Skip to content

feat: Add support for deploying K8s Agent as Helm Addon during cluster deployment #4962

feat: Add support for deploying K8s Agent as Helm Addon during cluster deployment

feat: Add support for deploying K8s Agent as Helm Addon during cluster deployment #4962

GitHub Actions / e2e test report failed Oct 30, 2025 in 0s

42 tests run, 30 passed, 8 skipped, 4 failed.

Annotations

Check failure on line 1 in caren-e2e

See this annotation in the file changed.

@github-actions github-actions / e2e test report

caren-e2e.[It] Quick start Nutanix Cilium HelmAddon topology-cilium-helm-addon Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:HelmAddon]

Timed out after 600.000s.
No Control Plane machines came into existence. 
Expected
    <bool>: false
to be true
Raw output
[FAILED] Timed out after 600.000s.
No Control Plane machines came into existence. 
Expected
    <bool>: false
to be true
In [It] at: /home/runner/go/pkg/mod/sigs.k8s.io/cluster-api/[email protected]/framework/controlplane_helpers.go:153 @ 10/30/25 17:03:13.359

Check failure on line 1 in caren-e2e

See this annotation in the file changed.

@github-actions github-actions / e2e test report

caren-e2e.[It] Quick start Nutanix Cilium ClusterResourceSet topology-cilium-crs Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:ClusterResourceSet]

Timed out after 300.001s.
HelmReleaseProxy quick-start-xuj560/nutanix-csi-storage-quick-start-dwobgeh23y8a3rl8apa1psbjbmlvxbf failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Error LastTransitionTime:2025-10-30 16:57:36 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.68:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")}, revision = 1, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:nutanix-csi-storage-quick-start-dwobgeh23y8a3rl8apa1psbjbmlvxbf GenerateName:nutanix-csi-storage-quick-start-dwobgeh23y8a3rl8apa1psbjbm4i20g76qj041o7qq9qoyx3iys- Namespace:quick-start-xuj560 SelfLink: UID:4c07391a-f4fa-4c71-a3dd-6cee45b702fe ResourceVersion:4880 Generation:1 CreationTimestamp:2025-10-30 16:55:50 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-dwobgeh23y8a3rl8apa1psbjbm4i20g76qj041o7qq9qoyx3iys helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:nutanix-csi-019a3609-72ba-7450-8dbf-0e6727c871a8] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:nutanix-csi-019a3609-72ba-7450-8dbf-0e6727c871a8 UID:520ec9e5-d500-4efd-b081-3ab7250ddcdd Controller:0xc000efc807 BlockOwnerDeletion:0xc000efc806}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 16:55:50 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"520ec9e5-d500-4efd-b081-3ab7250ddcdd\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 16:57:36 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-xuj560 Name:quick-start-dwobgeh23y8a3rl8apa1psbjbm4i20g76qj041o7qq9qoyx3iys UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:nutanix-csi-storage RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:nutanix-csi ReleaseNamespace:ntnx-system Version:3.3.8 Values:# Disable creating the Prism Central credentials Secret, the Secret will be created by the handler.
createPrismCentralSecret: false
# Disable creating the Prism Element credentials Secret, it won't be used the CSI driver as configured here.
createSecret: false
pcSecretName: nutanix-csi-credentials

tolerations:
  - key: CriticalAddonsOnly
    operator: Exists
  - effect: NoExecute
    operator: Exists
    tolerationSeconds: 300
  - effect: NoSchedule
    operator: Exists ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc00068a480} Status:{Conditions:[{Type:Ready Status:False Severity:Error LastTransitionTime:2025-10-30 16:57:36 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.68:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-10-30 16:55:50 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Error LastTransitionTime:2025-10-30 16:57:36 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.68:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")}] Status:failed Revision:1 ObservedGeneration:1}}
`
Expected
    <bool>: false
to be true
Raw output
[FAILED] Timed out after 300.001s.
HelmReleaseProxy quick-start-xuj560/nutanix-csi-storage-quick-start-dwobgeh23y8a3rl8apa1psbjbmlvxbf failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Error LastTransitionTime:2025-10-30 16:57:36 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.68:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")}, revision = 1, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:nutanix-csi-storage-quick-start-dwobgeh23y8a3rl8apa1psbjbmlvxbf GenerateName:nutanix-csi-storage-quick-start-dwobgeh23y8a3rl8apa1psbjbm4i20g76qj041o7qq9qoyx3iys- Namespace:quick-start-xuj560 SelfLink: UID:4c07391a-f4fa-4c71-a3dd-6cee45b702fe ResourceVersion:4880 Generation:1 CreationTimestamp:2025-10-30 16:55:50 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-dwobgeh23y8a3rl8apa1psbjbm4i20g76qj041o7qq9qoyx3iys helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:nutanix-csi-019a3609-72ba-7450-8dbf-0e6727c871a8] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:nutanix-csi-019a3609-72ba-7450-8dbf-0e6727c871a8 UID:520ec9e5-d500-4efd-b081-3ab7250ddcdd Controller:0xc000efc807 BlockOwnerDeletion:0xc000efc806}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 16:55:50 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"520ec9e5-d500-4efd-b081-3ab7250ddcdd\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-30 16:57:36 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-xuj560 Name:quick-start-dwobgeh23y8a3rl8apa1psbjbm4i20g76qj041o7qq9qoyx3iys UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:nutanix-csi-storage RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:nutanix-csi ReleaseNamespace:ntnx-system Version:3.3.8 Values:# Disable creating the Prism Central credentials Secret, the Secret will be created by the handler.
createPrismCentralSecret: false
# Disable creating the Prism Element credentials Secret, it won't be used the CSI driver as configured here.
createSecret: false
pcSecretName: nutanix-csi-credentials

tolerations:
  - key: CriticalAddonsOnly
    operator: Exists
  - effect: NoExecute
    operator: Exists
    tolerationSeconds: 300
  - effect: NoSchedule
    operator: Exists ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc00068a480} Status:{Conditions:[{Type:Ready Status:False Severity:Error LastTransitionTime:2025-10-30 16:57:36 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.68:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-10-30 16:55:50 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Error LastTransitionTime:2025-10-30 16:57:36 +0000 UTC Reason:HelmInstallOrUpgradeFailed Message:Kubernetes cluster unreachable: Get "https://10.23.132.68:6443/version?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")}] Status:failed Revision:1 ObservedGeneration:1}}
`
Expected
    <bool>: false
to be true
In [It] at: /home/runner/_work/cluster-api-runtime-extensions-nutanix/cluster-api-runtime-extensions-nutanix/test/e2e/helmreleaseproxy_helpers.go:60 @ 10/30/25 17:05:09.721

There were additional failures detected after the initial failure. These are visible in the timeline

Check failure on line 1 in caren-e2e

See this annotation in the file changed.

@github-actions github-actions / e2e test report

caren-e2e.[It] Quick start Nutanix Cilium HelmAddon topology-with-failuredomains-cilium-helm-addon Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:HelmAddon]

Timed out after 600.000s.
Timed out waiting for 1 nodes to be created for MachineDeployment quick-start-0hgwa3/quick-start-nz7jmz5a1i6ffcloin97ivt1cth7s0ji92qn45j6t8dj3npgrdf
The function passed to Eventually failed at /home/runner/go/pkg/mod/sigs.k8s.io/cluster-api/[email protected]/framework/machinedeployment_helpers.go:127 with:
Expected
    <int>: 0
to equal
    <int>: 1
Raw output
[FAILED] Timed out after 600.000s.
Timed out waiting for 1 nodes to be created for MachineDeployment quick-start-0hgwa3/quick-start-nz7jmz5a1i6ffcloin97ivt1cth7s0ji92qn45j6t8dj3npgrdf
The function passed to Eventually failed at /home/runner/go/pkg/mod/sigs.k8s.io/cluster-api/[email protected]/framework/machinedeployment_helpers.go:127 with:
Expected
    <int>: 0
to equal
    <int>: 1
In [It] at: /home/runner/go/pkg/mod/sigs.k8s.io/cluster-api/[email protected]/framework/machinedeployment_helpers.go:128 @ 10/30/25 17:08:53.456

There were additional failures detected after the initial failure. These are visible in the timeline

Check failure on line 1 in caren-e2e

See this annotation in the file changed.

@github-actions github-actions / e2e test report

caren-e2e.[It] Quick start Nutanix Cilium ClusterResourceSet topology-with-failuredomains-cilium-crs Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:ClusterResourceSet]

Timed out after 600.001s.
Expected
    <bool>: false
to be true
Raw output
[FAILED] Timed out after 600.001s.
Expected
    <bool>: false
to be true
In [It] at: /home/runner/go/pkg/mod/sigs.k8s.io/cluster-api/[email protected]/framework/node_helpers.go:56 @ 10/30/25 17:08:54.715

There were additional failures detected after the initial failure. These are visible in the timeline