Skip to content

HIVE-3128: CVE-2026-33186: Bump golang/grpc#2876

Open
2uasimojo wants to merge 1 commit intoopenshift:masterfrom
2uasimojo:HIVE-3128/cve-golang-grpc
Open

HIVE-3128: CVE-2026-33186: Bump golang/grpc#2876
2uasimojo wants to merge 1 commit intoopenshift:masterfrom
2uasimojo:HIVE-3128/cve-golang-grpc

Conversation

@2uasimojo
Copy link
Member

@2uasimojo 2uasimojo commented Mar 20, 2026

https://www.cve.org/CVERecord?id=CVE-2026-33186

Summary by CodeRabbit

  • New Features

    • Expanded identity provider schema with enhanced LDAP, OpenID, and request-header authentication configuration options.
  • Improvements

    • Enhanced HTTP/2 connection state management and concurrency handling for better reliability.
    • Added bootstrap configuration validation for stats eviction settings.
  • Chores

    • Updated Go module dependencies including security and stability patches.
    • Reformatted CRD manifest files for consistency.
    • Optimized protobuf validation code generation.

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Mar 20, 2026
@openshift-ci-robot
Copy link

openshift-ci-robot commented Mar 20, 2026

@2uasimojo: This pull request references HIVE-3128 which is a valid jira issue.

Details

In response to this:

https://www.cve.org/CVERecord?id=CVE-2026-33186

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@2uasimojo
Copy link
Member Author

/assign @suhanime

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Mar 20, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: 2uasimojo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Mar 20, 2026
@coderabbitai
Copy link

coderabbitai bot commented Mar 20, 2026

📝 Walkthrough

Walkthrough

This pull request updates indirect Go module dependencies (golang.org/x/net, golang.org/x/text, golang.org/x/crypto, and others), refactors HTTP/2 transport connection state management with internal hooks and concurrency tracking, and applies formatting standardization (document markers, indentation) across CustomResourceDefinition YAML files. It also includes generated protobuf validation code updates and new validation logic for Bootstrap StatsEviction configuration.

Changes

Cohort / File(s) Summary
Go Module Dependencies
apis/go.mod, go.mod, apis/vendor/modules.txt
Updated indirect dependency versions: golang.org/x/net (v0.47.0→v0.48.0), golang.org/x/text (v0.31.0→v0.32.0), golang.org/x/crypto (v0.45.0→v0.46.0), golang.org/x/oauth2 (v0.32.0→v0.34.0), and others. Removed github.com/zeebo/errs indirect requirement.
HTTP/2 Transport State Management
apis/vendor/golang.org/x/net/http2/transport.go
Added internal state tracking (readBeforeStreamID, internalStateHook) and concurrency management methods (isUsableLocked(), canReserveLocked(), availableLocked()). Refactored connection usability logic and dead-connection retry behavior. New netHTTPClientConn wrapper type implementing reservation/capacity methods. Added state hook propagation on connection close and stream cleanup.
CRD Manifest Formatting
config/crds/hive.openshift.io_*.yaml, config/crds/hiveinternal.openshift.io_*.yaml
Added YAML document start markers (---) and standardized indentation/restructuring of spec.versions and schema blocks across 18 CRD files. No semantic schema changes; formatting only. Most files have simple marker additions; several include more extensive indentation refactoring (e.g., clusterdeploymentcustomizations, clusterdeprovisions, clusterrelocates).
CRD Schema Enhancement
config/crds/hive.openshift.io_selectorsyncidentityproviders.yaml
Expanded identity provider sub-schemas under spec.identityProviders[]: added fields for LDAP (bindDN, bindPassword, insecure, url), OpenID (claims, extraAuthorizeParameters, extraScopes, issuer), and request-header authentication (loginURL, nameHeaders, preferredUsernameHeaders, etc.). Document marker and formatting also applied.
Protobuf Validation Slice Optimization
vendor/github.com/cncf/xds/go/udpa/annotations/*.pb.validate.go, vendor/github.com/cncf/xds/go/xds/**/*.pb.validate.go
Updated Error\(\) methods across ~35 generated validation files to preallocate msgs slice with make([]string, 0, len(m)) instead of nil declaration. Preserves loop and concatenation behavior; changes only allocation strategy.
Bazel Build Configuration
vendor/cel.dev/expr/BUILD.bazel, vendor/cel.dev/expr/MODULE.bazel
Removed dependency on @org_golang_google_genproto_googleapis_rpc//status:go_default_library from BUILD.bazel. Updated MODULE.bazel: removed Google API bazel\_deps, updated protobuf (27.0→27.1) and Go SDK (1.22.0→1.23.0).
Bootstrap Validation Enhancement
vendor/github.com/envoyproxy/go-control-plane/envoy/config/bootstrap/v3/bootstrap.pb.validate.go
Added StatsEviction oneof validation with duration parsing and minimum 1ms interval enforcement in Bootstrap.validate().
Envoy Config Validation Updates
vendor/github.com/envoyproxy/go-control-plane/envoy/config/accesslog/v3/accesslog.pb.validate.go, vendor/github.com/envoyproxy/go-control-plane/envoy/config/common/matcher/v3/matcher.pb.validate.go
ResponseFlagFilter now recognizes UDO flag value. Matcher\_OnMatch validation includes clarifying comment on KeepMatching.
Header Mutation Validation
vendor/github.com/envoyproxy/go-control-plane/envoy/config/common/mutation_rules/v3/mutation_rules.pb.validate.go
New generated validation file for header mutation rule messages, including Validate()/ValidateAll() methods, multi-error and validation-error types, and regex-based constraints on HeaderMutation.Remove.

