galal-hussein
d8da89b261
RBAC changes for compat with AuthorizeNodeWithSelectors
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit b4747703b0brad.davidson@rancher.com >
2025-01-10 16:52:41 -08:00
Brad Davidson
fba0f092d4
Use helper to set consistent rest.Config rate limits and timeouts
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 71918e0d69brad.davidson@rancher.com >
2024-12-10 17:35:49 -08:00
Brad Davidson
429d00a93f
[release-1.29] Backports for 2024-08 release cycle ( #10665 )
...
* Use pagination when retrieving etcd snapshot list
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit c2216a62adbrad.davidson@rancher.com >
* Update secretsencrypt pagination
Make secretsencrypt page size and iteration consistent with other paginators
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 891e72f90fbrad.davidson@rancher.com >
* Cap length of generated name used for servicelb daemonset
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 21611c5665brad.davidson@rancher.com >
* Fix ipv6 sysctl required by non-ipv6 LoadBalancer service
This is a partial revert of 095ecdb034brad.davidson@rancher.com >
(cherry picked from commit d4c3422a85brad.davidson@rancher.com >
* remove deprecated use of wait functions
Signed-off-by: Will <will7989@hotmail.com >
(cherry picked from commit e4f3cc7b54brad.davidson@rancher.com >
* Update pkg/secretsencrypt/config.go
Co-authored-by: Brad Davidson <brad@oatmail.org >
Signed-off-by: Will Andrews <will7989@hotmail.com >
(cherry picked from commit 3ec086f6f7brad.davidson@rancher.com >
* Update pkg/cluster/managed.go
Co-authored-by: Derek Nola <derek.nola@suse.com >
Signed-off-by: Will Andrews <will7989@hotmail.com >
(cherry picked from commit e2179aa957brad.davidson@rancher.com >
* Wire lasso metrics up to common gatherer
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit e168438d44brad.davidson@rancher.com >
* Fix cloudprovider controller name
Looking at metrics revealed the cloudprovider controller name was anempty string.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit bffdf463e1brad.davidson@rancher.com >
---------
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
Signed-off-by: Will <will7989@hotmail.com >
Signed-off-by: Will Andrews <will7989@hotmail.com >
Co-authored-by: Will <will7989@hotmail.com >
Co-authored-by: Derek Nola <derek.nola@suse.com >
2024-08-05 09:35:07 -07:00
Brad Davidson
269563e4d2
Check for RBAC before starting tunnel controllers
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2022-10-26 15:08:13 -07:00
Brad Davidson
f633732d80
Use structured logging instead of logrus for event recorders
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2022-10-04 10:26:17 -07:00
Brad Davidson
e763fadbba
Ensure that WaitForAPIServerReady always re-dials through the loadbalancer
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2022-04-29 14:47:30 -07:00
Brad Davidson
965d0a08ef
Fix log spam due to servicelb event recorder namespace conflict
...
Don't hardcode the event namespace when creating event recorders; some controllers want to create events in other namespaces.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2022-03-23 16:01:21 -07:00
Brad Davidson
714979bf6a
Ensure that apiserver ready channel checks re-dial every time
...
Closing idle connections isn't guaranteed to close out a pooled connection to a
loadbalancer endpoint that has been removed. Instead, ensure that requests used
to wait for the apiserver to become ready aren't reused.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2022-03-23 13:21:58 -07:00
Brad Davidson
5014c9e0e8
Fix adding etcd-only node to existing cluster
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2022-02-28 19:56:08 -08:00
Derek Nola
bcb662926d
Secrets-encryption rotation ( #4372 )
...
* Regular CLI framework for encrypt commands
* New secrets-encryption feature
* New integration test
* fixes for flaky integration test CI
* Fix to bootstrap on restart of existing nodes
* Consolidate event recorder
Signed-off-by: Derek Nola <derek.nola@suse.com >
2021-12-07 14:31:32 -08:00
Brad Davidson
5ab6d21a7d
Increase agent's apiserver ready timeout ( #4454 )
...
Since we now start the server's agent sooner and in the background, we
may need to wait longer than 30 seconds for the apiserver to become
ready on downstream projects such as RKE2.
Since this essentially just serves as an analogue for the server's
apiReady channel, there's little danger in setting it to something
relatively high.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-11-11 14:01:49 -07:00
Brad Davidson
57377d2cd4
Minor cleanup on cribbed function
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-09-10 17:04:15 -07:00
Brad Davidson
3449d5b9f9
Wait for apiserver readyz instead of healthz
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-09-10 17:04:15 -07:00
Xiao Deshi
cfe7e0c734
remove duplicated func GetAddresses
...
refactor tunnel.go and controller.go, remove duplicated lines.
Signed-off-by: Xiao Deshi <xiaods@gmail.com >
2021-03-31 14:23:05 -07:00
