CNTRLPLANE-3652: Add TLS ownership for 5 unowned artifacts#31348
CNTRLPLANE-3652: Add TLS ownership for 5 unowned artifacts#31348oceanc80 wants to merge 1 commit into
Conversation
|
Pipeline controller notification For optional jobs, comment This repository is configured in: automatic mode |
|
@oceanc80: This pull request references CNTRLPLANE-3652 which is a valid jira issue. Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "5.0.0" version, but no target version was set. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
WalkthroughTLS ownership metadata was populated for kube-apiserver and Networking / router artifacts across canonical JSON, raw snapshot JSON, and generated markdown inventories. Related ownership violations entries were removed. ChangesTLS ownership metadata population
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~25 minutes 🚥 Pre-merge checks | ✅ 15✅ Passed checks (15 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
|
@oceanc80: The following test failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
|
@oceanc80: you cannot LGTM your own PR. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: oceanc80 The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
Set owningJiraComponent and description for: - ns/kube-system configmap/extension-apiserver-authentication (kube-apiserver) - ns/openshift-config-managed configmap/default-ingress-cert (Networking / router) - ns/openshift-console configmap/default-ingress-cert (Networking / router) - ns/openshift-ingress secret/router-certs-default (Networking / router) - ns/openshift-ingress-operator secret/router-ca (Networking / router) Ownership info updated in raw-data files and all derived files regenerated via `go run -mod vendor ./cmd/update-tls-artifacts generate-ownership`.
9a99e04 to
a9a7155
Compare
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@tls/ownership/ownership.md`:
- Around line 23-25: The table of contents links use manually written
title-cased anchor fragments that do not match the generated markdown heading
IDs, so update the TOC entries to use the actual lowercase slug format. Fix the
links for the relevant headings in ownership.md, including the entries
associated with Networking / router and kube-apiserver, and keep the fragment
text consistent with the rendered markdown anchors so the TOC resolves
correctly.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository YAML (base), Central YAML (inherited)
Review profile: CHILL
Plan: Enterprise
Run ID: 28e46bfa-6e01-4e2b-89f3-66924722bb99
📒 Files selected for processing (24)
tls/autoregenerate-after-expiry/autoregenerate-after-expiry.jsontls/autoregenerate-after-expiry/autoregenerate-after-expiry.mdtls/descriptions/descriptions.jsontls/descriptions/descriptions.mdtls/ownership/ownership.jsontls/ownership/ownership.mdtls/raw-data/raw-tls-artifacts-ha-amd64-aws-ovn-default.jsontls/raw-data/raw-tls-artifacts-ha-amd64-aws-ovn-techpreviewnoupgrade.jsontls/raw-data/raw-tls-artifacts-ha-amd64-azure-ovn-default.jsontls/raw-data/raw-tls-artifacts-ha-amd64-azure-ovn-techpreviewnoupgrade.jsontls/raw-data/raw-tls-artifacts-ha-amd64-gcp-ovn-default.jsontls/raw-data/raw-tls-artifacts-ha-amd64-gcp-ovn-techpreviewnoupgrade.jsontls/raw-data/raw-tls-artifacts-ha-amd64-metal-ovn-default.jsontls/raw-data/raw-tls-artifacts-ha-amd64-metal-ovn-techpreviewnoupgrade.jsontls/raw-data/raw-tls-artifacts-ha-amd64-openstack-ovn-default.jsontls/raw-data/raw-tls-artifacts-ha-amd64-vsphere-ovn-default.jsontls/raw-data/raw-tls-artifacts-ha-amd64-vsphere-ovn-techpreviewnoupgrade.jsontls/raw-data/raw-tls-artifacts-single-amd64-aws-ovn-default.jsontls/raw-data/raw-tls-artifacts-single-amd64-aws-ovn-techpreviewnoupgrade.jsontls/refresh-period/refresh-period.jsontls/refresh-period/refresh-period.mdtls/testcase/testcase.jsontls/testcase/testcase.mdtls/violations/ownership/ownership-violations.json
✅ Files skipped from review due to trivial changes (10)
- tls/ownership/ownership.json
- tls/raw-data/raw-tls-artifacts-ha-amd64-aws-ovn-techpreviewnoupgrade.json
- tls/raw-data/raw-tls-artifacts-ha-amd64-azure-ovn-techpreviewnoupgrade.json
- tls/raw-data/raw-tls-artifacts-ha-amd64-gcp-ovn-default.json
- tls/raw-data/raw-tls-artifacts-single-amd64-aws-ovn-techpreviewnoupgrade.json
- tls/raw-data/raw-tls-artifacts-ha-amd64-vsphere-ovn-default.json
- tls/raw-data/raw-tls-artifacts-ha-amd64-vsphere-ovn-techpreviewnoupgrade.json
- tls/raw-data/raw-tls-artifacts-ha-amd64-aws-ovn-default.json
- tls/raw-data/raw-tls-artifacts-ha-amd64-azure-ovn-default.json
- tls/raw-data/raw-tls-artifacts-ha-amd64-gcp-ovn-techpreviewnoupgrade.json
🚧 Files skipped from review as they are similar to previous changes (4)
- tls/raw-data/raw-tls-artifacts-ha-amd64-metal-ovn-default.json
- tls/raw-data/raw-tls-artifacts-ha-amd64-metal-ovn-techpreviewnoupgrade.json
- tls/raw-data/raw-tls-artifacts-single-amd64-aws-ovn-default.json
- tls/raw-data/raw-tls-artifacts-ha-amd64-openstack-ovn-default.json
| - [Networking / router (4)](#Networking-/-router-4) | ||
| - [Certificates (2)](#Certificates-2) | ||
| - [Certificate Authority Bundles (2)](#Certificate-Authority-Bundles-2) |
There was a problem hiding this comment.
📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win
Normalize the TOC anchor fragments.
These new links use title-cased fragments, but the rendered markdown slugs are lowercase/generated. The TOC entries for Networking / router and kube-apiserver will not resolve until the fragments match the actual heading IDs.
Also applies to: 40-42
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)
[warning] 23-23: Link fragments should be valid
(MD051, link-fragments)
[warning] 24-24: Link fragments should be valid
Expected: #certificates-2; Actual: #Certificates-2
(MD051, link-fragments)
[warning] 25-25: Link fragments should be valid
Expected: #certificate-authority-bundles-2; Actual: #Certificate-Authority-Bundles-2
(MD051, link-fragments)
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@tls/ownership/ownership.md` around lines 23 - 25, The table of contents links
use manually written title-cased anchor fragments that do not match the
generated markdown heading IDs, so update the TOC entries to use the actual
lowercase slug format. Fix the links for the relevant headings in ownership.md,
including the entries associated with Networking / router and kube-apiserver,
and keep the fragment text consistent with the rendered markdown anchors so the
TOC resolves correctly.
Source: Linters/SAST tools
Add ownership information for 5 TLS artifacts that were listed as missing owners in the TLS registry:
Updates ownership.json, ownership.md, all raw-data files, and empties the ownership-violations.json file.
Ref: CNTRLPLANE-3652
Summary by CodeRabbit
Documentation
Bug Fixes