Skip to content

config: include --cri-timeout in containerd health-checker defaults#1307

Merged
kubernetes-prow[bot] merged 1 commit into
kubernetes:masterfrom
dpacgdm:fix/cri-timeout-default-config
Jul 14, 2026
Merged

config: include --cri-timeout in containerd health-checker defaults#1307
kubernetes-prow[bot] merged 1 commit into
kubernetes:masterfrom
dpacgdm:fix/cri-timeout-default-config

Conversation

@dpacgdm

@dpacgdm dpacgdm commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Summary

--cri-timeout is already supported by the health-checker binary and is correctly passed through custom plugin rule args. The default containerd health-checker configs omitted the flag, so crictl fell back to the 2s built-in default.

This change:

  • Adds --cri-timeout=10s to the Linux and Windows containerd sample configs
  • Adds a unit test that --cri-timeout parses correctly

Related issue

Fixes #1248

Note: when the flag is present in rule args, NPD already propagates it (util.Exec(ctx, rule.Path, rule.Args...)). The reporter's --timeout=2s observation matches the default when the flag is absent from the config they deployed.

Test plan

  • go test ./cmd/healthchecker/options -count=1

@kubernetes-prow kubernetes-prow Bot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Jul 9, 2026
@kubernetes-prow

Copy link
Copy Markdown
Contributor

Hi @dpacgdm. Thanks for your PR.

I'm waiting for a kubernetes member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@kubernetes-prow
kubernetes-prow Bot requested review from sjenning and wangzhen127 July 9, 2026 09:00
@kubernetes-prow kubernetes-prow Bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Jul 9, 2026

@hakman hakman left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR @dpacgdm! The change itself is the right call, and scoping --cri-timeout to just the containerd configs is correct.
I added a few small comments, please update the PR and squash the commits.

Comment thread config/health-checker-containerd.json Outdated
@@ -1,4 +1,4 @@
{
{

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The first line of config/health-checker-containerd.json now starts with \xEF\xBB\xBF, which Go's encoding/json rejects, so NPD fails to load the config with invalid character 'ï'. It likely came from your editor saving as "UTF-8 with BOM". You can strip it with:

perl -i -pe 's/^\x{FEFF}//' config/health-checker-containerd.json

}
}

func TestCriTimeoutFlagParsing(t *testing.T) {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please drop changes to this file, it does not add much value.

@hakman

hakman commented Jul 13, 2026

Copy link
Copy Markdown
Member

/ok-to-test

@kubernetes-prow kubernetes-prow Bot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Jul 13, 2026
@dpacgdm

dpacgdm commented Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

@hakman Thanks for the review — glad the containerd-only scope looks right.

I'll push an update that:

  1. Strips the UTF-8 BOM from config/health-checker-containerd.json
  2. Reverts the options_test.go changes
  3. Squashes to a single commit

@dpacgdm dpacgdm closed this Jul 13, 2026
@dpacgdm
dpacgdm force-pushed the fix/cri-timeout-default-config branch from 8d77404 to 97d58d2 Compare July 13, 2026 05:13
@kubernetes-prow kubernetes-prow Bot added size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Jul 13, 2026
The health-checker binary honors --cri-timeout when passed via custom
plugin rule args. The default containerd configs omitted the flag, so
crictl used the 2s built-in default. Add --cri-timeout=10s to the
sample Linux and Windows containerd configs.

Signed-off-by: dpacgdm <dpac.gdm@gmail.com>
@dpacgdm dpacgdm reopened this Jul 13, 2026
@dpacgdm

dpacgdm commented Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

Update pushed: BOM stripped, options_test.go reverted, single commit. PTAL when you have a chance.

@hakman

hakman commented Jul 13, 2026

Copy link
Copy Markdown
Member

/retest

1 similar comment
@hakman

hakman commented Jul 13, 2026

Copy link
Copy Markdown
Member

/retest

@hakman

hakman commented Jul 14, 2026

Copy link
Copy Markdown
Member

/override pull-npd-e2e-kubernetes-gce-gci

@kubernetes-prow

Copy link
Copy Markdown
Contributor

@hakman: Overrode contexts on behalf of hakman: pull-npd-e2e-kubernetes-gce-gci

Details

In response to this:

/override pull-npd-e2e-kubernetes-gce-gci

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@kubernetes-prow kubernetes-prow Bot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Jul 14, 2026
@kubernetes-prow

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dpacgdm, hakman

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubernetes-prow kubernetes-prow Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 14, 2026
@kubernetes-prow
kubernetes-prow Bot merged commit 0599591 into kubernetes:master Jul 14, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Cri-timeout is not propagate to health-checker

2 participants