Aleksei Sviridkin f73ffc54a8 test(cacert): surface cleanup failures in the writer-policy suite ...

The script step grants the tenant default ServiceAccount Secret write via a
RoleBinding so its probe requests reach admission, and Chainsaw does not
reclaim objects created with kubectl inside a script step, so a trap prunes
them by hand. Masking those deletes with `|| true` let a failed delete
leave the elevated RoleBinding behind for the next suite. Run every delete,
preserve the test's own exit status, and fail the step on a genuine cleanup
error instead of swallowing it.

Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-07-21 17:16:48 +03:00

..

e2e-apps

test(e2e): poll users-Job DESIRED_USERS_JSON for target email, not just Job existence

2026-07-15 15:31:45 +03:00

e2e-chainsaw

test(cacert): surface cleanup failures in the writer-policy suite

2026-07-21 17:16:48 +03:00

testdata

fix(platform): hand seaweedfs-db over for every instance name, not just the default

2026-07-20 15:40:48 +05:00

admin-kubeconfig-invariant.bats

fix(kubernetes): history guard non-empty check + nits from review

2026-04-16 21:50:10 +03:00

boilerplate.go.txt

Introduce cozystack-controller (#560)

2025-01-09 12:24:51 +01:00

build-matrix_test.bats

test: make negative bats assertions fail under cozytest (#3132)

2026-06-30 21:27:36 +03:00

build-matrix.sh

fix(build): force full image rebuild on root Go source changes

2026-06-25 10:21:05 +05:00

buildkitd.toml

ci(build): route PR base-image pulls through mirror.gcr.io

2026-06-24 23:17:25 +03:00

capture-dataplane.bats

test: make negative bats assertions fail under cozytest

2026-06-30 19:53:09 +03:00

cdi_golden_image_create.sh

[vm-default-images] Added new optional package

2026-04-14 19:59:19 +05:00

check-applicationdefinition-crd-ordering.bats

fix(platform): make *-rd sources depend on cozystack-engine

2026-06-24 22:43:56 +03:00

check-gpu-operator-variants.bats

feat(gpu-operator): add container variant for preinstalled host driver

2026-06-08 16:58:51 +03:00

check-gpu-recording-rules.bats

docs(monitoring): comment bats regex rule-name convention

2026-04-19 11:10:43 +03:00

check-host-runtime.bats

test(hack): assert sudo prefix in single-service HINTs, explicit exit code, and glob regression

2026-04-11 14:36:58 +03:00

check-host-runtime.sh

fix(hack): wrap du in 'timeout 5s' to prevent preflight stall

2026-04-11 17:07:35 +03:00

check-kafka-rd-schema.bats

test(kafka): assert scalar boolean tls.enabled type in rd-schema check

2026-05-27 16:21:46 +03:00

check-kafka-rd-secrets.bats

test(kafka): add cluster-ca-cert checks to kafka-rd secrets bats test

2026-05-27 11:16:41 +03:00

check-migrations-target.sh

refactor(hack): replace ls|grep with pure-bash glob (shellcheck SC2010)

2026-07-14 13:08:54 +03:00

check-optional-repos.sh

Rename cozypkg to cozyhr

2025-12-25 16:54:22 +01:00

check-publish-ca-cert-writer-pin.bats

test(cozystack-basics): run the CA writer-pin check under POSIX sh

2026-07-21 17:16:47 +03:00

check-rd-presets.sh

fix(hack): tighten resourcesPreset enum check

2026-05-12 03:04:48 +03:00

cilium-leak-healer_test.bats

fix(e2e): skip cilium-agent restart for the reserved:ingress IP variant

2026-06-30 19:40:47 +03:00

collect-images.sh

[dx] Refactor collect-images functionality

2025-07-03 14:26:56 +03:00

common-envs.mk

ci(build): drop the build-parity workflow

2026-06-23 11:14:25 +05:00

cozyreport-summary.sh

fix(cozyreport): portability and Ready-filter fixes from review

2026-05-04 11:17:35 +05:00

cozyreport.sh

test(e2e): capture LINSTOR satellite ErrorReports in cozyreport

2026-07-05 21:50:46 +03:00

cozystack-version-stamp.bats

test(platform): enforce go-forward version stamps route through the helper

2026-06-24 15:32:52 +03:00

cozytest.sh

test(e2e): capture host->pod data-plane on failure

2026-06-25 02:17:59 +03:00

dcgm-default-counters.csv

fix(gpu-operator): pin upstream behavior changes; correct DLS licensing example

2026-04-30 14:52:56 +03:00

download-dashboards.sh

Add monitoring for NATs

2026-02-17 22:54:12 +01:00

downstream-trigger-map.bats

docs(agents): add downstream repository checklist to the PR template

2026-07-14 17:07:47 +03:00

e2e-capture-dataplane.sh

test(e2e): make the LoadBalancer announcer detection failover-robust

2026-06-25 17:07:16 +03:00

e2e-cilium-endpoint-leak-healer.sh

fix(e2e): skip cilium-agent restart for the reserved:ingress IP variant

2026-06-30 19:40:47 +03:00

e2e-cilium-leak-healer.yaml

fix(e2e): skip cilium-agent restart for the reserved:ingress IP variant

2026-06-30 19:40:47 +03:00

e2e-install-cozystack.bats

fix(platform): route OIDC backend calls through the in-cluster Keycloak by default

2026-07-14 14:22:46 +03:00

e2e-post-install-prep.sh

fix(e2e): gate LINSTOR node-list probe on a ready controller endpoint

2026-07-09 00:44:34 +03:00

e2e-prepare-cluster.bats

test(e2e): widen etcd convergence budget to 5m in Talos bootstrap

2026-06-24 22:10:11 +03:00

e2e-prepull-images.sh

test(e2e): pre-pull platform images via staged-busybox DaemonSet

2026-05-25 11:56:30 +05:00

e2e-talos-image-cache.yaml

test(e2e): make the talos image cache reachable by tenant workers (#3254)

2026-07-09 18:21:07 +05:00

e2e-test-openapi.bats

test(e2e): replace fixed timeouts with event-driven backstops

2026-05-02 18:00:03 +05:00

etcd-probe_test.bats

test(etcd): stop losing the metrics probe's output to the attach race

2026-07-19 20:16:01 +03:00

helm-unit-tests.sh

feat: Gateway API support via Cilium

2026-05-25 17:07:02 +03:00

kubernetes-md0-migration.bats

test(platform): cover migration 47 fail-closed contract

2026-06-30 12:08:18 +05:00

md-no-hardwrap.bats

feat(agents): add md-no-hardwrap hook enforcing the prose rule

2026-07-14 14:37:52 +03:00

migrate-to-version-1.0.sh

Fixed packages name conversion in migration script

2026-03-03 19:10:39 +05:00

migration-50-etcd-adopt.bats

feat(platform): make the etcd-adoption skip-backup hatch reachable

2026-07-20 11:29:09 +05:00

migration-seaweedfs-db-adopt.bats

test(seaweedfs): run the db-adopt migrations in the shell they ship with

2026-07-20 15:40:49 +05:00

monitoring-pvc-backfill-migration.bats

test(monitoring): reproduce the real vmselect cache PVC name in the backfill test

2026-07-08 22:27:42 +03:00

nightly-mirror_test.bats

fix(ci): type-guard the concatenated keys in the ref selectors

2026-07-21 11:06:47 +05:00

nightly-mirror.sh

fix(ci): type-guard the concatenated keys in the ref selectors

2026-07-21 11:06:47 +05:00

overlay-main-images_test.bats

fix(ci): preserve a PR's own edits to non-rebuilt package image refs

2026-06-30 16:56:33 +03:00

overlay-main-images.sh

fix(ci): preserve a PR's own edits to non-rebuilt package image refs

2026-06-30 16:56:33 +03:00

package.mk

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

pre-checks.sh

Fix osx grep have no -P flag (#438)

2024-10-21 11:59:56 +02:00

promote-retag_test.bats

fix(ci): collect image refs whose host is outside repository

2026-07-21 11:04:21 +05:00

promote-retag.sh

fix(ci): type-guard the concatenated keys in the ref selectors

2026-07-21 11:06:47 +05:00

remediation-guard.bats

test(e2e): migrate app suite from BATS to Chainsaw and wire into CI

2026-06-25 13:42:34 +05:00

run-kubernetes-drain_test.bats

test(e2e): fix post-merge seams the conflict markers missed

2026-07-08 18:06:22 +05:00

seaweedfs-guard-parity.bats

fix(seaweedfs): stop the naming guard guessing which volume generation holds the data

2026-07-20 15:40:48 +05:00

seaweedfs-naming-audit.bats

fix(seaweedfs): decide MIXED direction by relative PV vintage, not a clock window

2026-07-20 15:40:49 +05:00

seaweedfs-naming-audit.sh

fix(hack): make the seaweedfs naming audit POSIX sh

2026-07-20 15:40:49 +05:00

select-e2e_test.bats

test(postgres): run the backup round-trip e2e in CI under TIA

2026-07-16 21:44:41 +04:00

select-e2e.sh

test(postgres): run the backup round-trip e2e in CI under TIA

2026-07-16 21:44:41 +04:00

select-install_test.bats

test(sdn): scope the new validate test's comment to what it proves

2026-07-17 14:45:58 +04:00

select-install.sh

test(cacert): map the e2e suite to its install source

2026-07-21 17:16:48 +03:00

talos-image-cache_test.bats

test(e2e): make the talos image cache reachable by tenant workers (#3254)

2026-07-09 18:21:07 +05:00

update-codegen.sh

feat(api): typed waitStrategy/healthCheckExprs for kstatus readiness (#2642) (#3273)

2026-07-21 17:02:37 +05:00

update-crd.sh

refactor(labels): remove cozystack.io/ui label

2026-01-19 13:59:29 +01:00

upload-assets.sh

[docs] Added openapi generation tool

2026-03-25 15:57:25 +05:00

upload-releasenotes.sh

Add AI-agent for changelogs generation

2025-11-26 20:18:43 +01:00