From 7c6a322061c4f8b0b8c905c603472c534e6cf16a Mon Sep 17 00:00:00 2001 From: Evan Hearne Date: Thu, 26 Feb 2026 17:24:38 +0000 Subject: [PATCH 1/3] check for debug pod regardless of ns --- .../nodefaultserviceaccountoperatortests/monitortest.go | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go b/pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go index f61c1a6a41e5..b0a6d3025bcb 100644 --- a/pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go +++ b/pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go @@ -88,10 +88,10 @@ var exceptions = []func(pod corev1.Pod) (string, bool){ } return "", false }, - // Handle the outlier (Namespace only check) manually - // This one might be simplified to check if it is a debug pod or not. + // Handle the outlier manually + // This one checks if it is a debug pod or not. func(pod corev1.Pod) (string, bool) { - if pod.Namespace == "openshift-commatrix-test" && strings.Contains(pod.Name, "debug") { + if strings.Contains(pod.Name, "debug") { return "https://issues.redhat.com/browse/OCPBUGS-77201", true } return "", false From 2203355f0804ecc3fa33ee44cff362f5f9ee637b Mon Sep 17 00:00:00 2001 From: Evan Hearne Date: Fri, 27 Feb 2026 16:21:49 +0000 Subject: [PATCH 2/3] add openshift-nmstate/nmstate-console-plugin- pod to exceptions. --- .../nodefaultserviceaccountoperatortests/monitortest.go | 1 + 1 file changed, 1 insertion(+) diff --git a/pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go b/pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go index b0a6d3025bcb..4dc369d562c5 100644 --- a/pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go +++ b/pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go @@ -80,6 +80,7 @@ var exceptions = []func(pod corev1.Pod) (string, bool){ exceptionWithJira("openshift-cnv/kubevirt-apiserver-proxy-", "https://issues.redhat.com/browse/OCPBUGS-70353"), exceptionWithJira("openshift-cnv/kubevirt-console-plugin-", "https://issues.redhat.com/browse/OCPBUGS-70353"), exceptionWithJira("kube-system/global-pull-secret-syncer-", "https://issues.redhat.com/browse/OCPBUGS-70354"), + exceptionWithJira("openshift-nmstate/nmstate-console-plugin-", "https://issues.redhat.com/browse/OCPBUGS-77474"), // Handle the outlier (Namespace only check) manually func(pod corev1.Pod) (string, bool) { From 0e37c91519f2114989efd7d72ad940a54f5eb552 Mon Sep 17 00:00:00 2001 From: Evan Hearne Date: Tue, 3 Mar 2026 11:06:29 +0000 Subject: [PATCH 3/3] check for debug pod attributes instead of name --- .../nodefaultserviceaccountoperatortests/monitortest.go | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go b/pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go index 4dc369d562c5..6600bd56ebd6 100644 --- a/pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go +++ b/pkg/monitortests/authentication/nodefaultserviceaccountoperatortests/monitortest.go @@ -92,7 +92,12 @@ var exceptions = []func(pod corev1.Pod) (string, bool){ // Handle the outlier manually // This one checks if it is a debug pod or not. func(pod corev1.Pod) (string, bool) { - if strings.Contains(pod.Name, "debug") { + for annotation := range pod.Annotations { + if strings.Contains(annotation, "debug.openshift.io") { + return "https://issues.redhat.com/browse/OCPBUGS-77201", true + } + } + if managedBy, ok := pod.Labels["debug.openshift.io/managed-by"]; ok && managedBy == "oc-debug" { return "https://issues.redhat.com/browse/OCPBUGS-77201", true } return "", false