Mirror/k3s
1
0
Fork 0
mirror of https://github.com/k3s-io/k3s.git synced 2024-06-07 19:41:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,132 Commits 27 Branches 785 Tags 625 MiB
fe2ca9ecf1
Commit Graph

1322 Commits

Author SHA1 Message Date
Brad Davidson
fe2ca9ecf1 Warn and suppress duplicate registry mirror endpoints 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 16:30:06 -08:00
Brad Davidson
2a091a693a Bump metrics-server to v0.7.0 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-07 12:45:29 -08:00
Roberto Bonafiglia
88c431aea5 Adjust first node-ip based on configured clusterCIDR 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2024-03-06 11:10:41 +01:00
Vitor Savian
59c724f7a6 Fix wildcard with embbeded registry test 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-05 14:38:36 -08:00
Flavio Castelli
64e4f0e6e7 fix: use correct wasm shims names 
Fix the wasm shim detection and the containerd configuration generation.

Prior to this commit, the binary and the `RuntimeType` values were not
correct.

Signed-off-by: Flavio Castelli <fcastelli@suse.com>
 2024-03-05 13:12:08 -08:00
Brad Davidson
091a5c8965 Don't register embedded registry address as an upstream registry 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-04 15:11:26 -08:00
Brad Davidson
b5a4846e9d Remove filtering of wildcard mirror entry 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-04 15:11:26 -08:00
Brad Davidson
84a071a81e Add env var to allow spegel mirroring of latest tag 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-04 15:11:26 -08:00
Philip Laine
26feb25c40 Bump spegel to v0.0.18-k3s4 
Signed-off-by: Philip Laine <philip.laine@gmail.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-04 15:11:26 -08:00
Brad Davidson
0b3593205a Move snapshot-retention to EtcdSnapshotFlags in order to support loading from config 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-04 12:09:29 -08:00
Brad Davidson
3576ed4327 Clean up snapshotDir create/exists logic 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-04 12:09:29 -08:00
Brad Davidson
b164d7a270 Fix additional corner cases in registries handling 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-04 11:59:33 -08:00
Brad Davidson
82432a2df7 Fix issue with etcd node name missing hostname 
* Set ServerNodeName in snapshot CLI setup
* Raise errer if ServerNodeName ends up empty some other way
* Fix status controller to use etcd node name annotation instead of prefix checking

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-01 13:52:53 -08:00
Brad Davidson
513c3416e7 Tweak netpol node wait logs 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-01 12:01:34 -08:00
Brad Davidson
be569f65a9 Fix NodeHosts on dual-stack clusters 
* Add both dual-stack addresses to the node hosts file
* Add hostname to hosts file as alias for node name to ensure consistent resolution

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-03-01 11:59:59 -08:00
Edgar Lee
8c83b5e0f3 Rootless mode also bind service nodePort to host for LoadBalancer type 
Signed-off-by: Edgar Lee <edgarhinshunlee@gmail.com>
 2024-03-01 10:43:19 -08:00
Manuel Buil
3b4f13f28d Update klipper-lb image version 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2024-03-01 11:28:12 +01:00
Brad Davidson
86f102134e Fix netpol startup when flannel is disabled 
Don't break out of the poll loop if we can't get the node, RBAC might not be ready yet.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-26 14:58:48 -08:00
Derek Nola
fae41a8b2a Rename AgentReady to ContainerRuntimeReady for better clarity 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-02-21 12:21:19 -08:00
Derek Nola
91cc2feed2 Restore original order of agent startup functions 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-02-21 12:21:19 -08:00
Brad Davidson
de825845b2 Bump kine and set NotifyInterval to what the apiserver expects 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-09 14:22:38 -08:00
Edgar Lee
0ac4c6a056 Expose rootless containerd socket directories for external access 
Signed-off-by: Edgar Lee <edgarhinshunlee@gmail.com>
 2024-02-09 14:22:03 -08:00
Edgar Lee
14c6c63b30 Expose rootless state dir under ~/.rancher/k3s/rootless 
Signed-off-by: Edgar Lee <edgarhinshunlee@gmail.com>
 2024-02-09 14:21:52 -08:00
Oleg Matskiv
e3b237fc35 Don't verify the node password if the local host is not running an agent 
Signed-off-by: Oleg Matskiv <oleg.matskiv@gmail.com>
 2024-02-09 14:21:43 -08:00
Derek Nola
fa11850563
Readd k3s secrets-encrypt rotate-keys with correct support for KMSv2 GA (#9340) 
* Reorder copy order for caching
* Enable longer http timeout requests

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Setup reencrypt controller to run on all apiserver nodes
* Fix reencryption for disabling secrets encryption, reenable drone tests
 2024-02-09 11:37:37 -08:00
Oliver Larsson
cfc3a124ee
[Testing]: Test_UnitApplyContainerdQoSClassConfigFileIfPresent (Created) (#8945) 
Problem:
Function not tested.

Solution:
Unit test added.

Signed-off-by: Oliver Larsson <larsson.e.oliver@gmail.com>
 2024-02-09 11:28:06 -08:00
Harrison Affel
a36cc736bc allow executors to define containerd and docker behavior 
Signed-off-by: Harrison Affel <harrisonaffel@gmail.com>
 2024-02-09 15:51:35 -03:00
Brad Davidson
753c00f30c Consistently handle component exit on shutdown 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-07 10:23:54 -08:00
Vitor Savian
e9cec46a23 Runtimes refactor using exec.LookPath 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2024-02-07 15:06:16 -03:00
Vitor Savian
f9ee66f4d8 Changed how lastHeartBeatTime works in the etcd condition 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2024-02-07 15:05:33 -03:00
Brad Davidson
8224a3a7f6 Fix ipv6 endpoint address selection for on-demand snapshots 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-06 18:02:36 -08:00
Brad Davidson
888f866dae Fix issue with coredns node hosts controller 
The nodes controller was reading from the configmaps cache, but doesn't add any handlers, so if no other controller added configmap handlers, the cache would remain empty.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-06 18:02:06 -08:00
Brad Davidson
6ec1926f88 Add check for etcd-snapshot-dir and fix panic in Walk 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-06 17:47:33 -08:00
Brad Davidson
82e3c32c9f Retry startup snapshot reconcile 
The reconcile may run before the kubelet has created the node object; retry until it succeeds

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-06 17:46:24 -08:00
Brad Davidson
4005600d4e Fix excessive retry on snapshot reconcile 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-06 17:46:24 -08:00
github-actions[bot]
f249fcc2f1
Bump Local Path Provisioner version (#8953) 
* chore: Bump Local Path Provisioner version
---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2024-02-06 16:57:07 -06:00
Brad Davidson
c635818956 Bump runc and helm-controller versions 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-01 18:51:51 -08:00
Brad Davidson
97a22632b9 gofmt config_test.go 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-01 18:51:51 -08:00
Brad Davidson
29848dea3d Fix issues with certs.d template generation 
* Fix issue with bare host or IP as endpoint
* Fix issue with localhost registries not defaulting to http.
* Move the registry template prep to a separate function,
  and adds tests of that function so that we can ensure we're
  generating the correct content.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-02-01 12:09:13 -08:00
Vitor Savian
9a70021a9e Error getting node in setEtcdStatusCondition 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Added retry and changed nodes for

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2024-01-11 22:06:36 -03:00
Brad Davidson
c87e6e5f7e Move proxy dialer out of init() and fix crash 
* Fixes issue where proxy support only honored server address via K3S_URL, not CLI or config.
* Fixes crash when agent proxy is enabled, but proxy env vars do not return a proxy URL for the server address (server URL is in NO_PROXY list).
* Adds tests

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-11 16:12:15 -08:00
Brad Davidson
76fa022045 Enable network policy controller metrics 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-11 10:19:39 -08:00
Brad Davidson
37e9b87f62 Add embedded registry implementation 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-09 15:23:05 -08:00
Brad Davidson
ef90da5c6e Add server CLI flag and config fields for embedded registry 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-09 15:23:05 -08:00
Brad Davidson
77846d63c1 Propagate errors up from config.Get 
Fixes crash when killing agent while waiting for config from server

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-09 15:23:05 -08:00
Brad Davidson
16d29398ad Move registries.yaml load into agent config 
Moving it into config.Agent so that we can use or modify it outside the context of containerd setup

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-09 15:23:05 -08:00
Brad Davidson
5c99bdd9bd Pin images instead of locking layers with lease 
Layer leases never did what we wanted anyways, and this is the new approved interface for ensuring that images do not get GCd

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-01-09 15:23:05 -08:00
Vitor Savian
4a92ced8ee Handle etcd status condition when cluster reset and disable etcd 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Set condition if node is unhealthy

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2024-01-09 11:20:41 -03:00
Aofei Sheng
8d2c40cdac
Use ipFamilyPolicy: RequireDualStack for dual-stack kube-dns (#8984) 
Signed-off-by: Aofei Sheng <aofei@aofeisheng.com>
 2024-01-09 00:44:03 +02:00
Manuel Buil
6330e26bb3 Wait for taint to be gone in the node before starting the netpol controller 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2024-01-08 12:04:18 +01:00