CNTRLPLANE-3840: Remove ExternalTopologyMode guard from OSImageStream bootstrap by jparrill · Pull Request #6308 · openshift/machine-config-operator

jparrill · 2026-07-15T10:08:31Z

Summary

Remove the ExternalTopologyMode guard in pkg/controller/bootstrap/bootstrap.go that prevented HyperShift from consuming OSImageStream during node bootstrapping
Update TestBootstrapRunHypershift to table-driven format covering both feature gate enabled and disabled scenarios

Context

The guard was added by MCO-2146 (PR #5750) because HyperShift did not yet write stream selection into the synthetic MachineConfigPool. Now that HyperShift writes 99_osimagestream.yaml into the MCC template directory (openshift/hypershift#8792), the guard is no longer needed.

Note: The OSStreams feature gate is currently enabled for the Hypershift cluster profile only in TechPreviewNoUpgrade and DevPreviewNoUpgrade (openshift/api features.go:927). Enabling it in Default for Hypershift requires a separate change in openshift/api. This PR is a prerequisite — without it, the guard would block OSImageStream processing even after the feature gate is promoted.

Jira: https://redhat.atlassian.net/browse/CNTRLPLANE-3840

Test plan

TestBootstrapRunHypershift/When_OSStreams_feature_gate_is_enabled_it_should_consume_OSImageStream passes
TestBootstrapRunHypershift/When_OSStreams_feature_gate_is_disabled_it_should_not_consume_OSImageStream passes
All existing TestBootstrapRun subtests pass
Coordinate with CNTRLPLANE-3030: feat(nodepool,ignition-server): consume os-stream hypershift#8792 merge timing

🤖 Generated with Claude Code

Summary by CodeRabbit

Bug Fixes
- OS image streams are now enabled based solely on the OS image stream feature gate, removing the prior special-case restriction for deployments using external topology.
- Machine configuration templates now correctly use the expected base OS image values when OS image streams are enabled.
Tests
- Expanded and reorganized coverage with table-driven scenarios to verify OS image stream enablement and the resulting machine configuration output, including cases with feature-gate overrides.

openshift-merge-bot · 2026-07-15T10:08:33Z

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

openshift-ci-robot · 2026-07-15T10:08:35Z

@jparrill: This pull request references CNTRLPLANE-3840 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "5.0.0" version, but no target version was set.

Details

In response to this:

Summary

Remove the ExternalTopologyMode guard in pkg/controller/bootstrap/bootstrap.go that prevented HyperShift from consuming OSImageStream during node bootstrapping

Update TestBootstrapRunHypershift to table-driven format covering both feature gate enabled and disabled scenarios

Context

The guard was added by MCO-2146 (PR #5750) because HyperShift did not yet write stream selection into the synthetic MachineConfigPool. Now that HyperShift writes 99_osimagestream.yaml into the MCC template directory (openshift/hypershift#8792), the guard is no longer needed.

Note: The OSStreams feature gate is currently enabled for the Hypershift cluster profile only in TechPreviewNoUpgrade and DevPreviewNoUpgrade (openshift/api features.go:927). Enabling it in Default for Hypershift requires a separate change in openshift/api. This PR is a prerequisite — without it, the guard would block OSImageStream processing even after the feature gate is promoted.

Jira: https://redhat.atlassian.net/browse/CNTRLPLANE-3840

Test plan

TestBootstrapRunHypershift/When_OSStreams_feature_gate_is_enabled_it_should_consume_OSImageStream passes

TestBootstrapRunHypershift/When_OSStreams_feature_gate_is_disabled_it_should_not_consume_OSImageStream passes

All existing TestBootstrapRun subtests pass

Coordinate with CNTRLPLANE-3030: feat(nodepool,ignition-server): consume os-stream hypershift#8792 merge timing

🤖 Generated with Claude Code

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

coderabbitai · 2026-07-15T10:09:16Z

Walkthrough

Bootstrap now enables OSImageStreams solely from the feature gate and selects a ControllerConfig release image when no Release ImageStream is available. Table-driven HyperShift tests cover both paths.

Changes

OSImageStream bootstrap behavior

Layer / File(s)	Summary
Feature-gated OSImageStream enablement `pkg/controller/bootstrap/bootstrap.go`, `pkg/controller/bootstrap/bootstrap_test.go`	OSImageStreams are enabled whenever the feature gate is active, with test fixtures and factory-call tracking added for HyperShift scenarios.
Release image fallback validation `pkg/controller/bootstrap/bootstrap.go`, `pkg/controller/bootstrap/bootstrap_test.go`	Creation uses `ReleaseImageStream` when supplied and otherwise uses `ControllerConfig.Spec.ReleaseImage`; tests verify the selected options and rendered controller fields.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Possibly related PRs

openshift/machine-config-operator#6306: Changes the fetchOSImageStream inputs passed to the ImageStream factory.
openshift/machine-config-operator#6327: Changes another input passed through the same bootstrapping flow.

Suggested labels: verified

Suggested reviewers: proietfb, sergiordlr, pablintino

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	New subtest names are static strings; no generated IDs, timestamps, node/namespace/IP values, or other run-dependent data appear in titles.
Test Structure And Quality	✅ Passed	The rewritten test is table-driven, uses t.TempDir cleanup, has no cluster waits/resources, and keeps assertions focused on OSStreams behavior.
Microshift Test Compatibility	✅ Passed	PASS: The PR only changes plain Go unit tests in pkg/controller/bootstrap; no Ginkgo e2e specs or MicroShift-gated cluster tests were added.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	No new Ginkgo e2e tests were added; the changes are unit tests in pkg/controller/bootstrap, so SNO-specific multi-node compatibility is not applicable.
Topology-Aware Scheduling Compatibility	✅ Passed	Only bootstrap logic/tests changed; no node selectors, affinity, spread constraints, replicas, or PDBs were introduced, so no topology-specific scheduling risk.
Ote Binary Stdout Contract	✅ Passed	Changed files add no main/init/TestMain/suite setup or stdout logging; bootstrap.go and bootstrap_test.go contain no process-level stdout writes.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PASS: The PR only changes Go unit tests/bootstrap logic; no new Ginkgo e2e tests or IPv4/external-network assumptions were introduced.
No-Weak-Crypto	✅ Passed	The PR only changes OSImageStream bootstrap logic and tests; no MD5/SHA1/DES/RC4/3DES/Blowfish, ECB, custom crypto, or secret comparisons were added.
Container-Privileges	✅ Passed	The PR only changes bootstrap OSImageStream logic and tests; the diff adds no privileged/hostNetwork/hostPID/hostIPC/SYS_ADMIN/allowPrivilegeEscalation settings.
No-Sensitive-Data-In-Logs	✅ Passed	No new log statements were added or modified; the diff only changes bootstrap logic and test assertions, with no sensitive data emitted to logs.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change by removing the ExternalTopologyMode guard from OSImageStream bootstrap.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

_{Comment @coderabbitai help to get the list of available commands.}

enxebre · 2026-07-15T10:39:24Z

/lgtm

enxebre · 2026-07-15T10:40:26Z

ptal @pablintino @yuqi-zhang

openshift-merge-bot · 2026-07-15T10:41:16Z

Scheduling tests matching the pipeline_run_if_changed or not excluded by pipeline_skip_if_only_changed parameters:
/test e2e-aws-ovn
/test e2e-aws-ovn-upgrade
/test e2e-gcp-op-ocl-part1
/test e2e-gcp-op-ocl-part2
/test e2e-gcp-op-part1
/test e2e-gcp-op-part2
/test e2e-gcp-op-single-node
/test e2e-hypershift

pablintino · 2026-07-15T12:47:30Z

/approve
/hold
Holding to make sure this one is coordinated with openshift/hypershift#8792

jparrill · 2026-07-17T15:41:31Z

/retest

jparrill · 2026-07-20T07:51:44Z

/hold cancel
Hey @pablintino yes it is :). Thanks for keeping an eye on it 🙏

jparrill · 2026-07-20T07:51:55Z

/retest-required

jparrill · 2026-07-20T10:15:32Z

/retest-required

Lookup failure:

ReconciliationError(critical error: failed to get controlPlaneOperatorImageLabels:
failed to look up image metadata for quay-proxy.ci.openshift.org/openshift/ci@sha256:1461d2da...:
manifest unknown: manifest unknown

sdminonne · 2026-07-20T12:49:26Z

/retest-required

jparrill · 2026-07-20T15:38:12Z

e2e-hypershift failure is not caused by this PR. Evidence:

Our code doesn't execute in this CI run. The OSStreams feature gate is not active — zero mentions of "OSStream" or "osimage" in the build log. The e2e-hypershift job uses the Default featureset, and OSStreams is only enabled for the Hypershift cluster profile in TechPreview/DevPreview (openshift/api features.go:927). Our change is inside if osimagestream.IsFeatureEnabled(fgHandler) which returns false — the modified code path is never reached.
The other HC in the same run passed. TestUpgradeControlPlane uses the same MCO bootstrap with our change and passed all subtests (3006s). If our change broke bootstrap, both HCs would fail.
The failure is TCP-level networking, not bootstrap. dial tcp 100.50.108.26:443: i/o timeout — the guest API server is unreachable. Bootstrap/MCO rendering issues would show as config errors, not TCP timeouts.
Same BaseSHA passes on other PRs. PRs MCO-2424: Fix cert rotation timeout #6309 and OCPBUGS-98745: MCO-2424: add missing RBAC for pkis resource in MCC ClusterRole #6307 (same BaseSHA 9d62fc7) passed e2e-hypershift successfully.

/retest

jparrill · 2026-07-20T15:39:20Z

/retest-required

enxebre · 2026-07-20T19:55:16Z

https://gcsweb-ci.apps.ci.l2s4.p1.openshiftapps.com/gcs/test-platform-results/pr-logs/pull/openshift_machine-config-operator/6308/pull-ci-openshift-machine-config-operator-main-e2e-hypershift/2079229957497688064/artifacts/e2e-hypershift/hypershift-aws-run-e2e-external/artifacts/TestCreateCluster/namespaces/e2e-clusters-6f5rx-create-cluster-6k6pw/core/pods/logs/ignition-server-579fbfdcd5-nqp5h-ignition-server.log

ShortCertRotation]\nF0720 18:10:03.479367     199 bootstrap.go:47] error running MCC[BOOTSTRAP]: error inspecting available OSImageStreams: one of ReleaseImageStream or ReleaseImage must be specified\n"}
{"level":"error","ts":"2026-07-20T18:10:03Z","msg":"Reconciler error","controller":"secret","controllerGroup":"","controllerKind":"Secret","Secret":{"name":"token-create-cluster-6k6pw-us-east-1a-bc4259e1","namespace":"e2e-clusters-6f5rx-create-cluster-6k6pw"},"namespace":"e2e-clusters-6f5rx-create-cluster-6k6pw","name":"token-create-cluster-6k6pw-us-east-1a-bc4259e1","reconcileID":"833e5217-0ad2-4660-a4df-f50d1033c657","error":"failed to generate payload: error getting ignition payload: failed to execute machine-config-controller: machine-config-controller process failed: exit status 255","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.

jparrill · 2026-07-21T07:50:20Z

/retest

jparrill · 2026-07-21T09:52:14Z

/test e2e-hypershift

jparrill · 2026-07-21T15:53:36Z

/test e2e-hypershift

jparrill · 2026-07-21T15:58:10Z

/label acknowledge-critical-fixes-only

openshift-merge-bot · 2026-07-22T14:55:25Z

Tests from second stage were triggered manually. Pipeline can be controlled only manually, until HEAD changes. Use command to trigger second stage.

openshift-ci · 2026-07-22T14:55:40Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: enxebre, jparrill, pablintino

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [pablintino]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

jparrill · 2026-07-22T20:06:41Z

/verified by e2e

https://prow.ci.openshift.org/view/gs/test-platform-results/pr-logs/pull/openshift_machine-config-operator/6308/pull-ci-openshift-machine-config-operator-main-e2e-hypershift/2079918139755204608

openshift-ci-robot · 2026-07-22T20:06:52Z

@jparrill: This PR has been marked as verified by e2e.

Details

In response to this:

/verified by e2e

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

jparrill · 2026-07-22T20:08:17Z

/pipeline required

openshift-merge-bot · 2026-07-22T20:08:20Z

Scheduling tests matching the pipeline_run_if_changed or not excluded by pipeline_skip_if_only_changed parameters:
/test e2e-aws-ovn
/test e2e-aws-ovn-upgrade
/test e2e-gcp-op-ocl-part1
/test e2e-gcp-op-ocl-part2
/test e2e-gcp-op-part1
/test e2e-gcp-op-part2
/test e2e-gcp-op-single-node
/test e2e-hypershift

jparrill · 2026-07-23T07:22:14Z

/retest-required

jparrill · 2026-07-23T11:50:20Z

/retest-required
Infra issues again...

* Container test is not ready with reason ImagePullBackOff and message Back-off pulling image "quay-proxy.ci.openshift.org/openshift/ci@sha256:525c0e3bfe9d311dab9c839397625ddb5bee0017f8e5b83ec6f8a80b633b93ae": ErrImagePull: unable to pull image or OCI artifact: pull image err: initializing source docker://quay-proxy.ci.openshift.org/openshift/ci@sha256:525c0e3bfe9d311dab9c839397625ddb5bee0017f8e5b83ec6f8a80b633b93ae: (Mirrors also failed: [quay.io/openshift/ci@sha256:525c0e3bfe9d311dab9c839397625ddb5bee0017f8e5b83ec6f8a80b633b93ae: reading manifest sha256:525c0e3bfe9d311dab9c839397625ddb5bee0017f8e5b83ec6f8a80b633b93ae in quay.io/openshift/ci: manifest unknown]): quay-proxy.ci.openshift.org/openshift/ci@sha256:525c0e3bfe9d311dab9c839397625ddb5bee0017f8e5b83ec6f8a80b633b93ae: reading manifest sha256:525c0e3bfe9d311dab9c839397625ddb5bee0017f8e5b83ec6f8a80b633b93ae in quay-proxy.ci.openshift.org/openshift/ci: manifest unknown; artifact err: get manifest: build image source: (Mirrors also failed: [quay.io/openshift/ci@sha256:525c0e3bfe9d311dab9c839397625ddb5bee0017f8e5b83ec6f8a80b633b93ae: reading manifest sha256:525c0e3bfe9d311dab9c839397625ddb5bee0017f8e5b83ec6f8a80b633b93ae in quay.io/openshift/ci: manifest unknown]): quay-proxy.ci.openshift.org/openshift/ci@sha256:525c0e3bfe9d311dab9c839397625ddb5bee0017f8e5b83ec6f8a80b633b93ae: reading manifest sha256:525c0e3bfe9d311dab9c839397625ddb5bee0017f8e5b83ec6f8a80b633b93ae in quay-proxy.ci.openshift.org/openshift/ci: manifest unknown

openshift-merge-bot · 2026-07-23T16:56:16Z

/retest-required

Remaining retests: 0 against base HEAD 067b924 and 2 for PR HEAD 9278288 in total

jparrill · 2026-07-23T20:36:42Z

/retest-required

openshift-ci · 2026-07-23T20:45:16Z

@jparrill: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

…boot images Replace hardcoded StreamRHEL9 with dynamic resolution via getRHELStreamForBootImage across all platform controllers (AWS, OpenStack, KubeVirt) and the central ConfigGenerator. With MCO PR openshift/machine-config-operator#6308 merged and the OSStreams feature gate promoted to Default for Hypershift (openshift/api#2950), the MCO can now process OSImageStream during bootstrap. NodePools can resolve the correct RHEL stream (9 or 10) based on release version, explicit spec.osImageStream, and container runtime configuration. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Manuel Parrilla Madrid <jparrill@redhat.com>

…Hypershift With the MCO ExternalTopologyMode guard removed (openshift/machine-config-operator#6308), HyperShift clusters can now process OSImageStream during bootstrap. This graduates the OSStreams feature gate from TechPreviewNoUpgrade to Default for the Hypershift cluster profile, enabling RHEL 9/10 dual-stream support for hosted control planes by default. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Manuel Parrilla Madrid <jparrill@redhat.com> rh-pre-commit.version: 2.4.0 rh-pre-commit.check-secrets: ENABLED

…Hypershift With the MCO ExternalTopologyMode guard removed (openshift/machine-config-operator#6308), HyperShift clusters can now process OSImageStream during bootstrap. This graduates the OSStreams feature gate from TechPreviewNoUpgrade to Default for the Hypershift cluster profile, enabling RHEL 9/10 dual-stream support for hosted control planes by default. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Manuel Parrilla Madrid <jparrill@redhat.com> rh-pre-commit.version: 2.4.0 rh-pre-commit.check-secrets: ENABLED Signed-off-by: Juan Manuel Parrilla Madrid <jparrill@redhat.com>

…boot images Replace hardcoded StreamRHEL9 with dynamic resolution via getRHELStreamForBootImage across all platform controllers (AWS, OpenStack, KubeVirt) and the central ConfigGenerator. With MCO PR openshift/machine-config-operator#6308 merged and the OSStreams feature gate promoted to Default for Hypershift (openshift/api#2950), the MCO can now process OSImageStream during bootstrap. NodePools can resolve the correct RHEL stream (9 or 10) based on release version, explicit spec.osImageStream, and container runtime configuration. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Juan Manuel Parrilla Madrid <jparrill@redhat.com>

openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Jul 15, 2026

openshift-ci Bot requested review from proietfb and sergiordlr July 15, 2026 10:09

openshift-ci Bot assigned enxebre Jul 15, 2026

openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jul 15, 2026

openshift-ci Bot added do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. approved Indicates a PR has been approved by an approver from all required OWNERS files. labels Jul 15, 2026

openshift-ci Bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Jul 20, 2026

jparrill mentioned this pull request Jul 20, 2026

CNTRLPLANE-3032: test: add e2e v2 tests for NodePool OSImageStream openshift/hypershift#9033

Merged

6 tasks

jparrill force-pushed the CNTRLPLANE-3840 branch from 197543c to 90d28b3 Compare July 21, 2026 07:50

openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jul 21, 2026

openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jul 22, 2026

openshift-ci-robot added the verified Signifies that the PR passed pre-merge verification criteria label Jul 22, 2026

openshift-merge-bot Bot merged commit 2c2abc8 into openshift:main Jul 23, 2026
17 checks passed

This was referenced Jul 23, 2026

CNTRLPLANE-3871: promote OSStreams feature gate to Default for Hypershift openshift/api#2950

Merged

CNTRLPLANE-3871: resolve RHEL stream dynamically for boot images openshift/hypershift#9099

Merged

jparrill mentioned this pull request Jul 25, 2026

CNTRLPLANE-3871: add temporary e2e-v2-aws-techpreview-osimagestream job openshift/release#82438

Merged

jparrill mentioned this pull request Aug 19, 2026

OCPBUGS-112075: skip proxy for OSImageStream discovery in HyperShift #6420

Merged

Uh oh!

Conversation

jparrill commented Jul 15, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Context

Test plan

Summary by CodeRabbit

Uh oh!

openshift-merge-bot Bot commented Jul 15, 2026

Uh oh!

openshift-ci-robot commented Jul 15, 2026 • edited by openshift-ci Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Context

Test plan

Uh oh!

coderabbitai Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Uh oh!

enxebre commented Jul 15, 2026

Uh oh!

enxebre commented Jul 15, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 15, 2026

Uh oh!

pablintino commented Jul 15, 2026

Uh oh!

jparrill commented Jul 17, 2026

Uh oh!

jparrill commented Jul 20, 2026

Uh oh!

jparrill commented Jul 20, 2026

Uh oh!

jparrill commented Jul 20, 2026

Uh oh!

sdminonne commented Jul 20, 2026

Uh oh!

jparrill commented Jul 20, 2026

Uh oh!

jparrill commented Jul 20, 2026

Uh oh!

enxebre commented Jul 20, 2026

Uh oh!

jparrill commented Jul 21, 2026

Uh oh!

jparrill commented Jul 21, 2026

Uh oh!

jparrill commented Jul 21, 2026

Uh oh!

jparrill commented Jul 21, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 22, 2026

Uh oh!

openshift-ci Bot commented Jul 22, 2026

Uh oh!

jparrill commented Jul 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

openshift-ci-robot commented Jul 22, 2026

Uh oh!

jparrill commented Jul 22, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 22, 2026

Uh oh!

jparrill commented Jul 23, 2026

Uh oh!

jparrill commented Jul 23, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 23, 2026

Uh oh!

jparrill commented Jul 23, 2026

Uh oh!

openshift-ci Bot commented Jul 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

jparrill commented Jul 15, 2026 •

edited by coderabbitai Bot

Loading

openshift-ci-robot commented Jul 15, 2026 •

edited by openshift-ci Bot

Loading

coderabbitai Bot commented Jul 15, 2026 •

edited

Loading

jparrill commented Jul 22, 2026 •

edited

Loading