stacklok / toolhive / 22137563574
62%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 535
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 62.365% (+0.2%) from 62.214%
22137563574

push

github

web-flow 
Report discovered auth config errors via conditions (#3822)

* Report discovered auth config errors via conditions

Enhance VirtualMCPServer controller to continue in degraded mode when
discovered authentication configurations fail to convert, while
exposing failures via Kubernetes status conditions for better
observability.

Previously, when authentication configuration discovery failed (e.g.,
missing MCPExternalAuthConfig), errors were silently skipped with only
log messages. Users had no visibility into these failures via kubectl
or the Kubernetes API.

Closes: #2838

Report discovered auth config errors via conditions

Enhance VirtualMCPServer controller to continue in degraded mode when
discovered authentication configurations fail to convert, while
exposing failures via Kubernetes status conditions for better
observability.

Previously, when authentication configuration discovery failed (e.g.,
missing MCPExternalAuthConfig), errors were silently skipped with only
log messages. Users had no visibility into these failures via kubectl
or the Kubernetes API.

Changes:
- Add AuthConfigError type to capture conversion failure context
- Modify discoverExternalAuthConfigs() to return error list instead of
  silently skipping
- Add SetAuthConfigCondition() to StatusManager for granular conditions
- Add setDiscoveredAuthConfigConditions() helper to set individual
  conditions per discovered auth error
- Update ensureVmcpConfigConfigMap() to accept statusManager and set
  conditions for auth failures
- Update all tests to pass statusManager parameter

The controller now sets DiscoveredAuthConfig-<backend-name> conditions
with status False when discovered auth configs fail, allowing users to
see issues in VirtualMCPServer status while the system continues
operating with available backends.

This addresses part of issue #2838. Future PRs will handle default and
backend-specific auth config errors.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

*... (continued)

226 of 257 new or added lines in 4 files covered. (87.94%)

16 existing lines in 8 files now uncovered.

45068 of 72265 relevant lines covered (62.36%)

75.4 hits per line

New Missed Lines in Diff

Lines Coverage ∆ File
2
87.16
 1.44% cmd/thv-operator/pkg/virtualmcpserverstatus/collector.go
9
69.85
 2.83% cmd/thv-operator/controllers/virtualmcpserver_controller.go
20
76.92
 6.85% cmd/thv-operator/controllers/virtualmcpserver_vmcpconfig.go

Uncovered Existing Lines

Lines Coverage ∆ File
1
69.85
 2.83% cmd/thv-operator/controllers/virtualmcpserver_controller.go
1
76.92
 6.85% cmd/thv-operator/controllers/virtualmcpserver_vmcpconfig.go
2
54.0
 -2.0% pkg/networking/port.go
2
80.58
 0.26% pkg/transport/proxy/httpsse/http_proxy.go
2
57.89
 -3.51% pkg/transport/session/sse_session.go
2
71.43
 -1.68% pkg/vmcp/k8s/manager.go
3
71.85
 -1.11% pkg/ignore/processor.go
3
45.05
 -0.68% pkg/transport/stdio.go
Jobs
ID Job ID Ran Files Coverage
1 22137563574.1 535
62.36
 GitHub Action Run
Source Files on build 22137563574