From a6ca3555398fe95f47ad955488a3263820f71f8f Mon Sep 17 00:00:00 2001 From: Ilias Rinis Date: Mon, 18 Aug 2025 12:55:37 +0200 Subject: [PATCH 1/4] cao: move external oidc tests from presubmits to periodics --- ...luster-authentication-operator-master.yaml | 33 - ...tion-operator-release-4.20__periodics.yaml | 404 ++++ ...entication-operator-master-presubmits.yaml | 225 --- ...ation-operator-release-4.20-periodics.yaml | 1786 +++++++++++++++++ ...ion-operator-release-4.20-postsubmits.yaml | 60 + ...tion-operator-release-4.20-presubmits.yaml | 55 + 6 files changed, 2305 insertions(+), 258 deletions(-) create mode 100644 ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20__periodics.yaml create mode 100644 ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20-periodics.yaml diff --git a/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-master.yaml b/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-master.yaml index a38695e0939f1..38c6f9707e175 100644 --- a/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-master.yaml +++ b/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-master.yaml @@ -179,39 +179,6 @@ tests: container: from: src optional: true -- always_run: false - as: e2e-aws-external-oidc - optional: true - steps: - cluster_profile: aws-3 - env: - FEATURE_SET: TechPreviewNoUpgrade - OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_SUITE: openshift/auth/external-oidc - workflow: openshift-e2e-aws - timeout: 8h0m0s -- always_run: false - as: e2e-azure-external-oidc - optional: true - steps: - cluster_profile: azure4 - env: - FEATURE_SET: TechPreviewNoUpgrade - OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_SUITE: openshift/auth/external-oidc - workflow: openshift-e2e-azure - timeout: 8h0m0s -- always_run: false - as: e2e-gcp-external-oidc - optional: true - steps: - cluster_profile: gcp - env: - FEATURE_SET: TechPreviewNoUpgrade - OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_SUITE: openshift/auth/external-oidc - workflow: openshift-e2e-gcp - timeout: 8h0m0s zz_generated_metadata: branch: master org: openshift diff --git a/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20__periodics.yaml b/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20__periodics.yaml new file mode 100644 index 0000000000000..8a5265efb8046 --- /dev/null +++ b/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20__periodics.yaml @@ -0,0 +1,404 @@ +base_images: + dev-scripts: + name: test + namespace: ocp-kni + tag: dev-scripts + ocp_4.20_base-rhel9: + name: "4.20" + namespace: ocp + tag: base-rhel9 + ocp_builder_rhel-9-golang-1.24-openshift-4.20: + name: builder + namespace: ocp + tag: rhel-9-golang-1.24-openshift-4.20 +binary_build_commands: make build --warn-undefined-variables +build_root: + from_repository: true +images: +- dockerfile_path: Dockerfile.rhel7 + inputs: + ocp_4.20_base-rhel9: + as: + - registry.ci.openshift.org/ocp/4.20:base-rhel9 + ocp_builder_rhel-9-golang-1.24-openshift-4.20: + as: + - registry.ci.openshift.org/ocp/builder:rhel-9-golang-1.24-openshift-4.20 + to: cluster-authentication-operator +promotion: + to: + - disabled: true + name: "4.20" + namespace: ocp +releases: + initial: + integration: + name: "4.20" + namespace: ocp + latest: + integration: + include_built_images: true + name: "4.20" + namespace: ocp +resources: + '*': + requests: + cpu: 100m + memory: 200Mi +tests: +- as: e2e-aws-external-oidc-configure-techpreview + interval: 24h + steps: + cluster_profile: aws-3 + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + reverting to IntegratedOAuth + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-aws + timeout: 5h0m0s +- as: e2e-aws-sno-external-oidc-configure-techpreview + interval: 24h + steps: + cluster_profile: aws-3 + env: + FEATURE_SET: TechPreviewNoUpgrade + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + reverting to IntegratedOAuth + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-aws-single-node + timeout: 5h0m0s +- as: e2e-azure-external-oidc-configure-techpreview + interval: 24h + steps: + cluster_profile: azure4 + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + reverting to IntegratedOAuth + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-azure + timeout: 5h0m0s +- as: e2e-gcp-external-oidc-configure-techpreview + interval: 24h + steps: + cluster_profile: gcp + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + reverting to IntegratedOAuth + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-gcp + timeout: 5h0m0s +- as: e2e-vsphere-external-oidc-configure-techpreview + interval: 24h + steps: + cluster_profile: vsphere-elastic + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + reverting to IntegratedOAuth + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-vsphere + timeout: 5h0m0s +- as: e2e-metal-ovn-ipv4-external-oidc-configure-techpreview + cluster: build05 + interval: 24h + steps: + cluster_profile: equinix-ocp-metal + env: + DEVSCRIPTS_CONFIG: | + IP_STACK=v4 + NETWORK_TYPE=OVNKubernetes + FEATURE_SET=TechPreviewNoUpgrade + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + reverting to IntegratedOAuth + TEST_SUITE: openshift/auth/external-oidc + workflow: baremetalds-e2e + timeout: 5h0m0s +- as: e2e-metal-ovn-ipv6-external-oidc-configure-techpreview + cluster: build05 + interval: 24h + steps: + cluster_profile: equinix-ocp-metal + env: + DEVSCRIPTS_CONFIG: | + IP_STACK=v6 + NETWORK_TYPE=OVNKubernetes + FEATURE_SET=TechPreviewNoUpgrade + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + reverting to IntegratedOAuth + TEST_SUITE: openshift/auth/external-oidc + workflow: baremetalds-e2e + timeout: 5h0m0s +- as: e2e-metal-ovn-dualstack-external-oidc-configure-techpreview + cluster: build05 + interval: 24h + steps: + cluster_profile: equinix-ocp-metal + env: + DEVSCRIPTS_CONFIG: | + IP_STACK=v4v6 + NETWORK_TYPE=OVNKubernetes + FEATURE_SET=TechPreviewNoUpgrade + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + reverting to IntegratedOAuth + TEST_SUITE: openshift/auth/external-oidc + workflow: baremetalds-e2e + timeout: 5h0m0s +- as: e2e-aws-external-oidc-rollback-techpreview + interval: 24h + steps: + cluster_profile: aws-3 + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + external IdP is configured + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-aws + timeout: 5h0m0s +- as: e2e-aws-sno-external-oidc-rollback-techpreview + interval: 24h + steps: + cluster_profile: aws-3 + env: + FEATURE_SET: TechPreviewNoUpgrade + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + external IdP is configured + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-aws-single-node + timeout: 5h0m0s +- as: e2e-azure-external-oidc-rollback-techpreview + interval: 24h + steps: + cluster_profile: azure4 + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + external IdP is configured + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-azure + timeout: 5h0m0s +- as: e2e-gcp-external-oidc-rollback-techpreview + interval: 24h + steps: + cluster_profile: gcp + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + external IdP is configured + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-gcp + timeout: 5h0m0s +- as: e2e-vsphere-external-oidc-rollback-techpreview + interval: 24h + steps: + cluster_profile: vsphere-elastic + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + external IdP is configured + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-vsphere + timeout: 5h0m0s +- as: e2e-metal-ovn-ipv4-external-oidc-rollback-techpreview + cluster: build05 + interval: 24h + steps: + cluster_profile: equinix-ocp-metal + env: + DEVSCRIPTS_CONFIG: | + IP_STACK=v4 + NETWORK_TYPE=OVNKubernetes + FEATURE_SET=TechPreviewNoUpgrade + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + external IdP is configured + TEST_SUITE: openshift/auth/external-oidc + workflow: baremetalds-e2e + timeout: 5h0m0s +- as: e2e-metal-ovn-ipv6-external-oidc-rollback-techpreview + cluster: build05 + interval: 24h + steps: + cluster_profile: equinix-ocp-metal + env: + DEVSCRIPTS_CONFIG: | + IP_STACK=v6 + NETWORK_TYPE=OVNKubernetes + FEATURE_SET=TechPreviewNoUpgrade + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + external IdP is configured + TEST_SUITE: openshift/auth/external-oidc + workflow: baremetalds-e2e + timeout: 5h0m0s +- as: e2e-metal-ovn-dualstack-external-oidc-rollback-techpreview + cluster: build05 + interval: 24h + steps: + cluster_profile: equinix-ocp-metal + env: + DEVSCRIPTS_CONFIG: | + IP_STACK=v4v6 + NETWORK_TYPE=OVNKubernetes + FEATURE_SET=TechPreviewNoUpgrade + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] + external IdP is configured + TEST_SUITE: openshift/auth/external-oidc + workflow: baremetalds-e2e + timeout: 5h0m0s +- as: e2e-aws-external-oidc-uid-extra-techpreview + interval: 24h + steps: + cluster_profile: aws-3 + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-aws + timeout: 5h0m0s +- as: e2e-aws-sno-external-oidc-uid-extra-techpreview + interval: 24h + steps: + cluster_profile: aws-3 + env: + FEATURE_SET: TechPreviewNoUpgrade + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-aws-single-node + timeout: 5h0m0s +- as: e2e-azure-external-oidc-uid-extra-techpreview + interval: 24h + steps: + cluster_profile: azure4 + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-azure + timeout: 5h0m0s +- as: e2e-gcp-external-oidc-uid-extra-techpreview + interval: 24h + steps: + cluster_profile: gcp + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-gcp + timeout: 5h0m0s +- as: e2e-vsphere-external-oidc-uid-extra-techpreview + interval: 24h + steps: + cluster_profile: vsphere-elastic + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-vsphere + timeout: 5h0m0s +- as: e2e-metal-ovn-ipv4-external-oidc-uid-extra-techpreview + cluster: build05 + interval: 24h + steps: + cluster_profile: equinix-ocp-metal + env: + DEVSCRIPTS_CONFIG: | + IP_STACK=v4 + NETWORK_TYPE=OVNKubernetes + FEATURE_SET=TechPreviewNoUpgrade + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] + TEST_SUITE: openshift/auth/external-oidc + workflow: baremetalds-e2e + timeout: 5h0m0s +- as: e2e-metal-ovn-ipv6-external-oidc-uid-extra-techpreview + cluster: build05 + interval: 24h + steps: + cluster_profile: equinix-ocp-metal + env: + DEVSCRIPTS_CONFIG: | + IP_STACK=v6 + NETWORK_TYPE=OVNKubernetes + FEATURE_SET=TechPreviewNoUpgrade + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] + TEST_SUITE: openshift/auth/external-oidc + workflow: baremetalds-e2e + timeout: 5h0m0s +- as: e2e-metal-ovn-dualstack-external-oidc-uid-extra-techpreview + cluster: build05 + interval: 24h + steps: + cluster_profile: equinix-ocp-metal + env: + DEVSCRIPTS_CONFIG: | + IP_STACK=v4v6 + NETWORK_TYPE=OVNKubernetes + FEATURE_SET=TechPreviewNoUpgrade + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + --cluster-stability=Disruptive ' + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] + TEST_SUITE: openshift/auth/external-oidc + workflow: baremetalds-e2e + timeout: 5h0m0s +zz_generated_metadata: + branch: release-4.20 + org: openshift + repo: cluster-authentication-operator + variant: periodics diff --git a/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-master-presubmits.yaml b/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-master-presubmits.yaml index fad77194fd191..e204e7fbf4db8 100644 --- a/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-master-presubmits.yaml +++ b/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-master-presubmits.yaml @@ -218,81 +218,6 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-agnostic-upgrade,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^master$ - - ^master- - cluster: build01 - context: ci/prow/e2e-aws-external-oidc - decorate: true - decoration_config: - timeout: 8h0m0s - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: aws-3 - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-cluster-authentication-operator-master-e2e-aws-external-oidc - optional: true - rerun_command: /test e2e-aws-external-oidc - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-external-oidc - command: - - ci-operator - image: ci-operator:latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )e2e-aws-external-oidc,?($|\s.*) - agent: kubernetes always_run: true branches: @@ -366,81 +291,6 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-aws-single-node,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^master$ - - ^master- - cluster: build03 - context: ci/prow/e2e-azure-external-oidc - decorate: true - decoration_config: - timeout: 8h0m0s - labels: - ci-operator.openshift.io/cloud: azure4 - ci-operator.openshift.io/cloud-cluster-profile: azure4 - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-cluster-authentication-operator-master-e2e-azure-external-oidc - optional: true - rerun_command: /test e2e-azure-external-oidc - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-azure-external-oidc - command: - - ci-operator - image: ci-operator:latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )e2e-azure-external-oidc,?($|\s.*) - agent: kubernetes always_run: true branches: @@ -513,81 +363,6 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-console-login,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^master$ - - ^master- - cluster: build04 - context: ci/prow/e2e-gcp-external-oidc - decorate: true - decoration_config: - timeout: 8h0m0s - labels: - ci-operator.openshift.io/cloud: gcp - ci-operator.openshift.io/cloud-cluster-profile: gcp - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-cluster-authentication-operator-master-e2e-gcp-external-oidc - optional: true - rerun_command: /test e2e-gcp-external-oidc - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-gcp-external-oidc - command: - - ci-operator - image: ci-operator:latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )e2e-gcp-external-oidc,?($|\s.*) - agent: kubernetes always_run: false branches: diff --git a/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20-periodics.yaml b/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20-periodics.yaml new file mode 100644 index 0000000000000..bf25b1ffedaf5 --- /dev/null +++ b/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20-periodics.yaml @@ -0,0 +1,1786 @@ +periodics: +- agent: kubernetes + cluster: build09 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: aws-3 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-aws-external-oidc-configure-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-external-oidc-configure-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build09 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: aws-3 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-aws-external-oidc-rollback-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-external-oidc-rollback-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build09 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: aws-3 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-aws-external-oidc-uid-extra-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-external-oidc-uid-extra-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build09 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: aws-3 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-aws-sno-external-oidc-configure-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-sno-external-oidc-configure-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build09 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: aws-3 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-aws-sno-external-oidc-rollback-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-sno-external-oidc-rollback-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build09 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: aws-3 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-aws-sno-external-oidc-uid-extra-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-sno-external-oidc-uid-extra-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: azure4 + ci-operator.openshift.io/cloud-cluster-profile: azure4 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-azure-external-oidc-configure-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-azure-external-oidc-configure-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: azure4 + ci-operator.openshift.io/cloud-cluster-profile: azure4 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-azure-external-oidc-rollback-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-azure-external-oidc-rollback-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: azure4 + ci-operator.openshift.io/cloud-cluster-profile: azure4 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-azure-external-oidc-uid-extra-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-azure-external-oidc-uid-extra-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build04 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: gcp + ci-operator.openshift.io/cloud-cluster-profile: gcp + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-gcp-external-oidc-configure-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-gcp-external-oidc-configure-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build04 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: gcp + ci-operator.openshift.io/cloud-cluster-profile: gcp + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-gcp-external-oidc-rollback-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-gcp-external-oidc-rollback-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build04 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: gcp + ci-operator.openshift.io/cloud-cluster-profile: gcp + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-gcp-external-oidc-uid-extra-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-gcp-external-oidc-uid-extra-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci-operator.openshift.io/cluster: build05 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-metal-ovn-dualstack-external-oidc-configure-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ovn-dualstack-external-oidc-configure-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci-operator.openshift.io/cluster: build05 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-metal-ovn-dualstack-external-oidc-rollback-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ovn-dualstack-external-oidc-rollback-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci-operator.openshift.io/cluster: build05 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-metal-ovn-dualstack-external-oidc-uid-extra-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ovn-dualstack-external-oidc-uid-extra-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci-operator.openshift.io/cluster: build05 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-metal-ovn-ipv4-external-oidc-configure-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ovn-ipv4-external-oidc-configure-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci-operator.openshift.io/cluster: build05 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-metal-ovn-ipv4-external-oidc-rollback-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ovn-ipv4-external-oidc-rollback-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci-operator.openshift.io/cluster: build05 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-metal-ovn-ipv4-external-oidc-uid-extra-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ovn-ipv4-external-oidc-uid-extra-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci-operator.openshift.io/cluster: build05 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-metal-ovn-ipv6-external-oidc-configure-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ovn-ipv6-external-oidc-configure-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci-operator.openshift.io/cluster: build05 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-metal-ovn-ipv6-external-oidc-rollback-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ovn-ipv6-external-oidc-rollback-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci-operator.openshift.io/cluster: build05 + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-metal-ovn-ipv6-external-oidc-uid-extra-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ovn-ipv6-external-oidc-uid-extra-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: vsphere02 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: vsphere + ci-operator.openshift.io/cloud-cluster-profile: vsphere-elastic + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-vsphere-external-oidc-configure-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-vsphere-external-oidc-configure-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: vsphere02 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: vsphere + ci-operator.openshift.io/cloud-cluster-profile: vsphere-elastic + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-vsphere-external-oidc-rollback-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-vsphere-external-oidc-rollback-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: vsphere02 + decorate: true + decoration_config: + timeout: 5h0m0s + extra_refs: + - base_ref: release-4.20 + org: openshift + repo: cluster-authentication-operator + interval: 24h + labels: + ci-operator.openshift.io/cloud: vsphere + ci-operator.openshift.io/cloud-cluster-profile: vsphere-elastic + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-4.20-periodics-e2e-vsphere-external-oidc-uid-extra-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-vsphere-external-oidc-uid-extra-techpreview + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator diff --git a/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20-postsubmits.yaml b/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20-postsubmits.yaml index 4ada53fda55b6..e1828f43e024c 100644 --- a/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20-postsubmits.yaml +++ b/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20-postsubmits.yaml @@ -58,3 +58,63 @@ postsubmits: - name: result-aggregator secret: secretName: result-aggregator + - agent: kubernetes + always_run: true + branches: + - ^release-4\.20$ + cluster: build11 + decorate: true + labels: + ci-operator.openshift.io/is-promotion: "true" + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + max_concurrency: 1 + name: branch-ci-openshift-cluster-authentication-operator-release-4.20-periodics-images + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --image-mirror-push-secret=/etc/push-secret/.dockerconfigjson + - --promote + - --report-credentials-file=/etc/report/credentials + - --target=[images] + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/push-secret + name: push-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: push-secret + secret: + secretName: registry-push-credentials-ci-central + - name: result-aggregator + secret: + secretName: result-aggregator diff --git a/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20-presubmits.yaml b/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20-presubmits.yaml index 8086e860dea8d..4b63441efd135 100644 --- a/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20-presubmits.yaml +++ b/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20-presubmits.yaml @@ -1005,6 +1005,61 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )images,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^release-4\.20$ + - ^release-4\.20- + cluster: build07 + context: ci/prow/periodics-images + decorate: true + labels: + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-cluster-authentication-operator-release-4.20-periodics-images + rerun_command: /test periodics-images + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=[images] + - --variant=periodics + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )periodics-images,?($|\s.*) - agent: kubernetes always_run: true branches: From fb605e3d12442e394ad4827922baaf10a8e60dfd Mon Sep 17 00:00:00 2001 From: Ilias Rinis Date: Wed, 20 Aug 2025 16:10:59 +0200 Subject: [PATCH 2/4] baremetalds: apply TEST_SKIPS to openshift/auth/external-oidc suite --- .../baremetalds/e2e/test/baremetalds-e2e-test-commands.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci-operator/step-registry/baremetalds/e2e/test/baremetalds-e2e-test-commands.sh b/ci-operator/step-registry/baremetalds/e2e/test/baremetalds-e2e-test-commands.sh index d5f05be73d488..e568f4bc431a8 100644 --- a/ci-operator/step-registry/baremetalds/e2e/test/baremetalds-e2e-test-commands.sh +++ b/ci-operator/step-registry/baremetalds/e2e/test/baremetalds-e2e-test-commands.sh @@ -257,7 +257,7 @@ function upgrade() { } function suite() { - if [[ -n "${TEST_SKIPS}" && "${TEST_SUITE}" == "openshift/conformance/parallel" ]]; then + if [[ -n "${TEST_SKIPS}" && ( "${TEST_SUITE}" == "openshift/conformance/parallel" || "${TEST_SUITE}" == "openshift/auth/external-oidc" ) ]]; then TESTS="$(openshift-tests run --dry-run --provider "${TEST_PROVIDER}" "${TEST_SUITE}")" && echo "${TESTS}" | grep -v "${TEST_SKIPS}" >/tmp/tests && echo "Skipping tests:" && From d483cad5314d547f422281608018458d526fa6de Mon Sep 17 00:00:00 2001 From: Bryce Palmer Date: Wed, 20 Aug 2025 14:40:36 -0400 Subject: [PATCH 3/4] sno: disable node and kas invariant tests because we perform ~10 revision rollouts of the KAS during the run. This leads to expected behavior of the KAS being down temporarily, which seems to trigger monitor test failures. As the KAS going down is expected when configuring OIDC authentication, disable these monitor tests. Signed-off-by: Bryce Palmer --- ...ter-authentication-operator-release-4.20__periodics.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20__periodics.yaml b/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20__periodics.yaml index 8a5265efb8046..f6ede198e013f 100644 --- a/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20__periodics.yaml +++ b/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20__periodics.yaml @@ -65,7 +65,7 @@ tests: cluster_profile: aws-3 env: FEATURE_SET: TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants,legacy-node-invariants,legacy-kube-apiserver-invariants --cluster-stability=Disruptive ' TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] reverting to IntegratedOAuth @@ -185,7 +185,7 @@ tests: cluster_profile: aws-3 env: FEATURE_SET: TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants,legacy-node-invariants,legacy-kube-apiserver-invariants --cluster-stability=Disruptive ' TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] external IdP is configured @@ -304,7 +304,7 @@ tests: cluster_profile: aws-3 env: FEATURE_SET: TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants,legacy-node-invariants,legacy-kube-apiserver-invariants --cluster-stability=Disruptive ' TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] TEST_SUITE: openshift/auth/external-oidc From e316a827175f61043416aef22d72cbffe85cf390 Mon Sep 17 00:00:00 2001 From: Ilias Rinis Date: Thu, 21 Aug 2025 16:44:02 +0200 Subject: [PATCH 4/4] cao: remove cluster-stability arg because the suite now is setting it --- ...tion-operator-release-4.20__periodics.yaml | 72 +++++++------------ 1 file changed, 24 insertions(+), 48 deletions(-) diff --git a/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20__periodics.yaml b/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20__periodics.yaml index f6ede198e013f..43b6c74ed677f 100644 --- a/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20__periodics.yaml +++ b/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-4.20__periodics.yaml @@ -52,8 +52,7 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] reverting to IntegratedOAuth TEST_SUITE: openshift/auth/external-oidc @@ -65,8 +64,7 @@ tests: cluster_profile: aws-3 env: FEATURE_SET: TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants,legacy-node-invariants,legacy-kube-apiserver-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants,legacy-node-invariants,legacy-kube-apiserver-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] reverting to IntegratedOAuth TEST_SUITE: openshift/auth/external-oidc @@ -79,8 +77,7 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] reverting to IntegratedOAuth TEST_SUITE: openshift/auth/external-oidc @@ -93,8 +90,7 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] reverting to IntegratedOAuth TEST_SUITE: openshift/auth/external-oidc @@ -107,8 +103,7 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] reverting to IntegratedOAuth TEST_SUITE: openshift/auth/external-oidc @@ -124,8 +119,7 @@ tests: IP_STACK=v4 NETWORK_TYPE=OVNKubernetes FEATURE_SET=TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] reverting to IntegratedOAuth TEST_SUITE: openshift/auth/external-oidc @@ -141,8 +135,7 @@ tests: IP_STACK=v6 NETWORK_TYPE=OVNKubernetes FEATURE_SET=TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] reverting to IntegratedOAuth TEST_SUITE: openshift/auth/external-oidc @@ -158,8 +151,7 @@ tests: IP_STACK=v4v6 NETWORK_TYPE=OVNKubernetes FEATURE_SET=TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] reverting to IntegratedOAuth TEST_SUITE: openshift/auth/external-oidc @@ -172,8 +164,7 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] external IdP is configured TEST_SUITE: openshift/auth/external-oidc @@ -185,8 +176,7 @@ tests: cluster_profile: aws-3 env: FEATURE_SET: TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants,legacy-node-invariants,legacy-kube-apiserver-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants,legacy-node-invariants,legacy-kube-apiserver-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] external IdP is configured TEST_SUITE: openshift/auth/external-oidc @@ -199,8 +189,7 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] external IdP is configured TEST_SUITE: openshift/auth/external-oidc @@ -213,8 +202,7 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] external IdP is configured TEST_SUITE: openshift/auth/external-oidc @@ -227,8 +215,7 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] external IdP is configured TEST_SUITE: openshift/auth/external-oidc @@ -244,8 +231,7 @@ tests: IP_STACK=v4 NETWORK_TYPE=OVNKubernetes FEATURE_SET=TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] external IdP is configured TEST_SUITE: openshift/auth/external-oidc @@ -261,8 +247,7 @@ tests: IP_STACK=v6 NETWORK_TYPE=OVNKubernetes FEATURE_SET=TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] external IdP is configured TEST_SUITE: openshift/auth/external-oidc @@ -278,8 +263,7 @@ tests: IP_STACK=v4v6 NETWORK_TYPE=OVNKubernetes FEATURE_SET=TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWithUIDAndExtraClaimMappings\]\|\[OCPFeatureGate:ExternalOIDC\] external IdP is configured TEST_SUITE: openshift/auth/external-oidc @@ -292,8 +276,7 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] TEST_SUITE: openshift/auth/external-oidc workflow: openshift-e2e-aws @@ -304,8 +287,7 @@ tests: cluster_profile: aws-3 env: FEATURE_SET: TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants,legacy-node-invariants,legacy-kube-apiserver-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants,legacy-node-invariants,legacy-kube-apiserver-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] TEST_SUITE: openshift/auth/external-oidc workflow: openshift-e2e-aws-single-node @@ -317,8 +299,7 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] TEST_SUITE: openshift/auth/external-oidc workflow: openshift-e2e-azure @@ -330,8 +311,7 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] TEST_SUITE: openshift/auth/external-oidc workflow: openshift-e2e-gcp @@ -343,8 +323,7 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] TEST_SUITE: openshift/auth/external-oidc workflow: openshift-e2e-vsphere @@ -359,8 +338,7 @@ tests: IP_STACK=v4 NETWORK_TYPE=OVNKubernetes FEATURE_SET=TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] TEST_SUITE: openshift/auth/external-oidc workflow: baremetalds-e2e @@ -375,8 +353,7 @@ tests: IP_STACK=v6 NETWORK_TYPE=OVNKubernetes FEATURE_SET=TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] TEST_SUITE: openshift/auth/external-oidc workflow: baremetalds-e2e @@ -391,8 +368,7 @@ tests: IP_STACK=v4v6 NETWORK_TYPE=OVNKubernetes FEATURE_SET=TechPreviewNoUpgrade - TEST_ARGS: ' --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants - --cluster-stability=Disruptive ' + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants TEST_SKIPS: \[OCPFeatureGate:ExternalOIDC\] TEST_SUITE: openshift/auth/external-oidc workflow: baremetalds-e2e