diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.14.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.14.yaml index 76fb2949e6457..900f6fd0ebacb 100644 --- a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.14.yaml +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.14.yaml @@ -156,56 +156,6 @@ tests: requests: cpu: 100m workflow: ipi-aws -- as: e2e-aws-openshift-platform-compliance-weekly - cron: 0 21 * * 3,6 - steps: - cluster_profile: quay-aws - env: - BASE_DOMAIN: quay.devcluster.openshift.com - test: - - as: test - cli: latest - commands: | - set -x - export component=ocp4-content-ds - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" - dependencies: - - env: CONTENT_IMAGE - name: ocp4-content-ds - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws -- as: e2e-aws-openshift-node-compliance-weekly - cron: 0 21 * * 3,6 - steps: - cluster_profile: quay-aws - env: - BASE_DOMAIN: quay.devcluster.openshift.com - test: - - as: test - cli: latest - commands: | - set -x - export component=ocp4-content-ds - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" - dependencies: - - env: CONTENT_IMAGE - name: ocp4-content-ds - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws - as: e2e-aws-openshift-platform-compliance-arm-weekly cron: 0 21 * * 3,6 steps: diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.16.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.16.yaml index f6ddefd474440..3af863485a534 100644 --- a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.16.yaml +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.16.yaml @@ -600,68 +600,6 @@ tests: requests: cpu: 100m workflow: ipi-aws -- as: e2e-aws-openshift-platform-compliance-arm-weekly - cron: 0 23 * * 3,6 - steps: - cluster_profile: quay-aws - dependencies: - OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest - env: - BASE_DOMAIN: quay.devcluster.openshift.com - COMPUTE_ARCH: arm64 - CONTROL_ARCH: arm64 - FIPS_ENABLED: "true" - OCP_ARCH: arm64 - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - export component=ocp4-content-ds - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" - dependencies: - - env: CONTENT_IMAGE - name: ocp4-content-ds - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws -- as: e2e-aws-openshift-node-compliance-arm-weekly - cron: 0 23 * * 3,6 - steps: - cluster_profile: quay-aws - dependencies: - OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest - env: - BASE_DOMAIN: quay.devcluster.openshift.com - COMPUTE_ARCH: arm64 - CONTROL_ARCH: arm64 - FIPS_ENABLED: "true" - OCP_ARCH: arm64 - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - export component=ocp4-content-ds - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" - dependencies: - - env: CONTENT_IMAGE - name: ocp4-content-ds - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws zz_generated_metadata: branch: master org: ComplianceAsCode diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.17.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.17.yaml index 1a5ca78d14584..323d15f3a1f07 100644 --- a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.17.yaml +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.17.yaml @@ -550,48 +550,6 @@ tests: requests: cpu: 100m workflow: ipi-aws -- as: e2e-aws-openshift-platform-compliance-weekly - cron: 30 23 * * 3,6 - steps: - cluster_profile: quay-aws - env: - BASE_DOMAIN: quay.devcluster.openshift.com - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws -- as: e2e-aws-openshift-node-compliance-weekly - cron: 30 23 * * 3,6 - steps: - cluster_profile: quay-aws - env: - BASE_DOMAIN: quay.devcluster.openshift.com - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws - as: e2e-aws-openshift-platform-compliance-arm-weekly cron: 30 23 * * 3,6 steps: diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.18.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.18.yaml index d8f5f93e5d1fb..91ea5a0bc26a5 100644 --- a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.18.yaml +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.18.yaml @@ -592,60 +592,6 @@ tests: requests: cpu: 100m workflow: ipi-aws -- as: e2e-aws-openshift-platform-compliance-arm-weekly - cron: 45 23 * * 3,6 - steps: - cluster_profile: quay-aws - dependencies: - OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest - env: - BASE_DOMAIN: quay.devcluster.openshift.com - COMPUTE_ARCH: arm64 - CONTROL_ARCH: arm64 - FIPS_ENABLED: "true" - OCP_ARCH: arm64 - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws -- as: e2e-aws-openshift-node-compliance-arm-weekly - cron: 45 23 * * 3,6 - steps: - cluster_profile: quay-aws - dependencies: - OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest - env: - BASE_DOMAIN: quay.devcluster.openshift.com - COMPUTE_ARCH: arm64 - CONTROL_ARCH: arm64 - FIPS_ENABLED: "true" - OCP_ARCH: arm64 - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws zz_generated_metadata: branch: master org: ComplianceAsCode diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.19.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.19.yaml index 68aee0dd277e2..efbb6df732aed 100644 --- a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.19.yaml +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.19.yaml @@ -550,48 +550,6 @@ tests: requests: cpu: 100m workflow: ipi-aws -- as: e2e-aws-openshift-platform-compliance-weekly - cron: 45 23 * * 3,6 - steps: - cluster_profile: quay-aws - env: - BASE_DOMAIN: quay.devcluster.openshift.com - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws -- as: e2e-aws-openshift-node-compliance-weekly - cron: 45 23 * * 3,6 - steps: - cluster_profile: quay-aws - env: - BASE_DOMAIN: quay.devcluster.openshift.com - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws - as: e2e-aws-openshift-platform-compliance-arm-weekly cron: 45 23 * * 3,6 steps: diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.20.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.20.yaml new file mode 100644 index 0000000000000..75f719c4cf721 --- /dev/null +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.20.yaml @@ -0,0 +1,663 @@ +build_root: + image_stream_tag: + name: release + namespace: openshift + tag: rhel-9-release-golang-1.23-openshift-4.20 +images: +- additional_architectures: + - arm64 + dockerfile_path: Dockerfiles/ocp4_content + to: ocp4-content-ds +releases: + arm64-latest: + candidate: + architecture: arm64 + product: ocp + stream: nightly + version: "4.20" + initial: + integration: + name: "4.20" + namespace: ocp + latest: + candidate: + product: ocp + stream: ci + version: "4.20" +resources: + '*': + requests: + cpu: 200m + memory: 400Mi +tests: +- always_run: false + as: e2e-aws-ocp4-bsi + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=bsi + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-bsi-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=bsi-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-bsi + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export PROFILE=bsi + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-e8 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export PROFILE=e8 + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-e8 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=e8 + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-moderate + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=moderate + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-moderate-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=moderate-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-cis + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=cis + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-cis-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=cis-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-moderate + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + pre: + - chain: ipi-aws-pre + - ref: fips-check + test: + - as: test + cli: latest + commands: | + export PROFILE=moderate + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-stig + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=stig + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-stig-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=stig-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss-4-0 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-4-0 + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss-node-4-0 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-node-4-0 + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-high + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + pre: + - chain: ipi-aws-pre + - ref: fips-check + test: + - as: test + cli: latest + commands: | + export PROFILE=high + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-stig + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + pre: + - chain: ipi-aws-pre + - ref: fips-check + test: + - as: test + cli: latest + commands: | + export PROFILE=stig + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-high + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=high + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-high-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=high-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-platform-compliance-weekly + cron: 45 23 * * 3,6 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory=$CONTENT_DIRECTORY + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-node-compliance-weekly + cron: 45 23 * * 3,6 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory=$CONTENT_DIRECTORY + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-rosa-ocp4-cis-node + steps: + cluster_profile: quay-aws + env: + BYO_OIDC: "true" + CHANNEL_GROUP: stable + ENABLE_BILLING_ACCOUNT: "yes" + OCM_LOGIN_ENV: integration + OPENSHIFT_VERSION: 4.20.9 + REGION: us-east-2 + test: + - ref: ipi-install-rbac + - as: test + cli: latest + commands: | + export PROFILE=cis-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + export ROOT_DIR=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 120m . -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -platform=rosa -bypass-remediations=true -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: rosa-aws-sts-hcp +- always_run: false + as: e2e-rosa-ocp4-pci-dss-node + steps: + cluster_profile: quay-aws + env: + BYO_OIDC: "true" + CHANNEL_GROUP: stable + ENABLE_BILLING_ACCOUNT: "yes" + OCM_LOGIN_ENV: integration + OPENSHIFT_VERSION: 4.20.9 + REGION: us-east-2 + test: + - ref: ipi-install-rbac + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + export ROOT_DIR=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 120m . -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -platform=rosa -bypass-remediations=true -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: rosa-aws-sts-hcp +zz_generated_metadata: + branch: master + org: ComplianceAsCode + repo: content + variant: "4.20" diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.21.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.21.yaml new file mode 100644 index 0000000000000..fb2881b8aa6e1 --- /dev/null +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.21.yaml @@ -0,0 +1,717 @@ +build_root: + image_stream_tag: + name: release + namespace: openshift + tag: rhel-9-release-golang-1.24-openshift-4.21 +images: +- additional_architectures: + - arm64 + dockerfile_path: Dockerfiles/ocp4_content + to: ocp4-content-ds +releases: + arm64-latest: + candidate: + architecture: arm64 + product: ocp + stream: nightly + version: "4.21" + initial: + integration: + name: "4.21" + namespace: ocp + latest: + candidate: + product: ocp + stream: ci + version: "4.21" +resources: + '*': + requests: + cpu: 200m + memory: 400Mi +tests: +- always_run: false + as: e2e-aws-ocp4-bsi + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=bsi + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-bsi-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=bsi-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-bsi + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export PROFILE=bsi + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-e8 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export PROFILE=e8 + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-e8 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=e8 + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-moderate + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=moderate + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-moderate-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=moderate-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-cis + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=cis + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-cis-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=cis-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-moderate + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + pre: + - chain: ipi-aws-pre + - ref: fips-check + test: + - as: test + cli: latest + commands: | + export PROFILE=moderate + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-stig + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=stig + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-stig-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=stig-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss-4-0 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-4-0 + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss-node-4-0 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-node-4-0 + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-high + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + pre: + - chain: ipi-aws-pre + - ref: fips-check + test: + - as: test + cli: latest + commands: | + export PROFILE=high + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-stig + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + pre: + - chain: ipi-aws-pre + - ref: fips-check + test: + - as: test + cli: latest + commands: | + export PROFILE=stig + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-high + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=high + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-high-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=high-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-platform-compliance-weekly + cron: 45 23 * * 3,6 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-node-compliance-weekly + cron: 45 23 * * 3,6 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-platform-compliance-arm-weekly + cron: 45 23 * * 3,6 + steps: + cluster_profile: quay-aws + dependencies: + OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest + env: + BASE_DOMAIN: quay.devcluster.openshift.com + COMPUTE_ARCH: arm64 + CONTROL_ARCH: arm64 + FIPS_ENABLED: "true" + OCP_ARCH: arm64 + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-node-compliance-arm-weekly + cron: 45 23 * * 3,6 + steps: + cluster_profile: quay-aws + dependencies: + OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest + env: + BASE_DOMAIN: quay.devcluster.openshift.com + COMPUTE_ARCH: arm64 + CONTROL_ARCH: arm64 + FIPS_ENABLED: "true" + OCP_ARCH: arm64 + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-rosa-ocp4-cis-node + steps: + cluster_profile: quay-aws + env: + BYO_OIDC: "true" + CHANNEL_GROUP: stable + ENABLE_BILLING_ACCOUNT: "yes" + OCM_LOGIN_ENV: integration + OPENSHIFT_VERSION: 4.21.9 + REGION: us-east-2 + test: + - ref: ipi-install-rbac + - as: test + cli: latest + commands: | + export PROFILE=cis-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + export ROOT_DIR=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 120m github.com/ComplianceAsCode/ocp4e2e -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -platform=rosa -bypass-remediations=true -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: rosa-aws-sts-hcp +- always_run: false + as: e2e-rosa-ocp4-pci-dss-node + steps: + cluster_profile: quay-aws + env: + BYO_OIDC: "true" + CHANNEL_GROUP: stable + ENABLE_BILLING_ACCOUNT: "yes" + OCM_LOGIN_ENV: integration + OPENSHIFT_VERSION: 4.21.9 + REGION: us-east-2 + test: + - ref: ipi-install-rbac + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + export ROOT_DIR=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 120m github.com/ComplianceAsCode/ocp4e2e -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -platform=rosa -bypass-remediations=true -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: rosa-aws-sts-hcp +zz_generated_metadata: + branch: master + org: ComplianceAsCode + repo: content + variant: "4.21" diff --git a/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-periodics.yaml b/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-periodics.yaml index dbfb2acbc96de..c8ded224823ec 100644 --- a/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-periodics.yaml +++ b/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-periodics.yaml @@ -374,81 +374,6 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator -- agent: kubernetes - cluster: build10 - cron: 0 21 * * 3,6 - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: master - org: ComplianceAsCode - repo: content - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.14" - ci.openshift.io/generator: prowgen - job-release: "4.14" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.14-e2e-aws-openshift-node-compliance-weekly - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-node-compliance-weekly - - --variant=4.14 - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - agent: kubernetes cluster: build10 cron: 0 21 * * 3,6 @@ -524,156 +449,6 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator -- agent: kubernetes - cluster: build10 - cron: 0 21 * * 3,6 - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: master - org: ComplianceAsCode - repo: content - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.14" - ci.openshift.io/generator: prowgen - job-release: "4.14" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.14-e2e-aws-openshift-platform-compliance-weekly - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-platform-compliance-weekly - - --variant=4.14 - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator -- agent: kubernetes - cluster: build10 - cron: 0 23 * * 3,6 - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: master - org: ComplianceAsCode - repo: content - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" - ci.openshift.io/generator: prowgen - job-release: "4.16" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.16-e2e-aws-openshift-node-compliance-arm-weekly - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-node-compliance-arm-weekly - - --variant=4.16 - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - agent: kubernetes cluster: build10 cron: 0 23 * * 3,6 @@ -749,81 +524,6 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator -- agent: kubernetes - cluster: build10 - cron: 0 23 * * 3,6 - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: master - org: ComplianceAsCode - repo: content - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" - ci.openshift.io/generator: prowgen - job-release: "4.16" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.16-e2e-aws-openshift-platform-compliance-arm-weekly - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-platform-compliance-arm-weekly - - --variant=4.16 - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - agent: kubernetes cluster: build10 cron: 0 23 * * 3,6 @@ -991,7 +691,7 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.17" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.17-e2e-aws-openshift-node-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.17-e2e-aws-openshift-platform-compliance-arm-weekly spec: containers: - args: @@ -1000,7 +700,7 @@ periodics: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-node-compliance-weekly + - --target=e2e-aws-openshift-platform-compliance-arm-weekly - --variant=4.17 command: - ci-operator @@ -1051,7 +751,7 @@ periodics: secretName: result-aggregator - agent: kubernetes cluster: build10 - cron: 30 23 * * 3,6 + cron: 45 23 * * 3,6 decorate: true decoration_config: skip_cloning: true @@ -1062,11 +762,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.18" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.18" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.17-e2e-aws-openshift-platform-compliance-arm-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.18-e2e-aws-openshift-node-compliance-weekly spec: containers: - args: @@ -1075,8 +775,8 @@ periodics: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-platform-compliance-arm-weekly - - --variant=4.17 + - --target=e2e-aws-openshift-node-compliance-weekly + - --variant=4.18 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1126,7 +826,7 @@ periodics: secretName: result-aggregator - agent: kubernetes cluster: build10 - cron: 30 23 * * 3,6 + cron: 45 23 * * 3,6 decorate: true decoration_config: skip_cloning: true @@ -1137,11 +837,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.18" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.18" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.17-e2e-aws-openshift-platform-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.18-e2e-aws-openshift-platform-compliance-weekly spec: containers: - args: @@ -1151,7 +851,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-platform-compliance-weekly - - --variant=4.17 + - --variant=4.18 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1212,11 +912,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.18-e2e-aws-openshift-node-compliance-arm-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.19-e2e-aws-openshift-node-compliance-arm-weekly spec: containers: - args: @@ -1226,7 +926,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-node-compliance-arm-weekly - - --variant=4.18 + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1287,11 +987,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.18-e2e-aws-openshift-node-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.19-e2e-aws-openshift-platform-compliance-arm-weekly spec: containers: - args: @@ -1300,8 +1000,8 @@ periodics: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-node-compliance-weekly - - --variant=4.18 + - --target=e2e-aws-openshift-platform-compliance-arm-weekly + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1362,11 +1062,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.18-e2e-aws-openshift-platform-compliance-arm-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.20-e2e-aws-openshift-node-compliance-weekly spec: containers: - args: @@ -1375,8 +1075,8 @@ periodics: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-platform-compliance-arm-weekly - - --variant=4.18 + - --target=e2e-aws-openshift-node-compliance-weekly + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1437,11 +1137,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.18-e2e-aws-openshift-platform-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.20-e2e-aws-openshift-platform-compliance-weekly spec: containers: - args: @@ -1451,7 +1151,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-platform-compliance-weekly - - --variant=4.18 + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1512,11 +1212,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.19-e2e-aws-openshift-node-compliance-arm-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.21-e2e-aws-openshift-node-compliance-arm-weekly spec: containers: - args: @@ -1526,7 +1226,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-node-compliance-arm-weekly - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1587,11 +1287,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.19-e2e-aws-openshift-node-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.21-e2e-aws-openshift-node-compliance-weekly spec: containers: - args: @@ -1601,7 +1301,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-node-compliance-weekly - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1662,11 +1362,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.19-e2e-aws-openshift-platform-compliance-arm-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.21-e2e-aws-openshift-platform-compliance-arm-weekly spec: containers: - args: @@ -1676,7 +1376,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-platform-compliance-arm-weekly - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1737,11 +1437,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.19-e2e-aws-openshift-platform-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.21-e2e-aws-openshift-platform-compliance-weekly spec: containers: - args: @@ -1751,7 +1451,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-platform-compliance-weekly - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest diff --git a/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-presubmits.yaml b/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-presubmits.yaml index 756de94cf5f22..ca709b984146c 100644 --- a/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-presubmits.yaml +++ b/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-presubmits.yaml @@ -8362,6 +8362,3512 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )4.19-images,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-bsi + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-bsi + rerun_command: /test 4.20-e2e-aws-ocp4-bsi + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-bsi + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-bsi-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-bsi-node + rerun_command: /test 4.20-e2e-aws-ocp4-bsi-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-bsi-node + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-cis + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-cis + rerun_command: /test 4.20-e2e-aws-ocp4-cis + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-cis + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-cis-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-cis-node + rerun_command: /test 4.20-e2e-aws-ocp4-cis-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-cis-node + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-e8 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-e8 + rerun_command: /test 4.20-e2e-aws-ocp4-e8 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-e8 + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-high + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-high + rerun_command: /test 4.20-e2e-aws-ocp4-high + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-high + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-high|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-high-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-high-node + rerun_command: /test 4.20-e2e-aws-ocp4-high-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-high-node + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-moderate + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-moderate + rerun_command: /test 4.20-e2e-aws-ocp4-moderate + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-moderate + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-moderate-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-moderate-node + rerun_command: /test 4.20-e2e-aws-ocp4-moderate-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-moderate-node + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-pci-dss + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-pci-dss + rerun_command: /test 4.20-e2e-aws-ocp4-pci-dss + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-pci-dss-4-0 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-pci-dss-4-0 + rerun_command: /test 4.20-e2e-aws-ocp4-pci-dss-4-0 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-4-0 + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-pci-dss-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-pci-dss-node + rerun_command: /test 4.20-e2e-aws-ocp4-pci-dss-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-node + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-pci-dss-node-4-0 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-pci-dss-node-4-0 + rerun_command: /test 4.20-e2e-aws-ocp4-pci-dss-node-4-0 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-node-4-0 + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-stig + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-stig + rerun_command: /test 4.20-e2e-aws-ocp4-stig + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-stig + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-ocp4-stig-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-stig-node + rerun_command: /test 4.20-e2e-aws-ocp4-stig-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-stig-node + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-rhcos4-bsi + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-rhcos4-bsi + rerun_command: /test 4.20-e2e-aws-rhcos4-bsi + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-bsi + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-rhcos4-e8 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-rhcos4-e8 + rerun_command: /test 4.20-e2e-aws-rhcos4-e8 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-e8 + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-rhcos4-high + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-rhcos4-high + rerun_command: /test 4.20-e2e-aws-rhcos4-high + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-high + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-rhcos4-moderate + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-rhcos4-moderate + rerun_command: /test 4.20-e2e-aws-rhcos4-moderate + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-moderate + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-aws-rhcos4-stig + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-rhcos4-stig + rerun_command: /test 4.20-e2e-aws-rhcos4-stig + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-stig + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-rosa-ocp4-cis-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-rosa-ocp4-cis-node + rerun_command: /test 4.20-e2e-rosa-ocp4-cis-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-rosa-ocp4-cis-node + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-rosa-ocp4-cis-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.20-e2e-rosa-ocp4-pci-dss-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-rosa-ocp4-pci-dss-node + rerun_command: /test 4.20-e2e-rosa-ocp4-pci-dss-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-rosa-ocp4-pci-dss-node + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.20-e2e-rosa-ocp4-pci-dss-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^master$ + - ^master- + cluster: build06 + context: ci/prow/4.20-images + decorate: true + decoration_config: + skip_cloning: true + labels: + capability/arm64: arm64 + ci-operator.openshift.io/variant: "4.20" + ci.openshift.io/generator: prowgen + job-release: "4.20" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.20-images + rerun_command: /test 4.20-images + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=[images] + - --variant=4.20 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )4.20-images,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-bsi + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-bsi + rerun_command: /test 4.21-e2e-aws-ocp4-bsi + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-bsi + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-bsi-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-bsi-node + rerun_command: /test 4.21-e2e-aws-ocp4-bsi-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-bsi-node + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-cis + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-cis + rerun_command: /test 4.21-e2e-aws-ocp4-cis + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-cis + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-cis-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-cis-node + rerun_command: /test 4.21-e2e-aws-ocp4-cis-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-cis-node + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-e8 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-e8 + rerun_command: /test 4.21-e2e-aws-ocp4-e8 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-e8 + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-high + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-high + rerun_command: /test 4.21-e2e-aws-ocp4-high + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-high + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-high|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-high-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-high-node + rerun_command: /test 4.21-e2e-aws-ocp4-high-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-high-node + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-moderate + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-moderate + rerun_command: /test 4.21-e2e-aws-ocp4-moderate + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-moderate + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-moderate-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-moderate-node + rerun_command: /test 4.21-e2e-aws-ocp4-moderate-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-moderate-node + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-pci-dss + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-pci-dss + rerun_command: /test 4.21-e2e-aws-ocp4-pci-dss + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-pci-dss-4-0 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-pci-dss-4-0 + rerun_command: /test 4.21-e2e-aws-ocp4-pci-dss-4-0 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-4-0 + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-pci-dss-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-pci-dss-node + rerun_command: /test 4.21-e2e-aws-ocp4-pci-dss-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-node + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-pci-dss-node-4-0 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-pci-dss-node-4-0 + rerun_command: /test 4.21-e2e-aws-ocp4-pci-dss-node-4-0 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-node-4-0 + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-stig + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-stig + rerun_command: /test 4.21-e2e-aws-ocp4-stig + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-stig + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-ocp4-stig-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-stig-node + rerun_command: /test 4.21-e2e-aws-ocp4-stig-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-stig-node + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-rhcos4-bsi + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-rhcos4-bsi + rerun_command: /test 4.21-e2e-aws-rhcos4-bsi + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-bsi + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-rhcos4-e8 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-rhcos4-e8 + rerun_command: /test 4.21-e2e-aws-rhcos4-e8 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-e8 + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-rhcos4-high + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-rhcos4-high + rerun_command: /test 4.21-e2e-aws-rhcos4-high + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-high + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-rhcos4-moderate + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-rhcos4-moderate + rerun_command: /test 4.21-e2e-aws-rhcos4-moderate + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-moderate + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-aws-rhcos4-stig + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-rhcos4-stig + rerun_command: /test 4.21-e2e-aws-rhcos4-stig + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-stig + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-rosa-ocp4-cis-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-rosa-ocp4-cis-node + rerun_command: /test 4.21-e2e-rosa-ocp4-cis-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-rosa-ocp4-cis-node + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-rosa-ocp4-cis-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.21-e2e-rosa-ocp4-pci-dss-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-rosa-ocp4-pci-dss-node + rerun_command: /test 4.21-e2e-rosa-ocp4-pci-dss-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-rosa-ocp4-pci-dss-node + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.21-e2e-rosa-ocp4-pci-dss-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^master$ + - ^master- + cluster: build06 + context: ci/prow/4.21-images + decorate: true + decoration_config: + skip_cloning: true + labels: + capability/arm64: arm64 + ci-operator.openshift.io/variant: "4.21" + ci.openshift.io/generator: prowgen + job-release: "4.21" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.21-images + rerun_command: /test 4.21-images + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=[images] + - --variant=4.21 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )4.21-images,?($|\s.*) - agent: kubernetes always_run: false branches: