Skip to content

MGMT-23639: image-policy override on ENABLE_KUBE_API for operator hub - #2806

Merged
openshift-merge-bot[bot] merged 1 commit into
openshift:masterfrom
andrej1991:investigate_kube_api
May 15, 2026
Merged

MGMT-23639: image-policy override on ENABLE_KUBE_API for operator hub#2806
openshift-merge-bot[bot] merged 1 commit into
openshift:masterfrom
andrej1991:investigate_kube_api

Conversation

@andrej1991

@andrej1991 andrej1991 commented May 11, 2026

Copy link
Copy Markdown
Contributor

Run assisted_installer_config_override only when ENABLE_KUBE_API=true
after operator deploy.sh. Unconditional invocation did not fix SNO
live-ISO; REST/operator jobs will be handled separately.
Docstring: clarify the helper is for kube-API CI (operator hub).

@openshift-ci openshift-ci Bot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label May 11, 2026
@openshift-ci
openshift-ci Bot requested review from adriengentil and omertuc May 11, 2026 11:03
@andrej1991
andrej1991 force-pushed the investigate_kube_api branch from a59beb8 to 1419c71 Compare May 11, 2026 16:25
@openshift-ci openshift-ci Bot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels May 11, 2026
Comment on lines +14 to +32
NAMESPACE="${NAMESPACE:-assisted-installer}"
CM_NAME="${ASSISTED_INSTALLER_CONFIG_OVERRIDE_CM_NAME:-assisted-installer-config-override}"
ASC_NAME="${ASSISTED_INSTALLER_CONFIG_OVERRIDE_ASC_NAME:-agent}"

kubectl apply -f - <<EOF
apiVersion: v1
kind: ConfigMap
metadata:
name: ${CM_NAME}
namespace: ${NAMESPACE}
data:
LOG_LEVEL: "debug"
OPENSHIFT_INSTALL_EXPERIMENTAL_DISABLE_IMAGE_POLICY: "true"
EOF

kubectl patch "agentserviceconfig/${ASC_NAME}" -n "${NAMESPACE}" --type=merge -p "$(cat <<PATCH
{"metadata":{"annotations":{"unsupported.agent-install.openshift.io/assisted-service-configmap":"${CM_NAME}"}}}
PATCH
)"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Comment thread src/update_assisted_service_cm.py Outdated
("ENABLE_SKIP_MCO_REBOOT", ""),
("ENABLE_SOFT_TIMEOUTS", ""),
# Passed to openshift-install on nodes when set (e.g. CI/nightly image policy); kind/minikube path.
("OPENSHIFT_INSTALL_EXPERIMENTAL_DISABLE_IMAGE_POLICY", ""),

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why ?

Comment thread scripts/deploy_assisted_service.sh Outdated
Comment on lines +163 to +164
if [[ "${ASSISTED_INSTALLER_CONFIG_OVERRIDE:-}" != "false" ]] && {
[[ "${ASSISTED_INSTALLER_CONFIG_OVERRIDE:-false}" == "true" ]] || [[ "${ENABLE_KUBE_API:-false}" == "true" ]]

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

not sure i understand the confition

@danmanor

Copy link
Copy Markdown
Contributor

@andrej1991 Please fix the description and title

@andrej1991
andrej1991 force-pushed the investigate_kube_api branch from 1419c71 to 2a5b358 Compare May 12, 2026 13:03
@openshift-ci openshift-ci Bot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels May 12, 2026
@andrej1991
andrej1991 force-pushed the investigate_kube_api branch 2 times, most recently from 6b5c87e to 5294a35 Compare May 12, 2026 15:45
@andrej1991 andrej1991 changed the title investigating the kube-api tests MGMT-23639: image-policy override on ENABLE_KUBE_API for operator hub May 12, 2026
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label May 12, 2026
@openshift-ci-robot

openshift-ci-robot commented May 12, 2026

Copy link
Copy Markdown

@andrej1991: This pull request references MGMT-23639 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the task to target the "5.0.0" version, but no target version was set.

Details

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@andrej1991
andrej1991 force-pushed the investigate_kube_api branch 2 times, most recently from 058e67d to 9b0526b Compare May 12, 2026 18:05
@andrej1991

Copy link
Copy Markdown
Contributor Author

/test e2e-metal-assisted-ha-kube-api-ipv4-4-22

1 similar comment
@andrej1991

Copy link
Copy Markdown
Contributor Author

/test e2e-metal-assisted-ha-kube-api-ipv4-4-22

@andrej1991

Copy link
Copy Markdown
Contributor Author

/test e2e-metal-sno-live-iso

@andrej1991

Copy link
Copy Markdown
Contributor Author

/test e2e-metal-assisted-ha-kube-api-ipv4-4-22

@andrej1991
andrej1991 force-pushed the investigate_kube_api branch from 9b0526b to 313d32d Compare May 13, 2026 14:41
@andrej1991

Copy link
Copy Markdown
Contributor Author

/retest

@andrej1991
andrej1991 force-pushed the investigate_kube_api branch 3 times, most recently from c4b3749 to 925f324 Compare May 13, 2026 21:17
@andrej1991

Copy link
Copy Markdown
Contributor Author

/retest

@andrej1991
andrej1991 force-pushed the investigate_kube_api branch from 925f324 to d5f099b Compare May 14, 2026 08:13
@andrej1991

Copy link
Copy Markdown
Contributor Author

/test e2e-metal-assisted-ha-kube-api-ipv4-4-22

@andrej1991

Copy link
Copy Markdown
Contributor Author

The job e2e-metal-assisted-ha-kube-api-ipb6-4-22 failed in the step e2e-metal-assisted-ha-kube-api-ipv6-4-22-ofcir-release, because of it could not resolve the hostname of the ofcir cluster:
"NFO[2026-05-15T13:44:28Z] Logs for container test in pod e2e-metal-assisted-ha-kube-api-ipv6-4-22-ofcir-release:
INFO[2026-05-15T13:44:28Z] ************ ofcir packet teardown command ************
Releasing CIR cir-0072
head: cannot open '/tmp/secret/install-status.txt' for reading: No such file or directory
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed

0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (6) Could not resolve host: ofcir.apps-int.master.ci.devcluster.openshift.com
Warning: Problem : timeout. Will retry in 60 seconds. 1 retries left.

0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (6) Could not resolve host: ofcir.apps-int.master.ci.devcluster.openshift.com"

It is unrelated to the current test.

@andrej1991

Copy link
Copy Markdown
Contributor Author

The job e2e-metal-assisted-ha-kube-api-ipv4-4-22 failed in the step e2e-metal-assisted-ha-kube-api-ipv4-4-22-ofcir-release, which is the post phase of the test flow. Unrelated to the current test.
INFO[2026-05-15T13:59:05Z] Running step e2e-metal-assisted-ha-kube-api-ipv4-4-22-ofcir-release.
INFO[2026-05-15T14:00:12Z] Logs for container test in pod e2e-metal-assisted-ha-kube-api-ipv4-4-22-ofcir-release:
INFO[2026-05-15T14:00:12Z] ************ ofcir packet teardown command ************
Releasing CIR cir-0076
head: cannot open '/tmp/secret/install-status.txt' for reading: No such file or directory
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed

0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (6) Could not resolve host: ofcir.apps-int.master.ci.devcluster.openshift.com
Warning: Problem : timeout. Will retry in 60 seconds. 1 retries left.

0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (6) Could not resolve host: ofcir.apps-int.master.ci.devcluster.openshift.com

@rccrdpccl

Copy link
Copy Markdown
Contributor

/lgtm
/approve

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label May 15, 2026
@openshift-ci

openshift-ci Bot commented May 15, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: andrej1991, rccrdpccl

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label May 15, 2026
@andrej1991

Copy link
Copy Markdown
Contributor Author

/override e2e-metal-assisted-ha-kube-api-ipv4-4-22

@openshift-ci

openshift-ci Bot commented May 15, 2026

Copy link
Copy Markdown

@andrej1991: andrej1991 unauthorized: /override is restricted to Repo administrators, approvers in top level OWNERS file, and the following github teams:openshift: openshift-release-oversight openshift-staff-engineers openshift-sustaining-engineers.

Details

In response to this:

/override e2e-metal-assisted-ha-kube-api-ipv4-4-22

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@rccrdpccl

Copy link
Copy Markdown
Contributor

/override e2e-metal-assisted-ha-kube-api-ipv4-4-22

@openshift-ci

openshift-ci Bot commented May 15, 2026

Copy link
Copy Markdown

@rccrdpccl: /override requires failed status contexts, check run or a prowjob name to operate on.
The following unknown contexts/checkruns were given:

  • e2e-metal-assisted-ha-kube-api-ipv4-4-22

Only the following failed contexts/checkruns were expected:

  • ci/prow/ansible-lint
  • ci/prow/e2e-metal-assisted-4-22
  • ci/prow/e2e-metal-assisted-ha-kube-api-ipv4-4-22
  • ci/prow/e2e-metal-assisted-ha-kube-api-ipv6-4-22
  • ci/prow/e2e-metal-sno-live-iso
  • ci/prow/images
  • ci/prow/lint
  • pull-ci-openshift-assisted-test-infra-master-ansible-lint
  • pull-ci-openshift-assisted-test-infra-master-e2e-metal-assisted-4-22
  • pull-ci-openshift-assisted-test-infra-master-e2e-metal-assisted-ha-kube-api-ipv4-4-22
  • pull-ci-openshift-assisted-test-infra-master-e2e-metal-assisted-ha-kube-api-ipv6-4-22
  • pull-ci-openshift-assisted-test-infra-master-e2e-metal-sno-live-iso
  • pull-ci-openshift-assisted-test-infra-master-images
  • pull-ci-openshift-assisted-test-infra-master-lint
  • tide

If you are trying to override a checkrun that has a space in it, you must put a double quote on the context.

Details

In response to this:

/override e2e-metal-assisted-ha-kube-api-ipv4-4-22

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@rccrdpccl

Copy link
Copy Markdown
Contributor

/override ci/prow/e2e-metal-assisted-ha-kube-api-ipv4-4-22

@rccrdpccl

Copy link
Copy Markdown
Contributor

/override ci/prow/e2e-metal-assisted-ha-kube-api-ipv6-4-22

@openshift-ci

openshift-ci Bot commented May 15, 2026

Copy link
Copy Markdown

@rccrdpccl: Overrode contexts on behalf of rccrdpccl: ci/prow/e2e-metal-assisted-ha-kube-api-ipv4-4-22

Details

In response to this:

/override ci/prow/e2e-metal-assisted-ha-kube-api-ipv4-4-22

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci

openshift-ci Bot commented May 15, 2026

Copy link
Copy Markdown

@rccrdpccl: Overrode contexts on behalf of rccrdpccl: ci/prow/e2e-metal-assisted-ha-kube-api-ipv6-4-22

Details

In response to this:

/override ci/prow/e2e-metal-assisted-ha-kube-api-ipv6-4-22

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci

openshift-ci Bot commented May 15, 2026

Copy link
Copy Markdown

@andrej1991: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@openshift-merge-bot
openshift-merge-bot Bot merged commit 9c81af3 into openshift:master May 15, 2026
8 checks passed
@andrej1991

Copy link
Copy Markdown
Contributor Author

/cherry-pick release-ocm-2.17

@openshift-cherrypick-robot

Copy link
Copy Markdown

@andrej1991: new pull request created: #2811

Details

In response to this:

/cherry-pick release-ocm-2.17

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@andrej1991

Copy link
Copy Markdown
Contributor Author

/cherry-pick release-ocm-2.16

@andrej1991

Copy link
Copy Markdown
Contributor Author

/cherry-pick release-ocm-2.15

@openshift-cherrypick-robot

Copy link
Copy Markdown

@andrej1991: new pull request created: #2812

Details

In response to this:

/cherry-pick release-ocm-2.16

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-cherrypick-robot

Copy link
Copy Markdown

@andrej1991: new pull request created: #2813

Details

In response to this:

/cherry-pick release-ocm-2.15

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@andrej1991

Copy link
Copy Markdown
Contributor Author

/cherry-pick release-ocm-2.15

@openshift-cherrypick-robot

Copy link
Copy Markdown

@andrej1991: new pull request created: #2816

Details

In response to this:

/cherry-pick release-ocm-2.15

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants