[release-1.29] Backports for 2024-06 release cycle

.github/workflows/e2e.yaml

@@ -36,8 +36,7 @@ jobs:
  strategy:
  fail-fast: false
  matrix:
- # TODO fix embeddedmirror and add it to the matrix
- etest: [startup, s3, btrfs, externalip, privateregistry, wasm]
+ etest: [startup, s3, btrfs, externalip, privateregistry, embeddedmirror, wasm]
  max-parallel: 3
  steps:
  - name: "Checkout"
@@ -116,4 +115,4 @@ jobs:
  chmod +x ./dist/artifacts/k3s
  . ./tests/docker/test-helpers
  . ./tests/docker/test-run-${{ matrix.dtest }}
- echo "Did test-run-${{ matrix.dtest }} pass $?"
+ echo "Did test-run-${{ matrix.dtest }} pass $?"

.golangci.json

@@ -10,20 +10,20 @@
  ]
  },
  "run": {
- "skip-dirs": [
+ "deadline": "5m"
+ },
+ "issues": {
+ "exclude-dirs": [
  "build",
  "contrib",
  "manifests",
  "package",
  "scripts",
  "vendor"
  ],
- "skip-files": [
+ "exclude-files": [
  "/zz_generated_"
  ],
- "deadline": "5m"
- },
- "issues": {
  "exclude-rules": [
  {
  "linters": "typecheck",
@@ -43,4 +43,4 @@
  }
  ]
  }
-}
+}

Dockerfile.dapper

@@ -22,7 +22,7 @@ RUN apk -U --no-cache add \
 RUN python3 -m pip install awscli
 
 # Install Trivy
-ENV TRIVY_VERSION="0.50.1"
+ENV TRIVY_VERSION="0.51.4"
 RUN case "$(go env GOARCH)" in \
  arm64) TRIVY_ARCH="ARM64" ;; \
  amd64) TRIVY_ARCH="64bit" ;; \

Dockerfile.test

@@ -44,7 +44,7 @@ RUN vagrant box add generic/ubuntu2204 --provider libvirt --force
 RUN curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"; \
  chmod +x ./kubectl; \
  mv ./kubectl /usr/local/bin/kubectl
-RUN GO_VERSION=go1.21.5; \
+RUN GO_VERSION=go1.21.9; \
  curl -O -L "https://golang.org/dl/${GO_VERSION}.linux-amd64.tar.gz"; \
  rm -rf /usr/local/go; \
  tar -C /usr/local -xzf ${GO_VERSION}.linux-amd64.tar.gz;

conformance/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.18
+FROM alpine:3.20
 ENV SONOBUOY_VERSION 0.57.1
 RUN apk add curl tar gzip
 RUN curl -sfL https://github.com/vmware-tanzu/sonobuoy/releases/download/v${SONOBUOY_VERSION}/sonobuoy_${SONOBUOY_VERSION}_linux_amd64.tar.gz | tar xvzf - -C /usr/bin

contrib/util/check-config.sh

@@ -388,7 +388,7 @@ flags="
  CGROUPS CGROUP_PIDS CGROUP_CPUACCT CGROUP_DEVICE CGROUP_FREEZER CGROUP_SCHED CPUSETS MEMCG
  KEYS
  VETH BRIDGE BRIDGE_NETFILTER
- IP_NF_FILTER IP_NF_TARGET_MASQUERADE
+ IP_NF_FILTER IP_NF_TARGET_MASQUERADE IP_NF_TARGET_REJECT
  NETFILTER_XT_MATCH_ADDRTYPE NETFILTER_XT_MATCH_CONNTRACK NETFILTER_XT_MATCH_IPVS NETFILTER_XT_MATCH_COMMENT NETFILTER_XT_MATCH_MULTIPORT
  IP_NF_NAT NF_NAT
  POSIX_MQUEUE

go.mod

@@ -1,12 +1,12 @@
 module github.com/k3s-io/k3s
 
-go 1.21
+go 1.21.9
 
 replace (
  github.com/Microsoft/hcsshim => github.com/Microsoft/hcsshim v0.11.0
  github.com/Mirantis/cri-dockerd => github.com/k3s-io/cri-dockerd v0.3.12-k3s1 // k3s/release-1.28
  github.com/cloudnativelabs/kube-router/v2 => github.com/k3s-io/kube-router/v2 v2.1.2
- github.com/containerd/containerd => github.com/k3s-io/containerd v1.7.15-k3s1
+ github.com/containerd/containerd => github.com/k3s-io/containerd v1.7.17-k3s1
  github.com/docker/distribution => github.com/docker/distribution v2.8.3+incompatible
  github.com/docker/docker => github.com/docker/docker v25.0.4+incompatible
  github.com/emicklei/go-restful/v3 => github.com/emicklei/go-restful/v3 v3.9.0
@@ -19,21 +19,21 @@ replace (
  github.com/prometheus/client_golang => github.com/prometheus/client_golang v1.18.0
  github.com/prometheus/common => github.com/prometheus/common v0.45.0
  github.com/rancher/wrangler => github.com/rancher/wrangler v1.1.1-0.20230818201331-3604a6be798d
- github.com/spegel-org/spegel => github.com/k3s-io/spegel v0.0.20-k3s1
+ github.com/spegel-org/spegel => github.com/k3s-io/spegel v0.0.23-0.20240516234953-f3d2c4072314
  github.com/ugorji/go => github.com/ugorji/go v1.2.11
- go.etcd.io/etcd/api/v3 => github.com/k3s-io/etcd/api/v3 v3.5.9-k3s1
- go.etcd.io/etcd/client/pkg/v3 => github.com/k3s-io/etcd/client/pkg/v3 v3.5.9-k3s1
- go.etcd.io/etcd/client/v2 => github.com/k3s-io/etcd/client/v2 v2.305.9-k3s1
- go.etcd.io/etcd/client/v3 => github.com/k3s-io/etcd/client/v3 v3.5.9-k3s1
- go.etcd.io/etcd/etcdutl/v3 => github.com/k3s-io/etcd/etcdutl/v3 v3.5.9-k3s1
- go.etcd.io/etcd/pkg/v3 => github.com/k3s-io/etcd/pkg/v3 v3.5.9-k3s1
- go.etcd.io/etcd/raft/v3 => github.com/k3s-io/etcd/raft/v3 v3.5.9-k3s1
- go.etcd.io/etcd/server/v3 => github.com/k3s-io/etcd/server/v3 v3.5.9-k3s1
+ go.etcd.io/etcd/api/v3 => github.com/k3s-io/etcd/api/v3 v3.5.13-k3s1
+ go.etcd.io/etcd/client/pkg/v3 => github.com/k3s-io/etcd/client/pkg/v3 v3.5.13-k3s1
+ go.etcd.io/etcd/client/v2 => github.com/k3s-io/etcd/client/v2 v2.305.13-k3s1
+ go.etcd.io/etcd/client/v3 => github.com/k3s-io/etcd/client/v3 v3.5.13-k3s1
+ go.etcd.io/etcd/etcdutl/v3 => github.com/k3s-io/etcd/etcdutl/v3 v3.5.13-k3s1
+ go.etcd.io/etcd/pkg/v3 => github.com/k3s-io/etcd/pkg/v3 v3.5.13-k3s1
+ go.etcd.io/etcd/raft/v3 => github.com/k3s-io/etcd/raft/v3 v3.5.13-k3s1
+ go.etcd.io/etcd/server/v3 => github.com/k3s-io/etcd/server/v3 v3.5.13-k3s1
  go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful => go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful v0.44.0
- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc => go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.35.0
+ go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc => go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.45.0
  golang.org/x/crypto => golang.org/x/crypto v0.17.0
  golang.org/x/net => golang.org/x/net v0.17.0
- golang.org/x/sys => golang.org/x/sys v0.13.0
+ golang.org/x/sys => golang.org/x/sys v0.18.0
  google.golang.org/genproto => google.golang.org/genproto v0.0.0-20230525234035-dd9d682886f9
  google.golang.org/grpc => google.golang.org/grpc v1.58.3
  gopkg.in/square/go-jose.v2 => gopkg.in/square/go-jose.v2 v2.6.0
@@ -81,7 +81,7 @@ require (
  github.com/cloudnativelabs/kube-router/v2 v2.0.0-00010101000000-000000000000
  github.com/containerd/aufs v1.0.0
  github.com/containerd/cgroups/v3 v3.0.2
- github.com/containerd/containerd v1.7.14
+ github.com/containerd/containerd v1.7.16
  github.com/containerd/fuse-overlayfs-snapshotter v1.0.8
  github.com/containerd/stargz-snapshotter v0.15.1
  github.com/containerd/zfs v1.1.0
@@ -104,14 +104,14 @@ require (
  github.com/ipfs/go-log/v2 v2.5.1
  github.com/joho/godotenv v1.5.1
  github.com/json-iterator/go v1.1.12
- github.com/k3s-io/helm-controller v0.15.9
- github.com/k3s-io/kine v0.11.7
+ github.com/k3s-io/helm-controller v0.15.10
+ github.com/k3s-io/kine v0.11.9
  github.com/klauspost/compress v1.17.7
  github.com/kubernetes-sigs/cri-tools v0.0.0-00010101000000-000000000000
  github.com/lib/pq v1.10.2
  github.com/libp2p/go-libp2p v0.33.2
  github.com/mattn/go-sqlite3 v1.14.19
- github.com/minio/minio-go/v7 v7.0.33
+ github.com/minio/minio-go/v7 v7.0.70
  github.com/mwitkow/go-http-dialer v0.0.0-20161116154839-378f744fb2b8
  github.com/natefinch/lumberjack v2.0.0+incompatible
  github.com/onsi/ginkgo/v2 v2.16.0
@@ -120,7 +120,7 @@ require (
  github.com/opencontainers/selinux v1.11.0
  github.com/otiai10/copy v1.7.0
  github.com/pkg/errors v0.9.1
- github.com/prometheus/client_golang v1.19.0
+ github.com/prometheus/client_golang v1.19.1
  github.com/prometheus/common v0.49.0
  github.com/rancher/dynamiclistener v0.3.6
  github.com/rancher/lasso v0.0.0-20230830164424-d684fdeb6f29
@@ -144,7 +144,7 @@ require (
  go.uber.org/zap v1.27.0
  golang.org/x/crypto v0.22.0
  golang.org/x/net v0.24.0
- golang.org/x/sync v0.6.0
+ golang.org/x/sync v0.7.0
  golang.org/x/sys v0.19.0
  google.golang.org/grpc v1.63.2
  gopkg.in/yaml.v2 v2.4.0
@@ -198,13 +198,11 @@ require (
  github.com/beorn7/perks v1.0.1 // indirect
  github.com/blang/semver v3.5.1+incompatible // indirect
  github.com/bronze1man/goStrongswanVici v0.0.0-20221114103242-3f6dc524986c // indirect
- github.com/bytedance/sonic v1.9.1 // indirect
  github.com/canonical/go-dqlite v1.5.1 // indirect
  github.com/cenkalti/backoff/v4 v4.2.1 // indirect
  github.com/cespare/xxhash/v2 v2.2.0 // indirect
  github.com/chai2010/gettext-go v1.0.2 // indirect
  github.com/checkpoint-restore/go-criu/v5 v5.3.0 // indirect
- github.com/chenzhuoyu/base64x v0.0.0-20221115062448-fe3a3abad311 // indirect
  github.com/cilium/ebpf v0.9.1 // indirect
  github.com/container-storage-interface/spec v1.8.0 // indirect
  github.com/containerd/btrfs/v2 v2.0.0 // indirect
@@ -214,11 +212,11 @@ require (
  github.com/containerd/fifo v1.1.0 // indirect
  github.com/containerd/go-cni v1.1.9 // indirect
  github.com/containerd/go-runc v1.0.0 // indirect
- github.com/containerd/imgcrypt v1.1.7 // indirect
+ github.com/containerd/imgcrypt v1.1.8 // indirect
  github.com/containerd/log v0.1.0 // indirect
- github.com/containerd/nri v0.6.0 // indirect
+ github.com/containerd/nri v0.6.1 // indirect
  github.com/containerd/stargz-snapshotter/estargz v0.15.1 // indirect
- github.com/containerd/ttrpc v1.2.3 // indirect
+ github.com/containerd/ttrpc v1.2.4 // indirect
  github.com/containerd/typeurl v1.0.2 // indirect
  github.com/containerd/typeurl/v2 v2.1.1 // indirect
  github.com/containernetworking/cni v1.1.2 // indirect
@@ -254,18 +252,12 @@ require (
  github.com/francoispqt/gojay v1.2.13 // indirect
  github.com/fsnotify/fsnotify v1.7.0 // indirect
  github.com/fvbommel/sortorder v1.1.0 // indirect
- github.com/gabriel-vasile/mimetype v1.4.2 // indirect
  github.com/ghodss/yaml v1.0.0 // indirect
- github.com/gin-contrib/sse v0.1.0 // indirect
- github.com/gin-gonic/gin v1.9.1 // indirect
  github.com/go-errors/errors v1.4.2 // indirect
  github.com/go-jose/go-jose/v3 v3.0.3 // indirect
  github.com/go-openapi/jsonpointer v0.20.2 // indirect
  github.com/go-openapi/jsonreference v0.20.4 // indirect
  github.com/go-openapi/swag v0.22.9 // indirect
- github.com/go-playground/locales v0.14.1 // indirect
- github.com/go-playground/universal-translator v0.18.1 // indirect
- github.com/go-playground/validator/v10 v10.14.0 // indirect
  github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 // indirect
  github.com/goccy/go-json v0.10.2 // indirect
  github.com/godbus/dbus/v5 v5.1.0 // indirect
@@ -326,7 +318,6 @@ require (
  github.com/klauspost/cpuid/v2 v2.2.7 // indirect
  github.com/koron/go-ssdp v0.0.4 // indirect
  github.com/kylelemons/godebug v1.1.0 // indirect
- github.com/leodido/go-urn v1.2.4 // indirect
  github.com/libopenstorage/openstorage v1.0.0 // indirect
  github.com/libp2p/go-buffer-pool v0.1.0 // indirect
  github.com/libp2p/go-cidranger v1.1.0 // indirect
@@ -402,7 +393,7 @@ require (
  github.com/opentracing/opentracing-go v1.2.0 // indirect
  github.com/pbnjay/memory v0.0.0-20210728143218-7b4eea64cf58 // indirect
  github.com/pelletier/go-toml v1.9.5 // indirect
- github.com/pelletier/go-toml/v2 v2.2.0 // indirect
+ github.com/pelletier/go-toml/v2 v2.2.2 // indirect
  github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
  github.com/pierrec/lz4 v2.6.0+incompatible // indirect
  github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
@@ -419,26 +410,22 @@ require (
  github.com/russross/blackfriday/v2 v2.1.0 // indirect
  github.com/seccomp/libseccomp-golang v0.10.0 // indirect
  github.com/shengdoushi/base58 v1.0.0 // indirect
- github.com/slok/go-http-metrics v0.10.0 // indirect
  github.com/soheilhy/cmux v0.1.5 // indirect
  github.com/spaolacci/murmur3 v1.1.0 // indirect
  github.com/spf13/afero v1.11.0 // indirect
  github.com/spf13/cobra v1.8.0 // indirect
- github.com/stefanberger/go-pkcs11uri v0.0.0-20201008174630-78d3cae3a980 // indirect
+ github.com/stefanberger/go-pkcs11uri v0.0.0-20230803200340-78284954bff6 // indirect
  github.com/stoewer/go-strcase v1.2.0 // indirect
  github.com/syndtr/gocapability v0.0.0-20200815063812-42c35b437635 // indirect
  github.com/syndtr/goleveldb v1.0.0 // indirect
  github.com/tchap/go-patricia/v2 v2.3.1 // indirect
  github.com/tidwall/btree v1.6.0 // indirect
  github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 // indirect
- github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
- github.com/ugorji/go/codec v1.2.11 // indirect
  github.com/urfave/cli/v2 v2.26.0 // indirect
  github.com/vbatts/tar-split v0.11.5 // indirect
  github.com/vishvananda/netns v0.0.4 // indirect
  github.com/vmware/govmomi v0.30.6 // indirect
  github.com/whyrusleeping/go-keyspace v0.0.0-20160322163242-5b898ac5add1 // indirect
- github.com/xenitab/pkg/gin v0.0.9 // indirect
  github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510 // indirect
  github.com/xlab/treeprint v1.2.0 // indirect
  github.com/xrash/smetrics v0.0.0-20201216005158-039620a65673 // indirect
@@ -463,7 +450,6 @@ require (
  go.uber.org/fx v1.20.1 // indirect
  go.uber.org/mock v0.4.0 // indirect
  go.uber.org/multierr v1.11.0 // indirect
- golang.org/x/arch v0.3.0 // indirect
  golang.org/x/exp v0.0.0-20240222234643-814bf88cf225 // indirect
  golang.org/x/mod v0.15.0 // indirect
  golang.org/x/oauth2 v0.17.0 // indirect
@@ -511,6 +497,6 @@ require (
  sigs.k8s.io/kustomize/kustomize/v5 v5.0.4-0.20230601165947-6ce0bf390ce3 // indirect
  sigs.k8s.io/kustomize/kyaml v0.14.3-0.20230601165947-6ce0bf390ce3 // indirect
  sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
- tags.cncf.io/container-device-interface v0.6.2 // indirect
- tags.cncf.io/container-device-interface/specs-go v0.6.0 // indirect
+ tags.cncf.io/container-device-interface v0.7.2 // indirect
+ tags.cncf.io/container-device-interface/specs-go v0.7.0 // indirect
 )