metadata: annotations: prow.k8s.io/context: ci/prow/unit prow.k8s.io/job: pull-ci-openshift-installer-release-4.20-unit creationTimestamp: "2026-09-21T13:10:07Z" generation: 11 labels: ci.openshift.io/generator: prowgen created-by-prow: "true" event-GUID: c20c2be0-b5bd-11f1-9ed6-e7950799499e pj-rehearse.openshift.io/can-be-rehearsed: "true" prow.k8s.io/build-id: "2102022561888997376" prow.k8s.io/context: unit prow.k8s.io/id: da304e74-755a-4ed9-9af6-f038d73ecea4 prow.k8s.io/is-optional: "false" prow.k8s.io/job: pull-ci-openshift-installer-release-4.20-unit prow.k8s.io/refs.base_ref: release-4.20 prow.k8s.io/refs.org: openshift prow.k8s.io/refs.pull: "10891" prow.k8s.io/refs.repo: installer prow.k8s.io/type: presubmit name: da304e74-755a-4ed9-9af6-f038d73ecea4 namespace: ci resourceVersion: "8230213391" uid: f9711b88-ab49-41d4-9bc8-6e2e14ea1130 spec: agent: kubernetes cluster: build01 context: ci/prow/unit decoration_config: censor_secrets: true censoring_options: minimum_secret_length: 6 gcs_configuration: bucket: test-platform-results-public compress_file_types: - txt - log - json - tar - html - yaml default_org: openshift default_repo: origin mediaTypes: log: text/plain path_strategy: single gcs_credentials_secret: gce-sa-credentials-gcs-publisher grace_period: 1h0m0s resources: clonerefs: limits: memory: 3Gi requests: cpu: 100m memory: 500Mi initupload: limits: memory: 200Mi requests: cpu: 100m memory: 50Mi place_entrypoint: limits: memory: 100Mi requests: cpu: 100m memory: 25Mi sidecar: limits: memory: 2Gi requests: cpu: 100m memory: 250Mi sparse_checkout_files: - .ci-operator.yaml - images/baremetal/Dockerfile.ci - images/installer/Dockerfile.ci - images/installer/Dockerfile.upi.ci - images/libvirt/Dockerfile.ci - images/openstack/Dockerfile.ci timeout: 8h0m0s utility_images: clonerefs: us-docker.pkg.dev/k8s-infra-prow/images/clonerefs:v20260908-104d452f4 entrypoint: us-docker.pkg.dev/k8s-infra-prow/images/entrypoint:v20260908-104d452f4 initupload: us-docker.pkg.dev/k8s-infra-prow/images/initupload:v20260908-104d452f4 sidecar: us-docker.pkg.dev/k8s-infra-prow/images/sidecar:v20260908-104d452f4 job: pull-ci-openshift-installer-release-4.20-unit namespace: ci pod_spec: containers: - args: - --gcs-upload-secret=/secrets/gcs/service-account.json - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - --report-credentials-file=/etc/report/credentials - --target=unit command: - ci-operator env: - name: HTTP_SERVER_IP valueFrom: fieldRef: fieldPath: status.podIP image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest imagePullPolicy: Always name: "" ports: - containerPort: 8080 name: http resources: requests: cpu: 10m volumeMounts: - mountPath: /secrets/gcs name: gcs-credentials readOnly: true - mountPath: /secrets/manifest-tool name: manifest-tool-local-pusher readOnly: true - mountPath: /etc/pull-secret name: pull-secret readOnly: true - mountPath: /etc/report name: result-aggregator readOnly: true serviceAccountName: ci-operator volumes: - name: manifest-tool-local-pusher secret: secretName: manifest-tool-local-pusher - name: pull-secret secret: secretName: registry-pull-credentials - name: result-aggregator secret: secretName: result-aggregator prowjob_defaults: tenant_id: GlobalDefaultID refs: base_link: https://github.com/openshift/installer/commit/0b42839adc0600397af50204d4efb6b173ea1bbe base_ref: release-4.20 base_sha: 0b42839adc0600397af50204d4efb6b173ea1bbe org: openshift pulls: - author: kunalmemane author_link: https://github.com/kunalmemane commit_link: https://github.com/openshift/installer/pull/10891/commits/5447d244304e0876f0e31c7763a3bd34f8a3796d head_ref: CVE-2026-39829-4.20 link: https://github.com/openshift/installer/pull/10891 number: 10891 sha: 5447d244304e0876f0e31c7763a3bd34f8a3796d title: 'OCPBUGS-89953: Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto v0.48.0-sec.2 to mitigate CVE-2026-39829 (release-4.20)' repo: installer repo_link: https://github.com/openshift/installer sparse_checkout_files: - .ci-operator.yaml - images/baremetal/Dockerfile.ci - images/installer/Dockerfile.ci - images/installer/Dockerfile.upi.ci - images/libvirt/Dockerfile.ci - images/openstack/Dockerfile.ci report: true rerun_command: /test unit type: presubmit status: build_id: "2102022561888997376" completionTime: "2026-09-21T13:17:52Z" description: Job failed. pendingTime: "2026-09-21T13:10:07Z" pod_name: da304e74-755a-4ed9-9af6-f038d73ecea4 prev_report_states: gcsk8sreporter: failure gcsreporter: failure github-reporter: failure startTime: "2026-09-21T13:10:07Z" state: failure url: https://prow.ci.openshift.org/view/gs/test-platform-results-public/pr-logs/pull/openshift_installer/10891/pull-ci-openshift-installer-release-4.20-unit/2102022561888997376