From a3e5b4afebf7c8f6d9e10f9aaae03a6e35eacaa7 Mon Sep 17 00:00:00 2001 From: Jan Safranek Date: Thu, 3 Sep 2026 09:44:22 +0200 Subject: [PATCH] Graduate SELinuxMount to GA It is GA in Kubernetes 1.37 and having it disabled breaks Kubernetes tests that filter test by `[Feature:OffByDefault]` and not by the gates in API. And we want it enabled + GA in OCP 5.1 anyway. --- features.md | 2 +- features/features.go | 2 +- .../featuregates/featureGate-4-10-Hypershift-Default.yaml | 6 +++--- .../featuregates/featureGate-4-10-Hypershift-OKD.yaml | 6 +++--- .../featureGate-4-10-SelfManagedHA-Default.yaml | 6 +++--- .../featuregates/featureGate-4-10-SelfManagedHA-OKD.yaml | 6 +++--- 6 files changed, 14 insertions(+), 14 deletions(-) diff --git a/features.md b/features.md index 659d112df79..56a3cc6fab3 100644 --- a/features.md +++ b/features.md @@ -81,7 +81,6 @@ | OVNObservability| | | Enabled | Enabled | | | Enabled | Enabled | | OnPremDNSRecords| | | Enabled | Enabled | | | Enabled | Enabled | | OpenShiftPodSecurityAdmission| | | Enabled | Enabled | | | Enabled | Enabled | -| SELinuxMount| | | Enabled | Enabled | | | Enabled | Enabled | | SignatureStores| | | Enabled | Enabled | | | Enabled | Enabled | | TLSAdherence| | | Enabled | Enabled | | | Enabled | Enabled | | TLSGroupPreferences| | | Enabled | Enabled | | | Enabled | Enabled | @@ -115,6 +114,7 @@ | MutableCSINodeAllocatableCount| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | MutatingAdmissionPolicy| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | OSStreams| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | +| SELinuxMount| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | SELinuxMountGAReadiness| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | ServiceAccountTokenNodeBinding| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | SigstoreImageVerification| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | diff --git a/features/features.go b/features/features.go index 4052d88ed1c..aaad24aade2 100644 --- a/features/features.go +++ b/features/features.go @@ -735,7 +735,7 @@ var ( contactPerson("jsafrane"). productScope(kubernetes). enhancementPR("https://github.com/kubernetes/enhancements/issues/1710"). - enable(inTechPreviewNoUpgrade(), inDevPreviewNoUpgrade()). + enable(inDefault(), inOKD(), inTechPreviewNoUpgrade(), inDevPreviewNoUpgrade()). mustRegister() FeatureGateDualReplica = newFeatureGate("DualReplica"). diff --git a/payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml b/payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml index d037a0509ed..b969862e7a6 100644 --- a/payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml +++ b/payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml @@ -251,9 +251,6 @@ { "name": "ProvisioningRequestAvailable" }, - { - "name": "SELinuxMount" - }, { "name": "ShortCertRotation" }, @@ -361,6 +358,9 @@ { "name": "OSStreams" }, + { + "name": "SELinuxMount" + }, { "name": "SELinuxMountGAReadiness" }, diff --git a/payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml b/payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml index ed897be1384..250df43999e 100644 --- a/payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml +++ b/payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml @@ -253,9 +253,6 @@ { "name": "ProvisioningRequestAvailable" }, - { - "name": "SELinuxMount" - }, { "name": "ShortCertRotation" }, @@ -363,6 +360,9 @@ { "name": "OSStreams" }, + { + "name": "SELinuxMount" + }, { "name": "SELinuxMountGAReadiness" }, diff --git a/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-Default.yaml b/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-Default.yaml index 1663903ef77..29dcabe0741 100644 --- a/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-Default.yaml +++ b/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-Default.yaml @@ -239,9 +239,6 @@ { "name": "ProvisioningRequestAvailable" }, - { - "name": "SELinuxMount" - }, { "name": "ShortCertRotation" }, @@ -361,6 +358,9 @@ { "name": "OSStreams" }, + { + "name": "SELinuxMount" + }, { "name": "SELinuxMountGAReadiness" }, diff --git a/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-OKD.yaml b/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-OKD.yaml index aeeef50f7eb..53d562fb3c5 100644 --- a/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-OKD.yaml +++ b/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-OKD.yaml @@ -241,9 +241,6 @@ { "name": "ProvisioningRequestAvailable" }, - { - "name": "SELinuxMount" - }, { "name": "ShortCertRotation" }, @@ -363,6 +360,9 @@ { "name": "OSStreams" }, + { + "name": "SELinuxMount" + }, { "name": "SELinuxMountGAReadiness" },