Commit Graph

77 Commits

Author SHA1 Message Date
Jian Qiu
25ea10bcbf Add importer into registration (#753)
* Add importer into registraiton

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Add unit tests

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Add integration test

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-12-16 13:59:55 +00:00
jaswalkiranavtar
b170f3a41e Cluster decorator interface (#759)
* Add cluster decorator interface in register

And refactor creating to controller to call decorators

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Add aws annotations to ManagedCluster using Decorator

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing review comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Jian Qiu <jqiu@redhat.com>
2024-12-11 15:59:43 +00:00
Suvaansh
9eb8131bea Create registration option by driver type after bootstrap (#744)
Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>
Co-authored-by: Jian Qiu <jqiu@redhat.com>
2024-12-06 02:05:23 +00:00
jaswalkiranavtar
a138a547f5 Adding second group for aws auth flow (#735)
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
2024-12-05 06:36:18 +00:00
Qing Hao
ed367fd739 enable leader election of klusterlet-agent on single node managed clusters (#727)
Signed-off-by: Qing Hao <qhao@redhat.com>
2024-11-29 08:13:48 +00:00
jaswalkiranavtar
93db6de4a1 Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR (#714)
* Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding integration tests for aws registration

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding more integration tests

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Addressing review comments

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

---------

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>
2024-11-26 17:34:53 +00:00
Yang Le
2f9dcc2ea5 🌱 support CA file in the bootstrap hub kubeconfig (#710)
Signed-off-by: Yang Le <yangle@redhat.com>
2024-11-21 09:06:35 +00:00
Rokibul Hasan
369f3fb6ff Update api dependency and remove unnecessary featureGate enabling part (#687)
Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
2024-11-14 07:12:14 +00:00
Suvaansh
67b4f1a354 Add AWS IAM support (#677)
* Adding AWS IAM authentication support

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>

* Remove the bootstrapKubeconfigEventHandler field that's no longer used from the NewSpokeAgentConfig function based on code review comments.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>

* Add a comment on what the IsEksArnWellFormed function does and an example EKS ARN.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>

---------

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>
Co-authored-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
2024-11-13 01:43:28 +00:00
xuezhao
7664585c22 Fix: reduce cluster rbac when accpet to false. (#675)
Signed-off-by: xuezhaojun <zxue@redhat.com>
2024-11-04 02:02:25 +00:00
Wei Liu
d26db93494 Add auto approve anno for accepted cluster (#680)
Signed-off-by: Wei Liu <liuweixa@redhat.com>
2024-10-31 02:52:23 +00:00
Jian Qiu
fa98535693 🐛 Use context cancel func to trigger reselect (#658)
* Use context cancel func to trigger reselect

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Add test to improve coverage

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-10-29 02:06:13 +00:00
Rokibul Hasan
a0370e2e5d Remove ManagedClusterSet webhook registration part (#678)
Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
2024-10-28 13:43:44 +00:00
xuezhao
26f9e74ac9 Rename and relocate cluster related roles files. (#674)
Signed-off-by: xuezhaojun <zxue@redhat.com>
2024-10-28 01:56:29 +00:00
Jian Qiu
900248f214 Return false when accept return error (#622)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-10-21 10:51:00 +00:00
Yang Le
9a47edcae0 🐛 handle the unknown status of the previously accepted cluster (#656)
Signed-off-by: Yang Le <yangle@redhat.com>
2024-10-21 02:33:13 +00:00
Qing Hao
d9ab25283e sync between ManagedCluster and cluster inventory API (#615)
Signed-off-by: haoqing0110 <qhao@redhat.com>
2024-10-15 04:04:41 +00:00
Qing Hao
4ebe9d7978 🐛 monitor the bootstrap kubeconfig and restart immediately when changes (#630)
* monitor the bootstrap kubeconfig and restart immediately when changes

Signed-off-by: haoqing0110 <qhao@redhat.com>

* fix comments

Signed-off-by: haoqing0110 <qhao@redhat.com>

---------

Signed-off-by: haoqing0110 <qhao@redhat.com>
2024-09-30 06:24:20 +00:00
Zhiwei Yin
77726223f2 fix the cluster name is digital (#621)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-09-19 02:15:42 +00:00
Jian Qiu
0536c757af 🌱 Move hub side csr code to csr driver (#580)
* Move hub side csr code to csr driver

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Add ut

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-08-19 06:32:07 +00:00
xuezhao
bb383e26c9 Add xuezhaojun in registration owners. (#583)
Signed-off-by: GitHub <noreply@github.com>
2024-08-01 05:32:30 +00:00
Jian Qiu
8c1d286b11 Refactor registration (#535)
* Refactor registration

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Fix integration test

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Refactor cert controller to secret controller

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Update health check func

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-07-17 14:14:11 +00:00
Jian Qiu
2582ad922d Update deps to 1.30 (#546)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-07-02 14:04:15 +00:00
xuezhao
fc9b2d96e1 Refactor client certificates. (#522)
Signed-off-by: xuezhaojun <zxue@redhat.com>
2024-06-26 13:52:08 +00:00
Yang Le
a14450aa93 🌱 make additional secret data always sensitive (#525)
Signed-off-by: Yang Le <yangle@redhat.com>
2024-06-26 02:32:52 +00:00
xuezhao
6767167ff8 Fix: should use klog.FromContext instead of log.FromContext (#537)
Signed-off-by: GitHub <noreply@github.com>
2024-06-24 07:39:14 +00:00
Wei Liu
8e5d1a13bc using managed cluster instead of spoke in log msg (#512)
Signed-off-by: Wei Liu <liuweixa@redhat.com>
2024-06-12 08:44:56 +00:00
Jian Zhu
b38dc2ccef Update ClusterCertificateRotated to false if the signer name is invalid (#507)
Signed-off-by: zhujian <jiazhu@redhat.com>
2024-06-11 01:56:43 +00:00
Jian Zhu
ea839f1369 🐛 Check if template is nil when getting the addon agent registration namespace (#500)
* Check if template is nil when getting the addon agent registration namespace

Signed-off-by: zhujian <jiazhu@redhat.com>

* Fix typo

Signed-off-by: zhujian <jiazhu@redhat.com>

---------

Signed-off-by: zhujian <jiazhu@redhat.com>
2024-06-05 13:43:44 +00:00
Jian Zhu
3ac9655565 Refine the cluster available event messages (#496)
Signed-off-by: zhujian <jiazhu@redhat.com>
2024-06-05 07:46:02 +00:00
xuezhao
0357cb99e1 Registration-agent supports multiple bootstrapkubeconfigs and switch-hub. (#443)
Signed-off-by: xuezhaojun <zxue@redhat.com>
2024-06-04 13:46:39 +00:00
Rokibul Hasan
b545546a7b 🐛 Fix "log.SetLogger(...) was never called" in registration webhook (#488)
* Fix "log.SetLogger(...) was never called" in registration webhook

Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>

* Move logger to the beginning of the func

Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>

---------

Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
2024-06-03 01:43:22 +00:00
xuezhao
c61895ca6b Add event when stop creating CSR too many. (#482)
Signed-off-by: xuezhaojun <zxue@redhat.com>
2024-05-30 01:45:52 +00:00
Jian Zhu
66d4e782ec 🐛 Regenerate the hub kubeconfig secret if the cluster name of the current context changes (#473)
* Regenerate the hub kubeconfig secret if the cluster name of the current context changes

Signed-off-by: zhujian <jiazhu@redhat.com>

* Add an integration test

Signed-off-by: zhujian <jiazhu@redhat.com>

---------

Signed-off-by: zhujian <jiazhu@redhat.com>
2024-05-23 14:31:09 +00:00
Jian Zhu
df3b290dc5 Handle hosted mode addons in addon progressing controller (#464)
Signed-off-by: zhujian <jiazhu@redhat.com>
2024-05-16 01:56:57 +00:00
Jian Zhu
c749b42ca0 Send available condition events for managed cluster (#450)
* Send available condition events for managed cluster

Signed-off-by: zhujian <jiazhu@redhat.com>

* Send available condition events for managed cluster

Signed-off-by: zhujian <jiazhu@redhat.com>

* Rename event reporting component

Signed-off-by: zhujian <jiazhu@redhat.com>

---------

Signed-off-by: zhujian <jiazhu@redhat.com>
2024-05-06 07:00:36 +00:00
xuezhao
eba3d9670b Refactor Lease controller test cases. (#435)
Signed-off-by: GitHub <noreply@github.com>
2024-04-22 01:50:29 +00:00
Jian Qiu
3a2250d974 Refactor NewUnstructured method (#418)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-04-11 12:01:07 +00:00
Wei Liu
fd2d0eb16e avoid cluster auto approve failed occasionally (#388)
Signed-off-by: Wei Liu <liuweixa@redhat.com>
2024-04-07 03:44:54 +00:00
Matt Prahl
2cd6a6fb99 Fix the valid client certificate check (#378)
The commit edef33de92 introduced
additional checks on the certificate subject. The issue is that the
order of the groups and organizational units are not consistent, so it
was causing the addon-framework to generate several CSRs with many
coming back as invalid.

This takes the approach of sorting the strings before doing the
comparison.

Signed-off-by: mprahl <mprahl@users.noreply.github.com>
2024-03-15 15:51:36 +00:00
xuezhao
edef33de92 Retrigger CSR when subject org and ou doesn't match. (#377)
Signed-off-by: GitHub <noreply@github.com>
2024-03-14 08:44:16 +00:00
Jian Qiu
6cfce8ce24 Revert apply func (#353)
this part dep on library-go so remove from
sdk-go

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-01-22 03:46:46 +00:00
Jian Qiu
bede3edd92 Switch to patcher in sdk-go (#349)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-01-22 02:04:49 +00:00
Jian Qiu
1d42f4285e Switch to sdk-go for helper functions (#346)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-01-17 14:28:54 +00:00
xuezhaojun
9dc8f104cf Update api dependencies and handle deprecated code. (#333)
Signed-off-by: xuezhaojun <zxue@redhat.com>
2023-12-20 10:21:48 +00:00
xuezhaojun
5884bc5c21 Add clock sync condition controller. (#312)
Signed-off-by: xuezhaojun <zxue@redhat.com>
2023-12-05 02:05:36 +00:00
Jian Qiu
f89d535ff3 skip namespace in resourceMeta for cluster scoped resource (#324)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2023-11-29 07:31:31 +00:00
Zhiwei Yin
f003ed38a5 refactor gc controller (#229)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2023-10-23 07:05:35 +00:00
Yang Le
9aaa1327fa 🐛 move the rebootstrap logic to registration agent (#267)
Signed-off-by: Yang Le <yangle@redhat.com>
2023-10-18 09:58:06 +00:00
Jian Qiu
d5e10c664d remove deps to k8s.io/kubernetes (#274)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2023-09-11 10:32:36 +02:00