Skip to content

[release-4.21] WIP: Remove feature-set annotations from Sail Library RBAC Manifests#1462

Draft
gcs278 wants to merge 12 commits into
openshift:release-4.21from
gcs278:backport-noOLM-4.21-ga-test
Draft

[release-4.21] WIP: Remove feature-set annotations from Sail Library RBAC Manifests#1462
gcs278 wants to merge 12 commits into
openshift:release-4.21from
gcs278:backport-noOLM-4.21-ga-test

Conversation

@gcs278

@gcs278 gcs278 commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

Summary

Remove the release.openshift.io/feature-set: DevPreviewNoUpgrade,TechPreviewNoUpgrade annotation from the Sail Library ClusterRole and ClusterRoleBinding manifests. This annotation restricts CVO from deploying these RBAC resources on clusters running the Default feature set. Removing it is required before promoting the GatewayAPIWithoutOLM feature gate to GA.

Depends on #1442. Blocks openshift/api#2865 (FG promotion to Default/GA).

🤖 Generated with Claude Code

gcs278 and others added 12 commits June 2, 2026 21:29
Vendor the GatewayAPIWithoutOLM in the openshift/api repo to support
backporting the No OLM logic into the release-4.21 branch.

go get github.com/openshift/api@1d79f30d466
go get github.com/openshift/client-go@96a6cbc1420c

PR: openshift#1354
Cherry-picked from: 8a40966
openshift#1354

Conflicts resolved:
- pkg/operator/operator.go: Added GatewayAPIWithoutOLM gate alongside
  existing 4.21 gates (GatewayAPI, GatewayAPIController, RouteExternalCertificate)
Cherry-picked from: ed2eb36
openshift#1354

Conflicts resolved:
- pkg/operator/controller/status/controller.go: Took incoming noOLM logic
  (useOLM/useSailLibrary, conditional subscription listing) but wrapped in
  existing 4.21 GatewayAPIEnabled guard. Restored GatewayAPIControllerEnabled
  guard that was present in the original condition but dropped during
  cherry-pick.
Cherry-picked from: 9c4d792
openshift#1354

Conflicts resolved:
- test/e2e/gateway_api_test.go: Kept 4.21 gatewayAPIControllerEnabled guard,
  added gatewayAPIWithoutOLMEnabled conditionals inside it. Kept xcrdNames
  alongside new istioCRDNames. Removed testCRDNames declaration since it
  was subsequently added to release-4.21 via PR openshift#1446.
- Removed references to testGatewayAPIInfrastructureAnnotations,
  testGatewayAPIInternalLoadBalancer, and testGatewayOpenshiftConditions
  which were added in separate PRs not present on release-4.21.
Cherry-picked from: 43c978a
openshift#1404

Conflicts resolved:
- go.mod: Aslak's development branch introduced transitive dependencies
  that diverged from release-4.21. Reset go.mod to the release-4.21
  baseline, then added only the openshift-service-mesh/sail-operator
  replace directive and bumped gateway-api to v1.4.1.
Remove the release.openshift.io/feature-set annotation from the Sail
Library ClusterRole and ClusterRoleBinding so they are included in all
feature sets, not just DevPreview and TechPreview. This is needed to
test the noOLM path in Default/GA mode via payload jobs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@openshift-ci

openshift-ci Bot commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@openshift-ci openshift-ci Bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jun 4, 2026
@coderabbitai

coderabbitai Bot commented Jun 4, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 326d7c49-c6b5-49bb-9102-17be6cb18d53

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci

openshift-ci Bot commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign rfredette for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@gcs278 gcs278 changed the title DO NOT MERGE: noOLM GA payload test - remove feature-set annotations WIP: Remove feature-set annotation from Sail Library RBAC for GA promotion Jun 4, 2026
@gcs278 gcs278 changed the title WIP: Remove feature-set annotation from Sail Library RBAC for GA promotion [release-4.21] WIP: Remove feature-set annotations from Sail Library RBAC Manifests Jun 4, 2026
@openshift-ci

openshift-ci Bot commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

@gcs278: This PR was included in a payload test run from openshift/origin#31232
trigger 1 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command

  • periodic-ci-openshift-release-main-ci-4.21-upgrade-from-stable-4.20-e2e-gcp-ovn-rt-upgrade

See details on https://pr-payload-tests.ci.openshift.org/runs/ci/6689b0c0-603c-11f1-940d-a9e7c33d49a1-0

@openshift-ci

openshift-ci Bot commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

@gcs278: This PR was included in a payload test run from openshift/origin#31232
trigger 1 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command

  • periodic-ci-openshift-release-main-ci-4.21-e2e-aws-ovn-upgrade-out-of-change

See details on https://pr-payload-tests.ci.openshift.org/runs/ci/8f447a90-603c-11f1-97f7-e6703f146ba4-0

@openshift-ci

openshift-ci Bot commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

@gcs278: This PR was included in a payload test run from openshift/origin#31232
trigger 1 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command

  • periodic-ci-openshift-release-main-ci-4.21-upgrade-from-stable-4.20-e2e-gcp-ovn-rt-upgrade

See details on https://pr-payload-tests.ci.openshift.org/runs/ci/d6b82790-604c-11f1-8cfa-10e8e0b0bde5-0

@openshift-ci

openshift-ci Bot commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

@gcs278: This PR was included in a payload test run from openshift/origin#31232
trigger 1 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command

  • periodic-ci-openshift-release-main-ci-4.21-upgrade-from-stable-4.20-e2e-gcp-ovn-upgrade

See details on https://pr-payload-tests.ci.openshift.org/runs/ci/9d4f79a0-6069-11f1-8253-78c971bcc8c1-0

@openshift-ci

openshift-ci Bot commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

@gcs278: This PR was included in a payload test run from openshift/origin#31232
trigger 1 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command

  • periodic-ci-openshift-release-main-ci-4.21-upgrade-from-stable-4.20-e2e-aws-ovn-upgrade

See details on https://pr-payload-tests.ci.openshift.org/runs/ci/c9301480-6069-11f1-94ef-707e0daebf2d-0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant