Release v20230602.00

Release 237

Changes

386753a Remove reliance on hiveclient set which in-turn relies on openshift installer (#2806)
8751724 Update gatekeeper dockerfile to ensure cgo is enabled (#2927)
5b974df Preflight validation (#2823)
a3b9613 Refactor/env vars access (#2693)
1a6d071 [Bugfix] Remove alert to pop up when double clicking a cluster in the cluster list (#2852)
e15e78c Remove initial installer dependencies (#2842)
d093423 Merge pull request #2835 from Azure/nsg_enhancement
99cee84 Address code review comments
feff257 Service endpoint removal (#2914)
51b1919 Merge pull request #2904 from Azure/regional-checkaccess-rollout
5419195 Initial Guardrails feature (#2755)
a3bd6f4 fixing an issue with debug pods namespace (#2924)
31a396c fix ci issue
ae487ea Merge branch 'master' into feature/guardrails
bc7e1a1 modified login command to include host key (#2911)
6c32510 minor name corrections for Gatekeeper-Guardrails image (#2918)
d2479b2 fix lint issue
874262a update
d7ac336 Refactor per review comments
ed8b707 Use LiveConfig for the flag
b83fabe Add an env variable as a rollout flag for CheckAccess
54237e7 Merge pull request #2922 from bennerv/bump-images
2cfc6ce Bump fluentbit, mdm, mdsd images
60a0303 Merge pull request #2921 from bennerv/cleanup
90be262 Fix failure in az aro update when missing azure-credentials object (#2887)
bd7e144 ARO-2887 - Add az aro validate functionality to az aro create (#2906)
3602d51 Clean up legacy slice contains function and old 4.5 hotfix version
e99c9c7 Add changes for BYO NSG
5dc6dc1 skip e2e tests when it is not enabled, plus restore default flags value
f59caf5 set feature flag to true to satisfy e2e
650e58f restore the default value of guardrails pullspec and flags
e11c447 Revert "fixed go test issue"
83cbd4e temporarily change guardrails feature flag to true to satisfy e2e
8ac4ad6 Revert "update the ACR address for gatekeeper image, plus some minor corrections"
d34b084 added e2e tests
ccd8d9d fixed go test issue
e86926d update the ACR address for gatekeeper image, plus some minor corrections
8ea2925 Merge branch 'master' into feature/guardrails
ddb47f6 Rewrite some of the cert/key encoding and decoding (#2854)
d7bc5ea Guardrails image Dockerfile (#2873)
a03c6eb update the mega linter because deprecations (#2877)
b269bf8 Merge pull request #2913 from cadenmarchese/fix-instancetypes-bug
c3c54e2 Merge pull request #2912 from s-amann/simplify-subnet-reconcile-e2e
079f28f Fix VMSize bug introduced in #2713
5009d92 use importas linter to check import aliases. (ARO1693) (#2891)
800a8a3 Test cases for GA SupportedVMSizes (#2863)
0688f26 simplifies subnet reconcile annotation check to avoid flaky timestamps
c19fa77 comment out fail cases until Refresh() can be properly handled
3feab6d move retry back to gvrResolver.Resolve() plus add comments for UnstructuredObj related stuff
848014c run go mod vendor
dbb42a4 Merge branch 'master'
7b50739 fix a typo
d63e32a fixed go lint issue
4559a4f fixed constraints creation failure issue
5ef5753 fix go test & lint issue
08d377d temporarily remove policies other than the machine one as the example and test policy to create a base code pr
5fefad4 merge with master plus some adaptions
74e769e policy: deny pod with master toleration taints (#2723)
bb678b7 add aro-sre as exempted user
90e2a9e add exempted users plus update deny labels
f31964e added gator tests for aro-deny-label
46aa7a6 added gator test section
1a672ef update gator test suite for privileged ns
ad74a36 add gator test suite for privileged ns
17cc5f2 update aro-deny-label rule plus add test cases
8260583 update privileged ns test case
68bef8f move all policies related stuff under one foler
4813a18 restructured the gatekeeper ConstraintTemplate plus add rego test file for privileged ns
da2d201 add gk policy to protect privileged namespaces
00ecc4b feat: add gatekeeper policies for pull-secret delete deny (#2607)
c1719cf upgrade to gatekeeper:v3.10.0
63d18cb Merge branch 'master' into feature/guardrails
1c37454 simplify UnstructuredObj
f2ccb0f upgrade to gatepkeeper yaml tag release-3.9 image v3.9.2
c031005 update according to review comments
b9966b9 clean up
16f6d48 fix lint and go test issue
878d9e5 vendor update
eac4641 handling gurairails config changes except for namespace
06cf050 code cleanup
187b546 delete all gatekeeper stuff when turned off
b8f85ed support ConstraintTemplate scheme, not including go mod vendor part, as it is huge
e140bea more feature flags support
8e885d7 move gatekeeper constraints enforcement implementation back to guardrails for better control of each policy
937a944 move gatekeeper policy deployment implementation to deployer and dh
4ca6cd9 guardrails controller basic functionalities

Full Changelog: v20230530.00...v20230602.00

Release v20230530.00

Release to fix the fluentbit version.

Changes

ce11ab0 Fix package dependency conflicts for RP deployment (#2910)
7ad75d5 Worker profiles enrichment refactored tests (#2888)

Full Changelog: v20230516.00...v20230530.00

Release v20230517.00

v20230517.00

Changes

ce11ab0 Fix package dependency conflicts for RP deployment (#2910)
7ad75d5 Worker profiles enrichment refactored tests (#2888)

Full Changelog: v20230516.00...v20230517.00

Release v20230516.00

v20230516.00

Changes

19751c9 Merge pull request #2908 from bennerv/fix-timeout-on-checkaccess
6b7f74c Update timeout on check permissions to 5 minutes
c32f5df Update operator version when version.GitCommit changes (2nd approach) (#2903)
45a22d0 Acr token rotation (#2825)
654ad44 Capture subnet reconciliations (#2782)
75680a7 Merge pull request #2905 from Azure/dependabot/go_modules/github.com/docker/distribution-2.8.2incompatible
101d4d7 Bump github.com/docker/distribution
08426bc Fix PUCM failure when outboundType is UserDefinedRouting
6053ea5 remove go vet, replaced by golangci-lint (#2897)

Full Changelog: v20230510.01...v20230516.00

Release v20230510.01

v20230510.01

Changes

3520f04 Merge pull request #2901 from hawkowl/hawkowl/refresh-cred-3
dcd513f minimal refreshing for SP checks
b735392 fix refresher (#2898)
be4bae3 Update operator version when version.GitCommit changes
53633ae Merge pull request #2876 from Azure/fix-internal-server-error
335a4be added metrics for repeated remediation because of quota (#2871)
559c0ac Remove unnecessary error return
9943880 Clean up dnsmasq machineconfig when machineconfigpool is deleted (#2476)
932c2d5 Merge pull request #2894 from bennerv/i-am-once-again-updating-hive
9984b7f Update az aro --pull-secret help example output
d91f5f8 Use less vulnerable container image based on ubi8
26f014f Unwrap unexpected error
9668acd Merge pull request #2893 from bennerv/ad-hoc-hive-image
70be97d Use ad-hoc hive build image from hive team which should not have mem leaks
40b9660 Fix code review comments
c688863 Fix code review comments
876a312 Wrap errors into CloudError

Full Changelog: v20230504.00...v20230510.01

Release v20230510.00

Release v20230510.00

Changes

72bfdd1 Merge remote-tracking branch 'upstream/master'
3520f04 Merge pull request #2901 from hawkowl/hawkowl/refresh-cred-3
dcd513f minimal refreshing for SP checks
b735392 fix refresher (#2898)
4cfc601 Merge remote-tracking branch 'upstream/master'
be4bae3 Update operator version when version.GitCommit changes
53633ae Merge pull request #2876 from Azure/fix-internal-server-error
335a4be added metrics for repeated remediation because of quota (#2871)
559c0ac Remove unnecessary error return
fe40441 Merge remote-tracking branch 'upstream/master'
9943880 Clean up dnsmasq machineconfig when machineconfigpool is deleted (#2476)
ba5ae99 Merge remote-tracking branch 'upstream/master'
932c2d5 Merge pull request #2894 from bennerv/i-am-once-again-updating-hive
9984b7f Update az aro --pull-secret help example output
d91f5f8 Use less vulnerable container image based on ubi8
26f014f Unwrap unexpected error
9668acd Merge pull request #2893 from bennerv/ad-hoc-hive-image
70be97d Use ad-hoc hive build image from hive team which should not have mem leaks
2493782 Merge remote-tracking branch 'upstream/master'
40b9660 Fix code review comments
c688863 Fix code review comments
876a312 Wrap errors into CloudError
e484fb4 Merge branch 'Azure:master' into master
53c2b2f Merge branch 'Azure:master' into master
bf209f9 Merge branch 'Azure:master' into master
cd44787 Merge branch 'Azure:master' into master
1e636d5 Added a test case for an empty namespace
2a5f032 Updated the code based on Mikalai and Ulrich's review feedback
1a76ab7 Updated based on David's review feedback
2265967 Updated based on the latest feedback
5396981 Updated the E2E test file
248679f Fixed the E2E test failed issue
fd185eb Updated code relying on the new function and the unitest
84e05c3 Updated to use the new hardcoded filtering function for monitor
384635e Updated the code based on the review feedback
127f016 Updated code based on the review feedback to use struct to access values out of map
99a0b46 Added a unit test for the fuction of the new hardcoded filter
04b7eec Added a new function to implement a hardcoded filter of namespace

Full Changelog: v20230504.00...v20230510.00

Release v20230504.00

v20230504.00

Changes

3e8fe29 Attempt to refresh credentials if we get access exceptions (#2890)
606f547 Add cluster OpenShift version in log (#2869)
12aa588 Auto-generate release note (#2878)
a6a1e57 ran make build-portal (#2884)
a68f9c1 Fix client generation (#2867)
a26292d Use npm ci instead of npm install for build validation
894d851 Validate build assets are up-to-date in GitHub Action
d1600a0 Spike - Cluster Operator Errors (#2703)
d1ed7b2 removes extra space in hive image tag (#2882)
97a858e Update hive image in use in prod (#2881)
c2a67a3 Merge pull request #2875 from Azure/nickhundstad-fix-read-applens-resp
83528ef Clean up some of the portal v2 config (#2856)
03578b9 Update to use new fluentbit, mdm, and mdsd (#2855)
2c79cfd Add operator info admin portal (#2587)
4c56a55 Fix reading the AppLens resp to return json string
d2e21cd Extract CosmosDB throughput configuration to ARM template parameters (#2805)
37fe954 Merge pull request #2874 from bennerv/bump-hive-image-to-latest
cd44dac Bump the hive image to latest to addresss vulns
f55e66e Improve error check on failed RP deployment (#2819)
ed700b9 Update full service RP docs with hive stuffs
4084d59 List SupportedVMSizesByRole (#2861)
0603132 Nitpick update vm.go (#2866)

Full Changelog: v20230420.00...v20230504.00

Release for Sprint 228

What's Changed

• Remove example files from .dockerignore by @ventifus in #2552
• Hive: exit if we enter ProvisionFailed status by @darthhexx in #2551
• AKS MSI / cluster storage / ACR fixes for ARO-Installer in Production by @darthhexx in #2550
• Add more logs about aro deployment state by @yehornaumenko in #2545
• Add e2e test for hive kubeconfig by @petrkotas in #2358
• Modify az get-versions iteration to match the latest round of API changes by @darthhexx in #2553
• Skips AKS tests for defined regions without AKS by @petrkotas in #2558
• Migrates rest of the E2Es to use Eventually instead of wait.Poll* by @m1kola in #2542
• docs: update outdated statsd link by @AldoFusterTurpin in #2506
• Fixed input on Admin Portal V1. Updated loader-utils to 2.0.4 to mitigate vulnerability. by @carlowisse in #2547
• Fixes a bug in the certificate PUCM process by @mhsreddy in #2560
• Bump MDM containers to latest distroless versions by @hawkowl in #2563
• Public IP removal by @ArielLima in #2248
• Remove all old-style prod-related pipeline configurations, leaving just CI & OneBranch by @hawkowl in #2486
• fixed race condition in frontend by @facchettos in #2561
• Fix AKS shard number and add equalfold by @petrkotas in #2568

Full Changelog: v20221118.00...v20221201.00

Sprint 228 pre-release

Merge pull request #2543 from cblecker/api-fixes

Follow up API fixes

Release for Sprint 227

v20221111.00

Release 227