Merge remote-tracking branch 'origin/master' into fealebenpae/search-grpc

# Conflicts:
#	controllers/searchcontroller/mongodbsearch_reconcile_helper.go

Author: fealebenpae

.evergreen.yml

@@ -208,6 +208,9 @@ patch_aliases:
   - alias: "release_all_agents_manually"
     variant_tags: [ "release_all_agents_manually" ]
     task: ".*"
+  - alias: "release_current_agents_manually"
+    variant_tags: [ "release_current_agents_manually" ]
+    task: ".*"
   - alias: "smoke_test_release"
     variant_tags: [ "e2e_smoke_release_test_suite" ]
     task_tags: [ "patch-run" ]
@@ -282,19 +285,19 @@ tasks:
       - func: setup_docker_sbom
       - func: pipeline_agent
         vars:
-          BUILD_SCENARIO: manual_release
+          BUILD_SCENARIO: release
 
   - name: migrate_all_agents
-    # this enables us to run this variant manually to build all the agents for the new registry
+    # this enables us to run this variant manually to build all the agents for the new agent registry
     allowed_requesters: [ "patch" ]
     commands:
       - func: clone
       - func: setup_building_host
       - func: quay_login
       - func: pipeline_agent
         vars:
-          BUILD_SCENARIO: manual_release
-          FLAGS: "--all-agents -r quay.io/mongodb/mongodb-agent"
+          BUILD_SCENARIO: release
+          FLAGS: "--all-agents -r quay.io/mongodb/mongodb-agent --skip-if-exists=false"
 
   - name: run_precommit_and_push
     tags: [ "patch-run" ]
@@ -315,27 +318,29 @@ tasks:
           working_dir: src/github.com/mongodb/mongodb-kubernetes
           binary: scripts/evergreen/precommit_bump.sh
 
-  - name: release_all_agents_on_ecr
-    # this enables us to run this manually (patch) and release all agent versions to ECR to verify
+  - name: rebuild_all_agents
+    # this enables us to run this manually (patch) and rebuild all agent versions to verify
     # Dockerfile, script changes etc.
     allowed_requesters: [ "patch" ]
     commands:
       - func: clone
       - func: setup_building_host
+      - func: quay_login
       - func: pipeline_agent
         vars:
-          FLAGS: "--all-agents"
+          FLAGS: "--all-agents --skip-if-exists=false"
 
-  - name: release_all_currently_used_agents_on_ecr
-    # this enables us to run this manually (patch) and release all agent versions to ECR to verify
+  - name: rebuild_currently_used_agents
+    # this enables us to run this manually (patch) and rebuild current agent versions to verify
     # Dockerfile, script changes etc.
     allowed_requesters: [ "patch" ]
     commands:
       - func: clone
       - func: setup_building_host
+      - func: quay_login
       - func: pipeline_agent
         vars:
-          FLAGS: "--current-agents"
+          FLAGS: "--current-agents --skip-if-exists=false"
 
   - name: build_test_image
     commands:
@@ -405,7 +410,10 @@ tasks:
     commands:
       - func: clone
       - func: setup_building_host
+      - func: quay_login
       - func: pipeline_agent
+        vars:
+          FLAGS: "--current-agents"
 
   - name: build_init_database_image_ubi
     commands:
@@ -491,7 +499,7 @@ tasks:
       - func: setup_docker_sbom
       - func: pipeline_ops_manager
         vars:
-          BUILD_SCENARIO: manual_release
+          BUILD_SCENARIO: release
 
   - name: prepare_and_upload_openshift_bundles_for_e2e
     commands:
@@ -1810,25 +1818,25 @@ buildvariants:
     tasks:
       - name: release_agent
 
-    # Only called manually, It's used for testing the task release_agents_on_ecr in case the release.json
-    # has not changed, and you still want to push the images to ecr.
-  - name: manual_ecr_release_agent
+    # Only called manually, It's used for testing the task release_agents in case the release.json
+    # has not changed, and you still want to push the images to registry.
+  - name: manual_release_all_agents
     display_name: Manual Agent Release for all versions
     tags: [ "manual_patch", "release_all_agents_manually" ]
     run_on:
       - ubuntu2404-large
     tasks:
-      - name: release_all_agents_on_ecr
+      - name: rebuild_all_agents
 
-    # Only called manually, It's used for testing the task release_agents_on_ecr in case the release.json
-    # has not changed, and you still want to push the images to ecr.
-  - name: manual_ecr_release_agent_currently_used
-    display_name: manual_ecr_release_agent_currently_used
-    tags: [ "manual_patch", "release_all_agents_manually" ]
+    # Only called manually, It's used for testing the task release_agents in case the release.json
+    # has not changed, and you still want to push the images to registry.
+  - name: manual_release_agent_currently_used
+    display_name: manual_release_agent_currently_used
+    tags: [ "manual_patch", "release_current_agents_manually" ]
     run_on:
       - ubuntu2404-large
     tasks:
-      - name: release_all_currently_used_agents_on_ecr
+      - name: rebuild_currently_used_agents
 
   ### Build variants for manual patch only
 

.github/workflows/preview_release_notes.yml

@@ -37,7 +37,8 @@ jobs:
           # not be available in the pull requests running from forks.
           RELEASE_INITIAL_COMMIT_SHA: ${{ env.RELEASE_INITIAL_COMMIT_SHA }}
           RELEASE_INITIAL_VERSION: ${{ env.RELEASE_INITIAL_VERSION }}
-      - name: Add disclaimer to release notes preview
+      - name: Add disclaimer to release notes preview for Pull Requests
+        if: github.event_name == 'pull_request'
         run: |
           echo -e "_:warning: (this preview might not be accurate if the PR is not rebased on current master branch)_\n" > release_notes_preview.md
           cat release_notes_tmp.md >> release_notes_preview.md

build_info.json

@@ -21,6 +21,7 @@
       "release": {
         "sign": true,
         "olm-tag": true,
+        "skip-if-exists": true,
         "repositories": ["quay.io/mongodb/mongodb-kubernetes"],
         "platforms": [
           "linux/arm64",
@@ -68,6 +69,7 @@
       "release": {
         "sign": true,
         "olm-tag": true,
+        "skip-if-exists": true,
         "repositories": ["quay.io/mongodb/mongodb-kubernetes-init-database"],
         "platforms": [
           "linux/arm64",
@@ -99,6 +101,7 @@
       "release": {
         "sign": true,
         "olm-tag": true,
+        "skip-if-exists": true,
         "repositories": ["quay.io/mongodb/mongodb-kubernetes-init-appdb"],
         "platforms": [
           "linux/arm64",
@@ -127,6 +130,7 @@
       "release": {
         "sign": true,
         "olm-tag": true,
+        "skip-if-exists": true,
         "repositories": ["quay.io/mongodb/mongodb-kubernetes-init-ops-manager"],
         "platforms": [
           "linux/amd64"
@@ -155,6 +159,7 @@
       "release": {
         "sign": true,
         "olm-tag": true,
+        "skip-if-exists": true,
         "repositories": ["quay.io/mongodb/mongodb-kubernetes-database"],
         "platforms": [
           "linux/arm64",
@@ -180,6 +185,7 @@
         ]
       },
       "release": {
+        "skip-if-exists": true,
         "repositories": ["quay.io/mongodb/mongodb-kubernetes-tests"],
         "platforms": [
           "linux/amd64"
@@ -262,13 +268,15 @@
     "agent": {
       "dockerfile-path": "docker/mongodb-agent/Dockerfile",
       "patch": {
+        "skip-if-exists": true,
         "repositories": ["268558157000.dkr.ecr.us-east-1.amazonaws.com/dev/mongodb-agent"],
         "platforms": [
           "linux/amd64"
         ]
       },
       "staging": {
         "sign": true,
+        "skip-if-exists": true,
         "repositories": ["268558157000.dkr.ecr.us-east-1.amazonaws.com/staging/mongodb-agent"],
         "platforms": [
           "linux/arm64",
@@ -277,9 +285,10 @@
           "linux/ppc64le"
         ]
       },
-      "manual_release": {
+      "release": {
         "sign": true,
         "olm-tag": true,
+        "skip-if-exists": true,
         "repositories": ["quay.io/mongodb/mongodb-agent-ubi", "quay.io/mongodb/mongodb-agent"],
         "platforms": [
           "linux/arm64",
@@ -292,21 +301,24 @@
     "ops-manager": {
       "dockerfile-path": "docker/mongodb-enterprise-ops-manager/Dockerfile",
       "patch": {
+        "skip-if-exists": true,
         "repositories": ["268558157000.dkr.ecr.us-east-1.amazonaws.com/dev/mongodb-enterprise-ops-manager-ubi"],
         "platforms": [
           "linux/amd64"
         ]
       },
       "staging": {
         "sign": true,
+        "skip-if-exists": true,
         "repositories": ["268558157000.dkr.ecr.us-east-1.amazonaws.com/staging/mongodb-enterprise-ops-manager-ubi"],
         "platforms": [
           "linux/amd64"
         ]
       },
-      "manual_release": {
+      "release": {
         "sign": true,
         "olm-tag": true,
+        "skip-if-exists": true,
         "repositories": ["quay.io/mongodb/mongodb-enterprise-ops-manager-ubi"],
         "platforms": [
           "linux/amd64"

changelog/20250925_feature_use_cluster_domain_environment_variable.md

@@ -0,0 +1,6 @@
+---
+kind: feature
+date: 2025-09-25
+---
+
+* **MongoDBCommunity**: Added support to configure custom cluster domain via newly introduced `spec.clusterDomain` resource field. If `spec.clusterDomain` is not set, environment variable `CLUSTER_DOMAIN` is used as cluster domain. If the environment variable `CLUSTER_DOMAIN` is also not set, operator falls back to `cluster.local` as default cluster domain.

changelog/20251007_feature_reintroduce_securitycontext_operator_setting_in.md

@@ -0,0 +1,6 @@
+---
+kind: feature
+date: 2025-10-07
+---
+
+* **Helm Chart**: Introduced two new helm fields `operator.podSecurityContext` and `operator.securityContext` that can be used to configure `securityContext` for Operator deployment through Helm Chart. 

changelog/20251010_fix_split_environment_variables_on_helm_chart.md

@@ -0,0 +1,6 @@
+---
+kind: fix
+date: 2025-10-10
+---
+
+* Fixed parsing of the `customEnvVars` Helm value when values contain `=` characters.

config/crd/bases/mongodbcommunity.mongodb.com_mongodbcommunity.yaml

@@ -240,6 +240,9 @@ spec:
                         x-kubernetes-preserve-unknown-fields: true
                     type: object
                 type: object
+              clusterDomain:
+                format: hostname
+                type: string
               featureCompatibilityVersion:
                 description: |-
                   FeatureCompatibilityVersion configures the feature compatibility version that will

controllers/operator/mongodbreplicaset_controller.go

@@ -656,7 +656,7 @@ func (r *ReconcileMongoDbReplicaSet) applySearchOverrides(ctx context.Context, r
 	if rs.Spec.AdditionalMongodConfig == nil {
 		rs.Spec.AdditionalMongodConfig = mdbv1.NewEmptyAdditionalMongodConfig()
 	}
-	searchMongodConfig := searchcontroller.GetMongodConfigParameters(search)
+	searchMongodConfig := searchcontroller.GetMongodConfigParameters(search, rs.Spec.GetClusterDomain())
 	rs.Spec.AdditionalMongodConfig.AddOption("setParameter", searchMongodConfig["setParameter"])
 
 	if searchcontroller.NeedsSearchCoordinatorRolePolyfill(rs.Spec.GetMongoDBVersion()) {

controllers/searchcontroller/community_search_source.go

@@ -26,8 +26,9 @@ type CommunitySearchSource struct {
 
 func (r *CommunitySearchSource) HostSeeds() []string {
 	seeds := make([]string, r.Spec.Members)
+	clusterDomain := r.Spec.GetClusterDomain()
 	for i := range seeds {
-		seeds[i] = fmt.Sprintf("%s-%d.%s.%s.svc.cluster.local:%d", r.Name, i, r.ServiceName(), r.Namespace, r.GetMongodConfiguration().GetDBPort())
+		seeds[i] = fmt.Sprintf("%s-%d.%s.%s.svc.%s:%d", r.Name, i, r.ServiceName(), r.Namespace, clusterDomain, r.GetMongodConfiguration().GetDBPort())
 	}
 	return seeds
 }

controllers/searchcontroller/enterprise_search_source.go

@@ -24,8 +24,9 @@ func NewEnterpriseResourceSearchSource(mdb *mdbv1.MongoDB) SearchSourceDBResourc
 
 func (r EnterpriseResourceSearchSource) HostSeeds() []string {
 	seeds := make([]string, r.Spec.Members)
+	clusterDomain := r.Spec.GetClusterDomain()
 	for i := range seeds {
-		seeds[i] = fmt.Sprintf("%s-%d.%s.%s.svc.cluster.local:%d", r.Name, i, r.ServiceName(), r.Namespace, r.Spec.GetAdditionalMongodConfig().GetPortOrDefault())
+		seeds[i] = fmt.Sprintf("%s-%d.%s.%s.svc.%s:%d", r.Name, i, r.ServiceName(), r.Namespace, clusterDomain, r.Spec.GetAdditionalMongodConfig().GetPortOrDefault())
 	}
 	return seeds
 }