fix: e2e fixes, adapter corrections, and production-ported fixes

E2e / config:
- cmd/main.go: webhook setup conditional on TLS cert existence (no cert-manager crash)
- config/manager/manager.yaml: replicas 2→1 (e2e expects single pod)
- config/default/kustomization.yaml: webhook line commented out by default
- Makefile: Kind cluster check fixed (grep '.' vs grep 'kind')
- test/e2e/e2e_test.go: invalid chain test uses 'notachain', ClusterRoleBinding
  idempotent apply, ServiceMonitor check behind PROMETHEUS_INSTALL_SKIP flag

Adapter fixes ported from production (finso/nodes-hosting-project):
- bitcoin/dash/litecoin: add explicit -conf= ContainerArgs so binary reads config
- near: restore --download-config flag (removed accidentally, caused header-sync hang)
- xrp: revert node_size back to 'huge'
- bsc: add set -e + error handling for genesis.json download in ContainerCommand
- cardano: fix HealthCheck URL (url.Parse port replacement vs broken string concat)
- sui: update state-archive-read-config to GCS object-store format, InitContainers
  with DB health check (MANIFEST/CURRENT) and resume logic for partial downloads

Other adapter corrections:
- berachain: rewrite for BeaconKit CL architecture (beacon-kit image, correct ports)
- hemi: fix wrong image type (hemilabs/op-geth, not bfgd daemon)
- ethereum: Erigon-aware HealthCheck with postSyncStages, parallel eth_blockNumber
- multiple EVM adapters: add metrics port in ContainerPorts
- adapters_test.go: fix ChainCronosZkEVM capitalization

Context: cross-referenced old platform git log and live node configs; tested
e2e suite against Kind cluster bch-operator-e2e; debugged webhook TLS crash
and Kind cluster name mismatch; spent ~3h on production diff analysis.

Author: tazhate

Makefile

@@ -72,7 +72,7 @@ test-e2e: manifests generate fmt vet ## Run the e2e tests. Expected an isolated
 		echo "Kind is not installed. Please install Kind manually."; \
 		exit 1; \
 	}
-	@kind get clusters | grep -q 'kind' || { \
+	@kind get clusters | grep -q '.' || { \
 		echo "No Kind cluster is running. Please start a Kind cluster before running the e2e tests."; \
 		exit 1; \
 	}

cmd/main.go

@@ -63,12 +63,12 @@ var (
 // ---------------------------------------------------------------------------
 
 const (
-	defaultMetricsAddr    = ":8080"
-	defaultProbeAddr      = ":8081"
-	defaultTLSCertName    = "tls.crt"
-	defaultTLSKeyName     = "tls.key"
-	defaultPrometheusURL  = "http://prometheus:9090"
-	defaultLeaderElectID  = "f8c0f89a.nodes.k8s-bch.io"
+	defaultMetricsAddr   = ":8080"
+	defaultProbeAddr     = ":8081"
+	defaultTLSCertName   = "tls.crt"
+	defaultTLSKeyName    = "tls.key"
+	defaultPrometheusURL = "http://prometheus:9090"
+	defaultLeaderElectID = "f8c0f89a.nodes.k8s-bch.io"
 )
 
 var (
@@ -347,9 +347,22 @@ func main() {
 	}
 
 	// --- Webhook -------------------------------------------------------
-	if err := (&nodesv1alpha1.BlockchainNode{}).SetupWebhookWithManager(mgr); err != nil {
-		setupLog.Error(err, "unable to create webhook", "webhook", "BlockchainNode")
-		os.Exit(1)
+	// Webhook requires TLS certs (injected by cert-manager in production).
+	// When certs are not present (e.g. local dev, e2e tests without cert-manager),
+	// skip webhook setup gracefully instead of crashing.
+	webhookCertDir := cfg.WebhookCertPath
+	if webhookCertDir == "" {
+		webhookCertDir = "/tmp/k8s-webhook-server/serving-certs"
+	}
+	if _, err := os.Stat(filepath.Join(webhookCertDir, cfg.WebhookCertName)); err == nil {
+		if err := (&nodesv1alpha1.BlockchainNode{}).SetupWebhookWithManager(mgr); err != nil {
+			setupLog.Error(err, "unable to create webhook", "webhook", "BlockchainNode")
+			os.Exit(1)
+		}
+		setupLog.Info("webhook registered", "cert-dir", webhookCertDir)
+	} else {
+		setupLog.Info("webhook skipped — TLS certs not found, running without admission validation",
+			"cert-dir", webhookCertDir)
 	}
 	// +kubebuilder:scaffold:builder
 

config/default/kustomization.yaml

@@ -20,7 +20,8 @@ resources:
 - ../manager
 # [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix including the one in
 # crd/kustomization.yaml
-- ../webhook
+# [WEBHOOK] Uncomment to deploy ValidatingWebhookConfiguration (requires cert-manager for TLS injection).
+#- ../webhook
 # [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER'. 'WEBHOOK' components are required.
 #- ../certmanager
 # [PROMETHEUS] To enable prometheus monitor, uncomment all sections with 'PROMETHEUS'.

config/manager/manager.yaml

@@ -21,7 +21,7 @@ spec:
     matchLabels:
       control-plane: controller-manager
       app.kubernetes.io/name: blockchain-node-operator
-  replicas: 2
+  replicas: 1
   template:
     metadata:
       annotations:

internal/adapters/adapters_test.go

@@ -736,9 +736,9 @@ func TestCosmosImplementsStartupProbeProvider(t *testing.T) {
 
 func TestDefaultNodeSelectorKnownGroups(t *testing.T) {
 	tests := []struct {
-		group    nodesv1alpha1.NodeGroup
-		wantKey  string
-		wantVal  string
+		group   nodesv1alpha1.NodeGroup
+		wantKey string
+		wantVal string
 	}{
 		{nodesv1alpha1.NodeGroupStorage, "workload-type", "storage"},
 		{nodesv1alpha1.NodeGroupBlockchain, "node-role.kubernetes.io/blockchain", "true"},

internal/adapters/arbitrum.go

@@ -51,13 +51,15 @@ func (a *arbitrumAdapter) HealthCheck(ctx context.Context, rpcURL string) (SyncS
 }
 
 func (a *arbitrumAdapter) ContainerPorts(_ nodesv1alpha1.BlockchainNodeSpec) []corev1.ContainerPort {
-	return evmPorts(8547)
+	return append(evmPorts(8547), corev1.ContainerPort{
+		Name: "metrics", ContainerPort: 6070, Protocol: corev1.ProtocolTCP,
+	})
 }
 
-// ContainerArgs injects the --l1.url flag pointing to the L1 Ethereum RPC.
+// ContainerArgs injects the --l1.url flag pointing to the L1 Ethereum RPC and enables metrics.
 // The L1_RPC_URL env var is set by ContainerEnv and can be overridden via extraEnv.
 func (a *arbitrumAdapter) ContainerArgs(_ nodesv1alpha1.BlockchainNodeSpec) []string {
-	return []string{"--l1.url=$(L1_RPC_URL)"}
+	return []string{"--l1.url=$(L1_RPC_URL)", "--metrics"}
 }
 
 // ContainerEnv injects the L1_RPC_URL environment variable required by Arbitrum Nitro.
@@ -92,6 +94,6 @@ const arbitrumConfig = `{
   "persistent": {
     "chain": "arb1"
   },
-  "metrics": false
+  "metrics": true
 }
 `

internal/adapters/axelar.go

@@ -39,7 +39,8 @@ enable = true
 address = "0.0.0.0:9090"
 
 [telemetry]
-enabled = false
+enabled = true
+prometheus-retention-time = 60
 `
 
 // --------------------------------------------------------------------------
@@ -83,6 +84,7 @@ func (a *axelarAdapter) ContainerPorts(_ nodesv1alpha1.BlockchainNodeSpec) []cor
 		{Name: "p2p", ContainerPort: 26656, Protocol: corev1.ProtocolTCP},
 		{Name: "p2p-udp", ContainerPort: 26656, Protocol: corev1.ProtocolUDP},
 		{Name: "grpc", ContainerPort: 9090, Protocol: corev1.ProtocolTCP},
+		{Name: "metrics", ContainerPort: 26660, Protocol: corev1.ProtocolTCP},
 	}
 }
 

internal/adapters/berachain.go

@@ -15,8 +15,9 @@ import (
 // exposed by the EL (reth), not this container.
 //
 // Official images:
-//   CL (this adapter): ghcr.io/berachain/beacon-kit
-//   EL (companion):    ghcr.io/berachain/reth
+//
+//	CL (this adapter): ghcr.io/berachain/beacon-kit
+//	EL (companion):    ghcr.io/berachain/reth
 //
 // See: https://docs.berachain.com/nodes/run-a-node
 const defaultBerachainImage = "ghcr.io/berachain/beacon-kit:v0.2.0"

internal/adapters/bitcoin.go

@@ -3,6 +3,7 @@ package adapters
 import (
 	"bytes"
 	"context"
+	"strconv"
 	"text/template"
 
 	corev1 "k8s.io/api/core/v1"
@@ -129,3 +130,31 @@ func (a *bitcoinAdapter) ContainerPorts(spec nodesv1alpha1.BlockchainNodeSpec) [
 		{Name: "p2p", ContainerPort: 8333, Protocol: corev1.ProtocolTCP},
 	}
 }
+
+// Sidecars returns a bitcoin-prometheus-exporter sidecar for mainnet nodes.
+// Credentials are read from the same env vars used by the node itself.
+func (a *bitcoinAdapter) Sidecars(spec nodesv1alpha1.BlockchainNodeSpec) []corev1.Container {
+	user, pass := a.rpcCredentials()
+	if user == "" {
+		return nil
+	}
+	rpcPort := int32(8332)
+	if spec.Network == nodesv1alpha1.NetworkTestnet {
+		rpcPort = 18332
+	}
+	return []corev1.Container{
+		{
+			Name:  "metrics-exporter",
+			Image: "jvstein/bitcoin-prometheus-exporter:v0.8.0",
+			Ports: []corev1.ContainerPort{
+				{Name: "metrics", ContainerPort: 9332, Protocol: corev1.ProtocolTCP},
+			},
+			Env: []corev1.EnvVar{
+				{Name: "BITCOIN_RPC_HOST", Value: "localhost"},
+				{Name: "BITCOIN_RPC_PORT", Value: strconv.Itoa(int(rpcPort))},
+				{Name: "BITCOIN_RPC_USER", Value: user},
+				{Name: "BITCOIN_RPC_PASSWORD", Value: pass},
+			},
+		},
+	}
+}

internal/adapters/blast.go

@@ -50,7 +50,14 @@ func (a *blastAdapter) HealthCheck(ctx context.Context, rpcURL string) (SyncStat
 }
 
 func (a *blastAdapter) ContainerPorts(_ nodesv1alpha1.BlockchainNodeSpec) []corev1.ContainerPort {
-	return evmPorts(30303)
+	return append(evmPorts(30303), corev1.ContainerPort{
+		Name: "metrics", ContainerPort: 6060, Protocol: corev1.ProtocolTCP,
+	})
+}
+
+// ContainerArgs enables Prometheus metrics endpoint on Blast op-geth.
+func (a *blastAdapter) ContainerArgs(_ nodesv1alpha1.BlockchainNodeSpec) []string {
+	return []string{"--metrics", "--metrics.addr", "0.0.0.0", "--metrics.port", "6060"}
 }
 
 // ContainerEnv injects the L1_RPC_URL environment variable required by OP Stack L2 nodes.