From ecbe5d06fe27e4b3b2c280200cb189f5e4e56624 Mon Sep 17 00:00:00 2001 From: Nelson Parente Date: Thu, 21 May 2026 12:20:37 +0100 Subject: [PATCH] ci(e2e): bump pinned runtime version from 1.17.3 to 1.17.7 The E2E - KinD non-HA matrix has been red for 10 days (since 2026-05-11). TestRenewCertificateMTLSEnabled hangs at the 25-minute suite timeout in the "Renew certificate which expires in less than 30 days" subtest. Root cause: PR #1629 bumped github.com/dapr/dapr from v1.17.3 to a pseudo-version (commit f8d0f6142987, 2026-04-25) to pull in the workflow proto renames. That commit also includes #9598 (Sentry: Ed25519 for X.509 cert key generation, merged 2026-03-18). The CLI now generates Ed25519 root/issuer certs via bundle.GenerateX509(). The E2E pinned runtime was 1.17.3, whose sentry cannot parse Ed25519 keys -- it crashes on startup with "unsupported key type ed25519.PrivateKey" (a known issue documented in the 1.18 release notes as the "rollback floor is 1.17.7" caveat). After the cert renewal step, sentry crash-loops and the post-renewal `kubectl rollout status` call (which has no timeout) blocks until the 25-minute test alarm fires. Bumping the pinned version to 1.17.7 -- the first stable release that includes the Ed25519 PEM-decoder fix (dapr/dapr#9904) -- aligns the E2E runtime with the minimum compatible sentry for a 1.18 CLI. Only non-HA matrix legs were affected because TestRenewCertificateMTLSEnabled is skipped in HA mode (DaprModeNonHA guard at the top of the test). Note: the unbounded `kubectl rollout status` in `restartControlPlaneService` is a separate latent bug that turned this incompatibility into a 25-min hang instead of a clean failure. Worth fixing in a follow-up. Signed-off-by: Nelson Parente --- .github/workflows/kind_e2e.yaml | 2 +- .github/workflows/self_hosted_e2e.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/kind_e2e.yaml b/.github/workflows/kind_e2e.yaml index db50255ff..7c1a2b527 100644 --- a/.github/workflows/kind_e2e.yaml +++ b/.github/workflows/kind_e2e.yaml @@ -50,7 +50,7 @@ jobs: name: E2E tests for K8s (KinD) runs-on: ubuntu-latest env: - DAPR_RUNTIME_PINNED_VERSION: 1.17.3 + DAPR_RUNTIME_PINNED_VERSION: 1.17.7 DAPR_DASHBOARD_PINNED_VERSION: 0.15.0 DAPR_RUNTIME_LATEST_STABLE_VERSION: DAPR_DASHBOARD_LATEST_STABLE_VERSION: diff --git a/.github/workflows/self_hosted_e2e.yaml b/.github/workflows/self_hosted_e2e.yaml index 3003952a2..54821bf25 100644 --- a/.github/workflows/self_hosted_e2e.yaml +++ b/.github/workflows/self_hosted_e2e.yaml @@ -38,7 +38,7 @@ jobs: GOARCH: ${{ matrix.target_arch }} GOPROXY: https://proxy.golang.org ARCHIVE_OUTDIR: dist/archives - DAPR_RUNTIME_PINNED_VERSION: "1.17.3" + DAPR_RUNTIME_PINNED_VERSION: "1.17.7" DAPR_DASHBOARD_PINNED_VERSION: 0.15.0 DAPR_RUNTIME_LATEST_STABLE_VERSION: "" DAPR_DASHBOARD_LATEST_STABLE_VERSION: ""