From 9128ecb7363339b693d3b7916e24315a5674dacd Mon Sep 17 00:00:00 2001 From: MitaliBhalla Date: Tue, 2 Jun 2026 10:08:25 +0530 Subject: [PATCH 1/2] ROSA-745: branch-protection for fedramp (Konflux + mandatory prow) Require primary Konflux on-pull-request and mandatory ci/prow/* presubmits (non-optional only; derived from ci-operator presubmits + DPP-20685 list). Repo settings (auto-merge, merge commits) remain DPP. Repos: addon-operator --- .../openshift/addon-operator/_prowconfig.yaml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/core-services/prow/02_config/openshift/addon-operator/_prowconfig.yaml b/core-services/prow/02_config/openshift/addon-operator/_prowconfig.yaml index 812846eb7a5dc..b8ad5243d3120 100644 --- a/core-services/prow/02_config/openshift/addon-operator/_prowconfig.yaml +++ b/core-services/prow/02_config/openshift/addon-operator/_prowconfig.yaml @@ -1,3 +1,20 @@ +branch-protection: + orgs: + openshift: + repos: + addon-operator: + branches: + main: + protect: true + required_status_checks: + contexts: + - Konflux kflux-prd-rh03 / addon-operator-on-pull-request + - ci/prow/ci-index-addon-operator-bundle + - ci/prow/coverage + - ci/prow/images + - ci/prow/lint + - ci/prow/precommit-check + - ci/prow/unit tide: queries: - excludedBranches: From 30602b84eded32ced31ca3ed7f7776d9ebec51ca Mon Sep 17 00:00:00 2001 From: MitaliBhalla Date: Wed, 3 Jun 2026 17:36:07 +0530 Subject: [PATCH 2/2] ROSA-745: drop ci-index-addon-operator-bundle from required checks addon-operator is deployed via package-operator packages; the OLM bundle index presubmit is not needed as a branch-protection gate (erdii review). Co-authored-by: Cursor --- .../prow/02_config/openshift/addon-operator/_prowconfig.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/core-services/prow/02_config/openshift/addon-operator/_prowconfig.yaml b/core-services/prow/02_config/openshift/addon-operator/_prowconfig.yaml index b8ad5243d3120..184e02d25668b 100644 --- a/core-services/prow/02_config/openshift/addon-operator/_prowconfig.yaml +++ b/core-services/prow/02_config/openshift/addon-operator/_prowconfig.yaml @@ -9,7 +9,6 @@ branch-protection: required_status_checks: contexts: - Konflux kflux-prd-rh03 / addon-operator-on-pull-request - - ci/prow/ci-index-addon-operator-bundle - ci/prow/coverage - ci/prow/images - ci/prow/lint