e2e: prune stale migration-era checks #79

2026-06-27T12:52:24Z

k.renner commented

2026-06-27 12:52:24 +00:00

The e2e cluster-access path is fixed (kubeconfig uploaded to Hetzner), so the suite runs again — and it surfaced checks that probe resources retired during the PVE→K8s migration. Each was verified against the live cluster + repo before removal (not just removed because it was red):

Removed check	Why it's stale (verified)
`migration-bucket` OBC Bound ×3 (authentik/paperless/audiobookshelf)	`kubectl get obc -A` is empty; no OBC defs in the repo
Ceph RGW S3 round-trip	mounts the `migration-bucket` Secret/ConfigMap that the gone OBC generated — can't run
TLS for `auth.k.renner.uno`	retired hostname, no Traefik router (default cert / 404). Kept `dash.k`/`audiobooks.k` — those are real
OIDC well-known: `paperless`	paperless uses an Authentik proxy outpost, not OIDC → no `/application/o/paperless` provider (404). Kept audiobookshelf + grafana (real OIDC, return 200)

Left intact (valid checks that merely flaked during the recent cluster churn — verified healthy live): loki (11.8k logs/5m), prometheus (63 targets up), alertmanager (0 critical), paperless-docs, and all storage/velero/cert/db checks.

Net: removes 4 stale assertions so the suite is a meaningful red/green signal again.

Follow-up noted (not in this PR): the CephObjectStore rook-ceph/migration is Ready but now unclaimed (no OBCs) — vestigial migration infra, a separate cleanup candidate.

🤖 Generated with Claude Code

The e2e cluster-access path is fixed (kubeconfig uploaded to Hetzner), so the suite runs again — and it surfaced checks that probe resources retired during the PVE→K8s migration. **Each was verified against the live cluster + repo before removal** (not just removed because it was red): | Removed check | Why it's stale (verified) | |---|---| | `migration-bucket` OBC Bound ×3 (authentik/paperless/audiobookshelf) | `kubectl get obc -A` is empty; no OBC defs in the repo | | Ceph RGW S3 round-trip | mounts the `migration-bucket` Secret/ConfigMap that the gone OBC generated — can't run | | TLS for `auth.k.renner.uno` | retired hostname, no Traefik router (default cert / 404). **Kept** `dash.k`/`audiobooks.k` — those are real | | OIDC well-known: `paperless` | paperless uses an Authentik **proxy outpost**, not OIDC → no `/application/o/paperless` provider (404). **Kept** audiobookshelf + grafana (real OIDC, return 200) | **Left intact** (valid checks that merely flaked during the recent cluster churn — verified healthy live): loki (11.8k logs/5m), prometheus (63 targets up), alertmanager (0 critical), paperless-docs, and all storage/velero/cert/db checks. Net: removes 4 stale assertions so the suite is a meaningful red/green signal again. Follow-up noted (not in this PR): the `CephObjectStore rook-ceph/migration` is Ready but now unclaimed (no OBCs) — vestigial migration infra, a separate cleanup candidate. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

k.renner added 1 commit 2026-06-27 12:52:24 +00:00

e2e: prune stale migration-era checks f5075dfe7f

These checks probed resources retired during the PVE->K8s migration and have been failing since e2e could run again (the fetch-kubeconfig path was broken ~45h). Verified each against live cluster + repo before removing:

- migration-bucket OBC Bound (authentik/paperless/audiobookshelf): no such OBCs exist in the cluster or repo (kubectl get obc -A is empty).
- Ceph RGW S3 round-trip: mounts the migration-bucket Secret/ConfigMap that the (gone) OBC generated; can't run. (The CephObjectStore rook-ceph/migration is itself now vestigial — separate cleanup.)
- TLS for auth.k.renner.uno: retired hostname, no Traefik router (serves the default cert / 404). Kept dash.k/audiobooks.k.renner.uno, which are real.
- authentik OIDC well-known: paperless: paperless uses an Authentik proxy outpost, not OIDC, so it has no /application/o/paperless provider (404). Kept audiobookshelf + grafana, which are real OIDC apps (200).

Left intact: loki/prometheus/alertmanager/paperless-docs and all storage/velero/cert/db checks — those are valid and merely flaked transiently during the recent cluster churn.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

k.renner merged commit 8fe22ccca5 into master

2026-06-27 14:27:31 +00:00

k.renner referenced this issue from a commit

2026-06-27 14:27:33 +00:00

Merge pull request 'e2e: prune stale migration-era checks' (#79) from prune-stale-e2e-checks into master

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: konairius/homelab#79