Skip to content

fix: configure repodepot endpoint independent of cert opt-in - #9830

Closed
lilypan26 wants to merge 2 commits into
mainfrom
lily/configure-repodepot-endpoint
Closed

lilypan26 wants to merge 2 commits into
mainfrom
lily/configure-repodepot-endpoint

Conversation

@lilypan26

@lilypan26 lilypan26 commented Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

What this PR does / why we need it:

keep scheduling and repository initialization independently gated so custom cloud's don't need to opt-in to root cert download. eligible nodes register certificate refresh before repository setup.

Which issue(s) this PR fixes:

Fixes #

@lilypan26
lilypan26 requested review from a team as code owners October 20, 2026 17:37
Copilot AI balanced review requested due to automatic review settings October 20, 2026 17:37
@github-actions

Copy link
Copy Markdown
Contributor

Windows Unit Test Results

  3 files   18 suites   1m 1s ⏱️
560 tests 560 ✅ 0 💤 0 ❌
563 runs  563 ✅ 0 💤 0 ❌

Results for commit 93247f5.

@github-actions

Copy link
Copy Markdown
Contributor

Code Coverage

Package Line Rate Health
test 0% ❌
windows 27% ❌
staging_cse_windows Package 1 65% ➖
debug 0% ❌
provisioningscripts 2% ❌
parts_windows Package 1 73% ➖
Summary 38% (1645 / 6827) ❌

@github-actions

Copy link
Copy Markdown
Contributor

Code Coverage

Package Line Rate Health
github.com/Azure/agentbaker/aks-node-controller 72% ➖
github.com/Azure/agentbaker/aks-node-controller/common 100% ✔
github.com/Azure/agentbaker/aks-node-controller/helpers 68% ➖
github.com/Azure/agentbaker/aks-node-controller/parser 88% ✔
github.com/Azure/agentbaker/aks-node-controller/pkg/gpu 100% ✔
github.com/Azure/agentbaker/aks-node-controller/pkg/nodeconfigutils 88% ✔
github.com/Azure/agentbaker/aks-node-controller/utils 0% ❌
github.com/Azure/agentbaker/apiserver 24% ❌
github.com/Azure/agentbaker/cmd 0% ❌
github.com/Azure/agentbaker/cmd/starter 0% ❌
github.com/Azure/agentbaker/fuzz/api 0% ❌
github.com/Azure/agentbaker/hotfix/render-nodecustomdata 0% ❌
github.com/Azure/agentbaker/pkg/agent 77% ➖
github.com/Azure/agentbaker/pkg/agent/datamodel 78% ➖
github.com/Azure/agentbaker/pkg/agent/toggles 0% ❌
github.com/Azure/agentbaker/pkg/vhdbuilder/datamodel 87% ✔
Summary 74% (5657 / 7592) ➖

@github-actions

Copy link
Copy Markdown
Contributor

Code Coverage

Package Line Rate Health
shellspec spec 28% ❌
Summary 28% (4507 / 15922) ❌

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

Unbounded APT retry duration and suppressed cache-refresh failures introduce provisioning regressions.

2 open issues
What changed in this PR

Decouples RepoDepot initialization from certificate-download opt-in during Linux node provisioning.

Changes:

  • Registers eligible certificate-refresh schedules before repository setup.
  • Revises package-cache retries and failure handling.
  • Adds ShellSpec coverage for dispatch, scheduling, and retry behavior.
File Description
spec/​parts/​linux/​cloud-init/​artifacts/​init_aks_cloud_spec.sh Tests independent initialization gates and cache retries.
parts/​linux/​cloud-init/​artifacts/​init-aks-cloud.sh Separates scheduling from repository setup and revises cache updates.

Review effort: Balanced

Comment on lines +427 to +429
for i in $(seq 1 "$retries"); do
echo "Running apt-get update (attempt $i/$retries)"
if apt-get update; then
Comment on lines +720 to +730
aptget_update || true
elif [ "$IS_MARINER" -eq 1 ] || [ "$IS_AZURELINUX" -eq 1 ]; then
if [ "$IS_MARINER" -eq 1 ]; then
echo "Initializing Mariner repo depot settings..."
init_mariner_repo_depot ${rootRepoDepotEndpoint}
else
echo "Initializing Azure Linux repo depot settings..."
init_azurelinux_repo_depot ${rootRepoDepotEndpoint}
fi
echo "Running dnf_makecache"
dnf_makecache || true
@lilypan26 lilypan26 closed this Oct 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants