[cert-manager-1.19] OCPBUGS-104580: Move Console resources from bundle to runtime with capability detection by bharath-b-rh · Pull Request #468 · openshift/cert-manager-operator

bharath-b-rh · 2026-08-05T07:01:02Z

This is a manual cherry-pick of #455

… discovery Move Console resource creation (ConsoleYAMLSample, ConsoleQuickStart) from the OLM bundle to operator runtime, fixing installs on consoleless clusters where OLM fails with "GroupVersionKind console.openshift.io/v1 not found". At startup, the operator uses ResourceDiscoverer to check if Console CRDs exist. If present, the console resources controller is created and applies resources using the typed console clientset. If absent (MicroShift, consoleless RAN/SNO), the controller is never started. Day-2 console enablement is picked up on operator restart. Key changes: - Use typed consoleclient.Interface instead of dynamic.Interface - CRD existence discovery at startup via utils.NewResourceDiscoverer - Console controller conditionally created in CertManagerControllerSet - Remove ClusterVersion capability polling (no more per-sync API calls) - Remove clusterversions RBAC (no longer needed) - Console assets loaded via generic loadAssets[T] with sigs.k8s.io/yaml

openshift-ci-robot · 2026-08-05T07:01:09Z

@bharath-b-rh: This pull request references Jira Issue OCPBUGS-85579, which is invalid:

expected the bug to be in one of the following states: NEW, ASSIGNED, POST, but it is Release Pending (Done) instead
expected Jira Issue OCPBUGS-85579 to depend on a bug in one of the following states: VERIFIED, RELEASE PENDING, CLOSED (ERRATA), CLOSED (CURRENT RELEASE), CLOSED (DONE), CLOSED (DONE-ERRATA), but no dependents were found

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

The bug has been updated to refer to the pull request using the external bug tracker.

Details

In response to this:

This is a manual cherry-pick of #455

/assign @mytreya-rh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

coderabbitai · 2026-08-05T07:01:12Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 40a4643c-e47a-4f25-9957-16847b76a014

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

_{Comment @coderabbitai help to get the list of available commands.}

openshift-ci-robot · 2026-08-05T07:03:19Z

@bharath-b-rh: This pull request references Jira Issue OCPBUGS-104580, which is valid. The bug has been moved to the POST state.

5 validation(s) were run on this bug

bug is open, matching expected state (open)
bug is in the state New, which is one of the valid states (NEW, ASSIGNED, POST)
release note text is set and does not match the template
dependent bug Jira Issue OCPBUGS-85579 is in the state Release Pending (Done), which is one of the valid states (VERIFIED, RELEASE PENDING, CLOSED (ERRATA), CLOSED (CURRENT RELEASE), CLOSED (DONE), CLOSED (DONE-ERRATA))
bug has dependents

No GitHub users were found matching the public email listed for the QA contact in Jira (amendiol@redhat.com), skipping review request.

The bug has been updated to refer to the pull request using the external bug tracker.

Details

In response to this:

This is a manual cherry-pick of #455

/assign @mytreya-rh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

bharath-b-rh · 2026-08-05T07:04:15Z

This is a cherrypick, hence adding the below labels
/approve
/label docs-approved
/label px-approved
/label qe-approved

openshift-ci-robot · 2026-08-05T07:04:26Z

@bharath-b-rh: This pull request references Jira Issue OCPBUGS-104580, which is valid.

5 validation(s) were run on this bug

bug is open, matching expected state (open)
bug is in the state POST, which is one of the valid states (NEW, ASSIGNED, POST)
release note text is set and does not match the template
dependent bug Jira Issue OCPBUGS-85579 is in the state Release Pending (Done), which is one of the valid states (VERIFIED, RELEASE PENDING, CLOSED (ERRATA), CLOSED (CURRENT RELEASE), CLOSED (DONE), CLOSED (DONE-ERRATA))
bug has dependents

No GitHub users were found matching the public email listed for the QA contact in Jira (amendiol@redhat.com), skipping review request.

Details

In response to this:

This is a manual cherry-pick of #455

/assign @mytreya-rh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

bharath-b-rh · 2026-08-05T10:52:29Z

/test e2e-operator-tech-preview

The vault-installer pod was rejected on clusters enforcing Pod Security restricted:latest because it ran with privileged=true. Helm install only needs API access via the service account, so use a restricted-compliant security context instead. Co-authored-by: Cursor <cursoragent@cursor.com>

Signed-off-by: Bharath B <bhb@redhat.com>

openshift-ci · 2026-08-05T17:36:19Z

@bharath-b-rh: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

mytreya-rh · 2026-08-06T04:41:41Z

/lgtm

openshift-ci · 2026-08-06T04:43:00Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: bharath-b-rh, mytreya-rh

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [bharath-b-rh,mytreya-rh]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-ci-robot · 2026-08-06T04:47:39Z

@bharath-b-rh: Jira Issue OCPBUGS-104580: All pull requests linked via external trackers have merged:

openshift/cert-manager-operator#468

Jira Issue OCPBUGS-104580 has been moved to the MODIFIED state.

Details

In response to this:

This is a manual cherry-pick of #455

/assign @mytreya-rh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

openshift-ci Bot assigned mytreya-rh Aug 5, 2026

openshift-ci Bot requested review from PillaiManish and TrilokGeer August 5, 2026 07:01

openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Aug 5, 2026

bharath-b-rh changed the title ~~OCPBUGS-85579: Move Console resources from bundle to runtime with CRD discovery~~ [cert-manager-1.19] OCPBUGS-104580: Move Console resources from bundle to runtime with capability detection Aug 5, 2026

openshift-ci-robot added jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. and removed jira/invalid-bug Indicates that a referenced Jira bug is invalid for the branch this PR is targeting. labels Aug 5, 2026

openshift-ci Bot added docs-approved Signifies that Docs has signed off on this PR px-approved Signifies that Product Support has signed off on this PR qe-approved Signifies that QE has signed off on this PR labels Aug 5, 2026

Arun Maurya and others added 3 commits August 5, 2026 19:11

fix(e2e): set runAsUser on Vault Helm installer pod

4e38ab2

NO-JIRA: Fix Vault e2e Helm installer pod PSA seccomp violation

98caa8b

Signed-off-by: Bharath B <bhb@redhat.com>

openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Aug 6, 2026

openshift-merge-bot Bot merged commit 6289161 into openshift:cert-manager-1.19 Aug 6, 2026
13 checks passed

openshift-ci-robot mentioned this pull request Aug 13, 2026

OCPBUGS-85579: Updates channels to skip v1.19.0 during upgrades openshift/cert-manager-operator-release#900

Merged

Navigation Menu

Uh oh!

[cert-manager-1.19] OCPBUGS-104580: Move Console resources from bundle to runtime with capability detection - #468

[cert-manager-1.19] OCPBUGS-104580: Move Console resources from bundle to runtime with capability detection#468
openshift-merge-bot[bot] merged 4 commits into
openshift:cert-manager-1.19from
bharath-b-rh:cert-manager-1.19

bharath-b-rh commented Aug 5, 2026

Uh oh!

openshift-ci-robot commented Aug 5, 2026

Uh oh!

coderabbitai Bot commented Aug 5, 2026 •

edited

Loading

Review skipped

Uh oh!

openshift-ci-robot commented Aug 5, 2026

Uh oh!

bharath-b-rh commented Aug 5, 2026

Uh oh!

openshift-ci-robot commented Aug 5, 2026

Uh oh!

bharath-b-rh commented Aug 5, 2026

Uh oh!

openshift-ci Bot commented Aug 5, 2026

Uh oh!

mytreya-rh commented Aug 6, 2026

Uh oh!

openshift-ci Bot commented Aug 6, 2026

Uh oh!

Uh oh!

openshift-ci-robot commented Aug 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

bharath-b-rh commented Aug 5, 2026

Uh oh!

openshift-ci-robot commented Aug 5, 2026

Uh oh!

coderabbitai Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

openshift-ci-robot commented Aug 5, 2026

Uh oh!

bharath-b-rh commented Aug 5, 2026

Uh oh!

openshift-ci-robot commented Aug 5, 2026

Uh oh!

bharath-b-rh commented Aug 5, 2026

Uh oh!

openshift-ci Bot commented Aug 5, 2026

Uh oh!

mytreya-rh commented Aug 6, 2026

Uh oh!

openshift-ci Bot commented Aug 6, 2026

Uh oh!

Uh oh!

openshift-ci-robot commented Aug 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

coderabbitai Bot commented Aug 5, 2026 •

edited

Loading