Skip to content

GitLab

Switch branch/tag
  1. 08 Aug, 2022 1 commit
  3. 05 Aug, 2022 9 commits
  5. 04 Aug, 2022 3 commits
  7. 03 Aug, 2022 1 commit
  9. 02 Aug, 2022 2 commits
  11. 01 Aug, 2022 1 commit
    • Vladimir Kochnev's avatar
      Save agent token to /var/lib/rancher/k3s/server/agent-token · 13af0b1d
      Vladimir Kochnev authored 
      
Having separate tokens for server and agent nodes is a nice feature.

However, passing server's plain `K3S_AGENT_TOKEN` value
to `k3s agent --token` without CA hash is insecure when CA is
self-signed, and k3s warns about it in the logs:

```
Cluster CA certificate is not trusted by the host CA bundle, but the token does not include a CA hash.
Use the full token from the server's node-token file to enable Cluster CA validation.
```

Okay so I need CA hash but where should I get it?

This commit attempts to fix this issue by saving agent token value to
`agent-token` file with CA hash appended.
Signed-off-by: default avatarVladimir Kochnev <hashtable@yandex.ru>
      13af0b1d
  13. 29 Jul, 2022 1 commit
  15. 28 Jul, 2022 2 commits
  17. 22 Jul, 2022 2 commits
  19. 21 Jul, 2022 8 commits
  21. 15 Jul, 2022 1 commit
  23. 12 Jul, 2022 5 commits
    • Brad Davidson's avatar
      Address issues with etcd snapshots · ffe72eec
      Brad Davidson authored 
      
* Increase the default snapshot timeout. The timeout is not currently
  configurable from Rancher, and larger clusters are frequently seeing
  uploads fail at 30 seconds.
* Enable compression for scheduled snapshots if enabled on the
  command-line. The CLI flag was not being passed into the etcd config.
* Only set the S3 content-type to application/zip if the file is zipped.
* Don't run more than one snapshot at once, to prevent misconfigured
  etcd snapshot cron schedules from stacking up.
Signed-off-by: default avatarBrad Davidson <brad.davidson@rancher.com>
      ffe72eec
    • Brad Davidson's avatar
      Fix deletion of svclb DaemonSet when Service is deleted · 167ed19d
      Brad Davidson authored 
      
87e1806697cd7dfffb7cb0de73c85e889365780d removed the OwnerReferences
field from the DaemonSet, which makes sense since the Service may now be
in a different namespace than the DaemonSet and cross-namespace owner
references are not supported.  Unfortunately, we were relying on
garbage collection to delete the DameonSet, so this started leaving
orphaned DaemonSets when Services were deleted.

We don't want to add an a Service OnRemove handler, since this will add
finalizers to all Services, not just LoadBalancers services, causing
conformance tests to fail. Instead, manage our own finalizers, and
restore the DaemonSet removal Event that was removed by the same commit.
Signed-off-by: default avatarBrad Davidson <brad.davidson@rancher.com>
      167ed19d
    • Brad Davidson's avatar
      Remove legacy bidirectional datastore sync code · fc1c100f
      Brad Davidson authored 
      
Since #4438 removed 2-way sync and treats any changed+newer files on disk as an error, we no longer need to determine if files are newer on disk/db or if there is a conflicting mix of both. Any changed+newer file is an error, unless we're doing a cluster reset in which case everything is unconditionally replaced.
Signed-off-by: default avatarBrad Davidson <brad.davidson@rancher.com>
      fc1c100f
    • Brad Davidson's avatar
      Fix fatal error when reconciling bootstrap data · 83420ef7
      Brad Davidson authored 
      
Properly skip restoring bootstrap data for files that don't have a path
set because the feature that would set it isn't enabled.
Signed-off-by: default avatarBrad Davidson <brad.davidson@rancher.com>
      83420ef7
    • Brad Davidson's avatar
      Promote v1.23.8+k3s2 to stable · 84baab59
      Brad Davidson authored 
      Signed-off-by: default avatarBrad Davidson <brad.davidson@rancher.com>
      84baab59
  25. 08 Jul, 2022 2 commits
  27. 07 Jul, 2022 2 commits