Matthew Grossman d789ec613b test(tmachine): use K3s ClusterIP, wait for gateway, add failure diagnostics (#4258) ...

* test(k3s): connect tmachine clients directly to ClusterIP

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

* test(conformance): wait for a connected gateway on every installer

Replace the K3s-specific boot readiness hook with one shared gateway wait in the conformance playbook. Skip conformance and collect the existing diagnostics when the gateway never connects. Discover the gateway Service port with its ClusterIP, and capture both iptables backends in K3s diagnostics.

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

* test(tmachine): centralize gateway diagnostics and trim K3s changes

Move failure diagnostics into one openshell_diagnostics role that collects the systemd gateway journal and, when K3s is installed, the K3s diagnostics. Drop install-time diagnostics so the K3s installer change stays minimal, revert unrelated skill edits, and shorten the CI.md note.

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

---------

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

2026-10-09 19:52:57 +00:00

..

branch-checks.yml

ci(release): add advisory compatibility review (#4200)

2026-10-07 14:12:05 +00:00

branch-docs.yml

docs: keep page URLs aligned with file paths (#3713)

2026-09-28 02:08:54 +00:00

branch-e2e.yml

fix(ci): stop running e2e in merge queues (#4232)

2026-10-06 12:45:02 +00:00

build-binaries.yml

fix(ci): retry Nix shell and app dependency preparation (#4066)

2026-10-02 11:27:20 +00:00

build-images.yml

ci: consolidate multi-platform image builds (#3408)

2026-09-17 13:46:31 +00:00

build-rpm.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

build-vm-driver.yml

fix(vm): codesign macOS driver-vm with hypervisor entitlement in CI (#3507)

2026-10-02 16:09:09 +00:00

cargo-deny.yml

ci: pin CI images by digest and add native architecture smoke checks (#4114)

2026-10-02 16:22:27 +00:00

ci-image.yml

chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 (#2573)

2026-07-31 22:40:45 +00:00

codeql.yml

ci(security): orchestrate security scans with severity gating (#3255)

2026-09-11 10:26:56 +00:00

codex-compatibility.yml

ci(release): add advisory compatibility review (#4200)

2026-10-07 14:12:05 +00:00

codex-security.yml

fix(ci): retain sanitized Codex scan diagnostics on failure (#4304)

2026-10-07 23:25:28 +00:00

dco.yml

fix(dco): Fix mismatched wording that breaks initial DCO checks (#2399)

2026-07-21 21:02:37 +00:00

deb-package.yml

ci: pin CI images by digest and add native architecture smoke checks (#4114)

2026-10-02 16:22:27 +00:00

dependency-review.yml

ci(security): add informational security checks (#2930)

2026-08-27 13:32:16 +00:00

e2e-docker-test.yml

ci: pin CI images by digest and add native architecture smoke checks (#4114)

2026-10-02 16:22:27 +00:00

e2e-gpu-test.yaml

ci: pin CI images by digest and add native architecture smoke checks (#4114)

2026-10-02 16:22:27 +00:00

e2e-kubernetes-test.yml

chore(kubernetes): update Agent Sandbox to v1.0.3 (#3578)

2026-09-23 18:30:24 +00:00

e2e-label-help.yml

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

e2e-podman-test.yml

test(tmachine): migrate Keycloak provider refresh coverage (#3404)

2026-09-18 13:56:07 +02:00

e2e-vm-test.yml

test(e2e): run conformance in gateway lanes (#2925)

2026-09-01 12:36:51 +00:00

helm-lint.yml

ci: pin CI images by digest and add native architecture smoke checks (#4114)

2026-10-02 16:22:27 +00:00

integration-runner.yml

test(tmachine): use K3s ClusterIP, wait for gateway, add failure diagnostics (#4258)

2026-10-09 19:52:57 +00:00

integration-test.yml

ci: use package installers consistently in integration tests (#4056)

2026-10-01 15:05:35 +00:00

issue-triage.yml

chore(ci): pin all GitHub Actions to SHA digests (#1233)

2026-05-18 22:36:48 -07:00

maintainer-approval.yml

feat(ci): gate merges on maintainer approval via a silent status check (#3176)

2026-10-09 17:22:15 +00:00

maintainers-change-alert.yml

feat(ci): gate merges on maintainer approval via a silent status check (#3176)

2026-10-09 17:22:15 +00:00

package-release-binaries.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

prepare-integration-inputs.yml

fix(ci): retry Nix shell and app dependency preparation (#4066)

2026-10-02 11:27:20 +00:00

publish-docs-website.yml

feat(docs): publish versioned release snapshots (#3149)

2026-09-09 23:34:34 +00:00

release-auto-tag.yml

ci(release): advance seeded prereleases daily at Zurich time (#3239)

2026-09-16 08:48:18 +00:00

release-canary.yml

feat(snap): run gateway as a user service by default (#4099)

2026-10-09 11:39:08 +00:00

release-dev.yml

fix(ci): gate tagged publication on qualification (#4198)

2026-10-05 14:00:00 +00:00

release-tag.yml

ci(release): add advisory compatibility review (#4200)

2026-10-07 14:12:05 +00:00

release-vm-kernel.yml

ci: pin CI images by digest and add native architecture smoke checks (#4114)

2026-10-02 16:22:27 +00:00

required-ci-gates.yml

fix(ci): publish merge queue E2E statuses (#4370)

2026-10-09 12:38:37 +00:00

rpm-package.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

security-scan.yml

ci(security): stage release finding enforcement (#3552)

2026-09-22 17:21:23 +00:00

snap-package.yml

fix(ci): gate tagged publication on qualification (#4198)

2026-10-05 14:00:00 +00:00

snap-publish.yml

fix(ci): gate tagged publication on qualification (#4198)

2026-10-05 14:00:00 +00:00

stale.yml

chore(agents): simplify contributor instructions and workflows (#3987)

2026-10-01 16:20:35 +00:00

sync-docs.yml

feat(docs): publish versioned release snapshots (#3149)

2026-09-09 23:34:34 +00:00

trivy-changes.yml

fix(ci): retry Nix shell and app dependency preparation (#4066)

2026-10-02 11:27:20 +00:00

trivy-scan.yml

fix(ci): retry Nix shell and app dependency preparation (#4066)

2026-10-02 11:27:20 +00:00

vouch-check.yml

chore(ci): pin all GitHub Actions to SHA digests (#1233)

2026-05-18 22:36:48 -07:00

vouch-command.yml

ci(vouch): close approved request discussions (#2929)

2026-08-26 06:31:42 +00:00

windows-msvc.yml

ci(windows): seed caches on windows branch (#3576)

2026-09-22 21:12:05 -07:00

workflow-security.yml

fix(ci): retry Nix shell and app dependency preparation (#4066)

2026-10-02 11:27:20 +00:00