OCPBUGS-99783: fix(e2e): check pre-upgrade HO version for shared role support by devguyio · Pull Request #8891 · openshift/hypershift

devguyio · 2026-07-01T17:52:09Z

Summary

Context

#7331 introduced shared role support to be used in our CI infra as a measure for reducing our CI infra footprint. The PR was not backported, that's why hypershift cli prior to 4.21 does not include this feature.

Since we run all our e2e tests from main, the TestUpgradeHypershiftOperator needs to skip this flag when creating a hypershift cluster using the hypershift cli for hypershift operator < 4.21.

Changes

Disable shared IAM role in the HO upgrade test when the pre-upgrade HO is < 4.21
Reads the pre-upgrade HO's version from the supported-versions ConfigMap it reconciles, using supportedversion.GetLatestSupportedOCPVersion()
Polls briefly (30s) for the ConfigMap since it's reconciled asynchronously after the HO deployment becomes Available
The shared role credential reconciliation (#7331) only landed on 4.21+, so the 4.20 HO can't handle shared roles

Test plan

e2e-aws-upgrade-hypershift-operator on release-4.20 should pass (shared role disabled)
e2e-aws-upgrade-hypershift-operator on release-4.21+ should still use shared role

🤖 Generated with Claude Code

openshift-merge-bot · 2026-07-01T17:52:15Z

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

coderabbitai · 2026-07-01T17:52:31Z

📝 Walkthrough

Walkthrough

This change modifies the HyperShift operator upgrade e2e test to add a version-gated workaround. When the test environment runs a HyperShift version earlier than 421, the test disables clusterOpts.AWSPlatform.SharedRole before proceeding with cluster setup and test execution.

Changes

Cohort / File	Change Summary
test/e2e/upgrade_hypershift_operator_test.go	Added a version check that disables `AWSPlatform.SharedRole` for HyperShift versions less than 421, inserted after cluster options initialization.

Related Issues: None specified.

Related PRs: None specified.

Suggested Labels: test, e2e

Suggested Reviewers: None specified.

🐰 A hop, a check, a version's tale,
Before the upgrade, roles grow pale,
SharedRole tucked away for old,
While newer builds run free and bold,
A tiny patch to keep tests hale.

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The changed test file adds only static, descriptive titles; no dynamic names, timestamps, IDs, or generated values appear in any test title.
Test Structure And Quality	✅ Passed	PASS: The change only adds a version-gated SharedRole toggle; the test already uses explicit 5m Consistently timeouts and message-bearing assertions, matching repo patterns.
Topology-Aware Scheduling Compatibility	✅ Passed	This change only flips AWS IAM shared-role setup in an e2e test; it adds no pod affinity, selectors, tolerations, replica logic, or topology-dependent scheduling.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	Changed test only toggles SharedRole for <4.21; no IPv4 literals, host/IP parsing, or external-network calls were added.
No-Weak-Crypto	✅ Passed	Change only flips SharedRole in an e2e test; no weak crypto, custom crypto, or secret/token comparisons are present.
Container-Privileges	✅ Passed	PR only adds a Go e2e test guard disabling AWS sharedRole; no privileged, hostPID/Network/IPC, SYS_ADMIN, root, or allowPrivilegeEscalation settings are introduced.
No-Sensitive-Data-In-Logs	✅ Passed	PASS: The PR only adds a version-gated boolean assignment; it introduces no new log statements or sensitive-value logging.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title is specific and accurately reflects the main change: gating shared-role support on the pre-upgrade HyperShift Operator version.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

_{Comment @coderabbitai help to get the list of available commands.}

openshift-ci · 2026-07-01T17:54:25Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: devguyio

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [devguyio]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

devguyio · 2026-07-01T17:59:36Z

/autocc

devguyio · 2026-07-01T18:00:02Z

/auto-cc

codecov · 2026-07-01T18:00:59Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 44.56%. Comparing base (144cca9) to head (6555035).
⚠️ Report is 72 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #8891      +/-   ##
==========================================
+ Coverage   44.51%   44.56%   +0.04%     
==========================================
  Files         774      774              
  Lines       96997    97003       +6     
==========================================
+ Hits        43179    43228      +49     
+ Misses      50830    50783      -47     
- Partials     2988     2992       +4

see 6 files with indirect coverage changes

Flag	Coverage Δ
cmd-support	`38.39% <ø> (ø)`
cpo-hostedcontrolplane	`47.22% <ø> (ø)`
cpo-other	`45.25% <ø> (ø)`
hypershift-operator	`54.46% <ø> (+0.01%)`	⬆️
other	`33.07% <ø> (+0.43%)`	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

clebs · 2026-07-01T18:28:49Z

/lgtm

openshift-merge-bot · 2026-07-01T18:29:03Z

Scheduling tests matching the pipeline_run_if_changed or not excluded by pipeline_skip_if_only_changed parameters:
/test e2e-aks-4-22
/test e2e-aws-4-22
/test e2e-aks
/test e2e-aws
/test e2e-aws-upgrade-hypershift-operator
/test e2e-azure-v2-self-managed
/test e2e-kubevirt-aws-ovn-reduced
/test e2e-v2-aws
/test e2e-v2-gke

hypershift-jira-solve-ci · 2026-07-01T19:59:46Z

I have all the evidence I need. The failure is crystal clear — it's an AWS IAM OIDC provider quota exhaustion issue in the shared CI AWS account, completely unrelated to the PR's code changes. Let me produce the final report.

Test Failure Analysis Complete

Job Information

Prow Job: pull-ci-openshift-hypershift-main-e2e-aws-4-22
Build ID: 2072387103945134080
Target: e2e-aws-4-22
PR: OCPBUGS-99783: fix(e2e): check pre-upgrade HO version for shared role support #8891 (fix(e2e): disable shared role in upgrade test for releases < 4.21)
Failed Step: hypershift-aws-run-e2e-nested (test phase)
Duration: 1h21m25s total; test step failed after ~1m15s

Test Failure Analysis

Error

failed to setup shared OIDC provider: failed to create OIDC provider: operation error IAM:
CreateOpenIDConnectProvider, https response error StatusCode: 409, RequestID: 36d36823-018c-4ffe-bd77-c5e6bce56edc,
LimitExceeded: Cannot exceed quota for OpenIdConnectProvidersPerAccount: 100

Summary

The e2e test suite failed immediately during TestMain initialization (before any individual test could run) because the AWS IAM account used by CI had already reached its hard limit of 100 OIDC providers. The SetupSharedOIDCProvider() call at test/e2e/e2e_test.go:240 attempted to create a new OIDC provider via CreateOpenIDConnectProvider and received an HTTP 409 LimitExceeded error. This caused the entire test binary to exit with code 255, resulting in 0 tests executed. This is a CI infrastructure/quota issue completely unrelated to the PR's code changes, which only modify upgrade_hypershift_operator_test.go to disable shared role testing for releases < 4.21.

Root Cause

The root cause is AWS IAM OIDC provider quota exhaustion in the shared CI AWS account (hypershift-ci-oidc S3 bucket / ci.hypershift.devcluster.openshift.com base domain).

How it happens:

Every HyperShift e2e job run calls SetupSharedOIDCProvider() in TestMain, which creates a new AWS IAM OIDC provider (unique per run: e2e-oidc-provider-<random>).
Cleanup of these providers only happens via defer at test completion or a signal handler during graceful shutdown.
When CI jobs fail mid-run, are killed, or time out, the OIDC providers are not cleaned up and accumulate as leaked resources.
AWS imposes a hard limit of 100 OIDC providers per account.
When concurrent CI jobs (across all PRs and periodic jobs sharing this AWS account) collectively accumulate 100 providers, all new e2e runs are blocked — no tests can execute.

Why this is unrelated to PR #8891:

The PR only modifies test/e2e/upgrade_hypershift_operator_test.go (adding a SharedRole = false guard for releases < 4.21).
The failure occurs in TestMain → SetupSharedOIDCProvider() at e2e_test.go:240, which runs before any individual test is reached.
The same failure would affect any HyperShift e2e job running against this AWS account at this time.

Recommendations

Retry the job — This is a transient CI infrastructure issue. Other jobs finishing and cleaning up their OIDC providers will free quota. A /retest should succeed once quota is available.
Manual cleanup (if retries keep failing) — An AWS admin for the hypershift-ci-oidc account should list and delete stale OIDC providers:
```
aws iam list-open-id-connect-providers | jq -r '.OpenIDConnectProviderList[].Arn'
```
Delete providers with e2e-oidc-provider- prefix that correspond to completed/failed job runs.
Long-term improvement — The HyperShift team should consider:
- Implementing a pre-test cleanup step that garbage-collects leaked OIDC providers older than a threshold (e.g., 4 hours).
- Requesting an AWS service quota increase for OpenIdConnectProvidersPerAccount beyond 100.
- Reusing OIDC providers across tests within the same job instead of creating unique ones per run.

Evidence

Evidence	Detail
Error source	`test/e2e/e2e_test.go:240` — `SetupSharedOIDCProvider()` in `TestMain`
AWS API error	HTTP 409: `LimitExceeded: Cannot exceed quota for OpenIdConnectProvidersPerAccount: 100`
AWS Request ID	`36d36823-018c-4ffe-bd77-c5e6bce56edc`
Failure timestamp	`2026-07-01T19:42:17Z` (1 second after test binary started)
Tests executed	0 (test suite aborted before any test ran)
Exit code	255 (fatal error in `TestMain`)
Failed step	`hypershift-aws-run-e2e-nested` (test phase, failed after 1m15s)
Pre phase	All 4 steps succeeded (ipi-install-rbac, create-management-cluster, hypershift-install, hypershift-resolve-nodepool-releases)
Post phase	All 3 steps succeeded (dump-management-cluster, hypershift-dump-extra, destroy-management-cluster)
PR #8891 changes	Only `test/e2e/upgrade_hypershift_operator_test.go` — does NOT touch OIDC setup code
PR relevance	❌ Not related — failure is in shared CI infrastructure (AWS IAM quota), not in PR code

cwbotbot · 2026-07-01T20:15:02Z

Test Results

e2e-aws

Status: ✅ PASS
Started: 2026-07-01T18:29:34Z
View Job
View Job History

e2e-aks

Status: ✅ PASS
Started: 2026-07-01T18:29:33Z
View Job
View Job History

devguyio · 2026-07-15T15:08:42Z

/retest

devguyio · 2026-07-16T13:32:24Z

/retest-required

e2e-aws-4-22 failed due to AWS infra capacity

InsufficientInstanceCapacity: We currently do not have sufficient t2.micro capacity in the Availability Zone you requested (us-east-1a). Our system will be working on provisioning additional capacity. You can currently get t2.micro capacity by not specifying an Availability Zone in your request or choosing us-east-1b, us-east-1c, us-east-1d, us-east-1e, us-east-1f.

devguyio · 2026-07-17T11:47:45Z

/retest-required

same capacity error

devguyio · 2026-07-20T09:27:32Z

/retest-required
creation of management cluster failed

devguyio · 2026-07-20T13:50:02Z

/retest-required

all steps passed including the 4.22 e2e, but the post cluster dump failed, timing out pulling an image.

�[36mINFO�[0m[2026-07-20T10:14:48Z] Step phase pre succeeded after 18m42s.       
�[36mINFO�[0m[2026-07-20T10:14:48Z] Running multi-stage phase test               
�[36mINFO�[0m[2026-07-20T10:14:48Z] Running step e2e-aws-4-22-hypershift-aws-run-e2e-nested. 
�[36mINFO�[0m[2026-07-20T11:32:17Z] Step e2e-aws-4-22-hypershift-aws-run-e2e-nested succeeded after 1h17m28s. 
�[36mINFO�[0m[2026-07-20T11:32:17Z] Step phase test succeeded after 1h17m28s.    
�[36mINFO�[0m[2026-07-20T11:32:17Z] Running multi-stage phase post               
�[36mINFO�[0m[2026-07-20T11:32:17Z] Running step e2e-aws-4-22-dump-management-cluster. 
�[36mINFO�[0m[2026-07-20T12:32:26Z] pod pending for more than 1h0m0s: containers have not started in 1h0m0.000509693s: test: 
* Container test is not ready with reason ImagePullBackOff and message Back-off pulling image "quay-proxy.ci.openshift.org/openshift/ci@sha256:bf578dcc6b9522e442f4755c8ebfa953317948749938f74ca39fc27996a08151": ErrImagePull: unable to pull image or OCI artifact: pull image err: initializing source docker://quay-proxy.ci.openshift.org/openshift/ci@sha256:bf578dcc6b9522e442f4755c8ebfa953317948749938f74ca39fc27996a08151: (Mirrors also failed: [quay.io/openshift/ci@sha256:bf578dcc6b9522e442f4755c8ebfa953317948749938f74ca39fc27996a08151: reading manifest sha256:bf578dcc6b9522e442f4755c8ebfa953317948749938f74ca39fc27996a08151 in quay.io/openshift/ci: manifest unknown]): quay-proxy.ci.openshift.org/openshift/ci@sha256:bf578dcc6b9522e442f4755c8ebfa953317948749938f74ca39fc27996a08151: reading manifest sha256:bf578dcc6b9522e442f4755c8ebfa953317948749938f74ca39fc27996a08151 in quay-proxy.ci.openshift.org/openshift/ci: manifest unknown; artifact err: get manifest: build image source: (Mirrors also failed: [quay.io/openshift/ci@sha256:bf578dcc6b9522e442f4755c8ebfa953317948749938f74ca39fc27996a08151: reading manifest sha256:bf578dcc6b9522e442f4755c8ebfa953317948749938f74ca39fc27996a08151 in quay.io/openshift/ci: manifest unknown]): quay-proxy.ci.openshift.org/openshift/ci@sha256:bf578dcc6b9522e442f4755c8ebfa953317948749938f74ca39fc27996a08151: reading manifest sha256:bf578dcc6b9522e442f4755c8ebfa953317948749938f74ca39fc27996a08151 in quay-proxy.ci.openshift.org/openshift/ci: manifest unknown

devguyio · 2026-07-24T08:47:59Z

@clebs the logic of shared role is only there for our CI infra, that logic isn't used at all for any production envs. Seth introduced it as a way to reduce the number of needed roles on our CI clusters.

devguyio · 2026-07-24T08:48:16Z

/retest-required

devguyio · 2026-07-24T10:30:26Z

/pipeline required

openshift-merge-bot · 2026-07-24T10:30:30Z

Scheduling tests matching the pipeline_run_if_changed or not excluded by pipeline_skip_if_only_changed parameters:
/test e2e-aks-4-22
/test e2e-aws-4-22
/test e2e-aks
/test e2e-aws
/test e2e-aws-upgrade-hypershift-operator
/test e2e-azure-v2-self-managed
/test e2e-kubevirt-aws-ovn-reduced
/test e2e-v2-aws
/test e2e-v2-gke
/test unit
/test verify

devguyio · 2026-07-24T11:12:41Z

/test e2e-aws

devguyio · 2026-07-26T10:06:38Z

/retest-required

ironcladlou · 2026-07-27T17:17:52Z

+	// The supported-versions ConfigMap is reconciled asynchronously by the HO after
+	// its deployment becomes Available, so poll briefly to allow for controller startup.
+	var preUpgradeHOVersion semver.Version
+	err = wait.PollUntilContextTimeout(ctx, 2*time.Second, 30*time.Second, true, func(ctx context.Context) (bool, error) {


failure to read the version is fatal, so an arbitrary inner timeouts like this only add another flake vector... generally I like to rely on the highest level context possible and let the CI timeout take care of it (i.e. let it try until the overall test times out). If it ends up getting stuck here in practice that would be indicative of another issue to solve. So basically I'm suggesting just use PollUntilContextCancel

Good point, definitely makes sense. This should be considered as an unrecoverable failure and bubble up as a timeout CI test run, not an inner failure. Pushing an update.

Shared role credential reconciliation only landed in 4.21+. When upgrading from an older HO, the test must disable SharedRole to avoid failures on unsupported infrastructure. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Ahmed Abdalla <aabdelre@redhat.com>

ironcladlou · 2026-07-27T18:23:41Z

thanks!

/lgtm

openshift-merge-bot · 2026-07-27T18:24:05Z

Scheduling tests matching the pipeline_run_if_changed or not excluded by pipeline_skip_if_only_changed parameters:
/test e2e-aks-4-22
/test e2e-aws-4-22
/test e2e-aks
/test e2e-aws
/test e2e-aws-upgrade-hypershift-operator
/test e2e-azure-v2-self-managed
/test e2e-kubevirt-aws-ovn-reduced
/test e2e-v2-aws
/test e2e-v2-gke
/test unit
/test verify

openshift-ci-robot · 2026-07-28T11:17:32Z

@devguyio: This pull request references Jira Issue OCPBUGS-99783, which is valid. The bug has been moved to the POST state.

3 validation(s) were run on this bug

bug is open, matching expected state (open)
bug target version (5.0.0) matches configured target version for branch (5.0.0)
bug is in the state ASSIGNED, which is one of the valid states (NEW, ASSIGNED, POST)

The bug has been updated to refer to the pull request using the external bug tracker.

Details

In response to this:

Summary

Context

#7331 introduced shared role support to be used in our CI infra as a measure for reducing our CI infra footprint. The PR was not backported, that's why hypershift cli prior to 4.21 does not include this feature.

Since we run all our e2e tests from main, the TestUpgradeHypershiftOperator needs to skip this flag when creating a hypershift cluster using the hypershift cli for hypershift operator < 4.21.

Changes

Disable shared IAM role in the HO upgrade test when the pre-upgrade HO is < 4.21

Reads the pre-upgrade HO's version from the supported-versions ConfigMap it reconciles, using supportedversion.GetLatestSupportedOCPVersion()

Polls briefly (30s) for the ConfigMap since it's reconciled asynchronously after the HO deployment becomes Available

The shared role credential reconciliation (#7331) only landed on 4.21+, so the 4.20 HO can't handle shared roles

Related

Shared role HO support: CNTRLPLANE-2205: feat(aws): add shared-role support for IAM operations #7331 (4.21+, not backported to 4.20)

Shared role HCCO support: [release-4.20] CNTRLPLANE-2205: fix(hcco): allow for ARN reuse across components #7383 (backported to 4.20)

Test plan

e2e-aws-upgrade-hypershift-operator on release-4.20 should pass (shared role disabled)

e2e-aws-upgrade-hypershift-operator on release-4.21+ should still use shared role

🤖 Generated with Claude Code

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

devguyio · 2026-07-28T11:19:16Z

/retest-required

devguyio · 2026-07-29T20:55:00Z

/retest-required

devguyio · 2026-07-29T20:59:42Z

retested since I thought #9167 was merged, now that I see it's not, I aborted the e2e-aws job

devguyio · 2026-07-29T22:27:21Z

/retest-required

devguyio · 2026-07-30T06:40:21Z

/verified by e2e

openshift-ci-robot · 2026-07-30T06:40:33Z

@devguyio: This PR has been marked as verified by e2e.

Details

In response to this:

/verified by e2e

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

openshift-ci · 2026-07-30T07:05:31Z

@devguyio: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

openshift-ci-robot · 2026-07-30T07:12:16Z

@devguyio: Jira Issue Verification Checks: Jira Issue OCPBUGS-99783
✔️ This pull request was pre-merge verified.
✔️ All associated pull requests have merged.
✔️ All associated, merged pull requests were pre-merge verified.

Jira Issue OCPBUGS-99783 has been moved to the MODIFIED state and will move to the VERIFIED state when the change is available in an accepted nightly payload. 🕓

Details

In response to this:

Summary

Context

#7331 introduced shared role support to be used in our CI infra as a measure for reducing our CI infra footprint. The PR was not backported, that's why hypershift cli prior to 4.21 does not include this feature.

Since we run all our e2e tests from main, the TestUpgradeHypershiftOperator needs to skip this flag when creating a hypershift cluster using the hypershift cli for hypershift operator < 4.21.

Changes

Disable shared IAM role in the HO upgrade test when the pre-upgrade HO is < 4.21

Reads the pre-upgrade HO's version from the supported-versions ConfigMap it reconciles, using supportedversion.GetLatestSupportedOCPVersion()

Polls briefly (30s) for the ConfigMap since it's reconciled asynchronously after the HO deployment becomes Available

The shared role credential reconciliation (#7331) only landed on 4.21+, so the 4.20 HO can't handle shared roles

Related

Shared role HO support: CNTRLPLANE-2205: feat(aws): add shared-role support for IAM operations #7331 (4.21+, not backported to 4.20)

Shared role HCCO support: [release-4.20] CNTRLPLANE-2205: fix(hcco): allow for ARN reuse across components #7383 (backported to 4.20)

Test plan

e2e-aws-upgrade-hypershift-operator on release-4.20 should pass (shared role disabled)

e2e-aws-upgrade-hypershift-operator on release-4.21+ should still use shared role

🤖 Generated with Claude Code

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

openshift-merge-robot · 2026-07-30T18:53:16Z

Fix included in release 5.0.0-0.nightly-2026-07-30-103726

openshift-ci Bot added the do-not-merge/needs-area label Jul 1, 2026

openshift-ci Bot requested review from bryan-cox and clebs July 1, 2026 17:54

openshift-ci Bot added the area/testing Indicates the PR includes changes for e2e testing label Jul 1, 2026

openshift-ci Bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. and removed do-not-merge/needs-area labels Jul 1, 2026

devguyio mentioned this pull request Jul 1, 2026

hypershift: auto-detect CLI flag support via --help openshift/release#81331

Merged

2 tasks

openshift-ci Bot requested review from Nirshal and sjenning July 1, 2026 18:01

openshift-ci Bot assigned clebs Jul 1, 2026

openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jul 1, 2026

devguyio force-pushed the fix-shared-role-upgrade-test branch from 274450c to 4d75137 Compare July 20, 2026 20:46

openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jul 20, 2026

devguyio force-pushed the fix-shared-role-upgrade-test branch from 4d75137 to d269545 Compare July 20, 2026 20:49

devguyio changed the title ~~fix(e2e): disable shared role in upgrade test for releases < 4.21~~ fix(e2e): check pre-upgrade HO version for shared role support Jul 20, 2026

devguyio force-pushed the fix-shared-role-upgrade-test branch from d269545 to 2c5ac5f Compare July 24, 2026 08:53

ironcladlou reviewed Jul 27, 2026

View reviewed changes

devguyio force-pushed the fix-shared-role-upgrade-test branch from 2c5ac5f to 6555035 Compare July 27, 2026 17:49

openshift-ci Bot assigned ironcladlou Jul 27, 2026

openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jul 27, 2026

devguyio changed the title ~~fix(e2e): check pre-upgrade HO version for shared role support~~ OCPBUGS-99783: fix(e2e): check pre-upgrade HO version for shared role support Jul 28, 2026

openshift-ci-robot added jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. labels Jul 28, 2026

ironcladlou mentioned this pull request Jul 29, 2026

CNTRLPLANE-3709: test(azure): enable Global Pull Secret test in Azure CI #9073

Merged

4 tasks

openshift-ci-robot added the verified Signifies that the PR passed pre-merge verification criteria label Jul 30, 2026

openshift-merge-bot Bot merged commit 764b55c into openshift:main Jul 30, 2026
43 checks passed

Uh oh!

Conversation

devguyio commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Context

Changes

Related

Test plan

Uh oh!

openshift-merge-bot Bot commented Jul 1, 2026

Uh oh!

coderabbitai Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Uh oh!

openshift-ci Bot commented Jul 1, 2026

Uh oh!

devguyio commented Jul 1, 2026

Uh oh!

devguyio commented Jul 1, 2026

Uh oh!

codecov Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

clebs commented Jul 1, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 1, 2026

Uh oh!

hypershift-jira-solve-ci Bot commented Jul 1, 2026

Test Failure Analysis Complete

Job Information

Test Failure Analysis

Error

Summary

Uh oh!

cwbotbot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test Results

e2e-aws

e2e-aks

Uh oh!

devguyio commented Jul 15, 2026

Uh oh!

devguyio commented Jul 16, 2026

Uh oh!

devguyio commented Jul 17, 2026

Uh oh!

devguyio commented Jul 20, 2026

Uh oh!

devguyio commented Jul 20, 2026

Uh oh!

devguyio commented Jul 24, 2026

Uh oh!

devguyio commented Jul 24, 2026

Uh oh!

devguyio commented Jul 24, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 24, 2026

Uh oh!

devguyio commented Jul 24, 2026

Uh oh!

devguyio commented Jul 26, 2026

Uh oh!

ironcladlou Jul 27, 2026

Choose a reason for hiding this comment

Uh oh!

devguyio Jul 27, 2026

Choose a reason for hiding this comment

Uh oh!

devguyio Jul 27, 2026

Choose a reason for hiding this comment

Uh oh!

ironcladlou commented Jul 27, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 27, 2026

Uh oh!

openshift-ci-robot commented Jul 28, 2026

devguyio commented Jul 1, 2026 •

edited

Loading

coderabbitai Bot commented Jul 1, 2026 •

edited

Loading

codecov Bot commented Jul 1, 2026 •

edited

Loading

cwbotbot commented Jul 1, 2026 •

edited

Loading