367 Commits

Author	SHA1	Message	Date
Erik Wilson	8725798578	Merge pull request #1464 from erikwilson/selinux-update ... Simplify SELinux detection and add --disable-selinux flag	2020-02-28 15:42:45 -07:00
Erik Wilson	a3cb9ee1f6	Simplify SELinux detection and add --disable-selinux flag	2020-02-28 10:10:55 -07:00
Erik Wilson	0aeea78060	Merge pull request #1444 from KnicKnic/k3s_build_windows ... K3s build windows (no agents)	2020-02-27 11:46:21 -07:00
Darren Shepherd	4d32fe9959	Support SELinux	2020-02-24 16:03:09 -07:00
Erik Wilson	4210800648	Merge pull request #1343 from ibuildthecloud/rootless ... Create pidns for rootless	2020-02-24 15:05:52 -07:00
Knic Knic	c2db115ec3	fix formatting	2020-02-23 00:48:26 -08:00
Knic Knic	2346ccc63f	get build on windows and get api_server to work	2020-02-22 23:17:59 -08:00
Knic Knic	522e08872a	do not rename inuse files	2020-02-21 22:45:05 -08:00
Erik Wilson	fe45eb008a	Merge pull request #1416 from erikwilson/device-plugins-path ... Use default kubelet device-plugins path	2020-02-14 14:19:51 -07:00
galal-hussein	d49ef31767	Inject node config on startup	2020-02-14 21:17:13 +02:00
Erik Wilson	b15c4473cd	Use default kubelet device-plugins path	2020-02-14 10:18:07 -07:00
Darren Shepherd	782004bec9	Create pidns for rootless	2020-01-31 21:40:34 -07:00
Erik Wilson	0374c4f63d	Add --disable flag	2020-01-30 16:45:01 -07:00
Erik Wilson	3592d0bdd9	Merge pull request #1344 from ibuildthecloud/dialer-fallback ... If tunnel session does not exist fallback to default dialer	2020-01-27 13:59:45 -07:00
Erik Wilson	1a2690d7be	Merge pull request #1192 from galal-hussein/add_encryption_config ... Add secret encryption config	2020-01-27 13:59:09 -07:00
Darren Shepherd	bf57a7f419	Don't start node controller if coredns is not deployed	2020-01-22 11:09:36 -07:00
Darren Shepherd	3396a7b099	If tunnel session does not exist fallback to default dialer	2020-01-22 11:04:41 -07:00
Erik Wilson	1b23c891dd	Merge pull request #1304 from erikwilson/fixup-cadvisor ... Run kubelet with containerd flag	2020-01-20 15:37:22 -07:00
Erik Wilson	4cacffd7e6	Merge pull request #1298 from erikwilson/warn-npc-fail ... Warn if NPC can't start rather than fatal error	2020-01-20 15:36:56 -07:00
Erik Wilson	fa03a0df3c	Run kubelet with containerd flag ... The containerd flag was accidentally added to kubelet and is deprecated, but needed for cadvisor to properly connect with the k3s containerd socket, so adding for now.	2020-01-16 10:25:57 -07:00
Erik Wilson	5b98d10e4b	Warn if NPC can't start rather than fatal error ... If the ip_set kernel module is not available we should warn that the network policy controller can not start rather than cause a fatal error. Also adds module probing and config checks for ip_set.	2020-01-14 14:30:12 -07:00
Erik Wilson	7675f9f85c	Clean up host-gw variable names	2020-01-08 17:43:07 -07:00
Segator	c23f12765e	hostgw flannel support	2020-01-08 17:43:07 -07:00
Segator	6736e24673	support hostgw	2020-01-08 17:43:07 -07:00
Erik Wilson	9421746ccf	Merge pull request #1235 from ibuildthecloud/master ... Fix uint64 truncation issue in dqlite	2019-12-23 13:56:18 -07:00
galal-hussein	388cd9c4e8	Add secret encryption configuration	2019-12-23 13:16:27 +02:00
Darren Shepherd	9bda58c81a	Fix uint64 truncation issue in dqlite	2019-12-21 08:51:39 -07:00
galal-hussein	07d4c1510d	Add lease permissions to ccm cluster role	2019-12-21 04:41:24 +02:00
Erik Wilson	5c37454762	Merge pull request #1198 from narqo/tunel-addr-join-host-port ... Respect IPv6 when building proxy address	2019-12-19 15:20:12 -07:00
Erik Wilson	9b2538c2c4	Set wireguard persistent-keepalive on wg set peer	2019-12-19 14:54:48 -07:00
Erik Wilson	3376f31fc2	Revert "Merge pull request #1190 from erikwilson/wireguard-keepalive" ... This reverts commit e712cdf7e8, reversing changes made to d5929bc8c8. Wireguard docs fail to describe that persistent-keepalive is only valid when peer is set.	2019-12-19 14:41:38 -07:00
Vladimir Varankin	0c5299c951	pkg/agent/tunnel: respect ipv6 when building proxy addresses	2019-12-19 12:08:07 +01:00
Erik Wilson	6875b11dd2	Fix identity_token -> identitytoken for containerd toml	2019-12-17 21:14:05 -07:00
Darren Shepherd	4acaa0740d	Small dqlite fixes	2019-12-16 11:45:01 -07:00
Erik Wilson	97383868bd	Merge pull request #1186 from erikwilson/upgrade-k8s-1.17.0 ... Upgrade k8s to v1.17.0	2019-12-16 09:40:38 -07:00
Erik Wilson	e712cdf7e8	Merge pull request #1190 from erikwilson/wireguard-keepalive ... Set Wireguard keepalive to 25 seconds	2019-12-16 09:40:11 -07:00
Erik Wilson	5679a8bd2f	Update generated	2019-12-15 23:28:19 -07:00
Erik Wilson	76281bf731	Update k3s for k8s 1.17.0	2019-12-15 23:28:19 -07:00
Erik Wilson	814c302d7c	Merge pull request #955 from btashton/servicelb-sysctl ... Enable ip forwarding on both all and default net config	2019-12-12 17:31:02 -07:00
Erik Wilson	7b62811f98	Set Wireguard keepalive to 25 seconds	2019-12-12 10:40:41 -07:00
Erik Wilson	d4959d53af	Merge pull request #1182 from erikwilson/docker-pause-image ... Allow --pause-image to set docker sandbox image also	2019-12-11 10:36:07 -07:00
Erik Wilson	2eacfa75cb	Merge pull request #1180 from erikwilson/cleanup-flannel-backend-help-text ... Cleanup --flannel-backend help text	2019-12-11 10:35:50 -07:00
Erik Wilson	56b0743653	Merge pull request #1171 from dweomer/mutable-labels ... Mutable --node-label values for server/agent sub-commands.	2019-12-11 10:35:27 -07:00
Erik Wilson	c2be59e5f3	Allow udp protocol for service-lb ports ... For #577	2019-12-11 10:34:11 -07:00
Brennan Ashton	a952d5c32a	Default device net config enables ip forwarding ... The Linux kernel is inconsistent about how devconf is configured for new network namespaces between ipv4 and ipv6. The behavior can also be controlled via net.core.devconf_inherit_init_net in Linux 5.1+ so make sure to enable forwarding on all and default for both ipv6 and ipv4. This issue first came up testing on a yocto kernel that had this patch: ipv4: net namespace does not inherit network configurations [0] https://www.kernel.org/doc/html/latest/admin-guide/sysctl/net.html#devconf-inherit-init-net [1] https://lkml.org/lkml/2014/7/29/119 Signed-off-by: Brennan Ashton <brennana@jfrog.com>	2019-12-10 16:29:59 -08:00
Erik Wilson	2de93d70cf	Allow --pause-image to set docker sandbox image also	2019-12-10 16:16:26 -07:00
Erik Wilson	11e4d01efe	Cleanup --flannel-backend help text	2019-12-10 14:51:16 -07:00
Jacob Blain Christen	063efb25bb	Mutable --node-label values for server/agent sub-commands. ... Values passed in via the server/agent `--node-label` flag are treated as mutable. They are passed through to the kubelet just as before but after the kubelet comes up they are applied again. This allows for passing labels a k3s start-time that may be necessary for scheduling but may change from boot to boot, e.g. `k3os.io/version` after an upgrade. Tested locallon on my amd64 workstation with the docker container. Addresses #1119.	2019-12-09 16:40:15 -07:00
yuzhiquan	24869ddf21	remove []byte trans, handle func error	2019-11-28 19:26:45 +08:00
yuzhiquan	7cc0110081	fix typo	2019-11-28 19:24:19 +08:00