Releases: Azure/ARO-RP
Release v20250106.00-cwp-test-eastus2euap
Cluster Wide Proxy Testing-Canary
Changes
758dd04 ARO-13380 - metrics: cwp status
447bf0c [ARO-11589] Dump keyvault certificate error (#3990)
5bbbb41 Merge pull request #3889 from Azure/sdk2/usagesclient
c9ff09f ARO-3258: propagate errors of ARO PullSecret controller to ARO operator (#3947)
7e94614 Managed Infrastructure Maintenance Operator - Milestone 1 (#3571)
55cde02 Dynamic image tagging using PR-specific variables in Azure DevOps pip… (#3974)
5a63e18 Merge pull request #3993 from Azure/bdematte/ARO-12543
eb2ec4c Add disable-infra annotation to hive clusterdeployments (#3985)
5e1e75e remove unused usage client
00bc699 remove old network/vnet client from dynamic
f4701b2 remove old network/usages client from dynamic
4ec7b0b remove old network/usages client from quota_validation.go
b55d6d9 add sdk2 usages client
e12b0ef Update CODEOWNERS (#3992)
e7dff65 Enable Hive E2E tests in CI (#3986)
47590c6 Removing Gateway and StorageAccount domain attributes (#3984)
98dc017 Don't scan generated code for CodeQL (#3951)
d9a1538 add error handling for MSGraph error (#3980)
d6d73be fix 'Namespace' object has no attribute 'upgradeable_to' (#3979)
7c37667 Split out some env vars into their own section in the Compose file (#3978)
0305516 Replace usage of mgmt/network use by azuresdk/armnetwork
1ab7a26 Merge pull request #3987 from Azure/hawkowl/fix-image-sync-dec24
8d08ce3 sort before comparing
f7be15a sync the correct tag
2cf3f04 Fix E2E pipeline failure handling (#3983)
90981dd Add FPSP to MIWI deny assignment ExcludePrincipals
51df910 MIWI bug fix - deny assignment (#3977)
47c5fdb remove deprecated publicipaddresses client (#3975)
61b1e10 SDK2: Replace old SDK in preview feature controller (#3922)
a01be1e [ARO-12459] Deduplicate our dependencies on go-jose to a single version (#3969)
275e0e3 Merge pull request #3968 from Azure/hawkowl/ARO-12458
ed9f9c9 Merge pull request #3856 from Azure/shubhadapaithankar/ARO-9501-RP-E2E-Test
cf3d0f9 Fail to validate MIWI cluster create/updates if platform workload identities contain unexpected federated credentials (#3959)
0b3dc3b Skip service principal enrichment for MIWI clusters + add unit test case (#3971)
ff4d82e Reverted interval to default, increased retries for stability, and pushed updated configuration.
0ecf4d6 Repopulate MSI tenant ID during update (#3972)
4c80746 go mod vendor
1085ed8 go mod tidy
ec06de9 move jwt code to a single library, update instantiation code to be more consistent
6c7406c bump golang-jwt
877e361 Removed unused code
8967018 Pin Docker dependency versions for stable pipeline execution.
1cd2a31 Modified to pin versions of Docker-related packages (, , , , ) for consistent behavior. - Improved maintainability by defining versions as variables.
786576a Refine for portal service to clarify rp dependency and ensure proper startup behavior.
9fba902 Enhance healthchecks for vpn and portal services to validate HTTP 200 responses and improve failure detection.
f7b0f37 feat(pipeline): Decouple Hive operator deployment from CI/E2E pipelines
8a8562e Rmoved KUBECONFIG=aks.kubeconfig as its no longer needed
c3aa772 Improve reliability of E2E test pass/fail reporting in pipeline
bf3bc4b Added error message to log E2E test failures for easier debugging and ensure we’re not breaking anything.
f58549a Integrate Docker for E2E testing with Makefile and Azure pipeline orchestration
Full Changelog: v20241121-canary-test...v20250106.00-cwp-test-eastus2euap
Release v20250106.00
Release Sprint 264
Changes
32af68c Updating MDM, MDSD, Fluentbit Images (#4040)
9b7b649 ARO-12514 move the isMIWI check to validatePlatformWorkloadIdentities
c6b059f ARO-12514 add unit tests for validatePlatformWorkloadIdentities
dbeecf0 ARO-12514 update/add unit test cases for preflightvalidation
c6ed8eb ARO-12514 fix preflightvalidation such that latest apiversion tests passes
f86de4e ARO-12514 unit test cases put/patch workload identity mismatch
37e5cd5 ARO-12514 add comments and use existing getAvailablePlatformWorkloadIdentityRoleSets
8a29d2c ARO-12514 check expected platform workload identity at frontend for create/update flows
3f016b6 ARO-12514 additional util functionsPlatformWorkloadIdentityRoleSet functions
00b9c6f Modify storage suffix length and add comment for clarity (#4019)
bf20a09 Add PlatformWorkloadIdentityRoleSetsList to operations list for v2024-08-12-preview (#4021)
379fa73 Use built-in marshaler for all track2 SDK structs (#4035)
b53b0f3 Hive Update af54e2fbd9 (#4018)
9d27d4f Ensure necessary env vars are set for temp DB deletion (#4036)
b534984 Merge pull request #4022 from Azure/hevs/ARO-12538
1bc1da6 improve federated cred naming (#3997)
33deb92 Merge pull request #4031 from bennerv/bvesel/pin-opa-binary
532c6f1 Pin OPA to v0.70.0
4d78981 Add openshift-ovn-kubernetes NS to permitted NS list in admin actions (#3998)
86f49f2 replace implementation to parse subnet and adjusted var names
1844f18 Added additional log entries for readability
115d6a1 added function SplitRG to parse subnet RG
2c43478 replaced subnet client in purge.go and refactored some vars in resourcegroups.go
Full Changelog: v20241220.00-miwi-test-eastus2euap...v20250106.00
Release v20250103.00-syncset-test
Syncset Metrics Testing
Changes
9c145d8 Metrics for SyncSet and SelectorSyncSets
b534984 Merge pull request #4022 from Azure/hevs/ARO-12538
1bc1da6 improve federated cred naming (#3997)
33deb92 Merge pull request #4031 from bennerv/bvesel/pin-opa-binary
532c6f1 Pin OPA to v0.70.0
4d78981 Add openshift-ovn-kubernetes NS to permitted NS list in admin actions (#3998)
86f49f2 replace implementation to parse subnet and adjusted var names
1844f18 Added additional log entries for readability
115d6a1 added function SplitRG to parse subnet RG
2c43478 replaced subnet client in purge.go and refactored some vars in resourcegroups.go
Full Changelog: v20241220.00-miwi-test-eastus2euap...v20250103.00-syncset-test
Release v20241220.00-miwi-test-eastus2euap
v20241220.00-miwi-test-eastus2euap
Changes
c4ed7d6 Merge pull request #4016 from Azure/rajdeepc2792/fix-miwi-dynamic-validation
15920e1 Keep polling Hive ClusterDeployment if we encounter a transient connection failure (#4028)
bfa6a19 Merge pull request #4027 from Azure/kimorris27/ARO-13782-remove-cluster-deployment-condition-checks
b0b9810 Quit checking ClusterDeployment status conditions during cluster installation
750f8c5 MIWI cluster Dynamic Validation update for strict 1:1 matching for provided Platform Workload Identity to expected OCP Operators (#3966)
186e731 pass fp cred to the dynamic validator for miwi flow
2d18523 Update roundtripper.go (#4010)
142fde5 Merge pull request #4009 from Azure/kimorris27/hotfix-e2e-cluster-deletion
e0f6f99 Ensure E2E clusters are deleted
eccd113 Merge pull request #4003 from Azure/komidore64-patch-1
9d144d4 fix typo in curl snippet
e6ecacf Fix: Ensure valid image tags for PR and master builds. (#3999)
447bf0c [ARO-11589] Dump keyvault certificate error (#3990)
5bbbb41 Merge pull request #3889 from Azure/sdk2/usagesclient
c9ff09f ARO-3258: propagate errors of ARO PullSecret controller to ARO operator (#3947)
7e94614 Managed Infrastructure Maintenance Operator - Milestone 1 (#3571)
55cde02 Dynamic image tagging using PR-specific variables in Azure DevOps pip… (#3974)
5a63e18 Merge pull request #3993 from Azure/bdematte/ARO-12543
eb2ec4c Add disable-infra annotation to hive clusterdeployments (#3985)
5e1e75e remove unused usage client
00bc699 remove old network/vnet client from dynamic
f4701b2 remove old network/usages client from dynamic
4ec7b0b remove old network/usages client from quota_validation.go
b55d6d9 add sdk2 usages client
e12b0ef Update CODEOWNERS (#3992)
e7dff65 Enable Hive E2E tests in CI (#3986)
47590c6 Removing Gateway and StorageAccount domain attributes (#3984)
98dc017 Don't scan generated code for CodeQL (#3951)
d9a1538 add error handling for MSGraph error (#3980)
d6d73be fix 'Namespace' object has no attribute 'upgradeable_to' (#3979)
7c37667 Split out some env vars into their own section in the Compose file (#3978)
0305516 Replace usage of mgmt/network use by azuresdk/armnetwork
1ab7a26 Merge pull request #3987 from Azure/hawkowl/fix-image-sync-dec24
8d08ce3 sort before comparing
f7be15a sync the correct tag
2cf3f04 Fix E2E pipeline failure handling (#3983)
90981dd Add FPSP to MIWI deny assignment ExcludePrincipals
51df910 MIWI bug fix - deny assignment (#3977)
47c5fdb remove deprecated publicipaddresses client (#3975)
61b1e10 SDK2: Replace old SDK in preview feature controller (#3922)
a01be1e [ARO-12459] Deduplicate our dependencies on go-jose to a single version (#3969)
275e0e3 Merge pull request #3968 from Azure/hawkowl/ARO-12458
ed9f9c9 Merge pull request #3856 from Azure/shubhadapaithankar/ARO-9501-RP-E2E-Test
cf3d0f9 Fail to validate MIWI cluster create/updates if platform workload identities contain unexpected federated credentials (#3959)
0b3dc3b Skip service principal enrichment for MIWI clusters + add unit test case (#3971)
ff4d82e Reverted interval to default, increased retries for stability, and pushed updated configuration.
0ecf4d6 Repopulate MSI tenant ID during update (#3972)
4c80746 go mod vendor
1085ed8 go mod tidy
ec06de9 move jwt code to a single library, update instantiation code to be more consistent
6c7406c bump golang-jwt
877e361 Removed unused code
8967018 Pin Docker dependency versions for stable pipeline execution.
1cd2a31 Modified to pin versions of Docker-related packages (, , , , ) for consistent behavior. - Improved maintainability by defining versions as variables.
786576a Refine for portal service to clarify rp dependency and ensure proper startup behavior.
9fba902 Enhance healthchecks for vpn and portal services to validate HTTP 200 responses and improve failure detection.
f7b0f37 feat(pipeline): Decouple Hive operator deployment from CI/E2E pipelines
8a8562e Rmoved KUBECONFIG=aks.kubeconfig as its no longer needed
c3aa772 Improve reliability of E2E test pass/fail reporting in pipeline
bf3bc4b Added error message to log E2E test failures for easier debugging and ensure we’re not breaking anything.
f58549a Integrate Docker for E2E testing with Makefile and Azure pipeline orchestration
Full Changelog: v20241121-canary-test...v20241220.00-miwi-test-eastus2euap
Release v20241220.00-MIWI-test-eastus2euap
Test RP for MIWI in eastus2euap
Changes
c4ed7d6 Merge pull request #4016 from Azure/rajdeepc2792/fix-miwi-dynamic-validation
15920e1 Keep polling Hive ClusterDeployment if we encounter a transient connection failure (#4028)
bfa6a19 Merge pull request #4027 from Azure/kimorris27/ARO-13782-remove-cluster-deployment-condition-checks
b0b9810 Quit checking ClusterDeployment status conditions during cluster installation
750f8c5 MIWI cluster Dynamic Validation update for strict 1:1 matching for provided Platform Workload Identity to expected OCP Operators (#3966)
186e731 pass fp cred to the dynamic validator for miwi flow
2d18523 Update roundtripper.go (#4010)
142fde5 Merge pull request #4009 from Azure/kimorris27/hotfix-e2e-cluster-deletion
e0f6f99 Ensure E2E clusters are deleted
eccd113 Merge pull request #4003 from Azure/komidore64-patch-1
9d144d4 fix typo in curl snippet
e6ecacf Fix: Ensure valid image tags for PR and master builds. (#3999)
447bf0c [ARO-11589] Dump keyvault certificate error (#3990)
5bbbb41 Merge pull request #3889 from Azure/sdk2/usagesclient
c9ff09f ARO-3258: propagate errors of ARO PullSecret controller to ARO operator (#3947)
7e94614 Managed Infrastructure Maintenance Operator - Milestone 1 (#3571)
55cde02 Dynamic image tagging using PR-specific variables in Azure DevOps pip… (#3974)
5a63e18 Merge pull request #3993 from Azure/bdematte/ARO-12543
eb2ec4c Add disable-infra annotation to hive clusterdeployments (#3985)
5e1e75e remove unused usage client
00bc699 remove old network/vnet client from dynamic
f4701b2 remove old network/usages client from dynamic
4ec7b0b remove old network/usages client from quota_validation.go
b55d6d9 add sdk2 usages client
e12b0ef Update CODEOWNERS (#3992)
e7dff65 Enable Hive E2E tests in CI (#3986)
47590c6 Removing Gateway and StorageAccount domain attributes (#3984)
98dc017 Don't scan generated code for CodeQL (#3951)
d9a1538 add error handling for MSGraph error (#3980)
d6d73be fix 'Namespace' object has no attribute 'upgradeable_to' (#3979)
7c37667 Split out some env vars into their own section in the Compose file (#3978)
0305516 Replace usage of mgmt/network use by azuresdk/armnetwork
1ab7a26 Merge pull request #3987 from Azure/hawkowl/fix-image-sync-dec24
8d08ce3 sort before comparing
f7be15a sync the correct tag
2cf3f04 Fix E2E pipeline failure handling (#3983)
90981dd Add FPSP to MIWI deny assignment ExcludePrincipals
51df910 MIWI bug fix - deny assignment (#3977)
47c5fdb remove deprecated publicipaddresses client (#3975)
61b1e10 SDK2: Replace old SDK in preview feature controller (#3922)
a01be1e [ARO-12459] Deduplicate our dependencies on go-jose to a single version (#3969)
275e0e3 Merge pull request #3968 from Azure/hawkowl/ARO-12458
ed9f9c9 Merge pull request #3856 from Azure/shubhadapaithankar/ARO-9501-RP-E2E-Test
cf3d0f9 Fail to validate MIWI cluster create/updates if platform workload identities contain unexpected federated credentials (#3959)
0b3dc3b Skip service principal enrichment for MIWI clusters + add unit test case (#3971)
ff4d82e Reverted interval to default, increased retries for stability, and pushed updated configuration.
0ecf4d6 Repopulate MSI tenant ID during update (#3972)
4c80746 go mod vendor
1085ed8 go mod tidy
ec06de9 move jwt code to a single library, update instantiation code to be more consistent
6c7406c bump golang-jwt
877e361 Removed unused code
8967018 Pin Docker dependency versions for stable pipeline execution.
1cd2a31 Modified to pin versions of Docker-related packages (, , , , ) for consistent behavior. - Improved maintainability by defining versions as variables.
786576a Refine for portal service to clarify rp dependency and ensure proper startup behavior.
9fba902 Enhance healthchecks for vpn and portal services to validate HTTP 200 responses and improve failure detection.
f7b0f37 feat(pipeline): Decouple Hive operator deployment from CI/E2E pipelines
8a8562e Rmoved KUBECONFIG=aks.kubeconfig as its no longer needed
c3aa772 Improve reliability of E2E test pass/fail reporting in pipeline
bf3bc4b Added error message to log E2E test failures for easier debugging and ensure we’re not breaking anything.
f58549a Integrate Docker for E2E testing with Makefile and Azure pipeline orchestration
Full Changelog: v20241121-canary-test...v20241220.00-MIWI-test-eastus2euap
Release v20241111.00-hotfix
Hotfix for v20241111.00
Release v20241204.00-msi-no-regional-endpoint
Don't use a regional endpoint for MSI RP
Changes
e3be8fb attempt to authenticate as a cluster MSI without using regional endpoint
1ab7a26 Merge pull request #3987 from Azure/hawkowl/fix-image-sync-dec24
8d08ce3 sort before comparing
f7be15a sync the correct tag
2cf3f04 Fix E2E pipeline failure handling (#3983)
90981dd Add FPSP to MIWI deny assignment ExcludePrincipals
51df910 MIWI bug fix - deny assignment (#3977)
47c5fdb remove deprecated publicipaddresses client (#3975)
61b1e10 SDK2: Replace old SDK in preview feature controller (#3922)
a01be1e [ARO-12459] Deduplicate our dependencies on go-jose to a single version (#3969)
275e0e3 Merge pull request #3968 from Azure/hawkowl/ARO-12458
ed9f9c9 Merge pull request #3856 from Azure/shubhadapaithankar/ARO-9501-RP-E2E-Test
cf3d0f9 Fail to validate MIWI cluster create/updates if platform workload identities contain unexpected federated credentials (#3959)
0b3dc3b Skip service principal enrichment for MIWI clusters + add unit test case (#3971)
ff4d82e Reverted interval to default, increased retries for stability, and pushed updated configuration.
0ecf4d6 Repopulate MSI tenant ID during update (#3972)
4c80746 go mod vendor
1085ed8 go mod tidy
ec06de9 move jwt code to a single library, update instantiation code to be more consistent
6c7406c bump golang-jwt
877e361 Removed unused code
8967018 Pin Docker dependency versions for stable pipeline execution.
1cd2a31 Modified to pin versions of Docker-related packages (, , , , ) for consistent behavior. - Improved maintainability by defining versions as variables.
786576a Refine for portal service to clarify rp dependency and ensure proper startup behavior.
9fba902 Enhance healthchecks for vpn and portal services to validate HTTP 200 responses and improve failure detection.
f7b0f37 feat(pipeline): Decouple Hive operator deployment from CI/E2E pipelines
8a8562e Rmoved KUBECONFIG=aks.kubeconfig as its no longer needed
c3aa772 Improve reliability of E2E test pass/fail reporting in pipeline
bf3bc4b Added error message to log E2E test failures for easier debugging and ensure we’re not breaking anything.
f58549a Integrate Docker for E2E testing with Makefile and Azure pipeline orchestration
Full Changelog: v20241121-canary-test...v20241204.00-msi-no-regional-endpoint
v20241202.00-miwi-test
Add FPSP to MIWI deny assignment ExcludePrincipals
Release v20241121-canary-test
Testing ability to release to Canary sector.
Changes
589166d Merge pull request #3967 from Azure/ARO-12232
f101ba0 Add reconcileSoftwareDefinedNetwork to AdminUpdate test
77d1e69 Update NetworkType in cluster doc if cluster has migrated from SDN to OVN
1737087 update to go 1.22, and also update some of the openshift4 ose-cli's to rhel9, and also mirror in the azure-cli azurelinux3 CLI (which is now stable) (#3970)
fde486f [ARO-7182] Remove square/go-jose dependency (#3965)
e7f6866 Fix AKS connectivity (#3964)
65499d7 Ensure MSI readonly fields are set to '' in ExternalNoReadOnly converters (#3962)
f813377 Do not try to set UpgradeableTo annotation in-cluster if it is empty (#3963)
8a03424 Merge pull request #3961 from Azure/tsatam/hotfix-clustermsi-followup
113da3d Remove etag property from test expectations as it no longer shows up in responses
a298c9e Add missing argument for FPNewClientCertificateCredential
0e78969 Merge pull request #3957 from Azure/niontive/ARO-6297
0087b53 Merge pull request #3906 from Azure/jaitaiwan/ARO-11234
f22bef0 SDK2: Replace old SDK in reconcile load balancer profile (#3923)
a0ecfcf use track2 sdk in createOrUpdateRouterIPEarly (#3919)
ef15db2 SDK2: Replace old network SDK in ListResources Admin API (#3890)
a100c35 chore: Address PR feedback
7e9fb68 chore: Remove unneeded TODOs
ba6af03 chore: Move to azuresdk folder
c3aac1d chore: vendor in containerruntime
f9ba066 fix: Remove generate as we no longer need mock
b67e845 feat: switch to containerservice v6
7708100 ARO-12034 Fix CheckAccessV2 usage for MIWI dynamic validation (#3946)
faa8f0f Fix nsg test
6a37ae1 add reminder that dev clusters don't show up in ARM (#3958)
9719391 Update cluster.go
5d6dea5 Add additional tenants
d508094 Update msi-dataplane module tto v0.0.8
283043e Merge pull request #3954 from Azure/tsatam/heartbeat-emit-version-dimension
6b51a35 Merge pull request #3949 from Azure/s-fairchild/ARO-10816-resulttype-metric
0384e08 Emit version as a dimension on heartbeat metrics
6c56ef7 Merge pull request #3953 from Azure/ARO-12070-part-1
9458ae4 Fix if brackets (#3952)
59f60b0 MIWI API converter fixes (#3950)
bd1632b Realign CredentialsRequest to match current ARO operator role definition
879258e Pass backendErr to emitMetrics
Full Changelog: v20241111.00...v20241121-canary-test
v20241120.00-miwi-test: [ARO-7182] Remove square/go-jose dependency (#3965)
* update dependency to go-oidc v3, and run go mod update * go mod vendor