Skip to content

feat: ensure Cilium kube-proxy is enabled when kube-proxy is disabled #4988

feat: ensure Cilium kube-proxy is enabled when kube-proxy is disabled

feat: ensure Cilium kube-proxy is enabled when kube-proxy is disabled #4988

GitHub Actions / e2e test report failed Oct 31, 2025 in 0s

42 tests run, 32 passed, 8 skipped, 2 failed.

Annotations

Check failure on line 1 in caren-e2e

See this annotation in the file changed.

@github-actions github-actions / e2e test report

caren-e2e.[It] Quick start Nutanix Cilium HelmAddon topology-with-failuredomains-cilium-helm-addon Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:HelmAddon]

Timed out after 300.001s.
HelmReleaseProxy quick-start-n1mnwj/cilium-quick-start-7ubts0eymdji2tu0pxyxj3x81jcb2fpy07v0w1zkm76x failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Info LastTransitionTime:2025-10-31 21:28:36 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install}, revision = 1, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:cilium-quick-start-7ubts0eymdji2tu0pxyxj3x81jcb2fpy07v0w1zkm76x GenerateName:cilium-quick-start-7ubts0eymdji2tu0pxyxj3x81jcb2fpy07v0w1zeashaewxykpj- Namespace:quick-start-n1mnwj SelfLink: UID:b4a0d2f0-647a-4f3b-8b87-75d003a1b596 ResourceVersion:4240 Generation:1 CreationTimestamp:2025-10-31 21:28:31 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-7ubts0eymdji2tu0pxyxj3x81jcb2fpy07v0w1zeashaewxykpj helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:cilium-019a3c27-fc7b-79a2-8e33-6a121749595c] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:cilium-019a3c27-fc7b-79a2-8e33-6a121749595c UID:0c6a6e1b-f128-4983-8aea-a352b8cf6870 Controller:0xc000c08e67 BlockOwnerDeletion:0xc000c08e66}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-31 21:28:31 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"0c6a6e1b-f128-4983-8aea-a352b8cf6870\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-31 21:28:36 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-n1mnwj Name:quick-start-7ubts0eymdji2tu0pxyxj3x81jcb2fpy07v0w1zeashaewxykpj UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:cilium RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:cilium ReleaseNamespace:kube-system Version:1.18.2 Values:cni:
  exclusive: false
hubble:
  enabled: true
  tls:
    auto:
      enabled: true               # enable automatic TLS certificate generation
      method: cronJob             # auto generate certificates using cronJob method
      certValidityDuration: 60    # certificates validity duration in days (default 2 months)
      schedule: "0 0 1 * *"       # schedule on the 1st day regeneration of each month
  relay:
    enabled: true
    tls:
      server:
        enabled: true
        mtls: true
    image:
      useDigest: false
    priorityClassName: system-cluster-critical
ipam:
  mode: kubernetes
image:
  useDigest: false
operator:
  image:
    useDigest: false
certgen:
  image:
    useDigest: false
socketLB:
  hostNamespaceOnly: true
envoy:
  image:
    useDigest: false
k8sServiceHost: "10.23.132.67"
k8sServicePort: "6443"
kubeProxyReplacement: true
tunnelProtocol: geneve
loadBalancer:
  mode: dsr
  dsrDispatch: geneve ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc0013df650} Status:{Conditions:[{Type:Ready Status:False Severity:Info LastTransitionTime:2025-10-31 21:28:36 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-10-31 21:28:31 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Info LastTransitionTime:2025-10-31 21:28:36 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install}] Status:pending-install Revision:1 ObservedGeneration:1}}
`
Expected
    <bool>: false
to be true
Raw output
[FAILED] Timed out after 300.001s.
HelmReleaseProxy quick-start-n1mnwj/cilium-quick-start-7ubts0eymdji2tu0pxyxj3x81jcb2fpy07v0w1zkm76x failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Info LastTransitionTime:2025-10-31 21:28:36 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install}, revision = 1, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:cilium-quick-start-7ubts0eymdji2tu0pxyxj3x81jcb2fpy07v0w1zkm76x GenerateName:cilium-quick-start-7ubts0eymdji2tu0pxyxj3x81jcb2fpy07v0w1zeashaewxykpj- Namespace:quick-start-n1mnwj SelfLink: UID:b4a0d2f0-647a-4f3b-8b87-75d003a1b596 ResourceVersion:4240 Generation:1 CreationTimestamp:2025-10-31 21:28:31 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-7ubts0eymdji2tu0pxyxj3x81jcb2fpy07v0w1zeashaewxykpj helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:cilium-019a3c27-fc7b-79a2-8e33-6a121749595c] Annotations:map[] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:cilium-019a3c27-fc7b-79a2-8e33-6a121749595c UID:0c6a6e1b-f128-4983-8aea-a352b8cf6870 Controller:0xc000c08e67 BlockOwnerDeletion:0xc000c08e66}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-31 21:28:31 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"0c6a6e1b-f128-4983-8aea-a352b8cf6870\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-10-31 21:28:36 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-n1mnwj Name:quick-start-7ubts0eymdji2tu0pxyxj3x81jcb2fpy07v0w1zeashaewxykpj UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:cilium RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:cilium ReleaseNamespace:kube-system Version:1.18.2 Values:cni:
  exclusive: false
hubble:
  enabled: true
  tls:
    auto:
      enabled: true               # enable automatic TLS certificate generation
      method: cronJob             # auto generate certificates using cronJob method
      certValidityDuration: 60    # certificates validity duration in days (default 2 months)
      schedule: "0 0 1 * *"       # schedule on the 1st day regeneration of each month
  relay:
    enabled: true
    tls:
      server:
        enabled: true
        mtls: true
    image:
      useDigest: false
    priorityClassName: system-cluster-critical
ipam:
  mode: kubernetes
image:
  useDigest: false
operator:
  image:
    useDigest: false
certgen:
  image:
    useDigest: false
socketLB:
  hostNamespaceOnly: true
envoy:
  image:
    useDigest: false
k8sServiceHost: "10.23.132.67"
k8sServicePort: "6443"
kubeProxyReplacement: true
tunnelProtocol: geneve
loadBalancer:
  mode: dsr
  dsrDispatch: geneve ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc0013df650} Status:{Conditions:[{Type:Ready Status:False Severity:Info LastTransitionTime:2025-10-31 21:28:36 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-10-31 21:28:31 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Info LastTransitionTime:2025-10-31 21:28:36 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install}] Status:pending-install Revision:1 ObservedGeneration:1}}
`
Expected
    <bool>: false
to be true
In [It] at: /home/runner/_work/cluster-api-runtime-extensions-nutanix/cluster-api-runtime-extensions-nutanix/test/e2e/helmreleaseproxy_helpers.go:60 @ 10/31/25 21:39:56.464

Check failure on line 1 in caren-e2e

See this annotation in the file changed.

@github-actions github-actions / e2e test report

caren-e2e.[It] Quick start Nutanix Cilium HelmAddon topology-cilium-helm-addon Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:HelmAddon]

Timed out after 600.001s.
Expected
    <bool>: false
to be true
Raw output
[FAILED] Timed out after 600.001s.
Expected
    <bool>: false
to be true
In [It] at: /home/runner/go/pkg/mod/sigs.k8s.io/cluster-api/[email protected]/framework/node_helpers.go:56 @ 10/31/25 21:43:28.919