From 50ee3789c4844d41fefeda701a6fc711f1d435df Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fabiano=20Fid=C3=AAncio?= Date: Thu, 11 Jun 2026 20:45:55 +0200 Subject: [PATCH] tests: pull NFD image from the ghcr.io mirror in CI MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The bundled node-feature-discovery subchart pulls its image from registry.k8s.io/nfd/node-feature-discovery:, which has been a recurring source of CI image-pull failures. Rather than hardcoding an override in the chart's values.yaml, override the NFD image repository in the CI helm values (gha-run-k8s-common.sh) to point at the kata-containers ghcr.io mirror. Only the repository is overridden; the tag is left unset so the subchart keeps using its appVersion, keeping the mirror tag in sync automatically. Authored-by: Cursor Signed-off-by: Fabiano Fidêncio --- tests/gha-run-k8s-common.sh | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/tests/gha-run-k8s-common.sh b/tests/gha-run-k8s-common.sh index 8fc5b68007..642c083a3b 100644 --- a/tests/gha-run-k8s-common.sh +++ b/tests/gha-run-k8s-common.sh @@ -710,6 +710,14 @@ function helm_helper() { # Enable node-feature-discovery deployment yq -i ".node-feature-discovery.enabled = true" "${values_yaml}" + # Pull the NFD image from the kata-containers ghcr.io mirror rather than the + # upstream registry.k8s.io/nfd/node-feature-discovery, which has been a + # recurring source of CI image-pull failures. We override only the registry + # here (in CI) and leave the chart default untouched. The tag is left unset + # on purpose so the NFD subchart keeps using its appVersion, which must be + # present in the mirror. + yq -i ".node-feature-discovery.image.repository = \"${NFD_IMAGE_REPOSITORY:-ghcr.io/kata-containers/node-feature-discovery}\"" "${values_yaml}" + # Do not enable on nvidia-gpu-* tests, as it'll be deployed by the GPU operator if [[ "${KATA_HYPERVISOR}" == *"nvidia-gpu"* ]]; then yq -i ".node-feature-discovery.enabled = false" "${values_yaml}"