Skip to content

Conversation

@bfournie
Copy link
Contributor

@bfournie bfournie commented Jan 29, 2026

- What I did
This is a backport to add support for the InternalReleaseImage.

The following PRs have been backported:
#5483
#5514
#5543
#5588
#5545 (note that this change also required minimal
changes included for the addition of ClusterVersion in #5476)

- Description for the changelog

Backport InternalReleaseImage support

AGENT-1391: Use TLS cert for the InternalReleaseImage registry
…vice

AGENT-1411: Preload the registry image when starting the iri-service
…y-file

AGENT-1411: fix IRI registry setup file
AGENT-1424: add initial e2e tests for the InternalReleaseImage controller
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Jan 29, 2026
@openshift-ci-robot
Copy link
Contributor

openshift-ci-robot commented Jan 29, 2026

@bfournie: This pull request references AGENT-1431 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.21.0" version, but no target version was set.

Details

In response to this:

- What I did
This is a backport to add support for the InternalReleaseImage.

The following PRs have been backported:
#5483
#5514
#5543
#5588

- Description for the changelog

Backport InternalReleaseImage support

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Jan 29, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: bfournie
Once this PR has been reviewed and has the lgtm label, please assign dkhater-redhat for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

bfournie and others added 2 commits January 29, 2026 12:29
This adds the minimal osimagestream.GetReleasePayloadImage() function
needed to support PR openshift#5545 (AGENT-1412 IRI deletion guard) without
requiring the full OSImageStream functionality from PR openshift#5476.

This is a targeted backport to release-4.21 to enable the IRI deletion
guard feature.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
…on-guard

AGENT-1412: Prevent deletion of InternalReleaseImage when in use

Add ValidatingAdmissionPolicy to block deletion of the InternalReleaseImage
singleton resource if any of its release bundles are currently in use by the
cluster. This prevents accidental deletion of IRI while the cluster is running
a release version that is stored in the InternalReleaseImage resource.

The policy checks the ClusterVersion's current version against all release
bundle names in the IRI status. If a match is found, deletion is blocked
with a clear error message instructing the user to upgrade or downgrade
before deletion.

This is part of the NoRegistryClusterInstall feature, where deletion of IRI
is the default opt-out mechanism, and this guard ensures safe operation.

Backported from upstream main with minimal osimagestream package support.
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Jan 29, 2026

@bfournie: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-gcp-op-single-node 3c5c111 link true /test e2e-gcp-op-single-node
ci/prow/e2e-aws-ovn-upgrade 3c5c111 link true /test e2e-aws-ovn-upgrade
ci/prow/e2e-aws-ovn 3c5c111 link true /test e2e-aws-ovn
ci/prow/e2e-gcp-op-1of2 3c5c111 link true /test e2e-gcp-op-1of2

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@openshift-ci-robot
Copy link
Contributor

openshift-ci-robot commented Jan 29, 2026

@bfournie: This pull request references AGENT-1431 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.21.0" version, but no target version was set.

Details

In response to this:

- What I did
This is a backport to add support for the InternalReleaseImage.

The following PRs have been backported:
#5483
#5514
#5543
#5588
#5545 (note that this change also required minimal
changes included for the addition of ClusterVersion in #5476)

- Description for the changelog

Backport InternalReleaseImage support

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

jira/valid-reference Indicates that this PR references a valid Jira ticket of any type.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants