diff --git a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.0__powervs-stable-openshift-logging-6.6.yaml b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.0__powervs-stable-openshift-logging-6.6.yaml new file mode 100644 index 0000000000000..60d4809d437a4 --- /dev/null +++ b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.0__powervs-stable-openshift-logging-6.6.yaml @@ -0,0 +1,107 @@ +base_images: + ansible: + name: "5.0" + namespace: ocp + tag: ansible + assisted-service-scripts: + name: ocm-2.17 + namespace: edge-infrastructure + tag: assisted-service-scripts + cli: + name: "5.0" + namespace: ocp + tag: cli + dev-scripts: + name: test + namespace: ocp-kni + tag: dev-scripts + hypershift-operator: + name: hypershift-operator + namespace: hypershift + tag: latest + tests-private: + name: tests-private + namespace: ci + tag: "4.22" + tests-private-ui: + name: tests-private-ui + namespace: ci + tag: "4.22" + tools: + name: "5.0" + namespace: ocp + tag: tools + upi-installer: + name: "5.0" + namespace: ocp + tag: upi-installer +prowgen: + expose: true + private: true +releases: + latest: + candidate: + architecture: multi + product: ocp + stream: nightly + version: "5.0" + multi-latest: + candidate: + architecture: multi + product: ocp + stream: nightly + version: "5.0" +resources: + '*': + limits: + memory: 8Gi + requests: + cpu: "1" + memory: 1Gi +tests: +- as: logging-e2e-tests-hypershift-powervs-ppc64le + capabilities: + - intranet + cron: '@yearly' + reporter_config: + channel: '#logging-qe' + job_states_to_report: + - success + - failure + - error + report_template: '{{if eq .Status.State "success"}} :slack-green: Job *{{.Spec.Job}}* + ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> {{else}} :failed: + Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> + {{end}}' + steps: + cluster_profile: openshift-org-aws + env: + BASE_DOMAIN: devobscluster.devcluster.openshift.com. + FORCE_SUCCESS_EXIT: "true" + LOGGING_TEST_VERSION: "6.6" + MCE_VERSION: "5.0" + OPERATORS: | + [ + {"name": "cluster-logging", "source": "cluster-logging-operator-registry", "channel": "stable-6.6", "install_namespace": "openshift-logging","target_namespaces": "", "operator_group": "openshift-logging"}, + {"name": "loki-operator", "source": "loki-operator-registry", "channel": "stable-6.6", "install_namespace": "openshift-operators-redhat","target_namespaces": "", "operator_group": "openshift-operators-redhat"}, + {"name": "cluster-observability-operator", "source": "redhat-operators", "channel": "stable", "install_namespace": "openshift-cluster-observability-operator","target_namespaces": "", "operator_group": "openshift-cluster-observability-operator"}, + {"name": "amq-streams", "source": "redhat-operators", "channel": "amq-streams-2.x", "install_namespace": "openshift-operators","target_namespaces": "", "operator_group": ""} + ] + TEST_FILTERS: ~Disruptive&;~Longduration&;~AZWIF&;~AZMonitor&;~GCL& + TEST_IMPORTANCE: Critical|High|Medium + TEST_PARALLEL: "3" + TEST_SCENARIOS: sig-openshift-logging + TEST_TIMEOUT: "35" + test: + - chain: hypershift-mce-power-test + - ref: medik8s-sbr-hypershift-switch-kubeconfig + - ref: cucushift-installer-rehearse-deploy-nfs-provisioner + - ref: openshift-logging-catalogsources + - ref: install-operators + - chain: openshift-e2e-test-logging-qe + workflow: cucushift-installer-rehearse-hypershift-powervs-deploy +zz_generated_metadata: + branch: release-5.0 + org: openshift + repo: openshift-tests-private + variant: powervs-stable-openshift-logging-6.6 diff --git a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.0-periodics.yaml b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.0-periodics.yaml index 786f25251199f..9b749e1309e7e 100644 --- a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.0-periodics.yaml +++ b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.0-periodics.yaml @@ -93041,6 +93041,108 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build09 + cron: '@yearly' + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-5.0 + org: openshift + repo: openshift-tests-private + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws + ci-operator.openshift.io/variant: powervs-stable-openshift-logging-6.6 + ci.openshift.io/generator: prowgen + job-release: "5.0" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-openshift-tests-private-release-5.0-powervs-stable-openshift-logging-6.6-logging-e2e-tests-hypershift-powervs-ppc64le + reporter_config: + slack: + channel: '#logging-qe' + job_states_to_report: + - success + - failure + - error + report_template: '{{if eq .Status.State "success"}} :slack-green: Job *{{.Spec.Job}}* + ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> {{else}} :failed: + Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View + logs> {{end}}' + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --oauth-token-path=/usr/local/github-credentials/oauth + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=logging-e2e-tests-hypershift-powervs-ppc64le + - --variant=powervs-stable-openshift-logging-6.6 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /usr/local/github-credentials + name: github-credentials-openshift-ci-robot-private-git-cloner + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: github-credentials-openshift-ci-robot-private-git-cloner + secret: + secretName: github-credentials-openshift-ci-robot-private-git-cloner + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build01 cron: 0 0 * * 1 diff --git a/ci-operator/step-registry/cucushift/installer/rehearse/deploy-nfs-provisioner/OWNERS b/ci-operator/step-registry/cucushift/installer/rehearse/deploy-nfs-provisioner/OWNERS new file mode 100644 index 0000000000000..68eeddf0cd187 --- /dev/null +++ b/ci-operator/step-registry/cucushift/installer/rehearse/deploy-nfs-provisioner/OWNERS @@ -0,0 +1,4 @@ +approvers: +- multiarch-approvers +reviewers: +- multiarch-reviewers diff --git a/ci-operator/step-registry/cucushift/installer/rehearse/deploy-nfs-provisioner/cucushift-installer-rehearse-deploy-nfs-provisioner-commands.sh b/ci-operator/step-registry/cucushift/installer/rehearse/deploy-nfs-provisioner/cucushift-installer-rehearse-deploy-nfs-provisioner-commands.sh new file mode 100644 index 0000000000000..3ce017cccee40 --- /dev/null +++ b/ci-operator/step-registry/cucushift/installer/rehearse/deploy-nfs-provisioner/cucushift-installer-rehearse-deploy-nfs-provisioner-commands.sh @@ -0,0 +1,440 @@ +#!/usr/bin/env bash + +set -o nounset +set -o errexit +set -o pipefail + +# NFS_PROVISIONER_IMAGE is set via the step registry env var (ref.yaml) +NFS_PROVISIONER_IMAGE="${NFS_PROVISIONER_IMAGE:-registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8}" + +echo "INFO: Using NFS provisioner image: ${NFS_PROVISIONER_IMAGE}" +echo "INFO: Start to deploy nfs-provisioner." +echo "INFO: Step1: Create namespace nfs-provisioner." +oc create ns nfs-provisioner + +echo "Label namespace to allow privileged pods (required for NFS provisioner)" +oc label ns nfs-provisioner --overwrite \ + security.openshift.io/scc.podSecurityLabelSync=false \ + pod-security.kubernetes.io/enforce=privileged \ + pod-security.kubernetes.io/audit=privileged \ + pod-security.kubernetes.io/warn=privileged + +echo "INFO: Step2: Deploy nfs-provisioner." +worker0=$(oc get nodes --show-labels |grep worker|grep -v SchedulingDisabled|awk '{print $6}'|head -1|awk -F ',' '{ORS="\n"; for(i=1;i<=NF;i++) print $i}' | grep hostname | awk -F '=' '{print $NF}') +oc annotate ns nfs-provisioner scheduler.alpha.kubernetes.io/node-selector=kubernetes.io/hostname="${worker0}" --overwrite + +# --- Step 2a: Create ServiceAccount first (needed for SCC binding) --- +echo "Creating service account" +oc -n nfs-provisioner create -f - <