Skip to content

[WIP] CNTRLPLANE-3052: remove unnecessary exceptions from monitoring test#30924

Open
ehearne-redhat wants to merge 1 commit intoopenshift:mainfrom
ehearne-redhat:ocpstrat-2401-remove-unnecessary-exceptions
Open

[WIP] CNTRLPLANE-3052: remove unnecessary exceptions from monitoring test#30924
ehearne-redhat wants to merge 1 commit intoopenshift:mainfrom
ehearne-redhat:ocpstrat-2401-remove-unnecessary-exceptions

Conversation

@ehearne-redhat
Copy link
Contributor

@ehearne-redhat ehearne-redhat commented Mar 24, 2026

This PR removes unnecessary exceptions from the default service account monitoring test. Now that OCPSTRAT-2401 is nearing completion, we need to look at removing these exceptions since they are now complete.

Note some of the items still have PRs. When they are merged I will move this out of WIP status.

@openshift-ci-robot
Copy link

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: automatic mode

@openshift-ci openshift-ci bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Mar 24, 2026
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Mar 24, 2026
@openshift-ci-robot
Copy link

openshift-ci-robot commented Mar 24, 2026

@ehearne-redhat: This pull request references CNTRLPLANE-3052 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.22.0" version, but no target version was set.

Details

In response to this:

This PR removes unnecessary exceptions from the default service account monitoring test. Now that OCPSTRAT-2401 is nearing completion, we need to look at removing these exceptions since they are now complete.

Note some of the items still have PRs. When they are merged I will move this out of WIP status.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@coderabbitai
Copy link

coderabbitai bot commented Mar 24, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 5ced8a8e-1c1d-4e6a-8b3a-e2c239877fa1

📥 Commits

Reviewing files that changed from the base of the PR and between 02f8514 and 2443300.

📒 Files selected for processing (1)
  • pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go

Walkthrough

Simplified the exceptions list in the default-service-account monitor test by removing Jira-tracked pod/namespace exceptions and namespace-specific handlers for openshift-marketplace and openshift-cluster-csi-drivers. Retained debug-pod detection logic with clarified comments explaining why exceptions exist.

Changes

Cohort / File(s) Summary
Default Service Account Monitor Exceptions
pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go
Removed large set of Jira-tracked exception handlers and namespace-specific exceptions; updated comments to clarify remaining exceptions (non-core payload or GA-pending); retained debug-pod detection with updated rationale.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 golangci-lint (2.11.3)

Error: can't load config: unsupported version of the configuration: "" See https://golangci-lint.run/docs/product/migration-guide for migration instructions
The command is terminated due to an error: can't load config: unsupported version of the configuration: "" See https://golangci-lint.run/docs/product/migration-guide for migration instructions


Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Mar 24, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: ehearne-redhat
Once this PR has been reviewed and has the lgtm label, please assign bertinatto for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot requested review from deads2k and p0lyn0mial March 24, 2026 09:12
return "", false
},
// Handle the outlier manually
// This one checks if it is a debug pod or not.
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm thinking we should probably add a comment here to explain why we are keeping it e.g. // debug pod does not run by default on an OpenShift cluster .

@@ -43,52 +43,8 @@ func exceptionWithJira(prefix, jiraURL string) func(corev1.Pod) (string, bool) {
// OpenShift components should not be using the default service account.
// Therefore, no new components should be added to this list.
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We could also add a comment here e.g. // The following are current exceptions due to not being part of the core OpenShift payload, or we are waiting on components to reach GA.

@ehearne-redhat ehearne-redhat force-pushed the ocpstrat-2401-remove-unnecessary-exceptions branch from 5e35609 to 2443300 Compare March 24, 2026 09:21
@ehearne-redhat
Copy link
Contributor Author

@coderabbitai review

@coderabbitai
Copy link

coderabbitai bot commented Mar 24, 2026

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

1 similar comment
@coderabbitai
Copy link

coderabbitai bot commented Mar 24, 2026

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@openshift-ci-robot
Copy link

Scheduling required tests:
/test e2e-aws-csi
/test e2e-aws-ovn-fips
/test e2e-aws-ovn-microshift
/test e2e-aws-ovn-microshift-serial
/test e2e-aws-ovn-serial-1of2
/test e2e-aws-ovn-serial-2of2
/test e2e-gcp-csi
/test e2e-gcp-ovn
/test e2e-gcp-ovn-upgrade
/test e2e-metal-ipi-ovn-ipv6
/test e2e-vsphere-ovn
/test e2e-vsphere-ovn-upi

@ehearne-redhat
Copy link
Contributor Author

Note that the errors in the tests are due to the open PR's for those components. :)

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Mar 24, 2026

@ehearne-redhat: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-aws-ovn-fips 2443300 link true /test e2e-aws-ovn-fips
ci/prow/e2e-gcp-ovn-upgrade 2443300 link true /test e2e-gcp-ovn-upgrade
ci/prow/e2e-vsphere-ovn-upi 2443300 link true /test e2e-vsphere-ovn-upi
ci/prow/e2e-gcp-ovn 2443300 link true /test e2e-gcp-ovn
ci/prow/e2e-aws-ovn-serial-1of2 2443300 link true /test e2e-aws-ovn-serial-1of2
ci/prow/e2e-vsphere-ovn 2443300 link true /test e2e-vsphere-ovn
ci/prow/e2e-aws-csi 2443300 link true /test e2e-aws-csi
ci/prow/e2e-metal-ipi-ovn-ipv6 2443300 link true /test e2e-metal-ipi-ovn-ipv6
ci/prow/e2e-aws-ovn-serial-2of2 2443300 link true /test e2e-aws-ovn-serial-2of2
ci/prow/e2e-gcp-csi 2443300 link true /test e2e-gcp-csi

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants