Add TLS PQC compliance and TLS 1.3 adherence tests for OADP operator by Joeavaikath · Pull Request #79196 · openshift/release

Joeavaikath · 2026-05-12T15:32:54Z

Summary

Add TLS PQC readiness and TLS 1.3 adherence CI tests for the OADP operator on oadp-dev and oadp-1.6 branches (4.22 OCP variant)
Each test uses the optional-operators-ci-aws workflow to provision a cluster and install OADP via OLM, then configures the TLS 1.3 Modern profile (tls-13 step) and runs the tls-scanner-run step scoped to the openshift-adp namespace
Available as optional PR-triggered tests (/test 4.22-tls-pqc-readiness, /test 4.22-tls13-adherence) and weekly periodic jobs (Mondays 06:00 UTC)

Test plan

Rehearsal jobs pass for the new test definitions
Trigger /test 4.22-tls-pqc-readiness on the PR to validate the PQC readiness scan
Trigger /test 4.22-tls13-adherence on the PR to validate the TLS 1.3 adherence scan

This PR updates OpenShift CI configuration for the OADP operator (oadp-dev and oadp-1.6 branches, 4.22 variant) to add automated TLS compliance testing using the tls-scanner-tool.

What changed (practical impact)

Adds a tls-scanner-tool base image entry (ocp:4.22, tag tls-scanner-tool) to CI base_images.
Introduces two TLS-focused test suites on both branches:
- tls-pqc-readiness — PQC readiness scan (PQC_CHECK: "true")
- tls13-adherence — TLS 1.3 adherence scan (PQC_CHECK: "false", TLS_13_ENABLE_TLS_ADHERENCE: "true", TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents)
Each suite is available as:
- an optional PR-triggered job (/test 4.22-tls-pqc-readiness and /test 4.22-tls13-adherence) that provisions a cluster via the optional-operators-ci-operator-sdk-aws workflow, installs OADP via OLM, enables the TLS 1.3 Modern profile (tls-13 step), and runs the tls-scanner-run ref scoped to the openshift-adp namespace.
- a weekly periodic job scheduled Mondays at 06:00 UTC (cron: 0 6 * * 1).
Tests set OO_INSTALL_MODE=OwnNamespace, OO_INSTALL_NAMESPACE=openshift-adp, SCAN_NAMESPACE=openshift-adp, and SCANNER_CPU="2" (reduced to 2 cores to help scheduling).
The operator bundle is built as oadp-operator-bundle (build/Dockerfile.bundle) with skip_building_index: true — the TLS scanner tests were migrated from the deprecated OO_INDEX flow to the operator-sdk bundle workflow.

Test plan / verification

Rehearsal jobs must pass; the author ran /pj-rehearse and specific rehearsal commands for the new jobs.
Validate by triggering the PR jobs: /test 4.22-tls-pqc-readiness and /test 4.22-tls13-adherence.

Files affected

ci-operator/config/openshift/oadp-operator/openshift-oadp-operator-oadp-1.6__4.22.yaml
ci-operator/config/openshift/oadp-operator/openshift-oadp-operator-oadp-dev__4.22.yaml

Notes and reviewer context

These are CI/operator job YAML changes only; no runtime code or public API changes.
Commit message reduces scanner CPU request to 2 and switches TLS tests to the operator-sdk bundle workflow (optional-operators-ci-operator-sdk-aws).
Reviewer pointed to related migration work (PR OADP: migrate CI to OO_BUNDLE (FBC) + enable TechPreview for OLMv1/VolumeGroupSnapshot testing #79152) and reminded to account for the broader migration away from optional-operators-ci-aws.

coderabbitai · 2026-05-12T15:33:21Z

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (6)

ci-operator/jobs/openshift/oadp-operator/openshift-oadp-operator-oadp-1.6-periodics.yaml is excluded by !ci-operator/jobs/**
ci-operator/jobs/openshift/oadp-operator/openshift-oadp-operator-oadp-1.6-postsubmits.yaml is excluded by !ci-operator/jobs/**
ci-operator/jobs/openshift/oadp-operator/openshift-oadp-operator-oadp-1.6-presubmits.yaml is excluded by !ci-operator/jobs/**
ci-operator/jobs/openshift/oadp-operator/openshift-oadp-operator-oadp-dev-periodics.yaml is excluded by !ci-operator/jobs/**
ci-operator/jobs/openshift/oadp-operator/openshift-oadp-operator-oadp-dev-postsubmits.yaml is excluded by !ci-operator/jobs/**
ci-operator/jobs/openshift/oadp-operator/openshift-oadp-operator-oadp-dev-presubmits.yaml is excluded by !ci-operator/jobs/**

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: bc86b143-ab0b-4ba2-9d04-d449668c98da

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Walkthrough

Adds a tls-scanner-tool base image and four TLS scanning CI jobs (tls-pqc-readiness, tls-pqc-readiness-periodic, tls13-adherence, tls13-adherence-periodic) to the OADP operator ci-operator configs for 1.6 and dev on OpenShift 4.22; periodic variants run weekly via cron.

Changes

TLS scanning CI additions

Layer / File(s)	Summary
Base image declaration `ci-operator/config/openshift/oadp-operator/openshift-oadp-operator-oadp-1.6__4.22.yaml`, `ci-operator/config/openshift/oadp-operator/openshift-oadp-operator-oadp-dev__4.22.yaml`	Adds `base_images.tls-scanner-tool` with `name: "4.22"`, `namespace: ocp`, `tag: tls-scanner-tool`.
Operator bundle build target `ci-operator/config/openshift/oadp-operator/...-oadp-1.6__4.22.yaml`, `...-oadp-dev__4.22.yaml`	Adds a bundle build entry `as: oadp-operator-bundle` using `build/Dockerfile.bundle` and `skip_building_index: true`.
Optional TLS scanner jobs (non-periodic) `ci-operator/config/openshift/oadp-operator/...-oadp-1.6__4.22.yaml`, `...-oadp-dev__4.22.yaml`	Adds `tls-pqc-readiness` and `tls13-adherence` jobs using `workflow: optional-operators-ci-operator-sdk-aws`, `refs: [tls-13, tls-scanner-run]`, `OO_BUNDLE: oadp-operator-bundle`, `OO_INSTALL_MODE: OwnNamespace`, `OO_INSTALL_NAMESPACE: openshift-adp`, `SCAN_NAMESPACE: openshift-adp`, `SCANNER_CPU: "2"`. `tls-pqc-readiness` sets `PQC_CHECK: "true"`. `tls13-adherence` sets `PQC_CHECK: "false"`, `TLS_13_ENABLE_TLS_ADHERENCE: "true"`, `TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents`.
Periodic TLS scanner jobs `ci-operator/config/openshift/oadp-operator/...-oadp-1.6__4.22.yaml`, `...-oadp-dev__4.22.yaml`	Adds `tls-pqc-readiness-periodic` and `tls13-adherence-periodic` with the same env and refs as their non-periodic counterparts and `cron: 0 6 * * 1` for weekly execution.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Suggested labels

lgtm, rehearsals-ack

🚥 Pre-merge checks | ✅ 12

✅ Passed checks (12 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title directly and accurately describes the main changes: adding TLS PQC compliance and TLS 1.3 adherence tests to the OADP operator CI configuration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PR modifies YAML CI config files only, no Ginkgo test files. Check for stable test names is not applicable to YAML configuration.
Test Structure And Quality	✅ Passed	Check targets Ginkgo test code (.go files). PR contains only YAML CI configuration changes—no test code present. Check not applicable.
Microshift Test Compatibility	✅ Passed	The PR modifies only CI configuration YAML files in openshift/release, not new Ginkgo test code. The check applies to new e2e tests with It(), Describe(), etc., which are not present here.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	No Ginkgo e2e tests are added in this PR. Changes only add CI job definitions (YAML config) that reference existing shell-script test steps. The custom check applies only to new Ginkgo tests.
Topology-Aware Scheduling Compatibility	✅ Passed	Modified files are CI configuration (ci-operator/config/) defining test workflows and environment variables, not deployment manifests, operator code, or controllers. Check scope does not apply.
Ote Binary Stdout Contract	✅ Passed	This PR modifies YAML CI configuration files only. The OTE Binary Stdout Contract check applies to executable source code, not declarative configuration files.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PR adds CI test configuration (YAML) only, not Ginkgo test code. Referenced test steps contain no IPv4 assumptions or external connectivity requirements. Check not applicable.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

Generate code and open pull requests
Plan features and break down work
Investigate incidents and troubleshoot customer tickets together
Automate recurring tasks and respond to alerts with triggers
Summarize progress and report instantly

Built for teams:

Shared memory across your entire org—no repeating context
Per-thread sandboxes to safely plan and execute work
Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Joeavaikath · 2026-05-12T15:49:38Z

/pj-rehearse

openshift-merge-bot · 2026-05-12T15:49:42Z

@Joeavaikath: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

Joeavaikath · 2026-05-12T18:46:08Z

/pj-rehearse pull-ci-openshift-oadp-operator-oadp-1.6-4.22-tls-pqc-readiness

openshift-merge-bot · 2026-05-12T18:46:11Z

@Joeavaikath: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

Joeavaikath · 2026-05-12T18:46:17Z

/pj-rehearse periodic-ci-openshift-oadp-operator-oadp-dev-4.22-tls13-adherence-periodic

openshift-merge-bot · 2026-05-12T18:46:20Z

@Joeavaikath: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

Joeavaikath · 2026-05-12T19:03:04Z

/pj-rehearse

openshift-merge-bot · 2026-05-12T19:03:06Z

@Joeavaikath: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

weshayutin

/LGTM

kaovilai · 2026-05-13T13:28:50Z

keep in mind #79152 in the middle of migrating away from optional-operators-ci-aws

Joeavaikath · 2026-05-13T19:32:45Z

/pj-rehearse

openshift-merge-bot · 2026-05-13T19:32:48Z

@Joeavaikath: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

openshift-merge-bot · 2026-05-14T18:22:10Z

@Joeavaikath, pj-rehearse: unable to determine affected jobs. This could be due to a branch that needs to be rebased. ERROR:

couldn't prepare candidate: couldn't rebase candidate onto 825e7789afc870524d3b8077258cf307ff9947ea due to conflicts

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

Adds tls-pqc-readiness and tls13-adherence tests to oadp-dev and oadp-1.6 branch CI on the 4.22 OCP variant. Each test installs OADP via OLM, configures the TLS 1.3 Modern profile, then runs the tls-scanner scoped to the openshift-adp namespace. Available as optional PR tests and weekly periodic jobs (Mondays 06:00 UTC). Signed-off-by: Joseph <jvaikath@redhat.com>

Signed-off-by: Joseph <jvaikath@redhat.com>

openshift-merge-bot · 2026-05-15T20:58:10Z

@Joeavaikath: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

kaovilai · 2026-05-15T20:58:18Z

/pj-rehearse pull-ci-openshift-oadp-operator-oadp-1.6-4.22-tls-pqc-readiness pull-ci-openshift-oadp-operator-oadp-1.6-4.22-tls13-adherence pull-ci-openshift-oadp-operator-oadp-1.6-4.22-ci-index pull-ci-openshift-oadp-operator-oadp-1.6-4.22-e2e-test-aws pull-ci-openshift-oadp-operator-oadp-1.6-4.22-e2e-test-cli-aws pull-ci-openshift-oadp-operator-oadp-1.6-4.22-e2e-test-hcp-aws pull-ci-openshift-oadp-operator-oadp-1.6-4.22-e2e-test-kubevirt-aws pull-ci-openshift-oadp-operator-oadp-1.6-4.22-images periodic-ci-openshift-oadp-operator-oadp-1.6-4.22-e2e-test-kubevirt-aws-periodic periodic-ci-openshift-oadp-operator-oadp-1.6-4.22-e2e-test-hcp-aws-periodic periodic-ci-openshift-oadp-operator-oadp-1.6-4.22-tls-pqc-readiness-periodic periodic-ci-openshift-oadp-operator-oadp-1.6-4.22-tls13-adherence-periodic periodic-ci-openshift-oadp-operator-oadp-1.6-4.22-e2e-test-aws-periodic periodic-ci-openshift-oadp-operator-oadp-1.6-4.22-e2e-test-cli-aws-periodic

openshift-merge-bot · 2026-05-15T20:58:21Z

@kaovilai: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

Joeavaikath · 2026-05-15T21:29:37Z

/pj-rehearse periodic-ci-openshift-oadp-operator-oadp-dev-4.22-tls13-adherence-periodic periodic-ci-openshift-oadp-operator-oadp-1.6-4.22-e2e-test-aws-periodic periodic-ci-openshift-oadp-operator-oadp-1.6-4.22-e2e-test-cli-aws-periodic

openshift-merge-bot · 2026-05-15T21:29:40Z

@Joeavaikath: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

kaovilai · 2026-05-18T16:41:36Z

/lgtm
/unhold

openshift-ci · 2026-05-18T16:43:06Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Joeavaikath, kaovilai, shubham-pampattiwar, weshayutin

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~ci-operator/config/openshift/oadp-operator/OWNERS~~ [kaovilai,shubham-pampattiwar]
~~ci-operator/jobs/openshift/oadp-operator/OWNERS~~ [kaovilai,shubham-pampattiwar]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

kaovilai · 2026-05-18T16:54:52Z

/pj-rehearse ack

openshift-merge-bot · 2026-05-18T16:54:55Z

@kaovilai: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

weshayutin · 2026-05-19T21:09:28Z

OADP-6073

…penshift#79196) * Add TLS PQC compliance and TLS 1.3 adherence tests for OADP operator Adds tls-pqc-readiness and tls13-adherence tests to oadp-dev and oadp-1.6 branch CI on the 4.22 OCP variant. Each test installs OADP via OLM, configures the TLS 1.3 Modern profile, then runs the tls-scanner scoped to the openshift-adp namespace. Available as optional PR tests and weekly periodic jobs (Mondays 06:00 UTC). Signed-off-by: Joseph <jvaikath@redhat.com> * CPU count to 2 Signed-off-by: Joseph <jvaikath@redhat.com> * Regenerate Prow jobs for oadp-dev and oadp-1.6 4.22 variants Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Joseph <jvaikath@redhat.com> --------- Signed-off-by: Joseph <jvaikath@redhat.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Add TLS compliance scanning to PTP operator CI per OCPSTRAT-2611, following the patterns from OADP (PR openshift#79196) and gcp-filestore (PR openshift#81917). For each branch (release-4.22, release-4.23), add: Presubmit (on-demand, optional, non-blocking): - tls-pqc-readiness: deploys PTP operator via OLM (ci-index), runs tls-13 step then tls-scanner-run with PQC check enabled - tls13-adherence: same flow with TLS 1.3 StrictAllComponents adherence policy Periodic (weekly Monday 6am UTC): - tls-pqc-readiness-periodic: same as presubmit PQC test - tls13-adherence-periodic: same as presubmit adherence test All tests: - Use optional-operators-ci-aws workflow (deploys PTP from ci-index) - Scoped to openshift-ptp namespace via SCAN_NAMESPACE - Use tls-scanner-tool from the tls-scanner namespace (official image) Branches 5.0/5.1/main are skipped because the PTP operator CSV is not yet available in the standard catalog for those versions. linuxptp-daemon is skipped because it has no operator bundle config. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Jack Ding <jackding@gmail.com>

Add TLS compliance scanning to PTP operator CI per OCPSTRAT-2611, following the patterns from OADP (PR openshift#79196) and gcp-filestore (PR openshift#81917). For each branch (4.22, 4.23, 5.0, 5.1, main), add a combined tls-scan test that covers both TLS 1.3 adherence (StrictAllComponents) and PQC readiness in a single cluster deploy: Presubmit (on-demand): - tls-scan: always_run false, optional true. Deploys PTP operator via ci-index, runs tls-13 then tls-scanner-run with PQC check and TLS 1.3 StrictAllComponents adherence enabled. Periodic (weekly, staggered): - tls-scan-periodic: 4.22 Saturday, 4.23 Monday, 5.0 Tuesday, 5.1 Wednesday, main Thursday (all 6am UTC). All tests use optional-operators-ci-aws workflow, scoped to openshift-ptp namespace, SCANNER_CPU=2, tls-scanner-tool from the official tls-scanner namespace. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Jack Ding <jackding@gmail.com>

Add TLS compliance scanning to PTP operator CI per OCPSTRAT-2611, following the patterns from OADP (PR openshift#79196) and gcp-filestore (PR openshift#81917). For each branch (4.22, 4.23, 5.0, 5.1, main), add a combined tls-scan test that covers both TLS 1.3 adherence (StrictAllComponents) and PQC readiness in a single cluster deploy: Presubmit (on-demand): - tls-scan: always_run false, optional true. Deploys PTP operator via ci-index, runs tls-13 then tls-scanner-run with PQC check and TLS 1.3 StrictAllComponents adherence enabled. Periodic (weekly Saturday, staggered 3 hours): - 4.22 at 00:00 UTC, 4.23 at 03:00, 5.0 at 06:00, 5.1 at 09:00, main at 12:00. All tests use optional-operators-ci-aws workflow, scoped to openshift-ptp namespace, SCANNER_CPU=2, tls-scanner-tool from the official tls-scanner namespace. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Jack Ding <jackding@gmail.com>

Add TLS compliance scanning to PTP operator CI per OCPSTRAT-2611, following the patterns from OADP (PR openshift#79196) and gcp-filestore (PR openshift#81917). For each branch (4.22, 4.23, 5.0, 5.1, main), add a combined tls-scan test that covers both TLS 1.3 adherence (StrictAllComponents) and PQC readiness in a single cluster deploy: Presubmit (on-demand): - tls-scan: always_run false, optional true. Deploys PTP operator via ci-index, runs tls-13, waits for PTP operator to restart with the new TLS profile, then runs tls-scanner-run. The wait-ptp-tls-restart step is needed because the PTP operator's SecurityProfileWatcher detects the TLS profile change from the tls-13 step and self-terminates for OLM to restart it. The reconciler then re-renders the kube-rbac-proxy daemonset template with the new TLS min version and cipher suites. Without the wait, the scanner would scan endpoints still running with the old TLS configuration. Periodic (weekly Saturday, staggered 3 hours): - 4.22 at 00:00 UTC, 4.23 at 03:00, 5.0 at 06:00, 5.1 at 09:00, main at 12:00. All tests use optional-operators-ci-aws workflow, scoped to openshift-ptp namespace, SCANNER_CPU=2, tls-scanner-tool from the official tls-scanner namespace. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Jack Ding <jackding@gmail.com>

openshift-ci Bot requested review from kaovilai and shubham-pampattiwar May 12, 2026 15:34

weshayutin approved these changes May 13, 2026

View reviewed changes

openshift-ci Bot assigned weshayutin May 13, 2026

openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label May 13, 2026

openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label May 13, 2026

shubham-pampattiwar approved these changes May 13, 2026

View reviewed changes

openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label May 13, 2026

openshift-ci Bot assigned shubham-pampattiwar May 13, 2026

openshift-ci Bot added lgtm Indicates that a PR is ready to be merged. needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. and removed lgtm Indicates that a PR is ready to be merged. labels May 13, 2026

Joeavaikath force-pushed the oadp-tls-pqc-compliance branch from 0c39701 to 9772e0c Compare May 13, 2026 19:04

openshift-ci Bot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label May 13, 2026

openshift-ci Bot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label May 13, 2026

Joeavaikath added 2 commits May 14, 2026 14:37

CPU count to 2

cadf8e7

Signed-off-by: Joseph <jvaikath@redhat.com>

openshift-ci Bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label May 18, 2026

openshift-ci Bot assigned kaovilai May 18, 2026

openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label May 18, 2026

openshift-merge-bot Bot added the rehearsals-ack Signifies that rehearsal jobs have been acknowledged label May 18, 2026

openshift-merge-bot Bot merged commit 8faa1be into openshift:main May 18, 2026
31 checks passed

coderabbitai Bot mentioned this pull request May 19, 2026

[wip] osc: Add TLS scanner periodic jobs for sandboxed-containers-operator #79389

Open

coderabbitai Bot mentioned this pull request May 21, 2026

ci-config: add tls-scan as informing release controller job for 4.22 #79629

Closed

jzding mentioned this pull request Jul 27, 2026

CNF-25916: Add TLS scanner CI jobs for PTP operator #82254

Open

3 tasks

Uh oh!

Conversation

Joeavaikath commented May 12, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Test plan

Uh oh!

coderabbitai Bot commented May 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Walkthrough

Changes

Estimated code review effort

Suggested labels

Uh oh!

Joeavaikath commented May 12, 2026

Uh oh!

openshift-merge-bot Bot commented May 12, 2026

Uh oh!

Joeavaikath commented May 12, 2026

Uh oh!

openshift-merge-bot Bot commented May 12, 2026

Uh oh!

Joeavaikath commented May 12, 2026

Uh oh!

openshift-merge-bot Bot commented May 12, 2026

Uh oh!

Joeavaikath commented May 12, 2026

Uh oh!

openshift-merge-bot Bot commented May 12, 2026

Uh oh!

weshayutin left a comment

Choose a reason for hiding this comment

Uh oh!

kaovilai commented May 13, 2026

Uh oh!

Joeavaikath commented May 13, 2026

Uh oh!

openshift-merge-bot Bot commented May 13, 2026

Uh oh!

openshift-merge-bot Bot commented May 14, 2026

Uh oh!

openshift-merge-bot Bot commented May 15, 2026

Uh oh!

kaovilai commented May 15, 2026

Uh oh!

openshift-merge-bot Bot commented May 15, 2026

Uh oh!

Joeavaikath commented May 15, 2026

Uh oh!

openshift-merge-bot Bot commented May 15, 2026

Uh oh!

kaovilai commented May 18, 2026

Uh oh!

openshift-ci Bot commented May 18, 2026

Uh oh!

kaovilai commented May 18, 2026

Uh oh!

openshift-merge-bot Bot commented May 18, 2026

Uh oh!

Uh oh!

weshayutin commented May 19, 2026 • edited by atlassian Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Joeavaikath commented May 12, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented May 12, 2026 •

edited

Loading

weshayutin commented May 19, 2026 •

edited by atlassian Bot

Loading