Azure
/
ARO-RP
зеркало из https://github.com/Azure/ARO-RP.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
3 824 коммитов 233 Ветки 194 Теги 232 MiB
Граф коммитов

194 Коммитов

Автор SHA1 Сообщение Дата
Matt Woodson 183423e2f6 added a 'doNotMirrorTags' map to skip un-mirrorable versions 2021-09-13 18:11:41 -04:00
Mangirdas Judeikis 853a637c38
refactor subnet operator side 2021-09-06 11:03:56 +01:00
Petr Kotas b8c064bc1a Extract certificateRefresher timer out 
enables ticker mocking by extracting the timer out of the refresher.
with extracted timer, mock is added int he tests, enabling exact steps
as required per test.

Signed-off-by: Petr Kotas <pkotas@redhat.com>
 2021-08-26 11:23:01 +01:00
bennerv 2768de54cb Add ose-tools to mirroring if registry.redhat.io pull secret not present 2021-08-23 14:37:24 -04:00
Caden Marchese 8846c9c2af Add new operator controller MachineSet, tests, e2e 2021-08-23 14:27:03 +01:00
Leszek Jakubowski d73e128386
Adding ARO SRE notification banner controller (#1589) 2021-08-23 12:23:37 +01:00
Jim Minter 4006cf08a7 add missing heartbeat metrics 2021-08-19 10:36:46 -04:00
Jim Minter dc1d2efacd add refresher metric 2021-08-19 10:36:46 -04:00
Jim Minter fb0ff700c8 rename Ready->HasSyncedOnce for clarity 2021-08-19 10:36:45 -04:00
Jim Minter 0fa9287010 add basic gateway metrics 2021-08-19 10:36:45 -04:00
Jim Minter fcc0db8cf0 forward Go prometheus metrics to MDM 2021-08-19 10:36:45 -04:00
Jim Minter ed319c139b update rp 2021-08-19 10:30:29 -04:00
Jim Minter 91d6a55e8e add gateway 2021-08-19 10:21:09 -04:00
bennerv 7ffd4b5dcd Add DBTOKEN_CLIENT_ID to RP config 2021-07-28 09:44:32 -04:00
Petr Kotas 72b26b18ca Add CertificateRefresher 
Wraps around KeyvaultManager.GetCertificateSecret and
acts and simple poller. Refreshes certificates in regular
intervals, when error happens, it is logged and old
certificate is preserved.

If certificate is already rotated azure-wise the RP will
fail to authenticate, and there will be mention in the logs
about the error.

Signed-off-by: Petr Kotas <pkotas@redhat.com>
 2021-07-20 06:30:49 -07:00
Mangirdas Judeikis 6ba3d3b1bd
rename 20210131 -> 20210901 2021-07-20 12:15:25 +01:00
Nils Elde 73a7c9aff2 standardize names/order in ARO operator 2021-07-16 13:23:16 -04:00
Stephane Erbrech d1cec63767 use oidc v2.0 issuer 
RP startup errors out with

oidc: issuer did not match the issuer returned by provider, expected "https://login.microsoftonline.us/cab8a31a-1906-4287-a0d8-4eef66b95f6e/" got "https://sts.windows.net/cab8a31a-1906-4287-a0d8-4eef66b95f6e/"
this is because we use "https://login.microsoftonline.us" (comes from autorest environment config) but we compare it with the issuer advertised by the v1 well-known openid config endpoint :
V1 :
https://login.microsoftonline.us/cab8a31a-1906-4287-a0d8-4eef66b95f6e/.well-known/openid-configuration
returns issuer as https://sts.windows.net/cab8a31a-1906-4287-a0d8-4eef66b95f6e/

V2:
https://login.microsoftonline.us/cab8a31a-1906-4287-a0d8-4eef66b95f6e/v2.0/.well-known/openid-configuration
returns issuer as https://login.microsoftonline.us/cab8a31a-1906-4287-a0d8-4eef66b95f6e/v2.0 as expected
 2021-07-15 17:14:52 +10:00
Mangirdas Judeikis 60938a9ae5
Merge pull request #1505 from cadenmarchese/machine-controller 
Replace existing machine checker with new operator controller Machine
 2021-07-13 09:24:34 +01:00
Mangirdas Judeikis 03783bfe71
Feature flags (#1579) 
* Add Feature flag for alertwebhook

* Add feature flag DNSMasq

* Add feature flag Geneva Logging

* Add feature flag to monitoring config

* Add feature flag for node drainer

* Add feature flag for secrets

* Add feature flag for routefix

* Add workarounds controller flags
 2021-07-12 16:31:23 +01:00
Mangirdas Judeikis 7f5f60fa44
Fixup routefix for 4.7.15+ 2021-07-05 10:03:50 +01:00
Caden Marchese 0ec1357b8d Remove machinechecker, add new controller Machine 2021-06-24 14:55:38 -04:00
Nils Elde cbce001bc1 Make hardcoded domains cloud-aware 2021-06-24 10:19:18 -04:00
mikeandescavage 59bcf6022b
Update mirroring to infer geneva images from environment variables (#1539) 
Checks for full image overrides for Geneva's MDM and MDSD images. In certain scenarios, it cannot be programmatically determined based on environment and other variables. This also affords the team to update end-points without the need to recompile code.
 2021-06-11 14:25:28 -04:00
mikeandescavage 2f981448ff
Update cmd/aro/mirror.go 
I'll commit your suggestion.  Reasoning why I went this route is because `srcAuthGeneva` is a very specific var name.  Adding the if/else makes it more human readable, but the end-result is still the same.

Co-authored-by: Nils Elde <nils.elde@gmail.com>
 2021-06-02 12:32:05 -07:00
Michael Andescavage e543e85ba9 Update to mirror to check for env var for geneva 2021-06-02 11:15:17 -07:00
Leszek Jakubowski 144606bb00 adding NSG controller in ARO Operator 2021-05-31 11:22:00 +02:00
Nils Elde 19ba912163 allow geneva src acr override 2021-05-26 16:33:28 -04:00
Mangirdas Judeikis 125b928c98
Merge pull request #1493 from bennerv/gateway-prereqs 
Gateway prereqs
 2021-05-12 16:04:00 +03:00
Mangirdas Judeikis 4fc49285fb
Hack EV2 for GovCloud 2021-05-12 11:14:21 +01:00
Jim Minter 7dde80a432 remove NewMSIAuthorizer call from pkg/database 2021-05-11 11:48:19 -04:00
Jim Minter dc1c23f046 generalise rpauthorizer to msiauthorizer 2021-05-11 11:48:19 -04:00
Troy Connor ea8fe560a6
mirror: Allow image mirroring to UsGovernmentCloud 2021-05-10 16:03:01 -04:00
Mangirdas Judeikis a1b174bbef
Merge pull request #1425 from petrkotas/aro-rh-key-state 
Signal Red Hat keys presence in the cluster.status
 2021-04-28 11:28:29 +01:00
Jim Minter e61efa5666
add cmd/dbtoken 2021-04-26 15:22:21 -05:00
Jim Minter 2a869d0671
move Verifier to pkg/util/oidc 2021-04-26 13:56:50 -05:00
Jim Minter 31fbebea89
update NewDatabaseClient to new go-cosmosdb API 2021-04-26 13:56:49 -05:00
Jim Minter 81229ae196
for clarity, rename IsDevelopmentMode -> IsLocalDevelopmentMode 2021-04-23 10:25:46 -05:00
Jim Minter 7e24cdfb81
enable 'make deploy in development mode' 2021-04-22 10:27:10 -05:00
Petr Kotas 73484fdf3c
Add Red Hat keys list to cluster.status 
Add a checks that parses pull-secret from openshift-config
namespace and extracts the list of present Red Hat keys.
Keys are presented in a cluster.status.RedHatKeysPresent field.

Signed-off-by: Petr Kotas <pkotas@redhat.com>
 2021-04-22 16:24:39 +02:00
Ivan Sim 5eb56f7ed3
Add IFxAudit Logging To Admin Portal (#1411) 
* Add ifxaudit logging to admin portal

Signed-off-by: Ivan Sim <isim@redhat.com>

* Update comment in test

Signed-off-by: Ivan Sim <isim@redhat.com>
 2021-04-20 10:01:06 +01:00
Mangirdas Judeikis 58fd2f4b79
Merge pull request #1348 from m1kola/aro_clusteroperator 
Skeleton for blocking cluster updates via clusteroperator status
 2021-04-15 07:56:57 +01:00
bennerv 444aaca867 Operator: Expose SP Cred validity as a condition in aro cluster cr 2021-04-14 15:35:32 -04:00
Mikalai Radchuk 1d02b4f6c2 Adds ARO cluster operator reconciler 2021-04-14 13:45:16 +01:00
Jim Minter 10554999eb
remove pkg/util/deployment and revert to isDevelopment bool 2021-04-08 09:12:13 -05:00
Jim Minter 9177d18c85
remove unused RP_VERSION environment variable 2021-04-07 13:07:38 -05:00
Naveen Malik b76aeffbf0 Removed uuid facade recently added. 
The facade was inconsistently used and was replicating what was already
in uuid.Must(...)
 2021-04-01 10:23:03 -04:00
Naveen Malik d5c35ca3c5 Move from github.com/satori/go.uuid to github.com/gofrs/uuid 
Why: https://www.whitesourcesoftware.com/vulnerability-database/WS-2018-0594

Requires updating azure-sdk-for-go, moved to latest release
Created wrapper util for gofrs/uuid as NewV4() now returns 2 args and we use it a lot in-line

Vendor updates coming in separate commit to keep this one clean.

There is no v1.2.1 tag for these repos on github.com.
A replace was added for these to 'master'.
Running `go mod vendor` updated the value from 'master' to what you see
in go.mod now.
The v0.0.0 versions needed excluded to get them to drop from go.sum.
Do not exlude v1.2.0 or dependencies cannot be resolved.
 2021-03-30 17:13:29 -04:00
bennerv 275ba5032c Add 'latest' option to mirroring script 2021-03-25 12:45:12 -04:00
Jim Minter 2197765f0f
Revert "Add ARO operator status condition with Red Hat key presence info" 2021-03-24 13:55:03 -06:00