{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":533666826,"defaultBranch":"main","name":"governance-policy-framework-addon","ownerLogin":"open-cluster-management-io","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2022-09-07T08:03:39.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/83772337?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1712174076.0","currentOid":""},"activityList":{"items":[{"before":"1139cecf10d4b25977f3dfeb9a6ee86cd53a3c49","after":"f299b7020823b3a09ab872ea4731080b42ff09d8","ref":"refs/heads/main","pushedAt":"2024-05-28T12:18:26.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Upgrade addon-framework to 0.9.3.\n\nSigned-off-by: GitHub ","shortMessageHtmlLink":"Upgrade addon-framework to 0.9.3."}},{"before":"d780b0e587eadf6abc9937486a395aab38a740f3","after":"1139cecf10d4b25977f3dfeb9a6ee86cd53a3c49","ref":"refs/heads/main","pushedAt":"2024-05-22T16:23:30.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Set the parent policy to NonCompliant when there is a duplicate name\n\nThe noncompliant event was sent in this case but the status-sync did not\npick it up because it specified the policy template name using the array\nindex.\n\nRelates:\nhttps://issues.redhat.com/browse/ACM-11806\n\nSigned-off-by: mprahl ","shortMessageHtmlLink":"Set the parent policy to NonCompliant when there is a duplicate name"}},{"before":"61259832fb2fa7325b682e8316339dffd96a237c","after":"d780b0e587eadf6abc9937486a395aab38a740f3","ref":"refs/heads/main","pushedAt":"2024-05-13T18:24:17.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Report Pending status despite hub template error\n\nA previous change allowing hub-templates for all policy types, and\nhandling any hub-template errors in this controller, caused a change in\nbehavior. Before that change, when a policy both had a hub-template\nerror *and* an unsatisfied dependency, the policy would be marked as\nPending. The change made the hub-template error have priority.\n\nThis commit gives the Pending status priority, and adds a test for that\nspecific behavior. It also handles ConfigurationPolicies particularly\ncarefully: setting `PruneObjectBehavior` to `None` when the template\nwill be deleted specifically because of a hub-template error.\n\nRefs:\n - https://issues.redhat.com/browse/ACM-11530\n\nSigned-off-by: Justin Kulikauskas ","shortMessageHtmlLink":"Report Pending status despite hub template error"}},{"before":"cfa2e4f1ad33bc1005ba7976819d96b2992925b9","after":"61259832fb2fa7325b682e8316339dffd96a237c","ref":"refs/heads/main","pushedAt":"2024-05-07T20:11:51.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Detect the correct error for resource not found\n\nUpdating controller-runtime seems to have changed the error.\n\nRelates:\nhttps://issues.redhat.com/browse/ACM-11498\n\nSigned-off-by: mprahl ","shortMessageHtmlLink":"Detect the correct error for resource not found"}},{"before":"57ebda20eb39b3ac4f91e1c181dbab5cf9d10376","after":"cfa2e4f1ad33bc1005ba7976819d96b2992925b9","ref":"refs/heads/main","pushedAt":"2024-04-30T00:55:14.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Upgrade controller-runtime to 0.17.3\n\nChanges required to update controller-runtime to 0.17.3\n\nRef: https://issues.redhat.com/browse/ACM-10835\nSigned-off-by: Jeffrey Luo ","shortMessageHtmlLink":"Upgrade controller-runtime to 0.17.3"}},{"before":"a74d55e791e39cc4f379044fedff221ff998c95f","after":"57ebda20eb39b3ac4f91e1c181dbab5cf9d10376","ref":"refs/heads/main","pushedAt":"2024-04-24T18:49:08.000Z","pushType":"pr_merge","commitsCount":5,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Loosen some event duplication test requirements\n\nWith the template-sync now reconciling more often (there are no longer\nany cases where the reconcile can be skipped), some event duplication\nmight be unavoidable.\n\nSigned-off-by: Justin Kulikauskas ","shortMessageHtmlLink":"Loosen some event duplication test requirements"}},{"before":"64304d4bb8b665c7549add7c787b0eeeae55be50","after":"a74d55e791e39cc4f379044fedff221ff998c95f","ref":"refs/heads/main","pushedAt":"2024-04-22T14:53:09.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Bypass the caching of constraint templates\n\nSince the controller no longer restarts when the Gatekeeper installation\nstate changes, we need to prevent controller-runtime from creating a\nwatch on constraint templates, or else the client-go watcher will\ncontinuously log errors trying to restart the watch.\n\nSigned-off-by: mprahl ","shortMessageHtmlLink":"Bypass the caching of constraint templates"}},{"before":"083d80f2b8cea89901f4d55a20c98eb301f5bfe6","after":"64304d4bb8b665c7549add7c787b0eeeae55be50","ref":"refs/heads/main","pushedAt":"2024-04-19T14:03:08.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Use the dependency watcher cache in gatekeeper-constraint-status-sync\n\nThis also improves the situation when the ConstraintTemplate is removed\nand the policy still deploys a Constraint.\n\nRelates:\nhttps://issues.redhat.com/browse/ACM-11200\n\nSigned-off-by: mprahl ","shortMessageHtmlLink":"Use the dependency watcher cache in gatekeeper-constraint-status-sync"}},{"before":"5dd1a53d4e1fe48d1e38a73e865b2ba70d4080f2","after":"083d80f2b8cea89901f4d55a20c98eb301f5bfe6","ref":"refs/heads/main","pushedAt":"2024-04-18T17:37:01.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Use the admin kubeconfig for the e2e-debug Make target\n\nThis fixes the debug log collection when an E2E test fails in the GitHub\nworkflow.\n\nRelates:\nhttps://issues.redhat.com/browse/ACM-11200\n\nSigned-off-by: mprahl ","shortMessageHtmlLink":"Use the admin kubeconfig for the e2e-debug Make target"}},{"before":"9340840486e1691a468ed7c05cd02c356d75f010","after":"5dd1a53d4e1fe48d1e38a73e865b2ba70d4080f2","ref":"refs/heads/main","pushedAt":"2024-04-18T13:49:18.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Move the disabled events recording outside of spec-sync\n\nThere were issues with duplicated compliance events and having a\ndifferent code path in the governance-policy-propagator for a\nself-managed hub. This will unifies the approaches.\n\nIt takes the approach of using a retry watcher and just generating\nthe disabled event when the policy is deleted. The controller-runtime\nlibrary cannot be used because when there is a reconcile event for a\ndeleted object, you don't have access to the object as it was right\nbefore deletion.\n\nRelates:\nhttps://issues.redhat.com/browse/ACM-10418\n\nSigned-off-by: mprahl ","shortMessageHtmlLink":"Move the disabled events recording outside of spec-sync"}},{"before":"3bc0a9eef581a0da26a265d8d783ac18565c2772","after":"9340840486e1691a468ed7c05cd02c356d75f010","ref":"refs/heads/main","pushedAt":"2024-04-15T19:44:05.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Add a launch.json for local development\n\nRelates:\nhttps://issues.redhat.com/browse/ACM-10885\n\nSigned-off-by: mprahl ","shortMessageHtmlLink":"Add a launch.json for local development"}},{"before":"e67395a9ae6dc40452805097fd4c63cd991aea39","after":"3bc0a9eef581a0da26a265d8d783ac18565c2772","ref":"refs/heads/main","pushedAt":"2024-04-10T19:19:45.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Start and stop the Gatekeeper status sync controller dynamically\n\nRather than rely on a health probe failing if the Gatekeeper\ninstallation status changes, just dynamically start and stop a new\nmanager.\n\nRelates:\nhttps://issues.redhat.com/browse/ACM-10966\n\nSigned-off-by: mprahl ","shortMessageHtmlLink":"Start and stop the Gatekeeper status sync controller dynamically"}},{"before":"caf2b773700ebba83a0daa73572e75d4eeef7e01","after":"e67395a9ae6dc40452805097fd4c63cd991aea39","ref":"refs/heads/main","pushedAt":"2024-04-10T13:50:54.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Prevent duplicate disabled compliance events\n\nRelates:\nhttps://issues.redhat.com/browse/ACM-10418\n\nSigned-off-by: mprahl ","shortMessageHtmlLink":"Prevent duplicate disabled compliance events"}},{"before":"58463f945e1bc39733c024e830721518277367ab","after":null,"ref":"refs/heads/dhaiduce-main","pushedAt":"2024-04-03T19:54:36.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"}},{"before":"6a8baf33b678533fb6ebe268edd47a421cc81143","after":"caf2b773700ebba83a0daa73572e75d4eeef7e01","ref":"refs/heads/main","pushedAt":"2024-04-03T19:54:35.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Sync common Makefile\n\nSigned-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>","shortMessageHtmlLink":"Sync common Makefile"}},{"before":null,"after":"58463f945e1bc39733c024e830721518277367ab","ref":"refs/heads/dhaiduce-main","pushedAt":"2024-04-03T15:30:14.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dhaiducek","name":"Dale Haiducek","path":"/dhaiducek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/19750917?s=80&v=4"},"commit":{"message":"Sync common Makefile\n\nSigned-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>","shortMessageHtmlLink":"Sync common Makefile"}},{"before":"0a11cd8fccb85319f7c855ef2b49c4be5d7cfd79","after":null,"ref":"refs/heads/dhaiduce-main","pushedAt":"2024-04-03T15:30:09.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dhaiducek","name":"Dale Haiducek","path":"/dhaiducek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/19750917?s=80&v=4"}},{"before":null,"after":"0a11cd8fccb85319f7c855ef2b49c4be5d7cfd79","ref":"refs/heads/dhaiduce-main","pushedAt":"2024-04-03T15:28:58.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dhaiducek","name":"Dale Haiducek","path":"/dhaiducek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/19750917?s=80&v=4"},"commit":{"message":"Sync common Makefile\n\nSigned-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>","shortMessageHtmlLink":"Sync common Makefile"}},{"before":"cbd2499691413635b1eae50ec4c766bc61f5cb12","after":null,"ref":"refs/heads/dhaiduce-main","pushedAt":"2024-04-03T15:27:10.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dhaiducek","name":"Dale Haiducek","path":"/dhaiducek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/19750917?s=80&v=4"}},{"before":null,"after":"cbd2499691413635b1eae50ec4c766bc61f5cb12","ref":"refs/heads/dhaiduce-main","pushedAt":"2024-04-03T15:20:32.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dhaiducek","name":"Dale Haiducek","path":"/dhaiducek","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/19750917?s=80&v=4"},"commit":{"message":"Sync common Makefile\n\nSigned-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>","shortMessageHtmlLink":"Sync common Makefile"}},{"before":"5aae21cb520b22398a3a67abc0a134eae425c334","after":"6a8baf33b678533fb6ebe268edd47a421cc81143","ref":"refs/heads/main","pushedAt":"2024-03-21T19:39:00.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Fix template sync set to Nomcompliant when context cancel\n\nBug: If the template-sync is shutting down and it's in the middle of a reconcile request, it can set the policy to noncompliant with this\nRef: https://issues.redhat.com/browse/ACM-10402\nSigned-off-by: Yi Rae Kim ","shortMessageHtmlLink":"Fix template sync set to Nomcompliant when context cancel"}},{"before":"e5b17fcb79faeb56ba5b379a9eecd98f280b643f","after":"5aae21cb520b22398a3a67abc0a134eae425c334","ref":"refs/heads/main","pushedAt":"2024-03-21T18:38:28.000Z","pushType":"pr_merge","commitsCount":3,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Make spec-sync handle all policy creations, updates, and deletions\n\nThe status-sync watches the managed cluster where as the spec-sync\nwatches the hub cluster. This led to the status-sync in charge of\nrecreating the policy on the managed cluster if it was deleted,\ndeleting it if it was deleted on the hub, and updating if there a\nmismatch.\n\nSince the controllers use caches, there can be a race condition where\none of the controller's caches updates before the other one. To avoid\nthis race condition, trigger a spec-sync reconcile instead.\n\nRelates:\nhttps://issues.redhat.com/browse/ACM-10500\n\nSigned-off-by: mprahl ","shortMessageHtmlLink":"Make spec-sync handle all policy creations, updates, and deletions"}},{"before":"8ed364938626d548b43fdffda9c0ac18b2f3e9af","after":"e5b17fcb79faeb56ba5b379a9eecd98f280b643f","ref":"refs/heads/main","pushedAt":"2024-03-21T16:15:29.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Fix Hosted mode framework test (#141)\n\nRef: https://issues.redhat.com/browse/ACM-6966\n\nSigned-off-by: Yi Rae Kim ","shortMessageHtmlLink":"Fix Hosted mode framework test (#141)"}},{"before":"2b198cdf4c8b31dea6fcc1e7e1e11d36f3260272","after":"8ed364938626d548b43fdffda9c0ac18b2f3e9af","ref":"refs/heads/main","pushedAt":"2024-03-13T18:08:58.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Address CVE-2024-24786\n\nref: https://issues.redhat.com/browse/ACM-10280\nSigned-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>","shortMessageHtmlLink":"Address CVE-2024-24786"}},{"before":"e815e8a59d5490ba8b765afe75a90812c6eab5de","after":"2b198cdf4c8b31dea6fcc1e7e1e11d36f3260272","ref":"refs/heads/main","pushedAt":"2024-03-04T16:33:11.000Z","pushType":"pr_merge","commitsCount":5,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Filter events by Policy UID\n\nref: https://issues.redhat.com/browse/ACM-9314\nSigned-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>","shortMessageHtmlLink":"Filter events by Policy UID"}},{"before":"18fff3747e9fbe5deb1eef18c84a79501e93d6d8","after":"e815e8a59d5490ba8b765afe75a90812c6eab5de","ref":"refs/heads/main","pushedAt":"2024-03-01T16:00:46.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Replace unmaintained release action\n\nSigned-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>","shortMessageHtmlLink":"Replace unmaintained release action"}},{"before":"a3c206ca637dc8f69fe5e44887eb92b356906615","after":"18fff3747e9fbe5deb1eef18c84a79501e93d6d8","ref":"refs/heads/main","pushedAt":"2024-02-29T23:00:32.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Record template-sync compliance events in compliance history API\n\nThe template-sync was not providing the policy template to SendEvent, so\nthe compliance history database ID annotations could not be added to the\nKubernetes compliance event.\n\nThis resolves the issue of not having compliance events related to a\nGatekeeper ConstraintTemplate being created successfully.\n\nSigned-off-by: mprahl ","shortMessageHtmlLink":"Record template-sync compliance events in compliance history API"}},{"before":"a332e0a68f051581026727932b22c487b73f4679","after":"a3c206ca637dc8f69fe5e44887eb92b356906615","ref":"refs/heads/main","pushedAt":"2024-02-28T15:50:32.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Record compliance events in the compliance history API with nanoseconds\n\nThis helps with ordering when compliance events have a timestamp that is\nthe same down to the second.\n\nRelates:\nhttps://issues.redhat.com/browse/ACM-10155\n\nSigned-off-by: mprahl ","shortMessageHtmlLink":"Record compliance events in the compliance history API with nanoseconds"}},{"before":"5a56e37edd281548424960907be62b47e6df0679","after":"a332e0a68f051581026727932b22c487b73f4679","ref":"refs/heads/main","pushedAt":"2024-02-27T13:20:59.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"},"commit":{"message":"Stop retrying to record invalid compliance events\n\nThis is to account for the database IDs being invalid due to data loss\nin the database.\n\nRelates:\nhttps://issues.redhat.com/browse/ACM-10109\n\nSigned-off-by: mprahl ","shortMessageHtmlLink":"Stop retrying to record invalid compliance events"}},{"before":"ee38c6f9768eeeb7fb4714f96c2ecfc80c4a7811","after":null,"ref":"refs/heads/dhaiduce-main","pushedAt":"2024-02-26T21:54:39.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"openshift-merge-bot[bot]","name":null,"path":"/apps/openshift-merge-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/412865?s=80&v=4"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEVdCf7AA","startCursor":null,"endCursor":null}},"title":"Activity ยท open-cluster-management-io/governance-policy-framework-addon"}