Граф коммитов

7135 Коммитов

Автор SHA1 Сообщение Дата
kimorris27 423a4658dd Export IdentityURL field via admin API 2024-11-12 14:44:59 -06:00
Taylor Fahlman 6c56ef7d15
Merge pull request #3953 from Azure/ARO-12070-part-1
Realign CredentialsRequest to match current ARO operator role definition
2024-11-12 10:50:44 -08:00
Ayato Tokubi 9458ae478e
Fix if brackets (#3952) 2024-11-12 14:38:03 +01:00
Kipp Morris 59f60b004e
MIWI API converter fixes (#3950)
* Add missing Identity fields to API converters

* Properly convert PlatformWorkloadIdentityProfile from internal -> admin

* Do not clobber existing read-only fields on admin PUT/PATCH

* Fix silly mistakes...

* Fix unit test case
2024-11-11 13:02:51 -08:00
Taylor Fahlman bd1632b80d Realign CredentialsRequest to match current ARO operator role definition 2024-11-08 11:04:44 -08:00
Sanjana Lawande a73f54136e
confirm UsesWorkloadIdentity shared utility function is used everywhere in ARO-RP (#3932)
* confirm shared utility function is used everywhere in ARO-RP
2024-11-08 12:19:35 -05:00
Tanmay Satam d33d81b9c1
Support Update requirements for Workload Identity clusters (#3935)
* Do not clobber existing PlatformWorkloadIdentity readonly fields (clientid/objectid) on patch

* Ensure CSP-specific update steps only run for CSP clusters

* Ensure ClientId/ObjectIds are populated for all platform workload identities

* Ensure required federated identity credentials during cluster update

Note that additional work is still required to ensure this works as expected,
which will be handled in follow-up efforts.

* Add step to directly deploy platform workload identity credential secrets on-cluster during Update

* Refactor: extract mock platformWorkloadIdentityRolesByVersion setup to shared function

* Do not clobber existing ManagedServiceIdentity fields (IssuerURI) on patch

* Apply upgradeable-to annotation to cloudcredential resource via Patch

This avoids issues with e.g. having the wrong version of the resource struct
definition vendored into the RP.

* Fix az aro update request body handling

- Only pass in new/updated identities (RP will add these to the existing identity map during a patch operation)
- Only set the upgradeableTo property if it is explicitly set
2024-11-08 07:31:52 -08:00
Kipp Morris a60d631f4f
MIWI Cosmos DB key uniqueness fix (#3944)
* Fix Cosmos DB unique key issue for MIWI clusters and update existing unit tests to continue to pass

* Add test case that validates changes
2024-11-07 09:19:34 -08:00
Ben Vesel 19061696b9
Merge pull request #3940 from Azure/bvesel/remove-master-key-authorizer
remove master key authorizer in favor of local auth
2024-11-07 12:04:55 -05:00
Kipp Morris cc8f29c30b
Fix flaky unit test cases (#3945)
Tests now account for the fact that the actual code iterates over a map,
so the order can differ between test executions
2024-11-07 10:45:22 -05:00
Kipp Morris 825dbf95ac
Add missing env var to RP startup command (#3943) 2024-11-06 13:43:09 -08:00
Maitiú Ó Ciaráin 580dd96422
Make PreconfiguredNSG mutable (#3941)
Co-authored-by: Maitiu O Ciarain <mciarain@mciarain-thinkpadp16vgen1.barcelna.csb>
2024-11-06 11:59:20 -05:00
bennerv 7be7c5c24c remove master key authorizer in favor of local auth 2024-11-05 21:03:00 -05:00
Ben Vesel fcbebae2a6
Merge pull request #3561 from Azure/ankusing/ARO-5514-cosmosdb-disable-local-auth
Disable cosmosdb local auth
2024-11-05 20:56:53 -05:00
Hilliary Lipsig fcd3e1d7e6
Merge pull request #3804 from Azure/rhamitarora/ARO-0000-document-broken-links
Updated Useful Links section
2024-11-04 09:46:17 -08:00
Hilliary Lipsig 6bfac73772
Merge pull request #3819 from Azure/sudobrendan/hotfix-add-run-rp-docs
Add run-rp docs
2024-11-04 09:35:42 -08:00
Hilliary Lipsig 52447fd112
Merge pull request #3920 from Azure/gniranjan/checkaccess
Fix CheckAccess group expansion bug
2024-11-04 09:19:31 -08:00
Taylor Fahlman f0fbbbe7f7
Merge pull request #3938 from Azure/hawkowl/fix-validatestatic-multiple-operator-identities
Fix test flake in preview API for MIWI
2024-11-04 07:57:14 -08:00
Amber Brown 7d92fd396a fix test which can be flaky depending on ordering on map key ordering 2024-11-04 14:29:51 +11:00
Goutham Muguluvalli Niranjan 1de29ca69c
use dv.env instead of dv.azEnv 2024-11-01 16:34:08 -05:00
Alex Chvatal cb44560633
specify json output for a couple az commands that were missing it (#3937) 2024-11-01 13:53:23 -07:00
Alex Chvatal 517da1163f disallow duplicate operator identity resource IDs
This adds a step to static validation that checks to see if operator
identities use the same resource ID as any other operator identities and
causes the cluster installation to fail if so. Each operator should have
its own identity.
2024-11-01 14:46:42 -04:00
Kipp Morris 25eef93d02
Deploy fix - GET devops MSI using properly scoped Azure client (#3936)
* GET the devops MSI using a separate identities client scoped to the
correct Azure subscription

* Fix silly mistake
2024-11-01 10:07:28 -07:00
Tanmay Satam 98580734e5
Fix AdminAPI representation of PreconfiguredNSG status (#3933)
* Fix spelling of preconfiguredNSG JSON tag

* Copy PreconfiguredNSG property during internal->admin conversion

* Fix nil pointer dereference when converting workload identity cluster doc to adminapi representation

* Update admin openshiftcluster_putorpatch tests to expect property for PreconfiguredNSG
2024-11-01 09:00:00 -04:00
Taylor Fahlman 8a2f3dd489
Merge pull request #3929 from Azure/bvesel/refactor-clean-up
Use constant / function names everywhere possible
2024-10-30 19:57:41 -07:00
Caden Marchese 27c26e14e9
Update cosmosdb auth used by update_role_sets.go (#3931) 2024-10-30 14:15:50 -07:00
Ben Vesel b18cd2ccf0
Support rotation of kubeconfigs on Update for cx self-service (#3927) 2024-10-30 14:38:35 -04:00
Rajdeep Chauhan 89120b543c
ARO-9716 during miwi cluster install remove azure file csi storage class (#3928) 2024-10-30 14:36:10 -04:00
bennerv 122ac0f539 Use constant / function names everywhere possible 2024-10-30 13:51:00 -04:00
Goutham Muguluvalli Niranjan 9241717f3c
rebase 2024-10-30 11:29:22 -05:00
Goutham Muguluvalli Niranjan 6e5e9a38fe
pass token to SDK and update UT 2024-10-30 11:15:40 -05:00
Goutham Muguluvalli Niranjan 2a26c1d9be
update checkaccess mocks 2024-10-30 11:15:39 -05:00
Goutham Muguluvalli Niranjan cb74242f14
use the latest changes from checkaccess SDK 2024-10-30 11:15:39 -05:00
Goutham Muguluvalli Niranjan 354f0f4f95
go mod tidy 2024-10-30 11:15:38 -05:00
Goutham Muguluvalli Niranjan a1be39a3b5
go mod tidy 2024-10-30 11:15:38 -05:00
Goutham Muguluvalli Niranjan 9cc5c13293
delete old remotepdp references 2024-10-30 11:15:37 -05:00
Goutham Muguluvalli Niranjan 4a147fb90d
update unit tests 2024-10-30 11:15:37 -05:00
Goutham Muguluvalli Niranjan 593c6498bb
use checkaccess SDK for go 2024-10-30 11:12:55 -05:00
Goutham Muguluvalli Niranjan 79d1254c0d
update the references of GetObjecId() to ExtractClaims() 2024-10-30 11:12:55 -05:00
Goutham Muguluvalli Niranjan 69ca2118f6
generate checkaccess mocks 2024-10-30 11:12:54 -05:00
Goutham Muguluvalli Niranjan a0f9cbca8c
add test util to create fake token 2024-10-30 11:12:54 -05:00
Goutham Muguluvalli Niranjan b511374657
token logic to extract claims, oid, groups 2024-10-30 11:12:53 -05:00
Goutham Muguluvalli Niranjan a7421723c4
go mod tidy 2024-10-30 11:12:53 -05:00
Goutham Muguluvalli Niranjan 9dd710f510
go vendor update 2024-10-30 11:12:41 -05:00
Taylor Fahlman cf5d4b99b8
Merge pull request #3867 from Azure/yithian/ARO-10309
add an update step to replace digicert with onecert
2024-10-30 05:33:20 -07:00
Caden Marchese faf377c984
Incorporate CI and ARM feedback from azure-rest-api-specs to v2024-08-12-preview API (#3727)
* api changes

fix tag package-2023-11
this was wrong in the readme

remove UserAssignedIdentities
top level fields must not have additionalproperties

update the default tag to latest

define a new IdentityType with x-ms-enum

modelAsString on identityType x-ms-enum should be false

rename IdentityType to ResourceIdentityType to match v3/types.json

make client

add descriptions to all new API fields

make client

fix unit test that was failing as a result of removing the UserAssignedIdentity type from the API

Adjust a doc comment according to feedback

make client

* add platformworkloadidentityroleset to API definition and examples

Update client generation to account for swagger subfolder

make client

fix pwip and validatestatic unit tests

fix relative path to common-types

migrate from common-types/v3 to common-types/v6
it was requested that we use the latest version of
common types. This involves some changes to our examples
to match the UUID expected.

move from Identity to ManagedServiceIdentity type
defined in common-types/v6

use modelerfour.lenient-model-deduplication=true
avoids python client generation issues

convert PlatformWorkloadIdentity to map

ARO-4382 fix unit test cases

make generate swagger

fix unit tests

revert naming openShiftCluster.ManagedServiceIdentity to Identity

fix prod code and unit tests post-rebase, reference common-types
directly for the identity property

* more swagger CI fixes
* fix examples to contain identity and type
* remove PlatformWorkloadIdentityRoleSetUpdate

oct 16th changes

oct 17th changes

fix issues post-rebase

* update readme to contain suppression for avoidAdditionalProperties

* fix ModelValidation error by converting example IDs to resourceIDs

* Update python/go clients

* Update az aro extension to enumerate platform_workload_identities as a dict instead of a list

* Fix python linter issues

* configure suppression for PatchBodyParametersSchema

appease the linter, fix subscriptionID type in util/azureclient

appease the linter again

correct log statement, use better naming

* regenerate examples
* changes operatorName and roleDefinitionName in PWIRS_List.json

---------

Co-authored-by: Tanmay Satam <tsatam@redhat.com>
2024-10-29 14:08:36 -07:00
Alex Chvatal b5dbda10a2 skip correctCertificateIssuer if FeatureDisableSignedCertificates is set 2024-10-29 12:36:14 -04:00
Alex Chvatal bfa07e916a check for nil pointers in results of GetCertificate 2024-10-29 12:36:14 -04:00
Alex Chvatal 344f342580 add helper functions for psuedo-consts for the API and ingress cert names 2024-10-29 12:36:14 -04:00
Alex Chvatal e018c876bc create a const for the OneCert issuer name 2024-10-29 12:36:14 -04:00