Commits · v1.22.9-rc3+k3s1 · Jacklull / k3s

22 Apr, 2022 1 commit
- [Release-1.22] Secrets Encryption: Add RetryOnConflict around updating nodes (#5498) · aac491c8
  Derek Nola authored Apr 22, 2022
```
* Add RetryOnConflict around updating nodes
Signed-off-by: Derek Nola <derek.nola@suse.com>
```
  aac491c8
21 Apr, 2022 1 commit

Fix issue with long-running apiserver endpoints watch (#5479) · b7c7a23e

authored Apr 21, 2022

Use ListWatch helpers to retry when the watch channel is closed.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

b7c7a23e

20 Apr, 2022 2 commits

Update Kubernetes to v1.22.9 (#5474) · 7c07af93

authored Apr 20, 2022

* Update to v1.22.9
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Update tags to k3s-io for v1.22.9
Signed-off-by: Derek Nola <derek.nola@suse.com>

7c07af93

Fix default ipv6 cidr (#5469) · d1ee2b6f
Manuel Buil authored Apr 20, 2022
```
Signed-off-by: Manuel Buil <mbuil@suse.com>
```
d1ee2b6f

19 Apr, 2022 1 commit

[Release-1.22] Add s390x arch support for k3s (#5447) · 7ea6f131

authored Apr 19, 2022

* netpol: Add dual-stack support

This change allows to define two cluster CIDRs for compatibility with
Kubernetes dual-stuck, with an assumption that two CIDRs are usually
IPv4 and IPv6.

It does that by levearaging changes in out kube-router fork, with the
following downstream release:

https://github.com/k3s-io/kube-router/releases/tag/v1.3.2%2Bk3sSigned-off-by: Michal Rostecki <vadorovsky@gmail.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add s390x arch support for k3s (#5018)

* Update docs to include s390x arch
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Add s390x drone pipeline
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Install trivy linux arch only for amd64

This is done so that trivy is not installed for s390x arch
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Add s390x arch if condition for Dockerfile.test
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Add s390x arch in install script
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Add s390x GOARCH in build script
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Add SUFFIX s390x in scripts
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Skip image scan for s390x arch
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Update klipper-lb to version v0.3.5
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Update traefik version to v2.6.2
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Update registry to v2.8.1 in tests which supports s390x
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>

* Skip compact tests for s390x arch

This is done because compact test require a previous k3s version which supports s390x and it is not available
Signed-off-by: Venkata Krishna Rohit Sakala <rohitsakala@gmail.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Increase k3s-root version to v0.10.0 which includes s390x support
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Michal Rostecki <vadorovsky@gmail.com>
Co-authored-by: Sakala Venkata Krishna Rohit <rohitsakala@gmail.com>

7ea6f131

15 Apr, 2022 11 commits

netpol: Add dual-stack support · 33d61bdb

authored Feb 23, 2022

This change allows to define two cluster CIDRs for compatibility with
Kubernetes dual-stuck, with an assumption that two CIDRs are usually
IPv4 and IPv6.

It does that by levearaging changes in out kube-router fork, with the
following downstream release:

https://github.com/k3s-io/kube-router/releases/tag/v1.3.2%2Bk3sSigned-off-by: Michal Rostecki <vadorovsky@gmail.com>

33d61bdb

Fix issue with RKE2 servers hanging on listing apiserver addresses · c33aa208
Brad Davidson authored Apr 14, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7e447692)
```
c33aa208
Print a helpful error when trying to join additional servers but etcd is not in use · 508a358d
Brad Davidson authored Apr 14, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5b2c14b1)
```
508a358d

Use core constants for cert user/group values · 8408d19b

authored Apr 04, 2022

Also update cert gen to ensure leaf certs are regenerated if other key fields change.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 99851b0f)

8408d19b

Don't print password conversion rate · 059710df

authored Apr 06, 2022

Avoids divide-by-zero when the password file is empty
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0bf7c095)

059710df

Move the apiserver addresses controller into the etcd package · 70df1cc3

authored Apr 05, 2022

This controller only needs to run when using managed etcd, so move it in
with the rest of the etcd stuff. This change also modifies the
controller to only watch the Kubernetes service endpoint, instead of
watching all endpoints in the entire cluster.

Fixes an error message revealed by use of a newer grpc client in
Kubernetes 1.24, which logs an error when the Put to etcd failed because
kine doesn't support the etcd Put operation. The controller shouldn't
have been running without etcd in the first place.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f37e7565)

70df1cc3

Fix crash on early snapshot · 50390441

authored Apr 04, 2022

Don't attempt to retrieve snapshot metadata configmap if the apiserver
isn't available. This could be triggered if the cron expression caused a
snapshot to be triggered before the apiserver is up.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 2a429aac)

50390441

Allow agents to query non-apiserver supervisors for apiserver endpoints · b61cdce8
Brad Davidson authored Mar 29, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 49544e0d)
```
b61cdce8

Add client certificate authentication support to core Authenticator · ff365142

authored Mar 28, 2022

This is required to make the websocket tunnel server functional on
etcd-only nodes, and will save some code on the RKE2 side once pulled
through.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit af0b496e)

ff365142

Redact datastore and etcd snapshot config from serialization · e0fa2972
Brad Davidson authored Mar 29, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e7437d4a)
```
e0fa2972
Bump etcd to 3.5.3-k3s1 · 856e7efe
Brad Davidson authored Apr 13, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
856e7efe

14 Apr, 2022 3 commits
- Bump containerd to v1.5.11-k3s1 · eaed65a2
  Brad Davidson authored Apr 13, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
  eaed65a2
- Merge pull request #5409 from rbrtbnfgl/wireguard-native-release1.22 · 1a09d606
  Roberto Bonafiglia authored Apr 14, 2022
```
[Release 1.22] Wireguard native flannel support
```
  1a09d606
- Fixed flannel backend helper text · c0309172
  Roberto Bonafiglia authored Apr 13, 2022
```
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
```
  c0309172
13 Apr, 2022 1 commit
- update trivy to 0.25.3 (#5426) · 0a5e0b6c
  Michal Rostecki authored Apr 13, 2022
```
Signed-off-by: Dirk Müller <dirk@dmllr.de>
```
  0a5e0b6c
11 Apr, 2022 3 commits

Updated wireguard-native options and added log message · d7e7ddf1
Roberto Bonafiglia authored Apr 07, 2022
```
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
```
d7e7ddf1
Added new flannel backend to use wireguard from flannel · e24e6446
Roberto Bonafiglia authored Apr 04, 2022
```
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
```
e24e6446

Allow using flannel wireguard backend in a custom config · d4a3edf7

authored Apr 03, 2022

Ideally we'd have fully fleshed out support for it (i.e. #5011), but
that's a potentially breaking change and taking a little while to merge.

This is a much simpler change which won't break anything, but will allow
a "Type": "wireguard" reference in the "--flannel-conf" custom config
file to work.
Signed-off-by: Euan Kemp <euank@euank.com>

d4a3edf7

08 Apr, 2022 2 commits
- Merge pull request #5399 from manuelbuil/fix_klipper-helm-ipv6 · d73772d6
  Manuel Buil authored Apr 08, 2022
```
[Release 1.22] Update helm-controller version
```
  d73772d6
- Update helm-controller version · 97af74fb
  Manuel Buil authored Apr 08, 2022
```
Signed-off-by: Manuel Buil <mbuil@suse.com>
```
  97af74fb
06 Apr, 2022 1 commit
- Merge pull request #5385 from rbrtbnfgl/fix-ipv6-url-release1.22 · 962269c0
  Roberto Bonafiglia authored Apr 06, 2022
```
[release 1.22] Fix ipv6 url
```
  962269c0
05 Apr, 2022 8 commits
- Fixed gofmt format · 15472506
  Roberto Bonafiglia authored Apr 05, 2022
```
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
```
  15472506
- Fixed included modules · 27264a45
  Roberto Bonafiglia authored Apr 05, 2022
```
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
```
  27264a45
- Fixed http URL on etcd · 29a76136
  Roberto Bonafiglia authored Mar 31, 2022
```
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
```
  29a76136
- Fixed loadbalancer in case of IPv6 addresses · ba0270c6
  Roberto Bonafiglia authored Mar 31, 2022
```
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
```
  ba0270c6
- Fixed etcd register · 80b22ded
  Roberto Bonafiglia authored Mar 30, 2022
```
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
```
  80b22ded
- Fixed client URL · 5df127ec
  Roberto Bonafiglia authored Mar 30, 2022
```
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
```
  5df127ec
- Updated localhost address on IPv6 only setup · a8fdf93e
  Roberto Bonafiglia authored Mar 29, 2022
```
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
```
  a8fdf93e
- Fixed etcd URL in case of IPv6 address · 44253bcf
  Roberto Bonafiglia authored Mar 23, 2022
```
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
```
  44253bcf
30 Mar, 2022 3 commits
- Merge pull request #5362 from luthermonson/fix-containerd-npipe-122 · 21fed356
  Luther Monson authored Mar 30, 2022
```
[1.22] Wrap containerd.New
```
  21fed356
- Skip setting up client tls when etcd server does not have tls enabled · d499e79e
  Brad Davidson authored Mar 29, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
  d499e79e
- add a wrapper around the containerd.New call to fix and pass the proper npipe connector · 4a97a7c8
  Luther Monson authored Mar 29, 2022
```
Signed-off-by: Luther Monson <luther.monson@gmail.com>
```
  4a97a7c8
28 Mar, 2022 1 commit
- Defragment etcd datastore before clearing alarms · 4cc9a48c
  Brad Davidson authored Mar 25, 2022
```
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
```
  4cc9a48c
25 Mar, 2022 1 commit

Fix etcd-only secrets encryption rotation · b0d715e0

authored Mar 24, 2022

Improve feedback when running secrets-encrypt commands on etcd-only nodes, and
allow etcd-only nodes to properly restart when effecting rotation.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e811689d)

b0d715e0

23 Mar, 2022 1 commit

Ensure that apiserver ready channel checks re-dial every time · 26ddaec2

authored Mar 23, 2022

Closing idle connections isn't guaranteed to close out a pooled connection to a
loadbalancer endpoint that has been removed. Instead, ensure that requests used
to wait for the apiserver to become ready aren't reused.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

26ddaec2