[release-1.30] Backports for 2024-09

[brandond]

Proposed Changes

Backports:

• fixes:
  • Fix rotateca validation failures when not touching default self-signed CAs #10710
  • Only clean up containerd hosts dirs managed by k3s #10823
• version bumps:
  • Bump runc to v1.1.13 #10737
  • Bump traefik to v2.11.8 #10779
  • Update coredns to 1.11.3 and metrics-server to 0.7.2 #10760
  • Bump helm-controller for skip-verify/plain-http and updated tolerations #10832
• trivy:
  • Add trivy scanning to PR reports #10758
  • Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 #10795
  • Fix /trivy action running against target branch instead of PR branch #10824
  • Tag PR image build as latest before scanning #10825

Types of Changes

backports

Verification

see linked issues

Testing

Linked Issues

• [Release-1.30] - Failure to read certificates and key files during k3s certificate rotate-ca #10742
• [Release-1.30] - Custom agent/etc/containerd/certs.d/* files are deleted by k3s on startup #10839
• [Release-1.30] - Bump runc to v1.1.14 #10746
• [Release-1.30] - Bump traefik to v2.11 #10776
• [Release-1.30] - Bump coredns to v1.11.3 #10768
• [Release-1.30] - Bump metrics-server version #10772
• [Release-1.30] - Bump helm-controller to add support for skip-verify/plain-http and updated tolerations #10834

User-Facing Change

Further Comments

[codecov]

Codecov Report

Attention: Patch coverage is 10.41667% with 43 lines in your changes missing coverage. Please review.

Project coverage is 43.48%. Comparing base (ae5e25f) to head (52be6fb).
Report is 10 commits behind head on release-1.30.

Files with missing lines	Patch %	Lines
pkg/agent/containerd/config.go	12.00%	18 Missing and 4 partials ⚠️
pkg/server/cert.go	0.00%	20 Missing ⚠️
pkg/bootstrap/bootstrap.go	66.66%	1 Missing ⚠️

❗ There is a different number of reports uploaded between BASE (ae5e25f) and HEAD (52be6fb). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (ae5e25f)	HEAD (52be6fb)
e2etests	7	6

Additional details and impacted files

@@               Coverage Diff                @@
##           release-1.30   #10843      +/-   ##
================================================
- Coverage         49.63%   43.48%   -6.16%     
================================================
  Files               178      178              
  Lines             14894    14931      +37     
================================================
- Hits               7393     6492     -901     
- Misses             6165     7243    +1078     
+ Partials           1336     1196     -140     

Flag	Coverage Δ
e2etests	36.39% <10.41%> (-9.95%)	⬇️
inttests	19.74% <4.16%> (-17.20%)	⬇️
unittests	13.43% <0.00%> (-0.04%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.