Skip to content

CNTRLPLANE-631: Handle node-ca daemon removal in monitoring exceptions - #2

Open
devin-ai-integration[bot] wants to merge 1 commit into
mainfrom
devin/1773251862-cntrlplane-631-hypershift-image-registry-ca
Open

CNTRLPLANE-631: Handle node-ca daemon removal in monitoring exceptions#2
devin-ai-integration[bot] wants to merge 1 commit into
mainfrom
devin/1773251862-cntrlplane-631-hypershift-image-registry-ca

Conversation

@devin-ai-integration

Copy link
Copy Markdown

Summary

Adds "NodeCADaemonRemoved" as an accepted exception reason for the image-registry cluster operator in two upgrade monitoring test paths:

  1. Degraded state exceptions (testUpgradeOperatorStateTransitions): When image-registry reports Degraded=True with reason NodeCADaemonRemoved, it is now treated as a known issue (OCPBUGS-66225) rather than a test failure.
  2. Progressing state exceptions (testUpgradeOperatorProgressingStateTransitions): When image-registry reports Progressing=True with reason NodeCADaemonRemoved, it is treated as a known issue (OCPBUGS-62626).

This supports the broader CNTRLPLANE-631 effort to distribute the image registry CA via MCO bootstrap (--bootstrap-certs) in HyperShift, which will eventually allow removal of the node-ca daemon set.

Review & Testing Checklist for Human

  • Verify the "NodeCADaemonRemoved" reason string matches what the image-registry operator will actually emit. This string does not currently exist anywhere in the codebase — it is a forward-looking addition. If the image-registry operator uses a different reason string when the node-ca daemonset is removed, this exception will silently never match.
  • Confirm OCPBUGS-66225 and OCPBUGS-62626 are the correct bug references for tracking node-ca removal-related transient conditions during upgrades.
  • Validate that this change is needed now vs. when the image-registry operator actually starts emitting this reason. If the reason doesn't exist yet, this code is a no-op but could cause confusion about what reasons are actually handled.

Notes

Part of a three-repo change set for CNTRLPLANE-631. Companion PRs exist in openshift-devin/enhancements (enhancement doc update) and openshift-devin/cluster-version-operator (CVO render --image-registry-ca-file flag).

Link to Devin Session: https://redhat.devinenterprise.com/sessions/53fe46443c224d87b66235e740659631
Requested by: brcox

Add NodeCADaemonRemoved reason to the image-registry operator exception
handlers for both degraded state and progressing state transitions.
This ensures that when the node-ca daemon set is removed (as part of
the MCO-based image registry CA distribution), the monitoring tests
correctly handle the transient degraded/progressing conditions.

Ref: CNTRLPLANE-631
Co-Authored-By: brcox <brcox@redhat.com>
@devin-ai-integration

Copy link
Copy Markdown
Author

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

  • Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
  • Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

  • Disable automatic comment and CI monitoring

@bryan-cox

Copy link
Copy Markdown

/close

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant