Граф коммитов

1371 Коммитов

Автор SHA1 Сообщение Дата
Brendan Bergen 865e01be58
Generate smaller OIDC keys for unit tests (#3811)
- significantly increases unit test performance by moving from 4096 -> 256 bit keys
- preserves 4096 bit keys for all non-testing scenarios
2024-09-04 15:03:15 -04:00
Ayato Tokubi c3e324c7c9
fix typo (#3779) 2024-08-19 08:12:24 -05:00
Steven Fairchild 29e09d5260
Fluentbit pipeline has been updated to sync versions between arointsvc (#3766)
and arosvc registries

Updating checksum to sha256:dbf5304bd98cd51c72e4ae0ee8511d3bbcdbcb7e72e65e7d1495a50d7ac33b8d
2024-08-12 12:24:44 -04:00
Steven Fairchild 66e2980434
Correct mdsd image sha to distroless checksum (#3751) 2024-08-02 16:25:38 -04:00
Maitiú Ó Ciaráin 0250e2ff62
Merge pull request #3706 from Azure/mrwinston/hotfix-dev-cluster-create-better-subnet-creation
[Dev Tooling] generateSubnets should check if subnets are already taken
2024-08-01 09:21:01 +02:00
Ayato Tokubi 2143cb8135
fix notfound error handling in DNS manager 2024-07-30 14:54:46 +01:00
mrWinston c157292ecd
Fix formatting 2024-07-29 14:54:09 +02:00
mrWinston 858084a198
incorporate feedback, add mocks for subnet client 2024-07-29 14:31:57 +02:00
mrWinston 2f292b001f
generate subnets now takes existing subnets into account 2024-07-29 14:31:57 +02:00
Maitiú Ó Ciaráin a39416984b
Merge pull request #3721 from Azure/slawande/ARO-7856/iswimi-2
move iswimi function to openshiftcluster.go
2024-07-29 13:42:40 +02:00
Maitiú Ó Ciaráin 40c830e1fc
Merge pull request #3622 from Azure/tsatam/ARO-8003-use-in-progress-api-for-cluster-creation
Use latest "in-progress" ARO API for local/E2E cluster creation
2024-07-29 11:36:32 +02:00
Maitiú Ó Ciaráin 09a56b1c46
Merge pull request #3718 from Azure/s-fairchild/ARO-5049-image-bump
Update MDSD, MDM, Fluentbit base images
2024-07-29 10:28:33 +02:00
Maitiú Ó Ciaráin 550b655d64
Merge pull request #3652 from Azure/sdktrack2/dnsreplace
[ARO-4562] Migrate DNS to track2 SDK replace dns in cluster.
2024-07-29 09:57:54 +02:00
Sanjana Lawande 2d97fea485 move iswimi function to openshiftcluster.go 2024-07-24 11:54:39 -07:00
Steven Fairchild 1a9bf96cc5 Update MDSD, MDM, Fluentbit base images 2024-07-24 11:00:53 -04:00
Rajdeep Chauhan 0684a5af89
ARO-6756 Remove usecheckaccess feature and variables (#3643) 2024-07-23 14:53:46 -05:00
Sanjana Lawande 53691de809
shared utility function to check if a cluster is workload identity (#3683)
* shared utility function to check if a cluster is workload identity

* adding license statement

* apply suggestions from code review

* apply suggestions from code review

* remove TODO comment

* apply code review suggestions

---------

Co-authored-by: Sanjana Lawande <slawande@slawande-thinkpadt14sgen2i.remote.csb>
2024-07-23 12:53:33 -07:00
Maitiú Ó Ciaráin bfb554c620
Merge pull request #3696 from Azure/kimorris27/ARO-9005-shared-dev-kv-for-msi
Deploy shared dev key vault for mock MSI certificates
2024-07-23 18:50:45 +02:00
Tanmay Satam 510b3ee469 Add new "internal" ARO client wrapper over external ARO clients 2024-07-23 09:05:35 -04:00
Maitiú Ó Ciaráin 5cddf25e91
Merge pull request #3715 from Azure/hawkowl/fix-lint-errs-jul24
Clean up some lint errors found on golangci-lint 1.59.1
2024-07-23 08:41:04 +02:00
Maitiú Ó Ciaráin 18fa5ec0e6
Merge pull request #3710 from Azure/nwnt/add-checkaccess-group-expansion
Always do group expansion for CheckAccess subjects
2024-07-23 08:35:35 +02:00
Amber Brown 821d548524 clean up some lint errors found on golangci-lint 1.59.1 2024-07-23 13:20:25 +10:00
Nont e20b6124d9 Always do group expansion for CheckAccess subjects 2024-07-22 11:08:45 -05:00
Maitiú Ó Ciaráin 6ab3476c10
Merge pull request #3708 from Azure/refactor/pki
refactor package pki to be unit testeable
2024-07-22 16:29:43 +02:00
Aldo Fuster Turpin 2ce4ec642f refactor package pki to be unit testeable 2024-07-22 09:27:55 +02:00
Maitiú Ó Ciaráin 74f2b298c1
Merge pull request #3503 from Azure/log/outbound-correlation-id
log outbound correlation data
2024-07-22 09:14:15 +02:00
Maitiú Ó Ciaráin b264f5c875
Merge pull request #3685 from Azure/mociarain/create-sp-for-each-e2e-run
Create sp for each e2e run
2024-07-22 09:05:27 +02:00
Maitiú Ó Ciaráin 245d6f4f91 Make appDetails private 2024-07-19 16:35:51 +02:00
Maitiú Ó Ciaráin 256446f05c Add error to log message 2024-07-19 16:35:29 +02:00
Aldo Fuster Turpin 26b4d3c8b0 run go mod tidy 2024-07-19 16:18:24 +02:00
Aldo Fuster Turpin 397fe322d7 refactor remove_private_DNS_zone: split in narrow functions and remove duplication 2024-07-19 12:40:02 +02:00
Aldo Fuster Turpin b1a38a621a log outbound correlation data 2024-07-19 12:29:15 +02:00
kimorris27 3b0147e3f6 Add new KV with RBAC and then `make generate` 2024-07-18 12:21:03 -05:00
kimorris27 b072d62309 Rename existing shared dev key vault
To clarify the purpose of this key vault as opposed to the new shared
key vault we're adding for MSI
2024-07-18 12:21:03 -05:00
Maitiú Ó Ciaráin a941ecdef9 Remove debug lines 2024-07-18 18:11:47 +02:00
Maitiú Ó Ciaráin 8914f1ad4f Fix log lint warnings 2024-07-18 18:11:47 +02:00
Maitiú Ó Ciaráin 5996096d4e Add explict logic to ensure the cluster has been deleted 2024-07-18 18:11:47 +02:00
Maitiú Ó Ciaráin 56ff3f45ab Test: Just deleteCluster 2024-07-18 18:11:47 +02:00
Maitiú Ó Ciaráin 3275219918 Use better deleting logic 2024-07-18 18:11:47 +02:00
Roland Kunkel 996f5bd659 add more logging 2024-07-18 18:11:47 +02:00
Maitiú Ó Ciaráin 1c9f3f66f7 Update logging 2024-07-18 18:11:47 +02:00
Maitiú Ó Ciaráin 830068abe6 Tidy up 2024-07-18 18:11:47 +02:00
Maitiú Ó Ciaráin 92cfabebd0 s/DeleteApp/deleteApp 2024-07-18 18:11:47 +02:00
Maitiú Ó Ciaráin 6431df8019 Revert DeleteApp 2024-07-18 18:11:47 +02:00
Maitiú Ó Ciaráin 1f857e1ed1 Revert createApp 2024-07-18 18:11:47 +02:00
Marc Sluiter 6c58f10c9b
Extend unit test with new annotation 2024-07-17 22:35:56 +02:00
Marc Sluiter 486b50838b
Copy new ca bundle ConfigMap annotation 2024-07-17 22:20:42 +02:00
Maitiú Ó Ciaráin 28ced6807d
Merge pull request #3688 from Azure/tsatam/hotfix-add-cpms-e2e-test
Add cpms e2e test
2024-07-17 17:36:38 +02:00
Maitiú Ó Ciaráin d2d06a8c25
Merge pull request #3687 from Azure/kimorris27/hotfix-compute-api-version
Hotfix: compute API version used in ARM templates
2024-07-17 09:44:33 +02:00
Amber Brown 81f22cb8c8
Clean up some duplicated code in cmd/ (#3648)
* move some repeated code into pkg/util/service/

* cleanups in cmd/aro

* update_ocp_versions does not need AEAD

* cache the authorisers rather than recreating them

* env mock updates

* move stuff around from review
2024-07-17 16:29:39 +10:00
Tanmay Satam 934d8fb2e5 Update generated files 2024-07-15 16:07:43 -04:00
Amber Brown 31af734103
[ARO-5368] Try and log the VM info + console log on failure (#3629)
Dumps the VM info + console logs on failure so that we don't need to run the Geneva Action or have the control plane still around to get it. Also refactors frontend and geneva action to make use of the same code path.
2024-07-15 16:32:23 +10:00
kimorris27 8889acfa44 Add comment to clarify purpose of apiVersions map 2024-07-12 14:07:46 -05:00
kimorris27 6e03c60184 Replace the compute API version with the latest stable version
For context, this version needs to be replaced because I encountered an
error while trying to deploy shared RP dev infra that indicates that the
2021-12-01 version somehow doesn't exist anymore:

DeploymentWhatIfResourceError - The request to predict template deployment changes to scope '/subscriptions/redacted-sub-id/resourceGroups/v4-westeurope' has failed due to a resource error. See details for more information.
NoRegisteredProviderFound - No registered resource provider found for location 'westeurope' and API version '2021-12-01' for type 'virtualMachineScaleSets'. The supported api-versions are '2015-05-01-preview, 2015-06-15, 2016-03-30, 2016-04-30-preview, 2016-08-30, 2017-03-30, 2017-10-30-preview, 2017-12-01, 2018-04-01, 2018-06-01, 2018-10-01, 2019-03-01, 2019-07-01, 2019-12-01, 2020-06-01, 2020-12-01, 2021-03-01, 2021-04-01, 2021-07-01, 2021-11-01, 2022-03-01, 2022-08-01, 2022-11-01, 2023-03-01, 2023-07-01, 2023-09-01, 2024-03-01, 2024-07-01'. The supported locations are 'eastus, eastus2, westus, centralus, northcentralus, southcentralus, northeurope, westeurope, eastasia, southeastasia, japaneast, japanwest, australiaeast, australiasoutheast, australiacentral, brazilsouth, southindia, centralindia, westindia, canadacentral, canadaeast, westus2, westcentralus, uksouth, ukwest, koreacentral, koreasouth, francecentral, southafricanorth, uaenorth, switzerlandnorth, germanywestcentral, norwayeast, jioindiawest, westus3, swedencentral, qatarcentral, polandcentral, italynorth, israelcentral, spaincentral, mexicocentral, brazilsoutheast'.
2024-07-12 14:05:48 -05:00
Tanmay Satam 1b6e0e7584
Add controller to disable CPMS on ARO clusters (#3660)
* Update openshift/api to release-4.12

* Add machinev1 resources to scheme

* Add CPMSDeactivatorEnabled flag

* Add CPMS Deactivator operator controller

* Add controlplanemachinesets to system:aro-sre ClusterRole

* Use better naming convention for CPMS controller flag

* Change debug log messages to info

* Make CPMS controller exit early if clusterversion < 4.12

* Only setup CPMS controller on clusters with machinev1 API

This is necessary in order to Watch the CPMS resource - this operation will fail on
clusters that do not support the Machine V1 API (OCP <= 4.11), causing controller
setup to fail. Since these clusters do not have a CPMS resource to manage, we can
safely skip running this controller on those clusters.

* Fix CPMS controller name
2024-07-12 12:38:39 -06:00
Maitiú Ó Ciaráin 367a4799fd
Merge pull request #3600 from Azure/nwnt/trusted-launch-devproxy
Make dev-proxy use Trusted Launch
2024-07-12 08:53:47 +02:00
Maitiú Ó Ciaráin 3cd8bc51b4
Merge pull request #3617 from Azure/cadenmarchese/ARO-6449/go-script
New cmd to populate PlatformWorkloadIdentityRoleSets in dev and prod
2024-07-12 08:50:37 +02:00
Jonathan Chang a0e4aafe79 fix azcore 2024-07-11 08:36:07 -07:00
Jonathan Chang 2b270a40fa change variable 2024-07-11 08:36:07 -07:00
Jonathan Chang 6a775b25fd add 2024-07-11 08:32:47 -07:00
Jonathan Chang cdda20ff43 replace with sdkdns 2024-07-11 08:32:47 -07:00
Maitiú Ó Ciaráin 6effeb1260
Merge pull request #3594 from Azure/network-track2-rest
Update network SDK to track2
2024-07-11 12:47:15 +02:00
Mohammed Safwan Aslam Kazi 001751784b
Updates Test Suite To Use New GA API Plus Adds Missing Functionality To Our Internal Utility Clients (#3640)
* adds the missing functionality to these apis

* removes the functionality from 20230904 as it is not needed

* replaces old api referencings with new ones

* small fixup and referencing to new api

* creates cluster with new api
2024-07-10 14:54:17 -04:00
Amber Brown e711e610a0
Move to maintained yaml lib (#3454)
* move to maintained yaml lib

* update validate-imports

* go mod
2024-07-10 09:57:42 +10:00
kimorris27 8a0597e7b9 Revert changes to API versioning in `pkg/util/cluster` - use same API
version for everything

I don't see why this change is needed, and
https://github.com/Azure/ARO-RP/pull/3583 was just recently merged. I'm
thinking that maybe Caden added these changes by mistake while
mid-merge.
2024-07-09 08:47:22 -04:00
cadenmarchese a51d0f3d3e new cmd to populate role sets in prod 2024-07-09 08:47:22 -04:00
cadenmarchese a6dab8f38f add default role set, populate in dev cosmosdb 2024-07-09 08:47:17 -04:00
Marius Schulz 10e5de36b5
[ARO-7788] Don't overwrite default installer version in local dev (#3671) 2024-07-09 11:55:16 +02:00
Amber Brown 309e84bbe1 In admin updates, update the Operator version and then update the Cluster object 2024-07-05 16:02:16 +10:00
Ayato Tokubi fe2027c74a
generate 2024-07-03 16:37:33 +01:00
Ayato Tokubi ec2b148532
securitygroups 2024-07-03 16:37:33 +01:00
Ayato Tokubi 032ec5b520
privatelinkservices 2024-07-03 16:37:32 +01:00
Ayato Tokubi 4f5b046944
privateendpoints 2024-07-03 16:37:32 +01:00
Rajdeep Singh Chauhan 42daa82815 ARO-4373 resolve comments and parameter fixes 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan 17805e9120 ARO-4373 Enable Web Endpoint for the OIDC Storage Account 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan 90fde763c3 ARO-4373 update mgmtstorage sdk to 2019-06-01 for disabling allowSharedKeyAccess 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan 3fcdf91a4d ARO-4373 convert BoundServiceAccountSigningKey to *SecureString 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan 2388ad605c ARO-4373 additional unit tests and comments resolution 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan bd9a5b8638 ARO-4373 resolve PR comments 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan e884fd8105 ARO-4373 change BoundServiceAccountSigningKey SecureString to SecureBytes 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan c0621ea276 ARO-4373 add unit test cases 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan 5c6ca9d820 ARO-4373 generate keypair and oidc docs for miwi clusters 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan 80651af83f ARO-4373 set envs for storage account name and AFD endpoints 2024-06-30 20:38:28 -04:00
Jonathan CHang a8ee84c506
[ARO-4562] Migrate DNS to track2 SDK, arm dns client creation. (#3625) 2024-06-26 15:14:37 -04:00
Amber Brown e57930cfbd add better comments 2024-06-13 14:53:47 +10:00
Amber Brown ec12eb5f50 cleanups 2024-06-13 14:53:47 +10:00
Amber Brown a33264f005 use an instantiated struct for this test, like the real steps 2024-06-13 14:53:47 +10:00
Amber Brown da4b09a2f1 fixes 2024-06-13 14:53:47 +10:00
Amber Brown 0de597a07f reduce the amount of package names in the logs 2024-06-13 14:53:47 +10:00
Anshul Verma f13b7a9119 fixed json marshal issue 2024-06-11 22:24:46 +05:30
Anshul Verma e7dcf95c6d added logic to create the role assigments while deploying 2024-06-11 22:24:45 +05:30
Anshul Verma 8928e025b2 createUpdateTriggers were taking time. Reduced poll fequency time 2024-06-11 22:24:45 +05:30
Anshul Verma ca06e6de0f fixed usgov scope thing, also changed few things. 2024-06-11 22:24:45 +05:30
Tony Schneider 62253dd77d
Multi ip per load balancer followup (#3508)
* change lb profile validation to use fp sp
* refactors to multiple public IP code, including some concurrency
2024-06-07 16:33:47 -06:00
Ayato Tokubi 9216fef5b0
Update SDK to track2 in UpdateAPIIPEarly (#3579)
* ip address
* updateAPIIPEarly use track2 SDK
* make clients reusable
* refactor ipaddresses_test.go
2024-06-07 09:36:15 +02:00
Jeff Yuan 85ea77a763
Merge pull request #3539 from Azure/f/guardrails-3.15.1
feat(guardrails): Update manifests to match 3.15.1
2024-06-07 18:30:33 +12:00
Kipp Morris 31c72522fe
MIWI API endpoints (#3608)
* Add Cosmos DB container for PlatformWorkloadIdentityRoleSets

* Revert change to AKS k8s version - committed by mistake

* Fix bug in converter

When I first wrote the converter, I thought Go would treat the the slice
we `make` few lines above these changes as a slice full of zero-value
structs, but it actually treats it as an empty slice, which led to
out-of-bound issues when I first tried to use this converter to work on
the API endpoints.

* Add the PlatformWorkloadIdentityRoleSetConverter to the API register

* Implement the change feed for role sets in the easiest, most naive way

* Implement the external API endpoint for listing role sets

* Fix a small oversight from earlier on

* Add unit tests for the list endpoint

* Add unit tests for changefeed changes

* Uncomment the static validator

* Fix more slice out of bounds bugs in the converters...

* Add converter and static validator to the admin API register

* Add list and put endpoints

* Fix name of function to match convention

* Fix bug in static validator

I originally wrote the code the way I did so that we could aggregate
errors so that we could provide a better UX in cases where there are
multiple similar errors in the request content. I found while writing
unit tests that aggregating the errors in this way and not wrapping them
in a CloudError causes the RP to return an internal server error instead
of a 400 bad request.

Is there a way we can aggregate the errors and still wrap them in a
CloudError? I'm not sure of the formatting requirements for the text of
CloudErrors.

* Add unit tests for new API endpoints

* Fix typo

* Appease the linter

* Appease the linter

* Add TODO comment re: the number of parameters

* Update static validator to return multiple validation issues at the same time where applicable for better UX

* Add a simple utility function to make semver comparisons of OpenShift minor version more readable

* Log error before returning 500 to user

* Log errors before returning 500 to user

* Improve naming of unit test cases

* Add additional unit test cases
2024-06-06 10:15:44 -04:00
Tanmay Satam dfda5402fa Update MDM/MDSD coordinates
- Use /distroless/ repository prefix to reference the distroless variants of these images
- Explicitly specify the image digest to ensure we get exactly the images we intend to use
- Update versions to the versions mirrored by the new image mirroring pipeline
2024-06-06 09:11:52 -04:00
Tanmay Satam d2f3972f16 Downgrade API version to 20230904 2024-06-06 09:11:23 -04:00
Tanmay Satam 190b7f49b5 Use single ARO API/client version in pkg/util/cluster 2024-06-06 09:11:23 -04:00