Skip to content

debug-cluster-e2e-aks: add wait step and image override for TLS testing - #83174

Open
kaleemsiddiqu wants to merge 2 commits into
openshift:mainfrom
kaleemsiddiqu:debug-cluster-e2e-aks-azure-tls
Open

debug-cluster-e2e-aks: add wait step and image override for TLS testing#83174
kaleemsiddiqu wants to merge 2 commits into
openshift:mainfrom
kaleemsiddiqu:debug-cluster-e2e-aks-azure-tls

Conversation

@kaleemsiddiqu

@kaleemsiddiqu kaleemsiddiqu commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

Add wait ref and OVERRIDE_HYPERSHIFT_OPERATOR_IMAGE to e2e-aks test for debugging PR openshift/hypershift#8864 (centralized TLS config for cloud-controller-manager). Replace TODO-FILL-IN with the CI registry namespace from the PR's images job before pushing.

Summary by CodeRabbit

  • Updates the openshift/hypershift Azure AKS E2E CI test.
  • Adds a wait reference and the hypershift-azure-run-e2e test step.
  • Sets OVERRIDE_HYPERSHIFT_OPERATOR_IMAGE for centralized TLS debugging.
  • Keeps the image namespace as a TODO-FILL-IN placeholder until the CI registry namespace is available.

Add wait ref and OVERRIDE_HYPERSHIFT_OPERATOR_IMAGE to e2e-aks test
for debugging PR openshift/hypershift#8864 (centralized TLS config
for cloud-controller-manager). Replace TODO-FILL-IN with the CI
registry namespace from the PR's images job before pushing.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Kaleemullah Siddiqui <ksiddiqu@redhat.com>
@coderabbitai

coderabbitai Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

Walkthrough

The e2e-aks test now runs wait followed by hypershift-azure-run-e2e. Existing post-processing steps remain unchanged.

Changes

Azure AKS E2E execution

Layer / File(s) Summary
Configure Azure AKS E2E steps
ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml
The e2e-aks test runs wait followed by hypershift-azure-run-e2e. Existing post-processing steps remain unchanged.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: csrwng, ironcladlou

🚥 Pre-merge checks | ✅ 15
✅ Passed checks (15 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly describes the added wait step and image override for TLS testing in the e2e-aks debug cluster workflow.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed The PR changes only CI YAML entries and static step references; no Ginkgo It, Describe, Context, or When test title changes exist.
Test Structure And Quality ✅ Passed The change is limited to one CI YAML file and contains no Ginkgo It blocks, resource setup, waits, or assertions to review.
Microshift Test Compatibility ✅ Passed The PR changes only CI YAML and adds no Ginkgo It, Describe, Context, or When declarations, so the MicroShift test compatibility check is not applicable.
Single Node Openshift (Sno) Test Compatibility ✅ Passed The pull request changes only CI YAML configuration and adds no Ginkgo e2e tests, so the SNO compatibility check is not applicable.
Topology-Aware Scheduling Compatibility ✅ Passed The PR changes only CI YAML by adding wait and hypershift-azure-run-e2e test references; it adds no deployment, operator, controller, or scheduling constraints.
Ote Binary Stdout Contract ✅ Passed The commit changes only a CI YAML test definition; it adds no OTE binary, suite setup, initializer, or process-level stdout write.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed The PR changes only YAML test-step references; it adds no Ginkgo test code, IPv4 assumptions, or new external connectivity logic.
No-Weak-Crypto ✅ Passed The aggregate PR diff adds only wait and hypershift-azure-run-e2e; searches found no MD5, SHA1, DES, RC4, Blowfish, ECB, custom crypto, or secret-comparison usage.
Container-Privileges ✅ Passed The combined PR diff adds only wait and hypershift-azure-run-e2e refs; scans found no prohibited privilege settings in added lines or the changed YAML.
No-Sensitive-Data-In-Logs ✅ Passed The net PR diff adds only wait and hypershift-azure-run-e2e references; it adds no credential, token, PII, customer data, or hostname logging.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands.

@openshift-ci

openshift-ci Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: kaleemsiddiqu
Once this PR has been reviewed and has the lgtm label, please assign bryan-cox for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
openshift-ci Bot requested review from csrwng and ironcladlou August 10, 2026 13:13

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml`:
- Line 181: Update OVERRIDE_HYPERSHIFT_OPERATOR_IMAGE to use the actual CI
registry namespace assigned to this pipeline’s images job instead of the
placeholder ci-op-abc123xyz, while preserving the existing registry path,
pipeline tag, and hypershift-operator image reference.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 2649072d-5005-4158-8e7a-a07537013a88

📥 Commits

Reviewing files that changed from the base of the PR and between 9be95ee and f61a4e6.

📒 Files selected for processing (1)
  • ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml

Comment thread ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml Outdated
@kaleemsiddiqu

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-hypershift-main-e2e-aks

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@kaleemsiddiqu: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@kaleemsiddiqu

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-hypershift-main-e2e-aks

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@kaleemsiddiqu: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

Image from release-openshift-origin-installer-launch-aws-modern
job 2086756237780717568 on build10.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Kaleemullah Siddiqui <ksiddiqu@redhat.com>
@kaleemsiddiqu
kaleemsiddiqu force-pushed the debug-cluster-e2e-aks-azure-tls branch from 48b17d2 to efc294e Compare August 11, 2026 08:25
@coderabbitai

coderabbitai Bot commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

Note

GitHub couldn't provide a complete incremental comparison for this pull request, so CodeRabbit is performing a full review instead. This review may take a little longer.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml`:
- Around line 184-186: Run make update to regenerate the affected CI
configuration, then review the generated diffs. Use the generated Prow job
configuration, preserving its --target=e2e-aks reference and avoiding manually
inlining test steps or running separate update commands.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: e1221724-e40e-4312-9b90-569a71547252

📥 Commits

Reviewing files that changed from the base of the PR and between 365e2a0 and efc294e.

📒 Files selected for processing (1)
  • ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml

Comment on lines +184 to +186
test:
- ref: wait
- ref: hypershift-azure-run-e2e

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -u

file='ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml'

printf '%s\n' '--- working tree ---'
git status --short

printf '%s\n' '--- relevant YAML ---'
sed -n '165,200p' "$file"

printf '%s\n' '--- diff summary ---'
git diff --stat -- "$file" Makefile ci-operator

printf '%s\n' '--- diff for relevant YAML ---'
git diff -- "$file"

printf '%s\n' '--- repository instructions and generation targets ---'
find .. -name AGENTS.md -o -name CONTRIBUTING.md -o -name Makefile | sort | head -80
rg -n --no-heading '(^|[[:space:]])(update|registry-metadata|ci-operator-config|jobs):|make update|zz_generated_metadata|prow' \
  Makefile ci-operator 2>/dev/null | head -200

printf '%s\n' '--- likely generated files ---'
git ls-files | rg '(^|/)(zz_generated_metadata|prow|jobs|ci-operator-config|registry-metadata)' | head -200

Repository: openshift/release

Length of output: 45095


🏁 Script executed:

#!/bin/bash
set -u

printf '%s\n' '--- Makefile target definitions ---'
sed -n '65,125p' Makefile

printf '%s\n' '--- hypershift generated jobs ---'
find ci-operator/jobs -maxdepth 4 -type f -iname '*hypershift*' -print | sort

printf '%s\n' '--- references to the affected config and steps ---'
rg -n --no-heading 'openshift-hypershift-main|hypershift-azure-run-e2e|as: e2e-aks' \
  ci-operator/jobs ci-operator/config/openshift/hypershift 2>/dev/null | head -120

printf '%s\n' '--- metadata in the affected config ---'
rg -n --no-heading -A12 -B2 'zz_generated_metadata:' \
  ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml

Repository: openshift/release

Length of output: 32887


🏁 Script executed:

#!/bin/bash
set -u

job='ci-operator/jobs/openshift/hypershift/openshift-hypershift-main-presubmits.yaml'
config='ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml'

printf '%s\n' '--- generated e2e-aks job ---'
sed -n '270,372p' "$job"

printf '%s\n' '--- generated job references to affected steps ---'
rg -n --no-heading -C3 'hypershift-azure-run-e2e|ref: wait|e2e-aks' "$job" | head -120

printf '%s\n' '--- config metadata and all generated metadata references ---'
rg -n --no-heading -C2 'zz_generated_metadata:|branch: main|org: openshift|repo: hypershift' "$config" | head -40

printf '%s\n' '--- read-only structural check ---'
python3 - <<'PY'
from pathlib import Path

config = Path("ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml").read_text()
job = Path("ci-operator/jobs/openshift/hypershift/openshift-hypershift-main-presubmits.yaml").read_text()

print("config_has_wait:", "- ref: wait" in config)
print("config_has_hypershift_azure_run_e2e:", "- ref: hypershift-azure-run-e2e" in config)
print("job_has_hypershift_azure_run_e2e:", "hypershift-azure-run-e2e" in job)
print("job_has_ref_wait:", "ref: wait" in job)
print("job_has_e2e_aks_job:", "pull-ci-openshift-hypershift-main-e2e-aks" in job)
PY

Repository: openshift/release

Length of output: 7030


Run make update and review the generated diffs.

make update already runs jobs, ci-operator-config, and registry-metadata; no separate command sequence is required. The generated Prow job references --target=e2e-aks and does not inline the test steps.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml`
around lines 184 - 186, Run make update to regenerate the affected CI
configuration, then review the generated diffs. Use the generated Prow job
configuration, preserving its --target=e2e-aks reference and avoiding manually
inlining test steps or running separate update commands.

Sources: Coding guidelines, Learnings

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

[REHEARSALNOTIFIER]
@kaleemsiddiqu: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-openshift-hypershift-main-e2e-aks openshift/hypershift presubmit Ci-operator config changed
Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@kaleemsiddiqu

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-hypershift-main-e2e-aks

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@kaleemsiddiqu: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-ci

openshift-ci Bot commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

@kaleemsiddiqu: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant