NVIDIA / gpu-operator / 40373701777

37%

main: 37%

push

github

Reject conflicting DRA kubelet-plugin healthcheck ports

When ComputeDomains are enabled, the kubelet-plugin DaemonSet runs two
containers that each bind a gRPC health service in the shared pod
network namespace. With both configured on one port the second bind
fails with EADDRINUSE and that container crash-loops; which one loses
is a startup race.

Validate the ports in the DRA driver state before rendering. The check
runs on the resolved ports, so setting only one field to the other
container's default is caught too, and a disabled health service is
skipped. The error names both fields and the port and surfaces through
the existing getManifestObjects path as a ReconcileFailed condition,
leaving the DaemonSet untouched.

Fixes #2979

Signed-off-by: jramkissoon <julianramkissoon@icloud.com>

23 of 23 new or added lines in 1 file covered. (100.0%)

5927 of 16121 relevant lines covered (36.77%)

0.37 hits per line