fix(fingerprint): detect OKE service from raw OCID providerID

OKE nodes set spec.providerID to a bare OCID ("ocid1.instance.oc1...")
with no scheme prefix, so the existing "oci://" split never matched and
the raw OCID leaked into the service fingerprint.

Fix in two layers:
- pkg/collector/k8s: parseProvider checks strings.HasPrefix("ocid1.")
  before the "://" split; removes the unreachable "oci" case.
- pkg/fingerprint: normalizeProviderID applied at read time so snapshots
  produced by older agent images are also corrected.

Signed-off-by: Atif Mahmood <amahmood@nvidia.com>
Signed-off-by: Atif Mahmood <atif1996@users.noreply.github.com>

Author: atif1996

pkg/collector/k8s/node.go

@@ -92,7 +92,7 @@ func (k *Collector) collectNode(ctx context.Context) (map[string]measurement.Rea
 //   - aws:///us-west-2a/i-0123456789abcdef0 → "eks"
 //   - gce://my-project/us-central1-a/gke-cluster-node → "gke"
 //   - azure:///subscriptions/.../virtualMachines/... → "aks"
-//   - oci://... → "oke"
+//   - ocid1.instance.oc1... → "oke" (OKE emits a raw OCID, no scheme prefix)
 //
 // If the format is unrecognized, it returns the raw provider prefix.
 func parseProvider(providerID string) string {
@@ -101,6 +101,11 @@ func parseProvider(providerID string) string {
 		return ""
 	}
 
+	// OKE nodes set providerID to a raw Oracle OCID (no "://" scheme).
+	if strings.HasPrefix(providerID, "ocid1.") {
+		return "oke"
+	}
+
 	// Split by "://" to get the provider prefix
 	parts := strings.SplitN(providerID, "://", 2)
 
@@ -114,8 +119,6 @@ func parseProvider(providerID string) string {
 		return "gke"
 	case "azure":
 		return "aks"
-	case "oci":
-		return "oke"
 	default:
 		return provider
 	}

pkg/collector/k8s/node_test.go

@@ -209,8 +209,13 @@ func TestParseProvider(t *testing.T) {
 			want:       "aks",
 		},
 		{
-			name:       "OCI OKE",
-			providerID: "oci://ocid1.instance.oc1.phx.abcdef123456",
+			name:       "OKE raw OCID (actual format)",
+			providerID: "ocid1.instance.oc1.us-chicago-1.anxxeljsaqwjupqcb4pa5kzxy4hef5dtclbkqsnmu6kedbkrne3s2bz5nwzq",
+			want:       "oke",
+		},
+		{
+			name:       "OKE raw OCID short",
+			providerID: "ocid1.instance.oc1.phx.abcdef123456",
 			want:       "oke",
 		},
 		{

pkg/fingerprint/from_measurements.go

@@ -223,7 +223,7 @@ func populateFromK8s(fp *Fingerprint, m *measurement.Measurement) {
 	}
 	if st := m.GetSubtype(subtypeK8sNode); st != nil {
 		if v, err := st.GetString(keyK8sNodeProvider); err == nil && v != "" {
-			fp.Service = Dimension{Value: v, Source: sourceServiceProvider}
+			fp.Service = Dimension{Value: normalizeProviderID(v), Source: sourceServiceProvider}
 		}
 	}
 }
@@ -320,6 +320,18 @@ func extractRegion(m *measurement.Measurement) (region string, multi bool) {
 	return value, false
 }
 
+// normalizeProviderID maps a raw Kubernetes spec.providerID (or an already-
+// normalized name stored by the collector) to the service type string used in
+// recipe criteria. OKE nodes emit a bare OCID ("ocid1.instance.oc1...") with
+// no scheme prefix; other providers use "<scheme>://..." which the collector
+// already normalizes, but we handle both here for resilience.
+func normalizeProviderID(v string) string {
+	if strings.HasPrefix(v, "ocid1.") {
+		return "oke"
+	}
+	return v
+}
+
 // normalizeOSID maps an /etc/os-release ID value to the
 // recipe.CriteriaOSType enum. Returns "" for IDs that do not match a
 // supported OS kind so callers treat them as "fingerprint did not