metadata: annotations: prow.k8s.io/context: ci/prow/e2e-ocp-5-0 prow.k8s.io/job: pull-ci-openshift-cluster-logging-operator-master-e2e-ocp-5-0 creationTimestamp: "2026-10-28T16:58:53Z" generation: 11 labels: ci.openshift.io/generator: prowgen created-by-prow: "true" event-GUID: d87c3a00-d2f0-11f1-8f21-5b511eb5a421 pj-rehearse.openshift.io/can-be-rehearsed: "true" prow.k8s.io/build-id: "2115488509589458944" prow.k8s.io/context: e2e-ocp-5-0 prow.k8s.io/id: 055d0be0-7ea2-4d96-8919-6b8f25b6391e prow.k8s.io/is-optional: "true" prow.k8s.io/job: pull-ci-openshift-cluster-logging-operator-master-e2e-ocp-5-0 prow.k8s.io/refs.base_ref: master prow.k8s.io/refs.org: openshift prow.k8s.io/refs.pull: "3530" prow.k8s.io/refs.repo: cluster-logging-operator prow.k8s.io/type: presubmit name: 055d0be0-7ea2-4d96-8919-6b8f25b6391e namespace: ci resourceVersion: "8337778516" uid: 3f1d934b-f10f-4799-bd7c-082bb8e03767 spec: agent: kubernetes cluster: build10 context: ci/prow/e2e-ocp-5-0 decoration_config: censor_secrets: true censoring_options: minimum_secret_length: 6 gcs_configuration: bucket: test-platform-results-public compress_file_types: - txt - log - json - tar - html - yaml default_org: openshift default_repo: origin mediaTypes: log: text/plain path_strategy: single gcs_credentials_secret: gce-sa-credentials-gcs-publisher grace_period: 1h0m0s resources: clonerefs: limits: memory: 3Gi requests: cpu: 100m memory: 500Mi initupload: limits: memory: 200Mi requests: cpu: 100m memory: 50Mi place_entrypoint: limits: memory: 100Mi requests: cpu: 100m memory: 25Mi sidecar: limits: memory: 2Gi requests: cpu: 100m memory: 250Mi sparse_checkout_files: - Dockerfile timeout: 8h0m0s utility_images: clonerefs: us-docker.pkg.dev/k8s-infra-prow/images/clonerefs:v20261023-0d9737ca2 entrypoint: us-docker.pkg.dev/k8s-infra-prow/images/entrypoint:v20261023-0d9737ca2 initupload: us-docker.pkg.dev/k8s-infra-prow/images/initupload:v20261023-0d9737ca2 sidecar: us-docker.pkg.dev/k8s-infra-prow/images/sidecar:v20261023-0d9737ca2 job: pull-ci-openshift-cluster-logging-operator-master-e2e-ocp-5-0 namespace: ci pod_spec: containers: - args: - --enable-secrets-store-csi-driver=true - --gcs-upload-secret=/secrets/gcs/service-account.json - --gsm-config=/etc/gsm-config/gsm-config.yaml - --gsm-credentials-file=/etc/gsm-credentials/key.json - --gsm-project-config=/etc/gsm-config/gsm-project-config.yaml - --hive-kubeconfig=/secrets/hive-hive-credentials/kubeconfig - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-ocp-5-0 command: - ci-operator env: - name: HTTP_SERVER_IP valueFrom: fieldRef: fieldPath: status.podIP image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest imagePullPolicy: Always name: "" ports: - containerPort: 8080 name: http resources: requests: cpu: 10m volumeMounts: - mountPath: /etc/boskos name: boskos readOnly: true - mountPath: /secrets/ci-pull-credentials name: ci-pull-credentials readOnly: true - mountPath: /secrets/gcs name: gcs-credentials readOnly: true - mountPath: /etc/gsm-config name: gsm-config readOnly: true - mountPath: /etc/gsm-credentials name: gsm-sa-key readOnly: true - mountPath: /secrets/hive-hive-credentials name: hive-hive-credentials readOnly: true - mountPath: /secrets/manifest-tool name: manifest-tool-local-pusher readOnly: true - mountPath: /etc/pull-secret name: pull-secret readOnly: true - mountPath: /etc/report name: result-aggregator readOnly: true serviceAccountName: ci-operator volumes: - name: boskos secret: items: - key: credentials path: credentials secretName: boskos-credentials - name: ci-pull-credentials secret: secretName: ci-pull-credentials - configMap: name: gsm-config name: gsm-config - csi: driver: secrets-store.csi.k8s.io readOnly: true volumeAttributes: secretProviderClass: ci-operator-sa-key-spc name: gsm-sa-key - name: hive-hive-credentials secret: secretName: hive-hive-credentials - name: manifest-tool-local-pusher secret: secretName: manifest-tool-local-pusher - name: pull-secret secret: secretName: registry-pull-credentials - name: result-aggregator secret: secretName: result-aggregator prowjob_defaults: tenant_id: GlobalDefaultID refs: base_link: https://github.com/openshift/cluster-logging-operator/commit/d3a680028d4e0f7e0102c50551da7b862abcc8ff base_ref: master base_sha: d3a680028d4e0f7e0102c50551da7b862abcc8ff org: openshift pulls: - author: vparfonov author_link: https://github.com/vparfonov commit_link: https://github.com/openshift/cluster-logging-operator/pull/3530/commits/6f412f87d268e92b20e9e2b80f5da48f293464b5 head_ref: log9754 link: https://github.com/openshift/cluster-logging-operator/pull/3530 number: 3530 sha: 6f412f87d268e92b20e9e2b80f5da48f293464b5 title: 'fix(security): harden collector with `container_logwriter_t` and non-root execution (LOG-9754)' repo: cluster-logging-operator repo_link: https://github.com/openshift/cluster-logging-operator sparse_checkout_files: - Dockerfile report: true rerun_command: /test e2e-ocp-5-0 type: presubmit status: build_id: "2115488509589458944" completionTime: "2026-10-28T17:17:40Z" description: Job failed. pendingTime: "2026-10-28T16:58:59Z" pod_name: 055d0be0-7ea2-4d96-8919-6b8f25b6391e prev_report_states: gcsk8sreporter: failure gcsreporter: failure github-reporter: failure startTime: "2026-10-28T16:58:53Z" state: failure url: https://prow.ci.openshift.org/view/gs/test-platform-results-public/pr-logs/pull/openshift_cluster-logging-operator/3530/pull-ci-openshift-cluster-logging-operator-master-e2e-ocp-5-0/2115488509589458944