public/k3s
1
0
Fork 0
mirror of https://git.vectorsigma.ru/public/k3s.git synced 2026-08-05 01:29:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,030 Commits 31 Branches 949 Tags
ac8fe8de2b7f2c7d70e9277eca4e3d7a2d6f3a46
Commit Graph

3030 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot]
ac8fe8de2b fix: update trivy from 0.46.1 to 0.48.1 (#8812) 
Signed-off-by: matttrach <matttrach@gmail.com>
Co-authored-by: matttrach <matttrach@gmail.com>
 2024-01-08 15:14:23 -06:00
Manuel Buil
6330e26bb3 Wait for taint to be gone in the node before starting the netpol controller 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2024-01-08 12:04:18 +01:00
ifNil
102ff76328 Print error when downloading file error inside install script (#6874) 
* Print error when downloading file error inside install script
* Update install.sh.sha256sum

Signed-off-by: yhw <2278069802@qq.com>
 2024-01-04 21:30:33 -08:00
Brad Davidson
eae221f9e5 Fix OS PRETTY_NAME on tagged releases 
These were always showing up as dev due to the build arg not being set by the drone step.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-04 19:42:28 -08:00
Brad Davidson
b297996b92 Add runtime checking of golang version 
Forces other groups packaging k3s to intentionally choose to build k3s with an unvalidated golang version

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-04 17:22:46 -08:00
Lex Rivera
5fe074b540 Add more paths to crun runtime detection (#9086) 
* add usr/local paths for crun detection

Signed-off-by: Lex Rivera <me@lex.io>
 2024-01-04 16:51:13 -08:00
Brad Davidson
c45524e662 Add support for containerd cri registry config_path 
Render cri registry mirrors.x.endpoints and configs.x.tls into config_path; keep
using mirrors.x.rewrites and configs.x.auth those do not yet have an
equivalent in the new format.

The new config file format allows disabling containerd's fallback to the
default endpoint when using mirror endpoints; a new CLI flag is added to
control that behavior.

This also re-shares some code that was unnecessarily split into parallel
implementations for linux/windows versions. There is probably more work
to be done on this front but it's a good start.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-04 16:50:26 -08:00
Brad Davidson
319dca3e82 Fix nil map in full snapshot configmap reconcile 
If a full reconcile wins the race against sync of an individual snapshot resource, or someone intentionally deletes the configmap, the data map could be nil and cause a crash.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-04 16:49:58 -08:00
Brad Davidson
db7091b3f6 Handle logging flags when parsing kube-proxy args 
Also adds a test to ensure this continues to work.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-04 16:23:03 -08:00
Brad Davidson
1e663622d2 Fix the OTHER log message that prints the wrong variable 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-04 15:23:39 -08:00
Brad Davidson
08ccea5cb6 Fix install script checksum 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-04 12:57:31 -08:00
Pedro Tashima
9d21b8a135 add system-agent-installer-k3s step to ga release (#9153) 
Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>
Co-authored-by: Pedro Tashima <pedro.tashima@suse.com>
 2024-01-04 13:38:57 -03:00
Ivan Shapovalov
a7fe1aaaa5 Dockerfile.dapper: set $HOME properly 
`$HOME` refers to `$DAPPER_SOURCE`, which is set in the same expression
and is thus not visible at the time of substitution.

This problem is not immediately visible with Docker, Inc.'s docker
merely because it resets an unset `$HOME` to `/root` (but still breaking
the Go cache). Under podman, this problem is immediately visible because
an unset `$HOME` remains unset and subsequently breaks the `go generate`
invocation.

Fixes #9089.

Signed-off-by: Ivan Shapovalov <intelfx@intelfx.name>
 2024-01-03 14:20:34 -08:00
Manuel Buil
30449e0128 Add 2>dev/null when checking nm-cloud systemd unit 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2024-01-03 09:36:11 +01:00
Derek Nola
0ad5d65a1e Added support for env *_PROXY variables for agent loadbalancer (#9118) 
Signed-off-by: Yodo <pierre@azmed.co>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Pierre <129078893+pierre-az@users.noreply.github.com>
 2024-01-02 17:13:30 -08:00
Brad Davidson
a27d660a24 Add ServiceLB support for PodHostIPs FeatureGate 
If the feature-gate is enabled, use status.hostIPs for dual-stack externalTrafficPolicy=Local support

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-02 16:00:09 -08:00
Harsimran Singh Maan
baaab250a7 Silence SELinux warning on INSTALL_K3S_SKIP_SELINUX_RPM (#8703) 
When k3s is installed with INSTALL_K3S_SKIP_SELINUX_RPM=true or
INSTALL_K3S_SKIP_DOWNLOAD=true or INSTALL_K3S_SKIP_DOWNLOAD=selinux,
the following message(or similar) is seen on Amazon Linux 2023/Centos
```
[INFO]  Skipping installation of SELinux RPM
[WARN]  Failed to find the k3s-selinux policy, please install:
    dnf install -y container-selinux
    dnf install -y https://rpm.rancher.io/k3s/stable/common/centos/8/noarch/

[INFO]  Creating /usr/bin/kubectl symlink to k3s
```

whereas now

```
[INFO]  Skipping installation of SELinux RPM
[INFO]  Creating /usr/bin/kubectl symlink to k3s
```

Signed-off-by: Harsimran Singh Maan <maan.harry@gmail.com>
 2024-01-02 12:30:07 -08:00
Derek Nola
aca1c2fd11 Add a retry around updating a secrets-encrypt node annotations (#9039) 
* Add a retry around updating a se node annotations

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-01-02 12:21:37 -08:00
Pierre
bbd68f3a50 Rebase & Squash (#9070) 
Signed-off-by: Yodo <pierre@azmed.co>
 2024-01-02 12:05:36 -08:00
Pedro Tashima
c7a8eef977 update stable channel to v1.28.5+k3s1 and add v1.29 channel (#9110) 
* update stable channel to v1.28.5+k3s1

Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>

* add v1.29 channel

Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>

---------

Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>
Co-authored-by: Pedro Tashima <pedro.tashima@suse.com>
 2024-01-02 14:44:06 -03:00
Nishant Singh
d87851d46e chore: Update Code of Conduct to Redirect to CNCF CoC (#9104) 
This commit updates the Code of Conduct to redirect to the latest version of the CNCF Code of Conduct.
Instead of maintaining a separate CoC text, it now link directly to the CNCF CoC for consistency and alignment with industry best practices.

Signed-off-by: tesla59 <nishant@heim.id>
 2024-01-02 11:44:46 -05:00
dependabot[bot]
9d9fbf4ff4 Bump actions/setup-go from 4 to 5 (#9036) 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4 to 5.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-02 11:04:25 -05:00
github-actions[bot]
798eecf112 chore: Update sonobuoy image versions (#8910) 
Made with ❤️️ by updatecli

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2024-01-02 10:59:39 -05:00
Derek Nola
3190a5faa2 Remove rotate-keys subcommand (#9079) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
v1.29.0-rc3+k3s1 v1.29.0+k3s1 		2023-12-20 12:26:41 -08:00
Hussein Galal
9411196406 Update flannel to v0.24.0 and remove multiclustercidr flag (#9075) 
* update flannel to v0.24.0

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* remove multiclustercidr flag

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
v1.29.0-rc2+k3s1 		2023-12-20 00:25:38 +02:00
Hussein Galal
7101af36bb Update Kubernetes to v1.29.0+k3s1 (#9052) 
* Update to v1.29.0

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update to v1.29.0

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update go to 1.21.5

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update golangci-lint

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update flannel to 0.23.0-k3s1

This update uses k3s' fork of flannel to allow the removal of
multicluster cidr flag logic from the code

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix flannel calls

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update cri-tools to version v1.29.0-k3s1

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Remove GOEXPERIMENT=nounified from arm builds

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Skip golangci-lint

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Fix setup logging with newer go version

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Move logging flags to components arguments

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* add sysctl commands to the test script

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update scripts/test

Signed-off-by: Brad Davidson <brad@oatmail.org>

* disable secretsencryption tests

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
Signed-off-by: Brad Davidson <brad@oatmail.org>
Co-authored-by: Brad Davidson <brad@oatmail.org>
v1.29.0-rc1+k3s1 		2023-12-19 05:14:02 +02:00
Derek Nola
bf3f29f9e8 Only publish to code_cov on merged E2E builds (#9051) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2023-12-19 04:30:13 +02:00
Brad Davidson
231cb6ed20 Remove GA feature-gates (#8970) 
Remove KubeletCredentialProviders and JobTrackingWithFinalizers feature-gates, both of which are GA and cannot be disabled.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-12-14 22:57:24 +02:00
Brad Davidson
71a3c35fb7 Bump containerd to v1.7.11 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-12-11 17:04:52 -08:00
Brad Davidson
08509a2a90 Allow setting default-runtime on servers 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-12-08 18:18:08 -08:00
Brad Davidson
b9c288f702 Bump containerd/runc to v1.7.10-k3s1/v1.1.10 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-12-08 18:17:19 -08:00
Vitor Savian
03532f7c0b Added runtime classes for crun/wasm/nvidia 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Added default runtime flag

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2023-12-08 15:49:28 -03:00
Pedro Tashima
9c6ba42ca0 Nov 2023 stable channel update (#9022) 
* update stable channel to v1.27.8+k3s2

Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>

* update stable channel to v1.28.4+k3s2

Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>

---------

Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>
Co-authored-by: Pedro Tashima <pedro.tashima@suse.com>
 2023-12-08 15:40:13 -03:00
Manuel Buil
79438cecaa Modify CONTRIBUTING.md guide 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2023-12-08 17:41:32 +01:00
Manuel Buil
d34550fb2f Fix overlapping address range 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2023-12-08 17:17:23 +01:00
Pedro Tashima
6ba6c1b65f remove s390x from manifest (#8998) 
Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>
Co-authored-by: Pedro Tashima <pedro.tashima@suse.com>
v1.28.4+k3s2 v1.28.4-rc1+k3s2 		2023-12-06 18:20:20 -03:00
thomasferrandiz
c3e7bed727 Merge pull request #8983 from thomasferrandiz/remove-s390x 
remove s390x steps temporarily since runners are disabled
 2023-12-05 14:51:31 +01:00
Thomas Ferrandiz
022cf6d51f remove s390x steps temporarily since runners are disabled 
Signed-off-by: Thomas Ferrandiz <thomas.ferrandiz@suse.com>
 2023-12-04 15:30:18 +00:00
Johnatas
3f23723035 Update to v1.28.4 (#8920) 
Signed-off-by: Johnatas <johnatas.santos@suse.com>
v1.28.4-rc1+k3s1 v1.28.4+k3s1 		2023-11-22 15:01:45 -03:00
Brad Davidson
6d3a92a658 Print key instead of file path in snapshot metadata log message 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-11-21 14:03:27 -08:00
Brad Davidson
b23e70d519 Don't apply s3 retention if S3 client failed to initialize 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-11-21 14:03:27 -08:00
Brad Davidson
a92c4a0f17 Don't request metadata when listing objects 
While some implementations may support it, it appears that most don't,
and some may in fact return an error if it is requested.

We already stat the object to get the metadata anyway, so this was
unnecessary if harmless on most implementations.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-11-21 14:03:27 -08:00
Brad Davidson
96ebb96317 Fix flakey dynamic-cert.json in cert rotation e2e test 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-11-17 19:46:11 -08:00
Brad Davidson
611ac0894c Revert e2e pipeline depends_on change 
Reverts part of the change from 7d38b4a3db

Pipeline dependencies are apparently broken, and the e2e pipeline has
been getting skipped whenever any other pipeline fails. Ex:
https://drone-pr.k3s.io/k3s-io/k3s/7853

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-11-17 19:46:11 -08:00
Brad Davidson
3a6284e2b9 Bump dynamiclistener to fix secret sync race 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-11-17 10:09:01 -08:00
Brad Davidson
1e0a7044cf Reorder snapshot configmap reconcile to reduce log spew during initial startup 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-11-17 10:09:01 -08:00
Vitor Savian
e53c189587 Handle nil pointer when runtime core is not ready in etcd 
Signed-off-by: Vitor <vitor.savian@suse.com>
 2023-11-16 15:58:42 -08:00
Brad Davidson
6c544a4679 Add jitter to client config retry 
Also:
* Replaces labeled for/continue RETRY loops with wait helpers for improved readability
* Pulls secrets and nodes from cache for node password verification
* Migrate nodepassword tests to wrangler mocks for better code reuse

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2023-11-16 09:53:28 -08:00
Derek Nola
fa4c180637 Update install.sh sha256sum (#8885) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2023-11-16 09:40:52 -08:00
Johnatas
da0593bcf9 More improves for K3s patch release docs (#8800) 
* add more improves for patch releases

Signed-off-by: Johnatas <johnatas.santos@suse.com>

* a simple detail

Signed-off-by: Johnatas <johnatas.santos@suse.com>

---------

Signed-off-by: Johnatas <johnatas.santos@suse.com>
 2023-11-16 14:35:45 -03:00