v0.16.0

Compare Source

Changes included in v0.16.0:

🚀 Features

• release v0.16.0 #​190
  • [USER][FEATURE] - Release v0.16.0
• prepare for high availability #​188
  • [OPERATOR][FEATURE] Add high availability features for the openmcp-operator and service-providers, cluster-providers and platform-services
• exclude provider fields from status update & utility to set these fields #​187
  • [DEVELOPER][FEATURE] - Utility function for service providers to add the kinds of their managed resources to the ServiceProvider status

🔧 Chores

• remove namespace field from secret reference in AccessRequest status #​183
  • [USER][BREAKING] Removed the status.secretRef.namespace field from AccessRequest resources which was added by accident. The access secrets are expected to be in the same namespace as the AccessRequest itself, so wherever this field is read, it can just be replaced with the AccessRequest's namespace.
• improve the advanced clusteraccess library's abilities to mock fake clients in unit tests #​186
  • [DEVELOPER][FEATURE] The advanced ClusterAccess library's capabilities regarding unit tests have been enhanced by adding a configurable FakeClientGenerator to the reconciler. If set, this function will be called when trying to build a client.Client out of an AccessRequest's kubeconfig secret. This enables the test code to inject fake client implementations into the reconciler's Access method and thereby removes the need for any test-specific coding in the controller's logic itself.

v0.15.2

Compare Source

Changes included in v0.15.2:

🚀 Features

• advanced clusteraccess library #​173
  • [DEVELOPER][BREAKING] The behavior of the library in lib/clusteraccess has changed slightly: Before, the Reconcile method would wait for some other controller to create the namespace and requeue the reconciliation until it existed. Now, it will instead create the namespace itself.
  • [DEVELOPER][FEATURE] The lib/clusteraccess/advanced package now contains a highly flexible library for generating access to clusters during a controller's reconciliation loop. See the documentation for further information.

🐛 Fixes

• requeue mcp if not ready #​184
  • [USER][BUGFIX] Fixed a bug that caused an MCPv2 to not be requeued for reconciliation despite not being Ready yet, causing it to be stuck in Progressing until a reconciliation was triggered externally.

v0.15.1

Compare Source

Changes included in v0.15.1:

🚀 Features

• allow to skip the workload cluster management #​171
  • [DEVELOPER][FEATURE] Allow to skip management of Workload cluster in Access Request Reconciler

🐛 Fixes

• access request handling for MCP V2 #​172
  • [USER][BUGFIX] Correctly handle MCPs without an OIDC config
    Change : to _ for the access secret provider prefix.

v0.15.0

Compare Source

Changes included in v0.15.0:

🔨 Refactoring

• move access request handling into own lib function #​160
  • [DEVELOPER][FEATURE] The lib/clusteraccess package's Manager interface has been expanded with the WaitForClusterAccess method, which creates/updates an AccessRequest for an existing Cluster or ClusterRequest.

🚀 Features

• support token auth for ManagedControlPlaneV2 #​168
  • [USER][FEATURE] Allow static token configuration in IAM section of ManagedControlPlaneV2
• Improve clusteraccess #​167
  • [DEVELOPER][FEATURE] The StableRequestName and StableRequestNameFromLocalName functions from the lib/clusteraccess package now shorten resulting names if they exceed the character limit for k8s resource names. A hash suffix prevents conflicts for different keys with the same prefix.
  • [DEVELOPER][FEATURE] The NewTestClusterAccessManager function from lib/accessrequest serves as an implementation of the Manager interface that is suited to be used in unit tests. It fakes readiness of ClusterRequest and AccessRequest resources that it creates and returns k8s fake clients instead. The fake clients have to be configured before. While this makes the Manager usable in unit tests, the code creating the Manager still has to differentiate between the creation of a regular one or the test implementation.