chore: add bots as trusted in the stolostron org by dhaiducek · Pull Request #85294 · openshift/release

dhaiducek · 2026-09-16T12:53:43Z

Summary by CodeRabbit

The stolostron repository will trust the dependabot, red-hat-konflux, and redhat-chai-bot applications in its Prow trigger configuration. These applications can then perform trusted CI-related actions for that repository.

coderabbitai · 2026-09-16T12:54:21Z

Important

Review skipped

We couldn't safely recover the incremental review. No full review was started, and the last reviewed checkpoint was preserved. Retry later, or explicitly request a full review by commenting @coderabbitai full review.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Advanced

Run ID: 6436fe56-6ff7-4ad2-800c-2a0f0c89a74e

📥 Commits

Reviewing files that changed from the base of the PR and between e8ab82e and 377670e.

📒 Files selected for processing (1)

core-services/prow/02_config/stolostron/_pluginconfig.yaml

Included review availability: Your plan provides up to 2 included reviews per hour; 0 remain after this review.

Walkthrough

The stolostron repository configuration now trusts dependabot, red-hat-konflux, and redhat-chai-bot.

Changes

Trusted application configuration

Layer / File(s)	Summary
Update trusted applications `core-services/prow/02_config/stolostron/_pluginconfig.yaml`	The `trusted_apps` list includes `dependabot`, `red-hat-konflux`, and `redhat-chai-bot`.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Feature

Merge Risk: ⚪ Minimal · up to 37767

This configuration-only change adds the requested trusted bots without an established merge-blocking issue.

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The pull request changes only `core-services/prow/02_config/stolostron/_pluginconfig.yaml`. It adds three static entries to `trusted_apps`: `dependabot`, `red-hat-konflux`, and `redhat-chai-bot`. The …
Test Structure And Quality	✅ Passed	PASS: The pull request changes only one YAML configuration file, adding three entries under `trusted_apps`. It introduces no Ginkgo tests, cluster operations, assertions, waits, setup, or cleanup code…
Microshift Test Compatibility	✅ Passed	The pull request changes only the Prow plugin configuration. It adds `dependabot`, `red-hat-konflux`, and `redhat-chai-bot` to `trusted_apps`. It adds no Ginkgo tests and references no MicroShift-inco…
Single Node Openshift (Sno) Test Compatibility	✅ Passed	The pull request changes only one YAML configuration file. It adds `dependabot`, `red-hat-konflux`, and `redhat-chai-bot` to `trusted_apps`. The diff adds no Ginkgo tests or test declarations, so the …
Topology-Aware Scheduling Compatibility	✅ Passed	PASS: The pull request changes only `core-services/prow/02_config/stolostron/_pluginconfig.yaml`. The patch adds `dependabot`, `red-hat-konflux`, and `redhat-chai-bot` under Prow `trusted_apps`. It do…
Ote Binary Stdout Contract	✅ Passed	PASS: The pull request changes only `core-services/prow/02_config/stolostron/_pluginconfig.yaml`. It adds three entries to the Prow `trusted_apps` list. It does not change an OTE binary, process-level…
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	The pull request changes only `core-services/prow/02_config/stolostron/_pluginconfig.yaml`. It adds three entries to the `trusted_apps` list: `dependabot`, `red-hat-konflux`, and `redhat-chai-bot`. It…
No-Weak-Crypto	✅ Passed	PASS. The pull request changes only `core-services/prow/02_config/stolostron/_pluginconfig.yaml` by adding `dependabot`, `red-hat-konflux`, and `redhat-chai-bot` to `trusted_apps`. The diff contains n…
Container-Privileges	✅ Passed	The pull request changes only `core-services/prow/02_config/stolostron/_pluginconfig.yaml`. It adds three names under the Prow `triggers.trusted_apps` list. The patch contains none of `privileged`, `h…
No-Sensitive-Data-In-Logs	✅ Passed	PASS: The pull request changes only `core-services/prow/02_config/stolostron/_pluginconfig.yaml`. The three added lines add `dependabot`, `red-hat-konflux`, and `redhat-chai-bot` to `trusted_apps`. Th…
Title check	✅ Passed	The title clearly summarizes the main change: adding bots as trusted applications in the stolostron organization.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

_{Comment @coderabbitai help to get the list of available commands.}

- Dependabot - Konflux - Chai Bot Signed-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>

dhaiducek · 2026-09-16T13:17:37Z

/hold for reviews and team discussion

openshift-merge-bot · 2026-09-16T13:19:18Z

@dhaiducek: pj-rehearse could not automatically process this event because the request waited in queue for longer than 5 minutes. Use /pj-rehearse to trigger rehearsals manually.

Signed-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>

openshift-merge-bot · 2026-09-16T13:24:24Z

[REHEARSALNOTIFIER]
@dhaiducek: no rehearsable tests are affected by this change

Note: If this PR includes changes to step registry files (ci-operator/step-registry/) and you expected jobs to be found, try rebasing your PR onto the base branch. This helps pj-rehearse accurately detect changes when the base branch has moved forward.

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

openshift-merge-bot · 2026-09-16T13:26:52Z

@dhaiducek: pj-rehearse could not automatically process this event because the request waited in queue for longer than 5 minutes. Use /pj-rehearse to trigger rehearsals manually.

openshift-merge-bot · 2026-09-16T13:27:38Z

[REHEARSALNOTIFIER]
@dhaiducek: no rehearsable tests are affected by this change

Note: If this PR includes changes to step registry files (ci-operator/step-registry/) and you expected jobs to be found, try rebasing your PR onto the base branch. This helps pj-rehearse accurately detect changes when the base branch has moved forward.

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

openshift-ci · 2026-09-16T13:33:53Z

@dhaiducek: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

smithbw88

/lgtm

openshift-ci · 2026-09-16T17:01:47Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dhaiducek, gparvin, smithbw88

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~core-services/prow/02_config/open-cluster-management-io/OWNERS~~ [smithbw88]
~~core-services/prow/02_config/stolostron/OWNERS~~ [smithbw88]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-ci Bot requested review from Kyl-Bempah and smithbw88 September 16, 2026 12:56

openshift-merge-bot Bot added the rehearsals-ack Signifies that rehearsal jobs have been acknowledged label Sep 16, 2026

dhaiducek force-pushed the trust-bots branch from e8ab82e to 377670e Compare September 16, 2026 13:14

chore: add trusted bot users to the stoloston org

4570bb4

- Dependabot - Konflux - Chai Bot Signed-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>

dhaiducek force-pushed the trust-bots branch from 377670e to 4570bb4 Compare September 16, 2026 13:17

dhaiducek changed the title ~~chore: add the chai and konflux bots as trusted~~ chore: add bots as trusted in the stolostron org Sep 16, 2026

openshift-ci Bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Sep 16, 2026

dhaiducek added 2 commits September 16, 2026 09:19

chore: update stolostron OWNERS

a159ddb

Signed-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>

chore: update ocm-io OWNERS

b8c6d7b

Signed-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>

smithbw88 approved these changes Sep 16, 2026

View reviewed changes

openshift-ci Bot assigned smithbw88 Sep 16, 2026

openshift-ci Bot added lgtm Indicates that a PR is ready to be merged. approved Indicates a PR has been approved by an approver from all required OWNERS files. labels Sep 16, 2026

smithbw88 removed their assignment Sep 16, 2026

gparvin approved these changes Sep 16, 2026

View reviewed changes

openshift-ci Bot assigned gparvin Sep 16, 2026

Navigation Menu

Uh oh!

chore: add bots as trusted in the stolostron org - #85294

chore: add bots as trusted in the stolostron org#85294
dhaiducek wants to merge 3 commits into
openshift:mainfrom
dhaiducek:trust-bots

dhaiducek commented Sep 16, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Sep 16, 2026 •

edited

Loading

Review skipped

Uh oh!

dhaiducek commented Sep 16, 2026 •

edited

Loading

Uh oh!

openshift-merge-bot Bot commented Sep 16, 2026

Uh oh!

openshift-merge-bot Bot commented Sep 16, 2026

Uh oh!

openshift-merge-bot Bot commented Sep 16, 2026

Uh oh!

openshift-merge-bot Bot commented Sep 16, 2026

Uh oh!

openshift-ci Bot commented Sep 16, 2026

Uh oh!

smithbw88 left a comment

Uh oh!

openshift-ci Bot commented Sep 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

dhaiducek commented Sep 16, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Sep 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Walkthrough

Changes

Uh oh!

dhaiducek commented Sep 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

openshift-merge-bot Bot commented Sep 16, 2026

Uh oh!

openshift-merge-bot Bot commented Sep 16, 2026

Uh oh!

openshift-merge-bot Bot commented Sep 16, 2026

Uh oh!

openshift-merge-bot Bot commented Sep 16, 2026

Uh oh!

openshift-ci Bot commented Sep 16, 2026

Uh oh!

smithbw88 left a comment

Choose a reason for hiding this comment

Uh oh!

openshift-ci Bot commented Sep 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dhaiducek commented Sep 16, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Sep 16, 2026 •

edited

Loading

dhaiducek commented Sep 16, 2026 •

edited

Loading