Skip to content

MON-4036: Add NodeExporterConfig to ClusterMonitoring API#2744

Open
danielmellado wants to merge 1 commit intoopenshift:masterfrom
danielmellado:mon4036_node_exporter_config
Open

MON-4036: Add NodeExporterConfig to ClusterMonitoring API#2744
danielmellado wants to merge 1 commit intoopenshift:masterfrom
danielmellado:mon4036_node_exporter_config

Conversation

@danielmellado
Copy link
Contributor

Add NodeExporterConfig to ClusterMonitoringSpec with support
for nodeSelector, resources, tolerations, collectors (10
individual toggles with per-collector options), maxProcs,
and ignoredNetworkDevices.

Signed-off-by: Daniel Mellado dmellado@fedoraproject.org

Add NodeExporterConfig to ClusterMonitoringSpec with support
for nodeSelector, resources, tolerations, collectors (10
individual toggles with per-collector options), maxProcs,
and ignoredNetworkDevices.

Signed-off-by: Daniel Mellado <dmellado@fedoraproject.org>
@openshift-ci-robot
Copy link

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Mar 5, 2026
@openshift-ci-robot
Copy link

openshift-ci-robot commented Mar 5, 2026

@danielmellado: This pull request references MON-4036 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.22.0" version, but no target version was set.

Details

In response to this:

Add NodeExporterConfig to ClusterMonitoringSpec with support
for nodeSelector, resources, tolerations, collectors (10
individual toggles with per-collector options), maxProcs,
and ignoredNetworkDevices.

Signed-off-by: Daniel Mellado dmellado@fedoraproject.org

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Mar 5, 2026

Hello @danielmellado! Some important instructions when contributing to openshift/api:
API design plays an important part in the user experience of OpenShift and as such API PRs are subject to a high level of scrutiny to ensure they follow our best practices. If you haven't already done so, please review the OpenShift API Conventions and ensure that your proposed changes are compliant. Following these conventions will help expedite the api review process for your PR.

@coderabbitai
Copy link

coderabbitai bot commented Mar 5, 2026

📝 Walkthrough

Walkthrough

This change introduces a comprehensive node-exporter configuration subsystem to the ClusterMonitoring API. New types are added for NodeExporterConfig with support for per-collector enablement settings (cpufreq, tcpStat, ethtool, netDev, netClass, buddyInfo, mountStats, ksmd, processes, systemd), resource constraints, node selection, tolerations, and network device filtering. Auto-generated DeepCopy and Swagger documentation support methods are added for all new types. Test cases validate resource constraints, collector configurations, and error conditions. The ClusterMonitoring CRD is extended with the new nodeExporterConfig field and its nested schema definitions.

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and concisely describes the main change: adding NodeExporterConfig to the ClusterMonitoring API, which aligns with the substantial expansion of node-exporter configuration types and fields throughout the changeset.
Description check ✅ Passed The description is directly related to the changeset, detailing the specific fields and configuration options (nodeSelector, resources, tolerations, collectors, maxProcs, ignoredNetworkDevices) that are being added to support node-exporter configuration.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 golangci-lint (2.5.0)

Error: build linters: unable to load custom analyzer "kubeapilinter": tools/_output/bin/kube-api-linter.so, plugin: not implemented
The command is terminated due to an error: build linters: unable to load custom analyzer "kubeapilinter": tools/_output/bin/kube-api-linter.so, plugin: not implemented

Tip

Try Coding Plans. Let us write the prompt for your AI agent so you can ship faster (with fewer bugs).
Share your feedback on Discord.


Comment @coderabbitai help to get the list of available commands and usage tips.

@qodo-code-review
Copy link

Review Summary by Qodo

Add NodeExporterConfig to ClusterMonitoring API with collector configuration support

✨ Enhancement 🧪 Tests

Grey Divider

Walkthroughs

Description
• Added NodeExporterConfig to ClusterMonitoringSpec with comprehensive configuration support for
  the node-exporter agent
• Implemented 10 individual metric collectors (buddyInfo, cpuFreq, ethtool, ksmd, mountStats,
  netClass, netDev, processes, systemd, tcpStat) with per-collector enable/disable toggles and
  optional configuration
• Added support for nodeSelector, resources, tolerations, maxProcs, and
  ignoredNetworkDevices configuration options
• Generated OpenAPI schemas, Swagger documentation, and deepcopy methods for all new node-exporter
  configuration types
• Updated CRD manifests (main, feature-gated, and payload) with complete schema definitions and
  validation rules
• Added 13 comprehensive test cases validating both valid configurations and constraint violations
Diagram
flowchart LR
  A["ClusterMonitoringSpec"] -->|"adds field"| B["NodeExporterConfig"]
  B -->|"configures"| C["Node-Exporter Agent"]
  B -->|"supports"| D["10 Collectors"]
  B -->|"supports"| E["Pod Configuration"]
  D -->|"examples"| F["buddyInfo, cpuFreq, ethtool, ksmd, mountStats"]
  E -->|"includes"| G["nodeSelector, resources, tolerations, maxProcs"]
Loading

Grey Divider

File Changes

1. config/v1alpha1/types_cluster_monitoring.go ✨ Enhancement +384/-0

Add NodeExporterConfig types to ClusterMonitoring API

• Added NodeExporterConfig field to ClusterMonitoringSpec struct for configuring node-exporter
 agent
• Defined 11 new types for node-exporter configuration: NodeExporterConfig,
 NodeExporterCollectorConfig, and 9 collector-specific config types
• Added support for nodeSelector, resources, tolerations, collectors, maxProcs, and
 ignoredNetworkDevices configuration options
• Defined enums NodeExporterCollectorState and NodeExporterNetlinkState for collector
 enable/disable states

config/v1alpha1/types_cluster_monitoring.go


2. openapi/generated_openapi/zz_generated.openapi.go Code generation +448/-1

Generate OpenAPI schemas for NodeExporter configuration

• Added 13 new OpenAPI schema definitions for node-exporter configuration types
• Registered NodeExporterConfig and all collector config types in the OpenAPI definitions map
• Updated ClusterMonitoringSpec schema to include nodeExporterConfig field with proper
 references
• Added NodeExporterConfig to the dependencies list of ClusterMonitoringSpec

openapi/generated_openapi/zz_generated.openapi.go


3. config/v1alpha1/zz_generated.swagger_doc_generated.go 📝 Documentation +125/-0

Generate Swagger documentation for NodeExporter types

• Added Swagger documentation maps for NodeExporterConfig and all 10 collector configuration types
• Documented all fields with descriptions for nodeSelector, resources, tolerations, collectors,
 maxProcs, and ignoredNetworkDevices
• Added field-level documentation for each collector's enabled state and optional configuration
 parameters

config/v1alpha1/zz_generated.swagger_doc_generated.go


View more (5)
4. config/v1alpha1/zz_generated.deepcopy.go Code generation +235/-0

Generate deepcopy methods for NodeExporter configuration

• Added DeepCopyInto and DeepCopy methods for NodeExporterConfig and all collector configuration
 types
• Implemented proper deep copying for maps (nodeSelector), slices (resources, tolerations,
 ignoredNetworkDevices, units), and nested structs
• Updated ClusterMonitoringSpec DeepCopyInto to include NodeExporterConfig field copying

config/v1alpha1/zz_generated.deepcopy.go


5. config/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_clustermonitorings.crd.yaml ⚙️ Configuration changes +471/-0

Add NodeExporterConfig CRD manifest schema

• Added complete CRD schema for nodeExporterConfig field in ClusterMonitoringSpec
• Defined nested schemas for all collector configurations with validation rules (minProperties,
 minItems, maxItems, enum values)
• Included detailed descriptions and constraints for nodeSelector, resources, tolerations, maxProcs,
 and ignoredNetworkDevices

config/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_clustermonitorings.crd.yaml


6. config/v1alpha1/zz_generated.featuregated-crd-manifests/clustermonitorings.config.openshift.io/ClusterMonitoringConfig.yaml ⚙️ Configuration changes +471/-0

Add NodeExporterConfig to featuregated CRD manifest

• Added identical CRD schema for nodeExporterConfig field as in the main CRD manifest
• Includes all collector configurations with validation rules and descriptions
• Maintains consistency with the primary CRD manifest for feature-gated deployments

config/v1alpha1/zz_generated.featuregated-crd-manifests/clustermonitorings.config.openshift.io/ClusterMonitoringConfig.yaml


7. payload-manifests/crds/0000_10_config-operator_01_clustermonitorings.crd.yaml ✨ Enhancement +471/-0

Add NodeExporterConfig to ClusterMonitoring CRD specification

• Added comprehensive nodeExporterConfig field to ClusterMonitoringSpec with support for
 configuring node-exporter DaemonSet behavior
• Implemented 10 individual metric collectors (buddyInfo, cpuFreq, ethtool, ksmd, mountStats,
 netClass, netDev, processes, systemd, tcpStat) with per-collector enable/disable toggles and
 optional configuration
• Added support for nodeSelector, resources, tolerations, maxProcs, and
 ignoredNetworkDevices configuration options
• Included detailed descriptions for each field documenting defaults, performance implications, and
 usage constraints

payload-manifests/crds/0000_10_config-operator_01_clustermonitorings.crd.yaml


8. config/v1alpha1/tests/clustermonitorings.config.openshift.io/ClusterMonitoringConfig.yaml 🧪 Tests +210/-0

Add NodeExporterConfig validation test cases

• Added 8 comprehensive test cases validating nodeExporterConfig functionality including valid
 configurations with resources, tolerations, collectors, and all fields combined
• Added 5 negative test cases validating rejection of invalid configurations (empty object, too many
 resources, duplicate resource names, limit less than request, empty arrays)
• Tests cover edge cases and constraint validation for the new nodeExporterConfig field

config/v1alpha1/tests/clustermonitorings.config.openshift.io/ClusterMonitoringConfig.yaml


Grey Divider

Qodo Logo

@qodo-code-review
Copy link

qodo-code-review bot commented Mar 5, 2026

Code Review by Qodo

🐞 Bugs (1) 📘 Rule violations (3) 📎 Requirement gaps (0)

Grey Divider


Action required

1. nodeExporterConfig not feature-gated 📘 Rule violation ✓ Correctness
Description
The new spec.nodeExporterConfig API surface is introduced without an
+openshift:enable:FeatureGate=... marker (and corresponding FeatureGate definition). This can make
the new API available without controlled rollout.
Code

config/v1alpha1/types_cluster_monitoring.go[R110-115]

+	// nodeExporterConfig is an optional field that can be used to configure the node-exporter agent
+	// that runs as a DaemonSet in the openshift-monitoring namespace. The node-exporter agent collects
+	// hardware and OS-level metrics from every node in the cluster.
+	// When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.
+	// +optional
+	NodeExporterConfig NodeExporterConfig `json:"nodeExporterConfig,omitempty,omitzero"`
Evidence
PR Compliance ID 2 requires new API surface areas to be feature-gated via the
+openshift:enable:FeatureGate=... marker and an associated FeatureGate. The newly added
NodeExporterConfig field is present with only +optional and no feature-gate enable marker.

AGENTS.md
config/v1alpha1/types_cluster_monitoring.go[106-116]

Agent prompt
The issue below was found during a code review. Follow the provided context and guidance below and implement a solution

## Issue description
`spec.nodeExporterConfig` is a newly introduced API surface but is not behind an OpenShift FeatureGate (missing `+openshift:enable:FeatureGate=...` and the FeatureGate registration).

## Issue Context
The compliance checklist requires new APIs to be feature-gated for safe rollout.

## Fix Focus Areas
- config/v1alpha1/types_cluster_monitoring.go[106-116]
- features/features.go[1-120]

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools


2. NodeExporterIgnoredNetworkDevice MinLength undocumented 📘 Rule violation ✓ Correctness
Description
The comment for NodeExporterIgnoredNetworkDevice does not document the
+kubebuilder:validation:MinLength=1 constraint. This makes the API behavior for empty strings
unclear to users.
Code

config/v1alpha1/types_cluster_monitoring.go[R673-678]

+// NodeExporterIgnoredNetworkDevice is a regular expression pattern that matches a network device name
+// to be excluded from node-exporter metric collection for collectors such as netdev, netclass, and ethtool.
+// Must be a valid regular expression and at most 1024 characters.
+// +kubebuilder:validation:MinLength=1
+// +kubebuilder:validation:MaxLength=1024
+type NodeExporterIgnoredNetworkDevice string
Evidence
PR Compliance ID 7 requires field/type comments to explicitly document the behavior implied by
kubebuilder validation markers. The type declares MinLength=1, but the comment only mentions the
maximum length.

AGENTS.md
config/v1alpha1/types_cluster_monitoring.go[673-678]

Agent prompt
The issue below was found during a code review. Follow the provided context and guidance below and implement a solution

## Issue description
`NodeExporterIgnoredNetworkDevice` has a `MinLength=1` validation marker but its comment does not document the minimum-length / non-empty requirement.

## Issue Context
API documentation must reflect all kubebuilder validation markers so users understand constraints and omitted/empty behavior.

## Fix Focus Areas
- config/v1alpha1/types_cluster_monitoring.go[673-678]

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools


3. Regex validity not enforced 📘 Rule violation ✓ Correctness
Description
The API documentation states certain fields/entries must be valid regular expressions, but the
generated CRD schema only enforces length and does not enforce regex validity. This can lead to
invalid configurations being accepted by the API server and failing later at runtime.
Code

config/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_clustermonitorings.crd.yaml[R1521-1587]

+                          units:
+                            description: |-
+                              units is a list of regular expression patterns that match systemd units to be included
+                              by the systemd collector.
+                              units is optional.
+                              By default, the list is empty, so the collector exposes no metrics for systemd units.
+                              Each entry must be a valid regular expression and at most 1024 characters.
+                              Maximum length for this list is 50.
+                              Minimum length for this list is 1.
+                              Entries in this list must be unique.
+                            items:
+                              description: |-
+                                NodeExporterSystemdUnit is a regular expression pattern that matches a systemd unit name.
+                                Must be at most 1024 characters.
+                              maxLength: 1024
+                              minLength: 1
+                              type: string
+                            maxItems: 50
+                            minItems: 1
+                            type: array
+                            x-kubernetes-list-type: set
+                        required:
+                        - enabled
+                        type: object
+                      tcpStat:
+                        description: |-
+                          tcpStat configures the tcpstat collector, which collects TCP connection statistics.
+                          tcpStat is optional.
+                          When omitted, this means no opinion and the platform is left to choose a reasonable default,
+                          which is subject to change over time. The current default is disabled.
+                        properties:
+                          enabled:
+                            description: |-
+                              enabled enables or disables the tcpstat collector.
+                              This field is required.
+                              Valid values are "Enabled" and "Disabled".
+                              When set to "Enabled", the tcpstat collector is active and TCP connection statistics are collected.
+                              When set to "Disabled", the tcpstat collector is inactive.
+                            enum:
+                            - Enabled
+                            - Disabled
+                            type: string
+                        required:
+                        - enabled
+                        type: object
+                    type: object
+                  ignoredNetworkDevices:
+                    description: |-
+                      ignoredNetworkDevices is a list of regular expression patterns that match network devices
+                      to be excluded from the relevant collector configuration such as netdev, netclass, and ethtool.
+                      ignoredNetworkDevices is optional.
+
+                      When omitted, the Cluster Monitoring Operator uses a predefined list of devices to be excluded
+                      to minimize the impact on memory usage.
+                      When set as an empty list, no devices are excluded.
+                      If you modify this setting, monitor the prometheus-k8s deployment closely for excessive memory usage.
+                      Maximum length for this list is 50.
+                      Minimum length for this list is 1.
+                      Each entry must be at most 1024 characters long.
+                    items:
+                      description: |-
+                        NodeExporterIgnoredNetworkDevice is a regular expression pattern that matches a network device name
+                        to be excluded from node-exporter metric collection for collectors such as netdev, netclass, and ethtool.
+                        Must be a valid regular expression and at most 1024 characters.
+                      maxLength: 1024
+                      minLength: 1
+                      type: string
Evidence
PR Compliance ID 8 requires documented constraints (like 'must be a valid regular expression') to be
enforced by validation rules (e.g., Pattern/XValidation). The CRD schema includes the documented
'valid regular expression' text but provides only minLength/maxLength without a pattern or
x-kubernetes-validations rule to validate regex syntax.

AGENTS.md
config/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_clustermonitorings.crd.yaml[1521-1587]

Agent prompt
The issue below was found during a code review. Follow the provided context and guidance below and implement a solution

## Issue description
The CRD documentation claims some strings must be valid regular expressions, but the schema only enforces length. This violates the requirement that documented constraints be enforced by validation rules.

## Issue Context
Kubernetes schema validation can enforce patterns or use CEL/XValidation rules; if regex validity cannot be reliably validated at schema level, the documentation should be adjusted to match actual enforcement.

## Fix Focus Areas
- config/v1alpha1/types_cluster_monitoring.go[655-678]
- config/v1alpha1/types_cluster_monitoring.go[932-951]
- config/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_clustermonitorings.crd.yaml[1521-1587]

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools


View more (1)
4. Empty ignoredNetworkDevices blocked 🐞 Bug ✓ Correctness
Description
The API says users can set ignoredNetworkDevices to an empty list to exclude no devices, but the
Go validation tags generate CRD minItems: 1, making an empty list invalid. This breaks the
documented configuration knob and prevents users from clearing the platform default exclusion list.
Code

config/v1alpha1/types_cluster_monitoring.go[R655-668]

+	// ignoredNetworkDevices is a list of regular expression patterns that match network devices
+	// to be excluded from the relevant collector configuration such as netdev, netclass, and ethtool.
+	// ignoredNetworkDevices is optional.
+	//
+	// When omitted, the Cluster Monitoring Operator uses a predefined list of devices to be excluded
+	// to minimize the impact on memory usage.
+	// When set as an empty list, no devices are excluded.
+	// If you modify this setting, monitor the prometheus-k8s deployment closely for excessive memory usage.
+	// Maximum length for this list is 50.
+	// Minimum length for this list is 1.
+	// Each entry must be at most 1024 characters long.
+	// +kubebuilder:validation:MaxItems=50
+	// +kubebuilder:validation:MinItems=1
+	// +listType=set
Evidence
The Go API type explicitly documents empty-list semantics while simultaneously requiring at least 1
item; the generated CRD schema also enforces minItems: 1, so the apiserver will reject
ignoredNetworkDevices: [] despite the documentation promising it.

config/v1alpha1/types_cluster_monitoring.go[655-670]
config/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_clustermonitorings.crd.yaml[1567-1591]

Agent prompt
The issue below was found during a code review. Follow the provided context and guidance below and implement a solution

## Issue description
`NodeExporterConfig.ignoredNetworkDevices` is documented to allow an empty list (`[]`) to mean “exclude no devices”, but validation enforces `minItems: 1`, so the empty list is rejected by the CRD. This is an API contract/behavior mismatch.

## Issue Context
- The Go type comment promises a special meaning for an empty list.
- The Go kubebuilder marker `MinItems=1` generates CRD `minItems: 1`, which blocks `[]`.
- Tests currently do not cover the empty-list case.

## Fix Focus Areas
- config/v1alpha1/types_cluster_monitoring.go[655-670]
- config/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_clustermonitorings.crd.yaml[1567-1591]
- payload-manifests/crds/0000_10_config-operator_01_clustermonitorings.crd.yaml[1567-1591]
- config/v1alpha1/zz_generated.featuregated-crd-manifests/clustermonitorings.config.openshift.io/ClusterMonitoringConfig.yaml[1567-1591]
- config/v1alpha1/tests/clustermonitorings.config.openshift.io/ClusterMonitoringConfig.yaml[580-789]

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools


Grey Divider

ⓘ The new review experience is currently in Beta. Learn more

Grey Divider

Qodo Logo

@openshift-ci openshift-ci bot added the size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. label Mar 5, 2026
@openshift-ci openshift-ci bot requested review from JoelSpeed and everettraven March 5, 2026 09:38
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Mar 5, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign deads2k for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Comment on lines +110 to +115
// nodeExporterConfig is an optional field that can be used to configure the node-exporter agent
// that runs as a DaemonSet in the openshift-monitoring namespace. The node-exporter agent collects
// hardware and OS-level metrics from every node in the cluster.
// When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.
// +optional
NodeExporterConfig NodeExporterConfig `json:"nodeExporterConfig,omitempty,omitzero"`

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Action required

1. nodeexporterconfig not feature-gated 📘 Rule violation ✓ Correctness

The new spec.nodeExporterConfig API surface is introduced without an
+openshift:enable:FeatureGate=... marker (and corresponding FeatureGate definition). This can make
the new API available without controlled rollout.
Agent Prompt
## Issue description
`spec.nodeExporterConfig` is a newly introduced API surface but is not behind an OpenShift FeatureGate (missing `+openshift:enable:FeatureGate=...` and the FeatureGate registration).

## Issue Context
The compliance checklist requires new APIs to be feature-gated for safe rollout.

## Fix Focus Areas
- config/v1alpha1/types_cluster_monitoring.go[106-116]
- features/features.go[1-120]

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools

Comment on lines +673 to +678
// NodeExporterIgnoredNetworkDevice is a regular expression pattern that matches a network device name
// to be excluded from node-exporter metric collection for collectors such as netdev, netclass, and ethtool.
// Must be a valid regular expression and at most 1024 characters.
// +kubebuilder:validation:MinLength=1
// +kubebuilder:validation:MaxLength=1024
type NodeExporterIgnoredNetworkDevice string

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Action required

2. nodeexporterignorednetworkdevice minlength undocumented 📘 Rule violation ✓ Correctness

The comment for NodeExporterIgnoredNetworkDevice does not document the
+kubebuilder:validation:MinLength=1 constraint. This makes the API behavior for empty strings
unclear to users.
Agent Prompt
## Issue description
`NodeExporterIgnoredNetworkDevice` has a `MinLength=1` validation marker but its comment does not document the minimum-length / non-empty requirement.

## Issue Context
API documentation must reflect all kubebuilder validation markers so users understand constraints and omitted/empty behavior.

## Fix Focus Areas
- config/v1alpha1/types_cluster_monitoring.go[673-678]

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools

Comment on lines +1521 to +1587
units:
description: |-
units is a list of regular expression patterns that match systemd units to be included
by the systemd collector.
units is optional.
By default, the list is empty, so the collector exposes no metrics for systemd units.
Each entry must be a valid regular expression and at most 1024 characters.
Maximum length for this list is 50.
Minimum length for this list is 1.
Entries in this list must be unique.
items:
description: |-
NodeExporterSystemdUnit is a regular expression pattern that matches a systemd unit name.
Must be at most 1024 characters.
maxLength: 1024
minLength: 1
type: string
maxItems: 50
minItems: 1
type: array
x-kubernetes-list-type: set
required:
- enabled
type: object
tcpStat:
description: |-
tcpStat configures the tcpstat collector, which collects TCP connection statistics.
tcpStat is optional.
When omitted, this means no opinion and the platform is left to choose a reasonable default,
which is subject to change over time. The current default is disabled.
properties:
enabled:
description: |-
enabled enables or disables the tcpstat collector.
This field is required.
Valid values are "Enabled" and "Disabled".
When set to "Enabled", the tcpstat collector is active and TCP connection statistics are collected.
When set to "Disabled", the tcpstat collector is inactive.
enum:
- Enabled
- Disabled
type: string
required:
- enabled
type: object
type: object
ignoredNetworkDevices:
description: |-
ignoredNetworkDevices is a list of regular expression patterns that match network devices
to be excluded from the relevant collector configuration such as netdev, netclass, and ethtool.
ignoredNetworkDevices is optional.

When omitted, the Cluster Monitoring Operator uses a predefined list of devices to be excluded
to minimize the impact on memory usage.
When set as an empty list, no devices are excluded.
If you modify this setting, monitor the prometheus-k8s deployment closely for excessive memory usage.
Maximum length for this list is 50.
Minimum length for this list is 1.
Each entry must be at most 1024 characters long.
items:
description: |-
NodeExporterIgnoredNetworkDevice is a regular expression pattern that matches a network device name
to be excluded from node-exporter metric collection for collectors such as netdev, netclass, and ethtool.
Must be a valid regular expression and at most 1024 characters.
maxLength: 1024
minLength: 1
type: string

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Action required

3. Regex validity not enforced 📘 Rule violation ✓ Correctness

The API documentation states certain fields/entries must be valid regular expressions, but the
generated CRD schema only enforces length and does not enforce regex validity. This can lead to
invalid configurations being accepted by the API server and failing later at runtime.
Agent Prompt
## Issue description
The CRD documentation claims some strings must be valid regular expressions, but the schema only enforces length. This violates the requirement that documented constraints be enforced by validation rules.

## Issue Context
Kubernetes schema validation can enforce patterns or use CEL/XValidation rules; if regex validity cannot be reliably validated at schema level, the documentation should be adjusted to match actual enforcement.

## Fix Focus Areas
- config/v1alpha1/types_cluster_monitoring.go[655-678]
- config/v1alpha1/types_cluster_monitoring.go[932-951]
- config/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_clustermonitorings.crd.yaml[1521-1587]

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools

Comment on lines +655 to +668
// ignoredNetworkDevices is a list of regular expression patterns that match network devices
// to be excluded from the relevant collector configuration such as netdev, netclass, and ethtool.
// ignoredNetworkDevices is optional.
//
// When omitted, the Cluster Monitoring Operator uses a predefined list of devices to be excluded
// to minimize the impact on memory usage.
// When set as an empty list, no devices are excluded.
// If you modify this setting, monitor the prometheus-k8s deployment closely for excessive memory usage.
// Maximum length for this list is 50.
// Minimum length for this list is 1.
// Each entry must be at most 1024 characters long.
// +kubebuilder:validation:MaxItems=50
// +kubebuilder:validation:MinItems=1
// +listType=set

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Action required

4. Empty ignorednetworkdevices blocked 🐞 Bug ✓ Correctness

The API says users can set ignoredNetworkDevices to an empty list to exclude no devices, but the
Go validation tags generate CRD minItems: 1, making an empty list invalid. This breaks the
documented configuration knob and prevents users from clearing the platform default exclusion list.
Agent Prompt
## Issue description
`NodeExporterConfig.ignoredNetworkDevices` is documented to allow an empty list (`[]`) to mean “exclude no devices”, but validation enforces `minItems: 1`, so the empty list is rejected by the CRD. This is an API contract/behavior mismatch.

## Issue Context
- The Go type comment promises a special meaning for an empty list.
- The Go kubebuilder marker `MinItems=1` generates CRD `minItems: 1`, which blocks `[]`.
- Tests currently do not cover the empty-list case.

## Fix Focus Areas
- config/v1alpha1/types_cluster_monitoring.go[655-670]
- config/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_clustermonitorings.crd.yaml[1567-1591]
- payload-manifests/crds/0000_10_config-operator_01_clustermonitorings.crd.yaml[1567-1591]
- config/v1alpha1/zz_generated.featuregated-crd-manifests/clustermonitorings.config.openshift.io/ClusterMonitoringConfig.yaml[1567-1591]
- config/v1alpha1/tests/clustermonitorings.config.openshift.io/ClusterMonitoringConfig.yaml[580-789]

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 3

🧹 Nitpick comments (1)
config/v1alpha1/tests/clustermonitorings.config.openshift.io/ClusterMonitoringConfig.yaml (1)

661-789: Add a contract test for ignoredNetworkDevices: [].

The new suite does not assert the documented empty-list behavior for ignoredNetworkDevices. A dedicated case will prevent schema/docs drift from slipping through.

🧪 Suggested test case
+    - name: Should be able to create NodeExporterConfig with empty ignoredNetworkDevices
+      initial: |
+        apiVersion: config.openshift.io/v1alpha1
+        kind: ClusterMonitoring
+        spec:
+          nodeExporterConfig:
+            ignoredNetworkDevices: []
+      expected: |
+        apiVersion: config.openshift.io/v1alpha1
+        kind: ClusterMonitoring
+        spec:
+          nodeExporterConfig:
+            ignoredNetworkDevices: []
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In
`@config/v1alpha1/tests/clustermonitorings.config.openshift.io/ClusterMonitoringConfig.yaml`
around lines 661 - 789, Add a new contract test case for NodeExporterConfig to
assert the documented behavior when ignoredNetworkDevices is an empty array:
create a test entry (similar to the existing cases) named something like "Should
accept NodeExporterConfig with empty ignoredNetworkDevices" where
spec.nodeExporterConfig.ignoredNetworkDevices: [] in the initial YAML and the
expected output mirrors that (or no expectedError), ensuring the test references
NodeExporterConfig and ignoredNetworkDevices so the suite validates empty-list
handling and prevents schema/docs drift.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@config/v1alpha1/types_cluster_monitoring.go`:
- Around line 655-668: The comment and validation for ignoredNetworkDevices
conflict: the docs state an empty list is valid (meaning "no devices are
excluded") but the kubebuilder tag +kubebuilder:validation:MinItems=1 prevents
[] from being used. Fix by removing or relaxing the MinItems constraint on
ignoredNetworkDevices (i.e., delete the +kubebuilder:validation:MinItems=1 tag
or change it to allow 0) so an empty slice is accepted; keep the MaxItems
constraint and listType as-is and update any unit tests or schema consumers if
they assume MinItems=1.

In
`@payload-manifests/crds/0000_10_config-operator_01_clustermonitorings.crd.yaml`:
- Around line 1522-1541: The schema currently only enforces length/count for
systemd.units[] (NodeExporterSystemdUnit) and ignoredNetworkDevices[]; add
OpenAPI pattern validation to each items schema to ensure values are valid
regular expressions (e.g., add a "pattern" field under the items for
systemd.units and for ignoredNetworkDevices that encodes the allowed regex
syntax you want to accept—preferably aligned to the RE2 flavor used downstream),
keep maxLength/minLength and descriptions, and update the
NodeExporterSystemdUnit/ignoredNetworkDevices items to reference the new pattern
so invalid regex strings are rejected by the CRD validation.
- Around line 1568-1590: The description for ignoredNetworkDevices says an empty
list is allowed but the schema sets minItems: 1; update the schema to match the
description by changing the minItems constraint for ignoredNetworkDevices to 0
(or remove the minItems line) so an empty array is accepted, and keep maxItems:
50 and the items block (NodeExporterIgnoredNetworkDevice,
maxLength/minLength/type) unchanged; ensure any references or validation that
rely on minItems in code or docs are adjusted accordingly.

