Open manuelbuil opened 1 week ago
Attention: Patch coverage is 72.72727%
with 3 lines
in your changes missing coverage. Please review.
Project coverage is 42.44%. Comparing base (
b93fd98
) to head (cd5478f
). Report is 3 commits behind head on master.
Files with missing lines | Patch % | Lines |
---|---|---|
pkg/cluster/managed.go | 72.72% | 2 Missing and 1 partial :warning: |
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
🚨 Try these New Features:
- Add a default handler in
managed.go
that is only added if etcd isn't enabled. This is probably technically safer, since it would avoid installing the error handler if etcd is running.
Thanks for the explanation and the suggestion. I took this path, I also agree it is safer
/trivy
:x: Trivy scan action failed, check logs :x:
:x: Trivy scan action failed, check logs :x:
❌ Trivy scan action failed, check logs ❌
2024-11-21T18:45:05Z ERROR [vulndb] Failed to download artifact repo="ghcr.io/aquasecurity/trivy-db:2" err="OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-db/manifests/2: TOOMANYREQUESTS: retry-after: 324.606µs, allowed: 44000/minute\n\n"
scale up trivy!
:star2: No High or Critical CVEs Found :star2:
Proposed Changes
This PR does two things: 1 - Fixes the e2e test doing backup/restore from a snapshot. It was failing with:
When comparing the steps it was following and the documentation, it was indeed wrong. The rest of the servers don't have to run
--cluster-reset
. When removing the stepResets non bootstrap nodes
, the e2e test works again2 - I must confess that I wasted an hour trying to use
k3s etcd-snapshot
in a k3s cluster that was not using etcd. When doing that, the error we get is super confusing:However, there is nothing in the logs. The problem is that we are treating a 404 (url does not exist) as Unauthorized https://github.com/k3s-io/k3s/blob/master/pkg/server/router.go#L87. We have been doing that for a long time, so it is probably risky to change that. Therefore, I decided to check if
kine.sock
exists anddb/etcd/config
not in the dataDir. If that's the case, we printK3s is not deployed with an etcd datastore
Types of Changes
Test fix + guardrail
Verification
1 - Run the e2e test 2 - Run any
k3s etcd-snapshot
command without etcd as datastoreTesting
Linked Issues
User-Facing Change
Further Comments