From 79052b419a3da3b9ca865f50aed2869e581060ee Mon Sep 17 00:00:00 2001 From: Sai Shanmukha Date: Mon, 11 May 2026 10:44:29 -0500 Subject: [PATCH 1/7] Enable network policies in CI environment --- .secrets.baseline | 11 +---------- ci/default/values/values.yaml | 6 ++++++ 2 files changed, 7 insertions(+), 10 deletions(-) diff --git a/.secrets.baseline b/.secrets.baseline index 308844dcf..94f496fb5 100644 --- a/.secrets.baseline +++ b/.secrets.baseline @@ -366,15 +366,6 @@ "line_number": 14 } ], - "ci/default/values/values.yaml": [ - { - "type": "Secret Keyword", - "filename": "ci/default/values/values.yaml", - "hashed_secret": "b7b8a47965233bc6f8642e8fb4bcc0bdc171a79d", - "is_verified": false, - "line_number": 11 - } - ], "covid19prod/chicagoland.pandemicresponsecommons.org/values/values.yaml": [ { "type": "Secret Keyword", @@ -835,5 +826,5 @@ } ] }, - "generated_at": "2026-05-07T15:13:41Z" + "generated_at": "2026-05-11T15:44:23Z" } diff --git a/ci/default/values/values.yaml b/ci/default/values/values.yaml index 5833db1c4..a3ff1b9f2 100644 --- a/ci/default/values/values.yaml +++ b/ci/default/values/values.yaml @@ -40,6 +40,12 @@ mutatingWebhook: # -- (bool) Whether to deploy the mutating webhook service. enabled: false +netPolicy: + enabled: true + dbSubnets: + - 172.27.128.128/25 + - 172.27.128.0/25 + postgresql: primary: persistence: From 599c9cdc0bf617fafff9de34bd2f79aca937e551 Mon Sep 17 00:00:00 2001 From: Sai Shanmukha Date: Mon, 11 May 2026 12:24:23 -0500 Subject: [PATCH 2/7] Fix yaml indentation to set global.netPolicy appropriately --- ci/default/values/values.yaml | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/ci/default/values/values.yaml b/ci/default/values/values.yaml index a3ff1b9f2..bde2add19 100644 --- a/ci/default/values/values.yaml +++ b/ci/default/values/values.yaml @@ -35,16 +35,15 @@ global: topologyKey: "topology.kubernetes.io/zone" # -- (int) The maxSkew to use for topology spread constraints. Defaults to 1. maxSkew: 1 - + netPolicy: + enabled: true + dbSubnets: + - 172.27.128.128/25 + - 172.27.128.0/25 mutatingWebhook: # -- (bool) Whether to deploy the mutating webhook service. enabled: false -netPolicy: - enabled: true - dbSubnets: - - 172.27.128.128/25 - - 172.27.128.0/25 postgresql: primary: From e0cdbb88f554c009bf6bb103f740a63805f00d78 Mon Sep 17 00:00:00 2001 From: Sai Shanmukha Date: Tue, 12 May 2026 09:42:21 -0500 Subject: [PATCH 3/7] Choose custom test_repo_branch --- .github/workflows/integration_tests.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/integration_tests.yaml b/.github/workflows/integration_tests.yaml index 98fabf516..dd57e3691 100644 --- a/.github/workflows/integration_tests.yaml +++ b/.github/workflows/integration_tests.yaml @@ -12,6 +12,8 @@ jobs: integration_tests: name: Integration tests uses: uc-cdis/.github/.github/workflows/integration_tests.yaml@master + with: + TEST_REPO_BRANCH: "fix/field_name_typo_setupci_env" secrets: CI_TEST_ORCID_USERID: ${{ secrets.CI_TEST_ORCID_USERID }} CI_TEST_ORCID_PASSWORD: ${{ secrets.CI_TEST_ORCID_PASSWORD }} From bb849ac965c26bc3ff1d324d22950e1286773af8 Mon Sep 17 00:00:00 2001 From: Sai Shanmukha Date: Wed, 13 May 2026 09:21:15 -0500 Subject: [PATCH 4/7] Remove temporary pins for the TEST_REPO_BRANCH --- .github/workflows/integration_tests.yaml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/integration_tests.yaml b/.github/workflows/integration_tests.yaml index dd57e3691..98fabf516 100644 --- a/.github/workflows/integration_tests.yaml +++ b/.github/workflows/integration_tests.yaml @@ -12,8 +12,6 @@ jobs: integration_tests: name: Integration tests uses: uc-cdis/.github/.github/workflows/integration_tests.yaml@master - with: - TEST_REPO_BRANCH: "fix/field_name_typo_setupci_env" secrets: CI_TEST_ORCID_USERID: ${{ secrets.CI_TEST_ORCID_USERID }} CI_TEST_ORCID_PASSWORD: ${{ secrets.CI_TEST_ORCID_PASSWORD }} From dfe0f409337a7eceb14cb4e77c0691709619e8f5 Mon Sep 17 00:00:00 2001 From: Sai Shanmukha Narumanchi Date: Thu, 14 May 2026 09:20:37 -0500 Subject: [PATCH 5/7] Disable network policy in values.yaml Attempt to see if the tests are failing because of netpols --- ci/default/values/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci/default/values/values.yaml b/ci/default/values/values.yaml index bde2add19..a0aab92ad 100644 --- a/ci/default/values/values.yaml +++ b/ci/default/values/values.yaml @@ -36,7 +36,7 @@ global: # -- (int) The maxSkew to use for topology spread constraints. Defaults to 1. maxSkew: 1 netPolicy: - enabled: true + enabled: false dbSubnets: - 172.27.128.128/25 - 172.27.128.0/25 From 4a1736607ebec544b5a047f9bd24e4caee046857 Mon Sep 17 00:00:00 2001 From: Sai Shanmukha Narumanchi Date: Thu, 14 May 2026 12:21:26 -0500 Subject: [PATCH 6/7] Enable network policy in values.yaml --- ci/default/values/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci/default/values/values.yaml b/ci/default/values/values.yaml index a0aab92ad..bde2add19 100644 --- a/ci/default/values/values.yaml +++ b/ci/default/values/values.yaml @@ -36,7 +36,7 @@ global: # -- (int) The maxSkew to use for topology spread constraints. Defaults to 1. maxSkew: 1 netPolicy: - enabled: false + enabled: true dbSubnets: - 172.27.128.128/25 - 172.27.128.0/25 From 75439953e2ac5947371b2877c2d3b7ec3c42739c Mon Sep 17 00:00:00 2001 From: Krishna Agarwal <159047652+krishnaa05@users.noreply.github.com> Date: Tue, 14 Jul 2026 14:04:55 -0500 Subject: [PATCH 7/7] Dummy Commit