Add ec2:CreateSnapshot to AWS minimal permissions by YamunadeviShanmugam · Pull Request #81427 · openshift/release

YamunadeviShanmugam · 2026-07-03T04:55:12Z

CI jobs are failing with Snapshot creation issues
https://prow.ci.openshift.org/view/gs/test-platform-results/pr-logs/pull/31310/pull-ci-openshift-origin-main-e2e-aws-csi/2072840424191430656

This adds fix to add those permission

: External Storage [Driver: ebs.csi.aws.com] [Testpattern: Dynamic PV (ext4)] multiVolume [Slow] should concurrently access the volume and restored snapshot from pods on the same node [LinuxOnly] [Feature:VolumeSnapshotDataSource] [Feature:VolumeSourceXFS] expand_more	10m24s
: External Storage [Driver: ebs.csi.aws.com] [Testpattern: Dynamic Snapshot (retain policy)] snapshottable [Feature:VolumeSnapshotDataSource] volume snapshot controller should check snapshot fields, check restore correctly works after modifying source data, check deletion (persistent) expand_more	15m7s
: External Storage [Driver: ebs.csi.aws.com] [Testpattern: Pre-provisioned Snapshot (retain policy)] snapshottable [Feature:VolumeSnapshotDataSource] volume snapshot controller should check snapshot fields, check restore correctly works after modifying source data, check deletion (persistent) expand_more	15m30s
: External Storage [Driver: ebs.csi.aws.com] [Testpattern: Dynamic PV (block volmode)] provisioning should provision storage with snapshot data source [Feature:VolumeSnapshotDataSource] expand_more	10m18s
: External Storage [Driver: ebs.csi.aws.com] [Testpattern: Dynamic PV (default fs)] provisioning should provision correct filesystem size when restoring snapshot to larger size pvc [Feature:VolumeSnapshotDataSource] expand_more	0s
: External Storage [Driver: ebs.csi.aws.com] [Testpattern: Dynamic PV (block volmode)] multiVolume [Slow] should concurrently access the volume and restored snapshot from pods on the same node [LinuxOnly] [Feature:VolumeSnapshotDataSource] [Feature:VolumeSourceXFS] expand_more	10m32s
: External Storage [Driver: ebs.csi.aws.com] [Testpattern: Dynamic PV (default fs)] provisioning should provision storage with snapshot data source [Feature:VolumeSnapshotDataSource] expand_more	13m54s
: External Storage [Driver: ebs.csi.aws.com] [Testpattern: Pre-provisioned Snapshot (delete policy)] snapshottable [Feature:VolumeSnapshotDataSource] volume snapshot controller should check snapshot fields, check restore correctly works after modifying source data, check deletion (persistent) expand_more	15m30s
: External Storage [Driver: ebs.csi.aws.com] [Testpattern: Dynamic Snapshot (delete policy)] snapshottable [Feature:VolumeSnapshotDataSource] volume snapshot controller should check snapshot fields, check restore correctly works after modifying source data, check deletion (persistent) expand_more	15m7s
: External Storage [Driver: ebs.csi.aws.com] [Testpattern: Ephemeral Snapshot (delete policy)] snapshottable [Feature:VolumeSnapshotDataSource] volume snapshot controller should check snapshot fields, check restore correctly works, check deletion (ephemeral) expand_more	0s
: External Storage [Driver: ebs.csi.aws.com] [Testpattern: Dynamic PV (xfs)] [Slow] multiVolume [Slow] should concurrently access the volume and restored snapshot from pods on the same node [LinuxOnly] [Feature:VolumeSnapshotDataSource] [Feature:VolumeSourceXFS] expand_more	13m56s
: External Storage [Driver: ebs.csi.aws.com] [Testpattern: Ephemeral Snapshot (retain policy)] snapshottable [Feature:VolumeSnapshotDataSource] volume snapshot controller should check snapshot fields, check restore correctly works, check deletion (ephemeral) expand_more	15m2s
: [Jira:"Test Framework"] there should not be mass test failures expand_more

Summary by CodeRabbit

This change updates the AWS minimal-permissions CI setup used by OpenShift test jobs by granting ec2:CreateSnapshot. In practical terms, it expands the IAM policy for older OpenShift AWS environments so EBS CSI snapshot-related tests can create volume snapshots successfully, helping resolve the observed CI failures around snapshot creation, restore, and deletion.

coderabbitai · 2026-07-03T04:55:45Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: f717c35d-c0f5-424f-993b-2e0befcab79c

📥 Commits

Reviewing files that changed from the base of the PR and between 7cd2f80 and 01ae16b.

📒 Files selected for processing (1)

ci-operator/step-registry/ipi/conf/aws/user-min-permissions/ipi-conf-aws-user-min-permissions-commands.sh

Walkthrough

The minimal AWS permissions list for OpenShift versions earlier than 4.18 adds two EC2 snapshot actions.

Changes

AWS minimal permissions update

Layer / File(s)	Summary
Add EC2 snapshot permissions `ci-operator/step-registry/ipi/conf/aws/user-min-permissions/ipi-conf-aws-user-min-permissions-commands.sh`	Adds `ec2:CreateSnapshot` and `ec2:DescribeSnapshots` to the `< 4.18` permissions list.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the main change: adding an EC2 snapshot permission to the AWS minimal permissions policy.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The PR only adds EC2 permissions in a shell script; no Ginkgo test names or test files were changed.
Test Structure And Quality	✅ Passed	PASS — PR only adds two AWS permissions in a shell script; no Ginkgo tests or cluster interactions were changed, so the test-quality checklist is not applicable.
Microshift Test Compatibility	✅ Passed	Diff only updates an AWS permissions shell script; no new Ginkgo tests or MicroShift-unsupported APIs/features were added.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	Only AWS permission entries changed; no Ginkgo e2e tests were added or modified, so SNO compatibility is not applicable.
Topology-Aware Scheduling Compatibility	✅ Passed	The only change is adding EC2 snapshot IAM actions in a shell script; no manifests, replicas, affinity, selectors, or topology logic were introduced.
Ote Binary Stdout Contract	✅ Passed	Only EC2 snapshot permissions were added in a shell script; no OTE binary main/setup stdout writes were introduced.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	The PR only changes an AWS permissions shell script; no Ginkgo test code or networking assumptions were added.
No-Weak-Crypto	✅ Passed	Only AWS IAM permissions were added (ec2:CreateSnapshot, ec2:DescribeSnapshots); no weak-crypto, custom crypto, or secret-comparison code appears in the change.
Container-Privileges	✅ Passed	PR only adds ec2:CreateSnapshot/DescribeSnapshots to an AWS permissions list; no container/K8s manifest changes or privilege flags appear in the patch.
No-Sensitive-Data-In-Logs	✅ Passed	Diff only adds EC2 snapshot permissions; it introduces no new logging or sensitive-data exposure, and existing install-config output is still redacted.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

YamunadeviShanmugam · 2026-07-03T05:03:47Z

/pj-rehearse auto-ack

openshift-merge-bot · 2026-07-03T05:03:51Z

@YamunadeviShanmugam: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

ropatil010 · 2026-07-03T05:05:47Z

/test e2e-aws-csi

openshift-ci · 2026-07-03T05:05:51Z

@ropatil010: The specified target(s) for /test were not found.
The following commands are available to trigger required jobs:

/test boskos-config

/test boskos-config-generation

/test check-gh-automation

/test check-gh-automation-tide

/test check-trigger-trusted-apps

/test ci-operator-config

/test ci-operator-config-metadata

/test ci-operator-registry

/test ci-secret-bootstrap-config-validation

/test ci-testgrid-allow-list

/test cluster-manifest-verifier

/test clusterimageset-validate

/test config

/test core-valid

/test generated-config

/test generated-dashboards

/test hyperfleet-risk-scorer-test

/test image-mirroring-config-validation

/test jira-lifecycle-config

/test labels

/test openshift-image-mirror-mappings

/test ordered-prow-config

/test owners

/test pr-reminder-config

/test prow-config

/test prow-config-filenames

/test prow-config-semantics

/test pylint

/test release-config

/test release-controller-config

/test rover-groups-config-validation

/test secret-generator-config-valid

/test services-valid

/test stackrox-stackrox-stackrox-stackrox-check

/test step-registry-metadata

/test step-registry-shellcheck

/test sync-rover-groups

/test verified-config

/test yamllint

The following commands are available to trigger optional jobs:

/test check-cluster-profiles-config

Use /test all to run the following jobs that were automatically triggered:

pull-ci-openshift-release-main-ci-operator-config

pull-ci-openshift-release-main-ci-operator-registry

pull-ci-openshift-release-main-core-valid

pull-ci-openshift-release-main-owners

pull-ci-openshift-release-main-release-controller-config

pull-ci-openshift-release-main-step-registry-metadata

pull-ci-openshift-release-main-step-registry-shellcheck

pull-ci-openshift-release-openshift-image-mirror-mappings

Details

In response to this:

/test e2e-aws-csi

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

gangwgr · 2026-07-03T05:15:53Z

/lgtm

gangwgr · 2026-07-03T05:16:07Z

/pj-rehearse

openshift-merge-bot · 2026-07-03T05:16:09Z

@gangwgr: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

Signed-off-by: Yamunadevi Shanmugam <yshanmug@redhat.com>

openshift-merge-bot · 2026-07-03T07:34:05Z

[REHEARSALNOTIFIER]
@YamunadeviShanmugam: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name	Repo	Type	Reason
pull-ci-redhat-appstudio-infra-deployments-main-appstudio-load-test	redhat-appstudio/infra-deployments	presubmit	Registry content changed
pull-ci-codeready-toolchain-devsandbox-dashboard-master-e2e	codeready-toolchain/devsandbox-dashboard	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.11-e2e-aws-shared-resources	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.10-e2e-aws-shared-resources	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.17-e2e-aws-shared-resources	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.16-e2e-aws-shared-resources	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.15-e2e-aws-shared-resources	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.14-e2e-aws-shared-resources	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.13-e2e-aws-shared-resources	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.12-e2e-aws-shared-resources	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-main-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-main-okd-scos-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-5.1-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-5.0-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.23-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.22-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.21-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.21-okd-scos-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.20-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.19-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.18-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.17-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.16-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.15-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed
pull-ci-openshift-cluster-storage-operator-release-4.14-e2e-aws-ovn	openshift/cluster-storage-operator	presubmit	Registry content changed

A total of 12815 jobs have been affected by this change. The above listing is non-exhaustive and limited to 25 jobs.

A full list of affected jobs can be found here

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

openshift-merge-bot · 2026-07-03T07:52:18Z

@ropatil010: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

YamunadeviShanmugam · 2026-07-03T10:29:21Z

/test ci/rehearse/devfile/registry-operator/main/v4.18-registry-operator-integration-test

openshift-ci · 2026-07-03T10:29:25Z

@YamunadeviShanmugam: The specified target(s) for /test were not found.
The following commands are available to trigger required jobs:

/test boskos-config

/test boskos-config-generation

/test check-gh-automation

/test check-gh-automation-tide

/test check-trigger-trusted-apps

/test ci-operator-config

/test ci-operator-config-metadata

/test ci-operator-registry

/test ci-secret-bootstrap-config-validation

/test ci-testgrid-allow-list

/test cluster-manifest-verifier

/test clusterimageset-validate

/test config

/test core-valid

/test generated-config

/test generated-dashboards

/test hyperfleet-risk-scorer-test

/test image-mirroring-config-validation

/test jira-lifecycle-config

/test labels

/test openshift-image-mirror-mappings

/test ordered-prow-config

/test owners

/test pr-reminder-config

/test prow-config

/test prow-config-filenames

/test prow-config-semantics

/test pylint

/test release-config

/test release-controller-config

/test rover-groups-config-validation

/test secret-generator-config-valid

/test services-valid

/test stackrox-stackrox-stackrox-stackrox-check

/test step-registry-metadata

/test step-registry-shellcheck

/test sync-rover-groups

/test verified-config

/test yamllint

The following commands are available to trigger optional jobs:

/test check-cluster-profiles-config

Use /test all to run the following jobs that were automatically triggered:

pull-ci-openshift-release-main-ci-operator-config

pull-ci-openshift-release-main-ci-operator-registry

pull-ci-openshift-release-main-core-valid

pull-ci-openshift-release-main-owners

pull-ci-openshift-release-main-release-controller-config

pull-ci-openshift-release-main-step-registry-metadata

pull-ci-openshift-release-main-step-registry-shellcheck

pull-ci-openshift-release-openshift-image-mirror-mappings

Details

In response to this:

/test ci/rehearse/devfile/registry-operator/main/v4.18-registry-operator-integration-test

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

YamunadeviShanmugam · 2026-07-03T10:37:53Z

/pj-rehearse ci/rehearse/devfile/registry-operator/main/v4.18-registry-operator-integration-test

openshift-merge-bot · 2026-07-03T10:37:56Z

@YamunadeviShanmugam: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

openshift-merge-bot · 2026-07-03T10:42:57Z

@YamunadeviShanmugam: job(s): ci/rehearse/devfile/registry-operator/main/v4.18-registry-operator-integration-test either don't exist or were not found to be affected, and cannot be rehearsed

YamunadeviShanmugam · 2026-07-03T10:52:52Z

/pj-rehearse pull-ci-rehearse-devfile-registry-operator-main-v4.18-registry-operator-integration-test

openshift-merge-bot · 2026-07-03T10:52:55Z

@YamunadeviShanmugam: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

openshift-merge-bot · 2026-07-03T10:57:35Z

@YamunadeviShanmugam: job(s): pull-ci-rehearse-devfile-registry-operator-main-v4.18-registry-operator-integration-test either don't exist or were not found to be affected, and cannot be rehearsed

YamunadeviShanmugam · 2026-07-03T11:50:33Z

/pj-rehearse pull-ci-devfile-registry-operator-main-v4.18-registry-operator-integration-test

openshift-merge-bot · 2026-07-03T11:50:36Z

@YamunadeviShanmugam: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

patrickdillon · 2026-07-03T12:53:52Z

/approve

YamunadeviShanmugam · 2026-07-03T13:10:07Z

/pj-rehearse pull-ci-openshift-gcp-workload-identity-federation-webhook-main-okd-scos-e2e-aws-ovn

openshift-merge-bot · 2026-07-03T13:10:11Z

@YamunadeviShanmugam: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

YamunadeviShanmugam · 2026-07-03T13:11:52Z

/pj-rehearse pull-ci-openshift-grafana-tempo-operator-main-upstream-ocp-4.12-amd64-tempo-upstream-tests

openshift-merge-bot · 2026-07-03T13:11:54Z

@YamunadeviShanmugam: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

gangwgr · 2026-07-03T13:14:31Z

/lgtm

openshift-ci · 2026-07-03T13:15:28Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: gangwgr, patrickdillon, YamunadeviShanmugam

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~ci-operator/step-registry/ipi/conf/aws/user-min-permissions/OWNERS~~ [patrickdillon]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

YamunadeviShanmugam · 2026-07-03T15:23:44Z

/pj-rehearse pull-ci-openshift-grafana-tempo-operator-main-upstream-ocp-4.12-amd64-tempo-upstream-tests

openshift-merge-bot · 2026-07-03T15:23:47Z

@YamunadeviShanmugam: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

YamunadeviShanmugam · 2026-07-03T15:24:00Z

/pj-rehearse pull-ci-openshift-grafana-tempo-operator-main-upstream-ocp-4.12-amd64-tempo-upstream-tests

openshift-merge-bot · 2026-07-03T15:24:02Z

@YamunadeviShanmugam: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

YamunadeviShanmugam · 2026-07-04T04:24:33Z

/pj-rehearse pull-ci-openshift-grafana-tempo-operator-main-upstream-ocp-4.12-amd64-tempo-upstream-tests pull-ci-openshift-grafana-tempo-operator-main-upstream-ocp-4.12-amd64-tempo-upstream-tests pull-ci-devfile-registry-operator-main-v4.18-registry-operator-integration-test

openshift-merge-bot · 2026-07-04T04:24:36Z

@YamunadeviShanmugam: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

YamunadeviShanmugam · 2026-07-04T11:48:36Z

/pj-rehearse pull-ci-openshift-grafana-tempo-operator-main-upstream-ocp-4.12-amd64-tempo-upstream-tests pull-ci-openshift-grafana-tempo-operator-main-upstream-ocp-4.12-amd64-tempo-upstream-tests pull-ci-devfile-registry-operator-main-v4.18-registry-operator-integration-test

openshift-merge-bot · 2026-07-04T11:48:39Z

@YamunadeviShanmugam: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

openshift-ci · 2026-07-04T15:32:35Z

@YamunadeviShanmugam: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/rehearse/openshift/community.okd/stable-5/integration	`7cd2f80`	link	unknown	`/pj-rehearse pull-ci-openshift-community.okd-stable-5-integration`
ci/rehearse/openshift/community.okd/stable-4/integration	`7cd2f80`	link	unknown	`/pj-rehearse pull-ci-openshift-community.okd-stable-4-integration`
ci/rehearse/outrigger-project/multiarch-tuning-operator/main/ocp417-e2e-aws	`7cd2f80`	link	unknown	`/pj-rehearse pull-ci-outrigger-project-multiarch-tuning-operator-main-ocp417-e2e-aws`
ci/rehearse/openshift/community.okd/stable-3/integration	`7cd2f80`	link	unknown	`/pj-rehearse pull-ci-openshift-community.okd-stable-3-integration`
ci/rehearse/outrigger-project/multiarch-tuning-operator/main/ocp422-e2e-aws	`7cd2f80`	link	unknown	`/pj-rehearse pull-ci-outrigger-project-multiarch-tuning-operator-main-ocp422-e2e-aws`
ci/rehearse/openshift/community.okd/stable-2.3/integration	`7cd2f80`	link	unknown	`/pj-rehearse pull-ci-openshift-community.okd-stable-2.3-integration`
ci/rehearse/outrigger-project/multiarch-tuning-operator/main/ocp421-e2e-aws	`7cd2f80`	link	unknown	`/pj-rehearse pull-ci-outrigger-project-multiarch-tuning-operator-main-ocp421-e2e-aws`
ci/rehearse/openshift/gcp-workload-identity-federation-webhook/main/okd-scos-e2e-aws-ovn	`01ae16b`	link	unknown	`/pj-rehearse pull-ci-openshift-gcp-workload-identity-federation-webhook-main-okd-scos-e2e-aws-ovn`
ci/rehearse/devfile/registry-operator/main/v4.18-registry-operator-integration-test	`01ae16b`	link	unknown	`/pj-rehearse pull-ci-devfile-registry-operator-main-v4.18-registry-operator-integration-test`
ci/rehearse/openshift/grafana-tempo-operator/main/upstream-ocp-4.12-amd64-tempo-upstream-tests	`01ae16b`	link	unknown	`/pj-rehearse pull-ci-openshift-grafana-tempo-operator-main-upstream-ocp-4.12-amd64-tempo-upstream-tests`

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

openshift-ci Bot requested review from neisw and sosiouxme July 3, 2026 04:56

openshift-ci Bot assigned gangwgr Jul 3, 2026

openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jul 3, 2026

Add ec2:CreateSnapshot to AWS minimal permissions

01ae16b

Signed-off-by: Yamunadevi Shanmugam <yshanmug@redhat.com>

YamunadeviShanmugam force-pushed the fix-aws-ebs-csi-snapshot-permission branch from 7cd2f80 to 01ae16b Compare July 3, 2026 07:28

openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jul 3, 2026

openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 3, 2026

openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jul 3, 2026

Uh oh!

Conversation

YamunadeviShanmugam commented Jul 3, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Jul 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Uh oh!

YamunadeviShanmugam commented Jul 3, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 3, 2026

Uh oh!

ropatil010 commented Jul 3, 2026

Uh oh!

openshift-ci Bot commented Jul 3, 2026

Uh oh!

gangwgr commented Jul 3, 2026

Uh oh!

gangwgr commented Jul 3, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 3, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 3, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 3, 2026

Uh oh!

YamunadeviShanmugam commented Jul 3, 2026

Uh oh!

openshift-ci Bot commented Jul 3, 2026

Uh oh!

YamunadeviShanmugam commented Jul 3, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 3, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 3, 2026

Uh oh!

YamunadeviShanmugam commented Jul 3, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 3, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 3, 2026

Uh oh!

YamunadeviShanmugam commented Jul 3, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 3, 2026

Uh oh!

patrickdillon commented Jul 3, 2026

Uh oh!

YamunadeviShanmugam commented Jul 3, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 3, 2026

Uh oh!

YamunadeviShanmugam commented Jul 3, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 3, 2026

Uh oh!

gangwgr commented Jul 3, 2026

Uh oh!

openshift-ci Bot commented Jul 3, 2026

Uh oh!

YamunadeviShanmugam commented Jul 3, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 3, 2026

Uh oh!

YamunadeviShanmugam commented Jul 3, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 3, 2026

Uh oh!

YamunadeviShanmugam commented Jul 4, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 4, 2026

Uh oh!

YamunadeviShanmugam commented Jul 4, 2026

Uh oh!

openshift-merge-bot Bot commented Jul 4, 2026

Uh oh!

openshift-ci Bot commented Jul 4, 2026

YamunadeviShanmugam commented Jul 3, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jul 3, 2026 •

edited

Loading