ARO-RP

fix go path in pipeline

154024b40 preset go path in pipeline

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240906.02...v20240906.03

new tag for further fix

a45af0905 lint fix
5f3eb1ab3 fix build path

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240906.01...v20240906.02

second release tag for make aro cmd fix

cbf029332 lint fix
f9c0cb7c8 lint fix
15c031b43 fix make aro dependency

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240906.00...v20240906.01

init RP release 259

What's Changed

• ARO-8423: fix client generation issue with new Identity field for MIWI by @kimorris27 in https://github.com/Azure/ARO-RP/pull/3639
• Adding logging statements for pullsecret controller by @slawande2 in https://github.com/Azure/ARO-RP/pull/3613
• Migrate PR e2e to ARO Classic E2E subscription by @tony-schndr in https://github.com/Azure/ARO-RP/pull/3614
• [ARO-4562] Migrate DNS to track2 SDK, arm dns client creation. by @jonathan34c in https://github.com/Azure/ARO-RP/pull/3625
• Add new makefile targets for go mod verification by @razo7 in https://github.com/Azure/ARO-RP/pull/3550
• Add mirroring of ose-tools-rhel8 for 4.15 by @razo7 in https://github.com/Azure/ARO-RP/pull/3649
• Mirror two Microsoft Geneva images by @razo7 in https://github.com/Azure/ARO-RP/pull/3635
• use track2 SDK in updateAPIIPEarly by @bitoku in https://github.com/Azure/ARO-RP/pull/3638
• Create and populate OIDC blob store for the cluster by @rajdeepc2792 in https://github.com/Azure/ARO-RP/pull/3564
• update guardrails protected namespaces list by @yjst2012 in https://github.com/Azure/ARO-RP/pull/3641
• Fix automatic triggering of CI + E2E by @hawkowl in https://github.com/Azure/ARO-RP/pull/3644
• feat: Add srini as codeowner by @jaitaiwan in https://github.com/Azure/ARO-RP/pull/3658
• Add validation for default CIDR range by @rhamitarora in https://github.com/Azure/ARO-RP/pull/3611
• Add myself and Aldo as codeowners by @mociarain in https://github.com/Azure/ARO-RP/pull/3659
• Add tenant ID to internal apis for CMSI usage by @niontive in https://github.com/Azure/ARO-RP/pull/3655
• [ARO-8862] local-rp dev docs should mention registering the sub by @mrWinston in https://github.com/Azure/ARO-RP/pull/3666
• [ARO-7181] Upgrade the ARO Operator, then update the Cluster object by @hawkowl in https://github.com/Azure/ARO-RP/pull/3530
• Bump github.com/gorilla/schema from 1.2.1 to 1.4.1 by @dependabot in https://github.com/Azure/ARO-RP/pull/3657
• Increase dev-proxy-vmss OSDisk to 64GB by @tsatam in https://github.com/Azure/ARO-RP/pull/3656
• Update hive-generate-config.sh to accept differing versions by @s-fairchild in https://github.com/Azure/ARO-RP/pull/3664
• bump azdev by @bitoku in https://github.com/Azure/ARO-RP/pull/3669
• Bump Hive Image to commit b1ac27b248 - ARO-5063 by @s-fairchild in https://github.com/Azure/ARO-RP/pull/3662
• Emit Cluster Feature Metrics for Cluster Operations by @s-fairchild in https://github.com/Azure/ARO-RP/pull/3631
• Add new NASA codeowners to ARO-RP by @cadenmarchese in https://github.com/Azure/ARO-RP/pull/3672
• Mociarain/aro 8608 refactor by @mociarain in https://github.com/Azure/ARO-RP/pull/3665
• [ARO-7788] Don't overwrite default installer version in local dev by @mrWinston in https://github.com/Azure/ARO-RP/pull/3671
• ARO Operator - Reduce unnecessary reconciles by limiting watched resources/changes by @tsatam in https://github.com/Azure/ARO-RP/pull/3292
• Move to maintained yaml lib by @hawkowl in https://github.com/Azure/ARO-RP/pull/3454
• Architecting Local make ci-rp File To Allow Caching For Later by @safwank97 in https://github.com/Azure/ARO-RP/pull/3623
• Updates Test Suite To Use New GA API Plus Adds Missing Functionality To Our Internal Utility Clients by @safwank97 in https://github.com/Azure/ARO-RP/pull/3640
• Containerize ./hack/tunnel by @tsatam in https://github.com/Azure/ARO-RP/pull/3646
• Update network SDK to track2 by @bitoku in https://github.com/Azure/ARO-RP/pull/3594
• New cmd to populate PlatformWorkloadIdentityRoleSets in dev and prod by @cadenmarchese in https://github.com/Azure/ARO-RP/pull/3617
• Make dev-proxy use Trusted Launch by @nwnt in https://github.com/Azure/ARO-RP/pull/3600
• HOTFIX: correct local image names by @SudoBrendan in https://github.com/Azure/ARO-RP/pull/3682
• Add controller to disable CPMS on ARO clusters by @tsatam in https://github.com/Azure/ARO-RP/pull/3660
• [ARO-5368] Try and log the VM info + console log on failure by @hawkowl in https://github.com/Azure/ARO-RP/pull/3629
• Add doc on rotating full RP env VPN certs by @cadenmarchese in https://github.com/Azure/ARO-RP/pull/3544
• fix dev env panic in e2e by @bitoku in https://github.com/Azure/ARO-RP/pull/3693
• Update controllergen commands to work with 0.9.0 by @hawkowl in https://github.com/Azure/ARO-RP/pull/3680
• Bug fix - Add nil pointer check for LoadBalancerProfile in cluster metrics by @s-fairchild in https://github.com/Azure/ARO-RP/pull/3695
• [ARO-9169] Remove disused clustermanager frontend code by @hawkowl in https://github.com/Azure/ARO-RP/pull/3642
• Clean up some duplicated code in cmd/ by @hawkowl in https://github.com/Azure/ARO-RP/pull/3648
• Hotfix: compute API version used in ARM templates by @kimorris27 in https://github.com/Azure/ARO-RP/pull/3687
• pkg/cluster: Use Action for fixupClusterSPObjectID by @ehvs in https://github.com/Azure/ARO-RP/pull/3694
• Add cpms e2e test by @tsatam in https://github.com/Azure/ARO-RP/pull/3688
• Update go.sum by @tsatam in https://github.com/Azure/ARO-RP/pull/3703
• Try and get the NewMonitor/Frontend/etc mess under control by @hawkowl in https://github.com/Azure/ARO-RP/pull/3690
• Update Go to 1.21 by @niontive in https://github.com/Azure/ARO-RP/pull/3698
• Preflight update and tests by @carvalhe in https://github.com/Azure/ARO-RP/pull/3686
• Fix Managed Upgrade Operator reconciler by @slintes in https://github.com/Azure/ARO-RP/pull/3704
• Fix missing database refactor on preflight validation in frontend by @bennerv in https://github.com/Azure/ARO-RP/pull/3705
• Refactor/remove private dns zone by @AldoFusterTurpin in https://github.com/Azure/ARO-RP/pull/3500
• Initial start of RP int automation by @razo7 in https://github.com/Azure/ARO-RP/pull/3670
• Smoke test automation for some basic checks by @bitoku in https://github.com/Azure/ARO-RP/pull/3667
• Create sp for each e2e run by @mociarain in https://github.com/Azure/ARO-RP/pull/3685
• log outbound correlation data by @AldoFusterTurpin in https://github.com/Azure/ARO-RP/pull/3503
• refactor package pki to be unit testeable by @AldoFusterTurpin in https://github.com/Azure/ARO-RP/pull/3708
• Always do group expansion for CheckAccess subjects by @nwnt in https://github.com/Azure/ARO-RP/pull/3710
• Clean up some lint errors found on golangci-lint 1.59.1 by @hawkowl in https://github.com/Azure/ARO-RP/pull/3715
• Fixed context issue by @anshulvermapatel in https://github.com/Azure/ARO-RP/pull/3674
• WI/MI CLI Phase 1 - Base API functionality by @tsatam in https://github.com/Azure/ARO-RP/pull/3624
• Deploy shared dev key vault for mock MSI certificates by @kimorris27 in https://github.com/Azure/ARO-RP/pull/3696
• shared utility function to check if a cluster is workload identity by @slawande2 in https://github.com/Azure/ARO-RP/pull/3683
• ARO-6756 Remove usecheckaccess feature and environment variables by @rajdeepc2792 in https://github.com/Azure/ARO-RP/pull/3643
• Add scripts for creating and persisting mock cluster MSI by @niontive in https://github.com/Azure/ARO-RP/pull/3713
• Add machine scaling smoke test by @bitoku in https://github.com/Azure/ARO-RP/pull/3716
• CIF - ServerError: ZonalAllocationFailed by @rhamitarora in https://github.com/Azure/ARO-RP/pull/3691
• Drop SyncSets check by @mociarain in https://github.com/Azure/ARO-RP/pull/3723
• fix repeated reconciliation in node controller by @bitoku in https://github.com/Azure/ARO-RP/pull/3720
• Add load balancer smoke test by @bitoku in https://github.com/Azure/ARO-RP/pull/3717
• [ARO-4562] Migrate DNS to track2 SDK replace dns in cluster. by @jonathan34c in https://github.com/Azure/ARO-RP/pull/3652
• Update MDSD, MDM, Fluentbit base images by @s-fairchild in https://github.com/Azure/ARO-RP/pull/3718
• Use latest "in-progress" ARO API for local/E2E cluster creation by @tsatam in https://github.com/Azure/ARO-RP/pull/3622
• move iswimi function to openshiftcluster.go by @slawande2 in https://github.com/Azure/ARO-RP/pull/3721
• [ARO-7345] smoke test automation for aro-operator log by @bitoku in https://github.com/Azure/ARO-RP/pull/3725
• Add middleware for mock MSI headers by @niontive in https://github.com/Azure/ARO-RP/pull/3714
• Do not modify user's Azure CLI config in make pyenv target by @tsatam in https://github.com/Azure/ARO-RP/pull/3733
• Add note on using oc with dev clusters by @mociarain in https://github.com/Azure/ARO-RP/pull/3724
• Fix NotFound error in DNS isn't handled properly by @bitoku in https://github.com/Azure/ARO-RP/pull/3739
• Increase RP and VMSS disk size from 256GB to 1024GB by @s-fairchild in https://github.com/Azure/ARO-RP/pull/3731
• ARO-4373 fix oidcstorageaccount variable validation error in aro-monitor by @rajdeepc2792 in https://github.com/Azure/ARO-RP/pull/3743
• Ensure identity headers are persisted in requests to create MIWI clusters by @kimorris27 in https://github.com/Azure/ARO-RP/pull/3746
• [Dev Tooling] generateSubnets should check if subnets are already taken by @mrWinston in https://github.com/Azure/ARO-RP/pull/3706
• Add panic recovery within endLease by @s-fairchild in https://github.com/Azure/ARO-RP/pull/3701
• Allow the Loki swarming session for day-of-learning by @SudoBrendan in https://github.com/Azure/ARO-RP/pull/3754
• Correct mdsd image sha to distroless checksum by @s-fairchild in https://github.com/Azure/ARO-RP/pull/3751
• Added known issues and a session of when to use by @ehvs in https://github.com/Azure/ARO-RP/pull/3737
• Minor document changes by @rhamitarora in https://github.com/Azure/ARO-RP/pull/3759
• Optionally Use USER Environment Variable for Azure Resources by @razo7 in https://github.com/Azure/ARO-RP/pull/3681
• Sync fluentbit image with correct checksum seen in arosvc registry by @s-fairchild in https://github.com/Azure/ARO-RP/pull/3766
• Fix axios vulnerability by moving to Fetch by @hawkowl in https://github.com/Azure/ARO-RP/pull/3769
• WI/MI CLI Phase 1 - Base Update Functionality by @tsatam in https://github.com/Azure/ARO-RP/pull/3709
• Update hive image to commit bdf9d08a06 by @s-fairchild in https://github.com/Azure/ARO-RP/pull/3770
• change load balancer image in smoke test by @bitoku in https://github.com/Azure/ARO-RP/pull/3740
• Make runlocal-rp with Container Image by @shubhadapaithankar in https://github.com/Azure/ARO-RP/pull/3593
• Fix invalid version when running go list -m -mod=readonly all by @bitoku in https://github.com/Azure/ARO-RP/pull/3749
• Add smoke tests doc by @bitoku in https://github.com/Azure/ARO-RP/pull/3750
• fix typo by @bitoku in https://github.com/Azure/ARO-RP/pull/3779
• Thank you Aldo, and good luck by @SudoBrendan in https://github.com/Azure/ARO-RP/pull/3774
• Add PVC smoke tests by @bitoku in https://github.com/Azure/ARO-RP/pull/3747
• Add scripts to create platform identities for dev by @niontive in https://github.com/Azure/ARO-RP/pull/3734
• Exclude platform identities from permissions denial by @yithian in https://github.com/Azure/ARO-RP/pull/3653
• Containerized portal as it runs in prod, locally by @SudoBrendan in https://github.com/Azure/ARO-RP/pull/3745
• Allow prerelease OCP versions and version strings with metadata during cluster installation by @tsatam in https://github.com/Azure/ARO-RP/pull/3782
• Makefile Podman Refactors by @SudoBrendan in https://github.com/Azure/ARO-RP/pull/3775
• Update VMSS to Mariner with FIPS enabled by @s-fairchild in https://github.com/Azure/ARO-RP/pull/3741
• Add Router Test by @bitoku in https://github.com/Azure/ARO-RP/pull/3784
• Only fail NPM audit on high/critical vulnerabilities by @tsatam in https://github.com/Azure/ARO-RP/pull/3790
• Bump oxsecurity/megalinter from 7 to 8 by @dependabot in https://github.com/Azure/ARO-RP/pull/3794
• Bump micromatch from 4.0.7 to 4.0.8 in /portal/v2 by @dependabot in https://github.com/Azure/ARO-RP/pull/3795
• ARO-6416 generate a secret for the operator from workload identity by @yithian in https://github.com/Azure/ARO-RP/pull/3761
• Fixed to correctly reference the local image tag by @shubhadapaithankar in https://github.com/Azure/ARO-RP/pull/3796
• Copy Fluenbit Image by @razo7 in https://github.com/Azure/ARO-RP/pull/3780
• ARO-9570: Add a controller to the ARO operator to lay down etchosts by @lranjbar in https://github.com/Azure/ARO-RP/pull/3781
• This is the new CI-RP stage for the pipline by @shubhadapaithankar in https://github.com/Azure/ARO-RP/pull/3768
• Add alerts smoke test by @bitoku in https://github.com/Azure/ARO-RP/pull/3801
• Move ARM swagger to subfolder by @petrkotas in https://github.com/Azure/ARO-RP/pull/3805
• Add the old make runlocal-rp as an alternative to containerization by @SudoBrendan in https://github.com/Azure/ARO-RP/pull/3789
• add smoke test documents by @bitoku in https://github.com/Azure/ARO-RP/pull/3813
• Adding Ayato to CODEOWNERS by @tiguelu in https://github.com/Azure/ARO-RP/pull/3814
• Fix make ci-clean and runlocal-rp by @SudoBrendan in https://github.com/Azure/ARO-RP/pull/3806
• Address the vulnerability reported in Security Wave II by @nwnt in https://github.com/Azure/ARO-RP/pull/3755
• Fix slow tests in /pkg/deploy by @SudoBrendan in https://github.com/Azure/ARO-RP/pull/3808
• Fix slow tests in /pkg/backend by @SudoBrendan in https://github.com/Azure/ARO-RP/pull/3809
• Fix slow tests in /pkg/frontend by @SudoBrendan in https://github.com/Azure/ARO-RP/pull/3810
• Fix slow tests in /pkg/cluster by @SudoBrendan in https://github.com/Azure/ARO-RP/pull/3811
• Remove Generate and Lint from containerized build process by @SudoBrendan in https://github.com/Azure/ARO-RP/pull/3791
• Separate Makefile targets for local vs containerized by @SudoBrendan in https://github.com/Azure/ARO-RP/pull/3816
• Drop some unneccessary dependencies by moving to bingo for tooling by @hawkowl in https://github.com/Azure/ARO-RP/pull/3719
• [MIMO] Move cluster certificate functionality to ClientHelper by @hawkowl in https://github.com/Azure/ARO-RP/pull/3736

New Contributors

• @mrWinston made their first contribution in https://github.com/Azure/ARO-RP/pull/3666
• @ehvs made their first contribution in https://github.com/Azure/ARO-RP/pull/3694
• @slintes made their first contribution in https://github.com/Azure/ARO-RP/pull/3704

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240618.01...v20240906.00

Duplicate tag of v20240618.00

75a681ed6 Merge pull request #3636 from Azure/tiguelu/hotfix-revert-track2sdk-usage
5fc606791 Reverting usage of SDK track2 clients from #3579
a42f1acad Use newer default dev kubernetes version (#3601)
bd3a12fca Merge pull request #3621 from vinaybommana/ci-guardrailpolicies
e44a82606 Merge pull request #3630 from Azure/hawkowl/cleanup-log-lines-steps
e57930cfb add better comments
ec12eb5f5 cleanups
a33264f00 use an instantiated struct for this test, like the real steps
da4b09a2f fixes
0de597a07 reduce the amount of package names in the logs
ba7566fb0 splitting oneliner
121b140e3 seperated gatorcli and opa install steps
3dfafbd10 added github actions for guardrail policies

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240614.00...v20240618.01

Release 259 - 1

2f651e7ef Merge pull request #3781 from Azure/lranjbar/ARO-9570-udr-etchosts-operator-patch
5dfba0547 Merge pull request #3780 from Azure/copy-fluentbit
fd2b2f971 Merge pull request #3796 from Azure/shubhadapaithankar/runlocal-rp-version-fix
6360087ef Add licenses
564f1b03c Fix linting
fec517c2f test the operator identity secret generation code properly
4666495cf get subscription info from the subscription doc rather than env
69c55bf97 Update pkg/operator/deploy/deploy.go
fde6d81e6 generate a secret for the operator from workload identity
a05c82c50 Fixed to correctly reference the local image, preventing unauthorized Docker Hub pulls.
7361eae36 ARO-9750: Add a controller to create the etchosts machineconfigs if they dont exist
a10deab99 ARO-9570: Update controller to watch MCP and ARO Cluster object
9a4ad4ac9 ARO-9570: Add a controller to the ARO operator to lay down etchosts machine config
0ae1ef4c9 Copy fluentbit image from arointsvc ACR to your ACR
7531359c1 Align docs hierarchy

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240827.00...v20240827.01

Tagging for ARO Installer Release

e83bf05c2 Bump micromatch from 4.0.7 to 4.0.8 in /portal/v2 (#3795)
426b56b5a Bump oxsecurity/megalinter from 7 to 8 (#3794)
e079d1700 Only fail NPM audit on high/critical vulnerabilities (#3790)
bd0229df0 Add route smoke-test (#3784)
89cf7d354 Update VMSS to Mariner with FIPS enabled (#3741)
c9410c24c Allow remote podman
e374a4275 Makefile Podman Fixes
09c49cbce Use Podman, not Docker
880835249 Allow prerelease OCP versions and version strings with metadata during cluster installation (#3782)
92a8bfcc1 Containerized portal as it runs in prod, locally (#3745)
52cdcb80e Exclude platform identities from permissions denial (#3653)
fd8d3cf7f Add scripts to create platform identities for dev (#3734)
309d82afd Add PVC smoke tests (#3747)
8badd84bb Thank you Aldo, and good luck (#3774)
c3e324c7c fix typo (#3779)
18b43b5c4 Add smoke tests doc (#3750)
0d991571c Add missing dependencies (#3749)
a38794796 Make runlocal-rp with Container Image (#3593)
c74906d44 Change load balancer image in smoke test (#3740)
d87426882 Update hive image to tag bdf9d08a06 (#3770)
8bcd1b6dc WI/MI CLI Phase 1 - Base Update Functionality (#3709)
a1c4de75a Fix axios vulnerability by moving to Fetch (#3769)
29e09d526 Fluentbit pipeline has been updated to sync versions between arointsvc (#3766)
cedba924d Optionally Use USER Environment Variable for Azure Resources (#3681)
50939e1a3 Minor document changes (#3759)
cb40d348b Merge pull request #3737 from Azure/hevs/docs-rp
66e298043 Correct mdsd image sha to distroless checksum (#3751)
de78a125b Adding a temp branch for Loki swarm session (#3754)
7a00c045b Update docs/deploy-development-rp.md
8303ccfef Update docs/deploy-development-rp.md
c3655d124 Add panic recovery within endLease (#3701)
3f4b98ae9 Update docs/deploy-development-rp.md
ed3ea8e02 Update docs/deploy-development-rp.md
082925258 Added known issues and a session of when to use

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240729.01...v20240827.00

Fixed fluentbit config file indentation

This tag is meant to be used as a test release to Canary region only. v20240816.00-bootstrap

This is to test PR #3741 prior to merging into master.

169f42c05 Embed scripts as strings rather than []byte
14f49b6c7 Update RP and Gateway vmss OS image to cbl-mariner-2-gen2 with Manually Configured FIPS Mode
a1c4de75a Fix axios vulnerability by moving to Fetch (#3769)
29e09d526 Fluentbit pipeline has been updated to sync versions between arointsvc (#3766)
cedba924d Optionally Use USER Environment Variable for Azure Resources (#3681)
50939e1a3 Minor document changes (#3759)
cb40d348b Merge pull request #3737 from Azure/hevs/docs-rp
66e298043 Correct mdsd image sha to distroless checksum (#3751)
de78a125b Adding a temp branch for Loki swarm session (#3754)
7a00c045b Update docs/deploy-development-rp.md
8303ccfef Update docs/deploy-development-rp.md
c3655d124 Add panic recovery within endLease (#3701)
3f4b98ae9 Update docs/deploy-development-rp.md
ed3ea8e02 Update docs/deploy-development-rp.md
082925258 Added known issues and a session of when to use

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240729.01...v20240816.03-bootstrap

Testing PR #3741

08003b3dc Embed scripts as strings rather than []byte
66b6b12b0 Update function comments, remove duplicate rpm package installs
2ce8ffea0 Refactor certificate configuration functions to make things less complicated. Refractor verify_roles to fit with new certificate functions.
724c747b5 Use SKU cbl-mariner-2-gen2 for Automatic OS Updates Support + FIPS
c60b702e0 Update RP and Gateway vmss OS image to cbl-mariner-2-gen2-fips. Restructure VMSS bootstrap bash scripts for increased reliability, and easier debugging
a1c4de75a Fix axios vulnerability by moving to Fetch (#3769)
29e09d526 Fluentbit pipeline has been updated to sync versions between arointsvc (#3766)
cedba924d Optionally Use USER Environment Variable for Azure Resources (#3681)
50939e1a3 Minor document changes (#3759)
cb40d348b Merge pull request #3737 from Azure/hevs/docs-rp
66e298043 Correct mdsd image sha to distroless checksum (#3751)
de78a125b Adding a temp branch for Loki swarm session (#3754)
7a00c045b Update docs/deploy-development-rp.md
8303ccfef Update docs/deploy-development-rp.md
c3655d124 Add panic recovery within endLease (#3701)
3f4b98ae9 Update docs/deploy-development-rp.md
ed3ea8e02 Update docs/deploy-development-rp.md
082925258 Added known issues and a session of when to use

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240729.01...v20240816.01-bootstrap

This tag is meant to be used as a test release to Canary region only. v20240816.00-bootstrap

This is to test PR #3741 prior to merging into master.

374af12a6 Embed scripts as strings rather than []byte
7f650067d Update function comments, remove duplicate rpm package installs
53d5d250f Refactor certificate configuration functions to make things less complicated. Refractor verify_roles to fit with new certificate functions.
195a9100a Use SKU cbl-mariner-2-gen2 for Automatic OS Updates Support + FIPS
4a853ab38 Update RP and Gateway vmss OS image to cbl-mariner-2-gen2-fips. Restructure VMSS bootstrap bash scripts for increased reliability, and easier debugging
a1c4de75a Fix axios vulnerability by moving to Fetch (#3769)
29e09d526 Fluentbit pipeline has been updated to sync versions between arointsvc (#3766)
cedba924d Optionally Use USER Environment Variable for Azure Resources (#3681)
50939e1a3 Minor document changes (#3759)
cb40d348b Merge pull request #3737 from Azure/hevs/docs-rp
66e298043 Correct mdsd image sha to distroless checksum (#3751)
de78a125b Adding a temp branch for Loki swarm session (#3754)
7a00c045b Update docs/deploy-development-rp.md
8303ccfef Update docs/deploy-development-rp.md
c3655d124 Add panic recovery within endLease (#3701)
3f4b98ae9 Update docs/deploy-development-rp.md
ed3ea8e02 Update docs/deploy-development-rp.md
082925258 Added known issues and a session of when to use

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240729.01...v20240816.00-bootstrap

Release 257 - 1

0250e2ff6 Merge pull request #3706 from Azure/mrwinston/hotfix-dev-cluster-create-better-subnet-creation
1cee7a195 Ensure identity headers are persisted in requests to create MIWI clusters (#3746)
a16e7e879 ARO-4373 fix oidcstorageaccount var validation (#3743)
2808298ec Increase RP and VMSS disk size from 256GB to 1024GB (#3731)
db4508d6f Merge pull request #3739 from Azure/atokubi/dns-deletion-bugfix
2143cb813 fix notfound error handling in DNS manager
b2287015e Add note on using oc with dev clusters (#3724)
297c98953 Merge pull request #3733 from Azure/tsatam/hotfix-python-env-fixups
78feafb7f Add middleware for mock MSI headers (#3714)
8d8e63dcc Do not modify user's Azure CLI config
f3c683dca Merge pull request #3725 from Azure/smoke/aro-log
c157292ec Fix formatting
858084a19 incorporate feedback, add mocks for subnet client
2f292b001 generate subnets now takes existing subnets into account
a39416984 Merge pull request #3721 from Azure/slawande/ARO-7856/iswimi-2
40c830e1f Merge pull request #3622 from Azure/tsatam/ARO-8003-use-in-progress-api-for-cluster-creation
b80a91af0 apply suggestions from code review
146ef94f2 Merge remote-tracking branch 'origin/master' into slawande/ARO-7856/iswimi-2
f9c7eb720 remove unused const
4d5628c8f add aro-operator log smoke test
bdcd8c1eb apply suggestions from code review
2d97fea48 move iswimi function to openshiftcluster.go
510b3ee46 Add new "internal" ARO client wrapper over external ARO clients

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240729.00...v20240729.01

Release 257

09a56b1c4 Merge pull request #3718 from Azure/s-fairchild/ARO-5049-image-bump
550b655d6 Merge pull request #3652 from Azure/sdktrack2/dnsreplace
2cbc5ed03 Merge pull request #3717 from Azure/smoke/loadbalancer
ef9b8d1ab Merge pull request #3720 from Azure/atokubi/node
5920a2770 Drop SyncSets check (#3723)
36b6da2ad add load balancer test
1291b45a1 add dynamic Client
962d8e43b fix infinite reconciliation in node controller
1a9bf96cc Update MDSD, MDM, Fluentbit base images
eefe6e896 Merge pull request #3691 from Azure/zonalallocationfailed
69820497e Merge pull request #3716 from Azure/smoke/machine-scale
44fce6fc3 Merge pull request #3713 from Azure/niontive/ARO-8986
0684a5af8 ARO-6756 Remove usecheckaccess feature and variables (#3643)
53691de80 shared utility function to check if a cluster is workload identity (#3683)
bfb554c62 Merge pull request #3696 from Azure/kimorris27/ARO-9005-shared-dev-kv-for-msi
3907e7cf3 WI/MI CLI Phase 1 - Base API functionality (#3624)
4b3572866 Merge pull request #3674 from Azure/anshulvermapatel/cosmosdb-authorizer-context
0f3a104d4 add scaling machine smoke tests
cb9a49bb5 generated code from jewzaam/go-cosmosdb
05da909ae [Draft]Fixed context issue
5cf1e3302 Add msi.sh
b364f27ae Update local_dev_env.sh
f00f0655d Update md
178a8b025 use fpCredRPtenant
c7af7fc7c Update docs and hack script to reflect consolidated MIWI dev infra ARM template
54e94f286 Consolidate OIDC storage account and cluster MSI key vault into one ARM template + make generate
b90e510ce Appease the linter
cb2d4d151 Update documentation to reflect addition of new functions for deploying key vault separately from other dev resources
0e5b43e25 Update hack script with functions for deploying the key vault
4e46ed4bd make generate
195340121 Move the shared cluster MSI key vault to its own ARM template
8612abec7 Fix indentation
3b0147e3f Add new KV with RBAC and then make generate
b072d6230 Rename existing shared dev key vault
5a234a9df Remove comment that appears to be out-of-date information
49af5c640 CIF - ServerError: ZonalAllocationFailed
c999a58ec remove white space
8e2eb0d67 add error
a0e4aafe7 fix azcore
2b270a40f change variable
5854f8784 remove go mod confict
32fbfb909 change cluster
6a775b25f add
cdda20ff4 replace with sdkdns
58f5476bf fix ci
6895ac78e add mock
7ef152815 fix lint
8eca5665f remove white space
e5bf96e41 remove azidentity
74374a9f9 create client and vendor for armdns

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240723.00...v20240729.00

Test

5cddf25e9 Merge pull request #3715 from Azure/hawkowl/fix-lint-errs-jul24
18fa5ec0e Merge pull request #3710 from Azure/nwnt/add-checkaccess-group-expansion
821d54852 clean up some lint errors found on golangci-lint 1.59.1
e20b6124d Always do group expansion for CheckAccess subjects
6ab3476c1 Merge pull request #3708 from Azure/refactor/pki
2ce4ec642 refactor package pki to be unit testeable
74f2b298c Merge pull request #3503 from Azure/log/outbound-correlation-id
b264f5c87 Merge pull request #3685 from Azure/mociarain/create-sp-for-each-e2e-run
df688074e Merge pull request #3667 from Azure/smoke/co-check
49eff97af Initial start of RP int automation (#3670)
245d6f4f9 Make appDetails private
256446f05 Add error to log message
13e4360be Merge pull request #3500 from Azure/refactor/remove_private_dns_zone
26b4d3c8b run go mod tidy
397fe322d refactor remove_private_DNS_zone: split in narrow functions and remove duplication
b1a38a621 log outbound correlation data
a941ecdef Remove debug lines
e8b11df1b Revert skipping some tests
8914f1ad4 Fix log lint warnings
5996096d4 Add explict logic to ensure the cluster has been deleted
56ff3f45a Test: Just deleteCluster
5909beaac Skip tests for testing purposes
327521991 Use better deleting logic
996f5bd65 add more logging
1c9f3f66f Update logging
2aca66076 Drop get_sp function
830068abe Tidy up
92cfabebd s/DeleteApp/deleteApp
6431df801 Revert DeleteApp
1f857e1ed Revert createApp
582351a8a Update the docs
2506e51c9 Merge pull request #3705 from Azure/bvesel/fix-missed-dbrefactor
48e8abf09 Fix missing database refactor on preflight validation in frontend
7838c00f6 Merge pull request #3704 from slintes/fix-muo--reconcile
e7b3fe66d Preflight update and tests
4e46fd2d8 check CO availability
ce3182632 Update Go to 1.21 (#3698)
f1fbd0feb Try and get the NewMonitor/Frontend/etc mess under control (#3690)
6c58f10c9 Extend unit test with new annotation
486b50838 Copy new ca bundle ConfigMap annotation
320751aea Update go.sum (#3703)
28ced6807 Merge pull request #3688 from Azure/tsatam/hotfix-add-cpms-e2e-test
eec4b7add Merge pull request #3694 from Azure/fixup-cluster-sp-object-id
d2d06a8c2 Merge pull request #3687 from Azure/kimorris27/hotfix-compute-api-version
81f22cb8c Clean up some duplicated code in cmd/ (#3648)
94cd8d7f2 [ARO-9169] Remove disused clustermanager frontend code (#3642)
639fd8698 Bug fix - Add nil pointer check for LoadBalancerProfile in cluster metrics
ffca22b0b pkg/cluster: Use Action for fixupClusterSPObjectID
d9800f0e7 Update controllergen commands to work with 0.9.0 (#3680)
7384422fe Merge pull request #3693 from Azure/atokubi/e2e-panic
505865767 Fix parameters on getter function
82c01589b Fix controller name in skip condition
08f1bd9f2 Add E2E test to ensure CPMS is disabled by ARO operator
934d8fb2e Update generated files
976404a1a Update openshift/client-go to release-4.12
30061211b Add doc on rotating full RP env VPN certs (#3544)
5c96d9623 fix dev env panic in e2e
31af73410 [ARO-5368] Try and log the VM info + console log on failure (#3629)
7fabe1569 Fix disk encryption set in a different place and make generate again
8c5e5d6af Fix disk encryption set version and make generate
9bab3334b make generate
8889acfa4 Add comment to clarify purpose of apiVersions map
6e03c6018 Replace the compute API version with the latest stable version
1b6e0e758 Add controller to disable CPMS on ARO clusters (#3660)
f7c752b24 HOTFIX: correct local image names (#3682)
367a4799f Merge pull request #3600 from Azure/nwnt/trusted-launch-devproxy
3cd8bc51b Merge pull request #3617 from Azure/cadenmarchese/ARO-6449/go-script
6b30e877f Fix lint
6effeb126 Merge pull request #3594 from Azure/network-track2-rest
5f00bdb54 Change to DiskEncryptionSetIdentityType
2eb19ec6e Containerize tunnel (#3646)
001751784 Updates Test Suite To Use New GA API Plus Adds Missing Functionality To Our Internal Utility Clients (#3640)
46a75fa10 Architecting Local make ci-rp File To Allow Caching For Later (#3623)
f2d528d6b rename existing var with incoming
18c632f33 remove code comments
7ca11f46d address comments
e6f5d8740 unmarshal PlatformWorkloadIdentityRoleSetProperties instead
ab3d3ef81 Tweak script to read in a list of role sets from env var (as opposed to just one role set)
9f664c007 Fix a few nits
8a0597e7b Revert changes to API versioning in pkg/util/cluster - use same API version for everything
a51d0f3d3 new cmd to populate role sets in prod
a6dab8f38 add default role set, populate in dev cosmosdb
2d9d821c4 cluster.go
fe2027c74 generate
ec2b14853 securitygroups
032ec5b52 privatelinkservices
4f5b04694 privateendpoints
de3f34242 Use the correct API version for compute
2ec549920 Make dev-proxy use Trusted Launch

Full Changelog: https://github.com/Azure/ARO-RP/compare/v202400710.00...v20240723.00

enable SPP and identity mutability for testing ARO-6830

083aa5f3b 🚨DO NOT PUSH TO PRODUCTION🚨 enable principal/identity mutability
6f8a4acff improve testing of deny assignment generation

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240701.00-test...v20240712.00-test

Hive 256 Release

e711e610a Move to maintained yaml lib (#3454)
ff69ffef6 Merge pull request #3292 from tsatam/ARO-4632/operator-predicates
10e5de36b [ARO-7788] Don't overwrite default installer version in local dev (#3671)
d1198c6f6 Merge pull request #3665 from Azure/mociarain/ARO-8608-refactor
b70416074 Add new NASA codeowners to ARO-RP (#3672)
3db436013 Improve logging, handling of empty metric values
cf51f260a Emit cluster features enabled/disabled during cluster provisioning
a69a16029 Bump Hive Image to commit b1ac27b248159f179abf8c7e03e6ada5f17e86c0 - ARO-5063
354dbcb7b Merge pull request #3669 from Azure/bump-azdev
b9400c448 Merge pull request #3664 from Azure/s-fairchild/ARO-8852-hive-deploy-script
b6aec4e25 Merge pull request #3656 from Azure/tsatam/hotfix-increase-dev-proxy-vmss-disk-size
25a91572f fix lint error
4c1dec37a bump azdev
c36df7422 Merge pull request #3657 from Azure/dependabot/go_modules/github.com/gorilla/schema-1.4.1
309e84bbe In admin updates, update the Operator version and then update the Cluster object
699e9fb42 [doc] local-rp dev docs should mention registering the sub (#3666)
6b911872d Merge pull request #3655 from Azure/ARO-8608
446be7a32 Use consistent naming
783ea2464 Collect arguments in a struct
d496b021d Update hive documentation to include testing steps
e20e96f96 Fix up hive-generate-config.sh to accept a user provided hive commit
66a4a9bf9 Updating code owners (#3659)
786e0cf65 Fix unit tests
176a68d4b Add validation for default CIDR range (#3611)
26427cadf Merge pull request #3658 from jaitaiwan/srini-codeowner
f11df45e3 fix: Remove owners no longer with RH
c6ebd8ad0 feat: Add srini as codeowner
ec0b8c402 Merge pull request #3644 from Azure/hawkowl/e2e-trigger-fixes
2adcd63a9 Merge pull request #3641 from Azure/yjst2012/ARO-8531
66eb2f2f5 Bump github.com/gorilla/schema from 1.2.1 to 1.4.1
8fa599f55 Add todo for shared function
ecbc28d7d Revert "Add function to test if miwi enabled"
0c840e397 Revert "Add license"
9c166704c Increase dev-proxy-vmss OSDisk to 64GB
a100c615e Merge branch 'master' into yjst2012/ARO-8531
42daa8281 ARO-4373 resolve comments and parameter fixes
17805e912 ARO-4373 Enable Web Endpoint for the OIDC Storage Account
90fde763c ARO-4373 update mgmtstorage sdk to 2019-06-01 for disabling allowSharedKeyAccess
a485dcbf5 ARO-4373 change OIDCIssuer field to pointer
3fcdf91a4 ARO-4373 convert BoundServiceAccountSigningKey to *SecureString
57a64c739 ARO-4373 add RP Feature Flag EnablePublicOIDCBlobAccess
2388ad605 ARO-4373 additional unit tests and comments resolution
bd9a5b863 ARO-4373 resolve PR comments
e884fd810 ARO-4373 change BoundServiceAccountSigningKey SecureString to SecureBytes
c0621ea27 ARO-4373 add unit test cases
883f1cb0e vendor changes for ARO-4373
5c6ca9d82 ARO-4373 generate keypair and oidc docs for miwi clusters
47c214a36 ARO-4373 add the BoundServiceAccountSigningKey to ClusterProfile
80651af83 ARO-4373 set envs for storage account name and AFD endpoints
0cdcd00c9 Add license
524b396b7 Add function to test if miwi enabled
2c53a3157 Revert "Add util for checking miwi cluster"
681810f48 Add util for checking miwi cluster
56ed7ae2b fix error naming
a0a5d22a0 Further refactor the code
d76314eb9 Add unit tests
401380f57 fix put/patch
7ee903f81 Add tenant ID to Identity struct
ce6152db5 Use track2 SDK in updateAPIIPEarly (#3638)
ae26d7660 Mirror two Microsoft Geneva images (#3635)
f384df3f2 Add ose-tools-rhel8 for 4.15 (#3649)
8f132a763 Update documentation on go-verify changes
5e40a61a6 Add new makefile targets for go mod verification
a8ee84c50 [ARO-4562] Migrate DNS to track2 SDK, arm dns client creation. (#3625)
7dfe2d545 test
c0cfe2f19 fix triggering of CI + E2E
7590d55b5 Merge pull request #3614 from Azure/tony-schndr/ARO-7414-e2e-sub-migration
835352dd2 Adding logging statements for pullsecret controller (#3613)
34b40c4ec fix multi line commands
aa3cb6949 remove provisioning state from arm template
5338e08f2 fix AzSecPack managed identity resource id
aefd34e97 bump hive version
11948e3e4 doc fixups
51157b4f9 adding test using openshift-marketplace ns
0f25a74dc update guardrails protected namespaces list
6997415b8 Merge pull request #3639 from Azure/kimorris27/ARO-8423
47289ba59 make client
b9aba8ee6 Add new Identity field to OpenShiftCluster swagger API spec
fab8715f3 adjust DataContributorRoleAssignement scope for development databases
f02c46b84 generate after rebase
458b1a480 fix e2e test
d37750004 doc update
90525cf4b add database role assignements to the RP Service Principal
9f5b045f3 skip Geneva Logging test if rp is in development mode
b9446b567 remove trailing whitespace
fc82bd978 use variable for csp vault name
5974f9fec Exclude "Geneva Logging" test
aa639d16d update documentation
49db8b5e9 delete acr-credentials.json
a4794ce15 fix copy/paste error
b5795e460 update aro-classic-e2e to use generated acr credentials
225a66034 add function and template to deploy e2e global keyvault
51dffba27 use pipeline variable to set SECRET_SA_ACCOUNT_NAME
6dd5a5c7a cutover to new aro e2e classic keyvault
d4041ca9e update az cli command
b3d314065 add functions and related assets to deploy shared e2e environment to new tenant
08bf84c32 Only watch for generation (spec) changes on ARO cluster resource in most controllers
397e898fd Extract duplicated predicates to common predicates pkg

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240618.00...v202400710.00

update canary testing exclusions

f215e9dec 🚨DO NOT PUSH TO PRODUCTION🚨 enable principal/identity mutability
6f8a4acff improve testing of deny assignment generation

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240701.00-test...v20240710.00-teset

set ServicePrincipalProfile and PlatformWorkloadIdentityProfile as mutabile

for testing purposes only

7d067d7e5 🚨DO NOT PUSH TO PRODUCTION🚨 enable principal/identity mutability
6f8a4acff improve testing of deny assignment generation

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240701.00-test...v20240708.00-test

aro update_role_sets

261f4f54d rename existing var with incoming
0b91cf9c1 remove code comments
92f2c3914 address comments
a65f34d21 unmarshal PlatformWorkloadIdentityRoleSetProperties instead
1f14aa7c0 Tweak script to read in a list of role sets from env var (as opposed to just one role set)
f2918ec3d Fix a few nits
18db629bd Revert changes to API versioning in pkg/util/cluster - use same API version for everything
795cbe411 new cmd to populate role sets in prod
5bd5b8f03 add default role set, populate in dev cosmosdb

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240618.00...v20240702-test

testing exclusion of cluster identities from deny assignment

05409892a Exclude platform identities from permissions denial
8f132a763 Update documentation on go-verify changes
5e40a61a6 Add new makefile targets for go mod verification
a8ee84c50 [ARO-4562] Migrate DNS to track2 SDK, arm dns client creation. (#3625)
7590d55b5 Merge pull request #3614 from Azure/tony-schndr/ARO-7414-e2e-sub-migration
835352dd2 Adding logging statements for pullsecret controller (#3613)
34b40c4ec fix multi line commands
aa3cb6949 remove provisioning state from arm template
5338e08f2 fix AzSecPack managed identity resource id
aefd34e97 bump hive version
11948e3e4 doc fixups
6997415b8 Merge pull request #3639 from Azure/kimorris27/ARO-8423
47289ba59 make client
b9aba8ee6 Add new Identity field to OpenShiftCluster swagger API spec
fab8715f3 adjust DataContributorRoleAssignement scope for development databases
f02c46b84 generate after rebase
458b1a480 fix e2e test
d37750004 doc update
90525cf4b add database role assignements to the RP Service Principal
9f5b045f3 skip Geneva Logging test if rp is in development mode
b9446b567 remove trailing whitespace
fc82bd978 use variable for csp vault name
5974f9fec Exclude "Geneva Logging" test
aa639d16d update documentation
49db8b5e9 delete acr-credentials.json
a4794ce15 fix copy/paste error
b5795e460 update aro-classic-e2e to use generated acr credentials
225a66034 add function and template to deploy e2e global keyvault
51dffba27 use pipeline variable to set SECRET_SA_ACCOUNT_NAME
6dd5a5c7a cutover to new aro e2e classic keyvault
d4041ca9e update az cli command
b3d314065 add functions and related assets to deploy shared e2e environment to new tenant

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240618.00...v20240701.00-test

Hotfix release 255, including #3636

75a681ed6 Merge pull request #3636 from Azure/tiguelu/hotfix-revert-track2sdk-usage
5fc606791 Reverting usage of SDK track2 clients from #3579
a42f1acad Use newer default dev kubernetes version (#3601)
bd3a12fca Merge pull request #3621 from vinaybommana/ci-guardrailpolicies
e44a82606 Merge pull request #3630 from Azure/hawkowl/cleanup-log-lines-steps
e57930cfb add better comments
ec12eb5f5 cleanups
a33264f00 use an instantiated struct for this test, like the real steps
da4b09a2f fixes
0de597a07 reduce the amount of package names in the logs
ba7566fb0 splitting oneliner
121b140e3 seperated gatorcli and opa install steps
3dfafbd10 added github actions for guardrail policies

Full Changelog: https://github.com/Azure/ARO-RP/compare/v20240614.00...v20240618.00