[release-ocm-2.16] MGMT-23639: image-policy override on ENABLE_KUBE_API for operator hub#2812
Conversation
Kube-API CI jobs (ENABLE_KUBE_API=true) hit strict image-policy checks on nightly payloads. assisted-service must pass OPENSHIFT_INSTALL_EXPERIMENTAL_DISABLE_IMAGE_POLICY into openshift-install; exporting it on the test host (config.sh) does not reach the service pods. Two deploy paths need two hooks: - kind/minikube (default make setup run): assisted-service is deployed via make deploy-all and reads assisted-service-config from YAML. When ENABLE_KUBE_API is set, update_assisted_service_cm.py adds LOG_LEVEL and the policy key to deploy/assisted-service-configmap.yaml before deploy-all so the first rollout already has the correct env. - operator hub (DEPLOY_TARGET=operator): there is no AgentServiceConfig on kind; on OCP the operator merges config from an overlay ConfigMap referenced on AgentServiceConfig. After deploy.sh, when ENABLE_KUBE_API is true, kube_helpers.assisted_installer_config_override applies assisted-installer-config-override and patches AgentServiceConfig to point at it. Bare-metal kube-API jobs use the kind path today; the operator helper is for jobs that deploy assisted-service via the Assisted Install operator.
|
@openshift-cherrypick-robot: Ignoring requests to cherry-pick non-bug issues: MGMT-23639 DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
openshift-ci
Bot
added
the
size/L
|
@openshift-cherrypick-robot: all tests passed! Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
|
/lgtm |
|
/approve |
|
/approve |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: andrej1991, openshift-cherrypick-robot The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
/assign @danmanor |
4 participants
This is an automated cherry-pick of #2806
/assign andrej1991