Skip to content

feat(MASCORE-17804): Add fvt-gitops PostSync runner — compute enabled_apps, fix RBAC, resource prefix, and imagePullSecrets - #591

Open
Hardik-Prajapati-10 wants to merge 18 commits into
mainfrom
fvt-gitops-main
Open

Hardik-Prajapati-10 wants to merge 18 commits into
mainfrom
fvt-gitops-main

Conversation

@Hardik-Prajapati-10

@Hardik-Prajapati-10 Hardik-Prajapati-10 commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

Epic: https://jsw.ibm.com/browse/MASR-10793
Story: https://jsw.ibm.com/browse/MASCORE-17804

Summary

Introduces the fvt-gitops-runner Helm sub-chart as a PostSync Job that runs the FVT gitops test suite after an ArgoCD sync. This PR brings all changes authored by Hardik-Prajapati from the fvt-gitops branch onto a clean main-based branch.

Changes

  • Initial chart scaffolding — added sub-charts/fvt-gitops-runner with Chart.yaml, values.yaml, README.md, and postsync-fvt-gitops-job.yaml; packaged as fvt-gitops-runner-1.0.0.tgz under instance-applications/600-ibm-post-sync-jobs/charts/
  • Cross-namespace RBAC — added Role/RoleBinding for mas-<instance>-core, argo namespace, and a ClusterRole/ClusterRoleBinding for clusterversions, namespaces, and catalogsources
  • imagePullSecrets — moved ibm-entitlement pull secret to the Job pod spec instead of the ServiceAccount
  • Job lifecycle — kept pod alive after success for log inspection; set backoffLimit: 1
  • Manage RBAC — added Role/RoleBinding for mas-<instance>-manage namespace; exposed OpenShift console route; added ARGOCD_APP_NAME env var
  • enabled_apps computation — dynamically derives the list of installed MAS apps from cluster state instead of a static value
  • Resource prefix fix — changed $prefix from "fvt-gitops-<test_suite>" to a fixed "fvt-gitops" to eliminate stale test_suite references in resource names
  • product_channel value — added product_channel: "gitops" to values.yaml for MongoDB result recording via ubi-fvt

Testing

  • Validated by running PostSync job against a live MAS instance via ArgoCD
  • helm lint and verify-job-definitions pre-commit hooks pass

… helm dep update

- Copy updated postsync-fvt-gitops-job.yaml from fvt-gitops repo into sub-charts/
- Add cross-namespace Role+RoleBinding for mas-<instance>-core and argo namespace
- Add ClusterRole+ClusterRoleBinding for clusterversions, namespaces, catalogsources
- Add imagePullSecrets (ibm-entitlement) on job pod spec
- Add product_channel and argo_namespace to values.yaml
- Regenerate charts/fvt-gitops-runner-1.0.0.tgz via helm dependency update
This reverts commit 48a5f7e.
- Replace static test_suite with enabled_apps in fvt-gitops-runner sub-chart
- 600-ibm-post-sync-jobs: build enabled_apps list from ibm_suite_app_manage_install
  (suite always included; manage appended when Manage is installed)
- Job entrypoint changed from pytest_runner.sh to run_suites.sh
- instance-applications/600-ibm-post-sync-jobs/values.yaml: test_suite → enabled_apps
@Hardik-Prajapati-10 Hardik-Prajapati-10 self-assigned this Sep 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant