Commit Graph

3570 Commits

Author SHA1 Message Date
Brad Davidson
0a47df6f60 Bump etcd to v3.5.19
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 08:13:28 -08:00
Derek Nola
fb870adb91 Reenable skew test for 1.32/master (#11885)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-06 08:55:13 -08:00
Brad Davidson
d694dd1db9 Add periodic background snapshot reconcile
Interval is configurable with new etcd-snapshot-reconcile-interval flag

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-05 12:18:19 -08:00
Brad Davidson
bed1f66880 Avoid use of github.com/pkg/errors functions that capture stack
We are not making use of the stack traces that these functions capture, so we should avoid using them as unnecessary overhead.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-05 00:41:38 -08:00
Brad Davidson
66d0f1604a Bump to containerd v2.0.3/runc v1.2.5
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-03 12:00:56 -08:00
Brad Davidson
864ed2a4f1 Set User in k3s systemd unit
This ensures that the $HOME and $USER env vars get set. We have worked around this on the RKE2 side by setting it manually in the default .env file:
https://github.com/rancher/rke2/blob/master/bundle/lib/systemd/system/rke2-server.env

This is required for loading credentials from shared credentials files (`/root/.aws/credentials`)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-03 11:45:45 -08:00
Anders Larsson
8aa543eb87 Add netfilter statistic module to check-config
Signed-off-by: Anders Larsson <anders.git@larsson.xyz>
2025-02-28 09:53:53 -08:00
muicoder
d50106fcba Fix memory cgroup check on kernels without v1 controller support
Signed-off-by: muicoder <muicoder@gmail.com>
2025-02-28 08:50:20 -08:00
Derek Nola
a764989931 Move away from docker e2e images, use gcr and ghcr
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-28 08:46:10 -08:00
Derek Nola
a61e581cb3 Migrate svcpolicies E2E test to docker
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-28 08:46:10 -08:00
Derek Nola
380a70ac7e Expand E2E test matrix to cover all possible tests that fit on GHA
Fix rootless test

Fix svc firewall E2E test, broken by #11711

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-28 08:46:10 -08:00
Derek Nola
9865ab1f6e Replace e2e.ParseNodes function with general ParseNodes and NodesReady test functions
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-28 08:46:10 -08:00
Derek Nola
f2f3c93ea7 Add E2E AllNodes helper function
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-28 08:46:10 -08:00
Brad Davidson
1c6dc31b1a Fix memory cgroup check on kernels without v1 controller support
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-27 21:20:06 -08:00
Rafael
0867baa46f Update stable channel (#11855)
Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com>
2025-02-27 16:32:41 -03:00
Brad Davidson
20133ad151 Increase e2e log verbosity and collect logs on failure
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-27 11:19:26 -08:00
Brad Davidson
e7b52cd63d Fix panic when secret-encrypt status is checked before runtime core is ready
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-27 11:19:26 -08:00
Brad Davidson
f940368747 Use etcd proxy to bootstrap control-plane-only nodes, if possible
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-27 11:19:26 -08:00
Brad Davidson
244bfd0c35 Use existing server-CA and hash if available
Also wraps errors along the cluster prepare path to improve tracability.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-27 11:19:26 -08:00
Brad Davidson
53fcadc028 Serve HTTP bootstrap data from datastore before disk
Fixes issue where CA rotation would fail on servers with join URL set due to using old data from disk on other server

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-27 11:19:26 -08:00
github-actions[bot]
148f8abd3a chore: Bump golang:alpine version (#11837)
Made with ❤️️ by updatecli

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-02-25 09:00:59 -08:00
Brad Davidson
5894af30ff Move CR APIs to k3s-io/api
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-24 11:17:27 -08:00
Brad Davidson
4043c44d26 Bump containerd for go-cni deadlock fix
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-21 12:25:10 -08:00
Brad Davidson
f710d4900c e2e: wait for deployments before getting logs
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-20 16:46:58 -08:00
Brad Davidson
67cbe75c84 e2e: Fix curl test timeouts
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-20 16:46:58 -08:00
Brad Davidson
2b6225eeff Fix missing migration for containerd registry.configs plugin namespace
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-20 16:46:58 -08:00
Brad Davidson
7b1c48212a Render CNI dir config whenever vars are set
RKE2 on Windows sets CNI bin dirs in node config even though embedded flannel is disabled (NoFlannel=true). We need to gate rendering this config on the vars being, set NOT on NoFlannel being false.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-20 16:46:58 -08:00
Somesh Bhalsing
6131ea15b2 fix: move CONFIG_SECCOMP to generally necessary category in check-config command
Signed-off-by: Somesh Bhalsing <somesh.bhalsing@gmail.com>
2025-02-18 11:22:16 -08:00
Brad Davidson
6199b79f4b Add etcd snapshot metrics
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-18 11:09:42 -08:00
Rafael
badc2920f1 [master] Update to v1.32.2-k3s1 and Go 1.23.6 (#11789)
* Update to v1.32.2

Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com>

* Increase test timeout

Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com>

---------

Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com>
2025-02-16 16:57:09 -03:00
Brad Davidson
b2d495e17f Add static bin dir support to k3s docker image
Static bin dir is first in search path and is on /var/lib/rancher/k3s volume, which can be persisted by users. If the volume is empty it will just fall back to the legacy /bin dir.
2025-02-14 15:29:12 -08:00
Derek Nola
6ebf72d3a3 Fix typo on conformance script (#11792)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-14 10:00:30 -08:00
Roberto Bonafiglia
3f2373b55a Revert "Add ability to pass configuration options to flannel backend"
This reverts commit 8643576985.

Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
2025-02-14 18:33:46 +01:00
Derek Nola
2f787dda91 Migrate E2E SecretsEncryption to Docker test
Remove secrets encryption E2E from Drone

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-12 14:27:26 -08:00
Derek Nola
837558ef8b Don't run snapshotrestore on flaky arm64 runners
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-12 14:27:26 -08:00
Derek Nola
d0a1e94392 Migrate E2E autoimport to Docker test
Simplify DockerNode structs
Remove autoimport from E2E
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-12 14:27:26 -08:00
Derek Nola
8d9322d22b Fix skew test on v1.31 and older
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-12 14:27:26 -08:00
Derek Nola
abeb981afc Remove unused docker tests
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-12 14:27:26 -08:00
Derek Nola
793d216d02 Migrate hardened docker test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-12 14:27:26 -08:00
Derek Nola
2724f08be8 Fix various E2E test function names and descriptions
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-12 14:27:26 -08:00
Derek Nola
538131b685 Migrate E2E Token test into a Docker Token test
Remove E2E token test

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-12 14:27:26 -08:00
Derek Nola
1d86e39780 Align docker and e2e variable spelling
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-12 14:27:26 -08:00
Derek Nola
26b4243178 Only bump trivy on the minor release (#11773)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-12 09:35:35 -08:00
Derek Nola
303350d14e Reduce cache thrashing on E2E vagrant boxes. Don't cache for windows unit tests. (#11769)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-11 11:27:16 -08:00
Brad Davidson
45dbc43bd4 Fix e2e ingress IP helper
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:44:48 -08:00
Brad Davidson
20a9a6bfc3 Move windows build to separate job
Don't block other linux steps on building the windows binary

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-07 12:03:48 -08:00
Brad Davidson
bc45972398 Update containerd config schema to version 3
Ref: https://github.com/containerd/containerd/blob/release/2.0/docs/cri/config.md

Since this is a breaking change, add support for a new v3 template file. If no v3 template is present, fall back to checking for the legacy v2 template and render the old structure.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-07 12:03:48 -08:00
Brad Davidson
124e46bccf Upgrade containerd to v2.0.2
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-07 12:03:48 -08:00
Brad Davidson
04ed6c0996 Fix wasm ingress test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-07 07:47:32 -08:00
Brad Davidson
77cf99aa5f Bump traefik to 3.3.2
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-07 07:47:32 -08:00