Граф коммитов

590 Коммитов

Автор SHA1 Сообщение Дата
Amber Brown 309e84bbe1 In admin updates, update the Operator version and then update the Cluster object 2024-07-05 16:02:16 +10:00
Rajdeep Singh Chauhan 17805e9120 ARO-4373 Enable Web Endpoint for the OIDC Storage Account 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan 90fde763c3 ARO-4373 update mgmtstorage sdk to 2019-06-01 for disabling allowSharedKeyAccess 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan a485dcbf50 ARO-4373 change OIDCIssuer field to pointer 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan 3fcdf91a4d ARO-4373 convert BoundServiceAccountSigningKey to *SecureString 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan 57a64c739d ARO-4373 add RP Feature Flag EnablePublicOIDCBlobAccess 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan 2388ad605c ARO-4373 additional unit tests and comments resolution 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan bd9a5b8638 ARO-4373 resolve PR comments 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan e884fd8105 ARO-4373 change BoundServiceAccountSigningKey SecureString to SecureBytes 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan c0621ea276 ARO-4373 add unit test cases 2024-06-30 20:38:28 -04:00
Rajdeep Singh Chauhan 5c6ca9d820 ARO-4373 generate keypair and oidc docs for miwi clusters 2024-06-30 20:38:28 -04:00
Ayato Tokubi ce6152db5b
Use track2 SDK in updateAPIIPEarly (#3638) 2024-06-28 17:41:20 +02:00
Miguel Abad Perez 5fc6067914 Reverting usage of SDK track2 clients from #3579 2024-06-17 15:44:52 +00:00
Amber Brown ec12eb5f50 cleanups 2024-06-13 14:53:47 +10:00
Amber Brown da4b09a2f1 fixes 2024-06-13 14:53:47 +10:00
Amber Brown 0de597a07f reduce the amount of package names in the logs 2024-06-13 14:53:47 +10:00
Tony Schneider 62253dd77d
Multi ip per load balancer followup (#3508)
* change lb profile validation to use fp sp
* refactors to multiple public IP code, including some concurrency
2024-06-07 16:33:47 -06:00
Ayato Tokubi 9216fef5b0
Update SDK to track2 in UpdateAPIIPEarly (#3579)
* ip address
* updateAPIIPEarly use track2 SDK
* make clients reusable
* refactor ipaddresses_test.go
2024-06-07 09:36:15 +02:00
cadenmarchese 1fae910e49 use the singular, make client 2024-05-30 13:59:57 -04:00
kimorris27 34f593b0f0 Two fixes:
- Initialize the operatorcli in both the real code and the unit tests
- Compare the actual annotations on the CloudCredentials to the
  wantAnnotations
2024-05-22 16:36:35 -04:00
cadenmarchese 0db13aadf7 add field and type, make client, converters 2024-05-22 16:36:26 -04:00
Ayato Tokubi cceb396a67
Add track2 API Client to Cluster struct (loadbalancer and interfaces) (#3568) 2024-05-16 08:15:57 +02:00
Maitiú Ó Ciaráin e2b1587a39
Refactor adminUpdate steps (#3449)
* Lay it out clearly
* Break the steps up into groups
* Factor out the common 0th setup/fixes
* Update unit test
* Factor out common bootstrap steps
* Remove initializeOperatorDeployer for Hive steps
* Revise the updateOperator Task
* Decouple OperatorUpdate and CertificateRenewal
* Move ConcatMultipleSlices in generic helpers
* Fix typos
* Revert the order for ensuring the API server is up
2024-05-07 21:22:29 +02:00
cadenmarchese e7f7b692e1 Convert ServicePrincipalProfile to pointer
* Adjust converters + tests
2024-05-02 09:08:02 -04:00
Jeff Yuan a215c370e9 add go test 2024-03-14 17:15:15 +13:00
Jeff Yuan 836c0eaa4f reload aead when encountering CIF chacha20poly1305 error 2024-03-13 17:15:34 +13:00
Amber Brown 7a415b07de
Remove unneeded OpenShift pins & imports (#3430)
* Remove dependencies on console-operator and cluster-api-azure

* remove the forks that we don't use

* go mod updates

* go mod vendor

* stop relying on the providerspec being registered in tests

* cleanups

* update go sum

* test coverage fixes
2024-03-12 16:23:44 +11:00
Amber Brown 527fe77c7b comment fixes 2024-02-21 11:13:46 +11:00
Amber Brown 4181083fe7 fix 2024-02-21 10:59:54 +11:00
Amber Brown 0b31fe7560 fix local dev not building a cluster successfully because of network issues, plus fix a bug in the authorisation logging 2024-02-21 10:59:54 +11:00
Ben Vesel 5ac65fd499
Don't add security context on <4.11 as OpenShift restricted SCCs do not tolerate it (#3401)
* Don't add security context on <4.11 as OpenShift restricted SCCs do not
tolerate it

