Skip to content

Conversation

@ricardomaraschini
Copy link
Contributor

@ricardomaraschini ricardomaraschini commented Mar 9, 2021

This PR adds ICSP support to Image Registry during pullthrough operations.
Depends on openshift/cluster-image-registry-operator#668

@openshift-ci-robot openshift-ci-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Mar 9, 2021
@ricardomaraschini
Copy link
Contributor Author

/retest

2 similar comments
@ricardomaraschini
Copy link
Contributor Author

/retest

@ricardomaraschini
Copy link
Contributor Author

/retest

@ricardomaraschini ricardomaraschini changed the title WIP - Image registry ICSP support Bug 1918376: ICSP support during Image Registry pullthrough Mar 18, 2021
@openshift-ci-robot openshift-ci-robot added bugzilla/severity-high Referenced Bugzilla bug's severity is high for the branch this PR is targeting. bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. and removed do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. labels Mar 18, 2021
@openshift-ci-robot
Copy link
Contributor

@ricardomaraschini: This pull request references Bugzilla bug 1918376, which is valid. The bug has been moved to the POST state. The bug has been updated to refer to the pull request using the external bug tracker.

3 validation(s) were run on this bug
  • bug is open, matching expected state (open)
  • bug target release (4.8.0) matches configured target release for branch (4.8.0)
  • bug is in the state ASSIGNED, which is one of the valid states (NEW, ASSIGNED, ON_DEV, POST, POST)

Requesting review from QA contact:
/cc @wzheng1

Details

In response to this:

Bug 1918376: ICSP support during Image Registry pullthrough

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@ricardomaraschini ricardomaraschini changed the title Bug 1918376: ICSP support during Image Registry pullthrough WIP - Bug 1918376: ICSP support during Image Registry pullthrough Mar 18, 2021
@openshift-ci-robot openshift-ci-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Mar 18, 2021
@openshift-ci-robot
Copy link
Contributor

@ricardomaraschini: This pull request references Bugzilla bug 1918376, which is valid.

3 validation(s) were run on this bug
  • bug is open, matching expected state (open)
  • bug target release (4.8.0) matches configured target release for branch (4.8.0)
  • bug is in the state POST, which is one of the valid states (NEW, ASSIGNED, ON_DEV, POST, POST)

Requesting review from QA contact:
/cc @wzheng1

Details

In response to this:

WIP - Bug 1918376: ICSP support during Image Registry pullthrough

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@ricardomaraschini
Copy link
Contributor Author

/assign @dmage

@ricardomaraschini
Copy link
Contributor Author

@dmage Even though we still don't have a definitive version for openshift/library-go#939 it might be good to start reviewing this.

@openshift-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: ricardomaraschini
To complete the pull request process, please ask for approval from dmage after the PR has been reviewed.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

).WithRequestModifiers(
requesttrace.New(ctx, req),
).WithAlternateRepositoryStrategy(
strategy.NewSimpleLookupICSPStrategy("", icsp),
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This strategy shouldn't be used by the registry. The registry shouldn't ask api-server for a list for ICSPs on every incoming request, it should use informers that use watches to update their cache.

@xiuwang
Copy link

xiuwang commented Apr 8, 2021

Need to launch a disconnect cluster which is blocked by qe jenkins job outage.

@dmage
Copy link
Contributor

dmage commented Apr 8, 2021

@xiuwang please don't test WIP (work-in-progress) PRs

LatencyMetric and ResultMetric interfaces now include a context.Context
as the first parameter.
This commit makes registry to start taking ICSP rules into account when
doing pullthrough operations.
Last changes in library-go made it uneeded.
API has changed and now this should return imageapiv1.SecretList and
not core.SecretList.
Tests now depend on being capable of reading ICSP rules. This commit
injects the needed client whenever it is needed.
Implementing tests to validate ICSP assessment during pullthrough
operations.
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Apr 26, 2021

@ricardomaraschini: The following tests failed, say /retest to rerun all failed tests:

Test name Commit Details Rerun command
ci/prow/verify ca53aca link /test verify
ci/prow/e2e-aws ca53aca link /test e2e-aws
ci/prow/e2e-aws-image-registry ca53aca link /test e2e-aws-image-registry
ci/prow/e2e-agnostic-image-registry ca53aca link /test e2e-agnostic-image-registry
ci/prow/e2e-aws-upgrade ca53aca link /test e2e-aws-upgrade
ci/prow/images ca53aca link /test images
ci/prow/unit ca53aca link /test unit

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@ricardomaraschini
Copy link
Contributor Author

Closing this one as there is a new PR to add ICSP support: #277

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Jun 7, 2021

@ricardomaraschini: This pull request references Bugzilla bug 1918376. The bug has been updated to no longer refer to the pull request using the external bug tracker.

Details

In response to this:

WIP - Bug 1918376: ICSP support during Image Registry pullthrough

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bugzilla/severity-high Referenced Bugzilla bug's severity is high for the branch this PR is targeting. bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants