Commit Graph

60 Commits

Author SHA1 Message Date
Jian Zhu
4d1b4ee8d5 make work status sync interval configurable (#1009)
* update api

Signed-off-by: zhujian <jiazhu@redhat.com>

* make work status sync interval configurable

Signed-off-by: zhujian <jiazhu@redhat.com>

* add unit tests

Signed-off-by: zhujian <jiazhu@redhat.com>

* fix flaky e2e tests

Signed-off-by: zhujian <jiazhu@redhat.com>

* drop go mod replace

Signed-off-by: zhujian <jiazhu@redhat.com>

---------

Signed-off-by: zhujian <jiazhu@redhat.com>
2025-05-27 07:47:58 +00:00
Jian Zhu
73b6e2d514 check nil for LocalSecrets config (#962)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 2m36s
Post / images (amd64) (push) Failing after 3m35s
Post / coverage (push) Failing after 8m16s
Post / images (arm64) (push) Failing after 3m1s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Signed-off-by: zhujian <jiazhu@redhat.com>
2025-04-22 08:57:23 +00:00
Jian Qiu
2e63e4519a Remove resource relating to k8s v1.11 (#942)
Some checks failed
Post / coverage (push) Waiting to run
Post / images (amd64) (push) Waiting to run
Post / images (arm64) (push) Waiting to run
Post / image manifest (push) Blocked by required conditions
Post / trigger clusteradm e2e (push) Blocked by required conditions
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
1. remove v1beta1 crds
2. remove static rbac files

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2025-04-09 07:49:13 +00:00
Ankit Kurmi
cd8827572e feat: updated golang to v1.23.6 and related k8s.io packages (#870)
Signed-off-by: Ankit152 <ankitkurmi152@gmail.com>
2025-04-09 07:46:27 +00:00
jaswalkiranavtar
57c78cd4de Miscellaneous code cleanup (#881)
Some checks are pending
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Post / coverage (push) Waiting to run
Post / images (amd64) (push) Waiting to run
Post / images (arm64) (push) Waiting to run
Post / image manifest (push) Blocked by required conditions
Post / trigger clusteradm e2e (push) Blocked by required conditions
* extract constants and remove permissions

Signed-off-by: Alex <alexchan2988@gmail.com>

* Addressing miscellaneous code cleanup

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Alex <alexchan2988@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Alex <alexchan2988@gmail.com>
2025-03-13 00:45:19 +00:00
alex0chan
0153747acf Made changes for clusteradm accept to create role and policies on hub (#819)
Some checks failed
Post / coverage (push) Failing after 26m56s
Post / images (amd64) (push) Failing after 6m52s
Post / images (arm64) (push) Failing after 6m50s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 54s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m19s
* Acceping AWS IRSA registraion request

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Making csr as a default enabled driver if no other driver is explicitly enabled

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: “Jeffrey <jeffreywong0417@gmail.com>
Co-authored-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
2025-02-18 13:14:06 +00:00
Zhiwei Yin
568789fef4 refactor to use common HasFinalizer func (#830)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 2m33s
Post / coverage (push) Failing after 26m11s
Post / images (amd64) (push) Failing after 7m0s
Post / images (arm64) (push) Failing after 6m47s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 28s
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2025-02-13 02:48:46 +00:00
jaswalkiranavtar
f62242d047 Assume prerequisite role on hub if initailize with aws-irsa (#807)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m28s
Post / coverage (push) Failing after 26m43s
Post / images (amd64) (push) Failing after 6m50s
Post / images (arm64) (push) Failing after 6m49s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 35s
* Adding managedcluster identity creator role arn

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing review comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Amrutha <amrutha.hari12@gmail.com>
2025-01-17 16:37:47 +00:00
jaswalkiranavtar
0acf030cdb Completing aws registration on spoke (#788)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 40s
Post / images (amd64) (push) Failing after 5m45s
Post / images (arm64) (push) Failing after 5m45s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 26m38s
Close stale issues and PRs / stale (push) Successful in 6s
* Completing aws registration on spoke

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>

* adding new function to overcome gci errors on slices

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>

* Refactoring array contains function

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: suvaanshkumar <suvaanshkumar@gmail.com>
2025-01-09 19:07:43 +00:00
Jian Zhu
41a01b1da0 Change kubecofnig secret creation time to non pointer (#731)
Signed-off-by: zhujian <jiazhu@redhat.com>
2024-12-02 05:26:18 +00:00
Qing Hao
ed367fd739 enable leader election of klusterlet-agent on single node managed clusters (#727)
Signed-off-by: Qing Hao <qhao@redhat.com>
2024-11-29 08:13:48 +00:00
jaswalkiranavtar
93db6de4a1 Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR (#714)
* Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding integration tests for aws registration

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding more integration tests

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Addressing review comments

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

---------

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>
2024-11-26 17:34:53 +00:00
xuezhao
68eb264e56 Revert "enable leader election of klusterlet-agent on single node managed clusters (#695)" (#708)
This reverts commit 8544ff1e29.

Signed-off-by: xuezhaojun <zxue@redhat.com>
2024-11-20 03:45:47 +00:00
Qing Hao
8544ff1e29 enable leader election of klusterlet-agent on single node managed clusters (#695)
Signed-off-by: Qing Hao <qhao@redhat.com>
2024-11-15 02:47:00 +00:00
Rokibul Hasan
369f3fb6ff Update api dependency and remove unnecessary featureGate enabling part (#687)
Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
2024-11-14 07:12:14 +00:00
Jian Zhu
109bd9456e Record the external kubeconfig creation timestamp (#700)
Signed-off-by: zhujian <jiazhu@redhat.com>
2024-11-14 01:35:31 +00:00
Suvaansh
67b4f1a354 Add AWS IAM support (#677)
* Adding AWS IAM authentication support

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>

* Remove the bootstrapKubeconfigEventHandler field that's no longer used from the NewSpokeAgentConfig function based on code review comments.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>

* Add a comment on what the IsEksArnWellFormed function does and an example EKS ARN.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>

---------

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>
Co-authored-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
2024-11-13 01:43:28 +00:00
Rokibul Hasan
e24937ff75 Fix issue with printing <nil> for error messages (#681)
Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
2024-10-31 09:02:13 +00:00
Jian Zhu
3d8cb1e02e Ignore appliedmanifestwork crd not found error when checking managed cluster connectivity (#594)
Signed-off-by: zhujian <jiazhu@redhat.com>
2024-08-14 07:08:43 +00:00
xuezhao
5a747e8a2c Operator supports MultipleHubs. (#524)
Signed-off-by: xuezhaojun <zxue@redhat.com>
2024-06-27 07:53:07 +00:00
Zhiwei Yin
12baec945a fix the label cannot be number (#531)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-06-19 07:04:12 +00:00
Zhiwei Yin
287a6fbd26 fix issue that pull secret and ns are synced labels when enable-sync-labels is disabled (#511)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-06-13 02:00:18 +00:00
Zhiwei Yin
c4b2c65080 add enable-sync-labels flag to klusterlet operator (#505)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-06-06 15:03:12 +00:00
Zhiwei Yin
7fd733082f sync labels from klusterlet to all agent resources (#475)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-06-04 06:49:49 +00:00
Jian Qiu
c056181096 Add a disable-default-addon-namespace flag (#484)
* Add a disable-default-addon-namespace flag

if the flag is set, default addon ns will not be created
by the operator.

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Update with comments

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-06-03 06:54:15 +00:00
DONG BEIQING
22da639109 configurable controller replicas and master node selector (#468)
* configurable controller replicas and master node selector

Signed-off-by: Dong Beiqing <350758787@qq.com>

* run make fmt-imports

Signed-off-by: Dong Beiqing <350758787@qq.com>

* shorter lines

Signed-off-by: Dong Beiqing <350758787@qq.com>

* rename ControllerReplicas to DeploymentReplicas

Signed-off-by: Dong Beiqing <350758787@qq.com>

* rename masterNodeLabelSelectors to controlPlaneNodeLabels

Signed-off-by: Dong Beiqing <350758787@qq.com>

* rename controlPlaneNodeLabels to controlPlaneNodeLabelSelector

Signed-off-by: Dong Beiqing <350758787@qq.com>

---------

Signed-off-by: Dong Beiqing <350758787@qq.com>
2024-05-21 10:30:38 +00:00
Jian Qiu
a31ee084a7 Always create default addon namespace (#457)
The addon namespace should always be default on.
The operator will not create addon ns based
on klusterlet install namespace.

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-05-14 07:08:53 +00:00
Yang Le
4e2918120c 🌱 honor the settings of AppliedManifestWorkEvictionGracePeriod in Klusterlet API (#454)
Signed-off-by: Yang Le <yangle@redhat.com>
2024-05-13 08:36:53 +00:00
Jian Qiu
5fc1dbdce7 🐛 Remove old ns when klusterlet ns is changed (#442)
* Remove old ns when klusterlet ns is changed

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Resolve comments

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-05-06 03:15:48 +00:00
Zhiwei Yin
2636009a52 Add image pullSecret to hub controllers (#397)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-04-28 07:18:14 +00:00
Zhiwei Yin
f413220b56 refactor constants in operator (#421)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-04-15 04:59:31 +00:00
Yang Le
c5e210af0c support configuration of the agent priorityclass (#358)
Signed-off-by: Yang Le <yangle@redhat.com>
2024-02-08 06:23:23 +00:00
DONG BEIQING
5b9b566f15 Configurable qos resources for containers managed by cluster-manager and klusterlet (#351)
* configurable qos resources for containers managed by cluster-manager and klusterlet

Signed-off-by: Dong Beiqing <350758787@qq.com>

* run make fmt-imports

Signed-off-by: Dong Beiqing <350758787@qq.com>

---------

Signed-off-by: Dong Beiqing <350758787@qq.com>
2024-01-23 09:41:52 +00:00
Jian Qiu
6cfce8ce24 Revert apply func (#353)
this part dep on library-go so remove from
sdk-go

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-01-22 03:46:46 +00:00
Jian Qiu
bede3edd92 Switch to patcher in sdk-go (#349)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-01-22 02:04:49 +00:00
Zhiwei Yin
8bd99799e4 configure QPS and Burst for the flags of klusterlet agents (#344)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-01-18 01:35:58 +00:00
Wei Liu
d2324b8581 supporting cloudevents for work agent (#321)
Signed-off-by: Wei Liu <liuweixa@redhat.com>
2023-12-07 05:16:59 +00:00
haowells
8a4c834ebf klusterlet cr add flag to use best effort resources (#317)
* klusterlet cr add flag to use besteffort resources

Signed-off-by: haolin <haowells@gmail.com>

* rename resource type to resource requirements

Signed-off-by: haolin <haowells@gmail.com>

* update api to latest version

Signed-off-by: haolin <haowells@gmail.com>

* fix typo of ResourceRequirements

Signed-off-by: haolin <haowells@gmail.com>

---------

Signed-off-by: haolin <haowells@gmail.com>
Co-authored-by: haolin <haolin@ebay.com>
2023-11-27 09:49:44 +00:00
Yang Le
9aaa1327fa 🐛 move the rebootstrap logic to registration agent (#267)
Signed-off-by: Yang Le <yangle@redhat.com>
2023-10-18 09:58:06 +00:00
Jian Zhu
75db27dd61 set work agent status-sync-interval when the replica is 1 (#282)
Signed-off-by: zhujian <jiazhu@redhat.com>
2023-09-24 22:21:37 -04:00
Zhiwei Yin
769272cbec fix failed update roleRef in clusterrolebinding in upgrade case (#284)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2023-09-20 23:16:06 -04:00
Jian Qiu
bd4982fffc Fix: change singleton agent sa to work sa (#279)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2023-09-15 10:01:14 +02:00
Jian Zhu
fda6514ba6 delete klusterlet if the managed cluster refused the connection (#278)
Signed-off-by: zhujian <jiazhu@redhat.com>
2023-09-14 05:05:34 +02:00
Jian Qiu
404680d302 support singleton in hosted mode (#258)
* delete old agent when switch to singleton mode

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* run singleton hosted mode

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Sync sa on spoke as external-agent-kubeconfig

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2023-09-07 03:33:17 +02:00
Yang Le
7adf6ee1bc 🐛 correct the agent deployment name in different install mode (#265)
Signed-off-by: Yang Le <yangle@redhat.com>
2023-09-05 05:34:36 +02:00
Jian Qiu
e297899a3c Remove old agent when upgrade to singleton (#263)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2023-09-04 11:07:38 +02:00
Yang Le
f444b340c8 🐛 add wlp annotation if necessary (#248)
Signed-off-by: Yang Le <yangle@redhat.com>
2023-08-16 22:55:27 -02:30
Yang Le
8080e5dc3b 🐛 fix the rebootstrap issue (#249)
Signed-off-by: Yang Le <yangle@redhat.com>
2023-08-14 23:07:33 -02:30
Jian Qiu
3167826df9 Use finalizer in api repo (#241)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2023-08-04 11:54:55 +02:00
xuezhaojun
142fd5b247 Add ClusterAnnotations support. (#234)
Signed-off-by: xuezhaojun <zxue@redhat.com>
2023-07-27 04:31:25 +02:00