public/k3s
1
0
Fork 0
mirror of https://git.vectorsigma.ru/public/k3s.git synced 2026-08-06 13:50:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,224 Commits 31 Branches 949 Tags
eb192197eb69e9be223c39ec83f59dee5ceadd3e
Commit Graph

1363 Commits

Author SHA1 Message Date
Thomas Ferrandiz
6dcd52eb8e Use TrafficManager interface when calling flannel 
Signed-off-by: Thomas Ferrandiz <thomas.ferrandiz@suse.com>
 2024-05-27 13:05:18 +00:00
Thomas Ferrandiz
af7bcc3900 Bump flannel version to v0.25.2 
Signed-off-by: Thomas Ferrandiz <thomas.ferrandiz@suse.com>
 2024-05-27 13:05:18 +00:00
huangzy
6fcaad553d allow helm controller set owner reference 
Signed-off-by: huangzy <huangzynn@outlook.com>
 2024-05-24 12:44:10 -07:00
Robert Rose
6886c0977f Follow directory symlinks in auto deploying manifests (#9288) 
Signed-off-by: Robert Rose <robert.rose@mailbox.org>
 2024-05-24 12:42:25 -07:00
linxin
f24ba9d3a9 Validate resolv.conf for presence of nameserver entries 
Co-authored-by: Brad Davidson <brad@oatmail.org>
Signed-off-by: linxin <linxin@geedgenetworks.com>
 2024-05-24 12:39:34 -07:00
Brad Davidson
5a0162d8ee Drop check for legacy traefik v1 chart 
We have been bundling traefik v2 for three years, its time to drop the legacy chart check

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-23 14:13:13 -07:00
Brad Davidson
37f97b33c9 Add support for svclb pod PriorityClassName 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-23 14:11:15 -07:00
Brad Davidson
b453630478 Update local-path-provisioner helper script 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-23 14:00:00 -07:00
Brad Davidson
095ecdb034 Fix issue with local traffic policy for single-stack services on dual-stack nodes. 
Just enable IP forwarding for all address families regardless of service address families.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-23 13:54:30 -07:00
Brad Davidson
5cf4d75749 Bump spegel version 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-23 13:48:38 -07:00
Brad Davidson
30999f9a07 Switch stargz over to cri registry config_path 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-23 13:35:15 -07:00
Brad Davidson
7374010c0c Use fixed stream server bind address for cri-dockerd 
Will now use 127.0.0.1:10010, same as containerd's CRI

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-23 13:33:27 -07:00
Brad Davidson
5f6b813cc8 Add WithSkipMissing to not fail import on missing blobs 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-23 13:32:22 -07:00
Manuel Buil
811de8b819 Fix bug when using tailscale config by file 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2024-05-23 11:55:20 +02:00
Harrison Affel
1d22b6971f windows changes 
Signed-off-by: Harrison Affel <harrisonaffel@gmail.com>
 2024-05-16 14:40:27 -07:00
Derek Nola
6531fb79b0 Deprecate pod-infra-container-image kubelet flag (#7409) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-05-06 10:39:10 -07:00
Hussein Galal
144f5ad333 Kubernetes V1.30.0-k3s1 (#10063) 
* kubernetes 1.30.0-k3s1

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update go version to v1.22.2

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update dynamiclistener and helm-controller

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update go in go.mod to 1.22.2

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update go in Dockerfiles

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update cri-dockerd

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Add proctitle package with linux and windows constraints

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* go mod tidy

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Fixing setproctitle function

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update dynamiclistener to v0.6.0-rc1

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2024-05-06 19:42:27 +03:00
Brad Davidson
94e29e2ef5 Make /db/info available anonymously from localhost 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-22 19:34:43 -07:00
Brad Davidson
d3b60543e7 Fix 10 second etcd-snapshot request timeout 
The default clientaccess request timeout is too short. Wait longer by default, and add the s3 timeout if s3 is enabled.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-19 23:26:51 -07:00
Brad Davidson
5b431ca531 Fix on-demand snapshots not honoring folder 
Also fix etcd s3 tests to actually check that the files are saved to s3 🙃

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-19 23:26:51 -07:00
Thomas Anderson
c59820a52a Allow LPP to read helper logs (#9834) 
Signed-off-by: Thomas Anderson <127358482+zc-devs@users.noreply.github.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-11 12:31:54 -07:00
Brad Davidson
3f906bee79 Update packaged manifests 
* Update traefik chart to bump image tag and fix quoting
* Fix image quoting in flat manifests
* Update local-path-provisioner config to stop using deprecated hostpath volume type

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-11 09:22:51 -07:00
Brad Davidson
4cc73b1fee Actually fix agent certificate rotation 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-10 09:21:01 -07:00
Brad Davidson
08f1022663 Don't log 'apiserver disabled' error sent by etcd-only nodes 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-09 15:36:33 -07:00
Brad Davidson
7d9abc9f07 Improve etcd load-balancer startup behavior 
Prefer the address of the etcd member being joined, and seed the full address list immediately on startup.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-09 15:36:33 -07:00
Brad Davidson
fe465cc832 Move etcd snapshot management CLI to request/response 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-09 15:21:26 -07:00
Brad Davidson
60248c42de Add supervisor cert/key to rotate list 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-05 10:59:17 -07:00
Derek Nola
9846a72e92 Bump spegel to v0.0.20-k3s1 (#9863) 
* Bump spegel to v0.0.20-k3s1

* Remove deprecated libp2p Pretty function

* Remove quic-go pin
   Pinned version is now out of date,  indirect dependencies are now newer, with CVE issue fixed
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-04-05 08:43:19 -07:00
Brad Davidson
f2961fb5d2 Add workaround for containerd hosts.toml bug 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-04-03 20:47:54 -07:00
Brad Davidson
7f659759dd Add certificate expiry check and warnings 
* Add ADR
* Add `k3s certificate check` command.
* Add periodic check and events when certs are about to expire.
* Add metrics for certificate validity remaining, labeled by cert subject

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-28 12:05:21 -07:00
Derek Nola
6a42c6fcfe Remove old pinned dependencies (#9806) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-28 10:09:48 -07:00
Derek Nola
14f54d0b26 Transition from deprecated pointer library to ptr (#9801) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-28 10:07:02 -07:00
Vitor Savian
5d69d6e782 Add tls for kine 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Bump kine

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Add integration tests for kine with tls

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2024-03-28 11:12:07 -03:00
Brad Davidson
c51d7bfbd1 Add health-check support to loadbalancer 
* Adds support for health-checking loadbalancer servers. If a
  health-check fails when dialing, all existing connections to the
  server will be closed.
* Wires up a remotedialer tunnel connectivity check as the health check
  for supervisor/apiserver connections.
* Wires up a simple ping request to the supervisor port as the health
  check for etcd connections.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-27 16:50:27 -07:00
Brad Davidson
edb0440017 Fix etcd snapshot reconcile for agentless nodes 
Disable cleanup of orphaned snapshots and patching of node annotations if running agentless

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-27 16:44:36 -07:00
Vitor Savian
3f649e3bcb Add a new error when kine is with disable apiserver or disable etcd 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2024-03-27 10:59:34 -03:00
Brad Davidson
f099bfa508 Fix error when image has already been pulled 
CRI and containerd APIs disagree about the registry names - CRI supports
index.docker.io as an alias for docker.io, while containerd does not.
Use the actual stored RepoTag to determine what image to ask containerd for.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-26 16:19:40 -07:00
Brad Davidson
65cd606832 Respect cloud-provider fields set by kubelet 
Don't clobber the providerID field and instance-type/region/zone labels if provided by the kubelet. This allows the user to set these to the correct values when using the embedded CCM in a real cloud environment.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-26 16:18:34 -07:00
Brad Davidson
d7cdbb7d4d Send error response if member list cannot be retrieved 
Prevents joining nodes from being stuck with bad initial member list if there is a transient failure, or if they try to join themselves

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-26 15:17:15 -07:00
Brad Davidson
7a2a2d075c Move error response generation code into util 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-26 15:17:15 -07:00
Brad Davidson
bba3e3c66b Fix wildcard entry upstream fallback 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-12 23:31:16 -07:00
Brad Davidson
fe2ca9ecf1 Warn and suppress duplicate registry mirror endpoints 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:30:06 -08:00
Brad Davidson
2a091a693a Bump metrics-server to v0.7.0 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 12:45:29 -08:00
Roberto Bonafiglia
88c431aea5 Adjust first node-ip based on configured clusterCIDR 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2024-03-06 11:10:41 +01:00
Vitor Savian
59c724f7a6 Fix wildcard with embbeded registry test 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-05 14:38:36 -08:00
Flavio Castelli
64e4f0e6e7 fix: use correct wasm shims names 
Fix the wasm shim detection and the containerd configuration generation.

Prior to this commit, the binary and the `RuntimeType` values were not
correct.

Signed-off-by: Flavio Castelli <fcastelli@suse.com>
 2024-03-05 13:12:08 -08:00
Brad Davidson
091a5c8965 Don't register embedded registry address as an upstream registry 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-04 15:11:26 -08:00
Brad Davidson
b5a4846e9d Remove filtering of wildcard mirror entry 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-04 15:11:26 -08:00
Brad Davidson
84a071a81e Add env var to allow spegel mirroring of latest tag 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-04 15:11:26 -08:00
Philip Laine
26feb25c40 Bump spegel to v0.0.18-k3s4 
Signed-off-by: Philip Laine <philip.laine@gmail.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-04 15:11:26 -08:00