github/open-cluster-management
1
0
Fork 0
mirror of https://github.com/open-cluster-management-io/ocm.git synced 2026-05-24 01:54:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,752 Commits 15 Branches 22 Tags
b13cb4d4e1875efaab923e399ee71cb87cf7e71a
Commit Graph

99 Commits

Author SHA1 Message Date
xuezhao
b13cb4d4e1 Improve logging in selectBootstrapKubeConfigs function by replacing index with bootstrapKubeConfig in error and info messages for better clarity. (#896)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 2m34s
Post / coverage (push) Failing after 8m1s
Post / images (amd64) (push) Failing after 3m27s
Post / images (arm64) (push) Failing after 5m19s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 50s
Signed-off-by: xuezhaojun <zxue@redhat.com>
 2025-03-18 08:48:55 +00:00
jaswalkiranavtar
57c78cd4de ✨ Miscellaneous code cleanup (#881)
Some checks are pending
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Post / coverage (push) Waiting to run
Post / images (amd64) (push) Waiting to run
Post / images (arm64) (push) Waiting to run
Post / image manifest (push) Blocked by required conditions
Post / trigger clusteradm e2e (push) Blocked by required conditions
* extract constants and remove permissions

Signed-off-by: Alex <alexchan2988@gmail.com>

* Addressing miscellaneous code cleanup

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Alex <alexchan2988@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Alex <alexchan2988@gmail.com>
 2025-03-13 00:45:19 +00:00
Jian Zhu
a5f3912a66 Separate crd objects from others (#882)
Some checks failed
Post / coverage (push) Waiting to run
Post / images (amd64) (push) Waiting to run
Post / images (arm64) (push) Waiting to run
Post / image manifest (push) Blocked by required conditions
Post / trigger clusteradm e2e (push) Blocked by required conditions
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
Signed-off-by: zhujian <jiazhu@redhat.com>
 2025-03-12 03:38:09 +00:00
Amrutha Harikumar
c4e706f123 ✨ Make ocm changes to tag aws resources by OCM hub (#862) 
* Implementing aws resource tags

Signed-off-by: Amrutha <amrutha.hari12@gmail.com>
Signed-off-by: Alex <alexchan2988@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Fixing tests

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Amrutha <amrutha.hari12@gmail.com>
Signed-off-by: Alex <alexchan2988@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
 2025-03-06 19:29:29 +00:00
Ramesh Krishna
2cc250b13a ✨ ✨ cleanup IAM resources for aws irsa (#860)
Some checks failed
Post / images (amd64) (push) Failing after 8m2s
Post / images (arm64) (push) Failing after 14m13s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 26m45s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m21s
Close stale issues and PRs / stale (push) Successful in 5s
* cleanup IAM resources

Signed-off-by: Alex <alexchan2988@gmail.com>

* feat: fix go verify errrors.

Signed-off-by: Ramesh Krishna <ramekris3163@gmail.com>

* feat: cleanup IAM resources only if managed cluster annotation is present.

Signed-off-by: Ramesh Krishna <ramekris3163@gmail.com>

---------

Signed-off-by: Alex <alexchan2988@gmail.com>
Signed-off-by: Ramesh Krishna <ramekris3163@gmail.com>
Co-authored-by: Alex <alexchan2988@gmail.com>
 2025-03-05 01:40:50 +00:00
jaswalkiranavtar
6c270f90a0 chore: Adding new Guidewire team members to maintainers list (#851)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 59s
Post / coverage (push) Failing after 8m25s
Post / images (amd64) (push) Failing after 7m28s
Post / images (arm64) (push) Failing after 5m21s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 28s
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
 2025-02-28 20:26:23 +00:00
jaswalkiranavtar
94bfd426ca Add managed cluster auto-approval for awsirsa (#850)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m5s
Post / images (amd64) (push) Failing after 5m36s
Post / images (arm64) (push) Failing after 5m47s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 27m4s
Signed-off-by: James Dobson <dobson@softwarepunk.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: James Dobson <dobson@softwarepunk.com>
 2025-02-28 14:05:53 +00:00
Jian Qiu
2746226037 Regactor hub driver interface and remove approver (#846)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m27s
Post / coverage (push) Failing after 8m0s
Post / images (amd64) (push) Failing after 7m17s
Post / images (arm64) (push) Failing after 5m47s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 34s
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2025-02-24 13:18:47 +00:00
Zhiwei Yin
b94d7da6e9 refator gc and move rbac deletion to cluster controller (#831) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2025-02-19 01:47:04 +00:00
alex0chan
0153747acf ✨ Made changes for clusteradm accept to create role and policies on hub (#819)
Some checks failed
Post / coverage (push) Failing after 26m56s
Post / images (amd64) (push) Failing after 6m52s
Post / images (arm64) (push) Failing after 6m50s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 54s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m19s
* Acceping AWS IRSA registraion request

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Making csr as a default enabled driver if no other driver is explicitly enabled

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: “Jeffrey <jeffreywong0417@gmail.com>
Co-authored-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
 2025-02-18 13:14:06 +00:00
Zhiwei Yin
b6c2a848e8 fix gc controller not handle empty cluster (#812)
Some checks failed
Post / coverage (push) Failing after 26m18s
Post / images (amd64) (push) Failing after 7m14s
Post / images (arm64) (push) Failing after 6m40s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m2s
Close stale issues and PRs / stale (push) Successful in 28s
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2025-01-23 01:41:27 +00:00
Zhiwei Yin
f03b3f75eb change replicas of klusterlet operator to 1 (#813)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m0s
Post / coverage (push) Failing after 26m22s
Post / images (amd64) (push) Failing after 6m56s
Post / images (arm64) (push) Failing after 6m55s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2025-01-20 03:45:09 +00:00
jaswalkiranavtar
f62242d047 ✨ Assume prerequisite role on hub if initailize with aws-irsa (#807)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m28s
Post / coverage (push) Failing after 26m43s
Post / images (amd64) (push) Failing after 6m50s
Post / images (arm64) (push) Failing after 6m49s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 35s
* Adding managedcluster identity creator role arn

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing review comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Amrutha <amrutha.hari12@gmail.com>
 2025-01-17 16:37:47 +00:00
Jian Qiu
d323b60253 Change the component name to klusterlet-agent (#809) 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2025-01-17 10:34:11 +00:00
Jian Qiu
54a99fe880 Requeue importer when secret is not found (#808) 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2025-01-17 10:25:57 +00:00
Jian Qiu
34275ef1ea Add bootstrapSA flags for importer (#803)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m14s
Post / coverage (push) Failing after 27m13s
Post / images (amd64) (push) Failing after 6m57s
Post / images (arm64) (push) Failing after 6m49s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 25s
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2025-01-16 08:55:31 +00:00
Jian Qiu
19fb9243ca Check capi status if it is provisioned (#801) 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2025-01-16 02:44:15 +00:00
Zhiwei Yin
a44b44e2db rename bootstrap sa and rbac (#802)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m11s
Post / coverage (push) Failing after 27m28s
Post / images (amd64) (push) Failing after 6m52s
Post / images (arm64) (push) Failing after 6m37s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Close stale issues and PRs / stale (push) Successful in 21s
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2025-01-16 01:13:30 +00:00
jaswalkiranavtar
7261646cb0 ✨ Adding Guidewire team members to registration owners (#796)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m4s
Post / coverage (push) Failing after 26m34s
Post / images (amd64) (push) Failing after 7m3s
Post / images (arm64) (push) Failing after 6m50s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
* Adding Guidewire team members to registration owners

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* shrinking the list to remove members who have not made contributions yet

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
 2025-01-13 01:55:20 +00:00
jaswalkiranavtar
0acf030cdb ✨ Completing aws registration on spoke (#788)
Some checks failed
Scorecard supply-chain security / Scorecard analysis (push) Failing after 40s
Post / images (amd64) (push) Failing after 5m45s
Post / images (arm64) (push) Failing after 5m45s
Post / image manifest (push) Has been skipped
Post / trigger clusteradm e2e (push) Has been skipped
Post / coverage (push) Failing after 26m38s
Close stale issues and PRs / stale (push) Successful in 6s
* Completing aws registration on spoke

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>

* adding new function to overcome gci errors on slices

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>

* Refactoring array contains function

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: suvaanshkumar <suvaanshkumar@gmail.com>
 2025-01-09 19:07:43 +00:00
xuezhao
8737358919 Agents stop update managedcluster status when clock is out of sync. (#770) 
Signed-off-by: xuezhaojun <zxue@redhat.com>
 2024-12-23 01:34:33 +00:00
Jian Qiu
b568123849 ✨ Start import in registration by feature gate. (#775) 
* Update clustermanager operator to support capi

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Update operator to start importer

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-12-20 01:12:10 +00:00
Jian Qiu
25ea10bcbf ✨ Add importer into registration (#753) 
* Add importer into registraiton

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Add unit tests

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Add integration test

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-12-16 13:59:55 +00:00
jaswalkiranavtar
b170f3a41e ✨ Cluster decorator interface (#759) 
* Add cluster decorator interface in register

And refactor creating to controller to call decorators

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Add aws annotations to ManagedCluster using Decorator

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

* Addressing review comments

Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
Co-authored-by: Jian Qiu <jqiu@redhat.com>
 2024-12-11 15:59:43 +00:00
Suvaansh
9eb8131bea Create registration option by driver type after bootstrap (#744) 
Signed-off-by: suvaanshkumar <suvaanshkumar@gmail.com>
Co-authored-by: Jian Qiu <jqiu@redhat.com>
 2024-12-06 02:05:23 +00:00
jaswalkiranavtar
a138a547f5 Adding second group for aws auth flow (#735) 
Signed-off-by: Gaurav Jaswal <jaswalkiranavtar@gmail.com>
 2024-12-05 06:36:18 +00:00
Qing Hao
ed367fd739 enable leader election of klusterlet-agent on single node managed clusters (#727) 
Signed-off-by: Qing Hao <qhao@redhat.com>
 2024-11-29 08:13:48 +00:00
jaswalkiranavtar
93db6de4a1 ✨ Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR (#714) 
* Starting aws registration by spoke by assuming IAM role on startup and adding annotations to ManagedCluster CR

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding integration tests for aws registration

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Adding more integration tests

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

* Addressing review comments

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>

---------

Signed-off-by: Erica Jin <132393634+EricaJ6@users.noreply.github.com>
 2024-11-26 17:34:53 +00:00
Yang Le
2f9dcc2ea5 🌱 support CA file in the bootstrap hub kubeconfig (#710) 
Signed-off-by: Yang Le <yangle@redhat.com>
 2024-11-21 09:06:35 +00:00
Rokibul Hasan
369f3fb6ff Update api dependency and remove unnecessary featureGate enabling part (#687) 
Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
 2024-11-14 07:12:14 +00:00
Suvaansh
67b4f1a354 ✨ Add AWS IAM support (#677) 
* Adding AWS IAM authentication support

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>

* Remove the bootstrapKubeconfigEventHandler field that's no longer used from the NewSpokeAgentConfig function based on code review comments.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>

* Add a comment on what the IsEksArnWellFormed function does and an example EKS ARN.

Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>

---------

Signed-off-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
Signed-off-by: Suvaansh <34331549+suvaanshkumar@users.noreply.github.com>
Signed-off-by: Emily Li <70486866+dtclxy64@users.noreply.github.com>
Co-authored-by: EmilyL <70486866+dtclxy64@users.noreply.github.com>
 2024-11-13 01:43:28 +00:00
xuezhao
7664585c22 Fix: reduce cluster rbac when accpet to false. (#675) 
Signed-off-by: xuezhaojun <zxue@redhat.com>
 2024-11-04 02:02:25 +00:00
Wei Liu
d26db93494 Add auto approve anno for accepted cluster (#680) 
Signed-off-by: Wei Liu <liuweixa@redhat.com>
 2024-10-31 02:52:23 +00:00
Jian Qiu
fa98535693 🐛 Use context cancel func to trigger reselect (#658) 
* Use context cancel func to trigger reselect

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Add test to improve coverage

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-10-29 02:06:13 +00:00
Rokibul Hasan
a0370e2e5d Remove ManagedClusterSet webhook registration part (#678) 
Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
 2024-10-28 13:43:44 +00:00
xuezhao
26f9e74ac9 Rename and relocate cluster related roles files. (#674) 
Signed-off-by: xuezhaojun <zxue@redhat.com>
 2024-10-28 01:56:29 +00:00
Jian Qiu
900248f214 Return false when accept return error (#622) 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-10-21 10:51:00 +00:00
Yang Le
9a47edcae0 🐛 handle the unknown status of the previously accepted cluster (#656) 
Signed-off-by: Yang Le <yangle@redhat.com>
 2024-10-21 02:33:13 +00:00
Qing Hao
d9ab25283e sync between ManagedCluster and cluster inventory API (#615) 
Signed-off-by: haoqing0110 <qhao@redhat.com>
 2024-10-15 04:04:41 +00:00
Qing Hao
4ebe9d7978 🐛 monitor the bootstrap kubeconfig and restart immediately when changes (#630) 
* monitor the bootstrap kubeconfig and restart immediately when changes

Signed-off-by: haoqing0110 <qhao@redhat.com>

* fix comments

Signed-off-by: haoqing0110 <qhao@redhat.com>

---------

Signed-off-by: haoqing0110 <qhao@redhat.com>
 2024-09-30 06:24:20 +00:00
Zhiwei Yin
77726223f2 fix the cluster name is digital (#621) 
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
 2024-09-19 02:15:42 +00:00
Jian Qiu
0536c757af 🌱 Move hub side csr code to csr driver (#580) 
* Move hub side csr code to csr driver

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Add ut

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-08-19 06:32:07 +00:00
xuezhao
bb383e26c9 Add xuezhaojun in registration owners. (#583) 
Signed-off-by: GitHub <noreply@github.com>
 2024-08-01 05:32:30 +00:00
Jian Qiu
8c1d286b11 ✨ Refactor registration (#535) 
* Refactor registration

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Fix integration test

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Refactor cert controller to secret controller

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Update health check func

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-07-17 14:14:11 +00:00
Jian Qiu
2582ad922d Update deps to 1.30 (#546) 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2024-07-02 14:04:15 +00:00
xuezhao
fc9b2d96e1 Refactor client certificates. (#522) 
Signed-off-by: xuezhaojun <zxue@redhat.com>
 2024-06-26 13:52:08 +00:00
Yang Le
a14450aa93 🌱 make additional secret data always sensitive (#525) 
Signed-off-by: Yang Le <yangle@redhat.com>
 2024-06-26 02:32:52 +00:00
xuezhao
6767167ff8 Fix: should use klog.FromContext instead of log.FromContext (#537) 
Signed-off-by: GitHub <noreply@github.com>
 2024-06-24 07:39:14 +00:00
Wei Liu
8e5d1a13bc using managed cluster instead of spoke in log msg (#512) 
Signed-off-by: Wei Liu <liuweixa@redhat.com>
 2024-06-12 08:44:56 +00:00
Jian Zhu
b38dc2ccef Update ClusterCertificateRotated to false if the signer name is invalid (#507) 
Signed-off-by: zhujian <jiazhu@redhat.com>
 2024-06-11 01:56:43 +00:00