)]}' { "log": [ { "commit": "be0b4c9158371b29c21badc5702ee50ed8179935", "tree": "ac18da68113403d9461227d5604ac2864f800ba3", "parents": [ "6920c47bdd3cd6a0f78b4815bc6378c98c9d159e" ], "author": { "name": "Leopold Schabel", "email": "leo@monogon.tech", "time": "Thu Aug 15 10:08:22 2024 +0000" }, "committer": { "name": "Leopold Schabel", "email": "leo@monogon.tech", "time": "Mon Aug 19 13:12:18 2024 +0000" }, "message": "Revert \"metropolis/node/core: mount /sys/fs/bpf\"\n\nThis reverts commit 201b527e632caec8480500bc1cca5d8ab0f5896b.\n\nThe mount does not propagate to privileged containers,\nso we don\u0027t need this to be mounted on the host after all.\n\nChange-Id: I6f6589664396f5285ba28b981faf8654929ea99a\nReviewed-on: https://review.monogon.dev/c/monogon/+/3262\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "cc27faac73b1bff4b0d31ffacb0d938022db75ea", "tree": "d081a0655a5cebd62fc19e4ce9d67515e939e626", "parents": [ "5748bd9df1a0c92c1fb04056a6c2d88809741026" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Aug 01 02:18:35 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue Aug 13 14:39:14 2024 +0000" }, "message": "m/n/b/mkimage/osimage: rename osimage.Create to osimage.Write\n\nWe aren\u0027t creating an osimage, we are writing it to a disk.\n\nChange-Id: If3769e18dbe988556b0c607ad82b734f21637836\nReviewed-on: https://review.monogon.dev/c/monogon/+/3294\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "82e6af71ad2b7927de8d754799271ee9f39506f9", "tree": "4da4ec95a6e4c5f58957c555d8646e46dbb25c6d", "parents": [ "bceb1604c4d6ce1396c63083d2fd8aae98346cf3" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue Jul 23 00:05:42 2024 +0000" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue Aug 13 12:43:45 2024 +0000" }, "message": "treewide: replace hardcoded runfiles paths\n\nWe hardcoded some of the runfiles paths to find specific files. This replaces the hardcoded paths by a call to rlocationpath. This prevents running a target without the correct dependencies at build time instead of at runtime\n\nChange-Id: I7ce56935ac80be6b28b824ccb0781ab401bd6521\nReviewed-on: https://review.monogon.dev/c/monogon/+/3301\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "bceb1604c4d6ce1396c63083d2fd8aae98346cf3", "tree": "a0ce4ce421b7be39709ad4bcf51d8e4e048d024d", "parents": [ "efbde1900fbeb9ab7cab58cd53a39f8cab859e7c" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Jul 10 18:17:32 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Aug 12 13:01:56 2024 +0000" }, "message": "m/n/b/mkimage/osimage: allow planning for installations\n\nThis allows planning an installation before actually committing any\nwrites to the underlying blockdevice. By adding this we can ensure we\ndon\u0027t brick any machines/bring them into a state where only manual\nintervention brings it back.\n\nChange-Id: I5f760c8aa83669a23b7ba55ba7ea471743e9e849\nReviewed-on: https://review.monogon.dev/c/monogon/+/3212\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "efbde1900fbeb9ab7cab58cd53a39f8cab859e7c", "tree": "3bd21c61782fd93566490507e31bec2da74eb6b0", "parents": [ "f9a8dcda408842251433b7d3d734d4f0710d1ba2" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Wed Jul 31 14:53:20 2024 +0000" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Tue Aug 06 14:35:51 2024 +0000" }, "message": "metropolis/node: export core/supervisor metrics\n\nChange-Id: Ibe3be27f9a5b3fc5e36babecc74d7d784d1f5e10\nReviewed-on: https://review.monogon.dev/c/monogon/+/3292\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "a3e38cf9a4fcc0940402c4f18172662a84e28151", "tree": "add9e62b0d9598619e0000353999729fc7b376b2", "parents": [ "58079040557df838ec418d96155df0b273331dab" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Wed Jul 31 14:40:04 2024 +0000" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Thu Aug 01 10:11:03 2024 +0000" }, "message": "metroctl: add metrics command\n\nThis is a little helper command to access Node metrics easily for people\n(eg. developers!) who don\u0027t have a metrics collection infrastructure set\nup.\n\nChange-Id: Ibe3b4356db88e31c3156289ab8d8ca2985266b4b\nReviewed-on: https://review.monogon.dev/c/monogon/+/3288\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n" }, { "commit": "201b527e632caec8480500bc1cca5d8ab0f5896b", "tree": "b57aa1b85cfa8ab5878809bf286b713f360da831", "parents": [ "f65898347121ef898f7efcaacfd7f2063045132a" ], "author": { "name": "Leopold Schabel", "email": "leo@monogon.tech", "time": "Wed Jul 24 16:31:42 2024 +0000" }, "committer": { "name": "Leopold Schabel", "email": "leo@monogon.tech", "time": "Thu Jul 25 12:02:52 2024 +0000" }, "message": "metropolis/node/core: mount /sys/fs/bpf\n\nRequired for BPF maps. Currently only used by specific customer\nworkloads which run inside the host network namespace.\n\nChange-Id: Ib948c76ff5eecbc4f8b76d6b48e0eb5ce2e1b1ae\nReviewed-on: https://review.monogon.dev/c/monogon/+/3249\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "4cfcc0b0b25fba463225feae64232d40e02b570c", "tree": "69a7d9ce2d531c763d482e340afe5ceced40c068", "parents": [ "c5e0dbd3437d5c739d42d7724a619b126eabdbf5" ], "author": { "name": "Leopold Schabel", "email": "leo@monogon.tech", "time": "Wed Jul 24 13:23:26 2024 +0000" }, "committer": { "name": "Leopold Schabel", "email": "leo@monogon.tech", "time": "Thu Jul 25 12:02:52 2024 +0000" }, "message": "metropolis/node/kubernetes: allow privileged pods\n\nThere are valid use cases for privileged pods in low-assurance clusters.\nIn particular, \"kubectl debug node/... --profile\u003dsysadmin\" is very\nuseful for debugging and requires privileged pods.\n\nIn a production cluster, we\u0027d want to restrict privileged pods\nand other dangerous capabilities (which are already allowed)\nusing pod security or more sophisticated admission controllers,\nincluding enforcing future cluster integrity policy levels.\n\nChange-Id: I8f6470f636cdd13b7c980f04f08f95aaff833b20\nReviewed-on: https://review.monogon.dev/c/monogon/+/3246\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "c5e0dbd3437d5c739d42d7724a619b126eabdbf5", "tree": "d4ddbafe2c049e6bcdf97018d1419e62828f8cbf", "parents": [ "93ba80788f4599aa4afbf9937224046e96dd1713" ], "author": { "name": "Leopold Schabel", "email": "leo@monogon.tech", "time": "Wed Jul 24 13:18:45 2024 +0000" }, "committer": { "name": "Leopold Schabel", "email": "leo@monogon.tech", "time": "Thu Jul 25 12:02:52 2024 +0000" }, "message": "metropolis/node/core: add tmpfs at /dev/shm\n\nk8s requires /dev/shm for \"kubectl debug\" to work.\n\nFixes https://github.com/monogon-dev/monogon/issues/305.\nTested manually on a local test cluster.\n\nChange-Id: I3b29ea75d59e115da80dadf48dabbaba23d7099b\nReviewed-on: https://review.monogon.dev/c/monogon/+/3245\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "aea01b6282f71949ca67d71f0f4508685c4a4a95", "tree": "e3f793296a09b59359b66f520ee4de6da96a6bfa", "parents": [ "f1e0fa11da40acaffe33174f9c62eaad7918d4e0" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Jul 17 21:31:42 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Jul 22 21:25:58 2024 +0000" }, "message": "treewide: add tools.go for all go binaries\n\nWithout these we don\u0027t actually pin the versions inside our go.mod and future versions of gazelle won\u0027t create any repositories for them.\n\nChange-Id: I6b3951a1a7c8ee3e73792dc556becc0828873074\nReviewed-on: https://review.monogon.dev/c/monogon/+/3227\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "3325b4b940370ad4282fdaa6027a5672ff8fdc2a", "tree": "7308d80e86a0d0ea34a5d2d5c8dac8cb2dd8efeb", "parents": [ "41b244857ee793cbf74552ec39f2ff614a686a56" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Jul 15 19:19:49 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Jul 22 21:25:58 2024 +0000" }, "message": "workspace: bump bazel_gazelle to v0.37.0\n\nChange-Id: I45a7769d80781075fdfb1c438240a75629dd572a\nReviewed-on: https://review.monogon.dev/c/monogon/+/3220\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "41b244857ee793cbf74552ec39f2ff614a686a56", "tree": "685a25bbe631c303b88f2adb84702ac0545031a0", "parents": [ "5be299e081abceb554e75b87e0cf856a69dc59c2" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Thu May 02 16:53:57 2024 +0200" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Tue Jul 16 12:26:37 2024 +0000" }, "message": "m/n/c/network: implement ARP announcements\n\nThis implements ARP announcements in the Metropolis network stack.\nIts intent is to help IP stacks on the same broadcast domain to update\ntheir ARP entries once a Metropolis network stack comes up.\nThe format of the ARP packets is chosen to bypass most EVPN ARP\nsuppression mechanisms to ensure this also works with these systems.\n\nChange-Id: I2db1248f7034ea56930cf6f4a93de598b0f8c7de\nReviewed-on: https://review.monogon.dev/c/monogon/+/3074\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "2a3e336daac918e2d52390a3d96041efba768784", "tree": "604e115fd5136e11fcff156c17b2cafc33ee318e", "parents": [ "ba404a60ffd9e9a6143a3f6f7e57e400607a5cae" ], "author": { "name": "Jan Schär", "email": "jan@monogon.tech", "time": "Thu Jul 11 18:08:18 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@monogon.tech", "time": "Mon Jul 15 11:59:30 2024 +0000" }, "message": "m/n/c/n/dhcp4c: minor cleanup\n\nThe DiscoverBackoff was not Reset initially, which means the first \ndiscovery started with a backoff of 500 ms (ExponentialBackOff default) \ninstead of 1400 ms.\n\nRemove the unused lastBoundTransition field.\n\nIf the backoff has no timeout and stateDeadline is not set, \nstateDeadlineExceeded should not be called (the discovering state does \nnot define this function). This was actually already the case before, \nbecause NextBackOff never returns a duration smaller than 10 ms, but \nthis change makes that more clear.\n\nChange-Id: I714a562d8901fba69afaf6b779c6db310577fca5\nReviewed-on: https://review.monogon.dev/c/monogon/+/3215\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "ba404a60ffd9e9a6143a3f6f7e57e400607a5cae", "tree": "9fe27c2e435dab9ab0927b94ba9ee48d2e2e31b5", "parents": [ "f69d84b0f2b8b363f42ed6a3c09523b75d002f94" ], "author": { "name": "Jan Schär", "email": "jan@monogon.tech", "time": "Thu Jul 11 10:46:27 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@monogon.tech", "time": "Mon Jul 15 11:59:30 2024 +0000" }, "message": "m/n/c/network: fix panic when DHCP lease expires\n\nThe statusCallback of the network service previously accessed\nnew.AssignedIP without checking if new is nil, which caused a panic when\nthe DHCP lease expired. When subsequently the DHCP service was restarted\nand a new lease obtained, CoreDNS was left without upstream servers\nconfigured. The reason for this is that just before the panic, CoreDNS\nwas configured with an empty list of upstreams, but the lease field of\nthe DHCP service was not updated. When the lease callback was called\nagain with the new lease, old and new lease had the same DNS servers, so\nCoreDNS was not configured to use the upstreams.\n\nTo fix the panic, this adds a check for a nil lease before accessing\nAssignedIP. I looked if all consumers of the ExternalAddress Status can\nhandle nil, and added a nil check in the statuspush worker. The\napiserver stops when the lease is lost, and starts again once it is\nreacquired; I\u0027m not sure if this is the intended behavior.\n\nThe DNS problem occured because the old lease passed to the callback was\nnot the last lease that the callback had seen, and it then mistakenly\nsuppressed the update. In general, a callback cannot rely on the old\nlease being the last lease that the callback has been called with. For\nexample, when a callback earlier in the Compose chain returns an error,\nlater callbacks are not called, so a callback may not see all lease\nchanges. Because the old lease parameter cannot be trusted, I removed\nit. Callbacks which need the previous lease should keep track of it\nthemselves.\n\nFor manually testing lease expiry, I modified\nmetropolis/test/nanoswitch/nanoswitch.go like this:\n\n+\t\tstart :\u003d time.Now()\n \t\tserver, err :\u003d server4.NewServer(link.Attrs().Name, \u0026laddr, func(conn net.PacketConn, peer net.Addr, m *dhcpv4.DHCPv4) {\n \t\t\tif m \u003d\u003d nil {\n \t\t\t\treturn\n \t\t\t}\n+\t\t\tif start.Add(50*time.Second).Before(time.Now()) \u0026\u0026 start.Add(90*time.Second).After(time.Now()) {\n+\t\t\t\tsupervisor.Logger(ctx).Infof(\"Dropping DHCP packet\")\n+\t\t\t\treturn\n+\t\t\t}\n \t\t\treply, err :\u003d dhcpv4.NewReplyFromRequest(m)\n\nChange-Id: Ifa0c039769c37ee53033ce013eed4f1af6f02142\nReviewed-on: https://review.monogon.dev/c/monogon/+/3214\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "dfa99b87511cfe133bcca280a4c35d480d7d88cb", "tree": "d41b4bae1c34743ec5a2b7c0a5dc742cb820e70d", "parents": [ "4b8c7e9c13f099696e7f2723033fa33f0c7df9a9" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Jul 03 21:27:54 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Jul 08 07:33:00 2024 +0000" }, "message": "metropolis/node/core/update/e2e: bump timeout\n\nWe had a timeout of 30s for the update tests. Since these are always hit\n in CI, this increases the wait to 60s.\n\nChange-Id: Iecc9562b015aa514c6f95991a3cdddedd57a8d7b\nReviewed-on: https://review.monogon.dev/c/monogon/+/3206\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "fe6b506b6124b39b0b36c483d03de3b4efc5bdc4", "tree": "b3a4cbd0f4890dc5ee9a30eb643b2d3e9aa79fa5", "parents": [ "9f21f5396aa18bc9f2f83c867ff883f49bbf02ae" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Tue Jul 02 16:32:35 2024 +0000" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Thu Jul 04 14:50:22 2024 +0000" }, "message": "m/node: switch to cgroupv2\n\nThis switches us from legacy cgroup (v1) to cgroup v2 aka unified\ncgroup. Our versions of Kubernetes, containerd and runc/gVisor all\nsupport this by now.\n\ncgroup_bpf needs to be enabled in the kernel for containerd with cgroup\nv2. Also enable swap as this now works with cgroup v2, this gets rid of\na warning for every pod being started.\n\nWe are not really using cgroups ourselves, but as the root cgroup in v2\nis special, move our own process into a subgroup at startup.\n\nChange-Id: I8d63b2ad672568c052c3fe1a2306182f033667fa\nReviewed-on: https://review.monogon.dev/c/monogon/+/3207\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n" }, { "commit": "9f21f5396aa18bc9f2f83c867ff883f49bbf02ae", "tree": "c232f42c84bd6b7ace576261a188134cb0c69771", "parents": [ "f430fbfe35b70283090b6174cf5a920163c0148c" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue May 07 15:14:20 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Jul 04 12:19:37 2024 +0000" }, "message": "treewide: introduce osbase package and move things around\n\nAll except localregistry moved from metropolis/pkg to osbase,\nlocalregistry moved to metropolis/test as its only used there anyway.\n\nChange-Id: If1a4bf377364bef0ac23169e1b90379c71b06d72\nReviewed-on: https://review.monogon.dev/c/monogon/+/3079\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "53458ba5e9a9be9d7bbca7b01fb7ad5ff1201698", "tree": "0da5c7f8d4bec5c26d13b727de829bbb4bf91111", "parents": [ "dac0bba8b4762def59b5f929f6e9cc04f376e3e3" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Tue Jun 18 09:56:46 2024 +0000" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Tue Jun 25 08:21:11 2024 +0000" }, "message": "m/test/launch: order nodes in NodeIDs correctly\n\nThis ensures that referring to node by number via NodeIDs is possible -\nie. that NodeIDs[n] is the ID of the nth node as defined in NodeOpts or\nas used as the \u0027idx\u0027 argument in RebootNode.\n\nThis was never and is still not correctly formalized, even in comments,\nand is yet another proof that the cluster launch code deserves to be\nrewritten from first principles.\n\nFixes #301.\n\nChange-Id: I1ad13dc3bdd35a0c34f86e5d051ca9378491c876\nReviewed-on: https://review.monogon.dev/c/monogon/+/3168\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "dac0bba8b4762def59b5f929f6e9cc04f376e3e3", "tree": "40fba4fb9ee37046742701791200ffacb353910f", "parents": [ "8ac3e566eda3f968966fbe712be5c9158b04d0c3" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Thu Jun 13 09:10:09 2024 +0200" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Thu Jun 20 12:04:53 2024 +0000" }, "message": "m/n/c/network: make bringup order deterministic\n\nThis will ensure that given the same static network config the bringup\nsequence is the same. In turn this will make the MAC address of bonds\nstatic as well as generally providing more consistent behavior.\n\nChange-Id: If3e381e685195be2fa473f1610cc0418b25f85a6\nReviewed-on: https://review.monogon.dev/c/monogon/+/3138\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "4a472882b3e35a630922279579201ae6fcbeb081", "tree": "94ef4c552bb2a14a6786ac1bb7e6b44240880e7b", "parents": [ "5e74d7058fb122db65cb172820630b788ff76f0c" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Thu Jun 13 11:40:34 2024 +0200" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Thu Jun 20 12:04:53 2024 +0000" }, "message": "m/n/c/network: explain why links cannot be returned\n\nExplain the cause of the revert of CL 3112 as the code is kind of\nconfusing without knowing why the returned link is an empty link\nstructure with just the index set instead of the original one.\n\nChange-Id: I5b9cdf6e76eb33cb610cc53976edc5863c9dc583\nReviewed-on: https://review.monogon.dev/c/monogon/+/3140\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "5e74d7058fb122db65cb172820630b788ff76f0c", "tree": "9e4d0a264c84682b346c6b0e63adbdaae3103072", "parents": [ "76ddab10810885a7feced9b1894e6235a41c1166" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Thu Jun 13 09:37:39 2024 +0000" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Thu Jun 20 12:04:53 2024 +0000" }, "message": "m/n/c/network: refetch link attributes from kernel\n\nFetch all link attributes from the kernel once an interface is\ncreated/configured to ensure all attributes are present and any\ndefaults set by the kernel are taken into account.\n\nOnly affects the static configuration path, dynamic configuration path\nalready gets the interface data directly from the kernel.\n\nThis is an alternative to CL 3112 which had to be reverted.\n\nChange-Id: I1076fa318cac5f0ecdb47c5b0aac4dfe7ea2cac9\nReviewed-on: https://review.monogon.dev/c/monogon/+/3139\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "8c2b394342413c878d62aa67a49a219891eb6c99", "tree": "6288b6db7f5581b155e14fbd74c1e615291ef960", "parents": [ "1ce8039189e7280a929eced4b78f6042f1afdb16" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Mon May 27 20:07:18 2024 +0000" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Tue Jun 18 12:11:36 2024 +0000" }, "message": "m/n/c/network: do not refetch interface metadata\n\nWe can use netlinkLinkToNetInterface to do this without an IO operation.\n\nChange-Id: I9e01c5b05633b3dc45820370a72ed9343bfcea29\nReviewed-on: https://review.monogon.dev/c/monogon/+/3114\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "1ce8039189e7280a929eced4b78f6042f1afdb16", "tree": "5ba3b9d8587361ff55853ee77fe380e6081d07e2", "parents": [ "30e30b3323f05cb76a5168c24a487e4d8138b653" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Mon May 27 20:06:43 2024 +0000" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Tue Jun 18 12:11:36 2024 +0000" }, "message": "m/n/c/n/dhcp4c: verify hardware address sanity\n\nComplain early if an empty or all-zero hardware address is passed in, as\nthis is never valid.\n\nChange-Id: I3abfcd618aaa8018e88267d414d7a34a859f3ce2\nReviewed-on: https://review.monogon.dev/c/monogon/+/3113\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "30e30b3323f05cb76a5168c24a487e4d8138b653", "tree": "f658e7c3537c1511dc84d6d2acad99a5c514269b", "parents": [ "11198c83ff733a10bfd731f20abadd286e753e28" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Wed May 22 14:11:56 2024 +0200" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Wed Jun 12 10:00:40 2024 +0000" }, "message": "m/node: allow specifying node labels during node registration\n\nChange-Id: Ie7fc7387314cd2f59661c2d07530b712f8f29b48\nReviewed-on: https://review.monogon.dev/c/monogon/+/3104\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "11198c83ff733a10bfd731f20abadd286e753e28", "tree": "62d9f95bf1736fd9e3f77d6e21256223ff86a89d", "parents": [ "41113935d59f3c0210b04d6251b1559979c677fb" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Wed May 22 14:11:01 2024 +0200" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Wed Jun 12 10:00:40 2024 +0000" }, "message": "m/node: allow specifying node labels during cluster bootstrap\n\nWe also drive-by refactor ProvideBootstrapData to take a structure\ninstead of a bunch of unnamed arguments.\n\nChange-Id: I8d876fd726fa87420789513540b20f523994d801\nReviewed-on: https://review.monogon.dev/c/monogon/+/3103\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "1f789540bbe4bf94c4ccae795272703577ca586e", "tree": "2ecd2308e42e5f25e898f6901cd7562c3adad18a", "parents": [ "2b6dc312656035aedade6f368af1994bdb8b6021" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Wed May 22 14:01:50 2024 +0200" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Wed Jun 12 10:00:40 2024 +0000" }, "message": "m/{node,proto}: implement Node Labels\n\nNodes can now have Labels attached to them. These are string key/value\ndata designed after Kubernetes labels. They are meant to be used to\nattach metadata to nodes, for example external IDs, nicknames or\ngeographical information.\n\nThis change implements just the core functionality: storing them within\netcd, retrieving them via management and curator APIs, and mutating them\nvia a new management RPC.\n\nFollowup changes will impelement provisioning labels at\nbootstrap/registration time and accessing label data from metroctl.\n\nChange-Id: I556b452a65061294e7c51037723a6db31d587716\nReviewed-on: https://review.monogon.dev/c/monogon/+/3101\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "2b6dc312656035aedade6f368af1994bdb8b6021", "tree": "488e63bfdf22b6b389e160a01d4f731c3956e2f3", "parents": [ "8111b901b88c8ef9ca5e113584c928de4bfdd24d" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Tue Jun 04 17:44:55 2024 +0200" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Tue Jun 11 17:01:21 2024 +0000" }, "message": "metropolis/test: create swtpm TPMs at runtime instead of compile time\n\nThe generated TPM data is random (it contains generated cryptographic\nkeys) so we really shouldn\u0027t be building it with Bazel.\n\nInstead, let\u0027s create it at runtime for e2e tests, and also actually\ngenerate separate TPM data per node with a common issuer for all.\n\nMoving the logic out of //metropolis/node also feels deserved, as this\nis all squarely in test territory.\n\nChange-Id: I257ee54c88ede685ba3faf573282b0f9228b10e8\nReviewed-on: https://review.monogon.dev/c/monogon/+/3132\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "b07c57a3d0d7bc3d63e86e0b50c2ed4f5c6e5af6", "tree": "a189e5d724ab5f83cc0e6d237b8cb4bc1fcf1be2", "parents": [ "551a8199dab7faaa0bfb2c082c7f55a0940df247" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Tue Jun 04 14:33:27 2024 +0000" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Tue Jun 11 17:01:21 2024 +0000" }, "message": "metropolis: use swtpm from monorepo\n\nChange-Id: I6da94c7eaa31930d120955a17661152fc284f4a0\nReviewed-on: https://review.monogon.dev/c/monogon/+/3130\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "00986a95f02c76d1a5691170ddc7688a48c880aa", "tree": "6cb0edb40ff6affe72a4ff1ec03de375055df51f", "parents": [ "d02c6c7745943f19d453f6fba0bfb701e7f222df" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Thu May 30 12:00:23 2024 +0000" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Thu Jun 06 15:03:00 2024 +0000" }, "message": "Revert \"m/n/c/network: return original links\"\n\nThis reverts commit 966f5eae18326ca6efd6ca9f90013ba8d2d25ac0.\n\nReason for revert: Breaks static networking with a lot of interfaces\n\nChange-Id: I3cd54c3fc4e57f05aa1d939583d292bee028d560\nReviewed-on: https://review.monogon.dev/c/monogon/+/2604\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "966f5eae18326ca6efd6ca9f90013ba8d2d25ac0", "tree": "b6c3431d3d4718b78489ea2e8ab51574ed57456a", "parents": [ "1595e01e480fd2ab3f7690102bb722c4a6882bc4" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Mon May 27 20:06:00 2024 +0000" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Tue May 28 11:19:10 2024 +0000" }, "message": "m/n/c/network: return original links\n\nDo not recreate the netlink device structure as it loses information by\ndoing so, breaking things like DHCP which rely on for example the link\nHwAddr. We already have proper *netlink.Device structures as they get\ntype-asserted anyways.\n\nChange-Id: I90b8b6078fd7d6bd4e9e11e54751132bce22b517\nReviewed-on: https://review.monogon.dev/c/monogon/+/3112\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "3b5a917c5a1ac49acad50eeacb5cf275efc3631e", "tree": "1da59c672acf3b68aab81fae38c6b6e5929b82a2", "parents": [ "988403453448d27f6df6eea0a232e97c2a2e739b" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu May 23 13:33:52 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu May 23 12:44:02 2024 +0000" }, "message": "treewide: initialize empty structs with var\n\nChange-Id: I72d3993eaf5fe57c77b1dda8218e36a8cc11813d\nReviewed-on: https://review.monogon.dev/c/monogon/+/3108\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "f8baa3a161261f0906bb06825e49d7556a35376c", "tree": "6a19309bd319d571f5fd949cba5384a4b6091902", "parents": [ "adcf5d79ca9e4dd370d24e6579932a3dbaf5bd50" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue May 21 13:47:19 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue May 21 12:55:58 2024 +0000" }, "message": "metropolis/node/core/metrics: fix %v in cases where we should use %w\n\nChange-Id: I7dec62ae0b3010470704f64717956e454287a456\nReviewed-on: https://review.monogon.dev/c/monogon/+/3096\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "8814f52a4b2baffd5bd1495483a806535e0eca02", "tree": "cc61e7260a52617b7ee62b4a44ada9ea4cfa26a0", "parents": [ "99b021469b209bf184cd8d18749a7c1e74852a50" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed May 08 00:41:13 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue May 21 10:16:56 2024 +0000" }, "message": "metropolis/pkg/logtree: move logtree protobuf definition to logtree pkg\n\nBefore this change we had the LogEntry message inside the metropolis\ncommon proto file. This splits it out into the logtree package to make\nit standalone in a future change.\n\nChange-Id: Idb26a829d6174efa946a6c4ce0f1b984cb2f18a2\nReviewed-on: https://review.monogon.dev/c/monogon/+/3080\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "d5d33ba1e0798b48f56e6a1bc9178af9fc778179", "tree": "76f4f0b0a1175a77b64d5dd7469b3ec6a3d57c2d", "parents": [ "69f5f4e5ffac12c1d8e45e4cc9dc72868aa3af41" ], "author": { "name": "Jan Schär", "email": "jan@monogon.tech", "time": "Wed May 15 11:45:35 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@monogon.tech", "time": "Wed May 15 16:15:25 2024 +0000" }, "message": "m/n/k/reconciler: remove PSP role and rolebinding\n\nPod Security Policies have been removed from Kubernetes. The default PSP \nwas removed in commit 6211e4dc40, but the role and rolebinding was still \nleft. They do not have a function anymore. Now that reconciler updates \nare implemented, these will be removed from existing clusters after \nupgrading.\n\nChange-Id: Ia953a5ae03c581b15efc4e3b3711aaa008dc145d\nReviewed-on: https://review.monogon.dev/c/monogon/+/3091\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "69f5f4e5ffac12c1d8e45e4cc9dc72868aa3af41", "tree": "a28c2166fc40b1a2bee20070b4ae6788477ccf1f", "parents": [ "6bc958326f8bd4f3a1606e8a767d21f12f584e88" ], "author": { "name": "Jan Schär", "email": "jan@monogon.tech", "time": "Wed May 15 10:32:07 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@monogon.tech", "time": "Wed May 15 16:15:25 2024 +0000" }, "message": "m/n/k/reconciler: implement updates\n\nThe reconciler now checks if already present object are equal to the \nexpected object, and else updates them. If the update fails due to \nimmutable fields, the object is instead deleted and recreated.\n\nAlso, the reconciler now logs create/update/delete operations.\n\nFor the CSI driver, the StorageCapacity and RequiresRepublish were added \nand set to their default value. If we don\u0027t do this, the API server will \nadd these defaults, and then our update comparison fails. There is also \na new test which ensures that expected objects have all defaults already \napplied. This test will fail if a Kubernetes upgrade adds new fields \nwith default values.\n\nCloses #288.\n\nChange-Id: Ibfb37d07b4613ae1a883ad47715feeda87135820\nReviewed-on: https://review.monogon.dev/c/monogon/+/2893\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "d20ddccddf601c2a34cc5238bd82b6a4a1744502", "tree": "52eeeb7917b79220ad0f0cb34447525f7c21341b", "parents": [ "8bc82868fd289220078ff317235db084349d9f70" ], "author": { "name": "Jan Schär", "email": "jan@monogon.tech", "time": "Wed May 08 14:18:29 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@monogon.tech", "time": "Tue May 14 12:11:45 2024 +0000" }, "message": "m/n/k/reconciler: implement leader election\n\nBefore this change, the reconciler runs on all Kubernetes controllers. \nWhen we are in a rolling upgrade of the cluster where a reconciled \nobject changes, this will cause the old and new versions of the \nreconciler to fight each other, constantly updating the object back and \nforth.\n\nNow, the reconciler is elected among nodes of the latest release. The \nstatus of the reconciliation is communicated to all Kubernetes \ncontrollers through a new key-value in etcd.\n\nAdditionally, compatibility constraints can be expressed by changing the \nconstants minReconcilerRelease and minApiserverRelease, allowing \nreconciliation to happen in a controlled way that ensures compatibility \neven during rolling upgrades.\n\nChange-Id: Iaf7c27702bd9809a13d47bcf041b71438353bef2\nReviewed-on: https://review.monogon.dev/c/monogon/+/3062\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "ddc5e6a098c24c1e69b5c692f534b05dbc763367", "tree": "962bc2b07f054b9c2552018a305fca2d9ee277f9", "parents": [ "2d83a128f6096b8133af9edec00e1cd0cd8215b0" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue Apr 23 23:44:34 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon May 06 13:34:32 2024 +0000" }, "message": "treewide: update to UwUbernetes (Kubernetes 1.30)\n\nCo-authored-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nCo-authored-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nChange-Id: Id923f503938314ef8fb4243f36604752edbb4605\nReviewed-on: https://review.monogon.dev/c/monogon/+/3047\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "2d83a128f6096b8133af9edec00e1cd0cd8215b0", "tree": "5fffaa49de3a25ffb8f2588b4050e2da7879ce4a", "parents": [ "6ea5762b371bd7a6b35538b37b2781f8386dd323" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Mon May 06 14:38:32 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon May 06 13:33:59 2024 +0000" }, "message": "m/n/k/p/kvmdevice: fix device inode error handling\n\nThis was broken in d5f851bb47, where the inverted logic was not kept\nwhen migrating to errors.Is.\n\nChange-Id: Id1bbc96f80b33df539a3a5051d56e126bb453390\nReviewed-on: https://review.monogon.dev/c/monogon/+/3077\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n" }, { "commit": "d5cabdeb41f24c70ca6977a6f8bfb798719d1df1", "tree": "c39a483f677612e3e1d22a1410b5e4336c230521", "parents": [ "931b3a3f18f36e7e8de80c7d7632105077d832a9" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Fri Apr 19 02:56:46 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:30:10 2024 +0000" }, "message": "m/node/core/consensus: correctly handle failed parsing of node urls\n\nChange-Id: Ib7a655d4bba35d5adbc28ab083d13e2eb3b82378\nReviewed-on: https://review.monogon.dev/c/monogon/+/3031\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nVouch-Run-CI: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n" }, { "commit": "8732d437505cb1280004bcaa8a330aaf57ba402e", "tree": "f2509dc348a4e886020a85cdb41f3ea74aa763c3", "parents": [ "51daf25d90adca76375e0d141c93d692ab2cd2eb" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 18 23:20:05 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:29:11 2024 +0000" }, "message": "treewide: documentation on exported types should start with their name\n\nChange-Id: I2e25157459ecc55421138e9fb6a15de5024d00fd\nReviewed-on: https://review.monogon.dev/c/monogon/+/3028\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nVouch-Run-CI: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "51daf25d90adca76375e0d141c93d692ab2cd2eb", "tree": "6784b8f4a4c5facdc345ef1d47e0946a6267e74a", "parents": [ "b41b548058101e663a9591beaf2c491a44638d56" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 18 23:18:43 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:29:11 2024 +0000" }, "message": "treewide: documentation on exported functions should start with their name\n\nChange-Id: Iea3e929bed743d7edfbf5b54bbaa31796aeaaadd\nReviewed-on: https://review.monogon.dev/c/monogon/+/3027\nVouch-Run-CI: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "513df18bf6ae7ad0cc17807674ee561c518d0654", "tree": "2f9ce2af2964680376b62b183d65a93ae615c2e9", "parents": [ "a21783f4a1c8f67eea0ca354e31f73ccfd682688" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 18 23:44:50 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:29:11 2024 +0000" }, "message": "treewide: errors variables should be prefixed with Err\n\nChange-Id: Ic277f98ebcd03356500ce7daba199738e701e81c\nReviewed-on: https://review.monogon.dev/c/monogon/+/3025\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nVouch-Run-CI: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n" }, { "commit": "73e9882a907654dbecfb55ea0f30030e0fedbb1e", "tree": "b69ef493fcdf76614ed82d64f1a9ec8c79bb0375", "parents": [ "07541ae311e9477cf1e5a20af82a81ee77840afe" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 18 23:13:49 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:29:11 2024 +0000" }, "message": "treewide: cleanup error string formatting\n\nChange-Id: I9012ba58dded916984468219b214200144a439b9\nReviewed-on: https://review.monogon.dev/c/monogon/+/3023\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nVouch-Run-CI: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "07541ae311e9477cf1e5a20af82a81ee77840afe", "tree": "23dc4e6cbeed0fbd75ad8b3b1403b43f46d07c66", "parents": [ "c4ac94e00db2a588acaab6a776becb551797f3cc" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 18 23:50:16 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:29:11 2024 +0000" }, "message": "m/node/core/localstorage/crypt: fix use of non-octal value as filemode\n\nChange-Id: Ie57b0d45c2f41e82ec65379c97bc7d649c4df73f\nReviewed-on: https://review.monogon.dev/c/monogon/+/3022\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nVouch-Run-CI: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "096654adb312a1bc858a0f886b8fba755eab52b4", "tree": "bb753ba3a24eab6a63b7f7c1757f35f0540b880a", "parents": [ "a355821fa06a7f68ff8ddca6050f71e92e4939a5" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 18 23:10:19 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:29:11 2024 +0000" }, "message": "treewide: add missing error handling\n\nChange-Id: I55ccf3ff490b58f6af93e665c668428acddc8d65\nReviewed-on: https://review.monogon.dev/c/monogon/+/3019\nVouch-Run-CI: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "92316fdcb21e4cba0494793f5b90924accfd3fc3", "tree": "3e58fea500fec60fc0df8542f1737173de8677d5", "parents": [ "24ce66f0f5f5dac457d5e65beb2980db6780a72a" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 18 23:06:40 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:29:11 2024 +0000" }, "message": "treewide: remove unnecessary use of fmt.Sprint\n\nChange-Id: I619dcf56665365e09be27e7c58b8b3596715b8b4\nReviewed-on: https://review.monogon.dev/c/monogon/+/3016\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nVouch-Run-CI: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n" }, { "commit": "24ce66f0f5f5dac457d5e65beb2980db6780a72a", "tree": "ca5e78ebae92122ec6f9cbe5cf34e64984ebcc05", "parents": [ "2d0230524e96bdca53354fe191554342674c5fc4" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 18 23:59:24 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:29:11 2024 +0000" }, "message": "metropolis/node/kubernetes/reconciler: remove redundant nil check\n\nChange-Id: I0ebd2d8d815a964fa854e86868a4870b754ea548\nReviewed-on: https://review.monogon.dev/c/monogon/+/3015\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nVouch-Run-CI: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "e4c60f9f823202d3703a2d1e393c15ed036796a2", "tree": "8fa72e8fa1ff8e940d249364f448a397262f9c11", "parents": [ "0cf8944e8539a575ce280d70d54bf4ecf16b8228" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Fri Apr 19 00:01:47 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:29:11 2024 +0000" }, "message": "m/n/c/n/dhcp4c/callback: Replace x.Sub(time.Now()) with time.Until(x)\n\nChange-Id: Iedf1300986d553dbe0721b66ae2b229333cea520\nReviewed-on: https://review.monogon.dev/c/monogon/+/3013\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "0cf8944e8539a575ce280d70d54bf4ecf16b8228", "tree": "31a87285fcdbc782a00a8378ae3208f701106c86", "parents": [ "e1acfe37a1249543b9b3180d602db79539468696" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 18 23:05:03 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:29:11 2024 +0000" }, "message": "treewide: remove redundant returns\n\nChange-Id: I15f3f94273ffbb199dd47d7869de56196e1f4bd1\nReviewed-on: https://review.monogon.dev/c/monogon/+/3012\nVouch-Run-CI: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "e1acfe37a1249543b9b3180d602db79539468696", "tree": "856ebc0ccbbd7fe7c7e54af5da24ce6b01beb77c", "parents": [ "d6877d590b69dd14e75ff27f596550cc0207c8cf" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 18 23:02:22 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:29:11 2024 +0000" }, "message": "treewide: use a single append to concatenate two slices\n\nChange-Id: I3930313203c753aa5e629af0db3bf604baaa6b43\nReviewed-on: https://review.monogon.dev/c/monogon/+/3011\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "d6877d590b69dd14e75ff27f596550cc0207c8cf", "tree": "96b739ec343dbca1d52927d4d4bcf26fa874d3b8", "parents": [ "a2eea1645cb4b5ef4abb2e05fb3da40f52005b84" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Fri Apr 19 01:02:57 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:29:11 2024 +0000" }, "message": "metropolis/node/core/roleserve: simplify returning boolean expression\n\nChange-Id: I82af117bab94b3acf51889fb0d2ebe6e58d96cc2\nReviewed-on: https://review.monogon.dev/c/monogon/+/3010\nVouch-Run-CI: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "a2eea1645cb4b5ef4abb2e05fb3da40f52005b84", "tree": "b8315b17bed9d3430f2f31d29b680d84d113c280", "parents": [ "885668aeee35ec2644490912f91d81d4b55c3c3f" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 18 23:39:38 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 22:29:11 2024 +0000" }, "message": "treewide: replace call to bytes.Compare with bytes.Equal\n\nChange-Id: I6498593b67386ae858fb06a48f2385940688d880\nReviewed-on: https://review.monogon.dev/c/monogon/+/3009\nVouch-Run-CI: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "b2778e4a5148af45254043a9663a2879f783a1f8", "tree": "ad5137ea6d128806548008e56481889788df5b29", "parents": [ "683b62b946dcdbe73b3270340c6235d4478c27a3" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Fri Apr 19 00:56:45 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 14:22:13 2024 +0000" }, "message": "metropolis/node/core/curator: merge assignment into variable declaration\n\nChange-Id: I85369786be45d732df26a7f5f5fd3e062f0e8146\nReviewed-on: https://review.monogon.dev/c/monogon/+/3004\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "683b62b946dcdbe73b3270340c6235d4478c27a3", "tree": "a4c609a9ba09caaba5087fff27b8b4cb87c834ee", "parents": [ "13b4947ef9396dcb6d4496b9868e58a67b0375a9" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 18 23:40:33 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 14:22:13 2024 +0000" }, "message": "treewide: simplify boolean expressions\n\nChange-Id: Ife45e57b8fdbf2a7a6fa10e00a4daf41af785996\nReviewed-on: https://review.monogon.dev/c/monogon/+/3003\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "783d078dee9f8446ef702ccef1e16444ed21623a", "tree": "24e6efe8c3619652d9d34995c30d6fecdcbe92a2", "parents": [ "5538121358e94f82dfe465ae318f7f52ec00c74a" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 17 17:38:32 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 14:22:13 2024 +0000" }, "message": "metropolis/node/build/kconfig-patcher: check for bufio.Scanner error\n\nChange-Id: I7656d6a6b7ab71363c6b267f9bfb41e23ca50dad\nReviewed-on: https://review.monogon.dev/c/monogon/+/2999\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "6e5b8a5b7ad46cc519ba3ca6166cee160b536185", "tree": "89460ff19e0b4f63abe13e5e2c3bd68acfd33f30", "parents": [ "62a02ea54a45152baea559172b95c94822b8fa1c" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 17 02:34:07 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 14:22:13 2024 +0000" }, "message": "treewide: add nolint exceptions for returnerrcheck\n\nChange-Id: Ife7e28de0317627994cb55d6bd5b10fa6016332b\nReviewed-on: https://review.monogon.dev/c/monogon/+/2997\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "af821c801fb70dc3d178dc3ca0c3d4538f9f29aa", "tree": "a5f527030125139c9b09be3c37ea2ee862320ce3", "parents": [ "d5f851bb477638436826adec756fe562db526865" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue Apr 23 15:03:52 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 13:15:14 2024 +0000" }, "message": "treewide: replace error assertions with errors.As\n\nChange-Id: I369cc1dd8f745203f6f24093049d60d971acdf11\nReviewed-on: https://review.monogon.dev/c/monogon/+/3038\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "d5f851bb477638436826adec756fe562db526865", "tree": "d981b1c62d613b45fb55023da289098d7e377705", "parents": [ "69fec522d5db79d07bb1f227c2ab39c57fdf2831" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue Apr 23 14:59:37 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 24 13:15:14 2024 +0000" }, "message": "treewide: replace error comparisons and assertions with errors.Is\n\nChange-Id: Id2424eb155f2c6842c72c5fafd124d428ef901f2\nReviewed-on: https://review.monogon.dev/c/monogon/+/2994\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "6b20781437269c2d7a2497896bf396f9ecd3c184", "tree": "7cf726bde966a9e8945a82fc32619aa508708142", "parents": [ "690511d310507c9435916256869b7a0ead6fa8cf" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Apr 22 19:13:15 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue Apr 23 19:37:31 2024 +0000" }, "message": "treewide: replace fmt.Errorf with fmt.Sprintf in panic calls\n\nSince we are inside a panic anyway, let\u0027s not use Errorf as we only need\na string.\n\nChange-Id: Id43e403124e0fa60e038397d3153f96181c916e2\nReviewed-on: https://review.monogon.dev/c/monogon/+/3034\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "13b83f704367d9dd32359ff29b51b90cfbc4b361", "tree": "9524284335194acc67f88368821a044e10e60c1f", "parents": [ "ee8c81bebb610af692db594dfbb848c506a5fd6a" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 11 23:10:16 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue Apr 23 12:07:38 2024 +0000" }, "message": "metropolis/node/core: fix invalid write in console setup\n\nWhen configuring the console writers, we are iterating over a slice of\nconsole structs, this is fine by itself, but we are also storing a\nreference to the logtree reader. Since we are iterating over a struct\nvalue and aren\u0027t using a pointer, this write won\u0027t persist into the\nunderlying slice and we cannot close the reader anymore. By using a\npointer to a struct instead of the raw value the issue is fixed.\n\nChange-Id: Iaf753345cd275a03aecf9748b344c60eefcf9d69\nReviewed-on: https://review.monogon.dev/c/monogon/+/2973\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "28296493299f49fe82c2fe4b085ad6cf72097daf", "tree": "2e455019bdfca4df3ad3df3fb7e669100a5e242d", "parents": [ "07e7f0d47bb5e60a4a6195717cc362d574b0d3ad" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Wed Apr 17 14:50:53 2024 +0200" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Tue Apr 23 12:05:29 2024 +0000" }, "message": "m/n/core/n/hostsfile: persist and load node names to/from Cluster Directory\n\nThis change persists node IDs alongside their addresses to the ESP\nClusterDirectory, and loads them up on startup to pre-populate\n/etc/hosts.\n\nThis is important to bring up clusters from a full cold shutdown, as\nthese name/address mappings are needed by etcd to connect to other\nnodes (etcd connects to other members over metropolis node names, and\nexpects to be able to resolve them to actual IP addresses).\n\nThis didn\u0027t affect rolling restarts as other nodes would connect to a\nnewly started up node. But if all nodes are down, this is needed to\nactualy run.\n\nChange-Id: Ifa944bb231909983af2fcb9418a2769e7af65509\nReviewed-on: https://review.monogon.dev/c/monogon/+/2989\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "07e7f0d47bb5e60a4a6195717cc362d574b0d3ad", "tree": "ccf5859e4301a469390b1092f6a8b63c54b63108", "parents": [ "65546898bf8f7777eef652dae0b145144a463b6f" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Mon Apr 22 10:38:47 2024 +0000" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Mon Apr 22 18:16:22 2024 +0000" }, "message": "m/n/c/n/dhcp4c: use net.ErrClosed\n\nWe\u0027re now on Go 1.22, resolve this old TODO.\n\nChange-Id: If2d2d2dd3a2b79dafdcd24baf9a666e9028129de\nReviewed-on: https://review.monogon.dev/c/monogon/+/3032\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "65546898bf8f7777eef652dae0b145144a463b6f", "tree": "b251d9d2837d1f9fd2f71530ea40ec50b357fd20", "parents": [ "e84726bf41988c062c86968fd17e1a90a53a9174" ], "author": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Mon Apr 15 14:49:13 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Wed Apr 17 16:48:46 2024 +0000" }, "message": "m/n/c/update/e2e: remove unreachable code\n\nt.Fatal does not return, anything after is unreachable.\n\nChange-Id: Id67e523911b733a6992e0166c422f821c268fea2\nReviewed-on: https://review.monogon.dev/c/monogon/+/2977\nVouch-Run-CI: Lorenz Brun \u003clorenz@monogon.tech\u003e\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "538292d66196e8ba1a63454c4a9e2aa547684ef3", "tree": "d590a37f8d29c49e041411b07d83eec84c6931f5", "parents": [ "5ad3144690965827669ce29f71c534caae42b901" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Wed Apr 17 14:50:02 2024 +0200" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Wed Apr 17 15:12:25 2024 +0000" }, "message": "metropolis: replace node pubkey with id in cluster directory\n\nThe pubkey in the cluster directory was never used in the first place,\nand its presence complicates things (exposes the notion of nodes having\na public key and potentially causes reliance on the public key in\nuntrusted scenarios, eg. when the cluster directory is persisted to\nuntrusted storage).\n\nLet\u0027s just replace that field with a string node ID instead, as that\u0027s\nalso immediately useful in future code (persisting host name mapping\nbetween reboots).\n\nChange-Id: I9b29ee36974ef6edce6076b5df1b8b330fef8bd8\nReviewed-on: https://review.monogon.dev/c/monogon/+/2981\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "5ad3144690965827669ce29f71c534caae42b901", "tree": "c68a35fc564ce751809ee73eb6681f8f2a7a26b7", "parents": [ "88049727772bb3ad1f00307919da67c6d2743402" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Wed Apr 17 15:40:52 2024 +0200" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Wed Apr 17 15:12:19 2024 +0000" }, "message": "m/n/core/consensus: remove unused fifoPath argument\n\nThis is dead code. The fifoPath is actually passed through the\nconfiguration object, which is built directly from a localstorage file\nwhose full path is used as the location of the log FIFO.\n\nChange-Id: Ibf395336f7892e425a69fb3092f7b42d39317b73\nReviewed-on: https://review.monogon.dev/c/monogon/+/2990\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n" }, { "commit": "88049727772bb3ad1f00307919da67c6d2743402", "tree": "13b0015edb805c3c39f7f77e0bead11436f68713", "parents": [ "2006753ea2e8f51cdfc51ad085663fdae4ff8782" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 11 23:09:23 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 17 15:04:59 2024 +0000" }, "message": "treewide: fix t.Fatal calls in non-test goroutines\n\nFunctions that abruptly terminate a test, such as the\nFatal, Fatalf, FailNow, and Skip{,f,Now} methods of *testing.T,\nmust be called from the test goroutine itself, as they call\nruntime.Goexit internally to stop the calling goroutine, not the\ntest.\n\nChange-Id: I4926c802bfbb11aeec6e130b0f4fb2407879cbd4\nReviewed-on: https://review.monogon.dev/c/monogon/+/2972\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "49c9ab02d7ce200db6defbc82d95646ac4d64804", "tree": "da4d21a21fe25fa6a9e6211e26d8c0ef4ebece1f", "parents": [ "0c57d34190434556847345072371a42a9e1c3154" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 11 01:39:06 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Apr 15 21:31:42 2024 +0000" }, "message": "treewide: dont seed random\n\nAs of Go 1.20 there is no reason to call Seed with a random value.\nPrograms that call Seed with a known value to get a specific sequence\nof results should use New(NewSource(seed)) to obtain a local random generator.\n\nChange-Id: Ice1bbfefd900e6e9241428ec345f51f780eed91f\nReviewed-on: https://review.monogon.dev/c/monogon/+/2960\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "0c57d34190434556847345072371a42a9e1c3154", "tree": "adb53fda3b8b6e6d996e1696c9dadd2d506ef545", "parents": [ "3810567012959d2871400ce2ecd39f53b9072bc3" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 11 01:38:47 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Apr 15 21:31:42 2024 +0000" }, "message": "treewide: cleanup function receiver names\n\nChange-Id: I0575175ea249a2bd39b4b7769e49a9995fae6f6d\nReviewed-on: https://review.monogon.dev/c/monogon/+/2959\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "3810567012959d2871400ce2ecd39f53b9072bc3", "tree": "d1821ba3db669deec3a240dceb9bbf544b68c611", "parents": [ "2a74e58ac02d0bf6ae25ae1ec4d8f187dd7db5ba" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 11 01:37:29 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Apr 15 21:31:42 2024 +0000" }, "message": "treewide: remove shadowing of stdlib functions\n\nChange-Id: Iaccb22769d53568f6a4004924c218b9929090d89\nReviewed-on: https://review.monogon.dev/c/monogon/+/2957\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "6b6428da110db384cad1f1d65c81f1874c8cecae", "tree": "f44e7d1ffcc410893a9851e76e81939b178853df", "parents": [ "5e460a92353ec619f4f12fffbe3281d40c85cf61" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 11 01:35:41 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Apr 15 21:31:42 2024 +0000" }, "message": "treewide: remove redundant loop vars\n\nChange-Id: I61bada9e3df38e6a94cd6c8fe2d0d8f3ba41c1af\nReviewed-on: https://review.monogon.dev/c/monogon/+/2955\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "5e460a92353ec619f4f12fffbe3281d40c85cf61", "tree": "193a72608c05ad45f3a60a4ac84a8f5d731d7f73", "parents": [ "438ae2e52cb0aa8dea021419d921c687330e7d3b" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 11 01:33:09 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Apr 15 21:19:50 2024 +0000" }, "message": "treewide: remove unnecessary types and conversions\n\nChange-Id: Ifcaa9ceeec243b3646c9b6e0a6fad7ef2db8fd90\nReviewed-on: https://review.monogon.dev/c/monogon/+/2954\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "1a8062f7171aefab8bacb9a5a378db97dfea1c12", "tree": "a4d3b1201bc35d06cde45b5368b971425884c8d9", "parents": [ "a7a82f32c7e0ab2765cda5f32f8d3bc6ff7a6fca" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 11 22:54:24 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Apr 15 19:08:20 2024 +0000" }, "message": "metropolis/node/core/rpc: remove noop append\n\nChange-Id: I9817807cf15c2f2b2a8ea6b8292a15e44cbdccb8\nReviewed-on: https://review.monogon.dev/c/monogon/+/2970\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "6211e4dc404a285d858e1ecc69ac488c9cabb96b", "tree": "ff3b84efffb58982e0e55e61ed7fceb5df9609dc", "parents": [ "2ac249bf8e571ae7fd134b586ff9c87dce520956" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Tue Nov 14 19:09:40 2023 +0100" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Mon Apr 15 14:45:53 2024 +0000" }, "message": "treewide: k8s 1.28 and lots related updates\n\nFirst, this contains a bunch of dependency updates. Important ones in no\nparticular order:\nKubernetes 1.24.2 -\u003e 1.28.8\netcd 3.5.4 -\u003e 3.5.13\nProtobuf 1.32.0 -\u003e 1.33.0\nOpenTelemetry 0.20.0 -\u003e 1.20.0\ncontainerd 1.6.6 -\u003e 1.7.15\nCoreDNS 1.9.2 -\u003e 1.11.1\n\nWith Kubernetes 1.25 PodSecurityPolicies are removed, this replaces them\nwith a static PodSecurity admission configuration which behaves the same\nor is slightly more permissive in most ways. Only known exceptions are\nthat NET_RAW is no longer an allowed permission and non-standard SELinux\nlabels are no longer permitted (but these never did anything anyways).\nThe RBAC policies are intentionally not removed yet as we do not yet\nhave the capability to actually update these, so they will be removed\nwhen that is available (#288), until then they will stay in-place but\ndo nothing.\n\nWith the containerd upgrade the deprecated option for ignoring\npreseeded/pinned images for garbage collection in Kubelet can be\nremoved.\n\nThis change also contains some drive-by fixes to the controller-manager,\nlike passing the Service IP net and disabling cloud-related control\nloops which generate spurious warnings if enabled.\n\nThe containerd tracing patch is removed as we can now use OTel v1, thus\nthat patch is no longer necessary.\n\nAn actual upgrade test will be part of a future CL as this one is\nalready quite large and it works stand-alone.\n\nCo-authored-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nChange-Id: I8e5f51e6e6240a1b67590458b2f1c24d58c8e91e\nReviewed-on: https://review.monogon.dev/c/monogon/+/2315\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n" }, { "commit": "2ac249bf8e571ae7fd134b586ff9c87dce520956", "tree": "d7796a3cda62176e4111ffe9714ebee142053ade", "parents": [ "65bf311fbf47fec70019477237f6411123ef5727" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Thu Apr 11 21:27:35 2024 +0000" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Mon Apr 15 11:57:11 2024 +0000" }, "message": "m/n/c/update/e2e: abort test when timing out\n\nThe test has failed when it hits timeout, everything afterwards\nis just misleading.\n\nChange-Id: Id20a525b6786de1b3b99eb3f24d4cc33f06d9912\nReviewed-on: https://review.monogon.dev/c/monogon/+/2976\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "65bf311fbf47fec70019477237f6411123ef5727", "tree": "daaa15a7c708f746e16301a2ea8e8175ebeff466", "parents": [ "37cfcc109508d5370900228d5f20f2183ed2d65b" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Apr 08 21:32:14 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Apr 11 19:21:02 2024 +0000" }, "message": "third_party: expose firmware and ucode targets\n\nThat way we don\u0027t have to redefine it with every target that does\nany kind of takeover.\n\nChange-Id: I816b42a87c755da7b42944b2768f71b53d8d77f3\nReviewed-on: https://review.monogon.dev/c/monogon/+/2929\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "19b110bd2f003e9e56bc5b1ca908a342beac9828", "tree": "200226890c86a361157419177d5ebcabc2b52fb3", "parents": [ "0af4dab5326f7aa7cef1b8cc36e7324d784fc237" ], "author": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Wed Apr 10 14:07:05 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Thu Apr 11 15:10:37 2024 +0000" }, "message": "m/n/core/consensus: remove unused variable\n\nChange-Id: I84e034adcd9ec956b91bba16e40d06a3ae40a846\nReviewed-on: https://review.monogon.dev/c/monogon/+/2951\nVouch-Run-CI: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "0af4dab5326f7aa7cef1b8cc36e7324d784fc237", "tree": "49c976c5c6a9206b9806d5d0c8aa223d86ee1477", "parents": [ "0ea961c0d2ba446b99852a8f32719c0dfab23b2e" ], "author": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Thu Apr 11 15:04:12 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Thu Apr 11 14:55:24 2024 +0000" }, "message": "treewide: increase test timeouts\n\nThese tests often time out in CI.\n\nChange-Id: Ifd8e6be958923bdbb90faf1aa3627ee77a33267d\nReviewed-on: https://review.monogon.dev/c/monogon/+/2967\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nVouch-Run-CI: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "0ea961c0d2ba446b99852a8f32719c0dfab23b2e", "tree": "fe95facb465d0cac76c4d99db8b31bdc0eef88e4", "parents": [ "107eb062d8ebbc9a659c67e8fdfe762d1a968edb" ], "author": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Thu Apr 11 13:41:40 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Thu Apr 11 14:53:19 2024 +0000" }, "message": "m/p/blockdev: fix discard\n\nFix various problems with discard. Because discard errors are ignored in \nosimage, these problems were not noticed.\n\nDiscard takes byte offsets, not block offsets, and multiple places were \nmissing the multiplication with BlockSize.\n\nThe BLKDISCARD and BLKZEROOUT ioctls take start and length, not start \nand end.\n\nunix.Fallocate already converts errno 0 to nil.\n\nI manually tested that discard now works correctly in the installer.\n\nChange-Id: I52d9e30a087bb6a792396baaefb2d7d09c43abfe\nReviewed-on: https://review.monogon.dev/c/monogon/+/2953\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nVouch-Run-CI: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "107eb062d8ebbc9a659c67e8fdfe762d1a968edb", "tree": "5cba0b187b1877964f239d0adffa25326bb21065", "parents": [ "a8cfb564d677c789ab1f4feebff436cd423b6d25" ], "author": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Wed Apr 10 13:50:04 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Thu Apr 11 14:51:37 2024 +0000" }, "message": "m/n/c/curator: use full election prefix\n\nNewElection appends \"/\" to the prefix. If we manually get the leader, we \nshould also append \"/\". Otherwise, we could get the wrong result if a \nnew key which starts with \"/leader\" is added.\n\nChange-Id: I4bcafa945b14d610a6a1f4903452081c3e802e73\nReviewed-on: https://review.monogon.dev/c/monogon/+/2950\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nVouch-Run-CI: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "b976967d7baff84ab625fb774b4c016ad5fe4caa", "tree": "acee85bffdd1352e1e0eda0a25768882c731211c", "parents": [ "d6d809a51db99b7cabb8e6dba098fae6f79d63ca" ], "author": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Tue Apr 09 15:31:40 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Thu Apr 11 13:22:17 2024 +0000" }, "message": "m/n/c/consensus: fix handling of status request error\n\nIf we don\u0027t return here, the next line will panic because status is nil.\n\nThis bug was found after enabling WithPropagatePanic in the supervisor \nTestHarness.\n\nChange-Id: Ifb6338ebf817fc36f242a231d11af45c39c6c47f\nReviewed-on: https://review.monogon.dev/c/monogon/+/2948\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nVouch-Run-CI: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "a6fe4ef0b60de6749cc41fe177af381f060d4b9b", "tree": "625f6d80484e5a692fcf6e16560fd038ba501afb", "parents": [ "5438968d639bb49b0661a90aa3f114c97b6378da" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 03 04:06:57 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 10 14:37:04 2024 +0000" }, "message": "metropolis/node: add metrics ports to reserverd ports list\n\nI forgot to add these when implementing their functionality, woops.\n\nChange-Id: I316f0c44577f22ea7f911424f0b8437466a99170\nReviewed-on: https://review.monogon.dev/c/monogon/+/2913\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "5438968d639bb49b0661a90aa3f114c97b6378da", "tree": "cb7689a47f58fc10b31802ac7870e6b1e6ce9b48", "parents": [ "48a7debc1a9b3ef44d37e07169d5fe824f6bd1f7" ], "author": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Tue Apr 09 13:47:39 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Tue Apr 09 12:51:40 2024 +0000" }, "message": "m/n/c/curator: handle election observation failure\n\nFailure of the observation is signalled by closing the channel. Before \nthis fix, this caused a panic at the o.Kvs[0] indexing operation.\n\nThis bug was found after enabling WithPropagatePanic in the supervisor \nTestHarness.\n\nChange-Id: I94487720a106d752612153d23c83b4d9bff598f4\nReviewed-on: https://review.monogon.dev/c/monogon/+/2945\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nVouch-Run-CI: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "20b9812e5138784e4e451911f85136e790a759fd", "tree": "d66d8ad643cc9c5f9ea77520856aa092fcab75f2", "parents": [ "db3866a782c443baf4eac4e1cf2b7d03b1bf6c5e" ], "author": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Tue Apr 09 10:44:49 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Tue Apr 09 10:17:51 2024 +0000" }, "message": "m/n/k/clusternet: delete unused file\n\nThe mentioned pull request was merged, this file is no longer used.\n\nChange-Id: Ibc573e054e53e6ef23684707ec4178afdc301878\nReviewed-on: https://review.monogon.dev/c/monogon/+/2934\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nVouch-Run-CI: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "52c640737d32c709e8219c2607918ca7e780b485", "tree": "d2999e7b152b9365cf750527375a9ca87cd3294c", "parents": [ "4912c5a6ba94166c49ed2bf2cbb1a7289e48bb30" ], "author": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Mon Apr 08 18:22:25 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Mon Apr 08 16:42:17 2024 +0000" }, "message": "m/n/c/network: fix handling of nameserver parse failure\n\nIf parsing failed, don\u0027t append the IP to the list.\n\nChange-Id: Ie2fa2812790a919697458ec178b475a420417f6f\nReviewed-on: https://review.monogon.dev/c/monogon/+/2924\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\nVouch-Run-CI: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "4912c5a6ba94166c49ed2bf2cbb1a7289e48bb30", "tree": "bc4ff093435dc5931c23ee6433c780f91fed4b08", "parents": [ "3bdb5fcf023968526dfe7fadb89b0911bc6d7074" ], "author": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Mon Apr 08 18:01:09 2024 +0200" }, "committer": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Mon Apr 08 16:41:58 2024 +0000" }, "message": "m/n/b/fwprune: fix link regexp\n\nThere was an extra + inside the character group, which appears to be \nunintended.\n\nThere are currently no firmware files with a + in the filename, so there \nshould be no change in behavior.\n\nChange-Id: I9c224f016f4769b3da28211f6bca3e34c610641d\nReviewed-on: https://review.monogon.dev/c/monogon/+/2923\nVouch-Run-CI: Lorenz Brun \u003clorenz@monogon.tech\u003e\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "3bdb5fcf023968526dfe7fadb89b0911bc6d7074", "tree": "37a8c1abdee1cf54b25ca0adf868ed879e4db7b3", "parents": [ "22a71c147af31d02a0db298e2ca8356078471b93" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Mar 14 18:47:35 2024 +0100" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 03 15:49:26 2024 +0000" }, "message": "metropolis/core/metrics: expose containerd metrics endpoint\n\nThis adds containerd as another metrics endpoint. It is only available\non nodes with the KubernetesWorker role.\n\nChange-Id: I5f6269165a81d9a4c4cff48d3ed6b6a55d7f4f46\nReviewed-on: https://review.monogon.dev/c/monogon/+/2861\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "22a71c147af31d02a0db298e2ca8356078471b93", "tree": "7f532c633bb06664a105a28e5aa770e00724d977", "parents": [ "ec2906a6874e223813593128b6e72594a1ecfb0f" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 03 04:06:08 2024 +0200" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 03 14:55:50 2024 +0000" }, "message": "metropolis/node/kubernetes/metricsproxy: clarify error message\n\nIf the metricsproxy fails to reach its target, we should not return the\nsame error message as the metrics service as that would be confusing.\n\nChange-Id: Ia158686d5a7db3e8e62e149a1c7dc8773702a233\nReviewed-on: https://review.monogon.dev/c/monogon/+/2912\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "ec2906a6874e223813593128b6e72594a1ecfb0f", "tree": "41dbab79fd40e9e84c4a2398cb6d3d2fd51298fe", "parents": [ "000450835393a02845d425695947ecb3576e9b82" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Mar 27 01:36:43 2024 +0100" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Wed Apr 03 14:55:50 2024 +0000" }, "message": "treewide: rename node.NodeManagement to node.NodeManagementPort\n\nThis is the only constant not having Port in its name which breaks the\nnaming scheme. Lets clean this up by adding it.\n\nChange-Id: Ic34c81c6d80c69e20516f4fca3c26560bbcf3ac6\nReviewed-on: https://review.monogon.dev/c/monogon/+/2911\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "7f72748c67df593b110176422d27be878a7a37f4", "tree": "75a621c3ae4ec5daf0d90dffcf298583ef3240c9", "parents": [ "23e5230930b482807be2f7fd29c6f14badf3ad0f" ], "author": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Mon Mar 25 13:03:51 2024 +0100" }, "committer": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Mon Mar 25 19:41:38 2024 +0000" }, "message": "m/n/k/reconciler: refactor resource interface\n\nReplace interface{} with meta.Object, an interface which provides \naccessors for and is implemented by meta.ObjectMeta. List now returns \nthe objects themselves instead of their names. This makes the reconciler \nslightly less generic, as it now only supports kubernetes objects.\n\nThis is a refactoring in preparation for implementing updates in the \nreconciler. There should be no change in behavior.\n\nChange-Id: I97a4b1c0166a1e6fd0f247ee04e7c44cff570fd7\nReviewed-on: https://review.monogon.dev/c/monogon/+/2891\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\nVouch-Run-CI: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" }, { "commit": "76cae0b170143f021fe1e186f7eebb2ece6974c1", "tree": "1ea3839fc6044cca968c55590708d910517f40d6", "parents": [ "07fab03dcabf769cbf0d3747b295c1328bea329c" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Tue Mar 19 13:13:38 2024 +0100" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Thu Mar 21 12:35:30 2024 +0000" }, "message": "m/n/core/network/hostsfile: fix stale curator entries\n\nThis prevents the cluster from getting in a state where nodes are not\naware of new control plane nodes on restart (because the only thing that\nchanged about them is their role, not their IP address).\n\nThis fixes the deduplication to also take into consideration role\nchanges.\n\nChange-Id: I184916427650fdbf68fb0fdf5ced365b94af190e\nReviewed-on: https://review.monogon.dev/c/monogon/+/2880\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "07fab03dcabf769cbf0d3747b295c1328bea329c", "tree": "d1c08cc031487d802f8c6e07ccff9343ec92ff06", "parents": [ "b63ed8a6d7eaaf0fa58b127d90001dc805d72c45" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Tue Mar 05 14:27:13 2024 +0000" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Thu Mar 21 11:03:54 2024 +0000" }, "message": "m/n/core/hostsfile: narrow down network service type to just network status\n\nThis will allow testing the hostsfile service more easily in the future.\n\nChange-Id: Ic61337bac77f643543e1a83837b009f9ea73439f\nReviewed-on: https://review.monogon.dev/c/monogon/+/2877\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "b63ed8a6d7eaaf0fa58b127d90001dc805d72c45", "tree": "4c1cec25146e8936f7d3f9a09c1e031453e1c5d4", "parents": [ "1ac503c7ddd16c796fb163bcbace7a1db24d5201" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Tue Mar 05 14:24:38 2024 +0000" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Thu Mar 21 11:03:54 2024 +0000" }, "message": "m/n/core/network: drop Watch/Value methods, expose Status\n\nThe Watch/Value methods were a leftover from before we had a unified\nevent value API.\n\nChange-Id: Id61732e0570e5fe3d9420857728b1f8a9769e697\nReviewed-on: https://review.monogon.dev/c/monogon/+/2876\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n" }, { "commit": "5d5d733b9fb3d9892b37840124d959fae07c98b9", "tree": "5afdd8bde96b5712274e3fdc13706874f0ba7823", "parents": [ "36bde9cd3407402ef6e0b4d10b038a4020bdf295" ], "author": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Tue Mar 19 13:13:02 2024 +0100" }, "committer": { "name": "Serge Bazanski", "email": "serge@monogon.tech", "time": "Tue Mar 19 16:46:01 2024 +0000" }, "message": "m/n/core/curator: expose consensus service status\n\nThis replaces https://review.monogon.dev/2071 .\n\nConsensus service status will be used in e2e tests to more accurately\ndetermine the health of a cluster.\n\nChange-Id: Ia304d2a679f5ffdccd5737d5770d40a4a08f7f4a\nReviewed-on: https://review.monogon.dev/c/monogon/+/2879\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "d6a88022d0c8ffdd2b938f161b8825148762b099", "tree": "a5a0e0c0b1e6970c1aef8a38e2b45978c00b8592", "parents": [ "42ef7c742ab128b25478833a52af25ba0be5bf15" ], "author": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Mon Mar 18 17:03:37 2024 +0100" }, "committer": { "name": "Jan Schär", "email": "jan@jschaer.ch", "time": "Mon Mar 18 17:24:36 2024 +0000" }, "message": "m/node: fix appending to read-only slices\n\n`append` modifies its first argument if there is sufficient capacity \ninstead of allocating a new slice. If the slice to be appended to is \nsupposed to be read-only, this can lead to unexpected aliasing.\n\nAn example of what can go wrong, here with the consensus client:\n\n l :\u003d NewLocal(nil)\n sub1, _ :\u003d l.Sub(\"I\")\n sub2, _ :\u003d sub1.Sub(\"am\")\n sub3, _ :\u003d sub2.Sub(\"a\")\n dog, _ :\u003d sub3.Sub(\"dog\")\n _, _ \u003d sub3.Sub(\"cat\")\n fmt.Print(dog.(*local).path)\n\nResult before this change: \"I am a cat\"\nResult after this change: \"I am a dog\"\n\nAfter creating a subnamespace of length 3, the capacity of the `path` is \n4, so any subnamespace will share the same slice. The fix is to always \nensure a new slice is allocated.\n\nImpact\n------\n\nFor the consensus client, Sub is currently never called multiple times \non the same namespace, so there is no impact there. In case of the dhcp \nclient and rpc resolver, the slices that are appended to are slice \nliterals in all cases, which don\u0027t have extra capacity.\n\nBut for the curator `etcdPrefix`, `p.parts` has capacity 1 larger than \nthe length, due to the slicing in `newEtcdPrefix`. That means that \nconcurrent calls to `Key` can overwrite each other\u0027s `path`. It looks \nlike `Key` can in fact be called concurrently, which means there is \npotential for data corruption to occur before this change.\n\nChange-Id: I28e7dc797365c2beea97023ed31a20eea599e678\nReviewed-on: https://review.monogon.dev/c/monogon/+/2873\nVouch-Run-CI: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n" }, { "commit": "011dce6623dffbaf5adcd3d3a353521649b0b997", "tree": "8e661bd0988c6a5d808cd213c1f7a8eef9ca22b9", "parents": [ "68cf38a2ca4fdc370e78e9b8d23e55c0b9cc9c72" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Sun Mar 03 16:00:52 2024 +0100" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Thu Mar 14 12:55:30 2024 +0000" }, "message": "m/n/c/clusternet: add clusternet node ip to lo\n\nWithout this address the kernel will send all traffic through clusternet\nwill with the external IP as source address, which prevents any access\nfrom the k8s api-server to pods. By adding the address to the lo\ninterface, the kernel decides that this is the best match for the\ngeneric clusternet route and uses it as source address.\n\nBefore: 10.192.1.2 dev clusternet src 233.252.0.1\nAfter: 10.192.1.2 dev clusternet src 10.192.0.1\n\nChange-Id: I1a78de9d4cc043f93398fe5b6cb10dd202bf75fe\nReviewed-on: https://review.monogon.dev/c/monogon/+/2795\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "543756fdf954fc09f032bb91a59916a784b21cff", "tree": "e326636c7d4a56c501c6bdf799cc96aa10a77338", "parents": [ "6c851e2f8270e2a08077a5d35cc5d7869e2c9188" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Sun Mar 03 15:58:32 2024 +0100" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Mon Mar 04 15:14:02 2024 +0000" }, "message": "m/n/c/network: inline error checks\n\nChange-Id: I2ee028761cb407c0231740933f405c6894a72607\nReviewed-on: https://review.monogon.dev/c/monogon/+/2794\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "1dd0c6591533bf63389e81a2104bca3c8326e871", "tree": "e33a710087b67dfe7f34e8434cff8885dc38420c", "parents": [ "456961d6589c1afec75954ca94ed631e1f380566" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Tue Feb 20 18:45:06 2024 +0100" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Tue Feb 20 18:12:12 2024 +0000" }, "message": "m/n/kubernetes: improve CSI registration reliability\n\nKubelet\u0027s plugin registration mechanism is quite awful, it\nrelies on being notified by inotify that a new registration socket has\nbeen placed into a specific path, which it then interrogates and\nreports back if the registration succeeded.\n\nThat registration sometimes involves network operations which are prone\nto failure. It reports that failure back to the registration server\nasynchronously but does not attempt to retry the process.\n\nTo actually get Kubelet to retry, one needs to remove and recreate the\nregistration socket.\n\nThis change implements such a mechanism, recreating the socket and\nregistration server on every reported registration failure.\n\nSupervisor backoff is used to prevent busy-looping on non-transient\nerrors.\n\nChange-Id: I79eaf0efdf55ccdede15d8cee42cda7c276e4b50\nReviewed-on: https://review.monogon.dev/c/monogon/+/2785\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "456961d6589c1afec75954ca94ed631e1f380566", "tree": "ac99bfa39deefe0f4aca7478077a66ef8b7c9d74", "parents": [ "1e90c6d29a4af63fa01b472b7a49bdba256797b2" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Tue Feb 20 13:18:26 2024 +0100" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Tue Feb 20 18:12:12 2024 +0000" }, "message": "m/n/k/reconciler: set fsGroupPolicy for CSI driver\n\nThis fixes an issue where kubelet did not apply fsGroupChangePolicy due\nto questionable capability detection code with the default\nfsGroupPolicy. Setting this to the File policy asserts that this driver\nalways supports ownership changes and thus bypasses that Kubernetes\ncapability detection code.\n\nChange-Id: I4799a01561af4f3d9c0de7a6040fd5f9db784d3e\nReviewed-on: https://review.monogon.dev/c/monogon/+/2784\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n" }, { "commit": "1e90c6d29a4af63fa01b472b7a49bdba256797b2", "tree": "dd4e37ad5679bc397c63041490032ab7eb88f6ec", "parents": [ "c4dd0032736567ca7873a11588f3a64d1dddea88" ], "author": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Mon Feb 19 22:21:01 2024 +0100" }, "committer": { "name": "Lorenz Brun", "email": "lorenz@monogon.tech", "time": "Mon Feb 19 21:40:47 2024 +0000" }, "message": "m/n/c/mgmt: disable interfaces before kexec\n\nThis is done to prevent network interface DMA transactions from\ninterfering with an in-progress kexec. [1]\n\n[1] https://lists.infradead.org/pipermail/kexec/2011-January/004795.html\n\nChange-Id: I12ab22c095fcff56873d980d524c461b1b2d57ee\nReviewed-on: https://review.monogon.dev/c/monogon/+/2783\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n" }, { "commit": "9c4bece001c15d6ae4793016b2e3854627b2164c", "tree": "3381a01d7f7d3e9fd9f6c6e2e037a3a76e5ce8ce", "parents": [ "93020d77a383e68fd4b1adfafaf136c405648172" ], "author": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue Feb 13 18:32:44 2024 +0100" }, "committer": { "name": "Tim Windelschmidt", "email": "tim@monogon.tech", "time": "Tue Feb 13 19:53:58 2024 +0000" }, "message": "m/n/k/containerd: clarify preseed log message\n\nChanging this log message makes it easier to understand what happens.\n\nBefore:\n```\nSuccessfully imported preseeded bundle\nk8s.io/docker.io/bazel/metropolis/test/e2e/preseedtest:preseedtest_image\ninto containerd\n```\n\nAfter:\n```\nSuccessfully imported preseeded bundle\n\"docker.io/bazel/metropolis/test/e2e/preseedtest:preseedtest_image\" into\ncontainerd namespace k8s.io\n```\n\nCloses monogon-dev/monogon#287\n\nChange-Id: I932d36b0cc1926d7248028c8a412f921562a9858\nReviewed-on: https://review.monogon.dev/c/monogon/+/2768\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n" } ], "next": "93020d77a383e68fd4b1adfafaf136c405648172" }