Skip to content

ROX-31227: Only allow scheduling equivalent tailored profiles#19544

Closed
guzalv wants to merge 9 commits intomaster-base/gualvare/fix-compliance-custom-rules-gotchasfrom
stackrox-profile-equivalence
Closed

ROX-31227: Only allow scheduling equivalent tailored profiles#19544
guzalv wants to merge 9 commits intomaster-base/gualvare/fix-compliance-custom-rules-gotchasfrom
stackrox-profile-equivalence

Conversation

@guzalv
Copy link
Contributor

@guzalv guzalv commented Mar 23, 2026

Description

change me!

User-facing documentation

Testing and quality

  • the change is production ready: the change is GA, or otherwise the functionality is gated by a feature flag
  • CI results are inspected

Automated testing

  • added unit tests
  • added e2e tests
  • added regression tests
  • added compatibility tests
  • modified existing tests

How I validated my change

change me!

dependabot bot and others added 9 commits March 23, 2026 15:47
…#19540)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
Co-authored-by: Misha Sugakov <537715+msugakov@users.noreply.github.com>
This commit was mostly generated by Claude Sonnet 4.6, after providing
it with a detailed implementation plan which was joint work between
human author and Claude Opus 4.6.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@openshift-ci
Copy link

openshift-ci bot commented Mar 23, 2026

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@github-actions github-actions bot added ci-all-qa-tests Tells CI to run all API tests (not just BAT). area/auth area/central area/operator area/sensor area/ci konflux-build Run Konflux in PR. Push commit to trigger it. ai-review labels Mar 23, 2026
@guzalv guzalv changed the base branch from master to master-base/gualvare/fix-compliance-custom-rules-gotchas March 23, 2026 14:59
Copy link
Contributor

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey - I've found 1 issue, and left some high level feedback:

  • There are unresolved merge conflict markers in central/complianceoperator/v2/compliancemanager/manager_impl.go (around validateTailoredProfileHashConsistency and storageToInternalProfileKind); these need to be resolved before merging.
Prompt for AI Agents
Please address the comments from this code review:

## Overall Comments
- There are unresolved merge conflict markers in central/complianceoperator/v2/compliancemanager/manager_impl.go (around validateTailoredProfileHashConsistency and storageToInternalProfileKind); these need to be resolved before merging.

## Individual Comments

### Comment 1
<location path="central/complianceoperator/v2/compliancemanager/manager_impl.go" line_range="582-591" />
<code_context>
+<<<<<<< HEAD
</code_context>
<issue_to_address>
**issue (bug_risk):** Resolve leftover merge conflict markers before merging

Unresolved conflict markers (`<<<<<<<`, `=======`, `>>>>>>>`) remain near `validateTailoredProfileHashConsistency` and `storageToInternalProfileKind`. These will break the build and tooling; resolve the conflicts and remove all markers before merging.
</issue_to_address>

Sourcery is free for open source - if you like our reviews please consider sharing them ✨
Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.

Comment on lines +582 to +591
<<<<<<< HEAD
=======

// validateTailoredProfileHashConsistency verifies that each tailored profile in the scan
// request has an equivalent equivalence_hash on every selected cluster. Non-tailored profiles
// are not checked. Called only when hash checking is not bypassed.
//
// Hash equivalence: all instances share the same hash value (COUNT(DISTINCT hash) = 1).
// All-empty is allowed — treated as equivalent, matching the profile picker semantics.
func (m *managerImpl) validateTailoredProfileHashConsistency(
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

issue (bug_risk): Resolve leftover merge conflict markers before merging

Unresolved conflict markers (<<<<<<<, =======, >>>>>>>) remain near validateTailoredProfileHashConsistency and storageToInternalProfileKind. These will break the build and tooling; resolve the conflicts and remove all markers before merging.

@guzalv guzalv force-pushed the master-base/gualvare/fix-compliance-custom-rules-gotchas branch from 18097ac to 699451c Compare March 23, 2026 15:02
@github-actions
Copy link
Contributor

/konflux-retest main-on-push

@github-actions
Copy link
Contributor

/konflux-retest scanner-v4-on-push

@guzalv guzalv closed this Mar 23, 2026
@github-actions
Copy link
Contributor

/konflux-retest operator-on-push

@guzalv
Copy link
Contributor Author

guzalv commented Mar 23, 2026

Closed in favor of #19545

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants