Граф коммитов

6306 Коммитов

Автор SHA1 Сообщение Дата
bennerv 6fa30d22dc Bump openshift dependencies 2023-09-01 17:39:42 -04:00
bennerv fed8ebae55 Remove SetClusterName as it was deprecated + removed 2023-09-01 16:54:29 -04:00
Christoph Blecker b108c4ddbd go mod vendor 2023-09-01 16:53:58 -04:00
Christoph Blecker 6947c3b68a
Bump kube dependencies 2023-09-01 12:58:52 -07:00
Christoph Blecker 5c5a56b13b
Merge pull request #3141 from cblecker/clock
Use updated k8s.io/utils functions
2023-09-01 12:30:57 -07:00
Christoph Blecker 48a46997ad
go mod vendor 2023-09-01 10:25:45 -07:00
Christoph Blecker 5e58754a7a
Update k8s.io/utils dependency 2023-09-01 10:25:32 -07:00
Christoph Blecker 7fc4297dee
Use k8s.io/utils/ptr instead of deprecated pointer package 2023-09-01 10:25:15 -07:00
Christoph Blecker 914c716d30
Use stable clock package 2023-09-01 10:25:12 -07:00
Christoph Blecker d228bf11bf
Merge pull request #3139 from Azure/dependabot/go_modules/github.com/docker/docker-23.0.3incompatible
Bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible
2023-09-01 09:43:09 -07:00
Tanmay Satam 690c43156d
Reduce diffs between our `az aro` extension and the upstream Azure CLI command (#3125)
* Reduce whitespace differences

* Refactor rp_mode_development() calls
2023-09-01 10:14:43 -04:00
dependabot[bot] eadedd9e2f
Bump github.com/docker/docker
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 23.0.1+incompatible to 23.0.3+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v23.0.1...v23.0.3)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-01 14:10:53 +00:00
Amber Brown c2517910a5
exclude some more log namespaces based on statistics (#3132) 2023-09-01 10:07:29 -04:00
dependabot[bot] 6e5083d30f
Bump github.com/sigstore/rekor from 1.0.1 to 1.2.0 (#3138)
Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.0.1 to 1.2.0.
- [Release notes](https://github.com/sigstore/rekor/releases)
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/rekor/compare/v1.0.1...v1.2.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/rekor
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-01 10:07:04 -04:00
Caden Marchese 56352e6f02
Mirror the hive version we intend to upgrade to (#3126) 2023-08-31 19:41:38 -04:00
Spencer Amann 9f7ef799e4
increase machine health check node unready timeout to 15m (#3133)
* increase machine health check node unready timeout to 15m

* update mhc docs

* increase machine health check node startup timeout to 25m
2023-08-31 19:38:29 -04:00
Christoph Blecker b9679a1498
Merge pull request #3136 from cblecker/gvf 2023-08-31 16:12:31 -07:00
Ben Vesel 37d6378a88
Bump github.com/containers/podman/v4 from 4.1.1 to 4.4.2 (#3135)
Bumps [github.com/containers/podman/v4](https://github.com/containers/podman) from 4.1.1 to 4.4.2.
- [Release notes](https://github.com/containers/podman/releases)
- [Changelog](https://github.com/containers/podman/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/containers/podman/compare/v4.1.1...v4.4.2)

---
updated-dependencies:
- dependency-name: github.com/containers/podman/v4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-31 18:59:01 -04:00
Christoph Blecker 265a29c138
Use go version from go.mod 2023-08-31 14:03:52 -07:00
Lisa Ranjbar Miller e4d4c73db6
Reduce flakes in TestLoadBalancerProfile() (#3129) 2023-08-31 14:01:45 -06:00
Amber Brown dcaa1adc1f
Merge pull request #3122 from kimorris27/update-azure-sdk-for-go/sdk/azidentity 2023-08-31 11:06:56 +10:00
Caden Marchese 4b963fec8e
Fix .gitignore for kubeconfigs (#3128) 2023-08-31 09:42:07 +10:00
Amber Brown 1e3c10291f
Remove old upgradestreams logic from the monitor & old parts of the RP (#3092) 2023-08-31 09:22:24 +10:00
Jeff Yuan c3a282ce76
added guardrails namespace (#3130)
* added guardrails namespace
* added test case
2023-08-31 10:32:08 +12:00
kimorris27 9c05b3641d Remove erroneous HTTP header checks from AppLens client tests
The `pipelineVerifier` policy used to check the headers comes ahead of
the `httpHeaderPolicy`, which is what sets the request headers, so
attempting to check the headers in this way was logically incorrect from
the time the code was written. However, it just so happened to work
because the headers are stored as a `map` - a reference type. The
`httpHeaderPolicy` was modifying the same underlying `map` that the
`pipelineVerifier` stores, so the `pipelineVerifier` was being updated
with the headers and the tests were able to pass by coincidence.

However, the update of `azcore` from v1.6.0 to v1.7.1 includes a change
that causes the default `retryPolicy` to always deep-copy the request,
and the `retryPolicy` lies between the `pipelineVerifier` and the
`httpHeaderPolicy`. This means the coincidence that was allowing the
tests to pass is now gone - the `pipelineVerifier` and
`httpHeaderPolicy` no longer work with the same underlying `map`.

I removed the header checks after finding this bug because I don't see a
good way to check them.

See
https://learn.microsoft.com/en-us/azure/developer/go/azure-sdk-core-concepts#http-pipeline-flow
for some context on the `azcore` request pipelines.
2023-08-30 08:53:24 -05:00
kimorris27 a3a442d730 `azidentity v1.2.2 -> v1.3.1`, `azidext v0.4.0 -> v0.5.0`, `go mod tidy; go mod vendor`
Goal was to update `azidentity` for compatibility with workload identities, but `azidext` needed to be updated as well for compatibility with the newer `azidentity`
version; see https://github.com/jongio/azidext/releases/tag/go%2Fazidext%2Fv0.5.0
2023-08-30 08:53:24 -05:00
Amber Brown 286e65a61f
Remove upgrades from kubeactions and the admin API (#3091) 2023-08-30 12:15:43 +10:00
Ben Vesel a47f06b4fd
Specify the resource manager endpoint for the lb backend pool client (#3127) 2023-08-29 15:43:50 -06:00
Tony Schneider 3b370aebff
multiple ARO managed public IPs per Load balancer during cluster update (#3095)
* add dynamic validation for lb profile

* add CreateOrUpdateAndWait to publicIpAddressClient

* add List to PublicIPAddressesClient

* fix fake uuid generator

* add reconcileLoadBalancerProfile to update process

* defer cleanup of ips to prevent orphaned ips

* cleanup

* cleanup

* patch effectiveOutboundIPs if it does not match actual loadbalancer ips

* cleanup

* refactor cleanup of managed ips to propogate cleanup errors

* update error description for multiple errors

* update dynamic validation to use snatPortsPerIP const
2023-08-28 15:40:12 -04:00
Jason Healy bd8926136e
Fix credential rotation failure (#3113)
* recreate azure-credentials if it's missing
* use apply instead of create/update
2023-08-28 15:23:42 -04:00
Rajdeep Singh Chauhan 30c99aee60 add aro-monitor and aro-portal restart to predeploy steps 2023-08-28 11:06:00 -04:00
Lisa Ranjbar Miller b7ba1cc158
ARO-3112: Set DisableOutbound SNAT to true on Load Balancers (#3069) 2023-08-28 07:51:49 -06:00
Amber Brown e6442d7506
Remove the unneeded replace for hive (#3123) 2023-08-28 13:19:31 +10:00
Christoph Blecker 6f4d75cfdd
Merge pull request #3119 from 2uasimojo/ARO-3801/revendor-hive 2023-08-26 06:46:48 -07:00
Steven Fairchild d4a2c90c84 Update pkg/operator/controllers/dnsmasq/dnsmasq.go
Co-authored-by: Ben Vesel <10840174+bennerv@users.noreply.github.com>
2023-08-25 16:24:09 -04:00
Steven Fairchild 8e75ed1a01 Update pkg/operator/controllers/dnsmasq/dnsmasq.go
Co-authored-by: Ben Vesel <10840174+bennerv@users.noreply.github.com>
2023-08-25 16:24:09 -04:00
Steven Fairchild 3f62386ca5 Update dnsmasq operator to use embeded files
This cleans up the dnsmasq controller package by moving all go templates into the dnsmasq/scripts directory.
2023-08-25 16:24:09 -04:00
Steven Fairchild f9df85dc66 Fix resolv.conf during Azure host servicing
If the network interfaces are brought up/down without restarting NetworkManager, our resolv.conf will be overwritten by NetworkManager.
This can occur during [Azure Host Servicing](https://learn.microsoft.com/en-us/azure/developer/intro/hosting-apps-on-azure) events.

Addiontal information is written to the system logs to assist with SRE
troubleshooting.

By using NetworkManager dispatcher scripts, we can restart dnsmasq when
certian events happen.

Update dnsmasq controller to have a use a second operator flag
This is to control the application of the dnsmasq reboot script, and prevent unscheduled worker node changes.
2023-08-25 16:24:09 -04:00
Eric Fried cd811e6cbe
Apply lint roller
These seem latent, but necessary for the previous commit to pass CI.
2023-08-25 13:55:51 -05:00
Nicolas Ontiveros 01cf99f1ca
Unplanned Maintenance Signals (#3060)
Co-authored-by: Nicolas Ontiveros <nicolas.ontiveros@microsoft.com>
2023-08-25 13:17:19 -04:00
Srinivas Atmakuri 644f8b8579
Remove install word in Condition error messages (#3044)
* Removed install word in the error messages
2023-08-25 13:15:59 -04:00
Eric Fried d32c09410f
Revendor hive to 70b666ec8
Hive needs to be vendored at the same commit level as it is deployed in
ARO. One reason, as described in the linked card, is that changes in
APIs can lead to unintended edits during round-trip Get()/Update()
flows.

ARO-3801
2023-08-25 10:52:26 -05:00
Amber Brown db0b249eb8
remove gvrresolver use in the frontend (#3087) 2023-08-24 11:21:34 +10:00
Caden Marchese f26f8f41d0
Fix local make admin.kubeconfig (#3097) 2023-08-23 08:29:20 -04:00
Jeff Yuan 099f624d3d
use restricted scc for gatekeeper-manager-role (#3080)
* use restricted scc for gatekeeper-manager-role
* fix lint
* fix go test
* set audit-match-kind-only to remove extra warnings
* added comments
2023-08-23 11:42:24 +12:00
Ben Vesel 19adfe57e5
Add priority deletion ordering of nested Microsoft.Compute/galleries resources (#3114) 2023-08-22 15:30:21 -04:00
Shivkumar Anil Ople d74f9f3106
ran make generate (#3106) 2023-08-22 12:13:37 -04:00
Caden Marchese 48af20fc55
Update RegistryProfile with new ACR token password once rotated (#3088) 2023-08-22 11:17:11 +02:00
Christoph Blecker cf09d3ced7
Merge pull request #3109 from cblecker/update-gh-actions
Update formatting/permissions/triggers for GH Actions
2023-08-17 21:25:04 -07:00
Christoph Blecker 302f23a72e
Merge pull request #3108 from cblecker/cleanup-cql
Remove unneeded codeql template
2023-08-17 21:24:37 -07:00