Set berserker config via url#95

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
JoukoVirtanen wants to merge 16 commits into
base:main
Choose a base branch
from
Open

Set berserker config via url #95

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
16 commits
Select commit Hold shift + click to select a range
a6b13f2
X-Smart-Branch-Parent: main
JoukoVirtanen Aug 19, 2026
6579dab
Setting berserker config paths
JoukoVirtanen May 29, 2026
2645462
Setting berserker url
JoukoVirtanen Jun 3, 2026
372689f
Should used kube-burner config in kube-burner-ocp
JoukoVirtanen Jun 11, 2026
f1d98be
Switched from BERSERKER_DAEMONSET_TEMPLATE to BERSERKER_CONTAINERS_FILE
JoukoVirtanen Jun 12, 2026
421d715
Set lifespan to 6h
JoukoVirtanen Jun 14, 2026
6853b68
Updated kube-burner version to 2.6.2
JoukoVirtanen Jun 14, 2026
206b140
Updated init command for new kube-burner version
JoukoVirtanen Jun 15, 2026
338cf40
Updated index command
JoukoVirtanen Jun 17, 2026
b2df10e
Updated BERSERKER_CONFIGMAP_TEMPLATE
JoukoVirtanen Jul 10, 2026
45b0219
Set additional environment variables in the kube-burner pod
JoukoVirtanen Jul 13, 2026
f9f5cd9
Setting more env vars which have been added to kube-burner-ocp
JoukoVirtanen Jul 14, 2026
69b0bc8
Using --user-data instead of --set
JoukoVirtanen Jul 14, 2026
183cddc
Set POD_READY_THRESHOLD to 0 and CHURN_DURATION to 1000h
JoukoVirtanen Jul 15, 2026
9110015
Churn at the namespace level
JoukoVirtanen Jul 15, 2026
d87b92f
Updated kube-burner-ocp branch
JoukoVirtanen Aug 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 19 additions & 2 deletions .github/workflows/create-demo-clusters.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -31,6 +31,14 @@ on:
kube-burner-config-repo:
description: The repository where the kube-burner config files can be found
type: string
berserker-config-repo:
description: The repository where the berserker kube-burner config files can be found
type: string
default: JoukoVirtanen/kube-burner-ocp
berserker-config-ref:
description: Ref of where the berserker kube-burner config files can be found
type: string
default: jv-fix-runOnce
cluster-with-fake-load-name:
description: "The name of the long running cluster where the central deployment is run with a sensor that creates its own fake workload. Must comply to the regex: [a-z][a-z0-9-]{1,26}[a-z0-9]"
type: string
Expand All@@ -46,7 +54,7 @@ env:
GH_TOKEN: ${{ github.token }}
GH_NO_UPDATE_NOTIFIER: 1
TIMEOUT_WAIT_FOR_IMAGES_SECONDS: 3600
LONG_RUNNING_CLUSTER_LIFESPAN: "168h"
LONG_RUNNING_CLUSTER_LIFESPAN: "6h"
METRICS_COLLECTION_TIME: "30m"

jobs:
Expand DownExpand Up@@ -480,6 +488,12 @@ jobs:
repository: stackrox/${{ inputs.kube-burner-config-repo }}
path: .kube-burner-config
ref: ${{ needs.parse-refs.outputs.burner-ref }}
- name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
Comment on lines +491 to 497

@coderabbitaicoderabbitaiBotJul 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win

Checkout missing persist-credentials: false.

Static analysis (zizmor) flags this checkout for credential persistence via GITHUB_TOKEN on disk (artipacked). Since artifacts/workspace can be exposed downstream, consider disabling credential persistence unless it's needed by a later step.

Suggested fix
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
+ persist-credentials: false
📝 Committable suggestion

‼️IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
- name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
persist-credentials: false
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
🧰 Tools
🪛 zizmor (1.26.1)

[warning] 483-489: credential persistence through GitHub Actions artifacts (artipacked): does not set persist-credentials: false

(artipacked)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.github/workflows/create-demo-clusters.yml around lines 483 - 489, Add
persist-credentials: false to the with block of the actions/checkout@v4 step
checking out the berserker config repository, ensuring the checkout does not
persist GITHUB_TOKEN credentials for downstream steps.

Source: Linters/SAST tools

- name: Check out cloud-bulldozer/benchmark-operator code
run: |
Expand DownExpand Up@@ -509,9 +523,12 @@ jobs:
REGISTRY_USERNAME: ${{ secrets.QUAY_RHACS_ENG_RO_USERNAME }}
REGISTRY_PASSWORD: ${{ secrets.QUAY_RHACS_ENG_RO_PASSWORD }}
ELASTICSEARCH_URL: "https://${{ secrets.K6_ELASTICSEARCH_USER }}:${{ secrets.K6_ELASTICSEARCH_PASSWORD }}@${{ secrets.K6_ELASTICSEARCH_URL }}"
BERSERKER_CONFIGMAP_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/berserker-configmap.yml"
BERSERKER_SERVICE_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/service.yml"
BERSERKER_CONTAINERS_FILE: "berserker-default-containers.yml"
uses: ./.actions/release/start-kube-burner
with:
kube-burner-config-dir: ./.kube-burner-config/scripts/release-tools/kube-burner-configs/berserker-load
kube-burner-config-dir: ./.berserker-config/cmd/config/berserker-load
benchmark-operator-dir: ${{ github.workspace }}/benchmark-operator

start-kube-burner-for-central:
Expand Down
89 changes: 85 additions & 4 deletions release/start-kube-burner/kube-burner.yaml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -15,23 +15,47 @@ spec:
spec:
containers:
- name: kube-burner
image: quay.io/kube-burner/kube-burner:v1.4.3
image: quay.io/kube-burner/kube-burner:v2.6.2
command: ["/bin/sh", "-c"]
args:
- |
get_epoch_time() {
curl -G --silent http://monitoring.stackrox.svc.cluster.local:9090/api/v1/query --data-urlencode 'query=time()' | sed 's|.*\[||' | sed 's|\..*||'
}
cd /etc/kube-burner
config=config.yml
config=berserker-load.yml
metrics_profile=/etc/kube-burner-metrics/metrics.yml
prometheus_url="http://monitoring.stackrox.svc.cluster.local:9090"
(kube-burner init --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --timeout=1000h || true) &
cat > /tmp/vars.yml <<VARSEOF
GC: $GC
GC_METRICS: $GC_METRICS
DELETION_STRATEGY: $DELETION_STRATEGY
POD_READY_THRESHOLD: $POD_READY_THRESHOLD
ES_SERVER: "$ES_SERVER"
ES_INDEX: "$ES_INDEX"
LOCAL_INDEXING: $LOCAL_INDEXING
METRICS: $METRICS
ALERTS: "$ALERTS"
UUID: $UUID
JOB_ITERATIONS: $JOB_ITERATIONS
JOB_PAUSE: $JOB_PAUSE
QPS: $QPS
BURST: $BURST
CHURN_CYCLES: $CHURN_CYCLES
CHURN_DURATION: $CHURN_DURATION
CHURN_DELAY: $CHURN_DELAY
CHURN_PERCENT: $CHURN_PERCENT
CHURN_MODE: $CHURN_MODE
MAX_WAIT_TIMEOUT: $MAX_WAIT_TIMEOUT
DAEMONSET_REPLICAS: $DAEMONSET_REPLICAS
SERVICE_REPLICAS: $SERVICE_REPLICAS
VARSEOF
(kube-burner init --config="$config" --user-data=/tmp/vars.yml --skip-log-file --timeout=1000h || true) &
while true; do
start="$(get_epoch_time)"
sleep "$METRICS_COLLECTION_TIME"
end="$(get_epoch_time)"
kube-burner index --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID"
kube-burner index --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID" --es-server "$ELASTICSEARCH_URL" --es-index kube-burner-long-running-test
done
volumeMounts:
- name: config
Expand DownExpand Up@@ -60,6 +84,63 @@ spec:
secretKeyRef:
name: kube-burner-secret
key: METRICS_TIME_STEP
- name: GC
value: "true"
- name: GC_METRICS
value: "false"
- name: DELETION_STRATEGY
value: "gvr"
- name: POD_READY_THRESHOLD
value: "0"
- name: ES_SERVER
value: ""
- name: ES_INDEX
value: ""
- name: LOCAL_INDEXING
value: "false"
- name: METRICS
value: "metrics.yml"
- name: ALERTS
value: ""
- name: JOB_ITERATIONS
value: "5"
- name: JOB_PAUSE
value: "0s"
- name: QPS
value: "20"
- name: BURST
value: "20"
- name: CHURN_CYCLES
value: "0"
- name: CHURN_DURATION
value: "1000h"
- name: CHURN_DELAY
value: "10m0s"
- name: CHURN_PERCENT
value: "80"
- name: CHURN_MODE
value: "namespaces"
- name: MAX_WAIT_TIMEOUT
value: "12m0s"
- name: DAEMONSET_REPLICAS
value: "6"
- name: SERVICE_REPLICAS
value: "6"
- name: BERSERKER_CONFIGMAP_TEMPLATE
valueFrom:
secretKeyRef:
name: kube-burner-secret
key: BERSERKER_CONFIGMAP_TEMPLATE
- name: BERSERKER_SERVICE_TEMPLATE
valueFrom:
secretKeyRef:
name: kube-burner-secret
key: BERSERKER_SERVICE_TEMPLATE
- name: BERSERKER_CONTAINERS_FILE
valueFrom:
secretKeyRef:
name: kube-burner-secret
key: BERSERKER_CONTAINERS_FILE
volumes:
- name: config
configMap:
Expand Down
9 changes: 7 additions & 2 deletions release/start-kube-burner/start-kube-burner.sh
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -20,8 +20,10 @@ dockerconfigjson="$(kubectl -n stackrox get secret stackrox -o yaml | grep docke
secret_template="${KUBE_BURNER_CONFIG_DIR_BASE}/secret_template.yml"
secret_file="${KUBE_BURNER_CONFIG_DIR}/secret.yml"

gh_log notice "Patching $secret_template"
sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file"
if [ -f "$secret_template" ]; then
gh_log notice "Patching $secret_template"
sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file"
fi

kubectl create ns kube-burner

Expand All@@ -43,6 +45,9 @@ kubectl create secret generic kube-burner-secret \
--from-literal=UUID="$uuid" \
--from-literal=METRICS_COLLECTION_TIME="$METRICS_COLLECTION_TIME" \
--from-literal=METRICS_TIME_STEP="5m" \
--from-literal=BERSERKER_CONFIGMAP_TEMPLATE="${BERSERKER_CONFIGMAP_TEMPLATE}" \
--from-literal=BERSERKER_SERVICE_TEMPLATE="${BERSERKER_SERVICE_TEMPLATE}" \
--from-literal=BERSERKER_CONTAINERS_FILE="${BERSERKER_CONTAINERS_FILE}" \
--namespace=kube-burner

kubectl create -f "${DIR}"/kube-burner.yaml
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
Set berserker config via url#95

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Open

JoukoVirtanen
wants to merge
16
commits into

base:main
Choose a base branch

from

 Open


Set berserker config via url
#95
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


16 commits


Select commit
Hold shift + click to select a range
a6b13f2

X-Smart-Branch-Parent: main


JoukoVirtanen Aug 19, 2026
6579dab

Setting berserker config paths


JoukoVirtanen May 29, 2026
2645462

Setting berserker url


JoukoVirtanen Jun 3, 2026
372689f

Should used kube-burner config in kube-burner-ocp


JoukoVirtanen Jun 11, 2026
f1d98be

Switched from BERSERKER_DAEMONSET_TEMPLATE to BERSERKER_CONTAINERS_FILE


JoukoVirtanen Jun 12, 2026
421d715

Set lifespan to 6h


JoukoVirtanen Jun 14, 2026
6853b68

Updated kube-burner version to 2.6.2


JoukoVirtanen Jun 14, 2026
206b140

Updated init command for new kube-burner version


JoukoVirtanen Jun 15, 2026
338cf40

Updated index command


JoukoVirtanen Jun 17, 2026
b2df10e

Updated BERSERKER_CONFIGMAP_TEMPLATE


JoukoVirtanen Jul 10, 2026
45b0219

Set additional environment variables in the kube-burner pod


JoukoVirtanen Jul 13, 2026
f9f5cd9

Setting more env vars which have been added to kube-burner-ocp


JoukoVirtanen Jul 14, 2026
69b0bc8

Using --user-data instead of --set


JoukoVirtanen Jul 14, 2026
183cddc

Set POD_READY_THRESHOLD to 0 and CHURN_DURATION to 1000h


JoukoVirtanen Jul 15, 2026
9110015

Churn at the namespace level


JoukoVirtanen Jul 15, 2026
d87b92f

Updated kube-burner-ocp branch


JoukoVirtanen Aug 9, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


21 changes: 19 additions & 2 deletions
.github/workflows/create-demo-clusters.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -31,6 +31,14 @@ on:
 kube-burner-config-repo:
 description: The repository where the kube-burner config files can be found
 type: string
 berserker-config-repo:
 description: The repository where the berserker kube-burner config files can be found
 type: string
 default: JoukoVirtanen/kube-burner-ocp
 berserker-config-ref:
 description: Ref of where the berserker kube-burner config files can be found
 type: string
 default: jv-fix-runOnce
 cluster-with-fake-load-name:
 description: "The name of the long running cluster where the central deployment is run with a sensor that creates its own fake workload. Must comply to the regex: [a-z][a-z0-9-]{1,26}[a-z0-9]"
 type: string
Expand All@@ -46,7 +54,7 @@ env:
 GH_TOKEN: ${{ github.token }}
 GH_NO_UPDATE_NOTIFIER: 1
 TIMEOUT_WAIT_FOR_IMAGES_SECONDS: 3600
 LONG_RUNNING_CLUSTER_LIFESPAN: "168h"
 LONG_RUNNING_CLUSTER_LIFESPAN: "6h"
 METRICS_COLLECTION_TIME: "30m"

jobs:
Expand DownExpand Up@@ -480,6 +488,12 @@ jobs:
 repository: stackrox/${{ inputs.kube-burner-config-repo }}
 path: .kube-burner-config
 ref: ${{ needs.parse-refs.outputs.burner-ref }}
 - name: Check out berserker config repository code
 uses: actions/checkout@v4
 with:
 repository: ${{ inputs.berserker-config-repo }}
 path: .berserker-config
 ref: ${{ inputs.berserker-config-ref }}
 # TODO(ROX-29223): Remove once old versions don't use the benchmark-operator

Comment on lines

+491
 to 
497

@coderabbitaicoderabbitaiBotJul 10, 2026

Copy link


Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win
Checkout missing persist-credentials: false.
Static analysis (zizmor) flags this checkout for credential persistence via GITHUB_TOKEN on disk (artipacked). Since artifacts/workspace can be exposed downstream, consider disabling credential persistence unless it's needed by a later step.
Suggested fix
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
+ persist-credentials: false
📝 Committable suggestion
‼️IMPORTANT

Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
persist-credentials: false
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
🧰 Tools
🪛 zizmor (1.26.1)
[warning] 483-489: credential persistence through GitHub Actions artifacts (artipacked): does not set persist-credentials: false
(artipacked)
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.github/workflows/create-demo-clusters.yml around lines 483 - 489, Add
persist-credentials: false to the with block of the actions/checkout@v4 step
checking out the berserker config repository, ensuring the checkout does not
persist GITHUB_TOKEN credentials for downstream steps.

Source: Linters/SAST tools
 - name: Check out cloud-bulldozer/benchmark-operator code
 run: |
Expand DownExpand Up@@ -509,9 +523,12 @@ jobs:
 REGISTRY_USERNAME: ${{ secrets.QUAY_RHACS_ENG_RO_USERNAME }}
 REGISTRY_PASSWORD: ${{ secrets.QUAY_RHACS_ENG_RO_PASSWORD }}
 ELASTICSEARCH_URL: "https://${{ secrets.K6_ELASTICSEARCH_USER }}:${{ secrets.K6_ELASTICSEARCH_PASSWORD }}@${{ secrets.K6_ELASTICSEARCH_URL }}"
 BERSERKER_CONFIGMAP_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/berserker-configmap.yml"
 BERSERKER_SERVICE_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/service.yml"
 BERSERKER_CONTAINERS_FILE: "berserker-default-containers.yml"
 uses: ./.actions/release/start-kube-burner
 with:
 kube-burner-config-dir: ./.kube-burner-config/scripts/release-tools/kube-burner-configs/berserker-load
 kube-burner-config-dir: ./.berserker-config/cmd/config/berserker-load
 benchmark-operator-dir: ${{ github.workspace }}/benchmark-operator

 start-kube-burner-for-central:
Expand Down

89 changes: 85 additions & 4 deletions
release/start-kube-burner/kube-burner.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -15,23 +15,47 @@ spec:
 spec:
 containers:
 - name: kube-burner
 image: quay.io/kube-burner/kube-burner:v1.4.3
 image: quay.io/kube-burner/kube-burner:v2.6.2
 command: ["/bin/sh", "-c"]
 args:
 - |
 get_epoch_time() {
 curl -G --silent http://monitoring.stackrox.svc.cluster.local:9090/api/v1/query --data-urlencode 'query=time()' | sed 's|.*\[||' | sed 's|\..*||'
 }
 cd /etc/kube-burner
 config=config.yml
 config=berserker-load.yml
 metrics_profile=/etc/kube-burner-metrics/metrics.yml
 prometheus_url="http://monitoring.stackrox.svc.cluster.local:9090"
 (kube-burner init --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --timeout=1000h || true) &
 cat > /tmp/vars.yml <<VARSEOF
 GC: $GC
 GC_METRICS: $GC_METRICS
 DELETION_STRATEGY: $DELETION_STRATEGY
 POD_READY_THRESHOLD: $POD_READY_THRESHOLD
 ES_SERVER: "$ES_SERVER"
 ES_INDEX: "$ES_INDEX"
 LOCAL_INDEXING: $LOCAL_INDEXING
 METRICS: $METRICS
 ALERTS: "$ALERTS"
 UUID: $UUID
 JOB_ITERATIONS: $JOB_ITERATIONS
 JOB_PAUSE: $JOB_PAUSE
 QPS: $QPS
 BURST: $BURST
 CHURN_CYCLES: $CHURN_CYCLES
 CHURN_DURATION: $CHURN_DURATION
 CHURN_DELAY: $CHURN_DELAY
 CHURN_PERCENT: $CHURN_PERCENT
 CHURN_MODE: $CHURN_MODE
 MAX_WAIT_TIMEOUT: $MAX_WAIT_TIMEOUT
 DAEMONSET_REPLICAS: $DAEMONSET_REPLICAS
 SERVICE_REPLICAS: $SERVICE_REPLICAS
 VARSEOF
 (kube-burner init --config="$config" --user-data=/tmp/vars.yml --skip-log-file --timeout=1000h || true) &
 while true; do
 start="$(get_epoch_time)"
 sleep "$METRICS_COLLECTION_TIME"
 end="$(get_epoch_time)"
 kube-burner index --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID"
 kube-burner index --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID" --es-server "$ELASTICSEARCH_URL" --es-index kube-burner-long-running-test
 done
 volumeMounts:
 - name: config
Expand DownExpand Up@@ -60,6 +84,63 @@ spec:
 secretKeyRef:
 name: kube-burner-secret
 key: METRICS_TIME_STEP
 - name: GC
 value: "true"
 - name: GC_METRICS
 value: "false"
 - name: DELETION_STRATEGY
 value: "gvr"
 - name: POD_READY_THRESHOLD
 value: "0"
 - name: ES_SERVER
 value: ""
 - name: ES_INDEX
 value: ""
 - name: LOCAL_INDEXING
 value: "false"
 - name: METRICS
 value: "metrics.yml"
 - name: ALERTS
 value: ""
 - name: JOB_ITERATIONS
 value: "5"
 - name: JOB_PAUSE
 value: "0s"
 - name: QPS
 value: "20"
 - name: BURST
 value: "20"
 - name: CHURN_CYCLES
 value: "0"
 - name: CHURN_DURATION
 value: "1000h"
 - name: CHURN_DELAY
 value: "10m0s"
 - name: CHURN_PERCENT
 value: "80"
 - name: CHURN_MODE
 value: "namespaces"
 - name: MAX_WAIT_TIMEOUT
 value: "12m0s"
 - name: DAEMONSET_REPLICAS
 value: "6"
 - name: SERVICE_REPLICAS
 value: "6"
 - name: BERSERKER_CONFIGMAP_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONFIGMAP_TEMPLATE
 - name: BERSERKER_SERVICE_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_SERVICE_TEMPLATE
 - name: BERSERKER_CONTAINERS_FILE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONTAINERS_FILE
 volumes:
 - name: config
 configMap:
Expand Down

9 changes: 7 additions & 2 deletions
release/start-kube-burner/start-kube-burner.sh

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,8 +20,10 @@ dockerconfigjson="$(kubectl -n stackrox get secret stackrox -o yaml | grep docke
secret_template="${KUBE_BURNER_CONFIG_DIR_BASE}/secret_template.yml"
secret_file="${KUBE_BURNER_CONFIG_DIR}/secret.yml"

gh_log notice "Patching $secret_template"
sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file" 
if [ -f "$secret_template" ]; then
 gh_log notice "Patching $secret_template"
 sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file"
fi

kubectl create ns kube-burner

Expand All@@ -43,6 +45,9 @@ kubectl create secret generic kube-burner-secret \
 --from-literal=UUID="$uuid" \
 --from-literal=METRICS_COLLECTION_TIME="$METRICS_COLLECTION_TIME" \
 --from-literal=METRICS_TIME_STEP="5m" \
 --from-literal=BERSERKER_CONFIGMAP_TEMPLATE="${BERSERKER_CONFIGMAP_TEMPLATE}" \
 --from-literal=BERSERKER_SERVICE_TEMPLATE="${BERSERKER_SERVICE_TEMPLATE}" \
 --from-literal=BERSERKER_CONTAINERS_FILE="${BERSERKER_CONTAINERS_FILE}" \
 --namespace=kube-burner

kubectl create -f "${DIR}"/kube-burner.yaml
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Set berserker config via url#95

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Open

JoukoVirtanen
wants to merge
16
commits into

base:main
Choose a base branch

from

 Open


Set berserker config via url
#95
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


16 commits


Select commit
Hold shift + click to select a range
a6b13f2

X-Smart-Branch-Parent: main


JoukoVirtanen Aug 19, 2026
6579dab

Setting berserker config paths


JoukoVirtanen May 29, 2026
2645462

Setting berserker url


JoukoVirtanen Jun 3, 2026
372689f

Should used kube-burner config in kube-burner-ocp


JoukoVirtanen Jun 11, 2026
f1d98be

Switched from BERSERKER_DAEMONSET_TEMPLATE to BERSERKER_CONTAINERS_FILE


JoukoVirtanen Jun 12, 2026
421d715

Set lifespan to 6h


JoukoVirtanen Jun 14, 2026
6853b68

Updated kube-burner version to 2.6.2


JoukoVirtanen Jun 14, 2026
206b140

Updated init command for new kube-burner version


JoukoVirtanen Jun 15, 2026
338cf40

Updated index command


JoukoVirtanen Jun 17, 2026
b2df10e

Updated BERSERKER_CONFIGMAP_TEMPLATE


JoukoVirtanen Jul 10, 2026
45b0219

Set additional environment variables in the kube-burner pod


JoukoVirtanen Jul 13, 2026
f9f5cd9

Setting more env vars which have been added to kube-burner-ocp


JoukoVirtanen Jul 14, 2026
69b0bc8

Using --user-data instead of --set


JoukoVirtanen Jul 14, 2026
183cddc

Set POD_READY_THRESHOLD to 0 and CHURN_DURATION to 1000h


JoukoVirtanen Jul 15, 2026
9110015

Churn at the namespace level


JoukoVirtanen Jul 15, 2026
d87b92f

Updated kube-burner-ocp branch


JoukoVirtanen Aug 9, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


21 changes: 19 additions & 2 deletions
.github/workflows/create-demo-clusters.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -31,6 +31,14 @@ on:
 kube-burner-config-repo:
 description: The repository where the kube-burner config files can be found
 type: string
 berserker-config-repo:
 description: The repository where the berserker kube-burner config files can be found
 type: string
 default: JoukoVirtanen/kube-burner-ocp
 berserker-config-ref:
 description: Ref of where the berserker kube-burner config files can be found
 type: string
 default: jv-fix-runOnce
 cluster-with-fake-load-name:
 description: "The name of the long running cluster where the central deployment is run with a sensor that creates its own fake workload. Must comply to the regex: [a-z][a-z0-9-]{1,26}[a-z0-9]"
 type: string
Expand All@@ -46,7 +54,7 @@ env:
 GH_TOKEN: ${{ github.token }}
 GH_NO_UPDATE_NOTIFIER: 1
 TIMEOUT_WAIT_FOR_IMAGES_SECONDS: 3600
 LONG_RUNNING_CLUSTER_LIFESPAN: "168h"
 LONG_RUNNING_CLUSTER_LIFESPAN: "6h"
 METRICS_COLLECTION_TIME: "30m"

jobs:
Expand DownExpand Up@@ -480,6 +488,12 @@ jobs:
 repository: stackrox/${{ inputs.kube-burner-config-repo }}
 path: .kube-burner-config
 ref: ${{ needs.parse-refs.outputs.burner-ref }}
 - name: Check out berserker config repository code
 uses: actions/checkout@v4
 with:
 repository: ${{ inputs.berserker-config-repo }}
 path: .berserker-config
 ref: ${{ inputs.berserker-config-ref }}
 # TODO(ROX-29223): Remove once old versions don't use the benchmark-operator

Comment on lines

+491
 to 
497

@coderabbitaicoderabbitaiBotJul 10, 2026

Copy link


Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win
Checkout missing persist-credentials: false.
Static analysis (zizmor) flags this checkout for credential persistence via GITHUB_TOKEN on disk (artipacked). Since artifacts/workspace can be exposed downstream, consider disabling credential persistence unless it's needed by a later step.
Suggested fix
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
+ persist-credentials: false
📝 Committable suggestion
‼️IMPORTANT

Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
persist-credentials: false
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
🧰 Tools
🪛 zizmor (1.26.1)
[warning] 483-489: credential persistence through GitHub Actions artifacts (artipacked): does not set persist-credentials: false
(artipacked)
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.github/workflows/create-demo-clusters.yml around lines 483 - 489, Add
persist-credentials: false to the with block of the actions/checkout@v4 step
checking out the berserker config repository, ensuring the checkout does not
persist GITHUB_TOKEN credentials for downstream steps.

Source: Linters/SAST tools
 - name: Check out cloud-bulldozer/benchmark-operator code
 run: |
Expand DownExpand Up@@ -509,9 +523,12 @@ jobs:
 REGISTRY_USERNAME: ${{ secrets.QUAY_RHACS_ENG_RO_USERNAME }}
 REGISTRY_PASSWORD: ${{ secrets.QUAY_RHACS_ENG_RO_PASSWORD }}
 ELASTICSEARCH_URL: "https://${{ secrets.K6_ELASTICSEARCH_USER }}:${{ secrets.K6_ELASTICSEARCH_PASSWORD }}@${{ secrets.K6_ELASTICSEARCH_URL }}"
 BERSERKER_CONFIGMAP_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/berserker-configmap.yml"
 BERSERKER_SERVICE_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/service.yml"
 BERSERKER_CONTAINERS_FILE: "berserker-default-containers.yml"
 uses: ./.actions/release/start-kube-burner
 with:
 kube-burner-config-dir: ./.kube-burner-config/scripts/release-tools/kube-burner-configs/berserker-load
 kube-burner-config-dir: ./.berserker-config/cmd/config/berserker-load
 benchmark-operator-dir: ${{ github.workspace }}/benchmark-operator

 start-kube-burner-for-central:
Expand Down

89 changes: 85 additions & 4 deletions
release/start-kube-burner/kube-burner.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -15,23 +15,47 @@ spec:
 spec:
 containers:
 - name: kube-burner
 image: quay.io/kube-burner/kube-burner:v1.4.3
 image: quay.io/kube-burner/kube-burner:v2.6.2
 command: ["/bin/sh", "-c"]
 args:
 - |
 get_epoch_time() {
 curl -G --silent http://monitoring.stackrox.svc.cluster.local:9090/api/v1/query --data-urlencode 'query=time()' | sed 's|.*\[||' | sed 's|\..*||'
 }
 cd /etc/kube-burner
 config=config.yml
 config=berserker-load.yml
 metrics_profile=/etc/kube-burner-metrics/metrics.yml
 prometheus_url="http://monitoring.stackrox.svc.cluster.local:9090"
 (kube-burner init --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --timeout=1000h || true) &
 cat > /tmp/vars.yml <<VARSEOF
 GC: $GC
 GC_METRICS: $GC_METRICS
 DELETION_STRATEGY: $DELETION_STRATEGY
 POD_READY_THRESHOLD: $POD_READY_THRESHOLD
 ES_SERVER: "$ES_SERVER"
 ES_INDEX: "$ES_INDEX"
 LOCAL_INDEXING: $LOCAL_INDEXING
 METRICS: $METRICS
 ALERTS: "$ALERTS"
 UUID: $UUID
 JOB_ITERATIONS: $JOB_ITERATIONS
 JOB_PAUSE: $JOB_PAUSE
 QPS: $QPS
 BURST: $BURST
 CHURN_CYCLES: $CHURN_CYCLES
 CHURN_DURATION: $CHURN_DURATION
 CHURN_DELAY: $CHURN_DELAY
 CHURN_PERCENT: $CHURN_PERCENT
 CHURN_MODE: $CHURN_MODE
 MAX_WAIT_TIMEOUT: $MAX_WAIT_TIMEOUT
 DAEMONSET_REPLICAS: $DAEMONSET_REPLICAS
 SERVICE_REPLICAS: $SERVICE_REPLICAS
 VARSEOF
 (kube-burner init --config="$config" --user-data=/tmp/vars.yml --skip-log-file --timeout=1000h || true) &
 while true; do
 start="$(get_epoch_time)"
 sleep "$METRICS_COLLECTION_TIME"
 end="$(get_epoch_time)"
 kube-burner index --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID"
 kube-burner index --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID" --es-server "$ELASTICSEARCH_URL" --es-index kube-burner-long-running-test
 done
 volumeMounts:
 - name: config
Expand DownExpand Up@@ -60,6 +84,63 @@ spec:
 secretKeyRef:
 name: kube-burner-secret
 key: METRICS_TIME_STEP
 - name: GC
 value: "true"
 - name: GC_METRICS
 value: "false"
 - name: DELETION_STRATEGY
 value: "gvr"
 - name: POD_READY_THRESHOLD
 value: "0"
 - name: ES_SERVER
 value: ""
 - name: ES_INDEX
 value: ""
 - name: LOCAL_INDEXING
 value: "false"
 - name: METRICS
 value: "metrics.yml"
 - name: ALERTS
 value: ""
 - name: JOB_ITERATIONS
 value: "5"
 - name: JOB_PAUSE
 value: "0s"
 - name: QPS
 value: "20"
 - name: BURST
 value: "20"
 - name: CHURN_CYCLES
 value: "0"
 - name: CHURN_DURATION
 value: "1000h"
 - name: CHURN_DELAY
 value: "10m0s"
 - name: CHURN_PERCENT
 value: "80"
 - name: CHURN_MODE
 value: "namespaces"
 - name: MAX_WAIT_TIMEOUT
 value: "12m0s"
 - name: DAEMONSET_REPLICAS
 value: "6"
 - name: SERVICE_REPLICAS
 value: "6"
 - name: BERSERKER_CONFIGMAP_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONFIGMAP_TEMPLATE
 - name: BERSERKER_SERVICE_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_SERVICE_TEMPLATE
 - name: BERSERKER_CONTAINERS_FILE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONTAINERS_FILE
 volumes:
 - name: config
 configMap:
Expand Down

9 changes: 7 additions & 2 deletions
release/start-kube-burner/start-kube-burner.sh

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,8 +20,10 @@ dockerconfigjson="$(kubectl -n stackrox get secret stackrox -o yaml | grep docke
secret_template="${KUBE_BURNER_CONFIG_DIR_BASE}/secret_template.yml"
secret_file="${KUBE_BURNER_CONFIG_DIR}/secret.yml"

gh_log notice "Patching $secret_template"
sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file" 
if [ -f "$secret_template" ]; then
 gh_log notice "Patching $secret_template"
 sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file"
fi

kubectl create ns kube-burner

Expand All@@ -43,6 +45,9 @@ kubectl create secret generic kube-burner-secret \
 --from-literal=UUID="$uuid" \
 --from-literal=METRICS_COLLECTION_TIME="$METRICS_COLLECTION_TIME" \
 --from-literal=METRICS_TIME_STEP="5m" \
 --from-literal=BERSERKER_CONFIGMAP_TEMPLATE="${BERSERKER_CONFIGMAP_TEMPLATE}" \
 --from-literal=BERSERKER_SERVICE_TEMPLATE="${BERSERKER_SERVICE_TEMPLATE}" \
 --from-literal=BERSERKER_CONTAINERS_FILE="${BERSERKER_CONTAINERS_FILE}" \
 --namespace=kube-burner

kubectl create -f "${DIR}"/kube-burner.yaml
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Set berserker config via url#95

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Open

JoukoVirtanen
wants to merge
16
commits into

base:main
Choose a base branch

from

 Open


Set berserker config via url
#95
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


16 commits


Select commit
Hold shift + click to select a range
a6b13f2

X-Smart-Branch-Parent: main


JoukoVirtanen Aug 19, 2026
6579dab

Setting berserker config paths


JoukoVirtanen May 29, 2026
2645462

Setting berserker url


JoukoVirtanen Jun 3, 2026
372689f

Should used kube-burner config in kube-burner-ocp


JoukoVirtanen Jun 11, 2026
f1d98be

Switched from BERSERKER_DAEMONSET_TEMPLATE to BERSERKER_CONTAINERS_FILE


JoukoVirtanen Jun 12, 2026
421d715

Set lifespan to 6h


JoukoVirtanen Jun 14, 2026
6853b68

Updated kube-burner version to 2.6.2


JoukoVirtanen Jun 14, 2026
206b140

Updated init command for new kube-burner version


JoukoVirtanen Jun 15, 2026
338cf40

Updated index command


JoukoVirtanen Jun 17, 2026
b2df10e

Updated BERSERKER_CONFIGMAP_TEMPLATE


JoukoVirtanen Jul 10, 2026
45b0219

Set additional environment variables in the kube-burner pod


JoukoVirtanen Jul 13, 2026
f9f5cd9

Setting more env vars which have been added to kube-burner-ocp


JoukoVirtanen Jul 14, 2026
69b0bc8

Using --user-data instead of --set


JoukoVirtanen Jul 14, 2026
183cddc

Set POD_READY_THRESHOLD to 0 and CHURN_DURATION to 1000h


JoukoVirtanen Jul 15, 2026
9110015

Churn at the namespace level


JoukoVirtanen Jul 15, 2026
d87b92f

Updated kube-burner-ocp branch


JoukoVirtanen Aug 9, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


21 changes: 19 additions & 2 deletions
.github/workflows/create-demo-clusters.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -31,6 +31,14 @@ on:
 kube-burner-config-repo:
 description: The repository where the kube-burner config files can be found
 type: string
 berserker-config-repo:
 description: The repository where the berserker kube-burner config files can be found
 type: string
 default: JoukoVirtanen/kube-burner-ocp
 berserker-config-ref:
 description: Ref of where the berserker kube-burner config files can be found
 type: string
 default: jv-fix-runOnce
 cluster-with-fake-load-name:
 description: "The name of the long running cluster where the central deployment is run with a sensor that creates its own fake workload. Must comply to the regex: [a-z][a-z0-9-]{1,26}[a-z0-9]"
 type: string
Expand All@@ -46,7 +54,7 @@ env:
 GH_TOKEN: ${{ github.token }}
 GH_NO_UPDATE_NOTIFIER: 1
 TIMEOUT_WAIT_FOR_IMAGES_SECONDS: 3600
 LONG_RUNNING_CLUSTER_LIFESPAN: "168h"
 LONG_RUNNING_CLUSTER_LIFESPAN: "6h"
 METRICS_COLLECTION_TIME: "30m"

jobs:
Expand DownExpand Up@@ -480,6 +488,12 @@ jobs:
 repository: stackrox/${{ inputs.kube-burner-config-repo }}
 path: .kube-burner-config
 ref: ${{ needs.parse-refs.outputs.burner-ref }}
 - name: Check out berserker config repository code
 uses: actions/checkout@v4
 with:
 repository: ${{ inputs.berserker-config-repo }}
 path: .berserker-config
 ref: ${{ inputs.berserker-config-ref }}
 # TODO(ROX-29223): Remove once old versions don't use the benchmark-operator

Comment on lines

+491
 to 
497

@coderabbitaicoderabbitaiBotJul 10, 2026

Copy link


Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win
Checkout missing persist-credentials: false.
Static analysis (zizmor) flags this checkout for credential persistence via GITHUB_TOKEN on disk (artipacked). Since artifacts/workspace can be exposed downstream, consider disabling credential persistence unless it's needed by a later step.
Suggested fix
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
+ persist-credentials: false
📝 Committable suggestion
‼️IMPORTANT

Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
persist-credentials: false
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
🧰 Tools
🪛 zizmor (1.26.1)
[warning] 483-489: credential persistence through GitHub Actions artifacts (artipacked): does not set persist-credentials: false
(artipacked)
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.github/workflows/create-demo-clusters.yml around lines 483 - 489, Add
persist-credentials: false to the with block of the actions/checkout@v4 step
checking out the berserker config repository, ensuring the checkout does not
persist GITHUB_TOKEN credentials for downstream steps.

Source: Linters/SAST tools
 - name: Check out cloud-bulldozer/benchmark-operator code
 run: |
Expand DownExpand Up@@ -509,9 +523,12 @@ jobs:
 REGISTRY_USERNAME: ${{ secrets.QUAY_RHACS_ENG_RO_USERNAME }}
 REGISTRY_PASSWORD: ${{ secrets.QUAY_RHACS_ENG_RO_PASSWORD }}
 ELASTICSEARCH_URL: "https://${{ secrets.K6_ELASTICSEARCH_USER }}:${{ secrets.K6_ELASTICSEARCH_PASSWORD }}@${{ secrets.K6_ELASTICSEARCH_URL }}"
 BERSERKER_CONFIGMAP_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/berserker-configmap.yml"
 BERSERKER_SERVICE_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/service.yml"
 BERSERKER_CONTAINERS_FILE: "berserker-default-containers.yml"
 uses: ./.actions/release/start-kube-burner
 with:
 kube-burner-config-dir: ./.kube-burner-config/scripts/release-tools/kube-burner-configs/berserker-load
 kube-burner-config-dir: ./.berserker-config/cmd/config/berserker-load
 benchmark-operator-dir: ${{ github.workspace }}/benchmark-operator

 start-kube-burner-for-central:
Expand Down

89 changes: 85 additions & 4 deletions
release/start-kube-burner/kube-burner.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -15,23 +15,47 @@ spec:
 spec:
 containers:
 - name: kube-burner
 image: quay.io/kube-burner/kube-burner:v1.4.3
 image: quay.io/kube-burner/kube-burner:v2.6.2
 command: ["/bin/sh", "-c"]
 args:
 - |
 get_epoch_time() {
 curl -G --silent http://monitoring.stackrox.svc.cluster.local:9090/api/v1/query --data-urlencode 'query=time()' | sed 's|.*\[||' | sed 's|\..*||'
 }
 cd /etc/kube-burner
 config=config.yml
 config=berserker-load.yml
 metrics_profile=/etc/kube-burner-metrics/metrics.yml
 prometheus_url="http://monitoring.stackrox.svc.cluster.local:9090"
 (kube-burner init --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --timeout=1000h || true) &
 cat > /tmp/vars.yml <<VARSEOF
 GC: $GC
 GC_METRICS: $GC_METRICS
 DELETION_STRATEGY: $DELETION_STRATEGY
 POD_READY_THRESHOLD: $POD_READY_THRESHOLD
 ES_SERVER: "$ES_SERVER"
 ES_INDEX: "$ES_INDEX"
 LOCAL_INDEXING: $LOCAL_INDEXING
 METRICS: $METRICS
 ALERTS: "$ALERTS"
 UUID: $UUID
 JOB_ITERATIONS: $JOB_ITERATIONS
 JOB_PAUSE: $JOB_PAUSE
 QPS: $QPS
 BURST: $BURST
 CHURN_CYCLES: $CHURN_CYCLES
 CHURN_DURATION: $CHURN_DURATION
 CHURN_DELAY: $CHURN_DELAY
 CHURN_PERCENT: $CHURN_PERCENT
 CHURN_MODE: $CHURN_MODE
 MAX_WAIT_TIMEOUT: $MAX_WAIT_TIMEOUT
 DAEMONSET_REPLICAS: $DAEMONSET_REPLICAS
 SERVICE_REPLICAS: $SERVICE_REPLICAS
 VARSEOF
 (kube-burner init --config="$config" --user-data=/tmp/vars.yml --skip-log-file --timeout=1000h || true) &
 while true; do
 start="$(get_epoch_time)"
 sleep "$METRICS_COLLECTION_TIME"
 end="$(get_epoch_time)"
 kube-burner index --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID"
 kube-burner index --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID" --es-server "$ELASTICSEARCH_URL" --es-index kube-burner-long-running-test
 done
 volumeMounts:
 - name: config
Expand DownExpand Up@@ -60,6 +84,63 @@ spec:
 secretKeyRef:
 name: kube-burner-secret
 key: METRICS_TIME_STEP
 - name: GC
 value: "true"
 - name: GC_METRICS
 value: "false"
 - name: DELETION_STRATEGY
 value: "gvr"
 - name: POD_READY_THRESHOLD
 value: "0"
 - name: ES_SERVER
 value: ""
 - name: ES_INDEX
 value: ""
 - name: LOCAL_INDEXING
 value: "false"
 - name: METRICS
 value: "metrics.yml"
 - name: ALERTS
 value: ""
 - name: JOB_ITERATIONS
 value: "5"
 - name: JOB_PAUSE
 value: "0s"
 - name: QPS
 value: "20"
 - name: BURST
 value: "20"
 - name: CHURN_CYCLES
 value: "0"
 - name: CHURN_DURATION
 value: "1000h"
 - name: CHURN_DELAY
 value: "10m0s"
 - name: CHURN_PERCENT
 value: "80"
 - name: CHURN_MODE
 value: "namespaces"
 - name: MAX_WAIT_TIMEOUT
 value: "12m0s"
 - name: DAEMONSET_REPLICAS
 value: "6"
 - name: SERVICE_REPLICAS
 value: "6"
 - name: BERSERKER_CONFIGMAP_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONFIGMAP_TEMPLATE
 - name: BERSERKER_SERVICE_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_SERVICE_TEMPLATE
 - name: BERSERKER_CONTAINERS_FILE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONTAINERS_FILE
 volumes:
 - name: config
 configMap:
Expand Down

9 changes: 7 additions & 2 deletions
release/start-kube-burner/start-kube-burner.sh

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,8 +20,10 @@ dockerconfigjson="$(kubectl -n stackrox get secret stackrox -o yaml | grep docke
secret_template="${KUBE_BURNER_CONFIG_DIR_BASE}/secret_template.yml"
secret_file="${KUBE_BURNER_CONFIG_DIR}/secret.yml"

gh_log notice "Patching $secret_template"
sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file" 
if [ -f "$secret_template" ]; then
 gh_log notice "Patching $secret_template"
 sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file"
fi

kubectl create ns kube-burner

Expand All@@ -43,6 +45,9 @@ kubectl create secret generic kube-burner-secret \
 --from-literal=UUID="$uuid" \
 --from-literal=METRICS_COLLECTION_TIME="$METRICS_COLLECTION_TIME" \
 --from-literal=METRICS_TIME_STEP="5m" \
 --from-literal=BERSERKER_CONFIGMAP_TEMPLATE="${BERSERKER_CONFIGMAP_TEMPLATE}" \
 --from-literal=BERSERKER_SERVICE_TEMPLATE="${BERSERKER_SERVICE_TEMPLATE}" \
 --from-literal=BERSERKER_CONTAINERS_FILE="${BERSERKER_CONTAINERS_FILE}" \
 --namespace=kube-burner

kubectl create -f "${DIR}"/kube-burner.yaml
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
Set berserker config via url#95

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Open

JoukoVirtanen
wants to merge
16
commits into

base:main
Choose a base branch

from

 Open


Set berserker config via url
#95
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


16 commits


Select commit
Hold shift + click to select a range
a6b13f2

X-Smart-Branch-Parent: main


JoukoVirtanen Aug 19, 2026
6579dab

Setting berserker config paths


JoukoVirtanen May 29, 2026
2645462

Setting berserker url


JoukoVirtanen Jun 3, 2026
372689f

Should used kube-burner config in kube-burner-ocp


JoukoVirtanen Jun 11, 2026
f1d98be

Switched from BERSERKER_DAEMONSET_TEMPLATE to BERSERKER_CONTAINERS_FILE


JoukoVirtanen Jun 12, 2026
421d715

Set lifespan to 6h


JoukoVirtanen Jun 14, 2026
6853b68

Updated kube-burner version to 2.6.2


JoukoVirtanen Jun 14, 2026
206b140

Updated init command for new kube-burner version


JoukoVirtanen Jun 15, 2026
338cf40

Updated index command


JoukoVirtanen Jun 17, 2026
b2df10e

Updated BERSERKER_CONFIGMAP_TEMPLATE


JoukoVirtanen Jul 10, 2026
45b0219

Set additional environment variables in the kube-burner pod


JoukoVirtanen Jul 13, 2026
f9f5cd9

Setting more env vars which have been added to kube-burner-ocp


JoukoVirtanen Jul 14, 2026
69b0bc8

Using --user-data instead of --set


JoukoVirtanen Jul 14, 2026
183cddc

Set POD_READY_THRESHOLD to 0 and CHURN_DURATION to 1000h


JoukoVirtanen Jul 15, 2026
9110015

Churn at the namespace level


JoukoVirtanen Jul 15, 2026
d87b92f

Updated kube-burner-ocp branch


JoukoVirtanen Aug 9, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


21 changes: 19 additions & 2 deletions
.github/workflows/create-demo-clusters.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -31,6 +31,14 @@ on:
 kube-burner-config-repo:
 description: The repository where the kube-burner config files can be found
 type: string
 berserker-config-repo:
 description: The repository where the berserker kube-burner config files can be found
 type: string
 default: JoukoVirtanen/kube-burner-ocp
 berserker-config-ref:
 description: Ref of where the berserker kube-burner config files can be found
 type: string
 default: jv-fix-runOnce
 cluster-with-fake-load-name:
 description: "The name of the long running cluster where the central deployment is run with a sensor that creates its own fake workload. Must comply to the regex: [a-z][a-z0-9-]{1,26}[a-z0-9]"
 type: string
Expand All@@ -46,7 +54,7 @@ env:
 GH_TOKEN: ${{ github.token }}
 GH_NO_UPDATE_NOTIFIER: 1
 TIMEOUT_WAIT_FOR_IMAGES_SECONDS: 3600
 LONG_RUNNING_CLUSTER_LIFESPAN: "168h"
 LONG_RUNNING_CLUSTER_LIFESPAN: "6h"
 METRICS_COLLECTION_TIME: "30m"

jobs:
Expand DownExpand Up@@ -480,6 +488,12 @@ jobs:
 repository: stackrox/${{ inputs.kube-burner-config-repo }}
 path: .kube-burner-config
 ref: ${{ needs.parse-refs.outputs.burner-ref }}
 - name: Check out berserker config repository code
 uses: actions/checkout@v4
 with:
 repository: ${{ inputs.berserker-config-repo }}
 path: .berserker-config
 ref: ${{ inputs.berserker-config-ref }}
 # TODO(ROX-29223): Remove once old versions don't use the benchmark-operator

Comment on lines

+491
 to 
497

@coderabbitaicoderabbitaiBotJul 10, 2026

Copy link


Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win
Checkout missing persist-credentials: false.
Static analysis (zizmor) flags this checkout for credential persistence via GITHUB_TOKEN on disk (artipacked). Since artifacts/workspace can be exposed downstream, consider disabling credential persistence unless it's needed by a later step.
Suggested fix
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
+ persist-credentials: false
📝 Committable suggestion
‼️IMPORTANT

Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
persist-credentials: false
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
🧰 Tools
🪛 zizmor (1.26.1)
[warning] 483-489: credential persistence through GitHub Actions artifacts (artipacked): does not set persist-credentials: false
(artipacked)
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.github/workflows/create-demo-clusters.yml around lines 483 - 489, Add
persist-credentials: false to the with block of the actions/checkout@v4 step
checking out the berserker config repository, ensuring the checkout does not
persist GITHUB_TOKEN credentials for downstream steps.

Source: Linters/SAST tools
 - name: Check out cloud-bulldozer/benchmark-operator code
 run: |
Expand DownExpand Up@@ -509,9 +523,12 @@ jobs:
 REGISTRY_USERNAME: ${{ secrets.QUAY_RHACS_ENG_RO_USERNAME }}
 REGISTRY_PASSWORD: ${{ secrets.QUAY_RHACS_ENG_RO_PASSWORD }}
 ELASTICSEARCH_URL: "https://${{ secrets.K6_ELASTICSEARCH_USER }}:${{ secrets.K6_ELASTICSEARCH_PASSWORD }}@${{ secrets.K6_ELASTICSEARCH_URL }}"
 BERSERKER_CONFIGMAP_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/berserker-configmap.yml"
 BERSERKER_SERVICE_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/service.yml"
 BERSERKER_CONTAINERS_FILE: "berserker-default-containers.yml"
 uses: ./.actions/release/start-kube-burner
 with:
 kube-burner-config-dir: ./.kube-burner-config/scripts/release-tools/kube-burner-configs/berserker-load
 kube-burner-config-dir: ./.berserker-config/cmd/config/berserker-load
 benchmark-operator-dir: ${{ github.workspace }}/benchmark-operator

 start-kube-burner-for-central:
Expand Down

89 changes: 85 additions & 4 deletions
release/start-kube-burner/kube-burner.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -15,23 +15,47 @@ spec:
 spec:
 containers:
 - name: kube-burner
 image: quay.io/kube-burner/kube-burner:v1.4.3
 image: quay.io/kube-burner/kube-burner:v2.6.2
 command: ["/bin/sh", "-c"]
 args:
 - |
 get_epoch_time() {
 curl -G --silent http://monitoring.stackrox.svc.cluster.local:9090/api/v1/query --data-urlencode 'query=time()' | sed 's|.*\[||' | sed 's|\..*||'
 }
 cd /etc/kube-burner
 config=config.yml
 config=berserker-load.yml
 metrics_profile=/etc/kube-burner-metrics/metrics.yml
 prometheus_url="http://monitoring.stackrox.svc.cluster.local:9090"
 (kube-burner init --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --timeout=1000h || true) &
 cat > /tmp/vars.yml <<VARSEOF
 GC: $GC
 GC_METRICS: $GC_METRICS
 DELETION_STRATEGY: $DELETION_STRATEGY
 POD_READY_THRESHOLD: $POD_READY_THRESHOLD
 ES_SERVER: "$ES_SERVER"
 ES_INDEX: "$ES_INDEX"
 LOCAL_INDEXING: $LOCAL_INDEXING
 METRICS: $METRICS
 ALERTS: "$ALERTS"
 UUID: $UUID
 JOB_ITERATIONS: $JOB_ITERATIONS
 JOB_PAUSE: $JOB_PAUSE
 QPS: $QPS
 BURST: $BURST
 CHURN_CYCLES: $CHURN_CYCLES
 CHURN_DURATION: $CHURN_DURATION
 CHURN_DELAY: $CHURN_DELAY
 CHURN_PERCENT: $CHURN_PERCENT
 CHURN_MODE: $CHURN_MODE
 MAX_WAIT_TIMEOUT: $MAX_WAIT_TIMEOUT
 DAEMONSET_REPLICAS: $DAEMONSET_REPLICAS
 SERVICE_REPLICAS: $SERVICE_REPLICAS
 VARSEOF
 (kube-burner init --config="$config" --user-data=/tmp/vars.yml --skip-log-file --timeout=1000h || true) &
 while true; do
 start="$(get_epoch_time)"
 sleep "$METRICS_COLLECTION_TIME"
 end="$(get_epoch_time)"
 kube-burner index --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID"
 kube-burner index --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID" --es-server "$ELASTICSEARCH_URL" --es-index kube-burner-long-running-test
 done
 volumeMounts:
 - name: config
Expand DownExpand Up@@ -60,6 +84,63 @@ spec:
 secretKeyRef:
 name: kube-burner-secret
 key: METRICS_TIME_STEP
 - name: GC
 value: "true"
 - name: GC_METRICS
 value: "false"
 - name: DELETION_STRATEGY
 value: "gvr"
 - name: POD_READY_THRESHOLD
 value: "0"
 - name: ES_SERVER
 value: ""
 - name: ES_INDEX
 value: ""
 - name: LOCAL_INDEXING
 value: "false"
 - name: METRICS
 value: "metrics.yml"
 - name: ALERTS
 value: ""
 - name: JOB_ITERATIONS
 value: "5"
 - name: JOB_PAUSE
 value: "0s"
 - name: QPS
 value: "20"
 - name: BURST
 value: "20"
 - name: CHURN_CYCLES
 value: "0"
 - name: CHURN_DURATION
 value: "1000h"
 - name: CHURN_DELAY
 value: "10m0s"
 - name: CHURN_PERCENT
 value: "80"
 - name: CHURN_MODE
 value: "namespaces"
 - name: MAX_WAIT_TIMEOUT
 value: "12m0s"
 - name: DAEMONSET_REPLICAS
 value: "6"
 - name: SERVICE_REPLICAS
 value: "6"
 - name: BERSERKER_CONFIGMAP_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONFIGMAP_TEMPLATE
 - name: BERSERKER_SERVICE_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_SERVICE_TEMPLATE
 - name: BERSERKER_CONTAINERS_FILE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONTAINERS_FILE
 volumes:
 - name: config
 configMap:
Expand Down

9 changes: 7 additions & 2 deletions
release/start-kube-burner/start-kube-burner.sh

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,8 +20,10 @@ dockerconfigjson="$(kubectl -n stackrox get secret stackrox -o yaml | grep docke
secret_template="${KUBE_BURNER_CONFIG_DIR_BASE}/secret_template.yml"
secret_file="${KUBE_BURNER_CONFIG_DIR}/secret.yml"

gh_log notice "Patching $secret_template"
sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file" 
if [ -f "$secret_template" ]; then
 gh_log notice "Patching $secret_template"
 sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file"
fi

kubectl create ns kube-burner

Expand All@@ -43,6 +45,9 @@ kubectl create secret generic kube-burner-secret \
 --from-literal=UUID="$uuid" \
 --from-literal=METRICS_COLLECTION_TIME="$METRICS_COLLECTION_TIME" \
 --from-literal=METRICS_TIME_STEP="5m" \
 --from-literal=BERSERKER_CONFIGMAP_TEMPLATE="${BERSERKER_CONFIGMAP_TEMPLATE}" \
 --from-literal=BERSERKER_SERVICE_TEMPLATE="${BERSERKER_SERVICE_TEMPLATE}" \
 --from-literal=BERSERKER_CONTAINERS_FILE="${BERSERKER_CONTAINERS_FILE}" \
 --namespace=kube-burner

kubectl create -f "${DIR}"/kube-burner.yaml
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Set berserker config via url#95

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Open

JoukoVirtanen
wants to merge
16
commits into

base:main
Choose a base branch

from

 Open


Set berserker config via url
#95
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


16 commits


Select commit
Hold shift + click to select a range
a6b13f2

X-Smart-Branch-Parent: main


JoukoVirtanen Aug 19, 2026
6579dab

Setting berserker config paths


JoukoVirtanen May 29, 2026
2645462

Setting berserker url


JoukoVirtanen Jun 3, 2026
372689f

Should used kube-burner config in kube-burner-ocp


JoukoVirtanen Jun 11, 2026
f1d98be

Switched from BERSERKER_DAEMONSET_TEMPLATE to BERSERKER_CONTAINERS_FILE


JoukoVirtanen Jun 12, 2026
421d715

Set lifespan to 6h


JoukoVirtanen Jun 14, 2026
6853b68

Updated kube-burner version to 2.6.2


JoukoVirtanen Jun 14, 2026
206b140

Updated init command for new kube-burner version


JoukoVirtanen Jun 15, 2026
338cf40

Updated index command


JoukoVirtanen Jun 17, 2026
b2df10e

Updated BERSERKER_CONFIGMAP_TEMPLATE


JoukoVirtanen Jul 10, 2026
45b0219

Set additional environment variables in the kube-burner pod


JoukoVirtanen Jul 13, 2026
f9f5cd9

Setting more env vars which have been added to kube-burner-ocp


JoukoVirtanen Jul 14, 2026
69b0bc8

Using --user-data instead of --set


JoukoVirtanen Jul 14, 2026
183cddc

Set POD_READY_THRESHOLD to 0 and CHURN_DURATION to 1000h


JoukoVirtanen Jul 15, 2026
9110015

Churn at the namespace level


JoukoVirtanen Jul 15, 2026
d87b92f

Updated kube-burner-ocp branch


JoukoVirtanen Aug 9, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


21 changes: 19 additions & 2 deletions
.github/workflows/create-demo-clusters.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -31,6 +31,14 @@ on:
 kube-burner-config-repo:
 description: The repository where the kube-burner config files can be found
 type: string
 berserker-config-repo:
 description: The repository where the berserker kube-burner config files can be found
 type: string
 default: JoukoVirtanen/kube-burner-ocp
 berserker-config-ref:
 description: Ref of where the berserker kube-burner config files can be found
 type: string
 default: jv-fix-runOnce
 cluster-with-fake-load-name:
 description: "The name of the long running cluster where the central deployment is run with a sensor that creates its own fake workload. Must comply to the regex: [a-z][a-z0-9-]{1,26}[a-z0-9]"
 type: string
Expand All@@ -46,7 +54,7 @@ env:
 GH_TOKEN: ${{ github.token }}
 GH_NO_UPDATE_NOTIFIER: 1
 TIMEOUT_WAIT_FOR_IMAGES_SECONDS: 3600
 LONG_RUNNING_CLUSTER_LIFESPAN: "168h"
 LONG_RUNNING_CLUSTER_LIFESPAN: "6h"
 METRICS_COLLECTION_TIME: "30m"

jobs:
Expand DownExpand Up@@ -480,6 +488,12 @@ jobs:
 repository: stackrox/${{ inputs.kube-burner-config-repo }}
 path: .kube-burner-config
 ref: ${{ needs.parse-refs.outputs.burner-ref }}
 - name: Check out berserker config repository code
 uses: actions/checkout@v4
 with:
 repository: ${{ inputs.berserker-config-repo }}
 path: .berserker-config
 ref: ${{ inputs.berserker-config-ref }}
 # TODO(ROX-29223): Remove once old versions don't use the benchmark-operator

Comment on lines

+491
 to 
497

@coderabbitaicoderabbitaiBotJul 10, 2026

Copy link


Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win
Checkout missing persist-credentials: false.
Static analysis (zizmor) flags this checkout for credential persistence via GITHUB_TOKEN on disk (artipacked). Since artifacts/workspace can be exposed downstream, consider disabling credential persistence unless it's needed by a later step.
Suggested fix
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
+ persist-credentials: false
📝 Committable suggestion
‼️IMPORTANT

Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
persist-credentials: false
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
🧰 Tools
🪛 zizmor (1.26.1)
[warning] 483-489: credential persistence through GitHub Actions artifacts (artipacked): does not set persist-credentials: false
(artipacked)
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.github/workflows/create-demo-clusters.yml around lines 483 - 489, Add
persist-credentials: false to the with block of the actions/checkout@v4 step
checking out the berserker config repository, ensuring the checkout does not
persist GITHUB_TOKEN credentials for downstream steps.

Source: Linters/SAST tools
 - name: Check out cloud-bulldozer/benchmark-operator code
 run: |
Expand DownExpand Up@@ -509,9 +523,12 @@ jobs:
 REGISTRY_USERNAME: ${{ secrets.QUAY_RHACS_ENG_RO_USERNAME }}
 REGISTRY_PASSWORD: ${{ secrets.QUAY_RHACS_ENG_RO_PASSWORD }}
 ELASTICSEARCH_URL: "https://${{ secrets.K6_ELASTICSEARCH_USER }}:${{ secrets.K6_ELASTICSEARCH_PASSWORD }}@${{ secrets.K6_ELASTICSEARCH_URL }}"
 BERSERKER_CONFIGMAP_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/berserker-configmap.yml"
 BERSERKER_SERVICE_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/service.yml"
 BERSERKER_CONTAINERS_FILE: "berserker-default-containers.yml"
 uses: ./.actions/release/start-kube-burner
 with:
 kube-burner-config-dir: ./.kube-burner-config/scripts/release-tools/kube-burner-configs/berserker-load
 kube-burner-config-dir: ./.berserker-config/cmd/config/berserker-load
 benchmark-operator-dir: ${{ github.workspace }}/benchmark-operator

 start-kube-burner-for-central:
Expand Down

89 changes: 85 additions & 4 deletions
release/start-kube-burner/kube-burner.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -15,23 +15,47 @@ spec:
 spec:
 containers:
 - name: kube-burner
 image: quay.io/kube-burner/kube-burner:v1.4.3
 image: quay.io/kube-burner/kube-burner:v2.6.2
 command: ["/bin/sh", "-c"]
 args:
 - |
 get_epoch_time() {
 curl -G --silent http://monitoring.stackrox.svc.cluster.local:9090/api/v1/query --data-urlencode 'query=time()' | sed 's|.*\[||' | sed 's|\..*||'
 }
 cd /etc/kube-burner
 config=config.yml
 config=berserker-load.yml
 metrics_profile=/etc/kube-burner-metrics/metrics.yml
 prometheus_url="http://monitoring.stackrox.svc.cluster.local:9090"
 (kube-burner init --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --timeout=1000h || true) &
 cat > /tmp/vars.yml <<VARSEOF
 GC: $GC
 GC_METRICS: $GC_METRICS
 DELETION_STRATEGY: $DELETION_STRATEGY
 POD_READY_THRESHOLD: $POD_READY_THRESHOLD
 ES_SERVER: "$ES_SERVER"
 ES_INDEX: "$ES_INDEX"
 LOCAL_INDEXING: $LOCAL_INDEXING
 METRICS: $METRICS
 ALERTS: "$ALERTS"
 UUID: $UUID
 JOB_ITERATIONS: $JOB_ITERATIONS
 JOB_PAUSE: $JOB_PAUSE
 QPS: $QPS
 BURST: $BURST
 CHURN_CYCLES: $CHURN_CYCLES
 CHURN_DURATION: $CHURN_DURATION
 CHURN_DELAY: $CHURN_DELAY
 CHURN_PERCENT: $CHURN_PERCENT
 CHURN_MODE: $CHURN_MODE
 MAX_WAIT_TIMEOUT: $MAX_WAIT_TIMEOUT
 DAEMONSET_REPLICAS: $DAEMONSET_REPLICAS
 SERVICE_REPLICAS: $SERVICE_REPLICAS
 VARSEOF
 (kube-burner init --config="$config" --user-data=/tmp/vars.yml --skip-log-file --timeout=1000h || true) &
 while true; do
 start="$(get_epoch_time)"
 sleep "$METRICS_COLLECTION_TIME"
 end="$(get_epoch_time)"
 kube-burner index --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID"
 kube-burner index --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID" --es-server "$ELASTICSEARCH_URL" --es-index kube-burner-long-running-test
 done
 volumeMounts:
 - name: config
Expand DownExpand Up@@ -60,6 +84,63 @@ spec:
 secretKeyRef:
 name: kube-burner-secret
 key: METRICS_TIME_STEP
 - name: GC
 value: "true"
 - name: GC_METRICS
 value: "false"
 - name: DELETION_STRATEGY
 value: "gvr"
 - name: POD_READY_THRESHOLD
 value: "0"
 - name: ES_SERVER
 value: ""
 - name: ES_INDEX
 value: ""
 - name: LOCAL_INDEXING
 value: "false"
 - name: METRICS
 value: "metrics.yml"
 - name: ALERTS
 value: ""
 - name: JOB_ITERATIONS
 value: "5"
 - name: JOB_PAUSE
 value: "0s"
 - name: QPS
 value: "20"
 - name: BURST
 value: "20"
 - name: CHURN_CYCLES
 value: "0"
 - name: CHURN_DURATION
 value: "1000h"
 - name: CHURN_DELAY
 value: "10m0s"
 - name: CHURN_PERCENT
 value: "80"
 - name: CHURN_MODE
 value: "namespaces"
 - name: MAX_WAIT_TIMEOUT
 value: "12m0s"
 - name: DAEMONSET_REPLICAS
 value: "6"
 - name: SERVICE_REPLICAS
 value: "6"
 - name: BERSERKER_CONFIGMAP_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONFIGMAP_TEMPLATE
 - name: BERSERKER_SERVICE_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_SERVICE_TEMPLATE
 - name: BERSERKER_CONTAINERS_FILE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONTAINERS_FILE
 volumes:
 - name: config
 configMap:
Expand Down

9 changes: 7 additions & 2 deletions
release/start-kube-burner/start-kube-burner.sh

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,8 +20,10 @@ dockerconfigjson="$(kubectl -n stackrox get secret stackrox -o yaml | grep docke
secret_template="${KUBE_BURNER_CONFIG_DIR_BASE}/secret_template.yml"
secret_file="${KUBE_BURNER_CONFIG_DIR}/secret.yml"

gh_log notice "Patching $secret_template"
sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file" 
if [ -f "$secret_template" ]; then
 gh_log notice "Patching $secret_template"
 sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file"
fi

kubectl create ns kube-burner

Expand All@@ -43,6 +45,9 @@ kubectl create secret generic kube-burner-secret \
 --from-literal=UUID="$uuid" \
 --from-literal=METRICS_COLLECTION_TIME="$METRICS_COLLECTION_TIME" \
 --from-literal=METRICS_TIME_STEP="5m" \
 --from-literal=BERSERKER_CONFIGMAP_TEMPLATE="${BERSERKER_CONFIGMAP_TEMPLATE}" \
 --from-literal=BERSERKER_SERVICE_TEMPLATE="${BERSERKER_SERVICE_TEMPLATE}" \
 --from-literal=BERSERKER_CONTAINERS_FILE="${BERSERKER_CONTAINERS_FILE}" \
 --namespace=kube-burner

kubectl create -f "${DIR}"/kube-burner.yaml
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Set berserker config via url#95

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Open

JoukoVirtanen
wants to merge
16
commits into

base:main
Choose a base branch

from

 Open


Set berserker config via url
#95
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


16 commits


Select commit
Hold shift + click to select a range
a6b13f2

X-Smart-Branch-Parent: main


JoukoVirtanen Aug 19, 2026
6579dab

Setting berserker config paths


JoukoVirtanen May 29, 2026
2645462

Setting berserker url


JoukoVirtanen Jun 3, 2026
372689f

Should used kube-burner config in kube-burner-ocp


JoukoVirtanen Jun 11, 2026
f1d98be

Switched from BERSERKER_DAEMONSET_TEMPLATE to BERSERKER_CONTAINERS_FILE


JoukoVirtanen Jun 12, 2026
421d715

Set lifespan to 6h


JoukoVirtanen Jun 14, 2026
6853b68

Updated kube-burner version to 2.6.2


JoukoVirtanen Jun 14, 2026
206b140

Updated init command for new kube-burner version


JoukoVirtanen Jun 15, 2026
338cf40

Updated index command


JoukoVirtanen Jun 17, 2026
b2df10e

Updated BERSERKER_CONFIGMAP_TEMPLATE


JoukoVirtanen Jul 10, 2026
45b0219

Set additional environment variables in the kube-burner pod


JoukoVirtanen Jul 13, 2026
f9f5cd9

Setting more env vars which have been added to kube-burner-ocp


JoukoVirtanen Jul 14, 2026
69b0bc8

Using --user-data instead of --set


JoukoVirtanen Jul 14, 2026
183cddc

Set POD_READY_THRESHOLD to 0 and CHURN_DURATION to 1000h


JoukoVirtanen Jul 15, 2026
9110015

Churn at the namespace level


JoukoVirtanen Jul 15, 2026
d87b92f

Updated kube-burner-ocp branch


JoukoVirtanen Aug 9, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


21 changes: 19 additions & 2 deletions
.github/workflows/create-demo-clusters.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -31,6 +31,14 @@ on:
 kube-burner-config-repo:
 description: The repository where the kube-burner config files can be found
 type: string
 berserker-config-repo:
 description: The repository where the berserker kube-burner config files can be found
 type: string
 default: JoukoVirtanen/kube-burner-ocp
 berserker-config-ref:
 description: Ref of where the berserker kube-burner config files can be found
 type: string
 default: jv-fix-runOnce
 cluster-with-fake-load-name:
 description: "The name of the long running cluster where the central deployment is run with a sensor that creates its own fake workload. Must comply to the regex: [a-z][a-z0-9-]{1,26}[a-z0-9]"
 type: string
Expand All@@ -46,7 +54,7 @@ env:
 GH_TOKEN: ${{ github.token }}
 GH_NO_UPDATE_NOTIFIER: 1
 TIMEOUT_WAIT_FOR_IMAGES_SECONDS: 3600
 LONG_RUNNING_CLUSTER_LIFESPAN: "168h"
 LONG_RUNNING_CLUSTER_LIFESPAN: "6h"
 METRICS_COLLECTION_TIME: "30m"

jobs:
Expand DownExpand Up@@ -480,6 +488,12 @@ jobs:
 repository: stackrox/${{ inputs.kube-burner-config-repo }}
 path: .kube-burner-config
 ref: ${{ needs.parse-refs.outputs.burner-ref }}
 - name: Check out berserker config repository code
 uses: actions/checkout@v4
 with:
 repository: ${{ inputs.berserker-config-repo }}
 path: .berserker-config
 ref: ${{ inputs.berserker-config-ref }}
 # TODO(ROX-29223): Remove once old versions don't use the benchmark-operator

Comment on lines

+491
 to 
497

@coderabbitaicoderabbitaiBotJul 10, 2026

Copy link


Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win
Checkout missing persist-credentials: false.
Static analysis (zizmor) flags this checkout for credential persistence via GITHUB_TOKEN on disk (artipacked). Since artifacts/workspace can be exposed downstream, consider disabling credential persistence unless it's needed by a later step.
Suggested fix
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
+ persist-credentials: false
📝 Committable suggestion
‼️IMPORTANT

Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
persist-credentials: false
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
🧰 Tools
🪛 zizmor (1.26.1)
[warning] 483-489: credential persistence through GitHub Actions artifacts (artipacked): does not set persist-credentials: false
(artipacked)
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.github/workflows/create-demo-clusters.yml around lines 483 - 489, Add
persist-credentials: false to the with block of the actions/checkout@v4 step
checking out the berserker config repository, ensuring the checkout does not
persist GITHUB_TOKEN credentials for downstream steps.

Source: Linters/SAST tools
 - name: Check out cloud-bulldozer/benchmark-operator code
 run: |
Expand DownExpand Up@@ -509,9 +523,12 @@ jobs:
 REGISTRY_USERNAME: ${{ secrets.QUAY_RHACS_ENG_RO_USERNAME }}
 REGISTRY_PASSWORD: ${{ secrets.QUAY_RHACS_ENG_RO_PASSWORD }}
 ELASTICSEARCH_URL: "https://${{ secrets.K6_ELASTICSEARCH_USER }}:${{ secrets.K6_ELASTICSEARCH_PASSWORD }}@${{ secrets.K6_ELASTICSEARCH_URL }}"
 BERSERKER_CONFIGMAP_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/berserker-configmap.yml"
 BERSERKER_SERVICE_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/service.yml"
 BERSERKER_CONTAINERS_FILE: "berserker-default-containers.yml"
 uses: ./.actions/release/start-kube-burner
 with:
 kube-burner-config-dir: ./.kube-burner-config/scripts/release-tools/kube-burner-configs/berserker-load
 kube-burner-config-dir: ./.berserker-config/cmd/config/berserker-load
 benchmark-operator-dir: ${{ github.workspace }}/benchmark-operator

 start-kube-burner-for-central:
Expand Down

89 changes: 85 additions & 4 deletions
release/start-kube-burner/kube-burner.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -15,23 +15,47 @@ spec:
 spec:
 containers:
 - name: kube-burner
 image: quay.io/kube-burner/kube-burner:v1.4.3
 image: quay.io/kube-burner/kube-burner:v2.6.2
 command: ["/bin/sh", "-c"]
 args:
 - |
 get_epoch_time() {
 curl -G --silent http://monitoring.stackrox.svc.cluster.local:9090/api/v1/query --data-urlencode 'query=time()' | sed 's|.*\[||' | sed 's|\..*||'
 }
 cd /etc/kube-burner
 config=config.yml
 config=berserker-load.yml
 metrics_profile=/etc/kube-burner-metrics/metrics.yml
 prometheus_url="http://monitoring.stackrox.svc.cluster.local:9090"
 (kube-burner init --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --timeout=1000h || true) &
 cat > /tmp/vars.yml <<VARSEOF
 GC: $GC
 GC_METRICS: $GC_METRICS
 DELETION_STRATEGY: $DELETION_STRATEGY
 POD_READY_THRESHOLD: $POD_READY_THRESHOLD
 ES_SERVER: "$ES_SERVER"
 ES_INDEX: "$ES_INDEX"
 LOCAL_INDEXING: $LOCAL_INDEXING
 METRICS: $METRICS
 ALERTS: "$ALERTS"
 UUID: $UUID
 JOB_ITERATIONS: $JOB_ITERATIONS
 JOB_PAUSE: $JOB_PAUSE
 QPS: $QPS
 BURST: $BURST
 CHURN_CYCLES: $CHURN_CYCLES
 CHURN_DURATION: $CHURN_DURATION
 CHURN_DELAY: $CHURN_DELAY
 CHURN_PERCENT: $CHURN_PERCENT
 CHURN_MODE: $CHURN_MODE
 MAX_WAIT_TIMEOUT: $MAX_WAIT_TIMEOUT
 DAEMONSET_REPLICAS: $DAEMONSET_REPLICAS
 SERVICE_REPLICAS: $SERVICE_REPLICAS
 VARSEOF
 (kube-burner init --config="$config" --user-data=/tmp/vars.yml --skip-log-file --timeout=1000h || true) &
 while true; do
 start="$(get_epoch_time)"
 sleep "$METRICS_COLLECTION_TIME"
 end="$(get_epoch_time)"
 kube-burner index --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID"
 kube-burner index --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID" --es-server "$ELASTICSEARCH_URL" --es-index kube-burner-long-running-test
 done
 volumeMounts:
 - name: config
Expand DownExpand Up@@ -60,6 +84,63 @@ spec:
 secretKeyRef:
 name: kube-burner-secret
 key: METRICS_TIME_STEP
 - name: GC
 value: "true"
 - name: GC_METRICS
 value: "false"
 - name: DELETION_STRATEGY
 value: "gvr"
 - name: POD_READY_THRESHOLD
 value: "0"
 - name: ES_SERVER
 value: ""
 - name: ES_INDEX
 value: ""
 - name: LOCAL_INDEXING
 value: "false"
 - name: METRICS
 value: "metrics.yml"
 - name: ALERTS
 value: ""
 - name: JOB_ITERATIONS
 value: "5"
 - name: JOB_PAUSE
 value: "0s"
 - name: QPS
 value: "20"
 - name: BURST
 value: "20"
 - name: CHURN_CYCLES
 value: "0"
 - name: CHURN_DURATION
 value: "1000h"
 - name: CHURN_DELAY
 value: "10m0s"
 - name: CHURN_PERCENT
 value: "80"
 - name: CHURN_MODE
 value: "namespaces"
 - name: MAX_WAIT_TIMEOUT
 value: "12m0s"
 - name: DAEMONSET_REPLICAS
 value: "6"
 - name: SERVICE_REPLICAS
 value: "6"
 - name: BERSERKER_CONFIGMAP_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONFIGMAP_TEMPLATE
 - name: BERSERKER_SERVICE_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_SERVICE_TEMPLATE
 - name: BERSERKER_CONTAINERS_FILE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONTAINERS_FILE
 volumes:
 - name: config
 configMap:
Expand Down

9 changes: 7 additions & 2 deletions
release/start-kube-burner/start-kube-burner.sh

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,8 +20,10 @@ dockerconfigjson="$(kubectl -n stackrox get secret stackrox -o yaml | grep docke
secret_template="${KUBE_BURNER_CONFIG_DIR_BASE}/secret_template.yml"
secret_file="${KUBE_BURNER_CONFIG_DIR}/secret.yml"

gh_log notice "Patching $secret_template"
sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file" 
if [ -f "$secret_template" ]; then
 gh_log notice "Patching $secret_template"
 sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file"
fi

kubectl create ns kube-burner

Expand All@@ -43,6 +45,9 @@ kubectl create secret generic kube-burner-secret \
 --from-literal=UUID="$uuid" \
 --from-literal=METRICS_COLLECTION_TIME="$METRICS_COLLECTION_TIME" \
 --from-literal=METRICS_TIME_STEP="5m" \
 --from-literal=BERSERKER_CONFIGMAP_TEMPLATE="${BERSERKER_CONFIGMAP_TEMPLATE}" \
 --from-literal=BERSERKER_SERVICE_TEMPLATE="${BERSERKER_SERVICE_TEMPLATE}" \
 --from-literal=BERSERKER_CONTAINERS_FILE="${BERSERKER_CONTAINERS_FILE}" \
 --namespace=kube-burner

kubectl create -f "${DIR}"/kube-burner.yaml
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
Set berserker config via url#95

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Open

JoukoVirtanen
wants to merge
16
commits into

base:main
Choose a base branch

from

 Open


Set berserker config via url
#95
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


16 commits


Select commit
Hold shift + click to select a range
a6b13f2

X-Smart-Branch-Parent: main


JoukoVirtanen Aug 19, 2026
6579dab

Setting berserker config paths


JoukoVirtanen May 29, 2026
2645462

Setting berserker url


JoukoVirtanen Jun 3, 2026
372689f

Should used kube-burner config in kube-burner-ocp


JoukoVirtanen Jun 11, 2026
f1d98be

Switched from BERSERKER_DAEMONSET_TEMPLATE to BERSERKER_CONTAINERS_FILE


JoukoVirtanen Jun 12, 2026
421d715

Set lifespan to 6h


JoukoVirtanen Jun 14, 2026
6853b68

Updated kube-burner version to 2.6.2


JoukoVirtanen Jun 14, 2026
206b140

Updated init command for new kube-burner version


JoukoVirtanen Jun 15, 2026
338cf40

Updated index command


JoukoVirtanen Jun 17, 2026
b2df10e

Updated BERSERKER_CONFIGMAP_TEMPLATE


JoukoVirtanen Jul 10, 2026
45b0219

Set additional environment variables in the kube-burner pod


JoukoVirtanen Jul 13, 2026
f9f5cd9

Setting more env vars which have been added to kube-burner-ocp


JoukoVirtanen Jul 14, 2026
69b0bc8

Using --user-data instead of --set


JoukoVirtanen Jul 14, 2026
183cddc

Set POD_READY_THRESHOLD to 0 and CHURN_DURATION to 1000h


JoukoVirtanen Jul 15, 2026
9110015

Churn at the namespace level


JoukoVirtanen Jul 15, 2026
d87b92f

Updated kube-burner-ocp branch


JoukoVirtanen Aug 9, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


21 changes: 19 additions & 2 deletions
.github/workflows/create-demo-clusters.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -31,6 +31,14 @@ on:
 kube-burner-config-repo:
 description: The repository where the kube-burner config files can be found
 type: string
 berserker-config-repo:
 description: The repository where the berserker kube-burner config files can be found
 type: string
 default: JoukoVirtanen/kube-burner-ocp
 berserker-config-ref:
 description: Ref of where the berserker kube-burner config files can be found
 type: string
 default: jv-fix-runOnce
 cluster-with-fake-load-name:
 description: "The name of the long running cluster where the central deployment is run with a sensor that creates its own fake workload. Must comply to the regex: [a-z][a-z0-9-]{1,26}[a-z0-9]"
 type: string
Expand All@@ -46,7 +54,7 @@ env:
 GH_TOKEN: ${{ github.token }}
 GH_NO_UPDATE_NOTIFIER: 1
 TIMEOUT_WAIT_FOR_IMAGES_SECONDS: 3600
 LONG_RUNNING_CLUSTER_LIFESPAN: "168h"
 LONG_RUNNING_CLUSTER_LIFESPAN: "6h"
 METRICS_COLLECTION_TIME: "30m"

jobs:
Expand DownExpand Up@@ -480,6 +488,12 @@ jobs:
 repository: stackrox/${{ inputs.kube-burner-config-repo }}
 path: .kube-burner-config
 ref: ${{ needs.parse-refs.outputs.burner-ref }}
 - name: Check out berserker config repository code
 uses: actions/checkout@v4
 with:
 repository: ${{ inputs.berserker-config-repo }}
 path: .berserker-config
 ref: ${{ inputs.berserker-config-ref }}
 # TODO(ROX-29223): Remove once old versions don't use the benchmark-operator

Comment on lines

+491
 to 
497

@coderabbitaicoderabbitaiBotJul 10, 2026

Copy link


Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win
Checkout missing persist-credentials: false.
Static analysis (zizmor) flags this checkout for credential persistence via GITHUB_TOKEN on disk (artipacked). Since artifacts/workspace can be exposed downstream, consider disabling credential persistence unless it's needed by a later step.
Suggested fix
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
+ persist-credentials: false
📝 Committable suggestion
‼️IMPORTANT

Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
 - name: Check out berserker config repository code
uses: actions/checkout@v4
with:
repository: ${{ inputs.berserker-config-repo }}
path: .berserker-config
ref: ${{ inputs.berserker-config-ref }}
persist-credentials: false
# TODO(ROX-29223): Remove once old versions don't use the benchmark-operator
🧰 Tools
🪛 zizmor (1.26.1)
[warning] 483-489: credential persistence through GitHub Actions artifacts (artipacked): does not set persist-credentials: false
(artipacked)
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.github/workflows/create-demo-clusters.yml around lines 483 - 489, Add
persist-credentials: false to the with block of the actions/checkout@v4 step
checking out the berserker config repository, ensuring the checkout does not
persist GITHUB_TOKEN credentials for downstream steps.

Source: Linters/SAST tools
 - name: Check out cloud-bulldozer/benchmark-operator code
 run: |
Expand DownExpand Up@@ -509,9 +523,12 @@ jobs:
 REGISTRY_USERNAME: ${{ secrets.QUAY_RHACS_ENG_RO_USERNAME }}
 REGISTRY_PASSWORD: ${{ secrets.QUAY_RHACS_ENG_RO_PASSWORD }}
 ELASTICSEARCH_URL: "https://${{ secrets.K6_ELASTICSEARCH_USER }}:${{ secrets.K6_ELASTICSEARCH_PASSWORD }}@${{ secrets.K6_ELASTICSEARCH_URL }}"
 BERSERKER_CONFIGMAP_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/berserker-configmap.yml"
 BERSERKER_SERVICE_TEMPLATE: "https://raw.githubusercontent.com/${{ inputs.berserker-config-repo }}/${{ inputs.berserker-config-ref }}/cmd/config/berserker-load/service.yml"
 BERSERKER_CONTAINERS_FILE: "berserker-default-containers.yml"
 uses: ./.actions/release/start-kube-burner
 with:
 kube-burner-config-dir: ./.kube-burner-config/scripts/release-tools/kube-burner-configs/berserker-load
 kube-burner-config-dir: ./.berserker-config/cmd/config/berserker-load
 benchmark-operator-dir: ${{ github.workspace }}/benchmark-operator

 start-kube-burner-for-central:
Expand Down

89 changes: 85 additions & 4 deletions
release/start-kube-burner/kube-burner.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -15,23 +15,47 @@ spec:
 spec:
 containers:
 - name: kube-burner
 image: quay.io/kube-burner/kube-burner:v1.4.3
 image: quay.io/kube-burner/kube-burner:v2.6.2
 command: ["/bin/sh", "-c"]
 args:
 - |
 get_epoch_time() {
 curl -G --silent http://monitoring.stackrox.svc.cluster.local:9090/api/v1/query --data-urlencode 'query=time()' | sed 's|.*\[||' | sed 's|\..*||'
 }
 cd /etc/kube-burner
 config=config.yml
 config=berserker-load.yml
 metrics_profile=/etc/kube-burner-metrics/metrics.yml
 prometheus_url="http://monitoring.stackrox.svc.cluster.local:9090"
 (kube-burner init --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --timeout=1000h || true) &
 cat > /tmp/vars.yml <<VARSEOF
 GC: $GC
 GC_METRICS: $GC_METRICS
 DELETION_STRATEGY: $DELETION_STRATEGY
 POD_READY_THRESHOLD: $POD_READY_THRESHOLD
 ES_SERVER: "$ES_SERVER"
 ES_INDEX: "$ES_INDEX"
 LOCAL_INDEXING: $LOCAL_INDEXING
 METRICS: $METRICS
 ALERTS: "$ALERTS"
 UUID: $UUID
 JOB_ITERATIONS: $JOB_ITERATIONS
 JOB_PAUSE: $JOB_PAUSE
 QPS: $QPS
 BURST: $BURST
 CHURN_CYCLES: $CHURN_CYCLES
 CHURN_DURATION: $CHURN_DURATION
 CHURN_DELAY: $CHURN_DELAY
 CHURN_PERCENT: $CHURN_PERCENT
 CHURN_MODE: $CHURN_MODE
 MAX_WAIT_TIMEOUT: $MAX_WAIT_TIMEOUT
 DAEMONSET_REPLICAS: $DAEMONSET_REPLICAS
 SERVICE_REPLICAS: $SERVICE_REPLICAS
 VARSEOF
 (kube-burner init --config="$config" --user-data=/tmp/vars.yml --skip-log-file --timeout=1000h || true) &
 while true; do
 start="$(get_epoch_time)"
 sleep "$METRICS_COLLECTION_TIME"
 end="$(get_epoch_time)"
 kube-burner index --config="$config" --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID"
 kube-burner index --metrics-profile="$metrics_profile" --prometheus-url="$prometheus_url" --start "$start" --end "$end" --step "$METRICS_TIME_STEP" --uuid="$UUID" --es-server "$ELASTICSEARCH_URL" --es-index kube-burner-long-running-test
 done
 volumeMounts:
 - name: config
Expand DownExpand Up@@ -60,6 +84,63 @@ spec:
 secretKeyRef:
 name: kube-burner-secret
 key: METRICS_TIME_STEP
 - name: GC
 value: "true"
 - name: GC_METRICS
 value: "false"
 - name: DELETION_STRATEGY
 value: "gvr"
 - name: POD_READY_THRESHOLD
 value: "0"
 - name: ES_SERVER
 value: ""
 - name: ES_INDEX
 value: ""
 - name: LOCAL_INDEXING
 value: "false"
 - name: METRICS
 value: "metrics.yml"
 - name: ALERTS
 value: ""
 - name: JOB_ITERATIONS
 value: "5"
 - name: JOB_PAUSE
 value: "0s"
 - name: QPS
 value: "20"
 - name: BURST
 value: "20"
 - name: CHURN_CYCLES
 value: "0"
 - name: CHURN_DURATION
 value: "1000h"
 - name: CHURN_DELAY
 value: "10m0s"
 - name: CHURN_PERCENT
 value: "80"
 - name: CHURN_MODE
 value: "namespaces"
 - name: MAX_WAIT_TIMEOUT
 value: "12m0s"
 - name: DAEMONSET_REPLICAS
 value: "6"
 - name: SERVICE_REPLICAS
 value: "6"
 - name: BERSERKER_CONFIGMAP_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONFIGMAP_TEMPLATE
 - name: BERSERKER_SERVICE_TEMPLATE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_SERVICE_TEMPLATE
 - name: BERSERKER_CONTAINERS_FILE
 valueFrom:
 secretKeyRef:
 name: kube-burner-secret
 key: BERSERKER_CONTAINERS_FILE
 volumes:
 - name: config
 configMap:
Expand Down

9 changes: 7 additions & 2 deletions
release/start-kube-burner/start-kube-burner.sh

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,8 +20,10 @@ dockerconfigjson="$(kubectl -n stackrox get secret stackrox -o yaml | grep docke
secret_template="${KUBE_BURNER_CONFIG_DIR_BASE}/secret_template.yml"
secret_file="${KUBE_BURNER_CONFIG_DIR}/secret.yml"

gh_log notice "Patching $secret_template"
sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file" 
if [ -f "$secret_template" ]; then
 gh_log notice "Patching $secret_template"
 sed "s|__DOCKERCONFIGJSON__|$dockerconfigjson|" "$secret_template" > "$secret_file"
fi

kubectl create ns kube-burner

Expand All@@ -43,6 +45,9 @@ kubectl create secret generic kube-burner-secret \
 --from-literal=UUID="$uuid" \
 --from-literal=METRICS_COLLECTION_TIME="$METRICS_COLLECTION_TIME" \
 --from-literal=METRICS_TIME_STEP="5m" \
 --from-literal=BERSERKER_CONFIGMAP_TEMPLATE="${BERSERKER_CONFIGMAP_TEMPLATE}" \
 --from-literal=BERSERKER_SERVICE_TEMPLATE="${BERSERKER_SERVICE_TEMPLATE}" \
 --from-literal=BERSERKER_CONTAINERS_FILE="${BERSERKER_CONTAINERS_FILE}" \
 --namespace=kube-burner

kubectl create -f "${DIR}"/kube-burner.yaml
Loading