openshift-logging: Add build for opa-openshift 5.y branch

[xperimental]

/cc @JoaoBraveCoding
/assign @xperimental

Summary by CodeRabbit

Adds OpenShift CI build and promotion configuration for the ViaQ/opa-openshift repository’s openshift-logging 5.y branch, including ARM64 image builds, unit tests, resource defaults, and promotion to the logging:5.y stream.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 2fe1a386-fb09-4813-82ce-317c5d15dc68

📥 Commits

Reviewing files that changed from the base of the PR and between 6dbf21f and eeb55d8.

⛔ Files ignored due to path filters (2)

• ci-operator/jobs/ViaQ/opa-openshift/ViaQ-opa-openshift-logging-5.y-postsubmits.yaml is excluded by !ci-operator/jobs/**
• ci-operator/jobs/ViaQ/opa-openshift/ViaQ-opa-openshift-logging-5.y-presubmits.yaml is excluded by !ci-operator/jobs/**

📒 Files selected for processing (1)

• ci-operator/config/ViaQ/opa-openshift/ViaQ-opa-openshift-logging-5.y.yaml

---

Walkthrough

Adds a ViaQ OPA OpenShift 5.y configuration with OCP/RHEL build inputs, an arm64 image build, logging promotion settings, resource requests, unit testing, and generated branch metadata.

Changes

ViaQ OPA logging 5.y

Layer / File(s)	Summary
Build and promotion configuration ci-operator/config/ViaQ/opa-openshift/ViaQ-opa-openshift-logging-5.y.yaml	Defines the OCP 4.22/RHEL 9 build inputs, arm64 image build, logging namespace promotion, and stable 4.22 release metadata.
Resources, tests, and generated metadata ci-operator/config/ViaQ/opa-openshift/ViaQ-opa-openshift-logging-5.y.yaml	Applies CPU and memory requests, runs GOFLAGS="" make test-unit from src, and records the logging-5.y branch and repository identity.

Estimated code review effort: 2 (Simple) | ~10 minutes

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the main change: adding an opa-openshift build for the openshift-logging 5.y branch.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	Only ci-operator config/job YAML changed; no Ginkgo spec files or test titles were added or modified.
Test Structure And Quality	✅ Passed	No Ginkgo test code changed; the PR only adds ci-operator YAML configs, so the test-quality checklist is not applicable.
Microshift Test Compatibility	✅ Passed	Only ci-operator config/job YAML changed; no new or modified Ginkgo e2e tests or MicroShift-incompatible APIs/features were added.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PR only adds a ci-operator YAML config; no new Ginkgo/e2e test code or multi-node assumptions are present.
Topology-Aware Scheduling Compatibility	✅ Passed	The added ci-operator YAML only defines build/promotion/resources/tests; it has no pods, replicas, affinity, node selectors, or topology constraints.
Ote Binary Stdout Contract	✅ Passed	PR only adds ci-operator/job YAML; no process-level code or stdout writes were introduced.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PASS: PR only adds ci-operator config/job YAML; no new Ginkgo e2e tests, IP parsing, or external connectivity code was introduced.
No-Weak-Crypto	✅ Passed	The new ci-operator config and generated job YAMLs contain no MD5/SHA1/DES/RC4/3DES/Blowfish/ECB usage, custom crypto, or secret comparisons.
Container-Privileges	✅ Passed	The added ci-operator YAML is build/test config only; it contains no privileged, hostPID/Network/IPC, SYS_ADMIN, or allowPrivilegeEscalation settings.
No-Sensitive-Data-In-Logs	✅ Passed	PASS: The PR only adds generated CI job/config YAML; no new logging statements or debug output are present, and no sensitive literals are exposed.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-merge-bot]

[REHEARSALNOTIFIER]
@xperimental: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name	Repo	Type	Reason
pull-ci-ViaQ-opa-openshift-logging-5.y-images	ViaQ/opa-openshift	presubmit	Presubmit changed
pull-ci-ViaQ-opa-openshift-logging-5.y-test	ViaQ/opa-openshift	presubmit	Presubmit changed

Prior to this PR being merged, you will need to either run and acknowledge or opt to skip these rehearsals.

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

[xperimental]

/pj-rehearse auto-ack

[openshift-merge-bot]

@xperimental: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

[JoaoBraveCoding]

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: JoaoBraveCoding, xperimental

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• ci-operator/config/ViaQ/opa-openshift/OWNERS [JoaoBraveCoding,xperimental]
• ci-operator/jobs/ViaQ/opa-openshift/OWNERS [JoaoBraveCoding,xperimental]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@xperimental: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/rehearse/ViaQ/opa-openshift/logging-5.y/test	eeb55d8	link	unknown	/pj-rehearse pull-ci-ViaQ-opa-openshift-logging-5.y-test

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.