Tom Wieczorek

Backport to `release-1.27`: * #4392 Fixes CVE-2024-24787 and CVE-2024-24788. See: * #4390

## Description The error callback allows for logging and retries after a backoff, eliminating the outer loop and extra select, while also responding promptly to context cancellations. Also track the...

Fluent interface for atomic file writes

14

## Description This allows the atomic write functions to be extended in the future without breaking the existing API. Introduces the `AtomicOpener` struct, which implements the fluent interface and collects...

Bump runc to v1.2.0-rc.1

2

## Description https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.1 Let's see if CI passes for this. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature...

## Description Those are also part of `GetWorkerFlags()`. In fact, the two commands that use `GetControllerFlags()` ("controller" and "install"), both also add `GetWorkerFlags()`, defining them effectively twice. Add tests for...

Rework users.GetUID

4

## Description **Rename to LookupUID** The new name more closely matches the standard library function name. Also, "lookup" sounds less lightweight than "get", which gives a better sense of the...

Document how to "join" controllers when external etcd is used

8

When using [external etcd](https://docs.k0sproject.io/v1.29.3+k0s.0/configuration/#specstorageetcdexternalcluster), k0s refuses to create controller join tokens: ```console $ k0s token create --role controller Error: refusing to create token: cannot join controller into current storage ```...

Drop multierr module and rely on the standard lib

1

## Description ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ]...

Discrepancy between `spec.installConfig.users` and users used to run components

6

### Before creating an issue, make sure you've checked the following: - [X] You are running the latest released version of k0s - [X] Make sure you've searched for existing...

### Is your feature request related to a problem? Please describe. K0s hard-codes the typical systemd cgroup structure when launching kubelet and containerd. Those defaults are not always a good...