Introduce MachineSet scale test by Jakob-Naucke · Pull Request #162 · confidential-clusters/operator

Jakob-Naucke · 2026-08-14T11:09:17Z

Create MachineConfig, MachineConfigPool & MachineSet. Includes pluggable modules for TEE platforms, and Azure as a first module.

Test with 1 & 2 replicas. Test with a replica after deletion.

Operator components are deployed in the same cluster, i.e. no bootstrap functionality.

Will not work until coreos/fedora-coreos-tracker#2191 is resolved, but already gets to Azure machine creation (with no ignition) in this state.

In a separate, revertable commit, add a workaround for openshift/api#2978.

Before that, update operator and drift cache. Add a skill to do so.

Bundle build is expected to fail until trusted-execution-clusters/operator#337 is merged and can be pulled in.

uril · 2026-08-17T14:19:27Z

+        let client = self.test_ctx.client();
+        let machine_name = &self.machine_name;
+
+        self.test_ctx.info("Cleaning up");


Perhaps start with setting replicas=0 for the machine-set (or is it done as part of the tests?)

Good point, have added

uril · 2026-08-17T14:33:51Z

+            spec: MachineConfigSpec {
+                os_image_url: Some(bootc_image),
+                ..Default::default()
+            },


Wasn't there one more required configuration for a machine to become a node -- such that OpenShift accepts the custom RHCOS image ?

None that I remember, but I can't really test it right now

uril · 2026-08-17T14:45:13Z

+        test_ctx.info("Updating MachineSet replicas to 0");
+        let rp = Default::default();
+        machinesets.replace(machine_name, &rp, &mset).await?;
+        scale_ctx.has_replicas(0, scaled_duration(60)).await?;


nit: in a later PR we can write a function to update the machineset replicas (and possibly another one that also waits for the replicas to come up)

uril

Looks good to me, with some comments

Jakob-Naucke · 2026-08-21T16:50:10Z

@uril I added the adaptation for the single Containerfile from @yairpod, if it's too big we can also get this from a separate PR. In any case we need #163 first.

accounting for Containerfile unification, bumping buildroot Signed-off-by: Jakob Naucke <jnaucke@redhat.com> Assisted-by: AI

Signed-off-by: Jakob Naucke <jnaucke@redhat.com> Assisted-by: AI

Create MachineConfig, MachineConfigPool & MachineSet. Includes pluggable modules for TEE platforms, and Azure as a first module. Test with 1 & 2 replicas. Test with a replica after deletion. Operator components are deployed in the same cluster, i.e. no bootstrap functionality. Will not work until coreos/fedora-coreos-tracker#2191 is resolved, but already gets to Azure machine creation (with no ignition) in this state. Signed-off-by: Jakob Naucke <jnaucke@redhat.com> Assisted-by: AI

has an incompatible validation rule Signed-off-by: Jakob Naucke <jnaucke@redhat.com> Assisted-by: AI

uril · 2026-08-27T17:27:57Z

Now that a single Containerfile is used, 'build_target' must be passed to buildah.
These are set under .tekton/ for example:

diff --git a/.tekton/attestation-key-register-pull-request.yaml b/.tekton/attestation-key-register-pull-request.yaml
index 90ec16d..3806e91 100644
--- a/.tekton/attestation-key-register-pull-request.yaml
+++ b/.tekton/attestation-key-register-pull-request.yaml
@@ -31,6 +31,7 @@ spec:
   - name: build-args
     value:
     - build_type=release
+    - build_target=attestation-key-register
   pipelineSpec:
     description: |
       This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.

uril · 2026-08-27T20:49:47Z

+ARG build_target=operator
+
+# Unified builder stage, compiles all binaries in a single cargo invocation.
+FROM quay.io/redhat-user-workloads/cocl-operator-tenant/buildroot@sha256:34806c0eb874b00bcd0fc90241746404e051070b278ac0351e5c8873ffda8b39


... AS builder

I added a fix for that in #166

uril · 2026-08-28T20:15:45Z

Now that a single Containerfile is used, 'build_target' must be passed to buildah.

I added a fix for that in #166

Jakob-Naucke mentioned this pull request Aug 14, 2026

[nudge] Update confidential-cluster-operator to 70c1cb9 #158

Open

1 task

uril reviewed Aug 17, 2026

View reviewed changes

Jakob-Naucke force-pushed the scale-test branch from 1920336 to 2e9723b Compare August 18, 2026 12:43

uril reviewed Aug 18, 2026

View reviewed changes

Comment thread tests/scale.rs Outdated

Jakob-Naucke force-pushed the scale-test branch 2 times, most recently from 132dd36 to 7e7133d Compare August 21, 2026 16:44

Jakob-Naucke force-pushed the scale-test branch 5 times, most recently from e90051d to 346ffd6 Compare August 27, 2026 14:59

Jakob-Naucke added 4 commits August 27, 2026 18:58

Update operator to 1b8651e

49837db

accounting for Containerfile unification, bumping buildroot Signed-off-by: Jakob Naucke <jnaucke@redhat.com> Assisted-by: AI

Add skill for submodule drift cache update

1b00b60

Signed-off-by: Jakob Naucke <jnaucke@redhat.com> Assisted-by: AI

OpenShift API controller-gen workaround

2660e54

has an incompatible validation rule Signed-off-by: Jakob Naucke <jnaucke@redhat.com> Assisted-by: AI

Jakob-Naucke force-pushed the scale-test branch from 346ffd6 to 2660e54 Compare August 27, 2026 16:58

uril reviewed Aug 27, 2026

View reviewed changes

Jakob-Naucke mentioned this pull request Aug 31, 2026

Update operator submodule to 53fb1ed #168

Merged

Navigation Menu

Uh oh!

Introduce MachineSet scale test - #162

Introduce MachineSet scale test#162
Jakob-Naucke wants to merge 4 commits into
confidential-clusters:mainfrom
Jakob-Naucke:scale-test

Jakob-Naucke commented Aug 14, 2026 •

edited

Loading

Uh oh!

uril Aug 17, 2026

Uh oh!

Jakob-Naucke Aug 18, 2026

Uh oh!

uril Aug 17, 2026 •

edited

Loading

Uh oh!

Jakob-Naucke Aug 18, 2026

Uh oh!

uril Aug 17, 2026

Uh oh!

uril left a comment

Uh oh!

Uh oh!

Jakob-Naucke commented Aug 21, 2026

Uh oh!

uril commented Aug 27, 2026 •

edited

Loading

Uh oh!

uril Aug 27, 2026

Uh oh!

uril Aug 28, 2026

Uh oh!

uril commented Aug 28, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

Jakob-Naucke commented Aug 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

uril Aug 17, 2026

Choose a reason for hiding this comment

Uh oh!

Jakob-Naucke Aug 18, 2026

Choose a reason for hiding this comment

Uh oh!

uril Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Jakob-Naucke Aug 18, 2026

Choose a reason for hiding this comment

Uh oh!

uril Aug 17, 2026

Choose a reason for hiding this comment

Uh oh!

uril left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Jakob-Naucke commented Aug 21, 2026

Uh oh!

uril commented Aug 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

uril Aug 27, 2026

Choose a reason for hiding this comment

Uh oh!

uril Aug 28, 2026

Choose a reason for hiding this comment

Uh oh!

uril commented Aug 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Jakob-Naucke commented Aug 14, 2026 •

edited

Loading

uril Aug 17, 2026 •

edited

Loading

uril commented Aug 27, 2026 •

edited

Loading

uril commented Aug 28, 2026 •

edited

Loading