Release v20231201.01-hotfix

Hotfix to allow update with --refresh-credentials

Changes

fa10ea5 az aro update CredentialsRequest hotfix (Azure#3325)
232d3bc Move to correct mdsd image (Azure#3308)
86deb39 MDM Image Bump - ARO-4792 (Azure#3297)
72fd8ad Update Go Vendored Modules - ARO-4776 (Azure#3302)
01ce6a1 Add libzstd.so.1 to fluentbit container build
548ad5c Merge pull request Azure#3232 from SrinivasAtmakuri/remove-IsLessThanMinimumDuration
6b15494 fix(admin): Ensure check on certData slice
9b92b4f Admin action to delete a cluster managed resource (Azure#3286)
a017435 ARO-4779: Mirror new hive image to close vulns
b867811 ARO-4779: Update hive dependency to close vulns
72cad15 Remove version 4.11.26 as it's affected by installation bugs
e4eea7f Use an enum for cluster maintenance states (Azure#3230)
9a9edac Update ARO operator Azure auth scheme to use a DefaultAzureCredential (Azure#3274)
d710619 test case validateEtcdCertsRenewed func
afa28a3 fix not returning arm template errors (Azure#3288)
966f7a1 graph: Allow gzip compression in requests
4a1ea40 Remove journald fields that aren't needed (Azure#3283)
06f78b7 Watch MachineSets for worker subnet changes instead of Machines (Azure#3280)
e7f5140 Migrate documentdb client from sdk track 1 to track 2 client (Azure#3255)
a85b8d0 FedRAMP TLS 1.3 Compliance (Azure#3285)
f421bac Rename installLogsForDeployment to indicate latest deployment
e9e3c7a Implement generic handling for Hive ProvisionFailed=True conditions w/ Azure policy errors
ae5c57b Add hack script to generate hive install-log-regexes.yaml from ARO definition
ac7cf2f Fix CVE-2023-45857 npm vulnerability found in audit (Azure#3279)
19703fe move default IP creation outside of newPublicLoadBalancer method
3d7c789 remove outdated comment
d37aae3 add unit tests for multiple IP aro create
0b7096d add back cli-domain-from-installer-image (Azure#3277)
19d053d Move genevalogging operator controller files into separate .confs with goembed (Azure#3276)
d0c6db7 e2e: Spew ODataError details before panicing (Azure#3265)
d25e7f2 graph: Add HTTP tracing option for MS Graph requests (Azure#3269)
67d06bd Propagate errors of GenevaLogging controller (Azure#3221)
e278fd6 Add some more golangci-lint linters and fix the issues they find (Azure#3234)
c53b31c add cluster check alert
590cc52 add muo alerts
18a57a3 Update RP Documentatation with Etcd Recovery URL
83b2a55 Delete OpenShiftVersions via change-feed (Azure#3262)
35a5f16 Bump Hive Version + Minimal Install (Azure#3260)
f042c81 Fix e2e test for azurefile-csi storage class that uses ARO-managed storage account on OCP 4.11 (Azure#3226)
a0cc0ee Patch Hive ClusterDeployment rather than update it (Azure#3244)
9100c81 clean up some of the monitor emitting metrics for aro operator statuses and prometheus (Azure#3235)
0dd1ec9 Add defaults and update k8s dev version (Azure#3245)
6e66ecd Merge pull request Azure#3251 from Azure/dependabot/go_modules/github.com/docker/docker-24.0.7incompatible
af5f826 bug: Keep cli-domain-from-installer-image until we use minimal hive version (Azure#3257)
7e96231 Bump github.com/docker/docker
c473088 Hive Minimal Install Annotation on ClusterDeployment (Azure#3243)
4aaccb8 Only mirror images from 4.11+ (Azure#3240)
2482a42 Merge pull request Azure#3250 from Azure/dependabot/github_actions/actions/setup-node-4
bb8097c Skip failing pki test for now (Azure#3249)
7e09f87 Add extra validation and remove IsLessThanMinDuration
57d3055 Bump actions/setup-node from 3 to 4
debb5ae Remove 4.10 as an installation target (Azure#3238)
a6ce8b6 Add additional metrics
54bfa2b Fix azure client for multiple clouds
effcd0b Fix make generate
55ac567 Fix unit tests
ab05ba7 Add a new azureclient for subnet from az-sdk
c628580 Make all monitors into go routines
bfd8f64 Consolidate into consistent monitor emitters
9c30a16 Plug NSG monitoring to mon.WorkOne
ba330d8 Add NSG monitoring
dfa6c1a Add azcore/arm and network/v2 to vendor
9bb9b51 Fix CheckAccess unmarshal bug (Azure#3241)
f44f544 Default installation target to 4.12 (Azure#3237)
4c89c89 Update MDM, MDSD, Fluentbit images (Azure#3233)
61745e3 fix docs: puslish aro operator to quay (Azure#3236)
4e00e29 Return actionable service principal errors to the user (Azure#3231)
24d7966 ensure API Server public IP is added to DependsOn
e6816b8 add managed ips to arm templates
8019a0e feat: add deny pull secret deletion policy (Azure#3228)
4e88775 Fix panic on addressPrefix vs addressPrefixes on subnet (Azure#3223)
3273b70 BUG: Fix golang client PUT for GA (Azure#3204)
0a42348 removed facchettos from codeowners
45a0899 Remove requeueAfter during cluster upgrades as it is unnecessary
4f8c591 Ensure DynamicHelper preserves Status on MachineHealthCheck updates
276f924 Add k8s paused annotation to ARO MHC during upgrades
cd81ce9 Return errors from AuthorizationRetryingAction if timeout is reached (Azure#3222)
365413c Add routing to admin portal (Azure#3164)
19f4e06 Additional Waiting for API Server to become ready (Azure#3220)
66c113a Propagate errors of ARO MachineHealthCheckController to ARO Operator (Azure#3177)
6cdf2c3 Match AKS development version with production (Azure#3217)
74dea99 Bump @babel/traverse from 7.21.3 to 7.23.2 in /portal/v2 (Azure#3215)
4ae11b1 Enable Double (infrastructure) Encryption on ARO-provisioned storage accounts (Azure#3216)
92ca0e4 Add e2e tests for multiple ips per loadbalancer (Azure#3183)
7579ede fix graph error handling in az-aro command module (Azure#3093)
1844f2d Revert workaround for mdsd bug
4b6adbd Merge pull request Azure#3214 from cblecker/rrr
bcc936b Merge pull request Azure#3212 from cblecker/e2e-eventually-timeout
3c120a1 Remove ready-for-review when rebase is required
9ef2e0b Add eventually timeout when we use contexts
f131c25 Merge pull request Azure#3211 from bennerv/network-acl-fix-for-storageaccounts
e3b1ebb Add additional debugging lines
61b9c39 run tests serially
a94a600 Parallelize namespace names across tests
d36544a allow for parallel statefulsets to be created
a4323ba Fix e2e tests - Add explicit timeouts
29726e7 Fix - avoid letting context override default timeout used by Eventually
a3bb3f5 Fix - avoid duplicate resource and label names in StatefulSets
bb23e4e Fix - arm.ParseArmResourceId is meant for child resources and not resource groups, so use stringutils.LastTokenByte instead
6595ed0 Fix - don't try to add service endpoint if it's already there
8cba716 Fix some nits and verify service endpoint location before reconciling vnet rules
ce81e7d Add e2e test for azurefile-csi storageclass
8abf6a4 Fix storage account reconciliation, take two
b75bc87 Fix storage account controller vnet rule additions
d346dd7 Add NACLs for OCP Subnets iff service endpoints set on subnets
e76ad78 Helper function to return functions which have a specific service endpoint enabled
ca8a3a0 api: Add MissingFields to OpenShiftVersionProperties (Azure#3208)
dc0e7e1 Bump golang.org/x/net from 0.14.0 to 0.17.0 (Azure#3209)
78f2f66 Trim dependency graph by removing unused stuff (Azure#3186)
cf35755 api: Add Default field to OpenShiftVersionProperties (Azure#3202)
cfc546e Fail cluster deletion if RP is not authorized to delete managed resource group (Azure#3207)
d3b5272 Bump postcss from 8.4.23 to 8.4.31 in /portal/v1 (Azure#3206)
22a6d60 Update documentation for testing the ARO operator (Azure#3115)
2703a95 Fix Construction of Monitor for Clusters with kube-apiservers Down (Azure#3201)
8583ae2 Merge pull request Azure#3200 from gouthamMN/master
b1109af Merge branch 'master' of https://github.com/gouthamMN/ARO-RP
29a7188 validate workerProfilesStatus to be nil only during create
cef6b01 Add customer data regression tests for get/create/update/delete k8s admin api (Azure#3198)
36df015 Prevent memory leaks with DialContext usage and new k8s client creation (Azure#3090)
082e9a5 Set maintenace task to "" after PUCM pending operation (Azure#3197)
54e90e8 Convert the pucm pending boolean in the AdminAPI (Azure#3196)
2fa4d56 Merge pull request Azure#3191 from yjst2012/remove-openshift-config
85e9ab3 Don't Put Cluster in Update State after PUCM Pending (Azure#3194)
6a9a817 retry operations on pull-secret when receiving a conflict (Azure#3195)
618366d removed host mount policy as suggested cont.
ca41d32 removed protection under openshift-cluster-csi-drivers ns as suggested
29de884 removed host mount policy as suggested
98fd988 remove protection over machine obj
c6996d8 removed openshift-config as protected namespace as suggested
c45d6cc Revendor go-cosmosdb to fix database.EmitMetrics() json decode error (Azure#3190)
a7d0262 Merge pull request Azure#3189 from Azure/revert-3171-412-default
1a35d4e Merge pull request Azure#3187 from s-amann/rotate-openshift-config-pull-secret
d29d6a1 Revert "Default to 4.12 for new installations (Azure#3171)"
33de1ab fallback to new pull secret if we cant merge
6750ea5 attempts to merge original and new even when recreating
aeea7eb continue forward if openshiftConfigSecret is missing
ca6c4cd merge existing data with new token
9ea5c62 adds retries to delete/create/update on the openshift-config pull secret
584f773 refactor to reduce use of conditions
1f38c93 rotate the openshift-config pull-secret on acr token rotation
b123a45 Fix WorkerProfilesStatus PUCM Bug (Azure#3184)
e23c4d3 remove UserDefinedRouting AFEC feature flag (Azure#3180)
019c2fb Fix bad logic comparison against an already existing gateway record (Azure#3182)
2a16a36 upstreaming changes required by upstream CI (Azure#3117)
bfddd18 Return error if we fail to delete hive resources during deletion (Azure#3179)
04b84a2 Refactor pkg name (Azure#3178)
b21cc04 Get to the bottom of the e2e admin portal failure (Azure#3168)
118f1a8 Enable preconfigured NSG flag on azure-cli (Azure#3112)
4255225 Update Dockerfile.ci to use buildarg for registry name (Azure#3167)
8ffcf69 GenevaAction for etcd Certificate Renewal (Azure#3137)
2477f95 New Monitor to emit ETCD certificates expiration (Azure#3124)
3091979 Merge pull request Azure#3176 from Azure/dependabot/github_actions/oxsecurity/megalinter-7
0736d98 Merge pull request Azure#3175 from...