Skip to content

Conversation

@fxierh
Copy link
Contributor

@fxierh fxierh commented Dec 7, 2023

The CloudCredential cap was introduced in OCP 4.15, see https://issues.redhat.com/browse/OCPEDGE-69.

One thing to note:
The disablement of CCO is supported on BareMetal platforms only in OCP 4.15, so non-BareMetal profiles must have CCO enabled.

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Dec 7, 2023
@openshift-ci-robot
Copy link
Contributor

openshift-ci-robot commented Dec 7, 2023

@fxierh: This pull request references CCO-453 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.15.0" version, but no target version was set.

Details

In response to this:

The CloudCredential cap was introduced in OCP 4.15.

One thing to note:

  • The disablement of CCO is supported on BareMetal platforms only in OCP 4.15.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openshift-ci openshift-ci bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Dec 7, 2023
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Dec 7, 2023

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@openshift-ci-robot
Copy link
Contributor

openshift-ci-robot commented Dec 7, 2023

@fxierh: This pull request references CCO-453 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.15.0" version, but no target version was set.

Details

In response to this:

The CloudCredential cap was introduced in OCP 4.15, see https://issues.redhat.com/browse/OCPEDGE-69.

One thing to note:
The disablement of CCO is supported on BareMetal platforms only in OCP 4.15, so non-BareMetal profiles must have CCO enabled.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openshift-ci-robot
Copy link
Contributor

@fxierh, pj-rehearse: unable to determine affected jobs. This could be due to a branch that needs to be rebased. ERROR:

could not load configuration from base revision of release repo: could not checkout worktree: '[git checkout 6a9b406585a80f743f3e456aa4ad7b7038d3f70f]' failed with out: fatal: reference is not a tree: 6a9b406585a80f743f3e456aa4ad7b7038d3f70f
and error exit status 128
Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse abort to abort all active rehearsals

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@fxierh
Copy link
Contributor Author

fxierh commented Dec 7, 2023

/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-4.15-multi-nightly-gcp-ipi-baselinecaps-none-arm-f7 periodic-ci-openshift-openshift-tests-private-release-4.15-multi-nightly-azure-ipi-baselinecaps-vset-additionalcap-arm-f14 periodic-ci-openshift-openshift-tests-private-release-4.15-amd64-nightly-4.15-upgrade-from-stable-4.14-aws-upi-baselinecaps-none-f28

@fxierh
Copy link
Contributor Author

fxierh commented Dec 7, 2023

/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-4.15-multi-nightly-gcp-ipi-baselinecaps-none-arm-f7 periodic-ci-openshift-openshift-tests-private-release-4.15-multi-nightly-azure-ipi-baselinecaps-vset-additionalcap-arm-f14 periodic-ci-openshift-openshift-tests-private-release-4.15-amd64-nightly-4.15-upgrade-from-stable-4.14-aws-upi-baselinecaps-none-f28

@fxierh
Copy link
Contributor Author

fxierh commented Dec 8, 2023

/cc @jianlinliu @jinyunma
/cc @shellyyang1989
/cc @jianping-shu

Would you please take a look ? Thank you.

@fxierh fxierh marked this pull request as ready for review December 8, 2023 03:44
@openshift-ci openshift-ci bot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Dec 8, 2023
@openshift-ci openshift-ci bot requested review from JianLi-RH and deepsm007 December 8, 2023 03:45
@shellyyang1989
Copy link
Contributor

The upgrade change looks good to me. Thanks

fi

# For OCP 4.15, CCO is required for non-BareMetal platforms
if [[ "$ocp_major_version" == "4" ]] && [[ "$ocp_minor_version" == "15" ]] && [[ "${selected_capability}" == "CloudCredential" ]]; then
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we don't need to check ocp version here, since cap CloudCredential is only in capset v4.14+ and vCurrent on 4.15+.
If there is any change in coming version (e.g 4.16), we can update the logic accordingly then.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed.

fi

# For OCP 4.15, CCO is required for non-BareMetal platforms
if [[ "$ocp_major_version" == "4" ]] && [[ "$ocp_minor_version" == "15" ]] && [[ "${selected_capability}" == "CloudCredential" ]]; then
Copy link
Contributor

@jianlinliu jianlinliu Dec 8, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
if [[ "$ocp_major_version" == "4" ]] && [[ "$ocp_minor_version" == "15" ]] && [[ "${selected_capability}" == "CloudCredential" ]]; then
if [[ "${selected_capability}" == "CloudCredential" ]]; then

On the line 66, only 4.15 has the possibility to select CloudCredential, so I think do not need to check version.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@pamoedom @aleskandro Do you know how to judge if the job is running on baremetal platform? Or shall we ignore the platform checking for now, because there is no baseline=none baremetal install yet?

Copy link
Member

@aleskandro aleskandro Dec 8, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi, baremetal-like installations have either Platform: None (upi-like) or Platform: Baremetal (ipi-like) set in the install config. If day2, the same information should be available in the infrastructure/cluster object

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jianlinliu @aleskandro
I guess I should read install-config.platform and allow CCO to be disabled only if platform is baremetal or none, right ?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jianlinliu CLUSTER_TYPE appears to take many possible values. It is possible to use it (with some regex matches for example) but I guess it's not going to be straightforward.
https://github.com/openshift/ci-tools/blob/21cd5e74813c87fa5e72e6f95aa0407b12014918/pkg/api/types.go#L1322

Copy link
Contributor

@jianlinliu jianlinliu Dec 8, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, because we only focus on baremetal ones, we do not have to match all the supported cluster type via regex. I saw some other step is using something like the following to match baremetal cluster profile,

"${CLUSTER_TYPE}" =~ ^packet.*$|^equinix.*$

I am not if we have some more other baremetal cluster types.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The current cluster profile name has equinix in its name. I do not remember if CLUSTER TYPE comes from that and I'm afk today. I wonder if vsphere and other similar scenarios should be excluded too though

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Indeed. Currently BM profiles have CLUSTER_TYPE prefixed with packet or equinix in ci-tools.
Using this now:

"${CLUSTER_TYPE}" =~ ^packet.*$|^equinix.*$

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For 4.15 the disablement of CCO is supported for BM only.
Whether/when to support other platforms is still under discussion.

@jianlinliu
Copy link
Contributor

/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-4.15-arm64-nightly-aws-ipi-disconnected-sts-basecap-none-f28

@fxierh
Copy link
Contributor Author

fxierh commented Dec 8, 2023

/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-4.15-arm64-nightly-aws-ipi-disconnected-sts-basecap-none-f28

@fxierh
Copy link
Contributor Author

fxierh commented Dec 8, 2023

/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-4.15-arm64-nightly-aws-ipi-disconnected-sts-basecap-none-f28 periodic-ci-openshift-openshift-tests-private-release-4.15-multi-nightly-gcp-ipi-baselinecaps-none-arm-f7 periodic-ci-openshift-openshift-tests-private-release-4.15-multi-nightly-azure-ipi-baselinecaps-vset-additionalcap-arm-f14 periodic-ci-openshift-openshift-tests-private-release-4.15-amd64-nightly-4.15-upgrade-from-stable-4.14-aws-upi-baselinecaps-none-f28

@openshift-ci-robot
Copy link
Contributor

@fxierh: job(s): periodic-ci-openshift-openshift-tests-private-release-4.15-multi-nightly-gcp-ipi-baselinecaps-none-arm-f7 either don't exist or were not found to be affected, and cannot be rehearsed

@fxierh
Copy link
Contributor Author

fxierh commented Dec 8, 2023

/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-4.15-multi-nightly-gcp-ipi-baselinecaps-none-arm-f7

@openshift-ci-robot
Copy link
Contributor

@fxierh: job(s): periodic-ci-openshift-openshift-tests-private-release-4.15-multi-nightly-gcp-ipi-baselinecaps-none-arm-f7 either don't exist or were not found to be affected, and cannot be rehearsed

