Commit Graph

3516 Commits (release-1.30)

Author SHA1 Message Date
Brad Davidson 0d592ddb71 Bump traefik to v2.11.24
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-21 17:24:51 -07:00
Brad Davidson 925934a292 Fix handler panic when bootstrapper returned empty peer list
Panic gets rescued by the http server, and was only visible when running in debug mode, but should be handled properly.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-18 10:33:49 -07:00
Brad Davidson f86a5e93e7 Add cache to spegel p2p peerinfo handler
libp2p may make a large number of bootstrap calls during startup; serve nodes from cache to avoid excessive CPU usage.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-17 21:31:04 -07:00
Brad Davidson 215f43e9e3 Move delegating auth middleware into common package and add MaxInFlight
Adds maximum in-flight request limits to agent join and p2p peer info
request request handlers.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-17 21:31:04 -07:00
Brad Davidson ae232908f0 Fix chainingBootstrapper to return the first successful address list
Avoids infinite recursion when the chain includes an agentBootstrapper with a server address that points back at this node (via join address loop or external LB)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-17 21:31:04 -07:00
Euan Kemp 593dc21dbb Bump flannel to 0.26.7
You can see upstream release notes here: https://github.com/flannel-io/flannel/releases

Signed-off-by: Euan Kemp <euank@euank.com>
(cherry picked from commit 13b8f254c1)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-17 21:31:04 -07:00
Derek Nola 6999b4e225 Stagger e2e parallel launches
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-16 11:27:46 -07:00
Derek Nola 1aab4c1868 Remove Drone amd64 and arm64 pipelines from PRs
Signed-off-by: Derek Nola <derek.nola@suse.com>

Revert "Remove Drone amd64 and arm64 pipelines from PRs"

This reverts commit 2ec62f10825ed21d026b07b47931350aa47cc29d.

x

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-16 11:27:46 -07:00
Derek Nola ecfbb89681 Migrate test-mods from Drone to GHA
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-16 11:27:46 -07:00
Derek Nola 03fac6ce30 Split E2E Drone pipeline into matrix (#12086)
* Split drone e2e into multiple blocks, explicit virsh cleanup

* Create multiple registries once and reuse as long as they exist

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-16 11:27:46 -07:00
Brad Davidson 39547f7d08 Bump kine for nats-server/v2 CVE-2025-30215
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-15 20:47:40 -07:00
Brad Davidson 8d57926b91 Fix etcd socket option config
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:51:55 -07:00
Brad Davidson 1246482c0b Bump etcd to v3.5.21
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:51:55 -07:00
Brad Davidson 8ca2755431 Fix windows kubelet flags
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:51:55 -07:00
Aaron Dewes fd4d3be4d4 fix: Use proper key when signing kubelet certificate
I assume this was a mistake when copying and the kubelet key should have been used here.

This bug was introduced in #11471.

Signed-off-by: Aaron Dewes <aaron@nirvati.org>
(cherry picked from commit 147a3c0daf)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:51:55 -07:00
Derek Nola cb50fe1472 Address slow arm docker node startup
Signed-off-by: Derek Nola <derek.nola@suse.com>
(cherry picked from commit b5704e2623)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:51:55 -07:00
Derek Nola 0d63ecdd38 chore: bump kine to v0.13.13
Signed-off-by: Derek Nola <derek.nola@suse.com>
(cherry picked from commit e4c8ae4248)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:51:55 -07:00
github-actions[bot] 033371cc48 Bump Klipper Helm and Helm Controller version (#12026)
* chore: Bump Klipper Helm and Helm Controller version

Made with ❤️️ by updatecli

* chore: Bump Klipper Helm and Helm Controller version

Made with ❤️️ by updatecli

* Fix build

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>
(cherry picked from commit 2fdc6fab07)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:51:55 -07:00
Brad Davidson 94073174ee Fix windows socket prefix
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f5b0d7884f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:51:55 -07:00
Brad Davidson 1b87987616 Move Windows test out of Install Script workflow
Placing this in the install script test, which only runs when specific files are changed, was preventing it from being run on code changes.

In addition to moving this into the integration workflow, fix codecov for Windows and upload data after running a test pod.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit cd4be0b8c1)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:51:55 -07:00
Derek Nola a2f43a36da Consolidate build-k3s GHA workflow for OS and ARCH (#12080)
Signed-off-by: Derek Nola <derek.nola@suse.com>
(cherry picked from commit 7c552f89c8)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:51:55 -07:00
Brad Davidson 7283bff350 Silence vagrant progress output
Add --no-tty flag to all `vagrant up` commands to silence the printing of box loading progress

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 08c6c7423b)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:51:55 -07:00
Brad Davidson a2092dfd60 Add ReusePort/ReuseAddr flags to etcd config
Addresses flakes in etcd CI due to the port still being in TIME_WAIT after the server is shut down between tests

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 9deef77eef)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:51:55 -07:00
Brad Davidson 4a07c85a5a Bump to traefik/v2.11.22, coredns/v1.12.1
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7cdf0fa688)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 14:51:55 -07:00
manuelbuil 53bb385ac2 Add error in certificate check
Signed-off-by: manuelbuil <mbuil@suse.com>
2025-04-11 13:37:42 -07:00
Derek Nola c2d1127b96 Remove double error check
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-09 01:01:01 -04:00
Derek Nola ab43902c9c Align Value CLI
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-09 01:01:01 -04:00
Derek Nola de84453eb2 Mark rotate-keys as GA
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-09 01:01:01 -04:00
Derek Nola 824f2710ad Implement secrets-encryption secretbox provider
- Add testlet for new provider switch
- Handle migration between providers
- Add exception for criticalcontrolargs
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-09 01:01:01 -04:00
Derek Nola 105afd54d4
Cleanup anonymous and named volumes for docker tests (#12077)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-08 16:54:31 -04:00
Brad Davidson 1179fad73d Fix flakey etcd startup tests
Increase etcd shutdown delay to avoid "bind: address already in use" errors seen in CI. Also uses test TmpDir to ensure dir is cleaned up between tests.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-02 11:40:03 -07:00
Brad Davidson becff1d603 Add tests for control-plane component arg generation
Use mocked executor to ensure the correct args are being passed to components

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 1ba19856de)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-02 11:40:03 -07:00
Brad Davidson b7f262315d Fix issue caused by default authorization-mode apiserver arg
Move arg-parsing helper functions into util, and use them to see if the user has set an authorization-config flag - and do not set authorization-mode if so.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit ee036f7bc9)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-02 11:40:03 -07:00
Brad Davidson 62e7b907f7 Rework mock executor using gomock for call validation
Generate the mock executor with mockgen and convert existing uses of the mock executor to set it up properly.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0eeac6a622)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-02 11:40:03 -07:00
Brad Davidson 3a2143b1ce Move etcd ready channel into executor
This eliminates the final channel that was being passed around in an internal struct. The ETCD management code passes in a func that can be polled until etcd is ready; the executor is responsible for polling this after etcd is started and closing the etcd ready channel at the correct time.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d45006be66)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:07:08 -07:00
Brad Davidson 77c6523d7f Fix etcd tests to use mock executor
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 72bbd676f1)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:07:08 -07:00
Brad Davidson 905e2ea199 Move container runtime ready channel into executor
Move the container runtime ready channel into the executor interface, instead of passing it awkwardly between server and agent config structs

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit a8bc412422)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:07:08 -07:00
Brad Davidson 79e7f711e7 Move apiserver ready wait into common channel
Splits server startup into prepare/start phases. Server's agent is now
started after server is prepared, but before it is started. This allows
us to properly bootstrap the executor before starting server components,
and use the executor to provide a shared channel to wait on apiserver
readiness.

This allows us to replace four separate callers of WaitForAPIServerReady
with reads from a common ready channel.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 529e748ac7)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:07:08 -07:00
Brad Davidson 81eff3f0cb Increase log output while waiting for apiserver ready
Increases log verbosity but decreases polling frequency to avoid
spamming the console. It usually takes a couple seconds for the
apiserver to come up anyway.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 2c133692b2)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:07:08 -07:00
Brad Davidson a788949777 Add context to agent token validation error
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit c11c06cad4)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-31 17:07:08 -07:00
Derek Nola c2662fbee6
[Release-1.30] Fix upgrade test container version (#11998)
* Fix upgrade test container version

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Force docker test cleanup in CI

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Bump skew test deployment times

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-21 15:31:42 -05:00
Brooks Newberry e1d750fd17
fix skew test container version (#11989)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
2025-03-20 02:25:12 -07:00
Brooks Newberry 09639a7f54
Update to v1.30.11 (#11959)
Signed-off-by: Brooks Newberry <brooks@newberry.com>
2025-03-12 13:07:00 -07:00
Brad Davidson 0f0a157e72 Fix syncing empty list of apiserver addresses during initial startup
Also add more debug logging to the sync process.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 781640ecea)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-12 00:25:23 -07:00
Derek Nola 3c8c398ad5
Merge pull request #11928 from dereknola/bump_klipper_lb_1.30
[Release-1.30] Bump klipper-lb to v0.4.13
2025-03-10 15:17:27 -07:00
Derek Nola 86d47b0069
Bump klipper-lb image (#11898)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-10 11:32:39 -07:00
Derek Nola f82e387b5e Fix flaky rootless E2E test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-07 14:46:22 -08:00
Brad Davidson ba2e5cf655 Bump etcd to v3.5.19
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0a47df6f60)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:22 -08:00
Brad Davidson 59ccd4bc7c Add periodic background snapshot reconcile
Interval is configurable with new etcd-snapshot-reconcile-interval flag

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d694dd1db9)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:22 -08:00
Brad Davidson 9e05875030 Avoid use of github.com/pkg/errors functions that capture stack
We are not making use of the stack traces that these functions capture, so we should avoid using them as unnecessary overhead.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit bed1f66880)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:22 -08:00