Skip to content

Set edpm_bootstrap_selinux_mode to permissive for cs10 node - #4217

Open
raukadah wants to merge 1 commit into
openstack-k8s-operators:mainfrom
raukadah:permissive
Open

raukadah wants to merge 1 commit into
openstack-k8s-operators:mainfrom
raukadah:permissive

Conversation

@raukadah

@raukadah raukadah commented Sep 30, 2026 •

Copy link
Copy Markdown
Contributor

Watcher scenario tempest tests are failing during live migration due to selinux issue[1].

The existing CS10 node has selinux enforcing and AVC message show permissive issue messages[2].

Moving the selinux mode to permissive temprorily unblocks the CI and make the tests passing[3] in watcher-s2i-tempest job.

Links:
[1]. https://redhat.atlassian.net/browse/OSPRH-38347
[2]. openstack-k8s-operators/watcher-operator#450 (comment)
[3]. openstack-k8s-operators/watcher-operator#450 (comment)

@openshift-ci

openshift-ci Bot commented Sep 30, 2026

Copy link
Copy Markdown
Contributor

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@openshift-ci

openshift-ci Bot commented Sep 30, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign yorabl for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@centosinfra-prod-github-app

Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/buildset/e68133235151403a9e86d4afc7ade07b

❌ openstack-k8s-operators-content-provider FAILURE in 5m 17s
⚠️ podified-multinode-edpm-deployment-crc SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
⚠️ podified-multinode-edpm-deployment-crc-centos-10 SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
⚠️ cifmw-crc-podified-edpm-baremetal SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
⚠️ cifmw-crc-podified-edpm-baremetal-minor-update SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
❌ openstack-k8s-operators-content-provider-bootc FAILURE in 5m 25s
⚠️ cifmw-crc-podified-edpm-baremetal-bootc SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider-bootc
⚠️ adoption-standalone-to-crc-ceph-provider SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 8m 23s
✔️ cifmw-pod-pre-commit SUCCESS in 7m 55s

raukadah added a commit to raukadah/watcher-operator that referenced this pull request Sep 30, 2026
This pr adds watcher-operator-base-centos-10 as a base job to run
edpm jobs on centos stream 10. It then repalces the existing
watcher-s2i-tempest parent with cs10.

On CS10, migration tests are failing due to selinux issue.
openstack-k8s-operators/ci-framework#4217 changes the selinux
mode to permissive to address the same.

Depends-On: openstack-k8s-operators/ci-framework#4217

Signed-off-by: Chandan <raukadah@gmail.com>
@raukadah raukadah changed the title [DNM] cs10 selinux permissive edpm node Set edpm_bootstrap_selinux_mode to permissive for cs10 node Sep 30, 2026
@raukadah
raukadah marked this pull request as ready for review September 30, 2026 11:18
@qodo-code-review

Copy link
Copy Markdown

Qodo reviews are paused for this user.

Troubleshooting steps vary by plan Learn more →

On a Teams plan?
Reviews resume once this user has a paid seat and their Git account is linked in Qodo.
Link Git account →

Using GitHub Enterprise Server, GitLab Self-Managed, or Bitbucket Data Center?
These require an Enterprise plan - Contact us
Contact us →

@centosinfra-prod-github-app

Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/buildset/603aa1648384445c90dc13785b5aa2a3

❌ openstack-k8s-operators-content-provider FAILURE in 5m 40s
⚠️ podified-multinode-edpm-deployment-crc SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
⚠️ podified-multinode-edpm-deployment-crc-centos-10 SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
⚠️ cifmw-crc-podified-edpm-baremetal SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
⚠️ cifmw-crc-podified-edpm-baremetal-minor-update SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
❌ openstack-k8s-operators-content-provider-bootc FAILURE in 5m 19s
⚠️ cifmw-crc-podified-edpm-baremetal-bootc SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider-bootc
⚠️ adoption-standalone-to-crc-ceph-provider SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 8m 34s
✔️ cifmw-pod-pre-commit SUCCESS in 7m 50s

@karelyatin

Copy link
Copy Markdown
Contributor

/lgtm

@raukadah

raukadah commented Oct 1, 2026

Copy link
Copy Markdown
Contributor Author

recheck

@centosinfra-prod-github-app

Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/buildset/df7bfd32a5cc4c78bc63f429a823b629

✔️ openstack-k8s-operators-content-provider SUCCESS in 2h 14m 38s
✔️ podified-multinode-edpm-deployment-crc SUCCESS in 1h 22m 12s
✔️ podified-multinode-edpm-deployment-crc-centos-10 SUCCESS in 1h 23m 07s
✔️ cifmw-crc-podified-edpm-baremetal SUCCESS in 1h 39m 14s
✔️ cifmw-crc-podified-edpm-baremetal-minor-update SUCCESS in 1h 56m 22s
✔️ openstack-k8s-operators-content-provider-bootc SUCCESS in 2h 09m 12s
✔️ cifmw-crc-podified-edpm-baremetal-bootc SUCCESS in 1h 28m 54s
❌ adoption-standalone-to-crc-ceph-provider FAILURE in 1h 57m 06s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 10m 17s
✔️ cifmw-pod-pre-commit SUCCESS in 10m 47s

Watcher scenario tempest tests are failing during live migration due
to selinux issue[1].

The existing CS10 node has selinux enforcing and AVC message show
permissive issue messages[2].

Moving the selinux mode to permissive temprorily unblocks the CI
and make the tests passing[3] in watcher-s2i-tempest job.

Links:
[1]. https://redhat.atlassian.net/browse/OSPRH-38347
[2]. openstack-k8s-operators/watcher-operator#450 (comment)
[3]. openstack-k8s-operators/watcher-operator#450 (comment)

Signed-off-by: Chandan <raukadah@gmail.com>
@openshift-ci

openshift-ci Bot commented Oct 5, 2026

Copy link
Copy Markdown
Contributor

New changes are detected. LGTM label has been removed.

@centosinfra-prod-github-app

Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/buildset/0d791794fb5d4bf996ca0dd5f8afb233

✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 18m 21s
✔️ podified-multinode-edpm-deployment-crc SUCCESS in 1h 17m 19s
✔️ podified-multinode-edpm-deployment-crc-centos-10 SUCCESS in 1h 19m 42s
✔️ cifmw-crc-podified-edpm-baremetal SUCCESS in 1h 34m 26s
✔️ cifmw-crc-podified-edpm-baremetal-minor-update SUCCESS in 1h 59m 13s
✔️ openstack-k8s-operators-content-provider-bootc SUCCESS in 2h 27m 00s
✔️ cifmw-crc-podified-edpm-baremetal-bootc SUCCESS in 1h 24m 50s
❌ adoption-standalone-to-crc-ceph-provider FAILURE in 1h 55m 44s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 8m 47s
✔️ cifmw-pod-pre-commit SUCCESS in 8m 52s

@raukadah

raukadah commented Oct 5, 2026

Copy link
Copy Markdown
Contributor Author

recheck

@centosinfra-prod-github-app

Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/buildset/f56c29f4ffe24ef99849330140308d8b

✔️ openstack-k8s-operators-content-provider SUCCESS in 2h 35m 42s
✔️ podified-multinode-edpm-deployment-crc SUCCESS in 1h 17m 45s
✔️ podified-multinode-edpm-deployment-crc-centos-10 SUCCESS in 1h 17m 26s
✔️ cifmw-crc-podified-edpm-baremetal SUCCESS in 1h 29m 10s
✔️ cifmw-crc-podified-edpm-baremetal-minor-update SUCCESS in 1h 59m 19s
✔️ openstack-k8s-operators-content-provider-bootc SUCCESS in 2h 12m 22s
✔️ cifmw-crc-podified-edpm-baremetal-bootc SUCCESS in 1h 32m 58s
❌ adoption-standalone-to-crc-ceph-provider FAILURE in 1h 55m 32s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 8m 37s
✔️ cifmw-pod-pre-commit SUCCESS in 8m 14s

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants