Brad Davidson
4dfa077ff3
Address issues with etcd snapshots
...
* Increase the default snapshot timeout. The timeout is not currently
configurable from Rancher, and larger clusters are frequently seeing
uploads fail at 30 seconds.
* Enable compression for scheduled snapshots if enabled on the
command-line. The CLI flag was not being passed into the etcd config.
* Only set the S3 content-type to application/zip if the file is zipped.
* Don't run more than one snapshot at once, to prevent misconfigured
etcd snapshot cron schedules from stacking up.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2022-07-12 14:43:19 -07:00
Sjoerd Simons
94dbfebfc2
Add ability to pass configuration options to flannel backend
...
Allow the flannel backend to be specified as
backend=option=val,option2=val2 to select a given backend with extra options.
In particular this adds the following options to wireguard-native
backend:
* Mode - flannel wireguard tunnel mode
* PersistentKeepaliveInterval- wireguard persistent keepalive interval
Signed-off-by: Sjoerd Simons <sjoerd@collabora.com >
2022-06-16 10:02:12 +02:00
Manuel Buil
bf272ab137
Merge pull request #5684 from manuelbuil/flannelCNIconf122
...
[Release 1.22] Add FlannelConfCNI flag
2022-06-15 10:18:39 +02:00
Derek Nola
dd3485c202
add support for pprof server ( #5527 ) ( #5691 )
...
Signed-off-by: igor <igor@igor.io >
Signed-off-by: Derek Nola <derek.nola@suse.com >
Co-authored-by: Igor <igorwwwwwwwwwwwwwwwwwwww@users.noreply.github.com >
2022-06-14 17:50:21 -07:00
Manuel Buil
05592ad015
Add FlannelConfCNI flag
...
Signed-off-by: Manuel Buil <mbuil@suse.com >
2022-06-14 10:27:22 +02:00
Brad Davidson
b004f4d578
Set default egress-selector-mode to agent
...
... until QA flakes can be addressed.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2022-06-10 10:14:51 -07:00
Derek Nola
b1a3ad0aa2
Add new k3s completion command for shell completion ( #5592 )
...
* Add shell completion CLI
Signed-off-by: Derek Nola <derek.nola@suse.com >
2022-05-23 08:36:15 -07:00
Brad Davidson
b330ce340a
Add support for configuring the EgressSelector mode
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 9d7230496d )
2022-05-20 16:39:13 -07:00
Derek Nola
0663681a3d
Replace rancher with k3s-io ( #5585 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2022-05-19 15:54:21 -07:00
Roberto Bonafiglia
c030917272
Fixed flannel backend helper text
...
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com >
2022-04-14 10:44:16 +02:00
Roberto Bonafiglia
d7e7ddf168
Updated wireguard-native options and added log message
...
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com >
2022-04-11 09:54:42 +02:00
Brad Davidson
5cb6b1ecbc
Fix adding etcd-only node to existing cluster
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 5014c9e0e8 )
2022-03-15 18:08:33 -07:00
Derek Nola
5b26c2eb4e
Add --json flag for k3s secrets-encrypt status ( #5127 ) ( #5198 )
...
* Add json flag for secrets-encrypt status
Signed-off-by: Derek Nola <derek.nola@suse.com >
2022-03-03 10:25:33 -08:00
Brian Downs
551cdde8cb
add ability to specify etcd snapshot list output format ( #5132 ) ( #5179 )
2022-02-26 12:29:03 -07:00
Derek Nola
b7f065c64b
[Release-1.22] Add --server flag to k3s secrets-encrypt ( #5053 )
...
* Update gitignore
Signed-off-by: Derek Nola <derek.nola@suse.com >
* Add server flag to access nonlocal/nondefault k3s server (#5016 )
Signed-off-by: Derek Nola <derek.nola@suse.com >
2022-02-01 10:45:12 -08:00
Roberto Bonafiglia
43f130b965
Merge pull request #4983 from rbrtbnfgl/ipv6-nat_release-1.22
...
[Release 1.22] Add IPv6 NAT
2022-01-19 08:46:15 +01:00
Brad Davidson
01be2bb6fb
Update packaged components
...
Update images and manifests/charts for coredns, local-path-provisioner, traefik, and pause
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2022-01-18 16:46:11 -08:00
Brian Downs
354477adbf
Adds the ability to compress etcd snapshots ( #4866 ) ( #4960 )
...
Signed-off-by: Brian Downs <brian.downs@gmail.com >
2022-01-18 11:08:37 -07:00
Roberto Bonafiglia
f5475bf6a8
Added flannel-ipv6-masq flag to enable IPv6 nat
...
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@gmail.com >
2022-01-18 13:10:25 +01:00
Derek Nola
82f1ec314c
Enable logging on all subcommands ( #4921 ) ( #4931 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2022-01-14 09:21:02 -08:00
Derek Nola
2561285e8e
Backport of https://github.com/k3s-io/k3s/pull/4372 ( #4654 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2021-12-07 15:29:31 -08:00
Hussein Galal
2dc4e2c3a0
Add cert rotation command ( #4495 ) ( #4635 )
...
* Add cert rotation command
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* add function to check for dynamic listener file
Signed-off-by: Brian Downs <brian.downs@gmail.com >
* Add dynamiclistener cert rotation support
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fixes to the cert rotation
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fix ci tests
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* fixes to certificate rotation command
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* more fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
Co-authored-by: Brian Downs <brian.downs@gmail.com >
Co-authored-by: Brian Downs <brian.downs@gmail.com >
2021-12-06 20:53:29 +02:00
Chris Kim
fdb335d7d8
etcd snapshot functionality enhancements ( #4453 ) ( #4605 )
...
Signed-off-by: Chris Kim <oats87g@gmail.com >
2021-11-29 13:29:51 -08:00
Manuel Buil
c974abd780
Allow svclb pod to enable ipv6 forwarding
...
Signed-off-by: Manuel Buil <mbuil@suse.com >
2021-11-17 19:35:37 +01:00
Chris Kim
a1f490df9c
[release-1.22] Add etcd extra args support for K3s ( #4469 )
...
* Add etcd extra args support for K3s
Signed-off-by: Chris Kim <oats87g@gmail.com >
* Add etcd custom argument integration test
Signed-off-by: Chris Kim <oats87g@gmail.com >
2021-11-11 20:22:12 -08:00
Derek Nola
b0cd1f6eb1
[Release-1.22] Parser improvements, allow config values to be used with etcd-snapshot ( #4475 )
...
* Match to last After keyword for parser (#4383 )
* Enabled skipping of unknown flags from config in parser
* Added new unit test, expanded existing
Signed-off-by: Derek Nola <derek.nola@suse.com >
2021-11-11 18:47:19 -08:00
Brad Davidson
5eb13b6ba6
Fix log/reap reexec
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-11-01 14:58:46 -07:00
Derek Nola
f98934980d
Added configuration input to etcd-snapshot ( #4280 ) ( #4281 )
...
Signed-off-by: dereknola <derek.nola@suse.com >
2021-10-22 13:08:12 -07:00
Brad Davidson
971854c15b
Refactor log and reaper exec to omit MAINPID
...
Using MAINPID breaks systemd's exit detection, as it stops watching the
original pid, but is unable to watch the new pid as it is not a child
of systemd itself. The best we can do is just notify when execing the child
process.
We also need to consolidate forking into a sigle place so that we don't
end up with multiple levels of child processes if both redirecting log
output and reaping child processes.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit dc18ef2e51 )
2021-10-20 13:41:50 -07:00
Brad Davidson
3988edef25
Add containerd ready channel to delay etcd node join
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
(cherry picked from commit 88178ae65e )
2021-10-20 13:05:40 -07:00
Brian Downs
7c78e1c802
[Release-1.22] - Add etcd s3 timeout ( #4207 ) ( #4230 )
2021-10-18 10:45:56 -07:00
Derek Nola
dd4b36e034
Add "etcd-" prefix to etcd-snapshot commands as aliases ( #4161 ) ( #4170 )
...
* Add "etcd-" prefix to etcd-snapshot commands as alias
Signed-off-by: dereknola <derek.nola@suse.com >
2021-10-07 11:04:39 -07:00
Brad Davidson
bdd597fb9e
Don't evacuate the root cgroup when rootless
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-10-01 16:18:33 -07:00
Brad Davidson
a09bcba540
Properly handle operation as init process
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2021-09-28 11:32:16 -07:00
Derek Nola
eda65b19d9
Remove expiremental from cluster commands ( #4024 )
...
Signed-off-by: dereknola <derek.nola@suse.com >
2021-09-15 16:41:50 -07:00
Devin Buhl
a1ec43e0b7
feat: add option to disable s3 over https
...
Signed-off-by: Devin Buhl <devin.kray@gmail.com >
2021-09-05 12:03:49 -04:00
Jiaqi Luo
3b01157a3a
Use New Image Names ( #3749 )
...
* switch image names to the ones with the prefix mirrored
* bump rancher/mirrored-coredns-coredns to 1.8.4
Signed-off-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com >
2021-08-06 16:14:58 -07:00
Derek Nola
21c8a33647
Introduction of Integration Tests ( #3695 )
...
* Commit of new etcd snapshot integration tests.
* Updated integration github action to not run on doc changes.
* Update Drone runner to only run unit tests
Signed-off-by: dereknola <derek.nola@suse.com >
2021-07-26 09:59:33 -07:00
Luther Monson
37fcb61f5e
move go routines for api server ready beneath wait group
...
Signed-off-by: Luther Monson <luther.monson@gmail.com >
2021-07-20 17:36:34 -07:00
Luther Monson
18bc98f60c
adding startup hooks args to access to Disables and Skips ( #3674 )
...
Signed-off-by: Luther Monson <luther.monson@gmail.com >
2021-07-20 05:24:52 +02:00
Jamie Phillips
aef8a6aafd
Adding support for waitgroup to the Startuphooks ( #3654 )
...
The startup hooks where executing after the deploy controller. We needed the deploy controller to wait until the startup hooks had completed.
2021-07-15 19:28:47 -07:00
Hussein Galal
f5fbb9a9a8
Export cli server flags and etcd restoration functions ( #3527 )
...
* Export cli server flags and etfd restoration functions
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* export S3
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2021-06-30 22:29:03 +02:00
Joe Kralicky
a84c75af62
Adds a command-line flag '--disable-helm-controller' that will disable
...
the server's built-in helm controller.
Problem:
Testing installation and uninstallation of the Helm Controller on k3s is
not possible if the Helm Controller is baked into the k3s server.
Solution:
The Helm Controller can optionally be disabled, which will allow users
to manage its installation manually.
Signed-off-by: Joe Kralicky <joe.kralicky@suse.com >
2021-06-25 14:54:36 -04:00
Jamie Phillips
82394d7d36
Basic windows agent that will join a cluster without CNI.
...
Signed-off-by: Jamie Phillips <jamie.phillips@suse.com >
2021-06-23 09:07:50 -07:00
Jamie Phillips
7345ac35ae
Initial windows support for agent ( #3375 )
...
Signed-off-by: Jamie Phillips <jamie.phillips@suse.com >
2021-06-01 12:29:46 -07:00
Brian Downs
254b52077e
add retention default and wire in s3 prune
...
Signed-off-by: Brian Downs <brian.downs@gmail.com >
2021-05-18 13:57:40 -07:00
Brian Downs
e8ecc00fc8
add etcd snapshot save subcommand
...
Signed-off-by: Brian Downs <brian.downs@gmail.com >
2021-05-17 10:55:13 -07:00
Brian Downs
6ee28214fa
Add the ability to prune etcd snapshots ( #3310 )
...
* add prune subcommand to force rentention policy enforcement
2021-05-13 13:36:33 -07:00
MonzElmasry
24474c5734
change --disable-apiserver flag
...
Signed-off-by: MonzElmasry <menna.elmasry@rancher.com >
2021-05-13 00:00:11 +02:00
Brian Downs
bcd8b67db4
Add the ability to list etcd snapshots ( #3303 )
...
* add ability to list local and s3 etcd snapshots
2021-05-11 16:59:33 -07:00