extend supported architectures to match the upstream image (#25)
5e214ff...
by
Stone Preston <email address hidden>
PSP Removal (#24)
* Add PSP removal for 1.25+
* swap to an API test rather than a k8s node version test for PodSecurityPolicy
* break integration tests apart so that microbot tests can be re-run
Co-authored-by: Stone Preston <email address hidden>
Co-authored-by: Adam Dyess <email address hidden>
Convert tests to actions-operator and pytest-operator (#18)
* Convert tests to actions-operator and pytest-operator
Clean up the integration test workflow by leveraging actions-operator
for the environment setup and pytest-operator for model helpers and
doing the testing in Python.
* Refactor RBAC management in tests to Workflow
Managing the RBAC feature within the test ran into issues due to the API
server restarting which interrupted the model connection to the
controller. Additionally, it made the tests coupled to microk8s rather
than being able to run against any K8s cluster.
* Fix workflow syntax error
* Fix perm error on snap alias
* Fix env syntax and sg command for disabling RBAC in workflow
* Fix sg syntax in workflow and custom arg passing through tox
* Fix parallel charmcraft builds
Charmcraft checks for and, if not present, adds a LXC remote for it's
build environment image. If multiple builds are started in parallel,
there's a race condition where they both see that the remote isn't
present and then both try to add it, leading to one of them failing.
* More charmcraft pre-init in workflow
* Do builds sequentially to try to get past build issues
* Remove git dependency in requirements
The oci-image library was released to PyPI some time ago, so use that
instead of the git repo.
* Refactor RBAC check to not use wait_for_idle
The behavior of `wait_for_idle` returning immediately as soon as *any*
unit is in error, even with `raise_on_error=False` was causing some
strangeness with the test attempting to resolve a unit before it was in
error (somehow).
* Add some debug logging
* Increase workflow timeout
* Restore default wait_period to try to figure out why it was failing
* Some debugging for inconsistent test behavior
ffd28a7...
by
Camille Rodriguez <email address hidden>
Fix issues: rbac permissions and ARP on the network (#17)
* Update rbac-permissions-operators.yaml
When deploying the metallb operator, 4 service accounts are created: metallb-controller-operator, metallb-speaker-operator, metallb-controller, metallb-speaker. For the metallb-controller to function correctly, it also needs access to list configmaps. This error was seen in the logs when I tried with the previous configuration:
E0317 15:22:00.604453 1 reflector.go:125] <email address hidden>/tools/cache/reflector.go:98: Failed to list *v1.ConfigMap: confi
gmaps "config" is forbidden: User "system:serviceaccount:metallb-system:metallb-controller" cannot list resource "configmaps" in API group "" in the namespace "metallb-syst
em"
And the loadbalancer services would not be getting an external IP. This change in the permissions fixed it.
* Update charm.py
hostNetwork:True is necessary to allow ARP on the network
