upstream/k3s
1
0
Fork 0
mirror of https://github.com/k3s-io/k3s.git synced 2026-05-27 12:18:10 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 5
4093 commits 43 branches 1057 tags 657 MiB
Commit graph

246 commits

Author SHA1 Message Date
Brad Davidson
7c6c338e2f Fix release workflow 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-12-15 19:27:56 -08:00
Brad Davidson
b27276dc81 Add job to lint all workflows on change 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-12-15 19:27:56 -08:00
Brad Davidson
a5ab12b82c Reuse airgap workflow in release 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-12-15 19:27:56 -08:00
Brad Davidson
d0052281a9 Fix arm airgap platforms 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-12-15 19:27:56 -08:00
Rafael
463678586d
[main] Update to v1.34.3-k3s1 and Go 1.24.11 (#13308)
Some checks are pending
govulncheck / govulncheck (push) Waiting to run
Details
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Details 
* Update to v1.34.3-k3s1 and Go 1.24.11

Signed-off-by: Rafael Breno <rafael_breno@outlook.com>

* Switch to custom action Go setup

Signed-off-by: Rafael Breno <rafael_breno@outlook.com>

---------

Signed-off-by: Rafael Breno <rafael_breno@outlook.com>
 2025-12-11 11:23:48 -03:00
dependabot[bot]
68749aac76
Bump actions/checkout from 5 to 6 (#13256)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Details
Install Script / build (push) Has been cancelled
Details
Install Script / Smoke Test (push) Has been cancelled
Details 
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-24 11:32:03 -08:00
Brad Davidson
96ed4393c1 Remove remaining references to drone 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-11-24 11:23:49 -08:00
thomasferrandiz
46cca2402f
Merge pull request #13216 from thomasferrandiz/add-multus-test-2
Some checks are pending
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Details 
Add multus e2e test
 2025-11-24 09:29:56 +01:00
Brad Davidson
f726966062 Clean tools from runners before tests 
Remove optional tools from runners to make space available for docker/vagrant

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-11-21 09:25:00 -08:00
Brad Davidson
74088f5175 Use docker containerd snapshotter for stable image digests 
The legacy Docker snapshotter flattens application/vnd.docker.distribution.manifest.v2+json manifests to application/vnd.oci.image.manifest.v1+json when saving. Switching to the containerd snapshotter allows us to keep the original manifest digest when pulling and saving image tarballs.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-11-21 09:25:00 -08:00
Thomas Ferrandiz
871094b5c6 Add multus e2e test 
We test that a basic deployment of the latest multus chart works
correctly.

Signed-off-by: Thomas Ferrandiz <thomas.ferrandiz@suse.com>
 2025-11-21 13:05:52 +00:00
Brad Davidson
ed57fb5e61
Fix windows build os (#13201)
Some checks failed
govulncheck / govulncheck (push) Has been cancelled
Details
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
Details 
* Pass GOOS into Dockerfile.local build args
  Fixes issue with build-windows job not actually building for windows
* Remove `go generate` from package-cli
  We no longer use codegen in this repo
* Fix go:embed path separator on Windows
* Bump hcsshim for containerd 2.1 compat on windows
* Include failing lister in error message
* Bump k3s-io/api and k3s-io/helm-controller for embedded CRD windows path fix

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-11-15 02:02:12 -08:00
Rafael
c86b66d05c
Add id-token (#13209)
Some checks failed
govulncheck / govulncheck (push) Has been cancelled
Details
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
Details 
Signed-off-by: Rafael Breno <rafael_breno@outlook.com>
 2025-11-13 17:25:11 -03:00
Rafael
8f781acff4
[main] Add Prime assets upload (#13160)
Some checks are pending
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Details 
* Add Prime assets upload

Signed-off-by: Rafael Breno <rafael_breno@outlook.com>

* fixes

Signed-off-by: Rafael Breno <rafael_breno@outlook.com>

---------

Signed-off-by: Rafael Breno <rafael_breno@outlook.com>
 2025-11-07 12:04:41 -03:00
dependabot[bot]
2459bf7c84
Bump actions/upload-artifact from 4 to 5 (#13104) 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-31 09:33:34 -07:00
Derek Nola
72ca761529 Migrate Docker Image publishing to GitHub Actions
Some checks are pending
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Details 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-10-30 11:31:47 -07:00
dependabot[bot]
9e1003029c Bump actions/download-artifact from 5 to 6
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Details
Install Script / build (push) Has been cancelled
Details
Install Script / Smoke Test (push) Has been cancelled
Details 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-29 10:30:30 +01:00
Derek Nola
602d43081e
Migrate dispatch pipeline into GitHub Actions (#13105)
Some checks are pending
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Details 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-10-28 09:13:04 -07:00
Derek Nola
cfcc9ef65e
Add docker dualstack test (#13070)
Some checks are pending
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Details 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-10-22 10:38:21 -07:00
dependabot[bot]
481cd6002a
Bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#13026) 
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.2 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](05b42c6244...4eaacf0543)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-16 09:00:23 -07:00
dependabot[bot]
65932372c7
Bump github/codeql-action from 3 to 4 (#13065) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-16 09:00:11 -07:00
dependabot[bot]
989c07f6a2
Bump actions/stale from 10.0.0 to 10.1.0 (#13025) 
Bumps [actions/stale](https://github.com/actions/stale) from 10.0.0 to 10.1.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v10.0.0...v10.1.0)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-16 09:00:03 -07:00
Ben
ade82387f7
Inclusive naming proposal (issue: #12110, Orlin Vasiliev) (#12383) 
* Inclusive naming proposal (issue: #12110, Orlin Vasiliev)

Basic renaming from 'master' to 'main' as primary branch according to https://github.com/cncf/foundation/blob/main/code-of-conduct.md#our-standards

Signed-off-by: Andrea Benini <andreabenini@gmail.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>

* Additional replacement of master with main in E2E testing, Github Action workflows

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Andrea Benini <andreabenini@gmail.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>
 2025-09-24 08:52:28 -07:00
dependabot[bot]
1e45f1de72
Bump actions/stale from 9.1.0 to 10.0.0 (#12878) 
Bumps [actions/stale](https://github.com/actions/stale) from 9.1.0 to 10.0.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v9.1.0...v10.0.0)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-09-24 08:42:16 -07:00
dependabot[bot]
626178624f
Bump aquasecurity/trivy-action from 0.32.0 to 0.33.1 (#12879) 
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.32.0 to 0.33.1.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.32.0...0.33.1)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-09-18 10:13:32 -07:00
dependabot[bot]
9c6d0eb5cd
Bump actions/github-script from 7 to 8 (#12881) 
Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-09-12 09:39:11 -07:00
dependabot[bot]
1b98629b2c
Bump actions/setup-go from 5 to 6 (#12880) 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 6.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-09-12 09:39:06 -07:00
Brad Davidson
1ae5ec3d74 Upload integration test logs on failure 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-09-03 09:52:51 -07:00
dependabot[bot]
81445d85d0 Bump actions/checkout from 4 to 5 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-27 10:43:44 -07:00
dependabot[bot]
b65f8a6185
Bump actions/download-artifact from 4 to 5 (#12735) 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-08-11 10:58:25 -07:00
dependabot[bot]
02c898dcc1
Bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 (#12588) 
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.31.0 to 0.32.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.31.0...0.32.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-07-24 11:43:32 -07:00
Derek Nola
ce15c9bfb8
Enable branch protection checks for openssf (#12640) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-07-15 08:38:45 -07:00
Derek Nola
0d96fa58fd
Migrate K3s Release Artifacts to GHA (#12606) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-07-11 09:35:24 -07:00
Derek Nola
5a29f8a24f
Remove ghcr build cache (#12602) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-07-11 09:35:13 -07:00
Derek Nola
907d03d841 Add basic codeql workflow 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-07-10 09:38:18 -07:00
Derek Nola
c3a4c8df9a
Move to more secure split trivy workflow based on labels, not comments (#12592) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-07-08 09:12:44 -07:00
Derek Nola
17525caedb Run integration tests when build-k3s.yaml is changed 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-06-11 08:07:27 -07:00
Derek Nola
f0bc228bf7 Define missing top level permissions in CI 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-06-11 08:07:27 -07:00
dependabot[bot]
d2edee79ec
Bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 (#12458) 
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.30.0 to 0.31.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.30.0...0.31.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-06-09 12:02:50 -07:00
dependabot[bot]
a724f21873
Bump ossf/scorecard-action from 2.4.1 to 2.4.2 (#12430) 
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](f49aabe0b5...05b42c6244)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-06-03 09:30:32 -06:00
Derek Nola
07171fd7e8 Build and push k3s image to GHCR 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-05-30 10:59:49 -07:00
Brad Davidson
8d8d1f43bd Fix e2e startup test 
Do more cleanup between runs, collect more logs on failure.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-05-16 09:39:27 -07:00
Derek Nola
3ce4a6352d
Build k3s overhaul (#12200) 
* Add full ci support without Dapper
* Seperate git and other version tags, improves caching on binary builds
* Use new local targets for build-k3s.yaml workflow
* Allow optional ghcr build caching
* Build binary using GHA native commands
* Use internal setup-go action for e2e.yaml
* Add emulation builds to k3s-build.yaml (for arm32 and future riscv64)
* Be consistent in k3s artifact names
* Fix package/dockerfile warnings
* Fix install script for PR installs

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-04-25 11:57:10 -07:00
dependabot[bot]
9d2ed8889e
Bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 (#11978) 
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.29.0 to 0.30.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.29.0...0.30.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-16 13:26:30 -04:00
Derek Nola
2da4775ae7 Migrate test-mods from Drone to GHA 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-04-16 09:50:25 -07:00
Derek Nola
e392278fab
Implement manual govulncheck (#12135) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-04-16 09:15:37 -07:00
Chris Wayne
b77c282dcb
Create scorecard.yml (#12128) 
Signed-off-by: Chris Wayne <chris.wayne@suse.com>
 2025-04-14 13:12:41 -04:00
Robert Sirchia
1ccfa5e428
adding in govulncheck (#12083) 
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
 2025-04-09 16:53:16 -04:00
Brad Davidson
cd4be0b8c1 Move Windows test out of Install Script workflow 
Placing this in the install script test, which only runs when specific files are changed, was preventing it from being run on code changes.

In addition to moving this into the integration workflow, fix codecov for Windows and upload data after running a test pod.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-04-09 09:25:43 -07:00
Derek Nola
7c552f89c8
Consolidate build-k3s GHA workflow for OS and ARCH (#12080) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-04-08 18:32:05 -04:00
Brad Davidson
08c6c7423b Silence vagrant progress output 
Add --no-tty flag to all `vagrant up` commands to silence the printing of box loading progress

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-04-08 15:28:41 -07:00
Derek Nola
a61e581cb3 Migrate svcpolicies E2E test to docker 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-02-28 08:46:10 -08:00
Derek Nola
380a70ac7e Expand E2E test matrix to cover all possible tests that fit on GHA 
Fix rootless test

Fix svc firewall E2E test, broken by #11711

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-02-28 08:46:10 -08:00
Brad Davidson
20133ad151 Increase e2e log verbosity and collect logs on failure 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-02-27 11:19:26 -08:00
Derek Nola
2f787dda91 Migrate E2E SecretsEncryption to Docker test 
Remove secrets encryption E2E from Drone

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-02-12 14:27:26 -08:00
Derek Nola
837558ef8b Don't run snapshotrestore on flaky arm64 runners 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-02-12 14:27:26 -08:00
Derek Nola
d0a1e94392 Migrate E2E autoimport to Docker test 
Simplify DockerNode structs
Remove autoimport from E2E
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-02-12 14:27:26 -08:00
Derek Nola
793d216d02 Migrate hardened docker test 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-02-12 14:27:26 -08:00
Derek Nola
538131b685 Migrate E2E Token test into a Docker Token test 
Remove E2E token test

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-02-12 14:27:26 -08:00
Derek Nola
303350d14e
Reduce cache thrashing on E2E vagrant boxes. Don't cache for windows unit tests. (#11769) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-02-11 11:27:16 -08:00
Brad Davidson
20a9a6bfc3 Move windows build to separate job 
Don't block other linux steps on building the windows binary

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-02-07 12:03:48 -08:00
Brad Davidson
3aa24cdde8 Add windows smoke test 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-02-07 07:46:19 -08:00
Brad Davidson
0d15457c77 Fix linux-specific clientaccess test 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-02-07 07:46:19 -08:00
Brad Davidson
5c8f2364c4 Move Windows compilation test to GH Actions and enable integration/coverage 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2025-02-07 07:46:19 -08:00
Derek Nola
bb79c2b350
Consolidate test utility functions into top level package (#11711) 
* [e2e] Convert RunCmdOnNode to method
* Consolidate e2e variables into TestConfig struct
* Consolidate docker and integration test helper functions
* E2E: Directly count daemonsets, not their pods
* Add missing Context levels for E2E tests
* Migrate e2e.ParsePods to new tests client package
* Run the go test compile test on their respective architectures

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-02-04 17:23:18 -08:00
Derek Nola
1666b5cfff
Run Docker test on Github Actions arm64 runners (#11705) 
* Build and Run Arm64 Docker Tests
* Compile go tests for both amd64 and arm64
* Use version.sh to determine channel, not git
* Consolidate docker tests into 2D matrix
* Remove old Docker test from Drone and Github Actions

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-02-04 08:29:47 -08:00
Derek Nola
031c11d369 Convert snapshotrestore from E2E to Docker test 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-01-27 11:30:42 -08:00
dependabot[bot]
419dd5b03c
Bump actions/stale from 9.0.0 to 9.1.0 (#11659) 
Bumps [actions/stale](https://github.com/actions/stale) from 9.0.0 to 9.1.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v9.0.0...v9.1.0)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-01-27 11:11:29 -08:00
Vitor Savian
7e18c69254
Add auto import images for containerd image store 
* Add auto import images

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* Fix EOF error log when importing tarball files

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* Delaying queue

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

* Add parse for images

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2025-01-09 13:15:27 -03:00
dependabot[bot]
17feb8bed1
Bump codecov/codecov-action from 4 to 5 (#11336) 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4 to 5.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-01-08 10:44:46 -08:00
Derek Nola
2f432a1cde
Upload E2E logs on failure as GHA artifacts (#11514) 
* Upload E2E journald logs as artifacts in GHA

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Improve fork information for parent extraction

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2025-01-07 09:50:39 -08:00
Derek Nola
c669600c8f
Fix Branch Name logic for Dependabot and UpdateCLI pushes to k3s-io (#11376) 
* Improve node checking for etcd docker test
* Fix branch name for dependabot and updatecli PRs

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-11-27 09:50:14 -08:00
Derek Nola
b5e2fa77a6
Convert legacy docker tests from bash to golang (#11357) 
* Convert the following Docker test from Bash to Go
    - basics
    - bootstraptoken
    - cacerts
    - compat -> skew
    - etcd
    - lazypull
    - upgrade

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add Docker go tests to GHA
* Prebuild K3s Go Tests
* Strip go test binaries to reduce size
* Handle complex branch options

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Implement basic golang tests on arm and arm64 pipelines

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-11-26 12:30:52 -08:00
dependabot[bot]
1b7dd765a5
Bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 (#11364) 
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.28.0 to 0.29.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.28.0...0.29.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-26 10:15:46 -08:00
dependabot[bot]
ff23fb57a9
Bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 (#11138) 
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.27.0 to 0.28.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.27.0...0.28.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-21 09:35:16 -07:00
dependabot[bot]
14eee80f69
Bump aquasecurity/trivy-action from 0.24.0 to 0.27.0 (#11105) 
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.24.0 to 0.27.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.24.0...0.27.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-16 12:22:17 -07:00
Derek Nola
4888376682
Fix Github Actions for Ubuntu-24.04 (#11112) 
* Fix vagrant/libvirt composite action for ubuntu-24.04

* Don't ignore changes to internal actions

* Fix unit tests for ubuntu 24.04, new lsof version

* Pin os version for unit and E2E workflows

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-10-16 12:22:07 -07:00
manuelbuil
536fa44eb0 Revert "Make svclb as simple as possible" 
This reverts commit 1befd65a0a.

Signed-off-by: manuelbuil <mbuil@suse.com>
 2024-10-15 20:30:03 +02:00
Derek Nola
a44cb16ce1
Rollback GHA to Ubuntu 22.04 (#11111) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-10-15 09:37:51 -07:00
manuelbuil
660c6052c2 Make svclb as simple as possible 
Signed-off-by: manuelbuil <mbuil@suse.com>
 2024-10-11 10:52:47 +02:00
Brad Davidson
b1a42e5d43 Add ca-cert rotation integration test 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-10-08 17:03:31 -07:00
Derek Nola
ab89363e18
Fix trivy vex line (#10970) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-10-01 15:06:49 -07:00
Guilherme Macedo
0553a1a1d9
Pass Rancher's VEX report to Trivy to remove known false-positives CVEs (#10956) 
Signed-off-by: Guilherme Macedo <guilherme@gmacedo.com>
 2024-10-01 17:20:35 -04:00
Derek Nola
2739f50d77
Trivy workflow: Checkout repo to use gh cli (#10949) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-09-25 13:20:26 -07:00
Derek Nola
97e8486032
Fix trivy report download (#10943) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-09-25 10:09:09 -07:00
Derek Nola
3a268acb78
Check k3s-io organization membership not team membership for trivy scans (#10940) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-09-24 14:37:32 -07:00
Derek Nola
6731f4a70d
Fix getMembershipForUserInOrg call (#10937) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-09-24 13:06:27 -07:00
Derek Nola
005711fad6
Breakup trivy scan and check comment author (#10935) 
* Check comment author on trivy scan
* Breakup trivy workflow for better permission security

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-09-24 12:10:31 -07:00
Derek Nola
61c7011cab
Give good report if no CVEs found in trivy (#10853) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-09-06 14:58:26 -07:00
Brad Davidson
378edb939d Tag PR image build as latest before scanning 
This is less effort than passing the tag across steps 🤷‍♂️

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-09-05 15:21:56 -07:00
Brad Davidson
3d6e4a793a Fix /trivy action running against target branch instead of PR branch 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-09-04 15:57:39 -07:00
dependabot[bot]
dacc636cf4
Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 (#10795) 
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.20.0 to 0.24.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.20.0...0.24.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-03 09:14:54 -07:00
Derek Nola
fa6940d03d
Add trivy scanning trigger for PRs (#10758) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-08-30 09:00:50 -07:00
Derek Nola
38df76708d
Fix caching name for e2e vagrant box (#10695) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-08-13 09:22:56 -07:00
Derek Nola
ac247d29cf
Update to newer OS images for install testing (#10681) 
* Update to newer OS images for install testing
* Update vagrant images used for E2E

Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-08-12 09:26:19 -07:00
Vitor Savian
3aceb85c22 Add a change for killall to not unmount server and agent directory 
Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Add recursive search and deletion of unmounted/mounted dirs in killall

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Only clean the server and agent directory if it is uninstall

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Add uninstall test to check mount points

Signed-off-by: Vitor Savian <vitor.savian@suse.com>

Add uninstall test in CI

Signed-off-by: Vitor Savian <vitor.savian@suse.com>
 2024-08-07 10:06:12 -07:00
Derek Nola
8f9ad1f992
Move test-compat to GHA (#10414) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-07-09 08:36:41 -07:00
Brad Davidson
f9130d537d Fix embedded mirror blocked by SAR RBAC and re-enable test 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2024-05-31 08:33:18 -07:00
Derek Nola
6624273a97 Fix embeddedmirror test 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-28 10:12:54 -07:00
Derek Nola
c98ca14198 Add wasm test to e2e matrix 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2024-03-28 10:12:54 -07:00