ARO-RP

Hot fix release

667b9c5d5 Fix go vendoring

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240116.03...v20240116.04

Hot fix release

513a1b542 Use another method of FIPS validation (fips-detect) (#3363)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240116.02...v20240116.03

Hot fix release

cfd23289b Run npm audit fix
61b412e5d Fix import ordering
64bb71ad0 Pass log arg through
d1cfd5f92 Log the name of the key used
4debcb23b Documentation update
621b3cc32 Switch to using the secondary key
7ec77058b Bump github.com/opencontainers/runc from 1.1.6 to 1.1.12

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240116.01...v20240116.02

v20240311.00

cf8c56925 compare certs by serial number (#3435)
b782f4237 Merge pull request #3438 from Azure/update-pr-template
c1c062205 Update dependencies (#3432)
38c86f816 Fixes in disk-encryption-set.md (#3323)
cda87483e Fix typo introduced in #3404 (#3433)
6061732eb Update applens tenant (#3444)
7ec73ba0c Update shared cluster login (#3424)
b7de9128e Revert "Refactor result type (#3410)" (#3441)
27ce730ac Remove ifreload workaround (#3437)
44c770185 Merge pull request #3409 from Azure/dependabot/go_modules/github.com/containerd/containerd-1.7.11
b89832f1e updated PR template
6ed5f52e0 Refactor result type (#3410)
2db2a03ff Adding my username to codeowners
e794becec Bump github.com/containerd/containerd from 1.7.0 to 1.7.11
a1bc5175a az aro: Implement the multiple public IPs functionality against the ARO stable API (#3354)
ed94c2834 Update to Go 1.20 (#3429)
172741b9e Add explicit step to wait for resolv.conf job completion
8ee1b531e 2024-08-12-preview API skeleton (#3419)
42f370845 Create oic storage account in dev (#3404)
af311a2d3 Back port v2023-11-22 Azure REST specs (#3420)
0f018405a Fix shared_cluster.sh (#3414)
7a501ebca Do not run Azure Host Servicing test in non-development environments
8b523d1d2 Adding segregation of resultType for CloudError (#3396)
730651374 Merge pull request #3413 from hawkowl/hawkowl/ci-cleanup-feb24
c02c83b1f Merge pull request #3403 from hawkowl/hawkowl/local-provision-fixes
527fe77c7 comment fixes
4181083fe fix
0b31fe756 fix local dev not building a cluster successfully because of network issues, plus fix a bug in the authorisation logging
07135d82d Revert pkg/util/cluster creation to use 20230904 API (#3415)
6b8cca007 PR nits
57eaddca3 exclude autogenerated from yaml lint
35e907a2a move the client-gen code to another makefile step, since it's busted :(
6b3e58e43 fix the generation from controller-tools
f0611becb fix linting errors that become noisier in go 1.20
46976867c fix incorrect rm in generate
1ed3572ea bump golangcilint version
a1b537013 move the github actions CI into containerised steps

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240220.00...v20240311.00

Release 249 Hotfix 02

b9fa59b4b Do not run Azure Host Servicing test in non-development environments

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240220.01...v20240220.02

Release 249 Hotfix 01

12863076f Revert pkg/util/cluster creation to use 20230904 API (#3415)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240220.00...v20240220.01

Release 249

6f2b31bac Make NSG Monitor run every 10 minutes (#3343)
a861f41bb Update az aro permissions validation to mirror RP frontend validation (#3395)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240219.00...v20240220.00

Release 249

5ac65fd49 Don't add security context on <4.11 as OpenShift restricted SCCs do not tolerate it (#3401)
f4d03fb44 add archv1 check to multiple ip static validation (#3406)
7f99749a4 Don't accept TLS 1.0/1.1 Connections (#3378)
00a44ec34 Remove BYO NSG references and replace with Preconfigure NSG
34ed0d7a1 Adjust the NSG validation logic for GA

