ARO-RP

Hotfix for network acl logic + testing fixes so end to end doesn't time out.

7e1ec26f6 Add eventually timeout when we use contexts
36e8e6fb6 test
61b9c39a7 run tests serially
a94a600cb Parallelize namespace names across tests
d36544a88 allow for parallel statefulsets to be created
a4323ba42 Fix e2e tests - Add explicit timeouts
29726e777 Fix - avoid letting context override default timeout used by Eventually
a3bb3f5a1 Fix - avoid duplicate resource and label names in StatefulSets
bb23e4ec9 Fix - arm.ParseArmResourceId is meant for child resources and not resource groups, so use stringutils.LastTokenByte instead
6595ed001 Fix - don't try to add service endpoint if it's already there
8cba7164c Fix some nits and verify service endpoint location before reconciling vnet rules
ce81e7da3 Add e2e test for azurefile-csi storageclass
8abf6a445 Fix storage account reconciliation, take two
b75bc878d Fix storage account controller vnet rule additions
d346dd760 Add NACLs for OCP Subnets iff service endpoints set on subnets
e76ad78a5 Helper function to return functions which have a specific service endpoint enabled
78f2f6668 Trim dependency graph by removing unused stuff (#3186)
cf357559a api: Add Default field to OpenShiftVersionProperties (#3202)
cfc546e79 Fail cluster deletion if RP is not authorized to delete managed resource group (#3207)
d3b527268 Bump postcss from 8.4.23 to 8.4.31 in /portal/v1 (#3206)
22a6d6063 Update documentation for testing the ARO operator (#3115)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20231005.00...v20231014.00

Hotfix release fixing storage account issue

c73f0b428 Helper function to return functions which have a specific service endpoint enabled

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20231005.00...v20231013.00

v20231005.00 Release

2703a95f8 Fix Construction of Monitor for Clusters with kube-apiservers Down (#3201)
8583ae277 Merge pull request #3200 from gouthamMN/master
b1109af1c Merge branch 'master' of https://github.com/gouthamMN/ARO-RP
29a718850 validate workerProfilesStatus to be nil only during create
cef6b015a Add customer data regression tests for get/create/update/delete k8s admin api (#3198)
36df0152c Prevent memory leaks with DialContext usage and new k8s client creation (#3090)
082e9a5a0 Set maintenace task to "" after PUCM pending operation (#3197)
54e90e889 Convert the pucm pending boolean in the AdminAPI (#3196)
2fa4d5657 Merge pull request #3191 from yjst2012/remove-openshift-config
618366d94 removed host mount policy as suggested cont.
ca41d3201 removed protection under openshift-cluster-csi-drivers ns as suggested
29de88449 removed host mount policy as suggested
98fd98849 remove protection over machine obj
c6996d8cf removed openshift-config as protected namespace as suggested

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230928.01...v20231005.00

v20230928.01

85e9ab32d Don't Put Cluster in Update State after PUCM Pending (#3194)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230928.00...v20230928.01

v20230928.00

6a9a817e5 retry operations on pull-secret when receiving a conflict (#3195)
c45d6cc21 Revendor go-cosmosdb to fix database.EmitMetrics() json decode error (#3190)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230921.00...v20230928.00

v20230921.00

a7d026270 Merge pull request #3189 from Azure/revert-3171-412-default
1a35d4e55 Merge pull request #3187 from s-amann/rotate-openshift-config-pull-secret
d29d6a1eb Revert "Default to 4.12 for new installations (#3171)"
33de1ab92 fallback to new pull secret if we cant merge
6750ea5b3 attempts to merge original and new even when recreating
aeea7eb6e continue forward if openshiftConfigSecret is missing
ca6c4cd6a merge existing data with new token
9ea5c627c adds retries to delete/create/update on the openshift-config pull secret
584f7735d refactor to reduce use of conditions
1f38c932c rotate the openshift-config pull-secret on acr token rotation
b123a45f2 Fix WorkerProfilesStatus PUCM Bug (#3184)
e23c4d3e9 remove UserDefinedRouting AFEC feature flag (#3180)
019c2fb11 Fix bad logic comparison against an already existing gateway record (#3182)
2a16a3634 upstreaming changes required by upstream CI (#3117)
bfddd185c Return error if we fail to delete hive resources during deletion (#3179)
04b84a2b8 Refactor pkg name (#3178)
b21cc048e Get to the bottom of the e2e admin portal failure (#3168)
118f1a8fb Enable preconfigured NSG flag on azure-cli (#3112)
4255225a6 Update Dockerfile.ci to use buildarg for registry name (#3167)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230918.00...v20230921.00

Sprint Release 242

8ffcf691b GenevaAction for etcd Certificate Renewal (#3137)
2477f95b2 New Monitor to emit ETCD certificates expiration (#3124)
309197974 Merge pull request #3176 from Azure/dependabot/github_actions/oxsecurity/megalinter-7
0736d98e5 Merge pull request #3175 from Azure/dependabot/github_actions/actions/checkout-4
e59b1e7c7 Bump oxsecurity/megalinter from 6 to 7
c215ae43d Bump actions/checkout from 3 to 4
81679eb22 Merge pull request #3174 from cblecker/auto-update-ghactions
e415ac40b Merge pull request #3172 from Azure/documentation-debian-dev
2dd8c7f85 Add dependabot to auto-bump GH actions versions when needed
2114a6c10 create monitor for certificate expirations (#2976)
1d6d14449 Default to 4.12 for new installations (#3171)
404ad37a4 add group for metrics to allow for top nodes to exectute
4a3ecf59f Fix NSG e2e error (#3057)
00ea406b3 Add required debian packages to docs
331b08e58 fix: add priv user check for machine config & master toleration policies (#3169)
825a70b4b Merge pull request #3163 from Azure/dependabot/go_modules/github.com/coreos/ignition/v2-2.14.0
5b240b2bd Bump github.com/coreos/ignition/v2 from 2.7.0 to 2.14.0
c4cdb03c0 Merge pull request #3165 from hlipsig/e2e-adminapi-getlogs-test-update
33cbf09ad Update adminapi_cluster_getlogs.go
4b891d027 Update adminapi_cluster_getlogs.go
f99e9e198 Remove Ignition V2 from the ARO Operator (#3140)
46fa0a186 skip lb profile reconcile when arch is v1 (#3162)
b1db19462 Bumping up MUO to v0.1.952 (#3149)
c4cf22a8c Use a mix of addressPrefix and addressPrefixes in e2e
8afd0b2a7 Fix nil pointer dereference when addressPrefixes is set, but addressPrefix is not in a subnet
f85866bdd Enable autonodezing by default (#3159)
28d48702b Added the Actions Icons on Cluster Detail Page (#3051)
6413c3f1f Remove rhcos publishing doc, can be found in ARO-Installer (#3160)
e02f5e05f Merge pull request #3158 from hawkowl/hawkowl/go1810
d94940820 update to go 1.18.10
4329ac87f Merge pull request #3152 from Azure/dependabot/go_modules/github.com/cyphar/filepath-securejoin-0.2.4
db74c9e22 Bump github.com/cyphar/filepath-securejoin from 0.2.3 to 0.2.4
4ae27ddc2 Merge pull request #3147 from hawkowl/hawkowl/bump-mirror-minimum
796b7141c add ubi9, latest MUO, mariner azure-cli
c81ec65fb 4.10+ mirroring
5afcf2ed1 Merge pull request #3118 from hawkowl/hawkowl/kiota
dba48c1f0 Add worker profile status (#3053)
91a03574d add refresh button for different resources (#3111)
04ba179c5 Merge pull request #3145 from cblecker/fix-int-conv
c2cf5566f Fix string to int conversion
fabe818a2 add some documentation
6f71bc173 go mod vendor
4939676d7 go mod update
ccc157e63 update code to use our generated msgraph sdk
89a66c19e add boilerplate from msgraph-sdk-go to build the client + credential adapter
2ef896287 generated files
cd99e81d4 makefile to run kiota
0134e4020 Fix kube versions in go.mod (#3144)
d745c8d7a Merge pull request #3143 from bennerv/update-kube-deps
1e48a0150 remove deprecated e.SelfLink
68ef8c250 Add methods to fake discoveryclient
6fa30d22d Bump openshift dependencies
fed8ebae5 Remove SetClusterName as it was deprecated + removed
b108c4ddb go mod vendor
6947c3b68 Bump kube dependencies
5c5a56b13 Merge pull request #3141 from cblecker/clock
48a46997a go mod vendor
5e58754a7 Update k8s.io/utils dependency
7fc4297de Use k8s.io/utils/ptr instead of deprecated pointer package
914c716d3 Use stable clock package
d228bf11b Merge pull request #3139 from Azure/dependabot/go_modules/github.com/docker/docker-23.0.3incompatible
690c43156 Reduce diffs between our az aro extension and the upstream Azure CLI command (#3125)
eadedd9e2 Bump github.com/docker/docker
c2517910a exclude some more log namespaces based on statistics (#3132)
6e5083d30 Bump github.com/sigstore/rekor from 1.0.1 to 1.2.0 (#3138)
56352e6f0 Mirror the hive version we intend to upgrade to (#3126)
9f7ef799e increase machine health check node unready timeout to 15m (#3133)
b9679a149 Merge pull request #3136 from cblecker/gvf
37d6378a8 Bump github.com/containers/podman/v4 from 4.1.1 to 4.4.2 (#3135)
265a29c13 Use go version from go.mod
e4d4c73db Reduce flakes in TestLoadBalancerProfile() (#3129)
dcaa1adc1 Merge pull request #3122 from kimorris27/update-azure-sdk-for-go/sdk/azidentity
4b963fec8 Fix .gitignore for kubeconfigs (#3128)
1e3c10291 Remove old upgradestreams logic from the monitor & old parts of the RP (#3092)
c3a282ce7 added guardrails namespace (#3130)
9c05b3641 Remove erroneous HTTP header checks from AppLens client tests
a3a442d73 azidentity v1.2.2 -> v1.3.1, azidext v0.4.0 -> v0.5.0, go mod tidy; go mod vendor
286e65a61 Remove upgrades from kubeactions and the admin API (#3091)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230829.00...v20230918.00

Sprint 241 Release Attempt 3

a47f06b4f Specify the resource manager endpoint for the lb backend pool client (#3127)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230828.01...v20230829.00

Sprint 241 Release Attempt 2

3b370aebf multiple ARO managed public IPs per Load balancer during cluster update (#3095)
bd8926136 Fix credential rotation failure (#3113)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230828.00...v20230828.01

Rollout 241

30c99aee6 add aro-monitor and aro-portal restart to predeploy steps
b7ba1cc15 ARO-3112: Set DisableOutbound SNAT to true on Load Balancers (#3069)
e6442d750 Remove the unneeded replace for hive (#3123)
6f4d75cfd Merge pull request #3119 from 2uasimojo/ARO-3801/revendor-hive
d4a2c90c8 Update pkg/operator/controllers/dnsmasq/dnsmasq.go
8e75ed1a0 Update pkg/operator/controllers/dnsmasq/dnsmasq.go
3f62386ca Update dnsmasq operator to use embeded files
f9df85dc6 Fix resolv.conf during Azure host servicing
cd811e6cb Apply lint roller
01cf99f1c Unplanned Maintenance Signals (#3060)
644f8b857 Remove install word in Condition error messages (#3044)
d32c09410 Revendor hive to 70b666ec8
db0b249eb remove gvrresolver use in the frontend (#3087)
f26f8f41d Fix local make admin.kubeconfig (#3097)
099f624d3 use restricted scc for gatekeeper-manager-role (#3080)
19adfe57e Add priority deletion ordering of nested Microsoft.Compute/galleries resources (#3114)
d74f9f310 ran make generate (#3106)
48af20fc5 Update RegistryProfile with new ACR token password once rotated (#3088)
cf09d3ced Merge pull request #3109 from cblecker/update-gh-actions
302f23a72 Merge pull request #3108 from cblecker/cleanup-cql
61b2e891a Update formatting/permissions/triggers for GH Actions
b3996ee6a Update CODEOWNERS (#3107)
a96312fdf Remove unneeded codeql template
981206763 Merge pull request #3105 from cblecker/fix-codeql
c6df6a163 Configure CodeQL github action to use manual build for golang
9c844e80e Remove CodeQL job from ADO CI
73e8e135f Adding 4.12 install streams (#3084)
c8d10ffc6 Move pkg/api dependencies on util/immutable to api/util/immutable (#3079)
d61bdd6fd Aro 2998 monitoring errors (#3068)
8191585b1 Pin to selenium grid 4.10 (#3082)
cc6cd1e0b Move pkg/api dependencies on util/subnet to api/util/subnet (#3070)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230802.01...v20230828.00

Retagging to include annotation

5b94eb466 Remove the provisioning state check around ensure managed rg (#2936)
ede320dd3 Run prettier on the pipeline yaml files (#2979)
940e5a04e Add more information to on conflict for gateway PE linkId (#3054)
058a214e3 remove gateway restart during rp predeploy (#3071)
aa61608c9 Preview api lb profile (#3020)
b9a207e7a Add preconfigured NSG to 2023-09-04 api (#3062)
f6129d9e4 update predeploy to restart old VMSS when service secrets rotated (#2946)
06cfba513 Don't use the uid in containerinstall code (#3066)
b5ea75e75 Add jq for must-gather (#3050)
c35fb5c4a Fix gateway container log file mount (#3064)
67e36938f added setdefault (#3067)
59c8f3a18 Bump word-wrap from 1.2.3 to 1.2.4 in /portal/v2 (#3043)
02d10e83f remove redundant if statement (#3061)
6bc0f37b3 Reconcile Master & Current Release: Revert Preconfigured NSG Changes (#3058)
d14ee2463 ARO-3536: Add error handling when "CLUSTER" env variable is empty. (#3007)
861bdb9cb fix API Skeleton file permissions (#3055)
45fe957b6 Fix e2e must gather (#3037)
f9ee191ad skeleton for 20230904 (#3048)
b8803d768 Add API for Microsoft.Compute/galleries (#3052)
b2189841f Use more common use case for end user azext_aro override
5c5b5c806 fix space
f9ed22f8b Add instructions to setup Python 3.10 and azure CLI in a venv
d898b1cb1 Add documentation for configuring Azure CLI extensions via environment variable
cc5da3172 Remove specific instructions for upstreaming Azure CLI changes
f7d33256c Add links to further documentation on Azure CLI command modules and extensions
39fb55db0 Update error enrichment in Condition step to return original error if condition function is unknown (#3046)
4d57b4beb Move the dynamic validator out of api/ (#3015)
220c6ff35 upgrade gatekeeper to version 3.11.1 (#2954)
2710ec3c0 Add test to ensure we do not set Degraded=True status on operator
5ce2ab450 Add tests for clusteroperatoraro controller
6c945b07b Add etcdRecovery maintenance type for admin update - ARO-1534
18d60cd7a cleanup
a108f4c1d try and run in container
b9b2cff5d Merge pull request #3042 from cblecker/gk-sec-fix
92c892e74 Add gateway log rotatation
9ee4ab746 aro-3168: includes tests on new functionality of samples.go
49aaa1e68 aro-3168: retry on conflict and not found for disabling samples
90dd06bc5 Allow dynamic assignment of uid/gid

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230719.00...v20230802.01

hotfix reverting PR #2969

d5fa4fff0 Revert "Add nsg enhancement permission validation for FP/Cluster SPs (#2969)"
678109c5e Revert "Merge pull request #3049 from Azure/remove_nsg_checks_temp"

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230719.01...v20230719.02

v20230719.01

407ce68b3 Merge pull request #3049 from Azure/remove_nsg_checks_temp
05a37406b Remove the NSG validation for e2e tests

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230719.00...v20230719.01

OCP Version Update - FIPS

9efa064ab Propagate errors of ARO DNSMasqCluster controller to ARO Operator
9dadd3c31 Refactor conditions to return error
2714d6721 additional test cases
bb08bf7d9 raise error if using UserDefinedRouting incorrectly
38c886f07 default to empty outboundtype, let RP decide
d818ce8ab update missed versions
1bdd06390 bump api version
b39adccca add outbound-type param to az cli extension
1bce8d4ce Propagate errors of ARO DNSMasqMachineConfigPool controller to ARO Operator
9fe2f9cf0 Propagate errors of ARO DNSMasqMachineConfig controller
a12ca8ab6 update_ocp_versions: Code cleanup
a3b0cc090 Wrap Timeout errors within Condition steps (#3005)
782d5fab7 minor refactor
2d363e7c2 add comment for setUpdateProvisioningState
ebb825e6e validate static refactor
d563aeebf remove ongoing
473b67e9d refactor getPucmState
9d97ffc6c nit fix for unit test
7d642ab54 lint
f5cf22e8f fix lint
e7c6ec954 fix error checking
0e4a76c56 set no pucm pending properly
9f8a596b4 update logging
9ea63b50b add to bottom
84a9b1352 fix test
2b152f879 unit test
f9a52c73e lint
adc9dcb61 Add maintenance task for pucm pending
090eccf3a add loggiing
7f1165773 validate
e440cafa2 lint
fa4562034 address comments
196f4e77f cleanup test
ef32e5a93 more lint
c5574fcc6 gofmt
dad96f3b0 lint
73444f1d6 fiix
6f2c89374 PUCM Maintenance Signals
81df3a26b fix list installs test
4e9e8154d fix storage class tests for 4.11
ab8480868 install the default in E2E
1b587dd10 change to install 4.11 by default
f0b02b669 add podman startup docs
12f1466e3 Remove the inbuilt installer (#3030)
b06512afc Guardrails policies (M1) (#2970)
a37c54446 Add static preflight validation (#2996)
a4403f525 drop the ignitionv2 dep (#3029)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230717.00...v20230719.00

Release 239

a1b73e964 Merge pull request #3024 from Azure/dependabot/go_modules/github.com/containerd/containerd-1.6.18
a7f2e75ca Merge pull request #3034 from Azure/dependabot/go_modules/github.com/theupdateframework/go-tuf-0.3.2
f34cffd04 Bump github.com/containerd/containerd from 1.6.4 to 1.6.18
dec2d8f2c Bump github.com/theupdateframework/go-tuf from 0.3.1 to 0.3.2
cb85e2f83 Merge pull request #3025 from Azure/dependabot/go_modules/github.com/sylabs/sif/v2-2.8.1
dc05e0584 Merge pull request #3014 from Azure/dependabot/npm_and_yarn/portal/v2/tough-cookie-4.1.3
dcf5ab885 bump to latest stable (#3033)
b9b7fa887 Bump github.com/sylabs/sif/v2 from 2.7.0 to 2.8.1
3b6a3ce94 Bump github.com/containers/buildah from 1.26.1 to 1.27.1 (#3027)
6f3de51fb Update guardian suppression rules (#3032)
05890cfef Update gatekeeper version tag (#3028)
de99864fd Bump tough-cookie from 4.1.2 to 4.1.3 in /portal/v2

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230713.00...v20230717.00

release v20230713.00

9bb3a47f4 bumping versions and make generate (#3019)
4406ce810 Try and fix the e2e mustgather (#3023)
06b565ae8 Run local development and PR E2E in podman (#2817)
6cfcd6eb3 emit a metric when we fail to gather ping metric
ff5b65644 Update comment to reflect requirements of healthz check
5a9b293ac check ping if healthz returns non 200
27cbefa15 Revert "Add API Server Reachability Check (#2959)"
8877ebc58 Read installer image digests from an environment variable (#3009)
f87f19847 Add nsg enhancement permission validation for FP/Cluster SPs (#2969)
861c83319 Fix MDSD memory issue on RP VMs (#3003)
df5e4daa1 Update deploy-development-rp documentation, minor improvements to formatting and spelling (#3012)
629913bd9 Add API Server Reachability Check (#2959)
d82d4f53a Add field ClusterDeploymentNamespace in ServiceLogs (#2957)
f1d9035d1 Propagate errors of ARO Ingress controller to ARO Operator (#2940)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230703.00...v20230713.00

Release v20230703.00

0378d0ecf Installer images use sha256 (#2967)
3d758d2d9 fixes aro-2456 (#3002)
64e79ee3e add daily cron to restart proxy service (#3004)
5f9df8a0f AutoSized Nodes now reference both masters and workers (#2997)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230628.00...v20230703.00

Release 238

e34c6d65d Add longpaths to git config to bypass file name length restrictions (#2993)
631d171dd Fix storage account controller (#2989)
f063e9baa fix monitoring when client.New() returns an error and provide unit tests
4100e65ee Update the hive image used to an older commit but built more recently (#2985)
c26280077 Rename TokenCredential variables to indicate credential used (#2950)
000562dbd Increase gateway VMSS disk storage (#2978)
738a5e677 Trim dependency graph with old code (#2980)
27b1ec195 Run the admin portal e2e in podman (#2968)
dc395371a Adding myself to code owners (#2977)
8116c3dc2 added yjst2012 to code owners (#2938)
87f1e43b3 Adding RequestDisallowedByPolicy cloud error (#2963)
bcd60e807 initial scaffolding for preview api (#2972)
a4e3266c3 Propagate errors of ARO ImageConfig controller to ARO Operator (#2939)
c95b1e353 remove non-current Azure SDK dependencies from being considered (#2966)
156383c4a Migrate RP from Azure AD Graph to Microsoft Graph (#1970)
3bd4779ae Update Hive image to 32e143a294 (#2962)
1ee42feb7 [ARO-3194] Vendor dnsmasq into the operator (#2932)
57a69d0c8 change RU Consumption metrics aggregation to average
07fa8b3a3 Remove AZURE_ARM_CLIENT_SECRET helper as we use certificate based auth now for dev (#2937)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230608.00...v20230628.00

Hotfix release for sprint 237.

e856b4c0a Use refreshing actions where required during Update()/AdminUpdate() (#2944)
1764bc9fe Revert "Fix failure in az aro update when missing azure-credentials object (#2887)"
943c25dd7 Force Resize option in Master Resize GA (#2844)
a8012e551 Add status conditions to operator MachineSet controller (#2899)
477c735fd Reconcile upstream changes / remove Network SDK (#2851)
0c7b9bf5a ARO-3054 - Set OpenShift Version during Cluster Creation (#2926)
219132194 lower the severity of cosmosdb throttling alert
1a5da5c8f add cosmosdb throttling azure alerting rule
20c53c4d4 Always log error (if applicable) on failed deployment attempts (#2933)
24a70ea61 Updated OutboundType to include comment for Swagger generation - Updated Swagger Readmes (#2920)
151eca258 Wrap AppLens resp in required envelope (#2923)
5f9e0bdd4 now check if time is not set (#2928)
d9d473799 Merge pull request #2870 from Azure/dependabot/npm_and_yarn/portal/v1/yaml-and-css-minimizer-webpack-plugin--removed
8e86ad52c Bump yaml and css-minimizer-webpack-plugin in /portal/v1

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230602.01...v20230608.00

Release v20230602.01

5f3c09fc7 Set a default value for checkaccess (#2930)

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20230602.00...v20230602.01