Skip to content

HYPERFLEET-711 - docs: clarify GKE Helm deployment for Quay images - #61

Merged
openshift-merge-bot[bot] merged 6 commits into
mainfrom
HYPERFLEET-711
Mar 5, 2026
Merged

HYPERFLEET-711 - docs: clarify GKE Helm deployment for Quay images#61
openshift-merge-bot[bot] merged 6 commits into
mainfrom
HYPERFLEET-711

Conversation

@pnguyen44

@pnguyen44 pnguyen44 commented Mar 4, 2026

Copy link
Copy Markdown
Contributor

Jira ticket

Summary

  • Clarifies docs/running-sentinel.md deployment steps for Quay images.
  • Adds explicit podman login quay.io before make image-dev.

Test Plan

[x] Validate Quay-based Helm deploy/upgrade flow in the shared hyperfleet-dev cluster.

Summary by CodeRabbit

  • Documentation
    • Updated deployment instructions with clearer Helm deployment options for both Quay and GCR image registries.
    • Added new Prometheus and OpenShift deployment scenarios with step-by-step registry configuration guidance.
    • Added prerequisite login step for image registry access before deployment.

@openshift-ci
openshift-ci Bot requested review from tirthct and xueli181114 March 4, 2026 19:35
@coderabbitai

coderabbitai Bot commented Mar 4, 2026

Copy link
Copy Markdown

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review

Walkthrough

This documentation update revises the Helm deployment instructions in docs/running-sentinel.md. The changes introduce two distinct deployment options: Option A using a Quay image built via make image-dev, and Option B using a GCR image from a manual build. A one-time Quay login step is added before image pushes. The Helm deployment section reference is updated to reflect new numbering, and instructions are expanded to cover Prometheus and OpenShift scenarios with explicit image registry and tag configuration across all deployment paths.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Possibly related PRs

Suggested labels

lgtm, approved

Suggested reviewers

  • tirthct
  • rh-amarin
  • yingzhanredhat
🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title directly addresses the main change: clarifying Helm deployment documentation for Quay images. It accurately reflects the primary focus of the documentation update.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch HYPERFLEET-711

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)
docs/running-sentinel.md (1)

384-402: ⚠️ Potential issue | 🟠 Major

Option B can inherit stale global.imageRegistry from prior release values.

Because helm upgrade merges persisted values, a previous Option A install (global.imageRegistry=quay.io) may stick when running Option B with the same release name. That can produce an invalid image path for the GCR flow unless registry is explicitly reset.

Proposed doc fix
 helm upgrade --install sentinel-test ./deployments/helm/sentinel \
   --namespace ${NAMESPACE} \
   --create-namespace \
+  --set global.imageRegistry=gcr.io \
   --set image.repository=gcr.io/${GCP_PROJECT}/sentinel \
   --set image.tag=${IMAGE_TAG} \
   --set broker.type=googlepubsub \
   --set broker.googlepubsub.projectId=${GCP_PROJECT} \
   --set monitoring.podMonitoring.enabled=true

 # For Prometheus Operator environments (OpenShift, vanilla Kubernetes):
 helm upgrade --install sentinel-test ./deployments/helm/sentinel \
   --namespace ${NAMESPACE} \
   --create-namespace \
+  --set global.imageRegistry=gcr.io \
   --set image.repository=gcr.io/${GCP_PROJECT}/sentinel \
   --set image.tag=${IMAGE_TAG} \
   --set broker.type=googlepubsub \
   --set broker.googlepubsub.projectId=${GCP_PROJECT} \
   --set monitoring.serviceMonitor.enabled=true \
   --set monitoring.serviceMonitor.additionalLabels.release=prometheus
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/running-sentinel.md` around lines 384 - 402, The docs note that Option B
can inherit a stale global.imageRegistry from a prior release, causing an
invalid GCR image path; update the helm upgrade examples (the helm upgrade
--install sentinel-test ... commands) to either recommend using --reset-values
or explicitly override global.imageRegistry (e.g., set global.imageRegistry=""
or set it to the correct registry) so the GCR flow uses the intended registry
instead of a persisted quay.io value; mention the exact flag (--reset-values)
and the value override (global.imageRegistry) so readers can locate and fix
their release.
🧹 Nitpick comments (1)
docs/running-sentinel.md (1)

367-373: Image repository name appears inconsistent with make image-dev output.

Option A sets --set image.repository=${USER}/hyperfleet-sentinel, but the docs above state make image-dev builds/pushes quay.io/${QUAY_USER}/sentinel:dev-<commit>. If users copy both blocks as-is, Helm may reference a different repo than what was pushed.

Proposed doc fix
 helm upgrade --install sentinel-test ./deployments/helm/sentinel \
   --namespace ${NAMESPACE} \
   --create-namespace \
   --set global.imageRegistry=quay.io \
-  --set image.repository=${USER}/hyperfleet-sentinel \
+  --set image.repository=${USER}/sentinel \
   --set image.tag=dev-$(git rev-parse --short HEAD) \
   --set broker.type=googlepubsub \
   --set broker.googlepubsub.projectId=${GCP_PROJECT} \
   --set monitoring.podMonitoring.enabled=true
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/running-sentinel.md` around lines 367 - 373, The helm command uses --set
image.repository=${USER}/hyperfleet-sentinel which conflicts with the earlier
make image-dev output (quay.io/${QUAY_USER}/sentinel:dev-<commit>); update the
deployment docs so the helm flag --set image.repository matches the built/pushed
image name (e.g., use quay.io/${QUAY_USER}/sentinel or make the make image-dev
target push to quay.io/${QUAY_USER}/hyperfleet-sentinel), and ensure the --set
image.tag uses the same dev-$(git rev-parse --short HEAD) or dev-<commit>
variable referenced by make image-dev so both image.repository and image.tag are
consistent with the build step.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Outside diff comments:
In `@docs/running-sentinel.md`:
- Around line 384-402: The docs note that Option B can inherit a stale
global.imageRegistry from a prior release, causing an invalid GCR image path;
update the helm upgrade examples (the helm upgrade --install sentinel-test ...
commands) to either recommend using --reset-values or explicitly override
global.imageRegistry (e.g., set global.imageRegistry="" or set it to the correct
registry) so the GCR flow uses the intended registry instead of a persisted
quay.io value; mention the exact flag (--reset-values) and the value override
(global.imageRegistry) so readers can locate and fix their release.

---

Nitpick comments:
In `@docs/running-sentinel.md`:
- Around line 367-373: The helm command uses --set
image.repository=${USER}/hyperfleet-sentinel which conflicts with the earlier
make image-dev output (quay.io/${QUAY_USER}/sentinel:dev-<commit>); update the
deployment docs so the helm flag --set image.repository matches the built/pushed
image name (e.g., use quay.io/${QUAY_USER}/sentinel or make the make image-dev
target push to quay.io/${QUAY_USER}/hyperfleet-sentinel), and ensure the --set
image.tag uses the same dev-$(git rev-parse --short HEAD) or dev-<commit>
variable referenced by make image-dev so both image.repository and image.tag are
consistent with the build step.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 00f3e163-49fe-4325-9169-d11a7a856568

📥 Commits

Reviewing files that changed from the base of the PR and between 9b037da and 926fe9a.

📒 Files selected for processing (1)
  • docs/running-sentinel.md

Comment thread docs/running-sentinel.md Outdated
Comment thread docs/running-sentinel.md Outdated

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@docs/running-sentinel.md`:
- Around line 372-373: The deployment helm values use --set
image.repository=${USER}/hyperfleet-sentinel which doesn't match the image
pushed by make image-dev (quay.io/${QUAY_USER}/sentinel:dev-...), so update the
docs to use the same repository and tag variables: change the image.repository
value referenced in the deployment example from ${USER}/hyperfleet-sentinel to
quay.io/${QUAY_USER}/sentinel (or change the earlier push target to match), and
ensure --set image.tag remains dev-$(git rev-parse --short HEAD) so
image.repository and image.tag (the image.repository and image.tag symbols)
point to the exact image produced by make image-dev and QUAY_USER is used
consistently.
- Around line 387-389: The Option B Helm values currently set both
global.imageRegistry and image.repository with the same registry, causing
duplication; change the Option B invocation to keep --set
global.imageRegistry=gcr.io but remove the registry prefix from --set
image.repository so it becomes --set image.repository=${GCP_PROJECT}/sentinel
(i.e., update the image.repository value referenced in the docs so it does not
include "gcr.io/") so Helm’s template which prepends global.imageRegistry will
produce gcr.io/${GCP_PROJECT}/sentinel:${IMAGE_TAG}.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 0441466b-b402-4cbc-a9b2-fc2600653e44

📥 Commits

Reviewing files that changed from the base of the PR and between 72fd0ab and 82229ee.

📒 Files selected for processing (1)
  • docs/running-sentinel.md

Comment thread docs/running-sentinel.md
Comment thread docs/running-sentinel.md Outdated

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@Makefile`:
- Around line 197-198: The quay-login target currently executes
"$(CONTAINER_TOOL) login quay.io" with no guard; if CONTAINER_TOOL is empty that
runs the system login. Update the Makefile's quay-login target to check for a
non-empty CONTAINER_TOOL before attempting to run it (e.g. fail early or print a
clear error and exit 1 when CONTAINER_TOOL is unset/empty), then invoke
"$(CONTAINER_TOOL) login quay.io" only when the variable is present; reference
the quay-login target and the CONTAINER_TOOL variable when making this change.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: ea1ef1c3-636a-494d-b6f2-edce4e9e98da

📥 Commits

Reviewing files that changed from the base of the PR and between 82229ee and 3b0eaea.

📒 Files selected for processing (2)
  • Makefile
  • docs/running-sentinel.md
🚧 Files skipped from review as they are similar to previous changes (1)
  • docs/running-sentinel.md

Comment thread Makefile Outdated

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

♻️ Duplicate comments (1)
docs/running-sentinel.md (1)

371-373: ⚠️ Potential issue | 🟠 Major

Option A image reference still mismatches the make image-dev output.

make image-dev documents push target quay.io/${QUAY_USER}/sentinel:dev-..., but Option A deploys ${USER}/hyperfleet-sentinel, which points to a different image.

Suggested docs fix
 helm upgrade --install sentinel-test ./deployments/helm/sentinel \
   --namespace ${NAMESPACE} \
   --create-namespace \
   --set global.imageRegistry=quay.io \
-  --set image.repository=${USER}/hyperfleet-sentinel \
+  --set image.repository=${QUAY_USER}/sentinel \
   --set image.tag=dev-$(git rev-parse --short HEAD) \
   --set broker.type=googlepubsub \
   --set broker.googlepubsub.projectId=${GCP_PROJECT} \
   --set monitoring.podMonitoring.enabled=true
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/running-sentinel.md` around lines 371 - 373, The Option A image
reference in the docs is inconsistent with the make image-dev output; update the
Helm values shown (the image.repository and image.tag lines) so they match the
make target (make image-dev) by using quay.io/${QUAY_USER}/sentinel for the
repository and the same tag format used by make (dev-$(git rev-parse --short
HEAD)); ensure the registry stays quay.io and replace
${USER}/hyperfleet-sentinel with the QUAY_USER sentinel image name and tag to
align image.repository and image.tag with make image-dev.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Duplicate comments:
In `@docs/running-sentinel.md`:
- Around line 371-373: The Option A image reference in the docs is inconsistent
with the make image-dev output; update the Helm values shown (the
image.repository and image.tag lines) so they match the make target (make
image-dev) by using quay.io/${QUAY_USER}/sentinel for the repository and the
same tag format used by make (dev-$(git rev-parse --short HEAD)); ensure the
registry stays quay.io and replace ${USER}/hyperfleet-sentinel with the
QUAY_USER sentinel image name and tag to align image.repository and image.tag
with make image-dev.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 8d821c15-950d-4865-bbc6-900c74cb8124

📥 Commits

Reviewing files that changed from the base of the PR and between 3b0eaea and e9a3a34.

📒 Files selected for processing (1)
  • docs/running-sentinel.md

@pnguyen44
pnguyen44 requested a review from rafabene March 5, 2026 18:00
@rafabene

rafabene commented Mar 5, 2026

Copy link
Copy Markdown
Member

/lgtm

@openshift-ci

openshift-ci Bot commented Mar 5, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: rafabene

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved label Mar 5, 2026
@openshift-merge-bot
openshift-merge-bot Bot merged commit b2e5b6f into main Mar 5, 2026
8 checks passed
@pnguyen44
pnguyen44 deleted the HYPERFLEET-711 branch March 16, 2026 19:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants