From 64b0a0c11d0415535a924e953306b027b04591c9 Mon Sep 17 00:00:00 2001 From: Alessandro Rossi Date: Thu, 6 Aug 2026 16:20:09 +0200 Subject: [PATCH] CNTRLPLANE-4010: add Azure AKS external OIDC periodic and presubmit jobs for 4.22, 4.23 and 5.0 The Azure AKS external OIDC test jobs were not propagated when release-4.22, release-4.23 and release-5.0 branches were created, because config-brancher runs with --skip-periodics. Add the following jobs, mirroring the existing 4.21 configuration: - e2e-azure-aks-external-oidc periodic (daily) on 4.22, 4.23 and 5.0 - e2e-azure-aks-external-oidc-techpreview periodic (3x/month) on 4.22, 4.23 and 5.0 - e2e-azure-aks-external-oidc presubmit (second-stage) on 4.22, 4.23 and 5.0 - e2e-azure-aks-external-oidc-techpreview presubmit (optional) on 4.22 The techpreview presubmit on 4.23 and 5.0 already exists and is not modified. Co-Authored-By: Claude Opus 4.6 --- .../openshift-hypershift-release-4.22.yaml | 21 +++ ...ft-hypershift-release-4.22__periodics.yaml | 19 ++ .../openshift-hypershift-release-4.23.yaml | 10 + ...ft-hypershift-release-4.23__periodics.yaml | 19 ++ .../openshift-hypershift-release-5.0.yaml | 10 + ...ift-hypershift-release-5.0__periodics.yaml | 19 ++ ...ift-hypershift-release-4.22-periodics.yaml | 166 +++++++++++++++++ ...ft-hypershift-release-4.22-presubmits.yaml | 173 ++++++++++++++++++ ...ift-hypershift-release-4.23-periodics.yaml | 166 +++++++++++++++++ ...ft-hypershift-release-4.23-presubmits.yaml | 88 +++++++++ ...hift-hypershift-release-5.0-periodics.yaml | 166 +++++++++++++++++ ...ift-hypershift-release-5.0-presubmits.yaml | 88 +++++++++ 12 files changed, 945 insertions(+) diff --git a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.22.yaml b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.22.yaml index 0f274414ca51c..7e280cc590441 100644 --- a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.22.yaml +++ b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.22.yaml @@ -413,6 +413,27 @@ tests: steps: cluster_profile: hypershift-aks workflow: hypershift-azure-aks-conformance +- always_run: false + as: e2e-azure-aks-external-oidc + pipeline_skip_if_only_changed: (^(\.tekton|\.github|\.claude|docs|examples|enhancements|contrib|\.cursor|test/envtest)/)|(\.md$)|((^|/)OWNERS$)|(/overrides\.yaml$)|(^renovate\.json$)|(/\.testcoverage\.yml$)|(^\.gitlint$)|(^\.gitignore$)|(^\.coderabbit\.yaml$)|(^\.dockerignore$)|(^codecov\.yml$)|(^(?:[^t/][^/]*|t|t[^e/][^/]*|te|te[^s/][^/]*|tes|tes[^t/][^/]*|test[^/]+)/.*_test\.go$) + steps: + cluster_profile: hypershift-aks + env: + AUTH_THROUGH_CERTS: "true" + CI_TESTS_RUN: TestExternalOIDC + ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" + workflow: hypershift-azure-aks-external-oidc +- always_run: false + as: e2e-azure-aks-external-oidc-techpreview + optional: true + steps: + cluster_profile: hypershift-aks + env: + AUTH_THROUGH_CERTS: "true" + CI_TESTS_RUN: TestExternalOIDC + ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" + TECH_PREVIEW_NO_UPGRADE: "true" + workflow: hypershift-azure-aks-external-oidc - as: security skip_if_only_changed: (^(\.tekton|\.github|\.claude|docs|examples|enhancements|contrib|\.cursor|test/envtest)/)|(^[A-Z]+\.md$)|((^|/)OWNERS$)|(/overrides\.yaml$)|(^renovate\.json$)|(/\.testcoverage\.yml$)|(^\.gitlint$)|(^\.gitignore$)|(^\.coderabbit\.yaml$)|(^\.dockerignore$)|(^codecov\.yml$) steps: diff --git a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.22__periodics.yaml b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.22__periodics.yaml index cd2c1cc7cefcb..a732feb855c55 100644 --- a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.22__periodics.yaml +++ b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.22__periodics.yaml @@ -239,6 +239,25 @@ tests: OAUTH_EXTERNAL_OIDC_PROVIDER: keycloak TECH_PREVIEW_NO_UPGRADE: "true" workflow: hypershift-aws-e2e-external-oidc +- as: e2e-azure-aks-external-oidc + cron: 0 9 * * * + steps: + cluster_profile: hypershift-aks + env: + AUTH_THROUGH_CERTS: "true" + CI_TESTS_RUN: TestExternalOIDC + ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" + workflow: hypershift-azure-aks-external-oidc +- as: e2e-azure-aks-external-oidc-techpreview + cron: 0 20 9,18,25 * * + steps: + cluster_profile: hypershift-aks + env: + AUTH_THROUGH_CERTS: "true" + CI_TESTS_RUN: TestExternalOIDC + ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" + TECH_PREVIEW_NO_UPGRADE: "true" + workflow: hypershift-azure-aks-external-oidc - as: e2e-powervs-ovn cron: 0 4 1 12 * steps: diff --git a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.23.yaml b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.23.yaml index 8527105789d27..b83a142a8c342 100644 --- a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.23.yaml +++ b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.23.yaml @@ -640,6 +640,16 @@ tests: OAUTH_EXTERNAL_OIDC_PROVIDER: keycloak TECH_PREVIEW_NO_UPGRADE: "true" workflow: hypershift-aws-e2e-external-oidc +- always_run: false + as: e2e-azure-aks-external-oidc + pipeline_skip_if_only_changed: (^(\.tekton|\.github|\.claude|docs|examples|enhancements|contrib|\.cursor|test/envtest)/)|(\.md$)|((^|/)OWNERS$)|(/overrides\.yaml$)|(^renovate\.json$)|(/\.testcoverage\.yml$)|(^\.gitlint$)|(^\.gitignore$)|(^\.coderabbit\.yaml$)|(^\.dockerignore$)|(^codecov\.yml$)|(^(?:[^t/][^/]*|t|t[^e/][^/]*|te|te[^s/][^/]*|tes|tes[^t/][^/]*|test[^/]+)/.*_test\.go$) + steps: + cluster_profile: hypershift-aks + env: + AUTH_THROUGH_CERTS: "true" + CI_TESTS_RUN: TestExternalOIDC + ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" + workflow: hypershift-azure-aks-external-oidc - always_run: false as: e2e-azure-aks-external-oidc-techpreview optional: true diff --git a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.23__periodics.yaml b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.23__periodics.yaml index cafe054cdc28f..d7599b60c5a43 100644 --- a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.23__periodics.yaml +++ b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.23__periodics.yaml @@ -254,6 +254,25 @@ tests: OAUTH_EXTERNAL_OIDC_PROVIDER: keycloak TECH_PREVIEW_NO_UPGRADE: "true" workflow: hypershift-aws-e2e-external-oidc +- as: e2e-azure-aks-external-oidc + cron: 0 9 * * * + steps: + cluster_profile: hypershift-aks + env: + AUTH_THROUGH_CERTS: "true" + CI_TESTS_RUN: TestExternalOIDC + ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" + workflow: hypershift-azure-aks-external-oidc +- as: e2e-azure-aks-external-oidc-techpreview + cron: 0 20 9,18,25 * * + steps: + cluster_profile: hypershift-aks + env: + AUTH_THROUGH_CERTS: "true" + CI_TESTS_RUN: TestExternalOIDC + ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" + TECH_PREVIEW_NO_UPGRADE: "true" + workflow: hypershift-azure-aks-external-oidc - as: e2e-powervs-ovn cron: 0 8 * * * steps: diff --git a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-5.0.yaml b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-5.0.yaml index a96000818c293..edc76deeeb30b 100644 --- a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-5.0.yaml +++ b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-5.0.yaml @@ -641,6 +641,16 @@ tests: OAUTH_EXTERNAL_OIDC_PROVIDER: keycloak TECH_PREVIEW_NO_UPGRADE: "true" workflow: hypershift-aws-e2e-external-oidc +- always_run: false + as: e2e-azure-aks-external-oidc + pipeline_skip_if_only_changed: (^(\.tekton|\.github|\.claude|docs|examples|enhancements|contrib|\.cursor|test/envtest)/)|(\.md$)|((^|/)OWNERS$)|(/overrides\.yaml$)|(^renovate\.json$)|(/\.testcoverage\.yml$)|(^\.gitlint$)|(^\.gitignore$)|(^\.coderabbit\.yaml$)|(^\.dockerignore$)|(^codecov\.yml$)|(^(?:[^t/][^/]*|t|t[^e/][^/]*|te|te[^s/][^/]*|tes|tes[^t/][^/]*|test[^/]+)/.*_test\.go$) + steps: + cluster_profile: hypershift-aks + env: + AUTH_THROUGH_CERTS: "true" + CI_TESTS_RUN: TestExternalOIDC + ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" + workflow: hypershift-azure-aks-external-oidc - always_run: false as: e2e-azure-aks-external-oidc-techpreview optional: true diff --git a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-5.0__periodics.yaml b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-5.0__periodics.yaml index 062617f8bc43d..339e1a5977cba 100644 --- a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-5.0__periodics.yaml +++ b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-5.0__periodics.yaml @@ -311,6 +311,25 @@ tests: OAUTH_EXTERNAL_OIDC_PROVIDER: keycloak TECH_PREVIEW_NO_UPGRADE: "true" workflow: hypershift-aws-e2e-external-oidc +- as: e2e-azure-aks-external-oidc + cron: 0 9 * * * + steps: + cluster_profile: hypershift-aks + env: + AUTH_THROUGH_CERTS: "true" + CI_TESTS_RUN: TestExternalOIDC + ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" + workflow: hypershift-azure-aks-external-oidc +- as: e2e-azure-aks-external-oidc-techpreview + cron: 0 20 9,18,25 * * + steps: + cluster_profile: hypershift-aks + env: + AUTH_THROUGH_CERTS: "true" + CI_TESTS_RUN: TestExternalOIDC + ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" + TECH_PREVIEW_NO_UPGRADE: "true" + workflow: hypershift-azure-aks-external-oidc - as: e2e-powervs-ovn cron: 0 4 1 12 * steps: diff --git a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.22-periodics.yaml b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.22-periodics.yaml index 37b5518873887..19d12f93fcb26 100644 --- a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.22-periodics.yaml +++ b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.22-periodics.yaml @@ -1413,6 +1413,172 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build01 + cron: 0 9 * * * + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.22 + org: openshift + repo: hypershift + labels: + ci-operator.openshift.io/cloud: hypershift-aks + ci-operator.openshift.io/cloud-cluster-profile: hypershift-aks + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "4.22" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-hypershift-release-4.22-periodics-e2e-azure-aks-external-oidc + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-azure-aks-external-oidc + - --variant=periodics + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build01 + cron: 0 20 9,18,25 * * + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.22 + org: openshift + repo: hypershift + labels: + ci-operator.openshift.io/cloud: hypershift-aks + ci-operator.openshift.io/cloud-cluster-profile: hypershift-aks + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "4.22" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-hypershift-release-4.22-periodics-e2e-azure-aks-external-oidc-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-azure-aks-external-oidc-techpreview + - --variant=periodics + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build01 cron: 0 */2 * * * diff --git a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.22-presubmits.yaml b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.22-presubmits.yaml index a97658d094300..b065b5f49e8ce 100644 --- a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.22-presubmits.yaml +++ b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.22-presubmits.yaml @@ -1213,6 +1213,179 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-aws-upgrade-hypershift-operator,?($|\s.*) + - agent: kubernetes + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(\.tekton|\.github|\.claude|docs|examples|enhancements|contrib|\.cursor|test/envtest)/)|(\.md$)|((^|/)OWNERS$)|(/overrides\.yaml$)|(^renovate\.json$)|(/\.testcoverage\.yml$)|(^\.gitlint$)|(^\.gitignore$)|(^\.coderabbit\.yaml$)|(^\.dockerignore$)|(^codecov\.yml$)|(^(?:[^t/][^/]*|t|t[^e/][^/]*|te|te[^s/][^/]*|tes|tes[^t/][^/]*|test[^/]+)/.*_test\.go$) + branches: + - ^release-4\.22$ + - ^release-4\.22- + cluster: build08 + context: ci/prow/e2e-azure-aks-external-oidc + decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile + - Dockerfile.control-plane + labels: + ci-operator.openshift.io/cloud: hypershift-aks + ci-operator.openshift.io/cloud-cluster-profile: hypershift-aks + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-hypershift-release-4.22-e2e-azure-aks-external-oidc + rerun_command: /test e2e-azure-aks-external-oidc + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-azure-aks-external-oidc + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-azure-aks-external-oidc,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^release-4\.22$ + - ^release-4\.22- + cluster: build08 + context: ci/prow/e2e-azure-aks-external-oidc-techpreview + decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile + - Dockerfile.control-plane + labels: + ci-operator.openshift.io/cloud: hypershift-aks + ci-operator.openshift.io/cloud-cluster-profile: hypershift-aks + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-hypershift-release-4.22-e2e-azure-aks-external-oidc-techpreview + optional: true + rerun_command: /test e2e-azure-aks-external-oidc-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-azure-aks-external-oidc-techpreview + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-azure-aks-external-oidc-techpreview,?($|\s.*) - agent: kubernetes always_run: false branches: diff --git a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.23-periodics.yaml b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.23-periodics.yaml index 4f7b51f7a59ec..a17d4edd28878 100644 --- a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.23-periodics.yaml +++ b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.23-periodics.yaml @@ -1328,6 +1328,172 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build07 + cron: 0 9 * * * + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.23 + org: openshift + repo: hypershift + labels: + ci-operator.openshift.io/cloud: hypershift-aks + ci-operator.openshift.io/cloud-cluster-profile: hypershift-aks + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "4.23" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-hypershift-release-4.23-periodics-e2e-azure-aks-external-oidc + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-azure-aks-external-oidc + - --variant=periodics + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build07 + cron: 0 20 9,18,25 * * + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.23 + org: openshift + repo: hypershift + labels: + ci-operator.openshift.io/cloud: hypershift-aks + ci-operator.openshift.io/cloud-cluster-profile: hypershift-aks + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "4.23" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-hypershift-release-4.23-periodics-e2e-azure-aks-external-oidc-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-azure-aks-external-oidc-techpreview + - --variant=periodics + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build07 cron: 0 */2 * * * diff --git a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.23-presubmits.yaml b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.23-presubmits.yaml index 03a538d3fef55..844919e751f8b 100644 --- a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.23-presubmits.yaml +++ b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.23-presubmits.yaml @@ -1575,6 +1575,94 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-aws-upgrade-hypershift-operator,?($|\s.*) + - agent: kubernetes + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(\.tekton|\.github|\.claude|docs|examples|enhancements|contrib|\.cursor|test/envtest)/)|(\.md$)|((^|/)OWNERS$)|(/overrides\.yaml$)|(^renovate\.json$)|(/\.testcoverage\.yml$)|(^\.gitlint$)|(^\.gitignore$)|(^\.coderabbit\.yaml$)|(^\.dockerignore$)|(^codecov\.yml$)|(^(?:[^t/][^/]*|t|t[^e/][^/]*|te|te[^s/][^/]*|tes|tes[^t/][^/]*|test[^/]+)/.*_test\.go$) + branches: + - ^release-4\.23$ + - ^release-4\.23- + cluster: build06 + context: ci/prow/e2e-azure-aks-external-oidc + decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile + - Dockerfile.control-plane + - Dockerfile.e2e + labels: + ci-operator.openshift.io/cloud: hypershift-aks + ci-operator.openshift.io/cloud-cluster-profile: hypershift-aks + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-hypershift-release-4.23-e2e-azure-aks-external-oidc + rerun_command: /test e2e-azure-aks-external-oidc + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-azure-aks-external-oidc + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-azure-aks-external-oidc,?($|\s.*) - agent: kubernetes always_run: false branches: diff --git a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-5.0-periodics.yaml b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-5.0-periodics.yaml index 6b31e12dc2df9..e4cab6488c0b5 100644 --- a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-5.0-periodics.yaml +++ b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-5.0-periodics.yaml @@ -1760,6 +1760,172 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build07 + cron: 0 9 * * * + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-5.0 + org: openshift + repo: hypershift + labels: + ci-operator.openshift.io/cloud: hypershift-aks + ci-operator.openshift.io/cloud-cluster-profile: hypershift-aks + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "5.0" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-hypershift-release-5.0-periodics-e2e-azure-aks-external-oidc + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-azure-aks-external-oidc + - --variant=periodics + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build07 + cron: 0 20 9,18,25 * * + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-5.0 + org: openshift + repo: hypershift + labels: + ci-operator.openshift.io/cloud: hypershift-aks + ci-operator.openshift.io/cloud-cluster-profile: hypershift-aks + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "5.0" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-hypershift-release-5.0-periodics-e2e-azure-aks-external-oidc-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-azure-aks-external-oidc-techpreview + - --variant=periodics + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build07 cron: 0 */2 * * * diff --git a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-5.0-presubmits.yaml b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-5.0-presubmits.yaml index f511aaf889105..38fdf44c77548 100644 --- a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-5.0-presubmits.yaml +++ b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-5.0-presubmits.yaml @@ -1575,6 +1575,94 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-aws-upgrade-hypershift-operator,?($|\s.*) + - agent: kubernetes + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(\.tekton|\.github|\.claude|docs|examples|enhancements|contrib|\.cursor|test/envtest)/)|(\.md$)|((^|/)OWNERS$)|(/overrides\.yaml$)|(^renovate\.json$)|(/\.testcoverage\.yml$)|(^\.gitlint$)|(^\.gitignore$)|(^\.coderabbit\.yaml$)|(^\.dockerignore$)|(^codecov\.yml$)|(^(?:[^t/][^/]*|t|t[^e/][^/]*|te|te[^s/][^/]*|tes|tes[^t/][^/]*|test[^/]+)/.*_test\.go$) + branches: + - ^release-5\.0$ + - ^release-5\.0- + cluster: build06 + context: ci/prow/e2e-azure-aks-external-oidc + decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile + - Dockerfile.control-plane + - Dockerfile.e2e + labels: + ci-operator.openshift.io/cloud: hypershift-aks + ci-operator.openshift.io/cloud-cluster-profile: hypershift-aks + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-hypershift-release-5.0-e2e-azure-aks-external-oidc + rerun_command: /test e2e-azure-aks-external-oidc + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-azure-aks-external-oidc + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-azure-aks-external-oidc,?($|\s.*) - agent: kubernetes always_run: false branches: