Skip to content

openshift/os: update ci-operator configs for build-args changes#78212

Merged
openshift-merge-bot[bot] merged 1 commit intoopenshift:mainfrom
jlebon:pr/openshift-os-build-args
Apr 23, 2026
Merged

openshift/os: update ci-operator configs for build-args changes#78212
openshift-merge-bot[bot] merged 1 commit intoopenshift:mainfrom
jlebon:pr/openshift-os-build-args

Conversation

@jlebon
Copy link
Copy Markdown
Member

@jlebon jlebon commented Apr 22, 2026

In openshift/os#1919, we're changing the openshift/os Containerfile to use ARG IMAGE_FROM=overridden instead of a hardcoded FROM, and to require IMAGE_NAME/IMAGE_CPE build args for RHCOS builds.

So we need to adapt the as substitution here accordingly.

Unfortunately, ci-operator (but really, Builds v1) doesn't support build args files so here we're just hardcoding values for the parameter for CI to build. This is something we'd be able to fix once CI also uses Konflux.

Yes, the literal ${IMAGE_FROM} is intended because the substitution needs to match against the raw string in the Dockerfile AIUI.

Keep the old value too so that we can merge this
PR and not break openshift/os CI before merging
openshift/os#1919.

Assisted-by: OpenCode (Claude Opus 4.6)

Summary by CodeRabbit

  • Chores
    • Enhanced container image build configuration to support flexible source resolution with dynamic image inputs.
    • Added build arguments and metadata for RHEL CoreOS 9 image builds to improve tracking and management capabilities.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Apr 22, 2026

Warning

Rate limit exceeded

@jlebon has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 55 minutes and 59 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 55 minutes and 59 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 443d3404-560a-456e-961e-0437cd8c7f59

📥 Commits

Reviewing files that changed from the base of the PR and between a0f1466 and 0f8bfa0.

📒 Files selected for processing (2)
  • ci-operator/config/openshift/os/openshift-os-master.yaml
  • ci-operator/config/openshift/os/openshift-os-master__okd-scos.yaml

Walkthrough

Updated CI operator configuration files for OpenShift OS image builds. Added new build arguments (IMAGE_NAME and IMAGE_CPE) to the RHEL CoreOS build configuration and introduced support for an externally-provided ${IMAGE_FROM} image source alongside existing hardcoded references in two separate build configurations.

Changes

Cohort / File(s) Summary
RHEL CoreOS Build Configuration
ci-operator/config/openshift/os/openshift-os-master.yaml
Added build-time arguments IMAGE_NAME (openshift/ose-rhel-coreos-9) and IMAGE_CPE (cpe:/a:redhat:openshift:4.22::el9). Annotated existing quay.io/openshift-release-dev/ocp-v4.0-art-dev:c9s-coreos input with temporary comment and added ${IMAGE_FROM} as additional input source.
OKD SCOS Build Configuration
ci-operator/config/openshift/os/openshift-os-master__okd-scos.yaml
Added ${IMAGE_FROM} as secondary image input source, retaining existing hardcoded reference with temporary annotation.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 12
✅ Passed checks (12 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title directly reflects the main changes: updating ci-operator config files to accommodate build-args changes introduced in the openshift/os Containerfile.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed PR modifies only CI operator YAML configuration files with no changes to Ginkgo test code or test names.
Test Structure And Quality ✅ Passed The custom check for Ginkgo test code quality is not applicable to this pull request. The PR only modifies YAML configuration files in the ci-operator/config/ directory with no test code changes.
Microshift Test Compatibility ✅ Passed This PR modifies only CI operator configuration YAML files, not Ginkgo e2e test code. No new tests are added.
Single Node Openshift (Sno) Test Compatibility ✅ Passed This PR contains only CI-operator configuration changes to YAML files and introduces no new Ginkgo e2e tests, making the SNO compatibility check not applicable.
Topology-Aware Scheduling Compatibility ✅ Passed PR modifies ci-operator configuration files for container image builds, not deployment manifests or operator code. Changes only affect build-time image configuration without introducing scheduling constraints.
Ote Binary Stdout Contract ✅ Passed The OTE Binary Stdout Contract check is not applicable to this pull request because the modified files are YAML configuration files (ci-operator build configs), not Go source code.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed PR contains no new Ginkgo e2e tests, only CI operator YAML configuration updates to build arguments and image mappings.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

In openshift/os#1919, we're changing the
openshift/os Containerfile to use ARG IMAGE_FROM=overridden instead of
a hardcoded FROM, and to require IMAGE_NAME/IMAGE_CPE build args for
RHCOS builds.

So we need to adapt the `as` substitution here accordingly.

Unfortunately, ci-operator (but really, Builds v1) doesn't support build
args files so here we're just hardcoding values for the parameter for
CI to build. This is something we'd be able to fix once CI also uses
Konflux.

Yes, the literal `${IMAGE_FROM}` is intended because the substitution
needs to match against the raw string in the Dockerfile AIUI.

Keep the old value too so that we can merge this
PR and not break openshift/os CI before merging
openshift/os#1919.

Assisted-by: OpenCode (Claude Opus 4.6)
Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick comments (1)
ci-operator/config/openshift/os/openshift-os-master.yaml (1)

16-21: Nit: comment placement inside the build_args sequence.

The explanatory comment on lines 16-17 sits between the first and second entries of the build_args list. It reads naturally as applying to IMAGE_NAME/IMAGE_CPE specifically (which is the intent), but some YAML tooling/formatters may relocate or strip comments embedded mid-sequence. Consider either placing it directly above - name: IMAGE_NAME with matching list-item indentation, or inlining it on each entry, to reduce the chance of it getting detached on future regenerations.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@ci-operator/config/openshift/os/openshift-os-master.yaml` around lines 16 -
21, The comment explaining the source-of-truth for the build args is currently
inside the build_args sequence between items and may be lost by YAML tooling;
move that comment so it sits directly above the "- name: IMAGE_NAME" list item
with the same list-item indentation (or alternatively convert it to inline
comments on the IMAGE_NAME and IMAGE_CPE entries), ensuring the comment remains
adjacent to the IMAGE_NAME and IMAGE_CPE entries and preserves indentation so
formatters won't detach it.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Nitpick comments:
In `@ci-operator/config/openshift/os/openshift-os-master.yaml`:
- Around line 16-21: The comment explaining the source-of-truth for the build
args is currently inside the build_args sequence between items and may be lost
by YAML tooling; move that comment so it sits directly above the "- name:
IMAGE_NAME" list item with the same list-item indentation (or alternatively
convert it to inline comments on the IMAGE_NAME and IMAGE_CPE entries), ensuring
the comment remains adjacent to the IMAGE_NAME and IMAGE_CPE entries and
preserves indentation so formatters won't detach it.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 18ccde7f-9d01-4c95-b172-d89c4695a6bb

📥 Commits

Reviewing files that changed from the base of the PR and between ce26660 and a0f1466.

📒 Files selected for processing (2)
  • ci-operator/config/openshift/os/openshift-os-master.yaml
  • ci-operator/config/openshift/os/openshift-os-master__okd-scos.yaml

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Apr 22, 2026
@openshift-merge-bot
Copy link
Copy Markdown
Contributor

[REHEARSALNOTIFIER]
@jlebon: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-openshift-os-master-okd-scos-e2e-aws-ovn openshift/os presubmit Ci-operator config changed
pull-ci-openshift-os-master-okd-scos-images openshift/os presubmit Ci-operator config changed
pull-ci-openshift-os-master-e2e-aws openshift/os presubmit Ci-operator config changed
pull-ci-openshift-os-master-images openshift/os presubmit Ci-operator config changed

Prior to this PR being merged, you will need to either run and acknowledge or opt to skip these rehearsals.

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@openshift-merge-bot
Copy link
Copy Markdown
Contributor

[REHEARSALNOTIFIER]
@jlebon: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-openshift-os-master-e2e-aws openshift/os presubmit Ci-operator config changed
pull-ci-openshift-os-master-images openshift/os presubmit Ci-operator config changed
pull-ci-openshift-os-master-okd-scos-e2e-aws-ovn openshift/os presubmit Ci-operator config changed
pull-ci-openshift-os-master-okd-scos-images openshift/os presubmit Ci-operator config changed
Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Apr 22, 2026

@jlebon: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@dustymabe
Copy link
Copy Markdown
Member

/lgtm

A lot of nice context in that git commit message. Part of me wonders if some of that should live in the config file too.

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Apr 23, 2026
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Apr 23, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dustymabe, jlebon

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@jlebon
Copy link
Copy Markdown
Member Author

jlebon commented Apr 23, 2026

/lgtm

A lot of nice context in that git commit message. Part of me wonders if some of that should live in the config file too.

I initially had that, but make update wiped out my comments. :( Which yeah... when that happened it immediately brought back memories of having hit this in the past.

@jlebon
Copy link
Copy Markdown
Member Author

jlebon commented Apr 23, 2026

/pj-rehearse ack

@openshift-merge-bot
Copy link
Copy Markdown
Contributor

@jlebon: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-merge-bot openshift-merge-bot Bot added the rehearsals-ack Signifies that rehearsal jobs have been acknowledged label Apr 23, 2026
@openshift-merge-bot openshift-merge-bot Bot merged commit 912602f into openshift:main Apr 23, 2026
14 checks passed
tbuskey pushed a commit to tbuskey/release that referenced this pull request Apr 24, 2026
…shift#78212)

In openshift/os#1919, we're changing the
openshift/os Containerfile to use ARG IMAGE_FROM=overridden instead of
a hardcoded FROM, and to require IMAGE_NAME/IMAGE_CPE build args for
RHCOS builds.

So we need to adapt the `as` substitution here accordingly.

Unfortunately, ci-operator (but really, Builds v1) doesn't support build
args files so here we're just hardcoding values for the parameter for
CI to build. This is something we'd be able to fix once CI also uses
Konflux.

Yes, the literal `${IMAGE_FROM}` is intended because the substitution
needs to match against the raw string in the Dockerfile AIUI.

Keep the old value too so that we can merge this
PR and not break openshift/os CI before merging
openshift/os#1919.

Assisted-by: OpenCode (Claude Opus 4.6)
Prucek pushed a commit to Prucek/release that referenced this pull request Apr 29, 2026
…shift#78212)

In openshift/os#1919, we're changing the
openshift/os Containerfile to use ARG IMAGE_FROM=overridden instead of
a hardcoded FROM, and to require IMAGE_NAME/IMAGE_CPE build args for
RHCOS builds.

So we need to adapt the `as` substitution here accordingly.

Unfortunately, ci-operator (but really, Builds v1) doesn't support build
args files so here we're just hardcoding values for the parameter for
CI to build. This is something we'd be able to fix once CI also uses
Konflux.

Yes, the literal `${IMAGE_FROM}` is intended because the substitution
needs to match against the raw string in the Dockerfile AIUI.

Keep the old value too so that we can merge this
PR and not break openshift/os CI before merging
openshift/os#1919.

Assisted-by: OpenCode (Claude Opus 4.6)
BATMAN-JD pushed a commit to BATMAN-JD/release that referenced this pull request May 1, 2026
…shift#78212)

In openshift/os#1919, we're changing the
openshift/os Containerfile to use ARG IMAGE_FROM=overridden instead of
a hardcoded FROM, and to require IMAGE_NAME/IMAGE_CPE build args for
RHCOS builds.

So we need to adapt the `as` substitution here accordingly.

Unfortunately, ci-operator (but really, Builds v1) doesn't support build
args files so here we're just hardcoding values for the parameter for
CI to build. This is something we'd be able to fix once CI also uses
Konflux.

Yes, the literal `${IMAGE_FROM}` is intended because the substitution
needs to match against the raw string in the Dockerfile AIUI.

Keep the old value too so that we can merge this
PR and not break openshift/os CI before merging
openshift/os#1919.

Assisted-by: OpenCode (Claude Opus 4.6)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. rehearsals-ack Signifies that rehearsal jobs have been acknowledged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants