* Add SMB CSI

* Add NFS CSI

* Update pkg bind data

* Disable docker in k3s systemd unit file

* Update go dependencies

* Point to truenas/containerd for getting containerd in k3s

* Add k3s-kill script to remove containerd based containers

* Add k3s-kill script to debian package

* Do not download airgap images now

* Docker is not required to build k3s anymore

* Update go deps

* Stop all containers after stopping k3s process

* Limit core dumps for k3s and provide proxy variables to k3s so containerd can inherit them

Add multus daemonset

Add k3s debian package

Update image tags for airgap install

Add script to pull/save docker images during debian packaging

Pull/save docker images during packaging

Disable local-storage for k3s in systemd

Remove klipper-helm from build

Remove multus from airgapped message

Make sure we kill dockerd in case of failure

Remove multus daemonset

Correctly pull docker images

Add multus/plugins as deps

Add helm as a dep

Remove flannel manifest

Add kuberouter yaml

Disable default kube-proxy / network policy

Add ipset/ipvsadm as deps

Add (iptables/arptables/ebtables)-legacy as a dep

Disable cloud controller by default

Fix node name to ix-truenas

Remove kuberouter deployment

Add kube-router as dep

Signed-off-by: Brooks Newberry <brooks@newberry.com>

This commit adds the format command to make it easier to be compliant to golangci-lint issues
Signed-off-by: Ian Cardoso <osodracnai@gmail.com>

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

These were unintentionally dropped when moving containerd back into the main multicall binary
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e5e1a674)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 5170bc5a)

Allows nodes to join the cluster during a webhook outage. This also
enhances auditability by creating Kubernetes events for the deferred
verification.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 45d8c1a1)

It is no way we can configure the lb image because it is a const value.
It would be better that we make it variable value and we can override
the value like the `helm-controller` job image when compiling k3s/rke2
Signed-off-by: Yuxing Deng <jxfa0043379@hotmail.com>
(cherry picked from commit b64a226e)

Made with ️️ by updatecli

(cherry picked from commit a5928ee1)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 61247375)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 7b61aacb)

Only actual admin actions should use the admin kubeconfig; everything done by the supervisor/deploy/helm controllers will now use a distinct account for audit purposes.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 64a5f58f)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 8748813a)

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit e9958cf0)

Fixes issue with localhost access to ServiceLB when
ExternalTrafficPolicy=Local
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 93279d2f)

Signed-off-by: Andrew Roffey <andrew@roffey.au>
(cherry picked from commit 0485a56f)

[Release 1.26] Remove unused libvirt config

Signed-off-by: Manuel Buil <mbuil@suse.com>

[Release 1.26] Fix spelling check

Signed-off-by: Manuel Buil <mbuil@suse.com>

[Release 1.26] VPN integration

* add private registry e2e test (#7653)

add private registry e2e test
Signed-off-by: Ian Cardoso <osodracnai@gmail.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>

* E2E: Startup test cleanup + RunCommand Enhancement (#7388)

* Add beforesuite to startup
* Reduce timeouts for startup
* Fix cleanup + set kubeconfig
Signed-off-by: Derek Nola <derek.nola@suse.com>

---------
Signed-off-by: Ian Cardoso <osodracnai@gmail.com>
Signed-off-by: Derek Nola <derek.nola@suse.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>

Signed-off-by: Manuel Buil <mbuil@suse.com>

* Bump docker go.mod (#7681)
* Shortcircuit commands with version or help flags (#7683)
* Fix for longhorn integration test
* Add Rotation certification Check (#7097)
* Add Certification Test to Validate Cluster
* Fix to stop/start for k3s certificate rotation
* E2E: Use sudo for all RunCmdOnNode
* Remove unnecessary daemonset addition/deletion
Signed-off-by: Derek Nola <derek.nola@suse.com>
Signed-off-by: est-suse <esteban.esquivel@suse.com>
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
Co-authored-by: Esteban Esquivel Alvarado <esteban.alvarado@suse.com>
Co-authored-by: est-suse <esteban.esquivel@suse.com>
Co-authored-by: Brad Davidson <brad.davidson@rancher.com>

Signed-off-by: Derek Nola <derek.nola@suse.com>

[Release 1.26] Update flannel version

Signed-off-by: Manuel Buil <mbuil@suse.com>

Fix regression in legacy API prefix, until upstream pulls in support for MergePathStrategy from https://github.com/emicklei/go-restful/pull/523

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>