[release-1.32] Backports for 2025-03

[brandond]

Proposed Changes

Backports:

• Add etcd snapshot metrics #11793
• fix: move CONFIG_SECCOMP to generally necessary category in check-config command #11807
• Move k3s.cattle.io APIs to github.com/k3s-io/api #11827
• Fix bootstrapping on non-init servers #11844
• Add netfilter statistic module to check-config #11860
• Bump to containerd v2.0.3/runc v1.2.5 #11863
• Avoid use of github.com/pkg/errors functions that capture stack #11880
• Add periodic background snapshot reconcile #11881
• Bump etcd to v3.5.19 #11897

Types of Changes

backports

Verification

see linked issues

Testing

Linked Issues

• [Release-1.32] - Expose prometheus metrics for etcd snapshots #11810
• [Release-1.32] - Mark SECCOMP support required in check-config #11916
• [Release-1.32] - Move k3s.cattle.io CR types to github.com/k3s-io/api #11839
• [Release-1.32] - control-plane-only nodes cannot start if join server is unreachable #11913
• [Release-1.32] - rotate-ca doesn't work if server is set in config when rotating #11910
• [Release-1.32] - CONFIG_NETFILTER_XT_MATCH_STATISTIC is required by kube-proxy but not validated by check-config #11907
• [Release-1.32] - Fallback to default registry endpoint is broken when using "*" wildcard mirror in registries.yaml with containerd 2.0 #11875
• [Release-1.32] - Replace use of errors.Wrap with errors.WithMessage #11882
• [Release-1.32] - Sync snapshot files on disk/s3 periodically #11889
• [Release-1.32] - Bump etcd to v3.5.19 #11904

User-Facing Change

Further Comments

[codecov]

Codecov Report

Attention: Patch coverage is 16.11570% with 406 lines in your changes missing coverage. Please review.

Project coverage is 44.90%. Comparing base (26e3fa9) to head (4407202).
Report is 14 commits behind head on release-1.32.

Files with missing lines	Patch %	Lines
pkg/cluster/bootstrap.go	10.12%	67 Missing and 4 partials ⚠️
pkg/cluster/cluster.go	14.28%	41 Missing and 1 partial ⚠️
pkg/etcd/snapshot.go	9.30%	39 Missing ⚠️
pkg/agent/config/config.go	0.00%	22 Missing ⚠️
pkg/etcd/etcd.go	14.28%	18 Missing ⚠️
pkg/cluster/storage.go	25.00%	15 Missing ⚠️
pkg/agent/run.go	0.00%	13 Missing ⚠️
pkg/cli/server/server.go	7.14%	12 Missing and 1 partial ⚠️
pkg/agent/containerd/containerd.go	0.00%	12 Missing ⚠️
pkg/agent/flannel/flannel.go	0.00%	11 Missing ⚠️
... and 47 more

Additional details and impacted files

@@               Coverage Diff                @@
##           release-1.32   #11919      +/-   ##
================================================
- Coverage         46.61%   44.90%   -1.72%     
================================================
  Files               206      190      -16     
  Lines             19509    19107     -402     
================================================
- Hits               9095     8580     -515     
- Misses             9117     9285     +168     
+ Partials           1297     1242      -55     

Flag	Coverage Δ
e2etests	35.84% <10.52%> (-5.16%)	⬇️
inttests	35.30% <11.78%> (+0.19%)	⬆️
unittests	16.79% <7.85%> (+0.35%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.