[DEBUG][DO NOT MERGE] Test OCP 4.21 Azure kata with redhat-operators catalog by tbuskey · Pull Request #80865 · openshift/release

tbuskey · 2026-06-22T19:07:19Z

Summary

Testing OCP 4.21 Azure kata workload configuration changes

Changes

Use redhat-operators catalog instead of brew-catalog
Set TEST_RELEASE_TYPE: GA (no custom catalog creation)
Set MUST_GATHER_ON_FAILURE_ONLY: false (always collect logs)

Testing

This PR is for testing rehearsals only and will never be merged.

/hold

Summary by CodeRabbit

This change updates the OpenShift CI periodic Azure kata test job for the sandboxed-containers-operator in ci-operator/config/openshift/sandboxed-containers-operator/openshift-sandboxed-containers-operator-devel__downstream-candidate421.yaml (job azure-ipi-kata):

Catalog source: switches kata job catalog configuration to use the redhat-operators catalog (and clears CATALOG_SOURCE_IMAGE) instead of the previous brew-catalog/quay-based catalog.
Release type: sets TEST_RELEASE_TYPE from Pre-GA to GA, avoiding any custom catalog creation needs for the test.
Log collection behavior: sets MUST_GATHER_ON_FAILURE_ONLY to false, so must-gather logs are collected even on successful runs, not only on failures.
Network access: keeps/sets restrict_network_access to true for this job.

…catalog Changes: - Use redhat-operators catalog instead of brew-catalog - Set TEST_RELEASE_TYPE to GA (no custom catalog creation) - Set MUST_GATHER_ON_FAILURE_ONLY to false (always collect logs) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

tbuskey · 2026-06-22T19:07:59Z

/pj-rehearse list

openshift-merge-bot · 2026-06-22T19:08:02Z

@tbuskey: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

coderabbitai · 2026-06-22T19:08:07Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 04d82075-7d3a-4534-8bb5-c5c3e82029bc

📥 Commits

Reviewing files that changed from the base of the PR and between be80500 and 6faea3c.

📒 Files selected for processing (1)

ci-operator/config/openshift/sandboxed-containers-operator/openshift-sandboxed-containers-operator-devel__downstream-candidate421.yaml

🚧 Files skipped from review as they are similar to previous changes (1)

ci-operator/config/openshift/sandboxed-containers-operator/openshift-sandboxed-containers-operator-devel__downstream-candidate421.yaml

Walkthrough

The Azure kata job configuration in openshift-sandboxed-containers-operator-devel__downstream-candidate421.yaml enables network access restrictions and updates environment variables: clears CATALOG_SOURCE_IMAGE, sets CATALOG_SOURCE_NAME to redhat-operators, changes MUST_GATHER_ON_FAILURE_ONLY to "false", updates TEST_RELEASE_TYPE from Pre-GA to GA, and disables kata RPM installation.

Changes

Azure kata job configuration update

Layer / File(s)	Summary
Kata job network and environment configuration `ci-operator/config/openshift/sandboxed-containers-operator/openshift-sandboxed-containers-operator-devel__downstream-candidate421.yaml`	`restrict_network_access` enabled, `CATALOG_SOURCE_IMAGE` cleared, `CATALOG_SOURCE_NAME` set to `redhat-operators`, `MUST_GATHER_ON_FAILURE_ONLY` set to `"false"`, `TEST_RELEASE_TYPE` changed to `GA`, and `INSTALL_KATA_RPM` disabled with `KATA_RPM_VERSION` cleared.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the PR's main purpose: testing OCP 4.21 Azure kata configuration with redhat-operators catalog, and appropriately marks it as DEBUG/DO NOT MERGE.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PR modifies only YAML CI/CD config, not Go test code. No Ginkgo test declarations present; check for test names is not applicable.
Test Structure And Quality	✅ Passed	PR modifies only CI configuration YAML file; no Ginkgo test code present. Custom check for test code quality is not applicable.
Microshift Test Compatibility	✅ Passed	PR does not add any new Ginkgo e2e tests; it only modifies CI/CD YAML configuration for an existing test job. Check is not applicable.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PR modifies only CI configuration YAML files (ci-operator config for sandboxed-containers-operator), not Ginkgo e2e test code. Check is not applicable as no new tests are added.
Topology-Aware Scheduling Compatibility	✅ Passed	PR modifies only CI job configuration in ci-operator/config/, not deployment manifests, operator code, or controllers. Check scope does not apply to test environment variable changes.
Ote Binary Stdout Contract	✅ Passed	This PR contains only YAML configuration changes (no code modifications). The OTE Binary Stdout Contract check applies only to code-level changes in process-level code (main, init, TestMain, Before...
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	This PR modifies CI configuration files (YAML), not Ginkgo e2e test code. The check applies only when new Ginkgo e2e tests are added; it is not applicable here.
No-Weak-Crypto	✅ Passed	No weak crypto patterns found; changes are CI/CD configuration updates without cryptographic operations, custom crypto, or insecure secret comparisons.
Container-Privileges	✅ Passed	File is CI operator config, not a K8s manifest; no container privilege settings (privileged, hostPID, hostNetwork, hostIPC, SYS_ADMIN, allowPrivilegeEscalation) present.
No-Sensitive-Data-In-Logs	✅ Passed	PR contains only CI/test configuration changes with no passwords, tokens, API keys, PII, or sensitive data in logs. All modified environment variables contain only non-sensitive configuration values.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

openshift-ci · 2026-06-22T19:08:09Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: tbuskey

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~ci-operator/config/openshift/sandboxed-containers-operator/OWNERS~~ [tbuskey]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

tbuskey · 2026-06-22T19:08:59Z

/pj-rehearse list

openshift-merge-bot · 2026-06-22T19:09:02Z

@tbuskey: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

tbuskey · 2026-06-22T19:16:09Z

/pj-rehearse periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate421-azure-ipi-kata

openshift-merge-bot · 2026-06-22T19:16:12Z

@tbuskey: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

tbuskey · 2026-06-22T19:16:45Z

/pj-rehearse list

openshift-merge-bot · 2026-06-22T19:16:49Z

@tbuskey: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

Set INSTALL_KATA_RPM to false to bypass the RPM download failure and proceed to testing the redhat-operators catalog configuration. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

tbuskey · 2026-06-22T20:44:07Z

/pj-rehearse periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate421-azure-ipi-kata

openshift-merge-bot · 2026-06-22T20:44:11Z

@tbuskey: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

tbuskey · 2026-06-22T20:44:42Z

/pj-rehearse list

openshift-merge-bot · 2026-06-22T20:44:45Z

@tbuskey: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

openshift-merge-bot · 2026-06-22T20:46:44Z

[REHEARSALNOTIFIER]
@tbuskey: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name	Repo	Type	Reason
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate421-azure-ipi-kata	N/A	periodic	Ci-operator config changed

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

openshift-merge-bot · 2026-06-22T20:47:52Z

[REHEARSALNOTIFIER]
@tbuskey: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name	Repo	Type	Reason
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate421-azure-ipi-kata	N/A	periodic	Ci-operator config changed

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

openshift-ci · 2026-06-22T22:22:09Z

@tbuskey: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

openshift-ci Bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Jun 22, 2026

openshift-ci Bot requested review from c3d and gkurz June 22, 2026 19:07

openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jun 22, 2026

openshift-merge-bot Bot added the rehearsals-ack Signifies that rehearsal jobs have been acknowledged label Jun 22, 2026

Set restrict_network_access to true to allow rehearsals

be80500

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

openshift-merge-bot Bot removed the rehearsals-ack Signifies that rehearsal jobs have been acknowledged label Jun 22, 2026

Skip Kata RPM installation to test catalog configuration

6faea3c

Set INSTALL_KATA_RPM to false to bypass the RPM download failure and proceed to testing the redhat-operators catalog configuration. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Conversation

tbuskey commented Jun 22, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Changes

Testing

Summary by CodeRabbit

Uh oh!

tbuskey commented Jun 22, 2026

Uh oh!

openshift-merge-bot Bot commented Jun 22, 2026

Uh oh!

coderabbitai Bot commented Jun 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Uh oh!

openshift-ci Bot commented Jun 22, 2026

Uh oh!

tbuskey commented Jun 22, 2026

Uh oh!

openshift-merge-bot Bot commented Jun 22, 2026

Uh oh!

tbuskey commented Jun 22, 2026

Uh oh!

openshift-merge-bot Bot commented Jun 22, 2026

Uh oh!

tbuskey commented Jun 22, 2026

Uh oh!

openshift-merge-bot Bot commented Jun 22, 2026

Uh oh!

tbuskey commented Jun 22, 2026

Uh oh!

openshift-merge-bot Bot commented Jun 22, 2026

Uh oh!

tbuskey commented Jun 22, 2026

Uh oh!

openshift-merge-bot Bot commented Jun 22, 2026

Uh oh!

openshift-merge-bot Bot commented Jun 22, 2026

Uh oh!

openshift-merge-bot Bot commented Jun 22, 2026

Uh oh!

openshift-ci Bot commented Jun 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

tbuskey commented Jun 22, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jun 22, 2026 •

edited

Loading