public/k3s
1
0
Fork 0
mirror of https://git.vectorsigma.ru/public/k3s.git synced 2026-08-04 02:09:42 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,481 Commits 31 Branches 949 Tags
edc07956867b6eb8a3d0ace04ff2fdce8d84adfc
Commit Graph

1044 Commits

Author SHA1 Message Date
Brooks Newberry
edc0795686 Update to v1.23.16+k3s1 (#6776) 2023-01-19 11:06:57 -08:00
Brad Davidson
d745f8558d Fix CI tests 
* General cleanup of test-helpers functions to address CI failures
* Install awscli in test image
* Log containerd output to file even when running with --debug

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f54b5e4fa0)
 2023-01-17 18:15:42 -08:00
Brad Davidson
27f8fe7d02 Pass through default tls-cipher-suites 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-01-13 22:15:11 -08:00
Brad Davidson
e41a76520c Preload iptable_filter/ip6table_filter 
ServiceLB now requires this module, but it will not get autoloaded by the kubelet if the host is using nftables.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-13 19:18:44 -08:00
Brad Davidson
c58062591c Bump k3s-root and remove embedded strongswan support 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 2835368ecb)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-02 00:21:01 -08:00
Brad Davidson
f2fdf7eb36 go generate 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 915c7719fe)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-02 00:21:01 -08:00
Brad Davidson
f36904d033 go generate 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 1eeea5c81f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-02 00:21:01 -08:00
Brad Davidson
c2944e8def Disable CCM metrics port when legacy CCM functionality is disabled 
Prevents port conflicts on upgrade for users that have deployed other cloud controllers.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e08a662509)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-02 00:21:01 -08:00
Brad Davidson
836907568f Bump klipper-helm and klipper-lb versions 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit a07bb555ba)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-02 00:21:01 -08:00
Derek Nola
91120595b2 Add prefer-bundled-bin as an agent flag (#6545) 
* Add prefer-bundled-bin as an agent flag
* Add E2E test for prefer-bundled-bin

Signed-off-by: Derek Nola <derek.nola@suse.com>
(cherry picked from commit 614da78e43)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-02 00:21:01 -08:00
Manuel Buil
3e157ed907 Remove stuff which belongs in the windows executor implementation 
Signed-off-by: Manuel Buil <mbuil@suse.com>
(cherry picked from commit 483e29e783)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-02 00:21:01 -08:00
Brad Davidson
05ba667415 Address nits from self-review 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 9ff0943d56)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-02 00:21:01 -08:00
Brad Davidson
de0c68f298 Allow agent to run rootless 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 56bf7d6ad3)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-02 00:21:01 -08:00
Brad Davidson
2d9d277a1d Add rootless IPv6 support 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6f2b21c5cd)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-02 00:21:01 -08:00
Brad Davidson
8b77684522 Make rootless settings configurable 
Add enivironment variables for port-driver, cidr, mtu, and disable-host-loopback settings. Since rootless is still experimental, I don't think they deserve full CLI flag status.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c02dceb7ad)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-02 00:21:01 -08:00
Brad Davidson
683271f6d0 go generate 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 73171ff20a)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-02 00:21:01 -08:00
Derek Nola
8784eab7a6 Add new prefer-bundled-bin experimental flag (#6420) 
* initial prefer-bundled-bin ci change
* Add startup testlet
* Convert parsing to pflag library
* Fix code validation
* go mod tidy

Signed-off-by: Derek Nola <derek.nola@suse.com>
(cherry picked from commit 0f52088cd3)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-12-02 00:21:01 -08:00
Derek Nola
a64dd933d6 Change secrets-encryption to GA (#6592) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2022-12-01 12:40:29 -08:00
Manuel Buil
30903ccb5b Fix log for flannelExternalIP use case 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-11-22 16:56:20 +01:00
Manuel Buil
07dc375c82 Remove stuff which belongs in the windows executor implementation 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-11-18 09:46:35 +01:00
Brad Davidson
96bfe8b397 Bump traefik chart to 19.0.4 to fix kubernetes version check 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-11-14 14:52:08 -08:00
Derek Nola
2ac863c36b Add Secrets Encryption to CriticalArgs 
* Add EncryptSecrets to Critical Control Args
* use deep comparison to extract differences

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2022-11-04 14:22:52 -07:00
Manuel Buil
98d5013b09 Merge pull request #6435 from manuelbuil/addrTypes123 
[Release 1.23] Change the priority of address types depending on flannel-external-ip
 2022-11-04 16:43:17 +01:00
thomasferrandiz
f927bc0c1b Merge pull request #6438 from thomasferrandiz/log-kube-router-1.23 
[Release 1.23] log kube-router version when starting netpol controller
 2022-11-04 15:21:35 +01:00
Thomas Ferrandiz
441311ed43 log kube-router version when starting netpol controller 
Signed-off-by: Thomas Ferrandiz <thomas.ferrandiz@suse.com>
 2022-11-04 11:02:05 +01:00
Manuel Buil
1401b35b96 Change the priority of address types depending on flannel-external-ip 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-11-04 09:10:52 +01:00
Manuel Buil
90800f16a4 Add some helping logs to avoid wrong configs 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-11-04 09:06:55 +01:00
Brad Davidson
8d95fad453 go generate 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-11-03 20:56:30 -07:00
iyear
68821334b0 Fix incorrect defer usage 
Problem:
Using defer inside a loop can lead to resource leaks

Solution:
Judge newer file in the separate function

Signed-off-by: iyear <ljyngup@gmail.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-11-03 20:56:30 -07:00
Brad Davidson
5828dcbf85 Bump traefik to v2.9.4 / chart v18.3.0 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-11-03 20:56:30 -07:00
Petri Kivikangas
df28b12a17 Convert containerd config.toml.tmpl Linux template to v2 syntax 
Signed-off-by: Petri Kivikangas <36138+Kitanotori@users.noreply.github.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-11-03 20:56:30 -07:00
Brad Davidson
2c8cb2ed97 Set default kubeletPort 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-11-03 20:56:30 -07:00
Brad Davidson
2f56136056 Check for RBAC before starting tunnel controllers 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-11-03 20:56:30 -07:00
Brad Davidson
0669e12d2d Add GVK lookup to deploy controller 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-11-03 20:56:30 -07:00
Brad Davidson
c6c109cf3b Update helm-controller to pull in refactor 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-11-03 20:56:30 -07:00
Brad Davidson
36c698abcb Bump Traefik helm chart to v18.0.0 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-11-03 20:56:30 -07:00
Roberto Bonafiglia
64db8d72f9 Update flannel to 0.20.1 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-11-03 15:16:43 -07:00
Brad Davidson
66263ac7f0 Add --flannel-external-ip flag 
Using the node external IP address for all CNI traffic is a breaking change from previous versions; we should make it an opt-in for distributed clusters instead of default behavior.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-10-24 10:12:52 -07:00
Brad Davidson
d5807b6e38 Fix RBAC to allow removal of legacy finalizer 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-10-20 17:02:21 -07:00
Brad Davidson
206006cc33 Return ProviderID in URI format 
The InstancesV1 interface handled this for us by combining the ProviderName and InstanceID values; the new interface requires us to do it manually

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-10-17 10:26:22 -07:00
Brad Davidson
128b882b69 Add ServiceAccount for svclb pods 
For 1.24 and earlier, the svclb pods need a ServiceAccount so that we can allow their sysctls in PSPs

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f25419ca2c)
 2022-10-14 16:35:31 -07:00
Derek Nola
39361a8053 [Release-1.23] Replace deprecated ioutil package (#6236) 
* check integration test null pointer

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Remove rotate retries

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Replace ioutil package

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Rebase fix

Signed-off-by: Derek Nola <derek.nola@suse.com>

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2022-10-07 19:02:58 -07:00
Brad Davidson
72177d42ca Bump traefik to 2.9.1 / chart 12.0.0 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-10-07 16:58:35 -07:00
Brad Davidson
d814456e90 Handle custom kubelet port in agent tunnel 
The kubelet port can be overridden by users; we shouldn't assume its always 10250

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-10-07 16:58:35 -07:00
Brad Davidson
dddd06da5c Fix occasional "TLS handshake error" in apiserver network proxy. 
We should be reading from the hijacked bufio.ReaderWriter instead of
directly from the net.Conn. There is a race condition where the
underlying http handler may consume bytes from the hijacked request
stream, if it comes in the same packet as the CONNECT header. These
bytes are left in the buffered reader, which we were not using. This was
causing us to occasionally drop a few bytes from the start of the
tunneled connection's client data stream.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-10-07 16:58:35 -07:00
Brad Davidson
95f216a5b0 Use structured logging instead of logrus for event recorders 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-10-07 16:58:35 -07:00
Brad Davidson
75303fe579 Disable cloud-node and cloud-node-lifecycle if CCM is disabled 
If CCM and ServiceLB are both disabled, don't run the cloud-controller-manager at all;
this should provide the same CLI flag behavior as previous releases, and not create
problems when users disable the CCM but still want ServiceLB.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-10-07 16:58:35 -07:00
Brad Davidson
d59b8407a7 Move servicelb into cloudprovider LoadBalancer interface 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-10-07 16:58:35 -07:00
Brad Davidson
53fede31e2 Move DisableServiceLB/Rootless/ServiceLBNamespace into config.Control 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-10-07 16:58:35 -07:00
Brad Davidson
806a8989e5 Implement InstancesV2 instead of Instances 
... and drop legacy ClusterID support.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-10-07 16:58:35 -07:00