scripts: drop clusterapi step while k3s disabled#2927
Merged
Conversation
Commit 75b9d6c temporarily disabled the k3s tech preview by removing the 500-kubernetes.sh invocation from deploy-services.sh and upgrade-services.sh, but left the 510-clusterapi.sh invocation in place. That step runs "osism apply clusterapi" and the cert_manager play, both of which require the manager-local k3s / cluster-api management cluster and its kubeconfig at /share/kubeconfig, which 500-kubernetes.sh is what produces. With k3s no longer deployed the kubeconfig is never written, so the cert_manager role's first task "Deploy cert-manager crds" aborts and fails the Deploy services / Upgrade services step (rc=2): Could not find or access '/share/kubeconfig' on the Ansible Controller. This first hit testbed-update-stable-current-ubuntu-24.04 on the 2026-07-09 midnight run (the first run after 75b9d6c merged) and is persistent, not transient. Remove the clusterapi invocation from both scripts so the k8s tech preview is fully disabled as intended; it can be restored together with 500-kubernetes.sh once the k3s upgrade path is fixed. Assisted-by: Claude:claude-opus-4-8 Signed-off-by: Roger Luethi <luethi@osism.tech>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
testbed-update-stable-current-ubuntu-24.04started failing on the2026-07-09 midnight run (the first run after the commit below merged).
The
Deploy servicestask fails rc=2 in510-clusterapi.sh: thecert_managerrole's first taskDeploy cert-manager crdsaborts with/share/kubeconfigis the manager-local k3s / cluster-api managementcluster kubeconfig, produced by
scripts/deploy/500-kubernetes.sh.Root cause
Incomplete removal in:
That commit disabled the k3s tech preview by dropping the
500-kubernetes.shinvocation fromdeploy-services.shandupgrade-services.sh, but left the510-clusterapi.shinvocation inplace.
510-clusterapi.shrunsosism apply clusterapiand thecert_managerplay, both of which need the k3s cluster and its/share/kubeconfig. With k3s no longer deployed the kubeconfig is neverwritten, so cert_manager fails on every run — this is persistent, not a
flake.
Fix
Remove the
510-clusterapi.shinvocation from bothdeploy-services.shand
upgrade-services.shso the k8s tech preview is fully disabled asintended. It can be restored together with
500-kubernetes.shonce thek3s upgrade path is fixed.
🤖 Generated with Claude Code