Skip to content

Use Go 1.25 builder for OSC devel CI - #81887

Merged
openshift-merge-bot[bot] merged 1 commit into
openshift:mainfrom
dbkreling:osc-downgrade-golang-builder-tag
Jul 14, 2026
Merged

Use Go 1.25 builder for OSC devel CI#81887
openshift-merge-bot[bot] merged 1 commit into
openshift:mainfrom
dbkreling:osc-downgrade-golang-builder-tag

Conversation

@dbkreling

@dbkreling dbkreling commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

Go 1.26 (set in #81818 and corrected in #81857) causes go mod tidy failures because it bumps major k8s dependencies (api/apimachinery from v0.34 to v0.35, controller-runtime from v0.22 to v0.23) which is unsafe on the release branch.

Use rhel-9-golang-1.25-openshift-4.22 instead, which provides Go 1.25.x compatible with go.mod's "go 1.25.7" directive and avoids any dependency churn.

Summary by CodeRabbit

  • Updated the sandboxed-containers-operator development CI builder from Go 1.26/OpenShift 4.23 to Go 1.25/OpenShift 4.22.
  • Prevents go mod tidy from upgrading Kubernetes dependencies while remaining compatible with the project’s Go 1.25.7 directive.

Go 1.26 (set in openshift#81818 and corrected in openshift#81857) causes go mod tidy
failures because it bumps major k8s dependencies (api/apimachinery from
v0.34 to v0.35, controller-runtime from v0.22 to v0.23) which is unsafe
on the release branch.

Use rhel-9-golang-1.25-openshift-4.22 instead, which provides Go 1.25.x
compatible with go.mod's "go 1.25.7" directive and avoids any dependency
churn.

Signed-off-by: Daniel Kreling <dkreling@redhat.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 9c3a1f97-e032-489c-b0f8-1f5b77091f72

📥 Commits

Reviewing files that changed from the base of the PR and between 5078622 and e3d1a3f.

📒 Files selected for processing (1)
  • ci-operator/config/openshift/sandboxed-containers-operator/openshift-sandboxed-containers-operator-devel.yaml

Walkthrough

The devel OpenShift CI configuration now uses the rhel-9-golang-1.25-openshift-4.22 builder image tag instead of rhel-9-golang-1.26-openshift-4.23.

Changes

CI Builder Image

Layer / File(s) Summary
Update devel builder image tag
ci-operator/config/openshift/sandboxed-containers-operator/openshift-sandboxed-containers-operator-devel.yaml
The build root image stream tag is changed to rhel-9-golang-1.25-openshift-4.22.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

Suggested reviewers: littlejawa

🚥 Pre-merge checks | ✅ 15
✅ Passed checks (15 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly matches the main change: switching the OSC devel CI builder to Go 1.25.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed Only a CI builder tag changed; no Ginkgo test files or titles were modified.
Test Structure And Quality ✅ Passed Only a CI config tag changed; no Ginkgo or Go test files were modified, so the test-structure check is not applicable.
Microshift Test Compatibility ✅ Passed Only a CI image tag changed; no Ginkgo tests or test files were added, so MicroShift compatibility isn't implicated.
Single Node Openshift (Sno) Test Compatibility ✅ Passed PR only changes a ci-operator builder image tag; no Ginkgo e2e tests or cluster-topology assumptions were added.
Topology-Aware Scheduling Compatibility ✅ Passed PASS: PR only changes a ci-operator builder tag; no scheduling manifests, affinities, node selectors, or replica logic were added.
Ote Binary Stdout Contract ✅ Passed Only the CI YAML builder tag changed; no OTE binary code, process-level setup, or stdout logging was modified.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed No new Ginkgo e2e tests were added; the only change is a CI builder image tag in YAML, with no IPv4 or external-network assumptions.
No-Weak-Crypto ✅ Passed PR only changes a CI builder image tag in YAML; no crypto algorithms, custom crypto, or secret comparisons appear in the diff.
Container-Privileges ✅ Passed The only change is the builder image tag; the modified YAML contains no privileged, hostPID/Network/IPC, SYS_ADMIN, root, or allowPrivilegeEscalation settings.
No-Sensitive-Data-In-Logs ✅ Passed Only change is a CI builder image tag in YAML; no new logging or sensitive-data emission was added.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@openshift-ci
openshift-ci Bot requested review from gkurz and vvoronko July 14, 2026 16:17
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

[REHEARSALNOTIFIER]
@dbkreling: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-openshift-sandboxed-containers-operator-devel-check openshift/sandboxed-containers-operator presubmit Ci-operator config changed
pull-ci-openshift-sandboxed-containers-operator-devel-ci-bundle-openshift-sandboxed-containers-operator-bundle openshift/sandboxed-containers-operator presubmit Ci-operator config changed
pull-ci-openshift-sandboxed-containers-operator-devel-gofmt openshift/sandboxed-containers-operator presubmit Ci-operator config changed
pull-ci-openshift-sandboxed-containers-operator-devel-images openshift/sandboxed-containers-operator presubmit Ci-operator config changed
pull-ci-openshift-sandboxed-containers-operator-devel-sandboxed-containers-operator-e2e openshift/sandboxed-containers-operator presubmit Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-release-aro-ipi-coco N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate419-aws-ipi-coco N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-release-aws-ipi-coco N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate417-azure-ipi-coco N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-release-azure-ipi-coco N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate419-azure-ipi-coco N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate419-azure-ipi-kata N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate-aws-ipi-peerpods N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate422-azure-ipi-kata N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate420-aws-ipi-coco N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate422-aws-ipi-peerpods N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate422-azure-ipi-peerpods N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate420-aws-ipi-peerpods N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate417-aro-ipi-peerpods N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate419-aro-ipi-coco N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate-aro-ipi-coco N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate-aws-ipi-coco N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate419-aws-ipi-peerpods N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate420-azure-ipi-peerpods N/A periodic Ci-operator config changed
periodic-ci-openshift-sandboxed-containers-operator-devel-downstream-candidate417-azure-ipi-kata N/A periodic Ci-operator config changed

A total of 61 jobs have been affected by this change. The above listing is non-exhaustive and limited to 25 jobs.

A full list of affected jobs can be found here
Prior to this PR being merged, you will need to either run and acknowledge or opt to skip these rehearsals.

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@vvoronko

Copy link
Copy Markdown

/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jul 14, 2026
@openshift-ci

openshift-ci Bot commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dbkreling, vvoronko

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 14, 2026
@dbkreling

Copy link
Copy Markdown
Contributor Author

/pj-rehearse ack

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@dbkreling: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-merge-bot openshift-merge-bot Bot added the rehearsals-ack Signifies that rehearsal jobs have been acknowledged label Jul 14, 2026
@openshift-ci

openshift-ci Bot commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

@dbkreling: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@openshift-merge-bot
openshift-merge-bot Bot merged commit d118aba into openshift:main Jul 14, 2026
14 checks passed
SachinNinganure pushed a commit to SachinNinganure/release that referenced this pull request Jul 20, 2026
Go 1.26 (set in openshift#81818 and corrected in openshift#81857) causes go mod tidy
failures because it bumps major k8s dependencies (api/apimachinery from
v0.34 to v0.35, controller-runtime from v0.22 to v0.23) which is unsafe
on the release branch.

Use rhel-9-golang-1.25-openshift-4.22 instead, which provides Go 1.25.x
compatible with go.mod's "go 1.25.7" directive and avoids any dependency
churn.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. rehearsals-ack Signifies that rehearsal jobs have been acknowledged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants