Skip to content

OCPBUGS-104847: Remove SELinuxMountGAReadiness feature gate - #3122

Open
dfajmon wants to merge 1 commit into
openshift:masterfrom
dfajmon:remove-selinuxmountgaradiness
Open

dfajmon wants to merge 1 commit into
openshift:masterfrom
dfajmon:remove-selinuxmountgaradiness

Conversation

@dfajmon

@dfajmon dfajmon commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

Feature gate reached GA in 5.0, removing from openshift/api.

Feature gate reached GA in 5.0, removing from openshift/api.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

Pipeline controller notification

This PR uses the pipeline controller for second-stage tests. Selection and triggering follow the repository configuration.

Use /test ? to list jobs and /pipeline help for commands.

@openshift-ci-robot openshift-ci-robot added jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. labels Oct 22, 2026
@openshift-ci-robot

Copy link
Copy Markdown

@dfajmon: This pull request references Jira Issue OCPBUGS-104847, which is valid.

3 validation(s) were run on this bug
  • bug is open, matching expected state (open)
  • bug target version (5.1.0) matches configured target version for branch (5.1.0)
  • bug is in the state POST, which is one of the valid states (NEW, ASSIGNED, POST)

The bug has been updated to refer to the pull request using the external bug tracker.

Details

In response to this:

Feature gate reached GA in 5.0, removing from openshift/api.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@coderabbitai

coderabbitai Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Source mode: Auto
  • Repository: openshift/api
  • Branch: master
  • File: .coderabbit.yaml
  • Commit: def65fd
  • Layers: Repository YAML (base), Central YAML (inherited)
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: a2258dce-7f15-4e90-8754-65262b914f3e
📥 Commits

Reviewing files that changed from the base of the PR and between def65fd and fd92b2b.

📒 Files selected for processing: 14
  • features.md
  • features/features.go
  • payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml
  • payload-manifests/featuregates/featureGate-4-10-Hypershift-DevPreviewNoUpgrade.yaml
  • payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml
  • payload-manifests/featuregates/featureGate-4-10-Hypershift-TechPreviewNoUpgrade.yaml
  • payload-manifests/featuregates/featureGate-4-SelfManagedHA-Default.yaml
  • payload-manifests/featuregates/featureGate-4-SelfManagedHA-DevPreviewNoUpgrade.yaml
  • payload-manifests/featuregates/featureGate-4-SelfManagedHA-OKD.yaml
  • payload-manifests/featuregates/featureGate-4-SelfManagedHA-TechPreviewNoUpgrade.yaml
  • payload-manifests/featuregates/featureGate-5-10-SelfManagedHA-Default.yaml
  • payload-manifests/featuregates/featureGate-5-10-SelfManagedHA-DevPreviewNoUpgrade.yaml
  • payload-manifests/featuregates/featureGate-5-10-SelfManagedHA-OKD.yaml
  • payload-manifests/featuregates/featureGate-5-10-SelfManagedHA-TechPreviewNoUpgrade.yaml
💤 Files with no reviewable changes: 14
  • payload-manifests/featuregates/featureGate-4-SelfManagedHA-DevPreviewNoUpgrade.yaml
  • payload-manifests/featuregates/featureGate-4-10-Hypershift-TechPreviewNoUpgrade.yaml
  • features.md
  • payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml
  • payload-manifests/featuregates/featureGate-5-10-SelfManagedHA-Default.yaml
  • payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml
  • payload-manifests/featuregates/featureGate-4-SelfManagedHA-OKD.yaml
  • payload-manifests/featuregates/featureGate-4-10-Hypershift-DevPreviewNoUpgrade.yaml
  • payload-manifests/featuregates/featureGate-5-10-SelfManagedHA-DevPreviewNoUpgrade.yaml
  • payload-manifests/featuregates/featureGate-4-SelfManagedHA-TechPreviewNoUpgrade.yaml
  • payload-manifests/featuregates/featureGate-5-10-SelfManagedHA-TechPreviewNoUpgrade.yaml
  • features/features.go
  • payload-manifests/featuregates/featureGate-4-SelfManagedHA-Default.yaml
  • payload-manifests/featuregates/featureGate-5-10-SelfManagedHA-OKD.yaml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

📝 Walkthrough

The SELinuxMountGAReadiness registration and availability-table row were removed. Its enabled entries were removed from the listed HyperShift and SelfManagedHA feature-gate manifests. The manifests continue to list SELinuxMount where noted.

Priority: ⬇️ Low

Merge Risk: ⚪ Minimal · up to fd92b

The gate removal appears internally consistent and is mergeable after normal checks.

Pre-merge checks: Passed 15
Check name Status Explanation
Description check Passed The description states that the feature gate reached GA and is being removed. This directly relates to the changeset.
Title check Passed The title clearly identifies the issue and the primary change: removal of the SELinuxMountGAReadiness feature gate.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names Passed PASS: The reviewed range changes only feature-gate documentation, Go registration, and YAML manifests. It adds no test files, Ginkgo test declarations, test titles, dynamic values, or legacy naming to…
Test Structure And Quality Passed PASS. The pull request changes only feature-gate documentation, Go registration data, and YAML manifests. It adds no Ginkgo tests or test blocks, so the listed test-structure requirements do not apply…
Microshift Test Compatibility Passed The pull request adds no Ginkgo e2e tests. The authoritative diff contains only feature-gate registry, documentation, and manifest removals, so the MicroShift test compatibility check is not applicabl…
Single Node Openshift (Sno) Test Compatibility Passed The pull request adds no Ginkgo or other e2e tests. The authoritative diff contains only deletions from feature-gate documentation, registration, and manifests, so it introduces no SNO multi-node comp…
Topology-Aware Scheduling Compatibility Passed The pull request changes only feature-gate documentation, registry code, and feature-gate payload manifests. The diff removes SELinuxMountGAReadiness entries and its registration. It adds no deploym…
Ote Binary Stdout Contract Passed PASS. The pull request changes only feature-gate metadata and removes the SELinuxMountGAReadiness registration and manifest entries. The diff adds no code and contains no stdout, logging, main, su…
Ipv6 And Disconnected Network Test Compatibility Passed The pull request only removes the SELinuxMountGAReadiness registration, documentation row, and manifest entries. The authoritative diff adds no Ginkgo tests or other test code, so this IPv4 and discon…
No-Weak-Crypto Passed The pull request only removes the SELinuxMountGAReadiness registration, documentation row, and manifest entries. The diff contains 44 deletions and no additions. It introduces no weak cryptography, cu…
Container-Privileges Passed The pull request only removes the SELinuxMountGAReadiness feature-gate entry and registration. The diff adds no lines. No changed file contains privileged, hostPID, hostNetwork, hostIPC, SYS_ADMIN, al…
No-Sensitive-Data-In-Logs Passed The pull request only removes a feature-gate declaration, documentation row, and manifest entries. The diff adds no logging, credentials, identifiers, hostnames, or customer data.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files.

Full details: Stable And Deterministic Test Names

Explanation

PASS: The reviewed range changes only feature-gate documentation, Go registration, and YAML manifests. It adds no test files, Ginkgo test declarations, test titles, dynamic values, or legacy naming tokens.

Full details: Test Structure And Quality

Explanation

PASS. The pull request changes only feature-gate documentation, Go registration data, and YAML manifests. It adds no Ginkgo tests or test blocks, so the listed test-structure requirements do not apply.

Full details: Microshift Test Compatibility

Explanation

The pull request adds no Ginkgo e2e tests. The authoritative diff contains only feature-gate registry, documentation, and manifest removals, so the MicroShift test compatibility check is not applicable.

Full details: Single Node Openshift (Sno) Test Compatibility

Explanation

The pull request adds no Ginkgo or other e2e tests. The authoritative diff contains only deletions from feature-gate documentation, registration, and manifests, so it introduces no SNO multi-node compatibility issue.

Full details: Topology-Aware Scheduling Compatibility

Explanation

The pull request changes only feature-gate documentation, registry code, and feature-gate payload manifests. The diff removes SELinuxMountGAReadiness entries and its registration. It adds no deployments, operators, controllers, or scheduling constraints such as affinity, topology spread, replica settings, selectors, tolerations, or PDBs.

Full details: Ote Binary Stdout Contract

Explanation

PASS. The pull request changes only feature-gate metadata and removes the SELinuxMountGAReadiness registration and manifest entries. The diff adds no code and contains no stdout, logging, main, suite setup, or other OTE process-level writes.

Full details: Ipv6 And Disconnected Network Test Compatibility

Explanation

The pull request only removes the SELinuxMountGAReadiness registration, documentation row, and manifest entries. The authoritative diff adds no Ginkgo tests or other test code, so this IPv4 and disconnected-network test compatibility check does not apply.

Full details: No-Weak-Crypto

Explanation

The pull request only removes the SELinuxMountGAReadiness registration, documentation row, and manifest entries. The diff contains 44 deletions and no additions. It introduces no weak cryptography, custom crypto, or secret comparisons.

Full details: Container-Privileges

Explanation

The pull request only removes the SELinuxMountGAReadiness feature-gate entry and registration. The diff adds no lines. No changed file contains privileged, hostPID, hostNetwork, hostIPC, SYS_ADMIN, allowPrivilegeEscalation, or securityContext settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create a new PR

Comment @coderabbitai help to get the list of available commands.

@openshift-ci

openshift-ci Bot commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

Hello @dfajmon! Some important instructions when contributing to openshift/api:
API design plays an important part in the user experience of OpenShift and as such API PRs are subject to a high level of scrutiny to ensure they follow our best practices. If you haven't already done so, please review the OpenShift API Conventions and ensure that your proposed changes are compliant. Following these conventions will help expedite the api review process for your PR.

@openshift-ci openshift-ci Bot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label Oct 22, 2026
@openshift-ci

openshift-ci Bot commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign joelspeed for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@dfajmon

dfajmon commented Oct 22, 2026

Copy link
Copy Markdown
Contributor Author

/test integration

@openshift-ci

openshift-ci Bot commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

@dfajmon: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@JoelSpeed

Copy link
Copy Markdown
Contributor

/pipeline required

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

The controller does not dispatch second-stage tests in agentic mode. Use /pipeline skip-agentic-mode first, then repeat this command. The request was not queued.

@JoelSpeed

Copy link
Copy Markdown
Contributor

/payload nightly blocking

@openshift-ci

openshift-ci Bot commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

@JoelSpeed: it appears that you have attempted to use some version of the payload command, but your comment was incorrectly formatted and cannot be acted upon. See the docs for usage info.

@JoelSpeed

Copy link
Copy Markdown
Contributor

/payload 5.1 nightly blocking

@openshift-ci

openshift-ci Bot commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

@JoelSpeed: trigger 14 job(s) of type blocking for the nightly release of OCP 5.1

  • periodic-ci-openshift-release-main-ci-5.1-e2e-aws-upgrade-ovn-single-node
  • periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-upgrade-fips
  • periodic-ci-openshift-release-main-ci-5.1-e2e-azure-ovn-upgrade
  • periodic-ci-openshift-release-main-ci-5.1-upgrade-from-stable-5.0-e2e-gcp-ovn-rt-upgrade
  • periodic-ci-openshift-hypershift-release-5.1-periodics-e2e-azure-aks-ovn-conformance
  • periodic-ci-openshift-hypershift-release-5.1-periodics-e2e-aws-ovn-conformance
  • periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-serial-1of2
  • periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-serial-2of2
  • periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn-techpreview
  • periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn-techpreview-serial-1of3
  • periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn-techpreview-serial-2of3
  • periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn-techpreview-serial-3of3
  • periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-ipv4
  • periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-ipv6

See details on https://pr-payload-tests.ci.openshift.org/runs/ci/02146710-ceb5-11f1-9954-e98c78435207-0

@jmguzik

jmguzik commented Oct 23, 2026

Copy link
Copy Markdown

just to observe sth

@jmguzik

jmguzik commented Oct 23, 2026

Copy link
Copy Markdown

/pipeline skip-agentic-mode

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

Traditional pipeline scheduling is enabled for this PR and future pushes. Running tests are unchanged.

@jmguzik

jmguzik commented Oct 23, 2026

Copy link
Copy Markdown

/pipeline agentic-mode

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

Agentic mode is restored. First-stage success will create a fresh pending pipeline gate once the configured trigger is satisfied (LGTM or /pipeline auto in LGTM mode). Running tests are unchanged.

@jmguzik

jmguzik commented Oct 23, 2026

Copy link
Copy Markdown

I think there is a gap shown here. Pipeline controller was down when 1st stage succeded. Now, there is no way to even manually trigger agentic second stage.

@jmguzik

jmguzik commented Oct 23, 2026

Copy link
Copy Markdown

ah, but this is lgtm mode, and there is not lgtm trigger yet

@JoelSpeed

Copy link
Copy Markdown
Contributor

@jmguzik Would /pipeline auto skip the need for the LGTM and restore the agentic?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants