github/open-cluster-management
1
0
Fork 0
mirror of https://github.com/open-cluster-management-io/ocm.git synced 2026-08-21 21:26:53 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,205 Commits 17 Branches 22 Tags
main
Commit Graph
75 Commits
Author SHA1 Message Date
Aman GuptaandGitHub f03cafff7c ✨ feat: add NetworkPolicies for open-cluster-management-hub namespace (#1634) 
Signed-off-by: Aman Gupta <amangta.gupta@gmail.com>
 2026-08-03 08:16:39 +00:00
Artur Shad NikandGitHub ac59d84dc7 fix: keep annotations flag ordering consistent on each reconcile (#1644) 
Signed-off-by: Artur Shad Nik <arturshadnik@gmail.com>
 2026-07-31 00:33:19 +00:00
mihirleleGitHubClaude Opus 4.6
 		374cc31e22 ✨ feat: add NetworkPolicies for open-cluster-management-agent namespace (#1627) 
* feat: add NetworkPolicies for open-cluster-management-agent namespace

Ship 4 NetworkPolicy manifests with the klusterlet operator to restrict
ingress/egress in the agent namespace, meeting CIS Kube benchmark 5.3.2
requirements.

Policies added:
- default-deny-all: baseline deny for all ingress/egress
- allow-dns-and-api: DNS egress (OpenShift/kube-dns) + ports-only API
  server egress (TCP 443/6443)
- klusterlet: operator egress to intra-namespace, addon namespace, and
  kubernetes.default.svc
- klusterlet-agent: agent egress to kubernetes.default.svc, hub webhooks,
  and intra-namespace

Also adds:
- RBAC: networking.k8s.io/networkpolicies permissions in klusterlet
  ClusterRole
- Cleanup: *networkingv1.NetworkPolicy case in CleanUpStaticObject and
  GenerateRelatedResource

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Mihir Lele <mlele@redhat.com>

* feat: add NetworkPolicies feature gate and fix ingress rules

- Add NetworkPolicies feature gate (disabled by default) following the
  existing AboutAPIEnabled/ClusterProperty pattern
- Filter operator-internal feature gates before ConvertToFeatureGateFlags
  to avoid invalid agent CLI flags and ValidFeatureGates condition issues
- Conditionally apply NP manifests in both reconcile() and clean() based
  on the feature gate
- Fix missing intra-namespace ingress rules in klusterlet and
  klusterlet-agent NetworkPolicies (CodeRabbit review feedback)
- Revert test counts to pre-NP values and add
  TestSyncDeployWithNetworkPolicies for the feature-enabled path

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Mihir Lele <mlele@redhat.com>

* fix: address CodeRabbit nitpicks - import grouping and defensive slice copy

- Move featuregate import to correct alphabetical position in its group
- Use defensive slice copy (append into new slice) instead of direct
  assignment from package-level var before appending

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Mihir Lele <mlele@redhat.com>

* fix: update OLM CSV with NetworkPolicy RBAC permissions

The ClusterServiceVersion file needs to include the networking.k8s.io
networkpolicies RBAC rules added to the klusterlet ClusterRole.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Mihir Lele <mlele@redhat.com>

* test: enable NetworkPolicies feature gate in integration and e2e tests

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Mihir Lele <mlele@redhat.com>

* test: update relatedResources counts for NetworkPolicy resources

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Mihir Lele <mlele@redhat.com>

* fix: update expected registration deployment args count for RegistrationConfiguration defaults

RegistrationConfiguration triggers kubebuilder defaults (KubeAPIQPS=50,
KubeAPIBurst=100), adding --kube-api-qps and --kube-api-burst args.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Mihir Lele <mlele@redhat.com>

* fix: clarify relatedResources count comment arithmetic

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Mihir Lele <mlele@redhat.com>

---------

Signed-off-by: Mihir Lele <mlele@redhat.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
 2026-07-24 01:30:13 +00:00
shivansh sinhaandGitHub 6ec234a49f ✨ Add TLS profile configuration support for spoke cluster agents (#1486) 
* Add TLS profile configuration support for spoke cluster agents

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>

* everything implemented

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>

* go lint fixed

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>

* changes to fix ci

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>

* linting save

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>

* args count back to 8 , 7 was wrong assumption

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>

* changed ConfigMap assertion at index[0]

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>

* go fmt fixed

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>

* everything fixed

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>

* trying to fix e2e grpc error

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>

* indent and also remove the reductant check

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>

* added a case where function suceed but reurns nil data

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>

* removed NotFound case we dont need it

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>

---------

Signed-off-by: shivansh-source <shivanshsiddhi1234@gmail.com>
 2026-05-19 09:16:24 +00:00
Yang LeandGitHub 9d1a993e2c ✨ add token driver for addon registration (#1343)
Post / images (amd64, placement) (push) Failing after 50s
Post / images (amd64, registration) (push) Failing after 41s
Post / images (amd64, registration-operator) (push) Failing after 40s
Post / images (amd64, work) (push) Failing after 44s
Post / images (arm64, addon-manager) (push) Failing after 41s
Post / images (arm64, placement) (push) Failing after 42s
Post / images (arm64, registration) (push) Failing after 41s
Post / images (amd64, addon-manager) (push) Failing after 5m29s
Post / images (arm64, registration-operator) (push) Failing after 43s
Post / images (arm64, work) (push) Failing after 5m35s
Post / image manifest (addon-manager) (push) Has been skipped
Post / image manifest (placement) (push) Has been skipped
Post / image manifest (registration) (push) Has been skipped
Post / image manifest (registration-operator) (push) Has been skipped
Post / image manifest (work) (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 40m4s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 4m1s 
Signed-off-by: Yang Le <yangle@redhat.com>
 2026-01-28 05:41:52 +00:00
Jian QiuandGitHub 99265f6113 Refactor to contextual logging (#1283)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m25s
Post / coverage (push) Failing after 36m59s
Post / images (amd64, addon-manager) (push) Failing after 7m34s
Post / images (amd64, placement) (push) Failing after 7m4s
Post / images (amd64, registration) (push) Failing after 7m8s
Post / images (amd64, registration-operator) (push) Failing after 7m3s
Post / images (amd64, work) (push) Failing after 6m59s
Post / images (arm64, addon-manager) (push) Failing after 7m0s
Post / images (arm64, placement) (push) Failing after 6m54s
Post / images (arm64, registration) (push) Failing after 6m55s
Post / images (arm64, registration-operator) (push) Failing after 6m55s
Post / images (arm64, work) (push) Failing after 7m16s
Post / image manifest (addon-manager) (push) Has been skipped
Post / image manifest (placement) (push) Has been skipped
Post / image manifest (registration) (push) Has been skipped
Post / image manifest (registration-operator) (push) Has been skipped
Post / image manifest (work) (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2025-12-08 08:14:30 +00:00
Jian QiuandGitHub 33310619d9 🌱 use SDK basecontroller for better logging. (#1269) 
* Use basecontroller in sdk-go instead for better logging

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Rename to fakeSyncContext

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2025-12-01 03:07:02 +00:00
Jian ZhuGitHubClaude
 		1125e4c33d 🌱 Remove resolved TODO comments (#1177)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 50s
Post / coverage (push) Failing after 55s
Post / images (amd64, addon-manager) (push) Failing after 36s
Post / images (amd64, placement) (push) Failing after 40s
Post / images (amd64, registration) (push) Failing after 28s
Post / images (amd64, registration-operator) (push) Failing after 20s
Post / images (amd64, work) (push) Failing after 29s
Post / images (arm64, addon-manager) (push) Failing after 33s
Post / images (arm64, placement) (push) Failing after 32s
Post / images (arm64, registration) (push) Failing after 25s
Post / images (arm64, registration-operator) (push) Failing after 33s
Post / images (arm64, work) (push) Failing after 29s
Post / image manifest (addon-manager) (push) Has been skipped
Post / image manifest (placement) (push) Has been skipped
Post / image manifest (registration) (push) Has been skipped
Post / image manifest (registration-operator) (push) Has been skipped
Post / image manifest (work) (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped 
* 🧹 Remove resolved TODO comments

- Remove TODO comment about confirming subject in CustomSignerConfigurations
- Remove TODO comment about namespace value in manifestwork validating webhook

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: zhujian <jiazhu@redhat.com>

* Ensure addon namespace and image pull secret sync

- Remove outdated TODO comment about addon deployment in Hosted mode
- Namespace creation is responsibility of addon developers
- Image pull secrets are synced to namespaces with addon.open-cluster-management.io/namespace label by the AddonPullImageSecretController

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: zhujian <jiazhu@redhat.com>

---------

Signed-off-by: zhujian <jiazhu@redhat.com>
Co-authored-by: Claude <noreply@anthropic.com>
 2025-09-15 02:20:53 +00:00
Yang LeandGitHub 6d4561ca9a 🐛 fix addon namespace deletion in multi-hub scenarios (#1153)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 33s
Post / coverage (push) Failing after 40s
Post / images (amd64, addon-manager) (push) Failing after 33s
Post / images (amd64, placement) (push) Failing after 34s
Post / images (amd64, registration) (push) Failing after 33s
Post / images (amd64, registration-operator) (push) Failing after 32s
Post / images (amd64, work) (push) Failing after 38s
Post / images (arm64, addon-manager) (push) Failing after 39s
Post / images (arm64, placement) (push) Failing after 40s
Post / images (arm64, registration) (push) Failing after 35s
Post / images (arm64, registration-operator) (push) Failing after 15s
Post / images (arm64, work) (push) Failing after 18s
Post / image manifest (addon-manager) (push) Has been skipped
Post / image manifest (placement) (push) Has been skipped
Post / image manifest (registration) (push) Has been skipped
Post / image manifest (registration-operator) (push) Has been skipped
Post / image manifest (work) (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Failing after 30s 
Signed-off-by: Yang Le <yangle@redhat.com>
 2025-09-11 07:54:39 +00:00
Wei LiuandGitHub 74aa03b01c using api auth consts (#1146) 
Signed-off-by: Wei Liu <liuweixa@redhat.com>
 2025-08-28 07:15:36 +00:00
Yang LeandGitHub 0e2bbba84e 🐛 watch filtered configmaps & deployments to reduce memory usage of cluster-manager (#1030)
Post / coverage (push) Failing after 32m51s
Post / images (amd64) (push) Failing after 8m10s
Post / images (arm64) (push) Failing after 7m44s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 1m0s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 2m23s 
Signed-off-by: Yang Le <yangle@redhat.com>
 2025-06-10 06:05:27 +00:00
Jian QiuandGitHub 0734a0b763 Enable about-api when ClusterProperty featuregate is enabled (#1025) 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2025-06-06 10:11:30 +00:00
Zhiwei YinandGitHub 98443736e9 support set hub qps and burst for work in the klusterlet (#1014)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m43s
Post / coverage (push) Failing after 31m18s
Post / images (amd64) (push) Failing after 8m11s
Post / images (arm64) (push) Failing after 7m29s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 35s 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2025-05-30 02:03:07 +00:00
Jian ZhuGitHubOmar Farag
 		4cbb12d5a2 ✨ add support for custom ClusterClaim configuration (#1004)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m14s
Post / coverage (push) Failing after 26m54s
Post / images (amd64) (push) Failing after 3m38s
Post / images (arm64) (push) Failing after 3m13s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 37s 
* vendor api

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* add support for maxCustomClusterClaim

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* support ReservedClusterClaimSuffixes

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* add and use klusterletinformer

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* fix tests

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* update for change in clusterclaimconfiguration api

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* requested changes, clean up

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* Use flag to pass the reservedClusterClaimSuffixes

Signed-off-by: zhujian <jiazhu@redhat.com>

* Add cluster claim tests

Signed-off-by: zhujian <jiazhu@redhat.com>

* use StringSliceVar to parse the reserved cluster claim suffixes flag

Signed-off-by: zhujian <jiazhu@redhat.com>

* fix rebase issues

Signed-off-by: zhujian <jiazhu@redhat.com>

* address code review comments

Signed-off-by: zhujian <jiazhu@redhat.com>

---------

Signed-off-by: Omar Farag <omarfarag74@gmail.com>
Signed-off-by: zhujian <jiazhu@redhat.com>
Co-authored-by: Omar Farag <omarfarag74@gmail.com>
 2025-05-27 12:09:41 +00:00
Zhiwei YinandGitHub 3d7d770712 remove deprecated work execution clusterrolebinding (#992)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m13s
Post / coverage (push) Failing after 27m7s
Post / images (amd64) (push) Failing after 3m16s
Post / images (arm64) (push) Failing after 2m57s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2025-05-27 09:40:47 +00:00
Jian ZhuandGitHub 4d1b4ee8d5 ✨ make work status sync interval configurable (#1009) 
* update api

Signed-off-by: zhujian <jiazhu@redhat.com>

* make work status sync interval configurable

Signed-off-by: zhujian <jiazhu@redhat.com>

* add unit tests

Signed-off-by: zhujian <jiazhu@redhat.com>

* fix flaky e2e tests

Signed-off-by: zhujian <jiazhu@redhat.com>

* drop go mod replace

Signed-off-by: zhujian <jiazhu@redhat.com>

---------

Signed-off-by: zhujian <jiazhu@redhat.com>
 2025-05-27 07:47:58 +00:00
Jian ZhuandGitHub 73b6e2d514 check nil for LocalSecrets config (#962)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 2m36s
Post / images (amd64) (push) Failing after 3m35s
Post / coverage (push) Failing after 8m16s
Post / images (arm64) (push) Failing after 3m1s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped 
Signed-off-by: zhujian <jiazhu@redhat.com>
 2025-04-22 08:57:23 +00:00
Jian QiuandGitHub 2e63e4519a Remove resource relating to k8s v1.11 (#942)
Post / coverage (push) Waiting to run
Post / images (amd64) (push) Waiting to run
Post / images (arm64) (push) Waiting to run
Post / image manifest (push) Blocked by required conditions
Post / trigger clusteradm e2e (push) Blocked by required conditions
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled 
1. remove v1beta1 crds
2. remove static rbac files

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2025-04-09 07:49:13 +00:00
Ankit KurmiandGitHub cd8827572e feat: updated golang to v1.23.6 and related k8s.io packages (#870) 
Signed-off-by: Ankit152 <ankitkurmi152@gmail.com>
 2025-04-09 07:46:27 +00:00
jaswalkiranavtarGitHubAlex
 		57c78cd4de ✨ Miscellaneous code cleanup (#881)
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Post / coverage (push) Waiting to run
Post / images (amd64) (push) Waiting to run
Post / images (arm64) (push) Waiting to run
Post / image manifest (push) Blocked by required conditions
Post / trigger clusteradm e2e (push) Blocked by required conditions 
* extract constants and remove permissions

Signed-off-by: Alex <alexchan2988@gmail.com>

* Addressing miscellaneous code cleanup

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Alex <alexchan2988@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Alex <alexchan2988@gmail.com>
 2025-03-13 00:45:19 +00:00
alex0chanGitHub“JeffreyGaurav Jaswal
 		0153747acf ✨ Made changes for clusteradm accept to create role and policies on hub (#819)
Post / coverage (push) Failing after 26m56s
Post / images (amd64) (push) Failing after 6m52s
Post / images (arm64) (push) Failing after 6m50s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 54s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m19s 
* Acceping AWS IRSA registraion request

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Making csr as a default enabled driver if no other driver is explicitly enabled

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: “Jeffrey <jeffreywong0417@gmail.com>
Co-authored-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
 2025-02-18 13:14:06 +00:00
Zhiwei YinandGitHub 568789fef4 refactor to use common HasFinalizer func (#830)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 2m33s
Post / coverage (push) Failing after 26m11s
Post / images (amd64) (push) Failing after 7m0s
Post / images (arm64) (push) Failing after 6m47s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 28s 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2025-02-13 02:48:46 +00:00
jaswalkiranavtarGitHubAmrutha
 		f62242d047 ✨ Assume prerequisite role on hub if initailize with aws-irsa (#807)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m28s
Post / coverage (push) Failing after 26m43s
Post / images (amd64) (push) Failing after 6m50s
Post / images (arm64) (push) Failing after 6m49s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 35s 
* Adding managedcluster identity creator role arn

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing review comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Amrutha <amrutha.hari12@gmail.com>
 2025-01-17 16:37:47 +00:00
jaswalkiranavtarGitHubsuvaanshkumar
 		0acf030cdb ✨ Completing aws registration on spoke (#788)
Scorecard supply-chain security / Scorecard analysis (push) Failing after 40s
Post / images (amd64) (push) Failing after 5m45s
Post / images (arm64) (push) Failing after 5m45s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 26m38s
Close stale issues and PRs / stale (push) Successful in 6s 
* Completing aws registration on spoke

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>

* adding new function to overcome gci errors on slices

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>

* Refactoring array contains function

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: suvaanshkumar <suvaanshkumar@gmail.com>
 2025-01-09 19:07:43 +00:00
Jian ZhuandGitHub 41a01b1da0 Change kubecofnig secret creation time to non pointer (#731) 
Signed-off-by: zhujian <jiazhu@redhat.com>
 2024-12-02 05:26:18 +00:00
Qing HaoandGitHub ed367fd739 enable leader election of klusterlet-agent on single node managed clusters (#727) 
Signed-off-by: Qing Hao <qhao@redhat.com>
 2024-11-29 08:13:48 +00:00
jaswalkiranavtarandGitHub 93db6de4a1 ✨ Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR (#714) 
* Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding integration tests for aws registration

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding more integration tests

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Addressing review comments

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

---------

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>
 2024-11-26 17:34:53 +00:00
xuezhaoandGitHub 68eb264e56 Revert "enable leader election of klusterlet-agent on single node managed clusters (#695)" (#708) 
This reverts commit 8544ff1e29.

Signed-off-by: xuezhaojun <zxue@redhat.com>
 2024-11-20 03:45:47 +00:00
Qing HaoandGitHub 8544ff1e29 enable leader election of klusterlet-agent on single node managed clusters (#695) 
Signed-off-by: Qing Hao <qhao@redhat.com>
 2024-11-15 02:47:00 +00:00
Rokibul HasanandGitHub 369f3fb6ff Update api dependency and remove unnecessary featureGate enabling part (#687) 
Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
 2024-11-14 07:12:14 +00:00
Jian ZhuandGitHub 109bd9456e Record the external kubeconfig creation timestamp (#700) 
Signed-off-by: zhujian <jiazhu@redhat.com>
 2024-11-14 01:35:31 +00:00
SuvaanshGitHubEmilyL
 		67b4f1a354 ✨ Add AWS IAM support (#677) 
* Adding AWS IAM authentication support

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>

* Remove the bootstrapKubeconfigEventHandler field that's no longer used from the NewSpokeAgentConfig function based on code review comments.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>

* Add a comment on what the IsEksArnWellFormed function does and an example EKS ARN.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>

---------

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>
Co-authored-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
 2024-11-13 01:43:28 +00:00
Rokibul HasanandGitHub e24937ff75 Fix issue with printing <nil> for error messages (#681) 
Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
 2024-10-31 09:02:13 +00:00
Jian ZhuandGitHub 3d8cb1e02e Ignore appliedmanifestwork crd not found error when checking managed cluster connectivity (#594) 
Signed-off-by: zhujian <jiazhu@redhat.com>
 2024-08-14 07:08:43 +00:00
xuezhaoandGitHub 5a747e8a2c Operator supports MultipleHubs. (#524) 
Signed-off-by: xuezhaojun <zxue@redhat.com>
 2024-06-27 07:53:07 +00:00
Zhiwei YinandGitHub 12baec945a fix the label cannot be number (#531) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2024-06-19 07:04:12 +00:00
Zhiwei YinandGitHub 287a6fbd26 fix issue that pull secret and ns are synced labels when enable-sync-labels is disabled (#511) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2024-06-13 02:00:18 +00:00
Zhiwei YinandGitHub c4b2c65080 add enable-sync-labels flag to klusterlet operator (#505) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2024-06-06 15:03:12 +00:00
Zhiwei YinandGitHub 7fd733082f sync labels from klusterlet to all agent resources (#475) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2024-06-04 06:49:49 +00:00
Jian QiuandGitHub c056181096 ✨ Add a disable-default-addon-namespace flag (#484) 
* Add a disable-default-addon-namespace flag

if the flag is set, default addon ns will not be created
by the operator.

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Update with comments

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-06-03 06:54:15 +00:00
DONG BEIQINGandGitHub 22da639109 ✨ configurable controller replicas and master node selector (#468) 
* configurable controller replicas and master node selector

Signed-off-by: Dong Beiqing <350758787@qq.com>

* run make fmt-imports

Signed-off-by: Dong Beiqing <350758787@qq.com>

* shorter lines

Signed-off-by: Dong Beiqing <350758787@qq.com>

* rename ControllerReplicas to DeploymentReplicas

Signed-off-by: Dong Beiqing <350758787@qq.com>

* rename masterNodeLabelSelectors to controlPlaneNodeLabels

Signed-off-by: Dong Beiqing <350758787@qq.com>

* rename controlPlaneNodeLabels to controlPlaneNodeLabelSelector

Signed-off-by: Dong Beiqing <350758787@qq.com>

---------

Signed-off-by: Dong Beiqing <350758787@qq.com>
 2024-05-21 10:30:38 +00:00
Jian QiuandGitHub a31ee084a7 Always create default addon namespace (#457) 
The addon namespace should always be default on.
The operator will not create addon ns based
on klusterlet install namespace.

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-05-14 07:08:53 +00:00
Yang LeandGitHub 4e2918120c 🌱 honor the settings of AppliedManifestWorkEvictionGracePeriod in Klusterlet API (#454) 
Signed-off-by: Yang Le <yangle@redhat.com>
 2024-05-13 08:36:53 +00:00
Jian QiuandGitHub 5fc1dbdce7 🐛 Remove old ns when klusterlet ns is changed (#442) 
* Remove old ns when klusterlet ns is changed

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Resolve comments

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-05-06 03:15:48 +00:00
Zhiwei YinandGitHub 2636009a52 Add image pullSecret to hub controllers (#397) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2024-04-28 07:18:14 +00:00
Zhiwei YinandGitHub f413220b56 refactor constants in operator (#421) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2024-04-15 04:59:31 +00:00
Yang LeandGitHub c5e210af0c ✨ support configuration of the agent priorityclass (#358) 
Signed-off-by: Yang Le <yangle@redhat.com>
 2024-02-08 06:23:23 +00:00
DONG BEIQINGandGitHub 5b9b566f15 ✨ Configurable qos resources for containers managed by cluster-manager and klusterlet (#351) 
* configurable qos resources for containers managed by cluster-manager and klusterlet

Signed-off-by: Dong Beiqing <350758787@qq.com>

* run make fmt-imports

Signed-off-by: Dong Beiqing <350758787@qq.com>

---------

Signed-off-by: Dong Beiqing <350758787@qq.com>
 2024-01-23 09:41:52 +00:00
Jian QiuandGitHub 6cfce8ce24 Revert apply func (#353) 
this part dep on library-go so remove from
sdk-go

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-01-22 03:46:46 +00:00
Jian QiuandGitHub bede3edd92 Switch to patcher in sdk-go (#349) 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-01-22 02:04:49 +00:00