feat: Preflight check opt-out #4061
GitHub Actions / e2e test report
failed
Jun 12, 2025 in 0s
40 tests run, 31 passed, 8 skipped, 1 failed.
Annotations
Check failure on line 1 in caren-e2e
github-actions / e2e test report
caren-e2e.[It] Quick start Nutanix Cilium HelmAddon topology-cilium-helm-addon Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:HelmAddon]
Timed out after 300.001s.
HelmReleaseProxy quick-start-wlirpm/cilium-quick-start-pahaaban345w4zsjb9t4h2ou7bicts0rceigom0mttcs failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Error LastTransitionTime:2025-06-12 21:09:21 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.56:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")}, revision = 1, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:cilium-quick-start-pahaaban345w4zsjb9t4h2ou7bicts0rceigom0mttcs GenerateName:cilium-quick-start-pahaaban345w4zsjb9t4h2ou7bicts0rceigom0ff82ibnbr7kw- Namespace:quick-start-wlirpm SelfLink: UID:593299c3-c0d0-4881-8cf8-ff3569a54dd9 ResourceVersion:6558 Generation:1 CreationTimestamp:2025-06-12 20:59:19 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-pahaaban345w4zsjb9t4h2ou7bicts0rceigom0ff82ibnbr7kw helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:cilium-019765ee-4866-7d16-a734-182b60cae9cd] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:cilium-019765ee-4866-7d16-a734-182b60cae9cd UID:004a08e5-5786-4a4b-bd99-848ced69fe11 Controller:0xc0009c5a57 BlockOwnerDeletion:0xc0009c5a56}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-06-12 20:59:19 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"004a08e5-5786-4a4b-bd99-848ced69fe11\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-06-12 21:09:21 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-wlirpm Name:quick-start-pahaaban345w4zsjb9t4h2ou7bicts0rceigom0ff82ibnbr7kw UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:cilium RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:cilium ReleaseNamespace:kube-system Version:1.17.3 Values:cni:
chainingMode: portmap
exclusive: false
hubble:
enabled: true
tls:
auto:
enabled: true # enable automatic TLS certificate generation
method: cronJob # auto generate certificates using cronJob method
certValidityDuration: 60 # certificates validity duration in days (default 2 months)
schedule: "0 0 1 * *" # schedule on the 1st day regeneration of each month
relay:
enabled: true
tls:
server:
enabled: true
mtls: true
image:
useDigest: false
priorityClassName: system-cluster-critical
ipam:
mode: kubernetes
image:
useDigest: false
operator:
image:
useDigest: false
certgen:
image:
useDigest: false
socketLB:
hostNamespaceOnly: true
envoy:
image:
useDigest: false ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc0005821e0} Status:{Conditions:[{Type:Ready Status:False Severity:Error LastTransitionTime:2025-06-12 21:09:21 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.56:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-06-12 20:59:19 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Error LastTransitionTime:2025-06-12 21:09:21 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.56:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")}] Status:failed Revision:1 ObservedGeneration:1}}
`
Expected
<bool>: false
to be true
Raw output
[FAILED] Timed out after 300.001s.
HelmReleaseProxy quick-start-wlirpm/cilium-quick-start-pahaaban345w4zsjb9t4h2ou7bicts0rceigom0mttcs failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Error LastTransitionTime:2025-06-12 21:09:21 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.56:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")}, revision = 1, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:cilium-quick-start-pahaaban345w4zsjb9t4h2ou7bicts0rceigom0mttcs GenerateName:cilium-quick-start-pahaaban345w4zsjb9t4h2ou7bicts0rceigom0ff82ibnbr7kw- Namespace:quick-start-wlirpm SelfLink: UID:593299c3-c0d0-4881-8cf8-ff3569a54dd9 ResourceVersion:6558 Generation:1 CreationTimestamp:2025-06-12 20:59:19 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-pahaaban345w4zsjb9t4h2ou7bicts0rceigom0ff82ibnbr7kw helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:cilium-019765ee-4866-7d16-a734-182b60cae9cd] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:cilium-019765ee-4866-7d16-a734-182b60cae9cd UID:004a08e5-5786-4a4b-bd99-848ced69fe11 Controller:0xc0009c5a57 BlockOwnerDeletion:0xc0009c5a56}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-06-12 20:59:19 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"004a08e5-5786-4a4b-bd99-848ced69fe11\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-06-12 21:09:21 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-wlirpm Name:quick-start-pahaaban345w4zsjb9t4h2ou7bicts0rceigom0ff82ibnbr7kw UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:cilium RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:cilium ReleaseNamespace:kube-system Version:1.17.3 Values:cni:
chainingMode: portmap
exclusive: false
hubble:
enabled: true
tls:
auto:
enabled: true # enable automatic TLS certificate generation
method: cronJob # auto generate certificates using cronJob method
certValidityDuration: 60 # certificates validity duration in days (default 2 months)
schedule: "0 0 1 * *" # schedule on the 1st day regeneration of each month
relay:
enabled: true
tls:
server:
enabled: true
mtls: true
image:
useDigest: false
priorityClassName: system-cluster-critical
ipam:
mode: kubernetes
image:
useDigest: false
operator:
image:
useDigest: false
certgen:
image:
useDigest: false
socketLB:
hostNamespaceOnly: true
envoy:
image:
useDigest: false ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc0005821e0} Status:{Conditions:[{Type:Ready Status:False Severity:Error LastTransitionTime:2025-06-12 21:09:21 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.56:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-06-12 20:59:19 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Error LastTransitionTime:2025-06-12 21:09:21 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.56:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")}] Status:failed Revision:1 ObservedGeneration:1}}
`
Expected
<bool>: false
to be true
In [It] at: /home/runner/_work/cluster-api-runtime-extensions-nutanix/cluster-api-runtime-extensions-nutanix/test/e2e/helmreleaseproxy_helpers.go:60 @ 06/12/25 21:15:25.568
Loading