Commits · 314e3f56dca815fb4d0fa6518091fc88ae2b6465 · Jacklull / k3s

03 May, 2022 1 commit
- Check if user has a correct cluster-cidr and service-cidr config · 314e3f56
  Manuel Buil authored Apr 22, 2022
```
Signed-off-by: Manuel Buil <mbuil@suse.com>
```
  314e3f56
30 Apr, 2022 1 commit
- Replace DefaultProxyDialerFn dialer injection with EgressSelector support · ce5b9347
  Brad Davidson authored Apr 04, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
  ce5b9347
29 Apr, 2022 11 commits

Ensure that WaitForAPIServerReady always re-dials through the loadbalancer · e763fadb
Brad Davidson authored Apr 29, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
e763fadb
Don't start embedded kubelet until after apiserver is up · d93b7503
Brad Davidson authored Apr 27, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
d93b7503
Add new `k3s completion` command for shell completion (#5461) · 3e5561da
Derek Nola authored Apr 29, 2022
```
* Add shell completion CLI 
Signed-off-by: Derek Nola <derek.nola@suse.com>
```
3e5561da

Use ListWatch helpers instead of bare List/Watch · 13ca1066

authored Apr 21, 2022

Reduces code complexity a bit and ensures we don't  have to handle closed watch channels on our own
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

13ca1066

server: Allow to enable network policies with IPv6-only · 5f2a4d42

authored Apr 25, 2022

After previous changes, network policies are working on IPv6-only
installations.
Signed-off-by: Michal Rostecki <vadorovsky@gmail.com>

5f2a4d42

agent(netpol): Explicitly enable IPv4 when necessary · c0045f41

authored Apr 20, 2022

Before this change, kube-router was always assuming that IPv4 is
enabled, which is not the case in IPv6-only clusters. To enable network
policies in IPv6-only, we need to explicitly let kube-router know when
to disable IPv4.
Signed-off-by: Michal Rostecki <vadorovsky@gmail.com>

c0045f41

Bump kine to v0.9.1 for nats.io support · c9badb4f
Brad Davidson authored Apr 25, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
c9badb4f

Make supervisor errors parsable by Kubernetes client libs · 3d01ca13

authored Apr 27, 2022

This gives nicer errors from Kubernetes components during startup, and
reduces LOC a bit by using the upstream responsewriters module instead
of writing the headers and body by hand.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

3d01ca13

Drop unnecessary intermediate variable · a69d635c
Brad Davidson authored Apr 19, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
a69d635c
Add systemd cgroup controller support · 333311c7
Brad Davidson authored Apr 18, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
333311c7
Add CNI Plugins and Flannel version to build scripts · 1caae631
Brad Davidson authored Apr 19, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
1caae631

27 Apr, 2022 1 commit

Fix issue with datastore corruption on cluster-reset (#5515) · 418c3fa8

authored Apr 27, 2022

* Bump etcd to v3.5.4-k3s1
* Fix issue with datastore corruption on cluster-reset
* Disable unnecessary components during cluster reset

Disable control-plane components and the tunnel setup during
cluster-reset, even when not doing a restore. This reduces the amount of
log clutter during cluster reset/restore, making any errors encountered
more obvious.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

418c3fa8

25 Apr, 2022 1 commit
- Bump containerd for selinux fix (#5507) · 2a999e5c
  Brad Davidson authored Apr 25, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
  2a999e5c
22 Apr, 2022 1 commit
- Secrets Encryption: Add RetryOnConflict around updating nodes (#5495) · 3d425e5d
  Derek Nola authored Apr 22, 2022
```
* Add RetryOnConflict around updating nodes
Signed-off-by: Derek Nola <derek.nola@suse.com>
```
  3d425e5d
21 Apr, 2022 2 commits

Fix issue with long-running apiserver endpoints watch (#5478) · f2ceeb01

authored Apr 21, 2022

Use ListWatch helpers to retry when the watch channel is closed.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

f2ceeb01

Update Kubernetes to v1.23.6 (#5477) · 93f95622

authored Apr 21, 2022

* Go generate
* Update tags to k3s-io for v1.23.6
Signed-off-by: Derek Nola <derek.nola@suse.com>

93f95622

20 Apr, 2022 1 commit
- Fix default ipv6 cidr (#5467) · 6a8de31a
  Manuel Buil authored Apr 20, 2022
```
Signed-off-by: Manuel Buil <mbuil@suse.com>
```
  6a8de31a
18 Apr, 2022 1 commit

E2E Validation Improvements (#5444) · 3307d53f

authored Apr 18, 2022

* Add basic none option EXTERNAL_DB, uses internal sqlite

* Move to Leap as default
Signed-off-by: Derek Nola <derek.nola@suse.com>

3307d53f

15 Apr, 2022 6 commits

Add s390x arch support for k3s (#5018) · 3e3549e4

authored Apr 15, 2022

* Update docs to include s390x arch
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Add s390x drone pipeline
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Install trivy linux arch only for amd64

This is done so that trivy is not installed for s390x arch
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Add s390x arch if condition for Dockerfile.test
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Add s390x arch in install script
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Add s390x GOARCH in build script
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Add SUFFIX s390x in scripts
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Skip image scan for s390x arch
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Update klipper-lb to version v0.3.5
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Update traefik version to v2.6.2
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Update registry to v2.8.1 in tests which supports s390x
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Skip compact tests for s390x arch

This is done because compact test require a previous k3s version which supports s390x and it is not available
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

3e3549e4

Bump etcd to 3.5.3-k3s1 · 7760e217
Brad Davidson authored Apr 13, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
7760e217
Move IPv4/v6 selection into helpers · b12cd629
Brad Davidson authored Apr 14, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
b12cd629
Fix issue with RKE2 servers hanging on listing apiserver addresses · 7e447692
Brad Davidson authored Apr 14, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
7e447692
Print a helpful error when trying to join additional servers but etcd is not in use · 5b2c14b1
Brad Davidson authored Apr 14, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
5b2c14b1

Use core constants for cert user/group values · 99851b0f

authored Apr 04, 2022

Also update cert gen to ensure leaf certs are regenerated if other key fields change.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

99851b0f

14 Apr, 2022 8 commits

Bump containerd to v1.5.11-k3s1 · f4336186
Brad Davidson authored Apr 13, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
f4336186
Added option to deploy hardened k3s (#5415) · 809f0cf0
Derek Nola authored Apr 14, 2022
```
Added option to deploy hardened k3s
Signed-off-by: Derek Nola <derek.nola@suse.com>
```
809f0cf0

Added support for repeated extra arguments · b6e71ef9

authored Apr 01, 2022

Problem:
Specifying extra arguments for the API server for example is not supported as
the arguments get stored in a map before being passed to the API server.

Solution:
Updated the GetArgs function to store the arguments in a map that can have
multiple values. Some more logic is added so that repeated extra arguments
retain their order when sorted whilst overall the arguments can still be
sorted for improved readability when logged.

Support has been added for prefixing and suffixing default argument values
by using -= and += when specifying extra arguments.
Signed-off-by: Terry Cain <terry@terrys-home.co.uk>

b6e71ef9

update sonobuoy to 0.56.4 (#5419) · 9d2281a8

authored Apr 14, 2022

This appears to be fixing the CI testing in local testing.
Signed-off-by: Dirk Müller <dirk@dmllr.de>

9d2281a8

Bump Reencryption Test timeout, improve comments (#5431) · 3bd7cdfa

authored Apr 14, 2022

* Bump timeout, improve comments
Signed-off-by: Derek Nola <derek.nola@suse.com>

* codespell
Signed-off-by: Derek Nola <derek.nola@suse.com>

3bd7cdfa

Merge pull request #5420 from rbrtbnfgl/etcd-default-endpoint · e4d2824f
Roberto Bonafiglia authored Apr 14, 2022
```
Added default endpoint for IPv6
```
e4d2824f
Added default endpoint for IPv6 · 9c9adda6
Roberto Bonafiglia authored Apr 12, 2022
```
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
```
9c9adda6
Merge pull request #5422 from rbrtbnfgl/fix-flannel-backend-help · dfb779d0
Roberto Bonafiglia authored Apr 14, 2022
```
Fixed flannel backend helper text
```
dfb779d0

13 Apr, 2022 3 commits

Update golangci-lint to 1.45.2 · fa0fa8b1

authored Apr 08, 2022

This requires a further set of gofmt -s improvements to the
code, but nothing major. golangci-lint 1.45.2 brings golang 1.18
support which might be needed in the future.
Signed-off-by: Dirk Müller <dirk@dmllr.de>

fa0fa8b1

fixes and updates to jenkinsfile (#5370) · 5cb4894a

authored Apr 13, 2022

Signed-off-by: Shylaja Devadiga <shylaja.devadiga@suse.com>
Signed-off-by: Shylaja Devadiga <shylaja@rancher.com>

5cb4894a

Fixed flannel backend helper text · 8767395d
Roberto Bonafiglia authored Apr 13, 2022
```
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
```
8767395d

12 Apr, 2022 1 commit
- update trivy to 0.25.3 · 6f8f6bb2
  Dirk Müller authored Apr 08, 2022
```
Signed-off-by: Dirk Müller <dirk@dmllr.de>
```
  6f8f6bb2
11 Apr, 2022 1 commit

fix: non-idiomatic returning of boolean expression (#5343) · c1095dd0

authored Apr 12, 2022

should use 'return disables[baseName]' instead of 'if disables[baseName] { return true }; return false'
Signed-off-by: Deshi Xiao <xiaods@gmail.com>

c1095dd0

08 Apr, 2022 1 commit

Add certificate rotation integration tests (#5393) · 483eadb5

authored Apr 08, 2022

* Add certificate rotation integration tests
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix data dir in cert rotation
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix comments
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix comments
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

483eadb5