* Update GetClusterVersion to return cv.Status.History[0] if no completed update exists
2024-02-19 09:26:52 -05:00
Maitiú Ó Ciaráin e7721a086a
Remove unused old code (#3383) 2024-02-07 12:12:20 +11:00
Daniel Holmes 2d7fc451bd
Merge pull request #3170 from hawkowl/hawkowl/denyassignment-insights
Allow metricalerts, actiongroups, and activitylogalerts for monitoring in the denyassignment
2024-02-07 09:55:26 +10:00
Srinivas Atmakuri 6e8e4e1870
HiveNamespace to use docID/clusterID for new Installs (#2992)
HiveNamespace currently uses aro-<uuid>, this change is an effort
to unify UUIDs accross cluster doc instead of having multiple,
by pointing HiveNamespace to docID so this can be leveraged later.

More Details: https://redhat-internal.slack.com/archives/C02ULBRS68M/p1686806655273309
2024-02-05 12:45:28 +11:00
Nont 01cb9bbcfe Remove additional private preview logic for NSG. 2024-01-24 14:41:51 -05:00
Amber Brown b4e8930830
Make env know what the service component its running is (#3254)
* make env know what the service component its running is

* regen mocks
2024-01-17 15:17:14 +11:00
azoppiserpa 40e7987ef8
Fixing magic strings on operator flags (#3327)
* replacing usages of magic strings with flags from the subpackage

* removing the //todo comment regarding the magic strings

* replacing magic strings with operator constants

* move DefaultOperatorFlags to operator package, inject when needed
2024-01-04 15:59:24 +11:00
kimorris27 adb1f0c4c8 Update attachNSGs cluster install step to retry if Azure complains that NSG is not yet ready 2023-12-20 15:56:59 -05:00
Kipp Morris de1b399b6c
`az aro update` CredentialsRequest hotfix (#3325)
* If the CredentialsRequest isn't found, retry until timeout instead of immediately erroring out

* `ensureCredentialsRequest` upon every `az aro update`

* Add an E2E test for the `az aro update` scenario where the ARO
operator's CredentialsRequest has been deleted
2023-12-14 15:49:19 -05:00
Kipp Morris 9a9edacf6b
Update ARO operator Azure auth scheme to use a DefaultAzureCredential (#3274)
* Update the cluster authorizer to use a DefaultAzureCredential

* Update the ARO operator to set and use DefaultAzureCredential via env vars

* Add a CredentialsRequest to the ARO operator deployment

* Restart the ARO operator upon `az aro update`

* Removed now unused AzCredentials function

* Changed ARO operator deployment wait time during `az aro update` from
  20 minutes -> 5 minutes

* Refactor CliWithApply to generalize to different object types

* Updated Restart in pkg/util/kubernetes to use server-side apply
* Updated Restart in pkg/operator/deploy to only return an error after
  at least attempting to restart all of the deployments passed in

* E2E test for ARO operator master deployment's restart upon cluster update

* Wait for the ARO operator's CredentialsRequest to be reconciled before
restarting
2023-11-28 10:45:00 -05:00
tschneid 19703fefc6 move default IP creation outside of newPublicLoadBalancer method 2023-11-13 12:49:40 -05:00
tschneid 3d7c789c13 remove outdated comment 2023-11-13 12:49:40 -05:00
tschneid d37aae372a add unit tests for multiple IP aro create 2023-11-13 12:49:40 -05:00
Amber Brown e278fd6891
Add some more golangci-lint linters and fix the issues they find (#3234) 2023-11-08 10:45:17 +11:00
tschneid 24d7966271 ensure API Server public IP is added to DependsOn 2023-10-25 11:16:29 -04:00
tschneid e6816b8fa6 add managed ips to arm templates 2023-10-25 11:16:29 -04:00
Caden Marchese cd81ce9073
Return errors from AuthorizationRetryingAction if timeout is reached (#3222) 2023-10-23 16:21:30 +02:00
Amit Arora 19f4e0697e
Additional Waiting for API Server to become ready (#3220)
* waiting for API Server to become ready
2023-10-18 16:02:07 -04:00
Tanmay Satam 4ae11b1c41
Enable Double (infrastructure) Encryption on ARO-provisioned storage accounts (#3216)
* Upgrade Microsoft.Storage API Version to 2019-06-01

* Explicitly set encryption Enabled=True on all storage account services

This is not strictly necessary, as the Storage API will default these to True.
This change is just to reconcile expected with actual.

* Update generated deployment assets
2023-10-17 11:26:50 -06:00
bennerv d346dd760c Add NACLs for OCP Subnets iff service endpoints set on subnets 2023-10-12 16:57:36 -04:00