Signed-off-by: kkkkun <[email protected]>

To be up to date with the newest security fix.

Signed-off-by: 0scvr <[email protected]>

[3.5] Upgrade go version to 1.20.9

Part of etcd-io#16740

Signed-off-by: Allen Ray <[email protected]>

Part of etcd-io#16740

Signed-off-by: Allen Ray <[email protected]>

[3.5] Bump go to v1.20.10

[3.5] Bump golang.org/x/net to v0.17.0

…ted using round robin

Introduction of round robin golang/net@120fc90
Added in v0.10.0 golang/net@v0.10.0...v0.11.0

Signed-off-by: Marek Siarkowicz <[email protected]>

[v3.5] Return to default write scheduler since golang.org/x/[email protected] started using round robin

…he connection-string format)

Signed-off-by: Chao Chen <[email protected]>

…gRPC-go-updates

[3.5] Bump grpc-go to1.47 (and fix the connection-string format)

backport etcd-io#14834 and etcd-io#16324

Signed-off-by: Chao Chen <[email protected]>

…gRPC-update

[release-3.5]: upgrade gRPC-go to v1.52.0

Signed-off-by: caojiamingalan <[email protected]>
Signed-off-by: Marek Siarkowicz <[email protected]>

remove stack log when restore snapshot

…eady notification infinitely on startup"

Signed-off-by: Marek Siarkowicz <[email protected]>

The last step with gRPC update behavior changes auditing to resolve CVE etcd-io#16740 in 3.5

This PR backports etcd-io#14922, etcd-io#16338, etcd-io#16587, etcd-io#16630, etcd-io#16636 and etcd-io#16739 to release-3.5.

Signed-off-by: Chao Chen <[email protected]>

…ase-3.5

[release-3.5] etcdserver: add cluster id check for hashKVHandler

[3.5] Upgrade gRPC-go to 1.58.3

Signed-off-by: Benjamin Wang <[email protected]>

[3.5] Bump bbolt to 1.3.8 for release-3.5

To keep etcd projects up to date with the latest patch releases &
incorporate the latest security updates.

Signed-off-by: arjunmalhotra1 <[email protected]>

[3.5] etcd: upgrade go version from 1.20.10 to 1.20.11

Use a template to consolidate arm64 and amd64 test workflows. Enable
running armd64 tests on every push and pull request.

Signed-off-by: Ivan Valdes <[email protected]>

…telemetry.io/contrib/instrumentation/google.golang.org/grpc/[email protected]

Signed-off-by: sharath sivakumar <[email protected]>

…apis/api,google.golang.org/grpc to make it consistent

Signed-off-by: sharath sivakumar <[email protected]>

[3.5] CVE-2023-47108: Backport go.opentelemetry.io/[email protected] and go.open…

…every-push-and-pr-in-release-3.5

github workflow: run arm64 tests on every push

ExperimentalDistributedTracingSamplingRatePerMillion is the
number of samples to collect per million spans.
Defaults to 0.

Signed-off-by: James Blair <[email protected]>

Signed-off-by: James Blair <[email protected]>

Signed-off-by: James Blair <[email protected]>

[3.5] Backport add sampling rate to fix distributed tracing

It's possible that etcd server may run into SSRF situation when adding a new member. If users provide a malicious peer URL, the existing etcd members may be redirected to other unexpected internal URL when getting the new member's version.

Signed-off-by: James Blair <[email protected]>

Signed-off-by: Siyuan Zhang <[email protected]>

Signed-off-by: Siyuan Zhang <[email protected]>

Signed-off-by: Siyuan Zhang <[email protected]>

Signed-off-by: Siyuan Zhang <[email protected]>

Signed-off-by: Siyuan Zhang <[email protected]>

Signed-off-by: Siyuan Zhang <[email protected]>

…tep1

[3.5] Backport healthcheck code cleanup

Signed-off-by: Chao Chen <[email protected]>

Add two separate probes, one for liveness and one for readiness. The liveness probe would check that the local individual node is up and running, or else restart the node, while the readiness probe would check that the cluster is ready to serve traffic. This would make etcd health-check fully Kubernetes API complient.

Signed-off-by: Siyuan Zhang <[email protected]>

Signed-off-by: Siyuan Zhang <[email protected]>

[3.5] Backport disable following redirects when checking peer urls

Disable following redirects from peer HTTP communication on the client's side.
Etcd server may run into SSRF (Server-side request forgery) when adding a new
member. If users provide a malicious peer URL, the existing etcd members may be
redirected to another unexpected internal URL when getting the new member's
version.

Signed-off-by: Ivan Valdes <[email protected]>

Backport disable redirects in peer communication to release-3.5

Signed-off-by: Siyuan Zhang <[email protected]>

Signed-off-by: Jonas Riedel <[email protected]>

Signed-off-by: Siyuan Zhang <[email protected]>

…go-1.20.12

[3.5] Update go version to 1.20.12

[3.5] Backport livez/readyz

[3.5] tests: Backport Extract e2e cluster setup to separate package

Signed-off-by: Siyuan Zhang <[email protected]>

Signed-off-by: Siyuan Zhang <[email protected]>

[3.5] Backport e2e tests for livez/readyz.

…stent index and closing database on defer

`err` variable shared throughout the NewServer function and used on line
396 to defer decision whether backend should be closed when starting
the server failed.

`snapshot` variable is first defined 407, redeclared locally on line 496 and later
again used on line 625. Creation of local variable is a bug introduced
in etcd-io#11888.

Signed-off-by: Marek Siarkowicz <[email protected]>

…coverSnapshotBackend on line 517

Signed-off-by: Marek Siarkowicz <[email protected]>

[release-3.5] Fix etcd bootstrap: Etcd not validating database consistent index, closing database and panicking on nil backend.

Signed-off-by: ZhouJianMS <[email protected]>

Signed-off-by: Amit Rastogi <[email protected]>

Signed-off-by: ishan16696 <[email protected]>

[3.5] Add missing `experimental-enable-lease-checkpoint-persist` flag in etcd help

Backport testutils.ExecuteUntil to 3.5 branch

Signed-off-by: ishan16696 <[email protected]>

[3.5]Add a unit tests and missing flags in etcd help.

To ensure etcd official image builds can be reproduced.

Signed-off-by: James Blair <[email protected]>

Signed-off-by: Marek Siarkowicz <[email protected]>

[release-3.5] Don't flock snapshot files

…age-builds

[3.5] Backport adding digest for etcd base image

[3.5] member replace e2e test

Signed-off-by: Siyuan Zhang <[email protected]>

Signed-off-by: Siyuan Zhang <[email protected]>

[3.5] Fix delete inconsistencies in read buffer

Signed-off-by: Ivan Valdes <[email protected]>

…0.13

[3.5] dependency: upgrade go to 1.20.13

…ompaction function

Backporting commit 21bbc82 in etcd 3.5
To improve traceability of backend database usage, Added below parameter
related to backend database usage metrics inside scheduledCompaction
function.
current-db-size-bytes
current-db-size
current-db-size-in-use-bytes
current-db-size-in-use

Signed-off-by: Rahul More <[email protected]>

[3.5] mvcc: Printing etcd backend database related metrics inside scheduleCompaction function

Signed-off-by: Benjamin Wang <[email protected]>

…240124

[3.5] Print error log when creating peer listener failed

Signed-off-by: Benjamin Wang <[email protected]>

…ing_20240125

[3.5 test: fix `TestHashKVWhenCompacting`: ensure all goroutine finished

This is the minimal set of package updates I get after running:

./scripts/update_dep.sh golang.org/x/crypto v0.17.0
make

Signed-off-by: Marek Siarkowicz <[email protected]>

[release-3.5] Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795

Signed-off-by: Allen Ray <[email protected]>

Signed-off-by: Allen Ray <[email protected]>

[3.5] backport backoff/retry config

[3.5] Update to go 1.21

Signed-off-by: Ivan Valdes <[email protected]>

Signed-off-by: Wei Fu <[email protected]>

[3.5] etcdserver: drain leaky goroutines before test completed

Added keepalive_listener_unix.go and keepalive_listener_openbsd.go to
handle SetKeepAlivePeriod() specially on OpenBSD.

Signed-off-by: Ruize Tang <[email protected]>