openshift-merge-bot[bot]
311d230b8e
Merge pull request #9037 from pawanpinjarkar/fix-multiline-EC-keys-parsing-failure
...
OCPBUGS-42012: Systemd Fails to Parse Multiline EC Keys
v4.16.15
v0.90.0
2024-09-23 21:49:51 +00:00
openshift-merge-bot[bot]
c6e8e07863
Merge pull request #8997 from openshift-cherrypick-robot/cherry-pick-8981-to-release-4.16
...
[release-4.16] OCPBUGS-41845: Bump extract-machine-os timout to 20m
2024-09-23 18:55:13 +00:00
openshift-merge-bot[bot]
08682603eb
Merge pull request #8910 from openshift-cherrypick-robot/cherry-pick-8906-to-release-4.16
...
[release-4.16] OCPBUGS-38964: IngressController subnet selection in AWS
2024-09-20 19:05:58 +00:00
openshift-merge-bot[bot]
5b28af4990
Merge pull request #9031 from openshift-cherrypick-robot/cherry-pick-8549-to-release-4.16
...
[release-4.16] OCPBUGS-42138: add tested instance type for IBMCloud
2024-09-20 14:58:28 +00:00
Pawan Pinjarkar
33241d82a1
OCPBUGS-42012: Systemd Fails to Parse Multiline EC Keys
...
Base64 encode public key to fix systemd parsing issues; remove unused field from authconfig
2024-09-18 15:21:07 -04:00
openshift-merge-bot[bot]
daa3384bd5
Merge pull request #8936 from shiftstack/openstack-upi-var-files-4.16
...
OCPBUGS-39287: Fix var_files syntax to work on older version of ansible
2024-09-18 16:01:01 +00:00
openshift-merge-bot[bot]
1cd7636eef
Merge pull request #9009 from openshift-cherrypick-robot/cherry-pick-9005-to-release-4.16
...
[release-4.16] OCPBUGS-41929: Add AWS c7g,m7g,r8g to tested instance types
2024-09-18 09:19:31 +00:00
May Xu
72b648c8e4
add tested instance type for ibmCloud
2024-09-18 09:12:59 +00:00
Martin André
2b3a97bddd
OCPBUGS-39285: Fix var_files syntax to work on older version of ansible
...
On ansible-core 2.14 and below, `var_files` chokes on missing file. This
is no longer the case with ansible-core 2.15. We need a different
strategy so that ansible ignores non-existent files.
2024-09-17 07:35:02 +02:00
openshift-merge-bot[bot]
896f8a72b7
Merge pull request #8724 from openshift-cherrypick-robot/cherry-pick-8477-to-release-4.16
...
[release-4.16] OCPBUGS-36855: Openstack UPI - Reintroduce unique resource names.
2024-09-16 14:46:05 +00:00
lwan
6cfe3e455e
Add AWS c7g,m7g,r8g to tested instance types
2024-09-13 13:27:59 +00:00
openshift-merge-bot[bot]
d4da1b4a0f
Merge pull request #8912 from openshift-cherrypick-robot/cherry-pick-8867-to-release-4.16
...
[release-4.16] OCPBUGS-39082: incorrect folder gen, workaround govmomi vm folder path bug
2024-09-12 16:01:59 +00:00
Derek Higgins
b91f54dee8
OCPBUGS-39081: Bump extract-machine-os timout to 20m
...
This service has to download a large container image,
bump update the timout to allow for a slow download rate.
2024-09-12 08:21:06 +00:00
openshift-merge-bot[bot]
16f5178e5e
Merge pull request #8953 from openshift-cherrypick-robot/cherry-pick-8591-to-release-4.16
...
[release-4.16] OCPBUGS-39496: capi/aws/byo-vpc/multi-cidr: fix group rules
2024-09-12 07:05:38 +00:00
openshift-merge-bot[bot]
acbd12cec5
Merge pull request #8939 from theobarberbany/update-terraform-gcp-worker
...
OCPBUGS-36861: Updates GCP terraform worker role
2024-09-09 15:49:26 +00:00
openshift-merge-bot[bot]
40cdd2a0fc
Merge pull request #8905 from yanhua121/OCPBUGS-38956
...
[release-4.16] OCPBUGS-38956: failed to install Nutanix OCP 4.16 cluster with DHCP
2024-09-06 21:19:47 +00:00
openshift-merge-bot[bot]
e39b13e501
Merge pull request #8891 from openshift-cherrypick-robot/cherry-pick-8874-to-release-4.16
...
[release-4.16] OCPBUGS-38822: upstream capv bug causes session timeout
2024-09-06 14:33:19 +00:00
openshift-merge-bot[bot]
58b8796683
Merge pull request #8955 from MahnoorAsghar/cherry-pick-8819-to-release-4.16
...
[release-4.16] OCPBUGS-39468: Enable TLS for virtual media in initial ironic deployment
2024-09-05 18:53:25 +00:00
Theo Barber-Bany
58d1254c15
Updates GCP terraform worker role
...
This change updates the GCP terraform worker role to include permissions to
pull from the artifact registry.
This ensures that new .pkg.dev images can be pulled and that once GCR is
decomissioned, .gcr.io images can still be pulled.
2024-09-04 18:17:55 +01:00
openshift-merge-bot[bot]
8ce5caf258
Merge pull request #8777 from openshift-cherrypick-robot/cherry-pick-8758-to-release-4.16
...
[release-4.16] OCPBUGS-37606: vSphere validation fails if dc is in a folder
2024-09-04 14:03:41 +00:00
Mahnoor Asghar
da7216a6b9
Enable TLS for virtual media in initial ironic deployment
2024-09-04 07:38:33 -04:00
Marco Braga
a5caaf5967
OCPBUGS-35054/capa/byo-vpc/multi-cidr: add MCS rule to controlplane
...
Added security group ingress rule to satisfy the ingress traffic
from internal network when the installation is BYO VPC where the machine
CIDR, provided in install config, isn't the primary for the VPC.
To recap the current CAPA provisioning:
- The SGs with suffix 'node', 'lb' and 'controlplane' are created and
attached to the control plane nodes
- The SGs 'lb' is intended to create ingress rules from listeners (API,
MCS, etc), but CAPA enforces the Primary CIDR block of VPC[1]
- When deploying BYO VPC with multi-CIDR (managed multi-cidr isn't
supported), CAPA creates ingress rules in 'lb' with primary CIDR of
VPC, then the control plane instances tries to access the MCS endpoint
in the first boot to load ignitions from bootstrap, it is blocked
because the LB is created using subnets from the Secondary CIDR block,
leading to failed control plane nodes provisioning.
This change add ingress rules to MCS (22623/TCP) to SG 'controlplane' from
NLB's SG, similar already existing rules for API (reason why API is
working).
[1] https://github.com/kubernetes-sigs/cluster-api-provider-aws/issues/5008
2024-09-04 05:43:01 +00:00
openshift-merge-bot[bot]
d570c0561c
Merge pull request #8920 from barbacbd/OCPBUGS-39206
...
OCPBUGS-39206: Update GCP Disk Types 4.16
2024-09-02 01:01:19 +00:00
Brent Barbachem
58e87f6b6a
CORS-3649: Add new disk types GCP Control Plane nodes
...
** GCP Control Plane Nodes should now be allowed to use pd-balanced and
hyperdisk-balanced. The IOPS rating is sufficient for both disk types
to be used for control plane nodes, but pd-standard still falls short.
** Update installer explain to provide the correct information
2024-08-30 14:34:55 -04:00
Brent Barbachem
60d617e81f
** Update the enumeration for GCP disks to include hyperdisk-balanced.
...
** Update the allowed disk types of compute nodes for gcp. This will now include hyperdisk-balanced.
2024-08-30 14:34:54 -04:00
openshift-merge-bot[bot]
3836a1b655
Merge pull request #8913 from openshift-cherrypick-robot/cherry-pick-8893-to-release-4.16
...
[release-4.16] OCPBUGS-39087: aws: validate public-only subnets configs
2024-08-30 14:07:33 +00:00
openshift-merge-bot[bot]
e770581ed8
Merge pull request #8855 from jhixson74/release-4.16-OCPBUGS-37587
...
OCPBUGS-38821: [release-4.16] Azure: Disable shared key access when using a managed identity
2024-08-29 19:50:18 +00:00
openshift-merge-bot[bot]
6440b4f1a6
Merge pull request #8897 from openshift-cherrypick-robot/cherry-pick-8820-to-release-4.16
...
[release-4.16] OCPBUGS-38302: upi/aws: update lambda runtime python version
2024-08-28 16:49:20 +00:00
Rafael Fonseca
2445e0f83b
aws/validation: add unit tests for public-only cluster configs
2024-08-28 07:39:03 +00:00
Rafael Fonseca
65cbbf78b5
OCPBUGS-38722: aws/validation: check config for public-only subnets
...
A public-only subnets cluster install requires:
1. publish method to not be "Internal"
2. a BYO VPC with public subnets
2024-08-28 07:39:03 +00:00
Rafael Fonseca
370e9b6b5c
aws: move public-only subnets env var check to function
...
The check was duplicated in multiple places which makes it harder to
update the logic around the env var if we ever need to.
2024-08-28 07:39:01 +00:00
Joseph Callen
5602df91b7
incorrect folder gen, workaround govmomi vm folder path bug,
...
This PR resolves an issue when `folder` is undefined
and datacenter exists as a child of a datacenter folder.
instead of using DatacenterFolders.VmFolder we
replace that with a path.Join of the datacenter InventoryPath,
vm and the clusterID. This will provide the entire
correct path to the hidden `/vm/` folder in vCenter.
2024-08-28 04:22:30 +00:00
Pawan Pinjarkar
610121b115
OCPBUGS-33308: IngressController subnet selection in AWS Add a warning that public subnets can not be set when publish is set to internal
2024-08-27 21:06:14 +00:00
Yanhua Li
3af7850d43
OCPBUGS-38956: failed to install Nutanix OCP 4.16 cluster with DHCP
2024-08-26 16:38:53 -04:00
openshift-merge-bot[bot]
0b2e4425f0
Merge pull request #8892 from openshift-cherrypick-robot/cherry-pick-8878-to-release-4.16
...
[release-4.16] OCPBUGS-38826: aws: add support for clusters with public-only subnets
2024-08-26 12:33:12 +00:00
Rafael Fonseca
8ee3b1b9dd
OCPBUGS-38235: upi/aws: update lambda runtime python version
...
The usage of python3.8 in lambda runtimes is being deprecated soon (Oct
14, 2024). This change updates it to python3.11 which can be easily
installed in RHEL 9.
2024-08-26 12:05:47 +00:00
Rafael Fonseca
bafcdc17a4
aws: add support for clusters with public-only subnets
...
We lost support to this internal feature when we move from terraform to
CAPI. Although it's still possible to get a cluster with public-only
subnets by editing the AWSCluster manifest before install, it's more
convenient to have a fully automated process to be used in CI.
2024-08-22 05:33:05 +00:00
Joseph Callen
f2cf2c186d
upstream capv bug causes session timeout
...
Until we can bump capv to the latest version
disable session keep alive that causes session
timeout and deadlocks as described in the links
attached to the bug.
2024-08-21 23:10:30 +00:00
openshift-merge-bot[bot]
2f7a52a9c7
Merge pull request #8848 from r4f4/aws-fix-lb-register-instance-4.16
...
OCPBUGS-38517: [release-4.16] capi/aws: bump provider for instance register fix
2024-08-21 17:47:39 +00:00
openshift-merge-bot[bot]
f8ca9c6bea
Merge pull request #8818 from barbacbd/OCPBUGS-37821-release-4.16
...
OCPBUGS-38196: Remove timed context for gcp client
2024-08-21 14:40:40 +00:00
openshift-merge-bot[bot]
deb993e72a
Merge pull request #8846 from openshift-cherrypick-robot/cherry-pick-8834-to-release-4.16
...
[release-4.16] OCPBUGS-38502: PowerVS: Fix mad system pool
2024-08-16 17:23:38 +00:00
John Hixson
efbfb13f13
Azure: Disable shared key access when using a managed identity
...
https://issues.redhat.com/browse/OCPBUGS-37587
2024-08-15 13:57:47 -07:00
Rafael Fonseca
7b9fe9e544
capi/aws: bump CRD
2024-08-15 11:20:15 +02:00
Rafael Fonseca
89ae225356
capi/aws: update vendor
2024-08-15 11:20:15 +02:00
Rafael Fonseca
f5aeff2cfa
OCPBUGS-36327: capi/aws: bump provider for instance register fix
...
This bump includes the following fix to only register instances to the
LB when they are in a running state:
* https://github.com/kubernetes-sigs/cluster-api-provider-aws/pull/5040
This should avoid unnecessary AWS API calls and red herring error
messages in the log output.
2024-08-15 11:20:10 +02:00
Mark Hamzy
dbae4e7ec7
PowerVS: Fix mad system pool
...
Add system type e980 to the list of allowed system types for the Madrid region.
2024-08-14 20:45:20 +00:00
Brent Barbachem
b992a572aa
OCPBUGS-37821: Remove timed context for gcp client
...
** removing the timeout for a client that is causing failures when we return from the
function that creates a signed url.
2024-08-09 08:00:53 -04:00
Brent Barbachem
22e2312503
** Update the gcp cluster api reference to bucket creation that takes away the need for a client context.
2024-08-09 07:31:12 -04:00
openshift-merge-bot[bot]
4f78aec1c8
Merge pull request #8794 from openshift-cherrypick-robot/cherry-pick-8787-to-release-4.16
...
[release-4.16] OCPBUGS-37838: fix bogus analyze message when gather fails
2024-08-06 14:15:13 +00:00
openshift-merge-bot[bot]
38b9a82f07
Merge pull request #8767 from shiftstack/OCPBUGS-37492
...
OCPBUGS-37492: openstack: Fix security group tagging
2024-08-06 08:50:44 +00:00