v0.17.0

Compare Source

Changes included in v0.17.0:

🚀 Features

• release v0.17.0 #​198

  • [OPERATOR][FEATURE] - Release v0.17.0 of the github.com/openmcp-project/opencmp-operator

• allow to control the high availability config of ps mcp #​191

  • [OPERATOR][FEATURE] Allow to configure number of replicas and topology spread constraints of the platform service managed control plane.

• user-friendly secret name for MCP access #​193

  • [USER][FEATURE] New name pattern for MCP access secrets on the onboarding cluster. The secret name clearly refers to the corresponding MCP IAM spec values as follows: <provider-name>.<mcp-name>.kubeconfig where provider-name is either an OIDC provider or static token name.

🔧 Chores

• enable ClusterAccessReconciler's Reconcile method to be called during deletion #​197
  • [DEVELOPER][FEATURE] The ClusterAccess Reconciler's Reconcile method can now be called during the deletion logic of the embedding controller without re-creating resources that have already been deleted by an earlier ReconcileDelete call. This means Reconcile can now be called at the beginning of a deleting reconciliation and ReconcileDelete at the end, without resources being created and deleted endlessly when walking through this deletion flow multiple times (because the request is reconciled multiple times because it needs to wait for resources being deleted).
• enable provider webhooks #​195
  • [OPERATOR][FEATURE] During provider deployment, it is now checked whether a webhook TLS secret exists for the provider being deployed. If so, it is automatically mounted in the run container. The name of the mounted secret is determined by the new WebhookSecretName function from the lib/utils package.

v0.16.0

Compare Source

Changes included in v0.16.0:

🚀 Features

• release v0.16.0 #​190
  • [USER][FEATURE] - Release v0.16.0
• prepare for high availability #​188
  • [OPERATOR][FEATURE] Add high availability features for the openmcp-operator and service-providers, cluster-providers and platform-services
• exclude provider fields from status update & utility to set these fields #​187
  • [DEVELOPER][FEATURE] - Utility function for service providers to add the kinds of their managed resources to the ServiceProvider status

🔧 Chores

• remove namespace field from secret reference in AccessRequest status #​183
  • [USER][BREAKING] Removed the status.secretRef.namespace field from AccessRequest resources which was added by accident. The access secrets are expected to be in the same namespace as the AccessRequest itself, so wherever this field is read, it can just be replaced with the AccessRequest's namespace.
• improve the advanced clusteraccess library's abilities to mock fake clients in unit tests #​186
  • [DEVELOPER][FEATURE] The advanced ClusterAccess library's capabilities regarding unit tests have been enhanced by adding a configurable FakeClientGenerator to the reconciler. If set, this function will be called when trying to build a client.Client out of an AccessRequest's kubeconfig secret. This enables the test code to inject fake client implementations into the reconciler's Access method and thereby removes the need for any test-specific coding in the controller's logic itself.

v0.15.2

Compare Source

Changes included in v0.15.2:

🚀 Features

• advanced clusteraccess library #​173
  • [DEVELOPER][BREAKING] The behavior of the library in lib/clusteraccess has changed slightly: Before, the Reconcile method would wait for some other controller to create the namespace and requeue the reconciliation until it existed. Now, it will instead create the namespace itself.
  • [DEVELOPER][FEATURE] The lib/clusteraccess/advanced package now contains a highly flexible library for generating access to clusters during a controller's reconciliation loop. See the documentation for further information.

🐛 Fixes

• requeue mcp if not ready #​184
  • [USER][BUGFIX] Fixed a bug that caused an MCPv2 to not be requeued for reconciliation despite not being Ready yet, causing it to be stuck in Progressing until a reconciliation was triggered externally.