Commit graph

3674 commits

Author SHA1 Message Date
Francisco
144ddfb628 Add e2e-nightly workflow for scheduled test reporting 2026-02-03 14:06:06 -03:00
Francisco
777e294bcb Merge remote-tracking branch 'upstream/master' 2025-05-14 08:45:43 -03:00
Vitor Savian
effe6ce019 Bump wharfie to v0.7.0
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
2025-05-13 12:18:49 -03:00
bo.jiang
ee7449c3b9 docs: Remove references to deprecated Vagrantfile
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2025-05-12 14:31:00 -07:00
Brad Davidson
10e3d40bf3 Sync datastore config defaults with kine CLI
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-05-09 15:32:53 -07:00
Brad Davidson
2747770623 Bump kine and enable sqlite dbstat
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-05-09 15:32:53 -07:00
Richard Hansen
925726c84d flannel: Use custom type for network mode (IPv4, IPv6, dual-stack)
Move the `ipv4` and `ipv6` constants to their own constant
declaration.  This ensures that the `iota` expression for the `ipv4`
constant evaluates to 0, not some arbitrary value.  (`iota` evaluates
to N for the Nth constant in the constant declaration; see
<https://go.dev/ref/spec#Iota>.)  This is also more idiomatic, which
improves readability.

Also switch from incremental integers to bit flags, and use bitwise
operators for checking.  This is more idiomatic (the integer is
treated like a set of booleans), it avoids some code duplication, and
it is necessary to avoid ambiguity.  Consider the following:

    const (
    	ipv4 = iota
    	ipv6
    )

In the above, `ipv4` would have the value 0 and `ipv6` would have the
value 1.  This would make it impossible to distinguish an IPv6-only
stack from a dual-stack configuration because `ipv6` would equal
`ipv4 + ipv6`.  With bit flags this problem doesn't exist.

And put the integer holding the bit flags in a custom type with
convenience methods to improve readability.

Signed-off-by: Richard Hansen <rhansen@rhansen.org>
2025-05-09 12:51:48 -07:00
Vitor Savian
53de968676
Add generation for kube-scheduler and kube-controller-manager certs (#12285)
* Add generation for kube-scheduler and kube-controller-manager certs

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* Add new certs to the tests

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* Change cert-dir to tls-cert-file and tls-private-key-file

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* Address altName structure

Co-authored-by: Brad Davidson <brad@oatmail.org>
Signed-off-by: Vitor Savian <vitor.savian@suse.com>

---------

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
Co-authored-by: Brad Davidson <brad@oatmail.org>
2025-05-09 16:25:44 -03:00
bo.jiang
4c1f014d27 Optimize certificate status check
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2025-05-08 11:57:29 -07:00
Brad Davidson
67291090ca Add support for conditional image tarball imports
Normally K3s will import all tarballs in the image dir on startup, and
re-import any tarballs that change while it is running.

This change allows users to opt into only importing tarballs that have
changed since they were last imported, even across restarts.

This behavior is opted into by touching a `.cache.json` file in the
images dir. This file is used to track the size and mtime of the image
files when they are imported.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-05-07 15:06:14 -07:00
Brad Davidson
a8f0acbe52 Add CLI flag and config file for s3 bucket lookup type
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-05-07 11:50:22 -07:00
Brad Davidson
921e502918 Add anonymous-auth to flags gated on empty authorization-config value
Also warn if default flags are not set due to user provided config

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-05-07 10:59:27 -07:00
Brad Davidson
b15af84e4a Bump containerd/cri-dockerd/spegel/runc
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-05-07 10:20:40 -07:00
Vitor Savian
c2efae3e1c Update channel to add 1.33
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
2025-05-02 16:14:35 -03:00
Rafael
4804aedd3e
Update stable channel to v1.32.4 (#12231)
Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com>
2025-05-02 16:04:29 -03:00
Vitor Savian
0b48e363b5 Update certification renew alert to 120 days
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
2025-05-02 15:17:12 -03:00
Derek Nola
edfe8c6618
Better logging on E2E tests around metrics availability (#12198)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-05-02 10:31:23 -07:00
Vitor Savian
af51c3483a
Remove ghcr from drone (#12228)
Signed-off-by: Vitor Savian <vitor.savian@suse.com>
2025-05-01 09:29:40 -07:00
Vitor Savian
dc03cb4b3f
Update k8s version to 1.33
* Update to 1.33

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* Fix prints that broke unit tests

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* Change binary max size to 75

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* Change containerd version to fix misspelling

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* Address binary size comment

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* Update Dependencies

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* Remove dependencie not used anymore

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

---------

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
2025-04-30 04:43:37 -03:00
Derek Nola
eba91ff60e
Fix sonobuoy conformance testing (#12214)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-28 08:43:31 -07:00
Derek Nola
3ce4a6352d
Build k3s overhaul (#12200)
* Add full ci support without Dapper
* Seperate git and other version tags, improves caching on binary builds
* Use new local targets for build-k3s.yaml workflow
* Allow optional ghcr build caching
* Build binary using GHA native commands
* Use internal setup-go action for e2e.yaml
* Add emulation builds to k3s-build.yaml (for arm32 and future riscv64)
* Be consistent in k3s artifact names
* Fix package/dockerfile warnings
* Fix install script for PR installs

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-25 11:57:10 -07:00
Rafael
1d104e3795
Update to v1.32.4 (#12210)
Signed-off-by: Rafael Breno <32229014+rafaelbreno@users.noreply.github.com>
2025-04-24 22:05:56 -03:00
Brad Davidson
396f1366cc Bump spegel to v0.1.1
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-24 16:31:24 -07:00
Brad Davidson
9604f271bc Bump traefik to v3.3.6
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-21 16:11:56 -07:00
Brad Davidson
b8a705d9c2 Fix handler panic when bootstrapper returned empty peer list
Panic gets rescued by the http server, and was only visible when running in debug mode, but should be handled properly.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-18 10:20:15 -07:00
Derek Nola
0226ea511c
Address top flaky tests (#12163)
* ExternalIP E2E test: Improve clientIP checking
* E2E: Better top node error logs
* Skew test: increase deployment timeout

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-17 15:10:55 -07:00
Brad Davidson
4f17e626f3 Fix chainingBootstrapper to return the first successful address list
Avoids infinite recursion when the chain includes an agentBootstrapper with a server address that points back at this node (via join address loop or external LB)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-17 14:20:39 -07:00
Brad Davidson
3f7e6a30ce Move delegating auth middleware into common package and add MaxInFlight
Adds maximum in-flight request limits to agent join and p2p peer info
request request handlers.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-17 14:20:39 -07:00
Brad Davidson
7883918d0a Add cache to spegel p2p peerinfo handler
libp2p may make a large number of bootstrap calls during startup; serve nodes from cache to avoid excessive CPU usage.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-17 14:20:39 -07:00
Brad Davidson
097b63e588 Set kubelet read-only-port via CLI flag
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-17 14:20:27 -07:00
Derek Nola
94ba9576de Stagger e2e parallel launches
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-17 08:59:06 -07:00
Derek Nola
f8c55a1228 Remove names k3s-pause volume in cacert test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-17 08:59:06 -07:00
dependabot[bot]
9d2ed8889e
Bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 (#11978)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.29.0 to 0.30.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.29.0...0.30.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-16 13:26:30 -04:00
Euan Kemp
13b8f254c1 Bump flannel to 0.26.7
You can see upstream release notes here: https://github.com/flannel-io/flannel/releases

Signed-off-by: Euan Kemp <euank@euank.com>
2025-04-16 10:25:59 -07:00
Derek Nola
d824d5d0d6 Remove Drone amd64 and arm64 pipelines from PRs
Signed-off-by: Derek Nola <derek.nola@suse.com>

Revert "Remove Drone amd64 and arm64 pipelines from PRs"

This reverts commit 2ec62f10825ed21d026b07b47931350aa47cc29d.

x

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-16 09:50:25 -07:00
Derek Nola
2da4775ae7 Migrate test-mods from Drone to GHA
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-16 09:50:25 -07:00
Derek Nola
e392278fab
Implement manual govulncheck (#12135)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-16 09:15:37 -07:00
Brad Davidson
7a6e907ffe Bump kine for nats-server/v2 CVE-2025-30215
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-15 16:59:09 -07:00
Orlix
7b72a99ece
Add OpenSSF Scorecard badge (#12134)
Signed-off-by: Orlix <orlin@orlix.org>
2025-04-15 10:23:07 -04:00
Derek Nola
4e8d85a2e4
Split E2E Drone pipeline into matrix (#12086)
* Split drone e2e into multiple blocks, explicit virsh cleanup

* Create multiple registries once and reuse as long as they exist

Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-14 13:44:48 -07:00
Chris Wayne
b77c282dcb
Create scorecard.yml (#12128)
Signed-off-by: Chris Wayne <chris.wayne@suse.com>
2025-04-14 13:12:41 -04:00
Brad Davidson
b0bd7b3608 Sync golang.org/x pins with upstream
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 13:39:44 -07:00
Brad Davidson
f90334e207 Fix etcd socket option config
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 13:39:44 -07:00
Brad Davidson
161526ab3d Bump etcd to v3.5.21
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2025-04-11 13:39:44 -07:00
Orlix
6f744d1b64
Add Community in README.md
Adding Community section in the README.md file and moving the badges on top as they need to be more visible
2025-04-11 13:38:58 -07:00
Aaron Dewes
147a3c0daf fix: Use proper key when signing kubelet certificate
I assume this was a mistake when copying and the kubelet key should have been used here.

This bug was introduced in #11471.

Signed-off-by: Aaron Dewes <aaron@nirvati.org>
2025-04-10 19:50:44 -07:00
Derek Nola
b5704e2623 Address slow arm docker node startup
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-10 18:55:14 -04:00
Derek Nola
e4c8ae4248 chore: bump kine to v0.13.13
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-04-10 18:55:14 -04:00
github-actions[bot]
2fdc6fab07
Bump Klipper Helm and Helm Controller version (#12026)
* chore: Bump Klipper Helm and Helm Controller version

Made with ❤️️ by updatecli

* chore: Bump Klipper Helm and Helm Controller version

Made with ❤️️ by updatecli

* Fix build

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>
2025-04-10 15:00:29 -04:00
manuelbuil
9505f7ff3b Add error in certificate check
Signed-off-by: manuelbuil <mbuil@suse.com>
2025-04-10 13:22:43 +02:00