Commit Graph

735 Commits (ed9fa241d7b47a4375e44d6a49759feade18b8d7)

Author SHA1 Message Date
Jiaqi Luo ed9fa241d7
(dev-v2.6-archive) add sub-charts for scraping ingress-nginx in rke and rke2 clusters
(partially cherry picked from commit 1157b4a153)
2022-01-06 11:33:58 -08:00
Jiaqi Luo e45348b081
(dev-v2.6-archive) Update rancher-pushprox to support overriding namespace and switching the workload type of the client between Deployment and DaemonSet by adding replicas and affinity in pod.spec
(partially cherry picked from commit 8bf9b82e91)
2022-01-06 11:33:58 -08:00
Daishan 63682d8921
(dev-v2.6-archive) Update fleet to v0.3.6-rc1
(partially cherry picked from commit a8e8fb5957)
2022-01-06 11:33:57 -08:00
Nick Gerace beeeff4cee
(dev-v2.6-archive) Update logging to 3.10.0 and convert fluent-bit buffer fields to string
(partially cherry picked from commit d8d38e6082)
2022-01-06 11:33:56 -08:00
Jacob Payne 41f86f41d1
(dev-v2.6-archive) fix/issue 32993 (#1248)
* use journald to consume k3s logs

* make charts

(partially cherry picked from commit f91fac2cf7)
2022-01-06 11:33:55 -08:00
Jacob Payne 5537e98926
(dev-v2.6-archive) Fix/issue 33092 (#1254)
* removed rke2 containers logging and added some extra settings to the fluentbit configmap

* charts

(partially cherry picked from commit ba4492b7d4)
2022-01-06 11:33:55 -08:00
Arvind Iyengar d7b9e7e2ba
(dev-v2.6-archive) Add kubelet and nodeExporter pushprox and bump image (#1245)
* Bump PushProx chart version

* Expose serviceMonitor endpoints and client SA RBAC

* Bump PushProx image to v0.1.0-rancher2

* Support hardened kubelet+nodeExporter & update k3s

* Generate charts

* Disable kubelet serviceMonitor if k3sServer enabled

* make charts

(partially cherry picked from commit a064b37d4e)
2022-01-06 11:33:54 -08:00
Donnie Adams 28c320bdb8
(dev-v2.6-archive) Merge pull request #1244 from thedadams/bump-gke-v1.1.1-rc2
(partially cherry picked from commit e2e04c8f8e)
2022-01-06 11:33:54 -08:00
Donnie Adams 8cd004c998
(dev-v2.6-archive) Bump gke-operator chart to 1.1.1-rc2
(partially cherry picked from commit c3219d0cbd)
2022-01-06 11:33:53 -08:00
Donnie Adams 7d48f885ae
(dev-v2.6-archive) Bump aks-operator chart to 1.0.1-rc7
(partially cherry picked from commit c44dfebdde)
2022-01-06 11:33:52 -08:00
Donnie Adams 2bdbd65274
(dev-v2.6-archive) Bump eks-operator chart to 1.1.1-rc2
(partially cherry picked from commit 06802f45b5)
2022-01-06 11:33:52 -08:00
Arvind Iyengar 2e2ec8ec2c
(dev-v2.6-archive) Move establishing CRD logic to a helper template
(partially cherry picked from commit 02ff0c9df8)
2022-01-06 11:33:51 -08:00
Arvind Iyengar 00ab624721
(dev-v2.6-archive) Mimic Helm CRD install process by introducing wait
As part of the Helm CRD installation process shown [here](43853ea772/pkg/action/install.go (L160-L162)), charts that both attempt to install CRDs and then install resources (e.g. `len(totalItems) > 0`) invalidate the cache and attempt to get the CRDs again to `Give time for the CRD to be recognized.` before continuing the Helm installation.

Because Monitoring V2 currently does not observe this invalidation and wait, flakey race conditions documented in issues like https://github.com/rancher/rancher/issues/32025 and https://github.com/rancher/rancher/issues/29171 can be caused. This commit introduces that invalidation process.

(partially cherry picked from commit 5f3bbe4a36)
2022-01-06 11:33:50 -08:00
Darren Shepherd 43394525cf
(dev-v2.6-archive) Fix invalid tag in system-upgrade-controller
(partially cherry picked from commit b1dcdd1a87)
2022-01-06 11:33:50 -08:00
Colleen Murphy dfc77a99a9
(dev-v2.6-archive) Merge pull request #1213 from cmurphy/dev-v2.6-aks-operator
Add aks-operator charts

(partially cherry picked from commit 556c9b1afa)
2022-01-06 11:33:49 -08:00
Colleen Murphy 57998bd35d
(dev-v2.6-archive) Add aks-operator package
(partially cherry picked from commit 2abda43f33)
2022-01-06 11:33:48 -08:00
Jiaqi Luo cb516236eb
(dev-v2.6-archive) Merge pull request #1214 from jiaqiluo/rancher-backup-105-rc1-dev-v2.6
[dev-v2.6] cut rancher-backup and rancher-backup-crd 1.1.100+up1.1.1

(partially cherry picked from commit dac8de7d7e)
2022-01-06 11:33:48 -08:00
Donnie Adams 91cf674a50
(dev-v2.6-archive) Merge pull request #1195 from thedadams/add-gke-operator
(partially cherry picked from commit 9f439d72ae)
2022-01-06 11:33:47 -08:00
Donnie Adams ed7f77d9af
(dev-v2.6-archive) Add gke-operator
(partially cherry picked from commit b608a65c41)
2022-01-06 11:33:46 -08:00
dbason 7d753513f7
(dev-v2.6-archive) Add support for the kube audit log to v2 logging (#1223)
* Add logging for kube-audit

* Generate charts for d274040a

(partially cherry picked from commit 4e6c09f559)
2022-01-06 11:33:46 -08:00
Jiaqi Luo cf569513fa
(dev-v2.6-archive) Merge pull request #1230 from jiaqiluo/update-monitoring-image-dev-v2.6
[dev-v2.6]update the image rancher/mirrored-library-nginx

(partially cherry picked from commit ef298fe102)
2022-01-06 11:33:45 -08:00
Prachi Damle d729c71088
(dev-v2.6-archive) Merge pull request #1229 from prachidamle/cis_k8s_version_tag_26
Updating cis-operator image tag to deliver fix for k8s upgrade issue

(partially cherry picked from commit d016ae3c10)
2022-01-06 11:33:44 -08:00
Jiaqi Luo 0729838224
(dev-v2.6-archive) update the image rancher/mirrored-library-nginx
(partially cherry picked from commit 5480033c84)
2022-01-06 11:33:43 -08:00
Prachi Damle 19183ca1c2
(dev-v2.6-archive) Update CIS tag to include k8s version upgrade fix
No need to update packageVersion

Generated assets

(partially cherry picked from commit 7302e66ece)
2022-01-06 11:33:43 -08:00
Jiaqi Luo b9024c1fd2
(dev-v2.6-archive) cut rancher-backup and rancher-backup-crd v1.1.1
(partially cherry picked from commit 84b66d8013)
2022-01-06 11:33:42 -08:00
Arvind Iyengar 470ce9ee46
(dev-v2.6-archive) Add validation on trying to deploy Grafana PVC
(partially cherry picked from commit 75a96a7e94)
2022-01-06 11:33:41 -08:00
Arvind Iyengar b78b04ad05
(dev-v2.6-archive) Bump packageVersion
(partially cherry picked from commit 0bdbaf798d)
2022-01-06 11:33:41 -08:00
Arvind Iyengar 4dc8ac280d
(dev-v2.6-archive) Merge pull request #1224 from aiyengar2/fix_rke_2_etcd_default_2_6
[2.6] Add NoExecute toleration to rke2Etcd and remove key

(partially cherry picked from commit 9c5c1c5ef3)
2022-01-06 11:33:40 -08:00
Donnie Adams 6b385a97b9
(dev-v2.6-archive) Change eks-operator version to v1.1.1
(partially cherry picked from commit 8d7f56d799)
2022-01-06 11:33:39 -08:00
Arvind Iyengar 05c3912de8
(dev-v2.6-archive) Add NoExecute toleration to rke2Etcd and remove key
(cherry picked from commit a181ea3011)

(partially cherry picked from commit 6239716e10)
2022-01-06 11:33:38 -08:00
Nick Gerace bc7d68d557
(dev-v2.6-archive) Fix windows prefix path for logging
(partially cherry picked from commit c9bf5990b0)
2022-01-06 11:33:37 -08:00
Arvind Iyengar 5c0f816c65
(dev-v2.6-archive) Fix monitoring Chart.yaml
This is required due to the change released in v0.1.0 of the charts-build-scripts to switch the package used for YAML marshalling / unmarshalling.

Note: This does not need a packageVersion bump since it has already been bumped once for this release.
(cherry picked from commit 7ec1716f66)

(partially cherry picked from commit e2c9a0746b)
2022-01-06 11:33:37 -08:00
Arvind Iyengar 4db1d5822e
(dev-v2.6-archive) Fix istio requirement.yaml
This is required due to the change released in v0.1.0 of the charts-build-scripts to switch the package used for YAML marshalling / unmarshalling.

(cherry picked from commit 5392d84cf6)

(partially cherry picked from commit 8845d9ae9f)
2022-01-06 11:33:36 -08:00
Arvind Iyengar 47a4a72422
(dev-v2.6-archive) Fix alerting-drivers Chart.yaml
This is required due to the change released in v0.1.0 of the charts-build-scripts to switch the package used for YAML marshalling / unmarshalling.

Note: This does not need a packageVersion bump since it has already been bumped once for this release.
(cherry picked from commit e5415e48de)

(partially cherry picked from commit ba726cdc6c)
2022-01-06 11:33:35 -08:00
Arvind Iyengar 775e5e62f2
(dev-v2.6-archive) Remove rcVersions
(partially cherry picked from commit b350bb93e0)
2022-01-06 11:33:34 -08:00
Arvind Iyengar f859625d86
(dev-v2.6-archive) Checkout current packages from dev-v2.6-source
```bash
git fetch upstream
git checkout upstream/dev-v2.6-source -- packages; git reset HEAD; git checkout -- packages/README.md
```

This overwrites the previous changes based on stuff currently in dev-v2.6-source today.

(partially cherry picked from commit 1107be9199)
2022-01-06 11:33:33 -08:00
Arvind Iyengar 63af4011e1
(dev-v2.6-archive) Checkout current packages from dev-v2.5-source
```bash
git fetch upstream
git checkout upstream/dev-v2.5-source -- packages; git reset HEAD; git checkout -- packages/README.md
```

(partially cherry picked from commit 551327b14e)
2022-01-06 11:33:32 -08:00
Arvind Iyengar ff586304c1
(dev-v2.6-archive) Regenerate template based on v0.2.0 release
```bash
make template
```

(partially cherry picked from commit e0424d8ac0)
2022-01-06 11:33:31 -08:00
actions decb1db44b
(dev-v2.6-archive) Generated changes
(partially cherry picked from commit 88defdad62)
2022-01-06 11:33:31 -08:00
aiyengar2 2304c5e0fb
(dev-v2.6-archive) Merge pull request #677 from aiyengar2/fix_magic_links
Fix broken magic links for Grafana and Prometheus

(partially cherry picked from commit f7cee8c5c7)
2022-01-06 11:33:31 -08:00
Darren Shepherd b2b0a96592
(dev-v2.6-archive) fleet v0.3.0-beta3
(partially cherry picked from commit 161b04a5e6)
2022-01-06 11:33:30 -08:00
Arvind Iyengar d652d4db01
(dev-v2.6-archive) Add nginx proxy to Prometheus for magic links
This commit adds an nginx proxy in front of Prometheus that intercepts the requests that are sent to the Prometheus pod. This change was necessary since the Prometheus pod encounters issues with Rancher proxy URLs that are formatted like:

```
<server-url>/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-prometheus:9090/proxy
```

Specifically, if using the root_url option, it doubles up this URL when making requests for resources, e.g.
```
<server-url>/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-prometheus:9090/proxy/<my-path>
=>
<server-url>/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-prometheus:9090/proxy/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-prometheus:9090/proxy/<my-path>
```

However, this does not resolve the issue in https://github.com/rancher/rancher/issues/29068.

(partially cherry picked from commit 92f0eca770)
2022-01-06 11:33:30 -08:00
Arvind Iyengar b9758f95c4
(dev-v2.6-archive) Add nginx proxy to Grafana for magic links
This commit adds an nginx proxy in front of Grafana that intercepts the requests that are sent to the Grafana pod. This change was necessary since the Grafana pod encounters issues with Rancher proxy URLs that are formatted like:

```
<server-url>/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy
```

Specifically, if using the root_url option, it doubles up this URL when making requests for resources, e.g.
```
<server-url>/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/<my-path>
=>
<server-url>/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/<my-path>
```

(partially cherry picked from commit d6c774aa42)
2022-01-06 11:33:29 -08:00
rajashree 42d7b9382d
(dev-v2.6-archive) Change encryption config field name in restore crd
(partially cherry picked from commit 37a8648cf8)
2022-01-06 11:33:29 -08:00
maggieliu 2e262303da
(dev-v2.6-archive) Merge pull request #674 from aiyengar2/fix_monitoring_chart_hardened
Support monitoring in hardened RKE clusters

(partially cherry picked from commit 34fdd14bca)
2022-01-06 11:33:28 -08:00
maggieliu 826d5dc2df
(dev-v2.6-archive) Merge pull request #675 from aiyengar2/fix_pushprox_chart_hardened
Support pushprox in hardened RKE clusters

(partially cherry picked from commit 6edb750ce9)
2022-01-06 11:33:28 -08:00
Prachi Damle a63a0d586a
(dev-v2.6-archive) Merge pull request #676 from prachidamle/airgap_fix
Use global registry for security-scan and sonobuoy tool images to support airgapped setups

(partially cherry picked from commit 0f786657a2)
2022-01-06 11:33:27 -08:00
Jacob Payne fba428baa7
(dev-v2.6-archive) allow tolerations to be passed to fluentbit containers (#673)
(partially cherry picked from commit 91d1dedca1)
2022-01-06 11:33:27 -08:00
Prachi Damle 2d82003905
(dev-v2.6-archive) Use the system_default_registry for security-scan and sonobuoy images
Deleting tgz assets

(partially cherry picked from commit 42f30bfad1)
2022-01-06 11:33:26 -08:00
Steven Crespo ed4687076b
(dev-v2.6-archive) Merge pull request #670 from PennyScissors/update-gk-v3.1.1
Update gatekeeper to version 3.1.1

(partially cherry picked from commit 32f1b41934)
2022-01-06 11:33:26 -08:00