Skip to content

Conversation

@stuggi
Copy link
Contributor

@stuggi stuggi commented Feb 12, 2026

With recent changes to the CI env we hit issues running envtest hitting timeouts in test since 25s was not enough, but also during kube-api startup and register custom CRDs before checks start and teardown of the kube-api. Therefore adding ControlPlaneStartTimeout and ControlPlaneStopTimeout bumping the default 60s to 120s.

Also hitting slow env and with our tests, we have seen that the default cluster ip range /24 is to small, increasing to /12

Also disable not required admission plugins for envtest: ResourceQuota: This stops the "quota evaluation timed out" error. The API server will no longer try to calculate how many resources exist before letting you create new ones.

ServiceAccount: This prevents the API server from looking for a ServiceAccount issuer or secret for every pod/resource. Since envtest doesn't run the ServiceAccount controller, this plugin often just causes unnecessary errors or delays.

NamespaceLifecycle: (Optional but recommended) This allows you to create resources in a namespace even if the namespace is in a "Terminating" state. This is very helpful when your cleanup is slow due to CPU throttling.

With recent changes to the CI env we hit issues running envtest
hitting timeouts in test since 25s was not enough, but also
during kube-api startup and register custom CRDs before checks
start and teardown of the kube-api. Therefore adding
ControlPlaneStartTimeout and ControlPlaneStopTimeout bumping the
default 60s to 120s.

Also hitting slow env and with our tests, we have seen that
the default cluster ip range /24 is to small, increasing to /12

Also disable not required admission plugins for envtest:
ResourceQuota: This stops the "quota evaluation timed out" error.
The API server will no longer try to calculate how many resources
exist before letting you create new ones.

ServiceAccount: This prevents the API server from looking for a
ServiceAccount issuer or secret for every pod/resource. Since
envtest doesn't run the ServiceAccount controller, this plugin
often just causes unnecessary errors or delays.

NamespaceLifecycle: (Optional but recommended) This allows you to
create resources in a namespace even if the namespace is in a
"Terminating" state. This is very helpful when your cleanup is
slow due to CPU throttling.

Signed-off-by: Martin Schuppert <mschuppert@redhat.com>

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
@openshift-ci openshift-ci bot requested review from abays and fultonj February 12, 2026 10:30
Copy link
Contributor

@abays abays left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Feb 12, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: abays, stuggi

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-merge-bot openshift-merge-bot bot merged commit bf686dc into openstack-k8s-operators:main Feb 12, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants