Brad Davidson
0a47df6f60
Bump etcd to v3.5.19
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-03-07 08:13:28 -08:00
Derek Nola
fb870adb91
Reenable skew test for 1.32/master ( #11885 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-03-06 08:55:13 -08:00
Brad Davidson
d694dd1db9
Add periodic background snapshot reconcile
...
Interval is configurable with new etcd-snapshot-reconcile-interval flag
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-03-05 12:18:19 -08:00
Brad Davidson
bed1f66880
Avoid use of github.com/pkg/errors functions that capture stack
...
We are not making use of the stack traces that these functions capture, so we should avoid using them as unnecessary overhead.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-03-05 00:41:38 -08:00
Brad Davidson
66d0f1604a
Bump to containerd v2.0.3/runc v1.2.5
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-03-03 12:00:56 -08:00
Brad Davidson
864ed2a4f1
Set User in k3s systemd unit
...
This ensures that the $HOME and $USER env vars get set. We have worked around this on the RKE2 side by setting it manually in the default .env file:
https://github.com/rancher/rke2/blob/master/bundle/lib/systemd/system/rke2-server.env
This is required for loading credentials from shared credentials files (`/root/.aws/credentials`)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-03-03 11:45:45 -08:00
Anders Larsson
8aa543eb87
Add netfilter statistic module to check-config
...
Signed-off-by: Anders Larsson <anders.git@larsson.xyz >
2025-02-28 09:53:53 -08:00
muicoder
d50106fcba
Fix memory cgroup check on kernels without v1 controller support
...
Signed-off-by: muicoder <muicoder@gmail.com >
2025-02-28 08:50:20 -08:00
Derek Nola
a764989931
Move away from docker e2e images, use gcr and ghcr
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-28 08:46:10 -08:00
Derek Nola
a61e581cb3
Migrate svcpolicies E2E test to docker
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-28 08:46:10 -08:00
Derek Nola
380a70ac7e
Expand E2E test matrix to cover all possible tests that fit on GHA
...
Fix rootless test
Fix svc firewall E2E test, broken by #11711
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-28 08:46:10 -08:00
Derek Nola
9865ab1f6e
Replace e2e.ParseNodes function with general ParseNodes and NodesReady test functions
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-28 08:46:10 -08:00
Derek Nola
f2f3c93ea7
Add E2E AllNodes helper function
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-28 08:46:10 -08:00
Brad Davidson
1c6dc31b1a
Fix memory cgroup check on kernels without v1 controller support
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-27 21:20:06 -08:00
Rafael
0867baa46f
Update stable channel ( #11855 )
...
Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com >
2025-02-27 16:32:41 -03:00
Brad Davidson
20133ad151
Increase e2e log verbosity and collect logs on failure
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-27 11:19:26 -08:00
Brad Davidson
e7b52cd63d
Fix panic when secret-encrypt status is checked before runtime core is ready
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-27 11:19:26 -08:00
Brad Davidson
f940368747
Use etcd proxy to bootstrap control-plane-only nodes, if possible
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-27 11:19:26 -08:00
Brad Davidson
244bfd0c35
Use existing server-CA and hash if available
...
Also wraps errors along the cluster prepare path to improve tracability.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-27 11:19:26 -08:00
Brad Davidson
53fcadc028
Serve HTTP bootstrap data from datastore before disk
...
Fixes issue where CA rotation would fail on servers with join URL set due to using old data from disk on other server
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-27 11:19:26 -08:00
github-actions[bot]
148f8abd3a
chore: Bump golang:alpine version ( #11837 )
...
Made with ❤️ ️ by updatecli
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-02-25 09:00:59 -08:00
Brad Davidson
5894af30ff
Move CR APIs to k3s-io/api
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-24 11:17:27 -08:00
Brad Davidson
4043c44d26
Bump containerd for go-cni deadlock fix
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-21 12:25:10 -08:00
Brad Davidson
f710d4900c
e2e: wait for deployments before getting logs
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-20 16:46:58 -08:00
Brad Davidson
67cbe75c84
e2e: Fix curl test timeouts
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-20 16:46:58 -08:00
Brad Davidson
2b6225eeff
Fix missing migration for containerd registry.configs plugin namespace
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-20 16:46:58 -08:00
Brad Davidson
7b1c48212a
Render CNI dir config whenever vars are set
...
RKE2 on Windows sets CNI bin dirs in node config even though embedded flannel is disabled (NoFlannel=true). We need to gate rendering this config on the vars being, set NOT on NoFlannel being false.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-20 16:46:58 -08:00
Somesh Bhalsing
6131ea15b2
fix: move CONFIG_SECCOMP to generally necessary category in check-config command
...
Signed-off-by: Somesh Bhalsing <somesh.bhalsing@gmail.com >
2025-02-18 11:22:16 -08:00
Brad Davidson
6199b79f4b
Add etcd snapshot metrics
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-18 11:09:42 -08:00
Rafael
badc2920f1
[master] Update to v1.32.2-k3s1 and Go 1.23.6 ( #11789 )
...
* Update to v1.32.2
Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com >
* Increase test timeout
Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com >
---------
Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com >
2025-02-16 16:57:09 -03:00
Brad Davidson
b2d495e17f
Add static bin dir support to k3s docker image
...
Static bin dir is first in search path and is on /var/lib/rancher/k3s volume, which can be persisted by users. If the volume is empty it will just fall back to the legacy /bin dir.
2025-02-14 15:29:12 -08:00
Derek Nola
6ebf72d3a3
Fix typo on conformance script ( #11792 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-14 10:00:30 -08:00
Roberto Bonafiglia
3f2373b55a
Revert "Add ability to pass configuration options to flannel backend"
...
This reverts commit 8643576985 .
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com >
2025-02-14 18:33:46 +01:00
Derek Nola
2f787dda91
Migrate E2E SecretsEncryption to Docker test
...
Remove secrets encryption E2E from Drone
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-12 14:27:26 -08:00
Derek Nola
837558ef8b
Don't run snapshotrestore on flaky arm64 runners
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-12 14:27:26 -08:00
Derek Nola
d0a1e94392
Migrate E2E autoimport to Docker test
...
Simplify DockerNode structs
Remove autoimport from E2E
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-12 14:27:26 -08:00
Derek Nola
8d9322d22b
Fix skew test on v1.31 and older
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-12 14:27:26 -08:00
Derek Nola
abeb981afc
Remove unused docker tests
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-12 14:27:26 -08:00
Derek Nola
793d216d02
Migrate hardened docker test
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-12 14:27:26 -08:00
Derek Nola
2724f08be8
Fix various E2E test function names and descriptions
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-12 14:27:26 -08:00
Derek Nola
538131b685
Migrate E2E Token test into a Docker Token test
...
Remove E2E token test
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-12 14:27:26 -08:00
Derek Nola
1d86e39780
Align docker and e2e variable spelling
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-12 14:27:26 -08:00
Derek Nola
26b4243178
Only bump trivy on the minor release ( #11773 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-12 09:35:35 -08:00
Derek Nola
303350d14e
Reduce cache thrashing on E2E vagrant boxes. Don't cache for windows unit tests. ( #11769 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2025-02-11 11:27:16 -08:00
Brad Davidson
45dbc43bd4
Fix e2e ingress IP helper
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-10 10:44:48 -08:00
Brad Davidson
20a9a6bfc3
Move windows build to separate job
...
Don't block other linux steps on building the windows binary
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-07 12:03:48 -08:00
Brad Davidson
bc45972398
Update containerd config schema to version 3
...
Ref: https://github.com/containerd/containerd/blob/release/2.0/docs/cri/config.md
Since this is a breaking change, add support for a new v3 template file. If no v3 template is present, fall back to checking for the legacy v2 template and render the old structure.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-07 12:03:48 -08:00
Brad Davidson
124e46bccf
Upgrade containerd to v2.0.2
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-07 12:03:48 -08:00
Brad Davidson
04ed6c0996
Fix wasm ingress test
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-07 07:47:32 -08:00
Brad Davidson
77cf99aa5f
Bump traefik to 3.3.2
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-02-07 07:47:32 -08:00