1
94%
main: 94%

Ran 10 May 2026 10:30PM UTC

Files 177

Run time 4s

Badge

Embed ▾

Committed 10 May 2026 10:16PM UTC coverage: 94.393% (-0.03%) from 94.427%

Job # 25641261676.1

Build Type

Pull #1676

github

Committed by

yewmsft

Commit Message

fix: wire LocalDNS reconciler to workload cluster apiserver

The LocalDNS reconciler inspects NetworkPolicy / CiliumNetworkPolicy /
CiliumClusterwideNetworkPolicy resources and the upstream node-local-dns
DaemonSet. These live on the workload cluster (the cluster Karpenter is
managing), not the underlay/CCP cluster where the Karpenter pod itself runs.

Previously the status controller received the in-cluster (CCP) Kubernetes
and dynamic clients, so on managed Karpenter the reconciler queried the
wrong apiserver and would fail RBAC checks against the CCP namespace's
karpenter-sa.

Expose a new workload-cluster dynamic client on the Operator (paired with
the existing upstream operator.KubernetesInterface, which already points
at the workload cluster) and thread both client pairs through to the
nodeclass status controller. NodeImageReconciler continues to use the
in-cluster client (it reads CCP-namespace ConfigMaps); LocalDNSReconciler
now uses the workload client.

Pull Request Pull Request #1676: feat: resolve LocalDNS state at NodeClass reconcile time

Coverage Stats

74492 of 78917 relevant lines covered (94.39%)

0.96 hits per line

Azure / karpenter-provider-azure / 25641261676 / 1
94%
main: 94%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 25641261676.1

Azure / karpenter-provider-azure / 25641261676 / 1 94% main: 94%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 25641261676.1

Azure / karpenter-provider-azure / 25641261676 / 1
94%
main: 94%

README BADGES
x