Skip to content

ROSAENG-61950 | chore: codecov configuration - #82070

Merged
openshift-merge-bot[bot] merged 1 commit into
openshift:mainfrom
gdbranco:chore/rosaeng-61950
Jul 18, 2026
Merged

ROSAENG-61950 | chore: codecov configuration#82070
openshift-merge-bot[bot] merged 1 commit into
openshift:mainfrom
gdbranco:chore/rosaeng-61950

Conversation

@gdbranco

@gdbranco gdbranco commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

Summary by CodeRabbit

Updates the OpenShift CI configuration for the rosa-service-log component (ci-operator/config/openshift-online/rosa-service-log/openshift-online-rosa-service-log-master.yaml):

  • Streamlines the unit and integration job setup by removing the previous inline shell logic that created default database/RHSM secret files and enforced presence of specific Vault-provided OCM credential files. The jobs now:
    • create a local secrets/ directory
    • copy everything from the mounted openshift-online-osl-secrets into it
    • symlink secrets/ and config/ into the test directories
    • run make db/setup followed by make test / make test-integration
  • Adds coverage reporting jobs:
    • coverage: runs the same secret-prep + make db/setup flow, then executes make codecov while mounting both openshift-online-osl-secrets and rosa-service-log-codecov
    • publish-coverage: postsubmit variant of coverage (postsubmit: true) that performs the same make codecov steps with the same secret mounts

@openshift-ci
openshift-ci Bot requested review from Lir10 and patrickjennings July 17, 2026 09:57
@coderabbitai

coderabbitai Bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 75dc4ff4-c837-4d93-82ee-5e8a035cb55a

📥 Commits

Reviewing files that changed from the base of the PR and between f63b677 and 6a1cdd5.

⛔ Files ignored due to path filters (2)
  • ci-operator/jobs/openshift-online/rosa-service-log/openshift-online-rosa-service-log-master-postsubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift-online/rosa-service-log/openshift-online-rosa-service-log-master-presubmits.yaml is excluded by !ci-operator/jobs/**
📒 Files selected for processing (1)
  • ci-operator/config/openshift-online/rosa-service-log/openshift-online-rosa-service-log-master.yaml
🚧 Files skipped from review as they are similar to previous changes (1)
  • ci-operator/config/openshift-online/rosa-service-log/openshift-online-rosa-service-log-master.yaml

Walkthrough

The ROSA service log CI configuration removes local secret fallbacks and credential checks from unit and integration jobs, and adds coverage and postsubmit coverage jobs that run make codecov with service-log and Codecov secret mounts.

Changes

ROSA service log CI

Layer / File(s) Summary
Test secret preparation
ci-operator/config/openshift-online/rosa-service-log/openshift-online-rosa-service-log-master.yaml
Unit and integration jobs now copy mounted secrets, link secrets/ and config/, and run their test targets without creating default secret files or checking OCM/AMS credentials.
Coverage reporting jobs
ci-operator/config/openshift-online/rosa-service-log/openshift-online-rosa-service-log-master.yaml
Adds coverage and postsubmit publish-coverage jobs that mount Codecov secrets, prepare the database, and run make codecov.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Possibly related PRs

Suggested labels: rehearsals-ack

Suggested reviewers: patrickjennings, lir10

Sequence Diagram(s)

sequenceDiagram
  participant CIJob
  participant MountedSecrets
  participant TestDirectories
  participant Database
  participant Codecov
  CIJob->>MountedSecrets: Copy openshift-online-osl-secrets into secrets/
  CIJob->>TestDirectories: Symlink secrets/ and config/
  CIJob->>Database: Run make db/setup
  CIJob->>Codecov: Run make codecov
Loading
🚥 Pre-merge checks | ✅ 15
✅ Passed checks (15 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title is concise and matches the main change: updating Codecov-related CI configuration for this service.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed PR only changes ci-operator job YAML; no Ginkgo test titles or test code were added or modified.
Test Structure And Quality ✅ Passed Only ci-operator YAML changed; no Ginkgo test code was modified, so the test-structure requirements are not applicable.
Microshift Test Compatibility ✅ Passed PR only changes CI job YAML; no new Ginkgo tests or MicroShift-unsafe APIs/features were added.
Single Node Openshift (Sno) Test Compatibility ✅ Passed Only CI job YAML changed; no new Ginkgo e2e tests or multi-node assumptions were added.
Topology-Aware Scheduling Compatibility ✅ Passed Only ci-operator job/config YAML changed; no deployment manifests, controllers, or topology-sensitive scheduling constraints were added.
Ote Binary Stdout Contract ✅ Passed Only ci-operator YAML changed; no process-level source code (main/TestMain/suite setup) was modified, so the stdout contract is unaffected.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed Only CI job config changed; no Go/Ginkgo e2e tests or network code were added, so the IPv6/disconnected test check is not applicable.
No-Weak-Crypto ✅ Passed Only CI YAML changed; diff adds/removes secret mounting and job definitions, with no MD5/SHA1/DES/RC4/3DES/Blowfish/ECB, custom crypto, or secret comparisons.
Container-Privileges ✅ Passed The modified CI YAML has no privileged, hostPID/Network/IPC, allowPrivilegeEscalation, SYS_ADMIN, or runAs* flags; only nested-podman is used.
No-Sensitive-Data-In-Logs ✅ Passed The new CI commands only copy/symlink mounted secrets and run make targets; they don't echo secret contents, set xtrace, or log tokens/PII.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands.

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 17, 2026

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In
`@ci-operator/config/openshift-online/rosa-service-log/openshift-online-rosa-service-log-master.yaml`:
- Around line 126-174: Regenerate the Prow job metadata for the new coverage
jobs by running make update, then commit the generated changes alongside the
source configuration. Ensure both coverage and publish-coverage definitions are
reflected in the generated job files.
- Around line 145-149: Update the rosa-service-log CI configuration and its
coverage targets so presubmit execution cannot access or upload with the Codecov
credential: remove the rosa-service-log-codecov mount from the general secrets,
mount it only for the publish-coverage postsubmit target, and make the regular
coverage target non-uploading while retaining upload behavior in
publish-coverage.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: f0230748-4517-43a5-9304-98d1af977c89

📥 Commits

Reviewing files that changed from the base of the PR and between 09f53e7 and d5565d7.

⛔ Files ignored due to path filters (2)
  • ci-operator/jobs/openshift-online/rosa-service-log/openshift-online-rosa-service-log-master-postsubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift-online/rosa-service-log/openshift-online-rosa-service-log-master-presubmits.yaml is excluded by !ci-operator/jobs/**
📒 Files selected for processing (1)
  • ci-operator/config/openshift-online/rosa-service-log/openshift-online-rosa-service-log-master.yaml

@gdbranco

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-online-rosa-service-log-master-coverage

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@gdbranco: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@gdbranco

Copy link
Copy Markdown
Contributor Author

/pj-rehearse

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@gdbranco: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@gdbranco

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-online-rosa-service-log-master-coverage

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@gdbranco: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@gdbranco

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-online-rosa-service-log-master-coverage

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@gdbranco: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@gdbranco
gdbranco force-pushed the chore/rosaeng-61950 branch from d5565d7 to e8cea3e Compare July 17, 2026 18:58
@gdbranco

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-online-rosa-service-log-master-coverage

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@gdbranco: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@gdbranco
gdbranco force-pushed the chore/rosaeng-61950 branch from e8cea3e to a502388 Compare July 17, 2026 19:29
@gdbranco

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-online-rosa-service-log-master-coverage

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@gdbranco: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@gdbranco
gdbranco force-pushed the chore/rosaeng-61950 branch from a502388 to f63b677 Compare July 17, 2026 19:52
@gdbranco

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-online-rosa-service-log-master-coverage

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@gdbranco: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@gdbranco

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-online-rosa-service-log-master-unit

@gdbranco
gdbranco force-pushed the chore/rosaeng-61950 branch from f63b677 to 6a1cdd5 Compare July 17, 2026 20:09
@gdbranco

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-online-rosa-service-log-master-coverage

@gdbranco

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-online-rosa-service-log-master-unit

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@gdbranco: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

2 similar comments
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@gdbranco: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@gdbranco: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

[REHEARSALNOTIFIER]
@gdbranco: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-openshift-online-rosa-service-log-master-coverage openshift-online/rosa-service-log presubmit Presubmit changed
pull-ci-openshift-online-rosa-service-log-master-integration openshift-online/rosa-service-log presubmit Ci-operator config changed
pull-ci-openshift-online-rosa-service-log-master-unit openshift-online/rosa-service-log presubmit Ci-operator config changed
Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@gdbranco

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-online-rosa-service-log-master-coverage

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@gdbranco: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@gdbranco

Copy link
Copy Markdown
Contributor Author

/pj-rehearse ack

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@gdbranco: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-merge-bot openshift-merge-bot Bot added the rehearsals-ack Signifies that rehearsal jobs have been acknowledged label Jul 17, 2026
@gdbranco

Copy link
Copy Markdown
Contributor Author

/lgtm

@openshift-ci

openshift-ci Bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

@gdbranco: you cannot LGTM your own PR.

Details

In response to this:

/lgtm

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@Lir10

Lir10 commented Jul 18, 2026

Copy link
Copy Markdown
Contributor

/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jul 18, 2026
@openshift-ci

openshift-ci Bot commented Jul 18, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: gdbranco, Lir10

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci

openshift-ci Bot commented Jul 18, 2026

Copy link
Copy Markdown
Contributor

@gdbranco: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@openshift-merge-bot
openshift-merge-bot Bot merged commit 030562d into openshift:main Jul 18, 2026
18 checks passed
fracappa pushed a commit to fracappa/release that referenced this pull request Jul 22, 2026
amogh-redhat pushed a commit to amogh-redhat/release that referenced this pull request Aug 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. rehearsals-ack Signifies that rehearsal jobs have been acknowledged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants