public/k3s
1
0
Fork 0
mirror of https://git.vectorsigma.ru/public/k3s.git synced 2026-08-07 20:39:42 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,090 Commits 31 Branches 949 Tags
b7f065c64ba75b8d8a8ea419daa4281c5c61ea37
Commit Graph

230 Commits

Author SHA1 Message Date
Derek Nola
b7f065c64b [Release-1.22] Add --server flag to k3s secrets-encrypt (#5053) 
* Update gitignore

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add server flag to access nonlocal/nondefault k3s server (#5016)

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2022-02-01 10:45:12 -08:00
Roberto Bonafiglia
43f130b965 Merge pull request #4983 from rbrtbnfgl/ipv6-nat_release-1.22 
[Release 1.22] Add IPv6 NAT
 2022-01-19 08:46:15 +01:00
Brad Davidson
01be2bb6fb Update packaged components 
Update images and manifests/charts for coredns, local-path-provisioner, traefik, and pause

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-01-18 16:46:11 -08:00
Brian Downs
354477adbf Adds the ability to compress etcd snapshots (#4866) (#4960) 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2022-01-18 11:08:37 -07:00
Roberto Bonafiglia
f5475bf6a8 Added flannel-ipv6-masq flag to enable IPv6 nat 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@gmail.com>
 2022-01-18 13:10:25 +01:00
Brad Davidson
fb6c72ed13 Skip CGroup v2 evac when agent is disabled 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-01-14 13:25:03 -08:00
Derek Nola
82f1ec314c Enable logging on all subcommands (#4921) (#4931) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2022-01-14 09:21:02 -08:00
Brad Davidson
f662a7f45b Move ClusterResetRestore handling ControlConfig setup 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-01-12 10:46:22 -08:00
Brad Davidson
34ba028da5 Fix use of agent creds for secrets-encrypt and config validate 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-01-06 13:11:25 -08:00
Hussein Galal
05f1bc6e2a [Release-1.22] Close agentReady channel only in k3s (#4793) 
* Close agentReady channel only in k3s

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* codespell check

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-12-21 20:29:17 +02:00
Hussein Galal
9400af4004 Fix snapshot restoration on fresh nodes (#4737) 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-12-13 18:14:18 -07:00
Hussein Galal
b38bc7ddaa Add validation to certificate rotation (#4700) 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-12-09 02:46:24 +02:00
Derek Nola
2561285e8e Backport of https://github.com/k3s-io/k3s/pull/4372 (#4654) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2021-12-07 15:29:31 -08:00
Hussein Galal
2dc4e2c3a0 Add cert rotation command (#4495) (#4635) 
* Add cert rotation command

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* add function to check for dynamic listener file

Signed-off-by: Brian Downs <brian.downs@gmail.com>

* Add dynamiclistener cert rotation support

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fixes to the cert rotation

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix ci tests

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fixes to certificate rotation command

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* more fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Co-authored-by: Brian Downs <brian.downs@gmail.com>

Co-authored-by: Brian Downs <brian.downs@gmail.com>
 2021-12-06 20:53:29 +02:00
Chris Kim
fdb335d7d8 etcd snapshot functionality enhancements (#4453) (#4605) 
Signed-off-by: Chris Kim <oats87g@gmail.com>
 2021-11-29 13:29:51 -08:00
Hussein Galal
058f30de03 Fix regression with cluster reset (#4523) 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-11-18 02:15:08 +02:00
Manuel Buil
c974abd780 Allow svclb pod to enable ipv6 forwarding 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-11-17 19:35:37 +01:00
Chris Kim
a1f490df9c [release-1.22] Add etcd extra args support for K3s (#4469) 
* Add etcd extra args support for K3s

Signed-off-by: Chris Kim <oats87g@gmail.com>

* Add etcd custom argument integration test

Signed-off-by: Chris Kim <oats87g@gmail.com>
 2021-11-11 20:22:12 -08:00
Derek Nola
b0cd1f6eb1 [Release-1.22] Parser improvements, allow config values to be used with etcd-snapshot (#4475) 
* Match to last After keyword for parser (#4383)
* Enabled skipping of unknown flags from config in parser
* Added new unit test, expanded existing

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2021-11-11 18:47:19 -08:00
Brian Downs
97f494a24d [Release-1.22] All bootstrap backport (#4448) 
Add ability to reconcile bootstrap data between datastore and disk (#3398)
 2021-11-10 16:20:20 -07:00
Luther Monson
cb0918ae3c [release-1.22] updating to new signals package in wrangler (#4422) 
* updating to new signals package in wrangler

Signed-off-by: Luther Monson <luther.monson@gmail.com>
 2021-11-08 11:52:54 -07:00
Brad Davidson
5eb13b6ba6 Fix log/reap reexec 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-11-01 14:58:46 -07:00
Brad Davidson
46eea2f10a Revert "Add ability to reconcile bootstrap data between datastore and disk (#3398)" 
This reverts commits
9a4ca5978b
c9f6fa0be0
07f844cf95
48355dce10

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-27 14:17:12 -07:00
Brian Downs
48355dce10 Add ability to reconcile bootstrap data between datastore and disk (#3398) 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-10-25 16:23:31 -07:00
Derek Nola
f98934980d Added configuration input to etcd-snapshot (#4280) (#4281) 
Signed-off-by: dereknola <derek.nola@suse.com>
 2021-10-22 13:08:12 -07:00
Brad Davidson
971854c15b Refactor log and reaper exec to omit MAINPID 
Using MAINPID breaks systemd's exit detection, as it stops watching the
original pid, but is unable to watch the new pid as it is not a child
of systemd itself. The best we can do is just notify when execing the child
process.

