Improve feedback when running secrets-encrypt commands on etcd-only nodes, and
allow etcd-only nodes to properly restart when effecting rotation.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e811689d)

Closing idle connections isn't guaranteed to close out a pooled connection to a
loadbalancer endpoint that has been removed. Instead, ensure that requests used
to wait for the apiserver to become ready aren't reused.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

This allows secondary etcd nodes to bootstrap the kubelet before an
apiserver joins the cluster. Rancher waits for all the etcd nodes to
come up before adding the control-plane nodes, so this needs to be
handled properly.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 38706eee)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f090bf2d)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit a7878db1)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 9a480865)

Reuse the existing etcd library code to start up the temporary etcd
server for bootstrap reconcile. This allows us to do proper
health-checking of the datastore on startup, including handling of
alarms.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e4846c92)

Partial cherry-pick from 29c8b238Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3531df3f)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 555087b9)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5014c9e0)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit a1b800f0)

Several types contained redundant references to ControlRuntime data. Switch to consistently accessing this via config.Runtime instead.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 2989b8b2)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

* Populate EtcdConfig in runtime from datastore when etcd is disabled (#5222)

Fixes issue with secrets-encrypt rotate not having any etcd endpoints
available on nodes without a local etcd server.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

* Revert to old Kine naming
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Brad Davidson <brad.davidson@rancher.com>

* Add json flag for secrets-encrypt status
Signed-off-by: Derek Nola <derek.nola@suse.com>

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Update to v1.21.10
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Upgrade treafik image to 2.6.1
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Upgrade treafik image in image-list
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* add debug to download script
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Enable make generate to use dapper and standardize go and gzip versions (#4861)
Signed-off-by: Derek Nola <derek.nola@suse.com>

* fix go generate
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix deep copy generated file
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Update go.mod
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>

[Release 1.21] Fix annoying netpol heartbeat missing log

Signed-off-by: Manuel Buil <mbuil@suse.com>

[Release 1.21] Remove the iptables rules from ipmasq flannel

Signed-off-by: Manuel Buil <mbuil@suse.com>

[Release 1.21] netpol: Use kube-router as a library

Before this change, we were copying a part of kube-router code to
pkg/agent/netpol directory with modifications, from which the biggest
one was consumption of k3s node config instead of kube-router config.

However, that approach made it hard to follow new upstream versions.
It's possible to use kube-router as a library, so it seems like a better
way to do that.

Instead of modifying kube-router network policy controller to comsume
k3s configuration, this change just converts k3s node config into
kube-router config. All the functionality of kube-router except netpol
is still disabled.
Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
Signed-off-by: Manuel Buil <mbuil@suse.com>

* Check for kubeconfig flag
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add server flag to access nonlocal/nondefault k3s server (#5016)
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Update gitignore
Signed-off-by: Derek Nola <derek.nola@suse.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

* Update to v1.21.9
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Run go mod tidy with correct go version
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Update tags to k3s-io for v1.21.9
Signed-off-by: Derek Nola <derek.nola@suse.com>

[Release 1.21] Remove ip6table rules when cleaning up k3s

[Release 1.21] Add IPv6 NAT

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Backport CRD lookup fix from a5355f08Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Update images and manifests/charts for coredns, local-path-provisioner, traefik, and pause
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Kubernetes Metrics Server version upgrade with the following changes:

Remove elevated permissions cap_net_bind_service from metrics-server

Fix bad architecture metadata

Fix reporting inconsistent number of nodes, caused by using invalid Kubelet node start time metric

Fix reporting partial container metrics for pod
Signed-off-by: Farukh Khan <farukhkhan21@gmail.com>