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240214.00...v20240219.00

Update OCP Versions Release v20240214.00

6a5569049 Bump github.com/containers/podman/v4 from 4.4.2 to 4.5.0 (#3390)
7744ef95b Update Hive dev install (#3407)
94b690c08 fix go 1.20 change around proxy and default user agents (#3408)
b628965f1 Mirror hive revender images
320a15113 Merge pull request #3399 from Azure/dependabot/github_actions/golangci/golangci-lint-action-4
6bd01cddf Revendor hive to 5fbe0d158ba9 (#3377)
b1b305f59 Bump golangci/golangci-lint-action from 3 to 4
9eb8db1e4 Update cluster lifecycle API fields to readOnly (#3380)
b359efd54 Wrap K8s client in E2E with retry logic (#3366)
e7721a086 Remove unused old code (#3383)
2d7fc451b Merge pull request #3170 from hawkowl/hawkowl/denyassignment-insights
47121a5cf Bump github.com/opencontainers/runc from 1.1.6 to 1.1.12
6e8e4e187 HiveNamespace to use docID/clusterID for new Installs (#2992)
2ac8d655d Added FP Check for validation (#3335)
7a40bfb34 Update MUO to use proper pod and container security context
d37167475 Add securityContext to ARO worker and master operator deployments as required by k8s v1.27.x
9c6eab88f Do not exit NSG monitor when unable to get subnet (#3372)
b6e1b07fe Use another method of FIPS validation (fips-detect) (#3363)
d11a633a2 Add E2E test for host servicing (#3334)
087e40929 Hopefully fix E2E flake related to deletion of a test Service (#3336)
2a0ef0e1a Return error on certificateexpirationstatus monitor when IngressController is invalid rather than panic (#3371)
efd47430a Update shared cluster usage (#3332)
bb3365f4f Move Dockerfile build paths outside of GOPATH (#3364)
51e26283f update docs
340fc3711 Remove Dockerfile.aro and the image-aro Makefile -- the images made from it have the potential to be built with inconsistent Golang versions.
5d4995a8b Refactoring per comments in #3324 (#3358)
01cb9bbcf Remove additional private preview logic for NSG.
88e12febf Delete the flag const
5d17746ab Delete AFEC flag behavior for preconfiguredNSG
714feb2c1 Merge pull request #3367 from cblecker/ylp
6684b05a6 Add permissions stanza to yamllint GH action
922c77d1f Update deploy-development-rp.md (#3359)
3abcd30e5 2023-11-22 stable API (porting 07-01-preview api) (#3300)
809041fe2 Move default openshift version (#3094)
016ba7b4b Bump follow-redirects from 1.15.2 to 1.15.4 in /portal/v1 (#3348)
b4e893083 Make env know what the service component its running is (#3254)
253a59efa Trim the dependency tree (#3351)
a9fca79f0 allow metricalerts, actiongroups, and activitylogalerts for monitoring on the RG

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240116.00...v20240214.00

release v202401160.01

c3284c064 Return error on certificateexpirationstatus monitor when IngressController is invalid rather than panic (#3371)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240116.00...v20240116.01

Release 248

aee18fe57 Improve NSG monitoring by retrieving subnet only once (#3324)
5068e9d4e Add unit tests for ensureAccessTokenClaims (#3337)
aaca34ee0 Add Go 1.20 images (and ose-tools-rhel8 for 4.14) (#3349)
81e0cf6cc Bump follow-redirects from 1.15.2 to 1.15.4 in /portal/v2 (#3347)
477a0453c Add maintenance state for customer action needed (#3294)
e7550b17b Fixing cert metric emitting condition param (#3284)
40e7987ef Fixing magic strings on operator flags (#3327)
89f508910 Remove aro build tag as it's not needed for the ARO-RP (#3341)
5218c8277 Merge pull request #3319 from yjst2012/guardrails-add-user
82f47281d Remove dnsmasq restart script for new clusters (#3313)
9a622aba0 Update APAC CODEOWNERS (#3338)
4afe1d733 disable gzip compression as a workaround (#3339)
6f75d7fd1 References to new repos and steps to update wrapper instead of RP (#3311)
7bf277bd1 iterate over all namespaces to find out if another gatekeeper is deployed
7ac04c0ae Bump github/codeql-action from 2 to 3
c2e4bf450 Bump golang.org/x/crypto from 0.14.0 to 0.17.0
5aac7c6b9 Bump github.com/containerd/containerd from 1.6.18 to 1.6.26
3b2db9c12 Added space and fixed grammar in user-facing error messages
d7377e7d6 Capitalize Azure in customer-facing error message
adb1f0c4c Update attachNSGs cluster install step to retry if Azure complains that NSG is not yet ready
af1f7ae2a dynamic validation on CIDR
fe3208372 use aro-must-gather for CI
f3f4d1be5 Add information to admin-portal.md about Prometheus UI
23290e4f1 Include and serve static prometheus web UI in admin portal
de1b399b6 az aro update CredentialsRequest hotfix (#3325)
21f0e23ad move from debugf to infof
e2acf59ad remove managedBy check
bcde35852 add shared-cluster to rg clean deny list
17ad4315a update test cases
aad0e2dd3 Merge pull request #3320 from Azure/dependabot/github_actions/actions/setup-go-5
4d59736dd Bump actions/setup-go from 4 to 5
1b8adb22f let the cleanup continue when failure occurs
031270377 added exempted user to guardrails
c3d127ad4 Use image digests for fluentbit images (#3316)
ae4a30437 Merge pull request #3317 from Azure/dofinn-patch-1
924cf8346 Update prepare-your-dev-environment.md
91fd9d00a Enable 4.13.23 as an install target instead of 4.13.16 (#3314)
cb6ab10d1 Enable 4.13.16 as an install target (#3312)
14d5b2923 Remove openshift/installer vendored dependency script (#3301)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20231201.01...v20240116.00

Fix update with --refresh-credentials

fa10ea5d4 az aro update CredentialsRequest hotfix (#3325)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20231201.01...v20231214.00

Hotfix to allow update with --refresh-credentials

fa10ea5d4 az aro update CredentialsRequest hotfix (#3325)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20231201.01...v20231201.01-hotfix

Release 245

86deb391a MDM Image Bump - ARO-4792 (#3297)
72fd8ad97 Update Go Vendored Modules - ARO-4776 (#3302)
01ce6a1ec Add libzstd.so.1 to fluentbit container build
548ad5cb0 Merge pull request #3232 from SrinivasAtmakuri/remove-IsLessThanMinimumDuration
6b1549471 fix(admin): Ensure check on certData slice
9b92b4f79 Admin action to delete a cluster managed resource (#3286)
a01743585 ARO-4779: Mirror new hive image to close vulns
b86781166 ARO-4779: Update hive dependency to close vulns
72cad158a Remove version 4.11.26 as it's affected by installation bugs
e4eea7f7a Use an enum for cluster maintenance states (#3230)
9a9edacf6 Update ARO operator Azure auth scheme to use a DefaultAzureCredential (#3274)
d71061995 test case validateEtcdCertsRenewed func
afa28a378 fix not returning arm template errors (#3288)
966f7a176 graph: Allow gzip compression in requests
4a1ea4074 Remove journald fields that aren't needed (#3283)
06f78b75c Watch MachineSets for worker subnet changes instead of Machines (#3280)
e7f514086 Migrate documentdb client from sdk track 1 to track 2 client (#3255)
a85b8d011 FedRAMP TLS 1.3 Compliance (#3285)
f421bac52 Rename installLogsForDeployment to indicate latest deployment
e9e3c7a89 Implement generic handling for Hive ProvisionFailed=True conditions w/ Azure policy errors
ae5c57b6a Add hack script to generate hive install-log-regexes.yaml from ARO definition
ac7cf2f35 Fix CVE-2023-45857 npm vulnerability found in audit (#3279)
19703fefc move default IP creation outside of newPublicLoadBalancer method
3d7c789c1 remove outdated comment
d37aae372 add unit tests for multiple IP aro create
7e09f87c4 Add extra validation and remove IsLessThanMinDuration

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20231110.00...v20231201.00

Release 244

This release includes fixes for E2E tests

0b7096dc4 add back cli-domain-from-installer-image (#3277)
19d053d2f Move genevalogging operator controller files into separate .confs with goembed (#3276)
d0c6db7df e2e: Spew ODataError details before panicing (#3265)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20231108.00...v20231110.00

Re-Release of Sprint 244 to include ms graph workaround

d25e7f29d graph: Add HTTP tracing option for MS Graph requests (#3269)
67d06bd65 Propagate errors of GenevaLogging controller (#3221)
e278fd689 Add some more golangci-lint linters and fix the issues they find (#3234)
c53b31c73 add cluster check alert
590cc5297 add muo alerts
18a57a3fe Update RP Documentatation with Etcd Recovery URL
83b2a552c Delete OpenShiftVersions via change-feed (#3262)
35a5f1646 Bump Hive Version + Minimal Install (#3260)
f042c8144 Fix e2e test for azurefile-csi storage class that uses ARO-managed storage account on OCP 4.11 (#3226)
a0cc0eec3 Patch Hive ClusterDeployment rather than update it (#3244)
9100c81eb clean up some of the monitor emitting metrics for aro operator statuses and prometheus (#3235)
0dd1ec930 Add defaults and update k8s dev version (#3245)
6e66ecdb8 Merge pull request #3251 from Azure/dependabot/go_modules/github.com/docker/docker-24.0.7incompatible
7e9623173 Bump github.com/docker/docker

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20231031.00...v20231108.00

Release 244

af5f8260e bug: Keep cli-domain-from-installer-image until we use minimal hive version (#3257)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20231030.00...v20231031.00

Release 244

c473088c7 Hive Minimal Install Annotation on ClusterDeployment (#3243)
4aaccb824 Only mirror images from 4.11+ (#3240)
2482a42b5 Merge pull request #3250 from Azure/dependabot/github_actions/actions/setup-node-4
bb8097c92 Skip failing pki test for now (#3249)
57d305578 Bump actions/setup-node from 3 to 4
debb5ae92 Remove 4.10 as an installation target (#3238)
a6ce8b6e9 Add additional metrics
54bfa2b1e Fix azure client for multiple clouds
effcd0bea Fix make generate
55ac567ae Fix unit tests
ab05ba74c Add a new azureclient for subnet from az-sdk
c6285803f Make all monitors into go routines
bfd8f6497 Consolidate into consistent monitor emitters
9c30a16b1 Plug NSG monitoring to mon.WorkOne
ba330d800 Add NSG monitoring
dfa6c1a0a Add azcore/arm and network/v2 to vendor
9bb9b518d Fix CheckAccess unmarshal bug (#3241)
f44f544e9 Default installation target to 4.12 (#3237)
4c89c8917 Update MDM, MDSD, Fluentbit images (#3233)
61745e31b fix docs: puslish aro operator to quay (#3236)
4e00e297e Return actionable service principal errors to the user (#3231)
24d796627 ensure API Server public IP is added to DependsOn
e6816b8fa add managed ips to arm templates
8019a0ee5 feat: add deny pull secret deletion policy (#3228)
4e8877545 Fix panic on addressPrefix vs addressPrefixes on subnet (#3223)
3273b70b3 BUG: Fix golang client PUT for GA (#3204)
0a4234868 removed facchettos from codeowners
45a089904 Remove requeueAfter during cluster upgrades as it is unnecessary
4f8c591a5 Ensure DynamicHelper preserves Status on MachineHealthCheck updates
276f924e0 Add k8s paused annotation to ARO MHC during upgrades
cd81ce907 Return errors from AuthorizationRetryingAction if timeout is reached (#3222)
365413c35 Add routing to admin portal (#3164)
19f4e0697 Additional Waiting for API Server to become ready (#3220)
66c113a54 Propagate errors of ARO MachineHealthCheckController to ARO Operator (#3177)
6cdf2c328 Match AKS development version with production (#3217)
74dea9936 Bump @babel/traverse from 7.21.3 to 7.23.2 in /portal/v2 (#3215)
4ae11b1c4 Enable Double (infrastructure) Encryption on ARO-provisioned storage accounts (#3216)
92ca0e4c1 Add e2e tests for multiple ips per loadbalancer (#3183)
7579edebc fix graph error handling in az-aro command module (#3093)
1844f2dc3 Revert workaround for mdsd bug
4b6adbdec Merge pull request #3214 from cblecker/rrr
bcc936b57 Merge pull request #3212 from cblecker/e2e-eventually-timeout
3c120a17b Remove ready-for-review when rebase is required
9ef2e0bc0 Add eventually timeout when we use contexts
f131c2564 Merge pull request #3211 from bennerv/network-acl-fix-for-storageaccounts
e3b1ebb71 Add additional debugging lines
61b9c39a7 run tests serially
a94a600cb Parallelize namespace names across tests
d36544a88 allow for parallel statefulsets to be created
a4323ba42 Fix e2e tests - Add explicit timeouts
29726e777 Fix - avoid letting context override default timeout used by Eventually
a3bb3f5a1 Fix - avoid duplicate resource and label names in StatefulSets
bb23e4ec9 Fix - arm.ParseArmResourceId is meant for child resources and not resource groups, so use stringutils.LastTokenByte instead
6595ed001 Fix - don't try to add service endpoint if it's already there
8cba7164c Fix some nits and verify service endpoint location before reconciling vnet rules
ce81e7da3 Add e2e test for azurefile-csi storageclass
8abf6a445 Fix storage account reconciliation, take two
b75bc878d Fix storage account controller vnet rule additions
d346dd760 Add NACLs for OCP Subnets iff service endpoints set on subnets
e76ad78a5 Helper function to return functions which have a specific service endpoint enabled
ca8a3a0c1 api: Add MissingFields to OpenShiftVersionProperties (#3208)
dc0e7e130 Bump golang.org/x/net from 0.14.0 to 0.17.0 (#3209)
78f2f6668 Trim dependency graph by removing unused stuff (#3186)
cf357559a api: Add Default field to OpenShiftVersionProperties (#3202)
cfc546e79 Fail cluster deletion if RP is not authorized to delete managed resource group (#3207)
d3b527268 Bump postcss from 8.4.23 to 8.4.31 in /portal/v1 (#3206)
22a6d6063 Update documentation for testing the ARO operator (#3115)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20231005.00...v20231030.00

v20231014.01 Hotfix Release

424adc8e2 Merge pull request #3211 from bennerv/network-acl-fix-for-storageaccounts

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20231005.00...v20231014.01