We also need to consolidate forking into a sigle place so that we don't
end up with multiple levels of child processes if both redirecting log
output and reaping child processes.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit dc18ef2e51)
 2021-10-20 13:41:50 -07:00
Brad Davidson
3988edef25 Add containerd ready channel to delay etcd node join 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 88178ae65e)
 2021-10-20 13:05:40 -07:00
Brian Downs
7c78e1c802 [Release-1.22] - Add etcd s3 timeout (#4207) (#4230) 2021-10-18 10:45:56 -07:00
Derek Nola
dd4b36e034 Add "etcd-" prefix to etcd-snapshot commands as aliases (#4161) (#4170) 
* Add "etcd-" prefix to etcd-snapshot commands as alias

Signed-off-by: dereknola <derek.nola@suse.com>
 2021-10-07 11:04:39 -07:00
Brad Davidson
bdd597fb9e Don't evacuate the root cgroup when rootless 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-01 16:18:33 -07:00
Brad Davidson
a09bcba540 Properly handle operation as init process 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-09-28 11:32:16 -07:00
Hussein Galal
7826407a2e Make sure there are no duplicates in etcd member list (#4025) 
* Make sure there are no duplicates in etcd member list

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix node names with hyphens

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* use full server name for etcd node name

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-09-18 00:51:18 +02:00
Derek Nola
eda65b19d9 Remove expiremental from cluster commands (#4024) 
Signed-off-by: dereknola <derek.nola@suse.com>
 2021-09-15 16:41:50 -07:00
Manuel Buil
9fcd79baae Add tests to the dual-stack PR and enable dual-stack with flannel backend 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-09-15 14:11:54 +02:00
Devin Buhl
a1ec43e0b7 feat: add option to disable s3 over https 
Signed-off-by: Devin Buhl <devin.kray@gmail.com>
 2021-09-05 12:03:49 -04:00
Brad Davidson
cf12a13175 Add missing node name entry to apiserver SAN list 
Also honor node-ip when adding the node address to the SAN list, instead
of hardcoding the autodetected IP address.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-09-01 13:22:32 -07:00
Brad Davidson
b8add39b07 Bump kine for metrics/tls changes 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-09-01 01:51:30 -07:00
Hussein Galal
e322924781 Reset load balancer state during restoraion (#3877) 
* Reset load balancer state during restoraion

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Reset load balancer state during restoraion

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-08-18 01:02:30 +02:00
Jiaqi Luo
3b01157a3a Use New Image Names (#3749) 
* switch image names to the ones with the prefix mirrored
* bump rancher/mirrored-coredns-coredns to 1.8.4

Signed-off-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>
 2021-08-06 16:14:58 -07:00
Hussein Galal
2069cdf4ee Fix initial start of etcd only nodes (#3748) 
* Fix initial start of etcd only nodes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* more fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* more fixes

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-08-03 19:53:21 +02:00
Brad Davidson
869b98bc4c Sync DisableKubeProxy into control struct 
Sync DisableKubeProxy from cfg into control before sending control to clients,
as it may have been modified by a startup hook.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-07-30 12:26:50 -07:00
Hussein Galal
b1b5f72dc3 Notify systemd for etcd only node (#3732) 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-07-29 23:42:19 +02:00
Derek Nola
21c8a33647 Introduction of Integration Tests (#3695) 
* Commit of new etcd snapshot integration tests.
* Updated integration github action to not run on doc changes.
* Update Drone runner to only run unit tests

Signed-off-by: dereknola <derek.nola@suse.com>
 2021-07-26 09:59:33 -07:00
Luther Monson
37fcb61f5e move go routines for api server ready beneath wait group 
Signed-off-by: Luther Monson <luther.monson@gmail.com>
 2021-07-20 17:36:34 -07:00
Luther Monson
18bc98f60c adding startup hooks args to access to Disables and Skips (#3674) 
Signed-off-by: Luther Monson <luther.monson@gmail.com>
 2021-07-20 05:24:52 +02:00
Jamie Phillips
aef8a6aafd Adding support for waitgroup to the Startuphooks (#3654) 
The startup hooks where executing after the deploy controller. We needed the deploy controller to wait until the startup hooks had completed.
 2021-07-15 19:28:47 -07:00
Brian Downs
238dc2086e prevent snapshot save when snapshots are disabled (#3475) 
* prevent snapshot save when snapshots are disabled
 2021-07-09 10:22:49 -07:00
Chris Kim
ada145641c Update etcd snapshot error message to be more informative when etcd database is not found (#3568) 
Signed-off-by: Chris Kim <oats87g@gmail.com>
 2021-07-07 16:01:50 -07:00
Hussein Galal
f5fbb9a9a8 Export cli server flags and etcd restoration functions (#3527) 
* Export cli server flags and etfd restoration functions

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* export S3

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2021-06-30 22:29:03 +02:00
Joe Kralicky
a84c75af62 Adds a command-line flag '--disable-helm-controller' that will disable 
the server's built-in helm controller.

Problem:
Testing installation and uninstallation of the Helm Controller on k3s is
not possible if the Helm Controller is baked into the k3s server.

Solution:
The Helm Controller can optionally be disabled, which will allow users
to manage its installation manually.

Signed-off-by: Joe Kralicky <joe.kralicky@suse.com>
 2021-06-25 14:54:36 -04:00