Граф коммитов

239 Коммитов

Автор SHA1 Сообщение Дата
Petr Kotas 35647841ca feature: add autosizednodes reconciler
Introduce autosizednodes reconciler which watches aro cluster object
feature flags for ReconcileAutoSizedNodes.

When feature flag is present new KubeletConfig is created enabling the
AutoSizingReserver feature which auto computes the system reserved
for nodes.
2022-03-16 09:25:56 +01:00
Mikalai Radchuk 4064d6a62a Minor ARO operator refactoring
* Gets rid of exported constants like `ENABLED` where exported constants are not required
* Gets rid of constant concatenations like `CONFIG_NAMESPACE + ".enabled"` to make search easier
* Removes unnecessary `Copy` method of `OperatorFlags` stuct as well as package level `DefaultOperatorFlags` variable.
  Introduces `DefaultOperatorFlags()` instead.
2022-03-07 15:42:53 +00:00
Roland Kunkel b75dbc5b21 preview feature controller and NSG flow log feature implementation 2022-03-02 13:01:44 +00:00
Mikalai Radchuk 9912a3eece Adds the controller implementation
It currently implements only one feature: NSG flow logs
2022-03-02 13:01:44 +00:00
Mikalai Radchuk 24fb18886b Cleans up unused args in `muo.NewReconciler` 2022-02-25 11:24:59 +00:00
Amber Brown 7e88099964 Add an Operator controller for Managed Upgrade Operator 2022-02-25 11:23:07 +00:00
Peter Kostyukov 7b68ab7aac Addressing feedback
FIx
2022-02-23 13:32:37 -06:00
Mangirdas Judeikis c1662ed7d9 add operator storage acc and endpoints reconcilers 2022-02-15 13:17:54 -06:00
Mikalai Radchuk cba69e401b Feedback follow up on image config controller 2022-02-09 11:41:59 +00:00
Karan.Magdani 3bab8855a9 imageconfig controller 2022-02-02 17:31:10 +00:00
bennerv c857fddf3b Start reading release graph for mirroring to 4.6 2021-12-17 14:47:52 -05:00
Petr Kotas a8f7ff5570 Move health probe to manager
Remove the http server and utilizes builtin http
health probes in manager

Signed-off-by: Petr Kotas <pkotas@redhat.com>
2021-11-23 09:19:13 +00:00
Amber Brown ce0c6551e4 fix code drift 2021-11-08 12:45:41 +11:00
Brett Embery 03cd88e983 Added listening address to debug during portal startup 2021-11-08 12:45:41 +11:00
Amber Brown d50ed565cd Changes for the front-end to run 2021-11-08 12:45:41 +11:00
Amber Brown db8ebd388e
Merge pull request #1467 from nilsanderselde/crypto2
feat: Enable DB to use AEAD_AES_256_CBC_HMAC_SHA_512
2021-10-11 10:58:00 +11:00
Drew Anderson d61fd1609f Ensure build tag "aro" is present
make runlocal-rp
Fail run and use Tests to report -tags status
Updated doc
2021-09-30 16:45:59 +01:00
Matt Woodson 183423e2f6 added a 'doNotMirrorTags' map to skip un-mirrorable versions 2021-09-13 18:11:41 -04:00
Jim Minter 9b3c4383a4 add encryption.multi 2021-09-10 11:26:20 -04:00
Jim Minter 6aecbe085a add GetBase64Secrets 2021-09-10 11:26:20 -04:00
Mangirdas Judeikis 853a637c38
refactor subnet operator side 2021-09-06 11:03:56 +01:00
Petr Kotas b8c064bc1a Extract certificateRefresher timer out
enables ticker mocking by extracting the timer out of the refresher.
with extracted timer, mock is added int he tests, enabling exact steps
as required per test.

Signed-off-by: Petr Kotas <pkotas@redhat.com>
2021-08-26 11:23:01 +01:00
bennerv 2768de54cb Add ose-tools to mirroring if registry.redhat.io pull secret not present 2021-08-23 14:37:24 -04:00
Caden Marchese 8846c9c2af Add new operator controller MachineSet, tests, e2e 2021-08-23 14:27:03 +01:00
Leszek Jakubowski d73e128386
Adding ARO SRE notification banner controller (#1589) 2021-08-23 12:23:37 +01:00
Jim Minter 4006cf08a7 add missing heartbeat metrics 2021-08-19 10:36:46 -04:00
Jim Minter dc1d2efacd add refresher metric 2021-08-19 10:36:46 -04:00
Jim Minter fb0ff700c8 rename Ready->HasSyncedOnce for clarity 2021-08-19 10:36:45 -04:00
Jim Minter 0fa9287010 add basic gateway metrics 2021-08-19 10:36:45 -04:00
Jim Minter fcc0db8cf0 forward Go prometheus metrics to MDM 2021-08-19 10:36:45 -04:00
Jim Minter ed319c139b update rp 2021-08-19 10:30:29 -04:00
Jim Minter 91d6a55e8e add gateway 2021-08-19 10:21:09 -04:00
bennerv 7ffd4b5dcd Add DBTOKEN_CLIENT_ID to RP config 2021-07-28 09:44:32 -04:00
Petr Kotas 72b26b18ca Add CertificateRefresher
Wraps around KeyvaultManager.GetCertificateSecret and
acts and simple poller. Refreshes certificates in regular
intervals, when error happens, it is logged and old
certificate is preserved.

If certificate is already rotated azure-wise the RP will
fail to authenticate, and there will be mention in the logs
about the error.

Signed-off-by: Petr Kotas <pkotas@redhat.com>
2021-07-20 06:30:49 -07:00
Mangirdas Judeikis 6ba3d3b1bd
rename 20210131 -> 20210901 2021-07-20 12:15:25 +01:00
Nils Elde 73a7c9aff2 standardize names/order in ARO operator 2021-07-16 13:23:16 -04:00
Stephane Erbrech d1cec63767 use oidc v2.0 issuer
RP startup errors out with

oidc: issuer did not match the issuer returned by provider, expected "https://login.microsoftonline.us/cab8a31a-1906-4287-a0d8-4eef66b95f6e/" got "https://sts.windows.net/cab8a31a-1906-4287-a0d8-4eef66b95f6e/"
this is because we use "https://login.microsoftonline.us" (comes from autorest environment config) but we compare it with the issuer advertised by the v1 well-known openid config endpoint :
V1 :
https://login.microsoftonline.us/cab8a31a-1906-4287-a0d8-4eef66b95f6e/.well-known/openid-configuration
returns issuer as https://sts.windows.net/cab8a31a-1906-4287-a0d8-4eef66b95f6e/

V2:
https://login.microsoftonline.us/cab8a31a-1906-4287-a0d8-4eef66b95f6e/v2.0/.well-known/openid-configuration
returns issuer as https://login.microsoftonline.us/cab8a31a-1906-4287-a0d8-4eef66b95f6e/v2.0 as expected
2021-07-15 17:14:52 +10:00
Mangirdas Judeikis 60938a9ae5
Merge pull request #1505 from cadenmarchese/machine-controller
Replace existing machine checker with new operator controller Machine
2021-07-13 09:24:34 +01:00
Mangirdas Judeikis 03783bfe71
Feature flags (#1579)
* Add Feature flag for alertwebhook

* Add feature flag DNSMasq

* Add feature flag Geneva Logging

* Add feature flag to monitoring config

* Add feature flag for node drainer

* Add feature flag for secrets

* Add feature flag for routefix

* Add workarounds controller flags
2021-07-12 16:31:23 +01:00
Mangirdas Judeikis 7f5f60fa44
Fixup routefix for 4.7.15+ 2021-07-05 10:03:50 +01:00
Caden Marchese 0ec1357b8d Remove machinechecker, add new controller Machine 2021-06-24 14:55:38 -04:00
Nils Elde cbce001bc1 Make hardcoded domains cloud-aware 2021-06-24 10:19:18 -04:00
mikeandescavage 59bcf6022b
Update mirroring to infer geneva images from environment variables (#1539)
Checks for full image overrides for Geneva's MDM and MDSD images. In certain scenarios, it cannot be programmatically determined based on environment and other variables. This also affords the team to update end-points without the need to recompile code.
2021-06-11 14:25:28 -04:00
mikeandescavage 2f981448ff
Update cmd/aro/mirror.go
I'll commit your suggestion.  Reasoning why I went this route is because `srcAuthGeneva` is a very specific var name.  Adding the if/else makes it more human readable, but the end-result is still the same.

Co-authored-by: Nils Elde <nils.elde@gmail.com>
2021-06-02 12:32:05 -07:00
Michael Andescavage e543e85ba9 Update to mirror to check for env var for geneva 2021-06-02 11:15:17 -07:00
Leszek Jakubowski 144606bb00 adding NSG controller in ARO Operator 2021-05-31 11:22:00 +02:00
Nils Elde 19ba912163 allow geneva src acr override 2021-05-26 16:33:28 -04:00
Mangirdas Judeikis 125b928c98
Merge pull request #1493 from bennerv/gateway-prereqs
Gateway prereqs
2021-05-12 16:04:00 +03:00
Mangirdas Judeikis 4fc49285fb
Hack EV2 for GovCloud 2021-05-12 11:14:21 +01:00
Jim Minter 7dde80a432 remove NewMSIAuthorizer call from pkg/database 2021-05-11 11:48:19 -04:00