* Close agentReady channel only in k3s
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* codespell check
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

[k3s-engine] Remove Disables, Skips and DisableKubeProxy from the critical configs

Signed-off-by: Manuel Buil <mbuil@suse.com>

* Update to v1.21.8
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Ignore go.mod and go.sum in codespell
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Fix cold boot restarts on secondary servers
Signed-off-by: Derek Nola <derek.nola@suse.com>

Resolve Bootstrap Migration Edge Case (#4730)

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
Signed-off-by: Brian Downs <brian.downs@gmail.com>

Signed-off-by: Brian Downs <brian.downs@gmail.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7d3447ce)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

* Include node-external-ip in serving-kubelet.crt SANs
Signed-off-by: Alexey Medvedchikov <alexeymedvedchikov@improbable.io>
(cherry picked from commit 8f389ab0)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

[k3s-engine] Verify new control plane nodes joining the cluster share the same config as cluster members

Signed-off-by: Manuel Buil <mbuil@suse.com>

* Backport secrets encrypt rotation
* Backport integration fixes for custom etcd args
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add cert rotation command (#4495)

* Add cert rotation command
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* add function to check for dynamic listener file
Signed-off-by: Brian Downs <brian.downs@gmail.com>

* Add dynamiclistener cert rotation support
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fixes to the cert rotation
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fix ci tests
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* fixes to certificate rotation command
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* more fixes
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
Co-authored-by: Brian Downs <brian.downs@gmail.com>

* Upgrade dynamic listener
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
Co-authored-by: Brian Downs <brian.downs@gmail.com>

* Changed to exposing the default parser
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Improved cleanup for etcd unit test
Signed-off-by: Derek Nola <derek.nola@suse.com>

* etcd snapshot functionality enhancements (#4453)
Signed-off-by: Chris Kim <oats87g@gmail.com>

* feat: add option to disable s3 over https
Signed-off-by: Chris Kim <oats87g@gmail.com>
Co-authored-by: Devin Buhl <devin.kray@gmail.com>

* Bump containerd to v1.4.12-k3s1
* Bump golang to 1.16.10 and sonobuoy to 0.55.0
* Change timeout to 60m
Signed-off-by: Chris Kim <oats87g@gmail.com>

* Update to v1.21.7
Signed-off-by: Chris Kim <oats87g@gmail.com>

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Remove skip warning
* Add warning back in but without value
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Match to last After keyword for parser (#4383)
* Made parser able to skip over subcommands
* Fix to allow etcd-snapshot to use config file with flags that are only used with k3s server. (#4464)
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add etcd extra args support for K3s
Signed-off-by: Chris Kim <oats87g@gmail.com>

* Add etcd custom argument integration test
Signed-off-by: Chris Kim <oats87g@gmail.com>

* Redux: Enable K3s integration test to run on existing cluster (#3905)

* Made it possible to run int tests on existing cluster
Signed-off-by: dereknola <derek.nola@suse.com>
Signed-off-by: Chris Kim <oats87g@gmail.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>

Since we now start the server's agent sooner and in the background, we
may need to wait longer than 30 seconds for the apiserver to become
ready on downstream projects such as RKE2.

Since this essentially just serves as an analogue for the server's
apiReady channel, there's little danger in setting it to something
relatively high.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 199424b6)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 29c8b238)

Add ability to reconcile bootstrap data between datastore and disk (#3398)

* updating to new signals package in wrangler
Signed-off-by: Luther Monson <luther.monson@gmail.com>

Required to support apiextensions.v1 as v1beta1 has been deleted. Also
update helm-controller and dynamiclistener to track wrangler versions.
Signed-off-by: Luther Monson <luther.monson@gmail.com>
Co-authored-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3da1bb3a)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5acd0b90)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3fe460d0)