Skip to content

USHIFT-5531: Auto-rebase procedure with flannel and kube-proxy image update #4726

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Apr 25, 2025

Conversation

praveenkumar
Copy link
Contributor

Which issue(s) this PR addresses:

Closes #

@openshift-ci-robot
Copy link

openshift-ci-robot commented Mar 24, 2025

@praveenkumar: This pull request references USHIFT-5531 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.19.0" version, but no target version was set.

In response to this:

Which issue(s) this PR addresses:

Closes #

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Mar 24, 2025
@praveenkumar praveenkumar changed the title USHIFT-5531: uto-rebase procedure with flannel and kube-proxy image update USHIFT-5531: Auto-rebase procedure with flannel and kube-proxy image update Mar 24, 2025
@openshift-ci openshift-ci bot requested review from copejon and pacevedom March 24, 2025 05:18
@praveenkumar praveenkumar force-pushed the issue_5531 branch 4 times, most recently from 124b1ca to 5d95c73 Compare March 26, 2025 15:22
@ggiguash
Copy link
Contributor

/test ?

Copy link
Contributor

openshift-ci bot commented Mar 26, 2025

@ggiguash: The following commands are available to trigger required jobs:

/test e2e-aws-ai-model-serving
/test e2e-aws-footprint-and-performance
/test e2e-aws-tests
/test e2e-aws-tests-arm
/test e2e-aws-tests-bootc
/test e2e-aws-tests-bootc-arm
/test e2e-aws-tests-bootc-periodic
/test e2e-aws-tests-bootc-periodic-arm
/test e2e-aws-tests-cache
/test e2e-aws-tests-cache-arm
/test e2e-aws-tests-periodic
/test e2e-aws-tests-periodic-arm
/test images
/test ocp-full-conformance-rhel-eus
/test ocp-full-conformance-serial-rhel-eus
/test test-rpm
/test test-unit
/test verify

The following commands are available to trigger optional jobs:

/test security
/test test-rebase

Use /test all to run the following jobs that were automatically triggered:

pull-ci-openshift-microshift-main-e2e-aws-tests
pull-ci-openshift-microshift-main-e2e-aws-tests-arm
pull-ci-openshift-microshift-main-e2e-aws-tests-bootc
pull-ci-openshift-microshift-main-e2e-aws-tests-bootc-arm
pull-ci-openshift-microshift-main-images
pull-ci-openshift-microshift-main-security
pull-ci-openshift-microshift-main-test-rebase
pull-ci-openshift-microshift-main-test-unit
pull-ci-openshift-microshift-main-verify

In response to this:

/test ?

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@praveenkumar
Copy link
Contributor Author

/test ?

@ggiguash Do we need any other test than default running ones?

@ggiguash
Copy link
Contributor

/test ?

@ggiguash Do we need any other test than default running ones?

No, the most important one is test-rebase. Can you check this log output?

@praveenkumar
Copy link
Contributor Author

/test ?

@ggiguash Do we need any other test than default running ones?

No, the most important one is test-rebase. Can you check this log output?

Yes I was checking that and looks like still ignored so may be https://github.com/openshift/microshift/blob/main/scripts/auto-rebase/assets.yaml#L268-L296 also need to updated?

@@ -102,6 +102,23 @@ def run_rebase_ai_model_serving_sh(release):
return RebaseScriptResult(success=result.returncode == 0, output=result.stdout)


def run_rebase_flannel():
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this function be executed?
I recall that newest flannel requires a kernel module, should we even proceed with this PR?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@pmtk I just removed that commit, so whatever we choose for CNI which doesn't require any kernel module then will check how that component need to be rebased.

@@ -1118,6 +1119,44 @@ EOF
done # for goarch
}

update_kubeproxy_images() {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do you know what's the difference between kube-proxy and kube-rbac-proxy? Can they be used interchangeably?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI tells below difference and i don't think it can be use interchangeably.

kube-proxy

Purpose:
Manages networking rules on each node to route traffic to the appropriate pods.

Key Role:
    Handles network routing for services in a Kubernetes cluster.
    Runs on each node.
    Uses either iptables, ipvs, or userspace to forward traffic to pod IPs behind a service.

kube-rbac-proxy

Purpose:
Provides an authentication and authorization layer (based on Kubernetes RBAC) in front of an HTTP server (e.g., metrics endpoint).

Key Role:
    Runs as a sidecar or standalone proxy.
    Forwards requests only if the user is authorized per Kubernetes RBAC policies.
    Often used with metrics endpoints (like Prometheus scraping metrics from controllers or custom services).

@pmtk
Copy link
Member

pmtk commented Apr 24, 2025

/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Apr 24, 2025
Copy link
Contributor

openshift-ci bot commented Apr 24, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: pmtk, praveenkumar

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Apr 24, 2025
@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD 59d8d07 and 2 for PR HEAD df1f76d in total

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD ef344d1 and 1 for PR HEAD df1f76d in total

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD 595c807 and 2 for PR HEAD df1f76d in total

1 similar comment
@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD 595c807 and 2 for PR HEAD df1f76d in total

@praveenkumar
Copy link
Contributor Author

/retest

Copy link
Contributor

openshift-ci bot commented Apr 25, 2025

@praveenkumar: all tests passed!

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@openshift-merge-bot openshift-merge-bot bot merged commit faedf25 into openshift:main Apr 25, 2025
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants