You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@uniffle.apache.org by "LuciferYang (via GitHub)" <gi...@apache.org> on 2026/07/28 12:34:11 UTC
[I] [Bug] operator envtest suites fail: gs://kubebuilder-tools no longer publicly readable [uniffle]
LuciferYang opened a new issue, #2775:
URL: https://github.com/apache/uniffle/issues/2775
### Code of Conduct
- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
### Search before asking
- [X] I have searched in the [issues](https://github.com/apache/incubator-uniffle/issues) and found no similar issues.
### Describe the bug
The `kubernetes / java 8 + go 1.19` CI job has been failing on every `master` push since 2026-02-12 (last green run: [21863315374](https://github.com/apache/uniffle/actions/runs/21863315374)). Latest failure: [run 30332932903](https://github.com/apache/uniffle/actions/runs/30332932903/job/90192064860) — 46 of 47 jobs pass, only this one fails.
`deploy/kubernetes/operator/Makefile` pins `setup-envtest` to `sigs.k8s.io/controller-runtime/tools/setup-envtest@v0.0.0-20230926180527-c93e2abcb28e`. That predates controller-runtime v0.19, so `--use-deprecated-gcs` still defaults to `true` and it only downloads from `gs://kubebuilder-tools`. That bucket is no longer publicly readable:
```
storage.googleapis.com/storage/v1/b/kubebuilder-tools/o/kubebuilder-tools-1.24.1-linux-amd64.tar.gz -> 401
storage.googleapis.com/kubebuilder-tools/kubebuilder-tools-1.24.1-linux-amd64.tar.gz -> 403
```
so the job logs:
```
unable to fetch checksum for requested version: unable fetch metadata for
kubebuilder-tools-1.24.1-linux-amd64.tar.gz -- got status "401 Unauthorized" from GCS
```
The failure is then swallowed. `Makefile:75` wraps the lookup in `$(shell ...)`:
```make
export KUBEBUILDER_ASSETS=$(shell $(ENVTEST) use $(ENVTEST_K8S_VERSION) --bin-dir $(LOCAL_DIR) -p path); \
go test ./... -coverprofile cover.out
```
so `KUBEBUILDER_ASSETS` is silently set to the empty string (`export KUBEBUILDER_ASSETS=;` appears verbatim in the log) and `go test` runs anyway. envtest then cannot find its control-plane binaries and both suites fail in `BeforeSuite` with a misleading error:
```
exec: "etcd": executable file not found in $PATH
--- FAIL: TestRssController / TestAdmissionManager
make: *** [Makefile:75: test] Error 1
```
Net effect: the operator's envtest suites (`pkg/controller/controller`, `pkg/webhook`) have not actually run in CI for ~5 months, and the failure mode points at `etcd` rather than at the download.
Note that `-DskipUTs -DskipITs` on the `-Pkubernetes` build only skips surefire/failsafe, not this Go `make test`.
### Affects Version(s)
master
### Uniffle Server Log Output
_No response_
### Uniffle Engine Log Output
_No response_
### Uniffle Server Configurations
_No response_
### Uniffle Engine Configurations
_No response_
### Additional context
envtest binaries are now published on the controller-tools GitHub releases, indexed by [`envtest-releases.yaml`](https://raw.githubusercontent.com/kubernetes-sigs/controller-tools/main/envtest-releases.yaml). The 1.24.1 assets are still available there, so the pinned k8s version does not need to change.
Upgrading `setup-envtest` to a version that supports `--use-deprecated-gcs=false --index ...` would also work, but the earliest such version (controller-runtime v0.17.6) requires Go >= 1.20 while CI runs Go 1.19 (`build.yml:112`), so it would drag a Go upgrade into the fix.
### Are you willing to submit PR?
- [X] Yes I am willing to submit a PR!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@uniffle.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@uniffle.apache.org
For additional commands, e-mail: issues-help@uniffle.apache.org
Re: [I] [Bug] operator envtest suites fail: gs://kubebuilder-tools no longer publicly readable [uniffle]
Posted by "roryqi (via GitHub)" <gi...@apache.org>.
roryqi closed issue #2775: [Bug] operator envtest suites fail: gs://kubebuilder-tools no longer publicly readable
URL: https://github.com/apache/uniffle/issues/2775
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@uniffle.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@uniffle.apache.org
For additional commands, e-mail: issues-help@uniffle.apache.org