Commit Graph

3492 Commits (release-1.29)

Author SHA1 Message Date
Derek Nola 288efc52b8
Merge pull request #11929 from dereknola/bump_klipper_lb_1.29
[Release-1.29] Bump klipper-lb to v0.4.13
2025-03-10 15:17:30 -07:00
Brad Davidson 4cbe00913b
Merge pull request #11931 from brandond/2025-03-backports_release-1.29
[release-1.29] Backports for 2025-03
2025-03-10 13:43:00 -07:00
Derek Nola 946427bd24
Fix flaky rootless E2E test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-10 18:36:27 +00:00
Brad Davidson 9b959aeb8a
Bump etcd to v3.5.19
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0a47df6f60)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-10 18:35:19 +00:00
Brad Davidson f72757bace
Add periodic background snapshot reconcile
Interval is configurable with new etcd-snapshot-reconcile-interval flag

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d694dd1db9)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-10 18:35:08 +00:00
Brad Davidson 4fde818520
Avoid use of github.com/pkg/errors functions that capture stack
We are not making use of the stack traces that these functions capture, so we should avoid using them as unnecessary overhead.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit bed1f66880)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-10 18:35:06 +00:00
Derek Nola 2fdfa14d2c
Bump klipper-lb image (#11898)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-10 11:32:41 -07:00
Brad Davidson 675c355b81
Bump to containerd v2.7.26/runc v1.2.5
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 66d0f1604a)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-10 18:28:10 +00:00
Anders Larsson 2c0709322d
Add netfilter statistic module to check-config
Signed-off-by: Anders Larsson <anders.git@larsson.xyz>
(cherry picked from commit 8aa543eb87)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-10 18:26:46 +00:00
Brad Davidson fb75ee63b3
Fix panic when secret-encrypt status is checked before runtime core is ready
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e7b52cd63d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-10 18:26:45 +00:00
Brad Davidson 0db300b1d7
Use etcd proxy to bootstrap control-plane-only nodes, if possible
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f940368747)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-10 18:26:45 +00:00
Brad Davidson ec08e81d20
Use existing server-CA and hash if available
Also wraps errors along the cluster prepare path to improve tracability.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 244bfd0c35)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-10 18:26:45 +00:00
Brad Davidson 650dea0516
Serve HTTP bootstrap data from datastore before disk
Fixes issue where CA rotation would fail on servers with join URL set due to using old data from disk on other server

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 53fcadc028)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-10 18:26:44 +00:00
Brad Davidson ecc5d65270
Move CR APIs to k3s-io/api
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5894af30ff)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-10 18:26:42 +00:00
Somesh Bhalsing 8778d9201e
fix: move CONFIG_SECCOMP to generally necessary category in check-config command
Signed-off-by: Somesh Bhalsing <somesh.bhalsing@gmail.com>
(cherry picked from commit 6131ea15b2)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-10 18:07:33 +00:00
Brad Davidson b513318aaf
Add etcd snapshot metrics
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6199b79f4b)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-10 18:07:33 +00:00
Brad Davidson ff0fd17c50
Add static bin dir support to k3s docker image
Static bin dir is first in search path and is on /var/lib/rancher/k3s volume, which can be persisted by users. If the volume is empty it will just fall back to the legacy /bin dir.

(cherry picked from commit b2d495e17f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-10 18:07:31 +00:00
Brad Davidson 6873bccf9c e2e: wait for deployments before getting logs
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-20 19:34:47 -08:00
Brad Davidson b5d97fb28d Fix curl test timeouts
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-20 19:34:47 -08:00
Brad Davidson 38381875c9 Render CNI dir config whenever vars are set
RKE2 on Windows sets CNI bin dirs in node config even though embedded flannel is disabled (NoFlannel=true). We need to gate rendering this config on the vars being, set NOT on NoFlannel being false.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-20 19:34:47 -08:00
Rafael 09472789af
[release-1.29] Update to v1.29.14-k3s1 and Go 1.22.12 (#11785)
* Update to v1.29.14

Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com>

* Update Go Alpine Images

Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com>

---------

Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com>
2025-02-14 10:21:36 -03:00
Derek Nola 96ef7fc836
Bump klipper-lb and klipper-helm (#11772)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-11 16:32:34 -08:00
Brad Davidson f7995b3c15 Bump traefik to v2.11.20
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 14:03:32 -08:00
Brad Davidson 8d351063b4 Fix FetchIngressIP error checking
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 0504e44d26 Move windows build to separate job
Don't block other linux steps on building the windows binary

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 20a9a6bfc3)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson e7b57321bb Fix wasm ingress test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 04ed6c0996)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson bac9166529 Add windows smoke test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3aa24cdde8)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 4349cb31a5 Skip netpol startup on windows instead of panicing
Netpol startup is skipped with a warning on linux if ipset support is missing, we should do the same on windows

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 96c2dd3865)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson e1894998c9 Add linux nodeSelector to local-storage and metrics-server
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 99f4f5ad12)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 79f4d73607 Fix default pause image on windows
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 85987ac23f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 2b776ed978 Add missing windows runtime type definition
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 50326c8bca)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 508114a9eb Fix windows path quoting/escaping in containerd config template
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 8aa412ed66)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 6a34bb7b2a Fix containerd hosts.toml path on windows
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit bf97b8facc)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 1878a4c508 Fix permissions checks on windows
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 838d68777f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson bef57ffbdf Replace hardcoded unix-style paths in test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b2418ba354)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson d473edc3e3 Remove broken unused windows test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 8f85ee3c60)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson bd7fc00e98 Make etcd test linux-only
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 4cacf6e1c0)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 4ac647041e Fix linux-specific clientaccess test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0d15457c77)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 7aee63f2c0 Wait for docker to start before running dapper
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 9bdab19108)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 938d1f3a8f Bump kine for no-sqlite build fix
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 20dda23c60)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson d7515e0f1e Make intermediate bin tarball os-specific
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d6d361ee21)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 7ff3d66e0e Move Windows compilation test to GH Actions and enable integration/coverage
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5c8f2364c4)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 52b9cf2ebf Consolidate linux and windows containerd config templates
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 85b3775071)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 1baf3c84ec Bump etcd to v3.5.18
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit eec2a53c8a)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 5f13d63dcd Bump kine to v0.13.8
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 1b578b4e38)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 96db11432f Add support for AWS shared credentials file
Also adds a CLI flag and fields for session token, which must be passed
alongside the access key and secret when using temporary credentials.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0d028a2283)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
github-actions[bot] b0021beec1 Bump Local Path Provisioner version (#11657)
* chore: Bump Local Path Provisioner version

Made with ❤️️ by updatecli

* chore: Bump Local Path Provisioner version

Made with ❤️️ by updatecli

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
(cherry picked from commit 28300ea154)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson 5410e405f9 Update p2p boostrap helpers for Spegel v0.0.30
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 95700aa6b3)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson fb8cbe9d65 Bump spegel to v0.0.30
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e808d3e826)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00
Brad Davidson b158de5997 Disable s3 transport transparent compression/decompression
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit fd8348324d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:18:23 -08:00