From 46f91a553b8026199fc7d434a9d98b9504f68dbb Mon Sep 17 00:00:00 2001 From: Arun Maurya Date: Tue, 8 Sep 2026 14:19:49 +0530 Subject: [PATCH] CM-1225: Run tls-13 before Feature:TLSProfile e2e in tls-scanner tls-13 enables the TLSAdherence feature gate. The e2e patches apiserver.spec.tlsAdherence, which kube-apiserver drops as unknown until that gate is on. Keep deploy-operand after the e2e so TrustManager is recreated for tls-scanner-run. --- .../openshift-priv-cert-manager-operator-master.yaml | 2 +- .../openshift-cert-manager-operator-master.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/ci-operator/config/openshift-priv/cert-manager-operator/openshift-priv-cert-manager-operator-master.yaml b/ci-operator/config/openshift-priv/cert-manager-operator/openshift-priv-cert-manager-operator-master.yaml index cdded2a371b48..3f63ddd7c2427 100644 --- a/ci-operator/config/openshift-priv/cert-manager-operator/openshift-priv-cert-manager-operator-master.yaml +++ b/ci-operator/config/openshift-priv/cert-manager-operator/openshift-priv-cert-manager-operator-master.yaml @@ -428,6 +428,7 @@ tests: TLS_13_ENABLE_TLS_ADHERENCE: "true" TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents test: + - ref: tls-13 - as: test-tls-profile cli: latest commands: E2E_GINKGO_LABEL_FILTER='Feature:TLSProfile' make test-e2e @@ -443,7 +444,6 @@ tests: resources: requests: cpu: 100m - - ref: tls-13 - ref: tls-scanner-run workflow: optional-operators-ci-operator-sdk-aws - always_run: false diff --git a/ci-operator/config/openshift/cert-manager-operator/openshift-cert-manager-operator-master.yaml b/ci-operator/config/openshift/cert-manager-operator/openshift-cert-manager-operator-master.yaml index 1c7593d4f9c63..29917399b3230 100644 --- a/ci-operator/config/openshift/cert-manager-operator/openshift-cert-manager-operator-master.yaml +++ b/ci-operator/config/openshift/cert-manager-operator/openshift-cert-manager-operator-master.yaml @@ -483,6 +483,7 @@ tests: TLS_13_ENABLE_TLS_ADHERENCE: "true" TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents test: + - ref: tls-13 - as: test-tls-profile cli: latest commands: E2E_GINKGO_LABEL_FILTER='Feature:TLSProfile' make test-e2e @@ -498,7 +499,6 @@ tests: resources: requests: cpu: 100m - - ref: tls-13 - ref: tls-scanner-run workflow: optional-operators-ci-operator-sdk-aws - always_run: false