Commit Graph

2504 Commits

Author SHA1 Message Date
James Blair
86be784aa0 Replace deprecated k8s registry references.
Problem:
Previously all of Kubernetes' image hosting has been out of gcr.io. There were significant egress costs associated with this when images were pulled from entities outside gcp.  Refer to https://github.com/kubernetes/k8s.io/wiki/New-Registry-url-for-Kubernetes-(registry.k8s.io)

Solution:
As highlighted at KubeCon NA 2022 k8s infra SIG update, the replacement for k8s.gcr.io which is registry.k8s.io is now ready for mainstream use and the old k8s.gcr.io has been formally deprecated. This commit migrates all references for k3s to registry.k8s.io.

Signed-off-by: James Blair <mail@jamesblair.net>
2022-11-01 16:06:50 -07:00
Brad Davidson
cb86d2c1f0 Bump traefik to v2.9.4 / chart v18.3.0
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-11-01 16:05:45 -07:00
Derek Nola
43709420a3
Remove vagrant dev env (#6395)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-11-01 14:47:10 -07:00
ShylajaDevadiga
d3c675f4e9
Expand nightly E2E tests (#6354)
Signed-off-by: Shylaja Devadiga <shylaja@rancher.com>
2022-10-31 11:02:44 -07:00
Manuel Buil
ce5dfdfae0
Merge pull request #6359 from manuelbuil/externalTest
Add test for node-external-ip config parameter
2022-10-31 07:35:24 +01:00
Silvio Moioli
dbc7c72416
Disable optimizations and symbol stripping on debug builds (#6147)
Signed-off-by: Silvio Moioli <silvio@moioli.net>
Co-authored-by: Brad Davidson <brad@oatmail.org>
2022-10-28 09:17:49 -07:00
Manuel Buil
abaa6c9023 Add test for node-external-ip config parameter
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-28 15:08:50 +02:00
Petri Kivikangas
6156059136 Convert containerd config.toml.tmpl Linux template to v2 syntax
Signed-off-by: Petri Kivikangas <36138+Kitanotori@users.noreply.github.com>
2022-10-27 16:55:03 -07:00
Derek Nola
9a9f1f2d5e
Replace fedora-coreos with fedora 36 for install tests (#6315)
* Move to fedora 36 on install tests

Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-27 08:11:57 -07:00
Manuel Buil
44b12c02f2
Merge pull request #6345 from manuelbuil/updateKubeRouter151
Update kube-router and add extra logging
2022-10-27 11:03:24 +02:00
Manuel Buil
1f96f27cdf
Merge pull request #6247 from manuelbuil/netpolTest
Netpol test for podSelector & ingress
2022-10-27 09:32:07 +02:00
Brad Davidson
76729d813b Set default kubeletPort
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 15:08:13 -07:00
Brad Davidson
269563e4d2 Check for RBAC before starting tunnel controllers
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 15:08:13 -07:00
Brad Davidson
68a56ff8d8 Add GVK lookup to deploy controller
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 15:08:13 -07:00
Brad Davidson
8d28a38a18 Update helm-controller to pull in refactor
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 15:03:13 -07:00
Brooks Newberry
647c1ab7e7
mark v1.25.3+k3s1 as stable (#6338)
* mark v1.24.7+k3s1 as stable

* Update channel.yaml
2022-10-26 16:03:54 -05:00
Brad Davidson
16a8b6d6f1 Bump Traefik helm chart to v18.0.0
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:38:13 -07:00
Brad Davidson
02bd026dda Add new tests to test list
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:33:18 -07:00
Brad Davidson
eb24f8f81c Add upgrade test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:33:18 -07:00
Brad Davidson
3b0c6ff320 Add hardened cluster test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:33:18 -07:00
Brad Davidson
4d3912a0f8 Fix flakey traefik upgrade in etcd test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:33:18 -07:00
Brad Davidson
f96d86f077 Bump test framework versions and add hooks to helpers
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:33:18 -07:00
Brad Davidson
31539b7937 Bump kine to v0.9.6
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-26 13:30:54 -07:00
Derek Nola
c0c9fa2954
Bump all alpine images to 3.16 (#6334)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-26 09:31:09 -07:00
Manuel Buil
487d08ad11 Add a netpol test for podSelector & ingress type
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-26 17:52:28 +02:00
Derek Nola
18688407d9
Add info on libvirt ubuntu 22.04 (#6316)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-26 08:40:02 -07:00
Derek Nola
fd79a1cfea
Bump testing to opensuse Leap 15.4 (#6337)
* Bump to Leap 15.4 for testing

Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-26 08:38:18 -07:00
Chris Wayne
ffdf96fd22
Update maintainers (#6298)
s/Kathy/Caroline/

Signed-off-by: Chris Wayne <cwayne18@gmail.com>
2022-10-26 10:04:51 -04:00
Manuel Buil
fbba3ba88f Update kube-router
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-26 12:21:13 +02:00
Manuel Buil
5063821ec4
Merge pull request #6292 from manuelbuil/netplan-ubuntu-gw
Add the gateway parameter in netplan
2022-10-26 12:02:23 +02:00
Brad Davidson
a05320dbf0 Bump dynamiclistener
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-25 13:28:43 -07:00
Brad Davidson
f2585c1671 Add --flannel-external-ip flag
Using the node external IP address for all CNI traffic is a breaking change from previous versions; we should make it an opt-in for distributed clusters instead of default behavior.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-24 10:10:49 -07:00
Brad Davidson
e8c250b8dc Fix RBAC to allow removal of legacy finalizer
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-20 16:12:28 -07:00
Manuel Buil
6b804fe224 Add the gateway parameter in netplan
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-18 13:14:10 +02:00
Brad Davidson
3c0cd6f2dc Return ProviderID in URI format
The InstancesV1 interface handled this for us by combining the ProviderName and InstanceID values; the new interface requires us to do it manually

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-17 11:05:09 -07:00
Matt Trachier
64403978cd
Update to v1.25.3-k3s1 (#6269)
Signed-off-by: matttrach <matttrach@gmail.com>
2022-10-13 19:26:57 -05:00
Brad Davidson
f25419ca2c Add ServiceAccount for svclb pods
For 1.24 and earlier, the svclb pods need a ServiceAccount so that we can allow their sysctls in PSPs

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-10 17:40:39 -07:00
Manuel Buil
8016ae2b69
Merge pull request #6245 from manuelbuil/fix_dS_test
Fix dualStack test
2022-10-10 17:26:24 +02:00
Manuel Buil
dd3f3dba92 Fix dualStack test
Signed-off-by: Manuel Buil <mbuil@suse.com>
2022-10-10 10:52:30 +02:00
Derek Nola
06d81cb936
Replace deprecated ioutil package (#6230)
* Replace ioutil package
* check integration test null pointer
* Remove rotate retries

Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-07 17:36:57 -07:00
Brad Davidson
d650645944 Fix flakey etcd test
Taint the first node so that the helm job doesn't run on it. In a real cluster the helm job would eventually succeed once all the servers were upgraded and had the new chart tarball.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-07 16:55:16 -07:00
Derek Nola
934d013614
Merge pull request #6220 from jongwooo/chore/use-setup-go-action-to-cache-dependencies
Use setup-go action to cache dependencies
2022-10-07 10:54:39 -07:00
Derek Nola
3b4bbcaec5
Merge pull request #6224 from dereknola/journalctl_e2e
Add journalctl logs to E2E tests
2022-10-07 09:24:22 -07:00
Brad Davidson
00cbb7ed21 Fix helm job failure on multi-server tests
Replace ETCD-JOIN-STABLE-SECOND with ETCD-JOIN-LATEST-FIRST. We don't
support joining down-level servers to existing clusters, as the new
down-level server will try to deploy older versions of the packaged
manifests.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-06 16:20:21 -07:00
Brad Davidson
25e83cfa4f Bump traefik to 2.9.1 / chart 12.0.0
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-06 16:20:21 -07:00
Derek Nola
307d4310a3 Add journalctl logs to E2E tests
Signed-off-by: Derek Nola <derek.nola@suse.com>
2022-10-06 12:27:44 -07:00
jongwooo
0fd84deb11 Use setup-go action to cache dependencies
Signed-off-by: jongwooo <han980817@gmail.com>
2022-10-07 02:51:03 +09:00
Vladimir Pouzanov
b44d81a6f3 Fix the typo in the test
CA cert will never be equal to the serving-kube-apiserver cert so it seems like a copy-paste error.

Signed-off-by: Vladimir Pouzanov <farcaller@gmail.com>
2022-10-05 21:25:02 -07:00
Brad Davidson
b411864be5 Handle custom kubelet port in agent tunnel
The kubelet port can be overridden by users; we shouldn't assume its always 10250

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-05 21:10:38 -07:00
Brad Davidson
11072e2516 Fix occasional "TLS handshake error" in apiserver network proxy.
We should be reading from the hijacked bufio.ReaderWriter instead of
directly from the net.Conn. There is a race condition where the
underlying http handler may consume bytes from the hijacked request
stream, if it comes in the same packet as the CONNECT header. These
bytes are left in the buffered reader, which we were not using. This was
causing us to occasionally drop a few bytes from the start of the
tunneled connection's client data stream.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2022-10-05 21:10:38 -07:00