Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -70,6 +70,7 @@ tests:
IMAGE_REPO: odh-dashboard
workflow: opendatahub-io-ci-image-mirror
- as: odh-mod-arch-model-registry-pr-image-mirror
run_if_changed: ^packages/model-registry/
steps:
dependencies:
SOURCE_IMAGE_REF: odh-mod-arch-model-registry-image
Expand All @@ -86,6 +87,7 @@ tests:
RELEASE_VERSION: main
workflow: opendatahub-io-ci-image-mirror
- as: odh-mod-arch-gen-ai-pr-image-mirror
run_if_changed: ^packages/gen-ai/
steps:
dependencies:
SOURCE_IMAGE_REF: odh-mod-arch-gen-ai-image
Expand All @@ -102,6 +104,7 @@ tests:
RELEASE_VERSION: main
workflow: opendatahub-io-ci-image-mirror
- as: odh-mod-arch-maas-pr-image-mirror
run_if_changed: ^packages/maas/
steps:
dependencies:
SOURCE_IMAGE_REF: odh-mod-arch-maas-image
Expand All @@ -118,6 +121,7 @@ tests:
RELEASE_VERSION: main
workflow: opendatahub-io-ci-image-mirror
- as: odh-mod-arch-mlflow-pr-image-mirror
run_if_changed: ^packages/mlflow/
steps:
dependencies:
SOURCE_IMAGE_REF: odh-mod-arch-mlflow-image
Expand All @@ -134,6 +138,7 @@ tests:
RELEASE_VERSION: main
workflow: opendatahub-io-ci-image-mirror
- as: odh-mod-arch-eval-hub-pr-image-mirror
run_if_changed: ^packages/eval-hub/
steps:
dependencies:
SOURCE_IMAGE_REF: odh-mod-arch-eval-hub-image
Expand All @@ -150,6 +155,7 @@ tests:
RELEASE_VERSION: main
workflow: opendatahub-io-ci-image-mirror
- as: odh-mod-arch-automl-pr-image-mirror
run_if_changed: ^packages/automl/
steps:
dependencies:
SOURCE_IMAGE_REF: odh-mod-arch-automl-image
Expand All @@ -166,6 +172,7 @@ tests:
RELEASE_VERSION: main
workflow: opendatahub-io-ci-image-mirror
- as: odh-mod-arch-autorag-pr-image-mirror
run_if_changed: ^packages/autorag/
steps:
dependencies:
SOURCE_IMAGE_REF: odh-mod-arch-autorag-image
Expand All @@ -182,6 +189,7 @@ tests:
RELEASE_VERSION: main
workflow: opendatahub-io-ci-image-mirror
- as: odh-mod-arch-agent-ops-pr-image-mirror
run_if_changed: ^packages/agent-ops/
steps:
dependencies:
SOURCE_IMAGE_REF: odh-mod-arch-agent-ops-image
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -233,6 +233,7 @@ tests:
- as: ocm-fvt-periodic-cs-sanity-staging-main
capabilities:
- nested-podman
cron: 0 0 31 2 *
nested_podman: true
steps:
allow_best_effort_post_steps: true
Expand All @@ -248,6 +249,7 @@ tests:
- as: ocm-fvt-periodic-cs-sanity-jira-staging-main
capabilities:
- nested-podman
cron: 0 0 31 2 *
nested_podman: true
steps:
allow_best_effort_post_steps: true
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ base_images:
hypershift-operator-init:
name: hypershift-operator
namespace: hypershift
tag: latest
tag: "4.19"
hypershift-tests:
name: hypershift-tests
namespace: hypershift
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ base_images:
hypershift-operator-init:
name: hypershift-operator
namespace: hypershift
tag: latest
tag: "4.20"
hypershift-tests:
name: hypershift-tests
namespace: hypershift
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ base_images:
hypershift-operator-init:
name: hypershift-operator
namespace: hypershift
tag: latest
tag: "4.21"
hypershift-tests:
name: hypershift-tests
namespace: hypershift
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ base_images:
hypershift-operator-init:
name: hypershift-operator
namespace: hypershift
tag: latest
tag: "4.22"
hypershift-tests:
name: hypershift-tests
namespace: hypershift
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ base_images:
hypershift-operator-init:
name: hypershift-operator
namespace: hypershift
tag: latest
tag: "4.19"
hypershift-tests:
name: hypershift-tests
namespace: hypershift
Expand All @@ -30,6 +30,12 @@ promotion:
to:
- name: "4.19"
namespace: ocp
- additional_images:
hypershift-operator: hypershift-operator
excluded_images:
- '*'
namespace: hypershift
tag: "4.19"
releases:
initial:
candidate:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ base_images:
hypershift-operator-init:
name: hypershift-operator
namespace: hypershift
tag: latest
tag: "4.20"
hypershift-tests:
name: hypershift-tests
namespace: hypershift
Expand All @@ -35,6 +35,12 @@ promotion:
to:
- name: "4.20"
namespace: ocp
- additional_images:
hypershift-operator: hypershift-operator
excluded_images:
- '*'
namespace: hypershift
tag: "4.20"
releases:
initial:
candidate:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ base_images:
hypershift-operator-init:
name: hypershift-operator
namespace: hypershift
tag: latest
tag: "4.21"
hypershift-tests:
name: hypershift-tests
namespace: hypershift
Expand All @@ -38,6 +38,12 @@ promotion:
- hypershift-tests
name: "4.21"
namespace: ocp
- additional_images:
hypershift-operator: hypershift-operator
excluded_images:
- '*'
namespace: hypershift
tag: "4.21"
releases:
initial:
candidate:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ base_images:
hypershift-operator-init:
name: hypershift-operator
namespace: hypershift
tag: latest
tag: "4.22"
hypershift-tests:
name: hypershift-tests
namespace: hypershift
Expand All @@ -33,6 +33,12 @@ promotion:
- hypershift-operator
name: "4.22"
namespace: ocp
- additional_images:
hypershift-operator: hypershift-operator
excluded_images:
- '*'
namespace: hypershift
tag: "4.22"
releases:
initial:
candidate:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -187,7 +187,7 @@ tests:
- chain: hypershift-conformance
workflow: hypershift-aws-conformance
- as: e2e-aws-ovn-conformance-techpreview
interval: 6h
cron: '@weekly'
reporter_config:
channel: '#forum-ocp-splat-alerts-aws'
job_states_to_report:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ base_images:
go_builder:
name: builder
namespace: ocp
tag: rhel-9-golang-1.24-openshift-4.23
tag: rhel-9-golang-1.26-openshift-4.23
loki:
name: loki
namespace: logging
Expand All @@ -23,7 +23,7 @@ build_root:
image_stream_tag:
name: builder
namespace: ocp
tag: rhel-9-golang-1.24-openshift-4.23
tag: rhel-9-golang-1.26-openshift-4.23
use_build_cache: true
images:
items:
Expand All @@ -33,7 +33,7 @@ images:
inputs:
go_builder:
as:
- golang:1.24.4
- golang:1.26.3
to: loki-operator
- dockerfile_literal: |
FROM registry.redhat.io/ubi9/go-toolset:latest
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,51 @@
base_images:
base:
name: "4.21"
namespace: ocp
tag: base-rhel9
build_root:
image_stream_tag:
name: builder
namespace: ocp
tag: rhel-9-golang-1.26-openshift-4.23
images:
items:
- additional_architectures:
- arm64
dockerfile_path: Dockerfile.ocp
from: base
to: loki
- additional_architectures:
- arm64
dockerfile_path: Dockerfile.promtail.ocp
from: base
to: promtail
promotion:
to:
- namespace: logging
tag: v3.6.12
releases:
latest:
release:
channel: stable
version: "4.21"
resources:
'*':
requests:
cpu: 100m
memory: 200Mi
tests:
- as: test
steps:
test:
- as: unit
commands: GOFLAGS="" make test
from: src
resources:
requests:
cpu: 100m
memory: 200Mi
zz_generated_metadata:
branch: upstream-v3.6.12
org: openshift
repo: loki
Original file line number Diff line number Diff line change
@@ -1,4 +1,8 @@
base_images:
cli:
name: "4.19"
namespace: ocp
tag: cli
tests-private:
name: tests-private
namespace: ci
Expand All @@ -7,6 +11,32 @@ base_images:
name: "4.19"
namespace: ocp
tag: upi-installer
build_root:
image_stream_tag:
name: builder
namespace: ocp
tag: rhel-9-golang-1.25-openshift-4.21
images:
items:
- dockerfile_literal: |
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
RUN microdnf install -y git tar gzip && microdnf clean all
RUN git clone --depth 1 --branch main \
https://github.com/confidential-devhub/charts /charts && \
rm -rf /charts/.git
Comment on lines +21 to +26

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🩺 Stability & Availability | 🟠 Major | ⚡ Quick win

Pin the helper image inputs to immutable versions.

ubi-minimal:latest and cloning confidential-devhub/charts from main make these candidate jobs non-reproducible, so an upstream change can silently alter or break the 4.17/4.18/4.19/default variants without any corresponding change here. Please pin the base image and charts revision to immutable values in all copied blocks.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/config/openshift/sandboxed-containers-operator/openshift-sandboxed-containers-operator-devel__downstream-candidate.yaml`
around lines 21 - 26, The helper image definition is still using moving targets,
so update the dockerfile_literal blocks to use immutable references instead of
registry.access.redhat.com/ubi9/ubi-minimal:latest and the
confidential-devhub/charts main branch. Pin the base image in the helper image
setup and replace the git clone revision in the chart fetch step with a fixed
commit, tag, or release reference in all duplicated variant blocks (for example,
the downstream candidate and any copied 4.17/4.18/4.19/default definitions).
Keep the change consistent across the shared helper image configuration so the
same inputs are used everywhere.

to: trustee-charts
- dockerfile_literal: |
FROM this-is-ignored
USER root
RUN dnf install -y tar gzip jq skopeo git && dnf clean all
RUN curl -sL https://get.helm.sh/helm-v3.14.0-linux-amd64.tar.gz | tar xz && \
mv linux-amd64/helm /usr/local/bin/helm && \
rm -rf linux-amd64 && \
chmod +x /usr/local/bin/helm && \
helm version
USER 1000
from: cli
to: tools-with-helm
prowgen:
disable_sparse_checkout: true
releases:
Expand Down Expand Up @@ -127,6 +157,8 @@ tests:
TEST_RELEASE_TYPE: Pre-GA
TEST_SCENARIOS: sig-kata.*Kata Author
TEST_TIMEOUT: "90"
TRUSTEE_CATALOG_SOURCE_IMAGE: quay.io/redhat-user-workloads/ose-osc-tenant/trustee-test-fbc:1.1.0-1776506656
TRUSTEE_INSTALL: "true"
TRUSTEE_URL: ""
WORKLOAD_TO_TEST: coco
workflow: sandboxed-containers-operator-e2e-azure
Expand Down Expand Up @@ -204,6 +236,8 @@ tests:
TEST_RELEASE_TYPE: Pre-GA
TEST_SCENARIOS: sig-kata.*Kata Author
TEST_TIMEOUT: "90"
TRUSTEE_CATALOG_SOURCE_IMAGE: quay.io/redhat-user-workloads/ose-osc-tenant/trustee-test-fbc:1.1.0-1776506656
TRUSTEE_INSTALL: "true"
TRUSTEE_URL: ""
WORKLOAD_TO_TEST: coco
workflow: sandboxed-containers-operator-e2e-aro
Expand Down Expand Up @@ -278,6 +312,8 @@ tests:
TEST_RELEASE_TYPE: Pre-GA
TEST_SCENARIOS: sig-kata.*Kata Author
TEST_TIMEOUT: "90"
TRUSTEE_CATALOG_SOURCE_IMAGE: quay.io/redhat-user-workloads/ose-osc-tenant/trustee-test-fbc:1.1.0-1776506656
TRUSTEE_INSTALL: "true"
TRUSTEE_URL: ""
WORKLOAD_TO_TEST: coco
workflow: sandboxed-containers-operator-e2e-aws
Expand Down
Loading