v1.18.9-rc1+rke2

cis: update guide and remove uneeded sysctl (#418)

- remove kernel.keys.root_maxbytes sysctl
- update hardening guide to account for different rke2-cis-sysctl.conf locations depending on installation method

v1.18.9-beta23+rke2: Fix profile flag for static pods

Stop ranging over CLI flags; the type checks are tedious and
error-prone.

Fixes errors turned up in QA validation of #387.

Signed-off-by: Brad Davidson <[email protected]>

v1.18.9-beta22+rke2

Update k3s (#398)

v1.18.9-beta21+rke2

Ensure profile flag is respected

Problem: the --profile was not being respecting, causing things like the
etcd pod not being ran as the etcd user. This is because we were
shadowing a variable declation.

Fixing this also exposed that a CIS related flag,
`--protect-kernel-defaults` was improperly set.

Solution: Removing the shadowed declaration of the cisMode variable. The
global variable of the same name that is properly assigned a value
earlier on in the logic will now be used.

To fix protect-kernel-defaults, remove superfluous `--`.

Signed-off-by: Craig Jellick <[email protected]>

v1.18.8-beta20+rke2

Add etcd name file to hash files (#338)

* Add etcd name file to hash files

* go mod and gofmt

* fixes

v1.18.8-beta19+rke2

Merge pull request #313 from briandowns/issue-312

Update the Referenced Version of Etcd.

v1.18.8-beta18+rke2: Merge pull request #310 from briandowns/issue-304

Add Kubernetes Upgrade Documentation

v1.18.4-beta17+rke2

selinux: custom context types for static pods (#287)

Set custom selinux context types to containers running in a static pod.
Refactor Vagrantfile to leverage installer and airgap images by default.
Depends on https://github.com/rancher/rke2-selinux/pull/6

v1.18.4-beta16+rke2

airgap: missing rancher/kube-proxy (#284)

v1.18.4-beta15+rke2

airgap: add rancher/klipper-helm (#283)