Azure / ARO-RP / 28617042801

39%

push

github

Provision gateway private endpoint even for clusters without egress lockdown (#4932)

* Facilitate rollout of the OTEL logging stack for clusters without egress lockdown

We should now do the following things for *all* clusters, not just egress lockdown clusters:

- Update network policies on the master subnet to ensure NSGs and UDRs don't block communication with the gateway private endpoint
- Create gateway private endpoint in the master subnet, connect the private endpoint to the regional gateway PLS, and approve the connection
- Populate the cluster doc with the gateway private endpoint IP
- Create a gateway doc in Cosmos DB for the cluster
- Ensure the gateway private endpoint IP gets populated in the in-cluster ARO CR
- Ensure the gateway telemetry domain gets populated in the in-cluster ARO CR

All of these things are plumbed into admin updates.

* Small doc update

* Update unit test cases to account for local dev PE/PLS hack

* Copilot feedback

* Address unit test regression from when my changes met Andrew's 429 retry changes

29 of 67 new or added lines in 5 files covered. (43.28%)

30772 of 78269 relevant lines covered (39.32%)

0.45 hits per line