probe: cyberchef only

Second defect in the same check, and the more serious one: kubectl get
nodes exits 0 on an EMPTY list. The cluster on Gitea answered while its
node had not registered, the step logged 'No resources found' and went
green, and the failure surfaced five minutes later as a pod stuck in
Pending with no node and no scheduling event - the cause nowhere near
the symptom. kubectl wait --for=condition=Ready nodes --all has the
same hole; with zero nodes it succeeds vacuously. It now counts Ready
nodes, and on timeout dumps the node conditions and the k3s server log
so the error picture is in the job that caused it.

.github/workflows/validate-charts.yml

@@ -462,16 +462,30 @@ jobs:
           # it produces exactly the sporadic red this job must not have. The
           # loop asks for the node list, which is the thing that has to work
           # and exercises discovery on the way.
-          for ATTEMPT in $(seq 1 60); do
+          # It waits for a READY NODE, not for the API server to answer. The
-            kubectl get nodes >/dev/null 2>&1 && break
+          # difference is not pedantry, it is the second bug this check had:
-            if [ "$ATTEMPT" -eq 60 ]; then
+          # `kubectl get nodes` exits 0 on an EMPTY list, so the first version
-              echo "::error::the k3d cluster '$CLUSTER' was created but never became reachable"
+          # passed against a cluster whose server was up and whose node had
-              kubectl get nodes || true
+          # not registered - the log said "No resources found" and the step
+          # went green, and the failure surfaced five minutes later as a pod
+          # stuck in Pending with no node and no scheduling event. A check
+          # that a broken cluster passes is worse than none. `kubectl wait
+          # --for=condition=Ready nodes --all` has the same hole: with zero
+          # nodes it succeeds vacuously.
+          for ATTEMPT in $(seq 1 90); do
+            READY_NODES="$(kubectl get nodes --no-headers 2>/dev/null | awk '$2 == "Ready"' | wc -l | tr -d ' ')"
+            [ "$READY_NODES" -ge 1 ] && break
+            if [ "$ATTEMPT" -eq 90 ]; then
+              echo "::error::the k3d cluster '$CLUSTER' answers but has no Ready node after 180s"
+              kubectl get nodes -o wide || true
+              kubectl describe nodes || true
+              echo "--- k3s server log ---"
+              docker logs "k3d-$CLUSTER-server-0" 2>&1 | tail -80 || true
               exit 1
             fi
             sleep 2
           done
-          kubectl get nodes
+          kubectl get nodes -o wide
       # Every chart reaching this step is one the exclusion filter let through,
       # so the script's SKIP branch is never taken here - it exists for local
       # runs. The variables below are empty for every chart but the one that

cyberchef/Chart.yaml

@@ -5,7 +5,7 @@ icon: https://raw.githubusercontent.com/gchq/CyberChef/master/src/web/static/ima
 
 type: application
 
-version: 9.0.1+up11.4.0
+version: 9.0.2+up11.4.0
 appVersion: "11.4.0"
 
 maintainers: