Skip to content

Make http proxy test more strict#900

Open
fealebenpae wants to merge 3 commits intomasterfrom
fealebenpae/agent-httpproxy-investigation
Open

Make http proxy test more strict#900
fealebenpae wants to merge 3 commits intomasterfrom
fealebenpae/agent-httpproxy-investigation

Conversation

@fealebenpae
Copy link
Contributor

Summary

This change makes the operator proxy test more strict in order to better catch failures in configuring the automation agent for proxy access. It also runs them against Ops Manager, not just Cloud Manager to test the Ops Manager agent behavior as well.

This is achieved by a NetworkPolicy (via Calico) that allows the tested replica set pods to access only each other and the proxy pod. Failure to reconcile means that some component didn't pick up the proxy settings.

Currently this fails because the automation agent doesn't seem to respect the proxy environment variables defined by the operator. Adding the -httpProxy agent flag in the replica set CR fixes that.

Proof of Work

Successful* patch with -httpProxy set.
Failing patch with just the proxy environment variables.

* The non-static CloudQA variant fails because of a regression in the Cloud Manager automation agent's handling of proxy settings when downloading binaries.

Checklist

  • Have you linked a jira ticket and/or is the ticket in the title?
  • Have you checked whether your jira ticket required DOCSP changes?
  • Have you added changelog file?

@fealebenpae fealebenpae self-assigned this Mar 16, 2026
@fealebenpae fealebenpae added the skip-changelog Use this label in Pull Request to not require new changelog entry file label Mar 16, 2026
@github-actions
Copy link

github-actions bot commented Mar 16, 2026

⚠️ (this preview might not be accurate if the PR is not rebased on current master branch)

MCK 1.7.1 Release Notes

Other Changes

  • Container images: Merged the init-database and init-appdb init container images into a single init-database image. The init-appdb image will no longer be published and does not affect existing deployments.
    • The following Helm chart values have been removed: initAppDb.name, initAppDb.version, and registry.initAppDb. Use initDatabase.name, initDatabase.version, and registry.initDatabase instead.
    • The following environment variables have been removed: INIT_APPDB_IMAGE_REPOSITORY and INIT_APPDB_VERSION. Use INIT_DATABASE_IMAGE_REPOSITORY and INIT_DATABASE_VERSION instead.
  • Helm Chart: Removed operator.baseName Helm value. This value was never intended to be consumed by operator users and was never documented. The value controls the prefix for workload RBAC resource names (mongodb-kubernetes default), but changing it could break the operator and workloads because the operator is not aware of custom prefixes. With this change, the Helm chart will no longer allow customisation and the relevant resources will be deployed with predefined names (ServiceAccount with names mongodb-kubernetes-appdb, mongodb-kubernetes-database-pods, mongodb-kubernetes-ops-manager, Role with name mongodb-kubernetes-appdb and RoleBinding with name mongodb-kubernetes-appdb).

@fealebenpae fealebenpae marked this pull request as ready for review March 16, 2026 10:12
@fealebenpae fealebenpae requested review from a team as code owners March 16, 2026 10:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

skip-changelog Use this label in Pull Request to not require new changelog entry file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant