feat: Add support for deploying K8s Agent as Helm Addon during cluster deployment #4956
42 tests run, 30 passed, 8 skipped, 4 failed.
Annotations
Check failure on line 1 in caren-e2e
github-actions / e2e test report
caren-e2e.[It] Quick start Nutanix Cilium HelmAddon topology-cilium-helm-addon Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:HelmAddon]
Timed out after 300.001s.
HelmReleaseProxy quick-start-jnx104/konnector-agent-quick-start-8mcbdbc7c0pfeqbo4m8fz0p2bkcj607l5s6 failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Info LastTransitionTime:2025-10-30 07:58:57 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-upgrade}, revision = 2, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:konnector-agent-quick-start-8mcbdbc7c0pfeqbo4m8fz0p2bkcj607l5s6 GenerateName:konnector-agent-quick-start-8mcbdbc7c0pfeqbo4m8fz0p2bkcj60vewwz4hd1sa3shbbhp8hf- Namespace:quick-start-jnx104 SelfLink: UID:0efa97c6-3444-4ceb-9750-5e223b4f7b61 ResourceVersion:5678 Generation:1 CreationTimestamp:2025-10-30 07:56:18 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-8mcbdbc7c0pfeqbo4m8fz0p2bkcj60vewwz4hd1sa3shbbhp8hf helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:konnector-agent-019a3419-c1e2-7e06-bf74-19e01ac31869] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:konnector-agent-019a3419-c1e2-7e06-bf74-19e01ac31869 UID:bd9783ed-01ce-4b9d-80d2-3fd949fa1ab5 Controller:0xc002afc11d BlockOwnerDeletion:0xc002afc11c}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 07:56:18 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"bd9783ed-01ce-4b9d-80d2-3fd949fa1ab5\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 07:58:57 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-jnx104 Name:quick-start-8mcbdbc7c0pfeqbo4m8fz0p2bkcj60vewwz4hd1sa3shbbhp8hf UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:konnector-agent RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:konnector-agent ReleaseNamespace:ntnx-system Version:1.3.0-rc.1 Values:agent:
name: konnector-agent
image:
repository: quay.io/karbon
name: k8s-agent
pc:
port: 9440
insecure: true #set this to true if PC does not have https enabled
endpoint: pc.ci.nkp.sh # eg: ip or fqdn
k8sClusterName: quick-start-8mcbdbc7c0pfeqbo4m8fz0p2bkcj60vewwz4hd1sa3shbbhp8hf
k8sDistribution: NKP
createSecret: false ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc001d8a180} Status:{Conditions:[{Type:Ready Status:False Severity:Info LastTransitionTime:2025-10-30 07:58:57 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-upgrade} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-10-30 07:56:18 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Info LastTransitionTime:2025-10-30 07:58:57 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-upgrade}] Status:pending-upgrade Revision:2 ObservedGeneration:1}}
`
Expected
<bool>: false
to be true
Raw output
[FAILED] Timed out after 300.001s.
HelmReleaseProxy quick-start-jnx104/konnector-agent-quick-start-8mcbdbc7c0pfeqbo4m8fz0p2bkcj607l5s6 failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Info LastTransitionTime:2025-10-30 07:58:57 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-upgrade}, revision = 2, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:konnector-agent-quick-start-8mcbdbc7c0pfeqbo4m8fz0p2bkcj607l5s6 GenerateName:konnector-agent-quick-start-8mcbdbc7c0pfeqbo4m8fz0p2bkcj60vewwz4hd1sa3shbbhp8hf- Namespace:quick-start-jnx104 SelfLink: UID:0efa97c6-3444-4ceb-9750-5e223b4f7b61 ResourceVersion:5678 Generation:1 CreationTimestamp:2025-10-30 07:56:18 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-8mcbdbc7c0pfeqbo4m8fz0p2bkcj60vewwz4hd1sa3shbbhp8hf helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:konnector-agent-019a3419-c1e2-7e06-bf74-19e01ac31869] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:konnector-agent-019a3419-c1e2-7e06-bf74-19e01ac31869 UID:bd9783ed-01ce-4b9d-80d2-3fd949fa1ab5 Controller:0xc002afc11d BlockOwnerDeletion:0xc002afc11c}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 07:56:18 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"bd9783ed-01ce-4b9d-80d2-3fd949fa1ab5\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 07:58:57 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-jnx104 Name:quick-start-8mcbdbc7c0pfeqbo4m8fz0p2bkcj60vewwz4hd1sa3shbbhp8hf UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:konnector-agent RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:konnector-agent ReleaseNamespace:ntnx-system Version:1.3.0-rc.1 Values:agent:
name: konnector-agent
image:
repository: quay.io/karbon
name: k8s-agent
pc:
port: 9440
insecure: true #set this to true if PC does not have https enabled
endpoint: pc.ci.nkp.sh # eg: ip or fqdn
k8sClusterName: quick-start-8mcbdbc7c0pfeqbo4m8fz0p2bkcj60vewwz4hd1sa3shbbhp8hf
k8sDistribution: NKP
createSecret: false ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc001d8a180} Status:{Conditions:[{Type:Ready Status:False Severity:Info LastTransitionTime:2025-10-30 07:58:57 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-upgrade} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-10-30 07:56:18 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Info LastTransitionTime:2025-10-30 07:58:57 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-upgrade}] Status:pending-upgrade Revision:2 ObservedGeneration:1}}
`
Expected
<bool>: false
to be true
In [It] at: /home/runner/_work/cluster-api-runtime-extensions-nutanix/cluster-api-runtime-extensions-nutanix/test/e2e/helmreleaseproxy_helpers.go:60 @ 10/30/25 08:04:09.393
There were additional failures detected after the initial failure. These are visible in the timeline
Check failure on line 1 in caren-e2e
github-actions / e2e test report
caren-e2e.[It] Quick start Nutanix Cilium ClusterResourceSet topology-with-failuredomains-cilium-crs Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:ClusterResourceSet]
Timed out after 600.000s.
No Control Plane machines came into existence.
Expected
<bool>: false
to be true
Raw output
[FAILED] Timed out after 600.000s.
No Control Plane machines came into existence.
Expected
<bool>: false
to be true
In [It] at: /home/runner/go/pkg/mod/sigs.k8s.io/cluster-api/[email protected]/framework/controlplane_helpers.go:153 @ 10/30/25 08:01:57.303
Check failure on line 1 in caren-e2e
github-actions / e2e test report
caren-e2e.[It] Quick start Nutanix Cilium ClusterResourceSet topology-cilium-crs Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:ClusterResourceSet]
Timed out after 300.000s.
HelmReleaseProxy quick-start-562gni/snapshot-controller-quick-start-h5hmuf2jabnlith6whibf7cypvj44wt failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Info LastTransitionTime:2025-10-30 07:54:27 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install}, revision = 1, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:snapshot-controller-quick-start-h5hmuf2jabnlith6whibf7cypvj44wt GenerateName:snapshot-controller-quick-start-h5hmuf2jabnlith6whibf7cypvl6t4j62iii0q7etjfbhxpij55- Namespace:quick-start-562gni SelfLink: UID:fe8a8854-f314-4885-aaa1-1eaf592f5169 ResourceVersion:3823 Generation:1 CreationTimestamp:2025-10-30 07:54:22 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-h5hmuf2jabnlith6whibf7cypvl6t4j62iii0q7etjfbhxpij55 helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:snapshot-controller-019a3419-c25a-7123-8570-4bf18c5eff06] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:snapshot-controller-019a3419-c25a-7123-8570-4bf18c5eff06 UID:16e1dcf2-26d9-4d70-ad1c-25d50b3e12d3 Controller:0xc000c9a0f7 BlockOwnerDeletion:0xc000c9a0f6}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 07:54:22 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"16e1dcf2-26d9-4d70-ad1c-25d50b3e12d3\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 07:54:27 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-562gni Name:quick-start-h5hmuf2jabnlith6whibf7cypvl6t4j62iii0q7etjfbhxpij55 UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:snapshot-controller RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:snapshot-controller ReleaseNamespace:kube-system Version:4.1.0 Values:controller:
priorityClassName: system-cluster-critical
tolerations:
- key: CriticalAddonsOnly
operator: Exists
- effect: NoExecute
operator: Exists
tolerationSeconds: 300
- effect: NoSchedule
key: node-role.kubernetes.io/control-plane
operator: Exists
webhook:
enabled: false ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc0009441e0} Status:{Conditions:[{Type:Ready Status:False Severity:Info LastTransitionTime:2025-10-30 07:54:27 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-10-30 07:54:22 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Info LastTransitionTime:2025-10-30 07:54:27 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install}] Status:pending-install Revision:1 ObservedGeneration:1}}
`
Expected
<bool>: false
to be true
Raw output
[FAILED] Timed out after 300.000s.
HelmReleaseProxy quick-start-562gni/snapshot-controller-quick-start-h5hmuf2jabnlith6whibf7cypvj44wt failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Info LastTransitionTime:2025-10-30 07:54:27 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install}, revision = 1, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:snapshot-controller-quick-start-h5hmuf2jabnlith6whibf7cypvj44wt GenerateName:snapshot-controller-quick-start-h5hmuf2jabnlith6whibf7cypvl6t4j62iii0q7etjfbhxpij55- Namespace:quick-start-562gni SelfLink: UID:fe8a8854-f314-4885-aaa1-1eaf592f5169 ResourceVersion:3823 Generation:1 CreationTimestamp:2025-10-30 07:54:22 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-h5hmuf2jabnlith6whibf7cypvl6t4j62iii0q7etjfbhxpij55 helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:snapshot-controller-019a3419-c25a-7123-8570-4bf18c5eff06] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:snapshot-controller-019a3419-c25a-7123-8570-4bf18c5eff06 UID:16e1dcf2-26d9-4d70-ad1c-25d50b3e12d3 Controller:0xc000c9a0f7 BlockOwnerDeletion:0xc000c9a0f6}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 07:54:22 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"16e1dcf2-26d9-4d70-ad1c-25d50b3e12d3\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 07:54:27 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-562gni Name:quick-start-h5hmuf2jabnlith6whibf7cypvl6t4j62iii0q7etjfbhxpij55 UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:snapshot-controller RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:snapshot-controller ReleaseNamespace:kube-system Version:4.1.0 Values:controller:
priorityClassName: system-cluster-critical
tolerations:
- key: CriticalAddonsOnly
operator: Exists
- effect: NoExecute
operator: Exists
tolerationSeconds: 300
- effect: NoSchedule
key: node-role.kubernetes.io/control-plane
operator: Exists
webhook:
enabled: false ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc0009441e0} Status:{Conditions:[{Type:Ready Status:False Severity:Info LastTransitionTime:2025-10-30 07:54:27 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-10-30 07:54:22 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Info LastTransitionTime:2025-10-30 07:54:27 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install}] Status:pending-install Revision:1 ObservedGeneration:1}}
`
Expected
<bool>: false
to be true
In [It] at: /home/runner/_work/cluster-api-runtime-extensions-nutanix/cluster-api-runtime-extensions-nutanix/test/e2e/helmreleaseproxy_helpers.go:60 @ 10/30/25 08:03:00.073
There were additional failures detected after the initial failure. These are visible in the timeline
Check failure on line 1 in caren-e2e
github-actions / e2e test report
caren-e2e.[It] Quick start Nutanix Cilium HelmAddon topology-with-failuredomains-cilium-helm-addon Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:HelmAddon]
Timed out after 300.001s.
HelmReleaseProxy quick-start-taccj4/cilium-quick-start-uis6a42y3uaedepvcfn7fm738s594u8ajw3lvohpvp5j failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Error LastTransitionTime:2025-10-30 07:56:37 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.57:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")}, revision = 1, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:cilium-quick-start-uis6a42y3uaedepvcfn7fm738s594u8ajw3lvohpvp5j GenerateName:cilium-quick-start-uis6a42y3uaedepvcfn7fm738s594u8ajw3lvohanue6od7h9cb- Namespace:quick-start-taccj4 SelfLink: UID:28be0343-9599-4f1e-bcbd-a784c6f3134e ResourceVersion:4917 Generation:1 CreationTimestamp:2025-10-30 07:56:28 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-uis6a42y3uaedepvcfn7fm738s594u8ajw3lvohanue6od7h9cb helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:cilium-019a3419-c321-7a46-ae87-241703dfc679] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:cilium-019a3419-c321-7a46-ae87-241703dfc679 UID:29d928cb-e5d3-40c4-aca9-1a6a14fc16c1 Controller:0xc000f8c157 BlockOwnerDeletion:0xc000f8c156}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 07:56:28 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"29d928cb-e5d3-40c4-aca9-1a6a14fc16c1\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 07:56:37 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-taccj4 Name:quick-start-uis6a42y3uaedepvcfn7fm738s594u8ajw3lvohanue6od7h9cb UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:cilium RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:cilium ReleaseNamespace:kube-system Version:1.18.2 Values:cni:
exclusive: false
hubble:
enabled: true
tls:
auto:
enabled: true # enable automatic TLS certificate generation
method: cronJob # auto generate certificates using cronJob method
certValidityDuration: 60 # certificates validity duration in days (default 2 months)
schedule: "0 0 1 * *" # schedule on the 1st day regeneration of each month
relay:
enabled: true
tls:
server:
enabled: true
mtls: true
image:
useDigest: false
priorityClassName: system-cluster-critical
ipam:
mode: kubernetes
image:
useDigest: false
operator:
image:
useDigest: false
certgen:
image:
useDigest: false
socketLB:
hostNamespaceOnly: true
envoy:
image:
useDigest: false
k8sServiceHost: "10.23.132.57"
k8sServicePort: "6443"
kubeProxyReplacement: true
tunnelProtocol: geneve
loadBalancer:
mode: dsr
dsrDispatch: geneve ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc0002f70d0} Status:{Conditions:[{Type:Ready Status:False Severity:Error LastTransitionTime:2025-10-30 07:56:37 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.57:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-10-30 07:56:28 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Error LastTransitionTime:2025-10-30 07:56:37 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.57:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")}] Status:failed Revision:1 ObservedGeneration:1}}
`
Expected
<bool>: false
to be true
Raw output
[FAILED] Timed out after 300.001s.
HelmReleaseProxy quick-start-taccj4/cilium-quick-start-uis6a42y3uaedepvcfn7fm738s594u8ajw3lvohpvp5j failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Error LastTransitionTime:2025-10-30 07:56:37 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.57:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")}, revision = 1, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:cilium-quick-start-uis6a42y3uaedepvcfn7fm738s594u8ajw3lvohpvp5j GenerateName:cilium-quick-start-uis6a42y3uaedepvcfn7fm738s594u8ajw3lvohanue6od7h9cb- Namespace:quick-start-taccj4 SelfLink: UID:28be0343-9599-4f1e-bcbd-a784c6f3134e ResourceVersion:4917 Generation:1 CreationTimestamp:2025-10-30 07:56:28 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-uis6a42y3uaedepvcfn7fm738s594u8ajw3lvohanue6od7h9cb helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:cilium-019a3419-c321-7a46-ae87-241703dfc679] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:cilium-019a3419-c321-7a46-ae87-241703dfc679 UID:29d928cb-e5d3-40c4-aca9-1a6a14fc16c1 Controller:0xc000f8c157 BlockOwnerDeletion:0xc000f8c156}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 07:56:28 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"29d928cb-e5d3-40c4-aca9-1a6a14fc16c1\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 07:56:37 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-taccj4 Name:quick-start-uis6a42y3uaedepvcfn7fm738s594u8ajw3lvohanue6od7h9cb UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:cilium RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:cilium ReleaseNamespace:kube-system Version:1.18.2 Values:cni:
exclusive: false
hubble:
enabled: true
tls:
auto:
enabled: true # enable automatic TLS certificate generation
method: cronJob # auto generate certificates using cronJob method
certValidityDuration: 60 # certificates validity duration in days (default 2 months)
schedule: "0 0 1 * *" # schedule on the 1st day regeneration of each month
relay:
enabled: true
tls:
server:
enabled: true
mtls: true
image:
useDigest: false
priorityClassName: system-cluster-critical
ipam:
mode: kubernetes
image:
useDigest: false
operator:
image:
useDigest: false
certgen:
image:
useDigest: false
socketLB:
hostNamespaceOnly: true
envoy:
image:
useDigest: false
k8sServiceHost: "10.23.132.57"
k8sServicePort: "6443"
kubeProxyReplacement: true
tunnelProtocol: geneve
loadBalancer:
mode: dsr
dsrDispatch: geneve ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc0002f70d0} Status:{Conditions:[{Type:Ready Status:False Severity:Error LastTransitionTime:2025-10-30 07:56:37 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.57:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-10-30 07:56:28 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Error LastTransitionTime:2025-10-30 07:56:37 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.57:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")}] Status:failed Revision:1 ObservedGeneration:1}}
`
Expected
<bool>: false
to be true
In [It] at: /home/runner/_work/cluster-api-runtime-extensions-nutanix/cluster-api-runtime-extensions-nutanix/test/e2e/helmreleaseproxy_helpers.go:60 @ 10/30/25 08:04:18.639
There were additional failures detected after the initial failure. These are visible in the timeline