Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
approvers:
- cambelem
- bhushanthakur93
- rawsyntax
reviewers:
- cambelem
- bhushanthakur93
- rawsyntax
Original file line number Diff line number Diff line change
@@ -0,0 +1,35 @@
binary_build_commands: go install ./cmd/account-manager
build_root:
image_stream_tag:
name: release
namespace: openshift
tag: golang-1.25
Comment on lines +2 to +6

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Description: Check if golang-1.25 image stream tag exists in openshift namespace

oc get imagestreamtag release:golang-1.25 -n openshift 2>/dev/null && \
  echo "✓ golang-1.25 tag exists" || \
  echo "✗ golang-1.25 tag not found - consider using golang-1.23 or golang-1.22"

# List available golang tags
echo -e "\nAvailable golang tags:"
oc get imagestream release -n openshift -o json 2>/dev/null | \
  jq -r '.spec.tags[]? | select(.name | startswith("golang")) | .name' | sort -V

Repository: openshift/release

Length of output: 157


🌐 Web query:

OpenShift CI golang builder image tags available in 2026

💡 Result:

As of June 2026, OpenShift CI uses builder images hosted in the registry.ci.openshift.org/ocp/builder repository [1]. These images typically follow a structured naming convention: registry.ci.openshift.org/ocp/builder:rhel-{VERSION}-golang-{GO_VERSION}-openshift-{OCP_VERSION} As of early 2026, recent technical documentation and source code updates confirm the availability and usage of Go 1.25 builder images, commonly paired with OpenShift 4.22 base images [2][3][4][5][6]. Key naming patterns for these images include: - RHEL Version: Commonly rhel-9 (e.g., rhel-9-golang-1.25-openshift-4.22) [2][5]. RHEL-8 variants also exist and are updated in parallel for specific components (e.g., rhel-8-golang-1.25-openshift-4.22) [5]. - Golang Version: As of March/April 2026, Go 1.25 is the standard for new builds in many core OpenShift repositories [3][4][5][6]. - OpenShift Version: These images are tagged against specific OpenShift release streams, such as 4.22 [2][3][5][6]. Additionally, CI configurations often utilize "release" images for the build root, following a similar pattern: registry.ci.openshift.org/openshift/release:rhel-{VERSION}-release-golang-{GO_VERSION}-openshift-{OCP_VERSION} [1][3][4][5][6]. You can verify the current tags by querying the imagestreams in the OpenShift CI registry or by checking the build manifest configurations (.ci-operator.yaml) of official OpenShift repositories, which are regularly updated to reflect the latest stable builder tags [1][2][6].

Citations:


Update build_root golang tag to an existing imagestreamtag
The config references release:golang-1.25 in the openshift namespace, but oc get imagestreamtag release:golang-1.25 -n openshift returns not found. Switch to a golang imagestreamtag that exists in that namespace (or align the config with the actual available release tags).

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/config/openshift-online/rosa-account-manager-service/openshift-online-rosa-account-manager-service-master.yaml`
around lines 2 - 6, The build_root image_stream_tag references a non-existent
tag (name: release, namespace: openshift, tag: golang-1.25); update the
build_root.image_stream_tag.tag value to a golang imagestreamtag that actually
exists in the openshift namespace (or adjust the name/namespace to match the
available imagestreamtag), e.g., query available tags with oc get imagestreamtag
release -n openshift and replace golang-1.25 with one of the returned tags so
build_root points to a valid imagestreamtag.

resources:
'*':
limits:
memory: 4Gi
requests:
cpu: 100m
memory: 200Mi
test_binary_build_commands: go test ./pkg/... ./cmd/... ./test/...
tests:
- as: unit-test
commands: make test
container:
from: bin
- as: integration-test
commands: make test-integration
container:
from: bin
- as: fedramp-test
commands: make test-fedramp
container:
from: bin
- as: xcm-test
commands: make test-xcm
container:
from: bin
zz_generated_metadata:
branch: master
org: openshift-online
repo: rosa-account-manager-service
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
approvers:
- cambelem
- bhushanthakur93
- rawsyntax
reviewers:
- cambelem
- bhushanthakur93
- rawsyntax
Original file line number Diff line number Diff line change
@@ -0,0 +1,254 @@
presubmits:
openshift-online/rosa-account-manager-service:
- agent: kubernetes
always_run: true
branches:
- ^master$
- ^master-
cluster: build01
context: ci/prow/fedramp-test
decorate: true
decoration_config:
skip_cloning: true
labels:
ci.openshift.io/generator: prowgen
pj-rehearse.openshift.io/can-be-rehearsed: "true"
name: pull-ci-openshift-online-rosa-account-manager-service-master-fedramp-test
rerun_command: /test fedramp-test
spec:
containers:
- args:
- --gcs-upload-secret=/secrets/gcs/service-account.json
- --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
- --report-credentials-file=/etc/report/credentials
- --target=fedramp-test
command:
- ci-operator
env:
- name: HTTP_SERVER_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
imagePullPolicy: Always
name: ""
ports:
- containerPort: 8080
name: http
resources:
requests:
cpu: 10m
volumeMounts:
- mountPath: /secrets/gcs
name: gcs-credentials
readOnly: true
- mountPath: /secrets/manifest-tool
name: manifest-tool-local-pusher
readOnly: true
- mountPath: /etc/pull-secret
name: pull-secret
readOnly: true
- mountPath: /etc/report
name: result-aggregator
readOnly: true
serviceAccountName: ci-operator
volumes:
- name: manifest-tool-local-pusher
secret:
secretName: manifest-tool-local-pusher
- name: pull-secret
secret:
secretName: registry-pull-credentials
- name: result-aggregator
secret:
secretName: result-aggregator
trigger: (?m)^/test( | .* )fedramp-test,?($|\s.*)
- agent: kubernetes
always_run: true
branches:
- ^master$
- ^master-
cluster: build01
context: ci/prow/integration-test
decorate: true
decoration_config:
skip_cloning: true
labels:
ci.openshift.io/generator: prowgen
pj-rehearse.openshift.io/can-be-rehearsed: "true"
name: pull-ci-openshift-online-rosa-account-manager-service-master-integration-test
rerun_command: /test integration-test
spec:
containers:
- args:
- --gcs-upload-secret=/secrets/gcs/service-account.json
- --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
- --report-credentials-file=/etc/report/credentials
- --target=integration-test
command:
- ci-operator
env:
- name: HTTP_SERVER_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
imagePullPolicy: Always
name: ""
ports:
- containerPort: 8080
name: http
resources:
requests:
cpu: 10m
volumeMounts:
- mountPath: /secrets/gcs
name: gcs-credentials
readOnly: true
- mountPath: /secrets/manifest-tool
name: manifest-tool-local-pusher
readOnly: true
- mountPath: /etc/pull-secret
name: pull-secret
readOnly: true
- mountPath: /etc/report
name: result-aggregator
readOnly: true
serviceAccountName: ci-operator
volumes:
- name: manifest-tool-local-pusher
secret:
secretName: manifest-tool-local-pusher
- name: pull-secret
secret:
secretName: registry-pull-credentials
- name: result-aggregator
secret:
secretName: result-aggregator
trigger: (?m)^/test( | .* )integration-test,?($|\s.*)
- agent: kubernetes
always_run: true
branches:
- ^master$
- ^master-
cluster: build01
context: ci/prow/unit-test
decorate: true
decoration_config:
skip_cloning: true
labels:
ci.openshift.io/generator: prowgen
pj-rehearse.openshift.io/can-be-rehearsed: "true"
name: pull-ci-openshift-online-rosa-account-manager-service-master-unit-test
rerun_command: /test unit-test
spec:
containers:
- args:
- --gcs-upload-secret=/secrets/gcs/service-account.json
- --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
- --report-credentials-file=/etc/report/credentials
- --target=unit-test
command:
- ci-operator
env:
- name: HTTP_SERVER_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
imagePullPolicy: Always
name: ""
ports:
- containerPort: 8080
name: http
resources:
requests:
cpu: 10m
volumeMounts:
- mountPath: /secrets/gcs
name: gcs-credentials
readOnly: true
- mountPath: /secrets/manifest-tool
name: manifest-tool-local-pusher
readOnly: true
- mountPath: /etc/pull-secret
name: pull-secret
readOnly: true
- mountPath: /etc/report
name: result-aggregator
readOnly: true
serviceAccountName: ci-operator
volumes:
- name: manifest-tool-local-pusher
secret:
secretName: manifest-tool-local-pusher
- name: pull-secret
secret:
secretName: registry-pull-credentials
- name: result-aggregator
secret:
secretName: result-aggregator
trigger: (?m)^/test( | .* )unit-test,?($|\s.*)
- agent: kubernetes
always_run: true
branches:
- ^master$
- ^master-
cluster: build01
context: ci/prow/xcm-test
decorate: true
decoration_config:
skip_cloning: true
labels:
ci.openshift.io/generator: prowgen
pj-rehearse.openshift.io/can-be-rehearsed: "true"
name: pull-ci-openshift-online-rosa-account-manager-service-master-xcm-test
rerun_command: /test xcm-test
spec:
containers:
- args:
- --gcs-upload-secret=/secrets/gcs/service-account.json
- --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
- --report-credentials-file=/etc/report/credentials
- --target=xcm-test
command:
- ci-operator
env:
- name: HTTP_SERVER_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
imagePullPolicy: Always
name: ""
ports:
- containerPort: 8080
name: http
resources:
requests:
cpu: 10m
volumeMounts:
- mountPath: /secrets/gcs
name: gcs-credentials
readOnly: true
- mountPath: /secrets/manifest-tool
name: manifest-tool-local-pusher
readOnly: true
- mountPath: /etc/pull-secret
name: pull-secret
readOnly: true
- mountPath: /etc/report
name: result-aggregator
readOnly: true
serviceAccountName: ci-operator
volumes:
- name: manifest-tool-local-pusher
secret:
secretName: manifest-tool-local-pusher
- name: pull-secret
secret:
secretName: registry-pull-credentials
- name: result-aggregator
secret:
secretName: result-aggregator
trigger: (?m)^/test( | .* )xcm-test,?($|\s.*)
Original file line number Diff line number Diff line change
@@ -0,0 +1,89 @@
approve:
- repos:
- openshift-online/rosa-account-manager-service
require_self_approval: false
external_plugins:
openshift-online/rosa-account-manager-service:
- endpoint: http://refresh
events:
- issue_comment
name: refresh
- endpoint: http://cherrypick
events:
- issue_comment
- pull_request
name: cherrypick
- endpoint: http://needs-rebase
events:
- issue_comment
- pull_request
name: needs-rebase
- endpoint: http://backport-verifier
events:
- issue_comment
- pull_request
name: backport-verifier
- endpoint: http://payload-testing-prow-plugin
events:
- issue_comment
name: payload-testing-prow-plugin
- endpoint: http://jira-lifecycle-plugin
events:
- issue_comment
- pull_request
- pull_request_review
name: jira-lifecycle-plugin
- endpoint: http://pipeline-controller
events:
- pull_request
- issue_comment
name: pipeline-controller
- endpoint: http://multi-pr-prow-plugin
events:
- issue_comment
name: multi-pr-prow-plugin
- endpoint: http://ship-hook
events:
- pull_request
- issue_comment
- pull_request_review
name: ship-hook
lgtm:
- repos:
- openshift-online/rosa-account-manager-service
review_acts_as_lgtm: true
plugins:
openshift-online/rosa-account-manager-service:
plugins:
- assign
- blunderbuss
- cat
- dog
- heart
- golint
- goose
- help
- hold
- jira
- label
- lgtm
- lifecycle
- override
- pony
- retitle
- shrug
- sigmention
- skip
- trigger
- verify-owners
- owners-label
- wip
- yuks
- approve
triggers:
- org_invite:
prominent: {}
repos:
- openshift-online/rosa-account-manager-service
trusted_apps:
- openshift-merge-bot
Loading