Boilerplate: Update to a8a3172411f3f2b8848f64333843e028ef4b3ed1

[redhat-chai-bot]

Conventions:

• openshift/golang-osd-operator: Update
• openshift/golang-osd-e2e: Update

---

openshift/boilerplate@f66d57c...a8a3172

---

AI-generated. Review for accuracy.

Automated by scheduled task rosa_sre_boilerplate_update (instructions: ship_help_bot/shared/instructions/scheduled/rosa_sre_boilerplate_update.md, run: 22ff8a8c, commit: 20a4c3bc-dirty)

Summary by CodeRabbit

• New Features

  • Added automated pull request checks for changes targeting the master branch.

• Chores

  • Updated the CI build environment.
  • Adjusted code review exclusions for boilerplate and vendor files.
  • Updated repository approval and ownership assignments.
  • Added new engineering, management, and architecture ownership groups.

• Removed

  • Removed automated weekly Docker dependency update configuration.
  • Cleared ownership assignments for the Tekton configuration.

[coderabbitai]

Warning

This pull request changes a CodeRabbit configuration file. Because it comes from a fork or its author is not a repository collaborator, reviews use only the configuration from the target branch. The proposed configuration will take effect after it is merged.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Team

Run ID: 87fa80dc-9c74-4c4d-8ddb-d3d50507ba12

📥 Commits

Reviewing files that changed from the base of the PR and between edcbd3b and 260352a.

⛔ Files ignored due to path filters (13)

• boilerplate/_data/backing-image-tag is excluded by !boilerplate/**
• boilerplate/_data/last-boilerplate-commit is excluded by !boilerplate/**
• boilerplate/_lib/subscriber-propose-update is excluded by !boilerplate/**
• boilerplate/openshift/golang-osd-operator/.coderabbit.yaml is excluded by !boilerplate/**
• boilerplate/openshift/golang-osd-operator/OWNERS_ALIASES is excluded by !boilerplate/**
• boilerplate/openshift/golang-osd-operator/agentic-sdlc-check-pull-request.yaml.tmpl is excluded by !boilerplate/**
• boilerplate/openshift/golang-osd-operator/codecov.sh is excluded by !boilerplate/**
• boilerplate/openshift/golang-osd-operator/dependabot.yml is excluded by !boilerplate/**
• boilerplate/openshift/golang-osd-operator/docs/pre-commit.md is excluded by !boilerplate/**
• boilerplate/openshift/golang-osd-operator/update is excluded by !boilerplate/**
• boilerplate/update is excluded by !boilerplate/**
• build/Dockerfile is excluded by !build/**
• build/Dockerfile.olm-registry is excluded by !build/**

📒 Files selected for processing (7)

• .ci-operator.yaml
• .coderabbit.yaml
• .github/dependabot.yml
• .tekton/OWNERS
• .tekton/managed-velero-operator-agentic-sdlc-check-pull-request.yaml
• OWNERS
• OWNERS_ALIASES

💤 Files with no reviewable changes (2)

• .tekton/OWNERS
• .github/dependabot.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

Walkthrough

The change updates the CI build image, review exclusions, Dependabot configuration, repository ownership, and Tekton pull request automation. A new PipelineRun invokes a pinned agentic SDLC check for pull requests targeting master.

Changes

CI and repository governance

Layer / File(s)	Summary
CI and review configuration .ci-operator.yaml, .coderabbit.yaml, .github/dependabot.yml	The CI build image changes to image-v8.4.3. Review exclusions cover boilerplate/** and vendor/**. Dependabot configuration is removed.
Repository ownership updates OWNERS, OWNERS_ALIASES, .tekton/OWNERS	Approvers and aliases are updated. Several aliases and members are removed, three aliases are added, and .tekton/OWNERS is emptied.
Pull request SDLC pipeline .tekton/managed-velero-operator-agentic-sdlc-check-pull-request.yaml	A Tekton PipelineRun triggers the pinned agentic-sdlc-check pipeline for pull requests targeting master. It passes Git parameters and mounts the workspace and git-auth secret.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: ⚪ Minimal · up to 26035

This updates repository CI, governance, and pull-request automation conventions without an identified current merge-blocking risk.

Sequence Diagram(s)

sequenceDiagram
  participant GitHub as GitHub pull request
  participant PipelineRun as Tekton PipelineRun
  participant Boilerplate as openshift/boilerplate pipeline
  GitHub->>PipelineRun: Send pull_request event for master
  PipelineRun->>PipelineRun: Evaluate CEL trigger
  PipelineRun->>Boilerplate: Resolve pinned agentic-sdlc-check pipeline
  Boilerplate-->>PipelineRun: Use git-url, revision, workspace, and git-auth

Loading

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the main change: updating the repository boilerplate to the specified commit.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PASS: The pull request changes only configuration, ownership, boilerplate, shell, and YAML/template files. The complete diff adds no Ginkgo declarations or test titles, and no test or source-language …
Test Structure And Quality	✅ Passed	PASS: The pull request does not add or modify Ginkgo test code. The changed paths are configuration, Tekton YAML, ownership data, shell scripts, documentation, Dockerfiles, and boilerplate metadata. T…
Microshift Test Compatibility	✅ Passed	No new Ginkgo e2e tests were added. The pull request changes configuration, ownership files, boilerplate templates, Dockerfiles, and a Tekton PipelineRun; it adds or modifies no Go test files and the …
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PASS: The pull request adds no Ginkgo e2e tests. The exact diff contains no changed or added Go test files, no test paths, and no added It(), Describe(), Context(), or When() declarations. The added f…
Topology-Aware Scheduling Compatibility	✅ Passed	PASS: The pull request adds a Tekton PipelineRun and a PipelineRun template. Neither resource defines affinity, topology spread, replica counts, node selectors, tolerations, or PDB settings. The diff …
Ote Binary Stdout Contract	✅ Passed	PASS: The pull request changes no Go source, test, or module files. Its changes are configuration, Tekton YAML, boilerplate scripts/templates, and Dockerfiles. No OTE process-level stdout code or suit…
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	No new Ginkgo e2e tests were added. The diff contains no Go test files or added It, Describe, Context, or When declarations. The added YAML files define Tekton pipeline configuration, not test…
No-Weak-Crypto	✅ Passed	PASS. The pull-request additions contain no MD5, SHA1, DES, 3DES, RC4, Blowfish, or ECB usage. The only hash operation added is SHA-256 checksum verification for the Codecov binary. The added secret r…
Container-Privileges	✅ Passed	No explicit container privilege condition was introduced. The new Tekton PipelineRun and its template contain no privileged, hostPID, hostNetwork, hostIPC, SYS_ADMIN, or `allowPrivilegeEscal…
No-Sensitive-Data-In-Logs	✅ Passed	No changed log statement prints a password, token, API key, session ID, PII, or customer data. The new messages contain repository paths, aliases, branch names, hashes, and image metadata. The subscri…

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: redhat-chai-bot
Once this PR has been reviewed and has the lgtm label, please assign bergmannf for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@redhat-chai-bot: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 13.05%. Comparing base (edcbd3b) to head (260352a).

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #387   +/-   ##
=======================================
  Coverage   13.05%   13.05%           
=======================================
  Files          15       15           
  Lines        1141     1141           
=======================================
  Hits          149      149           
  Misses        979      979           
  Partials       13       13           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.