feat: add case-insensitive-condition-tracking feature gate

Custom resources whose readiness lives in status.conditions were never
tracked by the heuristic, because kubedog built its universal condition
rules from lowercase type names while real resources use CamelCase. Fixing
that makes previously instantly-ready resources start blocking, so it is
opt-in: NELM_FEAT_CASE_INSENSITIVE_CONDITION_TRACKING=true forwards the
option to the readiness tracker, and the gate defaults to off.

The CloudNativePG Cluster fix that prompted this is deliberately not behind
the gate — it is an exact rule in kubedog and applies unconditionally.

Signed-off-by: Ilya Lesikov <ilya@lesikov.com>

Author: ilya-lesikov

docs/reference.md

@@ -57,6 +57,7 @@
   - [NELM_FEAT_RESOURCE_VALIDATION](#nelm_feat_resource_validation)
   - [NELM_FEAT_TYPESCRIPT](#nelm_feat_typescript)
   - [NELM_FEAT_ADOPT_DECKHOUSE_CONTROLLER_FIELDS](#nelm_feat_adopt_deckhouse_controller_fields)
+  - [NELM_FEAT_CASE_INSENSITIVE_CONDITION_TRACKING](#nelm_feat_case_insensitive_condition_tracking)
 
 <!-- END doctoc generated TOC please keep comment here to allow auto update -->
 
@@ -4172,3 +4173,9 @@ Enable TypeScript chart rendering from ts/ directory
 
 Adopt managed fields owned by the legacy "deckhouse\-controller" field manager \(the pre\-nelm Helm 3 engine\)\. Unsafe if any resource still has hook\-owned "deckhouse\-controller" entries
 
+### NELM_FEAT_CASE_INSENSITIVE_CONDITION_TRACKING
+
+**Default:** `false`
+
+Match custom resource status condition types case\-insensitively when detecting readiness \(e\.g\. "Ready" in addition to "ready"\)
+

go.mod

@@ -58,7 +58,7 @@ require (
 	github.com/tidwall/sjson v1.2.5
 	github.com/wI2L/jsondiff v0.5.0
 	github.com/werf/common-go v0.0.0-20251113140850-a1a98e909e9b
-	github.com/werf/kubedog v0.13.1-0.20260616105957-2c00b08fb99e
+	github.com/werf/kubedog v0.13.1-0.20260807102355-7594d35e19d0
 	github.com/werf/lockgate v0.1.1
 	github.com/werf/logboek v0.6.1
 	github.com/xeipuuv/gojsonschema v1.2.0

go.sum

@@ -435,8 +435,8 @@ github.com/wI2L/jsondiff v0.5.0 h1:RRMTi/mH+R2aXcPe1VYyvGINJqQfC3R+KSEakuU1Ikw=
 github.com/wI2L/jsondiff v0.5.0/go.mod h1:qqG6hnK0Lsrz2BpIVCxWiK9ItsBCpIZQiv0izJjOZ9s=
 github.com/werf/common-go v0.0.0-20251113140850-a1a98e909e9b h1:58850oFrnw5Jy5YaB8QifXz75qpGotfx6qqZ9Q2my1A=
 github.com/werf/common-go v0.0.0-20251113140850-a1a98e909e9b/go.mod h1:MXS0JR9zut+oR9oEM8PEkdXXoEbKDILTmWopt0z1eZs=
-github.com/werf/kubedog v0.13.1-0.20260616105957-2c00b08fb99e h1:0GnrtMMti+Qywd4bs4tHtchBS61EzS6t1NYqMPql5dE=
-github.com/werf/kubedog v0.13.1-0.20260616105957-2c00b08fb99e/go.mod h1:gu4EY4hxtiYVDy5o6WE2lRZS0YWqrOV0HS//GTYyrUE=
+github.com/werf/kubedog v0.13.1-0.20260807102355-7594d35e19d0 h1:RdMaIksB+mPKVEq5zYPA9M5Vd0HwzX67My4CboPAXfE=
+github.com/werf/kubedog v0.13.1-0.20260807102355-7594d35e19d0/go.mod h1:gu4EY4hxtiYVDy5o6WE2lRZS0YWqrOV0HS//GTYyrUE=
 github.com/werf/lockgate v0.1.1 h1:S400JFYjtWfE4i4LY9FA8zx0fMdfui9DPrBiTciCrx4=
 github.com/werf/lockgate v0.1.1/go.mod h1:0yIFSLq9ausy6ejNxF5uUBf/Ib6daMAfXuCaTMZJzIE=
 github.com/werf/logboek v0.6.1 h1:oEe6FkmlKg0z0n80oZjLplj6sXcBeLleCkjfOOZEL2g=

pkg/featgate/feat.go

@@ -57,6 +57,10 @@ var (
 		"adopt-deckhouse-controller-fields",
 		`Adopt managed fields owned by the legacy "deckhouse-controller" field manager (the pre-nelm Helm 3 engine). Unsafe if any resource still has hook-owned "deckhouse-controller" entries`,
 	)
+	FeatGateCaseInsensitiveConditionTracking = NewFeatGate(
+		"case-insensitive-condition-tracking",
+		`Match custom resource status condition types case-insensitively when detecting readiness (e.g. "Ready" in addition to "ready")`,
+	)
 )
 
 // A feature gate, which enabled/disables a specific feature. Can be toggled via an env var or

pkg/featgate/feat_ai_test.go

@@ -0,0 +1,36 @@
+//go:build ai_tests
+
+package featgate
+
+import (
+	"testing"
+
+	"github.com/samber/lo"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func TestAI_CaseInsensitiveConditionTracking_EnvVarName(t *testing.T) {
+	assert.Equal(t, "NELM_FEAT_CASE_INSENSITIVE_CONDITION_TRACKING", FeatGateCaseInsensitiveConditionTracking.EnvVarName())
+	assert.Equal(t, "case-insensitive-condition-tracking", FeatGateCaseInsensitiveConditionTracking.Name)
+}
+
+func TestAI_CaseInsensitiveConditionTracking_OnlyTrueEnables(t *testing.T) {
+	assert.False(t, FeatGateCaseInsensitiveConditionTracking.Default())
+
+	for _, value := range []string{"", "1", "yes", "TRUE", "True", "false"} {
+		t.Setenv(FeatGateCaseInsensitiveConditionTracking.EnvVarName(), value)
+		assert.False(t, FeatGateCaseInsensitiveConditionTracking.Enabled(), "value %q must not enable the gate", value)
+	}
+
+	t.Setenv(FeatGateCaseInsensitiveConditionTracking.EnvVarName(), "true")
+	assert.True(t, FeatGateCaseInsensitiveConditionTracking.Enabled())
+}
+
+func TestAI_CaseInsensitiveConditionTracking_Registered(t *testing.T) {
+	_, found := lo.Find(FeatGates, func(fg *FeatGate) bool {
+		return fg == FeatGateCaseInsensitiveConditionTracking
+	})
+
+	require.True(t, found, "gate must be registered in FeatGates so CLI usage and reference docs pick it up")
+}

pkg/plan/plan_execute.go

@@ -15,6 +15,7 @@ import (
 	"github.com/werf/kubedog/pkg/trackers/dyntracker/statestore"
 	kdutil "github.com/werf/kubedog/pkg/trackers/dyntracker/util"
 	"github.com/werf/nelm/pkg/common"
+	"github.com/werf/nelm/pkg/featgate"
 	"github.com/werf/nelm/pkg/kube"
 	"github.com/werf/nelm/pkg/log"
 	"github.com/werf/nelm/pkg/release"
@@ -273,6 +274,7 @@ func execOpTrackReadiness(ctx context.Context, op *Operation, releaseNamespace s
 		Timeout:                                  timeout,
 		NoActivityTimeout:                        opConfig.NoActivityTimeout,
 		IgnoreReadinessProbeFailsByContainerName: opConfig.IgnoreReadinessProbeFailsByContainerName,
+		CaseInsensitiveConditionTracking:         featgate.FeatGateCaseInsensitiveConditionTracking.Enabled(),
 		SaveLogsOnlyForNumberOfReplicas:          opConfig.SaveLogsOnlyForNumberOfReplicas,
 		SaveLogsOnlyForContainers:                opConfig.SaveLogsOnlyForContainers,
 		SaveLogsByRegex:                          opConfig.SaveLogsByRegex,