Release 2023-03-28.1.4ee6131

What's Changed

• ROX-14997: Add Secrets Manager support by @kovayur in #874
• install observability CRD via Helm by @stehessel in #873
• install logging CRDs via Helm by @stehessel in #884
• Telemetry: set max batch size to 1 by @0x656b694d in #870
• add grafana and prometheus rule label selectors by @stehessel in #885
• Set ACS Operator CPU request and limit to 2 by @ebensh in #886
• Revert "Set ACS Operator CPU request and limit to 2" by @vladbologa in #887
• ROX-15922: update operator requests and limits by @vladbologa in #894
• Bump k8s.io/client-go from 0.26.1 to 0.26.3 by @dependabot in #892
• Bump github.com/prometheus/common from 0.41.0 to 0.42.0 by @dependabot in #891
• Bump github.com/openshift-online/ocm-sdk-go from 0.1.320 to 0.1.325 by @dependabot in #890
• Bump golang.org/x/oauth2 from 0.5.0 to 0.6.0 by @dependabot in #889
• add AUTH_TYPE=OCM to fleetshard-sync in quickstart README by @johannes94 in #896
• ROX-14997: Migrate dev scripts to Secrets Manager by @kovayur in #897
• ROX-16099: new DBs will use a LTS aurora-postgresql version by @vladbologa in #900
• ROX-13952: Setup OIDC provider for the prod data plane cluster by @0x656b694d in #902
• Bump stackrox/stackrox version, including Segment fix by @0x656b694d in #899
• Minor fixes to script output when using Secrets Manager by @kovayur in #901
• ROX-15806: Remove pause reconcile annotation before Central deletion by @vladbologa in #905
• ROX-16108: Remove Targeted Cluster Placement Strategy by @ebensh in #903

Full Changelog: 2023-03-14.1.0d23b4f...2023-03-28.1.4ee6131

Release 2023-03-14.1.0d23b4f

What's Changed

• ROX-14649 - Clean-up acs-fleet-manager logs by @SimonBaeumer in #762
• Provide utility to disable/enable admin password for specific central CR by @dhaus67 in #767
• Bump github.com/onsi/ginkgo/v2 from 2.7.0 to 2.7.1 in /tools by @dependabot in #776
• Bump github.com/onsi/ginkgo/v2 from 2.7.0 to 2.7.1 by @dependabot in #775
• Add dev build and deploy Make targets by @SimonBaeumer in #777
• Bump sigs.k8s.io/controller-runtime from 0.14.1 to 0.14.2 by @dependabot in #773
• Bump golang.org/x/oauth2 from 0.3.0 to 0.4.0 by @dependabot in #774
• Bump github.com/onsi/gomega from 1.24.2 to 1.26.0 by @dependabot in #772
• ROX-14528: Add OCM mock client by @stehessel in #761
• Bump github.com/openshift-online/ocm-sdk-go from 0.1.308 to 0.1.311 by @dependabot in #771
• ROX-14303: Disable telemetry for centrals created by probe service by @dhaus67 in #780
• ROX-14650- Remove timeout log messages by @SimonBaeumer in #779
• update observability operator to v4.0.4 by @stehessel in #786
• Add namespace to kubectl calls by @SimonBaeumer in #789
• Bump github.com/onsi/ginkgo/v2 from 2.7.1 to 2.8.0 by @dependabot in #784
• Remove add-on operator prototype by @SimonBaeumer in #792
• Revert "ROX-13456: Fail fast if cluster configuration is incorrect" by @SimonBaeumer in #788
• Update ACS operator to include latest telemetry features by @stehessel in #790
• Bump sigs.k8s.io/controller-runtime from 0.14.2 to 0.14.4 by @dependabot in #796
• Bump github.com/onsi/ginkgo/v2 from 2.7.1 to 2.8.0 in /tools by @dependabot in #797
• Bump gorm.io/gorm from 1.24.3 to 1.24.5 by @dependabot in #794
• Bump github.com/aws/aws-sdk-go from 1.44.180 to 1.44.194 by @dependabot in #795
• ROX-13666: Create non-privileged RDS DB user by @vladbologa in #748
• Bump github.com/openshift-online/ocm-sdk-go from 0.1.311 to 0.1.315 by @dependabot in #793
• Allow DB instances to scale independently of each other by @vladbologa in #798
• ROX-14624: Drop MaxCapacity redundant config by @kurlov in #791
• ROX-14270: Deploy cloudwatch exporter to data plane by @stehessel in #801
• Use new telemetry options by @stehessel in #804
• Fix internal user agents config in fleet manager template by @dhaus67 in #803
• Push telemetry events every minute by @stehessel in #808
• Update go version to 1.19 by @kovayur in #802
• Bump golang.org/x/sys from 0.4.0 to 0.5.0 by @dependabot in #815
• Bump helm.sh/helm/v3 from 3.11.0 to 3.11.1 by @dependabot in #814
• Bump github.com/openshift-online/ocm-sdk-go from 0.1.315 to 0.1.316 by @dependabot in #813
• Bump gorm.io/driver/postgres from 1.4.6 to 1.4.7 by @dependabot in #812
• Rox 13593: data migration service by @stehessel in #781
• Bump golangci-lint to v1.51.1 by @kovayur in #799
• Bump github.com/getsentry/sentry-go from 0.17.0 to 0.18.0 by @dependabot in #811
• ROX-13913: change RDS CA certificate type by @vladbologa in #820
• Bump golang.org/x/net from 0.5.0 to 0.6.0 by @dependabot in #818
• Bump github.com/aws/aws-sdk-go from 1.44.194 to 1.44.199 by @dependabot in #817
• Bump golang.org/x/oauth2 from 0.4.0 to 0.5.0 by @dependabot in #816
• update prod observability operator to v4.0.4 by @stehessel in #821
• stage central: v3.73.0-nightly-20230203 -> v3.74.0-nightly-20230213 by @stehessel in #819
• Add operator install script by @SimonBaeumer in #806
• Skip tracking deletion for centrals from probe service by @dhaus67 in #823
• ROX-14544 - Add CentralRequest field documentation by @SimonBaeumer in #743
• ROX-12462: add env annotations by @stehessel in #822
• Use a released operator in stage, to test before ACSCS release. by @porridge in #825
• ROX-12462: add env to fleetshard-sync, probe, cloudwatch-exporter by @stehessel in #824
• Use the same operator version in prod as stage. by @porridge in #830
• Build and push probe separately, and on production branch too. by @porridge in #840
• Fix RDS tests CI flake by @vladbologa in #838
• Bump github.com/aws/aws-sdk-go from 1.44.199 to 1.44.204 by @dependabot in #834
• Bump gorm.io/driver/postgres from 1.4.7 to 1.4.8 by @dependabot in #836
• ROX-13913: Verify RDS certificates in Postgres connections by @vladbologa in #827
• ROX-14955: Remove legacy Central DB migration step by @vladbologa in #842
• Bump github.com/onsi/ginkgo/v2 from 2.8.0 to 2.8.3 in /tools by @dependabot in #837
• Bump github.com/openshift-online/ocm-sdk-go from 0.1.316 to 0.1.317 by @dependabot in #835
• Bump golang.org/x/net from 0.6.0 to 0.7.0 by @dependabot in #832
• Bump github.com/onsi/ginkgo/v2 from 2.8.0 to 2.8.3 by @dependabot in #833
• ROX-15293: Race condition in RDS DB deprovisioning by @vladbologa in #843
• ROX-14540: Cherrypick a dummy production change onto main by @porridge in #844
• ROX-15136: Label new Central RDS DBs by their data plane identifier by @vladbologa in #846
• Bump stackrox operator version to 3.74.0 by @kovayur in #858
• Bump github.com/openshift-online/ocm-sdk-go from 0.1.317 to 0.1.320 by @dependabot in #849
• Bump github.com/stretchr/testify from 1.8.1 to 1.8.2 by @dependabot in #850
• ROX-15352: Add security context for cloudwatch exporter by @stehessel in #859
• check that probe image exists before deployment by @stehessel in #860
• unquote the optional debug flags in probe deployment by @stehessel in #862
• Bump github.com/aws/aws-sdk-go from 1.44.204 to 1.44.209 by @dependabot in #851
• Bump github.com/prometheus/common from 0.39.0 to 0.40.0 by @dependabot in #852
• ROX-10918: use rhacs label selectors by @stehessel in #847
• ROX-14696: Add terraforming and probe deployment to acs-stage-eu-01. by @ebensh in #848
• Bump github.com/segmentio/chamber/v2 from 2.11.1 to 2.12.0 in /tools by @dependabot in #868
• Bump sigs.k8s.io/controller-runtime from 0.14.4 to 0.14.5 by @dependabot in #864
• Bump github.com/onsi/ginkgo/v2 from 2.8.3 to 2.9.0 in /tools by @dependabot in #869
• Bump github.com/prometheus/common from 0.40.0 to 0.41.0 by @dependabot in #865
• Bump github.com/onsi/gomega from 1.27.0 to 1.27.2 by @dependabot in https://github.com/stackrox/acs...

2023-02-20.1.8a8aa62

What's Changed

• Release 2022 12 06.1.1df0bc5 by @kurlov in #644
• Rollback automatic tag resolution on prod (#645) by @kurlov in #646
• Release 2022 12 12.1.b7b15aa by @kovayur in #662
• Release 2023 01 17.1.f4e71a7 by @dhaus67 in #739
• Release 2023 01 24.1.e67c2c6 by @ivan-degtiarenko in #760
• ROX-14649 - Clean-up acs-fleet-manager logs by @SimonBaeumer in #762
• Release 2023-01-31.1.ad850f3 by @mtodor in #783
• Provide utility to disable/enable admin password for specific central CR by @dhaus67 in #767
• Bump github.com/onsi/ginkgo/v2 from 2.7.0 to 2.7.1 in /tools by @dependabot in #776
• Bump github.com/onsi/ginkgo/v2 from 2.7.0 to 2.7.1 by @dependabot in #775
• Add dev build and deploy Make targets by @SimonBaeumer in #777
• Bump sigs.k8s.io/controller-runtime from 0.14.1 to 0.14.2 by @dependabot in #773
• Bump golang.org/x/oauth2 from 0.3.0 to 0.4.0 by @dependabot in #774
• Bump github.com/onsi/gomega from 1.24.2 to 1.26.0 by @dependabot in #772
• ROX-14528: Add OCM mock client by @stehessel in #761
• Bump github.com/openshift-online/ocm-sdk-go from 0.1.308 to 0.1.311 by @dependabot in #771
• ROX-14303: Disable telemetry for centrals created by probe service by @dhaus67 in #780
• ROX-14650- Remove timeout log messages by @SimonBaeumer in #779
• update observability operator to v4.0.4 by @stehessel in #786
• Add namespace to kubectl calls by @SimonBaeumer in #789
• Bump github.com/onsi/ginkgo/v2 from 2.7.1 to 2.8.0 by @dependabot in #784
• Remove add-on operator prototype by @SimonBaeumer in #792
• Revert "ROX-13456: Fail fast if cluster configuration is incorrect" by @SimonBaeumer in #788
• Update ACS operator to include latest telemetry features by @stehessel in #790
• Bump sigs.k8s.io/controller-runtime from 0.14.2 to 0.14.4 by @dependabot in #796
• Bump github.com/onsi/ginkgo/v2 from 2.7.1 to 2.8.0 in /tools by @dependabot in #797
• Bump gorm.io/gorm from 1.24.3 to 1.24.5 by @dependabot in #794
• Bump github.com/aws/aws-sdk-go from 1.44.180 to 1.44.194 by @dependabot in #795
• ROX-13666: Create non-privileged RDS DB user by @vladbologa in #748
• Bump github.com/openshift-online/ocm-sdk-go from 0.1.311 to 0.1.315 by @dependabot in #793
• Allow DB instances to scale independently of each other by @vladbologa in #798
• ROX-14624: Drop MaxCapacity redundant config by @kurlov in #791
• ROX-14270: Deploy cloudwatch exporter to data plane by @stehessel in #801
• Use new telemetry options by @stehessel in #804
• Fix internal user agents config in fleet manager template by @dhaus67 in #803
• Push telemetry events every minute by @stehessel in #808
• Update go version to 1.19 by @kovayur in #802
• Bump golang.org/x/sys from 0.4.0 to 0.5.0 by @dependabot in #815
• Bump helm.sh/helm/v3 from 3.11.0 to 3.11.1 by @dependabot in #814
• Bump github.com/openshift-online/ocm-sdk-go from 0.1.315 to 0.1.316 by @dependabot in #813
• Bump gorm.io/driver/postgres from 1.4.6 to 1.4.7 by @dependabot in #812
• Rox 13593: data migration service by @stehessel in #781
• Bump golangci-lint to v1.51.1 by @kovayur in #799
• Bump github.com/getsentry/sentry-go from 0.17.0 to 0.18.0 by @dependabot in #811
• ROX-13913: change RDS CA certificate type by @vladbologa in #820
• Bump golang.org/x/net from 0.5.0 to 0.6.0 by @dependabot in #818
• Bump github.com/aws/aws-sdk-go from 1.44.194 to 1.44.199 by @dependabot in #817
• Bump golang.org/x/oauth2 from 0.4.0 to 0.5.0 by @dependabot in #816
• update prod observability operator to v4.0.4 by @stehessel in #821
• stage central: v3.73.0-nightly-20230203 -> v3.74.0-nightly-20230213 by @stehessel in #819
• Add operator install script by @SimonBaeumer in #806
• Skip tracking deletion for centrals from probe service by @dhaus67 in #823
• ROX-14544 - Add CentralRequest field documentation by @SimonBaeumer in #743
• ROX-12462: add env annotations by @stehessel in #822
• Use a released operator in stage, to test before ACSCS release. by @porridge in #825
• ROX-12462: add env to fleetshard-sync, probe, cloudwatch-exporter by @stehessel in #824
• Use the same operator version in prod. by @porridge in #831
• Release 2023-02-20.1.8a8aa62 by @porridge in #829
• ROX-14540: Dummy change to force building a new image. by @porridge in #839
• Build and push probe separately, and on production branch too. (#840) by @porridge in #841

Full Changelog: 2023-01-31.1.ad850f3...2023-02-20.1.8a8aa62

2023-01-31.1.ad850f3

What's Changed

• git ignore all secret files by @stehessel in #759
• ROX-13924: provision failover RDS instance by @vladbologa in #764
• ROX-13593: Use user_id and rh-user-id claims in telemetry events by @stehessel in #763
• Add documentation to AuthConfig fields. by @ivan-degtiarenko in #766
• ROX-14522: Switch managed DB params from application specific to cluster specific by @kovayur in #769
• Remove CHANGELOG.md by @ivan-degtiarenko in #768
• fix error in telemetry track events by @stehessel in #770

Full Changelog: 2023-01-24.1.e67c2c6...2023-01-31.1.ad850f3

2023-01-24.1.e67c2c6

What's Changed

• Update changelog for the 2023-01-17.1.f4e71a7 release by @dhaus67 in #738
• ROX-12486: Add support for using existing log groups created by terraform by @mtodor in #721
• Bump gorm.io/gorm from 1.24.2 to 1.24.3 by @dependabot in #728
• Increase OCM token margin for refresh by @dhaus67 in #734
• Bump github.com/segmentio/chamber/v2 from 2.11.0 to 2.11.1 in /tools by @dependabot in #730
• ROX-13666: Split dbclient.EnsureDBProvisioned() into two functions by @vladbologa in #742
• Revert "Revert "ROX-12344: Add organisation name to central request"" by @dhaus67 in #740
• ROX-12344: Add org-id label and org-name annotation by @stehessel in #684
• Bump github.com/onsi/ginkgo/v2 from 2.6.1 to 2.7.0 in /tools by @dependabot in #731
• Rox 13593: Add telemetry service by @stehessel in #733
• Bump gotest.tools/gotestsum from 1.8.2 to 1.9.0 in /tools by @dependabot in #732
• Bump ubi8/s2i-base from 1-394 to 1-408 in /probe by @dependabot in #729
• Increase RDS integration tests timeout by @vladbologa in #749
• Make org name migration more robust by @stehessel in #745
• Bump github.com/99designs/aws-vault/v6 from 6.6.1 to 6.6.2 in /tools by @dependabot in #757
• Bump k8s.io/api from 0.26.0 to 0.26.1 by @dependabot in #752
• Bump github.com/onsi/ginkgo/v2 from 2.6.1 to 2.7.0 by @dependabot in #754
• Bump github.com/zgalor/weberr from 0.7.0 to 0.8.2 by @dependabot in #756
• ROX-13593: Use account id as user in track events by @stehessel in #746
• Bump helm.sh/helm/v3 from 3.10.3 to 3.11.0 by @dependabot in #755
• Bump github.com/getsentry/sentry-go from 0.16.0 to 0.17.0 by @dependabot in #753
• ROX-13593: Store telemetry storage key as secret by @stehessel in #747
• ROX-14473: require user org_id to match ACS owner org_id by @ivan-degtiarenko in #751

Full Changelog: 2023-01-17.1.f4e71a7...2023-01-24.1.e67c2c6

2023-01-17.1.f4e71a7

What's Changed

• Prepare CHANGELOG for the next release by @kovayur in #663
• Bump github.com/onsi/ginkgo/v2 from 2.5.1 to 2.6.0 in /tools by @dependabot in #661
• Bump github.com/aws/aws-sdk-go from 1.44.146 to 1.44.157 by @dependabot in #658
• Bump golang.org/x/oauth2 from 0.2.0 to 0.3.0 by @dependabot in #659
• ROX-12137: Use billing_marketplace_account instead of cloud_account_id by @ivan-degtiarenko in #634
• Increase operator container wait timeout on Openshift CI by @kovayur in #666
• ROX-12763: use claim mappings for admin:org:all role by @ivan-degtiarenko in #665
• Fix dnf metadata download errors on Openshift CI by @kovayur in #669
• Bump containerd version to 1.6.12 by @kovayur in #670
• Bump helm.sh/helm/v3 from 3.9.4 to 3.10.2 by @dependabot in #578
• Deploy probe image based on HEAD by @stehessel in #664
• Bump github.com/operator-framework/api from 0.17.1 to 0.17.2 by @dependabot in #660
• Second attempt to upgrade containerd dependency by @kovayur in #671
• Bump sigs.k8s.io/controller-runtime from 0.12.3 to 0.13.1 by @dependabot in #553
• ROX-13396: Cleanup incomplete tools_venv dir for idempotence by @porridge in #668
• ROX-13593: Add telemetry storage key to Centrals by @stehessel in #672
• default telemetry options to empty string by @stehessel in #673
• ROX-13106: Show hint to user when OCM user or org is not found by @stehessel in #675
• ROX-13456: Use moq for DBClient by @kovayur in #677
• Switch stage data plane to upstream operator by @stehessel in #676
• ROX-12921: Introduce timeout for ACSCS requests by @ivan-degtiarenko in #667
• Bump helm.sh/helm/v3 from 3.9.4 to 3.10.3 in /dp-terraform/add-on/rhacs-terraform by @dependabot in #682
• Avoid using which by @porridge in #686
• Bump helm.sh/helm/v3 from 3.10.2 to 3.10.3 by @dependabot in #685
• Make tools_venv target depend on tools/requirements.txt by @kovayur in #688
• ROX-13456: Refactor fleet-manager client in order to generate mocks for all kinds of APIs by @kovayur in #678
• Bump github.com/getsentry/sentry-go from 0.15.0 to 0.16.0 by @dependabot in #693
• Fix: avoid panic on nil pointer by @0x656b694d in #692
• Bump github.com/segmentio/chamber/v2 from 2.10.12 to 2.11.0 in /tools by @dependabot in #698
• Bump github.com/onsi/gomega from 1.24.1 to 1.24.2 by @dependabot in #694
• Bump gorm.io/gorm from 1.24.1 to 1.24.2 by @dependabot in #697
• Bump github.com/bxcodec/faker/v3 from 3.8.0 to 3.8.1 by @dependabot in #696
• Bump github.com/onsi/ginkgo/v2 from 2.6.0 to 2.6.1 in /tools by @dependabot in #699
• ROX-13472: Mark parameters loaded from Parameter Store as read-only by @kovayur in #700
• ROX-12344: Use dev rhacs org_id in static token by @stehessel in #690
• ROX-13911: Add RDS provisioning integration test by @vladbologa in #680
• ROX-11993: Followup from review. by @porridge in #687
• Fix dubious ownership error in CI by @kovayur in #701
• Update ACS operator to a Central version that includes Telemetry by @stehessel in #702
• ROX-13456: Bump detect-secrets to 1.4.0 by @kovayur in #679
• Bump github.com/99designs/aws-vault/v6 from 6.6.0 to 6.6.1 in /tools by @dependabot in #708
• Bump github.com/aws/aws-sdk-go from 1.44.157 to 1.44.172 by @dependabot in #711
• Bump sigs.k8s.io/controller-runtime from 0.13.1 to 0.14.1 by @dependabot in #706
• Bump github.com/spyzhov/ajson from 0.7.1 to 0.7.2 by @dependabot in #703
• ROX-13456: Fail fast if cluster configuration is incorrect by @kovayur in #681
• Bump stage Central version to nightly-2023-01-09 build by @stehessel in #717
• Bump github.com/openshift-online/ocm-sdk-go from 0.1.289 to 0.1.306 by @dependabot in #712
• Bump gorm.io/driver/postgres from 1.4.5 to 1.4.6 by @dependabot in #713
• Bump github.com/coreos/go-oidc/v3 from 3.4.0 to 3.5.0 by @dependabot in #714
• Bump golang.org/x/net from 0.4.0 to 0.5.0 by @dependabot in #715
• Bump stage Central version to nightly-2023-01-10 build by @stehessel in #719
• ROX-13408: Use api.iam.clients in dynamic clients API wrapper by @ivan-degtiarenko in #689
• ROX-13666: Refactor DB connection string by @vladbologa in #722
• ROX-12921: initialize counter metrics with 0 value by @ivan-degtiarenko in #720
• Bump github.com/aws/aws-sdk-go from 1.44.172 to 1.44.180 by @dependabot in #724
• Bump github.com/operator-framework/api from 0.17.2 to 0.17.3 by @dependabot in #725
• Bump github.com/openshift-online/ocm-sdk-go from 0.1.306 to 0.1.308 by @dependabot in #726
• ROX-12344: Add organisation name to central request by @stehessel in #683
• Bump github.com/prometheus/common from 0.38.0 to 0.39.0 by @dependabot in #727
• Bump operator version to 3.73.1 on prod by @dhaus67 in #735
• Bump operator to 3.73.1 in test environment by @dhaus67 in #737
• Revert "ROX-12344: Add organisation name to central request" by @dhaus67 in #736

Full Changelog: 2022-12-12.1.b7b15aa...2023-01-17.1.f4e71a7

2022-12-12.1.b7b15aa

What's Changed

• Use downstream version of the StackRox operator on stage by @kovayur in #641
• ROX-13593: Add tenant ID as a k8s label by @stehessel in #627
• ROX-13756: Add managed DB parameters to the Helm chart by @kovayur in #638
• Remove unused RDS code by @vladbologa in #642
• Add AWS role arn parameter to the Helm chart by @kovayur in #649
• ROX-13737: Use built-in concurrency control. by @porridge in #640
• ROX-13227: Fix negative DNS caching by @kovayur in #636
• ROX-13737: remove stale dependencies by @porridge in #651
• ROX-13450: fix image check by @porridge in #652
• ROX-13593: Add tenant ID to managed resources by @stehessel in #650
• ROX-13811: Enable Performance Insights for managed DBs by @vladbologa in #643
• ROX-13648: check out full history by @porridge in #647
• Improve RDS instance status log message by @vladbologa in #655
• ROX-13648: Revert "Rollback automatic tag resolution on prod (#645)" by @porridge in #656
• Remove Openshift CI build root Dockerfile by @kovayur in #657

Full Changelog: 2022-12-06.1.1df0bc5...2022-12-12.1.b7b15aa

2022-12-06.1.1df0bc5

Rollback automatic tag resolution on prod (#645)

2022-11-23.1.1cf5fce

ROX-12480: Add a deploy workflow file for production. (#597)

* Add a deploy workflow file for production.

* Shorten names so they fit better in GH UI

2022-11-08.1.3060ea1

See CHANGELOG.md