Commit Graph
62 Commits
Author SHA1 Message Date
jaswalkiranavtarandAlex 57c78cd4de Miscellaneous code cleanup (#881)
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Post / coverage (push) Waiting to run
Post / images (amd64) (push) Waiting to run
Post / images (arm64) (push) Waiting to run
Post / image manifest (push) Blocked by required conditions
Post / trigger clusteradm e2e (push) Blocked by required conditions
* extract constants and remove permissions

Signed-off-by: Alex <alexchan2988@gmail.com>

* Addressing miscellaneous code cleanup

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Alex <alexchan2988@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Alex <alexchan2988@gmail.com>
2025-03-13 00:45:19 +00:00
0153747acf Made changes for clusteradm accept to create role and policies on hub (#819)
Post / coverage (push) Failing after 26m56s
Post / images (amd64) (push) Failing after 6m52s
Post / images (arm64) (push) Failing after 6m50s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 54s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m19s
* Acceping AWS IRSA registraion request

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Making csr as a default enabled driver if no other driver is explicitly enabled

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: “Jeffrey <jeffreywong0417@gmail.com>
Co-authored-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
2025-02-18 13:14:06 +00:00
Zhiwei Yin 568789fef4 refactor to use common HasFinalizer func (#830)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 2m33s
Post / coverage (push) Failing after 26m11s
Post / images (amd64) (push) Failing after 7m0s
Post / images (arm64) (push) Failing after 6m47s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 28s
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2025-02-13 02:48:46 +00:00
jaswalkiranavtarandAmrutha f62242d047 Assume prerequisite role on hub if initailize with aws-irsa (#807)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m28s
Post / coverage (push) Failing after 26m43s
Post / images (amd64) (push) Failing after 6m50s
Post / images (arm64) (push) Failing after 6m49s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 35s
* Adding managedcluster identity creator role arn

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing review comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Amrutha <amrutha.hari12@gmail.com>
2025-01-17 16:37:47 +00:00
jaswalkiranavtarandsuvaanshkumar 0acf030cdb Completing aws registration on spoke (#788)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 40s
Post / images (amd64) (push) Failing after 5m45s
Post / images (arm64) (push) Failing after 5m45s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 26m38s
Close stale issues and PRs / stale (push) Successful in 6s
* Completing aws registration on spoke

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>

* adding new function to overcome gci errors on slices

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>

* Refactoring array contains function

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: suvaanshkumar <suvaanshkumar@gmail.com>
2025-01-09 19:07:43 +00:00
Jian Zhu 41a01b1da0 Change kubecofnig secret creation time to non pointer (#731)
Signed-off-by: zhujian <jiazhu@redhat.com>
2024-12-02 05:26:18 +00:00
Qing Hao ed367fd739 enable leader election of klusterlet-agent on single node managed clusters (#727)
Signed-off-by: Qing Hao <qhao@redhat.com>
2024-11-29 08:13:48 +00:00
jaswalkiranavtar 93db6de4a1 Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR (#714)
* Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding integration tests for aws registration

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding more integration tests

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Addressing review comments

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

---------

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>
2024-11-26 17:34:53 +00:00
xuezhao 68eb264e56 Revert "enable leader election of klusterlet-agent on single node managed clusters (#695)" (#708)
This reverts commit 8544ff1e29.

Signed-off-by: xuezhaojun <zxue@redhat.com>
2024-11-20 03:45:47 +00:00
Qing Hao 8544ff1e29 enable leader election of klusterlet-agent on single node managed clusters (#695)
Signed-off-by: Qing Hao <qhao@redhat.com>
2024-11-15 02:47:00 +00:00
Rokibul Hasan 369f3fb6ff Update api dependency and remove unnecessary featureGate enabling part (#687)
Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
2024-11-14 07:12:14 +00:00
Jian Zhu 109bd9456e Record the external kubeconfig creation timestamp (#700)
Signed-off-by: zhujian <jiazhu@redhat.com>
2024-11-14 01:35:31 +00:00
SuvaanshandEmilyL 67b4f1a354 Add AWS IAM support (#677)
* Adding AWS IAM authentication support

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>

* Remove the bootstrapKubeconfigEventHandler field that's no longer used from the NewSpokeAgentConfig function based on code review comments.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>

* Add a comment on what the IsEksArnWellFormed function does and an example EKS ARN.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>

---------

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>
Co-authored-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
2024-11-13 01:43:28 +00:00
Rokibul Hasan e24937ff75 Fix issue with printing <nil> for error messages (#681)
Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
2024-10-31 09:02:13 +00:00
Rokibul Hasan e9245d46d7 🐛 Fix duplicate deployment names in klusterlet-agent availability message (#671)
* Fix duplicate deployment names in klusterlet-agent availability message

Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>

* Update

Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>

---------

Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
2024-10-28 01:53:47 +00:00
Jian Zhu 3d8cb1e02e Ignore appliedmanifestwork crd not found error when checking managed cluster connectivity (#594)
Signed-off-by: zhujian <jiazhu@redhat.com>
2024-08-14 07:08:43 +00:00
Jian Qiu 2582ad922d Update deps to 1.30 (#546)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-07-02 14:04:15 +00:00
xuezhao 5a747e8a2c Operator supports MultipleHubs. (#524)
Signed-off-by: xuezhaojun <zxue@redhat.com>
2024-06-27 07:53:07 +00:00
Zhiwei Yin 12baec945a fix the label cannot be number (#531)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-06-19 07:04:12 +00:00
Zhiwei Yin 287a6fbd26 fix issue that pull secret and ns are synced labels when enable-sync-labels is disabled (#511)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-06-13 02:00:18 +00:00
Zhiwei Yin c4b2c65080 add enable-sync-labels flag to klusterlet operator (#505)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-06-06 15:03:12 +00:00
xuezhao 0357cb99e1 Registration-agent supports multiple bootstrapkubeconfigs and switch-hub. (#443)
Signed-off-by: xuezhaojun <zxue@redhat.com>
2024-06-04 13:46:39 +00:00
Zhiwei Yin 7fd733082f sync labels from klusterlet to all agent resources (#475)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-06-04 06:49:49 +00:00
Jian Qiu c056181096 Add a disable-default-addon-namespace flag (#484)
* Add a disable-default-addon-namespace flag

if the flag is set, default addon ns will not be created
by the operator.

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Update with comments

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-06-03 06:54:15 +00:00
DONG BEIQING 22da639109 configurable controller replicas and master node selector (#468)
* configurable controller replicas and master node selector

Signed-off-by: Dong Beiqing <350758787@qq.com>

* run make fmt-imports

Signed-off-by: Dong Beiqing <350758787@qq.com>

* shorter lines

Signed-off-by: Dong Beiqing <350758787@qq.com>

* rename ControllerReplicas to DeploymentReplicas

Signed-off-by: Dong Beiqing <350758787@qq.com>

* rename masterNodeLabelSelectors to controlPlaneNodeLabels

Signed-off-by: Dong Beiqing <350758787@qq.com>

* rename controlPlaneNodeLabels to controlPlaneNodeLabelSelector

Signed-off-by: Dong Beiqing <350758787@qq.com>

---------

Signed-off-by: Dong Beiqing <350758787@qq.com>
2024-05-21 10:30:38 +00:00
Jian Qiu a31ee084a7 Always create default addon namespace (#457)
The addon namespace should always be default on.
The operator will not create addon ns based
on klusterlet install namespace.

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-05-14 07:08:53 +00:00
Yang Le 4e2918120c 🌱 honor the settings of AppliedManifestWorkEvictionGracePeriod in Klusterlet API (#454)
Signed-off-by: Yang Le <yangle@redhat.com>
2024-05-13 08:36:53 +00:00
Jian Qiu 5fc1dbdce7 🐛 Remove old ns when klusterlet ns is changed (#442)
* Remove old ns when klusterlet ns is changed

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Resolve comments

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-05-06 03:15:48 +00:00
Zhiwei Yin 2636009a52 Add image pullSecret to hub controllers (#397)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-04-28 07:18:14 +00:00
Zhiwei Yin f413220b56 refactor constants in operator (#421)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-04-15 04:59:31 +00:00
Yang Le c5e210af0c support configuration of the agent priorityclass (#358)
Signed-off-by: Yang Le <yangle@redhat.com>
2024-02-08 06:23:23 +00:00
DONG BEIQING 5b9b566f15 Configurable qos resources for containers managed by cluster-manager and klusterlet (#351)
* configurable qos resources for containers managed by cluster-manager and klusterlet

Signed-off-by: Dong Beiqing <350758787@qq.com>

* run make fmt-imports

Signed-off-by: Dong Beiqing <350758787@qq.com>

---------

Signed-off-by: Dong Beiqing <350758787@qq.com>
2024-01-23 09:41:52 +00:00
Jian Qiu 6cfce8ce24 Revert apply func (#353)
this part dep on library-go so remove from
sdk-go

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-01-22 03:46:46 +00:00
Jian Qiu bede3edd92 Switch to patcher in sdk-go (#349)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-01-22 02:04:49 +00:00
Zhiwei Yin 8bd99799e4 configure QPS and Burst for the flags of klusterlet agents (#344)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-01-18 01:35:58 +00:00
Wei Liu d2324b8581 supporting cloudevents for work agent (#321)
Signed-off-by: Wei Liu <liuweixa@redhat.com>
2023-12-07 05:16:59 +00:00
Jian Qiu 7ceb9a2bce Reduce permission for cluster manager and klusterlet (#325)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2023-11-30 13:05:39 +00:00
haowellsandhaolin 8a4c834ebf klusterlet cr add flag to use best effort resources (#317)
* klusterlet cr add flag to use besteffort resources

Signed-off-by: haolin <haowells@gmail.com>

* rename resource type to resource requirements

Signed-off-by: haolin <haowells@gmail.com>

* update api to latest version

Signed-off-by: haolin <haowells@gmail.com>

* fix typo of ResourceRequirements

Signed-off-by: haolin <haowells@gmail.com>

---------

Signed-off-by: haolin <haowells@gmail.com>
Co-authored-by: haolin <haolin@ebay.com>
2023-11-27 09:49:44 +00:00
Yang Le 9aaa1327fa 🐛 move the rebootstrap logic to registration agent (#267)
Signed-off-by: Yang Le <yangle@redhat.com>
2023-10-18 09:58:06 +00:00
Jian Zhu 75db27dd61 set work agent status-sync-interval when the replica is 1 (#282)
Signed-off-by: zhujian <jiazhu@redhat.com>
2023-09-24 22:21:37 -04:00
Zhiwei Yin 769272cbec fix failed update roleRef in clusterrolebinding in upgrade case (#284)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2023-09-20 23:16:06 -04:00
Jian Qiu bd4982fffc Fix: change singleton agent sa to work sa (#279)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2023-09-15 10:01:14 +02:00
Jian Zhu fda6514ba6 delete klusterlet if the managed cluster refused the connection (#278)
Signed-off-by: zhujian <jiazhu@redhat.com>
2023-09-14 05:05:34 +02:00
Jian Zhu e0d1ad384c bump golangci-lint to v1.54.2 (#270)
Signed-off-by: zhujian <jiazhu@redhat.com>
2023-09-07 15:55:12 +02:00
Jian Qiu 404680d302 support singleton in hosted mode (#258)
* delete old agent when switch to singleton mode

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* run singleton hosted mode

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Sync sa on spoke as external-agent-kubeconfig

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2023-09-07 03:33:17 +02:00
Yang Le 7adf6ee1bc 🐛 correct the agent deployment name in different install mode (#265)
Signed-off-by: Yang Le <yangle@redhat.com>
2023-09-05 05:34:36 +02:00
Jian Qiu e297899a3c Remove old agent when upgrade to singleton (#263)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2023-09-04 11:07:38 +02:00
Yang Le ac142e6478 support proxy between hub cluster and managed cluster (#260)
Signed-off-by: Yang Le <yangle@redhat.com>
2023-09-01 05:52:58 +02:00
Yang Le f444b340c8 🐛 add wlp annotation if necessary (#248)
Signed-off-by: Yang Le <yangle@redhat.com>
2023-08-16 22:55:27 -02:30
Yang Le 8080e5dc3b 🐛 fix the rebootstrap issue (#249)
Signed-off-by: Yang Le <yangle@redhat.com>
2023-08-14 23:07:33 -02:30