linux/meta-virtualization.git/recipes-containers/k3s/src_uri.inc, branch master-next

k3s: convert to go-mod-vcs based build

2025-12-09T01:57:44+00:00

Convert k3s from the old vendor/modules.txt approach to the new go-mod-vcs build system that fetches Go modules via git. Changes: - Update k3s_git.bb to inherit go-mod-vcs class - Add go-mod-git.inc with SRC_URI entries for all module git repos - Add go-mod-cache.inc with module path mappings - Remove old src_uri.inc, relocation.inc, and modules.txt - Update to k3s v1.34.1+k3s1 The go-mod-vcs class will: 1. Fetch all module sources via git (defined in go-mod-git.inc) 2. Build GOMODCACHE with proper zip files and hashes 3. Enable fully offline, reproducible Go module builds This eliminates the need for vendored dependencies or network access to Go module proxies during the build. Signed-off-by: Bruce Ashfield

metadata: src_uri.inc: add whitespace around assignments

2025-04-03T17:56:53+00:00

With: https://lists.openembedded.org/g/bitbake-devel/message/17508 there are many WARNINGs from this layer Signed-off-by: Martin Jansa Signed-off-by: Bruce Ashfield

Reapply "k3s: WIP: [needs newer go]: not for merge: upgrade"

2025-03-13T18:37:50+00:00

This reverts commit fd1d4c65e4103141921ab66cf44d20f759be9b80.

Revert "k3s: WIP: [needs newer go]: not for merge: upgrade"

2025-01-17T19:17:09+00:00

This reverts commit b2a271ea4d9c0703812bee1f00dd2735e4ae8afc.

k3s: WIP: [needs newer go]: not for merge: upgrade

2025-01-17T19:17:09+00:00

Signed-off-by: Bruce Ashfield

k3s: update to v1.31.1+k3s1

2024-10-03T01:28:52+00:00

Bumping k3s to version v1.31.1+k3s1, which comprises the following commits: 452dbbc14c update kubernetes to v1.31.1-k3s3 (#10910) 9ae2c39004 Update Kubernetes to v1.31.1 (#10895) d926e69073 Fix hosts.toml header var 2caa785e17 Only clean up containerd hosts dirs managed by k3s 4c8ef7f477 Fix rotateca validation failures when not touching default self-signed CAs 0c8d3c0d58 Bump helm-controller for skip-verify/plain-http and updated tolerations db3cf9370e Bump containerd to v1.7.21, runc to v1.1.14 28a1fd0302 Update coredns to 1.11.3 and metrics-server to 0.7.2 944b3b2830 Bump traefik to v2.11.8 703e7697b0 Tag PR image build as latest before scanning 88d5576be6 Fix /trivy action running against target branch instead of PR branch 9c537cb705 Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 (#10795) be60661f18 Add trivy scanning trigger for PRs (#10758) e0c4e60171 Update CNI plugins version 3923e0c699 Cover edge case when on new minor release for E2E upgrade test (#10781) 8bfcfd70cc Fix deploy latest commit on E2E tests (#10725) e8de533e90 Remove secrets encryption controller (#10612) 34be6d96d1 Update kubernetes to v1.31.0-k3s3 (#10780) c7468edbe7 Bump go dependencies to match upstream 1.31 ebbb109840 Update VERSION_K8S to handle any k3s revision f5c6472b16 Bump Kine to v0.12.0 d358a89171 Fix secrets-encrypt metrics 178aadbe20 Add k3s-io/kubernetes tags 5087240e32 Downgrade Microsoft/hcsshim to v0.8.26 8cbcbcd044 go generate 20b50426ab Update to v1.31.0 876d54cf49 chore: Bump Trivy version (#10670) 518276fb77 adding MariaDB to README.md (#10717) 649678bd89 Fix k3s-killall.sh support for custom data dir 38df76708d Fix caching name for e2e vagrant box (#10695) ae0d79c7ea Update to v1.30.3-k3s1 and Go 1.22.5 (#10536) 019b0afdd8 Fix: Add $SUDO prefix to transactional-update commands in install script (#10531) 22fb7049bd Add tolerations support for DaemonSet pods daf0094cc7 Bump helm-controller to v0.16.3 to drop Helm v2 support ac247d29cf Update to newer OS images for install testing (#10681) 0ee714d62b Bump containerd to v1.7.20 (#10659) acb71ee379 Allow Amazon Linux 2 rpm installs 79ec016b6d Allow kylin V10 rpm installs 8ff7d162cc Allow fedora iot rpm installs 45c04f3502 Allow Amazon Linux 2023 rpm installs 3aceb85c22 Add a change for killall to not unmount server and agent directory 82ba778a86 bump docker/docker to v25.0.6 38e8b01b8f update stable channel to v1.30.3+k3s1 (#10647) bffdf463e1 Fix cloudprovider controller name e168438d44 Wire lasso metrics up to common gatherer e2179aa957 Update pkg/cluster/managed.go 3ec086f6f7 Update pkg/secretsencrypt/config.go e4f3cc7b54 remove deprecated use of wait functions e514940020 Fix inconsistent loading of config dropins when config file does not exist 9111b1f77e Add K3S_DATA_DIR as env var for --data-dir flag a26a5ab1d7 Don't set K3S_DATA_DIR env var 59e0761043 Use higher QPS for secrets reencryption (#10571) a70157c12e Allow Pprof and Superisor metrics in standalone mode (#10576) ecff337e00 Enhance E2E Hardened option (#10558) d4c3422a85 Fix ipv6 sysctl required by non-ipv6 LoadBalancer service 21611c5665 Cap length of generated name used for servicelb daemonset 891e72f90f Update secretsencrypt pagination c2216a62ad Use pagination when retrieving etcd snapshot list 37830fe170 Don't use server and token values from config file for etcd-snapshot commands cb6bf74bc4 Add dial duration to debug error message 118acabec2 Fix IPv6 primary node-ip handling 9841517457 Fix agents removing configured supervisor address 9d0c2e0000 Fix reentrant rlock in loadbalancer.dialContext b999a5b23d Bump kine to v0.11.11 58ab25927f For E2E upgrade test, automatically determine the channel to use (#10461) c36db53e54 Add etcd s3 config secret implementation 5508589fae chore: Bump Trivy version eb8bd15889 Ensure remotedialer kubelet connections use kubelet bind address a0b374508e Bump Local Path Provisioner version (#10394) 0b417385a4 chore: Bump golang:alpine version f6942f3de4 Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7 b045465178 Add data-dir to uninstall and killall scripts d1709d60ce Fix INSTALL_K3S_PR support 047664b610 Bump k3s-root to v0.14.0 4204248bc3 Check for bad token permissions when install via PR (#10387) 8f9ad1f992 Move test-compat to GHA (#10414) Signed-off-by: Bruce Ashfield

k3s: update to v1.30.2+k3s2

2024-07-15T14:02:19+00:00

Bumping k3s to version v1.30.2+k3s2-2-g16321f2554, which comprises the following commits: faeaf1b01b Update flannel to v0.25.4 and fixed issue with IPv6 mask a08ac6fcdc update stable channel to v1.29.6+k3s1 (#10417) aa4794b372 Replace 1-weight semaphore on snapshots with simple mutex b4d4ed8f01 Fix agent supervisor port using apiserver port instead 9af17d2997 Update Kubernetes to v1.30.2 (#10349) f10cb29534 fix typo, use rancher/permissions c0450a2cb4 Fix race condition panic in loadbalancer.nextServer cff6f7aa1d Expand GHA go caching to includ newest release branch (#10307) d9b8ba8d71 Add snapshot retention etcd-s3-folder fix 043b1eac5d Add test for `isValidResolvConf` (#10302) df5db28a68 Add ADR for support for etcd s3 config secret (#9364) 1661f1024a Fix bug that caused agents to bypass local loadbalancer 79ba10f5ec fix: Use actual warningPeriod in certmonitor 1268779ea0 Bump Local Path Provisioner version (#10268) f9130d537d Fix embedded mirror blocked by SAR RBAC and re-enable test 7a0ea3c953 Add write-kubeconfig-group flag to server (#9233) 307f07bd61 Fix issue caused by sole server marked as failed under load ed23a2bb48 Fix netpol crash when node remains tained unintialized f2e7c01acf chore: Bump Trivy version 4cb4542c3a Bump ubuntu from 22.04 to 24.04 in /tests/e2e/scripts 84b578ec74 Use busybox tar to avoid issues with fchmodat2 on arm 86875c97bb Bump alpine from 3.18 to 3.20 in /package de4cda57e6 Bump alpine from 3.18 to 3.20 in /conformance 2eca3f1e2c Update golangci-lint to stop using deprecated skip files/dirs f8e0648304 Convert remaining http handlers over to use util.SendError ff679fb3ab Refactor supervisor listener startup and add metrics 3d14092f76 Fix issue with k3s-etcd informers not starting eb192197eb Updating the script binary_size_check to complete the command name by adding .exe extension to the k3s binary name to make it available to run stat command 6683fcdb65 Bump klipper-helm image for tls secret support c2738231ec update channel server for may 2024 (#10137) 3f62ec3207 Add extra log in e2e tests 99f543a2d4 fix: use absolute path 86b2554772 test: copy vpn-auth-file to guest b8f101fd89 test: increment agentCount ab29054887 test: use absolute path to auth file a8f88aa9e5 test: add agent with auth file 6dcd52eb8e Use TrafficManager interface when calling flannel af7bcc3900 Bump flannel version to v0.25.2 aadec85501 Fix go.mod 6fcaad553d allow helm controller set owner reference 6886c0977f Follow directory symlinks in auto deploying manifests (#9288) 3e48386c6e git_workflow filename correction c1cb5d63b9 add missing kernel config check f24ba9d3a9 Validate resolv.conf for presence of nameserver entries 2669d67a9b Bump kine to v0.11.9 to fix pagination afdcc83afe bump minio-go to v7.0.70 423675b955 Create ADR for branching strategy (#10147) aa36341f66 Update kube-router version to v2.1.2 5a0162d8ee Drop check for legacy traefik v1 chart 37f97b33c9 Add support for svclb pod PriorityClassName b453630478 Update local-path-provisioner helper script 095ecdb034 Fix issue with local traffic policy for single-stack services on dual-stack nodes. e8950a0a3b Fix issue installing artifacts from builds with multiple runs 5cf4d75749 Bump spegel version bf8b15e7ae bump etcd to v3.5.13 aaa578785c Bump containerd to v1.7.17 30999f9a07 Switch stargz over to cri registry config_path 7374010c0c Use fixed stream server bind address for cri-dockerd 5f6b813cc8 Add WithSkipMissing to not fail import on missing blobs 811de8b819 Fix bug when using tailscale config by file 80978b5b9a Update to v1.30.1 (#10105) 1d22b6971f windows changes 1cd7986b50 Update channels with 1.30 (#10097) dba30ab21c Replace deprecated ruby function 14549535f1 Fix e2e tests (#10061) 6531fb79b0 Deprecate pod-infra-container-image kubelet flag (#7409) 144f5ad333 Kubernetes V1.30.0-k3s1 (#10063) fe7d114c6a Bump E2E opensuse leap to 15.6, fix btrfs test (#10057) 0981f0069d Add E2E Split Server to Drone, support parrallel testing in Drone (#9940) 5c94ce2cf8 update stable channel to v1.29.4+k3s1 (#10031) 94e29e2ef5 Make /db/info available anonymously from localhost d3b60543e7 Fix 10 second etcd-snapshot request timeout 5b431ca531 Fix on-demand snapshots not honoring folder d973fadbed Update to v1.29.4 (#9960) 06b6444904 Add startup testlet on preloaded images (#9941) 4e26ee1f84 Match setup-go caching key in GitHub Actions (#9890) 81cd630f87 Update kube-router to v2.1.0 c59820a52a Allow LPP to read helper logs (#9834) 3f906bee79 Update packaged manifests b10cd8fe28 Bump latest to v1.29.3+k3s1 4cc73b1fee Actually fix agent certificate rotation 08f1022663 Don't log 'apiserver disabled' error sent by etcd-only nodes 7d9abc9f07 Improve etcd load-balancer startup behavior fe465cc832 Move etcd snapshot management CLI to request/response 0792461885 Bump containerd and cri-dockerd a064ae2f17 Add quotes to avoid useless updatecli updates 60248c42de Add supervisor cert/key to rotate list 9846a72e92 Bump spegel to v0.0.20-k3s1 (#9863) 0e118fe6d3 fix: agent volume in example docker compose (#9838) f2961fb5d2 Add workaround for containerd hosts.toml bug 49414a8def chore: Bump Trivy version (#9840) 52712859c5 Add updatecli policy to update k3s-root 7f659759dd Add certificate expiry check and warnings 6624273a97 Fix embeddedmirror test 93bcaccad1 E2E setup: Only install jq when we need it c98ca14198 Add wasm test to e2e matrix 6a42c6fcfe Remove old pinned dependencies (#9806) 14f54d0b26 Transition from deprecated pointer library to ptr (#9801) 5d69d6e782 Add tls for kine c51d7bfbd1 Add health-check support to loadbalancer edb0440017 Fix etcd snapshot reconcile for agentless nodes 7474a6fa43 Add /etc/passwd and /etc/group to k3s docker image 6c52235848 update channel server (#9808) c47c85e5da Move to ubuntu 23.10 for E2E tests (#9755) b5d0d4ee21 Bump Trivy version (#9780) 41377540fd Use ubuntu latest for better golang caching keys (#9711) 5461c3e1c1 Bump k3s-root 3f649e3bcb Add a new error when kine is with disable apiserver or disable etcd f099bfa508 Fix error when image has already been pulled 65cd606832 Respect cloud-provider fields set by kubelet d7cdbb7d4d Send error response if member list cannot be retrieved 7a2a2d075c Move error response generation code into util 8aecc26b0f Update to v1.29.3-k3s1 and Go 1.21.8 (#9747) bba3e3c66b Fix wildcard entry upstream fallback 364dfd8b89 Fix flaky check in btrfs test 21c170512c Fix e2e vagrant cacheing aea81c0822 Run docker tests in E2E GH Action ec5d34dac0 remove repetitive words (#9671) fe2ca9ecf1 Warn and suppress duplicate registry mirror endpoints 9bd4c8a9fc Bump upload and download actions to v4 (#9666) 2a091a693a Bump metrics-server to v0.7.0 1c8be1d011 Improve E2E Aftersuite cleanup af4c51bfc3 Move to ubuntu 2204 for all E2E tests da7312d082 Convert snapshotter test in e2e test d022a506d5 Migrate E2E tests to GitHub Actions 75ccaf9942 Allow non-sudo vagrant 6f331ea7b5 Include flannel version in flannel cni plugin version d37d7a40da Bump Trivy version (#9528) 88c431aea5 Adjust first node-ip based on configured clusterCIDR 1fe0371e95 Improve tailscale e2e test 82cfacb2f3 Update contrib/util/check-config.sh ce0765c9f8 Rename `RAW_OUTPUT` -> `NO_COLOR` ff7cfa2235 Disable color outputs using RAW_OUTPUT env var 59c724f7a6 Fix wildcard with embbeded registry test f82d438f39 e2e tests: cover WebAssembly integration 64e4f0e6e7 fix: use correct wasm shims names 2c4773a5aa chore(deps): Remediating CVEs found by trivy; CVE-2023-45142 on otelrestful and CVE-2023-48795 on golang.org/x/crypto (#9513) 091a5c8965 Don't register embedded registry address as an upstream registry b5a4846e9d Remove filtering of wildcard mirror entry 84a071a81e Add env var to allow spegel mirroring of `latest` tag 26feb25c40 Bump spegel to v0.0.18-k3s4 88d30f940d Use and version flannel/cni-plugin properly 0b3593205a Move snapshot-retention to EtcdSnapshotFlags in order to support loading from config 3576ed4327 Clean up snapshotDir create/exists logic b164d7a270 Fix additional corner cases in registries handling 29c73e6965 Fix setup-go typos (#9634) 935ad1dbac Move docker tests into tests folder (#9555) 138a107f4c Reenable Install and Snapshotter Testing (#9601) 81a60de256 update stable channel to v1.28.7+k3s1 (#9615) 109e3e454c Bump helm-controller/klipper-helm versions 82432a2df7 Fix issue with etcd node name missing hostname 513c3416e7 Tweak netpol node wait logs be569f65a9 Fix NodeHosts on dual-stack clusters 8c83b5e0f3 Rootless mode also bind service nodePort to host for LoadBalancer type 3e948aa0d5 Correct formatting of GH PR sha256sum artifact (#9472) 8f777d04f8 Better GitHub CI caching strategy for golang (#9495) 736fb2bc8d Add an integration test for flannel-backend=none 3b4f13f28d Update klipper-lb image version fa37d03395 Update install test OS matrix (#9480) 922c5a6bed Unit Testing Matrix and Actions bump (#9479) 57e11c72d1 Testing ADR (#9562) 86f102134e Fix netpol startup when flannel is disabled fae0d99863 Use 3/2/1 cluster for split role test f90fd7b744 Change default number of etcd nodes in E2E splitserver test fae41a8b2a Rename AgentReady to ContainerRuntimeReady for better clarity 91cc2feed2 Restore original order of agent startup functions 1c1746114c remove e2e logs drone step (#9517) 085ccbb0ac Fix drone publish for arm (#9503) 3e13e3619c Update Kubernetes to v1.29.2 (#9493) de825845b2 Bump kine and set NotifyInterval to what the apiserver expects 0ac4c6a056 Expose rootless containerd socket directories for external access 14c6c63b30 Expose rootless state dir under ~/.rancher/k3s/rootless e3b237fc35 Don't verify the node password if the local host is not running an agent 701e7e45ce Fix iptables check when sbin isn't in user PATH fa11850563 Readd `k3s secrets-encrypt rotate-keys` with correct support for KMSv2 GA (#9340) cfc3a124ee [Testing]: Test_UnitApplyContainerdQoSClassConfigFileIfPresent (Created) (#8945) cc04edf05f Update Kube-router to v2.0.1 a36cc736bc allow executors to define containerd and docker behavior b1323935dc Add codcov secret for integration tests on Push (#9422) 753c00f30c Consistently handle component exit on shutdown 9e076db724 Bump cri-dockerd e9cec46a23 Runtimes refactor using exec.LookPath f9ee66f4d8 Changed how lastHeartBeatTime works in the etcd condition 358c4d6aa9 build: Align drone base images (#8959) 950473e35f Bump flannel version 8224a3a7f6 Fix ipv6 endpoint address selection for on-demand snapshots 888f866dae Fix issue with coredns node hosts controller 77ba9904d1 Bump CNI plugins to v1.4.0 6ec1926f88 Add check for etcd-snapshot-dir and fix panic in Walk 82e3c32c9f Retry startup snapshot reconcile 4005600d4e Fix excessive retry on snapshot reconcile 6a57db553f update channel (#9388) 5c92345423 Bump codecov/codecov-action from 3 to 4 (#9353) a324146b76 Bump Trivy version (#9237) fcd1108e73 Add ability to install K3s PR Artifact from GitHub (#9185) f249fcc2f1 Bump Local Path Provisioner version (#8953) 57482a1c1b Bump helm-controller to fix issue with ChartContent c635818956 Bump runc and helm-controller versions 97a22632b9 gofmt config_test.go 29848dea3d Fix issues with certs.d template generation 2d98c44fb3 Delete old stalebot cef7e9e2dc New stale action d8907ce62c Update to v1.29.1 (#9259) 9a70021a9e Error getting node in setEtcdStatusCondition c87e6e5f7e Move proxy dialer out of init() and fix crash 5303aa60e9 Fix nonexistent dependency repositories (#9213) 76fa022045 Enable network policy controller metrics c5a299d0ed Bump quic-go for CVE-2023-49295 6072476432 Add e2e test for embedded registry mirror 37e9b87f62 Add embedded registry implementation ef90da5c6e Add server CLI flag and config fields for embedded registry b8f3967ad1 Add ADR for embedded registry 77846d63c1 Propagate errors up from config.Get 16d29398ad Move registries.yaml load into agent config 5c99bdd9bd Pin images instead of locking layers with lease df5e983fc8 add e2e startup test for rootless k3s (#8383) 64dbbba996 update s3 e2e test (#9025) 4a92ced8ee Handle etcd status condition when cluster reset and disable etcd 8d2c40cdac Use `ipFamilyPolicy: RequireDualStack` for dual-stack kube-dns (#8984) ac8fe8de2b fix: update trivy from 0.46.1 to 0.48.1 (#8812) 6330e26bb3 Wait for taint to be gone in the node before starting the netpol controller 102ff76328 Print error when downloading file error inside install script (#6874) eae221f9e5 Fix OS PRETTY_NAME on tagged releases b297996b92 Add runtime checking of golang version 5fe074b540 Add more paths to crun runtime detection (#9086) c45524e662 Add support for containerd cri registry config_path 319dca3e82 Fix nil map in full snapshot configmap reconcile db7091b3f6 Handle logging flags when parsing kube-proxy args 1e663622d2 Fix the OTHER log message that prints the wrong variable 08ccea5cb6 Fix install script checksum 9d21b8a135 add system-agent-installer-k3s step to ga release (#9153) a7fe1aaaa5 Dockerfile.dapper: set $HOME properly 30449e0128 Add 2>dev/null when checking nm-cloud systemd unit 0ad5d65a1e Added support for env *_PROXY variables for agent loadbalancer (#9118) a27d660a24 Add ServiceLB support for PodHostIPs FeatureGate baaab250a7 Silence SELinux warning on INSTALL_K3S_SKIP_SELINUX_RPM (#8703) aca1c2fd11 Add a retry around updating a secrets-encrypt node annotations (#9039) bbd68f3a50 Rebase & Squash (#9070) c7a8eef977 update stable channel to v1.28.5+k3s1 and add v1.29 channel (#9110) d87851d46e chore: Update Code of Conduct to Redirect to CNCF CoC (#9104) 9d9fbf4ff4 Bump actions/setup-go from 4 to 5 (#9036) 798eecf112 chore: Update sonobuoy image versions (#8910) 3190a5faa2 Remove rotate-keys subcommand (#9079) 9411196406 Update flannel to v0.24.0 and remove multiclustercidr flag (#9075) 7101af36bb Update Kubernetes to v1.29.0+k3s1 (#9052) bf3f29f9e8 Only publish to code_cov on merged E2E builds (#9051) 231cb6ed20 Remove GA feature-gates (#8970) Signed-off-by: Bruce Ashfield

k3s: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}

2024-05-29T13:16:56+00:00

As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield

k3s: update to v1.28.7

2024-03-15T17:17:19+00:00

Generated with: ./scripts/oe-go-mod-autogen.py --repo https://github.com/rancher/k3s.git --rev v1.28.7+k3s1 plus one manual modification to relocation.inc: - sigs.k8s.io/kustomize/kustomize/v5:sigs.k8s.io/kustomize/kustomize/v5:force + sigs.k8s.io/kustomize/kustomize/v5:sigs.k8s.io/kustomize/kustomize/v5/kustomize:force Bumping k3s to version v1.28.7+k3s1, which comprises the following commits: 051b14b248 Fix netpol startup when flannel is disabled 4c1b91e3f9 Use 3/2/1 cluster for split role test 16ad3bc39c Change default number of etcd nodes in E2E splitserver test 9c0e5a5ff8 Rename AgentReady to ContainerRuntimeReady for better clarity 80baec697f Restore original order of agent startup functions f19db855bf remove e2e logs drone step (#9516) 25e12bc10c [Release-1.28] Fix drone publish for arm (#9508) 9f78e474d7 Update Kubernetes to v1.28.7 (#9492) 1ca64a81be [Release-1.28] Support PR testing installs (#9469) 45860105bb [Release-1.28] Test_UnitApplyContainerdQoSClassConfigFileIfPresent (#9440) 78543f4850 [Release-1.28] Enable longer http timeout requests (#9444) 3d0674ad1c Bump kine and set NotifyInterval to what the apiserver expects a3770d21e2 Expose rootless containerd socket directories for external access 0259b8e535 Expose rootless state dir under ~/.rancher/k3s/rootless 865b454a05 Don't verify the node password if the local host is not running an agent 493ebb9517 Fix ipv6 endpoint address selection for on-demand snapshots cd7c557754 Fix issue with coredns node hosts controller 3d46c7da70 Bump CNI plugins to v1.4.0 b620348998 Add check for etcd-snapshot-dir and fix panic in Walk 6b2c1ecb0f Retry startup snapshot reconcile c2c9a265bf Fix excessive retry on snapshot reconcile dda9780f23 Update Kube-router to v2.0.1 a922a0e340 allow executors to define containerd and docker behavior 034ee89344 Update flannel to v0.24.0 and remove multiclustercidr flag (#9075) 6ff57ab749 Bump flannel version 25c7208b7e Changed how lastHeartBeatTime works in the etcd condition f3b4effb32 Runtimes refactor using exec.LookPath 5eb278b838 [Release-1.28] Auto Dependancy Bump (#9419) 190864259e Consistently handle component exit on shutdown 5857584463 Bump cri-dockerd 35ef1cec92 Bump Local Path Provisioner version (#8953) (#9426) c9f49a3b06 Bump helm-controller to fix issue with ChartContent 2f9788ab55 Bump runc and helm-controller versions 14fdacb85b gofmt config_test.go aebdccfae5 Fix issues with certs.d template generation 39a0001575 Use `ipFamilyPolicy: RequireDualStack` for dual-stack kube-dns (#8984) c236c9ff77 Update to v1.28.6 (#9260) 6224ea62af Error getting node in setEtcdStatusCondition 470bcd1bff Move proxy dialer out of init() and fix crash 04ce0ac0a9 Rebase & Squash (#9070) 4724315b8c Pin opa version for missing dependency chain (#9216) 2858f89a5b Bump quic-go for CVE-2023-49295 b04e18c4a0 Enable network policy controller metrics bda4b73493 Add e2e test for embedded registry mirror f3c6250b28 Add embedded registry implementation ef4e7ae143 Add server CLI flag and config fields for embedded registry ece564ec93 Add ADR for embedded registry ea66fe65b4 Propagate errors up from config.Get a62ee4fd0d Move registries.yaml load into agent config ace1714e0c Pin images instead of locking layers with lease 3b863906e0 Fix OS PRETTY_NAME on tagged releases ee85990a83 Add runtime checking of golang version 3be858a878 Add more paths to crun runtime detection (#9086) fa798ba272 Add support for containerd cri registry config_path f95ab7aaf9 Fix nil map in full snapshot configmap reconcile fe19faaf9a Handle logging flags when parsing kube-proxy args fc3136f54f Fix the OTHER log message that prints the wrong variable 9d5950741e Dockerfile.dapper: set $HOME properly 3248fd05c7 Add ServiceLB support for PodHostIPs FeatureGate a503d13591 Remove GA feature-gates (#8970) 53c6e05ef5 Handle etcd status condition when cluster reset and disable etcd 3d08cfd0fe Wait for taint to be gone in the node before starting the netpol controller 90367d80b0 Add a retry around updating a secrets-encrypt node annotations (#9125) 5b2d1271a6 Only publish to code_cov on merged E2E builds (#9083) 19b361f30b Update to v1.28.5-k3s1 (#9081) 71a3c35fb7 Bump containerd to v1.7.11 08509a2a90 Allow setting default-runtime on servers b9c288f702 Bump containerd/runc to v1.7.10-k3s1/v1.1.10 03532f7c0b Added runtime classes for crun/wasm/nvidia 9c6ba42ca0 Nov 2023 stable channel update (#9022) 79438cecaa Modify CONTRIBUTING.md guide d34550fb2f Fix overlapping address range 6ba6c1b65f remove s390x from manifest (#8998) 022cf6d51f remove s390x steps temporarily since runners are disabled 3f23723035 Update to v1.28.4 (#8920) 6d3a92a658 Print key instead of file path in snapshot metadata log message b23e70d519 Don't apply s3 retention if S3 client failed to initialize a92c4a0f17 Don't request metadata when listing objects 96ebb96317 Fix flakey dynamic-cert.json in cert rotation e2e test 611ac0894c Revert e2e pipeline depends_on change 3a6284e2b9 Bump dynamiclistener to fix secret sync race 1e0a7044cf Reorder snapshot configmap reconcile to reduce log spew during initial startup e53c189587 Handle nil pointer when runtime core is not ready in etcd 6c544a4679 Add jitter to client config retry fa4c180637 Update install.sh sha256sum (#8885) da0593bcf9 More improves for K3s patch release docs (#8800) abc2efdd57 Disable helm CRD installation for disable-helm-controller (#8702) 07ee854914 Tweaked order of ingress IPs in ServiceLB (#8711) 7ecd5874d2 Skip initial datastore reconcile during cluster-reset 2088218c5f Fix issue with snapshot metadata configmap fd8db56d5a Fix wrong warning from restorecon in install script (#8871) 78ea593780 General updates to README (#8786) 19fd7e38f6 enh: Force umount for NFS mount (like with longhorn) b47cbbfd42 add agent flag disable-apiserver-lb (#8717) 30c8ad926d QoS-class resource configuration 32a1efa408 Bump kine to fix multiple issues a26441613b add: timezone info in image 0011eb5ead optimize: Simplify and clean up Dockerfile (#8244) 8f7a8b23b7 Improve dualStack log f5920d7864 Add warning for multiclustercidr flag (#8758) ba5fcf13fc Wasm shims and runtimes detection 875a9d19c6 Added ADR for etcd status c5cd7b3d65 Added etcd status condition 022c49242d update channels latest to v1.27.7+k3s2 (#8799) bbafb86e91 Don't use iptables-save/iptables-restore if it will corrupt rules 9e13aad4a8 Update traefik to fix registry value (#8792) 1ae053d944 Upgrade traefik chart to v25.0.0 (#8771) f575a05be2 fix: Access outer scope .SystemdCgroup (#8761) c7c339f0b7 chore: Bump Trivy version (#8739) 1e99a46256 chore: Update sonobuoy image versions (#8710) 9377accd9e update stable to v1.27.7+k3s1 (#8753) 112e1339b7 Restore selinux context systemd unit file (#8593) 49411e7084 Don't try to read token hash and cluster id during cluster-reset 6aef26e94b Update to v1.28.3 (#8682) 5b6b9685e9 Manually requeue configmap reconcile when no nodes have reconciled snapshots 3db1d33282 Re-enable etcd endpoint auto-sync b8dc95539b Fix CloudDualStackNodeIPs feature-gate inconsistency 0c9bf36fe0 [K3s][Windows Port] Build script, multi-call binary, and Flannel (#7259) aaf8409096 Use version.Program not K3s in log (#8653) 9597ea1183 Start etcd client before ensuring self removal 2291d6d079 Add etcd-only/control-plane-only server test 7bb4a826af Update kube-router package in build script 3abc8b82ed Bump traefik, golang.org/x/net, google.golang.org/grpc 1ffb4603cd Use IPv6 in case is the first configured IP with dualstack 3d25e9f66c Switch build target from main.go to a package. (#8342) 7c5b69ca1d Fix etcd snapshot integration tests d885162967 Add server token hash to CR and S3 550ab36ab7 Switch to managing ETCDSnapshotFile resources 5cd4f69bfa Move snapshot delete into local/s3 functions a15b804e00 Sort snapshots by time and key in tabwriter output 7464007037 Store extra metadata and cluster ID for snapshots 80f909d0ca Move s3 snapshot list functionality to s3.go 8d47645312 Consistently set snapshotFile timestamp f1afe153a3 Tidy s3 upload functions 2b0e2e8ada Elide old snapshot data when apiserver rejects configmap with ErrRequestEntityTooLarge 676b00aa0e Move etcd snapshot code into separate file 500744bb94 Add new CRD for etcd snapshots 64107b54e4 Minor updates as per design review discussion 22065affa2 Add ADR for etcd snapshot CRD migration 9bb1ce1253 Bump busybox to v1.36.1 5fe4f6709a Bump containerd to v1.7.7-k3s1 7d38b4a3db E2E Domain Drone Cleanup (#8579) dface01de8 Server Token Rotation (#8265) ced25af5b1 Fixed tailscale node IP dualstack mode in case of IPv4 only node ba750e28b7 [v1.28] System agent push tags fix (#8568) e33359d375 Update install.sh.sha256sum a6acdd0d75 Fix slemicro check for selinux (#8526) e82b37640a Network defaults are duplicated, remove one d4a487d83f Fix spellcheck problem (boostrap ==> bootstrap) f2c7117374 Take IPFamily precedence based on order 0b23a478cf ipFamilyPolicy:PreferDualStack for coredns and metrics-server 021c5b291b Improve release docs - updated (#8414) 0e5c760625 Pass SystemdCgroup setting through to nvidia runtime options 1e38b5d904 Don't ignore assets in home dir if system assets exist fe18b1fce9 Add --image-service-endpoint flag (#8279) 79b44cee29 Create and validate install.sh signatures (#8312) ad206310d1 Update kube-router b6ab24c4fd Added error when cluster reset while using server flag b010c941cf Fix .github regex to skip drone runs on gh action bumps (#8433) d349c9db6c Added cluster reset from non bootstrap nodes on snapshot restore e2e test d0ab4ef26b Added advertise address integration test 172a7f1d1a Fix gofmt error 8705a88bf4 Clear remove annotations on cluster reset; refuse to delete last member from cluster 002e6c43ee Reorganize Driver interface and etcd driver to avoid passing context and config into most calls 890645924f Don't export functions not needed outside the etcd package a3c52d60a5 Skip creating CRDs and setting up event recorder for CLI controller context 391e61bd72 Use admin kubeconfig instead of supervisor for etcd snapshot CLI bd9dad87d5 Typo fix 5c5d957e73 Set server-token adr to accepted 6398c38690 Server token rotation ADR 8c73fd670b Disable HTTP on main etcd client port 12459fca97 Add extraArgs to tailscale 8c197bdce4 Include the interface name in the error message 56abe7055f add link to drone in documentation (#8295) e1706875f4 Update channel latest to v1.27.6+k3s1 (#8397) 66cb1064d1 Add context to flannel errors d3f7632463 Fix error reporting Signed-off-by: Bruce Ashfield

k3s: update to v1.28.2

2023-11-06T16:21:12+00:00

Bumping k3s to v1.28.2, which comprises the following commits: 6330a5b49c Update to v1.28.2 and go v1.20.8 (#8364) 550dd0578f Bump kine to v0.10.3 b3bb7e5a11 update channel for version v1.28 (#8305) 0d23cfe038 Add RWMutex to address controller cba9f0d142 Add new CLI flag to disable TLS SAN CN filtering 2cb7023660 Use already imported semver, bump kine f2d0c5409a Add check for support on cp nodes 51f1a5a0ab Review comments and fixes 42c2ac95e2 CLI + Backend for Secrets Encryption v3 e45a674457 Add new encryption test b967f92785 Replace os.Write with AtomicWrite function ced330c66a [v1.28] CLI Removal for v1.28.0 (#8203) 62db5fa27c Update to v1.28.1 (#8239) af50e1b096 Update to v1.28.0-k3s1 (#8199) Signed-off-by: Bruce Ashfield