Skip to content

Conversation

@aabughosh
Copy link
Contributor

regarding to this bug https://issues.redhat.com/browse/MCO-1886

- What I did
added a new ClusterIP Service machine-config-server in openshift-machine-config-operator.
Exposes TCP ports 22623 (https) and 22624 (http) used by the Machine Config Server.

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Oct 23, 2025
@openshift-ci-robot
Copy link
Contributor

openshift-ci-robot commented Oct 23, 2025

@aabughosh: This pull request references MCO-1886 which is a valid jira issue.

In response to this:

regarding to this bug https://issues.redhat.com/browse/MCO-1886

- What I did
added a new ClusterIP Service machine-config-server in openshift-machine-config-operator.
Exposes TCP ports 22623 (https) and 22624 (http) used by the Machine Config Server.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@aabughosh
Copy link
Contributor Author

/retest

3 similar comments
@aabughosh
Copy link
Contributor Author

/retest

@aabughosh
Copy link
Contributor Author

/retest

@aabughosh
Copy link
Contributor Author

/retest

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Oct 28, 2025

@aabughosh: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/bootstrap-unit ae580ee link false /test bootstrap-unit

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@yuqi-zhang
Copy link
Contributor

Seems like this is passing CI. For safety:

/payload 4.21 nightly blocking

As I understand it ClusterIP will expose this as a cluster-internal service, so the security and access of the port should be unchanged. This will also not affect any existing workflows since new nodes can continue using host network directly. Is that understanding correct?

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Oct 29, 2025

@yuqi-zhang: trigger 13 job(s) of type blocking for the nightly release of OCP 4.21

  • periodic-ci-openshift-release-master-ci-4.21-e2e-aws-upgrade-ovn-single-node
  • periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-upgrade-fips
  • periodic-ci-openshift-release-master-ci-4.21-e2e-azure-ovn-upgrade
  • periodic-ci-openshift-release-master-ci-4.21-upgrade-from-stable-4.20-e2e-gcp-ovn-rt-upgrade
  • periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-aws-ovn-conformance
  • periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-serial-1of2
  • periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-serial-2of2
  • periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview
  • periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview-serial-1of3
  • periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview-serial-2of3
  • periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview-serial-3of3
  • periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-bm
  • periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-ipv6

See details on https://pr-payload-tests.ci.openshift.org/runs/ci/52b3a7b0-b51d-11f0-9ba0-c565ac040e58-0

@aabughosh
Copy link
Contributor Author

@yuqi-zhang Yes, that’s correct. We’re keeping the machine-config-server Service as ClusterIP. The server pods already run with hostNetwork: true, so ports 22623/22624 are exposed on the node IPs. The ClusterIP only provides an in-cluster virtual IP and doesn’t change the external exposure or access behavior

Copy link
Contributor

@yuqi-zhang yuqi-zhang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

Thanks for the explanation. I think we should be safe to progress here given green CI.

@aabughosh do you need additional verification? Otherwise feel free to mark this with /verified by ...

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Nov 3, 2025
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Nov 3, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: aabughosh, yuqi-zhang

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Nov 3, 2025
@aabughosh
Copy link
Contributor Author

/verified @yuqi-zhang

@openshift-ci-robot
Copy link
Contributor

@aabughosh: The /verified command must be used with one of the following actions: by, later, remove, or bypass. See https://docs.ci.openshift.org/docs/architecture/jira/#premerge-verification for more information.

In response to this:

/verified @yuqi-zhang

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@aabughosh
Copy link
Contributor Author

/verified by @yuqi-zhang

@openshift-ci-robot openshift-ci-robot added the verified Signifies that the PR passed pre-merge verification criteria label Nov 4, 2025
@openshift-ci-robot
Copy link
Contributor

@aabughosh: This PR has been marked as verified by @yuqi-zhang.

In response to this:

/verified by @yuqi-zhang

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot
Copy link
Contributor

/retest-required

Remaining retests: 0 against base HEAD e0a76a2 and 2 for PR HEAD ae580ee in total

@openshift-merge-bot openshift-merge-bot bot merged commit 747fddc into openshift:main Nov 4, 2025
14 of 15 checks passed
@aabughosh
Copy link
Contributor Author

/cherry-pick release-4.20

@openshift-cherrypick-robot

@aabughosh: new pull request created: #5393

In response to this:

/cherry-pick release-4.20

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@yuqi-zhang yuqi-zhang changed the title MCO-1886: add the missing service to the expose ports 22623 and 22624 OCPBUGS-65544: MCO-1886: add the missing service to the expose ports 22623 and 22624 Nov 12, 2025
@openshift-ci-robot
Copy link
Contributor

@aabughosh: Jira Issue OCPBUGS-65544: Some pull requests linked via external trackers have merged:

The following pull request, linked via external tracker, has not merged:

All associated pull requests must be merged or unlinked from the Jira bug in order for it to move to the next state. Once unlinked, request a bug refresh with /jira refresh.

Jira Issue OCPBUGS-65544 has not been moved to the MODIFIED state.

This PR is marked as verified. If the remaining PRs listed above are marked as verified before merging, the issue will automatically be moved to VERIFIED after all of the changes from the PRs are available in an accepted nightly payload.

In response to this:

regarding to this bug https://issues.redhat.com/browse/MCO-1886

- What I did
added a new ClusterIP Service machine-config-server in openshift-machine-config-operator.
Exposes TCP ports 22623 (https) and 22624 (http) used by the Machine Config Server.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@aabughosh
Copy link
Contributor Author

/cherry-pick release-4.19

@openshift-cherrypick-robot

@aabughosh: new pull request created: #5473

In response to this:

/cherry-pick release-4.19

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged. verified Signifies that the PR passed pre-merge verification criteria

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants