Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package k3s-install for openSUSE:Factory checked in at 2022-05-31 17:38:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/k3s-install (Old) and /work/SRC/openSUSE:Factory/.k3s-install.new.1548 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "k3s-install" Tue May 31 17:38:11 2022 rev:2 rq:980111 version:1.23.6+k3s1 Changes: -------- --- /work/SRC/openSUSE:Factory/k3s-install/k3s-install.changes 2021-07-16 22:13:35.658468909 +0200 +++ /work/SRC/openSUSE:Factory/.k3s-install.new.1548/k3s-install.changes 2022-05-31 17:38:24.743032052 +0200 @@ -1,0 +2,459 @@ +Tue May 31 14:00:18 UTC 2022 - Frederic Crozat <fcrozat@suse.com> + +- Drop inform-user-of-current-k3s-SELinux-support.patch, no longer + needed. +- Add dependency on container-selinux. +- Drop dependencies on containerd, cni-plugins, conntrack-tools, + runc packages since k3s ships its own stack. +- Update to version 1.23.6+k3s1: + * Fix issue with datastore corruption on cluster-reset (#5515) + * Bump containerd for selinux fix (#5507) + * Secrets Encryption: Add RetryOnConflict around updating nodes (#5495) + * Fix issue with long-running apiserver endpoints watch (#5478) + * Update Kubernetes to v1.23.6 (#5477) + * Fix default ipv6 cidr (#5467) + * E2E Validation Improvements (#5444) + * Add s390x arch support for k3s (#5018) + * Bump etcd to 3.5.3-k3s1 + * Move IPv4/v6 selection into helpers + * Fix issue with RKE2 servers hanging on listing apiserver addresses + * Print a helpful error when trying to join additional servers but etcd is not in use + * Use core constants for cert user/group values + * Bump containerd to v1.5.11-k3s1 + * Added option to deploy hardened k3s (#5415) + * Added support for repeated extra arguments + * update sonobuoy to 0.56.4 (#5419) + * Bump Reencryption Test timeout, improve comments (#5431) + * Added default endpoint for IPv6 + * Update golangci-lint to 1.45.2 + * fixes and updates to jenkinsfile (#5370) + * Fixed flannel backend helper text + * update trivy to 0.25.3 + * fix: non-idiomatic returning of boolean expression (#5343) + * Add certificate rotation integration tests (#5393) + * Update helm-controller version + * Move the apiserver addresses controller into the etcd package + * Updated wireguard-native options and added log message + * Added new flannel backend to use wireguard from flannel + * Fix crash on early snapshot + * Don't print password conversion rate + * Allow agents to query non-apiserver supervisors for apiserver endpoints + * Add client certificate authentication support to core Authenticator + * Redact datastore and etcd snapshot config from serialization + * netpol: Add dual-stack support + * Allow using flannel wireguard backend in a custom config + * Fixed http URL on etcd + * Fixed loadbalancer in case of IPv6 addresses + * Fixed etcd register + * Fixed client URL + * Skip setting up client tls when etcd server does not have tls enabled + * add a wrapper around the containerd.New call to fix and pass the proper npipe connector + * Updated localhost address on IPv6 only setup + * Defragment etcd datastore before clearing alarms + * Fix etcd-only secrets encryption rotation + * Properly attach secrets-encrypt events to the node resource + * Fix log spam due to servicelb event recorder namespace conflict + * Ensure that apiserver ready channel checks re-dial every time + * Fixed etcd URL in case of IPv6 address + * vagrant: Set mount options for NFS + * vagrant: Enable IPv6 and IP forwarding + * go generate + * Bump coredns to v1.9.1 + * Update Kubernetes to v1.23.5-k3s1 + * Refactor automation using terraform (#5268) + * Defer ensuring node passwords on etcd-only nodes during initial cluster bootstrap + * Replace CentOS 8 with Rocky Linux 8 for install testing (#5279) + * E2E Split Server Test (#5286) + * Handle empty entries in bootstrap path map + * Update helm-controller + * Track upstream changes to kubectl command execution + * Add cross-compilation as sanity check (#5255) + * Close additional leaked GPRC clients + * Testing directory and documentation rework. (#5256) + * Changed ipv6 config on flannel setup + * Added ipv6 only support with flannel + * fix function arg call (#5234) + * Populate EtcdConfig in runtime from datastore when etcd is disabled (#5222) + * Fixed log in case of ipv6 only config + * Added switch case to check netMode + * Fixed in case of empty address + * Updated flannel to 0.17 + * Support MixedProtocolLBService and clean up Daemonsets on type change. + * Update Fossa API key variable to match what the plugin wants + * Bump containerd to v1.5.10-k3s1 + * Mark 1.22.7 as stable (#5192) + * [master] changing package to k3s-io (#4846) + * servicelb pool selector + * Switch to drone-fossa plugin + * E2E Add external DB options to ValidateCluster test (#5157) + * Bootstrap the executor even when the agent is disabled + * Fix etcd-snapshot commands by making setup more consistent. + * Ignore cluster membership errors when reconciling from temp etcd + * Move temporary etcd startup into etcd module + * Wait for process to exit before returning from kill helper + * Add function to clear local alarms on etcd startup + * E2E secrets encryption test (#5144) + * Add http/2 support to API server (#5149) + * Disable ineffassign CI plugin for excessive false positives + * Fix adding etcd-only node to existing cluster + * Bump up github.com/containerd/stargz-snapshotter (v0.11.0) (#5032) + * Remove unnecessary copies of etcdconfig struct + * Remove unnecessary copies of runtime struct + * Fix cluster bootstrap test + * Add contributors documentation (#5154) + * Add `--json` flag for `k3s secrets-encrypt status` (#5127) + * add ability to specify etcd snapshot list output format (#5132) + * Create encryption hash file if it doesn't exist (#5140) + * Move testing lock from server creation to test start (#5155) + * Update to V1.23.4 k3s1 (#5135) + * Fix deploy controller resource deletion + * Fix annoying netpol log + * Add support for IPv6 only mode + * E2E Test Improvements (#5102) + * Migrate Ginkgo testing framework to V2, consolidate integration tests (#5097) + * Add k3s etcd restoration integration test (#5014) + * Remove the iptables rules from ipmasq flannel + * Fix cluster validation and add upgrade cluster test (#5020) + * Update CentOS 8 smoke vm's with vault repositories (#5092) + * netpol: Use kube-router as a library + * Check for `--kubeconfig` flag with embedded `kubectl` (#5064) + * Update legacy-unknown-cert and legacy-unknown-key (#5057) + * Bump K3s stable to v1.22.6 (#5050) + * Update versions: + * Fixes to Drone CI Stability (#4897) + * Add server flag to access nonlocal/nondefault k3s server (#5016) + * Update to v1.23.3 (#5027) + * Add Rocket.Chat to list of adopters (#5017) + * Move containerd wait into exported function + * Update to v1.23.2 (#4997) + * Add new upgradecluster E2E test (#4900) + * Update packaged components + * go generate + * Upgrade: metrics server version bump from v0.5.0 to v0.5.2 + * Remove ip6table rules when cleaning up k3s + * Added debug log for IPv6 Masquerading rule + * Bump etcd and containerd to track upstream + * Skip CGroup v2 evac when agent is disabled + * Added flannel-ipv6-masq flag to enable IPv6 nat + * Added iptables masquerade rules for ipv6 on flannel + * Adds the ability to compress etcd snapshots (#4866) + * Enable logging on all subcommands (#4921) + * Move ClusterResetRestore handling ControlConfig setup + * Update building documentation for macOS (#4850) + * Add basic etcd join test + * Fix handling of agent-token fallback to token + * Fix use of agent creds for secrets-encrypt and config validate + * Don't skip the dev image when skipping airgap + * Fix a typo: advertise-up -> advertise-ip (#4827) + * Integration tests utilities improvements (#4832) + * Enable make generate to use dapper and standardize go and gzip versions (#4861) + * linter doesn't actually run on windows, found these while getting it running on a windows machine + * Update channel.yaml for 1.23 + * Export default parser + * Require integration test to be run as sudo/root (#4824) + * Fix cgroup smoke test (#4823) + * Update golang + * Update modules for Kubernetes v1.23 + * Add tests to use vagrantfile (#4722) + * Bump stable to v1.22.5+k3s1 (#4821) + * package rename wasnt approved yet, backing out cruft that snuck into last pr + * Fix panic checking name of uninitialized etcd member + * Add etcd sonobuoy tests + * Add variable to enforce max test concurrency + * Fix previous channel detection + * More codespell ignores + * Update bootstrap logic to output all changed files on disk (#4800) + * delete vendor dir + * code changes to drop the vendor dir + * Move flannel logs to logrus + * Close agentReady channel only in k3s (#4792) + * Close etcd clients to avoid leaking GRPC connections + * Remove Disables, Skips and DisableKubeProxy from the comparing configs + * Add initial skeleton ADOPTERS.md to better track large use cases (#4764) + * Add ADR + * Build standalone containerd + * Build script cleanups + * Bump k3s-root to v0.10.1 + * Fix cold boot and reconcilation on secondary servers (#4747) + * docs: adrs: Dual-stack in network policy agent + * Fix snapshot restoration on fresh nodes (#4737) + * Resolve Bootstrap Migration Edge Case (#4730) + * Add in docs/adr to ensure we capture decisions properly during design calls (#4707) + * Resolve restore bootstrap (#4704) + * Update wharfie usage in windows code path + * [master] Add validation to certificate rotation (#4692) + * Bump runc to v1.0.3 + * Add `SKIP_AIRGAP` enviroment variable for make (#4688) + * Include node-external-ip in serving-kubelet.crt SANs (#4620) + * Secrets-encryption rotation (#4372) + * Check HA network parameters + * Bump wharfie to v0.5.1 and use shared decompression code + * bump kine to v0.8.1 + * Update dynamiclistener + * Nighlty automation vagrant rework (#4574) + * Bump stable to v1.21.7+k3s1 (#4636) + * Add cert rotation command (#4495) + * Update maintainers list (#4622) + * Improved cleanup for etcd unit test (#4537) ++++ 262 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/k3s-install/k3s-install.changes ++++ and /work/SRC/openSUSE:Factory/.k3s-install.new.1548/k3s-install.changes Old: ---- inform-user-of-current-k3s-SELinux-support.patch k3s-1.21.2+k3s1.tar.gz New: ---- k3s-1.23.6+k3s1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ k3s-install.spec ++++++ --- /var/tmp/diff_new_pack.QEkJGK/_old 2022-05-31 17:38:25.351032357 +0200 +++ /var/tmp/diff_new_pack.QEkJGK/_new 2022-05-31 17:38:25.359032361 +0200 @@ -1,7 +1,7 @@ # # spec file for package k3s-install # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -15,23 +15,19 @@ # Please submit bugfixes or comments via https://bugs.opensuse.org/ # + Name: k3s-install -Version: 1.21.2+k3s1 +Version: 1.23.6+k3s1 Release: 0 Summary: Installer for k3s optimised for openSUSE MicroOS License: Apache-2.0 Group: System/Management URL: https://k3s.io Source0: https://github.com/k3s-io/k3s/archive/v%{version}.tar.gz#/k3s-%{version}.tar.gz -# PATCH-FIX-UPSTREAM inform-user-of-current-k3s-SELinux-support.patch gh#k3s-io/k3s/#3088 -Patch1: inform-user-of-current-k3s-SELinux-support.patch -Requires: cni-plugins -Requires: conntrack-tools -Requires: containerd +Requires: container-selinux Requires: iptables -Requires: runc -Conflicts: kubectl Conflicts: cri-tools +Conflicts: kubectl Conflicts: kubernetes-client Conflicts: kubernetes-client-provider ++++++ _service ++++++ --- /var/tmp/diff_new_pack.QEkJGK/_old 2022-05-31 17:38:25.387032375 +0200 +++ /var/tmp/diff_new_pack.QEkJGK/_new 2022-05-31 17:38:25.391032377 +0200 @@ -2,7 +2,7 @@ <service name="tar_scm" mode="disabled"> <param name="url">https://github.com/k3s-io/k3s.git</param> <param name="scm">git</param> - <param name="revision">v1.21.2+k3s1</param> + <param name="revision">v1.23.6+k3s1</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.QEkJGK/_old 2022-05-31 17:38:25.411032387 +0200 +++ /var/tmp/diff_new_pack.QEkJGK/_new 2022-05-31 17:38:25.427032395 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/k3s-io/k3s.git</param> - <param name="changesrevision">5a67e8dc473f8945e8e181f6f0b0dbbc387f6fca</param></service></servicedata> + <param name="changesrevision">418c3fa858b69b12b9cefbcff0526f666a6236b9</param></service></servicedata> (No newline at EOF) ++++++ k3s-1.21.2+k3s1.tar.gz -> k3s-1.23.6+k3s1.tar.gz ++++++ /work/SRC/openSUSE:Factory/k3s-install/k3s-1.21.2+k3s1.tar.gz /work/SRC/openSUSE:Factory/.k3s-install.new.1548/k3s-1.23.6+k3s1.tar.gz differ: char 12, line 1