k3s: update to v1.27.5

We refresh one patch, but otherwise, the build is unchanged.

Generated via:

 scripts/oe-go-mod-autogen.py --repo https://github.com/rancher/k3s.git --rev v1.27.5+k3s1

Bumping k3s to version v1.27.5+k3s1, which comprises the following commits:

    8d074ecb5a Add RWMutex to address controller
    f365a9cb98 Add new CLI flag to enable TLS SAN CN filtering
    8d6483a59e Update to v1.27.5 (#8236)
    e31f00f863 Move flannel to 0.22.2
    f8727f56d7 E2E test for token coverage (#8184)
    84ded911e9 Bump helm-controller/klipper-helm versions
    66bae3e326 Bump dynamiclistener for init deadlock fix
    e83b1ba4aa Fixed the etcd retention to delete orphaned snapshots based on the date (#8177)
    561db17a31 chore: Bump Trivy version (#8178)
    38a0b91c1a chore: Bump Trivy version (#8150)
    7f58a1cb23 Run integration test CI in parallel (#8156)
    c97211866a Fix for cluster-reset backup from s3 when etcd snapshots are disabled (#8155)
    9702f92345 Fix for Kubeflag Integration test (#8154)
    b2e71553ce Use VERSION_K8S in tests instead of grep go.mod
    bc332ac667 Use 'go list -m' instead of grep to look up versions
    53fc3eef0a add --disable-cloud-controller and --disable-kube-proxy test (#8018)
    e551308db8 fix for etcd-snapshot delete with --etcd-s3 flag (#8110)
    45bc26309f Remove terraform test package (#8136)
    fd531140e5 Bump kine to v0.10.2
    ca7aeed090 Etcd snapshots retention when node name changes (#8099)
    23d6842f9a Bump versions for etcd, containerd, runc, kine
    a0da8eded3 Bump docker/docker to master commit
    aa76942d0f Add FilterCN function to prevent SAN Stuffing
    3515d712a7 Fix typo in terraform/README.md (#8090)
    a87b183f9c E2E: Support GOCOVER for more tests + fixes (#8080)
    46cbbab263 Consolidate CopyFile functions (#8079)
    59eec78c62 Fix tailscale bug with ip modes
    468bddb59c update stable channel to v1.27.4+k3s1 (#8067)
    767b64ba58 Fix coreos multiple installs (#8083)
    cc9dce5764 Security bump to docker/distribution (#8047)
    f21ae1d949 Make apiserver egress args conditional on egress-selector-mode
    546dc247a0 Add support for `{{ template "base" . }}` in etc/containerd/config.toml.tmpl (#7991)
    6d360e6473 Unit test for MustFindString (#8013)
    946c8ea842 ADR on secrets encryption v3 (#7938)
    780e638099 Update flannel to v0.22.1
    e56839b329 Update cni plugins version to v1.3.0
    36645e7311 fix update go version doc (#8028)
    d8ae6ef59b Update to v1.27.4 (#8014)
    be44243353 Adjust default kubeconfig file permissions (#7978)
    0b18a65d4f Revert "Warn that v1.28 will deprecate reencrypt/prepare (#7848)"
    58a8deb25d fix image_scan.sh script and download trivy version (#7950)
    3eb4e12c3b Don't use zgrep in `check-config` if apparmor porfile is enforced (#7939)
    34617390d0 Generation of certificates and keys for etcd gated if etcd is disabled. (#6998)
    2eddfe6cf4 Add retry for clone step (#7862)
    782a3a1cb4 Bump google.golang.org/grpc from 1.51.0 to 1.53.0 in /tests/terraform (#7879)
    8405813c12 Fix rootless node password (#7887)
    607320d670 Improve for K3s release Docs (#7864)
    b9a2bf11ee Support setting control server URL for Tailscale.
    4ab01f3941 Warn that v1.28 will deprecate reencrypt/prepare (#7848)
    9e334153cf add e2e s3 test (#7833)
    bca0adbca8 Fix code spell check
    7f50b40cfe Fall back to basic/bearer auth when node identity auth is rejected
    ce3443ddf6 Allow k3s to customize apiServerPort on helm-controller
    324f9ad4da fix e2e startup flaky test (#7839)
    72d50b1f7c Add `--data-dir` to the `k3s certificate rotate-ca` cli (#7791)
    d593c83603 Remove file_windows.go
    f21a01474d Check if we are on ipv4, ipv6 or dualStack when doing tailscale
    0809187cff Adding cli to custom klipper helm image (#7682)
    c7dec8ed24 Update stable channel to v1.27.3+k3s1 (#7827)
    70691a95ee Faster K3s Binary Build Option (#7805)
    2215870d5d chore: pkg imported more than once
    fe9604cac1 Update Kubernetes to v1.27.3 (#7790)
    d968e64de0 Add commands to logout from tailscale
    43611bb5ad Fix the error report
    b66a118362 Bump helm-controller to v0.15.0 for create-namespace support
    a5874f855f Remove unused libvirt config
    c6a6e8ef57 Fix spelling check
    cc22c80e49 Add issue template for OS validation (#7695)
    efa86a63e8 Remove unnecessary daemonset addition/deletion (#7696)
    7c151d468f add private registry e2e test (#7653)
    869e030bdd VPN PoC
    1e73bb8967 Run integration tests on E2E changes, ensures correct coverage values
    8f9502233a E2E: Inject gocover ENV for k3s commands
    4a68fbd8e9 E2E: Use sudo for all RunCmdOnNode
    00f3e2413f chore: Bump Trivy version (#7672)
    dc6c569b98 Shortcircuit commands with version or help flags (#7683)
    3a8e98a3b8 Bump docker go.mod (#7681)
    e5e1a674ce Enable containerd aufs/devmapper/zfs snapshotter plugins
    5170bc5a04 Improve error response logging
    45d8c1a1a2 Soft-fail on node password verification if the secret cannot be created
    b0188f5a13 Test Coverage Reports for E2E tests (#7526)
    afc88cec88 check variant before version to decide rpm target and packager
    fa0dc5900a Use el8 rpm for fedora 38 and 39 (#7664)
    7c0a7687c6 add format command on Makefile and remove vendor
    9227e0bde2 Bump vagrant libvirt with fix for plugin installs (#7605)
    b64a226ebd Make LB image configurable when compiling k3s
    a5928ee137 chore: Bump golang:alpine version
    612473755d Add ADR
    7b61aacb56 Fix test file list
    64a5f58f1e Create new kubeconfig for supervisor use
    8748813a61 Use distinct clients for supervisor, deploy, and helm controllers
    e9958cf070 Bump metrics-server to v0.6.3 and update tls-cipher-suites
    93279d2f59 Bump klipper-lb to v0.4.4
    0485a56f33 allow coredns override extensions
    85e10cf9d2 update channels (#7634)
    9543470eb7 Add el9 selinux rpm (#7635)
    d1b0254b91 Update flannel version
    213d7ad499 Revert "Add el9 selinux rpm (#7443)" (#7608)
    d55ec08675 Add el9 selinux rpm (#7443)
    fe554fe703 Pin emicklei/go-restful to v3.9.0
    91c5e0d75a Fix iptables rules clean during upgrade
    d069a85fcc Update to v1.27.2-k3s1 (#7575)
    290f67c939 Add '-all' flag to apply to inactive units
    2b24c9917c Bump alpine from 3.17 to 3.18 in /conformance (#7551)
    266926693a Bump alpine from 3.17 to 3.18 in /package (#7550)
    9bcfac8b88 Add Rotation certification Check (#7097)
    4aafff0219 Wrap error stating that it is coming from netpol
    cbe8d33c93 Bump containerd/runc to v1.7.1-k3s1/v1.1.7
    8f450bafe1 Bump helm-controller version for repo auth/ca support
    06296815e6 Adding PITS and Getdeck Beiboot as adopters thanks to Schille and Miworfi for the additions (#7524)
    607cbf0ad6 Bump containerd to v1.7.0 and move back into multicall binary
    239021e759 Consistently use constant-time comparison of password hashes
    9ec1789c21 Bump kube-router version to fix a bug when a port name is used
    c6dc789e25 Add support for `-cover` + integration test code coverage (#7415)
    3982213f06 add kube-* server flags integration tests (#7416)
    b32bf49541 Bump kine to v0.10.1
    c98137ddca Fix token startup test
    cf9ebb3259 Fail to validate server tokens that use bootstrap id/secret format
    7175ebe2be E2E: Startup test cleanup + RunCommand Enhancement (#7388)
    bbb8ee0b2d Add dependabot label and reviewer (#7423)
    cedefeff24 Bump cni plugins to v1.2.0-k3s1
    a736b4b1b9 local-storage: Fix permission (#7217)
    437ad128c7 Migrate netutil methods into /utils/net.go
    e1d4cff14c Enable FindString to search dotD config files (#7323)
    132b41c3bf Add v1.27 channel (#7387)
    d5f560360e Handle multiple arguments with StringSlice flags (#7380)
    a3ddff2f29 chore: Bump Trivy version
    e61fde93c1 Fix MemberList error handling and incorrect etcd-arg passthrough
    91afb38799 Retry cluster join on "too many learners" error
    f1b6a3549c Fix stack log on panic
    c44d33d29b Fix race condition in tunnel server startup
    1ca035accc Add e2e test for --disable-agent
    31a6386994 Improve egress selector handling on agentless servers
    5348b5e696 Improve error message when CLI wrapper Exec fails
    bbda54b332 Add longhorn storage test (#6445)
    0247794aa9 go generate
    0bbc6ad3f0 Bump traefik to v2.9.10
    1ac03aad43 Add integration tests for etc-snapshot server flags and refactor /tests/integration/integration.go/K3sStartServer (#7300)
    ef648b7a5d Bump Runc and Containerd (#7339)
    9539147ee1 Bump k3s-root for aarch64 page size fix
    ad41fb8c96 Create CRDs with schema
    bc5b42c279 Cleanup help messages (#7369)
    f076080b2b Bump cri-dockerd (#7347)
    87f0dc5dd3 update channel server for april 2023 (#7327)
    66fcca66cb ensure that klog verbosity is set to the same level as logrus by repeatedly settting it every second during k3s startup
    36699bbd60 Changed command -v redirection for iptables bin check
    944f811dc5 v1.27.1 CLI Deprecation (#7311)
    f2bde63eea Kubernetes v1.27.1 (#7271)
    8d0255af07 Bump Trivy version (#7257)
    779d5f3aa2 chore: Updated the content of the file "/tmp/updatecli/github/k3s-io/... (#7256)
    554ad87c8d chore: Bump golang:alpine version (#7292)
    257fa2c54c Update to v1.26.4-k3s1 (#7282)
    d9f40d4f5b Update install script to clean iptables rules before start
    0c683720ad Update kube-router to insert iptables rules right after kubernetes ones
    6b51ed478d Fix call for k3s-selinux versions in airgapped environments (#7264)
    027cc187ce Add coreos and sle micro to selinux support (#6945)
    30638072c9 Update klipper lb to v0.4.2 (#7210)
    6c394abb32 Add make commands to terraform automation and fix external dbs related issue (#7159)
    3e3512bdae Updated kube-route version to move the iptables ACCEPT default rule at the end of the chain
    d95980bba3 Lock bootstrap data with empty key to prevent conflicts
    12091fc724 Bump actions/setup-go from 3 to 4
    2992477c4b Debounce kubernetes service endpoint updates
    ece4d8e45c Fix tests to not hide failure location in dummp assert functions
    e54ceaa497 Fix issue with stale connections to removed LB server
    5dece799df Update remotedialer to silence errors when disconnecting
    4182dcaac8 [UpdateCLI] Improve Klipper Helm and Helm controller bumps (#7146)
    127cea1f3f Upgrade helm-controller to v0.13.3 (#7209)
    d2e04b826a Don't apply hardened args to agent (#7089)
    d388b82d25 go generate
    de80c07053 Ensure that loopback is used for the advertised address when resetting
    b010db0cff Ensure that loopback is used for the advertised address when resetting
    877247a691 Bump runc to v1.1.5
    eb982bbbde Bump etcd to v3.5.7
    cee3ddbc4a Bump Local Path Provisioner version (#7167)
    ddd9665fed Improve Trivy configuration (#7154)
    fdf994dc35 [UpdateCLI] Improve workflow (#7142)
    37b3f4d25c Run go generate in local-path-provisioner Updatecli pipeline (#7181)
    8ec7d5e6b0 fix_get_sha_url (#7187)
    a99376663b Drone Pipelines enhancement (#7169)
    fb491f5ebf Update stable channel to v1.26.3+k3s1 (#7161)
    d13ee64403 Enhance `k3s check-config` (#7091)
    01ea3ff27b Update flannel to fix NAT issue with old iptables version
    c97370be6f Clean E2E VMs before testing (#7109)
    7c32f88fec Pin golangci-lint version to v1.51.2 (#7113)
    dc4a148725 Update to v1.26.3-k3s1 (#7108)
    561ec056c1 Drone: Cleanup E2E VMs on test panic (#7104)
    9980504196 Fix to Rotate CA e2e test (#7101)
    85b261096c Add automation for Restart command for K3s  (#7002)
    19ac384929 Remove Nikolai from MAINTAINERS list (#7088)
    7d2f997b3e Added multiClusterCIDR E2E test
    262cd7de0a Added IPv6 check and agent restart on e2e test utils
    15ee88964b Added multiClusterCidr feature
    822ee79eb8 Remove deprecated nodeSelector label beta.kubernetes.io/os (#6970)
    a912902aa7 Add missing kernel config checks (#6946)
    8503d0143c skip all pipelines based on what is in the PR (#6996)
    977a85559e Add support for cross-signing new certs during ca rotation
    68fcb48a35 Update/rename certs.sh; add default cert rotation script
    b7f90f389c Wait for kubelet port to be ready before setting (#7041)
    a45d081027 update stable version in channel server (#7066)
    d218068f34 Adds a warning about editing to the containerd config.toml file (#7057)
    c259403af1 Bump various dependencies for CVEs (#7044)
    e098b99bfa Update flannel and kube-router (#7039)
    c78dc4db71 Add flannel adr (#6973)
    522ad1e697 Add E2E to Drone (#6890)
    ea094d1d49 Update to v1.26.2-k3s1 (#7011)
    ee28c20b62 Bump kine to v0.9.9
    cbe4bcfeee Add test for filterByIPFamily
    cc333d8d0c Fix ServiceLB dual-stack ingress IP listing
    2156015521 Improve default umask for certs.sh
    23d98cec22 Fix CACertPath stripping trailing path components
    0c302f4341 Fix etcd member deletion
    9efa0797b7 Don't default to local K3s for startup test (#6950)
    7739c8b97e Update flannel to v0.21.1
    b8e69712a3 Updated flannel version to v0.21.0
    3d146d2f1b Allow for multiple sets of leader-elected controllers
    0d416d797d Wait for server to become ready before creating token
    290d7e8fd1 Fix access to hostNetwork port on NodeIP when egress-selector-mode=agent
    ddcc4d4034 go generate
    c6d0afd0cb Check for existing resources before creating them
    32d62c5786 Use default address family when adding kubernetes service address to SAN list
    a92f163c9d Add NATS to the list of supported data stores (#6876)
    b43dd7746d Add CI test
    c900089e88 Add ADR
    87f9c4ab11 Ensure that node exists when using node auth
    992e64993d Add support for kubeadm token and client certificate auth
    373df1c8b0 Add support for `k3s token` command
    7d49202721 Ignore value conflicts when reencrypting secrets (#6850)
    be7f751863 Add e2e tests for CA cert rotation
    8a6404f97c Add basic test for custom CA certs
    9b6b72941f Clarify ADR based on design review feedback
    f13768c247 Add ADR
    215fb157ff Add `certificate rotate-ca` to write updated CA certs to datastore
    3c324335b2 Add utility functions for getting kubernetes client
    58d40327b4 Fix CA cert hash for root certs
    0919ec6755 Ensure cluster-signing CA files contain only a single CA cert
    1ec242d816 Add example certificate generation script
    7e59376bb9 Fix check for (open)SUSE version (#6791)
    ee007bc7cf Bump deps: trivy, sonobuoy, dapper (#6807)
    bb353f5d2b Fix reference to documentation (#6860)
    7cad3db251 E2E: Consoldiate docker and prefer bundled tests into new startup test (#6851)
    32086717fc Ensure flag type consistency (#6852)
    750cff561d Bump vagrant boxes to fedora37 (#6832)
    9fcc7c0db8 Fix cronjob example (#6707)
    0d4caf4e24 Wait for cri-dockerd socket (#6812)
    1c6fde9a52 go generate
    369b81b45e Honor Service ExternalTrafficPolicy
    94d1a87509 Bump wrangler version for EndpointSlice support
    86e36225f5 Consolidate E2E tests and GH Actions (#6772)
    808c71a63e Add Ayedo (#6801)
    75f77ab951 E2E Rancher and Hardened script improvements (#6778)
    f0655f153e update stable channel to v1.25.6+k3s1 (#6828)
    3cb6fa5cc7 Set cri-dockerd version at build time
    f72649d1bd Bump cri-dockerd
    89f7062431 Add build tag to disable cri-dockerd
    f10af367c3 Update to v1.26.1-k3s1 (#6774)
    f19892c2d2 drone correct plugins/docker tag supporting linux/arm (#6769)
    291f8bfe00 Slow dependency CI to weekly (#6764)
    2007cdd54f generate report and upload test results (#6737)
    7bbcac92fd Bump download action to v3 (#6746)
    d71ab6317e Update stable to 1.25.5+k3s2 (#6753)
    f54b5e4fa0 Fix CI tests
    23c1040adb Bugfix: do not break cert-manager when pprof is enabled (#6635)
    a4549cf989 chore: Bump golang:alpine version (#6683)
    8340b54309 Pass through default tls-cipher-suites
    cc3583399a Add explicit permissions to workflows (#6700)
    d85952d6a0 Bump ubuntu from 20.04 to 22.04 in /tests/e2e/scripts (#6686)
    674a05478f Containerd restart testlet (#6696)
    d78e490716 Bump containerd to v1.6.15-k3s1
    e53500f37f Bump alpine from 3.16 to 3.17 in /conformance (#6687)
    c7151e8b61 Bump alpine from 3.16 to 3.17 in /package (#6688)
    3cafc8e6dd RIP Codespell (#6701)
    fd8481a29d Adjust e2e test run script and fixes (#6718)
    a298bfdb18 Add jitter to scheduled snapshots and retry harder on conflicts
    f0ec6a4c12 Exclude December r1 releases from channel server
    bc6bebc998 Bump containerd to v1.6.14-k3s1
    454440f9a3 Add Dependabot config for security ADR (#6560)
    870d9c32b0 Fix OpenRC init script error 'openrc-run.sh: source: not found' (#6614)
    97f162291a Change Updatecli GH action reference branch (#6682)
    beafd9eaff Update stable to v1.25.5 (#6618)
    8f28de259c Add initial Updatecli ADR automation (#6583)
    9e97a3b4aa Current status badges (#6653)
    fae8817655 Bump k3s-root version to v0.12.1
    0c9b43746b Preload iptable_filter/ip6table_filter
    f8b661d590 Update to v1.26.0-k3s1 (#6370)
    b5d39df929 Deprecation of `etcd-snapshot` command in v1.26 (#6575)
    d723775792 Remove deprecated flags in v1.26 (#6574)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

0 files changed, 0 insertions, 0 deletions