Commit Graph
40 Commits
Author SHA1 Message Date
Tom Pantelis 307942f43e Remove CodeRabbit workflow
This removes the CodeRabbit review workflow as it's no longer needed.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2026-02-16 15:27:45 -05:00
Tom Pantelis 94840473da Add workflow to trigger CodeRabbit review for Bot PRs
It calls the reusable workflow in the submariner-bot repo.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2025-12-17 13:11:36 -05:00
Tom Pantelis 3218752d98 Restrict the python version to 3.13.x for the helm chart linter
The setup-python apparently installs the latest python version
which is not the recently releases 3.14.0. However this is
incompatible with the helm chart linter so retrict the python version.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2025-11-03 03:26:38 -05:00
Tom Pantelis 1bb89aba3f Remove create flags for crd, rbac, and serviceAccounts
These all default to true and there doesn't seem to be any reason
a user would want to set any to false as Submariner woild not work
without these resources. Removing them simplifies the charts.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2025-01-21 22:59:29 -05:00
Tom Pantelis 028400610b Generate CRD and RBAC yaml templates from submariner-operator
The submariner-operator repo is the source of truth for the
CRD and RBAC resource yaml used by subctl and the ACM add-on so
we should use it for the helm charts as well. This will avoid
having to duplicate changes from the submariner-operator repo.
All the yaml is assembled in the pkg/embeddedyamls/yamls.go file
in submariner-operator so download and extract the yaml into
template files in the chart templates directories which can then
be included in other manifest files.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2025-01-21 22:59:29 -05:00
Tom Pantelis 967541e5ec Add submariner-operator RBAC create permission for events
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2025-01-08 12:57:59 -05:00
Tom Pantelis 0e2e31ae73 Enable leader election in the operator
The operator no longer runs leader-for-life election so enable
leader-with-lease via the CLI arg in the pod spec.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-12-13 01:08:54 -05:00
Tom Pantelis ef2c4cba86 Bump latest (1.31) and oldest (1.28) tested K8s versions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-10-07 15:06:34 -04:00
Tom Pantelis 5cf3f48cd8 Add clusterset IP CIDR configuration to the operator chart
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-09-11 07:54:32 -04:00
Tom Pantelis c458483968 Remove dependabot config for release 0.14
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-08-20 05:52:46 -04:00
Tom Pantelis 561bf2d2b8 Add dependabot config for release-0.18
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-06-20 08:10:57 -04:00
Tom Pantelis 6c093ebca2 Adjust globalnet RBAC permissions
Globalnet now annotates Gateways instead of nodes.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-06-03 15:03:23 -04:00
Tom Pantelis 301db56c91 Remove node update RBAC permission for route agent
Re: https://github.com/submariner-io/submariner/pull/3010

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-21 17:56:46 -04:00
Thomas PantelisandGitHub eb336236f3 Add RBAC access to finalizers for the operator role (#515)
On Openshift, the operator failed with error

"\"submariner-gateway\" is forbidden: cannot set blockOwnerDeletion
if an ownerReference refers to a resource you can't set finalizers on"

Openshift enables OwnerReferencesPermissionEnforcement, so
in order to set blockOwnerDeletion for an object, the user needs
update permission for the finalizers subresource of the referenced
owner. In this case the owner is the Submariner object.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-21 12:28:13 +03:00
Tom PantelisandStephen Kitt 1b251e84cf Reduce lighthouse-agent RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt f037f15dc0 Reduce lighthouse-coredns RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt b4720fad02 Reduce submariner-globalnet RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt 6f632767b3 Reduce submariner-routeagent RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt ab6d482b9e Reduce submariner-gateway RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt 01a4312a89 Reduce submariner-operator RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt ae72e4bb5d Add Makefile.shipyard to .gitignore
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom Pantelis fd1141e423 Add dependabot config for release-0.17
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-03-04 11:19:19 -05:00
Tom Pantelis 6914e5bfd5 Use K8s 1.29 as latest in E2E
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-02-06 12:07:18 -05:00
Tom Pantelis 2a0c7261bf Group dependabot updates in a single PR
...per package-ecosystem.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2023-12-21 10:15:03 -05:00
Tom Pantelis f80e71950e Add lease RBAC perm to submariner-globalnet role
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2023-11-06 12:54:03 -05:00
Tom Pantelis 9b71e70a78 Remove dependabot config for release 0.12
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2023-08-01 17:34:38 -04:00
Tom Pantelis ce3a15aca1 Bump chart version to 0.15.0
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2023-05-22 09:11:20 -04:00
Tom PantelisandStephen Kitt 5e0b4e62c0 Add LH coredns permission to access Submariner resource
Addresses
https://github.com/submariner-io/lighthouse/issues/936#issuecomment-1416197295

Also removed the permissions for the obsolete lighthouse.submariner.io
group.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2023-03-23 14:03:25 +01:00
Tom Pantelis 58a261182f Change frequency of dependabot gh-action check to monthly
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2023-01-31 13:31:25 -05:00
Tom PantelisandStephen Kitt 5179a1de02 Set chart appVersion with 'helm package' on release
Use the '--app-version' parameter to 'helm package' to dynamically
set the chart 'appVersion' field. We can then omit the hardcoded
'appVersion' field in the Chart.yaml file.

The chart 'version' field is also set by 'helm package' but we still
need to define it in the Chart.yaml file since 'help dep update'
requires it. The placeholder 'version' field is now set to 0.0.0 just
to give it some value.

For E2E, since the version fields are no longer hardcoded, it now
simulates a release by running 'helm package' and extracting the tar
files to HELM_REPO_LOCATION, now set to ./helm_repo.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2022-11-14 14:10:26 +01:00
Tom PantelisandDaniel Farrell ce27971323 Update chart versions to 0.14.0-rc2
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2022-11-07 12:40:43 -05:00
Tom PantelisandDaniel Farrell 73f0870d83 Remove hard-coded image version defaults in values.yaml
...since the templates use Chart.AppVersion as the default.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2022-11-07 12:40:43 -05:00
Tom PantelisandDaniel Farrell d276eb2be8 Default submariner.images.tag to Chart.AppVersion
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2022-11-07 12:40:43 -05:00
Tom PantelisandDaniel Farrell d80c6ea26c Remove unused gateway template value
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2022-11-07 12:40:43 -05:00
Tom PantelisandStephen Kitt f8028d2640 Remove questions.yml
There's no mention in the upstream helm docs about this file nor is
there any docs about interactive user prompting at all (that I can see).
Nor do we document any mechanism for user prompting. It would seem this
is an obsolete remnant from an earlier version of helm so let's remove
it. This also eliminates hard-coded image versions that need to be
updated.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2022-10-24 18:02:26 +02:00
Tom PantelisandDaniel Farrell 6916a667e2 Remove hard-coded latest version from the chart READMEs
...from the top shield banner. I don't see any reason why we
need that. This eliminate places we need to update when we release a
new chart version. The other places where it references a version is
in the sample values. I changed those to just 0.14.0 but we don't
really need to update these as they're intended to be examples.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2022-10-24 08:32:36 -04:00
Thomas PantelisandGitHub d667fc2546 Add submariner-gateway role permissions for leases (#247)
This is needed for leader election resource locking in K8s 0.24.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2022-07-28 07:21:29 +03:00
Tom Pantelis f4510d182a Mark the source directory as safe
See https://github.blog/2022-04-12-git-security-vulnerability-announced/
for context. git now refuses to handle repositories which don't belong
to the current user by default; such repositories need to be
explicitly marked as safe, in the global configuration for the current user.

This fixes the failing release job.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2022-05-19 16:51:05 -04:00
Tom Pantelis b02dce884f Fix the release job
It's failing b/c the submariner chart was recently removed.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2021-04-06 10:23:34 -04:00
Thomas PantelisandGitHub 249e684959 Merge pull request #2 from sridhargaddam/update-route-agent-ds
Update route-agent-ds with Cluster/SVC CIDR values
2019-08-28 08:20:49 -04:00