Enable per kafka listener sasl #6940

New kubebuilder (version 3.7.0) updated how dependnecies (clis) are downloaded.

With changes to authorization configuration options the CRD is updated. REF: redpanda-data#5292

From 22.2.1 configuration can set per kafka listener. REF: https://github.com/redpanda-data/redpanda/releases/tag/v22.2.1 redpanda-data#5292

With changes to authorization configuration options the CRD is updated. REF: redpanda-data#6452

With changes to authorization configuration options the CRD is updated. REF: redpanda-data#6639

The authentication_method is now available in pandaproxy.

The authentication_method is now available in schema registry.

The ginkgo and gomega tests where asserting too much in one check. Errors where not clear as there were 4 boolean checks.

Previously, the configurator was downloaded from docker hub. Now operator is creating Redpanda clusters with `localhost/configurator:dev` container.

The gofumpt is used now. REF: redpanda-data#4665

When console configuration or config map metadata should be change, then tracing that is hard based on only operator logs. This change adds context to action that are taken in reconciliation function.l

In not so much good internet connection, waiting 2 minutes for config manager to became ready is not enough.

When deployment was changed, so that it uses new kustomize overlay, then the decommission deployment needs to be adjusted as containers where reorder and bring back the 'good' configuration was not valid anymore.

As the current e2e test setup is using localhost/configurator:dev container image definition, the previous step to add configurator tag command argument was not valid anymore. It was easier to not fight with `kubectl patch` command, but declare whole operator deployment to correctly set the configurator image.

The console secret synchronizer was not able to update schema registry secret after cert manager updated schema registry secret for Redpanda cluster. REF: ``` 2022-10-30T21:32:49.741Z ERROR controller.console Reconciler error {"reconciler group": "redpanda.vectorized.io", "reconciler kind": "Console", "name": "console", "namespace": "console", "error": "updating Console synced secret &Secret{ObjectMeta:{console-schema-registry console 2331 0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[app.kubernetes.io/component:console app.kubernetes.io/instance:console app.kubernetes.io/managed-by:redpanda-operator app.kubernetes.io/name:redpanda-console app.kubernetes.io/part-of:redpanda-console test.redpanda.vectorized.io/name:updating-console] map[banzaicloud.com/last-applied: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] [{redpanda.vectorized.io/v1alpha1 Console console 7c824227-7bc4-482b-b77e-b589dae67af7 0xc000db6e01 0xc000db6e00}] [] []},Data:map[string][]byte{},Type:,StringData:map[string]string{},Immutable:nil,}: failed to update resource: secrets \"console-schema-registry\" is forbidden: User \"system:serviceaccount:redpanda-system:default\" cannot update resource \"secrets\" in API group \"\" in the namespace \"console\""} ```

The console config map is immutable and any change into console resource spec will increment console resource generation. That will trigger a operator reconciliation loop which will create new configmap and delete old one if there will be no errors between k8s api server and operator. REF: ``` 2022-10-30T21:52:05.336Z ERROR controller.console Reconciler error {"reconciler group": "redpanda.vectorized.io", "reconciler kind": "Console", "name": "console", "namespace": "console", "error": "deleting unused configmaps: configmaps \"console-7wtlg\" is forbidden: User \"system:serviceaccount:redpanda-system:default\" cannot delete resource \"configmaps\" in API group \"\" in the namespace \"console\""} sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2 /go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.7/pkg/internal/controller/controller.go:214 ```

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Enable per kafka listener sasl #6940

Enable per kafka listener sasl #6940

Commits on Oct 30, 2022