Skip to content

STOR-3022: Enable CBT snapshot-metadata e2e tests in TechPreview CI jobs - #81061

Open
RomanBednar wants to merge 3 commits into
openshift:mainfrom
RomanBednar:stor-2900-enable-cbt-tests
Open

STOR-3022: Enable CBT snapshot-metadata e2e tests in TechPreview CI jobs#81061
RomanBednar wants to merge 3 commits into
openshift:mainfrom
RomanBednar:stor-2900-enable-cbt-tests

Conversation

@RomanBednar

@RomanBednar RomanBednar commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

Summary by CodeRabbit

This PR enables CSI snapshot-metadata support in OpenShift TechPreview CI jobs for origin releases 4.23, 5.0, 5.1, and main. It also adds AWS TechPreview coverage for the external snapshot-metadata component.

The OpenShift and single-node E2E steps now accept CSI_PROW_ENABLE_SNAPSHOT_METADATA. When enabled, the hostpath CSI snapshot-metadata sidecar remains active so CBT snapshot-metadata E2E tests can run.

The PR adds CI configuration for the csi-snapshot-metadata-tls-secret-fix branch. The configuration covers builds, validation, upgrades, CSI, snapshot-metadata, TLS, and platform-specific E2E jobs.

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Jun 25, 2026
@openshift-ci-robot

openshift-ci-robot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar: This pull request references STOR-3022 which is a valid jira issue.

Details

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@coderabbitai

coderabbitai Bot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 671c6a94-25eb-46bb-b9dc-fd5e3a4ced81

📥 Commits

Reviewing files that changed from the base of the PR and between e6e2fda and da510f5.

📒 Files selected for processing (1)
  • ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-main.yaml
🚧 Files skipped from review as they are similar to previous changes (1)
  • ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-main.yaml

Walkthrough

This PR adds CSI_PROW_ENABLE_SNAPSHOT_METADATA to e2e step definitions, enables it in OpenShift TechPreview jobs, and adds AWS snapshot-metadata workflows and branch CI configuration.

Changes

CSI snapshot metadata enablement

Layer / File(s) Summary
Snapshot metadata step contract
ci-operator/step-registry/openshift/e2e/test/openshift-e2e-test-ref.yaml, ci-operator/step-registry/single-node/e2e/test/single-node-e2e-test-ref.yaml
Adds and documents CSI_PROW_ENABLE_SNAPSHOT_METADATA. The flag enables CSI hostpath snapshot metadata and related CBT tests.
TechPreview job and workflow wiring
ci-operator/config/openshift/origin/openshift-origin-*.yaml, ci-operator/config/openshift/release/openshift-release-main__nightly-5.0.yaml, ci-operator/config/openshift/csi-external-snapshot-metadata/*
Sets the flag to "true" for selected AWS and GCP TechPreview jobs. Adds AWS OVN TechPreview workflows for main, 4.23, 5.0, and 5.1 configurations.
TLS-secret-fix branch CI configuration
ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml
Adds branch build settings, validation jobs, resource settings, and a broad test matrix.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Mergeability Score: ⚪ Minimal · up to da510

This change enables CBT snapshot-metadata end-to-end tests in TechPreview CI jobs; no actionable merge-blocking risk remains beyond normal checks and review.

Suggested reviewers: sjenning, dobsonj, p0lyn0mial

🚥 Pre-merge checks | ✅ 15
✅ Passed checks (15 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes enabling CBT snapshot-metadata end-to-end tests in TechPreview CI jobs.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed The PR changes 17 YAML CI configuration files only; added-content scans found no Ginkgo title declarations or dynamic title construction.
Test Structure And Quality ✅ Passed The patch changes only CI YAML; no Ginkgo It blocks, setup/cleanup, waits, or assertions were added or modified, so this check is inapplicable.
Microshift Test Compatibility ✅ Passed The PR diff adds only CI YAML and step metadata; it adds no Ginkgo It, Describe, Context, or When test, so this check is not applicable.
Single Node Openshift (Sno) Test Compatibility ✅ Passed The PR changes only YAML CI configuration. The diff adds no Go or Ginkgo It/Describe/Context/When tests, so the SNO compatibility check is not applicable.
Topology-Aware Scheduling Compatibility ✅ Passed The PR changes only CI YAML, Prow jobs, and step environment variables; added lines contain no deployment/controller code or topology scheduling constraints.
Ote Binary Stdout Contract ✅ Passed The PR changes only YAML CI configuration. The diff adds no OTE source, main/suite setup code, or stdout/log writes; it only passes the snapshot-metadata environment variable to e2e steps.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed The PR changes only YAML CI/job and step configuration; no Go test source or new Ginkgo It/Describe/Context/When declarations were added.
No-Weak-Crypto ✅ Passed The PR changes only YAML CI configuration. Scans of all 9,254 added lines found no MD5, SHA1, DES, RC4, 3DES, Blowfish, ECB, custom crypto, or secret/token comparisons.
Container-Privileges ✅ Passed The PR diff adds no privileged, hostPID, hostNetwork, hostIPC, SYS_ADMIN, allowPrivilegeEscalation, or root security fields; capabilities entries are CI labels such as intranet and nested-podman.
No-Sensitive-Data-In-Logs ✅ Passed The diff adds CI configuration and a wait step, but no new logging of secrets, tokens, PII, customer data, hostnames, or session IDs; the wait logs only PR metadata and timestamps.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands.

@openshift-ci
openshift-ci Bot requested review from p0lyn0mial and sjenning June 25, 2026 08:28
@RomanBednar RomanBednar changed the title STOR-3022: Enable CBT snapshot-metadata e2e tests in TechPreview CI jobs DRAFT: STOR-3022: Enable CBT snapshot-metadata e2e tests in TechPreview CI jobs Jun 25, 2026
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar, pj-rehearse: unable to set up jobs ERROR:

failed resolve ReleaseBuildConfiguration: Failed resolve MultiStageTestConfiguration: test/e2e-aws-ovn-single-node-techpreview: workflow/openshift-e2e-aws-single-node: parameter "CSI_PROW_ENABLE_SNAPSHOT_METADATA" is overridden in [test/e2e-aws-ovn-single-node-techpreview] but not declared in any step

If the problem persists, please contact Test Platform.

@RomanBednar
RomanBednar force-pushed the stor-2900-enable-cbt-tests branch 2 times, most recently from 5beeee0 to 84a69f8 Compare June 25, 2026 11:33
@RomanBednar

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-aws-ovn-single-node-techpreview

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: your /pj-rehearse request was not processed because the request waited in queue for longer than 5 minutes. Please retry in a few minutes.

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-gcp-ovn-techpreview

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@RomanBednar RomanBednar changed the title DRAFT: STOR-3022: Enable CBT snapshot-metadata e2e tests in TechPreview CI jobs STOR-3022: Enable CBT snapshot-metadata e2e tests in TechPreview CI jobs Jun 25, 2026
@RomanBednar

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-gcp-ovn-techpreview-serial
/pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-gcp-ovn-techpreview
/pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-aws-ovn-single-node-techpreview-serial
/pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-aws-ovn-single-node-techpreview

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: job(s): pull-ci-openshift-origin-release-4.23-e2e-gcp-ovn-techpreview-serial either don't exist or were not found to be affected, and cannot be rehearsed

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: requesting more than one rehearsal in one comment is not supported. If you would like to rehearse multiple specific jobs, please separate the job names by a space in a single command.

2 similar comments
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: requesting more than one rehearsal in one comment is not supported. If you would like to rehearse multiple specific jobs, please separate the job names by a space in a single command.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: requesting more than one rehearsal in one comment is not supported. If you would like to rehearse multiple specific jobs, please separate the job names by a space in a single command.

@RomanBednar
RomanBednar force-pushed the stor-2900-enable-cbt-tests branch from 84a69f8 to 96249e1 Compare July 8, 2026 14:15
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: pj-rehearse could not automatically process this event because the request waited in queue for longer than 5 minutes. Use /pj-rehearse to trigger rehearsals manually.

@dobsonj

dobsonj commented Jul 8, 2026

Copy link
Copy Markdown
Member

/cc

@openshift-ci
openshift-ci Bot requested a review from dobsonj July 8, 2026 17:05
@RomanBednar
RomanBednar force-pushed the stor-2900-enable-cbt-tests branch from 96249e1 to 4e31af4 Compare July 9, 2026 08:58
@RomanBednar
RomanBednar force-pushed the stor-2900-enable-cbt-tests branch from 4e31af4 to fc0706a Compare July 27, 2026 15:17
@RomanBednar

Copy link
Copy Markdown
Contributor Author

/pj-rehearse

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-ci

openshift-ci Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/rehearse/openshift/origin/release-4.23/e2e-gcp-ovn-techpreview 84a69f8 link unknown /pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-gcp-ovn-techpreview
ci/rehearse/openshift/origin/release-4.23/e2e-gcp-ovn-techpreview-pkiconfig fc0706a link unknown /pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-gcp-ovn-techpreview-pkiconfig
ci/rehearse/openshift/cloud-provider-kubevirt/main/okd-scos-e2e-aws-ovn fc0706a link unknown /pj-rehearse pull-ci-openshift-cloud-provider-kubevirt-main-okd-scos-e2e-aws-ovn
ci/rehearse/openshift/origin/release-4.23/e2e-aws-ovn-single-node-techpreview-serial fc0706a link unknown /pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-aws-ovn-single-node-techpreview-serial
ci/rehearse/openshift/origin/release-5.0/e2e-aws-ovn-single-node-techpreview-serial fc0706a link unknown /pj-rehearse pull-ci-openshift-origin-release-5.0-e2e-aws-ovn-single-node-techpreview-serial
ci/rehearse/openshift/origin/release-5.0/e2e-aws-ovn-single-node-techpreview fc0706a link unknown /pj-rehearse pull-ci-openshift-origin-release-5.0-e2e-aws-ovn-single-node-techpreview
ci/rehearse/openshift/origin/main/e2e-aws-ovn-single-node-techpreview fc0706a link unknown /pj-rehearse pull-ci-openshift-origin-main-e2e-aws-ovn-single-node-techpreview
ci/rehearse/openshift/csi-external-snapshot-metadata/release-5.0/e2e-aws-ovn-techpreview fc0706a link unknown /pj-rehearse pull-ci-openshift-csi-external-snapshot-metadata-release-5.0-e2e-aws-ovn-techpreview
ci/rehearse/openshift/csi-external-snapshot-metadata/release-4.23/e2e-aws-ovn-techpreview fc0706a link unknown /pj-rehearse pull-ci-openshift-csi-external-snapshot-metadata-release-4.23-e2e-aws-ovn-techpreview
ci/rehearse/periodic-ci-Prucek-release-master-e2e-aws-sdn-upgrade 8d07ee3 link unknown /pj-rehearse periodic-ci-Prucek-release-master-e2e-aws-sdn-upgrade
ci/rehearse/openshift/csi-external-snapshot-metadata/release-5.1/e2e-aws-ovn-techpreview 8d07ee3 link unknown /pj-rehearse pull-ci-openshift-csi-external-snapshot-metadata-release-5.1-e2e-aws-ovn-techpreview
ci/rehearse/openshift/origin/release-5.1/e2e-aws-ovn-single-node-techpreview 8d07ee3 link unknown /pj-rehearse pull-ci-openshift-origin-release-5.1-e2e-aws-ovn-single-node-techpreview
ci/rehearse/openshift/csi-external-snapshot-metadata/main/e2e-aws-ovn-techpreview 79ff00a link unknown /pj-rehearse pull-ci-openshift-csi-external-snapshot-metadata-main-e2e-aws-ovn-techpreview
ci/rehearse/openshift/origin/release-4.23/e2e-aws-ovn-single-node-techpreview 79ff00a link unknown /pj-rehearse pull-ci-openshift-origin-release-4.23-e2e-aws-ovn-single-node-techpreview

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/origin#31485

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/origin#31485

DO NOT MERGE — remove this commit before merging the PR.

Adds a temporary ci-operator config that targets the
csi-snapshot-metadata-tls-secret-fix branch from openshift/origin
PR openshift#31485 instead of main. This allows pj-rehearse to test the
step registry env var change (CSI_PROW_ENABLE_SNAPSHOT_METADATA)
together with the origin code fix.

The promotion section is removed to avoid conflicts with the
main config promoting the same images.

After rehearsal confirms the tests pass, revert this commit.
@coderabbitai

coderabbitai Bot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Note

GitHub couldn't provide a complete incremental comparison for this pull request, so CodeRabbit is performing a full review instead. This review may take a little longer.

@openshift-ci-robot

openshift-ci-robot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar: This pull request references STOR-3022 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target only the "5.0.0" version, but multiple target versions were set.

Details

In response to this:

Summary by CodeRabbit

This PR enables CSI snapshot-metadata support in OpenShift TechPreview CI jobs across origin releases 4.23, 5.0, 5.1, and main. It also enables the corresponding AWS TechPreview tests for the external snapshot-metadata component.

The CI steps now accept CSI_PROW_ENABLE_SNAPSHOT_METADATA. The setting preserves the hostpath CSI snapshot-metadata sidecar so CBT snapshot-metadata e2e tests can run.

The PR adds CI configuration for the csi-snapshot-metadata-tls-secret-fix branch. This configuration covers build, validation, upgrade, CSI, snapshot-metadata, TLS, and platform-specific e2e jobs.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci

openshift-ci Bot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: RomanBednar
Once this PR has been reviewed and has the lgtm label, please assign stbenjam for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🧹 Nitpick comments (2)
ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml (1)

598-599: 📐 Maintainability & Code Quality | 🔵 Trivial | 💤 Low value

These flag additions duplicate the origin 5.0 config.

The four CSI_PROW_ENABLE_SNAPSHOT_METADATA entries repeat the changes in ci-operator/config/openshift/origin/openshift-origin-release-5.0.yaml. If this branch config is removed, these entries go away with it. If the file stays, keep the two files in sync so the rehearsal result matches the target configuration.

Also applies to: 610-612, 764-766, 923-925

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml`
around lines 598 - 599, Remove the duplicated CSI_PROW_ENABLE_SNAPSHOT_METADATA
flag additions from openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml,
including all four referenced entries; if the branch configuration must remain,
instead synchronize these entries exactly with
openshift-origin-release-5.0.yaml.
ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-main.yaml (1)

46-52: 📐 Maintainability & Code Quality | 🔵 Trivial | ⚡ Quick win

Decide whether this new AWS e2e job must block merges.

The test omits optional: true and always_run: false. The generated presubmit therefore runs on every PR and blocks merge. Cloud e2e jobs are slow and flake-prone. If the team wants this job as informational at first, add optional: true.

♻️ Optional change
 - as: e2e-aws-ovn-techpreview
+  optional: true
   steps:
     cluster_profile: openshift-org-aws
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-main.yaml`
around lines 46 - 52, Update the e2e-aws-ovn-techpreview presubmit job
configuration to explicitly make the job informational by adding optional: true;
preserve its existing workflow, environment, and cluster profile settings.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In
`@ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml`:
- Around line 930-933: Remove the temporary csi-snapshot-metadata-tls-secret-fix
CI configuration, including its zz_generated_metadata entry, so it no longer
generates Prow jobs; then run make update to regenerate the CI configuration and
use /pj-rehearse for the origin pull request.

---

Nitpick comments:
In
`@ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-main.yaml`:
- Around line 46-52: Update the e2e-aws-ovn-techpreview presubmit job
configuration to explicitly make the job informational by adding optional: true;
preserve its existing workflow, environment, and cluster profile settings.

In
`@ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml`:
- Around line 598-599: Remove the duplicated CSI_PROW_ENABLE_SNAPSHOT_METADATA
flag additions from openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml,
including all four referenced entries; if the branch configuration must remain,
instead synchronize these entries exactly with
openshift-origin-release-5.0.yaml.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: d3394876-9295-4123-8f79-ae5962b53a07

📥 Commits

Reviewing files that changed from the base of the PR and between b3b417b and e6e2fda.

⛔ Files ignored due to path filters (5)
  • ci-operator/jobs/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-main-presubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-release-4.23-presubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-release-5.0-presubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-release-5.1-presubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix-presubmits.yaml is excluded by !ci-operator/jobs/**
📒 Files selected for processing (12)
  • ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-main.yaml
  • ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-release-4.23.yaml
  • ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-release-5.0.yaml
  • ci-operator/config/openshift/csi-external-snapshot-metadata/openshift-csi-external-snapshot-metadata-release-5.1.yaml
  • ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml
  • ci-operator/config/openshift/origin/openshift-origin-main.yaml
  • ci-operator/config/openshift/origin/openshift-origin-release-4.23.yaml
  • ci-operator/config/openshift/origin/openshift-origin-release-5.0.yaml
  • ci-operator/config/openshift/origin/openshift-origin-release-5.1.yaml
  • ci-operator/config/openshift/release/openshift-release-main__nightly-5.0.yaml
  • ci-operator/step-registry/openshift/e2e/test/openshift-e2e-test-ref.yaml
  • ci-operator/step-registry/single-node/e2e/test/single-node-e2e-test-ref.yaml
🚧 Files skipped from review as they are similar to previous changes (3)
  • ci-operator/config/openshift/origin/openshift-origin-release-4.23.yaml
  • ci-operator/step-registry/single-node/e2e/test/single-node-e2e-test-ref.yaml
  • ci-operator/step-registry/openshift/e2e/test/openshift-e2e-test-ref.yaml

Comment on lines +930 to +933
zz_generated_metadata:
branch: csi-snapshot-metadata-tls-secret-fix
org: openshift
repo: origin

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check whether the branch exists upstream and whether other temporary origin branch configs exist.
set -uo pipefail

echo "== branch existence in openshift/origin =="
gh api repos/openshift/origin/branches/csi-snapshot-metadata-tls-secret-fix --jq '.name' || echo "branch not found"

echo "== existing origin branch configs =="
fd -t f 'openshift-origin-' ci-operator/config/openshift/origin | sort

echo "== branch values recorded in those configs =="
fd -t f 'openshift-origin-' ci-operator/config/openshift/origin --exec sh -c 'printf "%s: " "$1"; rg -N "^  branch:" "$1"' _ {}

Repository: openshift/release

Length of output: 4813


🏁 Script executed:

#!/bin/bash
set -euo pipefail

file="ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml"

echo "== change status =="
git status --short -- "$file"
git diff --stat -- "$file"

echo "== references to the feature branch =="
rg -n --hidden --glob '!vendor/**' 'csi-snapshot-metadata-tls-secret-fix' .

echo "== generated Prow/config references =="
rg -n --hidden --glob '!vendor/**' 'openshift-origin-csi-snapshot-metadata-tls-secret-fix|csi-snapshot-metadata-tls-secret-fix' ci-operator jobs prow 2>/dev/null || true

echo "== config shape =="
awk '
  /^zz_generated_metadata:/ { metadata=1 }
  metadata && /^  (branch|org|repo):/ { print }
  /^tests:/ { tests=1 }
  tests && /^- name:/ { count++ }
  END { print "test_entries=" count+0 }
' "$file"

echo "== release-5.0 comparison after branch substitution =="
python3 - "$file" <<'PY'
from pathlib import Path
import sys
target = Path(sys.argv[1])
base = Path("ci-operator/config/openshift/origin/openshift-origin-release-5.0.yaml")
if not base.exists():
    print("release-5.0 config not found")
    raise SystemExit(0)
a = target.read_text().replace("branch: csi-snapshot-metadata-tls-secret-fix",
                              "branch: release-5.0")
b = base.read_text()
print("identical_except_branch=" + str(a == b))
PY

Repository: openshift/release

Length of output: 50373


Remove the temporary branch configuration and regenerate CI jobs.

csi-snapshot-metadata-tls-secret-fix is not an openshift/origin branch, but this config generates a full Prow job set. Remove the config and run make update; use /pj-rehearse against the origin pull request instead.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/config/openshift/origin/openshift-origin-csi-snapshot-metadata-tls-secret-fix.yaml`
around lines 930 - 933, Remove the temporary
csi-snapshot-metadata-tls-secret-fix CI configuration, including its
zz_generated_metadata entry, so it no longer generates Prow jobs; then run make
update to regenerate the CI configuration and use /pj-rehearse for the origin
pull request.

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/hold

@openshift-ci openshift-ci Bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Aug 6, 2026
@openshift-ci

openshift-ci Bot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar: The specified target(s) for /test were not found.
The following commands are available to trigger required jobs:

/test boskos-config
/test boskos-config-generation
/test check-gh-automation
/test check-gh-automation-tide
/test check-trigger-trusted-apps
/test ci-operator-config
/test ci-operator-config-metadata
/test ci-operator-registry
/test ci-secret-bootstrap-config-validation
/test ci-testgrid-allow-list
/test cluster-manifest-verifier
/test clusterimageset-validate
/test config
/test core-valid
/test generated-config
/test generated-dashboards
/test hyperfleet-risk-scorer-test
/test image-mirroring-config-validation
/test jira-lifecycle-config
/test jira-solver-eval-images
/test jira-solver-eval-jira-solver-eval
/test labels
/test openshift-image-mirror-mappings
/test ordered-prow-config
/test owners
/test pr-reminder-config
/test prow-config
/test prow-config-filenames
/test prow-config-semantics
/test pylint
/test release-config
/test release-controller-config
/test rover-groups-config-validation
/test secret-generator-config-valid
/test services-valid
/test stackrox-stackrox-stackrox-stackrox-check
/test step-registry-metadata
/test step-registry-shellcheck
/test sync-rover-groups
/test verified-config
/test yamllint

The following commands are available to trigger optional jobs:

/test check-cluster-profiles-config

Use /test all to run the following jobs that were automatically triggered:

pull-ci-openshift-release-check-gh-automation
pull-ci-openshift-release-main-ci-operator-config
pull-ci-openshift-release-main-ci-operator-config-metadata
pull-ci-openshift-release-main-ci-operator-registry
pull-ci-openshift-release-main-config
pull-ci-openshift-release-main-core-valid
pull-ci-openshift-release-main-generated-config
pull-ci-openshift-release-main-ordered-prow-config
pull-ci-openshift-release-main-owners
pull-ci-openshift-release-main-prow-config-filenames
pull-ci-openshift-release-main-prow-config-semantics
pull-ci-openshift-release-main-release-controller-config
pull-ci-openshift-release-main-step-registry-metadata
pull-ci-openshift-release-main-step-registry-shellcheck
pull-ci-openshift-release-openshift-image-mirror-mappings
pull-ci-openshift-release-yamllint
Details

In response to this:

/test pj-rehearse-max

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

[REHEARSALNOTIFIER]
@RomanBednar: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-openshift-cluster-authentication-operator-master-e2e-aws-external-oidc-conformance-parallel openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-master-e2e-aws-external-oidc-conformance-serial openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-5.1-e2e-aws-external-oidc-conformance-parallel openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-5.1-e2e-aws-external-oidc-conformance-serial openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-5.0-e2e-aws-external-oidc-conformance-parallel openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-5.0-e2e-aws-external-oidc-conformance-serial openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.23-e2e-aws-external-oidc-conformance-parallel openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.23-e2e-aws-external-oidc-conformance-serial openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.22-e2e-aws-external-oidc-conformance-parallel openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.22-e2e-aws-external-oidc-conformance-serial openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-master-okd-scos-e2e-aws-ovn openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.21-okd-scos-e2e-aws-ovn openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-master-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-5.1-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-5.0-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.23-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.22-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.21-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.20-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.19-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.18-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.17-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.16-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.15-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed
pull-ci-openshift-cluster-authentication-operator-release-4.14-e2e-aws-single-node openshift/cluster-authentication-operator presubmit Registry content changed

A total of 18248 jobs have been affected by this change. The above listing is non-exhaustive and limited to 25 jobs.

A full list of affected jobs can be found here

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-csi-external-snapshot-metadata-main-e2e-aws-ovn-techpreview

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/origin#31485

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/kubernetes#2739

@openshift-ci

openshift-ci Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar, testwith: could not generate prow job. ERROR:

no ref for requested test included in command. The org, repo, and branch containing the requested test need to be targeted by at least one of the included PRs

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/kubernetes#2739

@openshift-ci

openshift-ci Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar, testwith: could not generate prow job. ERROR:

no ref for requested test included in command. The org, repo, and branch containing the requested test need to be targeted by at least one of the included PRs

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/csi-external-snapshot-metadata/main/e2e-aws-ovn-techpreview openshift/kubernetes#2739

@openshift-ci

openshift-ci Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar, testwith: could not generate prow job. ERROR:

BUG: test 'e2e-aws-ovn-techpreview' not found in injected config

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/origin#31485 openshift/kubernetes#2739

@RomanBednar

Copy link
Copy Markdown
Contributor Author

/testwith openshift/origin/main/e2e-aws-ovn-single-node-techpreview openshift/origin#31485 openshift/kubernetes#2739 #81061

Add a wait step after the e2e test to keep the cluster alive
for 8 hours after test completion. This allows inspecting the
cluster state (pods, events, secrets) when snapshot metadata
tests fail.
@RomanBednar

Copy link
Copy Markdown
Contributor Author

/payload-job-with-prs periodic-ci-openshift-csi-external-snapshot-metadata-main-e2e-aws-ovn-techpreview openshift/kubernetes#2739

@openshift-ci

openshift-ci Bot commented Aug 13, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar: the repo openshift/release does not contribute to the OpenShift official images, or the base branch is not currently having images promoted

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@RomanBednar: pj-rehearse could not automatically process this event because the request waited in queue for longer than 5 minutes. Use /pj-rehearse to trigger rehearsals manually.

@openshift-ci

openshift-ci Bot commented Aug 13, 2026

Copy link
Copy Markdown
Contributor

@RomanBednar: This PR was included in a payload test run from openshift/kubernetes#2739
trigger 0 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants