Promote release-service and grafana-dashboard from development to staging

[seanconroy2021]

Included PRs:

• fix(RELEASE-2677): keep RSC mitigations when RPA overrides maxRetries konflux-ci/release-service#1723
• chore(deps): update module github.com/cloudflare/circl to v1.6.4 konflux-ci/release-service#1720
• fix(deps): update github.com/konflux-ci/integration-service digest to 5b4f7e5 konflux-ci/release-service#1715
• chore(actions): bump securego/gosec from caf8857bbd3276599d0176b0528e9712bb0b5bec to 6a008f60b8f7f3d7fae8f126984a9df5d4b7e0cf konflux-ci/release-service#1721
• chore(go): bump github.com/onsi/ginkgo/v2 from 2.31.0 to 2.32.0 konflux-ci/release-service#1722
• chore(deps): update k8s.io/kube-openapi digest to bc653b6 konflux-ci/release-service#1719
• fix(deps): update knative.dev/pkg digest to 6300c57 konflux-ci/release-service#1709

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: seanconroy2021

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• components/monitoring/grafana/OWNERS [seanconroy2021]
• components/release/OWNERS [seanconroy2021]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[github-actions]

Kustomize Render Diff

Comparing c1e766b20 → 24c62ca60

Component	Environment	Changes
components/release/staging	staging	+1 -1

Total: 1 components, +1 -1 lines

📋 Full diff available in the workflow summary and as a downloadable artifact.

[qodo-for-redhat-appstudio]

PR Summary by Qodo

Promote release-service and Grafana release dashboard to staging refs
⚙️ Configuration changes 🕐 Less than 10 minutes

Description

• Bump staging release-service deployment to commit ref 6d9abf25.
• Update staging Grafana release dashboards to the same release-service ref.

Diagram

graph TD
  A["components/release/staging/kustomization.yaml"] --> B{{"release-service config/default (ref 6d9abf25)"}} --> C{{"quay.io/konflux-ci/release-service:6d9abf25"}}
  D["components/monitoring/grafana/staging/dashboards/release/kustomization.yaml"] --> E{{"release-service config/grafana (ref 6d9abf25)"}}

Loading

High-Level Assessment

The following are alternative approaches to this PR:

1. Centralize the ref in a single staging component/var

• ➕ Avoids duplicated SHA bumps across multiple kustomizations
• ➕ Reduces risk of staging deploying mismatched dashboard vs service versions
• ➖ Requires repo-wide wiring changes (kustomize component/vars) beyond a simple promotion
• ➖ May not fit existing environment promotion workflow

2. Promote via immutable release tags instead of commit SHAs

• ➕ More human-readable provenance (e.g., vX.Y.Z)
• ➕ Can align with a formal release process and changelogs
• ➖ Requires tagging discipline and changes to current promotion automation
• ➖ If tags move or are reused, can reduce immutability guarantees

Recommendation: The current approach (pinning staging to a specific commit SHA in both service manifests and Grafana dashboards) is appropriate for a straightforward promotion and keeps environments reproducible. If promotions frequently require bumping multiple files, consider centralizing the ref to reduce drift and manual coordination.

Files changed (2) +3 / -3

Other (2) +3 / -3

kustomization.yamlBump staging Grafana release dashboards to new release-service ref +1/-1

Bump staging Grafana release dashboards to new release-service ref

• Updates the remote kustomize resource URL for Grafana dashboard config to point at release-service ref 6d9abf25, promoting the latest dashboard definitions into staging.

components/monitoring/grafana/staging/dashboards/release/kustomization.yaml

kustomization.yamlPromote staging release-service manifests and image tag to ref 6d9abf25 +2/-2

Promote staging release-service manifests and image tag to ref 6d9abf25

• Pins the staging kustomization to the release-service config/default at ref 6d9abf25 and updates the deployed quay.io/konflux-ci/release-service image tag to the same ref to keep manifests and runtime aligned.

components/release/staging/kustomization.yaml

[qodo-for-redhat-appstudio]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

[mmalina]

/lgtm

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 53.32%. Comparing base (c1e766b) to head (ce1afc2).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #12768   +/-   ##
=======================================
  Coverage   53.32%   53.32%           
=======================================
  Files          20       20           
  Lines        1309     1309           
=======================================
  Hits          698      698           
  Misses        539      539           
  Partials       72       72           

Flag	Coverage Δ
go	53.32% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.