Commit Graph

3516 Commits (release-1.30)

Author SHA1 Message Date
Brad Davidson fe0396c977 Bump to containerd v2.7.26/runc v1.2.5
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 66d0f1604a)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:22 -08:00
Anders Larsson acec2794ba Add netfilter statistic module to check-config
Signed-off-by: Anders Larsson <anders.git@larsson.xyz>
(cherry picked from commit 8aa543eb87)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:22 -08:00
Brad Davidson 064978cdf1 Fix panic when secret-encrypt status is checked before runtime core is ready
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e7b52cd63d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:22 -08:00
Brad Davidson 7120e63a06 Use etcd proxy to bootstrap control-plane-only nodes, if possible
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f940368747)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:22 -08:00
Brad Davidson 5d5d6ee18a Use existing server-CA and hash if available
Also wraps errors along the cluster prepare path to improve tracability.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 244bfd0c35)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:22 -08:00
Brad Davidson c607ba85a5 Serve HTTP bootstrap data from datastore before disk
Fixes issue where CA rotation would fail on servers with join URL set due to using old data from disk on other server

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 53fcadc028)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:22 -08:00
Brad Davidson 43b24315f1 Move CR APIs to k3s-io/api
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5894af30ff)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:22 -08:00
Somesh Bhalsing 4bc4aeaf24 fix: move CONFIG_SECCOMP to generally necessary category in check-config command
Signed-off-by: Somesh Bhalsing <somesh.bhalsing@gmail.com>
(cherry picked from commit 6131ea15b2)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:22 -08:00
Brad Davidson edc5203598 Add etcd snapshot metrics
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6199b79f4b)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:22 -08:00
Brad Davidson adb495931b Add static bin dir support to k3s docker image
Static bin dir is first in search path and is on /var/lib/rancher/k3s volume, which can be persisted by users. If the volume is empty it will just fall back to the legacy /bin dir.

(cherry picked from commit b2d495e17f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-03-07 14:46:22 -08:00
Derek Nola 7c317ee270 Move away from docker e2e images, use gcr and ghcr
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola 37b0d0184f Migrate svcpolicies E2E test to docker
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola d5f5b66dc5 Expand E2E test matrix to cover all possible tests that fit on GHA
Fix rootless test

Fix svc firewall E2E test, broken by #11711

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola 9e780afebd Replace e2e.ParseNodes function with general ParseNodes and NodesReady test functions
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola b93e0a25ae Add E2E AllNodes helper function
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola fea8ac17b4 Fix typo on conformance script (#11792)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola 27218c12ad Migrate E2E SecretsEncryption to Docker test
Remove secrets encryption E2E from Drone

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola 331e4d621b Don't run snapshotrestore on flaky arm64 runners
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola 4a95051e33 Migrate E2E autoimport to Docker test
Simplify DockerNode structs
Remove autoimport from E2E
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola b6587837c2 Remove unused docker tests
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola 62442d0d3d Migrate hardened docker test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola c2fdcea1ea Fix various E2E test function names and descriptions
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola e7b6a6d87d Migrate E2E Token test into a Docker Token test
Remove E2E token test

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola 9ad7bda413 Align docker and e2e variable spelling
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola 5ed796499b Only bump trivy on the minor release (#11773)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Derek Nola 3720d89763 Reduce cache thrashing on E2E vagrant boxes. Don't cache for windows unit tests. (#11769)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-03-05 14:25:32 -08:00
Roberto Bonafiglia 52323cba07 Revert "Add ability to pass configuration options to flannel backend"
This reverts commit 8643576985.

Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
2025-03-05 08:05:35 +01:00
Brad Davidson b86a69470c e2e: wait for deployments before getting logs
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-20 18:16:06 -08:00
Brad Davidson 2bde933ca7 Fix curl test timeouts
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-20 18:16:06 -08:00
Brad Davidson 3f3ff12be0 Render CNI dir config whenever vars are set
RKE2 on Windows sets CNI bin dirs in node config even though embedded flannel is disabled (NoFlannel=true). We need to gate rendering this config on the vars being, set NOT on NoFlannel being false.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-20 18:16:06 -08:00
Rafael b13cb4adb2
Update to v1.30.10 (#11786)
Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com>
2025-02-14 10:21:44 -03:00
Brad Davidson d7469b84e3 Bump traefik to v2.11.20
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 14:03:13 -08:00
Brad Davidson b6ee730277 Fix FetchIngressIP error checking
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson b237f200b0 Move windows build to separate job
Don't block other linux steps on building the windows binary

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 20a9a6bfc3)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson 387535f245 Fix wasm ingress test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 04ed6c0996)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson 78f572eda1 Add windows smoke test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3aa24cdde8)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson 0d68f0e5f1 Skip netpol startup on windows instead of panicing
Netpol startup is skipped with a warning on linux if ipset support is missing, we should do the same on windows

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 96c2dd3865)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson 59d4483fba Add linux nodeSelector to local-storage and metrics-server
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 99f4f5ad12)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson 9cdcd8ed00 Fix default pause image on windows
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 85987ac23f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson 1715778fb0 Add missing windows runtime type definition
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 50326c8bca)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson 68dbea6d8b Fix windows path quoting/escaping in containerd config template
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 8aa412ed66)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson 2d30f6090e Fix containerd hosts.toml path on windows
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit bf97b8facc)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson 356470bbd4 Fix permissions checks on windows
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 838d68777f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson 921aa96c1c Replace hardcoded unix-style paths in test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit b2418ba354)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson bf9c68ec6d Remove broken unused windows test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 8f85ee3c60)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson db5f64397d Make etcd test linux-only
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 4cacf6e1c0)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson 3619be4d4b Fix linux-specific clientaccess test
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0d15457c77)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson c74f90b80f Wait for docker to start before running dapper
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 9bdab19108)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson 285e60fbb8 Bump kine for no-sqlite build fix
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 20dda23c60)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00
Brad Davidson 90d69bf311 Make intermediate bin tarball os-specific
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit d6d361ee21)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-02-10 10:16:42 -08:00