@openshift-ci-robot
Copy link
Contributor

[REHEARSALNOTIFIER]
@fxierh: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-openshift-cluster-etcd-operator-master-e2e-gcp-qe-no-capabilities openshift/cluster-etcd-operator presubmit Registry content changed
pull-ci-openshift-cluster-etcd-operator-release-4.16-e2e-gcp-qe-no-capabilities openshift/cluster-etcd-operator presubmit Registry content changed
pull-ci-openshift-cluster-etcd-operator-release-4.15-e2e-gcp-qe-no-capabilities openshift/cluster-etcd-operator presubmit Registry content changed
pull-ci-openshift-cluster-etcd-operator-release-4.14-e2e-gcp-qe-no-capabilities openshift/cluster-etcd-operator presubmit Registry content changed
pull-ci-openshift-cluster-etcd-operator-release-4.13-e2e-gcp-qe-no-capabilities openshift/cluster-etcd-operator presubmit Registry content changed
pull-ci-openshift-cluster-etcd-operator-release-4.12-e2e-gcp-qe-no-capabilities openshift/cluster-etcd-operator presubmit Registry content changed
pull-ci-openshift-cluster-etcd-operator-release-4.11-e2e-gcp-qe-no-capabilities openshift/cluster-etcd-operator presubmit Registry content changed
pull-ci-openshift-vsphere-problem-detector-master-e2e-vsphere-csi-extended openshift/vsphere-problem-detector presubmit Registry content changed
pull-ci-openshift-vsphere-problem-detector-release-4.16-e2e-vsphere-csi-extended openshift/vsphere-problem-detector presubmit Registry content changed
pull-ci-openshift-vsphere-problem-detector-release-4.15-e2e-vsphere-csi-extended openshift/vsphere-problem-detector presubmit Registry content changed
pull-ci-openshift-vsphere-problem-detector-release-4.14-e2e-vsphere-csi-extended openshift/vsphere-problem-detector presubmit Registry content changed
pull-ci-openshift-gcp-pd-csi-driver-master-e2e-gcp-csi-extended openshift/gcp-pd-csi-driver presubmit Registry content changed
pull-ci-openshift-gcp-pd-csi-driver-release-4.16-e2e-gcp-csi-extended openshift/gcp-pd-csi-driver presubmit Registry content changed
pull-ci-openshift-gcp-pd-csi-driver-release-4.15-e2e-gcp-csi-extended openshift/gcp-pd-csi-driver presubmit Registry content changed
pull-ci-openshift-gcp-pd-csi-driver-release-4.14-e2e-gcp-csi-extended openshift/gcp-pd-csi-driver presubmit Registry content changed
pull-ci-openshift-openshift-tests-private-master-debug-winc-aws-ipi openshift/openshift-tests-private presubmit Registry content changed
pull-ci-openshift-openshift-tests-private-release-4.16-debug-winc-aws-ipi openshift/openshift-tests-private presubmit Registry content changed
pull-ci-openshift-openshift-tests-private-release-4.15-debug-winc-aws-ipi openshift/openshift-tests-private presubmit Registry content changed
pull-ci-openshift-openshift-tests-private-release-4.14-debug-winc-aws-ipi openshift/openshift-tests-private presubmit Registry content changed
pull-ci-openshift-openshift-tests-private-release-4.13-debug-winc-aws-ipi openshift/openshift-tests-private presubmit Registry content changed
pull-ci-openshift-openshift-tests-private-release-4.12-debug-winc-aws-ipi openshift/openshift-tests-private presubmit Registry content changed
pull-ci-openshift-openshift-tests-private-release-4.11-debug-winc-aws-ipi openshift/openshift-tests-private presubmit Registry content changed
pull-ci-openshift-openshift-tests-private-master-debug-disasterrecovery-aws-ipi openshift/openshift-tests-private presubmit Registry content changed
pull-ci-openshift-openshift-tests-private-release-4.16-debug-disasterrecovery-aws-ipi openshift/openshift-tests-private presubmit Registry content changed
pull-ci-openshift-openshift-tests-private-release-4.15-debug-disasterrecovery-aws-ipi openshift/openshift-tests-private presubmit Registry content changed

A total of 2775 jobs have been affected by this change. The above listing is non-exhaustive and limited to 25 jobs.

A full list of affected jobs can be found here

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse abort to abort all active rehearsals

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@fxierh
Copy link
Contributor Author

fxierh commented Dec 8, 2023

/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-4.15-arm64-nightly-aws-ipi-disconnected-sts-basecap-none-f28

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Dec 8, 2023

@fxierh: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/rehearse/periodic-ci-openshift-openshift-tests-private-release-4.15-multi-nightly-gcp-ipi-baselinecaps-none-arm-f7 2322d3e link unknown /pj-rehearse periodic-ci-openshift-openshift-tests-private-release-4.15-multi-nightly-gcp-ipi-baselinecaps-none-arm-f7
ci/rehearse/periodic-ci-openshift-openshift-tests-private-release-4.15-amd64-nightly-4.15-upgrade-from-stable-4.14-aws-upi-baselinecaps-none-f28 25aebf8 link unknown /pj-rehearse periodic-ci-openshift-openshift-tests-private-release-4.15-amd64-nightly-4.15-upgrade-from-stable-4.14-aws-upi-baselinecaps-none-f28
ci/rehearse/periodic-ci-openshift-openshift-tests-private-release-4.15-multi-nightly-azure-ipi-baselinecaps-vset-additionalcap-arm-f14 25aebf8 link unknown /pj-rehearse periodic-ci-openshift-openshift-tests-private-release-4.15-multi-nightly-azure-ipi-baselinecaps-vset-additionalcap-arm-f14
ci/rehearse/periodic-ci-openshift-openshift-tests-private-release-4.15-arm64-nightly-aws-ipi-disconnected-sts-basecap-none-f28 4d769ce link unknown /pj-rehearse periodic-ci-openshift-openshift-tests-private-release-4.15-arm64-nightly-aws-ipi-disconnected-sts-basecap-none-f28

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@fxierh
Copy link
Contributor Author

fxierh commented Dec 10, 2023

periodic-ci-openshift-openshift-tests-private-release-4.15-arm64-nightly-aws-ipi-disconnected-sts-basecap-none-f28 failed due to an oc bug https://issues.redhat.com/browse/OCPBUGS-24834.

I guess this should not block this PR.

@jianlinliu
Copy link
Contributor

/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Dec 11, 2023
@jianlinliu
Copy link
Contributor

cc @jinyunma to double confirm.

@jinyunma
Copy link
Contributor

/lgtm

@fxierh
Copy link
Contributor Author

fxierh commented Dec 11, 2023

/cc @liangxia
Would you please take a look ? Thanks.

@openshift-ci openshift-ci bot requested a review from liangxia December 11, 2023 03:32
@liangxia
Copy link
Member

/lgtm

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Dec 11, 2023

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: fxierh, jianlinliu, jinyunma, liangxia

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Dec 11, 2023
@jianlinliu
Copy link
Contributor

/pj-rehearse ack

@openshift-ci-robot openshift-ci-robot added the rehearsals-ack Signifies that rehearsal jobs have been acknowledged label Dec 11, 2023
@liangxia
Copy link
Member

/retest-required

@openshift-merge-bot openshift-merge-bot bot merged commit 7950d73 into openshift:master Dec 11, 2023
@fxierh
Copy link
Contributor Author

fxierh commented Dec 12, 2023

periodic-ci-openshift-openshift-tests-private-release-4.15-arm64-nightly-aws-ipi-disconnected-sts-basecap-none-f28 failed due to an oc bug https://issues.redhat.com/browse/OCPBUGS-24834.

I guess this should not block this PR.

openshift/oc#1622 and its cherry-pick landed. Relevant CI jobs should be okay soon.

cc. @jianlinliu @jinyunma

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged. rehearsals-ack Signifies that rehearsal jobs have been acknowledged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants