Skip to content

Commit 6ef17a7

Browse files
committed
- Remove secret watcher
Enable UDS pmc tests with PTP authentication: - Mount ptp-security-conf Secret in test pods when PTP_AUTH_ENABLED=true - Allows pmc from test pods to authenticate to UDS socket
1 parent 15b4c36 commit 6ef17a7

File tree

7 files changed

+187
-149
lines changed

7 files changed

+187
-149
lines changed

api/v1/ptpconfig_webhook.go

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -346,10 +346,9 @@ func (r *PtpConfig) validateSecretExistsForProfile(ctx context.Context, profile
346346
return fmt.Errorf("secret '%s' referenced by profile '%s' does not exist in namespace 'openshift-ptp'. Please create the secret before referencing it in PtpConfig",
347347
secretName, profileName)
348348
}
349-
// For other errors (like permission issues), log but don't block
350-
ptpconfiglog.Error(err, "failed to verify secret existence", "secret", secretName, "profile", profileName)
351-
// Fail open - don't block if we can't verify
352-
return nil
349+
// For other errors (like permission issues), fail closed - reject to ensure security
350+
return fmt.Errorf("failed to verify secret '%s' for profile '%s': %v. This may indicate webhook permission issues or API connectivity problems",
351+
secretName, profileName, err)
353352
}
354353

355354
ptpconfiglog.Info("validated secret exists", "secret", secretName, "profile", profileName)

bundle/manifests/ptp-operator.clusterserviceversion.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -55,13 +55,13 @@ metadata:
5555
},
5656
"ptpEventConfig": {}
5757
}
58-
}
58+
}
5959
]
6060
capabilities: Basic Install
6161
categories: Networking
6262
certified: "false"
6363
containerImage: quay.io/openshift/origin-ptp-operator:4.21
64-
createdAt: "2025-11-19T21:47:47Z"
64+
createdAt: "2025-11-25T10:35:27Z"
6565
description: This software enables configuration of Precision Time Protocol(PTP)
6666
on Kubernetes. It detects hardware capable PTP devices on each node, and configures
6767
linuxptp processes such as ptp4l, phc2sys and timemaster.

0 commit comments

Comments
 (0)