* fix: wait for registry before pulling kubeadm images
* fix: support kubeadm upgrade to newer minors
* fix: recover kubelet config during upgrades
* fix: handle kubelet upgrade recovery edge cases
* fix: refresh rootfs sealctl before use
* fix: tolerate existing temporary registry
* fix: ignore kubeadm upgrade health check job
* fix(kubernetes): align cert identity handling with kubeadm v1.29+ (#83)
* build(lifecycle): auto-detect C compiler and CC
Add CC and CC_<platform> Makefile options and implement compiler
resolution for CGO-enabled sealos/sealctl builds. Update DEVELOPGUIDE
with usage and a cross-compile example.
Signed-off-by: Yun Pan <dinoallo@netc.it>
* fix(kubernetes): align cert identity handling with kubeadm v1.29+
- migrate remote control-plane certs across the v1.29 identity boundary
- repair remote admin.conf on all masters during upgrade
- keep local sealos PKI and kubeconfigs aligned with the v1.29+ model
- keep super-admin.conf local-only during renew and upgrade flows
- preserve pre-v1.31 long-lived cert policy and use v1beta4 fields on
v1.31+
- fix v1.31 remote admin.conf migration config distribution across
masters
Signed-off-by: Yun Pan <dinoallo@netc.it>
---------
Signed-off-by: Yun Pan <dinoallo@netc.it>
* fix(lifecycle): sync and upgrade codex
* fix: cert and add timeout for cluster role binding create
---------
Signed-off-by: Yun Pan <dinoallo@netc.it>
Co-authored-by: Yun Pan <dinoallo@netc.it>
yy