github-actions[bot]
e20ef02a6a
[Backport release-1.4] Feat: enhance controller auth by removing useless features & add authentication for componentrevision+healthcheck ( #4023 )
...
* Feat: use application identity in gc & componentrevision & collectHealthStatus
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
(cherry picked from commit 63fc4bcc69yd219913@alibaba-inc.com >
(cherry picked from commit f4ef77b2b3yd219913@alibaba-inc.com >
(cherry picked from commit 75f3d5dc35yd219913@alibaba-inc.com >
(cherry picked from commit e69079bdaeyd219913@alibaba-inc.com >
(cherry picked from commit 05b85573a2yd219913@alibaba-inc.com >
2022-05-27 16:00:04 +08:00
Xiangbo Ma
fc078bbd93
Feat: extend apply-once to allow specified path configuration to drift ( #3899 )
...
Signed-off-by: fourierr <maxiangboo@qq.com >
2022-05-17 16:29:16 +08:00
Somefive
0529ad8581
Fix: ignore no kind match error in gc ( #3861 )
...
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
2022-05-11 12:41:14 +08:00
Somefive
512664b9b3
Feat: support dependsOn in deploy workflowstep ( #3750 )
...
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
2022-04-28 16:29:34 +08:00
Somefive
2d28fb35eb
Feat: multi-cluster authentication ( #3713 )
...
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
2022-04-24 14:48:26 +08:00
Tianxin Dong
7eb0002692
Feat: add sequential in gc policy ( #3701 )
...
* Feat: add sequential in gc policy
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* tidy the code
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* add suite test
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* add example docs and update the field
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* fix lint
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* change the name to dependency
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
2022-04-22 16:34:07 +08:00
Somefive
c5e1855a55
Feat: support disable legacy gc upgrade operation ( #3694 )
...
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
2022-04-18 17:05:47 +08:00
Tianxin Dong
21216055fb
Feat: add vela debug command ( #3580 )
...
* Feat: add debug configmap if debug policy is specified
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* Feat: add vela debug command
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* make code reviewable
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* fix sonartype lift
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* fix cue string
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* Feat: display better for debug
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* tidy the go mod
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* Feat: add debug test
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* change uitable vendor
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* add more tests
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* pass resource keeper from handler
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* fix lint
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* fix rebase
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
* Pending test temporary
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com >
2022-04-18 11:06:14 +08:00
Somefive
9fc992ea3e
Fix: concurrent write to controller revision ( #3520 )
...
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
2022-03-27 19:56:25 +08:00
Somefive
741544c00c
Feat: rework apprev ( #3498 )
...
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
2022-03-24 14:40:19 +08:00
Sunghoon Kang
1300a980f0
Feat: reconcile app with scoped permissions ( #3434 )
...
* Refactor: refactor multi cluster round trippers
Before adding more RoundTrippers, it would be better to expose common
logic in the utility package.
This commit exports `tryCancelRequest` at `utils` package, and make
`secretMultiClusterRoundTripper` implement `RoundTripperWrapper`
interface to allow chaining multiple round trippers.
Refs #3432
Signed-off-by: Sunghoon Kang <hoon@linecorp.com >
* Feat: reconcile app with scoped permissions
Currently, all Application resources are reconciled by the Roles bound
to the controller service account. This behavior gives us the power to
manage resources across multiple namespaces. However, this behavior can
be problematic in the soft-multitenancy environment.
This commit adds `serviceAccountName` to ApplicationSepc to reconcile
Application with the given service account for reconciling Application
with scoped permissions.
Refs #3432
Signed-off-by: Sunghoon Kang <hoon@linecorp.com >
* Refactor: extract context setter as method
https://github.com/oam-dev/kubevela/pull/3434#discussion_r825561603
Signed-off-by: Sunghoon Kang <hoon@linecorp.com >
* Feat: use annotation instead of spec
https://github.com/oam-dev/kubevela/issues/3432#issuecomment-1066460269
Signed-off-by: Sunghoon Kang <hoon@linecorp.com >
* Refactor: unify service account setter caller
https://github.com/oam-dev/kubevela/pull/3434#discussion_r825853612
Signed-off-by: Sunghoon Kang <hoon@linecorp.com >
* Refactor: rename GetServiceAccountName
https://github.com/oam-dev/kubevela/pull/3434#discussion_r826514565
Signed-off-by: Sunghoon Kang <hoon@linecorp.com >
2022-03-15 11:55:50 +08:00
Somefive
19424cfaa4
Fix: add state keep for healthy suspend ( #3426 )
...
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
2022-03-14 14:38:43 +08:00
Somefive
d5e8b68ad2
Fix: rework parallel execution for ApplyComponents and ResourceKeeper Dispatch ( #3407 )
...
* Fix: applyComponents lock and rework parallel execution
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: rename
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
2022-03-10 16:43:22 +08:00
Somefive
de81c24f42
Feat: support standalone style multi-cluster ( #3223 )
...
* Feat: ref component
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Feat: support topology and override
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Feat: add support for external policy and workflow
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Feat: add admission control
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: disable cross namespace ref object
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Chore: refactor
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Feat: support labelSelector in ref-objects
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Feat: add pre approve for deploy step
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Chore: refactor
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: test
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Feat: support comp/trait type in override policy even not used by prototype
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Feat: support regex match for patch component name
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: labelSelector not work for cluster
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: ref workflow contains external policy
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: revision test
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Feat: parallel apply components
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Feat: add test for oam provider
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: service ref-comp & indirect trait ns
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: align namespace setting for chart
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: add strict unmarshal and reformat
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: merge with cluster rework
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Feat: patch trait-def
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: apply components + load dynamic component
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: add test for loadPoliciesInOrder
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Feat: add test for open merge
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: reformat & add test for step generator
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: add test for parse override policy related defs
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: add test for multicluster provider (expandTopology and overrideConfiguration)
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: add admission test
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: revert trait status pass in component status
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: add test for dependency in workflowstep & standalone multicluster test
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: add check for ref and steps in WorkflowStep & enhance ref-objects scheme check
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
2022-03-07 10:21:00 +08:00
yangs
91125c6fec
Feat: dispatch manifests in concurrent ( #3060 )
...
* Feat: dispatch manifests in concurrent
Signed-off-by: yangsoon <songyang.song@alibaba-inc.com >
* Fix: merge workflow pkg convert to pkg util
Signed-off-by: yangsoon <songyang.song@alibaba-inc.com >
Co-authored-by: yangsoon <songyang.song@alibaba-inc.com >
2022-02-08 16:25:57 +08:00
yangsoon
6cee468743
Feat: add more performance optimization and prometheus metrics for controller ( #3086 )
...
* Feat: add more prometheus metrics
Signed-off-by: yangsoon <yangsoonlx@gmail.com >
* Feat: add detail gc rt duration metrics
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Feat: add monitor to client
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Feat: add all cache object
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Fix: watch job
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Feat: add deleg client
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Feat: add optimize for rt list and disable controllerrevision
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Feat: add apprev disable optimize
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Fix: optimize log
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Feat: add time recorder for app ctrl
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Feat: add in-memory workflow context
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Feat: add reconcile-reduction & random-pick-gc & optimize rt record
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Feat: add optimize for healthcheck & resourcetracker trigger
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Chore: refactor
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Feat: record the resource-tracker number by informer event-handler
Signed-off-by: yangsoon <songyang.song@alibaba-inc.com >
* Feat: add promethus collect annotation in template
Signed-off-by: yangsoon <songyang.song@alibaba-inc.com >
* Fix: command line comment bug
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Chore: rename args and remove legacy controller metrics
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: make code reviewable
Signed-off-by: yangsoon <songyang.song@alibaba-inc.com >
* Chore: optimize flag descriptions
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Chore: break optimize package
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
* Fix: gc policy test
Signed-off-by: Somefive <yd219913@alibaba-inc.com >
Co-authored-by: Yin Da <yd219913@alibaba-inc.com >
Co-authored-by: yangsoon <songyang.song@alibaba-inc.com >
2022-01-14 15:18:02 +08:00
wyike
53081d043b
Chore: deprecate and delete approllout related code ( #3040 )
...
* Fex: delete useles approllout related code
Signed-off-by: wangyike <wangyike_wyk@163.com >
fix failed test
Signed-off-by: wangyike <wangyike_wyk@163.com >
Fix: failed e2e test
Signed-off-by: wangyike <wangyike_wyk@163.com >
fix-test
Signed-off-by: wangyike <wangyike_wyk@163.com >
fix test
Signed-off-by: wangyike <wangyike_wyk@163.com >
fix e2e-test
Signed-off-by: wangyike <wangyike_wyk@163.com >
fix e2e rollout test
Signed-off-by: wangyike <wangyike_wyk@163.com >
* delete useless test code
Signed-off-by: wangyike <wangyike_wyk@163.com >
* fix failed unit-test
Signed-off-by: wangyike <wangyike_wyk@163.com >
2022-01-06 14:33:11 +08:00
Somefive
a33d1e488a
Feat: gc process ignore cluster not exists ( #3007 )
...
* Feat: gc process ignore cluster not exists
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Feat: gc process ignore cluster not exists
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
2021-12-28 13:12:23 +08:00
Somefive
db189f7527
Fix: optimize resourcetracker upgrade ( #2959 )
...
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
2021-12-20 13:05:53 +08:00
Somefive
4dc213469a
Feat: add compatibility code for new rt ( #2920 )
...
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
2021-12-14 21:27:47 +08:00
Somefive
a89bb69a62
Fix: add design docs for ResourceTracker ( #2909 )
...
* Fix: enhance rt logic and add docs
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Fix: test conflict
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
2021-12-13 19:41:42 +08:00
Somefive
b622cbdb7f
Feat: ResourceTracker new architecture ( #2849 )
...
* Feat: new rt
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
* Fix: add publish version
Signed-off-by: Yin Da <yd219913@alibaba-inc.com >
2021-12-10 15:00:03 +08:00
