Skip to content

ci: Add CIS benchmark check #3920

ci: Add CIS benchmark check

ci: Add CIS benchmark check #3920

GitHub Actions / e2e test report failed May 20, 2025 in 0s

40 tests run, 31 passed, 8 skipped, 1 failed.

Annotations

Check failure on line 1 in caren-e2e

See this annotation in the file changed.

@github-actions github-actions / e2e test report

caren-e2e.[It] Quick start Nutanix Cilium HelmAddon topology-cilium-helm-addon Should create a workload cluster [provider:Nutanix, cni:Cilium, addonStrategy:HelmAddon]

Timed out after 300.001s.
HelmReleaseProxy quick-start-iqpjg3/nutanix-cloud-provider-quick-start-roxfjyo8i6th7wm7b0mg2acqgcz5 failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Info LastTransitionTime:2025-05-20 12:07:09 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install}, revision = 1, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:nutanix-cloud-provider-quick-start-roxfjyo8i6th7wm7b0mg2acqgcz5 GenerateName:nutanix-cloud-provider-quick-start-roxfjyo8i6th7wm7b0mg2acbrzuyy3qvhkrarihir9anjnwivf7- Namespace:quick-start-iqpjg3 SelfLink: UID:4b8e8c64-d847-456a-b1ac-fd02684e119b ResourceVersion:2942 Generation:1 CreationTimestamp:2025-05-20 12:06:53 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-roxfjyo8i6th7wm7b0mg2acbrzuyy3qvhkrarihir9anjnwivf7 helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:nutanix-ccm-0196ed95-41aa-798e-bb0a-33040d139408] Annotations:map[helmreleaseproxy.addons.cluster.x-k8s.io/release-successfully-installed:true] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:nutanix-ccm-0196ed95-41aa-798e-bb0a-33040d139408 UID:c5506640-91a0-4473-888a-21ed9b261025 Controller:0xc0011820fd BlockOwnerDeletion:0xc0011820fc}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-05-20 12:07:04 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:annotations":{".":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/release-successfully-installed":{}},"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"c5506640-91a0-4473-888a-21ed9b261025\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-05-20 12:07:09 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-iqpjg3 Name:quick-start-roxfjyo8i6th7wm7b0mg2acbrzuyy3qvhkrarihir9anjnwivf7 UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:nutanix-cloud-provider RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:nutanix-ccm ReleaseNamespace:kube-system Version:0.5.0 Values:prismCentralEndPoint: pc.ci.nkp.sh
prismCentralPort: 9440
prismCentralInsecure: false
ignoredNodeIPs: [ "10.23.132.23" ]

# The Secret containing the credentials will be created by the handler.
createSecret: false
secretName: nutanix-ccm-credentials ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc001788240} Status:{Conditions:[{Type:Ready Status:False Severity:Info LastTransitionTime:2025-05-20 12:07:09 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-05-20 12:06:53 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Info LastTransitionTime:2025-05-20 12:07:09 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install}] Status:pending-install Revision:1 ObservedGeneration:1}}
`
Expected
    <bool>: false
to be true
Raw output
[FAILED] Timed out after 300.001s.
HelmReleaseProxy quick-start-iqpjg3/nutanix-cloud-provider-quick-start-roxfjyo8i6th7wm7b0mg2acqgcz5 failed to become ready and have up to date revision: ready condition = &{Type:Ready Status:False Severity:Info LastTransitionTime:2025-05-20 12:07:09 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install}, revision = 1, full object is:
&{TypeMeta:{Kind:HelmReleaseProxy APIVersion:addons.cluster.x-k8s.io/v1alpha1} ObjectMeta:{Name:nutanix-cloud-provider-quick-start-roxfjyo8i6th7wm7b0mg2acqgcz5 GenerateName:nutanix-cloud-provider-quick-start-roxfjyo8i6th7wm7b0mg2acbrzuyy3qvhkrarihir9anjnwivf7- Namespace:quick-start-iqpjg3 SelfLink: UID:4b8e8c64-d847-456a-b1ac-fd02684e119b ResourceVersion:2942 Generation:1 CreationTimestamp:2025-05-20 12:06:53 +0000 UTC DeletionTimestamp:<nil> DeletionGracePeriodSeconds:<nil> Labels:map[cluster.x-k8s.io/cluster-name:quick-start-roxfjyo8i6th7wm7b0mg2acbrzuyy3qvhkrarihir9anjnwivf7 helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name:nutanix-ccm-0196ed95-41aa-798e-bb0a-33040d139408] Annotations:map[helmreleaseproxy.addons.cluster.x-k8s.io/release-successfully-installed:true] OwnerReferences:[{APIVersion:addons.cluster.x-k8s.io/v1alpha1 Kind:HelmChartProxy Name:nutanix-ccm-0196ed95-41aa-798e-bb0a-33040d139408 UID:c5506640-91a0-4473-888a-21ed9b261025 Controller:0xc0011820fd BlockOwnerDeletion:0xc0011820fc}] Finalizers:[helmreleaseproxy.addons.cluster.x-k8s.io] ManagedFields:[{Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-05-20 12:07:04 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:metadata":{"f:annotations":{".":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/release-successfully-installed":{}},"f:finalizers":{".":{},"v:\"helmreleaseproxy.addons.cluster.x-k8s.io\"":{}},"f:generateName":{},"f:labels":{".":{},"f:cluster.x-k8s.io/cluster-name":{},"f:helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"c5506640-91a0-4473-888a-21ed9b261025\"}":{}}},"f:spec":{".":{},"f:chartName":{},"f:clusterRef":{},"f:namespace":{},"f:options":{".":{},"f:enableClientCache":{},"f:install":{".":{},"f:createNamespace":{}},"f:timeout":{},"f:upgrade":{".":{},"f:maxHistory":{}}},"f:releaseName":{},"f:repoURL":{},"f:tlsConfig":{".":{},"f:caSecret":{}},"f:values":{},"f:version":{}}} Subresource:} {Manager:manager Operation:Update APIVersion:addons.cluster.x-k8s.io/v1alpha1 Time:2025-05-20 12:07:09 +0000 UTC FieldsType:FieldsV1 FieldsV1:{"f:status":{".":{},"f:conditions":{},"f:observedGeneration":{},"f:revision":{},"f:status":{}}} Subresource:status}]} Spec:{ClusterRef:{Kind:Cluster Namespace:quick-start-iqpjg3 Name:quick-start-roxfjyo8i6th7wm7b0mg2acbrzuyy3qvhkrarihir9anjnwivf7 UID: APIVersion:cluster.x-k8s.io/v1beta1 ResourceVersion: FieldPath:} ChartName:nutanix-cloud-provider RepoURL:oci://helm-repository.caren-system.svc/charts ReleaseName:nutanix-ccm ReleaseNamespace:kube-system Version:0.5.0 Values:prismCentralEndPoint: pc.ci.nkp.sh
prismCentralPort: 9440
prismCentralInsecure: false
ignoredNodeIPs: [ "10.23.132.23" ]

# The Secret containing the credentials will be created by the handler.
createSecret: false
secretName: nutanix-ccm-credentials ReconcileStrategy: Options:{DisableHooks:false Wait:false WaitForJobs:false DependencyUpdate:false Timeout:&Duration{Duration:10m0s,} SkipCRDs:false SubNotes:false DisableOpenAPIValidation:false Atomic:false Install:{CreateNamespace:true IncludeCRDs:false} Upgrade:{Force:false ResetValues:false ReuseValues:false ResetThenReuseValues:false Recreate:false MaxHistory:10 CleanupOnFail:false} Uninstall:<nil> EnableClientCache:false} Credentials:<nil> TLSConfig:0xc001788240} Status:{Conditions:[{Type:Ready Status:False Severity:Info LastTransitionTime:2025-05-20 12:07:09 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install} {Type:ClusterAvailable Status:True Severity: LastTransitionTime:2025-05-20 12:06:53 +0000 UTC Reason: Message:} {Type:HelmReleaseReady Status:False Severity:Info LastTransitionTime:2025-05-20 12:07:09 +0000 UTC Reason:HelmReleasePending Message:Helm release is in a pending state: pending-install}] Status:pending-install Revision:1 ObservedGeneration:1}}
`
Expected
    <bool>: false
to be true
In [It] at: /home/runner/_work/cluster-api-runtime-extensions-nutanix/cluster-api-runtime-extensions-nutanix/test/e2e/helmreleaseproxy_helpers.go:60 @ 05/20/25 12:14:55.294