Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Test dns bicep #1

Merged
merged 627 commits into from
Jan 30, 2025
Merged

Test dns bicep #1

merged 627 commits into from
Jan 30, 2025

Conversation

katherinelc321
Copy link
Owner

What this PR does

Jira:
Link to demo recording:

Special notes for your reviewer

janboll and others added 30 commits January 8, 2025 08:31
Add Dry Run for Hypershift Operator
follows up on Azure#1040

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
Use pipeline
Add Dry Run
Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
Implement collection GETs for node pools
Add "externalID" and "internalID" parameters so the returned
document is a minimum valid OperationDocument for writing.
The operation item must now be created in the database prior to
calling ExposeOperation. ExposeOperation does all its processing
in a database update callback.

This is because there is an increasing number of cases where we
create an implicit async operation with no visible status endpoint.
Calling ExposeOperation makes an implicit async operation explicit,
with a status endpoint for ARM to poll. Hence the rename.

The tradeoff is explicit asyncrhonous operations now require two
database operations (create and update) but it helps make the RP
logic cleaner. This could possibly be mitigated in the future by
using Cosmos DB's transactional batch operations, but it's gonna
take some serious refactoring to get there.
CancelActiveOperation marks the status of any active operation on
the resource as canceled.
Will be reusing DeleteResource for subscription deletion.

Add database bookkeeping for the resource and any child resources.
This includes creating implicit operations for each resource being
deleted. The caller may then expose the returned operation ID.
By my read of the Subscription Lifecycle API Reference [1], we
should favor 200 OK over 201 Created when creating or updating
a subscription.

[1]
https://github.com/cloud-and-ai-microsoft/resource-provider-contract/blob/master/v1.0/subscription-lifecycle-api-reference.md#response
Called when a subscription is deleted. The method is idempotent in
case of multiple subscription PUT requests.
geoberle and others added 29 commits January 29, 2025 09:50
* introduce configuration option for the frontend cert issuer
* register issuers with SVC KV
* move frontend cert creation into the svc-cluster step, so after the SVC KV issuer registration has happened for sure

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
replace hardcoded tenant and subscription IDs with actual lookups from the current azure session. this way these scripts can be used in other environments as well.

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
running pipelines via templatize.sh will honor the PERSIST env var

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
* add controlPlaneOperator MI, remove network/ingres MI from DP

* add cluster-api-azure and fix control-plane key

* update managed identitites in cluster creation script
- add SP/App IDs
- add MCE config (+ require it in the schema)
- update CS, imagesync, RP image tags
- fix imagesync RG
- enable maestro azure DB usage

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
the ACM operator version we need are listed in the registry.redhat.io/redhat/redhat-operator-index:v4.16 catalog image, not the 4.17 one

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
ARO-14453 | Add Frontend validation for user-assigned identity fields and relevant test cases
grafana registration yields an error dín the GH action pipelines. disabling this for now allows us to run pipelines for the time being until we figure out the details

```
ERROR: 401 Client Error: Unauthorized for url: https://arohcp-dev-c9g7a4fjanb0c4gc.eus.grafana.azure.com/api/datasources
```

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
…ure#1182)

* fix: fix capz control plane operator name in cluster creation script

It should be cluster-api-azure instead of cluster-azure-api

* doc: update dev setup doc to include up to date MIs for cluster creation
frontend: Plumb the OutboundType API value through to CS
* prepare output chaining

* introduce output bicep templates for global, regional and svc level
* move CS MI ID lookup into svc level output template
* mark svc output step as `outputOnly`

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>

* don't rely on schema fields to carry output chaining propagation

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>

---------

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
… repo (Azure#1191)

Co-authored-by: Jonathan Chang <jonachang@microsoft.com>
Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
the grafana ID is required in regional deployments and this change makes the resource ID available via output chaining from the global scope

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
Add missing rg scope to custom role
we only need one pipeline for global resources to manage DNS, grafana and ACRs.
therefore we merge the respective pipeline files and reduce to a single ADO
pipeline to execute it

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
* move acrpull to svc cluster pipeline

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>

* move acrpull into mgmt pipeline

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>

* fix pipeline deps

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>

---------

Signed-off-by: Gerd Oberlechner <goberlec@redhat.com>
Add grafana admin and re-enable grafana/amw integration
@katherinelc321 katherinelc321 merged commit 3a71de1 into main Jan 30, 2025
12 of 24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.