Skip to content

prowgen: deprecate prowgen config#5012

Open
Prucek wants to merge 1 commit intoopenshift:mainfrom
Prucek:deprecate-prowgen-config
Open

prowgen: deprecate prowgen config#5012
Prucek wants to merge 1 commit intoopenshift:mainfrom
Prucek:deprecate-prowgen-config

Conversation

@Prucek
Copy link
Member

@Prucek Prucek commented Mar 13, 2026

This PR adds new fields to the ci-operator configuration to replace the .config.prowgen file, as a first step toward deprecating it.

New fields:

  • prowgen.private / prowgen.expose / prowgen.disable_rehearsals / prowgen.enable_secrets_store_csi_driver — top-level prowgen extras
  • tests[].slack_reporter — per-test Slack reporting config (with defaults for job_states_to_report and report_template)
  • tests[].disable_rehearsal — per-test rehearsal disable
  • tests[].max_concurrency — per-test max concurrency override
  • operator.skip_presubmits — skip operator bundle presubmit generation
  • openshift-priv org defaults to private: true automatically

Else:

  • CI-operator config fields take precedence over .config.prowgen
  • .config.prowgen fallback is fully preserved — no behavior change for unmigrated repos
  • TODO: Migration in o/release, then we can delete the code related

@openshift-ci-robot
Copy link
Contributor

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: automatic mode

@coderabbitai
Copy link

coderabbitai bot commented Mar 13, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: ba0c1754-5a8f-4b38-bda7-5442efba7425

📥 Commits

Reviewing files that changed from the base of the PR and between 6cbe1c3 and 7e141a9.

📒 Files selected for processing (21)
  • pkg/api/types.go
  • pkg/api/zz_generated.deepcopy.go
  • pkg/prowgen/jobbase.go
  • pkg/prowgen/prowgen.go
  • pkg/prowgen/prowgen_test.go
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_disable_all_rehearsals_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_disable_rehearsal_from_ci_operator_config_per_test.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_openshift_priv_org_defaults_to_private.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_periodic_with_custom_max_concurrency.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_postsubmit_with_custom_max_concurrency.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_private_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_private_with_expose_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_skip_operator_presubmits_from_ci_operator_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_takes_precedence_over_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_with_defaults.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_with_explicit_values.yaml
  • pkg/webreg/zz_generated.ci_operator_reference.go
  • test/integration/ci-operator-prowgen/input/config/prowgen-config/duper/prowgen-config-duper-master.yaml
  • test/integration/ci-operator-prowgen/output/jobs/prowgen-config/duper/prowgen-config-duper-master-periodics.yaml
  • test/integration/ci-operator-prowgen/output/jobs/prowgen-config/duper/prowgen-config-duper-master-postsubmits.yaml
  • test/integration/ci-operator-prowgen/output/jobs/prowgen-config/duper/prowgen-config-duper-master-presubmits.yaml
✅ Files skipped from review due to trivial changes (13)
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_skip_operator_presubmits_from_ci_operator_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_disable_rehearsal_from_ci_operator_config_per_test.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_disable_all_rehearsals_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_periodic_with_custom_max_concurrency.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_private_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_with_explicit_values.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_private_with_expose_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_with_defaults.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_takes_precedence_over_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_openshift_priv_org_defaults_to_private.yaml
  • test/integration/ci-operator-prowgen/input/config/prowgen-config/duper/prowgen-config-duper-master.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_postsubmit_with_custom_max_concurrency.yaml
  • test/integration/ci-operator-prowgen/output/jobs/prowgen-config/duper/prowgen-config-duper-master-postsubmits.yaml
🚧 Files skipped from review as they are similar to previous changes (3)
  • pkg/prowgen/jobbase.go
  • pkg/api/zz_generated.deepcopy.go
  • pkg/webreg/zz_generated.ci_operator_reference.go

Walkthrough

Adds new Slack reporting and per-test concurrency/rehearsal controls via new API types (SlackReporter, ProwgenExtras), threads those settings through prowgen job generation with explicit precedence, refactors private/expose/CSI checks in job base logic, updates deep-copy and webref schemas, and adds tests and fixtures.

Changes

Cohort / File(s) Summary
API Type Definitions
pkg/api/types.go, pkg/api/zz_generated.deepcopy.go
Add SlackReporter and ProwgenExtras types and defaults; extend ReleaseBuildConfiguration, TestStepConfiguration, and OperatorStepConfiguration with optional fields (Prowgen, SlackReporter, DisableRehearsal, MaxConcurrency, SkipPresubmits); add deepcopy implementations and deep-copy handling for new fields.
Prow Job Base Helpers
pkg/prowgen/jobbase.go
Replace pointer usage with ptr; add unexported helpers isPrivate, isExposed, isSecretsStoreCSIDriverEnabled; precompute derived private/exposed and apply them to decoration, OAuth token handling, hidden marking, and CSI-driver argument handling.
Prowgen Core Logic
pkg/prowgen/prowgen.go
Add maxConcurrency helper; extend option types to accept per-test SlackReporter and MaxConcurrency; change addSlackReporterConfig signature to prefer per-test reporter; thread per-test/global rehearsal disabling and per-test max concurrency into presubmit/postsubmit/periodic generation; combine operator skip flags for operator presubmits.
Unit Tests
pkg/prowgen/prowgen_test.go
Update imports to ptr; adjust fixtures to use new types; add/extend table-driven tests covering Slack reporter defaults/precedence, rehearsal disablement (global and per-test), operator presubmit skipping, private/expose behavior (including openshift-priv), and MaxConcurrency propagation.
Prowgen Test Fixtures
pkg/prowgen/testdata/*_slack_reporter_*.yaml, ..._postsubmit_with_custom_max_concurrency.yaml, ..._periodic_with_custom_max_concurrency.yaml
Add fixtures validating Slack reporter configurations (defaults, explicit, precedence) and fixtures asserting custom max_concurrency for periodic and postsubmit jobs.
Rehearsal/Privacy/Operator Fixtures
pkg/prowgen/testdata/...disable_all_rehearsals_*.yaml, ...disable_rehearsal_from_ci_operator_config_per_test.yaml, ...openshift_priv_org_defaults_to_private.yaml, ...private_from_ci_operator_prowgen_config.yaml, ...private_with_expose_from_ci_operator_prowgen_config.yaml, ...skip_operator_presubmits_from_ci_operator_config.yaml
Add fixtures exercising global/per-test rehearsal disabling, privacy/expose precedence (including openshift-priv org rule), and operator presubmit skip behavior.
Integration Input & Generated Output
test/integration/ci-operator-prowgen/input/.../prowgen-config-duper-master.yaml, test/integration/.../output/jobs/.../prowgen-config-duper-master-*.yaml
Add an integration input demonstrating prowgen extras, SlackReporter and max_concurrency settings, and corresponding generated presubmit/postsubmit/periodic job YAMLs reflecting those options.
Web Reference
pkg/webreg/zz_generated.ci_operator_reference.go
Update generated ci-operator YAML reference to document new fields: top-level prowgen block (private, expose, disable_rehearsals, enable_secrets_store_csi_driver), per-test disable_rehearsal, max_concurrency, slack_reporter schema, and operator.skip_presubmits.

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~60 minutes

🚥 Pre-merge checks | ✅ 7 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Docstring Coverage ⚠️ Warning Docstring coverage is 66.67% which is insufficient. The required threshold is 80.00%. Write docstrings for the functions missing them to satisfy the coverage threshold.
✅ Passed checks (7 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title 'prowgen: deprecate prowgen config' accurately captures the main objective of the PR, which is to introduce new ci-operator configuration fields as a deprecation path for the standalone .config.prowgen file.
Stable And Deterministic Test Names ✅ Passed This pull request does not use the Ginkgo testing framework; it uses standard Go testing with table-driven tests and t.Run() for subtest organization.
Test Structure And Quality ✅ Passed 11-12 new test cases added to TestGenerateJobs follow Go testing best practices, use table-driven testing with descriptive IDs, include proper error handling, employ fixture-based assertions, and match established codebase conventions.
Microshift Test Compatibility ✅ Passed This pull request does not introduce any Ginkgo e2e tests. The test changes consist exclusively of standard Go unit tests and test data files. Since the MicroShift compatibility check applies only to Ginkgo e2e tests, it is not applicable.
Single Node Openshift (Sno) Test Compatibility ✅ Passed The test file uses standard Go testing (testing.T), not Ginkgo e2e tests. Changes are configuration utilities, not e2e tests.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed This PR does not introduce any new Ginkgo e2e tests. Test changes consist of unit tests using Go's standard testing package, test fixture YAML files, and integration test configuration files. Since no Ginkgo e2e tests are present, the check is not applicable and passes.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
📝 Coding Plan
  • Generate coding plan for human review comments

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 golangci-lint (2.11.3)

Command failed


Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci openshift-ci bot requested review from liangxia and pruan-rht March 13, 2026 15:29
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Mar 13, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Prucek

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Mar 13, 2026
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@pkg/api/types.go`:
- Around line 52-64: The ProwgenExtras boolean toggles (Private, Expose,
DisableRehearsals, EnableSecretsStoreCSIDriver) and
OperatorStepConfiguration.SkipPresubmits must be made tri-state so omitted vs
explicit-false can be distinguished; change their types from bool to *bool
(e.g., Private *bool) and update downstream checks in isPrivate(), isExposed(),
isSecretsStoreCSIDriverEnabled() and any logic using SkipPresubmits to test for
nil before dereferencing (treat nil as “unset” and only honor explicit
true/false when pointer is non-nil), keeping existing fallback behavior to
legacy checks.

In
`@test/integration/ci-operator-prowgen/input/config/prowgen-config/duper/prowgen-config-duper-master.yaml`:
- Around line 16-19: Update the CPU quantity units for the YAML fixture: replace
limits.cpu value "500Mi" with "500m" and requests.cpu value "10Mi" with "10m" so
CPU uses millicores; locate the entries under the limits and requests keys
(limits.cpu, requests.cpu) and change the unit suffix from "Mi" to "m".

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 8a423303-e44b-4b84-9d62-5200cef147ca

📥 Commits

Reviewing files that changed from the base of the PR and between 2b0ca42 and d3f4082.

📒 Files selected for processing (19)
  • pkg/api/types.go
  • pkg/prowgen/jobbase.go
  • pkg/prowgen/prowgen.go
  • pkg/prowgen/prowgen_test.go
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_disable_all_rehearsals_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_disable_rehearsal_from_ci_operator_config_per_test.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_openshift_priv_org_defaults_to_private.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_periodic_with_custom_max_concurrency.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_postsubmit_with_custom_max_concurrency.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_private_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_private_with_expose_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_skip_operator_presubmits_from_ci_operator_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_takes_precedence_over_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_with_defaults.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_with_explicit_values.yaml
  • test/integration/ci-operator-prowgen/input/config/prowgen-config/duper/prowgen-config-duper-master.yaml
  • test/integration/ci-operator-prowgen/output/jobs/prowgen-config/duper/prowgen-config-duper-master-periodics.yaml
  • test/integration/ci-operator-prowgen/output/jobs/prowgen-config/duper/prowgen-config-duper-master-postsubmits.yaml
  • test/integration/ci-operator-prowgen/output/jobs/prowgen-config/duper/prowgen-config-duper-master-presubmits.yaml

pkg/api/types.go Outdated
Comment on lines +52 to +64
type ProwgenExtras struct {
// Private indicates that generated jobs should be marked as hidden
// from display in deck and that they should mount appropriate git credentials
// to clone the repository under test.
Private bool `json:"private,omitempty"`
// Expose declares that jobs should not be hidden from view in deck if they
// are private. This field has no effect if private is not set.
Expose bool `json:"expose,omitempty"`
// DisableRehearsals prevents all tests in this config from being rehearsed.
DisableRehearsals bool `json:"disable_rehearsals,omitempty"`
// EnableSecretsStoreCSIDriver indicates that jobs should use the new CSI Secrets Store
// mechanism to handle multi-stage credentials secrets.
EnableSecretsStoreCSIDriver bool `json:"enable_secrets_store_csi_driver,omitempty"`
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🌐 Web query:

In Go, when unmarshalling JSON/YAML into a bool field tagged with omitempty, can code distinguish an omitted field from an explicit falsewithout using*bool or a custom type?

💡 Result:

No—not when you unmarshal directly into a struct field of type bool.

  • omitempty affects marshaling only; it “has no effect when unmarshaling.” [1] (Same idea in gopkg.in/yaml.v3: the omitempty flag is described as a marshaling control.) [2]
  • When a field is omitted in the input, Go’s unmarshaler simply doesn’t assign it, so it stays at the Go zero value; for bool that’s false, which is indistinguishable from an explicitly provided false. [3]

If you can’t use *bool or a custom type, the remaining option is an out-of-band presence check, e.g. unmarshal into a map[string]json.RawMessage / map[string]any (or yaml.Node) to see whether the key exists, then decode into your struct.

Sources: [1] encoding/json/v2 docs on struct tags (omitempty has no effect when unmarshaling) https://pkg.go.dev/encoding/json/v2, [2] yaml.v3 docs (omitempty flag described under Marshal/tag behavior) https://pkg.go.dev/gopkg.in/yaml.v3, [3] Eli Bendersky on missing fields keeping Go zero values during json.Unmarshal https://eli.thegreenplace.net/2020/optional-json-fields-in-go/


🏁 Script executed:

# Locate and inspect the exact field locations mentioned
echo "=== Checking ProwgenExtras in pkg/api/types.go ==="
rg -n "type ProwgenExtras" pkg/api/types.go -A 15

echo -e "\n=== Checking lines 2759-2760 in pkg/api/types.go ==="
sed -n '2755,2765p' pkg/api/types.go

echo -e "\n=== Checking if *bool is already used in types.go ==="
rg "\*bool" pkg/api/types.go | head -20

echo -e "\n=== Checking downstream helpers in jobbase.go ==="
rg -n "isPrivate|isExposed|isSecretsStoreCSIDriverEnabled" pkg/prowgen/jobbase.go -A 3

Repository: openshift/ci-tools

Length of output: 3903


🏁 Script executed:

# Check how ProwgenExtras fields are accessed in pkg/prowgen/prowgen.go
echo "=== Checking GenerateJobs usage of Prowgen fields ==="
rg -n "\.Private|\.Expose|\.DisableRehearsals|\.EnableSecretsStoreCSIDriver" pkg/prowgen/ -B 2 -A 2

Repository: openshift/ci-tools

Length of output: 1751


🏁 Script executed:

# Verify the OperatorStepConfiguration struct location
echo "=== Checking OperatorStepConfiguration and SkipPresubmits ==="
rg -n "type OperatorStepConfiguration" pkg/api/types.go -A 30 | grep -i "skip"

Repository: openshift/ci-tools

Length of output: 317


Use tri-state booleans for the migrated prowgen toggles.

These fields need "set vs unset" semantics. Plain bool cannot distinguish between omitted and explicit false during JSON/YAML unmarshal—both result in false. This breaks fallback behavior: an openshift-priv repo migrating only prowgen.expose: true will unmarshal private as false, and the helper logic in pkg/prowgen/jobbase.go will return false instead of falling back to the legacy check. The same issue affects all four ProwgenExtras fields and OperatorStepConfiguration.SkipPresubmits.

Use *bool instead. The codebase already follows this pattern for optional booleans (AlwaysRun, RestrictNetworkAccess, etc.). Downstream code in isPrivate(), isExposed(), and isSecretsStoreCSIDriverEnabled() will need to check for nil before dereferencing, which enables correct fallback semantics.

Suggested direction
 type ProwgenExtras struct {
-	Private bool `json:"private,omitempty"`
-	Expose bool `json:"expose,omitempty"`
-	DisableRehearsals bool `json:"disable_rehearsals,omitempty"`
-	EnableSecretsStoreCSIDriver bool `json:"enable_secrets_store_csi_driver,omitempty"`
+	Private *bool `json:"private,omitempty"`
+	Expose *bool `json:"expose,omitempty"`
+	DisableRehearsals *bool `json:"disable_rehearsals,omitempty"`
+	EnableSecretsStoreCSIDriver *bool `json:"enable_secrets_store_csi_driver,omitempty"`
 }
 ...
-	SkipPresubmits bool `json:"skip_presubmits,omitempty"`
+	SkipPresubmits *bool `json:"skip_presubmits,omitempty"`

Also applies to: 2760

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@pkg/api/types.go` around lines 52 - 64, The ProwgenExtras boolean toggles
(Private, Expose, DisableRehearsals, EnableSecretsStoreCSIDriver) and
OperatorStepConfiguration.SkipPresubmits must be made tri-state so omitted vs
explicit-false can be distinguished; change their types from bool to *bool
(e.g., Private *bool) and update downstream checks in isPrivate(), isExposed(),
isSecretsStoreCSIDriverEnabled() and any logic using SkipPresubmits to test for
nil before dereferencing (treat nil as “unset” and only honor explicit
true/false when pointer is non-nil), keeping existing fallback behavior to
legacy checks.

@Prucek Prucek force-pushed the deprecate-prowgen-config branch from d3f4082 to 6cbe1c3 Compare March 20, 2026 09:31
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)
pkg/prowgen/prowgen.go (1)

228-239: ⚠️ Potential issue | 🟠 Major

Presubmits still ignore tests[].max_concurrency.

The periodic and postsubmit branches propagate element.MaxConcurrency, but the presubmit path only forwards element.SlackReporter. As a result, the new field has no effect for ordinary presubmit jobs. Thread MaxConcurrency through generatePresubmitOptions and apply it when constructing the presubmit as well.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@pkg/prowgen/prowgen.go` around lines 228 - 239, The presubmit path in
handlePresubmit doesn't propagate element.MaxConcurrency into the
generatePresubmitOptions, so presubmits ignore tests[].max_concurrency; update
the call inside handlePresubmit (where generatePresubmitForTest is invoked and
the closure sets options.*) to set the MaxConcurrency option from element (e.g.,
options.MaxConcurrency = element.MaxConcurrency) so generatePresubmitForTest and
the resulting presubmit use the provided max concurrency value (follow the same
symbol naming used in the periodic/postsubmit branches and in
generatePresubmitOptions).
♻️ Duplicate comments (2)
pkg/api/types.go (2)

52-64: ⚠️ Potential issue | 🟠 Major

Migrated prowgen booleans still need tri-state semantics.

These fields are supposed to override .config.prowgen, but plain bool collapses “unset” and explicit false during unmarshal. That means prowgen.private, prowgen.expose, prowgen.disable_rehearsals, prowgen.enable_secrets_store_csi_driver, and operator.skip_presubmits still cannot honor precedence when the migrated value is false. Use *bool and only fall back to legacy config when the pointer is nil.

Also applies to: 2759-2760

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@pkg/api/types.go` around lines 52 - 64, The migrated prowgen boolean fields
in the ProwgenExtras struct (Private, Expose, DisableRehearsals,
EnableSecretsStoreCSIDriver) must be tri-state to distinguish "unset" from
explicit false; change their types from bool to *bool and update any code that
reads these fields to treat nil as "not set" and fall back to the legacy
.config.prowgen value (i.e., only override legacy config when the pointer is
non-nil), and apply the same change/handling for operator.skip_presubmits where
applicable.

914-915: ⚠️ Potential issue | 🟠 Major

disable_rehearsal has the same precedence bug.

With a plain bool, disable_rehearsal: false is indistinguishable from omission. In the current generation logic, that means a test still matched by legacy disabled_rehearsals cannot be re-enabled from ci-operator config. This field also needs to be *bool, with fallback to legacy config only when it is nil.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@pkg/api/types.go` around lines 914 - 915, The DisableRehearsal field in the
struct should be changed from a plain bool to a pointer (*bool) so omission is
distinguishable from explicit false; update the declaration of DisableRehearsal
(the struct field named DisableRehearsal in pkg/api/types.go) to use *bool and
leave the json tag as-is, and then update any code that reads this field
(generation/validation/merge logic that currently falls back to legacy
disabled_rehearsals) to only consult the legacy disabled_rehearsals when
DisableRehearsal is nil, otherwise honor the explicit true/false value.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@pkg/api/zz_generated.deepcopy.go`:
- Around line 1610-1623: Update the ProwgenExtras struct so the fields Private,
Expose, DisableRehearsals, and EnableSecretsStoreCSIDriver are pointers to bool
(*bool) instead of plain bool, then regenerate the deepcopy code so
DeepCopyInto/DeepCopy reflect those pointer types; locate the struct definition
for ProwgenExtras (where those fields are declared), change the types to *bool,
and run the repository's codegen/deepcopy generator to overwrite
pkg/api/zz_generated.deepcopy.go so the new pointer semantics are preserved.

---

Outside diff comments:
In `@pkg/prowgen/prowgen.go`:
- Around line 228-239: The presubmit path in handlePresubmit doesn't propagate
element.MaxConcurrency into the generatePresubmitOptions, so presubmits ignore
tests[].max_concurrency; update the call inside handlePresubmit (where
generatePresubmitForTest is invoked and the closure sets options.*) to set the
MaxConcurrency option from element (e.g., options.MaxConcurrency =
element.MaxConcurrency) so generatePresubmitForTest and the resulting presubmit
use the provided max concurrency value (follow the same symbol naming used in
the periodic/postsubmit branches and in generatePresubmitOptions).

---

Duplicate comments:
In `@pkg/api/types.go`:
- Around line 52-64: The migrated prowgen boolean fields in the ProwgenExtras
struct (Private, Expose, DisableRehearsals, EnableSecretsStoreCSIDriver) must be
tri-state to distinguish "unset" from explicit false; change their types from
bool to *bool and update any code that reads these fields to treat nil as "not
set" and fall back to the legacy .config.prowgen value (i.e., only override
legacy config when the pointer is non-nil), and apply the same change/handling
for operator.skip_presubmits where applicable.
- Around line 914-915: The DisableRehearsal field in the struct should be
changed from a plain bool to a pointer (*bool) so omission is distinguishable
from explicit false; update the declaration of DisableRehearsal (the struct
field named DisableRehearsal in pkg/api/types.go) to use *bool and leave the
json tag as-is, and then update any code that reads this field
(generation/validation/merge logic that currently falls back to legacy
disabled_rehearsals) to only consult the legacy disabled_rehearsals when
DisableRehearsal is nil, otherwise honor the explicit true/false value.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 588b2109-f9fa-4891-947c-2d638cead2b4

📥 Commits

Reviewing files that changed from the base of the PR and between d3f4082 and 6cbe1c3.

📒 Files selected for processing (21)
  • pkg/api/types.go
  • pkg/api/zz_generated.deepcopy.go
  • pkg/prowgen/jobbase.go
  • pkg/prowgen/prowgen.go
  • pkg/prowgen/prowgen_test.go
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_disable_all_rehearsals_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_disable_rehearsal_from_ci_operator_config_per_test.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_openshift_priv_org_defaults_to_private.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_periodic_with_custom_max_concurrency.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_postsubmit_with_custom_max_concurrency.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_private_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_private_with_expose_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_skip_operator_presubmits_from_ci_operator_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_takes_precedence_over_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_with_defaults.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_with_explicit_values.yaml
  • pkg/webreg/zz_generated.ci_operator_reference.go
  • test/integration/ci-operator-prowgen/input/config/prowgen-config/duper/prowgen-config-duper-master.yaml
  • test/integration/ci-operator-prowgen/output/jobs/prowgen-config/duper/prowgen-config-duper-master-periodics.yaml
  • test/integration/ci-operator-prowgen/output/jobs/prowgen-config/duper/prowgen-config-duper-master-postsubmits.yaml
  • test/integration/ci-operator-prowgen/output/jobs/prowgen-config/duper/prowgen-config-duper-master-presubmits.yaml
✅ Files skipped from review due to trivial changes (13)
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_skip_operator_presubmits_from_ci_operator_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_disable_all_rehearsals_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_disable_rehearsal_from_ci_operator_config_per_test.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_postsubmit_with_custom_max_concurrency.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_with_explicit_values.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_openshift_priv_org_defaults_to_private.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_private_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/jobbase.go
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_takes_precedence_over_prowgen_config.yaml
  • test/integration/ci-operator-prowgen/output/jobs/prowgen-config/duper/prowgen-config-duper-master-presubmits.yaml
  • test/integration/ci-operator-prowgen/input/config/prowgen-config/duper/prowgen-config-duper-master.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_periodic_with_custom_max_concurrency.yaml
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_slack_reporter_from_ci_operator_config_with_defaults.yaml
🚧 Files skipped from review as they are similar to previous changes (3)
  • pkg/prowgen/testdata/zz_fixture_TestGenerateJobs_private_with_expose_from_ci_operator_prowgen_config.yaml
  • pkg/prowgen/prowgen_test.go
  • test/integration/ci-operator-prowgen/output/jobs/prowgen-config/duper/prowgen-config-duper-master-periodics.yaml

@Prucek
Copy link
Member Author

Prucek commented Mar 20, 2026

/test e2e

@openshift-ci-robot
Copy link
Contributor

Scheduling tests matching the pipeline_run_if_changed or not excluded by pipeline_skip_if_only_changed parameters:
/test e2e

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Mar 20, 2026

@Prucek: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/breaking-changes 7e141a9 link false /test breaking-changes

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@openshift-ci-robot
Copy link
Contributor

Tests from second stage were triggered manually. Pipeline can be controlled only manually, until HEAD changes. Use command to trigger second stage.

1 similar comment
@openshift-ci-robot
Copy link
Contributor

Tests from second stage were triggered manually. Pipeline can be controlled only manually, until HEAD changes. Use command to trigger second stage.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants