Граф коммитов

6306 Коммитов

Автор SHA1 Сообщение Дата
Ben Vesel 14d5b29238
Remove openshift/installer vendored dependency script (#3301) 2023-12-04 16:34:32 -05:00
Ben Vesel 232d3bc536
Move to correct mdsd image (#3308) 2023-12-01 16:11:41 -05:00
Steven Fairchild 86deb391a8
MDM Image Bump - ARO-4792 (#3297)
Update MDM image to 2.2023.1118.1225-d7e0d6-20231118t1338
Update MDSD image to mariner_20231109.1
2023-12-01 13:40:15 -05:00
Steven Fairchild 72fd8ad97c
Update Go Vendored Modules - ARO-4776 (#3302)
* MDM Image Bump - ARO-4792

Update MDM image to genevamdm:2.2023.1118.1225-d7e0d6-20231118t1338

* Update k8s.io/kubernetes - ARO-4776
Update Go vendored modules to fix:
  - [GHSA-hq6q-c2x6-hmch](https://github.com/advisories/GHSA-hq6q-c2x6-hmch)
2023-12-01 13:39:42 -05:00
bennerv 01ce6a1ec5 Add libzstd.so.1 to fluentbit container build 2023-12-01 11:13:15 -05:00
Jeff Yuan 548ad5cb0c
Merge pull request #3232 from SrinivasAtmakuri/remove-IsLessThanMinimumDuration
etcd-renew - Add extra validation and remove IsLessThanMinDuration
2023-11-30 18:46:41 +13:00
Daniel J. Holmes (jaitaiwan) 6b15494718 fix(admin): Ensure check on certData slice 2023-11-30 13:51:18 +10:00
Tony Schneider 9b92b4f79b
Admin action to delete a cluster managed resource (#3286)
* add ResourceDeleteAndWait to azureactions

* add delete resource admin action and frontend routing

* add helper functions for lb config manipulation

* refactor azure actions
- moves resource delete code to seperate file
- adds loadbalancer client to handle deleting FrontendIPConfiguration
- updates ResourceDeleteAndWait to handle deleting FrontendIPConfigurations
- adds DeleteByIDAndWait to features/resources client

* add e2e tests

* fix imports and add license headers

* cleanup / fix lint

* add command example to doc

* rename to "managed" resource id

* change query param to camel case

* use var group instead

* return error as adminReply already wraps in CloudError

* fix missed camelCase of query param

* use regex to match frontend ip configurations

* remove focus

* add deny list to prevent deleting PLS and Storage

* fix mixed import

* use fake pls name to prevent accidently deleting e2e cluster pls

* fix test

* add PE to deny list
2023-11-29 17:09:56 -05:00
Lisa Rashidi-Ranjbar a017435855 ARO-4779: Mirror new hive image to close vulns 2023-11-29 15:43:50 -05:00
Lisa Rashidi-Ranjbar b86781166e ARO-4779: Update hive dependency to close vulns 2023-11-29 15:43:28 -05:00
bennerv 72cad158a9 Remove version 4.11.26 as it's affected by installation bugs 2023-11-29 13:51:28 +00:00
Nicolas Ontiveros e4eea7f7a8
Use an enum for cluster maintenance states (#3230) 2023-11-28 16:25:49 -05:00
Kipp Morris 9a9edacf6b
Update ARO operator Azure auth scheme to use a DefaultAzureCredential (#3274)
* Update the cluster authorizer to use a DefaultAzureCredential

* Update the ARO operator to set and use DefaultAzureCredential via env vars

* Add a CredentialsRequest to the ARO operator deployment

* Restart the ARO operator upon `az aro update`

* Removed now unused AzCredentials function

* Changed ARO operator deployment wait time during `az aro update` from
  20 minutes -> 5 minutes

* Refactor CliWithApply to generalize to different object types

* Updated Restart in pkg/util/kubernetes to use server-side apply
* Updated Restart in pkg/operator/deploy to only return an error after
  at least attempting to restart all of the deployments passed in

* E2E test for ARO operator master deployment's restart upon cluster update

* Wait for the ARO operator's CredentialsRequest to be reconciled before
restarting
2023-11-28 10:45:00 -05:00
Srinivas Atmakuri d71061995a test case validateEtcdCertsRenewed func 2023-11-28 10:51:39 +05:30
Amber Brown afa28a3789
fix not returning arm template errors (#3288) 2023-11-27 13:52:49 -05:00
Matthew Barnes 966f7a176e graph: Allow gzip compression in requests
Microsoft fixed the Graph service regression that broke
kiota-http-go, so revert the workaround.
2023-11-27 10:30:47 -05:00
Amber Brown 4a1ea4074e
Remove journald fields that aren't needed (#3283) 2023-11-22 10:57:26 +11:00
Tanmay Satam 06f78b75ce
Watch MachineSets for worker subnet changes instead of Machines (#3280)
https://issues.redhat.com/browse/ARO-4632
2023-11-21 10:24:25 +11:00
Nont e7f514086d
Migrate documentdb client from sdk track 1 to track 2 client (#3255)
* Create documentdb track 2 client and mockgen

* Replace track 1 documentdb with track 2

* Refactor per comments

* Delete unused client

* Fix generated env mocks
2023-11-17 15:34:17 -05:00
Nicolas Ontiveros a85b8d011e
FedRAMP TLS 1.3 Compliance (#3285) 2023-11-17 14:10:13 -05:00
Tanmay Satam f421bac527 Rename installLogsForDeployment to indicate latest deployment 2023-11-17 11:31:04 -05:00
Tanmay Satam e9e3c7a89d Implement generic handling for Hive ProvisionFailed=True conditions w/ Azure policy errors 2023-11-17 11:31:04 -05:00
Tanmay Satam ae5c57b6a8 Add hack script to generate hive install-log-regexes.yaml from ARO definition 2023-11-17 11:31:04 -05:00
Steven Fairchild ac7cf2f35c
Fix CVE-2023-45857 npm vulnerability found in audit (#3279)
https://github.com/advisories/GHSA-wf5p-g6vw-rhxx
2023-11-14 14:10:52 -05:00
tschneid 19703fefc6 move default IP creation outside of newPublicLoadBalancer method 2023-11-13 12:49:40 -05:00
tschneid 3d7c789c13 remove outdated comment 2023-11-13 12:49:40 -05:00
tschneid d37aae372a add unit tests for multiple IP aro create 2023-11-13 12:49:40 -05:00
Daniel Ionel Bizau 0b7096dc43
add back cli-domain-from-installer-image (#3277)
Overriding the npm security alert to be able to hotfix the RP
2023-11-10 17:10:53 +01:00
Amber Brown 19d053d2fe
Move genevalogging operator controller files into separate .confs with goembed (#3276) 2023-11-10 14:28:43 +11:00
Matthew Barnes d0c6db7df4
e2e: Spew ODataError details before panicing (#3265)
Co-authored-by: Matthew Barnes <mbarnes@fedorapeople.org>
2023-11-09 12:04:57 -05:00
Matthew Barnes d25e7f29d9
graph: Add HTTP tracing option for MS Graph requests (#3269)
* graph: Add HTTP tracing option for MS Graph requests

Debug feature enabled by ARO_MSGRAPH_TRACE environment variable.

* graph: Temporarily disable gzip compression in requests

---------

Co-authored-by: Matthew Barnes <mbarnes@fedorapeople.org>
2023-11-08 15:12:42 -05:00
Matthew Barnes 67d06bd655
Propagate errors of GenevaLogging controller (#3221)
* genevalogging: Use AROController as base type
* genevalogging: Split off business logic for uniform error handling
* genevalogging: Add condition for controller status
* genevalogging: Check status conditions in unit tests

---------

Co-authored-by: Matthew Barnes <mbarnes@fedorapeople.org>
2023-11-08 09:37:03 -07:00
Amber Brown e278fd6891
Add some more golangci-lint linters and fix the issues they find (#3234) 2023-11-08 10:45:17 +11:00
tschneid c53b31c73d add cluster check alert 2023-11-07 11:15:37 -05:00
tschneid 590cc5297d add muo alerts 2023-11-07 11:15:37 -05:00
Steven Fairchild 18a57a3fe7 Update RP Documentatation with Etcd Recovery URL
Fixes [ARO-2718](https://issues.redhat.com/browse/ARO-2718)
2023-11-07 11:15:04 -05:00
Andrew Denton 83b2a552c2
Delete OpenShiftVersions via change-feed (#3262) 2023-11-03 08:20:55 -04:00
Ben Vesel 35a5f16464
Bump Hive Version + Minimal Install (#3260)
* fix: match existing hive-config with production hive-config

* bug: bump hive version to use minimal install version and resolve vulns

* Remove oc-cli domain annotation
2023-11-02 12:56:26 -04:00
Kipp Morris f042c8144d
Fix e2e test for azurefile-csi storage class that uses ARO-managed storage account on OCP 4.11 (#3226)
* Fix PVC name in PVC status check
* Limit test scope and verify that test works if FIPS is disabled
* Mark test pending again, leave comment about it, and revert debugging
stuff
2023-11-01 16:44:48 -04:00
Tanmay Satam a0cc0eec38
Patch Hive ClusterDeployment rather than update it (#3244) 2023-11-01 12:25:27 -04:00
Amber Brown 9100c81eb0
clean up some of the monitor emitting metrics for aro operator statuses and prometheus (#3235) 2023-11-01 10:10:44 -04:00
Goutham Muguluvalli Niranjan 0dd1ec9300
Add defaults and update k8s dev version (#3245)
* add defaults and update k8s dev version

* update default of outbound_type

* no default set for disk enryption

* nit: fix style

---------

Co-authored-by: gniranjan <gniranjan@microsoft.com>
2023-11-01 10:02:06 -04:00
Christoph Blecker 6e66ecdb85
Merge pull request #3251 from Azure/dependabot/go_modules/github.com/docker/docker-24.0.7incompatible
Bump github.com/docker/docker from 23.0.3+incompatible to 24.0.7+incompatible
2023-10-31 16:53:38 -07:00
Ben Vesel af5f8260e8
bug: Keep cli-domain-from-installer-image until we use minimal hive version (#3257) 2023-10-31 13:35:10 -04:00
dependabot[bot] 7e96231739
Bump github.com/docker/docker
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 23.0.3+incompatible to 24.0.7+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v23.0.3...v24.0.7)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 15:45:12 +00:00
Ben Vesel c473088c75
Hive Minimal Install Annotation on ClusterDeployment (#3243)
* Add annotation for hive minimal install

* Remove cli-domain annotation and use installAttemptsLimit instead of annotation
2023-10-30 11:39:16 -04:00
Ben Vesel 4aaccb824e
Only mirror images from 4.11+ (#3240) 2023-10-30 10:36:24 -04:00
Christoph Blecker 2482a42b5c
Merge pull request #3250 from Azure/dependabot/github_actions/actions/setup-node-4
Bump actions/setup-node from 3 to 4
2023-10-30 07:34:41 -07:00
Amber Brown bb8097c92f
Skip failing pki test for now (#3249) 2023-10-30 13:59:56 +01:00
Srinivas Atmakuri 7e09f87c45 Add extra validation and remove IsLessThanMinDuration
Added extra validation to verify if etcd certificates are renewed
Also, removed isLessThanMinDuration code block so we can
even renew clusters whose expiry is more than 6 months duration
2023-10-30 12:53:55 +05:30