MLE-24161: Releasing MarkLogic Kubernetes Operator 1.1.0 #113

barkhachoithani · 2025-11-12T22:43:39Z

No description provided.

Merge main back to develop

MLE-20186 bug for update label and annotation

MLE-19837 add blackduck scans

MLE-21335/Add httponly attribute

* MLE-21222: Support to add ServiceAccountName * add description in manifests * Fix Service Account Not Assigned Issue * update service account implementation by review * add delete logic after test is done * add debug information for minikube version * fix the missing RBAC --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com>

* MLE-21691: fix bug for service not updated when added new port * Fix Labels --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com>

* MLE-20428: add labels and annotation in group level * delete annotation used for kubectl apply * Fix the issue with HAProxy Label * Working Solution * fix haproxy selector * fix update for haproxy service * fix issue with haproxy updated after creation * fix haproxy deployment label update * fix label for all services * remove debug logging * fix the bug with update panic * fix group level label not prompt to services * update the Helm CRD * Fix Unit Test Failuer * tidy code * add comment out back * remove excess logging * uncomment the logic in predicate * improve timeout for testing * Fix typo * add label and annotation sample for complete.yaml --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com>

* MLE-22135: change liveness probe * add retry logic to group configuration * update haproxy image * adjust testing time * update marklogic image version * remove image * update image version in Jenkins * fix makefile for pipeline * fix validate rule and image load * push changes from build * MLE-22902: fix operator pipeline bug * ignore docker cache * fix validating rule * add debug message for Jenkins Pipeline * fix test with bug: index out of range [0] with length 0 * fix test bug with index out of range [1] with length 1 * add debug info * revert changes back to makefile * uncomment changes --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com>

* MLE-22946: Fix the bug of cluster level labels propagate from other cluster. * Update pkg/k8sutil/service.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Update pkg/k8sutil/context.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Update pkg/k8sutil/context.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * revert copilot changes * Fix bug MLE-23487: Log Collection Default Value Override * MLE-23487 default values for LogCollection * MLE-23484: Fix Log Collection Test Failure * add retry for the Loki Grafana query --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com>

…ntToken-to-false MLE-21295: Enforce automountServiceAccountToken=false

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* fluent-bit config changed to use YAML format * added copilot suggested changes

MLE-23812/BUG-fluentBit-Logs-volume

MLE-20489/BUG-CWE-fix

* remove unused code and add comments * the non pathbased works for app server * support for pathbased routing * fix typo * fix bugs for pathbased routing * add TCP implementation * fix null pointer issue * fix nil pointer issue * add HAProxyGroup * Fix bug in TCP config have wrong number of backend servers * Update pkg/k8sutil/haProxyHelper.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * update format * fix bug pointed by Copilot --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com> Co-authored-by: Romain Winieski <winieski@progress.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

…g-fix MLE-24682 network filtering fix

…caled down to 0 replicas (#104) * MLE-24840: fix bug when scale node to 0 failed * fix context issue --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com>

* Add publishing step and enable scheduled builds * move blackduck scan after publishing * Ensure we run container scan when we publish, otherwise just the source --------- Co-authored-by: Vitaly Korolev <vitaly.korolev@marklogic.com>

… to helm (#105)

* MLE-24871: upgrade go version and dependency version for security fix * add change for docker file * update the VERSION to 1.1.0 * MLE-24842: Fix security Vulnerability issue with The Kubernetes container requests the NET_RAW capability * MLE-24842: Fix security issue with The Kubernetes container is allowed to run as the root user * Fix linting issue * Fix test issue * Change the Kubernetes Version to 1.31.13 * change the Kubernetes version to 1.31.13 * change env_Kubernetes Version * add MINIKUBE_HOME to Jenkins Environment * Update the notice file based on go.mod --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com>

#107) * added new Copyright line in the files * Update api/v1/common_types.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Update internal/controller/marklogicgroup_controller.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Update pkg/k8sutil/haProxy.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * added Copyright message to test data files --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

removed duplicate import of "reflect" package causing test failure.

Co-authored-by: Peng Zhou <peng.zhou@progress.com>

* MLE-24871: update default MarkLogic Image version to 12 * update defualt image for minimal-production.yaml --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com>

* MLE-25053: update the readme for Operator 1.1 * update fluent-bit to latest 4.1.1 * update sample config files * fix error in kustomization file * update readme for known issue regarding fluent-bit * remove unneeded files * update the docker-build script * update the fluent-bit version to 4.1.1 * add back hugespages2Mi: "24Gi" --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com>

* MLE-25068: Support extra config for fluent-bit * MLE-25068: Support Extra Configuration for Log Collection * Fix handling indentation for log collection * MLE-25101: Fix AdditionalVolumeMount does not mount to Fluent-bit Correctly --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com>

Copilot

Pull Request Overview

This PR releases MarkLogic Kubernetes Operator version 1.1.0, introducing security enhancements, dependency updates, and operational improvements. Key changes include command injection prevention, updated library versions, and enhanced testing capabilities.

Key Changes:

Security hardening with input validation functions to prevent command injection vulnerabilities
Updated Go version (1.23.6 → 1.24.9) and Kubernetes dependencies (0.32.1 → 0.34.1)
Fluent Bit image update (3.2.5 → 4.1.1) with YAML-based configuration format

Reviewed Changes

Copilot reviewed 99 out of 106 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
go.mod	Updates Go version and Kubernetes dependencies to latest versions
test/utils/utils.go	Adds input validation functions to prevent command injection attacks
test/utils/certs.go	Refactors certificate generation to use safer command execution patterns
pkg/k8sutil/statefulset.go	Adds service account support and improves reconciliation logic
pkg/k8sutil/configmap.go	Migrates Fluent Bit configuration from INI to YAML format
config/samples/*.yaml	Updates default MarkLogic and Fluent Bit image versions

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

test/e2e/2_marklogic_cluster_test.go

pengzhouml and others added 30 commits March 19, 2025 09:25

Merge pull request #77 from marklogic/main

98bfa50

Merge main back to develop

port mapping on services for port 7998 (#78)

11c1d08

Merge pull request #79 from marklogic/bugfix/MLE-20186-metadata-update

555b9cc

MLE-20186 bug for update label and annotation

add blackduck scan and update job branding

bf0a8de

Merge pull request #80 from vitalykorolev/MLE-19837_add-blackduck-scans

40d69d7

MLE-19837 add blackduck scans

Add httponly attribute

b833e05

Merge pull request #81 from marklogic/MLE-21335/Add-httponly-attribute

ed9ec47

MLE-21335/Add httponly attribute

PDP-473: Create pr-workflow.yaml

9dcf315

MLE-21691: fix bug for service not updated when added new port (#92)

b62461b

* MLE-21691: fix bug for service not updated when added new port * Fix Labels --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com>

MLE-22549: fix for the group name consisting the word group (#88)

33a6b9b

enforce automountServiceAccountToken=false

0253625

Merge pull request #96 from marklogic/MLE-21295/automountServiceAccou…

5b868e7

…ntToken-to-false MLE-21295: Enforce automountServiceAccountToken=false

fix volumemounth for logs collection

da55eae

Fix CWE

1ed2814

Update test/utils/certs.go

91d7958

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update pkg/k8sutil/statefulset.go

97db22f

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

MLE-23597: fluent-bit config changed to use YAML format (#98)

00976d5

* fluent-bit config changed to use YAML format * added copilot suggested changes

fix len redundancy

1b143be

Merge pull request #97 from marklogic/MLE-23812/BUG-fluentBit-log-volume

ada4caa

MLE-23812/BUG-fluentBit-Logs-volume

Merge pull request #99 from marklogic/MLE20489/BUG-CWE-fix

e85553a

MLE-20489/BUG-CWE-fix

modprobe br_netfilter

683a2df

Merge pull request #101 from vitalykorolev/MLE-24682_network-filterin…

26295cc

…g-fix MLE-24682 network filtering fix

MLE-24840: Fix the bugMarkLogic group fails to scale up after being s…

273d342

…caled down to 0 replicas (#104) * MLE-24840: fix bug when scale node to 0 failed * fix context issue --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com>

MLE-24880: fix the service account delete issue and add latest change…

75246a0

… to helm (#105)

pengzhouml and others added 10 commits October 28, 2025 10:16

add missing regestry for blackduck scan (#108)

9e4cd8c

Update marklogicgroup_controller.go

e0b1344

removed duplicate import of "reflect" package causing test failure.

MLE-24592: Fix security issues raised by Polaris (#110)

8b7d852

Co-authored-by: Peng Zhou <peng.zhou@progress.com>

MLE-24871/Update default image version to ML 12 (#109)

a299367

* MLE-24871: update default MarkLogic Image version to 12 * update defualt image for minimal-production.yaml --------- Co-authored-by: Peng Zhou <peng.zhou@progress.com>

add readOnlyRootFilesystem: true to the Operator

4ffc6d5

built helm chart for 1.1.0

1b60e8f

barkhachoithani requested review from Copilot, pengzhouml, rwinieski, sumanthravipati and vitalykorolev November 12, 2025 22:43

Copilot AI reviewed Nov 12, 2025

View reviewed changes

test/e2e/2_marklogic_cluster_test.go Show resolved Hide resolved

test/e2e/2_marklogic_cluster_test.go Show resolved Hide resolved

sumanthravipati approved these changes Nov 12, 2025

View reviewed changes

barkhachoithani merged commit c29bb17 into main Nov 12, 2025
3 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

MLE-24161: Releasing MarkLogic Kubernetes Operator 1.1.0 #113

MLE-24161: Releasing MarkLogic Kubernetes Operator 1.1.0 #113

Uh oh!

barkhachoithani commented Nov 12, 2025

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

MLE-24161: Releasing MarkLogic Kubernetes Operator 1.1.0 #113

MLE-24161: Releasing MarkLogic Kubernetes Operator 1.1.0 #113

Uh oh!

Conversation

barkhachoithani commented Nov 12, 2025

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Reviewed Changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants