Skip to content

Allow VERIFY_TIMEOUT override for mcpchecker-eval - #84653

Open
cajieh wants to merge 1 commit into
openshift:mainfrom
cajieh:ocpmcp-verify-timeout-override
Open

Allow VERIFY_TIMEOUT override for mcpchecker-eval#84653
cajieh wants to merge 1 commit into
openshift:mainfrom
cajieh:ocpmcp-verify-timeout-override

Conversation

@cajieh

@cajieh cajieh commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

openshift/openshift-mcp-server#463 restores each eval task's original (fast) setup/verify timeout as the default and moves the OpenShift-specific increase behind a VERIFY_TIMEOUT env var, so generic/upstream CI is not penalized by timeouts only needed for OpenShift's slower SCC/PSS admission and cloud PVC binding.

This PR:

  • Declares VERIFY_TIMEOUT on the openshift-mcp-server-mcpchecker-eval ref (default empty, so scripts keep their own defaults unless overridden).
  • Sets VERIFY_TIMEOUT: 300s on the mcp-server core-suite tests that run against a live OCP cluster: mcpchecker-eval-google and mcpchecker-eval-anthropic on main and release-0.5, and periodic-mcpchecker-eval on release-0.5.

Related: openshift/openshift-mcp-server#463

Made with Cursor

Summary by CodeRabbit

This PR lets mcpchecker-eval tasks override VERIFY_TIMEOUT.

  • Adds an optional VERIFY_TIMEOUT setting to the shared task reference.
  • Sets VERIFY_TIMEOUT: 300s for live OpenShift core-suite tests on main and release-0.5.
  • Preserves each script’s default timeout when no override is set.
  • Supports slower SCC/PSS admission and cloud PVC binding.

openshift/openshift-mcp-server#463 restores each eval task's original
(fast) setup/verify timeout as the default and moves the OpenShift-specific
increase behind a VERIFY_TIMEOUT env var, so generic/upstream CI is not
penalized by timeouts only needed for OpenShift's slower SCC/PSS admission
and cloud PVC binding.

Declare VERIFY_TIMEOUT on the openshift-mcp-server-mcpchecker-eval ref
(default empty, so scripts keep their own defaults unless overridden) and
set it to 300s on the mcp-server core-suite tests that run against a live
OCP cluster: mcpchecker-eval-google and mcpchecker-eval-anthropic on main
and release-0.5, and periodic-mcpchecker-eval on release-0.5.

Co-authored-by: Cursor <cursoragent@cursor.com>
@coderabbitai

coderabbitai Bot commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 218f21aa-ff46-40d4-86e2-488352bc19b8

📥 Commits

Reviewing files that changed from the base of the PR and between 75cde54 and 5cddc69.

📒 Files selected for processing (3)
  • ci-operator/config/openshift/openshift-mcp-server/openshift-openshift-mcp-server-main.yaml
  • ci-operator/config/openshift/openshift-mcp-server/openshift-openshift-mcp-server-release-0.5.yaml
  • ci-operator/step-registry/openshift/mcp-server/mcpchecker-eval/openshift-mcp-server-mcpchecker-eval-ref.yaml

Included review availability: Your plan provides up to 12 included reviews per hour; 10 remain after this review.


Walkthrough

The MCP checker evaluation step now supports an optional verification timeout override. Main and release configurations set the timeout to 300 seconds for Google, Anthropic, and periodic evaluations.

Changes

MCP verification timeout

Layer / File(s) Summary
Define verification timeout override
ci-operator/step-registry/openshift/mcp-server/mcpchecker-eval/...
The evaluation step declares VERIFY_TIMEOUT with an empty default and documents its timeout behavior.
Set evaluation timeouts
ci-operator/config/openshift/openshift-mcp-server/...
Google, Anthropic, and periodic MCP checker evaluations set VERIFY_TIMEOUT to 300s where configured.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 5cddc

This change adds a configurable 300-second verification timeout to the specified MCP evaluation jobs while retaining empty defaults for other uses. No concrete merge-blocking risk remains.

Suggested reviewers: grokspawn

🚥 Pre-merge checks | ✅ 15
✅ Passed checks (15 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed PASS: The pull request changes only CI environment configuration and the step reference. The added lines define VERIFY_TIMEOUT; they do not add or modify It(), Describe(), Context(), or `When(…
Test Structure And Quality ✅ Passed PASS: The pull request changes only CI YAML and a step-reference declaration. It does not add or modify Ginkgo tests, It blocks, BeforeEach/AfterEach hooks, cluster resource setup, or `Eventuall…
Microshift Test Compatibility ✅ Passed PASS: The pull request changes only three CI YAML files. The exact diff adds VERIFY_TIMEOUT environment entries and a step-reference declaration. It adds no Ginkgo tests (It, Describe, Context
Single Node Openshift (Sno) Test Compatibility ✅ Passed The pull request changes only CI YAML configuration. The diff adds VERIFY_TIMEOUT declarations and values; it adds no Ginkgo tests or test bodies. Therefore, it introduces no multi-node or HA assump…
Topology-Aware Scheduling Compatibility ✅ Passed PASS: The pull request changes only CI test configuration and a step-registry environment declaration. It adds VERIFY_TIMEOUT values and an empty default; it does not add or modify deployment manife…
Ote Binary Stdout Contract ✅ Passed PASS: The pull-request diff changes only three YAML configuration files. It adds VERIFY_TIMEOUT declarations and values to MCP checker evaluation steps. It adds no Go or other binary source, no `mai…
Ipv6 And Disconnected Network Test Compatibility ✅ Passed PASS: The pull request changes only three CI YAML files. It adds the VERIFY_TIMEOUT environment variable and sets it to 300s for existing MCP checker chains. The diff adds no Ginkgo tests (It, `…
No-Weak-Crypto ✅ Passed PASS. The pull request changes only CI YAML by declaring VERIFY_TIMEOUT and setting it to 300s. The exact patch contains no MD5, SHA1, DES, 3DES, RC4, Blowfish, ECB, custom cryptography, or secret…
Container-Privileges ✅ Passed PASS: The pull request only adds the VERIFY_TIMEOUT environment variable and documentation. The added lines contain no privileged: true, hostPID, hostNetwork, hostIPC, SYS_ADMIN, or `allow…
No-Sensitive-Data-In-Logs ✅ Passed PASS: The pull request adds only the non-sensitive value VERIFY_TIMEOUT: 300s and an empty VERIFY_TIMEOUT declaration in CI YAML. The diff adds no logging statements or output handling. The refere…
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the main change: adding support for a VERIFY_TIMEOUT override in mcpchecker-eval.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands.

@openshift-ci

openshift-ci Bot commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: cajieh

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Sep 4, 2026
@cajieh cajieh changed the title OCPMCP-xxx: allow VERIFY_TIMEOUT override for mcpchecker-eval Allow VERIFY_TIMEOUT override for mcpchecker-eval Sep 4, 2026
@openshift-ci
openshift-ci Bot requested review from bentito and grokspawn September 4, 2026 19:14
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

[REHEARSALNOTIFIER]
@cajieh: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-openshift-openshift-mcp-server-release-0.5-mcpchecker-eval-anthropic openshift/openshift-mcp-server presubmit Ci-operator config changed
pull-ci-openshift-openshift-mcp-server-release-0.5-mcpchecker-eval-google openshift/openshift-mcp-server presubmit Ci-operator config changed
pull-ci-openshift-openshift-mcp-server-main-mcpchecker-eval-anthropic openshift/openshift-mcp-server presubmit Ci-operator config changed
pull-ci-openshift-openshift-mcp-server-main-mcpchecker-eval-google openshift/openshift-mcp-server presubmit Ci-operator config changed
pull-ci-openshift-openshift-mcp-server-release-5.2-mcpchecker-eval-google openshift/openshift-mcp-server presubmit Registry content changed
pull-ci-openshift-openshift-mcp-server-release-5.2-mcpchecker-eval-anthropic openshift/openshift-mcp-server presubmit Registry content changed
pull-ci-openshift-openshift-mcp-server-release-5.1-mcpchecker-eval-google openshift/openshift-mcp-server presubmit Registry content changed
pull-ci-openshift-openshift-mcp-server-release-5.1-mcpchecker-eval-anthropic openshift/openshift-mcp-server presubmit Registry content changed
pull-ci-openshift-openshift-mcp-server-release-5.0-mcpchecker-eval-google openshift/openshift-mcp-server presubmit Registry content changed
pull-ci-openshift-openshift-mcp-server-release-5.0-mcpchecker-eval-anthropic openshift/openshift-mcp-server presubmit Registry content changed
pull-ci-openshift-openshift-mcp-server-release-4.23-mcpchecker-eval-google openshift/openshift-mcp-server presubmit Registry content changed
pull-ci-openshift-openshift-mcp-server-release-4.23-mcpchecker-eval-anthropic openshift/openshift-mcp-server presubmit Registry content changed
periodic-ci-openshift-openshift-mcp-server-release-0.5-periodic-mcpchecker-eval N/A periodic Ci-operator config changed

Prior to this PR being merged, you will need to either run and acknowledge or opt to skip these rehearsals.

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@openshift-ci

openshift-ci Bot commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

@cajieh: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant