diff --git a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.20__periodics.yaml b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.20__periodics.yaml index 78ad93cfa1ce3..0dee12407c053 100644 --- a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.20__periodics.yaml +++ b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.20__periodics.yaml @@ -213,12 +213,12 @@ tests: REDHAT_OPERATORS_INDEX_TAG: v4.18 workflow: hypershift-kubevirt-baremetalds-conformance-cilium - as: e2e-aws-conformance-calico - minimum_interval: 168h + minimum_interval: 336h steps: cluster_profile: hypershift-aws workflow: hypershift-aws-conformance-calico - as: e2e-aws-conformance-calico-private - minimum_interval: 168h + minimum_interval: 336h steps: cluster_profile: aws-qe env: diff --git a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics-mce.yaml b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics-mce.yaml index 9036fa3c1c514..797672575cb35 100644 --- a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics-mce.yaml +++ b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics-mce.yaml @@ -334,6 +334,21 @@ tests: - chain: hypershift-mce-power-test - ref: hypershift-mce-agent-info workflow: hypershift-mce-power-conformance +- as: e2e-agent-connected-calico-ipv4-metal-conformance + capabilities: + - intranet + cron: 0 3 * * 6 + steps: + cluster_profile: equinix-ocp-hcp + env: + KONFLUX_DEPLOY_CATALOG_SOURCE: "true" + KONFLUX_DEPLOY_OPERATORS: "true" + KONFLUX_DEPLOY_SUBSCRIPTION: "false" + LVM_OPERATOR_SUB_CHANNEL: stable-4.21 + LVM_OPERATOR_SUB_SOURCE: lvm-catalogsource + MCE_VERSION: "2.11" + METALLB_OPERATOR_SUB_SOURCE: metallb-konflux + workflow: hypershift-mce-agent-metal3-conformance-calico - as: e2e-agent-connected-cilium-ipv4-metal-conformance capabilities: - intranet diff --git a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics.yaml b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics.yaml index a11e5f76b572f..3f4c99fc2f7b6 100644 --- a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics.yaml +++ b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics.yaml @@ -321,6 +321,52 @@ tests: CI_TESTS_RUN: TestExternalOIDC ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" workflow: hypershift-azure-aks-external-oidc +- as: e2e-aws-conformance-calico + minimum_interval: 168h + steps: + cluster_profile: hypershift-aws + workflow: hypershift-aws-conformance-calico +- as: e2e-aws-conformance-calico-private + minimum_interval: 168h + steps: + cluster_profile: aws-qe + env: + BASE_DOMAIN: qe.devcluster.openshift.com + HYPERSHIFT_GUEST_INFRA_OCP_ACCOUNT: "true" + TEST_ARGS: --disable-monitor=apiserver-incluster-availability,service-type-load-balancer-availability + TEST_SKIPS: The default cluster RBAC policy should have correct RBAC rules\| + Cluster scoped load balancer healthcheck port and path should be 10256/healthz\| + Prometheus \[apigroup:image.openshift.io\] when installed on the cluster should + provide named network metrics\| Unidling \[apigroup:apps.openshift.io\]\[apigroup:route.openshift.io\] + should work with UDP\| Unidling with Deployments \[apigroup:route.openshift.io\] + should work with TCP (when fully idled)\| Unidling \[apigroup:apps.openshift.io\]\[apigroup:route.openshift.io\] + should work with TCP (when fully idled)\| Unidling with Deployments \[apigroup:route.openshift.io\] + should work with UDP\|pod should not start for sysctls not on whitelist \[apigroup:k8s.cni.cncf.io\] + net.ipv4.conf.IFNAME.arp_filter\| pod should not start for sysctls not on + whitelist \[apigroup:k8s.cni.cncf.io\] net.ipv4.conf.all.send_redirects\| + sysctl allowlist update should start a pod with custom sysctl only when the + sysctl is added to whitelist\|Ensure HTTPRoute object is created + test: + - chain: hypershift-conformance + workflow: cucushift-installer-rehearse-aws-ipi-ovn-hypershift-private-guest-calico +- as: e2e-kubevirt-metal-conformance-calico + capabilities: + - intranet + minimum_interval: 168h + steps: + cluster_profile: equinix-ocp-hcp + env: + KONFLUX_DEPLOY_CATALOG_SOURCE: "true" + KONFLUX_DEPLOY_OPERATORS: "true" + KONFLUX_DEPLOY_SUBSCRIPTION: "false" + LOCAL_STORAGE_OPERATOR_SUB_SOURCE: local-storage-konflux + LVM_OPERATOR_SUB_CHANNEL: stable-4.21 + LVM_OPERATOR_SUB_SOURCE: lvm-catalogsource + METALLB_OPERATOR_SUB_SOURCE: metallb-konflux + ODF_OPERATOR_SUB_CHANNEL: stable-4.21 + ODF_OPERATOR_SUB_SOURCE: redhat-operators-v4-21 + REDHAT_OPERATORS_INDEX_TAG: v4.21 + workflow: hypershift-kubevirt-baremetalds-conformance-calico - as: e2e-azure-aks-external-oidc-techpreview cron: 0 20 9,18,25 * * steps: diff --git a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.20-periodics.yaml b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.20-periodics.yaml index 93afabd5ecca3..f7131b4f958de 100644 --- a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.20-periodics.yaml +++ b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.20-periodics.yaml @@ -181,7 +181,7 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - minimum_interval: 168h + minimum_interval: 336h name: periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aws-conformance-calico spec: containers: @@ -264,7 +264,7 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - minimum_interval: 168h + minimum_interval: 336h name: periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aws-conformance-calico-private spec: containers: diff --git a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.21-periodics.yaml b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.21-periodics.yaml index a674968a6d24d..f4e797fb2409c 100644 --- a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.21-periodics.yaml +++ b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.21-periodics.yaml @@ -165,6 +165,172 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build01 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.21 + org: openshift + repo: hypershift + labels: + ci-operator.openshift.io/cloud: hypershift-aws + ci-operator.openshift.io/cloud-cluster-profile: hypershift-aws + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + minimum_interval: 168h + name: periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-aws-conformance-calico + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-conformance-calico + - --variant=periodics + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build11 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.21 + org: openshift + repo: hypershift + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: aws-qe + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + minimum_interval: 168h + name: periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-aws-conformance-calico-private + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-conformance-calico-private + - --variant=periodics + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build01 decorate: true @@ -249,7 +415,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build01 + cluster: build11 decorate: true decoration_config: skip_cloning: true @@ -1471,7 +1637,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build11 cron: 0 0,6,12,18 * * * decorate: true decoration_config: @@ -1554,7 +1720,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build11 cron: 0 4 * * * decorate: true decoration_config: @@ -1719,6 +1885,90 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build03 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.21 + org: openshift + repo: hypershift + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-hcp + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + minimum_interval: 168h + name: periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-kubevirt-metal-conformance-calico + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-kubevirt-metal-conformance-calico + - --variant=periodics + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build03 cron: 0 0 * * 0 @@ -1804,7 +2054,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build11 + cluster: build03 cron: 0 4 * * * decorate: true decoration_config: @@ -2387,7 +2637,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build11 decorate: true decoration_config: skip_cloning: true @@ -2798,6 +3048,90 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build03 + cron: 0 3 * * 6 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.21 + org: openshift + repo: hypershift + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-hcp + ci-operator.openshift.io/variant: periodics-mce + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-hypershift-release-4.21-periodics-mce-e2e-agent-connected-calico-ipv4-metal-conformance + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-agent-connected-calico-ipv4-metal-conformance + - --variant=periodics-mce + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build03 cron: 0 0 * * 0 @@ -2883,7 +3217,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build11 + cluster: build03 cron: 0 6 * * 0 decorate: true decoration_config: @@ -3555,7 +3889,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build11 cron: 0 0 29 2 * decorate: true decoration_config: @@ -3638,7 +3972,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build11 decorate: true decoration_config: skip_cloning: true @@ -3721,7 +4055,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build11 decorate: true decoration_config: skip_cloning: true @@ -3948,7 +4282,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build11 decorate: true decoration_config: skip_cloning: true @@ -4366,7 +4700,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build11 decorate: true decoration_config: skip_cloning: true @@ -4449,7 +4783,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build11 decorate: true decoration_config: skip_cloning: true diff --git a/ci-operator/step-registry/hypershift/mce/agent/metal3/conformance/calico/hypershift-mce-agent-metal3-conformance-calico-workflow.yaml b/ci-operator/step-registry/hypershift/mce/agent/metal3/conformance/calico/hypershift-mce-agent-metal3-conformance-calico-workflow.yaml index 9fba8497bb184..78b98212fdc98 100644 --- a/ci-operator/step-registry/hypershift/mce/agent/metal3/conformance/calico/hypershift-mce-agent-metal3-conformance-calico-workflow.yaml +++ b/ci-operator/step-registry/hypershift/mce/agent/metal3/conformance/calico/hypershift-mce-agent-metal3-conformance-calico-workflow.yaml @@ -15,12 +15,8 @@ workflow: test: - chain: hypershift-conformance pre: - - ref: baremetalds-packet-setup - ref: calico-conf - - ref: ipi-install-rbac - - ref: baremetalds-devscripts-proxy - - ref: ipi-install-hosted-loki - - ref: baremetalds-devscripts-setup + - chain: baremetalds-ofcir-pre - ref: enable-qe-catalogsource - ref: deploy-konflux-operator - chain: hypershift-mce-agent-lvm @@ -47,10 +43,13 @@ workflow: LVM_OPERATOR_SUB_SOURCE: lvm-catalogsource METALLB_OPERATOR_SUB_SOURCE: qe-app-registry IP_STACK: v4 - PACKET_METRO: dc DEVSCRIPTS_CONFIG: | IP_STACK=v4 + NUM_WORKERS=4 NETWORK_TYPE=Calico + MASTER_MEMORY=32768 + WORKER_MEMORY=32768 + WORKER_VCPU=16 VM_EXTRADISKS=true VM_EXTRADISKS_LIST=vda VM_EXTRADISKS_SIZE=500G