Skip to content

Conversation

@bgartzi
Copy link

@bgartzi bgartzi commented Jan 13, 2026

This PR splits #116 into two. That PR updated the compute pcrs library to the latest available version, and tweaked some things in the operator due to the API breakage I caused in the library.

It was the reason why dependabot could not successfully upgrade the version by itself in #121

Even if #116 depends on these changes and also introduces them, it will probably take a bit longer to merge, as it needs some integration test coverage, among others.

Meanwhile, it is a good idea I think to update compute-pcrs and tell dependabot to unignore the package, as I could forget about it in the future.

Note that this PR also upgrades the minimum supported rust-version from 1.85 to 1.88.

Minimum rust version was set to 1.85. Fedora is way above that threshold
at the moment. Future EL releases will be above that as well.

While on it, fix some of the linter errors that arise from the minimum
version update.

Signed-off-by: Beñat Gartzia Arruabarrena <bgartzia@redhat.com>
And update those crates that were making use of it. Later we will also
use it in some other crates.

Signed-off-by: Beñat Gartzia Arruabarrena <bgartzia@redhat.com>
I broke some of the compute-pcrs' lib APIs, so apart from just pointing
into a newer commit, we also need to tweak a couple of things here and
there.

Signed-off-by: Beñat Gartzia Arruabarrena <bgartzia@redhat.com>
@openshift-ci
Copy link

openshift-ci bot commented Jan 13, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: bgartzi

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link

openshift-ci bot commented Jan 13, 2026

@bgartzi: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/infra-provision-verify 11b7f47 link true /test infra-provision-verify
ci/prow/operator-lifecycle-verify 11b7f47 link true /test operator-lifecycle-verify

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@bgartzi
Copy link
Author

bgartzi commented Jan 13, 2026

cc @Jakob-Naucke, updating compute-pcrs in this PR so we can tell dependabot to unignore it before I forget. I'm still working on integration tests for #116 meanhwile.

@bgartzi
Copy link
Author

bgartzi commented Jan 13, 2026

Sorry for the noise @Jakob-Naucke, we will need to wait for yet another fix in the compute-pcrs lib. At least if we aim to implement an integration test that considers adding an approved image that is fcos > 42 (trusted-execution-clusters/compute-pcrs#60), which we need if we want different shim grub and kernel compared to the 42 images integration tests are currently using.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant