Skip to content

STOR-3022: Enable CBT snapshot-metadata e2e tests in TechPreview CI jobs - #81061

Open
RomanBednar wants to merge 2 commits into
openshift:mainfrom
RomanBednar:stor-2900-enable-cbt-tests
Open

STOR-3022: Enable CBT snapshot-metadata e2e tests in TechPreview CI jobs#81061
RomanBednar wants to merge 2 commits into
openshift:mainfrom
RomanBednar:stor-2900-enable-cbt-tests

Conversation

@RomanBednar

@RomanBednar RomanBednar commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

Summary by CodeRabbit

This PR enables CSI snapshot-metadata support in OpenShift TechPreview CI jobs across origin releases 4.23, 5.0, 5.1, and main. It also enables the corresponding AWS TechPreview tests for the external snapshot-metadata component.

The CI steps now accept CSI_PROW_ENABLE_SNAPSHOT_METADATA. The setting preserves the hostpath CSI snapshot-metadata sidecar so CBT snapshot-metadata e2e tests can run.

The PR adds CI configuration for the csi-snapshot-metadata-tls-secret-fix branch. This configuration covers build, validation, upgrade, CSI, snapshot-metadata, TLS, and platform-specific e2e jobs.

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Jun 25, 2026
@openshift-ci-robot

openshift-ci-robot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar: This pull request references STOR-3022 which is a valid jira issue.

Details

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@coderabbitai

coderabbitai Bot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

Walkthrough

This PR adds CSI_PROW_ENABLE_SNAPSHOT_METADATA to e2e step definitions, enables it in OpenShift TechPreview jobs, and adds AWS snapshot-metadata workflows for multiple release streams.

Changes

CSI snapshot metadata enablement

Layer / File(s) Summary
Snapshot metadata step contract
ci-operator/step-registry/openshift/e2e/test/openshift-e2e-test-ref.yaml, ci-operator/step-registry/single-node/e2e/test/single-node-e2e-test-ref.yaml
Defines and documents CSI_PROW_ENABLE_SNAPSHOT_METADATA. The flag enables CSI hostpath snapshot metadata and related CBT tests.
Origin TechPreview job wiring
ci-operator/config/openshift/origin/openshift-origin-main.yaml, ci-operator/config/openshift/origin/openshift-origin-release-4.23.yaml, ci-operator/config/openshift/origin/openshift-origin-release-5.0.yaml, ci-operator/config/openshift/origin/openshift-origin-release-5.1.yaml, ci-operator/config/openshift/release/openshift-release-main__nightly-5.0.yaml
Sets the flag to "true" for selected AWS and GCP TechPreview e2e jobs.
Dedicated snapshot-metadata workflows
ci-operator/config/openshift/csi-external-snapshot-metadata/*
Adds AWS OVN TechPreview e2e workflows for main, 4.23, 5.0, and 5.1 configurations.
TLS-secret-fix branch CI configuration
ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml
Adds generated branch CI configuration with build settings, validation jobs, resources, and a broad test matrix.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Suggested labels: rehearsals-ack

Suggested reviewers: sjenning, dobsonj, p0lyn0mial

🚥 Pre-merge checks | ✅ 15
✅ Passed checks (15 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes enabling CBT snapshot-metadata e2e tests in TechPreview CI jobs.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed The PR changes only YAML CI configuration and step metadata; scans found no Ginkgo title declarations or dynamic title construction.
Test Structure And Quality ✅ Passed The complete PR range changes only 17 YAML CI configuration files; it adds no Ginkgo test source or It/BeforeEach/AfterEach/Eventually/Consistently calls to review.
Microshift Test Compatibility ✅ Passed The patch adds only two YAML CI configuration files; the diff contains no Go/test-source additions or Ginkgo declarations, so this check is not applicable.
Single Node Openshift (Sno) Test Compatibility ✅ Passed The PR changes 17 YAML CI files only; it adds no Ginkgo test source or It/Describe/Context/When declarations that could introduce multi-node assumptions.
Topology-Aware Scheduling Compatibility ✅ Passed The PR changes only CI config, generated Prow jobs, and step metadata; the added YAML contains no pod affinity, topology spread, replica, node selector, toleration, or PDB constraints.
Ote Binary Stdout Contract ✅ Passed The review range changes only 17 YAML files, with no Go or OTE source files and no process-level stdout patterns.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed The PR changes only CI YAML and step configuration; no Go or other source test files, Ginkgo declarations, IPv4 assumptions, or new external-network test logic were added.
No-Weak-Crypto ✅ Passed The PR adds only CI YAML variables, test definitions, and documentation; all 402 added lines contain no MD5, SHA-1, DES, RC4, Blowfish, ECB, custom crypto, or secret comparisons.
Container-Privileges ✅ Passed PR changes add CI environment variables and workflows only; scans found no added privileged, hostPID, hostNetwork, hostIPC, SYS_ADMIN, allowPrivilegeEscalation, or root settings.
No-Sensitive-Data-In-Logs ✅ Passed The full PR diff adds no secret, token, PII, or logging statements; secret references are standard mounted file paths, and debug logging has no sensitive values.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands.

@openshift-ci
openshift-ci Bot requested review from p0lyn0mial and sjenning June 25, 2026 08:28
@RomanBednar RomanBednar changed the title STOR-3022: Enable CBT snapshot-metadata e2e tests in TechPreview CI jobs DRAFT: STOR-3022: Enable CBT snapshot-metadata e2e tests in TechPreview CI jobs Jun 25, 2026
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar, pj-rehearse: unable to set up jobs ERROR:

failed resolve ReleaseBuildConfiguration: Failed resolve MultiStageTestConfiguration: test/e2e-aws-ovn-single-node-techpreview: workflow/openshift-e2e-aws-single-node: parameter "CSI_PROW_ENABLE_SNAPSHOT_METADATA" is overridden in [test/e2e-aws-ovn-single-node-techpreview] but not declared in any step

If the problem persists, please contact Test Platform.

@RomanBednar
RomanBednar force-pushed the stor-2900-enable-cbt-tests branch 2 times, most recently from 5beeee0 to 84a69f8 Compare June 25, 2026 11:33
@RomanBednar

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-aws-ovn-single-node-techpreview

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: your /pj-rehearse request was not processed because the request waited in queue for longer than 5 minutes. Please retry in a few minutes.

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-gcp-ovn-techpreview

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@RomanBednar RomanBednar changed the title DRAFT: STOR-3022: Enable CBT snapshot-metadata e2e tests in TechPreview CI jobs STOR-3022: Enable CBT snapshot-metadata e2e tests in TechPreview CI jobs Jun 25, 2026
@RomanBednar

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-gcp-ovn-techpreview-serial
/pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-gcp-ovn-techpreview
/pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-aws-ovn-single-node-techpreview-serial
/pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-aws-ovn-single-node-techpreview

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: job(s): pull-ci-openshift-origin-release-4.23-e2e-gcp-ovn-techpreview-serial either don't exist or were not found to be affected, and cannot be rehearsed

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: requesting more than one rehearsal in one comment is not supported. If you would like to rehearse multiple specific jobs, please separate the job names by a space in a single command.

2 similar comments
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: requesting more than one rehearsal in one comment is not supported. If you would like to rehearse multiple specific jobs, please separate the job names by a space in a single command.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: requesting more than one rehearsal in one comment is not supported. If you would like to rehearse multiple specific jobs, please separate the job names by a space in a single command.

@RomanBednar
RomanBednar force-pushed the stor-2900-enable-cbt-tests branch from 84a69f8 to 96249e1 Compare July 8, 2026 14:15
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: pj-rehearse could not automatically process this event because the request waited in queue for longer than 5 minutes. Use /pj-rehearse to trigger rehearsals manually.

@dobsonj

dobsonj commented Jul 8, 2026

Copy link
Copy Markdown
Member

/cc

@openshift-ci
openshift-ci Bot requested a review from dobsonj July 8, 2026 17:05
@RomanBednar
RomanBednar force-pushed the stor-2900-enable-cbt-tests branch from 96249e1 to 4e31af4 Compare July 9, 2026 08:58
@RomanBednar
RomanBednar force-pushed the stor-2900-enable-cbt-tests branch from 4e31af4 to fc0706a Compare July 27, 2026 15:17
@RomanBednar

Copy link
Copy Markdown
Contributor Author

/pj-rehearse

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@RomanBednar
RomanBednar force-pushed the stor-2900-enable-cbt-tests branch from 8d07ee3 to 79ff00a Compare August 4, 2026 11:54
@openshift-ci openshift-ci Bot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Aug 4, 2026
@RomanBednar

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-csi-external-snapshot-metadata-main-e2e-aws-ovn-techpreview pull-ci-openshift-origin-release-4.23-e2e-aws-ovn-single-node-techpreview

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@RomanBednar

Copy link
Copy Markdown
Contributor Author

The hostpath CSI driver is deployed as a StatefulSet that already includes the csi-snapshot-metadata sidecar container in its manifest. Normally, csi.go PrepareTest() strips out this sidecar (and its TLS cert volume) when CapSnapshotMetadata is not enabled. Setting CSI_PROW_ENABLE_SNAPSHOT_METADATA=true tells the code to stop removing it — so the sidecar stays in the pod.

The problem is that this sidecar needs a TLS secret (csi-snapshot-metadata-server-certs) to start, but nobody creates that secret except the 2 CBT snapshot-metadata tests themselves (testsuites/snapshot-metadata.go:init()utils/snapshot-metadata.go:CreateSnapshotMetadataResources()). The general driver setup in csi.go:PrepareTest() doesn't create it — it just deploys the StatefulSet and assumes the secret is already there if the sidecar is present.

So for all the other 60+ CSI tests (subPath, expansion, provisioning, snapshots, ephemeral volumes...), the pod tries to mount a secret that doesn't exist, Kubernetes blocks all containers from starting, PVCs never get provisioned, and everything times out.

From build-log:

FailedMount: MountVolume.SetUp failed for volume "csi-snapshot-metadata-server-certs" : 
secret "csi-snapshot-metadata-server-certs" not found

Upstream Kubernetes never hits this because they only set the env var when running the CBT tests alone — not the full conformance suite like we do with openshift-e2e-aws.

We should propose a fix upstream to have PrepareTest() create the TLS secret when CapSnapshotMetadata is enabled, so the sidecar can actually start regardless of which test suite is running.

@openshift-ci

openshift-ci Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/rehearse/openshift/origin/release-4.23/e2e-gcp-ovn-techpreview 84a69f8 link unknown /pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-gcp-ovn-techpreview
ci/rehearse/openshift/origin/release-4.23/e2e-gcp-ovn-techpreview-pkiconfig fc0706a link unknown /pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-gcp-ovn-techpreview-pkiconfig
ci/rehearse/openshift/cloud-provider-kubevirt/main/okd-scos-e2e-aws-ovn fc0706a link unknown /pj-rehearse pull-ci-openshift-cloud-provider-kubevirt-main-okd-scos-e2e-aws-ovn
ci/rehearse/openshift/origin/release-4.23/e2e-aws-ovn-single-node-techpreview-serial fc0706a link unknown /pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-aws-ovn-single-node-techpreview-serial
ci/rehearse/openshift/origin/release-5.0/e2e-aws-ovn-single-node-techpreview-serial fc0706a link unknown /pj-rehearse pull-ci-openshift-origin-release-5.0-e2e-aws-ovn-single-node-techpreview-serial
ci/rehearse/openshift/origin/release-5.0/e2e-aws-ovn-single-node-techpreview fc0706a link unknown /pj-rehearse pull-ci-openshift-origin-release-5.0-e2e-aws-ovn-single-node-techpreview
ci/rehearse/openshift/origin/main/e2e-aws-ovn-single-node-techpreview fc0706a link unknown /pj-rehearse pull-ci-openshift-origin-main-e2e-aws-ovn-single-node-techpreview
ci/rehearse/openshift/csi-external-snapshot-metadata/release-5.0/e2e-aws-ovn-techpreview fc0706a link unknown /pj-rehearse pull-ci-openshift-csi-external-snapshot-metadata-release-5.0-e2e-aws-ovn-techpreview
ci/rehearse/openshift/csi-external-snapshot-metadata/release-4.23/e2e-aws-ovn-techpreview fc0706a link unknown /pj-rehearse pull-ci-openshift-csi-external-snapshot-metadata-release-4.23-e2e-aws-ovn-techpreview
ci/rehearse/periodic-ci-Prucek-release-master-e2e-aws-sdn-upgrade 8d07ee3 link unknown /pj-rehearse periodic-ci-Prucek-release-master-e2e-aws-sdn-upgrade
ci/rehearse/openshift/csi-external-snapshot-metadata/release-5.1/e2e-aws-ovn-techpreview 8d07ee3 link unknown /pj-rehearse pull-ci-openshift-csi-external-snapshot-metadata-release-5.1-e2e-aws-ovn-techpreview
ci/rehearse/openshift/origin/release-5.1/e2e-aws-ovn-single-node-techpreview 8d07ee3 link unknown /pj-rehearse pull-ci-openshift-origin-release-5.1-e2e-aws-ovn-single-node-techpreview
ci/rehearse/openshift/csi-external-snapshot-metadata/main/e2e-aws-ovn-techpreview 79ff00a link unknown /pj-rehearse pull-ci-openshift-csi-external-snapshot-metadata-main-e2e-aws-ovn-techpreview
ci/rehearse/openshift/origin/release-4.23/e2e-aws-ovn-single-node-techpreview 79ff00a link unknown /pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-aws-ovn-single-node-techpreview

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/origin#31485

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/origin#31485

DO NOT MERGE — remove this commit before merging the PR.

Adds a temporary ci-operator config that targets the
csi-snapshot-metadata-tls-secret-fix branch from openshift/origin
PR openshift#31485 instead of main. This allows pj-rehearse to test the
step registry env var change (CSI_PROW_ENABLE_SNAPSHOT_METADATA)
together with the origin code fix.

The promotion section is removed to avoid conflicts with the
main config promoting the same images.

After rehearsal confirms the tests pass, revert this commit.
@coderabbitai

coderabbitai Bot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Note

GitHub couldn't provide a complete incremental comparison for this pull request, so CodeRabbit is performing a full review instead. This review may take a little longer.

@openshift-ci-robot

openshift-ci-robot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar: This pull request references STOR-3022 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target only the "5.0.0" version, but multiple target versions were set.

Details

In response to this:

Summary by CodeRabbit

This PR enables CSI snapshot-metadata support in OpenShift TechPreview CI jobs across origin releases 4.23, 5.0, 5.1, and main. It also enables the corresponding AWS TechPreview tests for the external snapshot-metadata component.

The CI steps now accept CSI_PROW_ENABLE_SNAPSHOT_METADATA. The setting preserves the hostpath CSI snapshot-metadata sidecar so CBT snapshot-metadata e2e tests can run.

The PR adds CI configuration for the csi-snapshot-metadata-tls-secret-fix branch. This configuration covers build, validation, upgrade, CSI, snapshot-metadata, TLS, and platform-specific e2e jobs.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci

openshift-ci Bot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: RomanBednar
Once this PR has been reviewed and has the lgtm label, please assign stbenjam for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🧹 Nitpick comments (2)
ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml (1)

598-599: 📐 Maintainability & Code Quality | 🔵 Trivial | 💤 Low value

These flag additions duplicate the origin 5.0 config.

The four CSI_PROW_ENABLE_SNAPSHOT_METADATA entries repeat the changes in ci-operator/config/openshift/origin/openshift-origin-release-5.0.yaml. If this branch config is removed, these entries go away with it. If the file stays, keep the two files in sync so the rehearsal result matches the target configuration.

Also applies to: 610-612, 764-766, 923-925

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml`
around lines 598 - 599, Remove the duplicated CSI_PROW_ENABLE_SNAPSHOT_METADATA
flag additions from openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml,
including all four referenced entries; if the branch configuration must remain,
instead synchronize these entries exactly with
openshift-origin-release-5.0.yaml.
ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-main.yaml (1)

46-52: 📐 Maintainability & Code Quality | 🔵 Trivial | ⚡ Quick win

Decide whether this new AWS e2e job must block merges.

The test omits optional: true and always_run: false. The generated presubmit therefore runs on every PR and blocks merge. Cloud e2e jobs are slow and flake-prone. If the team wants this job as informational at first, add optional: true.

♻️ Optional change
 - as: e2e-aws-ovn-techpreview
+  optional: true
   steps:
     cluster_profile: openshift-org-aws
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-main.yaml`
around lines 46 - 52, Update the e2e-aws-ovn-techpreview presubmit job
configuration to explicitly make the job informational by adding optional: true;
preserve its existing workflow, environment, and cluster profile settings.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In
`@ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml`:
- Around line 930-933: Remove the temporary csi-snapshot-metadata-tls-secret-fix
CI configuration, including its zz_generated_metadata entry, so it no longer
generates Prow jobs; then run make update to regenerate the CI configuration and
use /pj-rehearse for the origin pull request.

---

Nitpick comments:
In
`@ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-main.yaml`:
- Around line 46-52: Update the e2e-aws-ovn-techpreview presubmit job
configuration to explicitly make the job informational by adding optional: true;
preserve its existing workflow, environment, and cluster profile settings.

In
`@ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml`:
- Around line 598-599: Remove the duplicated CSI_PROW_ENABLE_SNAPSHOT_METADATA
flag additions from openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml,
including all four referenced entries; if the branch configuration must remain,
instead synchronize these entries exactly with
openshift-origin-release-5.0.yaml.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: d3394876-9295-4123-8f79-ae5962b53a07

📥 Commits

Reviewing files that changed from the base of the PR and between b3b417b and e6e2fda.

⛔ Files ignored due to path filters (5)
  • ci-operator/jobs/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-main-presubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-release-4.23-presubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-release-5.0-presubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-release-5.1-presubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix-presubmits.yaml is excluded by !ci-operator/jobs/**
📒 Files selected for processing (12)
  • ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-main.yaml
  • ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-release-4.23.yaml
  • ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-release-5.0.yaml
  • ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-release-5.1.yaml
  • ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml
  • ci-operator/config/openshift/origin/openshift-origin-main.yaml
  • ci-operator/config/openshift/origin/openshift-origin-release-4.23.yaml
  • ci-operator/config/openshift/origin/openshift-origin-release-5.0.yaml
  • ci-operator/config/openshift/origin/openshift-origin-release-5.1.yaml
  • ci-operator/config/openshift/release/openshift-release-main__nightly-5.0.yaml
  • ci-operator/step-registry/openshift/e2e/test/openshift-e2e-test-ref.yaml
  • ci-operator/step-registry/single-node/e2e/test/single-node-e2e-test-ref.yaml
🚧 Files skipped from review as they are similar to previous changes (3)
  • ci-operator/config/openshift/origin/openshift-origin-release-4.23.yaml
  • ci-operator/step-registry/single-node/e2e/test/single-node-e2e-test-ref.yaml
  • ci-operator/step-registry/openshift/e2e/test/openshift-e2e-test-ref.yaml

Comment on lines +930 to +933
zz_generated_metadata:
branch: csi-snapshot-metadata-tls-secret-fix
org: openshift
repo: origin

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check whether the branch exists upstream and whether other temporary origin branch configs exist.
set -uo pipefail

echo "== branch existence in openshift/origin =="
gh api repos/openshift/origin/branches/csi-snapshot-metadata-tls-secret-fix --jq '.name' || echo "branch not found"

echo "== existing origin branch configs =="
fd -t f 'openshift-origin-' ci-operator/config/openshift/origin | sort

echo "== branch values recorded in those configs =="
fd -t f 'openshift-origin-' ci-operator/config/openshift/origin --exec sh -c 'printf "%s: " "$1"; rg -N "^  branch:" "$1"' _ {}

Repository: openshift/release

Length of output: 4813


🏁 Script executed:

#!/bin/bash
set -euo pipefail

file="ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml"

echo "== change status =="
git status --short -- "$file"
git diff --stat -- "$file"

echo "== references to the feature branch =="
rg -n --hidden --glob '!vendor/**' 'csi-snapshot-metadata-tls-secret-fix' .

echo "== generated Prow/config references =="
rg -n --hidden --glob '!vendor/**' 'openshift-origin-csi-snapshot-metadata-tls-secret-fix|csi-snapshot-metadata-tls-secret-fix' ci-operator jobs prow 2>/dev/null || true

echo "== config shape =="
awk '
  /^zz_generated_metadata:/ { metadata=1 }
  metadata && /^  (branch|org|repo):/ { print }
  /^tests:/ { tests=1 }
  tests && /^- name:/ { count++ }
  END { print "test_entries=" count+0 }
' "$file"

echo "== release-5.0 comparison after branch substitution =="
python3 - "$file" <<'PY'
from pathlib import Path
import sys
target = Path(sys.argv[1])
base = Path("ci-operator/config/openshift/origin/openshift-origin-release-5.0.yaml")
if not base.exists():
    print("release-5.0 config not found")
    raise SystemExit(0)
a = target.read_text().replace("branch: csi-snapshot-metadata-tls-secret-fix",
                              "branch: release-5.0")
b = base.read_text()
print("identical_except_branch=" + str(a == b))
PY

Repository: openshift/release

Length of output: 50373


Remove the temporary branch configuration and regenerate CI jobs.

csi-snapshot-metadata-tls-secret-fix is not an openshift/origin branch, but this config generates a full Prow job set. Remove the config and run make update; use /pj-rehearse against the origin pull request instead.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml`
around lines 930 - 933, Remove the temporary
csi-snapshot-metadata-tls-secret-fix CI configuration, including its
zz_generated_metadata entry, so it no longer generates Prow jobs; then run make
update to regenerate the CI configuration and use /pj-rehearse for the origin
pull request.

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/hold

@openshift-ci openshift-ci Bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Aug 6, 2026
@openshift-ci

openshift-ci Bot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar: The specified target(s) for /test were not found.
The following commands are available to trigger required jobs:

/test boskos-config
/test boskos-config-generation
/test check-gh-automation
/test check-gh-automation-tide
/test check-trigger-trusted-apps
/test ci-operator-config
/test ci-operator-config-metadata
/test ci-operator-registry
/test ci-secret-bootstrap-config-validation
/test ci-testgrid-allow-list
/test cluster-manifest-verifier
/test clusterimageset-validate
/test config
/test core-valid
/test generated-config
/test generated-dashboards
/test hyperfleet-risk-scorer-test
/test image-mirroring-config-validation
/test jira-lifecycle-config
/test jira-solver-eval-images
/test jira-solver-eval-jira-solver-eval
/test labels
/test openshift-image-mirror-mappings
/test ordered-prow-config
/test owners
/test pr-reminder-config
/test prow-config
/test prow-config-filenames
/test prow-config-semantics
/test pylint
/test release-config
/test release-controller-config
/test rover-groups-config-validation
/test secret-generator-config-valid
/test services-valid
/test stackrox-stackrox-stackrox-stackrox-check
/test step-registry-metadata
/test step-registry-shellcheck
/test sync-rover-groups
/test verified-config
/test yamllint

The following commands are available to trigger optional jobs:

/test check-cluster-profiles-config

Use /test all to run the following jobs that were automatically triggered:

pull-ci-openshift-release-check-gh-automation
pull-ci-openshift-release-main-ci-operator-config
pull-ci-openshift-release-main-ci-operator-config-metadata
pull-ci-openshift-release-main-ci-operator-registry
pull-ci-openshift-release-main-config
pull-ci-openshift-release-main-core-valid
pull-ci-openshift-release-main-generated-config
pull-ci-openshift-release-main-ordered-prow-config
pull-ci-openshift-release-main-owners
pull-ci-openshift-release-main-prow-config-filenames
pull-ci-openshift-release-main-prow-config-semantics
pull-ci-openshift-release-main-release-controller-config
pull-ci-openshift-release-main-step-registry-metadata
pull-ci-openshift-release-main-step-registry-shellcheck
pull-ci-openshift-release-openshift-image-mirror-mappings
pull-ci-openshift-release-yamllint
Details

In response to this:

/test pj-rehearse-max

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

[REHEARSALNOTIFIER]
@RomanBednar: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-openshift-cluster-authentication-operator-master-e2e-aws-external-oidc-conformance-parallel openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-master-e2e-aws-external-oidc-conformance-serial openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-5.1-e2e-aws-external-oidc-conformance-parallel openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-5.1-e2e-aws-external-oidc-conformance-serial openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-5.0-e2e-aws-external-oidc-conformance-parallel openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-5.0-e2e-aws-external-oidc-conformance-serial openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.23-e2e-aws-external-oidc-conformance-parallel openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.23-e2e-aws-external-oidc-conformance-serial openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.22-e2e-aws-external-oidc-conformance-parallel openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.22-e2e-aws-external-oidc-conformance-serial openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-master-okd-scos-e2e-aws-ovn openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.21-okd-scos-e2e-aws-ovn openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-master-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-5.1-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-5.0-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.23-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.22-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.21-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.20-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.19-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.18-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.17-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.16-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.15-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.14-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed

A total of 18248 jobs have been affected by this change. The above listing is non-exhaustive and limited to 25 jobs.

A full list of affected jobs can be found here

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-csi-external-snapshot-metadata-main-e2e-aws-ovn-techpreview

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/origin#31485

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/kubernetes#2739

@openshift-ci

openshift-ci Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar, testwith: could not generate prow job. ERROR:

no ref for requested test included in command. The org, repo, and branch containing the requested test need to be targeted by at least one of the included PRs

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/kubernetes#2739

@openshift-ci

openshift-ci Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar, testwith: could not generate prow job. ERROR:

no ref for requested test included in command. The org, repo, and branch containing the requested test need to be targeted by at least one of the included PRs

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/csi-external-snapshot-metadata/main/e2e-aws-ovn-techpreview openshift/kubernetes#2739

@openshift-ci

openshift-ci Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar, testwith: could not generate prow job. ERROR:

BUG: test 'e2e-aws-ovn-techpreview' not found in injected config

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/origin#31485 openshift/kubernetes#2739

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/origin#31485 openshift/kubernetes#2739 #81061

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants