Skip to content

NO-ISSUE: Synchronize From Upstream Repositories#694

Open
openshift-bot wants to merge 93 commits intoopenshift:mainfrom
openshift-bot:synchronize-upstream
Open

NO-ISSUE: Synchronize From Upstream Repositories#694
openshift-bot wants to merge 93 commits intoopenshift:mainfrom
openshift-bot:synchronize-upstream

Conversation

@openshift-bot
Copy link
Copy Markdown

@openshift-bot openshift-bot commented Apr 2, 2026

The downstream repository has been updated with the following following upstream commits:

Date Commit Author Message
2026-04-07 14:58:12 operator-framework/operator-controller@4510b1b Camila Macedo Update TLS profiles to Mozilla v5.8 (#2631)
2026-04-06 13:21:22 operator-framework/operator-controller@fd25bf7 Jordan Keister Revert "initial (#2562)" (#2630)
2026-04-03 15:06:59 operator-framework/operator-controller@5060cae dependabot[bot] 🌱 Bump mkdocs-material from 9.7.5 to 9.7.6 (#2629)
2026-04-03 14:11:58 operator-framework/operator-controller@9525539 dependabot[bot] 🌱 Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#2628)
2026-04-02 15:09:23 operator-framework/operator-controller@985d23a dependabot[bot] 🌱 Bump github.com/klauspost/compress from 1.18.4 to 1.18.5 (#2627)
2026-04-02 15:01:00 operator-framework/operator-controller@a6989b7 Predrag Knezevic Fix ClusterObjectSet ref resolution for Secrets outside system namespace (#2624)
2026-04-02 09:09:54 operator-framework/operator-controller@735b41e Predrag Knezevic refactor(e2e): rename ClusterObjectSet secret cucumber steps for clarity (#2622)

The vendor/ directory has been updated and the following commits were carried:

Date Commit Author Message
2026-04-02 08:03:04 openshift/operator-framework-operator-controller@5436b6f dtfranz UPSTREAM: <carry>: Add OpenShift specific files
2026-04-02 08:03:05 openshift/operator-framework-operator-controller@a30bee5 Camila Macedo UPSTREAM: <carry>: Add new tests for single/own namespaces install modes
2026-04-02 08:03:06 openshift/operator-framework-operator-controller@7147671 Camila Macedo UPSTREAM: <carry>: Upgrade OCP image from 4.20 to 4.21
2026-04-02 08:03:07 openshift/operator-framework-operator-controller@3e920ff Camila Macedo UPSTREAM: <carry>: [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml
2026-04-02 08:03:08 openshift/operator-framework-operator-controller@e2eadd2 Todd Short UPSTREAM: <carry>: Update OCP catalogs to v4.21
2026-04-02 08:03:09 openshift/operator-framework-operator-controller@26f96a2 Kui Wang UPSTREAM: <carry>: support singleown cases in disconnected
2026-04-02 08:03:10 openshift/operator-framework-operator-controller@db3f4cb Kui Wang UPSTREAM: <carry>: fix cases 81696 and 74618 for product code changes
2026-04-02 08:03:10 openshift/operator-framework-operator-controller@b64ea2e Camila Macedo UPSTREAM: <carry>: Define Default timeouts and apply their usage accross to avoid flakes
2026-04-02 08:03:11 openshift/operator-framework-operator-controller@8033414 Todd Short UPSTREAM: <carry>: Update to new feature-gate options in helm
2026-04-02 08:03:12 openshift/operator-framework-operator-controller@23b9ce1 Camila Macedo UPSTREAM: <carry>: Fix flake for single/own ns tests by ensuring uniquess and waiting for k8s cleanups
2026-04-02 08:03:13 openshift/operator-framework-operator-controller@d36f38e Camila Macedo UPSTREAM: <carry>: [OTE]: Enhance single/own ns based on review comments ( Follow-Up of: 714977c )
2026-04-02 08:03:14 openshift/operator-framework-operator-controller@495bd00 Kui Wang UPSTREAM: <carry>: Update OwnSingle template to use spec.config.inline.watchNamespace
2026-04-02 08:03:15 openshift/operator-framework-operator-controller@f4e2907 Camila Macedo UPSTREAM: <carry>: [OTE]: Add webhook cleanup validation on extension uninstall
2026-04-02 08:03:16 openshift/operator-framework-operator-controller@0385486 Kui Wang UPSTREAM: <carry>: Add [OTP] to migrated cases
2026-04-02 08:03:17 openshift/operator-framework-operator-controller@653acdd Camila Macedo UPSTREAM: <carry>: [OTE]: Upgrade dependencies used
2026-04-02 08:03:19 openshift/operator-framework-operator-controller@e8fc2f8 Camila Macedo UPSTREAM: <carry>: fix(OTE): fix OpenShift Kubernetes replace version format
2026-04-02 08:03:20 openshift/operator-framework-operator-controller@208a558 Camila Macedo UPSTREAM: <carry>: [Default Catalog Tests] Upgrade go 1.24.6 and dependencies
2026-04-02 08:03:21 openshift/operator-framework-operator-controller@cc7d85b Kui Wang UPSTREAM: <carry>: add disconnected environment support with custom prow job for migrated qe cases
2026-04-02 08:03:22 openshift/operator-framework-operator-controller@d9254db Jian Zhang UPSTREAM: <carry>: migrate jiazha test cases to OTE
2026-04-02 08:03:23 openshift/operator-framework-operator-controller@a88b1aa Xia Zhao UPSTREAM: <carry>: migrate clustercatalog case to ote
2026-04-02 08:03:24 openshift/operator-framework-operator-controller@e15bd1d Kui Wang UPSTREAM: <carry>: migrate olmv1 QE stress cases
2026-04-02 08:03:24 openshift/operator-framework-operator-controller@fc88c55 Todd Short UPSTREAM: <carry>: Use busybox/httpd to simulate probes
2026-04-02 08:03:25 openshift/operator-framework-operator-controller@8de98d1 Xia Zhao UPSTREAM: <carry>: migrate olmv1 QE cases
2026-04-02 08:03:26 openshift/operator-framework-operator-controller@e4d13db Kui Wang UPSTREAM: <carry>: add agent for olmv1 qe cases
2026-04-02 08:03:26 openshift/operator-framework-operator-controller@bd1bbaf Todd Short UPSTREAM: <carry>: Disable upstream PodDisruptionBudget
2026-04-02 08:03:27 openshift/operator-framework-operator-controller@c8b3d66 Rashmi Gottipati UPSTREAM: <carry>: Add AGENTS.md for AI code contributions
2026-04-02 08:03:28 openshift/operator-framework-operator-controller@69d33f8 Rashmi Gottipati UPSTREAM: <carry>: address review comments through addl prompts
2026-04-02 08:03:29 openshift/operator-framework-operator-controller@2ea005a Rashmi Gottipati UPSTREAM: <carry>: addressing some more review comments
2026-04-02 08:03:30 openshift/operator-framework-operator-controller@0c7ee18 Rashmi Gottipati UPSTREAM: <carry>: remove DCO line
2026-04-02 08:03:30 openshift/operator-framework-operator-controller@9b89213 Bruno Andrade UPSTREAM: <carry>: migrate bandrade test cases to OTE
2026-04-02 08:03:31 openshift/operator-framework-operator-controller@49fda37 Bruno Andrade UPSTREAM: <carry>: update metadata
2026-04-02 08:03:32 openshift/operator-framework-operator-controller@0877b3a Bruno Andrade UPSTREAM: <carry>: remove originalName
2026-04-02 08:03:33 openshift/operator-framework-operator-controller@eab6df0 Jian Zhang UPSTREAM: <carry>: update 80458's timeout to 180s
2026-04-02 08:03:34 openshift/operator-framework-operator-controller@0e62335 Jian Zhang UPSTREAM: <carry>: update 83026 to specify the clustercatalog
2026-04-02 08:03:35 openshift/operator-framework-operator-controller@13dda36 Catherine Chan-Tse UPSTREAM: <carry>: Update to golang 1.25 and ocp 4.22
2026-04-02 08:03:35 openshift/operator-framework-operator-controller@2e963e1 Predrag Knezevic UPSTREAM: <carry>: Use oc client for running e2e tests
2026-04-02 08:03:36 openshift/operator-framework-operator-controller@89a06f7 Predrag Knezevic UPSTREAM: <carry>: Run upstream e2e tests tagged with @catalogd-update
2026-04-02 08:03:37 openshift/operator-framework-operator-controller@3cd3ec2 Kui Wang UPSTREAM: <carry>: enhance case to make it more stable
2026-04-02 08:03:38 openshift/operator-framework-operator-controller@b39691f Evan Hearne UPSTREAM: <carry>: add service account to curl job
2026-04-02 08:03:38 openshift/operator-framework-operator-controller@58c15e6 Evan Hearne UPSTREAM: <carry>: move sa creation out of buildCurlJob()
2026-04-02 08:03:39 openshift/operator-framework-operator-controller@69d481b Evan Hearne UPSTREAM: <carry>: comment out delete service account
2026-04-02 08:03:40 openshift/operator-framework-operator-controller@38e0875 Evan Hearne UPSTREAM: <carry>: move defercleanup for sa for LIFO
2026-04-02 08:03:41 openshift/operator-framework-operator-controller@be73aa9 Evan Hearne UPSTREAM: <carry>: add polling so job fully deleted before proceed
2026-04-02 08:03:41 openshift/operator-framework-operator-controller@884aa18 Luke Meyer UPSTREAM: <carry>: Revert "Merge pull request #594 from ehearne-redhat/add-service-account-curl-job"
2026-04-02 08:03:42 openshift/operator-framework-operator-controller@e440dc8 Camila Macedo UPSTREAM: <carry>: Remove openshift-redhat-marketplace catalog tests
2026-04-02 08:03:43 openshift/operator-framework-operator-controller@0d54643 Kui Wang UPSTREAM: <carry>: config watchnamespace cases
2026-04-02 08:03:44 openshift/operator-framework-operator-controller@c478d78 Xia Zhao UPSTREAM: <carry>: enhance ocp-79770
2026-04-02 08:03:44 openshift/operator-framework-operator-controller@6f75df0 Kui Wang UPSTREAM: <carry>: upgrade version support case
2026-04-02 08:03:45 openshift/operator-framework-operator-controller@f453d5a Per Goncalves da Silva UPSTREAM: <carry>: Remove installed condition check from auth preflight test
2026-04-02 08:03:46 openshift/operator-framework-operator-controller@6af6371 Per Goncalves da Silva UPSTREAM: <carry>: Add openshift/api dependency
2026-04-02 08:03:47 openshift/operator-framework-operator-controller@4fc4b97 Per Goncalves da Silva UPSTREAM: <carry>: Add boxcutter specific preflight auth test
2026-04-02 08:03:47 openshift/operator-framework-operator-controller@eb5e0d0 Kui Wang UPSTREAM: <carry>: adjust watchnamespace case based on change
2026-04-02 08:03:48 openshift/operator-framework-operator-controller@e3330ba Camila Macedo UPSTREAM: <carry>: fix(ote): Use as operator-controller dep from root dir
2026-04-02 08:03:49 openshift/operator-framework-operator-controller@92899d9 Bruno Andrade UPSTREAM: <carry>: add 83979 automation
2026-04-02 08:03:50 openshift/operator-framework-operator-controller@4fcb8b9 Bruno Andrade UPSTREAM: <carry>: add 85889 automation
2026-04-02 08:03:51 openshift/operator-framework-operator-controller@aa074a9 Per Goncalves da Silva UPSTREAM: <carry>: Update test-operator startup script to fix pod probe endpoints
2026-04-02 08:03:51 openshift/operator-framework-operator-controller@5b0aa92 Per Goncalves da Silva UPSTREAM: <carry>: Fix up own-namespace invalid configuration test
2026-04-02 08:03:52 openshift/operator-framework-operator-controller@c8a70fd Camila Macedo UPSTREAM: <carry>: Preflight tests use in-cluster catalog and bundles instead of openshift-pipelines-operator-rh
2026-04-02 08:03:53 openshift/operator-framework-operator-controller@b6cfdae Kui Wang UPSTREAM: <carry>: adjust sa and permission test cases per new change from boxcutterruntime
2026-04-02 08:03:53 openshift/operator-framework-operator-controller@029ca24 Camila Macedo UPSTREAM: <carry>: Update OCP catalogs to v4.22
2026-04-02 08:03:55 openshift/operator-framework-operator-controller@9230110 Camila Macedo UPSTREAM: <carry>: chore(OTE and Default Catalog Tests) Update go and dependencies
2026-04-02 08:03:56 openshift/operator-framework-operator-controller@b783b13 Jian Zhang UPSTREAM: <carry>: fix 83026 for TP cluster
2026-04-02 08:03:57 openshift/operator-framework-operator-controller@7153c19 Kui Wang UPSTREAM: <carry>: serviceAccount validation unified across all runtimes
2026-04-02 08:03:58 openshift/operator-framework-operator-controller@c599fa1 Stephen Benjamin UPSTREAM: <carry>: Fix OLMv1 test operator to listen on IPv6
2026-04-02 08:03:58 openshift/operator-framework-operator-controller@1026abc Camila Macedo UPSTREAM: <carry>: Increase install timeout and add diagnostic logging for CE install tests
2026-04-02 08:03:59 openshift/operator-framework-operator-controller@0de002a Evan Hearne UPSTREAM: <carry>: add service account to curl job
2026-04-02 08:04:00 openshift/operator-framework-operator-controller@cef4ab4 Jian Zhang UPSTREAM: <carry>: update OCP-75441 to support multi-arch
2026-04-02 08:04:01 openshift/operator-framework-operator-controller@060ca78 Kui Wang UPSTREAM: <carry>: deployment config cases
2026-04-02 08:04:01 openshift/operator-framework-operator-controller@e833c1b Todd Short UPSTREAM: <carry>: Add OTE tests for OLMv1 DeploymentConfig support
2026-04-02 08:04:02 openshift/operator-framework-operator-controller@b9f1410 Todd Short UPSTREAM: <carry>: Update openshift/api and client-go
2026-04-02 08:04:03 openshift/operator-framework-operator-controller@5b92f06 Camila Macedo UPSTREAM: <carry>: Add boxcutter tests
2026-04-02 08:04:04 openshift/operator-framework-operator-controller@26c0094 Xia Zhao UPSTREAM: <carry>: enhance QE cases
2026-04-02 08:04:04 openshift/operator-framework-operator-controller@b6c6272 Daniel Franz UPSTREAM: <carry>: Update quay-operator version to one containing arm64 support
2026-04-02 08:04:05 openshift/operator-framework-operator-controller@1e3dcfa Kui Wang UPSTREAM: <carry>: verify volume/volumeMount override
2026-04-02 08:04:06 openshift/operator-framework-operator-controller@857081f Jian Zhang UPSTREAM: <carry>: Add long-duration test script and documents
2026-04-02 08:04:06 openshift/operator-framework-operator-controller@1e23fdc Todd Short UPSTREAM: <carry>: Update grpc in default-catalog-consistency tests
2026-04-02 08:04:07 openshift/operator-framework-operator-controller@73d3c9d Camila Macedo UPSTREAM: <carry>: Rename ClusterExtensionRevision to ClusterObjectSet in OTE tests
2026-04-02 08:04:08 openshift/operator-framework-operator-controller@18fdd87 Camila Macedo UPSTREAM: <carry>: Skip incompatible operator test when Boxcutter uses ClusterObjectSet
2026-04-02 08:04:08 openshift/operator-framework-operator-controller@c24a8ea Bruno Andrade UPSTREAM: <carry>: add ocp-87557
2026-04-02 08:04:09 openshift/operator-framework-operator-controller@f293bef Francesco Giudici UPSTREAM: <carry>: Add fgiudici as reviewer
2026-04-02 08:04:10 openshift/operator-framework-operator-controller@f1ea2bc Camila Macedo UPSTREAM: <carry>: Remove skip for incompatible operator check after rename of CER
2026-04-02 08:04:10 openshift/operator-framework-operator-controller@63a80bb Kui Wang UPSTREAM: <carry>: Test empty affinity erasure and cleanup

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

pedjak and others added 3 commits April 2, 2026 09:09
…ity (#2622)

Rename "ref Secrets/refs" step definitions to "referred secrets" for
better readability. Update the labels step to accept a data table and
extract a shared matchLabels helper with deterministic key ordering.
Add diagnostic logging when label matching fails during polling.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
…ace (#2624)

The controller cache only watches the system namespace, causing ref
resolution to fail when Secrets are stored in other namespaces. Fix by
introducing a client wrapper that falls back to direct API calls for
Secret reads outside the system namespace, and grant cluster-wide Secret
get permission when BoxcutterRuntime is enabled. Adds an e2e scenario
covering this path.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.18.4 to 1.18.5.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.4...v1.18.5)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@openshift-bot openshift-bot added tide/merge-method-merge Denotes a PR that should use a standard merge by tide when it merges. kind/sync approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Apr 2, 2026
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Apr 2, 2026
@openshift-ci-robot
Copy link
Copy Markdown

@openshift-bot: This pull request explicitly references no jira issue.

Details

In response to this:

The downstream repository has been updated with the following following upstream commits:

Date Commit Author Message
2026-04-02 15:09:23 operator-framework/operator-controller@985d23a dependabot[bot] 🌱 Bump github.com/klauspost/compress from 1.18.4 to 1.18.5 (#2627)
2026-04-02 15:01:00 operator-framework/operator-controller@a6989b7 Predrag Knezevic Fix ClusterObjectSet ref resolution for Secrets outside system namespace (#2624)
2026-04-02 09:09:54 operator-framework/operator-controller@735b41e Predrag Knezevic refactor(e2e): rename ClusterObjectSet secret cucumber steps for clarity (#2622)

The vendor/ directory has been updated and the following commits were carried:

Date Commit Author Message
2026-04-02 08:03:04 openshift/operator-framework-operator-controller@5436b6f dtfranz UPSTREAM: <carry>: Add OpenShift specific files
2026-04-02 08:03:05 openshift/operator-framework-operator-controller@a30bee5 Camila Macedo UPSTREAM: <carry>: Add new tests for single/own namespaces install modes
2026-04-02 08:03:06 openshift/operator-framework-operator-controller@7147671 Camila Macedo UPSTREAM: <carry>: Upgrade OCP image from 4.20 to 4.21
2026-04-02 08:03:07 openshift/operator-framework-operator-controller@3e920ff Camila Macedo UPSTREAM: <carry>: [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml
2026-04-02 08:03:08 openshift/operator-framework-operator-controller@e2eadd2 Todd Short UPSTREAM: <carry>: Update OCP catalogs to v4.21
2026-04-02 08:03:09 openshift/operator-framework-operator-controller@26f96a2 Kui Wang UPSTREAM: <carry>: support singleown cases in disconnected
2026-04-02 08:03:10 openshift/operator-framework-operator-controller@db3f4cb Kui Wang UPSTREAM: <carry>: fix cases 81696 and 74618 for product code changes
2026-04-02 08:03:10 openshift/operator-framework-operator-controller@b64ea2e Camila Macedo UPSTREAM: <carry>: Define Default timeouts and apply their usage accross to avoid flakes
2026-04-02 08:03:11 openshift/operator-framework-operator-controller@8033414 Todd Short UPSTREAM: <carry>: Update to new feature-gate options in helm
2026-04-02 08:03:12 openshift/operator-framework-operator-controller@23b9ce1 Camila Macedo UPSTREAM: <carry>: Fix flake for single/own ns tests by ensuring uniquess and waiting for k8s cleanups
2026-04-02 08:03:13 openshift/operator-framework-operator-controller@d36f38e Camila Macedo UPSTREAM: <carry>: [OTE]: Enhance single/own ns based on review comments ( Follow-Up of: 714977c )
2026-04-02 08:03:14 openshift/operator-framework-operator-controller@495bd00 Kui Wang UPSTREAM: <carry>: Update OwnSingle template to use spec.config.inline.watchNamespace
2026-04-02 08:03:15 openshift/operator-framework-operator-controller@f4e2907 Camila Macedo UPSTREAM: <carry>: [OTE]: Add webhook cleanup validation on extension uninstall
2026-04-02 08:03:16 openshift/operator-framework-operator-controller@0385486 Kui Wang UPSTREAM: <carry>: Add [OTP] to migrated cases
2026-04-02 08:03:17 openshift/operator-framework-operator-controller@653acdd Camila Macedo UPSTREAM: <carry>: [OTE]: Upgrade dependencies used
2026-04-02 08:03:19 openshift/operator-framework-operator-controller@e8fc2f8 Camila Macedo UPSTREAM: <carry>: fix(OTE): fix OpenShift Kubernetes replace version format
2026-04-02 08:03:20 openshift/operator-framework-operator-controller@208a558 Camila Macedo UPSTREAM: <carry>: [Default Catalog Tests] Upgrade go 1.24.6 and dependencies
2026-04-02 08:03:21 openshift/operator-framework-operator-controller@cc7d85b Kui Wang UPSTREAM: <carry>: add disconnected environment support with custom prow job for migrated qe cases
2026-04-02 08:03:22 openshift/operator-framework-operator-controller@d9254db Jian Zhang UPSTREAM: <carry>: migrate jiazha test cases to OTE
2026-04-02 08:03:23 openshift/operator-framework-operator-controller@a88b1aa Xia Zhao UPSTREAM: <carry>: migrate clustercatalog case to ote
2026-04-02 08:03:24 openshift/operator-framework-operator-controller@e15bd1d Kui Wang UPSTREAM: <carry>: migrate olmv1 QE stress cases
2026-04-02 08:03:24 openshift/operator-framework-operator-controller@fc88c55 Todd Short UPSTREAM: <carry>: Use busybox/httpd to simulate probes
2026-04-02 08:03:25 openshift/operator-framework-operator-controller@8de98d1 Xia Zhao UPSTREAM: <carry>: migrate olmv1 QE cases
2026-04-02 08:03:26 openshift/operator-framework-operator-controller@e4d13db Kui Wang UPSTREAM: <carry>: add agent for olmv1 qe cases
2026-04-02 08:03:26 openshift/operator-framework-operator-controller@bd1bbaf Todd Short UPSTREAM: <carry>: Disable upstream PodDisruptionBudget
2026-04-02 08:03:27 openshift/operator-framework-operator-controller@c8b3d66 Rashmi Gottipati UPSTREAM: <carry>: Add AGENTS.md for AI code contributions
2026-04-02 08:03:28 openshift/operator-framework-operator-controller@69d33f8 Rashmi Gottipati UPSTREAM: <carry>: address review comments through addl prompts
2026-04-02 08:03:29 openshift/operator-framework-operator-controller@2ea005a Rashmi Gottipati UPSTREAM: <carry>: addressing some more review comments
2026-04-02 08:03:30 openshift/operator-framework-operator-controller@0c7ee18 Rashmi Gottipati UPSTREAM: <carry>: remove DCO line
2026-04-02 08:03:30 openshift/operator-framework-operator-controller@9b89213 Bruno Andrade UPSTREAM: <carry>: migrate bandrade test cases to OTE
2026-04-02 08:03:31 openshift/operator-framework-operator-controller@49fda37 Bruno Andrade UPSTREAM: <carry>: update metadata
2026-04-02 08:03:32 openshift/operator-framework-operator-controller@0877b3a Bruno Andrade UPSTREAM: <carry>: remove originalName
2026-04-02 08:03:33 openshift/operator-framework-operator-controller@eab6df0 Jian Zhang UPSTREAM: <carry>: update 80458's timeout to 180s
2026-04-02 08:03:34 openshift/operator-framework-operator-controller@0e62335 Jian Zhang UPSTREAM: <carry>: update 83026 to specify the clustercatalog
2026-04-02 08:03:35 openshift/operator-framework-operator-controller@13dda36 Catherine Chan-Tse UPSTREAM: <carry>: Update to golang 1.25 and ocp 4.22
2026-04-02 08:03:35 openshift/operator-framework-operator-controller@2e963e1 Predrag Knezevic UPSTREAM: <carry>: Use oc client for running e2e tests
2026-04-02 08:03:36 openshift/operator-framework-operator-controller@89a06f7 Predrag Knezevic UPSTREAM: <carry>: Run upstream e2e tests tagged with @catalogd-update
2026-04-02 08:03:37 openshift/operator-framework-operator-controller@3cd3ec2 Kui Wang UPSTREAM: <carry>: enhance case to make it more stable
2026-04-02 08:03:38 openshift/operator-framework-operator-controller@b39691f Evan Hearne UPSTREAM: <carry>: add service account to curl job
2026-04-02 08:03:38 openshift/operator-framework-operator-controller@58c15e6 Evan Hearne UPSTREAM: <carry>: move sa creation out of buildCurlJob()
2026-04-02 08:03:39 openshift/operator-framework-operator-controller@69d481b Evan Hearne UPSTREAM: <carry>: comment out delete service account
2026-04-02 08:03:40 openshift/operator-framework-operator-controller@38e0875 Evan Hearne UPSTREAM: <carry>: move defercleanup for sa for LIFO
2026-04-02 08:03:41 openshift/operator-framework-operator-controller@be73aa9 Evan Hearne UPSTREAM: <carry>: add polling so job fully deleted before proceed
2026-04-02 08:03:41 openshift/operator-framework-operator-controller@884aa18 Luke Meyer UPSTREAM: <carry>: Revert "Merge pull request #594 from ehearne-redhat/add-service-account-curl-job"
2026-04-02 08:03:42 openshift/operator-framework-operator-controller@e440dc8 Camila Macedo UPSTREAM: <carry>: Remove openshift-redhat-marketplace catalog tests
2026-04-02 08:03:43 openshift/operator-framework-operator-controller@0d54643 Kui Wang UPSTREAM: <carry>: config watchnamespace cases
2026-04-02 08:03:44 openshift/operator-framework-operator-controller@c478d78 Xia Zhao UPSTREAM: <carry>: enhance ocp-79770
2026-04-02 08:03:44 openshift/operator-framework-operator-controller@6f75df0 Kui Wang UPSTREAM: <carry>: upgrade version support case
2026-04-02 08:03:45 openshift/operator-framework-operator-controller@f453d5a Per Goncalves da Silva UPSTREAM: <carry>: Remove installed condition check from auth preflight test
2026-04-02 08:03:46 openshift/operator-framework-operator-controller@6af6371 Per Goncalves da Silva UPSTREAM: <carry>: Add openshift/api dependency
2026-04-02 08:03:47 openshift/operator-framework-operator-controller@4fc4b97 Per Goncalves da Silva UPSTREAM: <carry>: Add boxcutter specific preflight auth test
2026-04-02 08:03:47 openshift/operator-framework-operator-controller@eb5e0d0 Kui Wang UPSTREAM: <carry>: adjust watchnamespace case based on change
2026-04-02 08:03:48 openshift/operator-framework-operator-controller@e3330ba Camila Macedo UPSTREAM: <carry>: fix(ote): Use as operator-controller dep from root dir
2026-04-02 08:03:49 openshift/operator-framework-operator-controller@92899d9 Bruno Andrade UPSTREAM: <carry>: add 83979 automation
2026-04-02 08:03:50 openshift/operator-framework-operator-controller@4fcb8b9 Bruno Andrade UPSTREAM: <carry>: add 85889 automation
2026-04-02 08:03:51 openshift/operator-framework-operator-controller@aa074a9 Per Goncalves da Silva UPSTREAM: <carry>: Update test-operator startup script to fix pod probe endpoints
2026-04-02 08:03:51 openshift/operator-framework-operator-controller@5b0aa92 Per Goncalves da Silva UPSTREAM: <carry>: Fix up own-namespace invalid configuration test
2026-04-02 08:03:52 openshift/operator-framework-operator-controller@c8a70fd Camila Macedo UPSTREAM: <carry>: Preflight tests use in-cluster catalog and bundles instead of openshift-pipelines-operator-rh
2026-04-02 08:03:53 openshift/operator-framework-operator-controller@b6cfdae Kui Wang UPSTREAM: <carry>: adjust sa and permission test cases per new change from boxcutterruntime
2026-04-02 08:03:53 openshift/operator-framework-operator-controller@029ca24 Camila Macedo UPSTREAM: <carry>: Update OCP catalogs to v4.22
2026-04-02 08:03:55 openshift/operator-framework-operator-controller@9230110 Camila Macedo UPSTREAM: <carry>: chore(OTE and Default Catalog Tests) Update go and dependencies
2026-04-02 08:03:56 openshift/operator-framework-operator-controller@b783b13 Jian Zhang UPSTREAM: <carry>: fix 83026 for TP cluster
2026-04-02 08:03:57 openshift/operator-framework-operator-controller@7153c19 Kui Wang UPSTREAM: <carry>: serviceAccount validation unified across all runtimes
2026-04-02 08:03:58 openshift/operator-framework-operator-controller@c599fa1 Stephen Benjamin UPSTREAM: <carry>: Fix OLMv1 test operator to listen on IPv6
2026-04-02 08:03:58 openshift/operator-framework-operator-controller@1026abc Camila Macedo UPSTREAM: <carry>: Increase install timeout and add diagnostic logging for CE install tests
2026-04-02 08:03:59 openshift/operator-framework-operator-controller@0de002a Evan Hearne UPSTREAM: <carry>: add service account to curl job
2026-04-02 08:04:00 openshift/operator-framework-operator-controller@cef4ab4 Jian Zhang UPSTREAM: <carry>: update OCP-75441 to support multi-arch
2026-04-02 08:04:01 openshift/operator-framework-operator-controller@060ca78 Kui Wang UPSTREAM: <carry>: deployment config cases
2026-04-02 08:04:01 openshift/operator-framework-operator-controller@e833c1b Todd Short UPSTREAM: <carry>: Add OTE tests for OLMv1 DeploymentConfig support
2026-04-02 08:04:02 openshift/operator-framework-operator-controller@b9f1410 Todd Short UPSTREAM: <carry>: Update openshift/api and client-go
2026-04-02 08:04:03 openshift/operator-framework-operator-controller@5b92f06 Camila Macedo UPSTREAM: <carry>: Add boxcutter tests
2026-04-02 08:04:04 openshift/operator-framework-operator-controller@26c0094 Xia Zhao UPSTREAM: <carry>: enhance QE cases
2026-04-02 08:04:04 openshift/operator-framework-operator-controller@b6c6272 Daniel Franz UPSTREAM: <carry>: Update quay-operator version to one containing arm64 support
2026-04-02 08:04:05 openshift/operator-framework-operator-controller@1e3dcfa Kui Wang UPSTREAM: <carry>: verify volume/volumeMount override
2026-04-02 08:04:06 openshift/operator-framework-operator-controller@857081f Jian Zhang UPSTREAM: <carry>: Add long-duration test script and documents
2026-04-02 08:04:06 openshift/operator-framework-operator-controller@1e23fdc Todd Short UPSTREAM: <carry>: Update grpc in default-catalog-consistency tests
2026-04-02 08:04:07 openshift/operator-framework-operator-controller@73d3c9d Camila Macedo UPSTREAM: <carry>: Rename ClusterExtensionRevision to ClusterObjectSet in OTE tests
2026-04-02 08:04:08 openshift/operator-framework-operator-controller@18fdd87 Camila Macedo UPSTREAM: <carry>: Skip incompatible operator test when Boxcutter uses ClusterObjectSet
2026-04-02 08:04:08 openshift/operator-framework-operator-controller@c24a8ea Bruno Andrade UPSTREAM: <carry>: add ocp-87557
2026-04-02 08:04:09 openshift/operator-framework-operator-controller@f293bef Francesco Giudici UPSTREAM: <carry>: Add fgiudici as reviewer
2026-04-02 08:04:10 openshift/operator-framework-operator-controller@f1ea2bc Camila Macedo UPSTREAM: <carry>: Remove skip for incompatible operator check after rename of CER
2026-04-02 08:04:10 openshift/operator-framework-operator-controller@63a80bb Kui Wang UPSTREAM: <carry>: Test empty affinity erasure and cleanup

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Apr 2, 2026

@openshift-bot: GitHub didn't allow me to request PR reviews from the following users: openshift/openshift-team-operator-framework.

Note that only openshift members and repo collaborators can review this PR, and authors cannot review their own PRs.

Details

In response to this:

The downstream repository has been updated with the following following upstream commits:

Date Commit Author Message
2026-04-02 15:09:23 operator-framework/operator-controller@985d23a dependabot[bot] 🌱 Bump github.com/klauspost/compress from 1.18.4 to 1.18.5 (#2627)
2026-04-02 15:01:00 operator-framework/operator-controller@a6989b7 Predrag Knezevic Fix ClusterObjectSet ref resolution for Secrets outside system namespace (#2624)
2026-04-02 09:09:54 operator-framework/operator-controller@735b41e Predrag Knezevic refactor(e2e): rename ClusterObjectSet secret cucumber steps for clarity (#2622)

The vendor/ directory has been updated and the following commits were carried:

Date Commit Author Message
2026-04-02 08:03:04 openshift/operator-framework-operator-controller@5436b6f dtfranz UPSTREAM: <carry>: Add OpenShift specific files
2026-04-02 08:03:05 openshift/operator-framework-operator-controller@a30bee5 Camila Macedo UPSTREAM: <carry>: Add new tests for single/own namespaces install modes
2026-04-02 08:03:06 openshift/operator-framework-operator-controller@7147671 Camila Macedo UPSTREAM: <carry>: Upgrade OCP image from 4.20 to 4.21
2026-04-02 08:03:07 openshift/operator-framework-operator-controller@3e920ff Camila Macedo UPSTREAM: <carry>: [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml
2026-04-02 08:03:08 openshift/operator-framework-operator-controller@e2eadd2 Todd Short UPSTREAM: <carry>: Update OCP catalogs to v4.21
2026-04-02 08:03:09 openshift/operator-framework-operator-controller@26f96a2 Kui Wang UPSTREAM: <carry>: support singleown cases in disconnected
2026-04-02 08:03:10 openshift/operator-framework-operator-controller@db3f4cb Kui Wang UPSTREAM: <carry>: fix cases 81696 and 74618 for product code changes
2026-04-02 08:03:10 openshift/operator-framework-operator-controller@b64ea2e Camila Macedo UPSTREAM: <carry>: Define Default timeouts and apply their usage accross to avoid flakes
2026-04-02 08:03:11 openshift/operator-framework-operator-controller@8033414 Todd Short UPSTREAM: <carry>: Update to new feature-gate options in helm
2026-04-02 08:03:12 openshift/operator-framework-operator-controller@23b9ce1 Camila Macedo UPSTREAM: <carry>: Fix flake for single/own ns tests by ensuring uniquess and waiting for k8s cleanups
2026-04-02 08:03:13 openshift/operator-framework-operator-controller@d36f38e Camila Macedo UPSTREAM: <carry>: [OTE]: Enhance single/own ns based on review comments ( Follow-Up of: 714977c )
2026-04-02 08:03:14 openshift/operator-framework-operator-controller@495bd00 Kui Wang UPSTREAM: <carry>: Update OwnSingle template to use spec.config.inline.watchNamespace
2026-04-02 08:03:15 openshift/operator-framework-operator-controller@f4e2907 Camila Macedo UPSTREAM: <carry>: [OTE]: Add webhook cleanup validation on extension uninstall
2026-04-02 08:03:16 openshift/operator-framework-operator-controller@0385486 Kui Wang UPSTREAM: <carry>: Add [OTP] to migrated cases
2026-04-02 08:03:17 openshift/operator-framework-operator-controller@653acdd Camila Macedo UPSTREAM: <carry>: [OTE]: Upgrade dependencies used
2026-04-02 08:03:19 openshift/operator-framework-operator-controller@e8fc2f8 Camila Macedo UPSTREAM: <carry>: fix(OTE): fix OpenShift Kubernetes replace version format
2026-04-02 08:03:20 openshift/operator-framework-operator-controller@208a558 Camila Macedo UPSTREAM: <carry>: [Default Catalog Tests] Upgrade go 1.24.6 and dependencies
2026-04-02 08:03:21 openshift/operator-framework-operator-controller@cc7d85b Kui Wang UPSTREAM: <carry>: add disconnected environment support with custom prow job for migrated qe cases
2026-04-02 08:03:22 openshift/operator-framework-operator-controller@d9254db Jian Zhang UPSTREAM: <carry>: migrate jiazha test cases to OTE
2026-04-02 08:03:23 openshift/operator-framework-operator-controller@a88b1aa Xia Zhao UPSTREAM: <carry>: migrate clustercatalog case to ote
2026-04-02 08:03:24 openshift/operator-framework-operator-controller@e15bd1d Kui Wang UPSTREAM: <carry>: migrate olmv1 QE stress cases
2026-04-02 08:03:24 openshift/operator-framework-operator-controller@fc88c55 Todd Short UPSTREAM: <carry>: Use busybox/httpd to simulate probes
2026-04-02 08:03:25 openshift/operator-framework-operator-controller@8de98d1 Xia Zhao UPSTREAM: <carry>: migrate olmv1 QE cases
2026-04-02 08:03:26 openshift/operator-framework-operator-controller@e4d13db Kui Wang UPSTREAM: <carry>: add agent for olmv1 qe cases
2026-04-02 08:03:26 openshift/operator-framework-operator-controller@bd1bbaf Todd Short UPSTREAM: <carry>: Disable upstream PodDisruptionBudget
2026-04-02 08:03:27 openshift/operator-framework-operator-controller@c8b3d66 Rashmi Gottipati UPSTREAM: <carry>: Add AGENTS.md for AI code contributions
2026-04-02 08:03:28 openshift/operator-framework-operator-controller@69d33f8 Rashmi Gottipati UPSTREAM: <carry>: address review comments through addl prompts
2026-04-02 08:03:29 openshift/operator-framework-operator-controller@2ea005a Rashmi Gottipati UPSTREAM: <carry>: addressing some more review comments
2026-04-02 08:03:30 openshift/operator-framework-operator-controller@0c7ee18 Rashmi Gottipati UPSTREAM: <carry>: remove DCO line
2026-04-02 08:03:30 openshift/operator-framework-operator-controller@9b89213 Bruno Andrade UPSTREAM: <carry>: migrate bandrade test cases to OTE
2026-04-02 08:03:31 openshift/operator-framework-operator-controller@49fda37 Bruno Andrade UPSTREAM: <carry>: update metadata
2026-04-02 08:03:32 openshift/operator-framework-operator-controller@0877b3a Bruno Andrade UPSTREAM: <carry>: remove originalName
2026-04-02 08:03:33 openshift/operator-framework-operator-controller@eab6df0 Jian Zhang UPSTREAM: <carry>: update 80458's timeout to 180s
2026-04-02 08:03:34 openshift/operator-framework-operator-controller@0e62335 Jian Zhang UPSTREAM: <carry>: update 83026 to specify the clustercatalog
2026-04-02 08:03:35 openshift/operator-framework-operator-controller@13dda36 Catherine Chan-Tse UPSTREAM: <carry>: Update to golang 1.25 and ocp 4.22
2026-04-02 08:03:35 openshift/operator-framework-operator-controller@2e963e1 Predrag Knezevic UPSTREAM: <carry>: Use oc client for running e2e tests
2026-04-02 08:03:36 openshift/operator-framework-operator-controller@89a06f7 Predrag Knezevic UPSTREAM: <carry>: Run upstream e2e tests tagged with @catalogd-update
2026-04-02 08:03:37 openshift/operator-framework-operator-controller@3cd3ec2 Kui Wang UPSTREAM: <carry>: enhance case to make it more stable
2026-04-02 08:03:38 openshift/operator-framework-operator-controller@b39691f Evan Hearne UPSTREAM: <carry>: add service account to curl job
2026-04-02 08:03:38 openshift/operator-framework-operator-controller@58c15e6 Evan Hearne UPSTREAM: <carry>: move sa creation out of buildCurlJob()
2026-04-02 08:03:39 openshift/operator-framework-operator-controller@69d481b Evan Hearne UPSTREAM: <carry>: comment out delete service account
2026-04-02 08:03:40 openshift/operator-framework-operator-controller@38e0875 Evan Hearne UPSTREAM: <carry>: move defercleanup for sa for LIFO
2026-04-02 08:03:41 openshift/operator-framework-operator-controller@be73aa9 Evan Hearne UPSTREAM: <carry>: add polling so job fully deleted before proceed
2026-04-02 08:03:41 openshift/operator-framework-operator-controller@884aa18 Luke Meyer UPSTREAM: <carry>: Revert "Merge pull request #594 from ehearne-redhat/add-service-account-curl-job"
2026-04-02 08:03:42 openshift/operator-framework-operator-controller@e440dc8 Camila Macedo UPSTREAM: <carry>: Remove openshift-redhat-marketplace catalog tests
2026-04-02 08:03:43 openshift/operator-framework-operator-controller@0d54643 Kui Wang UPSTREAM: <carry>: config watchnamespace cases
2026-04-02 08:03:44 openshift/operator-framework-operator-controller@c478d78 Xia Zhao UPSTREAM: <carry>: enhance ocp-79770
2026-04-02 08:03:44 openshift/operator-framework-operator-controller@6f75df0 Kui Wang UPSTREAM: <carry>: upgrade version support case
2026-04-02 08:03:45 openshift/operator-framework-operator-controller@f453d5a Per Goncalves da Silva UPSTREAM: <carry>: Remove installed condition check from auth preflight test
2026-04-02 08:03:46 openshift/operator-framework-operator-controller@6af6371 Per Goncalves da Silva UPSTREAM: <carry>: Add openshift/api dependency
2026-04-02 08:03:47 openshift/operator-framework-operator-controller@4fc4b97 Per Goncalves da Silva UPSTREAM: <carry>: Add boxcutter specific preflight auth test
2026-04-02 08:03:47 openshift/operator-framework-operator-controller@eb5e0d0 Kui Wang UPSTREAM: <carry>: adjust watchnamespace case based on change
2026-04-02 08:03:48 openshift/operator-framework-operator-controller@e3330ba Camila Macedo UPSTREAM: <carry>: fix(ote): Use as operator-controller dep from root dir
2026-04-02 08:03:49 openshift/operator-framework-operator-controller@92899d9 Bruno Andrade UPSTREAM: <carry>: add 83979 automation
2026-04-02 08:03:50 openshift/operator-framework-operator-controller@4fcb8b9 Bruno Andrade UPSTREAM: <carry>: add 85889 automation
2026-04-02 08:03:51 openshift/operator-framework-operator-controller@aa074a9 Per Goncalves da Silva UPSTREAM: <carry>: Update test-operator startup script to fix pod probe endpoints
2026-04-02 08:03:51 openshift/operator-framework-operator-controller@5b0aa92 Per Goncalves da Silva UPSTREAM: <carry>: Fix up own-namespace invalid configuration test
2026-04-02 08:03:52 openshift/operator-framework-operator-controller@c8a70fd Camila Macedo UPSTREAM: <carry>: Preflight tests use in-cluster catalog and bundles instead of openshift-pipelines-operator-rh
2026-04-02 08:03:53 openshift/operator-framework-operator-controller@b6cfdae Kui Wang UPSTREAM: <carry>: adjust sa and permission test cases per new change from boxcutterruntime
2026-04-02 08:03:53 openshift/operator-framework-operator-controller@029ca24 Camila Macedo UPSTREAM: <carry>: Update OCP catalogs to v4.22
2026-04-02 08:03:55 openshift/operator-framework-operator-controller@9230110 Camila Macedo UPSTREAM: <carry>: chore(OTE and Default Catalog Tests) Update go and dependencies
2026-04-02 08:03:56 openshift/operator-framework-operator-controller@b783b13 Jian Zhang UPSTREAM: <carry>: fix 83026 for TP cluster
2026-04-02 08:03:57 openshift/operator-framework-operator-controller@7153c19 Kui Wang UPSTREAM: <carry>: serviceAccount validation unified across all runtimes
2026-04-02 08:03:58 openshift/operator-framework-operator-controller@c599fa1 Stephen Benjamin UPSTREAM: <carry>: Fix OLMv1 test operator to listen on IPv6
2026-04-02 08:03:58 openshift/operator-framework-operator-controller@1026abc Camila Macedo UPSTREAM: <carry>: Increase install timeout and add diagnostic logging for CE install tests
2026-04-02 08:03:59 openshift/operator-framework-operator-controller@0de002a Evan Hearne UPSTREAM: <carry>: add service account to curl job
2026-04-02 08:04:00 openshift/operator-framework-operator-controller@cef4ab4 Jian Zhang UPSTREAM: <carry>: update OCP-75441 to support multi-arch
2026-04-02 08:04:01 openshift/operator-framework-operator-controller@060ca78 Kui Wang UPSTREAM: <carry>: deployment config cases
2026-04-02 08:04:01 openshift/operator-framework-operator-controller@e833c1b Todd Short UPSTREAM: <carry>: Add OTE tests for OLMv1 DeploymentConfig support
2026-04-02 08:04:02 openshift/operator-framework-operator-controller@b9f1410 Todd Short UPSTREAM: <carry>: Update openshift/api and client-go
2026-04-02 08:04:03 openshift/operator-framework-operator-controller@5b92f06 Camila Macedo UPSTREAM: <carry>: Add boxcutter tests
2026-04-02 08:04:04 openshift/operator-framework-operator-controller@26c0094 Xia Zhao UPSTREAM: <carry>: enhance QE cases
2026-04-02 08:04:04 openshift/operator-framework-operator-controller@b6c6272 Daniel Franz UPSTREAM: <carry>: Update quay-operator version to one containing arm64 support
2026-04-02 08:04:05 openshift/operator-framework-operator-controller@1e3dcfa Kui Wang UPSTREAM: <carry>: verify volume/volumeMount override
2026-04-02 08:04:06 openshift/operator-framework-operator-controller@857081f Jian Zhang UPSTREAM: <carry>: Add long-duration test script and documents
2026-04-02 08:04:06 openshift/operator-framework-operator-controller@1e23fdc Todd Short UPSTREAM: <carry>: Update grpc in default-catalog-consistency tests
2026-04-02 08:04:07 openshift/operator-framework-operator-controller@73d3c9d Camila Macedo UPSTREAM: <carry>: Rename ClusterExtensionRevision to ClusterObjectSet in OTE tests
2026-04-02 08:04:08 openshift/operator-framework-operator-controller@18fdd87 Camila Macedo UPSTREAM: <carry>: Skip incompatible operator test when Boxcutter uses ClusterObjectSet
2026-04-02 08:04:08 openshift/operator-framework-operator-controller@c24a8ea Bruno Andrade UPSTREAM: <carry>: add ocp-87557
2026-04-02 08:04:09 openshift/operator-framework-operator-controller@f293bef Francesco Giudici UPSTREAM: <carry>: Add fgiudici as reviewer
2026-04-02 08:04:10 openshift/operator-framework-operator-controller@f1ea2bc Camila Macedo UPSTREAM: <carry>: Remove skip for incompatible operator check after rename of CER
2026-04-02 08:04:10 openshift/operator-framework-operator-controller@63a80bb Kui Wang UPSTREAM: <carry>: Test empty affinity erasure and cleanup

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 2, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: bf5fff52-e8e3-4fe1-984f-33a6afa1ed03

📥 Commits

Reviewing files that changed from the base of the PR and between 2c564e0 and bff5883.

⛔ Files ignored due to path filters (28)
  • go.sum is excluded by !**/*.sum
  • openshift/tests-extension/go.sum is excluded by !**/*.sum
  • vendor/github.com/go-jose/go-jose/v4/asymmetric.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/go-jose/go-jose/v4/cipher/key_wrap.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/go-jose/go-jose/v4/symmetric.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/.goreleaser.yml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/README.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/flate/huffman_code.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/flate/regmask_other.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/huff0/decompress_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/huff0/decompress_generic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/internal/cpuinfo/cpuinfo_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/blockenc.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_base.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_best.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_better.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_dfast.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_fast.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/encoder.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/encoder_options.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/fse_decoder_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/fse_decoder_generic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/internal/xxhash/xxhash_other.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/matchlen_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/matchlen_generic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/seqdec_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/seqdec_generic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/modules.txt is excluded by !vendor/**, !**/vendor/**
📒 Files selected for processing (14)
  • cmd/catalogd/main.go
  • cmd/operator-controller/main.go
  • go.mod
  • hack/tools/update-tls-profiles.sh
  • helm/olmv1/templates/rbac/clusterrole-operator-controller-manager-role.yml
  • internal/shared/util/tlsprofiles/mozilla_data.go
  • internal/shared/util/tlsprofiles/tlsprofiles.go
  • manifests/experimental-e2e.yaml
  • manifests/experimental.yaml
  • requirements.txt
  • test/e2e/features/install.feature
  • test/e2e/features/revision.feature
  • test/e2e/steps/hooks.go
  • test/e2e/steps/steps.go
✅ Files skipped from review due to trivial changes (1)
  • requirements.txt
🚧 Files skipped from review as they are similar to previous changes (6)
  • go.mod
  • helm/olmv1/templates/rbac/clusterrole-operator-controller-manager-role.yml
  • manifests/experimental-e2e.yaml
  • manifests/experimental.yaml
  • test/e2e/features/revision.feature
  • test/e2e/steps/steps.go

Walkthrough

Added a secret-fallback cached client, removed external kubeconfig flags, widened RBAC to allow secret GETs, refactored e2e tests to validate objects stored in Secrets, updated Mozilla TLS profiles and curve support, and bumped a few dependencies.

Changes

Cohort / File(s) Summary
Operator controller
cmd/operator-controller/main.go
Removed --kubeconfig handling; added secretFallbackClient wrapper that delegates Get for *corev1.Secret outside the system namespace to the manager API reader, otherwise uses cached client.
Catalog controller CLI
cmd/catalogd/main.go
Removed kubeconfig field and --kubeconfig flag; manager now always created with ctrl.GetConfigOrDie().
RBAC templates & manifests
helm/olmv1/templates/rbac/clusterrole-operator-controller-manager-role.yml, manifests/experimental-e2e.yaml, manifests/experimental.yaml
Added ClusterRole rule granting get on core secrets (apiGroups: [""], resources: ["secrets"], verbs: ["get"]).
E2E feature files
test/e2e/features/install.feature, test/e2e/features/revision.feature
Reworded tests to assert phase objects are managed in Secrets; added scenario installing a Secret containing object payloads and verifying referenced resources are created.
E2E steps & helpers
test/e2e/steps/hooks.go, test/e2e/steps/steps.go
Added namespace to resource; dynamic deletion args in cleanup; renamed/refactored steps and helpers from "ref secret" → "referred secret"; added matchLabels helper and label-table-driven checks; record namespaces when capturing applied resources.
TLS profiles & generator
internal/shared/util/tlsprofiles/mozilla_data.go, internal/shared/util/tlsprofiles/tlsprofiles.go, hack/tools/update-tls-profiles.sh
Updated generated Mozilla data to 5.8, added X25519MLKEM768 to profiles' curves, replaced some ChaCha20-Poly1305 cipher identifiers with SHA256 variants; added exported X25519MLKEM768 constant and lookup entry; generator script updated to new JSON source and post-processing.
Dependency pins
go.mod, requirements.txt
Bumped github.com/klauspost/compress v1.18.4→v1.18.5 and indirect github.com/go-jose/go-jose/v4 v4.1.3→v4.1.4; updated mkdocs-material from 9.7.5→9.7.6.

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~45 minutes

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Apr 2, 2026

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: openshift-bot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

1 similar comment
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Apr 2, 2026

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: openshift-bot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@test/e2e/steps/steps.go`:
- Around line 313-322: The code unconditionally falls back to sc.namespace when
res.GetNamespace() is empty, misclassifying cluster-scoped objects; change the
logic so the fallback to sc.namespace only happens for namespaced resource
kinds. Specifically, after reading res.GetNamespace() and res.GetKind(),
determine whether the kind is namespaced (using your existing
RESTMapper/discovery helper or add a small isNamespaced(kind) check), and only
set namespace = sc.namespace when that check returns true; otherwise leave
namespace as empty string before appending to sc.addedResources (referencing
res.GetNamespace(), res.GetKind(), sc.namespace, sc.addedResources and the
resource struct).
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 3dd1d555-751e-4aa0-8058-a07dd0acf7fe

📥 Commits

Reviewing files that changed from the base of the PR and between 14a49c8 and 260a349.

⛔ Files ignored due to path filters (25)
  • go.sum is excluded by !**/*.sum
  • openshift/tests-extension/go.sum is excluded by !**/*.sum
  • vendor/github.com/klauspost/compress/.goreleaser.yml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/README.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/flate/huffman_code.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/flate/regmask_other.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/huff0/decompress_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/huff0/decompress_generic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/internal/cpuinfo/cpuinfo_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/blockenc.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_base.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_best.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_better.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_dfast.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_fast.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/encoder.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/encoder_options.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/fse_decoder_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/fse_decoder_generic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/internal/xxhash/xxhash_other.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/matchlen_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/matchlen_generic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/seqdec_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/seqdec_generic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/modules.txt is excluded by !vendor/**, !**/vendor/**
📒 Files selected for processing (9)
  • cmd/operator-controller/main.go
  • go.mod
  • helm/olmv1/templates/rbac/clusterrole-operator-controller-manager-role.yml
  • manifests/experimental-e2e.yaml
  • manifests/experimental.yaml
  • test/e2e/features/install.feature
  • test/e2e/features/revision.feature
  • test/e2e/steps/hooks.go
  • test/e2e/steps/steps.go

Comment on lines +313 to +322
} else {
namespace := res.GetNamespace()
if namespace == "" {
namespace = sc.namespace
}
sc.addedResources = append(sc.addedResources, resource{
name: res.GetName(),
kind: strings.ToLower(res.GetKind()),
namespace: namespace,
})
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

Do not default empty namespace for cluster-scoped resources.

At Line 315-Line 317, resources with no metadata.namespace are always assigned sc.namespace. That misclassifies cluster-scoped objects as namespaced; cleanup then issues kubectl delete ... -n <ns> and can fail, leaving leaked resources between scenarios.

Please gate the fallback so it applies only to namespaced resources, and keep namespace empty for cluster-scoped ones.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@test/e2e/steps/steps.go` around lines 313 - 322, The code unconditionally
falls back to sc.namespace when res.GetNamespace() is empty, misclassifying
cluster-scoped objects; change the logic so the fallback to sc.namespace only
happens for namespaced resource kinds. Specifically, after reading
res.GetNamespace() and res.GetKind(), determine whether the kind is namespaced
(using your existing RESTMapper/discovery helper or add a small
isNamespaced(kind) check), and only set namespace = sc.namespace when that check
returns true; otherwise leave namespace as empty string before appending to
sc.addedResources (referencing res.GetNamespace(), res.GetKind(), sc.namespace,
sc.addedResources and the resource struct).

@tmshort
Copy link
Copy Markdown
Contributor

tmshort commented Apr 3, 2026

/test e2e-aws-techpreview-olmv1-ext
/test tests-extension
/test e2e-aws-upgrade-ovn-single-node

dependabot bot added 2 commits April 3, 2026 14:11
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.1.3 to 4.1.4.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v4.1.3...v4.1.4)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material) from 9.7.5 to 9.7.6.
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.7.5...9.7.6)

---
updated-dependencies:
- dependency-name: mkdocs-material
  dependency-version: 9.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@openshift-bot openshift-bot force-pushed the synchronize-upstream branch from 260a349 to 2c564e0 Compare April 4, 2026 00:12
@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label Apr 4, 2026
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Apr 4, 2026

New changes are detected. LGTM label has been removed.

Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)
test/e2e/steps/steps.go (1)

781-789: ⚠️ Potential issue | 🟠 Major

Keep namespace information with referred Secret refs.

cmd/operator-controller/main.go Lines 809-813 explicitly added support for Secret refs outside the system namespace, but these helpers still flatten refs down to names and then list only olmNamespace. The steps built on them can miss non-system refs or validate a same-named Secret in the wrong namespace, which weakens coverage for the regression this PR is fixing. Collect {name, namespace} from spec.phases[].objects[].ref, default empty namespace as needed, and fetch those Secrets directly.

Also applies to: 905-939, 944-955

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@test/e2e/steps/steps.go` around lines 781 - 789, The test helpers currently
call collectReferredSecretNames which returns only secret names and then call
getResource("secret", name, namespace) against a single namespace, causing
misses for Secrets referenced with non-system namespaces; change the helpers to
collect and return structs of {name, namespace} from spec.phases[].objects[].ref
(default namespace to empty string when not set), update places using
collectReferredSecretNames (and loops at the other mentioned ranges) to iterate
over each secretRef and call getResource("secret", secretRef.name,
secretRef.namespace) (or the empty/default where appropriate) and adjust waitFor
usages accordingly so the validation fetches the correct namespace for each
Secret.
♻️ Duplicate comments (1)
test/e2e/steps/steps.go (1)

313-322: ⚠️ Potential issue | 🟠 Major

Don't default empty namespaces for cluster-scoped objects.

When metadata.namespace is empty on Line 315, this still assigns sc.namespace for every non-ClusterExtension/non-ClusterObjectSet. That misclassifies resources like Namespace or ClusterRoleBinding, and ScenarioCleanup in test/e2e/steps/hooks.go Lines 199-201 then deletes them with -n <ns>, which can leak resources between scenarios.

Possible fix
 	} else {
 		namespace := res.GetNamespace()
-		if namespace == "" {
+		if namespace == "" && isNamespacedResource(res) {
 			namespace = sc.namespace
 		}
 		sc.addedResources = append(sc.addedResources, resource{
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@test/e2e/steps/steps.go` around lines 313 - 322, The code currently defaults
empty metadata.namespace to sc.namespace for every object before appending to
sc.addedResources (res.GetNamespace()), which mislabels cluster-scoped
resources; change the logic where sc.addedResources is appended (the block
around res.GetNamespace() and sc.addedResources) to only default to sc.namespace
when the resource kind is namespace-scoped — e.g., add a helper or inline check
(isClusterScoped/isNamespaceScoped) for res.GetKind() and if the kind is
cluster-scoped (Namespace, ClusterRole, ClusterRoleBinding, ClusterExtension,
ClusterObjectSet, etc.) leave namespace as empty string; otherwise set namespace
= sc.namespace and then append the resource. Ensure ScenarioCleanup (hooks.go)
will therefore not delete cluster-scoped objects using a -n flag.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Outside diff comments:
In `@test/e2e/steps/steps.go`:
- Around line 781-789: The test helpers currently call
collectReferredSecretNames which returns only secret names and then call
getResource("secret", name, namespace) against a single namespace, causing
misses for Secrets referenced with non-system namespaces; change the helpers to
collect and return structs of {name, namespace} from spec.phases[].objects[].ref
(default namespace to empty string when not set), update places using
collectReferredSecretNames (and loops at the other mentioned ranges) to iterate
over each secretRef and call getResource("secret", secretRef.name,
secretRef.namespace) (or the empty/default where appropriate) and adjust waitFor
usages accordingly so the validation fetches the correct namespace for each
Secret.

---

Duplicate comments:
In `@test/e2e/steps/steps.go`:
- Around line 313-322: The code currently defaults empty metadata.namespace to
sc.namespace for every object before appending to sc.addedResources
(res.GetNamespace()), which mislabels cluster-scoped resources; change the logic
where sc.addedResources is appended (the block around res.GetNamespace() and
sc.addedResources) to only default to sc.namespace when the resource kind is
namespace-scoped — e.g., add a helper or inline check
(isClusterScoped/isNamespaceScoped) for res.GetKind() and if the kind is
cluster-scoped (Namespace, ClusterRole, ClusterRoleBinding, ClusterExtension,
ClusterObjectSet, etc.) leave namespace as empty string; otherwise set namespace
= sc.namespace and then append the resource. Ensure ScenarioCleanup (hooks.go)
will therefore not delete cluster-scoped objects using a -n flag.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 1c3ce0ed-d390-4fd4-96de-fd0f24edd78f

📥 Commits

Reviewing files that changed from the base of the PR and between 260a349 and 2c564e0.

⛔ Files ignored due to path filters (28)
  • go.sum is excluded by !**/*.sum
  • openshift/tests-extension/go.sum is excluded by !**/*.sum
  • vendor/github.com/go-jose/go-jose/v4/asymmetric.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/go-jose/go-jose/v4/cipher/key_wrap.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/go-jose/go-jose/v4/symmetric.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/.goreleaser.yml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/README.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/flate/huffman_code.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/flate/regmask_other.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/huff0/decompress_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/huff0/decompress_generic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/internal/cpuinfo/cpuinfo_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/blockenc.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_base.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_best.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_better.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_dfast.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/enc_fast.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/encoder.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/encoder_options.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/fse_decoder_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/fse_decoder_generic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/internal/xxhash/xxhash_other.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/matchlen_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/matchlen_generic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/seqdec_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/klauspost/compress/zstd/seqdec_generic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/modules.txt is excluded by !vendor/**, !**/vendor/**
📒 Files selected for processing (10)
  • cmd/operator-controller/main.go
  • go.mod
  • helm/olmv1/templates/rbac/clusterrole-operator-controller-manager-role.yml
  • manifests/experimental-e2e.yaml
  • manifests/experimental.yaml
  • requirements.txt
  • test/e2e/features/install.feature
  • test/e2e/features/revision.feature
  • test/e2e/steps/hooks.go
  • test/e2e/steps/steps.go
✅ Files skipped from review due to trivial changes (1)
  • requirements.txt
🚧 Files skipped from review as they are similar to previous changes (5)
  • helm/olmv1/templates/rbac/clusterrole-operator-controller-manager-role.yml
  • go.mod
  • manifests/experimental.yaml
  • test/e2e/features/install.feature
  • test/e2e/features/revision.feature

@openshift-bot openshift-bot added the lgtm Indicates that a PR is ready to be merged. label Apr 5, 2026
@openshift-bot openshift-bot force-pushed the synchronize-upstream branch from 2c564e0 to 81d34b3 Compare April 7, 2026 00:12
@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label Apr 7, 2026
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Apr 7, 2026

New changes are detected. LGTM label has been removed.

@jianzhangbjz
Copy link
Copy Markdown
Member

Hi @Xia-Zhao-rh , could you help verify it? Thanks!
/assign @Xia-Zhao-rh

@Xia-Zhao-rh
Copy link
Copy Markdown
Contributor

/verified by @Xia-Zhao-rh

@openshift-ci-robot openshift-ci-robot added the verified Signifies that the PR passed pre-merge verification criteria label Apr 7, 2026
stbenjam and others added 22 commits April 8, 2026 00:08
The test operator's httpd script uses python3's http.server which
binds to 0.0.0.0 (IPv4 only) by default. On IPv6-only networks
(e.g. metal-ipi-ovn-ipv6-techpreview), the startup/liveness/readiness
probes connect to the pod's IPv6 address but nothing is listening,
causing the operator pod to never become Ready and the OLMv1
ClusterExtension install test to time out.

Adding --bind :: makes python3 http.server listen on all interfaces
including IPv6, fixing the test on dual-stack and IPv6-only clusters.

This resolves the 0% pass rate on:
- periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-ipv6-techpreview

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…g for CE install tests

With BoxcutterRuntime, Installed=True is only set after all availability
probes pass, which can take longer on TechPreview clusters (IPv6, multi-arch).
Increases install-specific timeout from 5m to 10m and logs condition state
on each poll to aid debugging flaky failures.
Add 7 Ginkgo tests under [sig-olmv1][OCPFeatureGate:NewOLMDeploymentConfig]
covering the spec.config.inline.deploymentConfig feature:

Positive tests (verify applied customisations):
- environment variables
- resource requirements
- tolerations
- node selector
- annotations on deployment and pod template

Negative tests (verify terminal validation errors):
- invalid deploymentConfig.env type (string instead of array)
- unknown field inside deploymentConfig (additionalProperties:false)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Todd Short <tshort@redhat.com>
Signed-off-by: Todd Short <tshort@redhat.com>
…64 support

Signed-off-by: Daniel Franz <dfranz@redhat.com>
Signed-off-by: Todd Short <tshort@redhat.com>
…t in OTE tests

Update all remaining references to ClusterExtensionRevision in
openshift/tests-extension to use ClusterObjectSet, matching the
upstream rename in operator-framework/operator-controller#2589.

Files updated:
- test/qe/specs/olmv1_ce.go: RBAC resource names and comments
- test/olmv1-preflight.go: scenario constants, test names, RBAC rules
- .openshift-tests-extension/openshift_payload_olmv1.json: test name
- pkg/bindata/qe/bindata.go: embedded RBAC templates
- test/qe/testdata/olm/sa-nginx-limited-boxcutter.yaml: RBAC resources
- test/qe/testdata/olm/sa-nginx-insufficient-operand-rbac-boxcutter.yaml: RBAC resources

Signed-off-by: Camila Macedo <cmacedo@redhat.com>
Made-with: Cursor
…s ClusterObjectSet

The upstream rename of ClusterExtensionRevision to ClusterObjectSet
(operator-framework/operator-controller#2589) breaks the incompatible
operator detection in cluster-olm-operator. The cluster-olm-operator
binary still reads ClusterExtensionRevision resources to find operators
with olm.maxOpenShiftVersion, so after the rename it never detects
incompatible operators and InstalledOLMOperatorsUpgradeable stays True.

Skip this test when NewOLMBoxCutterRuntime feature gate is enabled
until cluster-olm-operator is updated to read ClusterObjectSet.

Signed-off-by: Camila Macedo <cmacedo@redhat.com>
Made-with: Cursor
Signed-off-by: Francesco Giudici <fgiudici@redhat.com>
@openshift-bot openshift-bot force-pushed the synchronize-upstream branch from 81d34b3 to bff5883 Compare April 8, 2026 00:12
@openshift-bot openshift-bot added the lgtm Indicates that a PR is ready to be merged. label Apr 8, 2026
@openshift-ci-robot openshift-ci-robot removed the verified Signifies that the PR passed pre-merge verification criteria label Apr 8, 2026
@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label Apr 8, 2026
@openshift-ci-robot
Copy link
Copy Markdown

@openshift-bot: This pull request explicitly references no jira issue.

Details

In response to this:

The downstream repository has been updated with the following following upstream commits:

Date Commit Author Message
2026-04-07 14:58:12 operator-framework/operator-controller@4510b1b Camila Macedo Update TLS profiles to Mozilla v5.8 (#2631)
2026-04-06 13:21:22 operator-framework/operator-controller@fd25bf7 Jordan Keister Revert "initial (#2562)" (#2630)
2026-04-03 15:06:59 operator-framework/operator-controller@5060cae dependabot[bot] 🌱 Bump mkdocs-material from 9.7.5 to 9.7.6 (#2629)
2026-04-03 14:11:58 operator-framework/operator-controller@9525539 dependabot[bot] 🌱 Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#2628)
2026-04-02 15:09:23 operator-framework/operator-controller@985d23a dependabot[bot] 🌱 Bump github.com/klauspost/compress from 1.18.4 to 1.18.5 (#2627)
2026-04-02 15:01:00 operator-framework/operator-controller@a6989b7 Predrag Knezevic Fix ClusterObjectSet ref resolution for Secrets outside system namespace (#2624)
2026-04-02 09:09:54 operator-framework/operator-controller@735b41e Predrag Knezevic refactor(e2e): rename ClusterObjectSet secret cucumber steps for clarity (#2622)

The vendor/ directory has been updated and the following commits were carried:

Date Commit Author Message
2026-04-02 08:03:04 openshift/operator-framework-operator-controller@5436b6f dtfranz UPSTREAM: <carry>: Add OpenShift specific files
2026-04-02 08:03:05 openshift/operator-framework-operator-controller@a30bee5 Camila Macedo UPSTREAM: <carry>: Add new tests for single/own namespaces install modes
2026-04-02 08:03:06 openshift/operator-framework-operator-controller@7147671 Camila Macedo UPSTREAM: <carry>: Upgrade OCP image from 4.20 to 4.21
2026-04-02 08:03:07 openshift/operator-framework-operator-controller@3e920ff Camila Macedo UPSTREAM: <carry>: [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml
2026-04-02 08:03:08 openshift/operator-framework-operator-controller@e2eadd2 Todd Short UPSTREAM: <carry>: Update OCP catalogs to v4.21
2026-04-02 08:03:09 openshift/operator-framework-operator-controller@26f96a2 Kui Wang UPSTREAM: <carry>: support singleown cases in disconnected
2026-04-02 08:03:10 openshift/operator-framework-operator-controller@db3f4cb Kui Wang UPSTREAM: <carry>: fix cases 81696 and 74618 for product code changes
2026-04-02 08:03:10 openshift/operator-framework-operator-controller@b64ea2e Camila Macedo UPSTREAM: <carry>: Define Default timeouts and apply their usage accross to avoid flakes
2026-04-02 08:03:11 openshift/operator-framework-operator-controller@8033414 Todd Short UPSTREAM: <carry>: Update to new feature-gate options in helm
2026-04-02 08:03:12 openshift/operator-framework-operator-controller@23b9ce1 Camila Macedo UPSTREAM: <carry>: Fix flake for single/own ns tests by ensuring uniquess and waiting for k8s cleanups
2026-04-02 08:03:13 openshift/operator-framework-operator-controller@d36f38e Camila Macedo UPSTREAM: <carry>: [OTE]: Enhance single/own ns based on review comments ( Follow-Up of: 714977c )
2026-04-02 08:03:14 openshift/operator-framework-operator-controller@495bd00 Kui Wang UPSTREAM: <carry>: Update OwnSingle template to use spec.config.inline.watchNamespace
2026-04-02 08:03:15 openshift/operator-framework-operator-controller@f4e2907 Camila Macedo UPSTREAM: <carry>: [OTE]: Add webhook cleanup validation on extension uninstall
2026-04-02 08:03:16 openshift/operator-framework-operator-controller@0385486 Kui Wang UPSTREAM: <carry>: Add [OTP] to migrated cases
2026-04-02 08:03:17 openshift/operator-framework-operator-controller@653acdd Camila Macedo UPSTREAM: <carry>: [OTE]: Upgrade dependencies used
2026-04-02 08:03:19 openshift/operator-framework-operator-controller@e8fc2f8 Camila Macedo UPSTREAM: <carry>: fix(OTE): fix OpenShift Kubernetes replace version format
2026-04-02 08:03:20 openshift/operator-framework-operator-controller@208a558 Camila Macedo UPSTREAM: <carry>: [Default Catalog Tests] Upgrade go 1.24.6 and dependencies
2026-04-02 08:03:21 openshift/operator-framework-operator-controller@cc7d85b Kui Wang UPSTREAM: <carry>: add disconnected environment support with custom prow job for migrated qe cases
2026-04-02 08:03:22 openshift/operator-framework-operator-controller@d9254db Jian Zhang UPSTREAM: <carry>: migrate jiazha test cases to OTE
2026-04-02 08:03:23 openshift/operator-framework-operator-controller@a88b1aa Xia Zhao UPSTREAM: <carry>: migrate clustercatalog case to ote
2026-04-02 08:03:24 openshift/operator-framework-operator-controller@e15bd1d Kui Wang UPSTREAM: <carry>: migrate olmv1 QE stress cases
2026-04-02 08:03:24 openshift/operator-framework-operator-controller@fc88c55 Todd Short UPSTREAM: <carry>: Use busybox/httpd to simulate probes
2026-04-02 08:03:25 openshift/operator-framework-operator-controller@8de98d1 Xia Zhao UPSTREAM: <carry>: migrate olmv1 QE cases
2026-04-02 08:03:26 openshift/operator-framework-operator-controller@e4d13db Kui Wang UPSTREAM: <carry>: add agent for olmv1 qe cases
2026-04-02 08:03:26 openshift/operator-framework-operator-controller@bd1bbaf Todd Short UPSTREAM: <carry>: Disable upstream PodDisruptionBudget
2026-04-02 08:03:27 openshift/operator-framework-operator-controller@c8b3d66 Rashmi Gottipati UPSTREAM: <carry>: Add AGENTS.md for AI code contributions
2026-04-02 08:03:28 openshift/operator-framework-operator-controller@69d33f8 Rashmi Gottipati UPSTREAM: <carry>: address review comments through addl prompts
2026-04-02 08:03:29 openshift/operator-framework-operator-controller@2ea005a Rashmi Gottipati UPSTREAM: <carry>: addressing some more review comments
2026-04-02 08:03:30 openshift/operator-framework-operator-controller@0c7ee18 Rashmi Gottipati UPSTREAM: <carry>: remove DCO line
2026-04-02 08:03:30 openshift/operator-framework-operator-controller@9b89213 Bruno Andrade UPSTREAM: <carry>: migrate bandrade test cases to OTE
2026-04-02 08:03:31 openshift/operator-framework-operator-controller@49fda37 Bruno Andrade UPSTREAM: <carry>: update metadata
2026-04-02 08:03:32 openshift/operator-framework-operator-controller@0877b3a Bruno Andrade UPSTREAM: <carry>: remove originalName
2026-04-02 08:03:33 openshift/operator-framework-operator-controller@eab6df0 Jian Zhang UPSTREAM: <carry>: update 80458's timeout to 180s
2026-04-02 08:03:34 openshift/operator-framework-operator-controller@0e62335 Jian Zhang UPSTREAM: <carry>: update 83026 to specify the clustercatalog
2026-04-02 08:03:35 openshift/operator-framework-operator-controller@13dda36 Catherine Chan-Tse UPSTREAM: <carry>: Update to golang 1.25 and ocp 4.22
2026-04-02 08:03:35 openshift/operator-framework-operator-controller@2e963e1 Predrag Knezevic UPSTREAM: <carry>: Use oc client for running e2e tests
2026-04-02 08:03:36 openshift/operator-framework-operator-controller@89a06f7 Predrag Knezevic UPSTREAM: <carry>: Run upstream e2e tests tagged with @catalogd-update
2026-04-02 08:03:37 openshift/operator-framework-operator-controller@3cd3ec2 Kui Wang UPSTREAM: <carry>: enhance case to make it more stable
2026-04-02 08:03:38 openshift/operator-framework-operator-controller@b39691f Evan Hearne UPSTREAM: <carry>: add service account to curl job
2026-04-02 08:03:38 openshift/operator-framework-operator-controller@58c15e6 Evan Hearne UPSTREAM: <carry>: move sa creation out of buildCurlJob()
2026-04-02 08:03:39 openshift/operator-framework-operator-controller@69d481b Evan Hearne UPSTREAM: <carry>: comment out delete service account
2026-04-02 08:03:40 openshift/operator-framework-operator-controller@38e0875 Evan Hearne UPSTREAM: <carry>: move defercleanup for sa for LIFO
2026-04-02 08:03:41 openshift/operator-framework-operator-controller@be73aa9 Evan Hearne UPSTREAM: <carry>: add polling so job fully deleted before proceed
2026-04-02 08:03:41 openshift/operator-framework-operator-controller@884aa18 Luke Meyer UPSTREAM: <carry>: Revert "Merge pull request #594 from ehearne-redhat/add-service-account-curl-job"
2026-04-02 08:03:42 openshift/operator-framework-operator-controller@e440dc8 Camila Macedo UPSTREAM: <carry>: Remove openshift-redhat-marketplace catalog tests
2026-04-02 08:03:43 openshift/operator-framework-operator-controller@0d54643 Kui Wang UPSTREAM: <carry>: config watchnamespace cases
2026-04-02 08:03:44 openshift/operator-framework-operator-controller@c478d78 Xia Zhao UPSTREAM: <carry>: enhance ocp-79770
2026-04-02 08:03:44 openshift/operator-framework-operator-controller@6f75df0 Kui Wang UPSTREAM: <carry>: upgrade version support case
2026-04-02 08:03:45 openshift/operator-framework-operator-controller@f453d5a Per Goncalves da Silva UPSTREAM: <carry>: Remove installed condition check from auth preflight test
2026-04-02 08:03:46 openshift/operator-framework-operator-controller@6af6371 Per Goncalves da Silva UPSTREAM: <carry>: Add openshift/api dependency
2026-04-02 08:03:47 openshift/operator-framework-operator-controller@4fc4b97 Per Goncalves da Silva UPSTREAM: <carry>: Add boxcutter specific preflight auth test
2026-04-02 08:03:47 openshift/operator-framework-operator-controller@eb5e0d0 Kui Wang UPSTREAM: <carry>: adjust watchnamespace case based on change
2026-04-02 08:03:48 openshift/operator-framework-operator-controller@e3330ba Camila Macedo UPSTREAM: <carry>: fix(ote): Use as operator-controller dep from root dir
2026-04-02 08:03:49 openshift/operator-framework-operator-controller@92899d9 Bruno Andrade UPSTREAM: <carry>: add 83979 automation
2026-04-02 08:03:50 openshift/operator-framework-operator-controller@4fcb8b9 Bruno Andrade UPSTREAM: <carry>: add 85889 automation
2026-04-02 08:03:51 openshift/operator-framework-operator-controller@aa074a9 Per Goncalves da Silva UPSTREAM: <carry>: Update test-operator startup script to fix pod probe endpoints
2026-04-02 08:03:51 openshift/operator-framework-operator-controller@5b0aa92 Per Goncalves da Silva UPSTREAM: <carry>: Fix up own-namespace invalid configuration test
2026-04-02 08:03:52 openshift/operator-framework-operator-controller@c8a70fd Camila Macedo UPSTREAM: <carry>: Preflight tests use in-cluster catalog and bundles instead of openshift-pipelines-operator-rh
2026-04-02 08:03:53 openshift/operator-framework-operator-controller@b6cfdae Kui Wang UPSTREAM: <carry>: adjust sa and permission test cases per new change from boxcutterruntime
2026-04-02 08:03:53 openshift/operator-framework-operator-controller@029ca24 Camila Macedo UPSTREAM: <carry>: Update OCP catalogs to v4.22
2026-04-02 08:03:55 openshift/operator-framework-operator-controller@9230110 Camila Macedo UPSTREAM: <carry>: chore(OTE and Default Catalog Tests) Update go and dependencies
2026-04-02 08:03:56 openshift/operator-framework-operator-controller@b783b13 Jian Zhang UPSTREAM: <carry>: fix 83026 for TP cluster
2026-04-02 08:03:57 openshift/operator-framework-operator-controller@7153c19 Kui Wang UPSTREAM: <carry>: serviceAccount validation unified across all runtimes
2026-04-02 08:03:58 openshift/operator-framework-operator-controller@c599fa1 Stephen Benjamin UPSTREAM: <carry>: Fix OLMv1 test operator to listen on IPv6
2026-04-02 08:03:58 openshift/operator-framework-operator-controller@1026abc Camila Macedo UPSTREAM: <carry>: Increase install timeout and add diagnostic logging for CE install tests
2026-04-02 08:03:59 openshift/operator-framework-operator-controller@0de002a Evan Hearne UPSTREAM: <carry>: add service account to curl job
2026-04-02 08:04:00 openshift/operator-framework-operator-controller@cef4ab4 Jian Zhang UPSTREAM: <carry>: update OCP-75441 to support multi-arch
2026-04-02 08:04:01 openshift/operator-framework-operator-controller@060ca78 Kui Wang UPSTREAM: <carry>: deployment config cases
2026-04-02 08:04:01 openshift/operator-framework-operator-controller@e833c1b Todd Short UPSTREAM: <carry>: Add OTE tests for OLMv1 DeploymentConfig support
2026-04-02 08:04:02 openshift/operator-framework-operator-controller@b9f1410 Todd Short UPSTREAM: <carry>: Update openshift/api and client-go
2026-04-02 08:04:03 openshift/operator-framework-operator-controller@5b92f06 Camila Macedo UPSTREAM: <carry>: Add boxcutter tests
2026-04-02 08:04:04 openshift/operator-framework-operator-controller@26c0094 Xia Zhao UPSTREAM: <carry>: enhance QE cases
2026-04-02 08:04:04 openshift/operator-framework-operator-controller@b6c6272 Daniel Franz UPSTREAM: <carry>: Update quay-operator version to one containing arm64 support
2026-04-02 08:04:05 openshift/operator-framework-operator-controller@1e3dcfa Kui Wang UPSTREAM: <carry>: verify volume/volumeMount override
2026-04-02 08:04:06 openshift/operator-framework-operator-controller@857081f Jian Zhang UPSTREAM: <carry>: Add long-duration test script and documents
2026-04-02 08:04:06 openshift/operator-framework-operator-controller@1e23fdc Todd Short UPSTREAM: <carry>: Update grpc in default-catalog-consistency tests
2026-04-02 08:04:07 openshift/operator-framework-operator-controller@73d3c9d Camila Macedo UPSTREAM: <carry>: Rename ClusterExtensionRevision to ClusterObjectSet in OTE tests
2026-04-02 08:04:08 openshift/operator-framework-operator-controller@18fdd87 Camila Macedo UPSTREAM: <carry>: Skip incompatible operator test when Boxcutter uses ClusterObjectSet
2026-04-02 08:04:08 openshift/operator-framework-operator-controller@c24a8ea Bruno Andrade UPSTREAM: <carry>: add ocp-87557
2026-04-02 08:04:09 openshift/operator-framework-operator-controller@f293bef Francesco Giudici UPSTREAM: <carry>: Add fgiudici as reviewer
2026-04-02 08:04:10 openshift/operator-framework-operator-controller@f1ea2bc Camila Macedo UPSTREAM: <carry>: Remove skip for incompatible operator check after rename of CER
2026-04-02 08:04:10 openshift/operator-framework-operator-controller@63a80bb Kui Wang UPSTREAM: <carry>: Test empty affinity erasure and cleanup

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Apr 8, 2026

New changes are detected. LGTM label has been removed.

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Apr 8, 2026

@openshift-bot: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/openshift-e2e-aws bff5883 link true /test openshift-e2e-aws
ci/prow/okd-scos-images bff5883 link true /test okd-scos-images

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@Xia-Zhao-rh
Copy link
Copy Markdown
Contributor

/retest

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. kind/sync tide/merge-method-merge Denotes a PR that should use a standard merge by tide when it merges.

Projects

None yet

Development

Successfully merging this pull request may close these issues.