[release-1.33] Backports for 2025-07

[brandond]

Proposed Changes

Backports:

• fix: Remove unused legacy certificates #12541
• Add etcdmigration e2e test #12528
• Bump alpine from 3.21 to 3.22 in /package #12429
• Bump golang:alpine image version #12537
• Update to new CRDs #12580
• Update kine and use config defaults helper #12599
• Bump containerd to v2.0.5-k3s2 #12612
• bump helm-controller and image #12630
• Bump alpine version in Dockerfile.local #12644

Types of Changes

backports

Verification

see linked issues

Testing

Linked Issues

• [Release-1.33] - Clean up now-unused server/tls/client-kube-proxy.crt and server/tls/client-k3s-controller.crt files on startup #12542
• [Release-1.33] - Add a test for sqlite to etcd migration #12546
• [Release-1.33] - registries.yaml config for docker hub only looked for as registry-1.docker.io not docker.io #12613
• [Release-1.33] - Stop using wrangler CRD generation helpers #12617
• [Release-1.33] - Bump kine to v0.13.17 #12621
• [Release-1.33] - Bump helm to v3.18.4 #12626

User-Facing Change

Further Comments

[codecov]

Codecov Report

Attention: Patch coverage is 35.71429% with 27 lines in your changes missing coverage. Please review.

Project coverage is 20.01%. Comparing base (c81744f) to head (3d6f4fd).
Report is 9 commits behind head on release-1.33.

Files with missing lines	Patch %	Lines
pkg/server/context.go	0.00%	14 Missing ⚠️
pkg/daemons/control/deps/deps.go	62.50%	4 Missing and 2 partials ⚠️
pkg/cli/server/server.go	0.00%	5 Missing ⚠️
pkg/etcd/etcd.go	71.42%	2 Missing ⚠️

❗ There is a different number of reports uploaded between BASE (c81744f) and HEAD (3d6f4fd). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (c81744f)	HEAD (3d6f4fd)
e2etests	1	0

Additional details and impacted files

@@                Coverage Diff                @@
##           release-1.33   #12631       +/-   ##
=================================================
- Coverage         40.62%   20.01%   -20.62%     
=================================================
  Files               187      183        -4     
  Lines             19313    19237       -76     
=================================================
- Hits               7846     3850     -3996     
- Misses            10273    14953     +4680     
+ Partials           1194      434      -760     

Flag	Coverage Δ
e2etests	?
unittests	20.01% <35.71%> (+0.08%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.