You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
trusted-execution-clusters: Bump to OCP 5.0 - #88288
Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all
No actionable comments were generated in the recent review.
Walkthrough
The default and Azure operator CI configurations now use updated build-root images. The Azure configuration also updates its CLI image stream and release candidate version. Its integration test has a longer timeout and uses more threads.
Changes
Operator CI configuration
Layer / File(s)
Summary
Update CI image and release versions ci-operator/config/trusted-execution-clusters/operator/trusted-execution-clusters-operator-main.yaml, ci-operator/config/trusted-execution-clusters/operator/trusted-execution-clusters-operator-main__azure.yaml
Both configurations use the rhel-9-golang-1.26-openshift-5.0 build-root image. The Azure configuration updates its CLI image stream and release candidate version from 4.22 to 5.0.
Update Azure integration test settings ci-operator/config/trusted-execution-clusters/operator/trusted-execution-clusters-operator-main__azure.yaml, ci-operator/step-registry/trusted-execution-clusters/ref/azure-integration-test/trusted-execution-clusters-ref-azure-integration-test-commands.sh
The Azure integration-test step adds a 3h0m0s timeout. The test command increases INTEGRATION_TEST_THREADS from 2 to 3.
The configuration moves CI to OpenShift 5.0 and allows longer, more parallel Azure tests. No merge-blocking risk is established; normal CI validation remains appropriate.
Pre-merge checks: 15
Check name
Status
Explanation
Description Check
Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage
No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check
Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check
Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names
The pull request changes CI image versions, release metadata, timeout, and INTEGRATION_TEST_THREADS; it does not add or modify any Ginkgo test title. The authoritative diff contains no changes to `I…
Test Structure And Quality
No Ginkgo test code was added or modified. The PR changes CI image and release settings, adds a 3-hour job timeout, and changes INTEGRATION_TEST_THREADS from 2 to 3. No new It, Eventually, Consistentl…
Microshift Test Compatibility
PASS: The pull request adds no Ginkgo e2e tests. The reviewed diff changes CI image versions, release metadata, timeout, presubmit labels, and integration-test thread count only. Therefore, the MicroS…
Single Node Openshift (Sno) Test Compatibility
The pull request adds no Ginkgo e2e tests. The authoritative diff changes only CI configuration, a generated Prow job definition, and an integration-test shell command. Therefore, no new test can intr…
Topology-Aware Scheduling Compatibility
PASS: The pull request changes only CI configuration, a generated presubmit job release label, and integration-test settings. The diff adds no deployment manifest, operator/controller code, replica lo…
Ote Binary Stdout Contract
The pull request changes only CI configuration, generated job metadata, a timeout, and INTEGRATION_TEST_THREADS. It does not modify OTE binary process-level code or add stdout writes in main(), init()…
Ipv6 And Disconnected Network Test Compatibility
PASS. The PR adds no Ginkgo e2e tests and introduces no new IPv4 assumptions or external connectivity. The changed files update CI image versions, timeout, job metadata, and integration-test paralleli…
No-Weak-Crypto
The pull request changes only CI configuration and test execution: image/release versions, job labels, a 3-hour timeout, and integration-test threads. The added lines contain no MD5, SHA1, DES, RC4, 3…
Container-Privileges
PASS. The pull request changes image tags, release labels, test timeout, and integration-test thread count. The four changed files contain no privileged: true, hostPID, hostNetwork, hostIPC, `…
No-Sensitive-Data-In-Logs
The pull request adds no logging statements or log formatting. The changed lines only update image and release versions, set a 3-hour timeout, increase integration-test threads, and update generated j…
Title check
The title clearly and concisely describes the primary change: upgrading trusted-execution-clusters to OpenShift 5.0.
Full details: Docstring Coverage
Explanation
No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 1 files. (1 skipped: 1 unsupported.)
Full details: Stable And Deterministic Test Names
Explanation
The pull request changes CI image versions, release metadata, timeout, and INTEGRATION_TEST_THREADS; it does not add or modify any Ginkgo test title. The authoritative diff contains no changes to It(), Describe(), Context(), When(), or legacy metadata test-name tokens. Therefore, this check has no pull-request-caused naming violation.
Full details: Test Structure And Quality
Explanation
No Ginkgo test code was added or modified. The PR changes CI image and release settings, adds a 3-hour job timeout, and changes INTEGRATION_TEST_THREADS from 2 to 3. No new It, Eventually, Consistently, assertion, setup, or cleanup code is present, so none of the stated test-quality failure conditions are introduced.
Full details: Microshift Test Compatibility
Explanation
PASS: The pull request adds no Ginkgo e2e tests. The reviewed diff changes CI image versions, release metadata, timeout, presubmit labels, and integration-test thread count only. Therefore, the MicroShift test compatibility conditions do not apply.
Full details: Single Node Openshift (Sno) Test Compatibility
Explanation
The pull request adds no Ginkgo e2e tests. The authoritative diff changes only CI configuration, a generated Prow job definition, and an integration-test shell command. Therefore, no new test can introduce an SNO multi-node assumption.
Full details: Topology-Aware Scheduling Compatibility
Explanation
PASS: The pull request changes only CI configuration, a generated presubmit job release label, and integration-test settings. The diff adds no deployment manifest, operator/controller code, replica logic, affinity, topology spread, node selectors, tolerations, or PDBs. Therefore it introduces no topology-sensitive scheduling constraint.
Full details: Ote Binary Stdout Contract
Explanation
The pull request changes only CI configuration, generated job metadata, a timeout, and INTEGRATION_TEST_THREADS. It does not modify OTE binary process-level code or add stdout writes in main(), init(), TestMain(), suite setup, or top-level initializers.
Full details: Ipv6 And Disconnected Network Test Compatibility
Explanation
PASS. The PR adds no Ginkgo e2e tests and introduces no new IPv4 assumptions or external connectivity. The changed files update CI image versions, timeout, job metadata, and integration-test parallelism. Existing external downloads in the integration script are unchanged.
Full details: No-Weak-Crypto
Explanation
The pull request changes only CI configuration and test execution: image/release versions, job labels, a 3-hour timeout, and integration-test threads. The added lines contain no MD5, SHA1, DES, RC4, 3DES, Blowfish, ECB, custom cryptography, or secret/token comparisons.
Full details: Container-Privileges
Explanation
PASS. The pull request changes image tags, release labels, test timeout, and integration-test thread count. The four changed files contain no privileged: true, hostPID, hostNetwork, hostIPC, SYS_ADMIN, allowPrivilegeEscalation, or root security-context declarations.
Full details: No-Sensitive-Data-In-Logs
Explanation
The pull request adds no logging statements or log formatting. The changed lines only update image and release versions, set a 3-hour timeout, increase integration-test threads, and update generated job labels. No added line contains password, token, API key, PII, session ID, hostname, or customer-data handling.
Finishing Touches
Generate unit tests (beta)
Create a new PR
Tip
🎯 Customize your risk assessments
Guide how CodeRabbit assesses merge risk and security architecture risk. Highlight sensitive changes and explain your security boundaries using Merge Risk Instructions and Security Risk Instructions in your review settings. Security architecture risk assessments require the Advanced plan or above.
✅ Automatic approvals, with your rules
Let CodeRabbit approve pull requests once required threads are resolved, pre-merge checks pass, and your risk limits are met. Enable Automatic approvals in review settings, with overrides for teams or file paths.
Included review availability: This review used your included allowance. Your plan provides up to 2 included reviews per hour; 1 remain after this review.
openshift-ciBot
added
the
approved
Indicates a PR has been approved by an approver from all required OWNERS files.
label
Nov 4, 2026
[REHEARSALNOTIFIER] @Jakob-Naucke: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:
Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author
Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
approvedIndicates a PR has been approved by an approver from all required OWNERS files.do-not-merge/work-in-progressIndicates that a PR should not merge because it is a work in progress.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
openshift-ci
Bot
added
the
do-not-merge/work-in-progress
Jakob-Naucke
changed the title
and golang 1.26
Summary by CodeRabbit