[release-1.29] Backports for 2024-09

[brandond]

Proposed Changes

Backports:

• fixes:
  • Fix rotateca validation failures when not touching default self-signed CAs #10710
  • Only clean up containerd hosts dirs managed by k3s #10823
• version bumps:
  • Bump runc to v1.1.13 #10737
  • Bump traefik to v2.11.8 #10779
  • Update coredns to 1.11.3 and metrics-server to 0.7.2 #10760
  • Bump helm-controller for skip-verify/plain-http and updated tolerations #10832
• trivy:
  • Add trivy scanning to PR reports #10758
  • Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 #10795
  • Fix /trivy action running against target branch instead of PR branch #10824
  • Tag PR image build as latest before scanning #10825

Types of Changes

backports

Verification

see linked issues

Testing

Linked Issues

• [Release-1.29] - Failure to read certificates and key files during k3s certificate rotate-ca #10743
• [Release-1.29] - Custom agent/etc/containerd/certs.d/* files are deleted by k3s on startup #10840
• [Release-1.29] - Bump runc to v1.1.14 #10747
• [Release-1.29] - Bump traefik to v2.11 #10777
• [Release-1.29] - Bump coredns to v1.11.3 #10769
• [Release-1.29] - Bump metrics-server version #10773
• [Release-1.29] - Bump helm-controller to add support for skip-verify/plain-http and updated tolerations #10835

User-Facing Change

Further Comments

[codecov]

Codecov Report

Attention: Patch coverage is 10.41667% with 43 lines in your changes missing coverage. Please review.

Project coverage is 43.32%. Comparing base (9973e7a) to head (d1bd238).
Report is 10 commits behind head on release-1.29.

Files with missing lines	Patch %	Lines
pkg/agent/containerd/config.go	12.00%	18 Missing and 4 partials ⚠️
pkg/server/cert.go	0.00%	20 Missing ⚠️
pkg/bootstrap/bootstrap.go	66.66%	1 Missing ⚠️

❗ There is a different number of reports uploaded between BASE (9973e7a) and HEAD (d1bd238). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (9973e7a)	HEAD (d1bd238)
e2etests	7	6

Additional details and impacted files

@@               Coverage Diff                @@
##           release-1.29   #10844      +/-   ##
================================================
- Coverage         49.71%   43.32%   -6.40%     
================================================
  Files               179      179              
  Lines             14976    15013      +37     
================================================
- Hits               7446     6505     -941     
- Misses             6167     7309    +1142     
+ Partials           1363     1199     -164     

Flag	Coverage Δ
e2etests	36.33% <10.41%> (-10.14%)	⬇️
inttests	19.60% <4.16%> (-17.06%)	⬇️
unittests	13.35% <0.00%> (-0.04%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.