Fixed the etcd retention to delete orphaned snapshots
Signed-off-by: Vitor <vitor.savian@suse.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Fixes issue with invalid HTTP host headers over unix sockets caused by
recent releases of golang rejecting invalid header values.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Wire up a node watch to collect addresses of server nodes, to prevent adding unauthorized SANs to the dynamiclistener cert.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Fix tailscale bug with ip modes

Signed-off-by: Ikko Eltociear Ashimine <eltociear@gmail.com>

* Add support for local build and go coverage to all E2E tests
* Remove unused EXTERNAL_DB from etcd tests
* Fix private reg test
* Add coverage to tailscale
* Cleanup unnecessary "sudo" in commands
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add additonal s3 coverage clause
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Consolidate CopyFile function
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Copy to File, not destination folder
Signed-off-by: Derek Nola <derek.nola@suse.com>

---------
Signed-off-by: Derek Nola <derek.nola@suse.com>

Signed-off-by: Manuel Buil <mbuil@suse.com>

Signed-off-by: Johnatas <johnatas.santos@suse.com>

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Signed-off-by: Guilherme Macedo <guilherme@gmacedo.com>

Only configure enable-aggregator-routing and egress-selector-config-file
if required by egress-selector-mode.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Simon Kirsten <simonkirsten24@gmail.com>

Signed-off-by: Derek Nola <derek.nola@suse.com>

* ADR on secrets encryption v3
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Update adr based off design meeting discussion
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Update with acceptance
Signed-off-by: Derek Nola <derek.nola@suse.com>

---------
Signed-off-by: Derek Nola <derek.nola@suse.com>

Update flannel to v0.22.1

Update cni plugins version to v1.3.0

Signed-off-by: Manuel Buil <mbuil@suse.com>

Signed-off-by: Manuel Buil <mbuil@suse.com>

Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>
Co-authored-by: Pedro Tashima <pedro.tashima@suse.com>

Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>
Co-authored-by: Pedro Tashima <pedro.tashima@suse.com>

* Adjust default kubeconfig permissions
Signed-off-by: Derek Nola <derek.nola@suse.com>

This reverts commit 4ab01f39.
Signed-off-by: Derek Nola <derek.nola@suse.com>

Signed-off-by: Ian Cardoso <osodracnai@gmail.com>

* Don't use zgrep if apparmor is enforced for it

* Bump e2e se timeouts for reencryption time
Signed-off-by: Derek Nola <derek.nola@suse.com>

Problem:
When support for etcd was added in 39571424, generation of certificates and keys for etcd was not gated behind use of managed etcd.
Keys are generated and distributed across servers even if managed etcd is not enabled.

Solution:
Allow generation of certificates and keys only if managed etc is enabled. Check config.DisableETCD flag.
Signed-off-by: Bartossh <lenartconsulting@gmail.com>

* Add retry for clone step
Signed-off-by: Johnatas <johnatas.santos@suse.com>

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.51.0 to 1.53.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.51.0...v1.53.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add changes in k3s release doc
Signed-off-by: Johnatas <johnatas.santos@suse.com>

* Get go version from .go-version file
Signed-off-by: Johnatas <johnatas.santos@suse.com>

* Update tags output
Signed-off-by: Johnatas <johnatas.santos@suse.com>

---------
Signed-off-by: Johnatas <johnatas.santos@suse.com>

Support setting control server URL for Tailscale

This change enables the use of Headscale - open source implementation of the Tailscale control server.
Signed-off-by: Denys Smirnov <dennwc@pm.me>

* Warn that v1.28 will deprecate reencrypt/prepare
Signed-off-by: Derek Nola <derek.nola@suse.com>

Check if we are on ipv4, ipv6 or dualStack when doing tailscale

Signed-off-by: Ian Cardoso <osodracnai@gmail.com>

Fix code spell check

Signed-off-by: Manuel Buil <mbuil@suse.com>

Remove file_windows.go

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>