Skip to content

feat: automatically enable Cilium kube-proxy replacement feature #4565

feat: automatically enable Cilium kube-proxy replacement feature

feat: automatically enable Cilium kube-proxy replacement feature #4565

Triggered via pull request September 3, 2025 23:58
@dkoshkindkoshkin
synchronize #1286
Status Success
Total duration 12s
Artifacts

stacked-prs.yml

on: pull_request_target
Fit to window
Zoom out
Zoom in

Annotations

17 errors
caren-e2e.[It] Quick start Nutanix Cilium ClusterResourceSet topology-failuredomain-cilium-crs Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:ClusterResourceSet]: caren-e2e#L1
Timed out after 600.001s. { "metadata": { "creationTimestamp": null }, "spec": { "version": "", "machineTemplate": { "metadata": {}, "infrastructureRef": {} }, "kubeadmConfigSpec": {} }, "status": { "replicas": 0, "updatedReplicas": 0, "readyReplicas": 0, "unavailableReplicas": 0, "initialized": false, "ready": false } } Expected <bool>: false to be true
caren-e2e.[It] Quick start Nutanix Cilium ClusterResourceSet topology-failuredomain-cilium-crs Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:ClusterResourceSet]: caren-e2e#L1
Timed out after 600.001s. { "metadata": { "creationTimestamp": null }, "spec": { "version": "", "machineTemplate": { "metadata": {}, "infrastructureRef": {} }, "kubeadmConfigSpec": {} }, "status": { "replicas": 0, "updatedReplicas": 0, "readyReplicas": 0, "unavailableReplicas": 0, "initialized": false, "ready": false } } Expected <bool>: false to be true
caren-e2e.[It] Quick start Nutanix Cilium ClusterResourceSet topology-failuredomain-cilium-crs Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:ClusterResourceSet]: caren-e2e#L1
Timed out after 600.000s. { "metadata": { "creationTimestamp": null }, "spec": { "version": "", "machineTemplate": { "metadata": {}, "infrastructureRef": {} }, "kubeadmConfigSpec": {} }, "status": { "replicas": 0, "updatedReplicas": 0, "readyReplicas": 0, "unavailableReplicas": 0, "initialized": false, "ready": false } } Expected <bool>: false to be true
caren-e2e.[It] Self-hosted Docker Cilium ClusterResourceSet topology-cilium-crs Should pivot the bootstrap cluster to a self-hosted cluster [Serial, provider:Docker, cni:Cilium, addonStrategy:ClusterResourceSet]: caren-e2e#L1
Timed out after 600.000s. { "metadata": { "creationTimestamp": null }, "spec": { "version": "", "machineTemplate": { "metadata": {}, "infrastructureRef": {} }, "kubeadmConfigSpec": {} }, "status": { "replicas": 0, "updatedReplicas": 0, "readyReplicas": 0, "unavailableReplicas": 0, "initialized": false, "ready": false } } Expected <bool>: false to be true
caren-e2e.[It] Quick start Docker Cilium ClusterResourceSet topology-cilium-crs Should create a workload cluster [provider:Docker, Serial, cni:Cilium, addonStrategy:ClusterResourceSet]: caren-e2e#L1
Timed out after 600.000s. { "metadata": { "creationTimestamp": null }, "spec": { "version": "", "machineTemplate": { "metadata": {}, "infrastructureRef": {} }, "kubeadmConfigSpec": {} }, "status": { "replicas": 0, "updatedReplicas": 0, "readyReplicas": 0, "unavailableReplicas": 0, "initialized": false, "ready": false } } Expected <bool>: false to be true
caren-e2e.[It] Quick start Docker Cilium HelmAddon topology-cilium-helm-addon Should create a workload cluster [provider:Docker, Serial, cni:Cilium, addonStrategy:HelmAddon]: caren-e2e#L1
Timed out after 300.001s. HelmReleaseProxy quick-start-wqkwwr/cilium-quick-start-aa1zfzzype1c7we6x4oqiwdnoyp7n-h59sw failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Info LastTransitionTime:2025-09-04 00:24:42 +0000 UTC Reason:PreparingToHelmInstall Message:Preparing to to install Helm chart}, revision = 0, full object is: &{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:cilium-quick-start-aa1zfzzype1c7we6x4oqiwdnoyp7n-h59sw GenerateName:cilium-quick-start-aa1zfzzype1c7we6x4oqiwdnoyp7n- Namespace:quick-start-wqkwwr SelfLink: UID:65ad2a68-a68d-4489-bfd0-18487e616b22 ResourceVersion:6049 Generation:1 CreationTimestamp:2025-09-04 00:24:41 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-aa1zfzzype1c7we6x4oqiwdnoyp7n helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:cilium-0199121b-ea73-792a-90fa-cd4676cb709d] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:cilium-0199121b-ea73-792a-90fa-cd4676cb709d UID:34cb7758-e032-4c90-b3e8-aa62e4501400 Controller:0xc0013eea47 BlockOwnerDeletion:0xc0013eea46}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-09-04 00:24:42 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"34cb7758-e032-4c90-b3e8-aa62e4501400\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-09-04 00:24:42 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-wqkwwr Name:quick-start-aa1zfzzype1c7we6x4oqiwdnoyp7n UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:cilium RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:cilium ReleaseNamespace:kube-system Version:1.17.4 Values:cni: chainingMode: portmap exclusive: false hubble: enabled: true tls: auto: enabled: true # enable automatic TLS certificate generation method: cronJob # auto generate certificates using cronJob method certValidityDuration: 60 # certificates validity duration in days (default 2 months) schedule: "0 0 1 * *" # schedule on the 1st day regeneration of each month relay: enabled: true tls: server: enabled: true mtls: true image: useDigest: false priorityClassName: system-cluster-critical ipam: mode: kubernetes image: useDigest: false operator: image: useDigest: false certgen: image: useDigest: false socketLB: hostNamespaceOnly: true envoy: image: useDigest: false kubeProxyReplacement: true k8sServiceHost: auto ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc000f0d7f0} Status:{Conditions:[{Type:Ready Status:False Severity:Info LastTransitionTime:2025-09-04 00:24:42 +0000 UTC Reason:PreparingToHelmInstall Message:Preparing to to install Helm chart} {Type:HelmReleaseReady Status:False Severity:Info LastTransitionTime:2025-09-04 00:24:42 +0000 UTC Reason:PreparingToHelmInstall Message:Preparing to to install Helm chart}] Status: Revision:0 ObservedGeneration:1}} ` Expected <bool>: false to be true
caren-e2e.[It] Quick start Docker Cilium ClusterResourceSet topology-cilium-crs Should create a workload cluster [provider:Docker, Serial, cni:Cilium, addonStrategy:ClusterResourceSet]: caren-e2e#L1
Timed out after 600.001s. { "metadata": { "creationTimestamp": null }, "spec": { "version": "", "machineTemplate": { "metadata": {}, "infrastructureRef": {} }, "kubeadmConfigSpec": {} }, "status": { "replicas": 0, "updatedReplicas": 0, "readyReplicas": 0, "unavailableReplicas": 0, "initialized": false, "ready": false } } Expected <bool>: false to be true
caren-e2e.[It] Quick start Docker Cilium HelmAddon topology-cilium-helm-addon Should create a workload cluster [provider:Docker, Serial, cni:Cilium, addonStrategy:HelmAddon]: caren-e2e#L1
Timed out after 300.000s. HelmReleaseProxy quick-start-7cssaz/cilium-quick-start-4mlgq3m6ie3884ih7mpay9w9oa90d-hkql5 failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Info LastTransitionTime:2025-09-04 00:24:21 +0000 UTC Reason:PreparingToHelmInstall Message:Preparing to to install Helm chart}, revision = 0, full object is: &{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:cilium-quick-start-4mlgq3m6ie3884ih7mpay9w9oa90d-hkql5 GenerateName:cilium-quick-start-4mlgq3m6ie3884ih7mpay9w9oa90d- Namespace:quick-start-7cssaz SelfLink: UID:e48a86f2-2813-4467-a63f-3993d8fc743f ResourceVersion:5956 Generation:1 CreationTimestamp:2025-09-04 00:24:21 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-4mlgq3m6ie3884ih7mpay9w9oa90d helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:cilium-0199121b-a16c-76a3-a637-98f8546c276e] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:cilium-0199121b-a16c-76a3-a637-98f8546c276e UID:1e81cff4-26f9-4c8e-9278-2989d99da5c1 Controller:0xc00378ce27 BlockOwnerDeletion:0xc00378ce26}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-09-04 00:24:21 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"1e81cff4-26f9-4c8e-9278-2989d99da5c1\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-09-04 00:24:21 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-7cssaz Name:quick-start-4mlgq3m6ie3884ih7mpay9w9oa90d UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:cilium RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:cilium ReleaseNamespace:kube-system Version:1.17.4 Values:cni: chainingMode: portmap exclusive: false hubble: enabled: true tls: auto: enabled: true # enable automatic TLS certificate generation method: cronJob # auto generate certificates using cronJob method certValidityDuration: 60 # certificates validity duration in days (default 2 months) schedule: "0 0 1 * *" # schedule on the 1st day regeneration of each month relay: enabled: true tls: server: enabled: true mtls: true image: useDigest: false priorityClassName: system-cluster-critical ipam: mode: kubernetes image: useDigest: false operator: image: useDigest: false certgen: image: useDigest: false socketLB: hostNamespaceOnly: true envoy: image: useDigest: false kubeProxyReplacement: true k8sServiceHost: auto ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc00139ac80} Status:{Conditions:[{Type:Ready Status:False Severity:Info LastTransitionTime:2025-09-04 00:24:21 +0000 UTC Reason:PreparingToHelmInstall Message:Preparing to to install Helm chart} {Type:HelmReleaseReady Status:False Severity:Info LastTransitionTime:2025-09-04 00:24:21 +0000 UTC Reason:PreparingToHelmInstall Message:Preparing to to install Helm chart}] Status: Revision:0 ObservedGeneration:1}} ` Expected <bool>: false to be true
caren-e2e.[It] Quick start Docker Cilium ClusterResourceSet topology-cilium-crs Should create a workload cluster [provider:Docker, Serial, cni:Cilium, addonStrategy:ClusterResourceSet]: caren-e2e#L1
Timed out after 600.001s. { "metadata": { "creationTimestamp": null }, "spec": { "version": "", "machineTemplate": { "metadata": {}, "infrastructureRef": {} }, "kubeadmConfigSpec": {} }, "status": { "replicas": 0, "updatedReplicas": 0, "readyReplicas": 0, "unavailableReplicas": 0, "initialized": false, "ready": false } } Expected <bool>: false to be true
caren-e2e.[It] Quick start Docker Cilium HelmAddon topology-cilium-helm-addon Should create a workload cluster [provider:Docker, Serial, cni:Cilium, addonStrategy:HelmAddon]: caren-e2e#L1
Timed out after 300.001s. HelmReleaseProxy quick-start-j67pu4/cilium-quick-start-cl4mui8fffym8qydnbzqodjlr1i2u-82vxt failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Info LastTransitionTime:2025-09-04 00:24:46 +0000 UTC Reason:PreparingToHelmInstall Message:Preparing to to install Helm chart}, revision = 0, full object is: &{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:cilium-quick-start-cl4mui8fffym8qydnbzqodjlr1i2u-82vxt GenerateName:cilium-quick-start-cl4mui8fffym8qydnbzqodjlr1i2u- Namespace:quick-start-j67pu4 SelfLink: UID:1a2fc327-ef6c-49bc-bf3e-00ce7b62fb23 ResourceVersion:6048 Generation:1 CreationTimestamp:2025-09-04 00:24:46 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-cl4mui8fffym8qydnbzqodjlr1i2u helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:cilium-0199121b-fea5-7822-8393-2a2c18e5e9dc] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:cilium-0199121b-fea5-7822-8393-2a2c18e5e9dc UID:ce3e548d-c082-4b85-91cb-543f3e429175 Controller:0xc003697b77 BlockOwnerDeletion:0xc003697b76}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-09-04 00:24:46 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"ce3e548d-c082-4b85-91cb-543f3e429175\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-09-04 00:24:46 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-j67pu4 Name:quick-start-cl4mui8fffym8qydnbzqodjlr1i2u UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:cilium RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:cilium ReleaseNamespace:kube-system Version:1.17.4 Values:cni: chainingMode: portmap exclusive: false hubble: enabled: true tls: auto: enabled: true # enable automatic TLS certificate generation method: cronJob # auto generate certificates using cronJob method certValidityDuration: 60 # certificates validity duration in days (default 2 months) schedule: "0 0 1 * *" # schedule on the 1st day regeneration of each month relay: enabled: true tls: server: enabled: true mtls: true image: useDigest: false priorityClassName: system-cluster-critical ipam: mode: kubernetes image: useDigest: false operator: image: useDigest: false certgen: image: useDigest: false socketLB: hostNamespaceOnly: true envoy: image: useDigest: false kubeProxyReplacement: true k8sServiceHost: auto ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc000e77cb0} Status:{Conditions:[{Type:Ready Status:False Severity:Info LastTransitionTime:2025-09-04 00:24:46 +0000 UTC Reason:PreparingToHelmInstall Message:Preparing to to install Helm chart} {Type:HelmReleaseReady Status:False Severity:Info LastTransitionTime:2025-09-04 00:24:46 +0000 UTC Reason:PreparingToHelmInstall Message:Preparing to to install Helm chart}] Status: Revision:0 ObservedGeneration:1}} ` Expected <bool>: false to be true
caren-e2e.[It] Self-hosted Docker Cilium ClusterResourceSet topology-cilium-crs Should pivot the bootstrap cluster to a self-hosted cluster [Serial, provider:Docker, cni:Cilium, addonStrategy:ClusterResourceSet]: caren-e2e#L1
Timed out after 600.000s. Timed out waiting for Cluster self-hosted-5pmtsg/self-hosted-wp0zpgg5b8y7uurwsh7kpu8m8kegv to provision Expected <string>: Pending to equal <string>: Provisioned
caren-e2e.[It] Self-hosted Docker Cilium ClusterResourceSet topology-cilium-crs Should pivot the bootstrap cluster to a self-hosted cluster [Serial, provider:Docker, cni:Cilium, addonStrategy:ClusterResourceSet]: caren-e2e#L1
Timed out after 600.000s. { "metadata": { "creationTimestamp": null }, "spec": { "version": "", "machineTemplate": { "metadata": {}, "infrastructureRef": {} }, "kubeadmConfigSpec": {} }, "status": { "replicas": 0, "updatedReplicas": 0, "readyReplicas": 0, "unavailableReplicas": 0, "initialized": false, "ready": false } } Expected <bool>: false to be true