Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
devel:kubic
hypershift
hypershift.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File hypershift.changes of Package hypershift
------------------------------------------------------------------- Tue Nov 12 08:34:25 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.51: * NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys * HOSTEDCP-2070: render keyvaultName and KeyVaultTenantID during azure infra creation * HOSTEDCP-2070: add az cli to e2e dockerfile * Update Konflux references * Add audit-logs container to kas deployment manifest * Run make update * Add docs, validations and on creation UX tests for NodePool API * Refactor openshift-apiserver * Update Konflux references * Configure OAuth https proxy to dial cloud endpoints directly * Update Azure CLI to default to Persistence * Remove default wording on Persistence in Azure API * Add API promotion criteria * OCM-12313: expose NodeStartupTimeout in MHC as annotation in HC/NP * OCPBUGS-44221: remove hard dependency on kubeconfig for hypershift CLI * NO-JIRA: remove namespace wide node check on nodepool specific tests * HOSTEDCP-2000: Add E2E test validating the node runtime * OCPBUGS-42422: Fix order rendering HCP objects * Update Konflux references * NO-JIRA: Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 * Add rpms-signature-scan task * Cleanup openshift-route-controller-manager * Refactor openshift-controller-manager * HOSTEDCP-2070: add e2e flags for controlling AKS keyvault name and tenant ID * Remove KAS azure-cloud-config volume * Refactor cloud-controller-manager * OCPBUGS-36387: resource group not found should not prevent azure infra deletion from proceeding * OCPBUGS-43985: failure to retrieve techPreview CM in azure cli should be a warning * OCPBUGS-44001: handle errors returned by createServicePrincipalWithCertificate command * OCPBUGS-43943: add retry timeout to nodepoolUpgradeTest * go.mod: add orc living in CAPO * openstack: v0.11.0 code adjustments * Run `make update` * vendoring: bump CAPO to v0.11.0 * openstack: Add tests for extractCloud * openstack: Add TODO to deprecate --openstack-credentials-file option * openstack: Support reading cacert from clouds.yaml * openstack: Only upload the cloud we want * HOSTEDCP-2046: Parametrize Control Plane Dockerfile * refactor kube-controller-manager * Update Azure CLI to authenticate with SP w/certs * Prevent kubevirt from removing valid machine config condition * refactor ETCD * Move left over conditions funcs into their own file * Fix consumption of new fields * Run make update * Add azure API changes * allow templating for registry overrides and azure KV client id * introduce helm chart generator cmd * chore(deps): update konflux references * Add API label * NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys * OCPBUGS-43756: add WaitForNodePoolConfigUpdateComplete function * refactor kube-apiserver * Run make update * Delete manual CRD overrides for alpha * Delete v1alpha1 API, references and conversion * OCPBUGS-43756: update eventuallyDaemonSetRollsOut to only watch ready pods * Document how to disable kubevirt csi * Move NTO reconcile logic into their own file * make ControlPlaneComponent.status.version optional * remove redundant unit tests * cmd: add support to configure machine networts via CLI * OCPBUGS-41365: dont use registryOverrides on kube rbac proxy image because its used in dataplane ------------------------------------------------------------------- Fri Oct 25 18:49:15 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.50: * Make api module dependencies consistent with main module dependencies * Update upstream Azure and AKS docs * Update AKS contrib docs * doc/openstack: install operator with `--tech-preview-no-upgrade` * Add crd override for NodePool scale subresource * nodepool/openstack: AZ support for the Machine * HOSTEDCP-1472: update npPrevTest to use RFC 1123 nodepool name * dump: make ControlPlaneComponent's GKV optional * Add generic create function for SecretProvider * chore(deps): update konflux references * cpo: produce valid oauth config even if idp config is invalid * Fix deleteConfigByLabel to only delete within controlPlaneNamespace * HOSTEDCP-2002: fix typo in doc commands * chore(deps): update capz to v1.17.0 * Drop type from the signature * Move NodePool conditions logic into their own file * Let conditions getting the token secret to not shortcircuit when is not found * Refactor NodePool conditions into a centralized loop * Put MI API behind HyperShift FeatureGate * Add Managed Identity Support in Azure HC API * use get listDigest function signature in resource and olm reconciles * HOSTEDCP-1883: add init containers to catalog images * HOSTEDCP-1883: Remove hardcoded catalog images in CPO so we dont have to manually bump them each release * Split API into platform files * chore(deps): update konflux references * HOSTEDCP-2002: Add documentation around crun migration for HCP * NO-JIRA: Bump the azure-github-dependencies group with 2 updates * KubeVirt CSI Security and Isolation Documentation * Pass Azure key vault MI's client ID to the CPO * Add flag for Azure key vault user for ARO HCP * enforce volumes defaultMode to be consistent * Run make update * Add docs for feature gates * Add test for preveniting OpenStack if NO TechPreviewNoUpgrade * Introduce feature gate support for install and the HO * Add README.md for ControlPlaneComponent * Introduce openshift markers support and generate CRDs * Pass feature flags to clusterpolicy controller * chore(deps): update konflux references * Revendor tools to bring o/api codegen and openshift/controller-gen * Add code changes to bring o/api codegen and openshift/controller-gen * refactor HCCO component * add ValidIDPConfiguration condition to report IDP config issues * HOSTEDCP-1472: add CP with n-2 NP test * Introduce ControlPlaneComponent CRD * chore(deps): update konflux references * e2e: use TechPreviewNoUpgrade feature set in TestCreateCluster * Add support for static control plane operator overrides * e2e: rename file to avoid IDE errors * openstack/e2e: re-work nodepool tests * NO-JIRA: Bump the golang-dependencies group with 3 updates * move resource.k8s.io to v1alpha3 for kube 1.31 * Add Secrets Store CSI RBAC policies to HO and CPO * Add function to determine if ARO HCP deployment * cli: add feature-set flag to create cluster * Allow setting the VPC CIDR when creating AWS infrastructure * Add secrets-store-csi-driver to go.mod * Enforce EnsurePSANotPrivileged for 4.18 and later * Remove vendoring related to removing MI creation * Remove infra create MI for Azure NP * statically link CLI binaries * HOSTEDCP-2009: change from NumberOfProbes to ProbeThreshold * Do not send traffic to local audit-webhook through konnectivity * Create separate secrets for Azure disk and file * Use guest DNS resolution in Konnectivity HTTPS proxy by default * Document HCP KubeVirt GPU device usage * NO-JIRA switch to using ptr instead of pointer * Fixes kubevirt image cacher * Add network policies for konnectivity server and ignition server proxy ------------------------------------------------------------------- Fri Oct 11 08:25:35 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.49: * chore(deps): update konflux references to cf9edf8 * OCPBUGS-42737: add nil check to etcdRecoveryActiveCondition when coll… (#4846) * OCPBUGS-39369: Add new VAP for Infrastructure object * OCPBUGS-39369: Add TokenMinter container and RBAC for the CNO * Update mermaid version for mkdocs * NO-JIRA: disable ensurePSANotPrivileged test on <4.17 * openstack: Support clouds.yaml discovery, different cloud names * trivial: Inline clouds.yaml validation * e2e: skip ValidKubeVirtInfraNetworkMTU condition check on 4.14 and earlier * refactor cluster-autoscaler and route-controller-manager components * introduce ControlPlaneComponent abstraction * Vendor required AWS client files * CLI: Add support for shared VPC infrastructure * Add support for SharedVPC * Add documentation for KubeVirt hosted cluster backup and restore * OCPBUGS-42100: Run 2 replicas of active/passive HA components * Fix recover-etcd cmd marking a missing flag required * feat(ignition): Add option to disable ignition server reconciliation ------------------------------------------------------------------- Wed Oct 02 05:38:54 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.48: * chore(deps): update konflux references * Rearrange validations * Move platform specific logic into their own files * NO-JIRA: Bump the azure-github-dependencies group with 2 updates * OCPBUGS-42306: e2e for change additionaTrustBundle creating a new token * HOSTEDCP-1788: use getResourceGroupName when attempting to delete resourceGroups in azure/destroy/infra * e2e: openstack: fix nil deref in route53 teardown * Retry reconciliation with invalid configuration * add dockerfile for e2e * NO-JIRA: clarify use of render and render-sensitive cli flags * Refactor capi logic out from NodePool controller * HOSTEDCP-1871: Add multi-arch validation for Azure platform (#4538) * HOSTEDCP-1732: add PDB to sharedIngress router pod for HA * Update Konflux references to 5ac9b24 * e2e: add service and cluster CIDRs as flag to the e2e framework * Add Dockerfile.dev to build all-in-one container image for development purposes * Update Konflux references * OCPBUGS-42306: hash additionalTrustBundle as part of ignition config if present * Fix docker check 'AS' as uppercase in container and docker files * Update Konflux references * cmd/dump: add OpenStack CAPI resources * remove unused make targets * remove renovate.json * remove fast.Dockerfile * remove .ko.yaml * remove CPO/CPPKIO from the hypershift-operator image build * hypershift-operator/controllers/hostedcluster: Do not propagate Unknown ClusterVersionRetrievedUpdates * Create separate worker and vpc endpoint security groups * test/e2e: add version gating for 4.14 * NO-JIRA: Remove hack for CI in 4.11 release * wrap nodePool tenancy API field in Placment struct * HOSTEDCP-1788: Create seperate RGs for NSG and VNet * vendor/github.com/openshift/hypershift/api/hypershift/v1beta1: Update to pick up ClusterVersionRetrievedUpdates * docs/content/reference/api: Update to pick up ClusterVersionRetrievedUpdates * *: Propagate RetrievedUpdates from ClusterVersion up to HostedCluster * OCPBUGS-32592: Add Annotation to skip deleting hcp namespace * Add API status field to track AWSEndpointService security group * Allow the control plane operator to finish deleting VPC endpoint for PrivateLink clusters * OCPBUGS-41992: Sanitize ignition payload * Refactor nodepool token management * NO-JIRA: Add dccache entry into gitignore * chore(deps): update konflux references * e2e: add version gating for 4.15 * OCPBUGS-41935: Sanitize the IgnitionPayload (XSS) * HOSTEDCP-1965: Ignore vendor and resources.go from snyk code test * Refactor config generation for NodePool * Add log for ignition provider using mirrored release image * NO-JIRA: Bump the azure-github-dependencies group with 4 updates * Fix failed to reconcile oauth client secrets error message * Conditionally manage the IngressOperatorKubeconfig secret in the hosted control plane * Conditionally manage the DNSOperatorKubeconfig secret in the hosted control plane * e2e: add version gating for 4.16 * Add EncryptionAtHost to create azure cluster CLI * e2e: add version gating for 4.17 * OCPBUGS-38425: Return the right tagReference on Catalogs ImageStream * Set EncryptionAtHost in NodePool controller * Add EnableEncryptionAtHost to the CLI * Add EncryptionAtHost to Azure NodePool API * add install render option to write manifests to file * Add external kas address to no proxy skip list * HOSTEDCP-1942: Add functional tests for ETCD Recovery * HOSTEDCP-1940: Add alert for Etcd recovery * Add TestProviderWithOpenShiftImageRegistryOverridesDecorator_Lookup unit test * Let payload generation pick the release for the NodePool * NO-JIRA: Bump the golang-dependencies group with 4 updates * docs: add diagram to konnectivity reference * Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca * Updating ose-hypershift-container image to be consistent with ART for 4.18 Reconciling with https://github.com/openshift/ocp-build-data/tree/827ab4ccce9cbbcf82c9dbaf6398b61d6cff8d7a/images/hypershift.yml * CPO oauth idp converter: resolve names before dialing ------------------------------------------------------------------- Sat Sep 14 14:55:02 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.47: * Use http dialer when dialing through proxy * HyperShift operator: Allow setting Kube APIServer maximum requests in flight * Add oauth domain for kas cert * OSASINFRA-3584: openstack: remove support for floating IP * Fix uses of MustParse* on non-constant input * NO-JIRA: Bump github.com/opencontainers/runc from 1.1.12 to 1.1.14 * chore(deps): update konflux references * Fix multi-arch validation by prioritizing ReleaseImage check * Add unit test to validate mco binaries are extracted as expected * handle version skewed NodePools that do not have rhel9 binaries * Automatically recover etcd * OCPBUGS-24400: Add annotation to delete an ETCD failing member * Trigger SharedIngress reconcilation immediately on start * Remove sbom-json-check from tekton files * chore(deps): update konflux references * chore: organize install command for readability * NO-JIRA: Bump gotest.tools/gotestsum * tolerations docs * Expose AWS Tenancy through NodePool API * OpenStack: don't create a dedicated service for Ingress * Use machineTemplateSpec for Azure in NP controller * openstack: handle DNS for ingress in e2e * Revert "e2e/util: override CLUSTER_NAME for platform OpenStack" * Set Image as mutable in Azure NodePools * Add --labels hcp cli arg for adding labels to HostedCluster ------------------------------------------------------------------- Sat Sep 14 14:46:27 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.46: * regroup KAS certs into public and private certs * use hostedCluster.Status.Version as latestSupportVersion for NodePools * e2e: skip VAP checks if platform is None * copy image-registry AdditionalTrustedCA configmap into HC openshift-config * Fix CAPA ROSA feature gate being set on releases where its not available * Join default port to .Configuration.Proxy.HTTPSProxy if missing * Fixed NodePool version validation * fix: fix a typo in the architecture doc * allow changes to infrastructures global config for Openstack ------------------------------------------------------------------- Sat Sep 14 14:24:25 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.45: * Remove go workspace * OCPBUGS-38925: copy oapi ca-trust recursively when building trust anchor ------------------------------------------------------------------- Sat Sep 14 14:15:50 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.44: * NO-JIRA: add 4.14 and 4.15 HO base images to docker cve scan scripts * Update Konflux references * Use infraID from infra-json if provided * external-dns: add proxy env vars if cluster proxy is configured * OCPBUGS-38183: add noroot-v2 SCC to cluster-storage SA * [kubevirt] Fix KubeVirtNodesLiveMigratable condition for NodePools with 0 replicas * OCPBUGS-39183: Update CSO deployment file * HOSTEDCP-1483: update cloud-credential-operator in go.mod * OCPBUGS-34816: Block data plane HC configuration requests * Pause CAPI cluster when HostedCluster is paused * remove unused ROSA/EKS CRDs from hypershift install * chore(deps): update golang docker tag to v1.23 * Add networking-console-plugin image to CNO as env var * cpo: separate KAS cert into internal and external * OCPBUGS-36680: ensure additionalTrustBundle propogates to workers * OCPBUGS-38409: Update CPO and HO base images to 4.18 * openstack: Don't allow unsupported --external-dns-domain * Fix bug where nodes were not triggering dedicated serving reconciliation * disregard sharedingress in Route labeling decision * OSASINFRA-3553: relax PodAffinityTerm for zone spreading in HA * HTTPS proxy: do not proxy communication to cloud providers * OCPBUGS-38467: allow for shared-ingress router pod creation without pullsecret * NO-JIRA: add docker script to find package versions in HO & CPO * nodepoolcontroller: \`List()\` PerformanceProfile status per NodePool * fix(KONFLUX-3663): upload SAST results to quay.io Configure the SAST task to upload SARIF results to quay.io for long-term storage * OCPBUGS-34816: Configure user for HCCO ------------------------------------------------------------------- Fri Aug 16 18:26:07 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.43: * Fix CEL rules in the CRD * fix(builds): main should not build mce-2.7 HO * chore: Remove hard-coded konnectivity image URI * HOSTEDCP-1764: retrieve registryOverrides when ImageStream is not ava… (#4453) * Bump 'LatestSupportedVersion' to 4.18.0 after branch-out * Support configuring Azure diagnostics via CLI flags * chore(deps): update konflux references * label routes only when HCP router used * chore(deps): update quay.io/openshift/origin-base docker tag to v4.16 * chore(deps): update golang docker tag to v1.22 * Remove saas_template.yaml * OCPBUGS-38183: make use of azure-disk-driver-control-plane-image * KubeVirt: add label to DataVolume * docs/openstack: fix typo * hcp/kas: disable encryption config auto reload * test/e2e: test KMS v2 on AWS * hcp/kas: support kms v2 for AWS * Update version support docs * openstack: add missing AutomountServiceAccountToken to CCM * openstack: add missing resources fields to CAPO * e2e/util: override CLUSTER_NAME for platform OpenStack * e2e/openstack: support cluster destroy * Update upgrades doc * Support Arm NodePools from a Marketplace Image * Allow setting Kube APIServer maximum requests in flight * openstack: ingress API & octavia ingress provider * Support Marketplace Image for Azure NodePools (#4191) * test: e2e: handle 409 conflict in EnsureHostedClusterImmutability * Remove BASE_IMAGES_DIGEST * Update Konflux references * Remove BASE_IMAGES_DIGEST * Update Konflux references * cso: add environment variable for tools image * OpenStack: Use external network ID in favor of Name * Add first azure services validation * Revert "OCPBUGS-24400: Recover the ETCD member on HostedCluster deployment" * Revert "Only recreate etcd if hasn't ever been ready" * Remove non relevant OVNSbDb service type declarations * add VPC Endpoint Service proxy support * set proxy envvars on aws anda azure CCMs * Make hostedcluster.spec.services immutable * Use a multi-arch haproxy image for shared ingress * Create konnectivity dialer for CPO oidc checks * Use HTTP proxy for ingress controller * NO-JIRA: Flaky cert validation test * docs/openstack: adds content for Ingress with MetalLB * Set default release stream for HCP CLI * Add release-stream flag to default core flags * Default multi-arch flag to true for HCP CLI * Add Kubevirt live-migratable condition for HC and NP * OCPBUGS-37703: fix release stream flag/rhcos image for create cluster azure * fix(builds): mce-2.7 enablement for main * OSASINFRA-3546: openstack: document how to create a cluster * Update IBM go sdk * e2e: test that `PerfromanceProfile` status is being reported * nodepoolcontroller: unit tests for SetPerformanceProfileStatus * nodepoolcontroller: align code to left * nodepoolcontroller: report performance profile status in `NodePool` * nodepoolcontroller: performance profile conditions * HOSTEDCP-1776: Set KCM node monitor grace period * Add HTTP konnectivity proxy to OAuth server * OCPBUGS-36689: Omit the unused 0000_50_olm_06-psm-operator.service.yaml and 0000_50_olm_06-psm-operator.servicemonitor.yaml manifests as they're breaking Prometheus discovery * Ensure VolumeSnapshots are deleted during cloud resource cleanup ------------------------------------------------------------------- Mon Jul 29 17:58:25 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.42: * chore(deps): update konflux references ------------------------------------------------------------------- Mon Jul 29 17:52:54 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.41: * Update AWS multi-arch docs to include migration * DedicatedRequestServing scheduler: make taken labels list consistent ------------------------------------------------------------------- Mon Jul 29 10:41:28 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.40: * Set right endpointSlice port * HOSTEDCP-1791: dont render any secrets in manifest file * Only recreate etcd if hasn't ever been ready * Fixing credentials for OpenStack * Refactor multi-arch validation algorithm * openstack: small fixes for CLI * Get MachineIdentityID from NodePool CR * Move MachineIdentityID to Azure NP API * OCPBUGS-34820: Keep in sync the HC and HCP ICS field * HOSTEDCP-1791: update azure cluster unit test * HOSTEDCP-1791: add renderSensetive flag * OSASINFRA-3312: OpenStack Node pools * OSASINFRA-3538: openstack: cluster CLI * Update tekton files for migration from 0.1 to 0.2 * chore(deps): update konflux references * Add ipam to cluster-api assets * HOSTEDCP-1836: Fix Snyk vulnerability with python deps * OCPBUGS-30282: Multiple MachineConfigs in one CM (#3695) * extract rhel9 MCO binaries for rhel8 based MCO images * Update rhcos image copy process in Azure infra CLI * Run `make update` * openstack: add CAPO deployment and OpenStackCluster object * fix(api): Nodepool CEL validation fix * Update go.mod to include azblob * NO-JIRA: Fix OADP backup objects * Document konnectivity in HyperShift * Separate ibmcloud kms encryption configuration types * Add ability to set tolerations on HC and HCP * Add hc.Spec.Tolerations deployment test * HOSTEDCP-1796: Customize the self-generated cert rotation * OCPBUGS-34816: Fix the resource from is checking the MHC platform * Add snyk helper scripts to contrib * OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None * Update Konflux references * OCPBUGS-24400: Recover the ETCD member on HostedCluster deployment * Add cluster-api-provider-openstack assets * Vendor openstack dependency * OCPBUGS-35905: E2E test to verify openshift-apiserver TLS certificates * Run `make update` * Run `make clients` * Start to add OpenStack support * HOSTEDCP-1795: Customize the self-generated cert validity (reduced version) * Fix name resolution for HTTPS konnectivity proxy * NO-JIRA: add ignition payload inspect docs * OCPBUGS-33934: Add newline after TLS certs referenced by image.config * use proxy-protocol-v2 for shared ingress * Update catalog annotation based on an OCP version * Default azure to run as managed-service=aro * vendor: import k8s.io/utils/set * hypershift:nodepoolcontroller: mirror containerruntime to HCP NS * fix(build): update to the fixed clamav image * hypershift:performanceprofile: associate profile name with user input * util: make `shortenName` public * Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer * Add net policy to allow ingress from sharedingress namespace * OCPBUGS-34820: Delete IDMS in dataplane once HCP ICS field is removed * Remove Steve Kuznetsov from approvers/owners * Set Azure VM ident if user assigned identity set * Dump capz azure resources * Update Konflux references * OCPBUGS-36629: Update Mkdocs, dependencies and dockerfile * HOSTEDCP-1716: When running the HO locally it should no required a running pod * Dump shareingress manifest * KubeVirtJsonPatchTest: fix vmi slice assignment * OCPBUGS-36481: Fix Hypershift dump for non-OpenShift Management Clusters (#4307) * Let cmd unit tests run without a running Kubernetes cluster * Update AKS contrib docs * e2e tests: skip checking ValidKubeVirtInfraNetworkMTU if no workers * Enhance aks docs * Revert "HOSTEDCP-1778: Enable MultiArch flag by default" * HOSTEDCP-1778: Enable MultiArch flag by default * [Kubevirt] Add support for passing GPU devices to NodePools * NO-JIRA: skip validate metrics on azure e2e * Add release notes to commit and print proper output when release errors * remove weak ciphers from security profile * chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 * chore(deps): update konflux references * NO-JIRA: fixup azure aks docs * NO-JIRA: skip multiarch test before HC creation * Move infra-volumesnapshot-class-mapping to core binding * vendor update * test/e2e: remove api budget checks * hcco: reconcile apiserver config into hosted cluster * Use a reconciled proxy config when generating nodepool userdata * test/e2e: use the eventually construct * test/e2e: remove redundant or unnecessary logging * test/e2e: eventually: update functionality * hypershift-operator: don't remove conditions, set false * test/e2e: send commandline output to files * cmd: always pass loggers, honor them * Makefile: add a target to compile tests * Update HC on AKS doc for new flags for infra * kubevirt-csi-driver: Pass infra kubeconfig in case of external infra * cmd/cluster/kubevirt: add a test from dvossel * Allow PublicAndPrivate or Private clusters to be created with LB KAS. Update guest cluster components to use the correct port to communicate with KAS.. * Update Konflux references * test/e2e: tar.gz hosted cluster content * enable audit log for oauth-openshift * Add new metrics to check CA bundle validity and expiry. * Update ci image of capk to 4.17 ------------------------------------------------------------------- Wed Jun 26 05:12:41 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.39: * Keep old user data for aws < 4.16 * HOSTEDCP-1221: add heterogenous NP e2e * test/e2e: actually wait for guest cluster client * OWNERS: add stevekuznetsov * check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route * test/e2e: use the eventually abstraction in chaos test * test/e2e: round durations for brevity * test/e2e: add post-summary, verbosity toggle to eventually * HOSTEDCP-1684: remove CLI requirement for RG flag when NSG ID is supplied * CNV-30445: KubeVirt: Enable multiqueue by default * Fix the getting started page by adding export to BUCKET_NAME ------------------------------------------------------------------- Fri Jun 21 20:06:13 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.38: * chore(deps): update konflux references * chore(deps): update konflux references to ff44cf3 * HOSTEDCP-1729: Support for on-demand global routing when creating transit gateway * cmd/cluster/dump: ignore oc adm inspect error * test/e2e: quiet ssh logging * test/e2e: reduce logging on guest cluster infra cleanup * test/e2e: add a harness for asynchronous assertions * test: e2e: bump CPO mutate budget * Add more units for shared ingress * Fix port naming for sharedingress svc LB * Use 443 for shared ingress lb * chore(deps): update konflux references to 2be7c9c * Bump golang.org/x/net in /contrib/aws-tag-lb-service-webhook * cluster/core: fix nodepool naming * NO-JIRA: remove CI_TESTS_RUNS from e2e script as we now directly pass in test.run flag * Disable PersistentVolumeLabel admission plugin * fix storage table support with data tables mkdocs * test/e2e: default to amd64 for none, kubevirt * cmd: sort services for deterministic output * cmd: use seeds for randomness * cmd/cluster/azure/create: add a test case * cmd/nodepool/kubevirt: fixup test * cmd: add tests for create commands * cmd/cluster/azure: use the subnet id * cmd: use validated and completed opts pattern * Remove KMS V1 provider support for IBM Cloud * NO-JIRA: Fixing tests to avoid race conditions * Added markdown for storage table * Fix storage support table markdown * Transition kubevirt vms from affinity to topo spread constraints * fixed azure CLI not passing the correct platfrom spec infra * don't set HostedCluster.Spec.ClusterID for azure create * fixed infra-id not being defaulted first * Enable shared ingress for Azure * cmd/kubevirt: hide developer options on create * cmd/aws: hide developer options on create * cmd: DRY out create cluster flag binding * cmd/cluster: refactor to remove example fixtures * OCPBUGS-33428: Complete KAS migration to none endpoint reconciler type * Revert "kubevirt, e2e: Skip advanced multinet for CI" * hack: remove old arguments and scripts * feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform * test/e2e: misc context fixes: * HOSTEDCP-1514: explicit set bootdiagnostics to disabled by default azure NP * HOSTEDCP-1514: support Azure diagnostics on NodePools * Allow specifying the volume detach timeout for machines via NodePools * cmd/infra/aws/destroy: allow using component credentials * cmd/infra/aws: generate a delegating AWS client * cmd/infra/aws/iam: refactor static data * Add wait for rbac access to cluster image registry operator * Add the missing OPERATOR_IMAGE_VERSION required by the new addition of featuregate in the Image-registry operator ------------------------------------------------------------------- Wed Jun 12 13:36:13 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.37: * kubevirt, e2e: Skip advanced multinet for CI * OCPBUGS-33951: Documentation for disconnected MGMT Cluster * chore(deps): update konflux references * Add hypershift-cluster-version-operator image to release provider * hack: make the e2e script generic * test/e2e: always bound assertions in time * test/e2e: remove dead code * OCPBUGS-33953: Document how ICSP/IDMS work in HCP * hack/test: remove timeouts * Initialize infra id for e2e-azure tests * OCPBUGS-33952: Documented HCP service exposure * add missing Tag permissions to cli role * test/e2e: move node label check to ensure block * Don't try to refer to the openshift-sdn image * OCPBUGS-33952: Documented HCP service exposure * Bump controller-tools to 0.15.0 in /hack/tools * Bump github.com/opencontainers/runc from to 1.1.12 * Bump pod security to v0.30.1 * Remove duplicate logging statements when errors are also returned * Generate default worker security group rules based on machineCIDR * e2e/util: improve logging during node readiness poll * test/e2e/util: use wait.PollUntilContextTimeout * Add ability to create merge requests * Add ability to create a branch & push to gitlab * Only disable MachinePool for manager container in Azure * drop konnectivity-agent image reference * HOSTEDCP-1689: add PodMonitor for external-dns * feedback from pr comments * pr feedback for syntax + validate annotation is integer * rebase + merge conflicts * test/e2e: don't validate metrics after failure * test/e2e: explicitly constrain pod streams * test/e2e: constrain actions to context, timeout * Ensure VNET, NSG, & Managed RG locations match * Add tool to automate HO tag & commit updates in SD * drop kuryr CNI image refreneces * Fixed ValidReleaseInfo condition * nodepool_controller: add a reconciler for cleanup * Update unit tests * Allow access to root-ca configmap * HOSTEDCP-1687: include platform None as supported for amd64 and arm64 as it is used for dev purposes * HOSTEDCP-1687: correction for the the platform reference from nono to agent. * test/e2e: resolve dump dir once * test/e2e: checkpoint the output of cluster creation * cmd: add an option to render into a file, use it in e2e * NO-JIRA: unit test allow multi-arch baremetal arm64 node on none platform * NO-JIRA: unit test allow multi-arch baremetal amd64 platform * Fixes issue with cloud provider kubevirt not updating correctly * NO-JIRA: Allow addition of arm64 node to a baremetal platform ------------------------------------------------------------------- Mon Jun 03 15:17:10 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.36: * Add link to agent heterogeneous nodepools doc * OCPBUGS-34734: Fix disconnected metadata inspection for nodepool * Allow overriding hosted cluster size label * Fix fleet manager pair label check * *: use openshift/api instead of thirdparty for machineconfig * chore(deps): update rhtap references * chore(deps): update rhtap references * bump k8s.io/code-generator to 0.31 * turn GOWORK off for ./hack/tools * use go workspaces * cmd: report server version, supported OCP * add AWS STS URL to OIDC provider audiences * Prevent hypershift install render --template and --outputs from being used together ------------------------------------------------------------------- Thu May 30 14:35:33 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.35: * Use configmaps to track hosted cluster pair labels * update unit test * remove liveness and readiness probes that use the metrics endpoint from ingress and registry operators * Use operator namespace for openshift-config-managed-trusted-ca-bundle * Set controller concurrency to 1 and optimistic lock patching for DedicatedServingComponentScheduler* ------------------------------------------------------------------- Thu May 30 09:31:59 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.34: * Rename machine-config operator CRD references (#4058) * update Dockerfiles to use goang v1.22 * fixed some var names to better reflect their purpose * fix RegistryMirrorProvider modifying the cached image directly * apply changes required with controller-runtime bump * bump k8s to 0.30.1 and cluster-api to v1.7.2 * bump openshift/api * MULTIARCH-4668: Add how to doc for heterogeneous node pools on Agent platform * OCPBUGS-31446: Add TrustedBundles to OAS container * Fixed audit-logs sigterm failing to kill * Reconcile KAS endpoints and endpoint slice ------------------------------------------------------------------- Thu May 23 19:45:16 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.33: * Align kv min version to the default min version (now that default is >= 4.14) * test: relax mgmt KAS egress check * Allow specifying machine health check timeout in cluster sizing config * HOSTEDCP-1681: Skip konflux when not necessary * Do not scale down legacy nodes * Sync the autoscaler periodically * remove weak cipher ------------------------------------------------------------------- Wed May 22 17:39:16 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.32: * HOSTEDCP-1561: Move HCP Product CLI to STS (#4027) * Reinstate wrongly removed fields from cert rotation objects * chore(deps): update rhtap references * Make active & backup Azure KMS containers use different --metrics-addr * Modify token secret MCS hash in place * NO-JIRA: Bump library-go dependency * kubevirt, e2e: Add test for advanced multinet * make update * external-dns: setting higher priorityClass to external-dns pods due to default priority class, more likely this pod could be evicted by the scheduler to fit higher priorityClass pods if there is no available space on a suitable node. * Fix userReleaseProvider not using icsp/idms from mgmt cluster * Remove service-ca annot from azure csi & file svcs * fix router on 4.14 y-stream upgrade * Support Priority based expander for cluster-autoscaler * `make verify` artifacts changes * nto: add configmaps/finalizers under operator `Role` ------------------------------------------------------------------- Tue May 21 18:38:49 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.31: * hostedclustersizing: don't enforce concurrency on new clusters * hostedclustersizing: don't enforce delays on brand-new clusters * e2e: proceed with teardown even if dump fails * chore(deps): update rhtap references * Improve resliency of size tagging when hostedcluster KAS down * remove dns-operator leader-elect flags * Do not ignore single placeholder pods for a specific hosted cluster * Do not ignore SubnetID & NsgID flags in Azure HC * test updates round 2 * add resource preservation tests * Preserve container resource requests and limits * Cluster sizing controller: do not error on not found HC * restrict image registry overrides to control plane components * Bump IBM, AWS, ectd, & gomega dependencies * Update Azure SDK dependencies in go.mod * Bump CAPI dependencies * create cli aws sts role * use kms images from payload ------------------------------------------------------------------- Tue May 21 18:17:27 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.30: * fix nil dereference in clustersizingconfig validation * fixed azure using incorrect kms socket ------------------------------------------------------------------- Tue May 14 20:05:35 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.29: * Set NSG RG based on its ID for Azure CCM config * Autoscaler for non request serving nodes * Update azureutil to get NSG name & RG from NSG ID * Update SecurityGroupID API description * Change SubnetName to SubnetID in AzureNodePool API * Add additional details to AzureNodePool API * Set arch to ppc64le within PowerVS platform func * Add noproxy checks to run haproxy on dataplane and skip system proxy * Disable DNS resolution in konnectivity-socks5-proxy for CNO * Add an option to globally disable the DNS resolution in konnectivity-socks5-proxy * Remove CLI inspection of release image * MULTIARCH-4637: Support ppc64le arch for Agent and PowerVS platform * Get VNET name and RG info from the VNET ID * Use SecurityGroupID in CLI and CPO * Support BYO network security group * Get subnet name from its ID for Azure cloud config * Set time out for external snapshotter on kubevirt csi driver * Update HyperShift CLI to accept only subnet ID * Add additional details to AzurePlatform API * Remove VnetName from AzurePlatform API * Change SecurityGroupName to SecurityGroupID in API * Add SubnetID to Azure Hosted Cluster API * Update Konflux Dockerfile * Bump k8s to v0.29.3 ------------------------------------------------------------------- Tue May 14 19:55:38 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.28: * chore(deps): update rhtap references * Autoscaler: scale down unused machinesets * DRY out scoping predicate funcs * Add operator scoping support to nodepool controller * Updating ose-hypershift-container image to be consistent with ART for 4.16 Reconciling with https://github.com/openshift/ocp-build-data/tree/e5d353841cb99db680ca2f66af891f97569293d4/images/hypershift.yml ------------------------------------------------------------------- Tue May 14 19:43:58 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.27: * Update RHTAP references * Only apply RBAC if version <= 4.14 * Revert "Remove unused func causing verify issues" * Revert "Remove reconciliation for CPO ingress role setup" * Minor doc updates to creating Azure HC on AKS * sizing: add logging for what we're doing ------------------------------------------------------------------- Tue Apr 30 10:59:35 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.26: * Fix nil pointer deref when effects not specified in CSC * Add new parameters to pull and push files * chore(deps): update rhtap references * OCPBUGS-29110: Reconcile over ICSP/IDMS * chore(deps): update rhtap references * HOSTEDCP-1484: Disaster recovery documentation with OADP * fix setting replicas on autoscaler * Allow specifying resource requests per cluster size * Ignore subnet annotations for control plane load balancers * Add definitions & CEL for AzurePlatformSpec * Autoscaling test: Lower the memory request of load pods * support azure kms key rotation * Fix issue OCPBUGS-32492 Set ImportMode for catalog * disable OCM pull secret controller when imageregistry config managementstate is Removed * remove obsolete konnectivity image code * Ensure placeholder deployments are deleted * Fix invalid node selector in autosizing placeholder * Request serving scheduler: omit deleting nodes * Add arch & multi-arch flags to HCP CLI * OCPBUGS-31398: Recycler-pod image now points to the OCP Payload reference * Kubevirt on Azure: Change KAS LB Port to 7443 * add nodepools metric for telemetry * OCPBUGS-32255: Remove kube-scheduler readiness probe * Detect machine and cluster-network cidr collision ------------------------------------------------------------------- Wed Apr 24 18:58:36 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.25: * Update RHTAP references * Controller to assist autoscaling for placeholder nodes * Add mapping documentation for KubeVirt CSI driver snaphotting * chore(deps): update rhtap references * OCPBUGS-32487: Fix OLM intilization args * Remove any previous secrets if made by service-ca * Added external snapshot side car to kubevirt-csi-controller. Added rbac for driver to be able to create/delete snapshots. Added cli arguments to allow one to associated storage classes with volume snapshot classes. This association is used to determine if a volume snapshot class works with a storage class. * OCPNODE-2096: Add ClusterImagePolicy to the list of valid config manifests * Revert "Revert "HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters"" ------------------------------------------------------------------- Fri Apr 19 05:43:56 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.24: * chore(deps): update rhtap references * move reconcileCLISecrets after infraID is defaulted * generate infraID by default for all platforms * chore(vendor): Run make update * Update api/hypershift/v1beta1/hostedcluster_types.go * feat(api): Add ingress-controller-load-balancer-scope annotation * Disable kubevirt-csi crash detection in e2e * HOSTEDCP-1462: set HostPath.Type on volumesource in CloudNodeManagerDaemonSe to to match default value * fixed teardown failing the outer test instead of subtest * Revert "HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters" * Replace periods with commas in subnet label value * Docs:Avoid cidr Collisions b/w Infra &Guest cluster * chore(deps): update rhtap references * placeholders: ignore auto-sizer placeholders * use the api package constant for the size label * chore(deps): update rhtap references * OCPBUGS-29466: Fix ICSP and IDMS inclusion as registriesOverrides * Add doc for creating HC on AKS * Add AKS setup docs to contrib * Remove unused func causing verify issues * Skip ImageStream deletion when its API is absent * Reconcile auth reader for auth users in ARO HCP * Set CAConfigMap on CNO deployment * Reconcile serving cert secrets for services * chore(deps): update rhtap references * OCPBUGS-29494: Fix disconnected metadata inspection * [e2e test framework] Add a flag to add an annotation to HostedCluster * Document additional known issues for the disconnected scenario * Remove reconciliation for CPO ingress role setup * chore(deps): update rhtap references * disable autoscaler when no nodepool require it * update private cluster IAM policy * NO-JIRA: remove ovnkube-control-plane from expected component token mount list * Disable audit-log container when audit profile is None * `make update` artifacts * docs: fixing wrong key name * include hostnetwork SCC CPO role for 4.13 and earlier, never for IBMCloud * OSD-19085: Replaced hypershift_cluster_cores metric with hypershift_cluster_vcpus metric as the billing is per vCpu and not per core * NO-JIRA: Fix ValidAzureKMSConfig status to report unknown instead of false * kv, docs: Document using custom network as default * Support annotation scoping for hostedcluster resources * Revert "Remove '--attach-default-network' from productized cli" * bump capk ci image * update desired image even when HCP doesn't exist yet * Added regression tests ensuring certain deployment fields do not get set. * nto: add events resources under operator `Role` * OCPBUGS-29391: Add new permission required in CAPA * kubevirt: Generate kccm lb endpointslices * api/v1beta1/hostedcluster_types: Add spec.updateService * re-organize the code for better readability * differentiate behaviour based on IBMCloudProviderType * use dnsPolicy: Default for konnectivity-agent in data plane for all provider * Set RUN_AS_USER if mgmt cluster doesn't have SCC * Fix docs commands related to Azure ephemeral OS disks * disable http2 for ignition server and proxy * Update RHTAP references * Set control plane to HA by default * Add overview docmentation for HCP KubeVirt Storage * Add --auto-repair flag to hcp create nodepool ------------------------------------------------------------------- Thu Apr 11 13:22:47 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.1.23: * OCPBUGS-31465: remove max function usage from deicated request serving nodes * Reduce audit-log file size for hypershift apiservers * copy issuerCertificateAuthority configmap into HC openshift-config * Request serving node scheduler that uses HC size label * HOSTEDCP-1462: Add subnet name to Azure platform options for e2e * HOSTEDCP-1462: Enable TestNodePool and CreateCluster tests on Azure ------------------------------------------------------------------- Thu Apr 11 13:22:23 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de> - new package hypershift: OpenShift Hypershift CLI
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
