Skip to content

setup assisted-installer version v2.55#82358

Closed
danmanor wants to merge 1 commit into
openshift:mainfrom
danmanor:assisted-installer/setup-version-v2.55-7d9e4781-e737-40e4-a737-33cf04d5b13d
Closed

setup assisted-installer version v2.55#82358
danmanor wants to merge 1 commit into
openshift:mainfrom
danmanor:assisted-installer/setup-version-v2.55-7d9e4781-e737-40e4-a737-33cf04d5b13d

Conversation

@danmanor

@danmanor danmanor commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Summary by CodeRabbit

Adds OpenShift CI configurations for the Assisted Installer v2.55 release across:

  • assisted-image-service
  • assisted-installer-agent
  • assisted-installer
  • assisted-service

The configurations define v2.55-based image builds, edge-infrastructure promotion, nightly OCP 5.0 release candidates, resource defaults, and repository-based build roots. They also establish lint, unit, subsystem, image-mirroring, and broad end-to-end test coverage across bare metal, OCI, vSphere, external platforms, and operator-specific scenarios.

@coderabbitai

coderabbitai Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Walkthrough

Adds generated v2.55 CI/operator configurations for assisted-image-service, assisted-installer-agent, assisted-installer, and assisted-service, covering image builds, release promotion, resource requests, standard CI jobs, and parameterized E2E workflows.

Changes

Assisted v2.55 CI configuration

Layer / File(s) Summary
Release and build wiring
ci-operator/config/openshift/*/*-v2.55.yaml
Component images are pinned to v2.55, repository-based builds and output images are defined, releases target edge-infrastructure, nightly OCP 5.0 candidates are configured, and default resource requests are set.
Standard CI jobs
ci-operator/config/openshift/assisted-image-service/*, ci-operator/config/openshift/assisted-installer-agent/*, ci-operator/config/openshift/assisted-installer/*, ci-operator/config/openshift/assisted-service/*
Image mirroring, lint, formatting, unit-test, generated-code, and subsystem jobs are wired with cache settings, Codecov secrets, reports, and change-based skips.
Parameterized E2E coverage
ci-operator/config/openshift/*/*-v2.55.yaml
Bare-metal, heterogeneous, OCI, external-platform, vSphere, provider, operator, upgrade, and day2 scenarios are configured with release-specific ASSISTED_CONFIG overlays.

Estimated code review effort: 4 (Complex) | ~45 minutes

Possibly related PRs

  • openshift/release#79507 — Adds corresponding v2.53 Assisted CI configuration with the same build, promotion, and test structure.
  • openshift/release#82233 — Overlaps directly on the v2.55 Assisted CI/operator configuration files.

Suggested labels: ok-to-test

🚥 Pre-merge checks | ✅ 14 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Ipv6 And Disconnected Network Test Compatibility ⚠️ Warning e2e-metal-assisted-day2-arm-workers hardcodes quay.io image refs in ASSISTED_CONFIG, creating an external-registry dependency for a disconnected job. Mirror those images to an internal registry/image stream or skip the variant in disconnected runs; then verify it in the IPv6 disconnected payload job.
✅ Passed checks (14 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title matches one major part of the change: adding v2.55 setup for assisted-installer, though the PR also updates related assisted components.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed Changed files are CI/job YAML only; searches found no Ginkgo titles or dynamic title construction in the PR.
Test Structure And Quality ✅ Passed Only ci-operator YAML files changed; no Go/Ginkgo test code was touched, so this test-quality check is not applicable.
Microshift Test Compatibility ✅ Passed Only ci-operator/job YAML was added; no Ginkgo test code or test bodies changed, so MicroShift compatibility is not implicated.
Single Node Openshift (Sno) Test Compatibility ✅ Passed PASS: v2.55 configs are version-only copies of v2.54; the explicit single-node job uses NUM_MASTERS=1, and no new SNO-sensitive test code was added.
Topology-Aware Scheduling Compatibility ✅ Passed Only ci-operator YAMLs were added; no deployment manifests/controllers or topology-sensitive scheduling fields (affinity, nodeSelector, spread, PDB) were introduced.
Ote Binary Stdout Contract ✅ Passed Only ci-operator YAML config/job files changed; no Go or suite code was modified, so the OTE stdout contract isn't implicated.
No-Weak-Crypto ✅ Passed The PR only adds CI YAML/job manifests, and searches found no MD5/SHA1/DES/RC4/3DES/Blowfish/ECB or custom/timing-unsafe crypto usage.
Container-Privileges ✅ Passed No privileged, hostPID/Network/IPC, allowPrivilegeEscalation, SYS_ADMIN, or root/user security fields were found; only capabilities: [intranet] appears.
No-Sensitive-Data-In-Logs ✅ Passed New CI YAML only mounts codecov tokens from secret files and assigns them to env vars; no echo/printenv/xtrace or hardcoded creds/PII found.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 Checkov (3.3.8)
ci-operator/config/openshift/assisted-image-service/openshift-assisted-image-service-v2.55.yaml

Traceback (most recent call last):
File "/usr/local/bin/checkov", line 2, in
from checkov.main import Checkov
ModuleNotFoundError: No module named 'checkov'

ci-operator/config/openshift/assisted-installer-agent/openshift-assisted-installer-agent-v2.55.yaml

Traceback (most recent call last):
File "/usr/local/bin/checkov", line 2, in
from checkov.main import Checkov
ModuleNotFoundError: No module named 'checkov'

ci-operator/config/openshift/assisted-installer/openshift-assisted-installer-v2.55.yaml

Traceback (most recent call last):
File "/usr/local/bin/checkov", line 2, in
from checkov.main import Checkov
ModuleNotFoundError: No module named 'checkov'

  • 1 others

Comment @coderabbitai help to get the list of available commands.

@openshift-ci

openshift-ci Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: danmanor

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 23, 2026
@openshift-ci
openshift-ci Bot requested review from adriengentil and bluesort July 23, 2026 15:28
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

[REHEARSALNOTIFIER]
@danmanor: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-openshift-assisted-service-v2.55-e2e-metal-assisted openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-e2e-metal-assisted-day2 openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-e2e-metal-assisted-external openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-e2e-metal-assisted-ipv4v6 openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-e2e-metal-assisted-lvm openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-e2e-metal-assisted-none openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-e2e-metal-assisted-openshift-ai openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-e2e-metal-assisted-osc openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-e2e-metal-assisted-single-node openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-e2e-metal-assisted-static-ip-suite openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-e2e-metal-assisted-tna openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-e2e-metal-assisted-virtualization openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-e2e-vsphere-assisted openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-images openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-lint openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-subsystem-aws openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-unit-test openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-service-v2.55-verify-generated-code openshift/assisted-service presubmit Presubmit changed
pull-ci-openshift-assisted-image-service-v2.55-e2e-metal-assisted openshift/assisted-image-service presubmit Presubmit changed
pull-ci-openshift-assisted-image-service-v2.55-e2e-metal-assisted-day2-arm-workers openshift/assisted-image-service presubmit Presubmit changed
pull-ci-openshift-assisted-image-service-v2.55-e2e-metal-assisted-deploy-nodes openshift/assisted-image-service presubmit Presubmit changed
pull-ci-openshift-assisted-image-service-v2.55-e2e-metal-assisted-external openshift/assisted-image-service presubmit Presubmit changed
pull-ci-openshift-assisted-image-service-v2.55-e2e-oci-assisted openshift/assisted-image-service presubmit Presubmit changed
pull-ci-openshift-assisted-image-service-v2.55-images openshift/assisted-image-service presubmit Presubmit changed
pull-ci-openshift-assisted-image-service-v2.55-lint openshift/assisted-image-service presubmit Presubmit changed

A total of 53 jobs have been affected by this change. The above listing is non-exhaustive and limited to 25 jobs.

A full list of affected jobs can be found here
Prior to this PR being merged, you will need to either run and acknowledge or opt to skip these rehearsals.

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In
`@ci-operator/config/openshift/assisted-service/openshift-assisted-service-v2.55.yaml`:
- Around line 190-194: Update the e2e-metal-assisted-lvm job configuration by
removing either always_run or run_if_changed so the job uses only its intended
trigger; preserve the remaining trigger and the existing job settings.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: fd00345f-7781-42ce-8cbc-5561f6b62cd5

📥 Commits

Reviewing files that changed from the base of the PR and between 823cb28 and 4252f6a.

⛔ Files ignored due to path filters (8)
  • ci-operator/jobs/openshift/assisted-image-service/openshift-assisted-image-service-v2.55-postsubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/assisted-image-service/openshift-assisted-image-service-v2.55-presubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/assisted-installer-agent/openshift-assisted-installer-agent-v2.55-postsubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/assisted-installer-agent/openshift-assisted-installer-agent-v2.55-presubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/assisted-installer/openshift-assisted-installer-v2.55-postsubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/assisted-installer/openshift-assisted-installer-v2.55-presubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/assisted-service/openshift-assisted-service-v2.55-postsubmits.yaml is excluded by !ci-operator/jobs/**
  • ci-operator/jobs/openshift/assisted-service/openshift-assisted-service-v2.55-presubmits.yaml is excluded by !ci-operator/jobs/**
📒 Files selected for processing (4)
  • ci-operator/config/openshift/assisted-image-service/openshift-assisted-image-service-v2.55.yaml
  • ci-operator/config/openshift/assisted-installer-agent/openshift-assisted-installer-agent-v2.55.yaml
  • ci-operator/config/openshift/assisted-installer/openshift-assisted-installer-v2.55.yaml
  • ci-operator/config/openshift/assisted-service/openshift-assisted-service-v2.55.yaml

Comment on lines +190 to +194
- always_run: true
as: e2e-metal-assisted-lvm
capabilities:
- intranet
run_if_changed: ^(internal/operators/[^/]+\.go|internal/operators/lvm/.*|internal/operators/api/.*|internal/operators/handler/.*)$

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🌐 Web query:

ci-operator config test always_run and run_if_changed mutually exclusive

💡 Result:

Yes, the fields always_run and run_if_changed are mutually exclusive in ci-operator configuration when always_run is set to true [1][2]. Specifically, the official documentation for ci-operator states that run_if_changed, skip_if_only_changed, and always_run: true are mutually exclusive [1][2]. To understand how these fields interact: - always_run: Defaults to true, meaning the job runs on every pull request unless configured otherwise [1][2]. - run_if_changed: Sets a regular expression to trigger the job only when a pull request changes a matching file path [1][2]. - Because run_if_changed implies conditional execution based on path changes, it cannot be combined with always_run: true, which forces unconditional execution [1][2]. - If you need to disable automatic triggering on every pull request, you should set always_run: false [1][3][2]. These constraints apply to both the tests stanza and the images stanza within the ci-operator configuration [1][2].

Citations:


🏁 Script executed:

#!/bin/bash
set -euo pipefail

file="ci-operator/config/openshift/assisted-service/openshift-assisted-service-v2.55.yaml"

# Show the relevant section with line numbers.
sed -n '175,205p' "$file" | cat -n

# Quickly confirm the two fields are both present in the same job stanza.
python3 - <<'PY'
from pathlib import Path
text = Path("ci-operator/config/openshift/assisted-service/openshift-assisted-service-v2.55.yaml").read_text()
for marker in ["always_run: true", "run_if_changed: ^(internal/operators/[^/]+\\.go|internal/operators/lvm/.*|internal/operators/api/.*|internal/operators/handler/.*)$"]:
    print(marker, "=>", marker in text)
PY

Repository: openshift/release

Length of output: 1489


Drop either always_run or run_if_changed from e2e-metal-assisted-lvm. always_run: true is mutually exclusive with run_if_changed in ci-operator configs, so this job should keep only the intended trigger.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/config/openshift/assisted-service/openshift-assisted-service-v2.55.yaml`
around lines 190 - 194, Update the e2e-metal-assisted-lvm job configuration by
removing either always_run or run_if_changed so the job uses only its intended
trigger; preserve the remaining trigger and the existing job settings.

Source: Learnings

@openshift-ci

openshift-ci Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

@danmanor: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@danmanor

Copy link
Copy Markdown
Contributor Author

Closing as duplicate of #82412

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants