From eb17e6c90e941396b355a4ff8805902363272d90 Mon Sep 17 00:00:00 2001 From: Scott Dodson Date: Mon, 24 Aug 2026 17:22:02 -0400 Subject: [PATCH] OCPBUGS-113639: move empty CRIOCredentialProviderConfig CR to run-level 0000_10 Backport of OCPBUGS-99266. The empty CRIOCredentialProviderConfig CR shipped at run-level 0000_05 (0000_05_config-operator_02_criocredentialproviderconfig.cr.yaml, gated on the CRIOCredentialProviderConfig feature gate) while its CRD is generated at run-level 0000_10. When the feature gate is enabled mid-update (e.g. setting TechPreviewNoUpgrade), the update-mode CVO cannot complete run-level 0000_05 because the CR's CRD does not yet exist, and that run-level 0000_05 failure blocks it from ever reaching run-level 0000_10 to create the CRD, deadlocking the update. Move the empty CR to run-level 0000_10 (operatorOrdering 02) so it sorts (and applies) after the CRD at 0000_10_config-operator_01 within the same run-level and component. This matches the existing precedent for the non-bootstrap Node config resource (0000_10_config-operator_02_node.cr.yaml). Master was fixed differently (openshift/api#2844, promote feature gate to Default + delete manual overrides); that is a feature promotion unsuitable for a z-stream, so this backport applies the minimal run-level reorder only. Co-Authored-By: Claude Opus 4.8 rh-pre-commit.version: 2.4.0 rh-pre-commit.check-secrets: ENABLED --- ...00_10_config-operator_02_criocredentialproviderconfig.cr.yaml} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename payload-command/empty-resources/{0000_05_config-operator_02_criocredentialproviderconfig.cr.yaml => 0000_10_config-operator_02_criocredentialproviderconfig.cr.yaml} (100%) diff --git a/payload-command/empty-resources/0000_05_config-operator_02_criocredentialproviderconfig.cr.yaml b/payload-command/empty-resources/0000_10_config-operator_02_criocredentialproviderconfig.cr.yaml similarity index 100% rename from payload-command/empty-resources/0000_05_config-operator_02_criocredentialproviderconfig.cr.yaml rename to payload-command/empty-resources/0000_10_config-operator_02_criocredentialproviderconfig.cr.yaml