Skip to content

NO-ISSUE: rebase-release-5.0-5.0.0-0.nightly-2026-04-26-064718_amd64-2026-04-26_arm64-2026-04-28#6603

Merged
openshift-merge-bot[bot] merged 8 commits intoopenshift:mainfrom
pacevedom:rebase-c8024efab-5.0.0-0.nightly-2026-04-26-064718_amd64-2026-04-26_arm64-2026-04-28
Apr 29, 2026
Merged

NO-ISSUE: rebase-release-5.0-5.0.0-0.nightly-2026-04-26-064718_amd64-2026-04-26_arm64-2026-04-28#6603
openshift-merge-bot[bot] merged 8 commits intoopenshift:mainfrom
pacevedom:rebase-c8024efab-5.0.0-0.nightly-2026-04-26-064718_amd64-2026-04-26_arm64-2026-04-28

Conversation

@pacevedom
Copy link
Copy Markdown
Contributor

@pacevedom pacevedom commented Apr 29, 2026

Summary by CodeRabbit

  • Chores

    • Updated to newer ARM64 nightly builds across multiple components
    • Refreshed container image digests for multus, operator-lifecycle-manager, and core release images
    • Updated Go module dependencies
  • Bug Fixes

    • Fixed operator-lifecycle-manager marketplace NetworkPolicy configuration to ensure proper inclusion in deployment

@openshift-ci openshift-ci Bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Apr 29, 2026
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Apr 29, 2026

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Apr 29, 2026

Walkthrough

This pull request updates ARM64 build artifacts for a newer OpenShift nightly release (2026-04-28-233705 replacing 2026-04-26-061912). Changes include bumped OCP versions, refreshed image digests across core components (multus, OLM, release images), updated Go dependencies, CRI-O configuration adjustments, and script enhancements for rebase automation.

Changes

Cohort / File(s) Summary
Version and Release Metadata
Makefile.version.aarch64.var, scripts/auto-rebase/last_rebase.sh
OCP_VERSION and nightly build identifiers updated from 2026-04-26 to 2026-04-28.
Multus Component Images
assets/components/multus/kustomization.aarch64.yaml, assets/components/multus/release-multus-aarch64.json
Image digests for multus-cni-microshift and containernetworking-plugins-microshift replaced with new SHA256 values; release base updated.
OLM Component Images
assets/optional/operator-lifecycle-manager/kustomization.aarch64.yaml, assets/optional/operator-lifecycle-manager/release-olm-aarch64.json
Digests updated for OLM, config-map-operator-registry, and kube-rbac-proxy; environment variable references adjusted in patches.
Core Release Images
assets/release/release-aarch64.json
Release base and multiple image digests updated (cli, coredns, haproxy-router, kube-rbac-proxy, ovn-kubernetes-microshift, pod, service-ca-operator, csi-snapshot-controller).
Container Runtime & Dependencies
packaging/crio.conf.d/10-microshift_arm64.conf, etcd/go.mod
CRI-O pause_image digest updated; Go dependency github.com/openshift/api bumped to newer pseudo-version.
Rebase Automation Tracking
scripts/auto-rebase/changelog.txt, scripts/auto-rebase/commits.txt
Changelog content truncated with single service-ca-operator entry; ovn-kubernetes and service-ca-operator commit SHAs advanced.
Rebase Automation Logic
scripts/auto-rebase/rebase.sh
Added NetworkPolicy manifest validation to ensure marketplace default-deny-all policy is included in OLM kustomization via sed insertion.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

🚥 Pre-merge checks | ✅ 11 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Docstring Coverage ⚠️ Warning Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Write docstrings for the functions missing them to satisfy the coverage threshold.
✅ Passed checks (11 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title is a version bump identifier for a rebase operation, directly reflecting the main change (updating release versions and arm64 nightly builds), but it is overly technical and difficult to parse due to timestamp encoding.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed Custom check for stable Ginkgo test names is not applicable; PR contains only configuration, version, and dependency updates with no Ginkgo test definitions.
Test Structure And Quality ✅ Passed PR contains no Ginkgo test code modifications, only configuration files, manifests, and automation scripts. Check is not applicable.
Microshift Test Compatibility ✅ Passed PR contains only configuration and script modifications with no new Ginkgo e2e test files introduced.
Single Node Openshift (Sno) Test Compatibility ✅ Passed This PR contains no new Ginkgo e2e tests, only configuration and script updates.
Topology-Aware Scheduling Compatibility ✅ Passed PR contains only version/digest updates and tooling changes; no scheduling constraints introduced that would break SNO, TNF, TNA, or HyperShift.
Ote Binary Stdout Contract ✅ Passed PR modifies only configuration files and does not change Go source code implementing OTE binaries, so OTE Binary Stdout Contract is not applicable.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed This PR does not add any new Ginkgo e2e tests. The changes consist of version bumps, image digests, and configuration updates. No test code additions found.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 golangci-lint (2.11.4)

level=error msg="Running error: context loading failed: failed to load packages: failed to load packages: failed to load with go/packages: err: exit status 1: stderr: go: inconsistent vendoring in :\n\tgithub.com/apparentlymart/go-cidr@v1.1.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt\n\tgithub.com/coreos/go-systemd@v0.0.0-20190321100706-95778dfbb74e: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt\n\tgithub.com/google/go-cmp@v0.7.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt\n\tgithub.com/miekg/dns@v1.1.63: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt\n\tgithub.com/openshift/api@v0.0.0-20260309155933-45fd88d185dd: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt\n\tgithub.com/openshift/build-machinery-go@v0.0.0-20251023084048-5d77c1a5e5af: is explicitly required in go.mod, but not marked as explicit

... [truncated 29519 characters] ...

elet: is replaced in go.mod, but not marked as replaced in vendor/modules.txt\n\tk8s.io/metrics: is replaced in go.mod, but not marked as replaced in vendor/modules.txt\n\tk8s.io/mount-utils: is replaced in go.mod, but not marked as replaced in vendor/modules.txt\n\tk8s.io/pod-security-admission: is replaced in go.mod, but not marked as replaced in vendor/modules.txt\n\tk8s.io/sample-apiserver: is replaced in go.mod, but not marked as replaced in vendor/modules.txt\n\tk8s.io/sample-cli-plugin: is replaced in go.mod, but not marked as replaced in vendor/modules.txt\n\tk8s.io/sample-controller: is replaced in go.mod, but not marked as replaced in vendor/modules.txt\n\n\tTo ignore the vendor directory, use -mod=readonly or -mod=mod.\n\tTo sync the vendor directory, run:\n\t\tgo mod vendor\n"


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share
Review rate limit: 7/8 reviews remaining, refill in 7 minutes and 30 seconds.

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Apr 29, 2026
@pacevedom pacevedom changed the title Rebase c8024efab 5.0.0 0.nightly 2026 04 26 064718 amd64 2026 04 26 arm64 2026 04 28 NO-ISSUE: rebase-release-5.0-5.0.0-0.nightly-2026-04-26-064718_amd64-2026-04-26_arm64-2026-04-28 Apr 29, 2026
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Apr 29, 2026
@openshift-ci-robot
Copy link
Copy Markdown

@pacevedom: This pull request explicitly references no jira issue.

Details

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@pacevedom
Copy link
Copy Markdown
Contributor Author

/test e2e-aws-tests-bootc-arm-el9
/test e2e-aws-tests-bootc-el9

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)
etcd/go.mod (1)

7-19: ⚠️ Potential issue | 🟡 Minor

Dependency bump: confirm go.sum + downstream compile/test coverage.

Since github.com/openshift/api is bumped (line 8), please ensure the PR also updates etcd/go.sum and that go mod tidy doesn’t re-order/alter dependencies unexpectedly.

At minimum, in the microshift/etcd module, run something like:

  • go mod tidy
  • go test ./...

If go.sum changes aren’t included, CI will often fail on verification steps.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@etcd/go.mod` around lines 7 - 19, The etcd/go.mod dependency for
github.com/openshift/api was bumped but the corresponding etcd/go.sum and module
hygiene may be missing; run go mod tidy in the microshift/etcd module to
regenerate and update etcd/go.sum, ensure no unexpected reordering, then run go
test ./... (or your CI test matrix) to verify compile/test coverage; include any
go.sum changes in the PR before merging so CI's module verification passes.
🧹 Nitpick comments (1)
assets/optional/operator-lifecycle-manager/kustomization.aarch64.yaml (1)

19-24: Consider reducing digest duplication in patch values.

OPERATOR_REGISTRY_IMAGE and OLM_IMAGE repeat values already declared under images; wiring these from a single source would reduce drift risk in future rebases.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@assets/optional/operator-lifecycle-manager/kustomization.aarch64.yaml` around
lines 19 - 24, The patch hardcodes the same image digests for
OPERATOR_REGISTRY_IMAGE and OLM_IMAGE that are already declared under images,
causing duplication; update the kustomization so those env values are sourced
from the single images declaration instead of repeating the digest: remove the
hardcoded value fields in the patch that set OPERATOR_REGISTRY_IMAGE and
OLM_IMAGE and replace them with references to the centralized image entries (use
kustomize variable substitution or a replacement/transformer that maps the
images entries to env vars) so OPERATOR_REGISTRY_IMAGE and OLM_IMAGE are
populated from the images list rather than duplicate literals.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Outside diff comments:
In `@etcd/go.mod`:
- Around line 7-19: The etcd/go.mod dependency for github.com/openshift/api was
bumped but the corresponding etcd/go.sum and module hygiene may be missing; run
go mod tidy in the microshift/etcd module to regenerate and update etcd/go.sum,
ensure no unexpected reordering, then run go test ./... (or your CI test matrix)
to verify compile/test coverage; include any go.sum changes in the PR before
merging so CI's module verification passes.

---

Nitpick comments:
In `@assets/optional/operator-lifecycle-manager/kustomization.aarch64.yaml`:
- Around line 19-24: The patch hardcodes the same image digests for
OPERATOR_REGISTRY_IMAGE and OLM_IMAGE that are already declared under images,
causing duplication; update the kustomization so those env values are sourced
from the single images declaration instead of repeating the digest: remove the
hardcoded value fields in the patch that set OPERATOR_REGISTRY_IMAGE and
OLM_IMAGE and replace them with references to the centralized image entries (use
kustomize variable substitution or a replacement/transformer that maps the
images entries to env vars) so OPERATOR_REGISTRY_IMAGE and OLM_IMAGE are
populated from the images list rather than duplicate literals.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: fe95e478-d75a-4f58-b882-61c2eb846d85

📥 Commits

Reviewing files that changed from the base of the PR and between c8024ef and 8093604.

⛔ Files ignored due to path filters (3)
  • etcd/go.sum is excluded by !**/*.sum
  • etcd/vendor/github.com/openshift/api/config/v1/types_authentication.go is excluded by !**/vendor/**
  • etcd/vendor/modules.txt is excluded by !**/vendor/**
📒 Files selected for processing (12)
  • Makefile.version.aarch64.var
  • assets/components/multus/kustomization.aarch64.yaml
  • assets/components/multus/release-multus-aarch64.json
  • assets/optional/operator-lifecycle-manager/kustomization.aarch64.yaml
  • assets/optional/operator-lifecycle-manager/release-olm-aarch64.json
  • assets/release/release-aarch64.json
  • etcd/go.mod
  • packaging/crio.conf.d/10-microshift_arm64.conf
  • scripts/auto-rebase/changelog.txt
  • scripts/auto-rebase/commits.txt
  • scripts/auto-rebase/last_rebase.sh
  • scripts/auto-rebase/rebase.sh

@pacevedom pacevedom marked this pull request as ready for review April 29, 2026 09:20
@openshift-ci openshift-ci Bot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Apr 29, 2026
@openshift-ci openshift-ci Bot requested review from agullon and eslutsky April 29, 2026 09:21
@ggiguash
Copy link
Copy Markdown
Contributor

/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Apr 29, 2026
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Apr 29, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ggiguash, pacevedom

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Apr 29, 2026

@pacevedom: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@pacevedom
Copy link
Copy Markdown
Contributor Author

/verified by CI

@openshift-ci-robot openshift-ci-robot added the verified Signifies that the PR passed pre-merge verification criteria label Apr 29, 2026
@openshift-ci-robot
Copy link
Copy Markdown

@pacevedom: This PR has been marked as verified by CI.

Details

In response to this:

/verified by CI

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-merge-bot openshift-merge-bot Bot merged commit 224fcf9 into openshift:main Apr 29, 2026
17 checks passed
@pacevedom pacevedom deleted the rebase-c8024efab-5.0.0-0.nightly-2026-04-26-064718_amd64-2026-04-26_arm64-2026-04-28 branch April 29, 2026 11:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged. verified Signifies that the PR passed pre-merge verification criteria

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants