1
0
mirror of https://github.com/rancher/rke.git synced 2025-07-30 22:44:50 +00:00
Commit Graph

672 Commits

Author SHA1 Message Date
Jiaqi Luo
312f5ee285 Revert "Merge pull request #3531 from jiaqiluo/fix-kube-apiserver"
This reverts commit 5e050c58a9, reversing
changes made to 1951add95d.
2024-03-21 20:11:03 -07:00
Jiaqi Luo
6dff99618c This PR fixes the issue that kube-apiserver does not restart in all CP nodes after changing the Pod Security Admission Configuration.
A new environment variable RKE_ADMISSION_CONFIG_CHECKSUM whose value is the checksum of the content of the admission configuration file is added to the env list that is set in the `kube-apiserver` container configuration, so any changes in the admission configuration file will result in a change in the container's configuration. RKE will detect the changes during reconciliation and therefore restart the kube-apiserver container on all CP nodes. The upgrade cadence is thresholded by the upgrade strategy in the cluster.

This PR also drops the unnecessary appending of env var to the cluster object which shows in the cluster.rkestate file.

Signed-off-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>
2024-03-13 18:10:58 -07:00
Jacob Lindgren
74b34e9219
Merge branch 'release/v1.5.6' into backport_v1.5.6 2024-03-07 17:35:34 -06:00
JeffinKottaram
92d946b1e1 Add ACI CNI 6041 variables 2024-03-01 04:27:27 -08:00
Jiaqi Luo
2d51c6f13e fix the bug where the value of delete_local_data is dropped by the ghodssyaml.Marshal function due to the same field has different names in YAML tag and JSON tag 2024-02-28 17:45:56 -07:00
JeffinKottaram
275242b912 Added new varibales for ACI-CNI-6.0.3.2 2024-01-09 20:24:08 +05:30
Akhilesh Sarda
5648c7f457 Add ACI-CNI 6.0.3.1 variables 2024-01-02 13:39:08 -08:00
Kinara Shah
a74c388690 fix node lookup for external aws 2023-11-28 08:37:46 -08:00
Kinara Shah
1584d37ede add logic for external aws cloud provider 2023-10-18 14:23:30 -07:00
vardhaman22
bcb83a79a7 changed etcd restoreImage to rke-tools for etcd >=3.5.7 2023-09-27 15:39:34 +05:30
Manuel Buil
feca6a3048
Merge pull request #3337 from manuelbuil/weaveDeprecation
Add warning log about weave deprecation
2023-09-19 14:57:20 +02:00
Manuel Buil
51b4a40e3e Add warning log about weave deprecation
Signed-off-by: Manuel Buil <mbuil@suse.com>
2023-09-19 12:34:45 +02:00
Sebastiaan van Steenis
31f0d04447
Add env var to enable dual-stack in cri-dockerd 2023-09-14 11:22:30 +02:00
Rayan Das
dfa1eeaf12 replaced ContainerCreateCreatedBody with CreateResponse as per https://github.com/moby/moby/pull/43530/files
add check to remove container-runtime flag from v1.27

ref: https://v1-26.docs.kubernetes.io/docs/reference/command-line-tools-reference/kubelet/
2023-09-01 11:51:22 +05:30
Manuel Buil
f923a49d9d Replace deprecated io/ioutil
Signed-off-by: Manuel Buil <mbuil@suse.com>
2023-08-04 15:24:27 +02:00
Jiaqi Luo
582da9d299
Merge pull request #3291 from jiaqiluo/fix-psa-checks-v1.4 2023-07-11 10:30:27 -07:00
Jake Hyde
32d6d448c4
Merge pull request #3211 from jakefhyde/39520-pre-pull-sandbox-image
Add sandbox image to images to pre-pull
2023-07-10 20:30:59 -04:00
Jiaqi Luo
e4bf783a1a set the default PodSecurityConfiguration value only if the cluster's k8s version is at least 1.23 2023-07-10 17:13:46 -07:00
Kinara Shah
10a094b0f5 Revert "set the default PodSecurityConfiguration value only if the cluster's k8s version is at least 1.23 (#3261)"
This reverts commit 914d4cb027.
2023-06-21 08:56:15 -07:00
Jiaqi Luo
914d4cb027
set the default PodSecurityConfiguration value only if the cluster's k8s version is at least 1.23 (#3261) 2023-06-20 16:56:05 -07:00
siva-muni
5e67f76f45 Added ACI-CNI 5.2.7.1 variables 2023-06-14 09:50:38 +05:30
siva-muni
b4d94d541e Add new variables for ACI-CNI 5.2.3.6 2023-06-06 09:56:55 -07:00
Jake Hyde
4ca4b2e1ae Add sandbox image to images to pre-pull 2023-05-04 13:45:09 -04:00
Jiaqi Luo
5ef3544da6 drop the checks for PSP resources in the cluster 2023-03-02 10:55:40 -07:00
Kinara Shah
113f305b35 changes around hostname-override 2023-01-12 09:21:21 -08:00
Jiaqi Luo
6117df822c address comments 2023-01-03 22:41:32 -07:00
Jiaqi Luo
bd3fe59b0d change Warning to Debug to reduce noise in logs 2022-12-29 17:15:38 -07:00
Jiaqi Luo
aa5c21bd30 add checks for PSP resources in the cluster 2022-12-29 15:18:18 -07:00
siva-muni
91e00a3f30 Added new variables for ACI-CNI 5.2.3.5 2022-12-28 13:32:34 -07:00
Jiaqi Luo
6b3732ec1f
Merge pull request #3100 from superseb/v14_fix_etcd_minimal_panic 2022-12-13 15:56:04 -07:00
Sergey Nasovich
7cee9af171
Merge pull request #3039 from noironetworks/aci-5.2.3.3 2022-11-29 11:34:14 -05:00
Jiaqi Luo
b183dd71ce add comments and other minor improvements 2022-11-22 12:03:45 -07:00
Jiaqi Luo
5fcf75db40 add the support for PodSecurity on cluster at least v1.23 2022-11-22 12:03:45 -07:00
Jiaqi Luo
f5e18110b6 add the parsing for eventRateLimit 2022-11-22 12:03:45 -07:00
Jiaqi Luo
9244d9ffae improve the validation for PSP 2022-11-22 12:03:45 -07:00
Jiaqi Luo
c4a521de08 bump the API used for api-server from v1alpha1 to v1 2022-11-22 12:03:45 -07:00
Sebastiaan van Steenis
c55e5880b2
Check backupconfig exists before checking s3 cfg 2022-11-19 16:28:16 +01:00
vardhaman
27cbb91271 added check for empty updatestrategy while setting dns addon defaults 2022-11-04 10:40:44 +05:30
Jiaqi Luo
6aa8def27c
Merge pull request #2995 from mateuszkwiatkowski/ingress-validations 2022-10-10 09:36:41 -07:00
Kinara Shah
92d9fc9c75 update user addon logic to delete job, not addons
don't delete all user resources, rerunning
job will make sure k8s apply and ensure user
config is redeployed after system addons
2022-09-14 15:16:37 -07:00
siva-muni
710892a58c Add new variables for ACI-CNI 5.2.3.3 2022-09-14 12:22:04 +05:30
Kinara Shah
42bb0ecb84
Merge pull request #3005 from kinarashah/revert 2022-08-09 16:25:20 -07:00
Harrison Affel
a1b6760273 ensure NodeLocal.IPaddress is passed when creating CommandArgs 2022-08-09 15:41:28 -04:00
Kinara Shah
036200b774 Revert "bind rke kubelet docker config path to default docker config path"
This reverts commit 3b8991e345.
2022-08-09 09:44:00 -07:00
Kinara Shah
3b8991e345 bind rke kubelet docker config path to default docker config path
rke stores auth info in /var/lib/kubelet/config.json but cri-dockerd
relies on k8.io credential provider which uses only default config
provider, this allows cri-dockerd to pull sandbox pause image using
private registry
2022-08-04 12:52:42 -07:00
Chris Kim
22b0894c83
Add bind mount for /var/lib/cri-dockerd (#3001)
* Add dockershim bind to 1.24 and newer of K8s
2022-08-04 10:59:38 -07:00
Mateusz Kwiatkowski
f07ce63a14 Fix ingress' HTTPS port validation 2022-07-28 12:58:14 +02:00
Harrison Affel
4f2b3ba8ca drop log level to debug 2022-07-19 09:38:05 -04:00
siva-muni
49977444ef Added new variables 2022-07-04 18:42:21 +05:30
Jiaqi Luo
9b7a148790
Merge pull request #2948 from jiaqiluo/support-1-24 2022-06-28 17:59:52 -07:00