github/open-cluster-management
1
0
Fork 0
mirror of https://github.com/open-cluster-management-io/ocm.git synced 2026-08-23 22:26:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,754 Commits 17 Branches 22 Tags
dependabot/github_actions/github-actions-da79ef3b5c
Commit Graph
75 Commits
Author SHA1 Message Date
jaswalkiranavtarandAlex 57c78cd4de ✨ Miscellaneous code cleanup (#881)
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Post / coverage (push) Waiting to run
Post / images (amd64) (push) Waiting to run
Post / images (arm64) (push) Waiting to run
Post / image manifest (push) Blocked by required conditions
Post / trigger clusteradm e2e (push) Blocked by required conditions 
* extract constants and remove permissions

Signed-off-by: Alex <alexchan2988@gmail.com>

* Addressing miscellaneous code cleanup

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Alex <alexchan2988@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Alex <alexchan2988@gmail.com>
 2025-03-13 00:45:19 +00:00
Amrutha HarikumarandGaurav Jaswal c4e706f123 ✨ Make ocm changes to tag aws resources by OCM hub (#862) 
* Implementing aws resource tags

Signed-off-by: Amrutha <amrutha.hari12@gmail.com>
Signed-off-by: Alex <alexchan2988@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Fixing tests

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Amrutha <amrutha.hari12@gmail.com>
Signed-off-by: Alex <alexchan2988@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
 2025-03-06 19:29:29 +00:00
jaswalkiranavtarandAmrutha 27bc922b1c 🐛 ARN pattern should be comma separated string instead of a string enclosed in square brackets (#865)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 46s
Post / images (amd64) (push) Failing after 5m48s
Post / images (arm64) (push) Failing after 5m31s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 27m6s 
* ARN pattern should be comma separated string

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing review comment

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing review comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Amrutha <amrutha.hari12@gmail.com>
 2025-03-06 03:13:32 +00:00
jaswalkiranavtarandJames Dobson 94bfd426ca Add managed cluster auto-approval for awsirsa (#850)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m5s
Post / images (amd64) (push) Failing after 5m36s
Post / images (arm64) (push) Failing after 5m47s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 27m4s 
Signed-off-by: James Dobson <dobson@softwarepunk.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: James Dobson <dobson@softwarepunk.com>
 2025-02-28 14:05:53 +00:00
alex0chan“JeffreyGaurav Jaswal
 		0153747acf ✨ Made changes for clusteradm accept to create role and policies on hub (#819)
Post / coverage (push) Failing after 26m56s
Post / images (amd64) (push) Failing after 6m52s
Post / images (arm64) (push) Failing after 6m50s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 54s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m19s 
* Acceping AWS IRSA registraion request

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Making csr as a default enabled driver if no other driver is explicitly enabled

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: “Jeffrey <jeffreywong0417@gmail.com>
Co-authored-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
 2025-02-18 13:14:06 +00:00
jaswalkiranavtarandAmrutha f62242d047 ✨ Assume prerequisite role on hub if initailize with aws-irsa (#807)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m28s
Post / coverage (push) Failing after 26m43s
Post / images (amd64) (push) Failing after 6m50s
Post / images (arm64) (push) Failing after 6m49s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 35s 
* Adding managedcluster identity creator role arn

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing review comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Amrutha <amrutha.hari12@gmail.com>
 2025-01-17 16:37:47 +00:00
Jian Qiu 34275ef1ea Add bootstrapSA flags for importer (#803)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m14s
Post / coverage (push) Failing after 27m13s
Post / images (amd64) (push) Failing after 6m57s
Post / images (arm64) (push) Failing after 6m49s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 25s 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2025-01-16 08:55:31 +00:00
Zhiwei Yin a44b44e2db rename bootstrap sa and rbac (#802)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m11s
Post / coverage (push) Failing after 27m28s
Post / images (amd64) (push) Failing after 6m52s
Post / images (arm64) (push) Failing after 6m37s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 21s 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2025-01-16 01:13:30 +00:00
Yang Le 646113723f 🌱 upgrade the AddOnDeploymentConfig API (#791)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 34s
Post / images (amd64) (push) Failing after 5m31s
Post / images (arm64) (push) Failing after 5m26s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 26m29s 
Signed-off-by: Yang Le <yangle@redhat.com>
 2025-01-09 05:53:56 +00:00
Zhiwei Yin e515d81391 update rbac for capi (#789)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 3m3s
Post / images (amd64) (push) Failing after 7m11s
Post / images (arm64) (push) Failing after 7m0s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 32m31s 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2025-01-08 02:25:04 +00:00
EmilyLandAmrutha 0f9845c563 ✨ Mount the awscli volume when using AWS IRSA-based authentication. (#783)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 4m35s
Post / images (amd64) (push) Failing after 6m0s
Post / images (arm64) (push) Failing after 5m36s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 27m33s 
* Add the awscli volume mount to klusterlet-work, klusterlet-agent, klusterlet-registration deployment manifests if the registration auth type is awsirsa.
Update the test util function to check for both .aws and /awscli volume mounts.

Signed-off-by: dtclxy64 <70486866+dtclxy64@users.noreply.github.com>

* Update the conditions to only check the registration driver auth type because the nil checks are done on the klusterlet CRD.

Signed-off-by: dtclxy64 <70486866+dtclxy64@users.noreply.github.com>

---------

Signed-off-by: dtclxy64 <70486866+dtclxy64@users.noreply.github.com>
Co-authored-by: Amrutha <amrutha.hari12@gmail.com>
 2025-01-03 01:41:29 +00:00
Jian Qiu 8d559190af Only enable auth driver when type is irsa (#777) 
This is to ensure during upgrade scenario, the new operator
can still start the old version of the agent.

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-12-23 09:13:56 +00:00
Jian Qiu b568123849 ✨ Start import in registration by feature gate. (#775) 
* Update clustermanager operator to support capi

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Update operator to start importer

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-12-20 01:12:10 +00:00
Jian Zhu ddc5024596 ✨ Allow Custom Signer signingCA to Specify Namespace in AddOnTemplate (#747) 
* Allow Custom Signer signingCA to Specify Namespace in AddOnTemplate

Signed-off-by: zhujian <jiazhu@redhat.com>

* Add e2e test for signer namespace

Signed-off-by: zhujian <jiazhu@redhat.com>

---------

Signed-off-by: zhujian <jiazhu@redhat.com>
 2024-12-10 09:16:26 +00:00
Jian Qiu 0897da69da Implement ignoreFields in server side apply (#726) 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-12-10 02:56:55 +00:00
Jian Zhu 80935909c0 🐛 Only bind the agent role for the addon group (#721) 
* Only bind the agent role for the addon group

Signed-off-by: zhujian <jiazhu@redhat.com>

* Update addon rolebinding

Signed-off-by: zhujian <jiazhu@redhat.com>

* Tigger registration reconcile after start

Signed-off-by: zhujian <jiazhu@redhat.com>

* Address code review comments

Signed-off-by: zhujian <jiazhu@redhat.com>

---------

Signed-off-by: zhujian <jiazhu@redhat.com>
 2024-12-03 02:18:34 +00:00
Qing Hao ed367fd739 enable leader election of klusterlet-agent on single node managed clusters (#727) 
Signed-off-by: Qing Hao <qhao@redhat.com>
 2024-11-29 08:13:48 +00:00
jaswalkiranavtar 93db6de4a1 ✨ Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR (#714) 
* Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding integration tests for aws registration

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding more integration tests

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Addressing review comments

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

---------

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>
 2024-11-26 17:34:53 +00:00
Zhiwei Yin fa3a30b36e support wildcard in manifestConfigs (#703) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2024-11-21 06:56:46 +00:00
xuezhao 68eb264e56 Revert "enable leader election of klusterlet-agent on single node managed clusters (#695)" (#708) 
This reverts commit 8544ff1e29.

Signed-off-by: xuezhaojun <zxue@redhat.com>
 2024-11-20 03:45:47 +00:00
Qing Hao 8544ff1e29 enable leader election of klusterlet-agent on single node managed clusters (#695) 
Signed-off-by: Qing Hao <qhao@redhat.com>
 2024-11-15 02:47:00 +00:00
SuvaanshandEmilyL 67b4f1a354 ✨ Add AWS IAM support (#677) 
* Adding AWS IAM authentication support

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>

* Remove the bootstrapKubeconfigEventHandler field that's no longer used from the NewSpokeAgentConfig function based on code review comments.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>

* Add a comment on what the IsEksArnWellFormed function does and an example EKS ARN.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>

---------

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>
Co-authored-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
 2024-11-13 01:43:28 +00:00
Qing Hao d9ab25283e sync between ManagedCluster and cluster inventory API (#615) 
Signed-off-by: haoqing0110 <qhao@redhat.com>
 2024-10-15 04:04:41 +00:00
Jian Qiu 2582ad922d Update deps to 1.30 (#546) 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-07-02 14:04:15 +00:00
xuezhao 5a747e8a2c Operator supports MultipleHubs. (#524) 
Signed-off-by: xuezhaojun <zxue@redhat.com>
 2024-06-27 07:53:07 +00:00
Jian Qiu b6058f1126 Update deps of api and library to 0.14.0 (#532) 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-06-21 07:25:59 +00:00
Zhiwei Yin 12baec945a fix the label cannot be number (#531) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2024-06-19 07:04:12 +00:00
Jian Qiu 9b36e1102d Readonly strategy (#494) 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-06-07 07:39:59 +00:00
Zhiwei Yin 7fd733082f sync labels from klusterlet to all agent resources (#475) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2024-06-04 06:49:49 +00:00
Yang Le 4e2918120c 🌱 honor the settings of AppliedManifestWorkEvictionGracePeriod in Klusterlet API (#454) 
Signed-off-by: Yang Le <yangle@redhat.com>
 2024-05-13 08:36:53 +00:00
Zhiwei Yin 2636009a52 Add image pullSecret to hub controllers (#397) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2024-04-28 07:18:14 +00:00
Morven Cao 7154863106 ✨ support work driver config for cluster manager. (#381) 
* support work driver config for cluster manager.

Signed-off-by: morvencao <lcao@redhat.com>

* address comments.

Signed-off-by: morvencao <lcao@redhat.com>

---------

Signed-off-by: morvencao <lcao@redhat.com>
 2024-04-24 08:33:13 +00:00
Zhiwei Yin 3efb7d3de3 add admissionregistration group to work execution clusterrole (#401) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2024-04-08 07:54:08 +00:00
Qing Hao 22501d88f7 🌱 set cma managed by addon-manager if not configured (#374) 
* set cma managed by addon-manager if not configured

Signed-off-by: haoqing0110 <qhao@redhat.com>

* update annotation in testing case

Signed-off-by: haoqing0110 <qhao@redhat.com>

* rename controller name

Signed-off-by: haoqing0110 <qhao@redhat.com>

---------

Signed-off-by: haoqing0110 <qhao@redhat.com>
 2024-03-25 04:42:58 +00:00
Wei Liu b1b734aa7a support cloudevents for manifestworkreplicaset (#352) 
Signed-off-by: Wei Liu <liuweixa@redhat.com>
 2024-03-06 13:17:22 +00:00
xuezhao 4d91239a54 Update CRD descriptions. (#360) 
Signed-off-by: GitHub <noreply@github.com>
 2024-02-19 08:42:38 +00:00
Yang Le c5e210af0c ✨ support configuration of the agent priorityclass (#358) 
Signed-off-by: Yang Le <yangle@redhat.com>
 2024-02-08 06:23:23 +00:00
DONG BEIQING 5b9b566f15 ✨ Configurable qos resources for containers managed by cluster-manager and klusterlet (#351) 
* configurable qos resources for containers managed by cluster-manager and klusterlet

Signed-off-by: Dong Beiqing <350758787@qq.com>

* run make fmt-imports

Signed-off-by: Dong Beiqing <350758787@qq.com>

---------

Signed-off-by: Dong Beiqing <350758787@qq.com>
 2024-01-23 09:41:52 +00:00
Zhiwei Yin 8bd99799e4 configure QPS and Burst for the flags of klusterlet agents (#344) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2024-01-18 01:35:58 +00:00
Jian Qiu 976019dd43 🐛 Requeue for rolling strategy in mwrs (#337) 
* Requeue for rolling strategy in mwrs

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Add more integration test for rolling

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-01-04 09:55:20 +00:00
xuezhaojun 93a9d194af Fix: migration-controller depending on cluster-manager condition. (#328) 
Signed-off-by: xuezhaojun <zxue@redhat.com>
 2023-12-19 10:28:59 +00:00
Zhiwei Yin 2e07fda72f update deployment securityContext (#329) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2023-12-08 02:56:10 +00:00
Wei Liu d2324b8581 supporting cloudevents for work agent (#321) 
Signed-off-by: Wei Liu <liuweixa@redhat.com>
 2023-12-07 05:16:59 +00:00
Jian Qiu 7ceb9a2bce Reduce permission for cluster manager and klusterlet (#325) 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2023-11-30 13:05:39 +00:00
haowells 4a1a8901f7 klusterlet spec mount /tmp to emptydir volume (#322) 
Signed-off-by: haolin <haowells@gmail.com>
 2023-11-29 01:42:13 +00:00
haowellsandhaolin 8a4c834ebf ✨ klusterlet cr add flag to use best effort resources (#317) 
* klusterlet cr add flag to use besteffort resources

Signed-off-by: haolin <haowells@gmail.com>

* rename resource type to resource requirements

Signed-off-by: haolin <haowells@gmail.com>

* update api to latest version

Signed-off-by: haolin <haowells@gmail.com>

* fix typo of ResourceRequirements

Signed-off-by: haolin <haowells@gmail.com>

---------

Signed-off-by: haolin <haowells@gmail.com>
Co-authored-by: haolin <haolin@ebay.com>
 2023-11-27 09:49:44 +00:00
xuezhaojun a46086d819 Removal v1beta1 webhook. (#316) 
Signed-off-by: xuezhaojun <zxue@redhat.com>
 2023-11-23 08:06:19 +00:00
Mohamed ElSerngawy 615f5a4441 Update OCM APIs and apply Rollout strategy API changes (#310) 
Signed-off-by: melserngawy <melserng@redhat.com>
 2023-11-16 02:36:16 +00:00
Yang Le 0f7da4a9bb 🐛 upgrade addondeploymentconfigs to include proxy ca bundle (#299) 
Signed-off-by: Yang Le <yangle@redhat.com>
 2023-10-27 06:50:33 +00:00
Zhiwei Yin f003ed38a5 refactor gc controller (#229) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2023-10-23 07:05:35 +00:00