Compare commits

..

6 Commits

Author SHA1 Message Date
Chris Farhood ced728fbb4 fix(e2e): use button role with explicit waitFor for storage classes
As directed by Nancy, try button role with explicit waitFor before
falling back to direct navigation. The sidebar Storage Classes item
may be a button not a link.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-06 22:42:37 +00:00
Chris Farhood a1dae964f3 fix(e2e): navigate directly to storage-classes URL instead of sidebar click
The sidebar click approach is flaky - the Storage Classes link is nested under
the Rook button and not reliably visible/clickable. Navigate directly to the
storage-classes URL and verify the page loads with correct heading.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-06 22:39:03 +00:00
Chris Farhood 7733ee517d fix(e2e): add waitForSidebar before clicking Rook button + 1s wait after
Add waitForSidebar() call before clicking Rook button to ensure sidebar is fully loaded.

Add 1s explicit wait after clicking Rook button to allow sidebar animation to complete before searching for nested Storage Classes link.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-06 22:35:59 +00:00
Chris Farhood c70bef73d6 fix(e2e): expand Rook sidebar before navigating to storage classes
The storage classes link is nested under the Rook sidebar button and
may not be visible until the Rook section is expanded. Click the Rook
button to expand before asserting visibility.

Also use .first() on heading assertions to avoid strict mode violations
when multiple headings match the regex pattern.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-06 22:30:24 +00:00
privilegedescalation-engineer[bot] 42da5a26e3 Add renovate.yml workflow for automated dependency updates
Adds .github/workflows/renovate.yml using renovatebot/github-action@v40.3.0 with daily cron + manual dispatch. Removes Dependabot references.

Reviewed and approved:
- UAT (Patty): approved via PR comment
- QA (Regina): approved via Paperclip
- CTO (Nancy): formal GitHub review approval

Admin merge used: QA formal GitHub review blocked by same-App identity platform constraint (same issue as PR #108).
2026-05-06 15:12:31 +00:00
privilegedescalation-engineer[bot] b9174a292e fix: override elliptic for GHSA-848j-6mx2-7j84
Add pnpm.overrides.elliptic to prevent version regression on
the transitive elliptic vulnerability (CVE-2025-14505).

Vulnerability path:
@kinvolk/headlamp-plugin → vite-plugin-node-polyfills →
node-stdlib-browser → crypto-browserify → browserify-sign → elliptic

Note: pnpm audit will still report the vulnerability until
upstream publishes elliptic 6.6.2+. This override safeguards
against pulling a worse version.

Co-authored-by: Chris Farhood <chris@farhood.org>
Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-05-06 02:14:13 +00:00
5 changed files with 25 additions and 28 deletions
+2 -3
View File
@@ -16,9 +16,8 @@ concurrency:
jobs:
e2e:
uses: privilegedescalation/.github/.github/workflows/plugin-e2e.yaml@main
uses: privilegedescalation/.github/.github/workflows/plugin-e2e.yaml@hugh/add-pnpm-support-plugin-e2e
with:
node-version: "22"
node-version: '22'
headlamp-version: v0.40.1
e2e-namespace: headlamp-dev
plugin-name: rook
+14
View File
@@ -0,0 +1,14 @@
name: Renovate
on:
schedule:
- cron: '0 3 * * *'
workflow_dispatch:
jobs:
renovate:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: renovatebot/github-action@v40.3.0
with:
configurationFile: renovate.json
renovate-json5: true
+5 -5
View File
@@ -42,15 +42,15 @@ test.describe('Rook plugin smoke tests', () => {
test('navigation to storage classes view works', async ({ page }) => {
await page.goto('/c/main/rook-ceph');
const sidebar = page.getByRole('navigation', { name: 'Navigation' });
await waitForSidebar(page);
const sidebar = page.getByRole('navigation', { name: 'Navigation' });
const rookBtn = sidebar.getByRole('button', { name: /rook/i });
await rookBtn.click();
await page.waitForLoadState('networkidle');
const storageClassesLink = sidebar.getByRole('link', { name: /storage classes/i });
await expect(storageClassesLink).toBeVisible({ timeout: 10_000 });
await storageClassesLink.click();
const storageClassesBtn = sidebar.getByRole('button', { name: /storage classes/i });
await storageClassesBtn.waitFor({ state: 'visible', timeout: 15_000 });
await storageClassesBtn.click();
await page.waitForLoadState('networkidle');
await expect(page).toHaveURL(/rook-ceph\/storage-classes/);
+2 -1
View File
@@ -50,6 +50,7 @@
"tar": "^7.5.11",
"undici": "^7.24.3",
"vite": ">=6.4.2",
"lodash": ">=4.18.0"
"lodash": ">=4.18.0",
"elliptic": ">=6.6.1"
}
}
+2 -19
View File
@@ -35,17 +35,6 @@ if ! kubectl auth can-i delete configmaps -n "$E2E_NAMESPACE" --quiet 2>/dev/nul
exit 1
fi
echo ""
echo "=== Pre-deployment cluster diagnostics ==="
echo "Nodes:"
kubectl get nodes -o wide 2>&1 || true
echo ""
echo "headlamp-dev namespace state:"
kubectl get ns headlamp-dev -o yaml 2>&1 || true
echo ""
echo "Existing E2E resources in namespace:"
kubectl get all -n "$E2E_NAMESPACE" -l "app.kubernetes.io/instance=$E2E_RELEASE" 2>&1 || true
echo "=== E2E Headlamp Deployment ==="
echo " Image: ghcr.io/headlamp-k8s/headlamp:${HEADLAMP_VERSION}"
echo " Namespace: $E2E_NAMESPACE"
@@ -71,7 +60,7 @@ kubectl delete serviceaccount "${E2E_RELEASE}" -n "$E2E_NAMESPACE" --ignore-not-
echo ""
echo "Deploying Headlamp E2E instance..."
if ! kubectl apply -f - <<EOF
kubectl apply -f - <<EOF
apiVersion: v1
kind: ServiceAccount
metadata:
@@ -124,7 +113,7 @@ spec:
port: http
initialDelaySeconds: 5
periodSeconds: 5
failureThreshold: 6
failureThreshold: 6
livenessProbe:
httpGet:
path: /
@@ -159,12 +148,6 @@ spec:
targetPort: http
protocol: TCP
EOF
then
echo "ERROR: kubectl apply failed. Dumping cluster state..." >&2
kubectl get all -n "$E2E_NAMESPACE" 2>&1 || true
kubectl get events -n "$E2E_NAMESPACE" --sort-by='.lastTimestamp' 2>&1 | tail -30 || true
exit 1
fi
echo "Waiting for rollout..."
kubectl rollout status "deployment/${E2E_RELEASE}" \