Poem

🐰 Dependencies hop to newer lands,

While CRD files tidy their strands,

State hooks whisper through HTTP/2 flows,

Validation rules blossom as logic grows—

A cleaner, keener, connected compose! ✨

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The PR title references a specific CVE (CVE-2026-33186) and mentions bumping golang/grpc, which aligns with the primary change of updating golang.org/x/* dependencies and google.golang.org/grpc in go.mod.
Docstring Coverage ✅ Passed Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci-robot
Copy link

openshift-ci-robot commented Mar 20, 2026

@2uasimojo: This pull request references HIVE-3128 which is a valid jira issue.

Details

In response to this:

https://www.cve.org/CVERecord?id=CVE-2026-33186

Summary by CodeRabbit

  • New Features

  • Expanded identity provider schema with enhanced LDAP, OpenID, and request-header authentication configuration options.

  • Improvements

  • Enhanced HTTP/2 connection state management and concurrency handling for better reliability.

  • Added bootstrap configuration validation for stats eviction settings.

  • Chores

  • Updated Go module dependencies including security and stability patches.

  • Reformatted CRD manifest files for consistency.

  • Optimized protobuf validation code generation.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@config/crds/hive.openshift.io_selectorsyncidentityproviders.yaml`:
- Around line 20-21: Update the stale CRD descriptions by fixing the kubebuilder
comments on the source Hive Go types (e.g., the SelectorSyncIdentityProvider
type's comment and any references to SelectorSyncSet, SelectorIdentityProvider,
or SyncSet) so they describe the correct resource names, then re-run the CRD
generation (controller-gen / project codegen target) to regenerate
config/crds/*.yaml; specifically, edit the Go struct doc comments for
SelectorSyncIdentityProvider (and any other Hive types that still mention
SelectorSyncSet/SelectorIdentityProvider/SyncSet), correct the text, and run the
repo's CRD/codegen task to produce updated YAML.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: c5c6c201-acd2-4035-8a36-5062fdd0a4ac

📥 Commits

Reviewing files that changed from the base of the PR and between 4caba33 and 8704d80.

⛔ Files ignored due to path filters (114)
  • apis/go.sum is excluded by !**/*.sum
  • go.sum is excluded by !**/*.sum
  • vendor/cel.dev/expr/checked.pb.go is excluded by !**/*.pb.go
  • vendor/cel.dev/expr/eval.pb.go is excluded by !**/*.pb.go
  • vendor/cel.dev/expr/explain.pb.go is excluded by !**/*.pb.go
  • vendor/cel.dev/expr/syntax.pb.go is excluded by !**/*.pb.go
  • vendor/cel.dev/expr/value.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/udpa/annotations/migrate.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/udpa/annotations/security.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/udpa/annotations/sensitive.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/udpa/annotations/status.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/udpa/annotations/versioning.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/udpa/type/v1/typed_struct.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/annotations/v3/migrate.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/annotations/v3/security.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/annotations/v3/sensitive.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/annotations/v3/status.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/annotations/v3/versioning.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/authority.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/cidr.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/collection_entry.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/context_params.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/extension.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/resource.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/resource_locator.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/resource_name.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/data/orca/v3/orca_load_report.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/service/orca/v3/orca.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/service/orca/v3/orca_grpc.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/cel.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/domain.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/http_inputs.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/ip.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/matcher.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/range.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/regex.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/string.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/type/v3/cel.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/type/v3/range.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/cncf/xds/go/xds/type/v3/typed_struct.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/admin/v3/clusters.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/accesslog/v3/accesslog.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/bootstrap/v3/bootstrap.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/bootstrap/v3/bootstrap_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/cluster/v3/cluster.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/common/matcher/v3/matcher.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/common/matcher/v3/matcher_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/common/mutation_rules/v3/mutation_rules.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/common/mutation_rules/v3/mutation_rules_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/address.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/address_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/base.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/config_source.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/grpc_service.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/grpc_service_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/health_check.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/protocol.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/protocol_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/proxy_protocol.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/proxy_protocol_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/substitution_format_string.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/endpoint/v3/endpoint.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/endpoint/v3/endpoint_components.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/endpoint/v3/endpoint_components_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/endpoint/v3/load_report.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/listener/v3/listener.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/listener/v3/listener_components.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/listener/v3/listener_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/metrics/v3/stats.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/metrics/v3/stats_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/overload/v3/overload.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/rbac/v3/rbac.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/rbac/v3/rbac_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/route/v3/route_components.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/route/v3/route_components_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/tap/v3/common.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/tap/v3/common_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/trace/v3/opentelemetry.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/trace/v3/opentelemetry_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/trace/v3/zipkin.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/trace/v3/zipkin_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/data/accesslog/v3/accesslog.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/clusters/aggregate/v3/cluster.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/clusters/aggregate/v3/cluster_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/filters/http/router/v3/router.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/load_balancing_policies/client_side_weighted_round_robin/v3/client_side_weighted_round_robin.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/load_balancing_policies/client_side_weighted_round_robin/v3/client_side_weighted_round_robin_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/load_balancing_policies/common/v3/common.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/load_balancing_policies/common/v3/common_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/transport_sockets/tls/v3/common.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/transport_sockets/tls/v3/common_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/transport_sockets/tls/v3/secret.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/transport_sockets/tls/v3/secret_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/service/discovery/v3/discovery.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/type/http/v3/cookie.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/type/http/v3/cookie_vtproto.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/metadata.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/string.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/value.pb.go is excluded by !**/*.pb.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/type/metadata/v3/metadata.pb.go is excluded by !**/*.pb.go
  • vendor/google.golang.org/grpc/balancer/grpclb/grpc_lb_v1/load_balancer.pb.go is excluded by !**/*.pb.go
  • vendor/google.golang.org/grpc/balancer/grpclb/grpc_lb_v1/load_balancer_grpc.pb.go is excluded by !**/*.pb.go
  • vendor/google.golang.org/grpc/binarylog/grpc_binarylog_v1/binarylog.pb.go is excluded by !**/*.pb.go
  • vendor/google.golang.org/grpc/credentials/alts/internal/proto/grpc_gcp/altscontext.pb.go is excluded by !**/*.pb.go
  • vendor/google.golang.org/grpc/credentials/alts/internal/proto/grpc_gcp/handshaker.pb.go is excluded by !**/*.pb.go
  • vendor/google.golang.org/grpc/credentials/alts/internal/proto/grpc_gcp/handshaker_grpc.pb.go is excluded by !**/*.pb.go
  • vendor/google.golang.org/grpc/credentials/alts/internal/proto/grpc_gcp/transport_security_common.pb.go is excluded by !**/*.pb.go
  • vendor/google.golang.org/grpc/health/grpc_health_v1/health.pb.go is excluded by !**/*.pb.go
  • vendor/google.golang.org/grpc/health/grpc_health_v1/health_grpc.pb.go is excluded by !**/*.pb.go
  • vendor/google.golang.org/grpc/internal/proto/grpc_lookup_v1/rls.pb.go is excluded by !**/*.pb.go
  • vendor/google.golang.org/grpc/internal/proto/grpc_lookup_v1/rls_config.pb.go is excluded by !**/*.pb.go
  • vendor/google.golang.org/grpc/internal/proto/grpc_lookup_v1/rls_grpc.pb.go is excluded by !**/*.pb.go
📒 Files selected for processing (186)
  • apis/go.mod
  • apis/vendor/golang.org/x/net/http2/transport.go
  • apis/vendor/modules.txt
  • config/crds/hive.openshift.io_checkpoints.yaml
  • config/crds/hive.openshift.io_clusterclaims.yaml
  • config/crds/hive.openshift.io_clusterdeploymentcustomizations.yaml
  • config/crds/hive.openshift.io_clusterdeployments.yaml
  • config/crds/hive.openshift.io_clusterdeprovisions.yaml
  • config/crds/hive.openshift.io_clusterimagesets.yaml
  • config/crds/hive.openshift.io_clusterpools.yaml
  • config/crds/hive.openshift.io_clusterprovisions.yaml
  • config/crds/hive.openshift.io_clusterrelocates.yaml
  • config/crds/hive.openshift.io_clusterstates.yaml
  • config/crds/hive.openshift.io_dnszones.yaml
  • config/crds/hive.openshift.io_hiveconfigs.yaml
  • config/crds/hive.openshift.io_machinepoolnameleases.yaml
  • config/crds/hive.openshift.io_machinepools.yaml
  • config/crds/hive.openshift.io_selectorsyncidentityproviders.yaml
  • config/crds/hive.openshift.io_selectorsyncsets.yaml
  • config/crds/hive.openshift.io_syncidentityproviders.yaml
  • config/crds/hive.openshift.io_syncsets.yaml
  • config/crds/hiveinternal.openshift.io_clustersyncleases.yaml
  • config/crds/hiveinternal.openshift.io_clustersyncs.yaml
  • config/crds/hiveinternal.openshift.io_fakeclusterinstalls.yaml
  • go.mod
  • vendor/cel.dev/expr/BUILD.bazel
  • vendor/cel.dev/expr/MODULE.bazel
  • vendor/github.com/cncf/xds/go/udpa/annotations/migrate.pb.validate.go
  • vendor/github.com/cncf/xds/go/udpa/annotations/security.pb.validate.go
  • vendor/github.com/cncf/xds/go/udpa/annotations/status.pb.validate.go
  • vendor/github.com/cncf/xds/go/udpa/annotations/versioning.pb.validate.go
  • vendor/github.com/cncf/xds/go/udpa/type/v1/typed_struct.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/annotations/v3/migrate.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/annotations/v3/security.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/annotations/v3/status.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/annotations/v3/versioning.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/authority.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/cidr.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/collection_entry.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/context_params.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/extension.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/resource.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/resource_locator.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/core/v3/resource_name.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/data/orca/v3/orca_load_report.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/service/orca/v3/orca.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/cel.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/domain.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/http_inputs.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/ip.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/matcher.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/range.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/regex.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/type/matcher/v3/string.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/type/v3/cel.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/type/v3/range.pb.validate.go
  • vendor/github.com/cncf/xds/go/xds/type/v3/typed_struct.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/accesslog/v3/accesslog.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/bootstrap/v3/bootstrap.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/common/matcher/v3/matcher.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/common/mutation_rules/v3/mutation_rules.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/address.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/base.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/grpc_service.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/protocol.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/proxy_protocol.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/endpoint/v3/endpoint_components.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/listener/v3/listener.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/metrics/v3/stats.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/rbac/v3/rbac.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/route/v3/route_components.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/tap/v3/common.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/trace/v3/opentelemetry.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/config/trace/v3/zipkin.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/clusters/aggregate/v3/cluster.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/load_balancing_policies/client_side_weighted_round_robin/v3/client_side_weighted_round_robin.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/load_balancing_policies/common/v3/common.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/transport_sockets/tls/v3/common.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/extensions/transport_sockets/tls/v3/secret.pb.validate.go
  • vendor/github.com/envoyproxy/go-control-plane/envoy/type/http/v3/cookie.pb.validate.go
  • vendor/github.com/envoyproxy/protoc-gen-validate/validate/BUILD
  • vendor/github.com/go-jose/go-jose/v4/README.md
  • vendor/github.com/go-jose/go-jose/v4/crypter.go
  • vendor/github.com/go-jose/go-jose/v4/shared.go
  • vendor/github.com/go-jose/go-jose/v4/signing.go
  • vendor/github.com/go-jose/go-jose/v4/symmetric.go
  • vendor/github.com/go-jose/go-jose/v4/symmetric_legacy.go
  • vendor/github.com/spiffe/go-spiffe/v2/bundle/jwtbundle/bundle.go
  • vendor/github.com/spiffe/go-spiffe/v2/bundle/jwtbundle/set.go
  • vendor/github.com/spiffe/go-spiffe/v2/bundle/spiffebundle/bundle.go
  • vendor/github.com/spiffe/go-spiffe/v2/bundle/spiffebundle/set.go
  • vendor/github.com/spiffe/go-spiffe/v2/bundle/x509bundle/bundle.go
  • vendor/github.com/spiffe/go-spiffe/v2/bundle/x509bundle/set.go
  • vendor/github.com/zeebo/errs/.gitignore
  • vendor/github.com/zeebo/errs/AUTHORS
  • vendor/github.com/zeebo/errs/LICENSE
  • vendor/github.com/zeebo/errs/README.md
  • vendor/github.com/zeebo/errs/errs.go
  • vendor/github.com/zeebo/errs/group.go
  • vendor/github.com/zeebo/errs/is_go1.20.go
  • vendor/github.com/zeebo/errs/is_go_other.go
  • vendor/go.opentelemetry.io/contrib/detectors/gcp/LICENSE
  • vendor/go.opentelemetry.io/contrib/detectors/gcp/cloud-function.go
  • vendor/go.opentelemetry.io/contrib/detectors/gcp/cloud-run.go
  • vendor/go.opentelemetry.io/contrib/detectors/gcp/detector.go
  • vendor/go.opentelemetry.io/contrib/detectors/gcp/gce.go
  • vendor/go.opentelemetry.io/contrib/detectors/gcp/gke.go
  • vendor/go.opentelemetry.io/contrib/detectors/gcp/version.go
  • vendor/golang.org/x/crypto/pbkdf2/pbkdf2.go
  • vendor/golang.org/x/net/http2/transport.go
  • vendor/golang.org/x/net/trace/events.go
  • vendor/golang.org/x/oauth2/deviceauth.go
  • vendor/golang.org/x/oauth2/google/google.go
  • vendor/golang.org/x/oauth2/oauth2.go
  • vendor/golang.org/x/oauth2/pkce.go
  • vendor/golang.org/x/oauth2/token.go
  • vendor/golang.org/x/oauth2/transport.go
  • vendor/golang.org/x/sync/errgroup/errgroup.go
  • vendor/golang.org/x/text/encoding/japanese/eucjp.go
  • vendor/golang.org/x/text/encoding/japanese/iso2022jp.go
  • vendor/golang.org/x/text/encoding/japanese/shiftjis.go
  • vendor/golang.org/x/text/encoding/korean/euckr.go
  • vendor/golang.org/x/text/encoding/simplifiedchinese/gbk.go
  • vendor/golang.org/x/text/encoding/simplifiedchinese/hzgb2312.go
  • vendor/golang.org/x/text/encoding/traditionalchinese/big5.go
  • vendor/golang.org/x/text/encoding/unicode/unicode.go
  • vendor/google.golang.org/grpc/balancer/balancer.go
  • vendor/google.golang.org/grpc/balancer/leastrequest/leastrequest.go
  • vendor/google.golang.org/grpc/balancer/pickfirst/internal/internal.go
  • vendor/google.golang.org/grpc/balancer/pickfirst/pickfirst.go
  • vendor/google.golang.org/grpc/balancer/pickfirst/pickfirstleaf/pickfirstleaf.go
  • vendor/google.golang.org/grpc/balancer/ringhash/ringhash.go
  • vendor/google.golang.org/grpc/balancer/roundrobin/roundrobin.go
  • vendor/google.golang.org/grpc/balancer/subconn.go
  • vendor/google.golang.org/grpc/balancer/weightedroundrobin/balancer.go
  • vendor/google.golang.org/grpc/balancer/weightedroundrobin/scheduler.go
  • vendor/google.golang.org/grpc/balancer/weightedtarget/weightedtarget.go
  • vendor/google.golang.org/grpc/balancer_wrapper.go
  • vendor/google.golang.org/grpc/clientconn.go
  • vendor/google.golang.org/grpc/credentials/alts/internal/conn/record.go
  • vendor/google.golang.org/grpc/credentials/credentials.go
  • vendor/google.golang.org/grpc/credentials/jwt/doc.go
  • vendor/google.golang.org/grpc/credentials/jwt/file_reader.go
  • vendor/google.golang.org/grpc/credentials/jwt/token_file_call_creds.go
  • vendor/google.golang.org/grpc/credentials/tls.go
  • vendor/google.golang.org/grpc/encoding/encoding.go
  • vendor/google.golang.org/grpc/encoding/gzip/gzip.go
  • vendor/google.golang.org/grpc/encoding/internal/internal.go
  • vendor/google.golang.org/grpc/experimental/stats/metricregistry.go
  • vendor/google.golang.org/grpc/experimental/stats/metrics.go
  • vendor/google.golang.org/grpc/interceptor.go
  • vendor/google.golang.org/grpc/internal/balancer/gracefulswitch/gracefulswitch.go
  • vendor/google.golang.org/grpc/internal/envconfig/envconfig.go
  • vendor/google.golang.org/grpc/internal/envconfig/xds.go
  • vendor/google.golang.org/grpc/internal/experimental.go
  • vendor/google.golang.org/grpc/internal/hierarchy/hierarchy.go
  • vendor/google.golang.org/grpc/internal/idle/idle.go
  • vendor/google.golang.org/grpc/internal/internal.go
  • vendor/google.golang.org/grpc/internal/resolver/delegatingresolver/delegatingresolver.go
  • vendor/google.golang.org/grpc/internal/resolver/dns/dns_resolver.go
  • vendor/google.golang.org/grpc/internal/stats/metrics_recorder_list.go
  • vendor/google.golang.org/grpc/internal/stats/stats.go
  • vendor/google.golang.org/grpc/internal/transport/client_stream.go
  • vendor/google.golang.org/grpc/internal/transport/controlbuf.go
  • vendor/google.golang.org/grpc/internal/transport/flowcontrol.go
  • vendor/google.golang.org/grpc/internal/transport/handler_server.go
  • vendor/google.golang.org/grpc/internal/transport/http2_client.go
  • vendor/google.golang.org/grpc/internal/transport/http2_server.go
  • vendor/google.golang.org/grpc/internal/transport/http_util.go
  • vendor/google.golang.org/grpc/internal/transport/server_stream.go
  • vendor/google.golang.org/grpc/internal/transport/transport.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/cdsbalancer/cdsbalancer.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/cdsbalancer/cluster_watcher.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/clusterimpl/clusterimpl.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/clusterimpl/picker.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/clustermanager/clustermanager.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/clusterresolver/clusterresolver.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/clusterresolver/configbuilder.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/clusterresolver/resource_resolver_dns.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/clusterresolver/resource_resolver_eds.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/outlierdetection/balancer.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/outlierdetection/subconn_wrapper.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/priority/balancer.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/priority/balancer_child.go
  • vendor/google.golang.org/grpc/internal/xds/balancer/priority/balancer_priority.go
💤 Files with no reviewable changes (1)
  • vendor/cel.dev/expr/BUILD.bazel

@codecov
Copy link

codecov bot commented Mar 20, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 50.31%. Comparing base (4caba33) to head (8704d80).

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##           master    #2876   +/-   ##
=======================================
  Coverage   50.31%   50.31%           
=======================================
  Files         280      280           
  Lines       34314    34314           
=======================================
  Hits        17264    17264           
  Misses      15689    15689           
  Partials     1361     1361           
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Mar 21, 2026

@2uasimojo: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/verify 8704d80 link true /test verify

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants