From 2f2f03afa86a7ffb182935526847091ae3953937 Mon Sep 17 00:00:00 2001 From: Matthias Bertschy Date: Wed, 9 Sep 2026 17:02:28 +0200 Subject: [PATCH] =?UTF-8?q?throwaway:=20validate=20full-ACID=20+=20write-g?= =?UTF-8?q?ate-sharing=20(storage=20prototype/full-acid-containerprofile)?= =?UTF-8?q?=20=E2=80=94=20do=20not=20merge?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Pins storage.image to quay.io/matthiasb_1/storage:fullacid-02002737, a build of kubescape/storage prototype/full-acid-containerprofile at commit 02002737 (the SQLite-native ObjectStore ContainerProfile backend, the write gate hoisted out and shared across all resource kinds, the startup migration, cleanup/GNP rewiring through the CP store, and the export-based rollback tool). Also overrides tests/chart's storage config.json to actually exercise the new code path: containerProfileSqliteBackend=true, plus an explicit singleWriterEnabled=true (already the default, set explicitly here since the backend's own startup check refuses to run without it). Without this, the deployed storage pod would silently keep serving ContainerProfiles through the unchanged legacy row+gob-file StorageImpl, defeating the point of this validation run. Throwaway PR, not for merge. Co-Authored-By: Claude Sonnet 5 Claude-Session: https://claude.ai/code/session_01LCMGT6Po2tSr1VEDVrbbYd --- .github/workflows/component-tests.yaml | 2 +- tests/chart/templates/storage/configmap.yaml | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/component-tests.yaml b/.github/workflows/component-tests.yaml index b46c571537..fb663dab28 100644 --- a/.github/workflows/component-tests.yaml +++ b/.github/workflows/component-tests.yaml @@ -155,7 +155,7 @@ jobs: run: | STORAGE_TAG=$(./tests/scripts/storage-tag.sh) echo "Storage tag that will be used: ${STORAGE_TAG}" - helm upgrade --install kubescape ./tests/chart --set clusterName=`kubectl config current-context` --set nodeAgent.image.tag=${{ needs.build-and-push-image.outputs.image_tag }} --set nodeAgent.image.repository=${{ needs.build-and-push-image.outputs.image_repo }} --set storage.image.tag=${STORAGE_TAG} -n kubescape --create-namespace --wait --timeout 10m --debug + helm upgrade --install kubescape ./tests/chart --set clusterName=`kubectl config current-context` --set nodeAgent.image.tag=${{ needs.build-and-push-image.outputs.image_tag }} --set nodeAgent.image.repository=${{ needs.build-and-push-image.outputs.image_repo }} --set storage.image.tag=${STORAGE_TAG} --set storage.image.repository=quay.io/matthiasb_1/storage --set storage.image.tag=fullacid-02002737 -n kubescape --create-namespace --wait --timeout 10m --debug # Check that the node-agent pod is running kubectl wait --for=condition=Ready pod -l app.kubernetes.io/name=node-agent -n kubescape --timeout=600s sleep 5 diff --git a/tests/chart/templates/storage/configmap.yaml b/tests/chart/templates/storage/configmap.yaml index 0dbf866090..8f7338305c 100644 --- a/tests/chart/templates/storage/configmap.yaml +++ b/tests/chart/templates/storage/configmap.yaml @@ -9,5 +9,7 @@ metadata: data: config.json: | { - "cleanupInterval": "{{ .Values.storage.cleanupInterval }}" + "cleanupInterval": "{{ .Values.storage.cleanupInterval }}", + "singleWriterEnabled": true, + "containerProfileSqliteBackend": true }