OCPBUGS-78524: Add OCP-88729 verify USBGuard extension install and enable via MachineConfig#6034
Conversation
…neConfig Adds e2e test that creates two MachineConfigs on worker nodes: one to install the usbguard extension and another to enable the usbguard.service systemd unit, then verifies the service is enabled on all worker nodes. Signed-off-by: HarshwardhanPatil07 <harshpat@redhat.com>
|
Pipeline controller notification For optional jobs, comment This repository is configured in: LGTM mode |
|
@HarshwardhanPatil07: No Jira issue with key OCP-88729 exists in the tracker at https://redhat.atlassian.net. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Repository: openshift/coderabbit/.coderabbit.yaml Review profile: CHILL Plan: Enterprise Run ID: 📒 Files selected for processing (1)
WalkthroughA new disruptive test case ( ChangesUSBGuard Installation and Enablement Test
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes Possibly related PRs
Suggested labels
Suggested reviewers
🚥 Pre-merge checks | ✅ 11 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (11 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: HarshwardhanPatil07 The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
Logsharshpat@harshpat-thinkpadp1gen4i:~/Downloads/repos/machine-config-operator$ cat /tmp/claude-4242557/-home-harshpat-Downloads-repos-machine-config-operator/17de08d4-3a6b-4e2b-b222-8b71fc20f2b5/tasks/b0gbqgzgt.output I0513 11:42:42.563365 92129 test_context.go:566] The --provider flag is not set. Continuing as if --provider=skeleton had been used. Running Suite: - /home/harshpat/Downloads/repos/machine-config-operator ======================================================================== Random Seed: 1778652762 - will randomize all specs /verified by @HarshwardhanPatil07 |
openshift-ci-robot
added
the
verified
|
@HarshwardhanPatil07: This PR has been marked as verified by DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
@HarshwardhanPatil07: No Jira issue with key OCP-88729 exists in the tracker at https://redhat.atlassian.net. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
/retitle OCPBUGS-78524: Add OCP-88729 verify USBGuard extension install and enable via MachineConfig |
openshift-ci
Bot
changed the title
openshift-ci-robot
added
jira/severity-important
|
@HarshwardhanPatil07: This pull request references Jira Issue OCPBUGS-78524, which is invalid:
Comment The bug has been updated to refer to the pull request using the external bug tracker. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
/jira-refresh |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 3
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@test/extended-priv/mco_security.go`:
- Line 991: The test "g.It" case that starts with "[PolarionID:88729][OTP]
Verify USBGuard..." calls MachineConfig APIs not present in MicroShift; update
the test name string in the g.It invocation (the test declared in
mco_security.go with the g.It containing "[PolarionID:88729][OTP] Verify
USBGuard extension...") to include the skip label "[Skipped:MicroShift]" so it
will not run on MicroShift clusters (i.e., insert the label into the first
string argument of the g.It call).
- Around line 999-1010: After creating the MachineConfigs, wait for the
MachineConfigPool rollout to finish before proceeding: after calling
mcExt.create() and after mcEnable.create() invoke mcp.waitForComplete() (or at
minimum call mcp.waitForComplete() once after both creations) so the config
rendering and node updates complete before the subsequent verification of
usbguard.service; reference the functions mcExt.create(), mcEnable.create(), and
mcp.waitForComplete() to locate where to add the waits.
- Around line 1011-1015: The loop that asserts node.IsUnitEnabled("usbguard")
should be wrapped in an o.Eventually to retry transient failures: replace the
direct loop over nodes (from mcp.GetSortedNodesOrFail()) with an o.Eventually
that runs a closure which re-fetches nodes (call mcp.GetSortedNodesOrFail()
inside the closure) and performs the for _, node := range nodes {
o.Expect(node.IsUnitEnabled("usbguard")).To(o.BeTrue(), "usbguard.service should
be enabled on node %s", node.GetName()) } checks; configure a reasonable timeout
and polling interval to match other tests in this file so node-level state has
time to converge.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml
Review profile: CHILL
Plan: Enterprise
Run ID: 56c78d07-1cb4-4fef-a50f-0771354f12e4
📒 Files selected for processing (1)
test/extended-priv/mco_security.go
…private Signed-off-by: HarshwardhanPatil07 <harshpat@redhat.com>
openshift-ci-robot
removed
the
verified
…erification Address review feedback: move test from mco_security.go to mco_kernel.go since it tests extensions, and add verification that the usbguard RPM is installed on all worker nodes before checking the service is enabled. Signed-off-by: HarshwardhanPatil07 <harshpat@redhat.com>
There was a problem hiding this comment.
Actionable comments posted: 2
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@test/extended-priv/mco_kernel.go`:
- Around line 339-372: The test "Verify USBGuard extension can be installed and
enabled via MachineConfig on worker nodes" uses MachineConfig (NewMachineConfig,
SetMCOTemplate, SetParams) which is not present on MicroShift; update the g.It
declaration to include the "[Skipped:MicroShift]" label in the test name OR add
a runtime guard using exutil.IsMicroShiftCluster() (early return/Skip) at the
start of the test body before calling
GetCompactCompatiblePool()/NewMachineConfig() so the test is skipped on
MicroShift clusters.
- Line 368: The assertion calls node.IsUnitEnabled with the abbreviated unit
name; update the call to use the full systemd unit name "usbguard.service" so it
matches the assertion message and other usages (e.g., change
node.IsUnitEnabled("usbguard") to node.IsUnitEnabled("usbguard.service") in the
test where the Expect(...).To(o.BeTrue()) check occurs).
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml
Review profile: CHILL
Plan: Enterprise
Run ID: d60b4adb-43fe-4fe5-bf73-66763daed3de
📒 Files selected for processing (2)
test/extended-priv/mco_kernel.gotest/extended-priv/mco_security.go
✅ Files skipped from review due to trivial changes (1)
- test/extended-priv/mco_security.go
|
looks good |
Delete both the extension and enable MachineConfigs in a single oc delete command during cleanup, triggering one pool rollout instead of two. Also revert unintended whitespace change in mco_security.go. Signed-off-by: HarshwardhanPatil07 <harshpat@redhat.com>
|
/jira-refresh |
|
Seems good to me. Care to trigger a disruptive suite run? |
Logsharshpat@harshpat-thinkpadp1gen4i:~/Downloads/repos/machine-config-operator$ ./_output/linux/amd64/machine-config-tests-ext run-test "[sig-mco][Suite:openshift/machine-config-operator/longduration][Serial][Disruptive] MCO kernel [PolarionID:88729] Verify USBGuard extension can be installed and enabled via MachineConfig on worker nodes [Disruptive]" I0514 20:53:46.675038 39554 test_context.go:566] The --provider flag is not set. Continuing as if --provider=skeleton had been used. Running Suite: - /home/harshpat/Downloads/repos/machine-config-operator ======================================================================== Random Seed: 1778772226 - will randomize all specs /verified by @HarshwardhanPatil07 |
openshift-ci-robot
added
the
verified
|
@HarshwardhanPatil07: This PR has been marked as verified by DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
@pablintino It worked, I ran locally |
|
/payload-job periodic-ci-openshift-machine-config-operator-release-5.0-periodics-e2e-aws-mco-disruptive-techpreview-1of3 periodic-ci-openshift-machine-config-operator-release-5.0-periodics-e2e-aws-mco-disruptive-techpreview-2of3 periodic-ci-openshift-machine-config-operator-release-5.0-periodics-e2e-aws-mco-disruptive-techpreview-3of3 |
|
@pablintino: trigger 3 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command
See details on https://pr-payload-tests.ci.openshift.org/runs/ci/d3cfdc30-528c-11f1-9327-42c01e53d1a4-0 |
|
Manual execution including the test in this PR We can see the test passing in the manual execution |
I see the Test getting passed, Can we merge it? cc @sergiordlr @pablintino
|
Signed-off-by: HarshwardhanPatil07 <harshpat@redhat.com>
openshift-ci-robot
removed
the
verified
|
@HarshwardhanPatil07: This pull request references Jira Issue OCPBUGS-78524, which is invalid:
Comment DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
/retest |
|
@HarshwardhanPatil07: all tests passed! Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
Logsharshpat@harshpat-thinkpadp1gen4i:~/Downloads/repos/machine-config-operator$ ./_output/linux/amd64/machine-config-tests-ext run-test "[sig-mco][Suite:openshift/machine-config-operator/longduration][Serial][Disruptive] MCO kernel [PolarionID:88729] Verify USBGuard extension can be installed and enabled via MachineConfig on worker nodes [Disruptive]"
I0525 17:18:50.454379 490937 test_context.go:566] The --provider flag is not set. Continuing as if --provider=skeleton had been used.
Running Suite: - /home/harshpat/Downloads/repos/machine-config-operator
========================================================================
Random Seed: 1779709730 - will randomize all specs
Will run 1 of 1 specs
------------------------------
[sig-mco][Suite:openshift/machine-config-operator/longduration][Serial][Disruptive] MCO kernel [PolarionID:88729] Verify USBGuard extension can be installed and enabled via MachineConfig on worker nodes [Disruptive]
/home/harshpat/Downloads/repos/machine-config-operator/test/extended-priv/mco_kernel.go:339
STEP: Creating a kubernetes client @ 05/25/26 17:18:50.454
I0525 17:18:53.090111 490937 client.go:164] configPath is now "/tmp/configfile747788921"
I0525 17:18:53.090132 490937 client.go:291] The user is now "e2e-test-mco-kernel-jm97l-user"
I0525 17:18:53.090136 490937 client.go:293] Creating project "e2e-test-mco-kernel-jm97l"
I0525 17:18:53.421394 490937 client.go:302] Waiting on permissions in project "e2e-test-mco-kernel-jm97l" ...
I0525 17:18:54.367792 490937 client.go:363] Waiting for ServiceAccount "default" to be provisioned...
I0525 17:18:54.716980 490937 client.go:363] Waiting for ServiceAccount "builder" to be provisioned...
I0525 17:18:55.062417 490937 client.go:363] Waiting for ServiceAccount "deployer" to be provisioned...
I0525 17:18:55.404144 490937 client.go:373] Waiting for RoleBinding "system:image-builders" to be provisioned...
I0525 17:18:56.143417 490937 client.go:373] Waiting for RoleBinding "system:deployers" to be provisioned...
I0525 17:18:56.876481 490937 client.go:373] Waiting for RoleBinding "system:image-pullers" to be provisioned...
I0525 17:18:57.616147 490937 client.go:404] Project "e2e-test-mco-kernel-jm97l" has been fully provisioned.
STEP: MCO Preconditions Checks @ 05/25/26 17:18:57.616
May 25 17:18:58.732: INFO: Check that master pool is ready for testing
I0525 17:18:58.732819 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp master -o jsonpath={.status.machineCount}'
May 25 17:18:59.544: INFO: Num nodes: 3, wait time per node 13 minutes
May 25 17:18:59.544: INFO: Increase waiting time because it is master pool
May 25 17:18:59.544: INFO: Waiting 3m54s for MCP master to be completed.
I0525 17:18:59.544584 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp master -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:19:00.337840 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp master -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
May 25 17:19:01.144: INFO: MCP 'master' is ready for testing
May 25 17:19:01.144: INFO: Check that worker pool is ready for testing
I0525 17:19:01.144562 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'
May 25 17:19:01.930: INFO: Num nodes: 3, wait time per node 13 minutes
May 25 17:19:01.930: INFO: Waiting 3m0s for MCP worker to be completed.
I0525 17:19:01.930875 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:19:02.710275 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
May 25 17:19:03.501: INFO: MCP 'worker' is ready for testing
May 25 17:19:03.501: INFO: Wait for MCC to get the leader lease
I0525 17:19:03.501397 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get pod -n openshift-machine-config-operator -l k8s-app=machine-config-controller -o jsonpath={.items[0].metadata.name}'
I0525 17:19:04.580457 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig logs -n openshift-machine-config-operator -c machine-config-controller machine-config-controller-77999ff6db-82gzr'
May 25 17:19:06.379: INFO: End of MCO Preconditions
I0525 17:19:06.379447 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp'
NAME CONFIG UPDATED UPDATING DEGRADED MACHINECOUNT READYMACHINECOUNT UPDATEDMACHINECOUNT DEGRADEDMACHINECOUNT AGE
master rendered-master-1a1d7182dc93657fa16f7854b73809fe True False False 3 3 3 0 7h16m
worker rendered-worker-85fdef4f092dccebdab314ae98ec3b70 True False False 3 3 3 0 7h16m
I0525 17:19:07.168326 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'
I0525 17:19:07.931933 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'
STEP: Create a MachineConfig to install the usbguard extension on worker nodes @ 05/25/26 17:19:08.761
May 25 17:19:08.761: INFO: mco fixture dir is not initialized, start to create
May 25 17:19:08.762: INFO: mco fixture dir is initialized: /tmp/fixture-testdata-dir572983255
I0525 17:19:11.764553 490937 client.go:743] showInfo is true
I0525 17:19:11.764602 490937 client.go:745] Running 'oc --namespace=e2e-test-mco-kernel-jm97l --kubeconfig=/home/harshpat/Downloads/kubeconfig process --ignore-unknown-parameters=true -f /tmp/fixture-testdata-dir572983255/change-worker-extension-usbguard.yaml -p NAME=test-88729-ext-nnwklfpa POOL=worker'
I0525 17:19:12.584139 490937 template.go:66] the file of resource is /tmp/e2e-test-mco-kernel-jm97l-r9ba1bjeconfig.json.stdout
I0525 17:19:12.584198 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig create -f /tmp/e2e-test-mco-kernel-jm97l-r9ba1bjeconfig.json.stdout'
machineconfig.machineconfiguration.openshift.io/test-88729-ext-nnwklfpa created
I0525 17:19:18.380390 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-ext-nnwklfpa -o jsonpath={.metadata.name}'
May 25 17:19:19.300: INFO: mc test-88729-ext-nnwklfpa is created successfully
I0525 17:19:19.300265 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-ext-nnwklfpa -o jsonpath={.spec.kernelType}'
I0525 17:19:20.130139 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-ext-nnwklfpa -o jsonpath={.spec.extensions}'
I0525 17:19:20.908849 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'
May 25 17:19:21.668: INFO: Num nodes: 3, wait time per node 18 minutes
May 25 17:19:21.668: INFO: Waiting 54m0s for MCP worker to be completed.
I0525 17:20:21.677307 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:20:22.544592 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:20:23.324409 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:21:21.668977 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:21:22.508792 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:21:23.530639 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:22:21.692437 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:22:22.492334 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:22:23.267813 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:23:21.668407 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:23:22.406478 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:23:23.239031 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:24:21.725681 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:24:22.626698 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:24:23.450752 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:25:21.670554 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:25:22.592752 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:25:23.503146 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:26:21.724559 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:26:22.500895 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:26:23.286287 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:27:21.672623 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:27:22.536771 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:27:23.312898 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:28:21.725737 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:28:22.692366 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:28:23.472603 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:29:21.677378 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:29:22.464211 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:29:23.697249 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:30:21.696683 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:30:22.461226 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:30:23.238579 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:31:21.682792 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:31:22.804103 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:31:23.628936 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:32:21.715050 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:32:22.580714 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:32:23.570009 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
May 25 17:32:24.378: INFO: The new MC has been successfully applied to MCP 'worker'
May 25 17:32:24.378: INFO: OK!
STEP: Create a MachineConfig to enable the usbguard systemd unit on worker nodes @ 05/25/26 17:32:24.378
I0525 17:32:27.380355 490937 client.go:743] showInfo is true
I0525 17:32:27.380410 490937 client.go:745] Running 'oc --namespace=e2e-test-mco-kernel-jm97l --kubeconfig=/home/harshpat/Downloads/kubeconfig process --ignore-unknown-parameters=true -f /tmp/fixture-testdata-dir572983255/generic-machine-config-template.yml -p NAME=test-88729-enable-rul8hm9x POOL=worker UNITS=[{"enabled": true, "name": "usbguard.service"}]'
I0525 17:32:28.311919 490937 template.go:66] the file of resource is /tmp/e2e-test-mco-kernel-jm97l-ugbieycbconfig.json.stdout
I0525 17:32:28.311982 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig create -f /tmp/e2e-test-mco-kernel-jm97l-ugbieycbconfig.json.stdout'
machineconfig.machineconfiguration.openshift.io/test-88729-enable-rul8hm9x created
I0525 17:32:34.079661 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-enable-rul8hm9x -o jsonpath={.metadata.name}'
May 25 17:32:34.889: INFO: mc test-88729-enable-rul8hm9x is created successfully
I0525 17:32:34.889472 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-enable-rul8hm9x -o jsonpath={.spec.kernelType}'
I0525 17:32:35.650767 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-enable-rul8hm9x -o jsonpath={.spec.extensions}'
I0525 17:32:36.458917 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'
May 25 17:32:37.380: INFO: Num nodes: 3, wait time per node 13 minutes
May 25 17:32:37.380: INFO: Waiting 39m0s for MCP worker to be completed.
I0525 17:33:37.381122 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:33:38.250876 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:33:39.065312 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:34:37.416593 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:34:38.249088 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:34:39.176998 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:35:37.381491 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:35:38.182879 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:35:38.987599 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:36:37.437390 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:36:38.247206 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:36:39.051062 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:37:37.401950 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:37:39.498575 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:37:40.360616 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:38:37.415921 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:38:38.217537 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:38:39.096668 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:39:37.417944 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:39:38.577935 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:39:39.478417 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:40:37.437395 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:40:38.275910 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:40:39.142134 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:41:37.413174 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:41:38.187535 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:41:38.980336 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:42:37.381551 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:42:38.239642 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:42:39.021209 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:43:37.402781 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:43:38.190119 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:43:39.053366 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:44:37.384405 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:44:38.223371 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:44:39.086161 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
May 25 17:44:39.952: INFO: The new MC has been successfully applied to MCP 'worker'
May 25 17:44:39.952: INFO: OK!
STEP: Verify usbguard extension is installed on all worker nodes @ 05/25/26 17:44:39.952
I0525 17:45:03.801729 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get node ip-10-0-44-22.us-east-2.compute.internal -o jsonpath={.metadata}'
I0525 17:45:04.836317 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get node ip-10-0-28-47.us-east-2.compute.internal -o jsonpath={.metadata}'
I0525 17:45:05.927831 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get node ip-10-0-91-245.us-east-2.compute.internal -o jsonpath={.metadata}'
I0525 17:45:06.983934 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get node ip-10-0-44-22.us-east-2.compute.internal -o jsonpath={.metadata}'
I0525 17:45:10.792265 490937 client.go:743] showInfo is false
May 25 17:45:24.308: INFO: usbguard-1.0.0-16.el9.x86_64
Starting pod/ip-10-0-28-47us-east-2computeinternal-debug-ff54w ...
To use host binaries, run `chroot /host`. Instead, if you need to access host namespaces, run `nsenter -a -t 1`.
Removing debug pod ...
I0525 17:45:26.898194 490937 client.go:743] showInfo is false
May 25 17:45:35.729: INFO: usbguard-1.0.0-16.el9.x86_64
Starting pod/ip-10-0-44-22us-east-2computeinternal-debug-9wqfn ...
To use host binaries, run `chroot /host`. Instead, if you need to access host namespaces, run `nsenter -a -t 1`.
Removing debug pod ...
I0525 17:45:38.488251 490937 client.go:743] showInfo is false
May 25 17:45:47.457: INFO: usbguard-1.0.0-16.el9.x86_64
Starting pod/ip-10-0-91-245us-east-2computeinternal-debug-4jjqb ...
To use host binaries, run `chroot /host`. Instead, if you need to access host namespaces, run `nsenter -a -t 1`.
Removing debug pod ...
May 25 17:45:47.457: INFO: OK!
STEP: Verify usbguard.service is enabled on all worker nodes @ 05/25/26 17:45:47.458
I0525 17:45:48.610464 490937 client.go:743] showInfo is true
I0525 17:45:48.610498 490937 client.go:745] Running 'oc --namespace=e2e-test-mco-kernel-jm97l --kubeconfig=/home/harshpat/Downloads/kubeconfig debug node/ip-10-0-28-47.us-east-2.compute.internal -- chroot /host systemctl is-enabled usbguard'
May 25 17:45:51.252: INFO: Unit usbguard enablement state is: enabled
I0525 17:45:52.419556 490937 client.go:743] showInfo is true
I0525 17:45:52.419590 490937 client.go:745] Running 'oc --namespace=e2e-test-mco-kernel-jm97l --kubeconfig=/home/harshpat/Downloads/kubeconfig debug node/ip-10-0-44-22.us-east-2.compute.internal -- chroot /host systemctl is-enabled usbguard'
May 25 17:45:55.747: INFO: Unit usbguard enablement state is: enabled
I0525 17:45:56.738414 490937 client.go:743] showInfo is true
I0525 17:45:56.738454 490937 client.go:745] Running 'oc --namespace=e2e-test-mco-kernel-jm97l --kubeconfig=/home/harshpat/Downloads/kubeconfig debug node/ip-10-0-91-245.us-east-2.compute.internal -- chroot /host systemctl is-enabled usbguard'
May 25 17:46:01.028: INFO: Unit usbguard enablement state is: enabled
May 25 17:46:01.028: INFO: OK!
I0525 17:46:01.028452 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-enable-rul8hm9x -o jsonpath={.}'
I0525 17:46:01.840957 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-enable-rul8hm9x -o jsonpath={.spec.kernelType}'
I0525 17:46:02.662848 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig delete mc test-88729-enable-rul8hm9x --ignore-not-found=true'
machineconfig.machineconfiguration.openshift.io "test-88729-enable-rul8hm9x" deleted
I0525 17:46:03.653616 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'
May 25 17:46:04.436: INFO: Num nodes: 3, wait time per node 13 minutes
May 25 17:46:04.437: INFO: Waiting 39m0s for MCP worker to be completed.
I0525 17:47:04.437695 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:47:05.400746 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:47:06.220158 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:48:04.494067 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:48:05.296838 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:48:06.233560 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:49:04.439743 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:49:05.208735 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:49:06.014139 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:50:04.493964 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:50:05.451540 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:50:06.267060 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:51:04.443819 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:51:05.458261 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:51:06.323615 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:52:04.494239 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:52:05.401809 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:52:06.284199 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:53:04.446263 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:53:05.385656 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:53:06.649064 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:54:04.493549 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:54:05.257984 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:54:06.094762 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:55:04.451502 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:55:05.241216 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:55:06.020055 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:56:04.493986 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:56:05.333755 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:56:06.066568 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:57:04.462044 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:57:05.442194 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:57:06.466889 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 17:58:04.479346 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:58:05.248801 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:58:06.049104 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
May 25 17:58:06.922: INFO: The new MC has been successfully applied to MCP 'worker'
I0525 17:58:06.922708 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-ext-nnwklfpa -o jsonpath={.}'
I0525 17:58:07.694999 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-ext-nnwklfpa -o jsonpath={.spec.kernelType}'
I0525 17:58:08.496264 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig delete mc test-88729-ext-nnwklfpa --ignore-not-found=true'
machineconfig.machineconfiguration.openshift.io "test-88729-ext-nnwklfpa" deleted
I0525 17:58:09.580742 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'
May 25 17:58:10.419: INFO: Num nodes: 3, wait time per node 13 minutes
May 25 17:58:10.419: INFO: Waiting 39m0s for MCP worker to be completed.
I0525 17:59:10.420534 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 17:59:11.425586 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 17:59:12.203020 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 18:00:10.463070 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 18:00:11.299181 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 18:00:12.223786 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 18:01:10.424565 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 18:01:11.237100 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 18:01:12.068826 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 18:02:10.476899 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 18:02:11.303915 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 18:02:12.112141 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 18:03:10.429701 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 18:03:11.424160 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 18:03:12.236241 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 18:04:10.471248 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 18:04:11.281428 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 18:04:12.239912 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 18:05:10.434841 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 18:05:11.270208 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 18:05:12.084236 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 18:06:10.474858 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 18:06:11.247028 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 18:06:12.042494 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 18:07:10.444491 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 18:07:11.641963 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 18:07:12.636316 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 18:08:10.476748 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 18:08:11.295521 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 18:08:12.198171 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 18:09:10.424571 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 18:09:11.169271 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 18:09:12.032132 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 18:10:10.477082 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 18:10:11.267114 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 18:10:12.094533 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 18:11:10.466458 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 18:11:11.379056 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 18:11:12.193156 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
I0525 18:12:10.477192 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'
I0525 18:12:11.268478 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Degraded")].status}'
I0525 18:12:12.160816 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type=="Updated")].status}'
May 25 18:12:12.919: INFO: The new MC has been successfully applied to MCP 'worker'
I0525 18:12:13.699333 490937 client.go:421] Deleted {user.openshift.io/v1, Resource=users e2e-test-mco-kernel-jm97l-user}, err:
I0525 18:12:13.947542 490937 client.go:421] Deleted {oauth.openshift.io/v1, Resource=oauthclients e2e-client-e2e-test-mco-kernel-jm97l}, err:
I0525 18:12:14.204669 490937 client.go:421] Deleted {oauth.openshift.io/v1, Resource=oauthaccesstokens sha256~665yLFSujQxPKK_ieNxID4I_Kvkc13ZqRneAa6lfwdM}, err:
STEP: Destroying namespace "e2e-test-mco-kernel-jm97l" for this suite. @ 05/25/26 18:12:14.204
• [3204.006 seconds]
------------------------------
Ran 1 of 1 Specs in 3204.007 seconds
SUCCESS! -- 1 Passed | 0 Failed | 0 Pending | 0 Skipped
[
{
"name": "[sig-mco][Suite:openshift/machine-config-operator/longduration][Serial][Disruptive] MCO kernel [PolarionID:88729] Verify USBGuard extension can be installed and enabled via MachineConfig on worker nodes [Disruptive]",
"lifecycle": "blocking",
"duration": 3204006,
"startTime": "2026-05-25 11:48:50.454426 UTC",
"endTime": "2026-05-25 12:42:14.461060 UTC",
"result": "passed",
"output": " STEP: Creating a kubernetes client @ 05/25/26 17:18:50.454\nI0525 17:18:53.090111 490937 client.go:164] configPath is now \"/tmp/configfile747788921\"\nI0525 17:18:53.090132 490937 client.go:291] The user is now \"e2e-test-mco-kernel-jm97l-user\"\nI0525 17:18:53.090136 490937 client.go:293] Creating project \"e2e-test-mco-kernel-jm97l\"\nI0525 17:18:53.421394 490937 client.go:302] Waiting on permissions in project \"e2e-test-mco-kernel-jm97l\" ...\nI0525 17:18:54.367792 490937 client.go:363] Waiting for ServiceAccount \"default\" to be provisioned...\nI0525 17:18:54.716980 490937 client.go:363] Waiting for ServiceAccount \"builder\" to be provisioned...\nI0525 17:18:55.062417 490937 client.go:363] Waiting for ServiceAccount \"deployer\" to be provisioned...\nI0525 17:18:55.404144 490937 client.go:373] Waiting for RoleBinding \"system:image-builders\" to be provisioned...\nI0525 17:18:56.143417 490937 client.go:373] Waiting for RoleBinding \"system:deployers\" to be provisioned...\nI0525 17:18:56.876481 490937 client.go:373] Waiting for RoleBinding \"system:image-pullers\" to be provisioned...\nI0525 17:18:57.616147 490937 client.go:404] Project \"e2e-test-mco-kernel-jm97l\" has been fully provisioned.\n STEP: MCO Preconditions Checks @ 05/25/26 17:18:57.616\nMay 25 17:18:58.732: INFO: Check that master pool is ready for testing\nI0525 17:18:58.732819 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp master -o jsonpath={.status.machineCount}'\nMay 25 17:18:59.544: INFO: Num nodes: 3, wait time per node 13 minutes\nMay 25 17:18:59.544: INFO: Increase waiting time because it is master pool\nMay 25 17:18:59.544: INFO: Waiting 3m54s for MCP master to be completed.\nI0525 17:18:59.544584 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp master -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:19:00.337840 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp master -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nMay 25 17:19:01.144: INFO: MCP 'master' is ready for testing\nMay 25 17:19:01.144: INFO: Check that worker pool is ready for testing\nI0525 17:19:01.144562 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'\nMay 25 17:19:01.930: INFO: Num nodes: 3, wait time per node 13 minutes\nMay 25 17:19:01.930: INFO: Waiting 3m0s for MCP worker to be completed.\nI0525 17:19:01.930875 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:19:02.710275 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nMay 25 17:19:03.501: INFO: MCP 'worker' is ready for testing\nMay 25 17:19:03.501: INFO: Wait for MCC to get the leader lease\nI0525 17:19:03.501397 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get pod -n openshift-machine-config-operator -l k8s-app=machine-config-controller -o jsonpath={.items[0].metadata.name}'\nI0525 17:19:04.580457 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig logs -n openshift-machine-config-operator -c machine-config-controller machine-config-controller-77999ff6db-82gzr'\nMay 25 17:19:06.379: INFO: End of MCO Preconditions\n\nI0525 17:19:06.379447 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp'\nNAME CONFIG UPDATED UPDATING DEGRADED MACHINECOUNT READYMACHINECOUNT UPDATEDMACHINECOUNT DEGRADEDMACHINECOUNT AGE\nmaster rendered-master-1a1d7182dc93657fa16f7854b73809fe True False False 3 3 3 0 7h16m\nworker rendered-worker-85fdef4f092dccebdab314ae98ec3b70 True False False 3 3 3 0 7h16m\nI0525 17:19:07.168326 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'\nI0525 17:19:07.931933 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'\n STEP: Create a MachineConfig to install the usbguard extension on worker nodes @ 05/25/26 17:19:08.761\nMay 25 17:19:08.761: INFO: mco fixture dir is not initialized, start to create\nMay 25 17:19:08.762: INFO: mco fixture dir is initialized: /tmp/fixture-testdata-dir572983255\nI0525 17:19:11.764553 490937 client.go:743] showInfo is true\nI0525 17:19:11.764602 490937 client.go:745] Running 'oc --namespace=e2e-test-mco-kernel-jm97l --kubeconfig=/home/harshpat/Downloads/kubeconfig process --ignore-unknown-parameters=true -f /tmp/fixture-testdata-dir572983255/change-worker-extension-usbguard.yaml -p NAME=test-88729-ext-nnwklfpa POOL=worker'\nI0525 17:19:12.584139 490937 template.go:66] the file of resource is /tmp/e2e-test-mco-kernel-jm97l-r9ba1bjeconfig.json.stdout\nI0525 17:19:12.584198 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig create -f /tmp/e2e-test-mco-kernel-jm97l-r9ba1bjeconfig.json.stdout'\nmachineconfig.machineconfiguration.openshift.io/test-88729-ext-nnwklfpa created\nI0525 17:19:18.380390 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-ext-nnwklfpa -o jsonpath={.metadata.name}'\nMay 25 17:19:19.300: INFO: mc test-88729-ext-nnwklfpa is created successfully\nI0525 17:19:19.300265 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-ext-nnwklfpa -o jsonpath={.spec.kernelType}'\nI0525 17:19:20.130139 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-ext-nnwklfpa -o jsonpath={.spec.extensions}'\nI0525 17:19:20.908849 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'\nMay 25 17:19:21.668: INFO: Num nodes: 3, wait time per node 18 minutes\nMay 25 17:19:21.668: INFO: Waiting 54m0s for MCP worker to be completed.\nI0525 17:20:21.677307 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:20:22.544592 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:20:23.324409 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:21:21.668977 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:21:22.508792 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:21:23.530639 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:22:21.692437 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:22:22.492334 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:22:23.267813 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:23:21.668407 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:23:22.406478 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:23:23.239031 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:24:21.725681 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:24:22.626698 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:24:23.450752 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:25:21.670554 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:25:22.592752 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:25:23.503146 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:26:21.724559 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:26:22.500895 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:26:23.286287 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:27:21.672623 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:27:22.536771 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:27:23.312898 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:28:21.725737 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:28:22.692366 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:28:23.472603 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:29:21.677378 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:29:22.464211 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:29:23.697249 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:30:21.696683 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:30:22.461226 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:30:23.238579 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:31:21.682792 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:31:22.804103 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:31:23.628936 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:32:21.715050 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:32:22.580714 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:32:23.570009 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nMay 25 17:32:24.378: INFO: The new MC has been successfully applied to MCP 'worker'\nMay 25 17:32:24.378: INFO: OK!\n\n STEP: Create a MachineConfig to enable the usbguard systemd unit on worker nodes @ 05/25/26 17:32:24.378\nI0525 17:32:27.380355 490937 client.go:743] showInfo is true\nI0525 17:32:27.380410 490937 client.go:745] Running 'oc --namespace=e2e-test-mco-kernel-jm97l --kubeconfig=/home/harshpat/Downloads/kubeconfig process --ignore-unknown-parameters=true -f /tmp/fixture-testdata-dir572983255/generic-machine-config-template.yml -p NAME=test-88729-enable-rul8hm9x POOL=worker UNITS=[{\"enabled\": true, \"name\": \"usbguard.service\"}]'\nI0525 17:32:28.311919 490937 template.go:66] the file of resource is /tmp/e2e-test-mco-kernel-jm97l-ugbieycbconfig.json.stdout\nI0525 17:32:28.311982 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig create -f /tmp/e2e-test-mco-kernel-jm97l-ugbieycbconfig.json.stdout'\nmachineconfig.machineconfiguration.openshift.io/test-88729-enable-rul8hm9x created\nI0525 17:32:34.079661 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-enable-rul8hm9x -o jsonpath={.metadata.name}'\nMay 25 17:32:34.889: INFO: mc test-88729-enable-rul8hm9x is created successfully\nI0525 17:32:34.889472 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-enable-rul8hm9x -o jsonpath={.spec.kernelType}'\nI0525 17:32:35.650767 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-enable-rul8hm9x -o jsonpath={.spec.extensions}'\nI0525 17:32:36.458917 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'\nMay 25 17:32:37.380: INFO: Num nodes: 3, wait time per node 13 minutes\nMay 25 17:32:37.380: INFO: Waiting 39m0s for MCP worker to be completed.\nI0525 17:33:37.381122 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:33:38.250876 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:33:39.065312 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:34:37.416593 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:34:38.249088 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:34:39.176998 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:35:37.381491 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:35:38.182879 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:35:38.987599 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:36:37.437390 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:36:38.247206 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:36:39.051062 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:37:37.401950 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:37:39.498575 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:37:40.360616 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:38:37.415921 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:38:38.217537 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:38:39.096668 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:39:37.417944 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:39:38.577935 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:39:39.478417 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:40:37.437395 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:40:38.275910 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:40:39.142134 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:41:37.413174 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:41:38.187535 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:41:38.980336 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:42:37.381551 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:42:38.239642 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:42:39.021209 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:43:37.402781 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:43:38.190119 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:43:39.053366 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:44:37.384405 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:44:38.223371 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:44:39.086161 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nMay 25 17:44:39.952: INFO: The new MC has been successfully applied to MCP 'worker'\nMay 25 17:44:39.952: INFO: OK!\n\n STEP: Verify usbguard extension is installed on all worker nodes @ 05/25/26 17:44:39.952\nI0525 17:45:03.801729 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get node ip-10-0-44-22.us-east-2.compute.internal -o jsonpath={.metadata}'\nI0525 17:45:04.836317 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get node ip-10-0-28-47.us-east-2.compute.internal -o jsonpath={.metadata}'\nI0525 17:45:05.927831 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get node ip-10-0-91-245.us-east-2.compute.internal -o jsonpath={.metadata}'\nI0525 17:45:06.983934 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get node ip-10-0-44-22.us-east-2.compute.internal -o jsonpath={.metadata}'\nI0525 17:45:10.792265 490937 client.go:743] showInfo is false\nMay 25 17:45:24.308: INFO: usbguard-1.0.0-16.el9.x86_64\nStarting pod/ip-10-0-28-47us-east-2computeinternal-debug-ff54w ...\nTo use host binaries, run `chroot /host`. Instead, if you need to access host namespaces, run `nsenter -a -t 1`.\n\nRemoving debug pod ...\nI0525 17:45:26.898194 490937 client.go:743] showInfo is false\nMay 25 17:45:35.729: INFO: usbguard-1.0.0-16.el9.x86_64\nStarting pod/ip-10-0-44-22us-east-2computeinternal-debug-9wqfn ...\nTo use host binaries, run `chroot /host`. Instead, if you need to access host namespaces, run `nsenter -a -t 1`.\n\nRemoving debug pod ...\nI0525 17:45:38.488251 490937 client.go:743] showInfo is false\nMay 25 17:45:47.457: INFO: usbguard-1.0.0-16.el9.x86_64\nStarting pod/ip-10-0-91-245us-east-2computeinternal-debug-4jjqb ...\nTo use host binaries, run `chroot /host`. Instead, if you need to access host namespaces, run `nsenter -a -t 1`.\n\nRemoving debug pod ...\nMay 25 17:45:47.457: INFO: OK!\n\n STEP: Verify usbguard.service is enabled on all worker nodes @ 05/25/26 17:45:47.458\nI0525 17:45:48.610464 490937 client.go:743] showInfo is true\nI0525 17:45:48.610498 490937 client.go:745] Running 'oc --namespace=e2e-test-mco-kernel-jm97l --kubeconfig=/home/harshpat/Downloads/kubeconfig debug node/ip-10-0-28-47.us-east-2.compute.internal -- chroot /host systemctl is-enabled usbguard'\nMay 25 17:45:51.252: INFO: Unit usbguard enablement state is: enabled \nI0525 17:45:52.419556 490937 client.go:743] showInfo is true\nI0525 17:45:52.419590 490937 client.go:745] Running 'oc --namespace=e2e-test-mco-kernel-jm97l --kubeconfig=/home/harshpat/Downloads/kubeconfig debug node/ip-10-0-44-22.us-east-2.compute.internal -- chroot /host systemctl is-enabled usbguard'\nMay 25 17:45:55.747: INFO: Unit usbguard enablement state is: enabled \nI0525 17:45:56.738414 490937 client.go:743] showInfo is true\nI0525 17:45:56.738454 490937 client.go:745] Running 'oc --namespace=e2e-test-mco-kernel-jm97l --kubeconfig=/home/harshpat/Downloads/kubeconfig debug node/ip-10-0-91-245.us-east-2.compute.internal -- chroot /host systemctl is-enabled usbguard'\nMay 25 17:46:01.028: INFO: Unit usbguard enablement state is: enabled \nMay 25 17:46:01.028: INFO: OK!\n\nI0525 17:46:01.028452 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-enable-rul8hm9x -o jsonpath={.}'\nI0525 17:46:01.840957 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-enable-rul8hm9x -o jsonpath={.spec.kernelType}'\nI0525 17:46:02.662848 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig delete mc test-88729-enable-rul8hm9x --ignore-not-found=true'\nmachineconfig.machineconfiguration.openshift.io \"test-88729-enable-rul8hm9x\" deleted\nI0525 17:46:03.653616 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'\nMay 25 17:46:04.436: INFO: Num nodes: 3, wait time per node 13 minutes\nMay 25 17:46:04.437: INFO: Waiting 39m0s for MCP worker to be completed.\nI0525 17:47:04.437695 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:47:05.400746 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:47:06.220158 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:48:04.494067 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:48:05.296838 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:48:06.233560 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:49:04.439743 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:49:05.208735 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:49:06.014139 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:50:04.493964 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:50:05.451540 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:50:06.267060 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:51:04.443819 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:51:05.458261 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:51:06.323615 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:52:04.494239 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:52:05.401809 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:52:06.284199 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:53:04.446263 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:53:05.385656 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:53:06.649064 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:54:04.493549 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:54:05.257984 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:54:06.094762 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:55:04.451502 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:55:05.241216 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:55:06.020055 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:56:04.493986 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:56:05.333755 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:56:06.066568 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:57:04.462044 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:57:05.442194 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:57:06.466889 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 17:58:04.479346 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:58:05.248801 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:58:06.049104 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nMay 25 17:58:06.922: INFO: The new MC has been successfully applied to MCP 'worker'\nI0525 17:58:06.922708 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-ext-nnwklfpa -o jsonpath={.}'\nI0525 17:58:07.694999 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mc test-88729-ext-nnwklfpa -o jsonpath={.spec.kernelType}'\nI0525 17:58:08.496264 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig delete mc test-88729-ext-nnwklfpa --ignore-not-found=true'\nmachineconfig.machineconfiguration.openshift.io \"test-88729-ext-nnwklfpa\" deleted\nI0525 17:58:09.580742 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.machineCount}'\nMay 25 17:58:10.419: INFO: Num nodes: 3, wait time per node 13 minutes\nMay 25 17:58:10.419: INFO: Waiting 39m0s for MCP worker to be completed.\nI0525 17:59:10.420534 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 17:59:11.425586 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 17:59:12.203020 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 18:00:10.463070 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 18:00:11.299181 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 18:00:12.223786 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 18:01:10.424565 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 18:01:11.237100 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 18:01:12.068826 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 18:02:10.476899 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 18:02:11.303915 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 18:02:12.112141 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 18:03:10.429701 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 18:03:11.424160 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 18:03:12.236241 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 18:04:10.471248 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 18:04:11.281428 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 18:04:12.239912 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 18:05:10.434841 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 18:05:11.270208 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 18:05:12.084236 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 18:06:10.474858 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 18:06:11.247028 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 18:06:12.042494 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 18:07:10.444491 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 18:07:11.641963 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 18:07:12.636316 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 18:08:10.476748 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 18:08:11.295521 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 18:08:12.198171 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 18:09:10.424571 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 18:09:11.169271 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 18:09:12.032132 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 18:10:10.477082 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 18:10:11.267114 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 18:10:12.094533 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 18:11:10.466458 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 18:11:11.379056 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 18:11:12.193156 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nI0525 18:12:10.477192 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.degradedMachineCount}'\nI0525 18:12:11.268478 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Degraded\")].status}'\nI0525 18:12:12.160816 490937 client.go:718] Running 'oc --kubeconfig=/home/harshpat/Downloads/kubeconfig get mcp worker -o jsonpath={.status.conditions[?(@.type==\"Updated\")].status}'\nMay 25 18:12:12.919: INFO: The new MC has been successfully applied to MCP 'worker'\nI0525 18:12:13.699333 490937 client.go:421] Deleted {user.openshift.io/v1, Resource=users e2e-test-mco-kernel-jm97l-user}, err: \u003cnil\u003e\nI0525 18:12:13.947542 490937 client.go:421] Deleted {oauth.openshift.io/v1, Resource=oauthclients e2e-client-e2e-test-mco-kernel-jm97l}, err: \u003cnil\u003e\nI0525 18:12:14.204669 490937 client.go:421] Deleted {oauth.openshift.io/v1, Resource=oauthaccesstokens sha256~665yLFSujQxPKK_ieNxID4I_Kvkc13ZqRneAa6lfwdM}, err: \u003cnil\u003e\n STEP: Destroying namespace \"e2e-test-mco-kernel-jm97l\" for this suite. @ 05/25/26 18:12:14.204\n"
}
|
|
@HarshwardhanPatil07: The DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
/verified by @HarshwardhanPatil07 here |
openshift-ci-robot
added
the
verified
|
@HarshwardhanPatil07: This PR has been marked as verified by DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
I just realised it. It is in the mco_kernel.go suite. This test is not related to the kernel, right? |
| exutil.By("Create a MachineConfig to enable the usbguard systemd unit on worker nodes") | ||
| mcEnable := NewMachineConfig(oc.AsAdmin(), fmt.Sprintf("test-%s-enable", testID), mcp.GetName()) | ||
| mcEnable.SetParams(fmt.Sprintf(`UNITS=[{"enabled": true, "name": "usbguard.service"}]`)) | ||
| defer mcEnable.DeleteWithWait() |
There was a problem hiding this comment.
defer mcEnable.DeleteWithWait()
let's not wait when we delete this MC.
If we wait we will wait twice, once here and again when we remove mcExt
If we remove several MCs, we should only wait when we remove the last one. (The first referred)
5 participants
Adds e2e test that creates two MachineConfigs on worker nodes: one to install the usbguard extension and another to enable the usbguard.service systemd unit, then verifies the service is enabled on all worker nodes.
- What I did
Added a new e2e test (OCP-88729) in test/extended-priv/mco_security.go that verifies USBGuard extension can be installed and enabled via MachineConfig on worker nodes (related to OCPBUGS-78524). The test:
- How to verify it
./_output/linux/amd64/machine-config-tests-ext run-test "[sig-mco][Suite:openshift/machine-config-operator/longduration][Serial][Disruptive] MCO security [PolarionID:88729][OTP] Verify USBGuard extension can be installed and enabled via MachineConfig on worker nodes [Disruptive]"
- Description for the changelog
Add e2e test OCP-88729 to verify USBGuard extension installation and enablement via MachineConfig on worker nodes.
Summary by CodeRabbit