Skip to content

Require completed FBC tests and exact stage artifacts - #117

Merged
dfarrell07 merged 1 commit into
stolostron:mainfrom
dfarrell07:fix/fbc-exact-release-verification
Oct 13, 2026
Merged

dfarrell07 merged 1 commit into
stolostron:mainfrom
dfarrell07:fix/fbc-exact-release-verification

Conversation

@dfarrell07

@dfarrell07 dfarrell07 commented Oct 12, 2026 •

Copy link
Copy Markdown
Collaborator

FBC readiness could accept unfinished markers or select an older snapshot, and QE URL lookup could return a snapshot image without successful stage publication. Require completed aggregate/scenario evidence and exact Release → snapshot → immutable fragment identities, including the requested bundle version/digest.

Add optional exact snapshot selection without weakening merged-source or push-pipeline provenance. Verify all applicable active targets before returning stage URLs; --ocp selects an individual target. Remove snapshot publication fallback and human-row parsing. Raw mode performs no Jira writes; non-raw mode retains its existing authorization requirement.

Extend the existing onboarding contract to require the lifecycle task and source/parameter forwarding. Reuse existing helpers; add no release framework or evidence store. Manual recovery guidance is in #115; retained stage records are in #116.

Validation: full make test and mandatory commit hook pass, including incomplete/ambiguous evidence, invalid exact selection, wrong version/OCP/environment or registry, production artifacts, image/bundle mismatch, extraction failure and partial scope. The helper independently extracted all six live 0.23.4 catalogs and returned their verified QE digests. No policy or provenance gate is relaxed.

@openshift-ci

openshift-ci Bot commented Oct 12, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dfarrell07

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@dfarrell07
dfarrell07 force-pushed the fix/fbc-exact-release-verification branch from ac4db47 to 128898b Compare October 13, 2026 16:08
@dfarrell07 dfarrell07 changed the title Verify exact completed FBC publication Require completed FBC tests and exact stage artifacts Oct 13, 2026
Reject unfinished integration evidence and constrain requested snapshots
without relaxing source provenance. Verify successful stage publication,
matching snapshot images and bundle digests before printing catalog URLs.
Require the literal Quay registry and the onboarding lifecycle contract.

Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
@dfarrell07
dfarrell07 force-pushed the fix/fbc-exact-release-verification branch from 128898b to 53ca1eb Compare October 13, 2026 16:34
@dfarrell07
dfarrell07 merged commit c38c454 into stolostron:main Oct 13, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant