Skip to content

Conversation

@haircommander
Copy link
Member

now that we are approaching kube 1.33 rebase (and are moving away from 1.32), we are safe from the risks that caused us not to turn this on by default (needing a n-3 version skew to 1.30 to make sure a user namespace is created or a pod is denied)

@openshift-ci
Copy link
Contributor

openshift-ci bot commented May 2, 2025

Hello @haircommander! Some important instructions when contributing to openshift/api:
API design plays an important part in the user experience of OpenShift and as such API PRs are subject to a high level of scrutiny to ensure they follow our best practices. If you haven't already done so, please review the OpenShift API Conventions and ensure that your proposed changes are compliant. Following these conventions will help expedite the api review process for your PR.

@openshift-ci openshift-ci bot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label May 2, 2025
@openshift-ci openshift-ci bot requested review from JoelSpeed and deads2k May 2, 2025 13:10
@haircommander haircommander changed the title features: set user namespace features on by default OCPNODE-3225,OCPNODE-2557: features: set user namespace features on by default May 2, 2025
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label May 2, 2025
@openshift-ci-robot
Copy link

openshift-ci-robot commented May 2, 2025

@haircommander: This pull request references OCPNODE-3225 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.20.0" version, but no target version was set.

This pull request references OCPNODE-2557 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.20.0" version, but no target version was set.

In response to this:

now that we are approaching kube 1.33 rebase (and are moving away from 1.32), we are safe from the risks that caused us not to turn this on by default (needing a n-3 version skew to 1.30 to make sure a user namespace is created or a pod is denied)

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci bot added size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. and removed size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels May 2, 2025
@openshift-ci openshift-ci bot added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels May 2, 2025
items:
type: string
maxItems: 10
maxItems: 1
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i'm unsure why this snuck in

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please make sure you're rebased on the latest tip of master and try the generation again 🤔

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this happened to me on master too, but I just dropped manually

@bertinatto
Copy link
Member

/retest

@haircommander haircommander force-pushed the userns-default branch 2 times, most recently from 3e545e7 to f08ce86 Compare May 6, 2025 14:11
@haircommander
Copy link
Member Author

/retest

I think the remaining verify failures are expected. We have this weird deadlock where upstream userns tests will fail because the feature is turned off, but they're only enabled in tech preview clusters so we don't have any feedback that they're working. If needed, I could duplicate the upstream tests in o/origin to mimic the upstream behaviors, but we still would need to wait a bit to get test readiness. OR we can override.

I ask because this is blocking @bertinatto 's rebase and needs timely consideration. WDYT @JoelSpeed

@haircommander
Copy link
Member Author

/test e2e-aws-serial
/test okd-scos-e2e-aws-ovn

@JoelSpeed
Copy link
Contributor

This PR, as far as I can tell, is still enabling 3 features by default. My understanding was that it should be enabling 2 of them? Can we try to get that fixed.

The verify failures in crd-schema do appear to be legacy failures that we cannot yet fix, so I'd be happy to override that one

@haircommander
Copy link
Member Author

I think we should be enabling all three, which do you think should be dropped?

@JoelSpeed
Copy link
Contributor

Sorry, I thought procmounttype was being enabled separately, in which case everything here appears to be in order

/override ci/prow/verify-crd-schema

Pre-existing failures, we cannot otherwise resolve

/lgtm

/hold What are we doing about test requirements for upstream gates 🤔

@openshift-ci openshift-ci bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label May 9, 2025
@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label May 9, 2025
@openshift-ci
Copy link
Contributor

openshift-ci bot commented May 9, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: haircommander, JoelSpeed

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link
Contributor

openshift-ci bot commented May 9, 2025

@JoelSpeed: Overrode contexts on behalf of JoelSpeed: ci/prow/verify-crd-schema

In response to this:

Sorry, I thought procmounttype was being enabled separately, in which case everything here appears to be in order

/override ci/prow/verify-crd-schema

Pre-existing failures, we cannot otherwise resolve

/lgtm

/hold What are we doing about test requirements for upstream gates 🤔

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci
Copy link
Contributor

openshift-ci bot commented May 9, 2025

@haircommander: This PR was included in a payload test run from openshift/kubernetes#2239
trigger 0 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command

1 similar comment
@openshift-ci
Copy link
Contributor

openshift-ci bot commented May 9, 2025

@haircommander: This PR was included in a payload test run from openshift/kubernetes#2239
trigger 0 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command

@haircommander
Copy link
Member Author

/payload-job-with-prs k8s-e2e-gcp-ovn openshift/kubernetes#2239

@openshift-ci
Copy link
Contributor

openshift-ci bot commented May 9, 2025

@haircommander: trigger 0 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command

@openshift-ci
Copy link
Contributor

openshift-ci bot commented May 12, 2025

@bertinatto: This PR was included in a payload test run from openshift/kubernetes#2239
trigger 1 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command

  • periodic-ci-openshift-release-master-ci-4.20-e2e-gcp-ovn

See details on https://pr-payload-tests.ci.openshift.org/runs/ci/371d5310-2f3b-11f0-9e82-430f9ff9973c-0

@haircommander
Copy link
Member Author

@openshift-ci openshift-ci bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label May 12, 2025
@haircommander
Copy link
Member Author

/retest

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD b7d0ca2 and 2 for PR HEAD 0f9a8e8 in total

@haircommander
Copy link
Member Author

/hold
unhold if we override feature promotion job

@openshift-ci openshift-ci bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label May 12, 2025
@JoelSpeed
Copy link
Contributor

Based on the results of combining this PR with the PR to re-enable the tests, we can see that the upstream feature is passing

/override ci/prow/verify-feature-promotion

/hold cancel

@openshift-ci openshift-ci bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label May 13, 2025
@openshift-ci
Copy link
Contributor

openshift-ci bot commented May 13, 2025

@JoelSpeed: Overrode contexts on behalf of JoelSpeed: ci/prow/verify-feature-promotion

In response to this:

Based on the results of combining this PR with the PR to re-enable the tests, we can see that the upstream feature is passing

/override ci/prow/verify-feature-promotion

/hold cancel

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@JoelSpeed
Copy link
Contributor

/test e2e-aws-serial

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD b7d0ca2 and 2 for PR HEAD 0f9a8e8 in total

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD 9052dea and 2 for PR HEAD 0f9a8e8 in total

@bertinatto
Copy link
Member

/retest-required

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD 0c841e7 and 1 for PR HEAD 0f9a8e8 in total

@JoelSpeed
Copy link
Contributor

/override ci/prow/verify-feature-promotion
/override ci/prow/verify-crd-schema

@openshift-ci
Copy link
Contributor

openshift-ci bot commented May 14, 2025

@JoelSpeed: Overrode contexts on behalf of JoelSpeed: ci/prow/verify-crd-schema, ci/prow/verify-feature-promotion

In response to this:

/override ci/prow/verify-feature-promotion
/override ci/prow/verify-crd-schema

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD 0c841e7 and 2 for PR HEAD 0f9a8e8 in total

@JoelSpeed
Copy link
Contributor

/override ci/prow/e2e-aws-serial

Tests passed but timed out on deprovision

@openshift-ci
Copy link
Contributor

openshift-ci bot commented May 14, 2025

@JoelSpeed: Overrode contexts on behalf of JoelSpeed: ci/prow/e2e-aws-serial

In response to this:

/override ci/prow/e2e-aws-serial

Tests passed but timed out on deprovision

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci
Copy link
Contributor

openshift-ci bot commented May 14, 2025

@haircommander: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/okd-scos-e2e-aws-ovn 0f9a8e8 link false /test okd-scos-e2e-aws-ovn

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@haircommander
Copy link
Member Author

/skip

@haircommander
Copy link
Member Author

/test e2e-aws-ovn-techpreview

@openshift-merge-bot openshift-merge-bot bot merged commit 585d436 into openshift:master May 14, 2025
24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants