[release-4.21] OCPBUGS-70216: fix(Portieris): Fix Portieris by mounting emptyDir to './.trust' work dir #7422

openshift-cherrypick-robot · 2025-12-24T07:00:04Z

This is an automated cherry-pick of #7368

/assign rtheis

/cherrypick release-4.20

Since CPOv2, Portieris will crash if it can't write to ./trust. This fix mounts an empty dir to this path to allow Portieris to write its files inside its ReadOnlyRootFileSystem container.

openshift-ci-robot · 2025-12-24T07:00:08Z

@openshift-cherrypick-robot: Detected clone of Jira Issue OCPBUGS-67224 with correct target version. Will retitle the PR to link to the clone.
/retitle [release-4.21] OCPBUGS-70216: fix(Portieris): Fix Portieris by mounting emptyDir to './.trust' work dir

Details

In response to this:

This is an automated cherry-pick of #7368

/assign rtheis

/cherrypick release-4.20

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

coderabbitai · 2025-12-24T07:00:10Z

Important

Review skipped

Auto reviews are limited based on label configuration.

🚫 Review skipped — only excluded labels are configured. (1)

do-not-merge/work-in-progress

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

openshift-ci-robot · 2025-12-24T07:00:21Z

@openshift-cherrypick-robot: This pull request references Jira Issue OCPBUGS-70216, which is invalid:

release note text must be set and not match the template OR release note type must be set to "Release Note Not Required". For more information you can reference the OpenShift Bug Process.
expected dependent Jira Issue OCPBUGS-67224 to target a version in 4.22.0, but it targets "4.21.0" instead

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

The bug has been updated to refer to the pull request using the external bug tracker.

Details

In response to this:

This is an automated cherry-pick of #7368

/assign rtheis

/cherrypick release-4.20

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

TwoDCube · 2025-12-24T11:02:51Z

/retest

TwoDCube · 2025-12-24T17:20:39Z

/retest

TwoDCube · 2025-12-24T20:07:12Z

/retest

TwoDCube · 2025-12-25T20:52:25Z

/retest

TwoDCube · 2025-12-26T06:18:03Z

/retest

rtheis · 2025-12-31T15:29:50Z

/retest-required

rtheis · 2025-12-31T15:30:28Z

/jira refresh

openshift-ci-robot · 2025-12-31T15:30:34Z

@rtheis: This pull request references Jira Issue OCPBUGS-70216, which is invalid:

expected the bug to target either version "4.21." or "openshift-4.21.", but it targets "4.20.z" instead
release note text must be set and not match the template OR release note type must be set to "Release Note Not Required". For more information you can reference the OpenShift Bug Process.
expected dependent Jira Issue OCPBUGS-67224 to target a version in 4.22.0, but it targets "4.21.0" instead

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

Details

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

rtheis

/lgtm

TwoDCube · 2025-12-31T16:49:21Z

/jira refresh

openshift-ci-robot · 2025-12-31T16:49:28Z

@TwoDCube: This pull request references Jira Issue OCPBUGS-70216, which is valid. The bug has been moved to the POST state.

7 validation(s) were run on this bug

bug is open, matching expected state (open)
bug target version (4.21.0) matches configured target version for branch (4.21.0)
bug is in the state New, which is one of the valid states (NEW, ASSIGNED, POST)
release note type set to "Release Note Not Required"
dependent bug Jira Issue OCPBUGS-67224 is in the state MODIFIED, which is one of the valid states (MODIFIED, ON_QA, VERIFIED)
dependent Jira Issue OCPBUGS-67224 targets the "4.22.0" version, which is one of the valid target versions: 4.22.0
bug has dependents

No GitHub users were found matching the public email listed for the QA contact in Jira (yli2@redhat.com), skipping review request.

Details

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

rtheis · 2026-01-02T17:05:33Z

/retest-required

bryan-cox · 2026-01-05T11:01:59Z

/test e2e-aws-upgrade-hypershift-operator

rtheis · 2026-01-06T11:57:14Z

/retest-required

rtheis · 2026-01-07T14:08:55Z

/retest-required

rtheis · 2026-01-08T12:48:06Z

/retest-required

sjenning · 2026-01-08T16:16:08Z

unmodified bot pick
/approve
/verified by @rtheis

openshift-ci-robot · 2026-01-08T16:16:21Z

@sjenning: This PR has been marked as verified by @rtheis.

Details

In response to this:

unmodified bot pick
/approve
/verified by @rtheis

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

openshift-ci · 2026-01-08T16:16:25Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: openshift-cherrypick-robot, rtheis, sjenning

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [sjenning]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-ci-robot · 2026-01-08T17:32:29Z

/retest-required

Remaining retests: 0 against base HEAD 4be8590 and 2 for PR HEAD 41e51bf in total

rtheis · 2026-01-08T22:01:25Z

/retest-required

rtheis · 2026-01-09T00:42:21Z

@sjenning looks like we need an override on ci/prow/e2e-aws-upgrade-hypershift-operator

sjenning · 2026-01-09T01:52:45Z

/override ci/prow/e2e-aws-upgrade-hypershift-operator

openshift-ci · 2026-01-09T01:52:51Z

@sjenning: Overrode contexts on behalf of sjenning: ci/prow/e2e-aws-upgrade-hypershift-operator

Details

In response to this:

/override ci/prow/e2e-aws-upgrade-hypershift-operator

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

openshift-ci · 2026-01-09T01:52:52Z

@openshift-cherrypick-robot: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-aws-upgrade-hypershift-operator	`41e51bf`	link	true	`/test e2e-aws-upgrade-hypershift-operator`

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

openshift-ci-robot · 2026-01-09T01:56:19Z

@openshift-cherrypick-robot: Jira Issue OCPBUGS-70216: Some pull requests linked via external trackers have merged:

The following pull request, linked via external tracker, has not merged:

openshift/hypershift#7421 is open

All associated pull requests must be merged or unlinked from the Jira bug in order for it to move to the next state. Once unlinked, request a bug refresh with /jira refresh.

Jira Issue OCPBUGS-70216 has not been moved to the MODIFIED state.

This PR is marked as verified. If the remaining PRs listed above are marked as verified before merging, the issue will automatically be moved to VERIFIED after all of the changes from the PRs are available in an accepted nightly payload.

Details

In response to this:

This is an automated cherry-pick of #7368

/assign rtheis

/cherrypick release-4.20

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

openshift-cherrypick-robot · 2026-01-09T01:57:14Z

@openshift-cherrypick-robot: new pull request created: #7449

Details

In response to this:

This is an automated cherry-pick of #7368

/assign rtheis

/cherrypick release-4.20

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

TwoDCube · 2026-01-09T11:03:00Z

/jira refresh

openshift-ci-robot · 2026-01-09T11:03:06Z

@TwoDCube: Jira Issue Verification Checks: Jira Issue OCPBUGS-70216
✔️ This pull request was pre-merge verified.
✔️ All associated pull requests have merged.
✔️ All associated, merged pull requests were pre-merge verified.

Jira Issue OCPBUGS-70216 has been moved to the MODIFIED state and will move to the VERIFIED state when the change is available in an accepted nightly payload. 🕓

Details

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

openshift-merge-robot · 2026-01-13T22:44:02Z

Fix included in accepted release 4.21.0-0.nightly-2026-01-13-111112

fix(Portieris): Mount emptyDir to './.trust' work dir

41e51bf

Since CPOv2, Portieris will crash if it can't write to ./trust. This fix mounts an empty dir to this path to allow Portieris to write its files inside its ReadOnlyRootFileSystem container.

openshift-cherrypick-robot assigned rtheis Dec 24, 2025

openshift-cherrypick-robot mentioned this pull request Dec 24, 2025

OCPBUGS-67224: fix(Portieris): Fix Portieris by mounting emptyDir to './.trust' work dir #7368

Merged

4 tasks

openshift-ci bot changed the title ~~[release-4.21] OCPBUGS-67224: fix(Portieris): Fix Portieris by mounting emptyDir to './.trust' work dir~~ [release-4.21] OCPBUGS-70216: fix(Portieris): Fix Portieris by mounting emptyDir to './.trust' work dir Dec 24, 2025

openshift-ci-robot added jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. jira/invalid-bug Indicates that a referenced Jira bug is invalid for the branch this PR is targeting. labels Dec 24, 2025

openshift-ci bot added the do-not-merge/needs-area label Dec 24, 2025

openshift-ci bot requested review from bryan-cox and csrwng December 24, 2025 07:00

openshift-ci bot added area/control-plane-operator Indicates the PR includes changes for the control plane operator - in an OCP release and removed do-not-merge/needs-area labels Dec 24, 2025

TwoDCube mentioned this pull request Dec 24, 2025

[release-4.20] OCPBUGS-72409: fix(Portieris): Fix Portieris by mounting emptyDir to './.trust' work dir #7421

Merged

rtheis approved these changes Dec 31, 2025

View reviewed changes

openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Dec 31, 2025

openshift-ci-robot added the jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. label Dec 31, 2025

openshift-ci-robot removed the jira/invalid-bug Indicates that a referenced Jira bug is invalid for the branch this PR is targeting. label Dec 31, 2025

sjenning added the backport-risk-assessed Indicates a PR to a release branch has been evaluated and considered safe to accept. label Jan 8, 2026

openshift-ci-robot added the verified Signifies that the PR passed pre-merge verification criteria label Jan 8, 2026

openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jan 8, 2026

openshift-merge-bot bot merged commit 41d1da3 into openshift:release-4.21 Jan 9, 2026
16 checks passed

openshift-cherrypick-robot mentioned this pull request Jan 9, 2026

[release-4.20] OCPBUGS-72409: fix(Portieris): Fix Portieris by mounting emptyDir to './.trust' work dir #7449

Closed

[release-4.21] OCPBUGS-70216: fix(Portieris): Fix Portieris by mounting emptyDir to './.trust' work dir #7422

[release-4.21] OCPBUGS-70216: fix(Portieris): Fix Portieris by mounting emptyDir to './.trust' work dir #7422

Uh oh!

Conversation

openshift-cherrypick-robot commented Dec 24, 2025

Uh oh!

openshift-ci-robot commented Dec 24, 2025

Uh oh!

coderabbitai bot commented Dec 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

openshift-ci-robot commented Dec 24, 2025

Uh oh!

TwoDCube commented Dec 24, 2025

Uh oh!

TwoDCube commented Dec 24, 2025

Uh oh!

TwoDCube commented Dec 24, 2025

Uh oh!

TwoDCube commented Dec 25, 2025

Uh oh!

TwoDCube commented Dec 26, 2025

Uh oh!

rtheis commented Dec 31, 2025

Uh oh!

rtheis commented Dec 31, 2025

Uh oh!

openshift-ci-robot commented Dec 31, 2025

Uh oh!

rtheis left a comment

Choose a reason for hiding this comment

Uh oh!

TwoDCube commented Dec 31, 2025

Uh oh!

openshift-ci-robot commented Dec 31, 2025

Uh oh!

rtheis commented Jan 2, 2026

Uh oh!

bryan-cox commented Jan 5, 2026

Uh oh!

rtheis commented Jan 6, 2026

Uh oh!

rtheis commented Jan 7, 2026

Uh oh!

rtheis commented Jan 8, 2026

Uh oh!

sjenning commented Jan 8, 2026

Uh oh!

openshift-ci-robot commented Jan 8, 2026

Uh oh!

openshift-ci bot commented Jan 8, 2026

Uh oh!

openshift-ci-robot commented Jan 8, 2026

Uh oh!

rtheis commented Jan 8, 2026

Uh oh!

rtheis commented Jan 9, 2026

Uh oh!

sjenning commented Jan 9, 2026

Uh oh!

openshift-ci bot commented Jan 9, 2026

Uh oh!

openshift-ci bot commented Jan 9, 2026

Uh oh!

Uh oh!

openshift-ci-robot commented Jan 9, 2026

Uh oh!

openshift-cherrypick-robot commented Jan 9, 2026

Uh oh!

TwoDCube commented Jan 9, 2026

Uh oh!

openshift-ci-robot commented Jan 9, 2026

Uh oh!

openshift-merge-robot commented Jan 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

coderabbitai bot commented Dec 24, 2025 •

edited

Loading