Skip to content

updating openshift-preflight build image to go 1.26.3#80109

Open
acornett21 wants to merge 1 commit into
openshift:mainfrom
acornett21:openshift_preflight_image_update
Open

updating openshift-preflight build image to go 1.26.3#80109
acornett21 wants to merge 1 commit into
openshift:mainfrom
acornett21:openshift_preflight_image_update

Conversation

@acornett21
Copy link
Copy Markdown
Contributor

@acornett21 acornett21 commented Jun 4, 2026

Summary by CodeRabbit

  • Chores
    • Updated build infrastructure configuration to use Go 1.26 instead of Go 1.25 across multiple CI pipelines.

Signed-off-by: Adam D. Cornett <adc@redhat.com>
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Jun 4, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: acornett21

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jun 4, 2026
@openshift-ci openshift-ci Bot requested review from bcrochet and skattoju June 4, 2026 15:59
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Jun 4, 2026

Walkthrough

This PR updates the OpenShift preflight CI operator configurations to use Golang 1.26 instead of 1.25. The same image stream tag field is updated identically across three parallel release branch configurations (4.13, 4.21, and 4.22), changing the builder image from rhel-9-release-golang-1.25-openshift-4.23 to rhel-9-release-golang-1.26-openshift-4.23.

Changes

Preflight Go toolchain version update

Layer / File(s) Summary
Go 1.26 build image tag updates
ci-operator/config/redhat-openshift-ecosystem/openshift-preflight/redhat-openshift-ecosystem-openshift-preflight-main__4.13.yaml, redhat-openshift-ecosystem-openshift-preflight-main__4.21.yaml, redhat-openshift-ecosystem-openshift-preflight-main__4.22.yaml
The build_root.image_stream_tag.tag field is updated from rhel-9-release-golang-1.25-openshift-4.23 to rhel-9-release-golang-1.26-openshift-4.23 across all three preflight CI configurations, standardizing the Go toolchain version.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

  • openshift/release#77882: Updates builder image tags across similar CI configurations, specifically bumping Go versions for other OpenShift projects.
  • openshift/release#77681: Changes CI builder image tags to newer Go toolchain versions in a similar pattern to standardize Go version usage.
  • openshift/release#77920: Updates build_root.image_stream_tag fields to point at different Go toolchain image tags in OpenShift CI YAML configurations.

Suggested labels

lgtm, ok-to-test, rehearsals-ack

Suggested reviewers

  • jlpadilla
  • sosiouxme
  • ggiguash
🚥 Pre-merge checks | ✅ 15
✅ Passed checks (15 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: updating the Go toolchain image from 1.25 to 1.26 across three OpenShift preflight configuration files.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed No Ginkgo test code exists in this PR; it only modifies CI/CD configuration files. The check for stable test names is not applicable.
Test Structure And Quality ✅ Passed This PR contains only CI operator configuration YAML changes with no Ginkgo test code modifications, making the "Test Structure and Quality" check not applicable.
Microshift Test Compatibility ✅ Passed PR only updates CI configuration files with a Go version bump; no new Ginkgo e2e tests are added, making the check not applicable.
Single Node Openshift (Sno) Test Compatibility ✅ Passed This PR contains only CI configuration changes (updating Go build image tags) with no new Ginkgo e2e tests. The SNO compatibility check is not applicable.
Topology-Aware Scheduling Compatibility ✅ Passed This PR only updates Go image stream tags in CI operator configuration files, not deployment manifests or operator code. No scheduling constraints are introduced.
Ote Binary Stdout Contract ✅ Passed PR only modifies YAML CI configuration files; no source code changes that could violate the OTE Binary Stdout Contract.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed PR contains only CI configuration file updates; no new Ginkgo e2e tests are added, so the IPv6 compatibility check does not apply.
No-Weak-Crypto ✅ Passed PR contains only YAML configuration updates with no code changes; no weak cryptographic patterns, custom crypto implementations, or insecure secret comparisons detected.
Container-Privileges ✅ Passed Modified files are OpenShift CI operator configurations (not K8s manifests); contain no privileged, hostPID/Network/IPC, SYS_ADMIN, or allowPrivilegeEscalation settings.
No-Sensitive-Data-In-Logs ✅ Passed The PR only updates Go version references in build configuration; no logging statements or sensitive data patterns are introduced or modified.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-merge-bot
Copy link
Copy Markdown
Contributor

[REHEARSALNOTIFIER]
@acornett21: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.13-e2e redhat-openshift-ecosystem/openshift-preflight presubmit Ci-operator config changed
pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.13-images redhat-openshift-ecosystem/openshift-preflight presubmit Ci-operator config changed
pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.22-e2e redhat-openshift-ecosystem/openshift-preflight presubmit Ci-operator config changed
pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.22-images redhat-openshift-ecosystem/openshift-preflight presubmit Ci-operator config changed
pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.21-e2e redhat-openshift-ecosystem/openshift-preflight presubmit Ci-operator config changed
pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.21-images redhat-openshift-ecosystem/openshift-preflight presubmit Ci-operator config changed

Prior to this PR being merged, you will need to either run and acknowledge or opt to skip these rehearsals.

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@acornett21
Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.13-e2e pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.13-images pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.22-e2e pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.22-images pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.21-e2e pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.21-images

Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In
`@ci-operator/config/redhat-openshift-ecosystem/openshift-preflight/redhat-openshift-ecosystem-openshift-preflight-main__4.13.yaml`:
- Line 8: The tag rhel-9-release-golang-1.26-openshift-4.23 is invalid; replace
that tag value with the correct promoted OCP 4.23 Go image tag that actually
provides Go 1.26.3 (i.e., update the tag: field value to the promoted release
tag), then validate the resolved image exists (oc get istag release:<new-tag>)
and confirm the image contains Go 1.26.3 (pull/run the image or inspect with oc
debug/pod and run go version) before committing.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: bbcab140-8bc9-4818-9ce9-9ef55cdb16eb

📥 Commits

Reviewing files that changed from the base of the PR and between 7ee316c and 16720e8.

📒 Files selected for processing (3)
  • ci-operator/config/redhat-openshift-ecosystem/openshift-preflight/redhat-openshift-ecosystem-openshift-preflight-main__4.13.yaml
  • ci-operator/config/redhat-openshift-ecosystem/openshift-preflight/redhat-openshift-ecosystem-openshift-preflight-main__4.21.yaml
  • ci-operator/config/redhat-openshift-ecosystem/openshift-preflight/redhat-openshift-ecosystem-openshift-preflight-main__4.22.yaml

name: release
namespace: openshift
tag: rhel-9-release-golang-1.25-openshift-4.23
tag: rhel-9-release-golang-1.26-openshift-4.23
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Verify the image stream tag exists in the cluster

echo "Checking if image stream tag exists..."
oc get istag release:rhel-9-release-golang-1.26-openshift-4.23 -n openshift 2>/dev/null || echo "Image stream tag not found in default cluster"

echo -e "\n Checking related tags in the release image stream..."
oc get imagestream release -n openshift -o json 2>/dev/null | jq -r '.spec.tags[]? | select(.name | contains("golang-1.26")) | .name' || echo "Could not query image stream"

Repository: openshift/release

Length of output: 201


🌐 Web query:

OpenShift image stream golang 1.26 rhel-9-release-golang-1.26-openshift-4.23 registry

💡 Result:

As of June 4, 2026, the specific image stream tag rhel-9-release-golang-1.26-openshift-4.23 is not a standard, publicly documented component in the OpenShift Container Platform registry ecosystem [1][2]. OpenShift manages container images through image streams, typically located in the openshift namespace [1]. While OpenShift releases utilize specific builder images (e.g., registry.ci.openshift.org/ocp/builder:rhel-9-golang-1.25-openshift-4.22) for their internal CI/CD processes [3], the naming convention for these tags generally follows the pattern rhel-9-release-golang-X.Y-openshift-Z.W. Current OpenShift releases (such as version 4.23, which is in active CI/nightly development as of June 2026) [4] follow updated golang versions. If you are looking for a specific builder image, you should check the official Red Hat Ecosystem Catalog or the internal image streams of your cluster using: oc get istag -n openshift This command will list all available image stream tags in your cluster, confirming whether the specific golang 1.26 tag is available in your environment [5]. If it is not present, it may indicate that the platform has not yet migrated to that specific Go version for its official builder images or that the image has not been promoted to the standard registry [1].

Citations:


Update the Go 1.26.3 image stream tag reference (tag is missing / can’t be trusted)

In ci-operator/config/redhat-openshift-ecosystem/openshift-preflight/redhat-openshift-ecosystem-openshift-preflight-main__4.13.yaml (line 8), the referenced tag: rhel-9-release-golang-1.26-openshift-4.23 does not exist in the openshift namespace (oc get istag release:rhel-9-release-golang-1.26-openshift-4.23 returns not found). Replace it with the correct promoted tag for the OCP 4.23 release, then validate the resolved image contents actually provide the Go 1.26.3 toolchain (the tag name alone doesn’t encode the patch version).

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/config/redhat-openshift-ecosystem/openshift-preflight/redhat-openshift-ecosystem-openshift-preflight-main__4.13.yaml`
at line 8, The tag rhel-9-release-golang-1.26-openshift-4.23 is invalid; replace
that tag value with the correct promoted OCP 4.23 Go image tag that actually
provides Go 1.26.3 (i.e., update the tag: field value to the promoted release
tag), then validate the resolved image exists (oc get istag release:<new-tag>)
and confirm the image contains Go 1.26.3 (pull/run the image or inspect with oc
debug/pod and run go version) before committing.

@openshift-merge-bot
Copy link
Copy Markdown
Contributor

@acornett21: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@acornett21
Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.13-e2e

@openshift-merge-bot
Copy link
Copy Markdown
Contributor

@acornett21: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@acornett21
Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.13-e2e

@openshift-merge-bot
Copy link
Copy Markdown
Contributor

@acornett21: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@acornett21
Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-redhat-openshift-ecosystem-openshift-preflight-main-4.13-e2e

@openshift-merge-bot
Copy link
Copy Markdown
Contributor

@acornett21: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Jun 5, 2026

@acornett21: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@acornett21
Copy link
Copy Markdown
Contributor Author

/pj-rehearse ack

@openshift-merge-bot
Copy link
Copy Markdown
Contributor

@acornett21: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-merge-bot openshift-merge-bot Bot added the rehearsals-ack Signifies that rehearsal jobs have been acknowledged label Jun 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. rehearsals-ack Signifies that rehearsal jobs have been acknowledged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant