Commit Graph

3636 Commits (master)

Author SHA1 Message Date
Brad Davidson b8a705d9c2 Fix handler panic when bootstrapper returned empty peer list
Panic gets rescued by the http server, and was only visible when running in debug mode, but should be handled properly.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-18 10:20:15 -07:00
Derek Nola 0226ea511c
Address top flaky tests (#12163)
* ExternalIP E2E test: Improve clientIP checking
* E2E: Better top node error logs
* Skew test: increase deployment timeout

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-17 15:10:55 -07:00
Brad Davidson 4f17e626f3 Fix chainingBootstrapper to return the first successful address list
Avoids infinite recursion when the chain includes an agentBootstrapper with a server address that points back at this node (via join address loop or external LB)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-17 14:20:39 -07:00
Brad Davidson 3f7e6a30ce Move delegating auth middleware into common package and add MaxInFlight
Adds maximum in-flight request limits to agent join and p2p peer info
request request handlers.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-17 14:20:39 -07:00
Brad Davidson 7883918d0a Add cache to spegel p2p peerinfo handler
libp2p may make a large number of bootstrap calls during startup; serve nodes from cache to avoid excessive CPU usage.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-17 14:20:39 -07:00
Brad Davidson 097b63e588 Set kubelet read-only-port via CLI flag
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-17 14:20:27 -07:00
Derek Nola 94ba9576de Stagger e2e parallel launches
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-17 08:59:06 -07:00
Derek Nola f8c55a1228 Remove names k3s-pause volume in cacert test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-17 08:59:06 -07:00
dependabot[bot] 9d2ed8889e
Bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 (#11978)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.29.0 to 0.30.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.29.0...0.30.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-16 13:26:30 -04:00
Euan Kemp 13b8f254c1 Bump flannel to 0.26.7
You can see upstream release notes here: https://github.com/flannel-io/flannel/releases

Signed-off-by: Euan Kemp <euank@euank.com>
2025-04-16 10:25:59 -07:00
Derek Nola d824d5d0d6 Remove Drone amd64 and arm64 pipelines from PRs
Signed-off-by: Derek Nola <derek.nola@suse.com>

Revert "Remove Drone amd64 and arm64 pipelines from PRs"

This reverts commit 2ec62f10825ed21d026b07b47931350aa47cc29d.

x

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-16 09:50:25 -07:00
Derek Nola 2da4775ae7 Migrate test-mods from Drone to GHA
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-16 09:50:25 -07:00
Derek Nola e392278fab
Implement manual govulncheck (#12135)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-16 09:15:37 -07:00
Brad Davidson 7a6e907ffe Bump kine for nats-server/v2 CVE-2025-30215
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-15 16:59:09 -07:00
Orlix 7b72a99ece
Add OpenSSF Scorecard badge (#12134)
Signed-off-by: Orlix <orlin@orlix.org>
2025-04-15 10:23:07 -04:00
Derek Nola 4e8d85a2e4
Split E2E Drone pipeline into matrix (#12086)
* Split drone e2e into multiple blocks, explicit virsh cleanup

* Create multiple registries once and reuse as long as they exist

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-14 13:44:48 -07:00
Chris Wayne b77c282dcb
Create scorecard.yml (#12128)
Signed-off-by: Chris Wayne <chris.wayne@suse.com>
2025-04-14 13:12:41 -04:00
Brad Davidson b0bd7b3608 Sync golang.org/x pins with upstream
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 13:39:44 -07:00
Brad Davidson f90334e207 Fix etcd socket option config
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 13:39:44 -07:00
Brad Davidson 161526ab3d Bump etcd to v3.5.21
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 13:39:44 -07:00
Orlix 6f744d1b64
Add Community in README.md
Adding Community section in the README.md file and moving the badges on top as they need to be more visible
2025-04-11 13:38:58 -07:00
Aaron Dewes 147a3c0daf fix: Use proper key when signing kubelet certificate
I assume this was a mistake when copying and the kubelet key should have been used here.

This bug was introduced in #11471.

Signed-off-by: Aaron Dewes <aaron@nirvati.org>
2025-04-10 19:50:44 -07:00
Derek Nola b5704e2623 Address slow arm docker node startup
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-10 18:55:14 -04:00
Derek Nola e4c8ae4248 chore: bump kine to v0.13.13
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-10 18:55:14 -04:00
github-actions[bot] 2fdc6fab07
Bump Klipper Helm and Helm Controller version (#12026)
* chore: Bump Klipper Helm and Helm Controller version

Made with ❤️️ by updatecli

* chore: Bump Klipper Helm and Helm Controller version

Made with ❤️️ by updatecli

* Fix build

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>
2025-04-10 15:00:29 -04:00
manuelbuil 9505f7ff3b Add error in certificate check
Signed-off-by: manuelbuil <mbuil@suse.com>
2025-04-10 13:22:43 +02:00
Robert Sirchia 1ccfa5e428
adding in govulncheck (#12083)
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
2025-04-09 16:53:16 -04:00
Chris Wayne 2f4af98212
Update CODE_OF_CONDUCT.md (#12092)
accidentally left in the wrong footer when we updated to point to the CNCF CoC.

Signed-off-by: Chris Wayne <chris.wayne@suse.com>
2025-04-09 16:27:59 -04:00
Brad Davidson f5b0d7884f Fix windows socket prefix
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-09 09:25:43 -07:00
Brad Davidson cd4be0b8c1 Move Windows test out of Install Script workflow
Placing this in the install script test, which only runs when specific files are changed, was preventing it from being run on code changes.

In addition to moving this into the integration workflow, fix codecov for Windows and upload data after running a test pod.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-09 09:25:43 -07:00
Derek Nola 7c552f89c8
Consolidate build-k3s GHA workflow for OS and ARCH (#12080)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-08 18:32:05 -04:00
Brad Davidson 08c6c7423b Silence vagrant progress output
Add --no-tty flag to all `vagrant up` commands to silence the printing of box loading progress

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-08 15:28:41 -07:00
Brad Davidson 9deef77eef Add ReusePort/ReuseAddr flags to etcd config
Addresses flakes in etcd CI due to the port still being in TIME_WAIT after the server is shut down between tests

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-08 15:27:19 -07:00
Chris Wayne 15ed009031
Update README.md (#12082)
openssf best practice badge

Signed-off-by: Chris Wayne <cwayne18@gmail.com>
2025-04-08 16:25:14 -04:00
Derek Nola 278c7bd480
Cleanup anonymous and named volumes for docker tests (#12069)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-07 18:26:00 -04:00
Brad Davidson 7cdf0fa688 Bump to traefik/v3.3.5, coredns/v1.12.1
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-07 12:52:27 -07:00
Derek Nola 88151aec07
Simplify and update E2E drone pipeline (#10430)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-07 15:46:09 -04:00
Derek Nola 91d76b1614 Remove double error check
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-07 09:08:22 -07:00
Derek Nola fa69c45926 Align Value CLI
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-07 09:08:22 -07:00
Derek Nola 786efd1bff Mark rotate-keys as GA
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-07 09:08:22 -07:00
Derek Nola aea3703f68 Implement secrets-encryption secretbox provider
- Add testlet for new provider switch
- Handle migration between providers
- Add exception for criticalcontrolargs
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-07 09:08:22 -07:00
Brad Davidson a897f6875e Fix flakey etcd startup tests
Increase etcd shutdown delay to avoid "bind: address already in use" errors seen in CI. Also uses test TmpDir to ensure dir is cleaned up between tests.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-02 09:01:26 -07:00
Gustavo Fernandes de Carvalho d2a02e446e Adds External Secrets to ADOPTERS.md
Signed-off-by: Gustavo Fernandes de Carvalho <17139678+gusfcarvalho@users.noreply.github.com>
2025-04-02 08:49:15 +02:00
Brad Davidson 1ba19856de Add tests for control-plane component arg generation
Use mocked executor to ensure the correct args are being passed to components

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:09:43 -07:00
Brad Davidson ee036f7bc9 Fix issue caused by default authorization-mode apiserver arg
Move arg-parsing helper functions into util, and use them to see if the user has set an authorization-config flag - and do not set authorization-mode if so.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:09:43 -07:00
Brad Davidson 0eeac6a622 Rework mock executor using gomock for call validation
Generate the mock executor with mockgen and convert existing uses of the mock executor to set it up properly.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:09:43 -07:00
Brooks Newberry 441a42e8ce
Update stable channel to v1.32.3+k3s1 (#12020)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
2025-03-27 11:44:53 -07:00
Derek Nola 7fed27f62e
Publish k3s image to ghcr (#11835)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-26 09:40:54 -07:00
Brad Davidson d45006be66 Move etcd ready channel into executor
This eliminates the final channel that was being passed around in an internal struct. The ETCD management code passes in a func that can be polled until etcd is ready; the executor is responsible for polling this after etcd is started and closing the etcd ready channel at the correct time.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-24 12:42:29 -07:00
Brad Davidson 72bbd676f1 Fix etcd tests to use mock executor
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-24 12:42:29 -07:00