feat: add fault corrupted-kubernetes-secret-credentials (SPAI-414) - #894
Open
Aliciapet11 wants to merge 5 commits into
Open
feat: add fault corrupted-kubernetes-secret-credentials (SPAI-414)#894Aliciapet11 wants to merge 5 commits into
Aliciapet11 wants to merge 5 commits into
Conversation
Aliciapet11
requested review from
Red-GV,
rohanarora and
yana1205
as code owners
June 23, 2026 12:38
Red-GV
requested changes
Jul 9, 2026
Red-GV
left a comment
Red-GV
left a comment
Collaborator
There was a problem hiding this comment.
So sorry about the delay. I'm just beginning to get a chance to look at these. Got a couple of comments on this one.
Add new fault type and scenario derived from real Konflux production incidents (Web RCA data). - Fault 36: Corrupted Kubernetes Secret Credentials (3 real incidents) - Scenario 120: Applied to OTel Demo email service - Includes molecule test for fault injection validation Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Rename scenario 120 → 63 and add scenario template (63.yaml.j2) - Add fault template (36.yaml.j2) - Fix YAML indentation in converge.yml - Add pragma allowlist secret comment in create.yml - Change verify assertion to != original value (supports random corruption) - Rewrite injection to read existing secret keys dynamically and corrupt with random values instead of hardcoded fields Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Aliciapet11
force-pushed
the
feat/fault-corrupted-secret-credentials
branch
from
July 13, 2026 07:01
5c9df40 to
09cb1dc
Compare
Red-GV
changed the title
Red-GV
requested changes
Jul 31, 2026
Red-GV
left a comment
Red-GV
left a comment
Collaborator
There was a problem hiding this comment.
Just a few more things here.
- Change scenario template to use releases[] instead of managers[] - Remove direct pod deletion from injection task - Add delete-workload-pods waiter in postInjection targeting email deployment Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Add fault ID to argument_specs.yaml choices and task_files.yaml mapping so the faults role recognizes the new injection task. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Fix molecule.yml indentation to match project conventions - Wrap long description line in groundtruth_v1.yaml to stay under 160 chars Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Red-GV
approved these changes
Aug 6, 2026
Collaborator
|
@Aliciapet11 Can you please sign your commits? |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
corrupted-kubernetes-secret-credentialsand scenario 120 derived from 3 real Konflux Web RCA incidentsNew Files
scenarios/sre/library/indexes/faults/36.jsonscenarios/sre/project/roles/faults/tasks/inject_corrupted_kubernetes_secret_credentials.yamlscenarios/sre/project/roles/faults/molecule/inject_corrupted_kubernetes_secret_credentials/scenarios/sre/library/indexes/scenarios/120.jsonTest plan
make validate-librarypassesinject_corrupted_kubernetes_secret_credentials)🤖 Generated with Claude Code