Skip to content

Latest commit

 

History

History
146 lines (96 loc) · 7.76 KB

helm-chart-troubleshooting.md

File metadata and controls

146 lines (96 loc) · 7.76 KB
Raw

Troubleshooting

Troubleshooting check failures

is-helm-v3

Requires the "api-version" attribute of chart.yaml to be set to "v2". Any other value will result in the check failing.

has-readme

Requires a "README.md" file to exist in the root directory of the chart. Any other spelling or capitialisation of letters will result in the check failing.

contains-test

Requires at least one file to exist in the templates/tests subdirectory of the chart. If no such file exists this check will fail. Note the chart-testing check will require the directory to contain a valid test.

See also helm documentation: chart tests

has-kubeversion

Requires the "kubeVersion" attribute of chart.yaml to be set to a value. If the attribute is not set the check will fail. The value set is not checked.

contains-values

Requires a values.schema file to be present in the chart. If the file is not present the check will fail.

See also helm documentation: values and Best Practices for using values.

contains-values-schema

Requires a values.schema.json file to be present in the chart. If the file is not present the check will fail.

See also helm documentation: Schema Files

not-contains-crds

Requires no RCRD's to be defined in the chart. A crd is a file with an extension of .yaml, .yml or .json in a crd subdirectory of the chart and should be removed if present.

CRD's should be defined using operators. See: Operator CRDs

not-contain-csi-objects

Requires no csi objects in a chart. A csi object is a file in the template subdirectory, with an extension of .yaml, and containing an kind attribute set to CSIDriver. If such a file exists it should be removed.

helm-lint

Requires a helm lint of the chart to not result in any ERROR messages. If an ERROR does occur the helm lint messages will be output. Run helm lint on your chart for additional information. If the chart requires specification of additional values to pass helm lint use one of the chart-set flags of the verifier tool for this check to pass. If additional values are required a verifier report mut be included in the chart submission.

images-are-certified

Requires any images referenced in a chart to be Red Hat Certified.

  • The list of image references is found by running helm template and if this fails the error output from helm template will be output. Run helm template on your chart for additional information. If the chart requires specification of additional attributes to pass helm template use one of the chart-set flags of the verifier tool for this check to pass. If additional attributes are required a verifier report must be included in the chart submission.
  • Each image reference found from helm template is parsed to determine the registry, repository and tag or digest value.
    • registry is the string before the first "/" in the image reference but only if it includes a "." character.
    • the repository is what remains in the image reference, after the registry is removed and before ":" or "@sha"
    • tag is what is set after the ":" character
    • digest is what is set after the "@" character in "@sha"
  • If a registry is not found the pyxis swagger api is used to find the repository and from it, extract the registry
    • https://catalog.redhat.com/api/containers/v1/repositories?filter=repository==<repository>
    • if the repository is not found the check will fail.
  • The registry and repository are then used to find images:
    • https://catalog.redhat.com/api/containers/v1/repositories/registry/<registry>/repository/<repository>/images
    • if the image specified a sha value it is compared with the parsed_data.docker_image_digest attribute. If a match is not found the check fails.
    • if the image specified a tag value it is compared with the repositories.tags.name attributes. If a match is not found the check fails.
  • If the check fails use the point fo failure to determine how to address the issue.

For information on certifying images see: Red Hat container certification

chart-testing

Chart testing runs the equivalant of helm install ... followed by helm test.... Try to run these independantly of the chart-verifier and make a note of any flags or overrides that must be set for them both to work. Ensure these values are set using chart-verifier flags when generating a report.

Also note that if chart-verifier flags are required for the chart-verifier chart-testing check to pass a verifier report must be included in the chart submission.

Report related submission failures

One or more mandatory checks have failed or are missing from the report.

Submission will fail if any mandatory checks indicate failure or are absent from the report.

Regenerate the report running all tests and ensure they all pass.

If a check is failing and you are unsure as to why see Trouble shooting check failures

The digest in the report does not match the digest calculated for the submitted chart.

Common causes:

  • The chart was updated after the report was generated.
  • The Report was generated against a different form to the chart submitted.
    • For example report was generated from the chart source but the chart tarball was used for submission.

For more information see Verifier added annotations

The certifiedOpenShiftVersions annotation does not contain a valid value.

This annotation must contain a current or recent OpenShift version. It is generally set by the chart-testing check but this can fail if the role of the user who generated report does not have the required access.

For more information see Verifier added annotations

The chart uri is not a valid url.

For a report only submission the report must include a valid url for the chart.

For more information see error-with-the-chart-url-when-submitting-report

For more information see Verifier added annotations