* Update to v1.21.5
Signed-off-by: Chris Kim <oats87g@gmail.com>

Signed-off-by: Chris Kim <oats87g@gmail.com>

Signed-off-by: Chris Kim <oats87g@gmail.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Also honor node-ip when adding the node address to the SAN list, instead
of hardcoding the autodetected IP address.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

* Fix condition for adding kubernetes endpoints
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Fix condition for adding kubernetes endpoints
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Reset load balancer state during restoraion
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

* Fix URL pruning when joining an etcd member

Problem:
Existing member clientURLs were checked if they contain the joining
node's IP. In some edge cases this would prune valid URLs when the
joining IP is a substring match of the only existing member's IP.
Because of this, it was impossible to e.g. join 10.0.0.2 to an existing
node that has an IP of 10.0.0.2X or 10.0.0.2XX:

level=fatal msg="starting kubernetes: preparing server: start managed database:
joining etcd cluster: etcdclient: no available endpoints"

Solution:
Fixed by properly parsing the URLs and comparing the IPs for equality
instead of substring match.
Signed-off-by: Malte Starostik <info@stellaware.de>
(cherry picked from commit b23955e8)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

* account for an s3 folder when listing objects

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Fix to allow non-root users access to storage volumes. (#3714)

* Fix to prevent non-root users from accessing storage directory, while allowing non-root users access to subdirectories.
Signed-off-by: dereknola <derek.nola@suse.com>

[Release-1.21] Fix multiple bootstrap keys found

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

migrate empty string key properly
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

simplifying the code
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

migrate old token key format
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

fix warning msg
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

replace error with warn in delete
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

more fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

more fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: dereknola <derek.nola@suse.com>

[release-1.21] Upgrade k3s-root version

Linked issue: https://github.com/k3s-io/k3s/issues/3633Signed-off-by: Manuel Buil <mbuil@suse.com>

* Bump golang to 1.16.6
* Update to v1.21.3
Signed-off-by: Chris Kim <oats87g@gmail.com>

* Fix storing bootstrap data with empty token string (#3422)

* Fix storing bootstrap data with empty token string
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* delete node password secret after restoration

fixes to bootstrap key

vendor update
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix comment
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix typo
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* more fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* typos
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Removing dynamic listener file after restoration
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* go mod tidy
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix a runtime core panic
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* update kine
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Fix calling delete in kine
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit a7d1159b)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit ea2cd6d7)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6e48ca9b)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 6ef00009)

* prevent snapshot save when snapshots are disabled

Not bumping runc in go.mod yet, as upstream Kubernetes still requires
runc/libcontainer v1.0.0-rc95
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Chris Kim <oats87g@gmail.com>

[release-1.21] Dispatch to rancher/system-agent-installer-k3s when tagged

Signed-off-by: Chris Kim <oats87g@gmail.com>

* Bump helm-controller to v0.10.1
* Bump rancher/klipper-helm image in airgap image-list.txt
* go mod vendor
* Fix spelling to satisfy codespell check

* Update embedded kube-router
Signed-off-by: dereknola <derek.nola@suse.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Chris Kim <oats87g@gmail.com>

Signed-off-by: Chris Kim <oats87g@gmail.com>

Signed-off-by: Chris Kim <oats87g@gmail.com>