled for/continue RETRY loops with wait helpers for improved readability
* Pulls secrets and nodes from cache for node password verification
* Migrate nodepassword tests to wrangler mocks for better code reuse

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2023-11-16 09:53:28 -08:00
Brad Davidson
32a1efa408 Bump kine to fix multiple issues
Ref: https://github.com/k3s-io/kine/releases/tag/v0.11.0
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2023-11-14 15:50:56 -08:00