Releases: Azure/ARO-RP
Release v20250311.00-test-kv-cli-fix
Tagging a test version to check in Canary a fix for a bug in PR #4121
Changes
a0a8991 ARO-4669: Swapping wrong parameters in function calls
b1111e9 Merge pull request #4137 from Azure/tsatam/ARO-15597-cli-tolerate-invalid-subnets-in-workerprofiles
1915349 [ARO-13400] Old E2E pipeline uses MiWi clusters (#4056)
b6d5d96 Fix clientid/clientsecret validation to tolerate missing MIWI parameters
fe49057 Do not fail ensure_resource_permissions if workerprofiles contains invalid subnet
Full Changelog: v20250310.00...v20250311.00-test-kv-cli-fix
Release v20250311.00
Release Sprint 267
Changes
3e0e613 Revert "[ARO-13400] Old E2E pipeline uses MiWi clusters (#4056)"
fe1dfac ARO-4669: Swapping wrong parameters in function calls (#4139)
b1111e9 Merge pull request #4137 from Azure/tsatam/ARO-15597-cli-tolerate-invalid-subnets-in-workerprofiles
1915349 [ARO-13400] Old E2E pipeline uses MiWi clusters (#4056)
b6d5d96 Fix clientid/clientsecret validation to tolerate missing MIWI parameters
fe49057 Do not fail ensure_resource_permissions if workerprofiles contains invalid subnet
Full Changelog: v20250310.00...v20250311.00
What's Changed
- bump golang-ci-lint by @stevekuznetsov in #4090
- ARO-13921 Add cluster subnets' network security groups to List Cluster Azure Resources output if cluster uses preconfiguredNSG by @aasserzo in #4099
- [ARO-15116] DES missing Keyvault Access Policy on E2E retry by @Tof1973 in #4093
- [ARO-15124] Merge the implementations of dynamichelper and clienthelper's Merge function by @hawkowl in #4096
- Fixes itn-2025-00034 | removes iterative instantiation of env struct from monitor service by @rajdeepc2792 in #4101
- Send Otel Audit Message by @gouthamMN in #4097
- ARO-13380 - metrics: cwp status by @LiniSusan in #4002
- ARO-8425: Return ClientSecretCredential error (expired keys) as Cloud… by @pepedocs in #4098
- Fixes: broken ci-go linting, and the error the linter compained about by @hlipsig in #4105
- Correct log message format to pass golangci-lint by @s-fairchild in #4107
- Update Hive API and Image to 5d3f4d77dc by @s-fairchild in #4106
- Dev environment doc updates by @aasserzo in #4104
- pkg/cluster: migrate cluster MSI to track 2 keyvault SDK by @stevekuznetsov in #4113
- Create a target to start aro monitor by @yadneshk in #4119
- clustermsi: use the standard keyvault format by @stevekuznetsov in #4118
- Improve over-reconciliation of Hive Deployments by @hawkowl in #4102
- *: migrate more keyvault & certificates to track2 by @stevekuznetsov in #4121
- Reapply changes from #3704 into clienthelper as well by @hawkowl in #4127
- [ARO-9308] Add MDSD Certificate rotation tasks to MIMO by @hawkowl in #4091
- *: migrate the last of track 1 keyvault sdk by @stevekuznetsov in #4124
- Add Haoran Wang as an owner by @wanghaoran1988 in #4133
- Revert changes to restore immutability of PreconfiguredNSG by @shubhadapaithankar in #4132
- Update local development to deploy OpenShift 4.16 by default by @hawkowl in #4130
- Bump dependencies (March '25) by @hawkowl in #4131
- CWP - Optional checks with clusterDomain by @LiniSusan in #4116
- Allow installer in container to use other auth token than arosvc by @Tof1973 in #4108
- allow Microsoft.PolicyInsights/remediations in deny assignment by @yithian in #4134
- [ARO-13400] Old E2E pipeline uses MiWi clusters by @mrWinston in #4056
- CLI - Do not fail ensuring resource permissions if workerprofiles or workerprofilesstatus contain profiles with invalid subnets by @tsatam in #4137
- [bugfix]: ARO-4669: Swapping wrong parameters in function calls by @tiguelu in #4139
New Contributors
- @aasserzo made their first contribution in #4099
- @yadneshk made their first contribution in #4119
- @wanghaoran1988 made their first contribution in #4133
Full Changelog: v20250212.00...v20250311.00
Contributors
Assets 2
Release v20250310.00
ARO RP Release 267
Changes
38bb59c allow Microsoft.PolicyInsights/remediations in deny assignment (#4134)
f558795 Allow installer in container to use other auth token than arosvc (#4108)
c2fbcc3 CWP enhancement - Optional checks with clusterDomain (#4116)
af1c76f Merge pull request #4131 from Azure/hawkowl/deps-mar-25
ef835da Merge pull request #4130 from Azure/hawkowl/4.16
63b8c53 Merge pull request #4132 from Azure/shubhadapaithankar/ARO-12508/Revert-preconfiguredNSG
e15210e Merge pull request #4133 from wanghaoran1988/wanghaoran1988/ARO-11774
77b8688 Add Haoran Wang as an owner
83a8e45 use a more modern CLI version for this
d99937e test 4.16.30
6c1c09c don't do fips mode in local dev only
b32367e try 27
e78e130 4.16.26
5a18ad9 allow setting of the podman pull policy
876fbbb Revert commit changes to restore immutability of PreconfiguredNSG as per PR #3941
aa64f0f *: migrate the last of track 1 keyvault sdk (#4124)
52ebac5 go mod vendor
bf2e193 go sum update
460471f put the dep for docker back, since it is broken
83c4a20 go mod vendor
142777d add govulncheck as a bingo runnable
273af9a go sum updates
b3f2400 remove deps which we pinned to work around CVEs, exclude them instead
a2a6f61 bump some dependabot deps as well as some things that might get flagged
73eb993 [ARO-9308] Add MDSD Certificate rotation tasks to MIMO (#4091)
27f2843 reapply changes from #3704 into clienthelper as well (#4127)
3b18abb *: migrate more keyvault & certificates to track2 (#4121)
826deb0 Improve over-reconciliation of Hive Deployments (#4102)
dc5fbeb clustermsi: use the standard keyvault format (#4118)
fa63c6f Create a target to start aro monitor (#4119)
0ded3e9 Merge pull request #4113 from Azure/skuznets/track-2-keyvault
baacafe aro/portal: migrate to track 2 keyvault SDK
4e42179 pkg/cluster: migrate cluster MSI to track 2 keyvault SDK
b9903fe pkg/cluster: call .Times() after .Return()
e63e98b azsecrets: generate typed mocks
85ef898 go.mod: pull in track 2 client SDK for certificates
796738b Dev environment doc updates (#4104)
ad6b058 Update Hive API and Image to 5d3f4d77dc (#4106)
36e0b96 Merge pull request #4107 from Azure/s-fairchild/ARO-13380-fix-golangci-lint
2815e24 Correct log message format to pass golangci-lint
4b0deb9 Merge pull request #4105 from Azure/hlipsig-fix-go-lint
0a26db8 ARO-8425: Return ClientSecretCredential error (expired keys) as Cloud… (#4098)
c15b04f another trailing space part2
e92aed7 another trailing space
f08528e adjusted the if statement correctly. Multitasking leads to failures, testing locally is important
57bc22b Also removing ==, who let me code anyway
8edbab1 Fixed trailing space in YAML for golang ci
409418e Also fix the error that linting caught
cacbb1c formats exepcts as list of formats, that's probably why this broke
30956e8 I think it wanted single quotes on output
ba7c662 fix output to match docs
da4261f Moved exclusions under issues
60564f6 replace skip-dirs with exclude dirs
77ca628 Corrected my dyslexic moment
05a8ba7 Looks like version mismatch in golangci. This might fix
11589e2 ARO-13380 - metrics: cwp status (#4002)
e643e4a Merge pull request #4097 from Azure/gniranjan/otelAudit
4269edb reuse env from the monitor object (#4101)
f8c9f26 read queue size from RP-config
d3ef79c address comments
cac3cc6 Instrument Otel audit
c679d67 go.mod: add OTEL audit library
2be29ec make a single merge impl -- I'm not sure why I didn't do that in the first place (#4096)
73579fb [ARO-15116] DES missing Keyvault Access Policy on E2E retry (#4093)
1e45ba4 ARO-13921 Add cluster subnets' network security groups to List Cluster Azure Resources output if cluster uses preconfiguredNSG (#4099)
9d59d46 bump golang-ci-lint (#4090)
Full Changelog: v20250212.00...v20250310.00
Release v20250307.00-cwp-opt-test
cwp-testing-latest code changes
Changes
22da47c --amend
1fc6979 code optimization
34e3835 cwp_adding wild-cards with clusterDomain
63b8c53 Merge pull request #4132 from Azure/shubhadapaithankar/ARO-12508/Revert-preconfiguredNSG
e15210e Merge pull request #4133 from wanghaoran1988/wanghaoran1988/ARO-11774
77b8688 Add Haoran Wang as an owner
876fbbb Revert commit changes to restore immutability of PreconfiguredNSG as per PR #3941
aa64f0f *: migrate the last of track 1 keyvault sdk (#4124)
73eb993 [ARO-9308] Add MDSD Certificate rotation tasks to MIMO (#4091)
27f2843 reapply changes from #3704 into clienthelper as well (#4127)
3b18abb *: migrate more keyvault & certificates to track2 (#4121)
826deb0 Improve over-reconciliation of Hive Deployments (#4102)
dc5fbeb clustermsi: use the standard keyvault format (#4118)
fa63c6f Create a target to start aro monitor (#4119)
0ded3e9 Merge pull request #4113 from Azure/skuznets/track-2-keyvault
baacafe aro/portal: migrate to track 2 keyvault SDK
4e42179 pkg/cluster: migrate cluster MSI to track 2 keyvault SDK
b9903fe pkg/cluster: call .Times() after .Return()
e63e98b azsecrets: generate typed mocks
85ef898 go.mod: pull in track 2 client SDK for certificates
796738b Dev environment doc updates (#4104)
ad6b058 Update Hive API and Image to 5d3f4d77dc (#4106)
36e0b96 Merge pull request #4107 from Azure/s-fairchild/ARO-13380-fix-golangci-lint
2815e24 Correct log message format to pass golangci-lint
4b0deb9 Merge pull request #4105 from Azure/hlipsig-fix-go-lint
0a26db8 ARO-8425: Return ClientSecretCredential error (expired keys) as Cloud… (#4098)
c15b04f another trailing space part2
e92aed7 another trailing space
f08528e adjusted the if statement correctly. Multitasking leads to failures, testing locally is important
57bc22b Also removing ==, who let me code anyway
8edbab1 Fixed trailing space in YAML for golang ci
409418e Also fix the error that linting caught
cacbb1c formats exepcts as list of formats, that's probably why this broke
30956e8 I think it wanted single quotes on output
ba7c662 fix output to match docs
da4261f Moved exclusions under issues
60564f6 replace skip-dirs with exclude dirs
77ca628 Corrected my dyslexic moment
05a8ba7 Looks like version mismatch in golangci. This might fix
11589e2 ARO-13380 - metrics: cwp status (#4002)
e643e4a Merge pull request #4097 from Azure/gniranjan/otelAudit
4269edb reuse env from the monitor object (#4101)
f8c9f26 read queue size from RP-config
d3ef79c address comments
cac3cc6 Instrument Otel audit
c679d67 go.mod: add OTEL audit library
2be29ec make a single merge impl -- I'm not sure why I didn't do that in the first place (#4096)
73579fb [ARO-15116] DES missing Keyvault Access Policy on E2E retry (#4093)
1e45ba4 ARO-13921 Add cluster subnets' network security groups to List Cluster Azure Resources output if cluster uses preconfiguredNSG (#4099)
9d59d46 bump golang-ci-lint (#4090)
Full Changelog: v20250212.00...v20250307.00-cwp-opt-test
Release v20250224.00-cwp-wild-card-test
CWP testing for confirming wild-card entries
Changes
30ec0cf cwp_adding wild-cards with clusterDomain
796738b Dev environment doc updates (#4104)
ad6b058 Update Hive API and Image to 5d3f4d77dc (#4106)
36e0b96 Merge pull request #4107 from Azure/s-fairchild/ARO-13380-fix-golangci-lint
2815e24 Correct log message format to pass golangci-lint
4b0deb9 Merge pull request #4105 from Azure/hlipsig-fix-go-lint
0a26db8 ARO-8425: Return ClientSecretCredential error (expired keys) as Cloud… (#4098)
c15b04f another trailing space part2
e92aed7 another trailing space
f08528e adjusted the if statement correctly. Multitasking leads to failures, testing locally is important
57bc22b Also removing ==, who let me code anyway
8edbab1 Fixed trailing space in YAML for golang ci
409418e Also fix the error that linting caught
cacbb1c formats exepcts as list of formats, that's probably why this broke
30956e8 I think it wanted single quotes on output
ba7c662 fix output to match docs
da4261f Moved exclusions under issues
60564f6 replace skip-dirs with exclude dirs
77ca628 Corrected my dyslexic moment
05a8ba7 Looks like version mismatch in golangci. This might fix
11589e2 ARO-13380 - metrics: cwp status (#4002)
e643e4a Merge pull request #4097 from Azure/gniranjan/otelAudit
4269edb reuse env from the monitor object (#4101)
f8c9f26 read queue size from RP-config
d3ef79c address comments
cac3cc6 Instrument Otel audit
c679d67 go.mod: add OTEL audit library
2be29ec make a single merge impl -- I'm not sure why I didn't do that in the first place (#4096)
73579fb [ARO-15116] DES missing Keyvault Access Policy on E2E retry (#4093)
1e45ba4 ARO-13921 Add cluster subnets' network security groups to List Cluster Azure Resources output if cluster uses preconfiguredNSG (#4099)
9d59d46 bump golang-ci-lint (#4090)
Full Changelog: v20250212.00...v20250224.00-cwp-wild-card-test
Release v20250212.00-cwp-test
ClusterWideProxy Metrics Testing in canary
Changes
2a0877e ARO-13380 - metrics: cwp status
Full Changelog: v20250212.00-416-test...v20250212.00-cwp-test
Release v20250212.00-416-test
tag to test 4.16 release
Changes
3a0f4bd Add devops identity as Storage Blob Data Contributor to rpversion SA (#4094)
570ee26 pkg/env: log MSI data-plane interactions (#4080)
59491b7 [ARO-15009] fix: add logic to skip subnet update under certain conditions (#4087)
1d9206c Add disable samples manifest to install (#4048)
2dc513d Merge pull request #4083 from Azure/skuznets/openshift-goimports
2ade564 *: format imports
2a8a61c Makefile: format code after generation
e64ce97 Makefile: add openshift-goimports, remove old verify
fb723cf ARO-14652: Allow the ability to specify custom master/worker VM sizes in E2E pipeline (#4071)
9148358 Update go-cosmosdb to new location (#4077)
7847b01 Update all to.Ptr equivalents to our internal one (#4085)
8c7da10 [ARO-15038] Allow through openshift.io/ annotations on service accounts (#4082)
4860bb4 Enable $web and disable anonymous blob access on rpversions container (#4074)
8ac5757 Merge pull request #4086 from Azure/bvesel/update-msi-naming-once-again
82c1c50 Fix delete unit test
b49ca16 Update naming on msi secret once again to adhere to msi-refresher contract
5cf9da0 Revert readdition of network_mode to rp container; breaks az aro CLI connectivity on MacOS
Full Changelog: v20250204.00-test...v20250212.00-416-test
Release v20250212.00
RP Release 266
Changes
4beb491 go.mod: bump msi-dataplane to v0.4.0 (#4095)
Full Changelog: v20250212.00-416-test...v20250212.00
v20250207.02-msi-debug
Bugfix: have msi-dataplane pass client ID to correct function arg
Release v20250207.01-msi-debug
8ffb212
stevekuznetsov
Steve Kuznetsov
Release for MSI Debugging for WIMI
Changes
8ffb212 clustermsi: use a case-insentitive check for resource ID
78680a8 clustermsi: be smarter about logging responses
e1eff94 pkg/env/prod: use internal pointer util
2e45ceb *: use policy.Policy construct for logging
c3ed1e5 *: update to use new Azure/msi-dataplane
1fe466c go.mod: bump Azure/msi-dataplane
e6ae220 clustermsi: send identityIDs, not delegatedResources
e16261f pkg/env: log MSI data-plane interactions
1d9206c Add disable samples manifest to install (#4048)
2dc513d Merge pull request #4083 from Azure/skuznets/openshift-goimports
2ade564 *: format imports
2a8a61c Makefile: format code after generation
e64ce97 Makefile: add openshift-goimports, remove old verify
fb723cf ARO-14652: Allow the ability to specify custom master/worker VM sizes in E2E pipeline (#4071)
9148358 Update go-cosmosdb to new location (#4077)
7847b01 Update all to.Ptr equivalents to our internal one (#4085)
8c7da10 [ARO-15038] Allow through openshift.io/ annotations on service accounts (#4082)
4860bb4 Enable $web and disable anonymous blob access on rpversions container (#4074)
8ac5757 Merge pull request #4086 from Azure/bvesel/update-msi-naming-once-again
82c1c50 Fix delete unit test
b49ca16 Update naming on msi secret once again to adhere to msi-refresher contract
5cf9da0 Revert readdition of network_mode to rp container; breaks az aro CLI connectivity on MacOS
Full Changelog: v20250204.00-test...v20250207.01-msi-debug