[red-hat-konflux]

Image created from 'https://github.com/openshift/coco-console-plugin?rev=5aa066af617ad3331f23416407e93df46a9d296d'

This PR contains the following updates:

Package	Update	Change
quay.io/redhat-user-workloads/ose-osc-tenant/coco-console-plugin	digest	61a5578 -> 2be3271

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test
This is Konflux nudging PR, not Mintmaker.

[openshift-merge-bot]

Pipeline controller notification

This PR uses the pipeline controller for second-stage tests. Selection and triggering follow the repository configuration.

Use /test ? to list jobs and /pipeline help for commands.

[coderabbitai]

No actionable comments were generated in the recent review.

Walkthrough

The CoCo console plugin image digest changed in the manager deployment and the CSV manifest. The image repository and tag remain unchanged. The CSV RELATED_IMAGE_COCO_CONSOLE_PLUGIN environment variable and relatedImages entry now use the same updated digest.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Suggested reviewers: littlejawa, esposem

Merge Risk: Minimal · up to cb172

The digest update is consistent across the deployment and CSV manifests, so no merge-blocking risk was identified.

Pre-merge checks: 15

Check name	Status	Explanation
Title check		The title names the main change: the coco-console-plugin image reference is updated to a new revision (2be3271). The changeset updates that digest in the CSV and manager.yaml. The title uses the conve…
Description check		The description states the source image and revision, the digest change from 61a5578 to 2be3271, and the Renovate/Konflux automerge configuration. These details match the changeset, which updates the …
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names		The pull request changes only the CoCo console plugin image digest in two YAML manifests. It does not add or modify Ginkgo test titles or other test code, so the stable and deterministic test-name che…
Test Structure And Quality		PASS: The pull request changes only two YAML image references. The authoritative diff contains no Ginkgo test files or It blocks, so the listed test-structure requirements do not apply.
Microshift Test Compatibility		PASS: The pull request changes only two image digest values in YAML manifests. It adds no Ginkgo e2e tests and introduces no MicroShift API or feature usage.
Single Node Openshift (Sno) Test Compatibility		The pull request changes only two YAML manifests and updates the CoCo console plugin image digest. It adds no Ginkgo e2e tests or other test behavior that could make multi-node or HA assumptions.
Topology-Aware Scheduling Compatibility		The pull request changes only the CoCo console plugin image digest in config/manager/manager.yaml and the CSV relatedImages and environment entries. It adds no replicas, affinity, topology spread,…
Ote Binary Stdout Contract		PASS. The pull request changes only two YAML image digest references for coco-console-plugin. It does not change Go process-level code, OTE setup, logging, or stdout writes. The OTE Binary Stdout Co…
Ipv6 And Disconnected Network Test Compatibility		The pull request changes only two YAML image references. It adds no Ginkgo e2e tests and introduces no IPv4 assumptions or external connectivity requirements.
No-Weak-Crypto		The pull request changes only two references to the CoCo console plugin image digest. Both changed digests use SHA-256 (sha256:2be327...). No MD5, SHA-1, DES, RC4, 3DES, Blowfish, ECB mode, custom c…
Container-Privileges		The pull request changes only the CoCo console plugin image digest in two manifests. It adds no privileged, hostPID, hostNetwork, hostIPC, SYS_ADMIN, root, or allowPrivilegeEscalation settings. The af…
No-Sensitive-Data-In-Logs		PASS. The pull request changes only two image digest references for coco-console-plugin in deployment configuration and CSV metadata. It adds no logging code or log output that could expose sensitiv…

Full details: Title check

Explanation

The title names the main change: the coco-console-plugin image reference is updated to a new revision (2be3271). The changeset updates that digest in the CSV and manager.yaml. The title uses the conventional 'chore(deps)' prefix and is specific enough for a reviewer scanning history.

Full details: Description check

Explanation

The description states the source image and revision, the digest change from 61a5578 to 2be3271, and the Renovate/Konflux automerge configuration. These details match the changeset, which updates the coco-console-plugin digest in the CSV and manager deployment.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (2 skipped: 2 unsupported.)

Full details: Stable And Deterministic Test Names

Explanation

The pull request changes only the CoCo console plugin image digest in two YAML manifests. It does not add or modify Ginkgo test titles or other test code, so the stable and deterministic test-name check is not applicable.

Full details: Topology-Aware Scheduling Compatibility

Explanation

The pull request changes only the CoCo console plugin image digest in config/manager/manager.yaml and the CSV relatedImages and environment entries. It adds no replicas, affinity, topology spread, node selectors, tolerations, or PDB settings. Therefore, it introduces no topology scheduling constraint.

Full details: Ote Binary Stdout Contract

Explanation

PASS. The pull request changes only two YAML image digest references for coco-console-plugin. It does not change Go process-level code, OTE setup, logging, or stdout writes. The OTE Binary Stdout Contract failure condition is not introduced.

Full details: No-Weak-Crypto

Explanation

The pull request changes only two references to the CoCo console plugin image digest. Both changed digests use SHA-256 (sha256:2be327...). No MD5, SHA-1, DES, RC4, 3DES, Blowfish, ECB mode, custom crypto, or secret/token comparisons were introduced.

Full details: Container-Privileges

Explanation

The pull request changes only the CoCo console plugin image digest in two manifests. It adds no privileged, hostPID, hostNetwork, hostIPC, SYS_ADMIN, root, or allowPrivilegeEscalation settings. The affected containers retain allowPrivilegeEscalation: false, drop ALL capabilities, and runAsNonRoot: true.

Full details: No-Sensitive-Data-In-Logs

Explanation

PASS. The pull request changes only two image digest references for coco-console-plugin in deployment configuration and CSV metadata. It adds no logging code or log output that could expose sensitive data.

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

Recent review info

Run configuration

• Source mode: Auto
• Repository: openshift/sandboxed-containers-operator
• Branch: devel
• File: .coderabbit.yaml
• Commit: e9e9cf9
• Layers: Repository YAML (base), Central YAML (inherited)
• Review profile: CHILL
• Plan: Enterprise
• Run ID: d72eb3dd-1361-488b-9161-599bf581296d

Commits

Reviewing files that changed from the base of the PR and between e9e9cf9 and cb1729d.

Files selected for processing: 2

• bundle/manifests/sandboxed-containers-operator.clusterserviceversion.yaml
• config/manager/manager.yaml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

[littlejawa]

/ok-to-test

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.