-
Notifications
You must be signed in to change notification settings - Fork 2.7k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #9244 from BenTheElder/fejta-ping
regularly run github.com/jessfraz/secping with fejta-bot periodic job
- Loading branch information
Showing
4 changed files
with
249 additions
and
189 deletions.
There are no files selected for viewing
211 changes: 211 additions & 0 deletions
211
config/jobs/kubernetes/test-infra/fejta-bot-periodics.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,211 @@ | ||
# this file should contain all periodic jobs that use the fejta-bot token | ||
periodics: | ||
- name: periodic-test-infra-close | ||
interval: 1h | ||
spec: | ||
containers: | ||
- image: gcr.io/k8s-testimages/commenter:v20170808-abf66782 | ||
args: | ||
- |- | ||
--query=org:kubernetes | ||
-label:lifecycle/frozen | ||
label:lifecycle/rotten | ||
- --updated=720h | ||
- --token=/etc/token/bot-github-token | ||
- |- | ||
--comment=Rotten issues close after 30d of inactivity. | ||
Reopen the issue with `/reopen`. | ||
Mark the issue as fresh with `/remove-lifecycle rotten`. | ||
Send feedback to sig-testing, kubernetes/test-infra and/or [fejta](https://github.com/fejta). | ||
/close | ||
- --template | ||
- --ceiling=10 | ||
- --confirm | ||
volumeMounts: | ||
- name: token | ||
mountPath: /etc/token | ||
volumes: | ||
- name: token | ||
secret: | ||
secretName: fejta-bot-token | ||
|
||
- name: periodic-test-infra-retester | ||
interval: 20m # Retest at most 1 PR per 20m, which should not DOS the queue. | ||
spec: | ||
containers: | ||
- image: gcr.io/k8s-testimages/commenter:v20170808-abf66782 | ||
args: | ||
- |- | ||
--query=is:pr | ||
-label:do-not-merge | ||
-label:do-not-merge/blocked-paths | ||
-label:do-not-merge/cherry-pick-not-approved | ||
-label:do-not-merge/hold | ||
-label:do-not-merge/invalid-owners-file | ||
-label:do-not-merge/release-note-label-needed | ||
-label:do-not-merge/work-in-progress | ||
label:lgtm | ||
label:approved | ||
status:failure | ||
-label:needs-rebase | ||
-label:needs-ok-to-test | ||
-label:"cncf-cla: no" | ||
repo:kubernetes/kubernetes | ||
- --token=/etc/token/bot-github-token | ||
- |- | ||
--comment=/retest | ||
This bot automatically retries jobs that failed/flaked on approved PRs (send feedback to [fejta](https://github.com/fejta)). | ||
Review the [full test history](https://k8s-gubernator.appspot.com/pr/{{.Number}}) for this PR. | ||
Silence the bot with an `/lgtm cancel` comment for consistent failures. | ||
- --template | ||
- --ceiling=1 | ||
- --confirm | ||
volumeMounts: | ||
- name: token | ||
mountPath: /etc/token | ||
volumes: | ||
- name: token | ||
secret: | ||
secretName: fejta-bot-token | ||
|
||
- name: periodic-test-infra-rotten | ||
interval: 1h | ||
spec: | ||
containers: | ||
- image: gcr.io/k8s-testimages/commenter:v20170808-abf66782 | ||
args: | ||
- |- | ||
--query=org:kubernetes | ||
-label:lifecycle/frozen | ||
label:lifecycle/stale | ||
-label:lifecycle/rotten | ||
- --updated=720h | ||
- --token=/etc/token/bot-github-token | ||
- |- | ||
--comment=Stale issues rot after 30d of inactivity. | ||
Mark the issue as fresh with `/remove-lifecycle rotten`. | ||
Rotten issues close after an additional 30d of inactivity. | ||
If this issue is safe to close now please do so with `/close`. | ||
Send feedback to sig-testing, kubernetes/test-infra and/or [fejta](https://github.com/fejta). | ||
/lifecycle rotten | ||
- --template | ||
- --ceiling=10 | ||
- --confirm | ||
volumeMounts: | ||
- name: token | ||
mountPath: /etc/token | ||
volumes: | ||
- name: token | ||
secret: | ||
secretName: fejta-bot-token | ||
|
||
- name: periodic-test-infra-stale | ||
interval: 1h | ||
spec: | ||
containers: | ||
- image: gcr.io/k8s-testimages/commenter:v20170808-abf66782 | ||
args: | ||
- |- | ||
--query=org:kubernetes | ||
-label:lifecycle/frozen | ||
-label:lifecycle/stale | ||
-label:lifecycle/rotten | ||
- --updated=2160h | ||
- --token=/etc/token/bot-github-token | ||
- |- | ||
--comment=Issues go stale after 90d of inactivity. | ||
Mark the issue as fresh with `/remove-lifecycle stale`. | ||
Stale issues rot after an additional 30d of inactivity and eventually close. | ||
If this issue is safe to close now please do so with `/close`. | ||
Send feedback to sig-testing, kubernetes/test-infra and/or [fejta](https://github.com/fejta). | ||
/lifecycle stale | ||
- --template | ||
- --ceiling=10 | ||
- --confirm | ||
volumeMounts: | ||
- name: token | ||
mountPath: /etc/token | ||
volumes: | ||
- name: token | ||
secret: | ||
secretName: fejta-bot-token | ||
|
||
- name: issue-creator | ||
interval: 24h | ||
labels: | ||
preset-service-account: "true" | ||
spec: | ||
containers: | ||
- image: gcr.io/k8s-testimages/issue-creator:v20170907-5240cca5 | ||
args: | ||
- --dry-run=false | ||
- --alsologtostderr | ||
- --org=kubernetes | ||
- --project=kubernetes | ||
- --token-file=/etc/token/bot-github-token | ||
- --test-owners-csv=/test_owners.csv | ||
- --triage-window=1 | ||
- --triage-count=10 | ||
- --flakyjob-count=3 | ||
volumeMounts: | ||
- name: token | ||
mountPath: /etc/token | ||
volumes: | ||
- name: token | ||
secret: | ||
secretName: fejta-bot-token | ||
|
||
- name: periodic-features-unfreeze | ||
interval: 30m | ||
spec: | ||
containers: | ||
- image: gcr.io/k8s-testimages/commenter:v20170808-abf66782 | ||
args: | ||
- |- | ||
--query=repo:kubernetes/features | ||
label:lifecycle/frozen | ||
- --updated=5m | ||
- --token=/etc/token/bot-github-token | ||
- |- | ||
--comment=Feature issues opened in `kubernetes/features` should never be marked as frozen. | ||
Feature Owners can ensure that features stay fresh by consistently updating their states across release cycles. | ||
/remove-lifecycle frozen | ||
- --ceiling=10 | ||
- --confirm | ||
volumeMounts: | ||
- name: token | ||
mountPath: /etc/token | ||
volumes: | ||
- name: token | ||
secret: | ||
secretName: fejta-bot-token | ||
|
||
# periodically file / close bugs for repos based on presence of SECURITY_CONTACTS | ||
- name: periodic-secping | ||
interval: 24h | ||
decorate: true | ||
spec: | ||
containers: | ||
# image contains tools versioned with k/k master | ||
# secping needs go and make in particular | ||
- image: gcr.io/k8s-testimages/kubekins-e2e:v20180829-29e661965-master | ||
command: | ||
- ./experiment/secping.sh | ||
args: | ||
- --token=/etc/token | ||
volumeMounts: | ||
- name: token | ||
mountPath: /etc/token | ||
volumes: | ||
- name: token | ||
secret: | ||
secretName: fejta-bot-token |
Oops, something went wrong.