Skip to content

Oringial 50 hack #82608

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
sergiordlr wants to merge 3 commits into
base: main
Choose a base branch
from
Open

Oringial 50 hack #82608

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
eb2f7d7
NO-ISSUE: move 5.0 pin images upgrade to MCO
sergiordlr Jul 21, 2026
88012b1
only use 4.23
sergiordlr Jul 29, 2026
bfaef47
hack th epinnedimages step
sergiordlr Jul 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 23 additions & 0 deletions ...ft/machine-config-operator/openshift-machine-config-operator-release-4.23__periodics.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -427,6 +427,29 @@ tests:
- ref: mco-check-day1-enable-ocl
- ref: openshift-e2e-test
workflow: openshift-e2e-aws
- as: e2e-aws-ipi-disc-priv-tp-pin-mco
interval: 168h
steps:
cluster_profile: openshift-org-aws
dependencies:
OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:initial
env:
CUSTOM_OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: registry.build10.ci.openshift.org/ci-ln-39q90fb/release:latest

@coderabbitai coderabbitai Bot Jul 29, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🩺 Stability & Availability | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== file excerpt around job =="
sed -n '410,455p' ci-operator/config/openshift/machine-config-operator/openshift-machine-config-operator-release-4.23__periodics.yaml

echo
echo "== all references to ci-ln-39q90fb or build10 release images in this repo =="
rg -n "ci-ln-39q90fb|registry\.build10\.ci\.openshift\.org|CUSTOM_OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE|OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE" -S .

echo
echo "== nearby job definitions =="
sed -n '1,80p' ci-operator/config/openshift/machine-config-operator/openshift-machine-config-operator-release-4.23__periodics.yaml

Repository: openshift/release

Length of output: 50374

🌐 Web query:

registry.build10.ci.openshift.org ci-ln-39q90fb/release:latest

💡 Result:

The pullspec registry.build10.ci.openshift.org/ci-ln-39q90fb/release:latest refers to a container image stored within the OpenShift CI infrastructure [1][2]. Specifically: 1. Registry: registry.build10.ci.openshift.org is an integrated internal image registry associated with the build10 build farm cluster in the OpenShift CI environment [1][2][3]. 2. Namespace: ci-ln-39q90fb represents a specific, ephemeral namespace created for a CI job execution (often associated with a pull request or automated task) on that build farm [3]. 3. Image/Tag: release:latest points to a specific image stream and tag used within that CI job's context [3]. In the context of OpenShift CI, registry.build10.ci.openshift.org is primarily used for the temporary storage of build artifacts during job execution [3]. Official documentation advises that users and external integrations should not rely on these specific build-farm registry pullspecs for persistent image access [3]. Instead, the authoritative source for OpenShift CI images is the central registry, quay.io/openshift/ci [3]. Accessing images within these test namespaces typically requires being the author of the relevant pull request and performing an authentication via oc registry login [3].

Citations:

🌐 Web query:

OpenShift CI build registry build10 ci registry imagestreams release ci-ln-39q90fb

💡 Result:

The term ci-ln-39q90fb refers to an OpenShift CI build artifact identifier, specifically a unique namespace associated with a Prow job execution on a CI build farm [1]. In the OpenShift CI architecture, job names and environment variables often contain these identifiers to track resources and execution environments [2]. The prefix ci-ln- is a standard naming convention for namespaces created dynamically on CI build clusters (such as build10) to host pods and other resources during the execution of a test job [1]. Regarding the registry components mentioned: 1. QCI (quay.io/openshift/ci): This is the authoritative, central CI image registry and the source of truth for all images used in OpenShift CI [1][3]. 2. registry.ci.openshift.org: This is the integrated image registry on the app.ci cluster [1][3]. While it served as the central CI registry historically, it is now primarily used for internal automation, such as by Release Controllers to host promoted images for release-related tasks [1][3]. CI users are generally advised to reference images from QCI rather than the app.ci registry [1]. When troubleshooting, engineers often use the build farm's specific namespace (e.g., ci-ln-...) to pull image artifacts or inspect logs associated with a specific job execution [1]. If an image is missing, it is typically because it has not yet been promoted to or mirrored in the relevant registry [3].

Citations:

Do not rely on an ephemeral build-farm image for a weekly periodic.

registry.build10.ci.openshift.org/ci-ln-39q90fb/release:latest is a CI build-farm namespace (ci-ln-*), not a durable release; these images are not promoted and do not outlive the job that creates them. If the build namespace is unavailable or cleaned up, this periodic fails before testing MCO. Use an existing promoted stable/ci release image or create and document ownership for a durable image reference.

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/config/openshift/machine-config-operator/openshift-machine-config-operator-release-4.23__periodics.yaml`
at line 437, Update CUSTOM_OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE in the
weekly periodic configuration to use an existing promoted stable/ci release
image instead of the ephemeral ci-ln-39q90fb build-farm reference. If no
suitable promoted image exists, replace it with a durable image reference whose
ownership is documented.

EXTRACT_MANIFEST_INCLUDED: "true"
FEATURE_SET: TechPreviewNoUpgrade
MCO_CONF_DAY2_PINTARGETRELEASE: "true"
MCO_CONF_DAY2_PINTARGETRELEASE_REMOVE_PULLSECRET: "true"
test:
- as: set-upgrade-target
cli: latest
commands: echo "registry.build10.ci.openshift.org/ci-ln-b1s088b/release:latest"
> "${SHARED_DIR}/upgrade-edge"
from: cli
resources:
requests:
cpu: 100m
- chain: openshift-upgrade-qe-sanity-disconnected
workflow: cucushift-installer-rehearse-aws-ipi-disconnected-private
zz_generated_metadata:
branch: release-4.23
org: openshift
Expand Down
15 changes: 15 additions & 0 deletions ...ift/machine-config-operator/openshift-machine-config-operator-release-5.0__periodics.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -462,6 +462,21 @@ tests:
EXPECTED_RELEASE_VERSION: "5.0"
test:
- ref: mco-automation-update-amis
- as: e2e-aws-ipi-disc-priv-tp-pin-mco
interval: 168h
steps:
cluster_profile: openshift-org-aws
dependencies:
OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:initial
env:
EXTRACT_MANIFEST_INCLUDED: "true"
FEATURE_SET: TechPreviewNoUpgrade
MCO_CONF_DAY2_PINTARGETRELEASE: "true"
MCO_CONF_DAY2_PINTARGETRELEASE_REMOVE_PULLSECRET: "true"
SKIP_QE_APP_REGISTRY: "true"
test:
- chain: openshift-upgrade-qe-sanity-disconnected
workflow: cucushift-installer-rehearse-aws-ipi-disconnected-private
zz_generated_metadata:
branch: release-5.0
org: openshift
Expand Down
12 changes: 0 additions & 12 deletions ...ft-tests-private-release-5.0__automated-release-nightly-5.0-upgrade-from-stable-4.22.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -99,18 +99,6 @@ tests:
test:
- chain: openshift-upgrade-qe-sanity
workflow: cucushift-installer-rehearse-gcp-ipi
- as: aws-ipi-disconnected-pin-mco-f14
cron: 26 1 3,17 * *
steps:
cluster_profile: aws-qe
env:
BASE_DOMAIN: qe.devcluster.openshift.com
EXTRACT_MANIFEST_INCLUDED: "true"
MCO_CONF_DAY2_PINTARGETRELEASE: "true"
MCO_CONF_DAY2_PINTARGETRELEASE_REMOVE_PULLSECRET: "true"
test:
- chain: openshift-upgrade-qe-sanity-disconnected
workflow: cucushift-installer-rehearse-aws-ipi-disconnected-private
zz_generated_metadata:
branch: release-5.0
org: openshift
Expand Down
13 changes: 0 additions & 13 deletions ...ift-tests-private-release-5.0__automated-release-nightly-5.0-upgrade-from-stable-5.0.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -102,19 +102,6 @@ tests:
test:
- chain: openshift-upgrade-qe-sanity
workflow: cucushift-installer-rehearse-gcp-ipi
- as: aws-ipi-disc-priv-tp-pin-mco-f14
cron: 56 13 14,30 * *
steps:
cluster_profile: aws-qe
env:
BASE_DOMAIN: qe.devcluster.openshift.com
EXTRACT_MANIFEST_INCLUDED: "true"
FEATURE_SET: TechPreviewNoUpgrade
MCO_CONF_DAY2_PINTARGETRELEASE: "true"
MCO_CONF_DAY2_PINTARGETRELEASE_REMOVE_PULLSECRET: "true"
test:
- chain: openshift-upgrade-qe-sanity-disconnected
workflow: cucushift-installer-rehearse-aws-ipi-disconnected-private
zz_generated_metadata:
branch: release-5.0
org: openshift
Expand Down
88 changes: 88 additions & 0 deletions ...ift/machine-config-operator/openshift-machine-config-operator-release-4.23-periodics.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -484,6 +484,94 @@ periodics:
- name: result-aggregator
secret:
secretName: result-aggregator
- agent: kubernetes
cluster: build09
decorate: true
decoration_config:
sparse_checkout_files:
- .ci-operator.yaml
- Dockerfile.rhel7
extra_refs:
- base_ref: release-4.23
org: openshift
repo: machine-config-operator
sparse_checkout_files:
- .ci-operator.yaml
- Dockerfile.rhel7
interval: 168h
labels:
ci-operator.openshift.io/cloud: aws
ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws
ci-operator.openshift.io/variant: periodics
ci.openshift.io/generator: prowgen
job-release: "4.23"
pj-rehearse.openshift.io/can-be-rehearsed: "true"
name: periodic-ci-openshift-machine-config-operator-release-4.23-periodics-e2e-aws-ipi-disc-priv-tp-pin-mco
spec:
containers:
- args:
- --gcs-upload-secret=/secrets/gcs/service-account.json
- --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
- --lease-server-credentials-file=/etc/boskos/credentials
- --report-credentials-file=/etc/report/credentials
- --secret-dir=/secrets/ci-pull-credentials
- --target=e2e-aws-ipi-disc-priv-tp-pin-mco
- --variant=periodics
command:
- ci-operator
env:
- name: HTTP_SERVER_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
imagePullPolicy: Always
name: ""
ports:
- containerPort: 8080
name: http
resources:
requests:
cpu: 10m
volumeMounts:
- mountPath: /etc/boskos
name: boskos
readOnly: true
- mountPath: /secrets/ci-pull-credentials
name: ci-pull-credentials
readOnly: true
- mountPath: /secrets/gcs
name: gcs-credentials
readOnly: true
- mountPath: /secrets/manifest-tool
name: manifest-tool-local-pusher
readOnly: true
- mountPath: /etc/pull-secret
name: pull-secret
readOnly: true
- mountPath: /etc/report
name: result-aggregator
readOnly: true
serviceAccountName: ci-operator
volumes:
- name: boskos
secret:
items:
- key: credentials
path: credentials
secretName: boskos-credentials
- name: ci-pull-credentials
secret:
secretName: ci-pull-credentials
- name: manifest-tool-local-pusher
secret:
secretName: manifest-tool-local-pusher
- name: pull-secret
secret:
secretName: registry-pull-credentials
- name: result-aggregator
secret:
secretName: result-aggregator
- agent: kubernetes
cluster: build09
decorate: true
Expand Down
88 changes: 88 additions & 0 deletions ...hift/machine-config-operator/openshift-machine-config-operator-release-5.0-periodics.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -484,6 +484,94 @@ periodics:
- name: result-aggregator
secret:
secretName: result-aggregator
- agent: kubernetes
cluster: build07
decorate: true
decoration_config:
sparse_checkout_files:
- .ci-operator.yaml
- Dockerfile.rhel7
extra_refs:
- base_ref: release-5.0
org: openshift
repo: machine-config-operator
sparse_checkout_files:
- .ci-operator.yaml
- Dockerfile.rhel7
interval: 168h
labels:
ci-operator.openshift.io/cloud: aws
ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws
ci-operator.openshift.io/variant: periodics
ci.openshift.io/generator: prowgen
job-release: "5.0"
pj-rehearse.openshift.io/can-be-rehearsed: "true"
name: periodic-ci-openshift-machine-config-operator-release-5.0-periodics-e2e-aws-ipi-disc-priv-tp-pin-mco
spec:
containers:
- args:
- --gcs-upload-secret=/secrets/gcs/service-account.json
- --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
- --lease-server-credentials-file=/etc/boskos/credentials
- --report-credentials-file=/etc/report/credentials
- --secret-dir=/secrets/ci-pull-credentials
- --target=e2e-aws-ipi-disc-priv-tp-pin-mco
- --variant=periodics
command:
- ci-operator
env:
- name: HTTP_SERVER_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
imagePullPolicy: Always
name: ""
ports:
- containerPort: 8080
name: http
resources:
requests:
cpu: 10m
volumeMounts:
- mountPath: /etc/boskos
name: boskos
readOnly: true
- mountPath: /secrets/ci-pull-credentials
name: ci-pull-credentials
readOnly: true
- mountPath: /secrets/gcs
name: gcs-credentials
readOnly: true
- mountPath: /secrets/manifest-tool
name: manifest-tool-local-pusher
readOnly: true
- mountPath: /etc/pull-secret
name: pull-secret
readOnly: true
- mountPath: /etc/report
name: result-aggregator
readOnly: true
serviceAccountName: ci-operator
volumes:
- name: boskos
secret:
items:
- key: credentials
path: credentials
secretName: boskos-credentials
- name: ci-pull-credentials
secret:
secretName: ci-pull-credentials
- name: manifest-tool-local-pusher
secret:
secretName: manifest-tool-local-pusher
- name: pull-secret
secret:
secretName: registry-pull-credentials
- name: result-aggregator
secret:
secretName: result-aggregator
- agent: kubernetes
cluster: build07
decorate: true
Expand Down
Loading