deads2k

metadata:
  annotations:
    k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.131.153.244/23"],"mac_address":"0a:58:0a:83:99:f4","gateway_ips":["10.131.152.1"],"routes":[{"dest":"10.128.0.0/14","nextHop":"10.131.152.1"},{"dest":"172.30.0.0/16","nextHop":"10.131.152.1"},{"dest":"169.254.169.5/32","nextHop":"10.131.152.1"},{"dest":"100.64.0.0/16","nextHop":"10.131.152.1"}],"ip_address":"10.131.153.244/23","gateway_ip":"10.131.152.1","role":"primary"}}'
    k8s.v1.cni.cncf.io/network-status: |-
      [{
          "name": "ovn-kubernetes",
          "interface": "eth0",
          "ips": [
              "10.131.153.244"
          ],

deads2k

apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  name: apiservers2.config.openshift.io
spec:
  group: config.openshift.io
  names:
    kind: APIServer2
    listKind: APIServer2List
    plural: apiservers2

deads2k

#!/bin/bash

trap 'echo "Caught interrupt! Gracefully delete 25s sleep to let another pod start..."; sleep 25; exit 0' INT

while true; do
    echo "Sleeping for 1h..."
    sleep 3600
done

deads2k

{
    "apiVersion": "v1",
    "items": [
        {
            "apiVersion": "operator.openshift.io/v1",
            "kind": "OpenShiftAPIServer",
            "metadata": {
                "annotations": {
                    "include.release.openshift.io/hypershift": "true",
                    "include.release.openshift.io/ibm-cloud-managed": "true",

deads2k

deads@fedora:~/workspaces/cluster-debug-tools/src/github.com/openshift/cluster-debug-tools$ ./kubectl-dev_tool audit -f '/home/deads/Downloads/audit-logs(10)/quay-io-openshift-release-dev-ocp-v4-0-art-dev-sha256-f55025d8e6fa790682fec7d7ab788bb062c413a076bb0358ab9df5a71f297ce1/audit_logs/kube-apiserver'  --resource=pods --name="pod-network-to-service-disruption-poller-565f9f69c4-nqjgl"
had 35202 line read failures
04:31:28 [CREATE][      6.25ms] [201] /api/v1/namespaces/e2e-pod-network-disruption-test-wwqv6/pods/pod-network-to-service-disruption-poller-565f9f69c4-nqjgl/binding             [system:kube-scheduler]
04:31:28 [UPDATE][    11.544ms] [200] /api/v1/namespaces/e2e-pod-network-disruption-test-wwqv6/pods/pod-network-to-service-disruption-poller-565f9f69c4-nqjgl/status              [system:ovn-node:worker-2]
04:31:28 [   GET][     2.039ms] [200] /api/v1/namespaces/e2e-pod-network-disruption-test-wwqv6/pods/pod-network-to-service-disruption-poller-565f9f69c4-nqjgl                     [system:node:worker-2]

deads2k

{
    "apiVersion": "jobset.x-k8s.io/v1alpha2",
    "kind": "JobSet",
    "metadata": {
        "name": "failurepolicy-abcdef",
        "creationTimestamp": null
    },
    "spec": {
        "replicatedJobs": [
            {

deads2k

deads@fedora:~/workspaces/kuberentes/src/k8s.io/kubernetes$ oc create -f ../jobset.yaml
The JobSet "failurepolicy" is invalid: 
* spec.replicatedJobs[0].template.spec.podFailurePolicy.rules[0].onPodConditions[0].status: Required value
* <nil>: Invalid value: "null": some validation rules were not checked because the object was invalid; correct the existing errors to complete validation

deads2k

{
  "apiVersion": "testing.openshift.io/v1",
  "kind": "SSAWithSet",
  "metadata": {
    "creationTimestamp": "2024-04-24T20:58:42Z",
    "generation": 1,
    "managedFields": [
      {
        "apiVersion": "testing.openshift.io/v1",
        "fieldsType": "FieldsV1",

deads2k

        {
            "GroupVersionResource": {
                "Group": "config.openshift.io",
                "Version": "v1",
                "Resource": "clusteroperators"
            },
            "RequestCounts": {
                "RequestStartedCount": 0,
                "RequestFinishedCount": 25256,
                "ClientFailedRequestCount": 1716,

deads2k

how do we ensure only a resource is managed by at most one operator install.

naivest approach:  **This one is subpar**
1. in-process controller determines list of all resources to be created
2. check each resource in the controller to see if it is owned by something else 
   (probably a list across all namespaces of something (extensions?) )
3. if there is another owner, the contorller refuses to create the resource

When I install an app I get a namespaced extension resource
1. extension resource exists in the namespace I installed the app in