kyverno update

[rh-tap-build-team]

No description provided.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: rh-tap-build-team[bot]
Once this PR has been reviewed and has the lgtm label, please assign gcpsoares for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• components/kyverno/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[github-actions]

Kustomize Render Diff

Comparing 8e9ad8756 → ebe38ab1f

Component	Environment	Changes
components/kyverno/development	development	+5 -5
components/kyverno/staging/stone-stage-p01	staging	+5 -5
components/kyverno/staging/stone-stg-rh01	staging	+5 -5

Total: 3 components, +15 -15 lines

📋 Full diff available in the workflow summary and as a downloadable artifact.

[konflux-ci-qe-bot]

🤖 Pipeline Failure Analysis

Category: Infrastructure

The Konflux installation pipeline failed because several critical ArgoCD applications, including kubearchive-in-cluster-local, kueue-in-cluster-local, and vector-kubearchive-log-collector-in-cluster-local, did not achieve a healthy and synced state within the expected timeout.

📋 Technical Details

Immediate Cause

The konflux-ci-install-konflux step failed as multiple core ArgoCD applications, specifically kubearchive-in-cluster-local, kueue-in-cluster-local, and vector-kubearchive-log-collector-in-cluster-local, remained in a pending or unknown state and did not successfully sync within the configured timeout period.

Contributing Factors

The immediate cause points to potential issues with component deployment or resource constraints on the cluster. However, the provided additional_context did not contain specific logs or findings that pinpointed resource exhaustion, misconfiguration, or specific errors within the failing ArgoCD application deployments.

Impact

The failure of these critical ArgoCD applications to install correctly rendered the Konflux environment unstable and incomplete, directly preventing the successful completion of the konflux-ci-install-konflux step and blocking all subsequent e2e tests for the pipeline.

🔍 Evidence

appstudio-e2e-tests/konflux-ci-install-konflux

Category: infrastructure
Root Cause: The Konflux installation failed because several critical ArgoCD applications, including kubearchive-in-cluster-local, kueue-in-cluster-local, and vector-kubearchive-log-collector-in-cluster-local, did not reach a healthy and synced state within the specified timeout. This suggests issues with the deployment of these components or resource constraints on the cluster.

Logs:

artifacts/step-name/build-log.txt line 231

[2026-09-01 12:36:40] [PROGRESS] Applications: 36/44 ready | 8 pending (0m 0s elapsed)

artifacts/step-name/build-log.txt line 232

[2026-09-01 12:36:40] [INFO] Pending: kubearchive-in-cluster-local,kueue-in-cluster-local,kyverno-in-cluster-local,multi-platform-controller-in-cluster-local,pipeline-service-in-cluster-local,policies-in-cluster-local,trust-manager-in-cluster-local,vector-kubearchive-log-collector-in-cluster-local

artifacts/step-name/build-log.txt line 233

[2026-09-01 12:36:40] [WARN] Found applications in Unknown state (not Progressing), investigating...

artifacts/step-name/build-log.txt line 234

[2026-09-01 12:36:41] [WARN] Application 'vector-kubearchive-log-collector-in-cluster-local' is in Unknown state, attempting one-shot soft refresh

---

Analysis powered by prow-failure-analysis | Build: 2094761287056625664

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 60.38%. Comparing base (8e9ad87) to head (c183698).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #13786   +/-   ##
=======================================
  Coverage   60.38%   60.38%           
=======================================
  Files          24       24           
  Lines        1628     1628           
=======================================
  Hits          983      983           
  Misses        563      563           
  Partials       82       82           

Flag	Coverage Δ
go	60.38% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[openshift-ci]

@rh-tap-build-team[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/appstudio-e2e-tests	4002967	link	true	/test appstudio-e2e-tests

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.