Merge branch 'master' of github.com:mongodb/mongodb-kubernetes into remove-agent-matrix

Author: nammn

.dockerignore

@@ -54,7 +54,6 @@ tools.go
 deploy/
 config/manifests/
 public/
-!/public/tools/multicluster/go.mod
 
 # Documentation files
 docs/

.evergreen-functions.yml

@@ -664,7 +664,7 @@ functions:
           make test-race
     - command: gotest.parse_files
       params:
-        files: [ "src/github.com/mongodb/mongodb-kubernetes/*.suite", "src/github.com/mongodb/mongodb-kubernetes/public/tools/multicluster/*.suite", "src/github.com/mongodb/mongodb-kubernetes/docker/mongodb-kubernetes-init-ops-manager/mmsconfiguration/*.suite" ]
+        files: [ "src/github.com/mongodb/mongodb-kubernetes/*.suite", "src/github.com/mongodb/mongodb-kubernetes/docker/mongodb-kubernetes-init-ops-manager/mmsconfiguration/*.suite" ]
 
   test_python_unit:
     - command: shell.exec

public/.evergreen.yml .evergreen-kubectlplugin.ymlpublic/.evergreen.yml renamed to .evergreen-kubectlplugin.yml

@@ -45,7 +45,7 @@ functions:
     - command: shell.exec
       type: setup
       params:
-        working_dir: src/github.com/mongodb/mongodb-kubernetes/public/tools/multicluster
+        working_dir: src/github.com/mongodb/mongodb-kubernetes
         include_expansions_in_env:
           - GRS_USERNAME
           - GRS_PASSWORD

.evergreen-periodic-builds.yaml

@@ -103,6 +103,22 @@ tasks:
         vars:
           image_name: mongodb-agent-1-daily
 
+  - name: periodic_build_agent_2
+    exec_timeout_secs: 43200
+    commands:
+      - func: enable_QEMU
+      - func: pipeline
+        vars:
+          image_name: mongodb-agent-2-daily
+
+  - name: periodic_build_agent_3
+    exec_timeout_secs: 43200
+    commands:
+      - func: enable_QEMU
+      - func: pipeline
+        vars:
+          image_name: mongodb-agent-3-daily
+
   #TODO should we still build the community operator?
   - name: periodic_build_community_operator
     commands:
@@ -142,6 +158,8 @@ task_groups:
       - periodic_build_sbom_cli
       - periodic_build_agent
       - periodic_build_agent_1
+      - periodic_build_agent_2
+      - periodic_build_agent_3
 
   - name: periodic_teardown_task_group
     <<: *setup_group

.evergreen.yml

@@ -11,7 +11,7 @@ variables:
 
   - &ops_manager_70_latest 7.0.15 # The order/index is important, since these are anchors. Please do not change
 
-  - &ops_manager_80_latest 8.0.7 # The order/index is important, since these are anchors. Please do not change
+  - &ops_manager_80_latest 8.0.11 # The order/index is important, since these are anchors. Please do not change
 
   # The dependency unification between static and non-static is intentional here.
   # Even though some images are exclusive, in EVG they all are built once and in parallel.

.githooks/pre-commit

@@ -33,7 +33,11 @@ function generate_standalone_yaml() {
   mkdir -p "${charttmpdir}"
 
   FILES=(
-    "${charttmpdir}/mongodb-kubernetes/templates/operator-roles.yaml"
+    "${charttmpdir}/mongodb-kubernetes/templates/operator-roles-base.yaml"
+    "${charttmpdir}/mongodb-kubernetes/templates/operator-roles-clustermongodbroles.yaml"
+    "${charttmpdir}/mongodb-kubernetes/templates/operator-roles-pvc-resize.yaml"
+    "${charttmpdir}/mongodb-kubernetes/templates/operator-roles-telemetry.yaml"
+    "${charttmpdir}/mongodb-kubernetes/templates/operator-roles-webhook.yaml"
     "${charttmpdir}/mongodb-kubernetes/templates/database-roles.yaml"
     "${charttmpdir}/mongodb-kubernetes/templates/operator-sa.yaml"
     "${charttmpdir}/mongodb-kubernetes/templates/operator.yaml"
@@ -45,22 +49,25 @@ function generate_standalone_yaml() {
   cat "helm_chart/crds/"* >public/crds.yaml
 
   # generate openshift public example
-  rm -rf "${charttmpdir:?}/*"
+  rm -rf "${charttmpdir:?}"/*
   helm template --namespace mongodb -f helm_chart/values.yaml helm_chart --output-dir "${charttmpdir}" --values helm_chart/values-openshift.yaml ${HELM_OPTS[@]}
   cat "${FILES[@]}" >public/mongodb-kubernetes-openshift.yaml
 
   # generate openshift files for kustomize used for generating OLM bundle
-  rm -rf "${charttmpdir:?}/*"
+  rm -rf "${charttmpdir:?}"/*
   helm template --namespace mongodb -f helm_chart/values.yaml helm_chart --output-dir "${charttmpdir}" --values helm_chart/values-openshift.yaml \
     --set operator.webhook.registerConfiguration=false --set operator.webhook.installClusterRole=false ${HELM_OPTS[@]}
 
   # update kustomize files for OLM bundle with files generated for openshift
   cp "${charttmpdir}/mongodb-kubernetes/templates/operator.yaml" config/manager/manager.yaml
   cp "${charttmpdir}/mongodb-kubernetes/templates/database-roles.yaml" config/rbac/database-roles.yaml
-  cp "${charttmpdir}/mongodb-kubernetes/templates/operator-roles.yaml" config/rbac/operator-roles.yaml
+  cp "${charttmpdir}/mongodb-kubernetes/templates/operator-roles-base.yaml" config/rbac/operator-roles-base.yaml
+  cp "${charttmpdir}/mongodb-kubernetes/templates/operator-roles-clustermongodbroles.yaml" config/rbac/operator-roles-clustermongodbroles.yaml
+  cp "${charttmpdir}/mongodb-kubernetes/templates/operator-roles-pvc-resize.yaml" config/rbac/operator-roles-pvc-resize.yaml
+  cp "${charttmpdir}/mongodb-kubernetes/templates/operator-roles-telemetry.yaml" config/rbac/operator-roles-telemetry.yaml
 
   # generate multi-cluster public example
-  rm -rf "${charttmpdir:?}/*"
+  rm -rf "${charttmpdir:?}"/*
   helm template --namespace mongodb -f helm_chart/values.yaml helm_chart --output-dir "${charttmpdir}" --values helm_chart/values-multi-cluster.yaml ${HELM_OPTS[@]}
   cat "${FILES[@]}" >public/mongodb-kubernetes-multi-cluster.yaml
 

.github/actions/setup-ubuntu-host/action.yml

@@ -0,0 +1,19 @@
+name: 'Setup Ubuntu Runner Host'
+inputs:
+  python-version:
+    description: 'Python version to use'
+    required: true
+runs:
+  using: "composite"
+  steps:
+    - name: setup python
+      uses: actions/setup-python@v5
+      with:
+        python-version: ${{inputs.python-version}}
+        cache: 'pip' # caching pip dependencies
+    - name: Install dependencies
+      shell: bash
+      run: |
+        sudo apt-get install libldap2-dev libsasl2-dev # Required for python-ldap
+        pip install --upgrade pip
+        pip install -r requirements.txt

.github/pull_request_template.md

@@ -7,17 +7,9 @@
 <!-- Enter your proof that it works here.-->
 
 ## Checklist
+
 - [ ] Have you linked a jira ticket and/or is the ticket in the title?
 - [ ] Have you checked whether your jira ticket required DOCSP changes?
-- [ ] Have you checked for release_note changes?
-
-## Reminder (Please remove this when merging)
-- Please try to Approve or Reject Changes the PR, keep PRs in review as short as possible
-- Our Short Guide for PRs: [Link](https://docs.google.com/document/d/1T93KUtdvONq43vfTfUt8l92uo4e4SEEvFbIEKOxGr44/edit?tab=t.0)
-- Remember the following Communication Standards - use comment prefixes for clarity:
-  * **blocking**: Must be addressed before approval.
-  * **follow-up**: Can be addressed in a later PR or ticket.
-  * **q**: Clarifying question.
-  * **nit**: Non-blocking suggestions.
-  * **note**: Side-note, non-actionable. Example: Praise 
-  * --> no prefix is considered a question
+- [ ] Have you added changelog file?
+    - use `skip-changelog` label if not needed
+    - refer to [Changelog files and Release Notes](https://github.com/mongodb/mongodb-kubernetes/blob/master/CONTRIBUTING.md#changelog-files-and-release-notes) section in CONTRIBUTING.md for more details

.github/workflows/preview_release_notes.yml

@@ -0,0 +1,46 @@
+name: Preview Release Notes
+on:
+  push:
+    branches:
+      - master
+      - release-*
+  pull_request:
+    branches:
+      - master
+      - release-*
+
+jobs:
+  preview_release_notes:
+    name: Preview Release Notes
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: '0'
+      - name: Setup host
+        uses: ./.github/actions/setup-ubuntu-host
+        with:
+          python-version: '${{ vars.PYTHON_VERSION }}'
+      - name: Generate Release Notes
+        id: generate_release_notes
+        run: python -m scripts.release.release_notes -s $INITIAL_COMMIT_SHA -v $INITIAL_VERSION -o release_notes_tmp.md
+        env:
+          INITIAL_COMMIT_SHA: ${{ vars.RELEASE_INITIAL_COMMIT_SHA }}
+          INITIAL_VERSION: ${{ vars.RELEASE_INITIAL_VERSION }}
+      - name: Add disclaimer to release notes preview
+        run: |
+          echo -e "_:warning: (this preview might not be accurate if the PR is not rebased on current master branch)_\n" > release_notes_preview.md
+          cat release_notes_tmp.md >> release_notes_preview.md
+      - name: Summarize results
+        run: cat release_notes_preview.md >> $GITHUB_STEP_SUMMARY
+      - name: Update PR comment
+        # If the PR is from a fork, we cannot update the comment using read only permissions
+        if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository
+        run: gh issue comment $ISSUE --edit-last --create-if-none --body-file release_notes_preview.md
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          ISSUE: ${{ github.event.pull_request.html_url }}

.github/workflows/require_changelog.yml

@@ -0,0 +1,35 @@
+name: Validate Changelog Requirement
+on:
+  pull_request:
+    branches:
+      - master
+      - release-*
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
+      - unlabeled
+
+jobs:
+  validate-changelog:
+    name: Check for valid changelog entry
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: '0'
+      - name: Setup host
+        uses: ./.github/actions/setup-ubuntu-host
+        with:
+          python-version: '${{ vars.PYTHON_VERSION }}'
+      - name: Check if changelog entry file was added in this PR
+        run: |
+          set -o pipefail
+          python -m scripts.release.check_changelog -b $BASE_SHA -f $FAIL_ON_NO_CHANGES | tee >> $GITHUB_STEP_SUMMARY
+        env:
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          FAIL_ON_NO_CHANGES: ${{ !contains(github.event.pull_request.labels.*.name, 'skip-changelog') }}