Signed-off-by: Derek Nola <derek.nola@suse.com>

* Update to v1.28.5
Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>

* Update Golang to 1.20.12
Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>

---------
Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>
Co-authored-by: Pedro Tashima <pedro.tashima@suse.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Added default runtime flag
Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* update stable channel to v1.27.8+k3s2
Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>

* update stable channel to v1.28.4+k3s2
Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>

---------
Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>
Co-authored-by: Pedro Tashima <pedro.tashima@suse.com>

Signed-off-by: Manuel Buil <mbuil@suse.com>

Signed-off-by: Manuel Buil <mbuil@suse.com>

Signed-off-by: Pedro Tashima <pedro.tashima@suse.com>
Co-authored-by: Pedro Tashima <pedro.tashima@suse.com>

remove s390x steps temporarily since runners are disabled

Signed-off-by: Thomas Ferrandiz <thomas.ferrandiz@suse.com>

Signed-off-by: Johnatas <johnatas.santos@suse.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

While some implementations may support it, it appears that most don't,
and some may in fact return an error if it is requested.

We already stat the object to get the metadata anyway, so this was
unnecessary if harmless on most implementations.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Reverts part of the change from 7d38b4a3

Pipeline dependencies are apparently broken, and the e2e pipeline has
been getting skipped whenever any other pipeline fails. Ex:
https://drone-pr.k3s.io/k3s-io/k3s/7853Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Vitor <vitor.savian@suse.com>

Also:
* Replaces labeled for/continue RETRY loops with wait helpers for improved readability
* Pulls secrets and nodes from cache for node password verification
* Migrate nodepassword tests to wrangler mocks for better code reuse
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Derek Nola <derek.nola@suse.com>

* add more improves for patch releases
Signed-off-by: Johnatas <johnatas.santos@suse.com>

* a simple detail
Signed-off-by: Johnatas <johnatas.santos@suse.com>

---------
Signed-off-by: Johnatas <johnatas.santos@suse.com>

* Disable helm CRD installation for disable-helm-controller
    The NewContext package requires config as input which would
    require all third-party callers to update when the new go module
    is published.
    
    This change only affects the behaviour of installation of helm
    CRDs. Existing helm crds installed in a cluster would not be removed
    when disable-helm-controller flag is set on the server.
    
    Addresses #8701
* address review comments
* remove redundant check
Signed-off-by: Harsimran Singh Maan <maan.harry@gmail.com>

* Tweaked order of ingress IPs in ServiceLB
    Previously, ingress IPs were only string-sorted when returned
    Sorted by IP family and string-sorted in each family as part of
    filterByIPFamily method
* Update pkg/cloudprovider/servicelb.go
* Formatting
Signed-off-by: Jason Costello <jason@hazy.com>
Co-authored-by: Brad Davidson <brad@oatmail.org>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Omit snapshot list configmap entries for snapshots without extra metadata; reduce log level of warnings about missing s3 metadata files.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

* Fix wrong warning from restorecon in install script
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

* Fix wrong warning from restorecon in install script
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

---------
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Signed-off-by: Derek Nola <derek.nola@suse.com>

Signed-off-by: Samuel Mutel <12967891+smutel@users.noreply.github.com>

* add node flag disable-agent-lb
* add agent flag disable-apiserver-lb
Co-authored-by: Brad Davidson <brad@oatmail.org>
Signed-off-by: chenk008 <kongchen28@gmail.com>

Problem:
Configuring qos-class features in containerd requres a custom containerd configuration template.

Solution:
Look for configuration files in default locations and configure containerd to use them if they exist.
Signed-off-by: Oliver Larsson <larsson.e.oliver@gmail.com>

Ref: https://github.com/k3s-io/kine/releases/tag/v0.11.0Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Thorsten Klein <tk@thklein.io>

Signed-off-by: leke-ariyo <lekeariyo2015@gmail.com>

Signed-off-by: Manuel Buil <mbuil@suse.com>

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>

Create a generic helper function that finds extra containerd runtimes.
The code was originally inside of the nvidia container discovery file.
Signed-off-by: Flavio Castelli <fcastelli@suse.com>

Discover the containerd shims based on runwasi that are already
available on the node.

The runtimes could have been installed either by a package manager or by
the kwasm operator.
Signed-off-by: Flavio Castelli <fcastelli@suse.com>

The containerd configuration on a Linux system now handles the nvidia
and the WebAssembly runtimes.
Signed-off-by: Flavio Castelli <fcastelli@suse.com>

---------
Signed-off-by: Flavio Castelli <fcastelli@suse.com>

Signed-off-by: Vitor Savian <vitor.savian@suse.com>