Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OCPBUGS-11939: Initialize RegistryOverrides w/ mgmt cluster ICSP #2437

Merged
merged 2 commits into from Jun 1, 2023

Conversation

bryan-cox
Copy link
Member

@bryan-cox bryan-cox commented Apr 17, 2023

What this PR does / why we need it:
Includes any registry mirrors from ImageContentSourcePolicy (ICSP) and ImageDigestMirrorSet (IDMS) policies from the management cluster. Registry mirrors from these policies provide the cluster with alternatives to the default Operator Hub and image registries in disconnected environments.

Injects the trusted CA bundle from the openshift-config-managed pod into the HyperShift Operator pod. These additional CAs are needed in disconnected environments utilizing an OpenShift management cluster.

Which issue(s) this PR fixes:
Fixes OCPBUGS-11939

Checklist

  • Subject and description added to both, commit and PR.
  • Relevant issues have been referenced.

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Apr 17, 2023
@openshift-ci-robot
Copy link

openshift-ci-robot commented Apr 17, 2023

@bryan-cox: This pull request references ACM-4093 which is a valid jira issue.

In response to this:

What this PR does / why we need it:
Initialize RegistryOverrides with the management cluster's ICSP if no value was passed in for the RegistryOverrides flag.

Which issue(s) this PR fixes:
Fixes ACM-4093

Checklist

  • Subject and description added to both, commit and PR.
  • Relevant issues have been referenced.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openshift-ci openshift-ci bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Apr 17, 2023
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Apr 17, 2023

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@openshift-ci openshift-ci bot added do-not-merge/needs-area area/hypershift-operator Indicates the PR includes changes for the hypershift operator and API - outside an OCP release and removed do-not-merge/needs-area labels Apr 17, 2023
@netlify
Copy link

netlify bot commented Apr 17, 2023

Deploy Preview for hypershift-docs ready!

Name Link
🔨 Latest commit 58c2dd5
🔍 Latest deploy log https://app.netlify.com/sites/hypershift-docs/deploys/6475defe05bfa2000890db27
😎 Deploy Preview https://deploy-preview-2437--hypershift-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

@openshift-ci-robot
Copy link

openshift-ci-robot commented Apr 18, 2023

@bryan-cox: This pull request references ACM-4093 which is a valid jira issue.

In response to this:

What this PR does / why we need it:
Initialize RegistryOverrides with the management cluster's ICSP if no value was passed in for the RegistryOverrides flag.

Which issue(s) this PR fixes:
Fixes OCPBUGS-11939

Checklist

  • Subject and description added to both, commit and PR.
  • Relevant issues have been referenced.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@bryan-cox
Copy link
Member Author

/retitle OCPBUGS-11939: Initialize RegistryOverrides w/ mgmt cluster ICSP

@openshift-ci openshift-ci bot changed the title ACM-4093: Initialize RegistryOverrides w/ mgmt cluster ICSP OCPBUGS-11939: Initialize RegistryOverrides w/ mgmt cluster ICSP Apr 18, 2023
@openshift-ci-robot openshift-ci-robot added jira/severity-important Referenced Jira bug's severity is important for the branch this PR is targeting. jira/invalid-bug Indicates that a referenced Jira bug is invalid for the branch this PR is targeting. labels Apr 18, 2023
@openshift-ci-robot
Copy link

@bryan-cox: This pull request references Jira Issue OCPBUGS-11939, which is invalid:

  • expected the bug to target the "4.14.0" version, but no target version was set

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

The bug has been updated to refer to the pull request using the external bug tracker.

In response to this:

What this PR does / why we need it:
Initialize RegistryOverrides with the management cluster's ICSP if no value was passed in for the RegistryOverrides flag.

Which issue(s) this PR fixes:
Fixes OCPBUGS-11939

Checklist

  • Subject and description added to both, commit and PR.
  • Relevant issues have been referenced.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@bryan-cox
Copy link
Member Author

/jira refresh

@openshift-ci-robot openshift-ci-robot added jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. and removed jira/invalid-bug Indicates that a referenced Jira bug is invalid for the branch this PR is targeting. labels Apr 18, 2023
@openshift-ci-robot
Copy link

@bryan-cox: This pull request references Jira Issue OCPBUGS-11939, which is valid. The bug has been moved to the POST state.

3 validation(s) were run on this bug
  • bug is open, matching expected state (open)
  • bug target version (4.14.0) matches configured target version for branch (4.14.0)
  • bug is in the state ASSIGNED, which is one of the valid states (NEW, ASSIGNED, POST)

No GitHub users were found matching the public email listed for the QA contact in Jira (lshilin@redhat.com), skipping review request.

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@bryan-cox
Copy link
Member Author

/area control-plane-operator

@openshift-ci openshift-ci bot added the area/control-plane-operator Indicates the PR includes changes for the control plane operator - in an OCP release label Apr 18, 2023
@bryan-cox
Copy link
Member Author

/test e2e-aws

@bryan-cox
Copy link
Member Author

/test e2e-aws

@bryan-cox
Copy link
Member Author

/test e2e-aws

1 similar comment
@bryan-cox
Copy link
Member Author

/test e2e-aws

CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jun 21, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle ConfigMap created in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jun 29, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle ConfigMap created in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jun 29, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle ConfigMap created in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jun 29, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle ConfigMap created in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jun 29, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle ConfigMap created in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jun 29, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle ConfigMap created in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jun 29, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle ConfigMap created in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jun 29, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle ConfigMap created in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jun 29, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle ConfigMap created in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jun 30, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle ConfigMap created in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jul 5, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle ConfigMap created in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jul 10, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle ConfigMap created in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jul 13, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jul 14, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jul 14, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jul 14, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jul 14, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
jparrill pushed a commit to jparrill/hypershift that referenced this pull request Jul 26, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jul 31, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Jul 31, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Aug 1, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Aug 1, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Aug 2, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Aug 2, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Aug 2, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
CrystalChun added a commit to CrystalChun/hypershift that referenced this pull request Aug 16, 2023
https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
openshift#2437 so that these
certificates may be used to pull images from these mirror registries.
openshift-merge-robot pushed a commit that referenced this pull request Aug 21, 2023
* HOSTEDCP-1000: Add image to management cluster capabilities

https://issues.redhat.com/browse/HOSTEDCP-1000
image.config.openshift.io will need to be checked for
the CAs for the image registries a user specifies.

* HOSTEDCP-1000: Add user CA(s) to ocm-trusted-ca-bundle ConfigMap

https://issues.redhat.com/browse/HOSTEDCP-1000
Adds the CA certificates for mirror registries specified by the user
to the ocm-trusted-ca-bundle injected in
#2437 so that these
certificates may be used to pull images from these mirror registries.

* HOSTEDCP-1000: Create Init container for hypershift operator

https://issues.redhat.com/browse/HOSTEDCP-1000
Adds an init container to the hypershift operator to initialize
the operator's environment. The init container includes changes for
adding the user's CA bundle to the ocm-trusted-ca-bundle.
@openshift-merge-robot
Copy link
Contributor

Fix included in accepted release 4.15.0-0.nightly-2023-09-30-003019

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. area/cli Indicates the PR includes changes for CLI area/control-plane-operator Indicates the PR includes changes for the control plane operator - in an OCP release area/hypershift-operator Indicates the PR includes changes for the hypershift operator and API - outside an OCP release bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. jira/severity-important Referenced Jira bug's severity is important for the branch this PR is targeting. jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

7 participants