Commit Graph

71 Commits

Author SHA1 Message Date
Yang Le
0e2bbba84e 🐛 watch filtered configmaps & deployments to reduce memory usage of cluster-manager (#1030)
Some checks failed
Post / coverage (push) Failing after 32m51s
Post / images (amd64) (push) Failing after 8m10s
Post / images (arm64) (push) Failing after 7m44s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 1m0s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 2m23s
Signed-off-by: Yang Le <yangle@redhat.com>
2025-06-10 06:05:27 +00:00
Jian Qiu
0734a0b763 Enable about-api when ClusterProperty featuregate is enabled (#1025)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2025-06-06 10:11:30 +00:00
Zhiwei Yin
98443736e9 support set hub qps and burst for work in the klusterlet (#1014)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m43s
Post / coverage (push) Failing after 31m18s
Post / images (amd64) (push) Failing after 8m11s
Post / images (arm64) (push) Failing after 7m29s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 35s
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2025-05-30 02:03:07 +00:00
Jian Zhu
4cbb12d5a2 add support for custom ClusterClaim configuration (#1004)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m14s
Post / coverage (push) Failing after 26m54s
Post / images (amd64) (push) Failing after 3m38s
Post / images (arm64) (push) Failing after 3m13s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 37s
* vendor api

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* add support for maxCustomClusterClaim

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* support ReservedClusterClaimSuffixes

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* add and use klusterletinformer

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* fix tests

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* update for change in clusterclaimconfiguration api

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* requested changes, clean up

Signed-off-by: Omar Farag <omarfarag74@gmail.com>

* Use flag to pass the reservedClusterClaimSuffixes

Signed-off-by: zhujian <jiazhu@redhat.com>

* Add cluster claim tests

Signed-off-by: zhujian <jiazhu@redhat.com>

* use StringSliceVar to parse the reserved cluster claim suffixes flag

Signed-off-by: zhujian <jiazhu@redhat.com>

* fix rebase issues

Signed-off-by: zhujian <jiazhu@redhat.com>

* address code review comments

Signed-off-by: zhujian <jiazhu@redhat.com>

---------

Signed-off-by: Omar Farag <omarfarag74@gmail.com>
Signed-off-by: zhujian <jiazhu@redhat.com>
Co-authored-by: Omar Farag <omarfarag74@gmail.com>
2025-05-27 12:09:41 +00:00
Zhiwei Yin
3d7d770712 remove deprecated work execution clusterrolebinding (#992)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m13s
Post / coverage (push) Failing after 27m7s
Post / images (amd64) (push) Failing after 3m16s
Post / images (arm64) (push) Failing after 2m57s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2025-05-27 09:40:47 +00:00
Jian Zhu
4d1b4ee8d5 make work status sync interval configurable (#1009)
* update api

Signed-off-by: zhujian <jiazhu@redhat.com>

* make work status sync interval configurable

Signed-off-by: zhujian <jiazhu@redhat.com>

* add unit tests

Signed-off-by: zhujian <jiazhu@redhat.com>

* fix flaky e2e tests

Signed-off-by: zhujian <jiazhu@redhat.com>

* drop go mod replace

Signed-off-by: zhujian <jiazhu@redhat.com>

---------

Signed-off-by: zhujian <jiazhu@redhat.com>
2025-05-27 07:47:58 +00:00
Jian Zhu
73b6e2d514 check nil for LocalSecrets config (#962)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 2m36s
Post / images (amd64) (push) Failing after 3m35s
Post / coverage (push) Failing after 8m16s
Post / images (arm64) (push) Failing after 3m1s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Signed-off-by: zhujian <jiazhu@redhat.com>
2025-04-22 08:57:23 +00:00
Jian Qiu
2e63e4519a Remove resource relating to k8s v1.11 (#942)
Some checks failed
Post / coverage (push) Waiting to run
Post / images (amd64) (push) Waiting to run
Post / images (arm64) (push) Waiting to run
Post / image manifest (push) Blocked by required conditions
Post / trigger clusteradm e2e (push) Blocked by required conditions
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
1. remove v1beta1 crds
2. remove static rbac files

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2025-04-09 07:49:13 +00:00
Ankit Kurmi
cd8827572e feat: updated golang to v1.23.6 and related k8s.io packages (#870)
Signed-off-by: Ankit152 <ankitkurmi152@gmail.com>
2025-04-09 07:46:27 +00:00
jaswalkiranavtar
57c78cd4de Miscellaneous code cleanup (#881)
Some checks are pending
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Post / coverage (push) Waiting to run
Post / images (amd64) (push) Waiting to run
Post / images (arm64) (push) Waiting to run
Post / image manifest (push) Blocked by required conditions
Post / trigger clusteradm e2e (push) Blocked by required conditions
* extract constants and remove permissions

Signed-off-by: Alex <alexchan2988@gmail.com>

* Addressing miscellaneous code cleanup

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Alex <alexchan2988@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Alex <alexchan2988@gmail.com>
2025-03-13 00:45:19 +00:00
alex0chan
0153747acf Made changes for clusteradm accept to create role and policies on hub (#819)
Some checks failed
Post / coverage (push) Failing after 26m56s
Post / images (amd64) (push) Failing after 6m52s
Post / images (arm64) (push) Failing after 6m50s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 54s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m19s
* Acceping AWS IRSA registraion request

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Making csr as a default enabled driver if no other driver is explicitly enabled

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: “Jeffrey <jeffreywong0417@gmail.com>
Co-authored-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
2025-02-18 13:14:06 +00:00
Zhiwei Yin
568789fef4 refactor to use common HasFinalizer func (#830)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 2m33s
Post / coverage (push) Failing after 26m11s
Post / images (amd64) (push) Failing after 7m0s
Post / images (arm64) (push) Failing after 6m47s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 28s
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2025-02-13 02:48:46 +00:00
jaswalkiranavtar
f62242d047 Assume prerequisite role on hub if initailize with aws-irsa (#807)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m28s
Post / coverage (push) Failing after 26m43s
Post / images (amd64) (push) Failing after 6m50s
Post / images (arm64) (push) Failing after 6m49s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 35s
* Adding managedcluster identity creator role arn

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing review comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Amrutha <amrutha.hari12@gmail.com>
2025-01-17 16:37:47 +00:00
jaswalkiranavtar
0acf030cdb Completing aws registration on spoke (#788)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 40s
Post / images (amd64) (push) Failing after 5m45s
Post / images (arm64) (push) Failing after 5m45s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 26m38s
Close stale issues and PRs / stale (push) Successful in 6s
* Completing aws registration on spoke

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>

* adding new function to overcome gci errors on slices

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>

* Refactoring array contains function

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: suvaanshkumar <suvaanshkumar@gmail.com>
2025-01-09 19:07:43 +00:00
Jian Zhu
41a01b1da0 Change kubecofnig secret creation time to non pointer (#731)
Signed-off-by: zhujian <jiazhu@redhat.com>
2024-12-02 05:26:18 +00:00
Qing Hao
ed367fd739 enable leader election of klusterlet-agent on single node managed clusters (#727)
Signed-off-by: Qing Hao <qhao@redhat.com>
2024-11-29 08:13:48 +00:00
jaswalkiranavtar
93db6de4a1 Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR (#714)
* Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding integration tests for aws registration

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding more integration tests

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Addressing review comments

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

---------

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>
2024-11-26 17:34:53 +00:00
xuezhao
68eb264e56 Revert "enable leader election of klusterlet-agent on single node managed clusters (#695)" (#708)
This reverts commit 8544ff1e29.

Signed-off-by: xuezhaojun <zxue@redhat.com>
2024-11-20 03:45:47 +00:00
Qing Hao
8544ff1e29 enable leader election of klusterlet-agent on single node managed clusters (#695)
Signed-off-by: Qing Hao <qhao@redhat.com>
2024-11-15 02:47:00 +00:00
Rokibul Hasan
369f3fb6ff Update api dependency and remove unnecessary featureGate enabling part (#687)
Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
2024-11-14 07:12:14 +00:00
Jian Zhu
109bd9456e Record the external kubeconfig creation timestamp (#700)
Signed-off-by: zhujian <jiazhu@redhat.com>
2024-11-14 01:35:31 +00:00
Suvaansh
67b4f1a354 Add AWS IAM support (#677)
* Adding AWS IAM authentication support

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>

* Remove the bootstrapKubeconfigEventHandler field that's no longer used from the NewSpokeAgentConfig function based on code review comments.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>

* Add a comment on what the IsEksArnWellFormed function does and an example EKS ARN.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>

---------

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>
Co-authored-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
2024-11-13 01:43:28 +00:00
Rokibul Hasan
e24937ff75 Fix issue with printing <nil> for error messages (#681)
Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
2024-10-31 09:02:13 +00:00
Rokibul Hasan
e9245d46d7 🐛 Fix duplicate deployment names in klusterlet-agent availability message (#671)
* Fix duplicate deployment names in klusterlet-agent availability message

Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>

* Update

Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>

---------

Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
2024-10-28 01:53:47 +00:00
Jian Zhu
3d8cb1e02e Ignore appliedmanifestwork crd not found error when checking managed cluster connectivity (#594)
Signed-off-by: zhujian <jiazhu@redhat.com>
2024-08-14 07:08:43 +00:00
Jian Qiu
2582ad922d Update deps to 1.30 (#546)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-07-02 14:04:15 +00:00
xuezhao
5a747e8a2c Operator supports MultipleHubs. (#524)
Signed-off-by: xuezhaojun <zxue@redhat.com>
2024-06-27 07:53:07 +00:00
Zhiwei Yin
12baec945a fix the label cannot be number (#531)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-06-19 07:04:12 +00:00
Zhiwei Yin
287a6fbd26 fix issue that pull secret and ns are synced labels when enable-sync-labels is disabled (#511)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-06-13 02:00:18 +00:00
Zhiwei Yin
c4b2c65080 add enable-sync-labels flag to klusterlet operator (#505)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-06-06 15:03:12 +00:00
xuezhao
0357cb99e1 Registration-agent supports multiple bootstrapkubeconfigs and switch-hub. (#443)
Signed-off-by: xuezhaojun <zxue@redhat.com>
2024-06-04 13:46:39 +00:00
Zhiwei Yin
7fd733082f sync labels from klusterlet to all agent resources (#475)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-06-04 06:49:49 +00:00
Jian Qiu
c056181096 Add a disable-default-addon-namespace flag (#484)
* Add a disable-default-addon-namespace flag

if the flag is set, default addon ns will not be created
by the operator.

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Update with comments

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-06-03 06:54:15 +00:00
DONG BEIQING
22da639109 configurable controller replicas and master node selector (#468)
* configurable controller replicas and master node selector

Signed-off-by: Dong Beiqing <350758787@qq.com>

* run make fmt-imports

Signed-off-by: Dong Beiqing <350758787@qq.com>

* shorter lines

Signed-off-by: Dong Beiqing <350758787@qq.com>

* rename ControllerReplicas to DeploymentReplicas

Signed-off-by: Dong Beiqing <350758787@qq.com>

* rename masterNodeLabelSelectors to controlPlaneNodeLabels

Signed-off-by: Dong Beiqing <350758787@qq.com>

* rename controlPlaneNodeLabels to controlPlaneNodeLabelSelector

Signed-off-by: Dong Beiqing <350758787@qq.com>

---------

Signed-off-by: Dong Beiqing <350758787@qq.com>
2024-05-21 10:30:38 +00:00
Jian Qiu
a31ee084a7 Always create default addon namespace (#457)
The addon namespace should always be default on.
The operator will not create addon ns based
on klusterlet install namespace.

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-05-14 07:08:53 +00:00
Yang Le
4e2918120c 🌱 honor the settings of AppliedManifestWorkEvictionGracePeriod in Klusterlet API (#454)
Signed-off-by: Yang Le <yangle@redhat.com>
2024-05-13 08:36:53 +00:00
Jian Qiu
5fc1dbdce7 🐛 Remove old ns when klusterlet ns is changed (#442)
* Remove old ns when klusterlet ns is changed

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Resolve comments

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-05-06 03:15:48 +00:00
Zhiwei Yin
2636009a52 Add image pullSecret to hub controllers (#397)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-04-28 07:18:14 +00:00
Zhiwei Yin
f413220b56 refactor constants in operator (#421)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-04-15 04:59:31 +00:00
Yang Le
c5e210af0c support configuration of the agent priorityclass (#358)
Signed-off-by: Yang Le <yangle@redhat.com>
2024-02-08 06:23:23 +00:00
DONG BEIQING
5b9b566f15 Configurable qos resources for containers managed by cluster-manager and klusterlet (#351)
* configurable qos resources for containers managed by cluster-manager and klusterlet

Signed-off-by: Dong Beiqing <350758787@qq.com>

* run make fmt-imports

Signed-off-by: Dong Beiqing <350758787@qq.com>

---------

Signed-off-by: Dong Beiqing <350758787@qq.com>
2024-01-23 09:41:52 +00:00
Jian Qiu
6cfce8ce24 Revert apply func (#353)
this part dep on library-go so remove from
sdk-go

Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-01-22 03:46:46 +00:00
Jian Qiu
bede3edd92 Switch to patcher in sdk-go (#349)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2024-01-22 02:04:49 +00:00
Zhiwei Yin
8bd99799e4 configure QPS and Burst for the flags of klusterlet agents (#344)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2024-01-18 01:35:58 +00:00
Wei Liu
d2324b8581 supporting cloudevents for work agent (#321)
Signed-off-by: Wei Liu <liuweixa@redhat.com>
2023-12-07 05:16:59 +00:00
Jian Qiu
7ceb9a2bce Reduce permission for cluster manager and klusterlet (#325)
Signed-off-by: Jian Qiu <jqiu@redhat.com>
2023-11-30 13:05:39 +00:00
haowells
8a4c834ebf klusterlet cr add flag to use best effort resources (#317)
* klusterlet cr add flag to use besteffort resources

Signed-off-by: haolin <haowells@gmail.com>

* rename resource type to resource requirements

Signed-off-by: haolin <haowells@gmail.com>

* update api to latest version

Signed-off-by: haolin <haowells@gmail.com>

* fix typo of ResourceRequirements

Signed-off-by: haolin <haowells@gmail.com>

---------

Signed-off-by: haolin <haowells@gmail.com>
Co-authored-by: haolin <haolin@ebay.com>
2023-11-27 09:49:44 +00:00
Yang Le
9aaa1327fa 🐛 move the rebootstrap logic to registration agent (#267)
Signed-off-by: Yang Le <yangle@redhat.com>
2023-10-18 09:58:06 +00:00
Jian Zhu
75db27dd61 set work agent status-sync-interval when the replica is 1 (#282)
Signed-off-by: zhujian <jiazhu@redhat.com>
2023-09-24 22:21:37 -04:00
Zhiwei Yin
769272cbec fix failed update roleRef in clusterrolebinding in upgrade case (#284)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2023-09-20 23:16:06 -04:00