Replaces helm-job-image flag, and allows setting other new helm-controller options (job-resources and job-tolerations)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 9b575c4e56)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
Add deprecation message in the flag description
Signed-off-by: Manuel Buil <mbuil@suse.com>
(cherry picked from commit 7595fe7b83)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
T4 reuses datastore TLS config and etcd S3 flags, but needs to not
listen when bootstrapping TLS to avoid trying to connect to the peer
without certs.
T4 only uses TLS between peers when --kine-tls is enabled.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7c0c335d68)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
Prepare uses the SANs list, so all modifications to that need to be done before preparing
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit eaddca726c)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
Allow the executor to modify node config before certs are generated, and use this to add VPN node IPs to kubelet serving cert
(cherry picked from commit f891548e32)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
Fixes issue where RKE2 event recorder events were not logged to console due to lack of logging context.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit a666b7905c)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
mux is replaced with a simple wrapper around http.ServeMux with middleware chain support
Unfortunately github.com/rootless-containers/rootlesskit/pkg/parent
still uses it so we can't drop the indirect dep yet.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 3f5eec4c4e)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
It is hidden and undocumented, but also apparently broken.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit f783052df2)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
Currently only waits on etcd and kine, as other components
are stateless and do not need to shut down cleanly.
Terminal but non-fatal errors now request shutdown via context
cancellation, instead of just logging a fatal error.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 4974fc7c24)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
When running K3s as a subprocess for reaping or logging purposes, properly wire up signals to send it SIGINT instead of just exiting immediately.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7e028854e7)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
Adds some additional functionality and prevents having to take a dep on wrangler in CLI code
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 274498fb4d)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
Changes to how we bootstrap the agent and apiserver address list have
made this unnecessary since 5014c9e was merged, and it is creating
problems due to only etcd-only nodes not using their own config.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 0ec47408e9)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
- Add testlet for new provider switch
- Handle migration between providers
- Add exception for criticalcontrolargs
Signed-off-by: Derek Nola <derek.nola@suse.com>