---

Nitpick comments:
In
`@config/v1alpha1/tests/clustermonitorings.config.openshift.io/ClusterMonitoringConfig.yaml`:
- Around line 661-789: Add a new contract test case for NodeExporterConfig to
assert the documented behavior when ignoredNetworkDevices is an empty array:
create a test entry (similar to the existing cases) named something like "Should
accept NodeExporterConfig with empty ignoredNetworkDevices" where
spec.nodeExporterConfig.ignoredNetworkDevices: [] in the initial YAML and the
expected output mirrors that (or no expectedError), ensuring the test references
NodeExporterConfig and ignoredNetworkDevices so the suite validates empty-list
handling and prevents schema/docs drift.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: f41b0979-fba6-4d38-bfe5-c83eb2d1eb31

📥 Commits

Reviewing files that changed from the base of the PR and between ea051a3 and a54edbe.

⛔ Files ignored due to path filters (3)
  • config/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_clustermonitorings.crd.yaml is excluded by !**/zz_generated.crd-manifests/*
  • config/v1alpha1/zz_generated.featuregated-crd-manifests/clustermonitorings.config.openshift.io/ClusterMonitoringConfig.yaml is excluded by !**/zz_generated.featuregated-crd-manifests/**
  • openapi/generated_openapi/zz_generated.openapi.go is excluded by !openapi/**
📒 Files selected for processing (5)
  • config/v1alpha1/tests/clustermonitorings.config.openshift.io/ClusterMonitoringConfig.yaml
  • config/v1alpha1/types_cluster_monitoring.go
  • config/v1alpha1/zz_generated.deepcopy.go
  • config/v1alpha1/zz_generated.swagger_doc_generated.go
  • payload-manifests/crds/0000_10_config-operator_01_clustermonitorings.crd.yaml

Comment on lines +655 to +668
// ignoredNetworkDevices is a list of regular expression patterns that match network devices
// to be excluded from the relevant collector configuration such as netdev, netclass, and ethtool.
// ignoredNetworkDevices is optional.
//
// When omitted, the Cluster Monitoring Operator uses a predefined list of devices to be excluded
// to minimize the impact on memory usage.
// When set as an empty list, no devices are excluded.
// If you modify this setting, monitor the prometheus-k8s deployment closely for excessive memory usage.
// Maximum length for this list is 50.
// Minimum length for this list is 1.
// Each entry must be at most 1024 characters long.
// +kubebuilder:validation:MaxItems=50
// +kubebuilder:validation:MinItems=1
// +listType=set
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

ignoredNetworkDevices empty-list behavior is blocked by schema validation.

Line 661 documents that an empty list means “no devices are excluded”, but Line 667 (+kubebuilder:validation:MinItems=1) rejects []. This makes the documented override path impossible.

Suggested fix
 	// Maximum length for this list is 50.
-	// Minimum length for this list is 1.
 	// Each entry must be at most 1024 characters long.
 	// +kubebuilder:validation:MaxItems=50
-	// +kubebuilder:validation:MinItems=1
 	// +listType=set
 	// +optional
 	IgnoredNetworkDevices []NodeExporterIgnoredNetworkDevice `json:"ignoredNetworkDevices,omitempty"`
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
// ignoredNetworkDevices is a list of regular expression patterns that match network devices
// to be excluded from the relevant collector configuration such as netdev, netclass, and ethtool.
// ignoredNetworkDevices is optional.
//
// When omitted, the Cluster Monitoring Operator uses a predefined list of devices to be excluded
// to minimize the impact on memory usage.
// When set as an empty list, no devices are excluded.
// If you modify this setting, monitor the prometheus-k8s deployment closely for excessive memory usage.
// Maximum length for this list is 50.
// Minimum length for this list is 1.
// Each entry must be at most 1024 characters long.
// +kubebuilder:validation:MaxItems=50
// +kubebuilder:validation:MinItems=1
// +listType=set
// ignoredNetworkDevices is a list of regular expression patterns that match network devices
// to be excluded from the relevant collector configuration such as netdev, netclass, and ethtool.
// ignoredNetworkDevices is optional.
//
// When omitted, the Cluster Monitoring Operator uses a predefined list of devices to be excluded
// to minimize the impact on memory usage.
// When set as an empty list, no devices are excluded.
// If you modify this setting, monitor the prometheus-k8s deployment closely for excessive memory usage.
// Maximum length for this list is 50.
// Each entry must be at most 1024 characters long.
// +kubebuilder:validation:MaxItems=50
// +listType=set
// +optional
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@config/v1alpha1/types_cluster_monitoring.go` around lines 655 - 668, The
comment and validation for ignoredNetworkDevices conflict: the docs state an
empty list is valid (meaning "no devices are excluded") but the kubebuilder tag
+kubebuilder:validation:MinItems=1 prevents [] from being used. Fix by removing
or relaxing the MinItems constraint on ignoredNetworkDevices (i.e., delete the
+kubebuilder:validation:MinItems=1 tag or change it to allow 0) so an empty
slice is accepted; keep the MaxItems constraint and listType as-is and update
any unit tests or schema consumers if they assume MinItems=1.

Comment on lines +1522 to +1541
description: |-
units is a list of regular expression patterns that match systemd units to be included
by the systemd collector.
units is optional.
By default, the list is empty, so the collector exposes no metrics for systemd units.
Each entry must be a valid regular expression and at most 1024 characters.
Maximum length for this list is 50.
Minimum length for this list is 1.
Entries in this list must be unique.
items:
description: |-
NodeExporterSystemdUnit is a regular expression pattern that matches a systemd unit name.
Must be at most 1024 characters.
maxLength: 1024
minLength: 1
type: string
maxItems: 50
minItems: 1
type: array
x-kubernetes-list-type: set
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

Regex validity is documented but not enforced in schema.

systemd.units[] and ignoredNetworkDevices[] are documented as “valid regular expression” values, but current validation only checks length/count. Invalid regex strings can be admitted and fail downstream.

Also applies to: 1581-1588

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In
`@payload-manifests/crds/0000_10_config-operator_01_clustermonitorings.crd.yaml`
around lines 1522 - 1541, The schema currently only enforces length/count for
systemd.units[] (NodeExporterSystemdUnit) and ignoredNetworkDevices[]; add
OpenAPI pattern validation to each items schema to ensure values are valid
regular expressions (e.g., add a "pattern" field under the items for
systemd.units and for ignoredNetworkDevices that encodes the allowed regex
syntax you want to accept—preferably aligned to the RE2 flavor used downstream),
keep maxLength/minLength and descriptions, and update the
NodeExporterSystemdUnit/ignoredNetworkDevices items to reference the new pattern
so invalid regex strings are rejected by the CRD validation.

Comment on lines +1568 to +1590
description: |-
ignoredNetworkDevices is a list of regular expression patterns that match network devices
to be excluded from the relevant collector configuration such as netdev, netclass, and ethtool.
ignoredNetworkDevices is optional.

When omitted, the Cluster Monitoring Operator uses a predefined list of devices to be excluded
to minimize the impact on memory usage.
When set as an empty list, no devices are excluded.
If you modify this setting, monitor the prometheus-k8s deployment closely for excessive memory usage.
Maximum length for this list is 50.
Minimum length for this list is 1.
Each entry must be at most 1024 characters long.
items:
description: |-
NodeExporterIgnoredNetworkDevice is a regular expression pattern that matches a network device name
to be excluded from node-exporter metric collection for collectors such as netdev, netclass, and ethtool.
Must be a valid regular expression and at most 1024 characters.
maxLength: 1024
minLength: 1
type: string
maxItems: 50
minItems: 1
type: array
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

ignoredNetworkDevices description contradicts its schema constraint.

The description explicitly allows an empty list, but minItems: 1 rejects it. This creates a broken API contract for clients.

✅ If empty list is intended to be valid, update schema
                   ignoredNetworkDevices:
@@
-                    minItems: 1
                     type: array
                     x-kubernetes-list-type: set
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
description: |-
ignoredNetworkDevices is a list of regular expression patterns that match network devices
to be excluded from the relevant collector configuration such as netdev, netclass, and ethtool.
ignoredNetworkDevices is optional.
When omitted, the Cluster Monitoring Operator uses a predefined list of devices to be excluded
to minimize the impact on memory usage.
When set as an empty list, no devices are excluded.
If you modify this setting, monitor the prometheus-k8s deployment closely for excessive memory usage.
Maximum length for this list is 50.
Minimum length for this list is 1.
Each entry must be at most 1024 characters long.
items:
description: |-
NodeExporterIgnoredNetworkDevice is a regular expression pattern that matches a network device name
to be excluded from node-exporter metric collection for collectors such as netdev, netclass, and ethtool.
Must be a valid regular expression and at most 1024 characters.
maxLength: 1024
minLength: 1
type: string
maxItems: 50
minItems: 1
type: array
description: |-
ignoredNetworkDevices is a list of regular expression patterns that match network devices
to be excluded from the relevant collector configuration such as netdev, netclass, and ethtool.
ignoredNetworkDevices is optional.
When omitted, the Cluster Monitoring Operator uses a predefined list of devices to be excluded
to minimize the impact on memory usage.
When set as an empty list, no devices are excluded.
If you modify this setting, monitor the prometheus-k8s deployment closely for excessive memory usage.
Maximum length for this list is 50.
Minimum length for this list is 1.
Each entry must be at most 1024 characters long.
items:
description: |-
NodeExporterIgnoredNetworkDevice is a regular expression pattern that matches a network device name
to be excluded from node-exporter metric collection for collectors such as netdev, netclass, and ethtool.
Must be a valid regular expression and at most 1024 characters.
maxLength: 1024
minLength: 1
type: string
maxItems: 50
type: array
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In
`@payload-manifests/crds/0000_10_config-operator_01_clustermonitorings.crd.yaml`
around lines 1568 - 1590, The description for ignoredNetworkDevices says an
empty list is allowed but the schema sets minItems: 1; update the schema to
match the description by changing the minItems constraint for
ignoredNetworkDevices to 0 (or remove the minItems line) so an empty array is
accepted, and keep maxItems: 50 and the items block
(NodeExporterIgnoredNetworkDevice, maxLength/minLength/type) unchanged; ensure
any references or validation that rely on minItems in code or docs are adjusted
accordingly.

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Mar 5, 2026

@danielmellado: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants