NO-ISSUE: rebase-release-5.0-5.0.0-0.nightly-2026-07-10-030545_amd64-2026-07-10_arm64-2026-07-11

[microshift-rebase-script]

amd64: 5.0.0-0.nightly-2026-07-10-030545
arm64: 5.0.0-0.nightly-arm64-2026-07-11-232606
prow job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-microshift-release-5.0-periodics-rebase-on-nightlies/2076517329662906368

• api embedded-component caa451755f91938514989d7dbcf80f81e927f9df to a3d85be7fdb14831fea2b3dbe2a6be12ced23aa0

  • f89f59ca 2026-07-08T16:09:28+02:00 osin: Add ProxyTrustedCA field to OAuthConfig
  • e3027661 2026-07-08T09:36:06-04:00 tooling: update feature-gate promotion tooling for install features
  • ad3087f4 2026-07-08T08:00:35+01:00 Integrate models-schema into codegen and fix openapi verify issues
  • bdd334aa 2026-07-06T17:46:03-03:00 Add haproxyVersion in IngressController API
  • 0a22d884 2026-07-06T12:35:17-04:00 features: promote ExternalOIDCExternalClaimsSourcing to TechPreviewNoUpgrade
  • 8d392a59 2026-06-30T16:57:54+02:00 Add AuthenticationComponentProxy API for component-scoped proxy

• cluster-dns-operator embedded-component 8395f9054f235aec2cd5185019d201146c9827ed to 2e6634547bd3ac0f08350bc2235447ddf06db2b2

  • cb8cade 2026-06-09T17:57:19-04:00 Add aswinsuryan (asuryana@redhat.com) to OWNERS

• cluster-kube-apiserver-operator embedded-component 168b9d142a1e9b1a5616a74742259ddacb5eb5c0 to 7c2e3d4ca6d3b979d5eb34805e40667f9bfb21c6

  • 918cbf5 2026-07-03T14:30:16+02:00 Add 10-minute degraded inertia for NodeControllerDegraded

• cluster-kube-controller-manager-operator embedded-component fe03a642284390a233f8b52cf885f667a6163f98 to 209d5915dc12d517be79430e4bf4e8b0f88e405b

  • 21d7b5b 2026-07-08T12:26:00+02:00 Add 10-minute degraded inertia for StaticPodsDegraded

• cluster-kube-scheduler-operator embedded-component bb57dd7a1fa265950b9769aa0c036832a51791c7 to 4d89ee063475ec33671b7f255bf6e304bb11e235

  • 6e93d6a 2026-07-08T14:42:26+02:00 Add 10-minute degraded inertia for StaticPodsDegraded

• machine-config-operator embedded-component 5dbdd0a3ee7cca9ec6a4f72c0c2139966e32dba3 to f6d6db3c6582352d810c4294e59ae5e37d4d13e7

  • 7bf2b71e 2026-07-09T08:29:17-04:00 vendor: bump golang.org/x/crypto to v0.54.0
  • 0d62e45b 2026-07-08T18:14:33-04:00 Use release payload image for OSImageStream rebuild detection
  • cc6dbda2 2026-07-06T13:54:15-04:00 enable configurable PKI for cert rotation
  • e3dfc3c5 2026-07-06T11:43:06+02:00 NO-ISSUE: Improve osimagestream pkg API
  • 006e8ddc 2026-06-11T09:31:46-04:00 vendor: bump library-go
  • 24477c17 2026-05-21T16:00:35-04:00 OCPBUGS-10431: allow worker pools to set staticPodPath by relaxing validation to only block control plane pools

• operator-framework-olm embedded-component dfbca9456f355d9c0931c65f5d0c7c0a95609fec to 277e53cc3ad60306296e1269ea12b97c3558cfdc

  • 8713f8c6 2026-07-08T00:03:57Z :seedling: Bump google.golang.org/grpc from 1.81.1 to 1.82.0 (NO-ISSUE: rebase-main-4.18.0-0.nightly-2024-09-03-081737_amd64-2024-09-03_arm64-2024-09-04 #3862)

• oc image-amd64 439aadae1b6322e322257bd13239e658fb9753b7 to 22c69c0ff5da7e390b42880141e43d555e38ef41

  • 9d3080e9 2026-07-08T04:25:52-04:00 Fix go vet warning in process.go
  • 926ebdc9 2026-07-08T04:11:58-04:00 Bump gitignore dependency
  • f15cc462 2026-07-07T14:55:28+02:00 CNTRLPLANE-3786: bump x/crypto to the latest version

• kube-rbac-proxy image-amd64 d12e274605248f6c59373240a7eae7a7a357dcb3 to 43c114bc124f59e2fc3223dea8e0a8f4cdeed18d

  • 9737d17 2026-06-05T20:53:43Z Updating kube-rbac-proxy-container image to be consistent with ART for 5.0 Reconciling with https://github.com/openshift-eng/ocp-build-data/tree/7691ed4dc0b6585b358f9e73fb736ace9a48a286/images/kube-rbac-proxy.yml

• oc image-arm64 0ec4cb02de4306d82fd4c2ec786184b6d993ba1b to 22c69c0ff5da7e390b42880141e43d555e38ef41

  • 9d3080e9 2026-07-08T04:25:52-04:00 Fix go vet warning in process.go

• kube-rbac-proxy image-arm64 d12e274605248f6c59373240a7eae7a7a357dcb3 to 43c114bc124f59e2fc3223dea8e0a8f4cdeed18d

  • 9737d17 2026-06-05T20:53:43Z Updating kube-rbac-proxy-container image to be consistent with ART for 5.0 Reconciling with https://github.com/openshift-eng/ocp-build-data/tree/7691ed4dc0b6585b358f9e73fb736ace9a48a286/images/kube-rbac-proxy.yml

/label tide/merge-method-squash
/label backport-risk-assessed
/label jira/valid-bug

[openshift-ci-robot]

@microshift-rebase-script[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

amd64: 5.0.0-0.nightly-2026-07-10-030545
arm64: 5.0.0-0.nightly-arm64-2026-07-11-232606
prow job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-microshift-release-5.0-periodics-rebase-on-nightlies/2076517329662906368

• api embedded-component caa451755f91938514989d7dbcf80f81e927f9df to a3d85be7fdb14831fea2b3dbe2a6be12ced23aa0

• f89f59ca 2026-07-08T16:09:28+02:00 osin: Add ProxyTrustedCA field to OAuthConfig

• e3027661 2026-07-08T09:36:06-04:00 tooling: update feature-gate promotion tooling for install features

• ad3087f4 2026-07-08T08:00:35+01:00 Integrate models-schema into codegen and fix openapi verify issues

• bdd334aa 2026-07-06T17:46:03-03:00 Add haproxyVersion in IngressController API

• 0a22d884 2026-07-06T12:35:17-04:00 features: promote ExternalOIDCExternalClaimsSourcing to TechPreviewNoUpgrade

• 8d392a59 2026-06-30T16:57:54+02:00 Add AuthenticationComponentProxy API for component-scoped proxy

• cluster-dns-operator embedded-component 8395f9054f235aec2cd5185019d201146c9827ed to 2e6634547bd3ac0f08350bc2235447ddf06db2b2

• cb8cade 2026-06-09T17:57:19-04:00 Add aswinsuryan (asuryana@redhat.com) to OWNERS

• cluster-kube-apiserver-operator embedded-component 168b9d142a1e9b1a5616a74742259ddacb5eb5c0 to 7c2e3d4ca6d3b979d5eb34805e40667f9bfb21c6

• 918cbf5 2026-07-03T14:30:16+02:00 Add 10-minute degraded inertia for NodeControllerDegraded

• cluster-kube-controller-manager-operator embedded-component fe03a642284390a233f8b52cf885f667a6163f98 to 209d5915dc12d517be79430e4bf4e8b0f88e405b

• 21d7b5b 2026-07-08T12:26:00+02:00 Add 10-minute degraded inertia for StaticPodsDegraded

• cluster-kube-scheduler-operator embedded-component bb57dd7a1fa265950b9769aa0c036832a51791c7 to 4d89ee063475ec33671b7f255bf6e304bb11e235

• 6e93d6a 2026-07-08T14:42:26+02:00 Add 10-minute degraded inertia for StaticPodsDegraded

• machine-config-operator embedded-component 5dbdd0a3ee7cca9ec6a4f72c0c2139966e32dba3 to f6d6db3c6582352d810c4294e59ae5e37d4d13e7

• 7bf2b71e 2026-07-09T08:29:17-04:00 vendor: bump golang.org/x/crypto to v0.54.0

• 0d62e45b 2026-07-08T18:14:33-04:00 Use release payload image for OSImageStream rebuild detection

• cc6dbda2 2026-07-06T13:54:15-04:00 enable configurable PKI for cert rotation

• e3dfc3c5 2026-07-06T11:43:06+02:00 NO-ISSUE: Improve osimagestream pkg API

• 006e8ddc 2026-06-11T09:31:46-04:00 vendor: bump library-go

• 24477c17 2026-05-21T16:00:35-04:00 OCPBUGS-10431: allow worker pools to set staticPodPath by relaxing validation to only block control plane pools

• operator-framework-olm embedded-component dfbca9456f355d9c0931c65f5d0c7c0a95609fec to 277e53cc3ad60306296e1269ea12b97c3558cfdc

• 8713f8c6 2026-07-08T00:03:57Z :seedling: Bump google.golang.org/grpc from 1.81.1 to 1.82.0 (NO-ISSUE: rebase-main-4.18.0-0.nightly-2024-09-03-081737_amd64-2024-09-03_arm64-2024-09-04 #3862)

• oc image-amd64 439aadae1b6322e322257bd13239e658fb9753b7 to 22c69c0ff5da7e390b42880141e43d555e38ef41

• 9d3080e9 2026-07-08T04:25:52-04:00 Fix go vet warning in process.go

• 926ebdc9 2026-07-08T04:11:58-04:00 Bump gitignore dependency

• f15cc462 2026-07-07T14:55:28+02:00 CNTRLPLANE-3786: bump x/crypto to the latest version

• kube-rbac-proxy image-amd64 d12e274605248f6c59373240a7eae7a7a357dcb3 to 43c114bc124f59e2fc3223dea8e0a8f4cdeed18d

• 9737d17 2026-06-05T20:53:43Z Updating kube-rbac-proxy-container image to be consistent with ART for 5.0 Reconciling with https://github.com/openshift-eng/ocp-build-data/tree/7691ed4dc0b6585b358f9e73fb736ace9a48a286/images/kube-rbac-proxy.yml

• oc image-arm64 0ec4cb02de4306d82fd4c2ec786184b6d993ba1b to 22c69c0ff5da7e390b42880141e43d555e38ef41

• 9d3080e9 2026-07-08T04:25:52-04:00 Fix go vet warning in process.go

• kube-rbac-proxy image-arm64 d12e274605248f6c59373240a7eae7a7a357dcb3 to 43c114bc124f59e2fc3223dea8e0a8f4cdeed18d

• 9737d17 2026-06-05T20:53:43Z Updating kube-rbac-proxy-container image to be consistent with ART for 5.0 Reconciling with https://github.com/openshift-eng/ocp-build-data/tree/7691ed4dc0b6585b358f9e73fb736ace9a48a286/images/kube-rbac-proxy.yml

/label tide/merge-method-squash
/label backport-risk-assessed
/label jira/valid-bug

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci-robot]

@microshift-rebase-script[bot]: This pull request explicitly references no jira issue.

Retaining the jira/valid-bug label as it was manually added.

Details

In response to this:

amd64: 5.0.0-0.nightly-2026-07-10-030545
arm64: 5.0.0-0.nightly-arm64-2026-07-11-232606
prow job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-microshift-release-5.0-periodics-rebase-on-nightlies/2076517329662906368

• api embedded-component caa451755f91938514989d7dbcf80f81e927f9df to a3d85be7fdb14831fea2b3dbe2a6be12ced23aa0

• f89f59ca 2026-07-08T16:09:28+02:00 osin: Add ProxyTrustedCA field to OAuthConfig

• e3027661 2026-07-08T09:36:06-04:00 tooling: update feature-gate promotion tooling for install features

• ad3087f4 2026-07-08T08:00:35+01:00 Integrate models-schema into codegen and fix openapi verify issues

• bdd334aa 2026-07-06T17:46:03-03:00 Add haproxyVersion in IngressController API

• 0a22d884 2026-07-06T12:35:17-04:00 features: promote ExternalOIDCExternalClaimsSourcing to TechPreviewNoUpgrade

• 8d392a59 2026-06-30T16:57:54+02:00 Add AuthenticationComponentProxy API for component-scoped proxy

• cluster-dns-operator embedded-component 8395f9054f235aec2cd5185019d201146c9827ed to 2e6634547bd3ac0f08350bc2235447ddf06db2b2

• cb8cade 2026-06-09T17:57:19-04:00 Add aswinsuryan (asuryana@redhat.com) to OWNERS

• cluster-kube-apiserver-operator embedded-component 168b9d142a1e9b1a5616a74742259ddacb5eb5c0 to 7c2e3d4ca6d3b979d5eb34805e40667f9bfb21c6

• 918cbf5 2026-07-03T14:30:16+02:00 Add 10-minute degraded inertia for NodeControllerDegraded

• cluster-kube-controller-manager-operator embedded-component fe03a642284390a233f8b52cf885f667a6163f98 to 209d5915dc12d517be79430e4bf4e8b0f88e405b

• 21d7b5b 2026-07-08T12:26:00+02:00 Add 10-minute degraded inertia for StaticPodsDegraded

• cluster-kube-scheduler-operator embedded-component bb57dd7a1fa265950b9769aa0c036832a51791c7 to 4d89ee063475ec33671b7f255bf6e304bb11e235

• 6e93d6a 2026-07-08T14:42:26+02:00 Add 10-minute degraded inertia for StaticPodsDegraded

• machine-config-operator embedded-component 5dbdd0a3ee7cca9ec6a4f72c0c2139966e32dba3 to f6d6db3c6582352d810c4294e59ae5e37d4d13e7

• 7bf2b71e 2026-07-09T08:29:17-04:00 vendor: bump golang.org/x/crypto to v0.54.0

• 0d62e45b 2026-07-08T18:14:33-04:00 Use release payload image for OSImageStream rebuild detection

• cc6dbda2 2026-07-06T13:54:15-04:00 enable configurable PKI for cert rotation

• e3dfc3c5 2026-07-06T11:43:06+02:00 NO-ISSUE: Improve osimagestream pkg API

• 006e8ddc 2026-06-11T09:31:46-04:00 vendor: bump library-go

• 24477c17 2026-05-21T16:00:35-04:00 OCPBUGS-10431: allow worker pools to set staticPodPath by relaxing validation to only block control plane pools

• operator-framework-olm embedded-component dfbca9456f355d9c0931c65f5d0c7c0a95609fec to 277e53cc3ad60306296e1269ea12b97c3558cfdc

• 8713f8c6 2026-07-08T00:03:57Z :seedling: Bump google.golang.org/grpc from 1.81.1 to 1.82.0 (NO-ISSUE: rebase-main-4.18.0-0.nightly-2024-09-03-081737_amd64-2024-09-03_arm64-2024-09-04 #3862)

• oc image-amd64 439aadae1b6322e322257bd13239e658fb9753b7 to 22c69c0ff5da7e390b42880141e43d555e38ef41

• 9d3080e9 2026-07-08T04:25:52-04:00 Fix go vet warning in process.go

• 926ebdc9 2026-07-08T04:11:58-04:00 Bump gitignore dependency

• f15cc462 2026-07-07T14:55:28+02:00 CNTRLPLANE-3786: bump x/crypto to the latest version

• kube-rbac-proxy image-amd64 d12e274605248f6c59373240a7eae7a7a357dcb3 to 43c114bc124f59e2fc3223dea8e0a8f4cdeed18d

• 9737d17 2026-06-05T20:53:43Z Updating kube-rbac-proxy-container image to be consistent with ART for 5.0 Reconciling with https://github.com/openshift-eng/ocp-build-data/tree/7691ed4dc0b6585b358f9e73fb736ace9a48a286/images/kube-rbac-proxy.yml

• oc image-arm64 0ec4cb02de4306d82fd4c2ec786184b6d993ba1b to 22c69c0ff5da7e390b42880141e43d555e38ef41

• 9d3080e9 2026-07-08T04:25:52-04:00 Fix go vet warning in process.go

• kube-rbac-proxy image-arm64 d12e274605248f6c59373240a7eae7a7a357dcb3 to 43c114bc124f59e2fc3223dea8e0a8f4cdeed18d

• 9737d17 2026-06-05T20:53:43Z Updating kube-rbac-proxy-container image to be consistent with ART for 5.0 Reconciling with https://github.com/openshift-eng/ocp-build-data/tree/7691ed4dc0b6585b358f9e73fb736ace9a48a286/images/kube-rbac-proxy.yml

/label tide/merge-method-squash
/label backport-risk-assessed
/label jira/valid-bug

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: microshift-rebase-script[bot]
Once this PR has been reviewed and has the lgtm label, please assign jogeo for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[pacevedom]

/retest

[microshift-rebase-script]

/test e2e-aws-tests-arm
/test e2e-aws-tests-bootc-arm-el10
/test e2e-aws-tests-bootc-arm-el9
/test security
/test test-rebase
/test test-rpm
/test test-unit
/test verify-deps
/test verify

Added by prow-jobs-for-pull-requests.sh 🤖

[openshift-merge-bot]

/retest-required

Remaining retests: 0 against base HEAD 5967771 and 2 for PR HEAD 85298f3 in total

[pacevedom]

/retest

[pacevedom]

/retest

[microshift-rebase-script]

/test test-rpm

Added by prow-jobs-for-pull-requests.sh 🤖

[pacevedom]

/retest

[pacevedom]

/test test-rpm

[openshift-merge-bot]

/retest-required

Remaining retests: 0 against base HEAD c92d95f and 1 for PR HEAD 85298f3 in total

[openshift-merge-bot]

/retest-required

Remaining retests: 0 against base HEAD ce1f238 and 0 for PR HEAD 85298f3 in total

[openshift-ci]

@microshift-rebase-script[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.