test-e2e stable failures

[anmazzotti]

Tested with:

KUBE_VERSION="1.30.4" just test-cluster-class-import

Test is failing with:

kubectl --context kind-dev apply -f testdata/config.yaml
fleetaddonconfig.addons.cluster.x-k8s.io/fleet-addon-config created
kubectl wait fleetaddonconfigs fleet-addon-config --timeout=150s --for=condition=Ready=true
error: timed out waiting for the condition on fleetaddonconfigs/fleet-addon-config
error: Recipe `deploy` failed on line 162 with exit code 1

FleetAddonConfig:

apiVersion: addons.cluster.x-k8s.io/v1alpha1
kind: FleetAddonConfig
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"addons.cluster.x-k8s.io/v1alpha1","kind":"FleetAddonConfig","metadata":{"annotations":{},"name":"fleet-addon-config"},"spec":{"cluster":{"applyClassGroup":true,"hostNetwork":true,"namespaceSelector":{"matchLabels":{"import":""}},"patchResource":true,"selector":{"matchLabels":{"import":""}},"setOwnerReferences":true},"clusterClass":{"patchResource":true,"setOwnerReferences":true},"config":{"server":{"inferLocal":true}},"install":{"followLatest":true}}}
  creationTimestamp: "2025-06-03T15:58:03Z"
  generation: 1
  name: fleet-addon-config
  resourceVersion: "2614"
  uid: 0601ea0a-6259-4f29-bbc0-f1f6aba7fa4c
spec:
  cluster:
    applyClassGroup: true
    hostNetwork: true
    namespaceSelector:
      matchLabels:
        import: ""
    patchResource: true
    selector:
      matchLabels:
        import: ""
    setOwnerReferences: true
  clusterClass:
    patchResource: true
    setOwnerReferences: true
  config:
    server:
      inferLocal: true
  install:
    followLatest: true
status:
  conditions:
  - lastTransitionTime: "2025-06-03T15:58:06Z"
    message: 'FleetAddonConfig reconcile error: Fleet config error: Fleet repo search
      error: Deserialize search error: EOF while parsing a value at line 1 column
      0'
    observedGeneration: 1
    reason: Ready
    status: "False"
    type: Ready
  - lastTransitionTime: "2025-06-03T15:58:04Z"
    message: 'Repo added: https://rancher.github.io/fleet-helm-charts/'
    observedGeneration: 1
    reason: RepoAdd
    status: "True"
    type: RepoAdd
  - lastTransitionTime: "2025-06-03T15:58:05Z"
    message: 'Repo updated: https://rancher.github.io/fleet-helm-charts/'
    observedGeneration: 1
    reason: RepoUpdate
    status: "True"
    type: RepoUpdate
  installedVersion: null

helm-manager logs:

2025-06-03T15:58:02.700105Z  INFO kube_runtime::controller: press ctrl+c to shut down gracefully
Error: looks like "https://rancher.github.io/fleet-helm-charts/" is not a valid chart repository or cannot be reached: Get "https://rancher.github.io/fleet-helm-charts/index.yaml": tls: failed to verify certificate: x509: certificate is valid for git.nue.suse.com, git.suse.de, gitlab-registry.prg2.suse.org, gitlab-registry.suse.de, gitlab.nue.suse.com, gitlab.prg2.suse.org, gitlab.suse.de, gitorious.suse.de, not rancher.github.io
Error: no repositories found. You must add one before updating
Error: no repositories configured
2025-06-03T15:58:06.887444Z  WARN reconciling object: controller::controller: reconcile failed: FleetConfigError(RepoSearch(DeserializeInfoError(Error("EOF while parsing a value", line: 1, column: 0)))) object.ref=FleetAddonConfig.v1alpha1.addons.cluster.x-k8s.io/fleet-addon-config object.reason=object updated
Error: looks like "https://rancher.github.io/fleet-helm-charts/" is not a valid chart repository or cannot be reached: Get "https://rancher.github.io/fleet-helm-charts/index.yaml": tls: failed to verify certificate: x509: certificate is valid for git.nue.suse.com, git.suse.de, gitlab-registry.prg2.suse.org, gitlab-registry.suse.de, gitlab.nue.suse.com, gitlab.prg2.suse.org, gitlab.suse.de, gitorious.suse.de, not rancher.github.io
Error: no repositories found. You must add one before updating
Error: no repositories configured
2025-06-03T15:58:20.094643Z  WARN reconciling object: controller::controller: reconcile failed: FleetConfigError(RepoSearch(DeserializeInfoError(Error("EOF while parsing a value", line: 1, column: 0)))) object.ref=FleetAddonConfig.v1alpha1.addons.cluster.x-k8s.io/fleet-addon-config object.reason=error policy requested retry
Error: looks like "https://rancher.github.io/fleet-helm-charts/" is not a valid chart repository or cannot be reached: Get "https://rancher.github.io/fleet-helm-charts/index.yaml": tls: failed to verify certificate: x509: certificate is valid for git.nue.suse.com, git.suse.de, gitlab-registry.prg2.suse.org, gitlab-registry.suse.de, gitlab.nue.suse.com, gitlab.prg2.suse.org, gitlab.suse.de, gitorious.suse.de, not rancher.github.io
Error: no repositories found. You must add one before updating
Error: no repositories configured
2025-06-03T15:58:33.396321Z  WARN reconciling object: controller::controller: reconcile failed: FleetConfigError(RepoSearch(DeserializeInfoError(Error("EOF while parsing a value", line: 1, column: 0)))) object.ref=FleetAddonConfig.v1alpha1.addons.cluster.x-k8s.io/fleet-addon-config object.reason=error policy requested retry
Error: looks like "https://rancher.github.io/fleet-helm-charts/" is not a valid chart repository or cannot be reached: Get "https://rancher.github.io/fleet-helm-charts/index.yaml": tls: failed to verify certificate: x509: certificate is valid for git.nue.suse.com, git.suse.de, gitlab-registry.prg2.suse.org, gitlab-registry.suse.de, gitlab.nue.suse.com, gitlab.prg2.suse.org, gitlab.suse.de, gitorious.suse.de, not rancher.github.io
Error: no repositories found. You must add one before updating
Error: no repositories configured
.
.
.

[Danil-Grigorev]

FYI: #311 is currently in the merge queue and doesn’t seem to be affected by the issue. Seems to be a flake, my guess it is probably related to the usage of EIO hosted runners.

[anmazzotti]

I tested this again and I can no longer reproduce it locally.
The certificate verification issue is no longer there and the test passes.

Indeed not related to CAAPF.
Closing this issue then. Thank you.