diff --git a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.20__periodics.yaml b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.20__periodics.yaml index 7940796f4568b..425cc9f8823c0 100644 --- a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.20__periodics.yaml +++ b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.20__periodics.yaml @@ -212,12 +212,12 @@ tests: REDHAT_OPERATORS_INDEX_TAG: v4.18 workflow: hypershift-kubevirt-baremetalds-conformance-cilium - as: e2e-aws-conformance-calico - minimum_interval: 168h + minimum_interval: 336h steps: cluster_profile: hypershift-aws workflow: hypershift-aws-conformance-calico - as: e2e-aws-conformance-calico-private - minimum_interval: 168h + minimum_interval: 336h steps: cluster_profile: aws-qe env: diff --git a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics-mce.yaml b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics-mce.yaml index 2269be1e44b6d..304998250dcba 100644 --- a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics-mce.yaml +++ b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics-mce.yaml @@ -328,6 +328,21 @@ tests: - chain: hypershift-mce-power-test - ref: hypershift-mce-agent-info workflow: hypershift-mce-power-conformance +- as: e2e-agent-connected-calico-ipv4-metal-conformance + capabilities: + - intranet + minimum_interval: 168h + steps: + cluster_profile: equinix-ocp-hcp + env: + KONFLUX_DEPLOY_CATALOG_SOURCE: "true" + KONFLUX_DEPLOY_OPERATORS: "true" + KONFLUX_DEPLOY_SUBSCRIPTION: "false" + LVM_OPERATOR_SUB_CHANNEL: stable-4.21 + LVM_OPERATOR_SUB_SOURCE: lvm-catalogsource + MCE_VERSION: "2.11" + METALLB_OPERATOR_SUB_SOURCE: metallb-konflux + workflow: hypershift-mce-agent-metal3-conformance-calico - as: e2e-aws-critical cron: 0 0 29 2 * steps: diff --git a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics.yaml b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics.yaml index 85c65a2f2b506..1cd4ec35fa3be 100644 --- a/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics.yaml +++ b/ci-operator/config/openshift/hypershift/openshift-hypershift-release-4.21__periodics.yaml @@ -274,6 +274,52 @@ tests: CI_TESTS_RUN: TestExternalOIDC ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" workflow: hypershift-azure-aks-external-oidc +- as: e2e-aws-conformance-calico + minimum_interval: 168h + steps: + cluster_profile: hypershift + workflow: hypershift-aws-conformance-calico +- as: e2e-aws-conformance-calico-private + minimum_interval: 168h + steps: + cluster_profile: aws-qe + env: + BASE_DOMAIN: qe.devcluster.openshift.com + HYPERSHIFT_GUEST_INFRA_OCP_ACCOUNT: "true" + TEST_ARGS: --disable-monitor=apiserver-incluster-availability,service-type-load-balancer-availability + TEST_SKIPS: The default cluster RBAC policy should have correct RBAC rules\| + Cluster scoped load balancer healthcheck port and path should be 10256/healthz\| + Prometheus \[apigroup:image.openshift.io\] when installed on the cluster should + provide named network metrics\| Unidling \[apigroup:apps.openshift.io\]\[apigroup:route.openshift.io\] + should work with UDP\| Unidling with Deployments \[apigroup:route.openshift.io\] + should work with TCP (when fully idled)\| Unidling \[apigroup:apps.openshift.io\]\[apigroup:route.openshift.io\] + should work with TCP (when fully idled)\| Unidling with Deployments \[apigroup:route.openshift.io\] + should work with UDP\|pod should not start for sysctls not on whitelist \[apigroup:k8s.cni.cncf.io\] + net.ipv4.conf.IFNAME.arp_filter\| pod should not start for sysctls not on + whitelist \[apigroup:k8s.cni.cncf.io\] net.ipv4.conf.all.send_redirects\| + sysctl allowlist update should start a pod with custom sysctl only when the + sysctl is added to whitelist\|Ensure HTTPRoute object is created + test: + - chain: hypershift-conformance + workflow: cucushift-installer-rehearse-aws-ipi-ovn-hypershift-private-guest-calico +- as: e2e-kubevirt-metal-conformance-calico + capabilities: + - intranet + minimum_interval: 168h + steps: + cluster_profile: equinix-ocp-hcp + env: + KONFLUX_DEPLOY_CATALOG_SOURCE: "true" + KONFLUX_DEPLOY_OPERATORS: "true" + KONFLUX_DEPLOY_SUBSCRIPTION: "false" + LOCAL_STORAGE_OPERATOR_SUB_SOURCE: local-storage-konflux + LVM_OPERATOR_SUB_CHANNEL: stable-4.21 + LVM_OPERATOR_SUB_SOURCE: lvm-catalogsource + METALLB_OPERATOR_SUB_SOURCE: metallb-konflux + ODF_OPERATOR_SUB_CHANNEL: stable-4.19 + ODF_OPERATOR_SUB_SOURCE: redhat-operators-v4-19 + REDHAT_OPERATORS_INDEX_TAG: v4.19 + workflow: hypershift-kubevirt-baremetalds-conformance-calico - as: e2e-azure-aks-external-oidc-techpreview cron: 0 20 9,18,25 * * steps: diff --git a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.20-periodics.yaml b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.20-periodics.yaml index c9f7bd1b76124..675b5fd459db5 100644 --- a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.20-periodics.yaml +++ b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.20-periodics.yaml @@ -165,7 +165,7 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - minimum_interval: 168h + minimum_interval: 336h name: periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aws-conformance-calico spec: containers: @@ -240,7 +240,7 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - minimum_interval: 168h + minimum_interval: 336h name: periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aws-conformance-calico-private spec: containers: diff --git a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.21-periodics.yaml b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.21-periodics.yaml index 2381934df860f..79a1be139d202 100644 --- a/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.21-periodics.yaml +++ b/ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-4.21-periodics.yaml @@ -149,6 +149,156 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build01 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.21 + org: openshift + repo: hypershift + labels: + ci-operator.openshift.io/cloud: hypershift + ci-operator.openshift.io/cloud-cluster-profile: hypershift + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + minimum_interval: 168h + name: periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-aws-conformance-calico + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-conformance-calico + - --variant=periodics + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build11 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.21 + org: openshift + repo: hypershift + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: aws-qe + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + minimum_interval: 168h + name: periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-aws-conformance-calico-private + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-conformance-calico-private + - --variant=periodics + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build01 decorate: true @@ -1401,6 +1551,82 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.21 + org: openshift + repo: hypershift + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-hcp + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + minimum_interval: 168h + name: periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-kubevirt-metal-conformance-calico + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-kubevirt-metal-conformance-calico + - --variant=periodics + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build05 cron: 0 4 * * * @@ -2078,6 +2304,82 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build05 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.21 + org: openshift + repo: hypershift + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-hcp + ci-operator.openshift.io/variant: periodics-mce + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + minimum_interval: 168h + name: periodic-ci-openshift-hypershift-release-4.21-periodics-mce-e2e-agent-connected-calico-ipv4-metal-conformance + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-agent-connected-calico-ipv4-metal-conformance + - --variant=periodics-mce + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build05 cron: 0 6 * * 0 diff --git a/ci-operator/step-registry/hypershift/mce/agent/metal3/conformance/calico/hypershift-mce-agent-metal3-conformance-calico-workflow.yaml b/ci-operator/step-registry/hypershift/mce/agent/metal3/conformance/calico/hypershift-mce-agent-metal3-conformance-calico-workflow.yaml index 9fba8497bb184..6d9ceedef2a4a 100644 --- a/ci-operator/step-registry/hypershift/mce/agent/metal3/conformance/calico/hypershift-mce-agent-metal3-conformance-calico-workflow.yaml +++ b/ci-operator/step-registry/hypershift/mce/agent/metal3/conformance/calico/hypershift-mce-agent-metal3-conformance-calico-workflow.yaml @@ -15,11 +15,13 @@ workflow: test: - chain: hypershift-conformance pre: - - ref: baremetalds-packet-setup - - ref: calico-conf + - ref: ofcir-acquire + - ref: cilium-conf - ref: ipi-install-rbac + - ref: baremetalds-devscripts-ibm - ref: baremetalds-devscripts-proxy - ref: ipi-install-hosted-loki + - ref: rhcos-conf-osstream - ref: baremetalds-devscripts-setup - ref: enable-qe-catalogsource - ref: deploy-konflux-operator @@ -47,10 +49,11 @@ workflow: LVM_OPERATOR_SUB_SOURCE: lvm-catalogsource METALLB_OPERATOR_SUB_SOURCE: qe-app-registry IP_STACK: v4 - PACKET_METRO: dc DEVSCRIPTS_CONFIG: | IP_STACK=v4 + NUM_WORKERS=4 NETWORK_TYPE=Calico + WORKER_MEMORY=24576 VM_EXTRADISKS=true VM_EXTRADISKS_LIST=vda VM_EXTRADISKS_SIZE=500G