14179 Commits

Author SHA1 Message Date
eio-github-actions-power-enhancer[bot]
b95b2fb0d7 shepherd-githubaction: Update rancher/shepherd to c9f6483 (#52926)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2025-12-03 15:48:20 -08:00
eio-github-actions-power-enhancer[bot]
0148694808 shepherd-githubaction: Update rancher/shepherd to bd190cf (#52876)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2025-12-02 12:14:51 -08:00
Peter Matseykanets
1ae24e1e95 Bump Go to 1.25 (#51657) 2025-12-02 13:24:40 -05:00
Guilherme Macedo
d728bba49c Add origin of hardened-traefik image (#52899)
Signed-off-by: Guilherme Macedo <guilherme@gmacedo.com>
2025-12-02 09:21:50 -03:00
Tom Lebreux
b8d2782e2c UnRC remotedialer-proxy (#52874) 2025-11-27 12:18:03 -05:00
Tim Hardeck
8ffeb0fcd7 Update renovate config files (#52882)
* chore: update renovate-vault.yml to latest version

* chore: add package rule for release/v2.13 in renovate configuration
2025-11-27 14:54:48 +01:00
renovate-rancher[bot]
3592d37e0a Update module github.com/opencontainers/runc to v1.2.8 [SECURITY] (#52627)
Co-authored-by: renovate-rancher[bot] <119870437+renovate-rancher[bot]@users.noreply.github.com>
2025-11-27 14:20:47 +01:00
renovate-rancher[bot]
f8373bcdd7 Update dependency PyYAML to v6.0.3 (#52330)
Co-authored-by: renovate-rancher[bot] <119870437+renovate-rancher[bot]@users.noreply.github.com>
2025-11-27 14:10:44 +01:00
renovate-rancher[bot]
21ecc33fd7 Update module github.com/containerd/containerd to v1.7.29 (#52331)
Co-authored-by: renovate-rancher[bot] <119870437+renovate-rancher[bot]@users.noreply.github.com>
2025-11-27 14:10:02 +01:00
Jonathan Crowther
d44fb9cd30 Simplify Project and Cluster Membership RBAC (#52854)
* Move to using the same membership role creation on project/cluster creation

* Improve logging

* Fix unit tests

* Initialize controller
2025-11-26 17:02:51 -05:00
Andreas Kupries
52fd427482 fix: merge two conversion functions into a single (#52773)
- this fixes the missing handling of `extended` in the
    `ConvertLimitToResourceList`.

  - it also brings over a fix to the mapping from rancher field names to kube
    resource names. one of the improperly mapped fields was `limitsCpu`.  This
    is now properly mapped to `limits.cpu`.

    this fix exposed a bug in the integration tests, where the test was written
    to adhere to the original bogus behaviour. With `limitsCpu` written and
    `limits.cpu` read by the test the actual data to expect was not seen, and 0
    read. And expected for.

    the test in question is now corrected.

note: tech debt against r/webhook
2025-11-26 12:40:05 +01:00
Pedro Tashima
82c5ce2209 Update stable release version to v2.13.0 (#52863)
Updated stable release version from v2.12.3 to v2.13.0 in README.
2025-11-25 16:55:51 -03:00
Kevin McDermott
a8ecf3e6b3 Add oidc provider namespaces to system project (#52843)
This adds the two namespaces "cattle-oidc-codes" and "cattle-oidc-client-secrets" to the system project which means they won't show up as not in a project.
2025-11-24 16:11:14 +00:00
Xavi Garcia
03aacadfa6 Sorts the tolerations in the Fleet cluster (#52755)
* Sorts the tolerations in the Fleet cluster

This PR sorts all the tolerations passed to the Fleet clster in order to avoid unnecessary reconciliations and changes in Content resources.

Refers to: https://github.com/rancher/rancher/issues/52711

---------

Signed-off-by: Xavi Garcia <xavi.garcia@suse.com>
2025-11-24 12:21:19 +01:00
Pedro Tashima
bc8f807d40 fix webhook secret (#52830) 2025-11-21 17:54:39 -03:00
Pedro Tashima
1559806934 add release/v2.13 (#52832) 2025-11-21 17:51:21 -03:00
Pedro Franco de Carvalho
2dab571415 Un-rc system-agent, wins and RKE (#52828) 2025-11-21 17:09:46 -03:00
Raul Cabello Martin
1d896a56aa Register token-key-index indexer for the wrangler context(#52822)
Ref: https://github.com/rancher/rancher/issues/52772

Signed-off-by: raul <raul.cabello@suse.com>
2025-11-21 09:48:04 -05:00
Apoorva Jagtap
b8e658b792 formats lastUpdateTime per RFC3339 (#52581) 2025-11-20 09:26:21 -05:00
Sakala Venkata Krishna Rohit
59db5ebeb9 Make sure JSURL and CSURL are nil to norman response writer (#52798) 2025-11-19 13:24:13 -05:00
Mario Manno
3042bb38d6 Fix nil pointer panic in dashboard plugin cache sync (#52684)
* Fix nil pointer panic in dashboard plugin cache sync

Prevent panic when syncing filesystem cache with index entries that
contain nil values. The original code accessed index.Entries[chartName].Version
without checking if the entry or its embedded UIPluginEntry pointer
were nil.

Add defensive nil checks for both the map entry and the embedded
UIPluginEntry pointer before accessing the Version field. This handles
edge cases where concurrent operations or race conditions may leave
nil pointers in the index map.

Include test cases that verify the fix prevents panics when:
- Map contains nil entry values
- Entry has nil embedded UIPluginEntry pointer

Fixes the panic reported at line 140 in fscache.go where legitimate
cache sync operations would crash the controller.

* Refactor UIPluginEntry to value type

Change UIPluginEntry from pointer to value type to avoid nil pointer
panics and simplify cache sync logic.
2025-11-19 11:20:52 +01:00
Adam Pickering
9a6618245e Add appco images used by rancher-monitoring to image origins (#52752) 2025-11-17 12:48:00 -07:00
Josh Meranda
9c8b577a72 Revert "49324 the api extension service from remotedialer proxy is never used…" (#52735)
This reverts commit 57a4a4eca0.
2025-11-17 12:59:40 -05:00
Peter Matseykanets
cf4ff9f62e Fix useractivity rbac for base and standard users (#52746)
Ref: https://github.com/rancher/rancher/issues/52744
2025-11-17 11:51:57 -05:00
Joao Ferraz
688bfb56bb fix: networking comparison in all restore type (#52736) 2025-11-17 13:49:34 -03:00
Joao Ferraz
90c0d3e985 use self-hosted runner (#52748) 2025-11-17 10:23:54 -05:00
Alexander Demicev
1ede647123 Add CAPI image to images list (#52723)
Signed-off-by: Alexandr Demicev <alexandr.demicev@suse.com>
2025-11-14 15:51:11 +01:00
Pratik Jagrut
420ac52c3d fix: Use correct name while creating SubjectAccessReview for SA impersonation check (#52594) 2025-11-14 13:20:52 +05:30
Andreas Kupries
0b96bcb64f Extend Project ResourceQuotas to Support All Upstream Kubernetes ResourceQuota Types (#52544)
* extended resource quota limits with map for arbitrary resources
updated conversion func to handle the new map
updated empty check to be epxlicit
note: the map[string]string makes the struct incomparable to go

* fixup: generated files

* fix type casting in handling of anyOther

* fix: missing handling of anyOther in back-conversion (resource list to resourceQuota)
beware: also fixes mishandling of the dotted resources (ex: limits.cpu) by the function

* feat: added basic unit tests for the conversion functions

* address comments: tweak name of new field

* address comment: simplify empty check, by means of reflection

* address comment: extended error message

* tweak name, `Extended` now.

* avoid updates if nothing would change

* fixup: duplicated import

* basic unit tests - setValidated, updateResourceQuota, updateDefaultLimitRange

* address comments
2025-11-13 15:02:13 +01:00
Peter Matseykanets
7d4bbccc23 Produce v2.14-head images (#52701) 2025-11-12 13:37:08 -05:00
Jonathan Crowther
67b0d930cc [RoleTemplate Aggregation] Use RoleBindings for Management Plane Rules (#52650)
* Change from using clusterrolebinding to rolebinding

* Remove references to clusterrolebindings

* Use CreateOrUpdate helper function instead of just create

* Fix tests
2025-11-12 11:15:22 -05:00
Jack Luo
265cbbdc1b fix CI failures (#52693) 2025-11-12 08:57:06 -07:00
Diogo Souza
d360ea1b27 fix deployment_test.yaml testcases (#52689) 2025-11-11 18:43:56 -03:00
eio-github-actions-power-enhancer[bot]
2191b4d104 shepherd-githubaction: Update rancher/shepherd to 050d62e (#52681)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2025-11-11 11:23:36 -06:00
Peter Matseykanets
e9cf13a74b Add a feature flag to disable /v3-public endpoints (#52662)
Ref: https://github.com/rancher/rancher/issues/52680
2025-11-11 09:59:09 -05:00
Samuel Vasconcelos
1731833b4c enable git/http/oci to download repos behind proxies (#52452)
* enable git/http/oci repo download behind proxy

* add tests for oci NewClient with proxy

* add tests for http HelmClient with proxy
2025-11-11 11:03:57 -03:00
Tom Lebreux
f829d8f1dc Bump frameworks dependencies to new branches (#52669) 2025-11-11 07:04:54 -05:00
nomagicln
70bd7e78a8 Fix error handling in namespace project cluster role update (#52291)
* Fix error handling in namespace project cluster role update

* refactor: combine error handling into if statement

Simplify roleCli.Update() error handling in namespace_handler.go
2025-11-10 15:50:56 -05:00
Gabriel Silva Bueno
bc6106ba45 update csp-adapter version (#52666)
Co-authored-by: Gabriel Silva Bueno <gabriel.bueno@localhost.localdomain>
2025-11-10 16:06:52 -03:00
Pedro Tashima
98de5d70f5 set system default registry (#52659) 2025-11-10 11:07:39 -03:00
eio-github-actions-power-enhancer[bot]
89daf2d8cb shepherd-githubaction: Update rancher/shepherd to b8e8da9 (#52661)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2025-11-07 14:48:37 -06:00
rancher-pr-and-push-webhook[bot]
e9dc69cd3b Bump webhook to 108.0.0+up0.9.0-rc.14 (#52655)
Co-authored-by: rancher-pr-and-push-webhook[bot] <181785884+rancher-pr-and-push-webhook[bot]@users.noreply.github.com>
2025-11-07 14:43:36 -05:00
Krunal Hingu
efcbd5d43f bump operators versions (#52612) 2025-11-07 23:42:00 +05:30
eio-github-actions-power-enhancer[bot]
024946c206 shepherd-githubaction: Update rancher/shepherd to 0f330e5 (#52637)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2025-11-07 10:30:58 -06:00
Pedro Tashima
07888a4e90 Update Dashboard refs to v2.13.0-alpha5 (#52644)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v2.13.0-alpha6
2025-11-07 10:41:02 -03:00
Vardhaman
6bdd288e60 bump muchang to v0.1.0 (#52648) 2025-11-07 18:46:26 +05:30
Vardhaman
a3dfb46dba fix alibaba driver name to sync with kev2 operator name (#52646) 2025-11-07 17:12:17 +05:30
Vardhaman
a6d39ce48a remove auto installation of ali-operator chart (#52629) 2025-11-07 08:39:10 +05:30
Pedro Franco de Carvalho
214c407183 Removed unused image from origins.go (#52643)
The rancher-vsphere-csi/cpi charts were removed from rancher/charts,
because they were specific to RKE1.

One of the images in origins.go was only referenced to by these
charts. The RKE2 vsphere charts use a more recent image for the k8s
versions supported in 2.13.
2025-11-06 20:35:24 -03:00
Jack Luo
b12f0e9329 bump rancher-machine to v0.15.0-rancher137 (#52640) 2025-11-06 16:03:01 -07:00