qontract-reconcile 0.9.1rc298__py3-none-any.whl → 0.10.1.dev1203__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- qontract_reconcile-0.10.1.dev1203.dist-info/METADATA +500 -0
- qontract_reconcile-0.10.1.dev1203.dist-info/RECORD +771 -0
- {qontract_reconcile-0.9.1rc298.dist-info → qontract_reconcile-0.10.1.dev1203.dist-info}/WHEEL +1 -2
- {qontract_reconcile-0.9.1rc298.dist-info → qontract_reconcile-0.10.1.dev1203.dist-info}/entry_points.txt +4 -2
- reconcile/acs_notifiers.py +126 -0
- reconcile/acs_policies.py +243 -0
- reconcile/acs_rbac.py +596 -0
- reconcile/aus/advanced_upgrade_service.py +621 -8
- reconcile/aus/aus_label_source.py +115 -0
- reconcile/aus/base.py +1053 -353
- reconcile/{utils → aus}/cluster_version_data.py +27 -12
- reconcile/aus/healthchecks.py +77 -0
- reconcile/aus/metrics.py +158 -0
- reconcile/aus/models.py +245 -5
- reconcile/aus/node_pool_spec.py +35 -0
- reconcile/aus/ocm_addons_upgrade_scheduler_org.py +225 -110
- reconcile/aus/ocm_upgrade_scheduler.py +76 -71
- reconcile/aus/ocm_upgrade_scheduler_org.py +81 -23
- reconcile/aus/version_gate_approver.py +204 -0
- reconcile/aus/version_gates/__init__.py +12 -0
- reconcile/aus/version_gates/handler.py +33 -0
- reconcile/aus/version_gates/ingress_gate_handler.py +32 -0
- reconcile/aus/version_gates/ocp_gate_handler.py +26 -0
- reconcile/aus/version_gates/sts_version_gate_handler.py +100 -0
- reconcile/aws_account_manager/README.md +5 -0
- reconcile/aws_account_manager/integration.py +373 -0
- reconcile/aws_account_manager/merge_request_manager.py +114 -0
- reconcile/aws_account_manager/metrics.py +39 -0
- reconcile/aws_account_manager/reconciler.py +403 -0
- reconcile/aws_account_manager/utils.py +41 -0
- reconcile/aws_ami_cleanup/integration.py +273 -0
- reconcile/aws_ami_share.py +18 -14
- reconcile/aws_cloudwatch_log_retention/integration.py +253 -0
- reconcile/aws_iam_keys.py +1 -1
- reconcile/aws_iam_password_reset.py +56 -20
- reconcile/aws_saml_idp/integration.py +204 -0
- reconcile/aws_saml_roles/integration.py +322 -0
- reconcile/aws_support_cases_sos.py +2 -2
- reconcile/aws_version_sync/integration.py +430 -0
- reconcile/aws_version_sync/merge_request_manager/merge_request.py +156 -0
- reconcile/aws_version_sync/merge_request_manager/merge_request_manager.py +160 -0
- reconcile/aws_version_sync/utils.py +64 -0
- reconcile/blackbox_exporter_endpoint_monitoring.py +2 -5
- reconcile/change_owners/README.md +34 -0
- reconcile/change_owners/approver.py +7 -9
- reconcile/change_owners/bundle.py +134 -9
- reconcile/change_owners/change_log_tracking.py +236 -0
- reconcile/change_owners/change_owners.py +204 -194
- reconcile/change_owners/change_types.py +183 -265
- reconcile/change_owners/changes.py +488 -0
- reconcile/change_owners/decision.py +120 -41
- reconcile/change_owners/diff.py +63 -92
- reconcile/change_owners/implicit_ownership.py +19 -16
- reconcile/change_owners/self_service_roles.py +158 -35
- reconcile/change_owners/tester.py +20 -18
- reconcile/checkpoint.py +4 -6
- reconcile/cli.py +1523 -242
- reconcile/closedbox_endpoint_monitoring_base.py +10 -17
- reconcile/cluster_auth_rhidp/integration.py +257 -0
- reconcile/cluster_deployment_mapper.py +2 -5
- reconcile/cna/assets/asset.py +4 -7
- reconcile/cna/assets/null.py +2 -5
- reconcile/cna/integration.py +2 -3
- reconcile/cna/state.py +6 -9
- reconcile/dashdotdb_base.py +31 -10
- reconcile/dashdotdb_cso.py +3 -6
- reconcile/dashdotdb_dora.py +530 -0
- reconcile/dashdotdb_dvo.py +10 -13
- reconcile/dashdotdb_slo.py +75 -19
- reconcile/database_access_manager.py +753 -0
- reconcile/deadmanssnitch.py +207 -0
- reconcile/dynatrace_token_provider/dependencies.py +69 -0
- reconcile/dynatrace_token_provider/integration.py +656 -0
- reconcile/dynatrace_token_provider/metrics.py +62 -0
- reconcile/dynatrace_token_provider/model.py +14 -0
- reconcile/dynatrace_token_provider/ocm.py +140 -0
- reconcile/dynatrace_token_provider/validate.py +48 -0
- reconcile/endpoints_discovery/integration.py +348 -0
- reconcile/endpoints_discovery/merge_request.py +96 -0
- reconcile/endpoints_discovery/merge_request_manager.py +178 -0
- reconcile/external_resources/aws.py +204 -0
- reconcile/external_resources/factories.py +163 -0
- reconcile/external_resources/integration.py +194 -0
- reconcile/external_resources/integration_secrets_sync.py +47 -0
- reconcile/external_resources/manager.py +405 -0
- reconcile/external_resources/meta.py +17 -0
- reconcile/external_resources/metrics.py +95 -0
- reconcile/external_resources/model.py +350 -0
- reconcile/external_resources/reconciler.py +265 -0
- reconcile/external_resources/secrets_sync.py +465 -0
- reconcile/external_resources/state.py +258 -0
- reconcile/gabi_authorized_users.py +19 -11
- reconcile/gcr_mirror.py +43 -34
- reconcile/github_org.py +4 -6
- reconcile/github_owners.py +1 -1
- reconcile/github_repo_invites.py +2 -5
- reconcile/gitlab_fork_compliance.py +14 -13
- reconcile/gitlab_housekeeping.py +185 -91
- reconcile/gitlab_labeler.py +15 -14
- reconcile/gitlab_members.py +126 -120
- reconcile/gitlab_owners.py +53 -66
- reconcile/gitlab_permissions.py +167 -6
- reconcile/glitchtip/README.md +150 -0
- reconcile/glitchtip/integration.py +99 -51
- reconcile/glitchtip/reconciler.py +99 -70
- reconcile/glitchtip_project_alerts/__init__.py +0 -0
- reconcile/glitchtip_project_alerts/integration.py +333 -0
- reconcile/glitchtip_project_dsn/integration.py +43 -43
- reconcile/gql_definitions/acs/__init__.py +0 -0
- reconcile/gql_definitions/acs/acs_instances.py +83 -0
- reconcile/gql_definitions/acs/acs_policies.py +239 -0
- reconcile/gql_definitions/acs/acs_rbac.py +111 -0
- reconcile/gql_definitions/advanced_upgrade_service/aus_clusters.py +46 -8
- reconcile/gql_definitions/advanced_upgrade_service/aus_organization.py +38 -8
- reconcile/gql_definitions/app_interface_metrics_exporter/__init__.py +0 -0
- reconcile/gql_definitions/app_interface_metrics_exporter/onboarding_status.py +61 -0
- reconcile/gql_definitions/aws_account_manager/__init__.py +0 -0
- reconcile/gql_definitions/aws_account_manager/aws_accounts.py +177 -0
- reconcile/gql_definitions/aws_ami_cleanup/__init__.py +0 -0
- reconcile/gql_definitions/aws_ami_cleanup/aws_accounts.py +161 -0
- reconcile/gql_definitions/aws_saml_idp/__init__.py +0 -0
- reconcile/gql_definitions/aws_saml_idp/aws_accounts.py +117 -0
- reconcile/gql_definitions/aws_saml_roles/__init__.py +0 -0
- reconcile/gql_definitions/aws_saml_roles/aws_accounts.py +117 -0
- reconcile/gql_definitions/aws_saml_roles/roles.py +97 -0
- reconcile/gql_definitions/aws_version_sync/__init__.py +0 -0
- reconcile/gql_definitions/aws_version_sync/clusters.py +83 -0
- reconcile/gql_definitions/aws_version_sync/namespaces.py +143 -0
- reconcile/gql_definitions/change_owners/queries/change_types.py +16 -29
- reconcile/gql_definitions/change_owners/queries/self_service_roles.py +45 -11
- reconcile/gql_definitions/cluster_auth_rhidp/__init__.py +0 -0
- reconcile/gql_definitions/cluster_auth_rhidp/clusters.py +128 -0
- reconcile/gql_definitions/cna/queries/cna_provisioners.py +6 -8
- reconcile/gql_definitions/cna/queries/cna_resources.py +3 -5
- reconcile/gql_definitions/common/alerting_services_settings.py +2 -2
- reconcile/gql_definitions/common/app_code_component_repos.py +9 -5
- reconcile/gql_definitions/{glitchtip/glitchtip_settings.py → common/app_interface_custom_messages.py} +14 -16
- reconcile/gql_definitions/common/app_interface_dms_settings.py +86 -0
- reconcile/gql_definitions/common/app_interface_repo_settings.py +2 -2
- reconcile/gql_definitions/common/app_interface_state_settings.py +3 -5
- reconcile/gql_definitions/common/app_interface_vault_settings.py +3 -5
- reconcile/gql_definitions/common/app_quay_repos_escalation_policies.py +120 -0
- reconcile/gql_definitions/common/apps.py +72 -0
- reconcile/gql_definitions/common/aws_vpc_requests.py +109 -0
- reconcile/gql_definitions/common/aws_vpcs.py +84 -0
- reconcile/gql_definitions/common/clusters.py +120 -254
- reconcile/gql_definitions/common/clusters_minimal.py +11 -35
- reconcile/gql_definitions/common/clusters_with_dms.py +72 -0
- reconcile/gql_definitions/common/clusters_with_peering.py +70 -98
- reconcile/gql_definitions/common/github_orgs.py +2 -2
- reconcile/gql_definitions/common/jira_settings.py +68 -0
- reconcile/gql_definitions/common/jiralert_settings.py +68 -0
- reconcile/gql_definitions/common/namespaces.py +74 -32
- reconcile/gql_definitions/common/namespaces_minimal.py +4 -10
- reconcile/gql_definitions/common/ocm_env_telemeter.py +95 -0
- reconcile/gql_definitions/common/ocm_environments.py +4 -2
- reconcile/gql_definitions/common/pagerduty_instances.py +5 -5
- reconcile/gql_definitions/common/pgp_reencryption_settings.py +5 -11
- reconcile/gql_definitions/common/pipeline_providers.py +45 -90
- reconcile/gql_definitions/common/quay_instances.py +64 -0
- reconcile/gql_definitions/common/quay_orgs.py +68 -0
- reconcile/gql_definitions/common/reserved_networks.py +94 -0
- reconcile/gql_definitions/common/saas_files.py +133 -95
- reconcile/gql_definitions/common/saas_target_namespaces.py +41 -26
- reconcile/gql_definitions/common/saasherder_settings.py +2 -2
- reconcile/gql_definitions/common/slack_workspaces.py +62 -0
- reconcile/gql_definitions/common/smtp_client_settings.py +2 -2
- reconcile/gql_definitions/common/state_aws_account.py +77 -0
- reconcile/gql_definitions/common/users.py +3 -2
- reconcile/gql_definitions/cost_report/__init__.py +0 -0
- reconcile/gql_definitions/cost_report/app_names.py +68 -0
- reconcile/gql_definitions/cost_report/cost_namespaces.py +86 -0
- reconcile/gql_definitions/cost_report/settings.py +77 -0
- reconcile/gql_definitions/dashdotdb_slo/slo_documents_query.py +42 -12
- reconcile/gql_definitions/dynatrace_token_provider/__init__.py +0 -0
- reconcile/gql_definitions/dynatrace_token_provider/dynatrace_bootstrap_tokens.py +79 -0
- reconcile/gql_definitions/dynatrace_token_provider/token_specs.py +84 -0
- reconcile/gql_definitions/endpoints_discovery/__init__.py +0 -0
- reconcile/gql_definitions/endpoints_discovery/namespaces.py +127 -0
- reconcile/gql_definitions/external_resources/__init__.py +0 -0
- reconcile/gql_definitions/external_resources/aws_accounts.py +73 -0
- reconcile/gql_definitions/external_resources/external_resources_modules.py +78 -0
- reconcile/gql_definitions/external_resources/external_resources_namespaces.py +1111 -0
- reconcile/gql_definitions/external_resources/external_resources_settings.py +98 -0
- reconcile/gql_definitions/fragments/aus_organization.py +34 -39
- reconcile/gql_definitions/fragments/aws_account_common.py +62 -0
- reconcile/gql_definitions/fragments/aws_account_managed.py +57 -0
- reconcile/gql_definitions/fragments/aws_account_sso.py +35 -0
- reconcile/gql_definitions/fragments/aws_infra_management_account.py +2 -2
- reconcile/gql_definitions/fragments/aws_vpc.py +47 -0
- reconcile/gql_definitions/fragments/aws_vpc_request.py +65 -0
- reconcile/gql_definitions/fragments/aws_vpc_request_subnet.py +29 -0
- reconcile/gql_definitions/fragments/deplopy_resources.py +7 -7
- reconcile/gql_definitions/fragments/disable.py +28 -0
- reconcile/gql_definitions/fragments/jumphost_common_fields.py +2 -2
- reconcile/gql_definitions/fragments/membership_source.py +47 -0
- reconcile/gql_definitions/fragments/minimal_ocm_organization.py +29 -0
- reconcile/gql_definitions/fragments/oc_connection_cluster.py +4 -9
- reconcile/gql_definitions/fragments/ocm_environment.py +5 -5
- reconcile/gql_definitions/fragments/pipeline_provider_retention.py +30 -0
- reconcile/gql_definitions/fragments/prometheus_instance.py +48 -0
- reconcile/gql_definitions/fragments/resource_limits_requirements.py +29 -0
- reconcile/gql_definitions/fragments/{resource_requirements.py → resource_requests_requirements.py} +3 -3
- reconcile/gql_definitions/fragments/resource_values.py +2 -2
- reconcile/gql_definitions/fragments/saas_target_namespace.py +55 -12
- reconcile/gql_definitions/fragments/serviceaccount_token.py +38 -0
- reconcile/gql_definitions/fragments/terraform_state.py +36 -0
- reconcile/gql_definitions/fragments/upgrade_policy.py +5 -3
- reconcile/gql_definitions/fragments/user.py +3 -2
- reconcile/gql_definitions/fragments/vault_secret.py +2 -2
- reconcile/gql_definitions/gitlab_members/gitlab_instances.py +6 -2
- reconcile/gql_definitions/gitlab_members/permissions.py +3 -5
- reconcile/gql_definitions/glitchtip/glitchtip_instance.py +16 -2
- reconcile/gql_definitions/glitchtip/glitchtip_project.py +22 -23
- reconcile/gql_definitions/glitchtip_project_alerts/__init__.py +0 -0
- reconcile/gql_definitions/glitchtip_project_alerts/glitchtip_project.py +173 -0
- reconcile/gql_definitions/integrations/integrations.py +62 -45
- reconcile/gql_definitions/introspection.json +51176 -0
- reconcile/gql_definitions/jenkins_configs/jenkins_configs.py +13 -5
- reconcile/gql_definitions/jenkins_configs/jenkins_instances.py +79 -0
- reconcile/gql_definitions/jira/__init__.py +0 -0
- reconcile/gql_definitions/jira/jira_servers.py +80 -0
- reconcile/gql_definitions/jira_permissions_validator/__init__.py +0 -0
- reconcile/gql_definitions/jira_permissions_validator/jira_boards_for_permissions_validator.py +131 -0
- reconcile/gql_definitions/jumphosts/jumphosts.py +3 -5
- reconcile/gql_definitions/ldap_groups/__init__.py +0 -0
- reconcile/gql_definitions/ldap_groups/roles.py +111 -0
- reconcile/gql_definitions/ldap_groups/settings.py +79 -0
- reconcile/gql_definitions/maintenance/__init__.py +0 -0
- reconcile/gql_definitions/maintenance/maintenances.py +101 -0
- reconcile/gql_definitions/membershipsources/__init__.py +0 -0
- reconcile/gql_definitions/membershipsources/roles.py +112 -0
- reconcile/gql_definitions/ocm_labels/__init__.py +0 -0
- reconcile/gql_definitions/ocm_labels/clusters.py +112 -0
- reconcile/gql_definitions/ocm_labels/organizations.py +78 -0
- reconcile/gql_definitions/ocm_subscription_labels/__init__.py +0 -0
- reconcile/gql_definitions/openshift_cluster_bots/__init__.py +0 -0
- reconcile/gql_definitions/openshift_cluster_bots/clusters.py +126 -0
- reconcile/gql_definitions/openshift_groups/managed_groups.py +2 -2
- reconcile/gql_definitions/openshift_groups/managed_roles.py +3 -2
- reconcile/gql_definitions/openshift_serviceaccount_tokens/__init__.py +0 -0
- reconcile/gql_definitions/openshift_serviceaccount_tokens/tokens.py +132 -0
- reconcile/gql_definitions/quay_membership/quay_membership.py +3 -5
- reconcile/gql_definitions/rhidp/__init__.py +0 -0
- reconcile/gql_definitions/rhidp/organizations.py +96 -0
- reconcile/gql_definitions/service_dependencies/jenkins_instance_fragment.py +2 -2
- reconcile/gql_definitions/service_dependencies/service_dependencies.py +9 -31
- reconcile/gql_definitions/sharding/aws_accounts.py +2 -2
- reconcile/gql_definitions/sharding/ocm_organization.py +63 -0
- reconcile/gql_definitions/skupper_network/site_controller_template.py +2 -2
- reconcile/gql_definitions/skupper_network/skupper_networks.py +12 -38
- reconcile/gql_definitions/slack_usergroups/clusters.py +2 -2
- reconcile/gql_definitions/slack_usergroups/permissions.py +8 -15
- reconcile/gql_definitions/slack_usergroups/users.py +3 -2
- reconcile/gql_definitions/slo_documents/__init__.py +0 -0
- reconcile/gql_definitions/slo_documents/slo_documents.py +142 -0
- reconcile/gql_definitions/status_board/__init__.py +0 -0
- reconcile/gql_definitions/status_board/status_board.py +163 -0
- reconcile/gql_definitions/statuspage/statuspages.py +56 -7
- reconcile/gql_definitions/templating/__init__.py +0 -0
- reconcile/gql_definitions/templating/template_collection.py +130 -0
- reconcile/gql_definitions/templating/templates.py +108 -0
- reconcile/gql_definitions/terraform_cloudflare_dns/app_interface_cloudflare_dns_settings.py +4 -8
- reconcile/gql_definitions/terraform_cloudflare_dns/terraform_cloudflare_zones.py +8 -8
- reconcile/gql_definitions/terraform_cloudflare_resources/terraform_cloudflare_accounts.py +6 -8
- reconcile/gql_definitions/terraform_cloudflare_resources/terraform_cloudflare_resources.py +45 -56
- reconcile/gql_definitions/terraform_cloudflare_users/app_interface_setting_cloudflare_and_vault.py +4 -8
- reconcile/gql_definitions/terraform_cloudflare_users/terraform_cloudflare_roles.py +4 -8
- reconcile/gql_definitions/terraform_init/__init__.py +0 -0
- reconcile/gql_definitions/terraform_init/aws_accounts.py +93 -0
- reconcile/gql_definitions/terraform_repo/__init__.py +0 -0
- reconcile/gql_definitions/terraform_repo/terraform_repo.py +141 -0
- reconcile/gql_definitions/terraform_resources/database_access_manager.py +158 -0
- reconcile/gql_definitions/terraform_resources/terraform_resources_namespaces.py +153 -162
- reconcile/gql_definitions/terraform_tgw_attachments/__init__.py +0 -0
- reconcile/gql_definitions/terraform_tgw_attachments/aws_accounts.py +119 -0
- reconcile/gql_definitions/unleash_feature_toggles/__init__.py +0 -0
- reconcile/gql_definitions/unleash_feature_toggles/feature_toggles.py +113 -0
- reconcile/gql_definitions/vault_instances/vault_instances.py +17 -50
- reconcile/gql_definitions/vault_policies/vault_policies.py +2 -2
- reconcile/gql_definitions/vpc_peerings_validator/vpc_peerings_validator.py +49 -12
- reconcile/gql_definitions/vpc_peerings_validator/vpc_peerings_validator_peered_cluster_fragment.py +7 -2
- reconcile/integrations_manager.py +25 -13
- reconcile/jenkins/types.py +5 -1
- reconcile/jenkins_base.py +36 -0
- reconcile/jenkins_job_builder.py +10 -48
- reconcile/jenkins_job_builds_cleaner.py +40 -25
- reconcile/jenkins_job_cleaner.py +1 -3
- reconcile/jenkins_roles.py +22 -26
- reconcile/jenkins_webhooks.py +9 -6
- reconcile/jenkins_worker_fleets.py +11 -6
- reconcile/jira_permissions_validator.py +340 -0
- reconcile/jira_watcher.py +3 -5
- reconcile/ldap_groups/__init__.py +0 -0
- reconcile/ldap_groups/integration.py +279 -0
- reconcile/ldap_users.py +3 -0
- reconcile/ocm/types.py +39 -59
- reconcile/ocm_additional_routers.py +0 -1
- reconcile/ocm_addons_upgrade_tests_trigger.py +10 -15
- reconcile/ocm_aws_infrastructure_access.py +30 -32
- reconcile/ocm_clusters.py +217 -130
- reconcile/ocm_external_configuration_labels.py +15 -0
- reconcile/ocm_github_idp.py +1 -1
- reconcile/ocm_groups.py +25 -5
- reconcile/ocm_internal_notifications/__init__.py +0 -0
- reconcile/ocm_internal_notifications/integration.py +119 -0
- reconcile/ocm_labels/__init__.py +0 -0
- reconcile/ocm_labels/integration.py +409 -0
- reconcile/ocm_machine_pools.py +517 -108
- reconcile/ocm_upgrade_scheduler_org_updater.py +15 -11
- reconcile/openshift_base.py +609 -207
- reconcile/openshift_cluster_bots.py +344 -0
- reconcile/openshift_clusterrolebindings.py +15 -15
- reconcile/openshift_groups.py +42 -45
- reconcile/openshift_limitranges.py +1 -0
- reconcile/openshift_namespace_labels.py +22 -28
- reconcile/openshift_namespaces.py +22 -22
- reconcile/openshift_network_policies.py +4 -8
- reconcile/openshift_prometheus_rules.py +43 -0
- reconcile/openshift_resourcequotas.py +2 -16
- reconcile/openshift_resources.py +12 -10
- reconcile/openshift_resources_base.py +304 -328
- reconcile/openshift_rolebindings.py +18 -20
- reconcile/openshift_saas_deploy.py +105 -21
- reconcile/openshift_saas_deploy_change_tester.py +30 -35
- reconcile/openshift_saas_deploy_trigger_base.py +39 -36
- reconcile/openshift_saas_deploy_trigger_cleaner.py +41 -27
- reconcile/openshift_saas_deploy_trigger_configs.py +1 -2
- reconcile/openshift_saas_deploy_trigger_images.py +1 -2
- reconcile/openshift_saas_deploy_trigger_moving_commits.py +1 -2
- reconcile/openshift_saas_deploy_trigger_upstream_jobs.py +1 -2
- reconcile/openshift_serviceaccount_tokens.py +138 -74
- reconcile/openshift_tekton_resources.py +89 -24
- reconcile/openshift_upgrade_watcher.py +110 -62
- reconcile/openshift_users.py +16 -15
- reconcile/openshift_vault_secrets.py +11 -6
- reconcile/oum/__init__.py +0 -0
- reconcile/oum/base.py +387 -0
- reconcile/oum/labelset.py +55 -0
- reconcile/oum/metrics.py +71 -0
- reconcile/oum/models.py +69 -0
- reconcile/oum/providers.py +59 -0
- reconcile/oum/standalone.py +196 -0
- reconcile/prometheus_rules_tester/integration.py +31 -23
- reconcile/quay_base.py +4 -1
- reconcile/quay_membership.py +1 -2
- reconcile/quay_mirror.py +111 -61
- reconcile/quay_mirror_org.py +34 -21
- reconcile/quay_permissions.py +7 -3
- reconcile/quay_repos.py +24 -32
- reconcile/queries.py +263 -198
- reconcile/query_validator.py +3 -5
- reconcile/resource_scraper.py +3 -4
- reconcile/{template_tester.py → resource_template_tester.py} +3 -3
- reconcile/rhidp/__init__.py +0 -0
- reconcile/rhidp/common.py +214 -0
- reconcile/rhidp/metrics.py +20 -0
- reconcile/rhidp/ocm_oidc_idp/__init__.py +0 -0
- reconcile/rhidp/ocm_oidc_idp/base.py +221 -0
- reconcile/rhidp/ocm_oidc_idp/integration.py +56 -0
- reconcile/rhidp/ocm_oidc_idp/metrics.py +22 -0
- reconcile/rhidp/sso_client/__init__.py +0 -0
- reconcile/rhidp/sso_client/base.py +266 -0
- reconcile/rhidp/sso_client/integration.py +60 -0
- reconcile/rhidp/sso_client/metrics.py +39 -0
- reconcile/run_integration.py +293 -0
- reconcile/saas_auto_promotions_manager/integration.py +69 -24
- reconcile/saas_auto_promotions_manager/merge_request_manager/batcher.py +208 -0
- reconcile/saas_auto_promotions_manager/merge_request_manager/desired_state.py +28 -0
- reconcile/saas_auto_promotions_manager/merge_request_manager/merge_request.py +3 -4
- reconcile/saas_auto_promotions_manager/merge_request_manager/merge_request_manager_v2.py +172 -0
- reconcile/saas_auto_promotions_manager/merge_request_manager/metrics.py +42 -0
- reconcile/saas_auto_promotions_manager/merge_request_manager/mr_parser.py +226 -0
- reconcile/saas_auto_promotions_manager/merge_request_manager/open_merge_requests.py +23 -0
- reconcile/saas_auto_promotions_manager/merge_request_manager/renderer.py +108 -32
- reconcile/saas_auto_promotions_manager/meta.py +4 -0
- reconcile/saas_auto_promotions_manager/publisher.py +32 -4
- reconcile/saas_auto_promotions_manager/s3_exporter.py +77 -0
- reconcile/saas_auto_promotions_manager/subscriber.py +110 -23
- reconcile/saas_auto_promotions_manager/utils/saas_files_inventory.py +48 -41
- reconcile/saas_file_validator.py +16 -6
- reconcile/sendgrid_teammates.py +27 -12
- reconcile/service_dependencies.py +0 -3
- reconcile/signalfx_endpoint_monitoring.py +2 -5
- reconcile/skupper_network/integration.py +10 -11
- reconcile/skupper_network/models.py +3 -5
- reconcile/skupper_network/reconciler.py +28 -35
- reconcile/skupper_network/site_controller.py +8 -8
- reconcile/slack_base.py +4 -7
- reconcile/slack_usergroups.py +249 -171
- reconcile/sql_query.py +324 -171
- reconcile/status.py +0 -1
- reconcile/status_board.py +275 -0
- reconcile/statuspage/__init__.py +0 -5
- reconcile/statuspage/atlassian.py +219 -80
- reconcile/statuspage/integration.py +9 -97
- reconcile/statuspage/integrations/__init__.py +0 -0
- reconcile/statuspage/integrations/components.py +77 -0
- reconcile/statuspage/integrations/maintenances.py +111 -0
- reconcile/statuspage/page.py +107 -72
- reconcile/statuspage/state.py +6 -11
- reconcile/statuspage/status.py +8 -12
- reconcile/templates/rosa-classic-cluster-creation.sh.j2 +60 -0
- reconcile/templates/rosa-hcp-cluster-creation.sh.j2 +61 -0
- reconcile/templating/__init__.py +0 -0
- reconcile/templating/lib/__init__.py +0 -0
- reconcile/templating/lib/merge_request_manager.py +180 -0
- reconcile/templating/lib/model.py +20 -0
- reconcile/templating/lib/rendering.py +191 -0
- reconcile/templating/renderer.py +410 -0
- reconcile/templating/validator.py +153 -0
- reconcile/terraform_aws_route53.py +13 -10
- reconcile/terraform_cloudflare_dns.py +92 -122
- reconcile/terraform_cloudflare_resources.py +15 -13
- reconcile/terraform_cloudflare_users.py +27 -27
- reconcile/terraform_init/__init__.py +0 -0
- reconcile/terraform_init/integration.py +165 -0
- reconcile/terraform_init/merge_request.py +57 -0
- reconcile/terraform_init/merge_request_manager.py +102 -0
- reconcile/terraform_repo.py +403 -0
- reconcile/terraform_resources.py +266 -168
- reconcile/terraform_tgw_attachments.py +417 -167
- reconcile/terraform_users.py +40 -17
- reconcile/terraform_vpc_peerings.py +310 -142
- reconcile/terraform_vpc_resources/__init__.py +0 -0
- reconcile/terraform_vpc_resources/integration.py +220 -0
- reconcile/terraform_vpc_resources/merge_request.py +57 -0
- reconcile/terraform_vpc_resources/merge_request_manager.py +107 -0
- reconcile/typed_queries/alerting_services_settings.py +1 -2
- reconcile/typed_queries/app_interface_custom_messages.py +24 -0
- reconcile/typed_queries/app_interface_deadmanssnitch_settings.py +17 -0
- reconcile/typed_queries/app_interface_metrics_exporter/__init__.py +0 -0
- reconcile/typed_queries/app_interface_metrics_exporter/onboarding_status.py +13 -0
- reconcile/typed_queries/app_interface_repo_url.py +1 -2
- reconcile/typed_queries/app_interface_state_settings.py +1 -3
- reconcile/typed_queries/app_interface_vault_settings.py +1 -2
- reconcile/typed_queries/app_quay_repos_escalation_policies.py +14 -0
- reconcile/typed_queries/apps.py +11 -0
- reconcile/typed_queries/aws_vpc_requests.py +9 -0
- reconcile/typed_queries/aws_vpcs.py +12 -0
- reconcile/typed_queries/cloudflare.py +10 -0
- reconcile/typed_queries/clusters.py +7 -5
- reconcile/typed_queries/clusters_minimal.py +6 -5
- reconcile/typed_queries/clusters_with_dms.py +16 -0
- reconcile/typed_queries/cost_report/__init__.py +0 -0
- reconcile/typed_queries/cost_report/app_names.py +22 -0
- reconcile/typed_queries/cost_report/cost_namespaces.py +43 -0
- reconcile/typed_queries/cost_report/settings.py +15 -0
- reconcile/typed_queries/dynatrace.py +10 -0
- reconcile/typed_queries/dynatrace_environments.py +14 -0
- reconcile/typed_queries/dynatrace_token_provider_token_specs.py +14 -0
- reconcile/typed_queries/external_resources.py +46 -0
- reconcile/typed_queries/get_state_aws_account.py +20 -0
- reconcile/typed_queries/glitchtip.py +10 -0
- reconcile/typed_queries/jenkins.py +25 -0
- reconcile/typed_queries/jira.py +7 -0
- reconcile/typed_queries/jira_settings.py +16 -0
- reconcile/typed_queries/jiralert_settings.py +22 -0
- reconcile/typed_queries/ocm.py +8 -0
- reconcile/typed_queries/pagerduty_instances.py +2 -7
- reconcile/typed_queries/quay.py +23 -0
- reconcile/typed_queries/repos.py +20 -8
- reconcile/typed_queries/reserved_networks.py +12 -0
- reconcile/typed_queries/saas_files.py +221 -167
- reconcile/typed_queries/slack.py +7 -0
- reconcile/typed_queries/slo_documents.py +12 -0
- reconcile/typed_queries/status_board.py +58 -0
- reconcile/typed_queries/tekton_pipeline_providers.py +1 -2
- reconcile/typed_queries/terraform_namespaces.py +1 -2
- reconcile/typed_queries/terraform_tgw_attachments/__init__.py +0 -0
- reconcile/typed_queries/terraform_tgw_attachments/aws_accounts.py +16 -0
- reconcile/typed_queries/unleash.py +10 -0
- reconcile/typed_queries/users.py +11 -0
- reconcile/typed_queries/vault.py +10 -0
- reconcile/unleash_feature_toggles/__init__.py +0 -0
- reconcile/unleash_feature_toggles/integration.py +287 -0
- reconcile/utils/acs/__init__.py +0 -0
- reconcile/utils/acs/base.py +81 -0
- reconcile/utils/acs/notifiers.py +143 -0
- reconcile/utils/acs/policies.py +163 -0
- reconcile/utils/acs/rbac.py +277 -0
- reconcile/utils/aggregated_list.py +11 -9
- reconcile/utils/amtool.py +6 -4
- reconcile/utils/aws_api.py +279 -66
- reconcile/utils/aws_api_typed/__init__.py +0 -0
- reconcile/utils/aws_api_typed/account.py +23 -0
- reconcile/utils/aws_api_typed/api.py +273 -0
- reconcile/utils/aws_api_typed/dynamodb.py +16 -0
- reconcile/utils/aws_api_typed/iam.py +67 -0
- reconcile/utils/aws_api_typed/organization.py +152 -0
- reconcile/utils/aws_api_typed/s3.py +26 -0
- reconcile/utils/aws_api_typed/service_quotas.py +79 -0
- reconcile/utils/aws_api_typed/sts.py +36 -0
- reconcile/utils/aws_api_typed/support.py +79 -0
- reconcile/utils/aws_helper.py +42 -3
- reconcile/utils/batches.py +11 -0
- reconcile/utils/binary.py +7 -9
- reconcile/utils/cloud_resource_best_practice/__init__.py +0 -0
- reconcile/utils/cloud_resource_best_practice/aws_rds.py +66 -0
- reconcile/utils/clusterhealth/__init__.py +0 -0
- reconcile/utils/clusterhealth/providerbase.py +39 -0
- reconcile/utils/clusterhealth/telemeter.py +39 -0
- reconcile/utils/config.py +3 -4
- reconcile/utils/deadmanssnitch_api.py +86 -0
- reconcile/utils/differ.py +205 -0
- reconcile/utils/disabled_integrations.py +4 -6
- reconcile/utils/dynatrace/__init__.py +0 -0
- reconcile/utils/dynatrace/client.py +93 -0
- reconcile/utils/early_exit_cache.py +289 -0
- reconcile/utils/elasticsearch_exceptions.py +5 -0
- reconcile/utils/environ.py +2 -2
- reconcile/utils/exceptions.py +4 -0
- reconcile/utils/expiration.py +4 -8
- reconcile/utils/extended_early_exit.py +210 -0
- reconcile/utils/external_resource_spec.py +34 -12
- reconcile/utils/external_resources.py +48 -20
- reconcile/utils/filtering.py +16 -0
- reconcile/utils/git.py +49 -16
- reconcile/utils/github_api.py +10 -9
- reconcile/utils/gitlab_api.py +333 -190
- reconcile/utils/glitchtip/client.py +97 -100
- reconcile/utils/glitchtip/models.py +89 -11
- reconcile/utils/gql.py +157 -58
- reconcile/utils/grouping.py +17 -0
- reconcile/utils/helm.py +89 -18
- reconcile/utils/helpers.py +51 -0
- reconcile/utils/imap_client.py +5 -6
- reconcile/utils/internal_groups/__init__.py +0 -0
- reconcile/utils/internal_groups/client.py +160 -0
- reconcile/utils/internal_groups/models.py +71 -0
- reconcile/utils/jenkins_api.py +10 -34
- reconcile/utils/jinja2/__init__.py +0 -0
- reconcile/utils/{jinja2_ext.py → jinja2/extensions.py} +6 -4
- reconcile/utils/jinja2/filters.py +142 -0
- reconcile/utils/jinja2/utils.py +278 -0
- reconcile/utils/jira_client.py +165 -8
- reconcile/utils/jjb_client.py +47 -35
- reconcile/utils/jobcontroller/__init__.py +0 -0
- reconcile/utils/jobcontroller/controller.py +413 -0
- reconcile/utils/jobcontroller/models.py +195 -0
- reconcile/utils/jsonpath.py +4 -5
- reconcile/utils/jump_host.py +13 -12
- reconcile/utils/keycloak.py +106 -0
- reconcile/utils/ldap_client.py +35 -6
- reconcile/utils/lean_terraform_client.py +115 -6
- reconcile/utils/membershipsources/__init__.py +0 -0
- reconcile/utils/membershipsources/app_interface_resolver.py +60 -0
- reconcile/utils/membershipsources/models.py +91 -0
- reconcile/utils/membershipsources/resolver.py +110 -0
- reconcile/utils/merge_request_manager/__init__.py +0 -0
- reconcile/utils/merge_request_manager/merge_request_manager.py +99 -0
- reconcile/utils/merge_request_manager/parser.py +67 -0
- reconcile/utils/metrics.py +511 -1
- reconcile/utils/models.py +123 -0
- reconcile/utils/mr/README.md +198 -0
- reconcile/utils/mr/__init__.py +14 -10
- reconcile/utils/mr/app_interface_reporter.py +2 -2
- reconcile/utils/mr/aws_access.py +4 -4
- reconcile/utils/mr/base.py +51 -31
- reconcile/utils/mr/clusters_updates.py +10 -7
- reconcile/utils/mr/glitchtip_access_reporter.py +2 -4
- reconcile/utils/mr/labels.py +14 -1
- reconcile/utils/mr/notificator.py +1 -3
- reconcile/utils/mr/ocm_update_recommended_version.py +1 -2
- reconcile/utils/mr/ocm_upgrade_scheduler_org_updates.py +7 -3
- reconcile/utils/mr/promote_qontract.py +203 -0
- reconcile/utils/mr/user_maintenance.py +24 -4
- reconcile/utils/oauth2_backend_application_session.py +132 -0
- reconcile/utils/oc.py +194 -170
- reconcile/utils/oc_connection_parameters.py +40 -51
- reconcile/utils/oc_filters.py +11 -13
- reconcile/utils/oc_map.py +14 -35
- reconcile/utils/ocm/__init__.py +30 -1
- reconcile/utils/ocm/addons.py +228 -0
- reconcile/utils/ocm/base.py +618 -5
- reconcile/utils/ocm/cluster_groups.py +5 -56
- reconcile/utils/ocm/clusters.py +111 -99
- reconcile/utils/ocm/identity_providers.py +66 -0
- reconcile/utils/ocm/label_sources.py +75 -0
- reconcile/utils/ocm/labels.py +139 -54
- reconcile/utils/ocm/manifests.py +39 -0
- reconcile/utils/ocm/ocm.py +182 -928
- reconcile/utils/ocm/products.py +758 -0
- reconcile/utils/ocm/search_filters.py +20 -28
- reconcile/utils/ocm/service_log.py +32 -79
- reconcile/utils/ocm/sre_capability_labels.py +51 -0
- reconcile/utils/ocm/status_board.py +66 -0
- reconcile/utils/ocm/subscriptions.py +49 -59
- reconcile/utils/ocm/syncsets.py +39 -0
- reconcile/utils/ocm/upgrades.py +181 -0
- reconcile/utils/ocm_base_client.py +71 -36
- reconcile/utils/openshift_resource.py +113 -67
- reconcile/utils/output.py +18 -11
- reconcile/utils/pagerduty_api.py +16 -10
- reconcile/utils/parse_dhms_duration.py +13 -1
- reconcile/utils/prometheus.py +123 -0
- reconcile/utils/promotion_state.py +56 -19
- reconcile/utils/promtool.py +5 -8
- reconcile/utils/quay_api.py +13 -25
- reconcile/utils/raw_github_api.py +3 -5
- reconcile/utils/repo_owners.py +2 -8
- reconcile/utils/rest_api_base.py +126 -0
- reconcile/utils/rosa/__init__.py +0 -0
- reconcile/utils/rosa/rosa_cli.py +310 -0
- reconcile/utils/rosa/session.py +201 -0
- reconcile/utils/ruamel.py +16 -0
- reconcile/utils/runtime/__init__.py +0 -1
- reconcile/utils/runtime/desired_state_diff.py +9 -20
- reconcile/utils/runtime/environment.py +33 -8
- reconcile/utils/runtime/integration.py +28 -12
- reconcile/utils/runtime/meta.py +1 -3
- reconcile/utils/runtime/runner.py +8 -11
- reconcile/utils/runtime/sharding.py +93 -36
- reconcile/utils/saasherder/__init__.py +1 -1
- reconcile/utils/saasherder/interfaces.py +143 -138
- reconcile/utils/saasherder/models.py +201 -43
- reconcile/utils/saasherder/saasherder.py +508 -378
- reconcile/utils/secret_reader.py +22 -27
- reconcile/utils/semver_helper.py +15 -1
- reconcile/utils/slack_api.py +124 -36
- reconcile/utils/smtp_client.py +1 -2
- reconcile/utils/sqs_gateway.py +10 -6
- reconcile/utils/state.py +276 -127
- reconcile/utils/terraform/config_client.py +6 -7
- reconcile/utils/terraform_client.py +284 -125
- reconcile/utils/terrascript/cloudflare_client.py +38 -17
- reconcile/utils/terrascript/cloudflare_resources.py +67 -18
- reconcile/utils/terrascript/models.py +2 -3
- reconcile/utils/terrascript/resources.py +1 -2
- reconcile/utils/terrascript_aws_client.py +1292 -540
- reconcile/utils/three_way_diff_strategy.py +157 -0
- reconcile/utils/unleash/__init__.py +11 -0
- reconcile/utils/{unleash.py → unleash/client.py} +35 -29
- reconcile/utils/unleash/server.py +145 -0
- reconcile/utils/vault.py +42 -32
- reconcile/utils/vaultsecretref.py +2 -4
- reconcile/utils/vcs.py +250 -0
- reconcile/vault_replication.py +38 -31
- reconcile/vpc_peerings_validator.py +82 -13
- tools/app_interface_metrics_exporter.py +70 -0
- tools/app_interface_reporter.py +44 -157
- tools/cli_commands/container_images_report.py +154 -0
- tools/cli_commands/cost_report/__init__.py +0 -0
- tools/cli_commands/cost_report/aws.py +137 -0
- tools/cli_commands/cost_report/cost_management_api.py +155 -0
- tools/cli_commands/cost_report/model.py +49 -0
- tools/cli_commands/cost_report/openshift.py +166 -0
- tools/cli_commands/cost_report/openshift_cost_optimization.py +187 -0
- tools/cli_commands/cost_report/response.py +124 -0
- tools/cli_commands/cost_report/util.py +72 -0
- tools/cli_commands/cost_report/view.py +524 -0
- tools/cli_commands/erv2.py +620 -0
- tools/cli_commands/gpg_encrypt.py +5 -8
- tools/cli_commands/systems_and_tools.py +489 -0
- tools/glitchtip_access_revalidation.py +1 -1
- tools/qontract_cli.py +2301 -673
- tools/saas_metrics_exporter/__init__.py +0 -0
- tools/saas_metrics_exporter/commit_distance/__init__.py +0 -0
- tools/saas_metrics_exporter/commit_distance/channel.py +63 -0
- tools/saas_metrics_exporter/commit_distance/commit_distance.py +103 -0
- tools/saas_metrics_exporter/commit_distance/metrics.py +19 -0
- tools/saas_metrics_exporter/main.py +99 -0
- tools/saas_promotion_state/__init__.py +0 -0
- tools/saas_promotion_state/saas_promotion_state.py +105 -0
- tools/sd_app_sre_alert_report.py +145 -0
- tools/template_validation.py +107 -0
- e2e_tests/cli.py +0 -83
- e2e_tests/create_namespace.py +0 -43
- e2e_tests/dedicated_admin_rolebindings.py +0 -44
- e2e_tests/dedicated_admin_test_base.py +0 -39
- e2e_tests/default_network_policies.py +0 -47
- e2e_tests/default_project_labels.py +0 -52
- e2e_tests/network_policy_test_base.py +0 -17
- e2e_tests/test_base.py +0 -56
- qontract_reconcile-0.9.1rc298.dist-info/METADATA +0 -63
- qontract_reconcile-0.9.1rc298.dist-info/RECORD +0 -585
- qontract_reconcile-0.9.1rc298.dist-info/top_level.txt +0 -4
- reconcile/ecr_mirror.py +0 -152
- reconcile/github_scanner.py +0 -74
- reconcile/gitlab_integrations.py +0 -63
- reconcile/gql_definitions/ocm_oidc_idp/clusters.py +0 -195
- reconcile/gql_definitions/ocp_release_mirror/ocp_release_mirror.py +0 -287
- reconcile/integrations_validator.py +0 -18
- reconcile/jenkins_plugins.py +0 -129
- reconcile/kafka_clusters.py +0 -208
- reconcile/ocm_cluster_admin.py +0 -42
- reconcile/ocm_oidc_idp.py +0 -198
- reconcile/ocp_release_mirror.py +0 -373
- reconcile/prometheus_rules_tester_old.py +0 -436
- reconcile/saas_auto_promotions_manager/merge_request_manager/merge_request_manager.py +0 -279
- reconcile/saas_auto_promotions_manager/utils/vcs.py +0 -141
- reconcile/sentry_config.py +0 -613
- reconcile/sentry_helper.py +0 -69
- reconcile/test/conftest.py +0 -187
- reconcile/test/fixtures.py +0 -24
- reconcile/test/saas_auto_promotions_manager/conftest.py +0 -69
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/merge_request_manager/conftest.py +0 -110
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/merge_request_manager/data_keys.py +0 -10
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/merge_request_manager/test_housekeeping.py +0 -200
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/merge_request_manager/test_merge_request_manager.py +0 -151
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/renderer/conftest.py +0 -63
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/renderer/data_keys.py +0 -4
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/renderer/test_content_multiple_namespaces.py +0 -46
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/renderer/test_content_single_namespace.py +0 -94
- reconcile/test/saas_auto_promotions_manager/merge_request_manager/renderer/test_content_single_target.py +0 -44
- reconcile/test/saas_auto_promotions_manager/subscriber/conftest.py +0 -74
- reconcile/test/saas_auto_promotions_manager/subscriber/data_keys.py +0 -11
- reconcile/test/saas_auto_promotions_manager/subscriber/test_content_hash.py +0 -155
- reconcile/test/saas_auto_promotions_manager/subscriber/test_diff.py +0 -173
- reconcile/test/saas_auto_promotions_manager/subscriber/test_multiple_channels_config_hash.py +0 -226
- reconcile/test/saas_auto_promotions_manager/subscriber/test_multiple_channels_moving_ref.py +0 -224
- reconcile/test/saas_auto_promotions_manager/subscriber/test_single_channel_with_single_publisher.py +0 -350
- reconcile/test/saas_auto_promotions_manager/test_integration_test.py +0 -129
- reconcile/test/saas_auto_promotions_manager/utils/saas_files_inventory/test_multiple_publishers_for_single_channel.py +0 -70
- reconcile/test/saas_auto_promotions_manager/utils/saas_files_inventory/test_saas_files_use_target_config_hash.py +0 -63
- reconcile/test/saas_auto_promotions_manager/utils/saas_files_inventory/test_saas_files_with_auto_promote.py +0 -74
- reconcile/test/saas_auto_promotions_manager/utils/saas_files_inventory/test_saas_files_without_auto_promote.py +0 -65
- reconcile/test/test_aggregated_list.py +0 -237
- reconcile/test/test_amtool.py +0 -37
- reconcile/test/test_auto_promoter.py +0 -295
- reconcile/test/test_aws_ami_share.py +0 -68
- reconcile/test/test_aws_iam_keys.py +0 -70
- reconcile/test/test_aws_iam_password_reset.py +0 -35
- reconcile/test/test_aws_support_cases_sos.py +0 -23
- reconcile/test/test_checkpoint.py +0 -178
- reconcile/test/test_cli.py +0 -41
- reconcile/test/test_closedbox_endpoint_monitoring.py +0 -207
- reconcile/test/test_gabi_authorized_users.py +0 -72
- reconcile/test/test_github_org.py +0 -154
- reconcile/test/test_github_repo_invites.py +0 -123
- reconcile/test/test_gitlab_housekeeping.py +0 -88
- reconcile/test/test_gitlab_labeler.py +0 -129
- reconcile/test/test_gitlab_members.py +0 -283
- reconcile/test/test_instrumented_wrappers.py +0 -18
- reconcile/test/test_integrations_manager.py +0 -995
- reconcile/test/test_jenkins_worker_fleets.py +0 -55
- reconcile/test/test_jump_host.py +0 -117
- reconcile/test/test_ldap_users.py +0 -123
- reconcile/test/test_make.py +0 -28
- reconcile/test/test_ocm_additional_routers.py +0 -134
- reconcile/test/test_ocm_addons_upgrade_scheduler_org.py +0 -149
- reconcile/test/test_ocm_clusters.py +0 -598
- reconcile/test/test_ocm_clusters_manifest_updates.py +0 -89
- reconcile/test/test_ocm_oidc_idp.py +0 -315
- reconcile/test/test_ocm_update_recommended_version.py +0 -145
- reconcile/test/test_ocm_upgrade_scheduler.py +0 -614
- reconcile/test/test_ocm_upgrade_scheduler_org_updater.py +0 -129
- reconcile/test/test_openshift_base.py +0 -730
- reconcile/test/test_openshift_namespace_labels.py +0 -345
- reconcile/test/test_openshift_namespaces.py +0 -256
- reconcile/test/test_openshift_resource.py +0 -415
- reconcile/test/test_openshift_resources_base.py +0 -440
- reconcile/test/test_openshift_saas_deploy_change_tester.py +0 -310
- reconcile/test/test_openshift_tekton_resources.py +0 -253
- reconcile/test/test_openshift_upgrade_watcher.py +0 -146
- reconcile/test/test_prometheus_rules_tester.py +0 -151
- reconcile/test/test_prometheus_rules_tester_old.py +0 -77
- reconcile/test/test_quay_membership.py +0 -86
- reconcile/test/test_quay_mirror.py +0 -109
- reconcile/test/test_quay_mirror_org.py +0 -70
- reconcile/test/test_quay_repos.py +0 -59
- reconcile/test/test_queries.py +0 -53
- reconcile/test/test_repo_owners.py +0 -47
- reconcile/test/test_requests_sender.py +0 -139
- reconcile/test/test_saasherder.py +0 -1074
- reconcile/test/test_saasherder_allowed_secret_paths.py +0 -127
- reconcile/test/test_secret_reader.py +0 -153
- reconcile/test/test_slack_base.py +0 -185
- reconcile/test/test_slack_usergroups.py +0 -744
- reconcile/test/test_sql_query.py +0 -19
- reconcile/test/test_terraform_cloudflare_dns.py +0 -117
- reconcile/test/test_terraform_cloudflare_resources.py +0 -106
- reconcile/test/test_terraform_cloudflare_users.py +0 -749
- reconcile/test/test_terraform_resources.py +0 -257
- reconcile/test/test_terraform_tgw_attachments.py +0 -631
- reconcile/test/test_terraform_users.py +0 -57
- reconcile/test/test_terraform_vpc_peerings.py +0 -499
- reconcile/test/test_terraform_vpc_peerings_build_desired_state.py +0 -1061
- reconcile/test/test_unleash.py +0 -138
- reconcile/test/test_utils_aws_api.py +0 -240
- reconcile/test/test_utils_aws_helper.py +0 -80
- reconcile/test/test_utils_cluster_version_data.py +0 -177
- reconcile/test/test_utils_data_structures.py +0 -13
- reconcile/test/test_utils_disabled_integrations.py +0 -86
- reconcile/test/test_utils_expiration.py +0 -109
- reconcile/test/test_utils_external_resource_spec.py +0 -383
- reconcile/test/test_utils_external_resources.py +0 -247
- reconcile/test/test_utils_github_api.py +0 -73
- reconcile/test/test_utils_gitlab_api.py +0 -20
- reconcile/test/test_utils_gpg.py +0 -69
- reconcile/test/test_utils_gql.py +0 -81
- reconcile/test/test_utils_helm.py +0 -306
- reconcile/test/test_utils_helpers.py +0 -55
- reconcile/test/test_utils_imap_client.py +0 -65
- reconcile/test/test_utils_jjb_client.py +0 -52
- reconcile/test/test_utils_jsonpath.py +0 -286
- reconcile/test/test_utils_ldap_client.py +0 -51
- reconcile/test/test_utils_mr.py +0 -226
- reconcile/test/test_utils_mr_clusters_updates.py +0 -77
- reconcile/test/test_utils_oc.py +0 -984
- reconcile/test/test_utils_ocm.py +0 -110
- reconcile/test/test_utils_pagerduty_api.py +0 -251
- reconcile/test/test_utils_parse_dhms_duration.py +0 -34
- reconcile/test/test_utils_password_validator.py +0 -155
- reconcile/test/test_utils_quay_api.py +0 -86
- reconcile/test/test_utils_semver_helper.py +0 -19
- reconcile/test/test_utils_sharding.py +0 -56
- reconcile/test/test_utils_slack_api.py +0 -439
- reconcile/test/test_utils_smtp_client.py +0 -73
- reconcile/test/test_utils_state.py +0 -256
- reconcile/test/test_utils_terraform.py +0 -13
- reconcile/test/test_utils_terraform_client.py +0 -585
- reconcile/test/test_utils_terraform_config_client.py +0 -219
- reconcile/test/test_utils_terrascript_aws_client.py +0 -277
- reconcile/test/test_utils_terrascript_cloudflare_client.py +0 -597
- reconcile/test/test_utils_terrascript_cloudflare_resources.py +0 -26
- reconcile/test/test_vault_replication.py +0 -515
- reconcile/test/test_vault_utils.py +0 -47
- reconcile/test/test_version_bump.py +0 -18
- reconcile/test/test_vpc_peerings_validator.py +0 -103
- reconcile/test/test_wrong_region.py +0 -78
- reconcile/typed_queries/glitchtip_settings.py +0 -18
- reconcile/typed_queries/ocp_release_mirror.py +0 -11
- reconcile/unleash_watcher.py +0 -120
- reconcile/utils/git_secrets.py +0 -63
- reconcile/utils/mr/auto_promoter.py +0 -218
- reconcile/utils/sentry_client.py +0 -383
- release/test_version.py +0 -50
- release/version.py +0 -100
- tools/test/test_qontract_cli.py +0 -60
- tools/test/test_sre_checkpoints.py +0 -79
- /e2e_tests/__init__.py → /reconcile/aus/upgrades.py +0 -0
- /reconcile/{gql_definitions/ocp_release_mirror → aws_account_manager}/__init__.py +0 -0
- /reconcile/{test → aws_ami_cleanup}/__init__.py +0 -0
- /reconcile/{test/saas_auto_promotions_manager → aws_cloudwatch_log_retention}/__init__.py +0 -0
- /reconcile/{test/saas_auto_promotions_manager/merge_request_manager → aws_saml_idp}/__init__.py +0 -0
- /reconcile/{test/saas_auto_promotions_manager/merge_request_manager/merge_request_manager → aws_saml_roles}/__init__.py +0 -0
- /reconcile/{test/saas_auto_promotions_manager/merge_request_manager/renderer → aws_version_sync}/__init__.py +0 -0
- /reconcile/{test/saas_auto_promotions_manager/subscriber → aws_version_sync/merge_request_manager}/__init__.py +0 -0
- /reconcile/{test/saas_auto_promotions_manager/utils → cluster_auth_rhidp}/__init__.py +0 -0
- /reconcile/{test/saas_auto_promotions_manager/utils/saas_files_inventory → dynatrace_token_provider}/__init__.py +0 -0
- {release → reconcile/endpoints_discovery}/__init__.py +0 -0
- {tools/test → reconcile/external_resources}/__init__.py +0 -0
@@ -0,0 +1,119 @@
|
|
1
|
+
"""
|
2
|
+
Generated by qenerate plugin=pydantic_v1. DO NOT MODIFY MANUALLY!
|
3
|
+
"""
|
4
|
+
from collections.abc import Callable # noqa: F401 # pylint: disable=W0611
|
5
|
+
from datetime import datetime # noqa: F401 # pylint: disable=W0611
|
6
|
+
from enum import Enum # noqa: F401 # pylint: disable=W0611
|
7
|
+
from typing import ( # noqa: F401 # pylint: disable=W0611
|
8
|
+
Any,
|
9
|
+
Optional,
|
10
|
+
Union,
|
11
|
+
)
|
12
|
+
|
13
|
+
from pydantic import ( # noqa: F401 # pylint: disable=W0611
|
14
|
+
BaseModel,
|
15
|
+
Extra,
|
16
|
+
Field,
|
17
|
+
Json,
|
18
|
+
)
|
19
|
+
|
20
|
+
from reconcile.gql_definitions.fragments.aws_account_common import AWSAccountCommon
|
21
|
+
from reconcile.gql_definitions.fragments.terraform_state import TerraformState
|
22
|
+
|
23
|
+
|
24
|
+
DEFINITION = """
|
25
|
+
fragment AWSAccountCommon on AWSAccount_v1 {
|
26
|
+
path
|
27
|
+
name
|
28
|
+
description
|
29
|
+
uid
|
30
|
+
terraformUsername
|
31
|
+
consoleUrl
|
32
|
+
resourcesDefaultRegion
|
33
|
+
supportedDeploymentRegions
|
34
|
+
providerVersion
|
35
|
+
accountOwners {
|
36
|
+
name
|
37
|
+
email
|
38
|
+
}
|
39
|
+
automationToken {
|
40
|
+
... VaultSecret
|
41
|
+
}
|
42
|
+
garbageCollection
|
43
|
+
enableDeletion
|
44
|
+
deletionApprovals {
|
45
|
+
type
|
46
|
+
name
|
47
|
+
expiration
|
48
|
+
}
|
49
|
+
disable {
|
50
|
+
integrations
|
51
|
+
}
|
52
|
+
deleteKeys
|
53
|
+
premiumSupport
|
54
|
+
partition
|
55
|
+
}
|
56
|
+
|
57
|
+
fragment TerraformState on TerraformStateAWS_v1 {
|
58
|
+
provider
|
59
|
+
bucket
|
60
|
+
region
|
61
|
+
integrations {
|
62
|
+
key
|
63
|
+
integration
|
64
|
+
}
|
65
|
+
}
|
66
|
+
|
67
|
+
fragment VaultSecret on VaultSecret_v1 {
|
68
|
+
path
|
69
|
+
field
|
70
|
+
version
|
71
|
+
format
|
72
|
+
}
|
73
|
+
|
74
|
+
query AWSAccounts($name: String) {
|
75
|
+
accounts: awsaccounts_v1
|
76
|
+
(
|
77
|
+
name: $name
|
78
|
+
)
|
79
|
+
{
|
80
|
+
... AWSAccountCommon
|
81
|
+
terraformState {
|
82
|
+
... TerraformState
|
83
|
+
}
|
84
|
+
}
|
85
|
+
}
|
86
|
+
"""
|
87
|
+
|
88
|
+
|
89
|
+
class ConfiguredBaseModel(BaseModel):
|
90
|
+
class Config:
|
91
|
+
smart_union=True
|
92
|
+
extra=Extra.forbid
|
93
|
+
|
94
|
+
|
95
|
+
class AWSAccountV1(AWSAccountCommon):
|
96
|
+
terraform_state: Optional[TerraformState] = Field(..., alias="terraformState")
|
97
|
+
|
98
|
+
|
99
|
+
class AWSAccountsQueryData(ConfiguredBaseModel):
|
100
|
+
accounts: Optional[list[AWSAccountV1]] = Field(..., alias="accounts")
|
101
|
+
|
102
|
+
|
103
|
+
def query(query_func: Callable, **kwargs: Any) -> AWSAccountsQueryData:
|
104
|
+
"""
|
105
|
+
This is a convenience function which queries and parses the data into
|
106
|
+
concrete types. It should be compatible with most GQL clients.
|
107
|
+
You do not have to use it to consume the generated data classes.
|
108
|
+
Alternatively, you can also mime and alternate the behavior
|
109
|
+
of this function in the caller.
|
110
|
+
|
111
|
+
Parameters:
|
112
|
+
query_func (Callable): Function which queries your GQL Server
|
113
|
+
kwargs: optional arguments that will be passed to the query function
|
114
|
+
|
115
|
+
Returns:
|
116
|
+
AWSAccountsQueryData: queried data parsed into generated classes
|
117
|
+
"""
|
118
|
+
raw_data: dict[Any, Any] = query_func(DEFINITION, **kwargs)
|
119
|
+
return AWSAccountsQueryData(**raw_data)
|
File without changes
|
@@ -0,0 +1,113 @@
|
|
1
|
+
"""
|
2
|
+
Generated by qenerate plugin=pydantic_v1. DO NOT MODIFY MANUALLY!
|
3
|
+
"""
|
4
|
+
from collections.abc import Callable # noqa: F401 # pylint: disable=W0611
|
5
|
+
from datetime import datetime # noqa: F401 # pylint: disable=W0611
|
6
|
+
from enum import Enum # noqa: F401 # pylint: disable=W0611
|
7
|
+
from typing import ( # noqa: F401 # pylint: disable=W0611
|
8
|
+
Any,
|
9
|
+
Optional,
|
10
|
+
Union,
|
11
|
+
)
|
12
|
+
|
13
|
+
from pydantic import ( # noqa: F401 # pylint: disable=W0611
|
14
|
+
BaseModel,
|
15
|
+
Extra,
|
16
|
+
Field,
|
17
|
+
Json,
|
18
|
+
)
|
19
|
+
|
20
|
+
from reconcile.gql_definitions.fragments.vault_secret import VaultSecret
|
21
|
+
|
22
|
+
|
23
|
+
DEFINITION = """
|
24
|
+
fragment VaultSecret on VaultSecret_v1 {
|
25
|
+
path
|
26
|
+
field
|
27
|
+
version
|
28
|
+
format
|
29
|
+
}
|
30
|
+
|
31
|
+
query UnleashFeatureToggles {
|
32
|
+
instances: unleash_instances_v1 {
|
33
|
+
name
|
34
|
+
description
|
35
|
+
url
|
36
|
+
adminToken {
|
37
|
+
...VaultSecret
|
38
|
+
}
|
39
|
+
allowUnmanagedFeatureToggles
|
40
|
+
projects {
|
41
|
+
name
|
42
|
+
feature_toggles {
|
43
|
+
name
|
44
|
+
description
|
45
|
+
delete
|
46
|
+
provider
|
47
|
+
unleash {
|
48
|
+
type
|
49
|
+
impressionData
|
50
|
+
environments
|
51
|
+
}
|
52
|
+
}
|
53
|
+
}
|
54
|
+
}
|
55
|
+
}
|
56
|
+
"""
|
57
|
+
|
58
|
+
|
59
|
+
class ConfiguredBaseModel(BaseModel):
|
60
|
+
class Config:
|
61
|
+
smart_union=True
|
62
|
+
extra=Extra.forbid
|
63
|
+
|
64
|
+
|
65
|
+
class UnleashFeatureToggleV1(ConfiguredBaseModel):
|
66
|
+
q_type: Optional[str] = Field(..., alias="type")
|
67
|
+
impression_data: Optional[bool] = Field(..., alias="impressionData")
|
68
|
+
environments: Optional[Json] = Field(..., alias="environments")
|
69
|
+
|
70
|
+
|
71
|
+
class FeatureToggleUnleashV1(ConfiguredBaseModel):
|
72
|
+
name: str = Field(..., alias="name")
|
73
|
+
description: str = Field(..., alias="description")
|
74
|
+
delete: Optional[bool] = Field(..., alias="delete")
|
75
|
+
provider: str = Field(..., alias="provider")
|
76
|
+
unleash: UnleashFeatureToggleV1 = Field(..., alias="unleash")
|
77
|
+
|
78
|
+
|
79
|
+
class UnleashProjectV1(ConfiguredBaseModel):
|
80
|
+
name: str = Field(..., alias="name")
|
81
|
+
feature_toggles: Optional[list[FeatureToggleUnleashV1]] = Field(..., alias="feature_toggles")
|
82
|
+
|
83
|
+
|
84
|
+
class UnleashInstanceV1(ConfiguredBaseModel):
|
85
|
+
name: str = Field(..., alias="name")
|
86
|
+
description: str = Field(..., alias="description")
|
87
|
+
url: str = Field(..., alias="url")
|
88
|
+
admin_token: Optional[VaultSecret] = Field(..., alias="adminToken")
|
89
|
+
allow_unmanaged_feature_toggles: Optional[bool] = Field(..., alias="allowUnmanagedFeatureToggles")
|
90
|
+
projects: Optional[list[UnleashProjectV1]] = Field(..., alias="projects")
|
91
|
+
|
92
|
+
|
93
|
+
class UnleashFeatureTogglesQueryData(ConfiguredBaseModel):
|
94
|
+
instances: Optional[list[UnleashInstanceV1]] = Field(..., alias="instances")
|
95
|
+
|
96
|
+
|
97
|
+
def query(query_func: Callable, **kwargs: Any) -> UnleashFeatureTogglesQueryData:
|
98
|
+
"""
|
99
|
+
This is a convenience function which queries and parses the data into
|
100
|
+
concrete types. It should be compatible with most GQL clients.
|
101
|
+
You do not have to use it to consume the generated data classes.
|
102
|
+
Alternatively, you can also mime and alternate the behavior
|
103
|
+
of this function in the caller.
|
104
|
+
|
105
|
+
Parameters:
|
106
|
+
query_func (Callable): Function which queries your GQL Server
|
107
|
+
kwargs: optional arguments that will be passed to the query function
|
108
|
+
|
109
|
+
Returns:
|
110
|
+
UnleashFeatureTogglesQueryData: queried data parsed into generated classes
|
111
|
+
"""
|
112
|
+
raw_data: dict[Any, Any] = query_func(DEFINITION, **kwargs)
|
113
|
+
return UnleashFeatureTogglesQueryData(**raw_data)
|
@@ -31,6 +31,7 @@ fragment VaultSecret on VaultSecret_v1 {
|
|
31
31
|
query VaultInstances {
|
32
32
|
vault_instances: vault_instances_v1 {
|
33
33
|
name
|
34
|
+
description
|
34
35
|
address
|
35
36
|
auth {
|
36
37
|
provider
|
@@ -118,8 +119,8 @@ query VaultInstances {
|
|
118
119
|
|
119
120
|
class ConfiguredBaseModel(BaseModel):
|
120
121
|
class Config:
|
121
|
-
smart_union
|
122
|
-
extra
|
122
|
+
smart_union=True
|
123
|
+
extra=Extra.forbid
|
123
124
|
|
124
125
|
|
125
126
|
class VaultInstanceAuthV1(ConfiguredBaseModel):
|
@@ -137,9 +138,7 @@ class VaultReplicationConfigV1_VaultInstanceV1_VaultInstanceAuthV1(ConfiguredBas
|
|
137
138
|
secret_engine: str = Field(..., alias="secretEngine")
|
138
139
|
|
139
140
|
|
140
|
-
class VaultReplicationConfigV1_VaultInstanceV1_VaultInstanceAuthV1_VaultInstanceAuthApproleV1(
|
141
|
-
VaultReplicationConfigV1_VaultInstanceV1_VaultInstanceAuthV1
|
142
|
-
):
|
141
|
+
class VaultReplicationConfigV1_VaultInstanceV1_VaultInstanceAuthV1_VaultInstanceAuthApproleV1(VaultReplicationConfigV1_VaultInstanceV1_VaultInstanceAuthV1):
|
143
142
|
role_id: VaultSecret = Field(..., alias="roleID")
|
144
143
|
secret_id: VaultSecret = Field(..., alias="secretID")
|
145
144
|
|
@@ -147,10 +146,7 @@ class VaultReplicationConfigV1_VaultInstanceV1_VaultInstanceAuthV1_VaultInstance
|
|
147
146
|
class VaultReplicationConfigV1_VaultInstanceV1(ConfiguredBaseModel):
|
148
147
|
name: str = Field(..., alias="name")
|
149
148
|
address: str = Field(..., alias="address")
|
150
|
-
auth: Union[
|
151
|
-
VaultReplicationConfigV1_VaultInstanceV1_VaultInstanceAuthV1_VaultInstanceAuthApproleV1,
|
152
|
-
VaultReplicationConfigV1_VaultInstanceV1_VaultInstanceAuthV1,
|
153
|
-
] = Field(..., alias="auth")
|
149
|
+
auth: Union[VaultReplicationConfigV1_VaultInstanceV1_VaultInstanceAuthV1_VaultInstanceAuthApproleV1, VaultReplicationConfigV1_VaultInstanceV1_VaultInstanceAuthV1] = Field(..., alias="auth")
|
154
150
|
|
155
151
|
|
156
152
|
class VaultReplicationConfigV1_VaultInstanceAuthV1(ConfiguredBaseModel):
|
@@ -158,9 +154,7 @@ class VaultReplicationConfigV1_VaultInstanceAuthV1(ConfiguredBaseModel):
|
|
158
154
|
secret_engine: str = Field(..., alias="secretEngine")
|
159
155
|
|
160
156
|
|
161
|
-
class VaultReplicationConfigV1_VaultInstanceAuthV1_VaultInstanceAuthApproleV1(
|
162
|
-
VaultReplicationConfigV1_VaultInstanceAuthV1
|
163
|
-
):
|
157
|
+
class VaultReplicationConfigV1_VaultInstanceAuthV1_VaultInstanceAuthApproleV1(VaultReplicationConfigV1_VaultInstanceAuthV1):
|
164
158
|
role_id: VaultSecret = Field(..., alias="roleID")
|
165
159
|
secret_id: VaultSecret = Field(..., alias="secretID")
|
166
160
|
|
@@ -170,9 +164,7 @@ class VaultInstanceV1_VaultReplicationConfigV1_VaultInstanceAuthV1(ConfiguredBas
|
|
170
164
|
secret_engine: str = Field(..., alias="secretEngine")
|
171
165
|
|
172
166
|
|
173
|
-
class VaultInstanceV1_VaultReplicationConfigV1_VaultInstanceAuthV1_VaultInstanceAuthApproleV1(
|
174
|
-
VaultInstanceV1_VaultReplicationConfigV1_VaultInstanceAuthV1
|
175
|
-
):
|
167
|
+
class VaultInstanceV1_VaultReplicationConfigV1_VaultInstanceAuthV1_VaultInstanceAuthApproleV1(VaultInstanceV1_VaultReplicationConfigV1_VaultInstanceAuthV1):
|
176
168
|
role_id: VaultSecret = Field(..., alias="roleID")
|
177
169
|
secret_id: VaultSecret = Field(..., alias="secretID")
|
178
170
|
|
@@ -208,55 +200,30 @@ class VaultReplicationPolicyV1_VaultPolicyV1_VaultInstanceV1(ConfiguredBaseModel
|
|
208
200
|
|
209
201
|
class VaultReplicationPolicyV1_VaultPolicyV1(ConfiguredBaseModel):
|
210
202
|
name: str = Field(..., alias="name")
|
211
|
-
instance: VaultReplicationPolicyV1_VaultPolicyV1_VaultInstanceV1 = Field(
|
212
|
-
..., alias="instance"
|
213
|
-
)
|
203
|
+
instance: VaultReplicationPolicyV1_VaultPolicyV1_VaultInstanceV1 = Field(..., alias="instance")
|
214
204
|
|
215
205
|
|
216
206
|
class VaultReplicationPolicyV1(VaultReplicationPathsV1):
|
217
|
-
policy: Optional[VaultReplicationPolicyV1_VaultPolicyV1] = Field(
|
218
|
-
..., alias="policy"
|
219
|
-
)
|
207
|
+
policy: Optional[VaultReplicationPolicyV1_VaultPolicyV1] = Field(..., alias="policy")
|
220
208
|
|
221
209
|
|
222
210
|
class VaultReplicationConfigV1(ConfiguredBaseModel):
|
223
|
-
vault_instance: VaultReplicationConfigV1_VaultInstanceV1 = Field(
|
224
|
-
|
225
|
-
)
|
226
|
-
|
227
|
-
VaultReplicationConfigV1_VaultInstanceAuthV1_VaultInstanceAuthApproleV1,
|
228
|
-
VaultReplicationConfigV1_VaultInstanceAuthV1,
|
229
|
-
] = Field(..., alias="sourceAuth")
|
230
|
-
dest_auth: Union[
|
231
|
-
VaultInstanceV1_VaultReplicationConfigV1_VaultInstanceAuthV1_VaultInstanceAuthApproleV1,
|
232
|
-
VaultInstanceV1_VaultReplicationConfigV1_VaultInstanceAuthV1,
|
233
|
-
] = Field(..., alias="destAuth")
|
234
|
-
paths: Optional[
|
235
|
-
list[
|
236
|
-
Union[
|
237
|
-
VaultReplicationJenkinsV1,
|
238
|
-
VaultReplicationPolicyV1,
|
239
|
-
VaultReplicationPathsV1,
|
240
|
-
]
|
241
|
-
]
|
242
|
-
] = Field(..., alias="paths")
|
211
|
+
vault_instance: VaultReplicationConfigV1_VaultInstanceV1 = Field(..., alias="vaultInstance")
|
212
|
+
source_auth: Union[VaultReplicationConfigV1_VaultInstanceAuthV1_VaultInstanceAuthApproleV1, VaultReplicationConfigV1_VaultInstanceAuthV1] = Field(..., alias="sourceAuth")
|
213
|
+
dest_auth: Union[VaultInstanceV1_VaultReplicationConfigV1_VaultInstanceAuthV1_VaultInstanceAuthApproleV1, VaultInstanceV1_VaultReplicationConfigV1_VaultInstanceAuthV1] = Field(..., alias="destAuth")
|
214
|
+
paths: Optional[list[Union[VaultReplicationJenkinsV1, VaultReplicationPolicyV1, VaultReplicationPathsV1]]] = Field(..., alias="paths")
|
243
215
|
|
244
216
|
|
245
217
|
class VaultInstanceV1(ConfiguredBaseModel):
|
246
218
|
name: str = Field(..., alias="name")
|
219
|
+
description: str = Field(..., alias="description")
|
247
220
|
address: str = Field(..., alias="address")
|
248
|
-
auth: Union[VaultInstanceAuthApproleV1, VaultInstanceAuthV1] = Field(
|
249
|
-
|
250
|
-
)
|
251
|
-
replication: Optional[list[VaultReplicationConfigV1]] = Field(
|
252
|
-
..., alias="replication"
|
253
|
-
)
|
221
|
+
auth: Union[VaultInstanceAuthApproleV1, VaultInstanceAuthV1] = Field(..., alias="auth")
|
222
|
+
replication: Optional[list[VaultReplicationConfigV1]] = Field(..., alias="replication")
|
254
223
|
|
255
224
|
|
256
225
|
class VaultInstancesQueryData(ConfiguredBaseModel):
|
257
|
-
vault_instances: Optional[list[VaultInstanceV1]] = Field(
|
258
|
-
..., alias="vault_instances"
|
259
|
-
)
|
226
|
+
vault_instances: Optional[list[VaultInstanceV1]] = Field(..., alias="vault_instances")
|
260
227
|
|
261
228
|
|
262
229
|
def query(query_func: Callable, **kwargs: Any) -> VaultInstancesQueryData:
|
@@ -17,14 +17,15 @@ from pydantic import ( # noqa: F401 # pylint: disable=W0611
|
|
17
17
|
Json,
|
18
18
|
)
|
19
19
|
|
20
|
-
from reconcile.gql_definitions.vpc_peerings_validator.vpc_peerings_validator_peered_cluster_fragment import
|
21
|
-
VpcPeeringsValidatorPeeredCluster,
|
22
|
-
)
|
20
|
+
from reconcile.gql_definitions.vpc_peerings_validator.vpc_peerings_validator_peered_cluster_fragment import VpcPeeringsValidatorPeeredCluster
|
23
21
|
|
24
22
|
|
25
23
|
DEFINITION = """
|
26
24
|
fragment VpcPeeringsValidatorPeeredCluster on Cluster_v1 {
|
27
25
|
name
|
26
|
+
network {
|
27
|
+
vpc
|
28
|
+
}
|
28
29
|
spec {
|
29
30
|
private
|
30
31
|
}
|
@@ -34,6 +35,9 @@ fragment VpcPeeringsValidatorPeeredCluster on Cluster_v1 {
|
|
34
35
|
query VpcPeeringsValidator {
|
35
36
|
clusters: clusters_v1 {
|
36
37
|
name
|
38
|
+
network {
|
39
|
+
vpc
|
40
|
+
}
|
37
41
|
spec {
|
38
42
|
private
|
39
43
|
}
|
@@ -41,6 +45,20 @@ query VpcPeeringsValidator {
|
|
41
45
|
peering {
|
42
46
|
connections {
|
43
47
|
provider
|
48
|
+
... on ClusterPeeringConnectionAccount_v1 {
|
49
|
+
vpc {
|
50
|
+
cidr_block
|
51
|
+
name
|
52
|
+
}
|
53
|
+
}
|
54
|
+
... on ClusterPeeringConnectionAccountVPCMesh_v1{
|
55
|
+
name
|
56
|
+
account {
|
57
|
+
name
|
58
|
+
uid
|
59
|
+
}
|
60
|
+
tags
|
61
|
+
}
|
44
62
|
... on ClusterPeeringConnectionClusterRequester_v1 {
|
45
63
|
cluster {
|
46
64
|
... VpcPeeringsValidatorPeeredCluster
|
@@ -60,8 +78,12 @@ query VpcPeeringsValidator {
|
|
60
78
|
|
61
79
|
class ConfiguredBaseModel(BaseModel):
|
62
80
|
class Config:
|
63
|
-
smart_union
|
64
|
-
extra
|
81
|
+
smart_union=True
|
82
|
+
extra=Extra.forbid
|
83
|
+
|
84
|
+
|
85
|
+
class ClusterNetworkV1(ConfiguredBaseModel):
|
86
|
+
vpc: str = Field(..., alias="vpc")
|
65
87
|
|
66
88
|
|
67
89
|
class ClusterSpecV1(ConfiguredBaseModel):
|
@@ -72,6 +94,26 @@ class ClusterPeeringConnectionV1(ConfiguredBaseModel):
|
|
72
94
|
provider: str = Field(..., alias="provider")
|
73
95
|
|
74
96
|
|
97
|
+
class AWSVPCV1(ConfiguredBaseModel):
|
98
|
+
cidr_block: str = Field(..., alias="cidr_block")
|
99
|
+
name: str = Field(..., alias="name")
|
100
|
+
|
101
|
+
|
102
|
+
class ClusterPeeringConnectionAccountV1(ClusterPeeringConnectionV1):
|
103
|
+
vpc: AWSVPCV1 = Field(..., alias="vpc")
|
104
|
+
|
105
|
+
|
106
|
+
class AWSAccountV1(ConfiguredBaseModel):
|
107
|
+
name: str = Field(..., alias="name")
|
108
|
+
uid: str = Field(..., alias="uid")
|
109
|
+
|
110
|
+
|
111
|
+
class ClusterPeeringConnectionAccountVPCMeshV1(ClusterPeeringConnectionV1):
|
112
|
+
name: str = Field(..., alias="name")
|
113
|
+
account: AWSAccountV1 = Field(..., alias="account")
|
114
|
+
tags: Optional[Json] = Field(..., alias="tags")
|
115
|
+
|
116
|
+
|
75
117
|
class ClusterPeeringConnectionClusterRequesterV1(ClusterPeeringConnectionV1):
|
76
118
|
cluster: VpcPeeringsValidatorPeeredCluster = Field(..., alias="cluster")
|
77
119
|
|
@@ -81,17 +123,12 @@ class ClusterPeeringConnectionClusterAccepterV1(ClusterPeeringConnectionV1):
|
|
81
123
|
|
82
124
|
|
83
125
|
class ClusterPeeringV1(ConfiguredBaseModel):
|
84
|
-
connections: list[
|
85
|
-
Union[
|
86
|
-
ClusterPeeringConnectionClusterRequesterV1,
|
87
|
-
ClusterPeeringConnectionClusterAccepterV1,
|
88
|
-
ClusterPeeringConnectionV1,
|
89
|
-
]
|
90
|
-
] = Field(..., alias="connections")
|
126
|
+
connections: list[Union[ClusterPeeringConnectionAccountVPCMeshV1, ClusterPeeringConnectionAccountV1, ClusterPeeringConnectionClusterRequesterV1, ClusterPeeringConnectionClusterAccepterV1, ClusterPeeringConnectionV1]] = Field(..., alias="connections")
|
91
127
|
|
92
128
|
|
93
129
|
class ClusterV1(ConfiguredBaseModel):
|
94
130
|
name: str = Field(..., alias="name")
|
131
|
+
network: Optional[ClusterNetworkV1] = Field(..., alias="network")
|
95
132
|
spec: Optional[ClusterSpecV1] = Field(..., alias="spec")
|
96
133
|
internal: Optional[bool] = Field(..., alias="internal")
|
97
134
|
peering: Optional[ClusterPeeringV1] = Field(..., alias="peering")
|
reconcile/gql_definitions/vpc_peerings_validator/vpc_peerings_validator_peered_cluster_fragment.py
CHANGED
@@ -20,8 +20,12 @@ from pydantic import ( # noqa: F401 # pylint: disable=W0611
|
|
20
20
|
|
21
21
|
class ConfiguredBaseModel(BaseModel):
|
22
22
|
class Config:
|
23
|
-
smart_union
|
24
|
-
extra
|
23
|
+
smart_union=True
|
24
|
+
extra=Extra.forbid
|
25
|
+
|
26
|
+
|
27
|
+
class ClusterNetworkV1(ConfiguredBaseModel):
|
28
|
+
vpc: str = Field(..., alias="vpc")
|
25
29
|
|
26
30
|
|
27
31
|
class ClusterSpecV1(ConfiguredBaseModel):
|
@@ -30,5 +34,6 @@ class ClusterSpecV1(ConfiguredBaseModel):
|
|
30
34
|
|
31
35
|
class VpcPeeringsValidatorPeeredCluster(ConfiguredBaseModel):
|
32
36
|
name: str = Field(..., alias="name")
|
37
|
+
network: Optional[ClusterNetworkV1] = Field(..., alias="network")
|
33
38
|
spec: Optional[ClusterSpecV1] = Field(..., alias="spec")
|
34
39
|
internal: Optional[bool] = Field(..., alias="internal")
|
@@ -6,10 +6,7 @@ from collections.abc import (
|
|
6
6
|
Mapping,
|
7
7
|
Sequence,
|
8
8
|
)
|
9
|
-
from typing import
|
10
|
-
Any,
|
11
|
-
Optional,
|
12
|
-
)
|
9
|
+
from typing import Any
|
13
10
|
|
14
11
|
from github import Github
|
15
12
|
from pydantic import BaseModel
|
@@ -44,6 +41,7 @@ from reconcile.utils.runtime.sharding import (
|
|
44
41
|
AWSAccountShardingStrategy,
|
45
42
|
CloudflareDnsZoneShardingStrategy,
|
46
43
|
IntegrationShardManager,
|
44
|
+
OCMOrganizationShardingStrategy,
|
47
45
|
OpenshiftClusterShardingStrategy,
|
48
46
|
ShardSpec,
|
49
47
|
StaticShardingStrategy,
|
@@ -56,6 +54,8 @@ QONTRACT_INTEGRATION_VERSION = make_semver(0, 1, 0)
|
|
56
54
|
IMAGE_DEFAULT = "quay.io/app-sre/qontract-reconcile"
|
57
55
|
UPSTREAM_DEFAULT = "https://github.com/app-sre/qontract-reconcile"
|
58
56
|
|
57
|
+
INTEGRATION_UPSTREAM_REPOS_PARAM = "INTEGRATION_UPSTREAM_REPOS"
|
58
|
+
|
59
59
|
|
60
60
|
def get_image_tag_from_ref(ref: str, upstream: str) -> str:
|
61
61
|
gh_prefix = "https://github.com/"
|
@@ -73,7 +73,7 @@ def collect_parameters(
|
|
73
73
|
environment: EnvironmentV1,
|
74
74
|
upstream: str,
|
75
75
|
image: str,
|
76
|
-
image_tag_from_ref:
|
76
|
+
image_tag_from_ref: Mapping[str, str] | None,
|
77
77
|
) -> dict[str, Any]:
|
78
78
|
parameters: dict[str, Any] = {}
|
79
79
|
if environment.parameters:
|
@@ -87,6 +87,17 @@ def collect_parameters(
|
|
87
87
|
if p["name"] in os.environ
|
88
88
|
}
|
89
89
|
parameters.update(tp_env_vars)
|
90
|
+
|
91
|
+
# overwrite image and imtage tag from environment parameter
|
92
|
+
for upstream_config in (environment.parameters or {}).get(
|
93
|
+
INTEGRATION_UPSTREAM_REPOS_PARAM, []
|
94
|
+
):
|
95
|
+
if upstream_config.get("repo") == upstream:
|
96
|
+
parameters["IMAGE_TAG"] = get_image_tag_from_ref(
|
97
|
+
upstream_config.get("ref"), upstream
|
98
|
+
)
|
99
|
+
|
100
|
+
# overwrite image tag from cli parameters
|
90
101
|
if image_tag_from_ref:
|
91
102
|
for e, r in image_tag_from_ref.items():
|
92
103
|
if environment.name == e:
|
@@ -123,14 +134,15 @@ class HelmValues(BaseModel):
|
|
123
134
|
cronjobs: list[HelmIntegrationSpec] = []
|
124
135
|
|
125
136
|
|
126
|
-
def build_helm_values(specs: Iterable[HelmIntegrationSpec]):
|
137
|
+
def build_helm_values(specs: Iterable[HelmIntegrationSpec]) -> dict:
|
127
138
|
values = HelmValues()
|
128
139
|
for s in specs:
|
129
140
|
if s.cron:
|
130
141
|
values.cronjobs.append(s)
|
131
142
|
else:
|
132
143
|
values.integrations.append(s)
|
133
|
-
|
144
|
+
|
145
|
+
return values.dict(exclude_none=True, by_alias=True)
|
134
146
|
|
135
147
|
|
136
148
|
class IntegrationsEnvironment(BaseModel):
|
@@ -143,7 +155,6 @@ def collect_integrations_environment(
|
|
143
155
|
environment_name: str,
|
144
156
|
shard_manager: IntegrationShardManager,
|
145
157
|
) -> list[IntegrationsEnvironment]:
|
146
|
-
|
147
158
|
int_envs: dict[str, IntegrationsEnvironment] = {}
|
148
159
|
|
149
160
|
for i in integrations:
|
@@ -166,13 +177,12 @@ def construct_oc_resources(
|
|
166
177
|
integrations_environment: IntegrationsEnvironment,
|
167
178
|
upstream: str,
|
168
179
|
image: str,
|
169
|
-
image_tag_from_ref:
|
180
|
+
image_tag_from_ref: Mapping[str, str] | None,
|
170
181
|
) -> list[OpenshiftResource]:
|
171
|
-
|
172
182
|
# Generate the openshift template with the helm chart. The resulting template
|
173
183
|
# contains all the integrations in the environment
|
174
184
|
values = build_helm_values(integrations_environment.integration_specs)
|
175
|
-
template = helm.template(values
|
185
|
+
template = helm.template(values)
|
176
186
|
|
177
187
|
parameters = collect_parameters(
|
178
188
|
template,
|
@@ -200,7 +210,7 @@ def fetch_desired_state(
|
|
200
210
|
ri: ResourceInventory,
|
201
211
|
upstream: str,
|
202
212
|
image: str,
|
203
|
-
image_tag_from_ref:
|
213
|
+
image_tag_from_ref: Mapping[str, str] | None,
|
204
214
|
):
|
205
215
|
for ie in integrations_environments:
|
206
216
|
oc_resources = construct_oc_resources(ie, upstream, image, image_tag_from_ref)
|
@@ -211,7 +221,7 @@ def fetch_desired_state(
|
|
211
221
|
|
212
222
|
|
213
223
|
def filter_integrations(
|
214
|
-
integrations: Iterable[IntegrationV1], upstream:
|
224
|
+
integrations: Iterable[IntegrationV1], upstream: str | None = None
|
215
225
|
) -> list[IntegrationV1]:
|
216
226
|
if upstream is None:
|
217
227
|
return list(integrations)
|
@@ -247,6 +257,7 @@ def run(
|
|
247
257
|
AWSAccountShardingStrategy.IDENTIFIER: AWSAccountShardingStrategy(),
|
248
258
|
OpenshiftClusterShardingStrategy.IDENTIFIER: OpenshiftClusterShardingStrategy(),
|
249
259
|
CloudflareDnsZoneShardingStrategy.IDENTIFIER: CloudflareDnsZoneShardingStrategy(),
|
260
|
+
OCMOrganizationShardingStrategy.IDENTIFIER: OCMOrganizationShardingStrategy(),
|
250
261
|
},
|
251
262
|
integration_runtime_meta=integration_runtime_meta,
|
252
263
|
)
|
@@ -289,6 +300,7 @@ def run(
|
|
289
300
|
integration_environments, ri, upstream, image, image_tag_from_ref
|
290
301
|
)
|
291
302
|
|
303
|
+
ob.publish_metrics(ri, QONTRACT_INTEGRATION)
|
292
304
|
if use_upstream:
|
293
305
|
ob.realize_data(dry_run, oc_map, ri, thread_pool_size, caller=upstream)
|
294
306
|
else:
|
reconcile/jenkins/types.py
CHANGED
@@ -21,7 +21,11 @@ class SSHHostKeyVerificationStrategy(Enum):
|
|
21
21
|
|
22
22
|
class SSHConnector(BaseModel):
|
23
23
|
credentials_id: str = Field(..., alias="credentialsId")
|
24
|
-
|
24
|
+
launch_timeout_seconds: int | None = Field(None, alias="launchTimeoutSeconds")
|
25
|
+
max_num_retries: int | None = Field(None, alias="maxNumRetries")
|
26
|
+
retry_wait_time: int | None = Field(None, alias="retryWaitTime")
|
27
|
+
port: int | None = 22
|
28
|
+
jvm_options: str | None = Field(None, alias="jvmOptions")
|
25
29
|
ssh_host_key_verification_strategy: SSHHostKeyVerificationStrategy = Field(
|
26
30
|
SSHHostKeyVerificationStrategy.NON_VERIFYING_KEY_VERIFICATION_STRATEGY,
|
27
31
|
alias="sshHostKeyVerificationStrategy",
|
@@ -0,0 +1,36 @@
|
|
1
|
+
from reconcile import queries
|
2
|
+
from reconcile.utils import gql
|
3
|
+
from reconcile.utils.jenkins_api import JenkinsApi
|
4
|
+
from reconcile.utils.secret_reader import SecretReader
|
5
|
+
|
6
|
+
INSTANCES_QUERY = """
|
7
|
+
{
|
8
|
+
instances: jenkins_instances_v1 {
|
9
|
+
name
|
10
|
+
token {
|
11
|
+
path
|
12
|
+
field
|
13
|
+
version
|
14
|
+
format
|
15
|
+
}
|
16
|
+
}
|
17
|
+
}
|
18
|
+
"""
|
19
|
+
|
20
|
+
|
21
|
+
def get_jenkins_map() -> dict[str, JenkinsApi]:
|
22
|
+
gqlapi = gql.get_api()
|
23
|
+
jenkins_instances = gqlapi.query(INSTANCES_QUERY)["instances"]
|
24
|
+
secret_reader = SecretReader(queries.get_secret_reader_settings())
|
25
|
+
|
26
|
+
jenkins_map = {}
|
27
|
+
for instance in jenkins_instances:
|
28
|
+
instance_name = instance["name"]
|
29
|
+
if instance_name in jenkins_map:
|
30
|
+
continue
|
31
|
+
|
32
|
+
token = instance["token"]
|
33
|
+
jenkins = JenkinsApi.init_jenkins_from_secret(secret_reader, token)
|
34
|
+
jenkins_map[instance_name] = jenkins
|
35
|
+
|
36
|
+
return jenkins_map
|