fix: detected issues

Author: HardMax71

.github/actions/e2e-ready/action.yml

@@ -30,7 +30,12 @@ runs:
       shell: bash
       run: |
         KUEUE_VERSION="${KUEUE_VERSION:-v0.16.1}"
-        kubectl apply --server-side -f "https://github.com/kubernetes-sigs/kueue/releases/download/${KUEUE_VERSION}/manifests.yaml"
+        KUEUE_MANIFEST_SHA256="${KUEUE_MANIFEST_SHA256:-3201a66ff731be440ecfcf3c0fa5979d001b834f68389208fe7ee18017fbcfe8}"
+        KUEUE_MANIFEST="/tmp/kueue-manifests.yaml"
+        curl -fsSL -o "$KUEUE_MANIFEST" "https://github.com/kubernetes-sigs/kueue/releases/download/${KUEUE_VERSION}/manifests.yaml"
+        echo "${KUEUE_MANIFEST_SHA256}  ${KUEUE_MANIFEST}" | sha256sum -c -
+        kubectl apply --server-side -f "$KUEUE_MANIFEST"
+        rm -f "$KUEUE_MANIFEST"
         kubectl wait --for=condition=Available --timeout=120s \
           deployment/kueue-controller-manager -n kueue-system
         kubectl apply --server-side -f - <<'EOF'

.github/workflows/stack-tests.yml

@@ -32,6 +32,7 @@ env:
   K3S_VERSION: v1.32.11+k3s1
   K3S_INSTALL_SHA256: d75e014f2d2ab5d30a318efa5c326f3b0b7596f194afcff90fa7a7a91166d5f7
   KUEUE_VERSION: v0.16.1
+  KUEUE_MANIFEST_SHA256: 3201a66ff731be440ecfcf3c0fa5979d001b834f68389208fe7ee18017fbcfe8
 
 jobs:
   # Fast unit tests (no infrastructure needed)

backend/app/services/pod_monitor/monitor.py

@@ -183,11 +183,9 @@ async def _process_pod_event(self, event: PodEvent) -> None:
             # Map to application events
             app_events = await self._event_mapper.map_pod_event(event.pod, event.event_type)
 
-            # Publish events
             for app_event in app_events:
                 await self._publish_event(app_event, event.pod)
 
-            # Delete pod once all data has been extracted and terminal events published
             if any(e.event_type in _TERMINAL_EVENT_TYPES for e in app_events):
                 await self._delete_pod(event.pod)
 
@@ -207,22 +205,18 @@ async def _process_pod_event(self, event: PodEvent) -> None:
 
     async def _publish_event(self, event: DomainEvent, pod: k8s_client.V1Pod) -> None:
         """Publish event to Kafka and store in events collection."""
-        try:
-            execution_id = getattr(event, "execution_id", None) or event.aggregate_id
-            key = str(execution_id or (pod.metadata.name if pod.metadata else "unknown"))
-
-            await self._kafka_event_service.publish_event(event=event, key=key)
+        execution_id = getattr(event, "execution_id", None) or event.aggregate_id
+        key = str(execution_id or (pod.metadata.name if pod.metadata else "unknown"))
 
-            phase = pod.status.phase if pod.status else "Unknown"
-            self._metrics.record_pod_monitor_event_published(event.event_type, phase)
+        await self._kafka_event_service.publish_event(event=event, key=key)
 
-        except Exception as e:
-            self.logger.error(f"Error publishing event: {e}", exc_info=True)
+        phase = pod.status.phase if pod.status else "Unknown"
+        self._metrics.record_pod_monitor_event_published(event.event_type, phase)
 
     async def _delete_pod(self, pod: k8s_client.V1Pod) -> None:
         """Delete a pod after its data has been fully extracted.
 
-        Frees the ResourceQuota slot so new executor pods can be scheduled.
+        Frees the Kueue quota slot so gated executor pods can be admitted.
         The ConfigMap is garbage-collected automatically via ownerReference.
         """
         pod_name = pod.metadata.name

backend/tests/unit/services/pod_monitor/test_monitor.py

@@ -403,5 +403,6 @@ async def produce(
     pod = make_pod(name="no-meta-pod", phase="Pending")
     pod.metadata = None  # type: ignore[assignment]
 
-    # Should not raise - errors are caught and logged
-    await pm._publish_event(event, pod)
+    # Exception propagates — _process_pod_event's broad except handles it
+    with pytest.raises(RuntimeError, match="Publish failed"):
+        await pm._publish_event(event, pod)

cert-generator/setup-k8s.sh

@@ -91,8 +91,13 @@ kubectl create namespace integr8scode --dry-run=client -o yaml | kubectl apply -
 
 # Install Kueue (scheduling-gate based quota management)
 KUEUE_VERSION="${KUEUE_VERSION:-v0.16.1}"
+KUEUE_MANIFEST_SHA256="${KUEUE_MANIFEST_SHA256:-3201a66ff731be440ecfcf3c0fa5979d001b834f68389208fe7ee18017fbcfe8}"
 echo "Installing Kueue ${KUEUE_VERSION}..."
-kubectl apply --server-side -f "https://github.com/kubernetes-sigs/kueue/releases/download/${KUEUE_VERSION}/manifests.yaml"
+KUEUE_MANIFEST="/tmp/kueue-manifests.yaml"
+curl -fsSL -o "$KUEUE_MANIFEST" "https://github.com/kubernetes-sigs/kueue/releases/download/${KUEUE_VERSION}/manifests.yaml"
+echo "${KUEUE_MANIFEST_SHA256}  ${KUEUE_MANIFEST}" | sha256sum -c -
+kubectl apply --server-side -f "$KUEUE_MANIFEST"
+rm -f "$KUEUE_MANIFEST"
 kubectl wait --for=condition=Available --timeout=120s \
   deployment/kueue-controller-manager -n kueue-system