From f7600ce08d7d01b98df34fe6bf518546361a1391 Mon Sep 17 00:00:00 2001 From: Xiaojie Yuan Date: Wed, 31 Dec 2025 13:00:59 +0800 Subject: [PATCH 1/2] Add, delete and update content periodic jobs Remove the unnecessary quotes for a variable Update Job configuration to resolve the conflicts --- ...ComplianceAsCode-content-master__4.14.yaml | 50 - ...ComplianceAsCode-content-master__4.16.yaml | 62 - ...ComplianceAsCode-content-master__4.17.yaml | 42 - ...ComplianceAsCode-content-master__4.18.yaml | 54 - ...ComplianceAsCode-content-master__4.19.yaml | 42 - ...omplianceAsCode-content-master__4.20.yaml} | 156 +- ...ComplianceAsCode-content-master__4.21.yaml | 717 +++ ...lianceAsCode-content-master-periodics.yaml | 650 +-- ...ianceAsCode-content-master-presubmits.yaml | 4082 +++++++++++++---- 9 files changed, 4012 insertions(+), 1843 deletions(-) rename ci-operator/config/ComplianceAsCode/content/{ComplianceAsCode-content-master__4.12.yaml => ComplianceAsCode-content-master__4.20.yaml} (81%) create mode 100644 ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.21.yaml diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.14.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.14.yaml index 76fb2949e6457..900f6fd0ebacb 100644 --- a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.14.yaml +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.14.yaml @@ -156,56 +156,6 @@ tests: requests: cpu: 100m workflow: ipi-aws -- as: e2e-aws-openshift-platform-compliance-weekly - cron: 0 21 * * 3,6 - steps: - cluster_profile: quay-aws - env: - BASE_DOMAIN: quay.devcluster.openshift.com - test: - - as: test - cli: latest - commands: | - set -x - export component=ocp4-content-ds - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" - dependencies: - - env: CONTENT_IMAGE - name: ocp4-content-ds - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws -- as: e2e-aws-openshift-node-compliance-weekly - cron: 0 21 * * 3,6 - steps: - cluster_profile: quay-aws - env: - BASE_DOMAIN: quay.devcluster.openshift.com - test: - - as: test - cli: latest - commands: | - set -x - export component=ocp4-content-ds - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" - dependencies: - - env: CONTENT_IMAGE - name: ocp4-content-ds - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws - as: e2e-aws-openshift-platform-compliance-arm-weekly cron: 0 21 * * 3,6 steps: diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.16.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.16.yaml index f6ddefd474440..3af863485a534 100644 --- a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.16.yaml +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.16.yaml @@ -600,68 +600,6 @@ tests: requests: cpu: 100m workflow: ipi-aws -- as: e2e-aws-openshift-platform-compliance-arm-weekly - cron: 0 23 * * 3,6 - steps: - cluster_profile: quay-aws - dependencies: - OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest - env: - BASE_DOMAIN: quay.devcluster.openshift.com - COMPUTE_ARCH: arm64 - CONTROL_ARCH: arm64 - FIPS_ENABLED: "true" - OCP_ARCH: arm64 - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - export component=ocp4-content-ds - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" - dependencies: - - env: CONTENT_IMAGE - name: ocp4-content-ds - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws -- as: e2e-aws-openshift-node-compliance-arm-weekly - cron: 0 23 * * 3,6 - steps: - cluster_profile: quay-aws - dependencies: - OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest - env: - BASE_DOMAIN: quay.devcluster.openshift.com - COMPUTE_ARCH: arm64 - CONTROL_ARCH: arm64 - FIPS_ENABLED: "true" - OCP_ARCH: arm64 - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - export component=ocp4-content-ds - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" - dependencies: - - env: CONTENT_IMAGE - name: ocp4-content-ds - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws zz_generated_metadata: branch: master org: ComplianceAsCode diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.17.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.17.yaml index 1a5ca78d14584..323d15f3a1f07 100644 --- a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.17.yaml +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.17.yaml @@ -550,48 +550,6 @@ tests: requests: cpu: 100m workflow: ipi-aws -- as: e2e-aws-openshift-platform-compliance-weekly - cron: 30 23 * * 3,6 - steps: - cluster_profile: quay-aws - env: - BASE_DOMAIN: quay.devcluster.openshift.com - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws -- as: e2e-aws-openshift-node-compliance-weekly - cron: 30 23 * * 3,6 - steps: - cluster_profile: quay-aws - env: - BASE_DOMAIN: quay.devcluster.openshift.com - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws - as: e2e-aws-openshift-platform-compliance-arm-weekly cron: 30 23 * * 3,6 steps: diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.18.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.18.yaml index d8f5f93e5d1fb..91ea5a0bc26a5 100644 --- a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.18.yaml +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.18.yaml @@ -592,60 +592,6 @@ tests: requests: cpu: 100m workflow: ipi-aws -- as: e2e-aws-openshift-platform-compliance-arm-weekly - cron: 45 23 * * 3,6 - steps: - cluster_profile: quay-aws - dependencies: - OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest - env: - BASE_DOMAIN: quay.devcluster.openshift.com - COMPUTE_ARCH: arm64 - CONTROL_ARCH: arm64 - FIPS_ENABLED: "true" - OCP_ARCH: arm64 - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws -- as: e2e-aws-openshift-node-compliance-arm-weekly - cron: 45 23 * * 3,6 - steps: - cluster_profile: quay-aws - dependencies: - OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest - env: - BASE_DOMAIN: quay.devcluster.openshift.com - COMPUTE_ARCH: arm64 - CONTROL_ARCH: arm64 - FIPS_ENABLED: "true" - OCP_ARCH: arm64 - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws zz_generated_metadata: branch: master org: ComplianceAsCode diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.19.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.19.yaml index 68aee0dd277e2..efbb6df732aed 100644 --- a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.19.yaml +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.19.yaml @@ -550,48 +550,6 @@ tests: requests: cpu: 100m workflow: ipi-aws -- as: e2e-aws-openshift-platform-compliance-weekly - cron: 45 23 * * 3,6 - steps: - cluster_profile: quay-aws - env: - BASE_DOMAIN: quay.devcluster.openshift.com - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws -- as: e2e-aws-openshift-node-compliance-weekly - cron: 45 23 * * 3,6 - steps: - cluster_profile: quay-aws - env: - BASE_DOMAIN: quay.devcluster.openshift.com - test: - - as: test - cli: latest - commands: | - set -x - export CONTENT_DIRECTORY=$PWD - git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e - pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" - from: src - resources: - requests: - cpu: 100m - workflow: ipi-aws - as: e2e-aws-openshift-platform-compliance-arm-weekly cron: 45 23 * * 3,6 steps: diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.12.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.20.yaml similarity index 81% rename from ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.12.yaml rename to ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.20.yaml index ff879ccd1d5f6..75f719c4cf721 100644 --- a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.12.yaml +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.20.yaml @@ -2,7 +2,7 @@ build_root: image_stream_tag: name: release namespace: openshift - tag: rhel-9-release-golang-1.23-openshift-4.19 + tag: rhel-9-release-golang-1.23-openshift-4.20 images: - additional_architectures: - arm64 @@ -14,22 +14,98 @@ releases: architecture: arm64 product: ocp stream: nightly - version: "4.12" + version: "4.20" initial: integration: - name: "4.12" + name: "4.20" namespace: ocp latest: candidate: product: ocp stream: ci - version: "4.12" + version: "4.20" resources: '*': requests: cpu: 200m memory: 400Mi tests: +- always_run: false + as: e2e-aws-ocp4-bsi + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=bsi + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-bsi-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=bsi-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-bsi + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export PROFILE=bsi + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws - always_run: false as: e2e-aws-rhcos4-e8 steps: @@ -475,7 +551,7 @@ tests: cpu: 100m workflow: ipi-aws - as: e2e-aws-openshift-platform-compliance-weekly - cron: 0 19 * * 3,6 + cron: 45 23 * * 3,6 steps: cluster_profile: quay-aws env: @@ -489,14 +565,14 @@ tests: git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e pushd ocp4e2e; make install-jq INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory=$CONTENT_DIRECTORY from: src resources: requests: cpu: 100m workflow: ipi-aws - as: e2e-aws-openshift-node-compliance-weekly - cron: 0 19 * * 3,6 + cron: 45 23 * * 3,6 steps: cluster_profile: quay-aws env: @@ -510,68 +586,78 @@ tests: git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e pushd ocp4e2e; make install-jq INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory=$CONTENT_DIRECTORY from: src resources: requests: cpu: 100m workflow: ipi-aws -- as: e2e-aws-openshift-platform-compliance-arm-weekly - cron: 0 19 * * 3,6 +- always_run: false + as: e2e-rosa-ocp4-cis-node steps: cluster_profile: quay-aws - dependencies: - OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest env: - BASE_DOMAIN: quay.devcluster.openshift.com - COMPUTE_ARCH: arm64 - CONTROL_ARCH: arm64 - FIPS_ENABLED: "true" - OCP_ARCH: arm64 + BYO_OIDC: "true" + CHANNEL_GROUP: stable + ENABLE_BILLING_ACCOUNT: "yes" + OCM_LOGIN_ENV: integration + OPENSHIFT_VERSION: 4.20.9 + REGION: us-east-2 test: + - ref: ipi-install-rbac - as: test cli: latest commands: | - set -x + export PROFILE=cis-node + export PRODUCT=ocp4 export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + export ROOT_DIR=$PWD git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" + PATH=$PATH:/tmp/bin go test -v -timeout 120m . -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -platform=rosa -bypass-remediations=true -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds from: src resources: requests: cpu: 100m - workflow: ipi-aws -- as: e2e-aws-openshift-node-compliance-arm-weekly - cron: 0 19 * * 3,6 + workflow: rosa-aws-sts-hcp +- always_run: false + as: e2e-rosa-ocp4-pci-dss-node steps: cluster_profile: quay-aws - dependencies: - OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest env: - BASE_DOMAIN: quay.devcluster.openshift.com - COMPUTE_ARCH: arm64 - CONTROL_ARCH: arm64 - FIPS_ENABLED: "true" - OCP_ARCH: arm64 + BYO_OIDC: "true" + CHANNEL_GROUP: stable + ENABLE_BILLING_ACCOUNT: "yes" + OCM_LOGIN_ENV: integration + OPENSHIFT_VERSION: 4.20.9 + REGION: us-east-2 test: + - ref: ipi-install-rbac - as: test cli: latest commands: | - set -x + export PROFILE=pci-dss-node + export PRODUCT=ocp4 export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + export ROOT_DIR=$PWD git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e pushd ocp4e2e; make install-jq - INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} - PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" + PATH=$PATH:/tmp/bin go test -v -timeout 120m . -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -platform=rosa -bypass-remediations=true -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds from: src resources: requests: cpu: 100m - workflow: ipi-aws + workflow: rosa-aws-sts-hcp zz_generated_metadata: branch: master org: ComplianceAsCode repo: content - variant: "4.12" + variant: "4.20" diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.21.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.21.yaml new file mode 100644 index 0000000000000..fb2881b8aa6e1 --- /dev/null +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.21.yaml @@ -0,0 +1,717 @@ +build_root: + image_stream_tag: + name: release + namespace: openshift + tag: rhel-9-release-golang-1.24-openshift-4.21 +images: +- additional_architectures: + - arm64 + dockerfile_path: Dockerfiles/ocp4_content + to: ocp4-content-ds +releases: + arm64-latest: + candidate: + architecture: arm64 + product: ocp + stream: nightly + version: "4.21" + initial: + integration: + name: "4.21" + namespace: ocp + latest: + candidate: + product: ocp + stream: ci + version: "4.21" +resources: + '*': + requests: + cpu: 200m + memory: 400Mi +tests: +- always_run: false + as: e2e-aws-ocp4-bsi + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=bsi + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-bsi-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=bsi-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-bsi + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export PROFILE=bsi + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-e8 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export PROFILE=e8 + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-e8 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=e8 + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-moderate + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=moderate + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-moderate-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=moderate-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-cis + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=cis + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-cis-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=cis-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-moderate + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + pre: + - chain: ipi-aws-pre + - ref: fips-check + test: + - as: test + cli: latest + commands: | + export PROFILE=moderate + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-stig + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=stig + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-stig-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=stig-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss-4-0 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-4-0 + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss-node-4-0 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-node-4-0 + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-high + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + pre: + - chain: ipi-aws-pre + - ref: fips-check + test: + - as: test + cli: latest + commands: | + export PROFILE=high + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-stig + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + pre: + - chain: ipi-aws-pre + - ref: fips-check + test: + - as: test + cli: latest + commands: | + export PROFILE=stig + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-high + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=high + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-high-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=high-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory="$CONTENT_DIRECTORY" + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-platform-compliance-weekly + cron: 45 23 * * 3,6 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-node-compliance-weekly + cron: 45 23 * * 3,6 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-platform-compliance-arm-weekly + cron: 45 23 * * 3,6 + steps: + cluster_profile: quay-aws + dependencies: + OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest + env: + BASE_DOMAIN: quay.devcluster.openshift.com + COMPUTE_ARCH: arm64 + CONTROL_ARCH: arm64 + FIPS_ENABLED: "true" + OCP_ARCH: arm64 + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-node-compliance-arm-weekly + cron: 45 23 * * 3,6 + steps: + cluster_profile: quay-aws + dependencies: + OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest + env: + BASE_DOMAIN: quay.devcluster.openshift.com + COMPUTE_ARCH: arm64 + CONTROL_ARCH: arm64 + FIPS_ENABLED: "true" + OCP_ARCH: arm64 + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-rosa-ocp4-cis-node + steps: + cluster_profile: quay-aws + env: + BYO_OIDC: "true" + CHANNEL_GROUP: stable + ENABLE_BILLING_ACCOUNT: "yes" + OCM_LOGIN_ENV: integration + OPENSHIFT_VERSION: 4.21.9 + REGION: us-east-2 + test: + - ref: ipi-install-rbac + - as: test + cli: latest + commands: | + export PROFILE=cis-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + export ROOT_DIR=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 120m github.com/ComplianceAsCode/ocp4e2e -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -platform=rosa -bypass-remediations=true -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: rosa-aws-sts-hcp +- always_run: false + as: e2e-rosa-ocp4-pci-dss-node + steps: + cluster_profile: quay-aws + env: + BYO_OIDC: "true" + CHANNEL_GROUP: stable + ENABLE_BILLING_ACCOUNT: "yes" + OCM_LOGIN_ENV: integration + OPENSHIFT_VERSION: 4.21.9 + REGION: us-east-2 + test: + - ref: ipi-install-rbac + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + export ROOT_DIR=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 120m github.com/ComplianceAsCode/ocp4e2e -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -platform=rosa -bypass-remediations=true -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: rosa-aws-sts-hcp +zz_generated_metadata: + branch: master + org: ComplianceAsCode + repo: content + variant: "4.21" diff --git a/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-periodics.yaml b/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-periodics.yaml index dbfb2acbc96de..5f94f1449efcf 100644 --- a/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-periodics.yaml +++ b/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-periodics.yaml @@ -1,381 +1,6 @@ periodics: - agent: kubernetes - cluster: build10 - cron: 0 19 * * 3,6 - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: master - org: ComplianceAsCode - repo: content - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" - ci.openshift.io/generator: prowgen - job-release: "4.12" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.12-e2e-aws-openshift-node-compliance-arm-weekly - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-node-compliance-arm-weekly - - --variant=4.12 - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator -- agent: kubernetes - cluster: build10 - cron: 0 19 * * 3,6 - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: master - org: ComplianceAsCode - repo: content - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" - ci.openshift.io/generator: prowgen - job-release: "4.12" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.12-e2e-aws-openshift-node-compliance-weekly - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-node-compliance-weekly - - --variant=4.12 - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator -- agent: kubernetes - cluster: build10 - cron: 0 19 * * 3,6 - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: master - org: ComplianceAsCode - repo: content - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" - ci.openshift.io/generator: prowgen - job-release: "4.12" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.12-e2e-aws-openshift-platform-compliance-arm-weekly - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-platform-compliance-arm-weekly - - --variant=4.12 - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator -- agent: kubernetes - cluster: build10 - cron: 0 19 * * 3,6 - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: master - org: ComplianceAsCode - repo: content - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" - ci.openshift.io/generator: prowgen - job-release: "4.12" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.12-e2e-aws-openshift-platform-compliance-weekly - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-platform-compliance-weekly - - --variant=4.12 - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator -- agent: kubernetes - cluster: build10 - cron: 0 21 * * 3,6 - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: master - org: ComplianceAsCode - repo: content - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.14" - ci.openshift.io/generator: prowgen - job-release: "4.14" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.14-e2e-aws-openshift-node-compliance-arm-weekly - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-node-compliance-arm-weekly - - --variant=4.14 - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator -- agent: kubernetes - cluster: build10 + cluster: build07 cron: 0 21 * * 3,6 decorate: true decoration_config: @@ -391,7 +16,7 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.14" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.14-e2e-aws-openshift-node-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.14-e2e-aws-openshift-node-compliance-arm-weekly spec: containers: - args: @@ -400,7 +25,7 @@ periodics: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-node-compliance-weekly + - --target=e2e-aws-openshift-node-compliance-arm-weekly - --variant=4.14 command: - ci-operator @@ -466,7 +91,8 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.14" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.14-e2e-aws-openshift-platform-compliance-arm-weekly +<<<<<<< HEAD + name: periodic-ci-ComplianceAsCode-content-master-4.14-e2e-aws-openshift-node-compliance-weekly spec: containers: - args: @@ -475,7 +101,7 @@ periodics: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-platform-compliance-arm-weekly + - --target=e2e-aws-openshift-node-compliance-weekly - --variant=4.14 command: - ci-operator @@ -541,7 +167,9 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.14" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.14-e2e-aws-openshift-platform-compliance-weekly +======= +>>>>>>> 1d35ec5b18f (Add, delete and update content periodic jobs) + name: periodic-ci-ComplianceAsCode-content-master-4.14-e2e-aws-openshift-platform-compliance-arm-weekly spec: containers: - args: @@ -550,7 +178,7 @@ periodics: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-platform-compliance-weekly + - --target=e2e-aws-openshift-platform-compliance-arm-weekly - --variant=4.14 command: - ci-operator @@ -600,82 +228,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build10 - cron: 0 23 * * 3,6 - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: master - org: ComplianceAsCode - repo: content - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" - ci.openshift.io/generator: prowgen - job-release: "4.16" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.16-e2e-aws-openshift-node-compliance-arm-weekly - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-node-compliance-arm-weekly - - --variant=4.16 - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator -- agent: kubernetes - cluster: build10 + cluster: build07 cron: 0 23 * * 3,6 decorate: true decoration_config: @@ -749,81 +302,6 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator -- agent: kubernetes - cluster: build10 - cron: 0 23 * * 3,6 - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: master - org: ComplianceAsCode - repo: content - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" - ci.openshift.io/generator: prowgen - job-release: "4.16" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.16-e2e-aws-openshift-platform-compliance-arm-weekly - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-platform-compliance-arm-weekly - - --variant=4.16 - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - agent: kubernetes cluster: build10 cron: 0 23 * * 3,6 @@ -991,7 +469,7 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.17" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.17-e2e-aws-openshift-node-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.17-e2e-aws-openshift-platform-compliance-arm-weekly spec: containers: - args: @@ -1000,7 +478,7 @@ periodics: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-node-compliance-weekly + - --target=e2e-aws-openshift-platform-compliance-arm-weekly - --variant=4.17 command: - ci-operator @@ -1050,8 +528,8 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build10 - cron: 30 23 * * 3,6 + cluster: build07 + cron: 45 23 * * 3,6 decorate: true decoration_config: skip_cloning: true @@ -1062,11 +540,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.18" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.18" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.17-e2e-aws-openshift-platform-compliance-arm-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.18-e2e-aws-openshift-node-compliance-weekly spec: containers: - args: @@ -1075,8 +553,8 @@ periodics: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-platform-compliance-arm-weekly - - --variant=4.17 + - --target=e2e-aws-openshift-node-compliance-weekly + - --variant=4.18 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1126,7 +604,7 @@ periodics: secretName: result-aggregator - agent: kubernetes cluster: build10 - cron: 30 23 * * 3,6 + cron: 45 23 * * 3,6 decorate: true decoration_config: skip_cloning: true @@ -1137,11 +615,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.18" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.18" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.17-e2e-aws-openshift-platform-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.18-e2e-aws-openshift-platform-compliance-weekly spec: containers: - args: @@ -1151,7 +629,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-platform-compliance-weekly - - --variant=4.17 + - --variant=4.18 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1212,11 +690,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.18-e2e-aws-openshift-node-compliance-arm-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.19-e2e-aws-openshift-node-compliance-arm-weekly spec: containers: - args: @@ -1226,7 +704,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-node-compliance-arm-weekly - - --variant=4.18 + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1287,11 +765,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.18-e2e-aws-openshift-node-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.19-e2e-aws-openshift-platform-compliance-arm-weekly spec: containers: - args: @@ -1300,8 +778,8 @@ periodics: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-node-compliance-weekly - - --variant=4.18 + - --target=e2e-aws-openshift-platform-compliance-arm-weekly + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1362,11 +840,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.18-e2e-aws-openshift-platform-compliance-arm-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.20-e2e-aws-openshift-node-compliance-weekly spec: containers: - args: @@ -1375,8 +853,8 @@ periodics: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-platform-compliance-arm-weekly - - --variant=4.18 + - --target=e2e-aws-openshift-node-compliance-weekly + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1425,7 +903,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build10 + cluster: build07 cron: 45 23 * * 3,6 decorate: true decoration_config: @@ -1437,11 +915,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.18-e2e-aws-openshift-platform-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.20-e2e-aws-openshift-platform-compliance-weekly spec: containers: - args: @@ -1451,7 +929,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-platform-compliance-weekly - - --variant=4.18 + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1500,7 +978,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build10 + cluster: build07 cron: 45 23 * * 3,6 decorate: true decoration_config: @@ -1512,11 +990,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.19-e2e-aws-openshift-node-compliance-arm-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.21-e2e-aws-openshift-node-compliance-arm-weekly spec: containers: - args: @@ -1526,7 +1004,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-node-compliance-arm-weekly - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1575,7 +1053,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build10 + cluster: build07 cron: 45 23 * * 3,6 decorate: true decoration_config: @@ -1587,11 +1065,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.19-e2e-aws-openshift-node-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.21-e2e-aws-openshift-node-compliance-weekly spec: containers: - args: @@ -1601,7 +1079,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-node-compliance-weekly - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1650,7 +1128,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build10 + cluster: build07 cron: 45 23 * * 3,6 decorate: true decoration_config: @@ -1662,11 +1140,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.19-e2e-aws-openshift-platform-compliance-arm-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.21-e2e-aws-openshift-platform-compliance-arm-weekly spec: containers: - args: @@ -1676,7 +1154,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-platform-compliance-arm-weekly - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1725,7 +1203,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build10 + cluster: build07 cron: 45 23 * * 3,6 decorate: true decoration_config: @@ -1737,11 +1215,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.19-e2e-aws-openshift-platform-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.21-e2e-aws-openshift-platform-compliance-weekly spec: containers: - args: @@ -1751,7 +1229,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-platform-compliance-weekly - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest diff --git a/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-presubmits.yaml b/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-presubmits.yaml index 756de94cf5f22..044f44b21b5dc 100644 --- a/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-presubmits.yaml +++ b/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-presubmits.yaml @@ -5,20 +5,20 @@ presubmits: branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.12-e2e-aws-ocp4-cis + cluster: build09 + context: ci/prow/4.14-e2e-aws-ocp4-bsi decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.14" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.14" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-cis - rerun_command: /test 4.12-e2e-aws-ocp4-cis + name: pull-ci-ComplianceAsCode-content-master-4.14-e2e-aws-ocp4-bsi + rerun_command: /test 4.14-e2e-aws-ocp4-bsi spec: containers: - args: @@ -27,8 +27,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-cis - - --variant=4.12 + - --target=e2e-aws-ocp4-bsi + - --variant=4.14 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -76,26 +76,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.14-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-ocp4-cis-node + context: ci/prow/4.14-e2e-aws-ocp4-bsi-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.14" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.14" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-cis-node - rerun_command: /test 4.12-e2e-aws-ocp4-cis-node + name: pull-ci-ComplianceAsCode-content-master-4.14-e2e-aws-ocp4-bsi-node + rerun_command: /test 4.14-e2e-aws-ocp4-bsi-node spec: containers: - args: @@ -104,8 +104,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-cis-node - - --variant=4.12 + - --target=e2e-aws-ocp4-bsi-node + - --variant=4.14 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -153,26 +153,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.14-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-ocp4-e8 + context: ci/prow/4.14-e2e-aws-ocp4-pci-dss-4-0 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.14" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.14" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-e8 - rerun_command: /test 4.12-e2e-aws-ocp4-e8 + name: pull-ci-ComplianceAsCode-content-master-4.14-e2e-aws-ocp4-pci-dss-4-0 + rerun_command: /test 4.14-e2e-aws-ocp4-pci-dss-4-0 spec: containers: - args: @@ -181,8 +181,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-e8 - - --variant=4.12 + - --target=e2e-aws-ocp4-pci-dss-4-0 + - --variant=4.14 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -230,26 +230,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.14-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-ocp4-high + context: ci/prow/4.14-e2e-aws-ocp4-pci-dss-node-4-0 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.14" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.14" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-high - rerun_command: /test 4.12-e2e-aws-ocp4-high + name: pull-ci-ComplianceAsCode-content-master-4.14-e2e-aws-ocp4-pci-dss-node-4-0 + rerun_command: /test 4.14-e2e-aws-ocp4-pci-dss-node-4-0 spec: containers: - args: @@ -258,8 +258,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-high - - --variant=4.12 + - --target=e2e-aws-ocp4-pci-dss-node-4-0 + - --variant=4.14 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -307,26 +307,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-high|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.14-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-ocp4-high-node + context: ci/prow/4.14-e2e-aws-rhcos4-bsi decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.14" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.14" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-high-node - rerun_command: /test 4.12-e2e-aws-ocp4-high-node + name: pull-ci-ComplianceAsCode-content-master-4.14-e2e-aws-rhcos4-bsi + rerun_command: /test 4.14-e2e-aws-rhcos4-bsi spec: containers: - args: @@ -335,8 +335,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-high-node - - --variant=4.12 + - --target=e2e-aws-rhcos4-bsi + - --variant=4.14 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -384,36 +384,33 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.14-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) - agent: kubernetes - always_run: false + always_run: true branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.12-e2e-aws-ocp4-moderate + cluster: build06 + context: ci/prow/4.14-images decorate: true decoration_config: skip_cloning: true labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + capability/arm64: arm64 + ci-operator.openshift.io/variant: "4.14" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.14" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-moderate - rerun_command: /test 4.12-e2e-aws-ocp4-moderate + name: pull-ci-ComplianceAsCode-content-master-4.14-images + rerun_command: /test 4.14-images spec: containers: - args: - --gcs-upload-secret=/secrets/gcs/service-account.json - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-moderate - - --variant=4.12 + - --target=[images] + - --variant=4.14 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -423,12 +420,6 @@ presubmits: requests: cpu: 10m volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - mountPath: /secrets/gcs name: gcs-credentials readOnly: true @@ -443,15 +434,6 @@ presubmits: readOnly: true serviceAccountName: ci-operator volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - name: manifest-tool-local-pusher secret: secretName: manifest-tool-local-pusher @@ -461,26 +443,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )4.14-images,?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-ocp4-moderate-node + context: ci/prow/4.16-e2e-aws-ocp4-bsi decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-moderate-node - rerun_command: /test 4.12-e2e-aws-ocp4-moderate-node + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-bsi + rerun_command: /test 4.16-e2e-aws-ocp4-bsi spec: containers: - args: @@ -489,8 +471,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-moderate-node - - --variant=4.12 + - --target=e2e-aws-ocp4-bsi + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -538,26 +520,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-ocp4-pci-dss + context: ci/prow/4.16-e2e-aws-ocp4-bsi-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-pci-dss - rerun_command: /test 4.12-e2e-aws-ocp4-pci-dss + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-bsi-node + rerun_command: /test 4.16-e2e-aws-ocp4-bsi-node spec: containers: - args: @@ -566,8 +548,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss - - --variant=4.12 + - --target=e2e-aws-ocp4-bsi-node + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -615,26 +597,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-ocp4-pci-dss-4-0 + context: ci/prow/4.16-e2e-aws-ocp4-cis decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-pci-dss-4-0 - rerun_command: /test 4.12-e2e-aws-ocp4-pci-dss-4-0 + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-cis + rerun_command: /test 4.16-e2e-aws-ocp4-cis spec: containers: - args: @@ -643,8 +625,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-4-0 - - --variant=4.12 + - --target=e2e-aws-ocp4-cis + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -692,26 +674,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-ocp4-pci-dss-node + context: ci/prow/4.16-e2e-aws-ocp4-cis-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-pci-dss-node - rerun_command: /test 4.12-e2e-aws-ocp4-pci-dss-node + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-cis-node + rerun_command: /test 4.16-e2e-aws-ocp4-cis-node spec: containers: - args: @@ -720,8 +702,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-node - - --variant=4.12 + - --target=e2e-aws-ocp4-cis-node + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -769,26 +751,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-ocp4-pci-dss-node-4-0 + context: ci/prow/4.16-e2e-aws-ocp4-e8 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-pci-dss-node-4-0 - rerun_command: /test 4.12-e2e-aws-ocp4-pci-dss-node-4-0 + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-e8 + rerun_command: /test 4.16-e2e-aws-ocp4-e8 spec: containers: - args: @@ -797,8 +779,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-node-4-0 - - --variant=4.12 + - --target=e2e-aws-ocp4-e8 + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -846,26 +828,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-ocp4-stig + context: ci/prow/4.16-e2e-aws-ocp4-high decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-stig - rerun_command: /test 4.12-e2e-aws-ocp4-stig + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-high + rerun_command: /test 4.16-e2e-aws-ocp4-high spec: containers: - args: @@ -874,8 +856,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-stig - - --variant=4.12 + - --target=e2e-aws-ocp4-high + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -923,26 +905,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-high|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-ocp4-stig-node + context: ci/prow/4.16-e2e-aws-ocp4-high-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-stig-node - rerun_command: /test 4.12-e2e-aws-ocp4-stig-node + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-high-node + rerun_command: /test 4.16-e2e-aws-ocp4-high-node spec: containers: - args: @@ -951,8 +933,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-stig-node - - --variant=4.12 + - --target=e2e-aws-ocp4-high-node + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1000,26 +982,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-rhcos4-e8 + context: ci/prow/4.16-e2e-aws-ocp4-moderate decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-rhcos4-e8 - rerun_command: /test 4.12-e2e-aws-rhcos4-e8 + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-moderate + rerun_command: /test 4.16-e2e-aws-ocp4-moderate spec: containers: - args: @@ -1028,8 +1010,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-e8 - - --variant=4.12 + - --target=e2e-aws-ocp4-moderate + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1077,26 +1059,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-rhcos4-high + context: ci/prow/4.16-e2e-aws-ocp4-moderate-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-rhcos4-high - rerun_command: /test 4.12-e2e-aws-rhcos4-high + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-moderate-node + rerun_command: /test 4.16-e2e-aws-ocp4-moderate-node spec: containers: - args: @@ -1105,8 +1087,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-high - - --variant=4.12 + - --target=e2e-aws-ocp4-moderate-node + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1154,26 +1136,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-rhcos4-moderate + context: ci/prow/4.16-e2e-aws-ocp4-pci-dss decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-rhcos4-moderate - rerun_command: /test 4.12-e2e-aws-rhcos4-moderate + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-pci-dss + rerun_command: /test 4.16-e2e-aws-ocp4-pci-dss spec: containers: - args: @@ -1182,8 +1164,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-moderate - - --variant=4.12 + - --target=e2e-aws-ocp4-pci-dss + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1231,26 +1213,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.12-e2e-aws-rhcos4-stig + context: ci/prow/4.16-e2e-aws-ocp4-pci-dss-4-0 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-rhcos4-stig - rerun_command: /test 4.12-e2e-aws-rhcos4-stig + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-pci-dss-4-0 + rerun_command: /test 4.16-e2e-aws-ocp4-pci-dss-4-0 spec: containers: - args: @@ -1259,8 +1241,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-stig - - --variant=4.12 + - --target=e2e-aws-ocp4-pci-dss-4-0 + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1308,33 +1290,36 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.12-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) - agent: kubernetes - always_run: true + always_run: false branches: - ^master$ - ^master- - cluster: build06 - context: ci/prow/4.12-images + cluster: build11 + context: ci/prow/4.16-e2e-aws-ocp4-pci-dss-node decorate: true decoration_config: skip_cloning: true labels: - capability/arm64: arm64 - ci-operator.openshift.io/variant: "4.12" + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.12" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.12-images - rerun_command: /test 4.12-images + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-pci-dss-node + rerun_command: /test 4.16-e2e-aws-ocp4-pci-dss-node spec: containers: - args: - --gcs-upload-secret=/secrets/gcs/service-account.json - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - - --target=[images] - - --variant=4.12 + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-node + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1344,6 +1329,12 @@ presubmits: requests: cpu: 10m volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true - mountPath: /secrets/gcs name: gcs-credentials readOnly: true @@ -1358,6 +1349,15 @@ presubmits: readOnly: true serviceAccountName: ci-operator volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials - name: manifest-tool-local-pusher secret: secretName: manifest-tool-local-pusher @@ -1367,26 +1367,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )4.12-images,?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.14-e2e-aws-ocp4-bsi + context: ci/prow/4.16-e2e-aws-ocp4-pci-dss-node-4-0 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.14" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.14" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.14-e2e-aws-ocp4-bsi - rerun_command: /test 4.14-e2e-aws-ocp4-bsi + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-pci-dss-node-4-0 + rerun_command: /test 4.16-e2e-aws-ocp4-pci-dss-node-4-0 spec: containers: - args: @@ -1395,8 +1395,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-bsi - - --variant=4.14 + - --target=e2e-aws-ocp4-pci-dss-node-4-0 + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1444,26 +1444,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.14-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.14-e2e-aws-ocp4-bsi-node + context: ci/prow/4.16-e2e-aws-ocp4-stig decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.14" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.14" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.14-e2e-aws-ocp4-bsi-node - rerun_command: /test 4.14-e2e-aws-ocp4-bsi-node + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-stig + rerun_command: /test 4.16-e2e-aws-ocp4-stig spec: containers: - args: @@ -1472,8 +1472,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-bsi-node - - --variant=4.14 + - --target=e2e-aws-ocp4-stig + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1521,26 +1521,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.14-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.14-e2e-aws-ocp4-pci-dss-4-0 + context: ci/prow/4.16-e2e-aws-ocp4-stig-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.14" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.14" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.14-e2e-aws-ocp4-pci-dss-4-0 - rerun_command: /test 4.14-e2e-aws-ocp4-pci-dss-4-0 + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-stig-node + rerun_command: /test 4.16-e2e-aws-ocp4-stig-node spec: containers: - args: @@ -1549,9 +1549,9 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-4-0 - - --variant=4.14 - command: + - --target=e2e-aws-ocp4-stig-node + - --variant=4.16 + command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest imagePullPolicy: Always @@ -1598,26 +1598,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.14-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.14-e2e-aws-ocp4-pci-dss-node-4-0 + context: ci/prow/4.16-e2e-aws-rhcos4-bsi decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.14" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.14" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.14-e2e-aws-ocp4-pci-dss-node-4-0 - rerun_command: /test 4.14-e2e-aws-ocp4-pci-dss-node-4-0 + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-rhcos4-bsi + rerun_command: /test 4.16-e2e-aws-rhcos4-bsi spec: containers: - args: @@ -1626,8 +1626,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-node-4-0 - - --variant=4.14 + - --target=e2e-aws-rhcos4-bsi + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1675,26 +1675,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.14-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.14-e2e-aws-rhcos4-bsi + context: ci/prow/4.16-e2e-aws-rhcos4-e8 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.14" + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.14" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.14-e2e-aws-rhcos4-bsi - rerun_command: /test 4.14-e2e-aws-rhcos4-bsi + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-rhcos4-e8 + rerun_command: /test 4.16-e2e-aws-rhcos4-e8 spec: containers: - args: @@ -1703,8 +1703,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-bsi - - --variant=4.14 + - --target=e2e-aws-rhcos4-e8 + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1752,33 +1752,36 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.14-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) - agent: kubernetes - always_run: true + always_run: false branches: - ^master$ - ^master- - cluster: build06 - context: ci/prow/4.14-images + cluster: build11 + context: ci/prow/4.16-e2e-aws-rhcos4-high decorate: true decoration_config: skip_cloning: true labels: - capability/arm64: arm64 - ci-operator.openshift.io/variant: "4.14" + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen - job-release: "4.14" + job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.14-images - rerun_command: /test 4.14-images + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-rhcos4-high + rerun_command: /test 4.16-e2e-aws-rhcos4-high spec: containers: - args: - --gcs-upload-secret=/secrets/gcs/service-account.json - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - - --target=[images] - - --variant=4.14 + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-high + - --variant=4.16 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -1788,6 +1791,12 @@ presubmits: requests: cpu: 10m volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true - mountPath: /secrets/gcs name: gcs-credentials readOnly: true @@ -1802,6 +1811,15 @@ presubmits: readOnly: true serviceAccountName: ci-operator volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials - name: manifest-tool-local-pusher secret: secretName: manifest-tool-local-pusher @@ -1811,14 +1829,14 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )4.14-images,?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-bsi + context: ci/prow/4.16-e2e-aws-rhcos4-moderate decorate: true decoration_config: skip_cloning: true @@ -1829,8 +1847,8 @@ presubmits: ci.openshift.io/generator: prowgen job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-bsi - rerun_command: /test 4.16-e2e-aws-ocp4-bsi + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-rhcos4-moderate + rerun_command: /test 4.16-e2e-aws-rhcos4-moderate spec: containers: - args: @@ -1839,7 +1857,7 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-bsi + - --target=e2e-aws-rhcos4-moderate - --variant=4.16 command: - ci-operator @@ -1888,14 +1906,14 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-bsi-node + context: ci/prow/4.16-e2e-aws-rhcos4-stig decorate: true decoration_config: skip_cloning: true @@ -1906,8 +1924,8 @@ presubmits: ci.openshift.io/generator: prowgen job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-bsi-node - rerun_command: /test 4.16-e2e-aws-ocp4-bsi-node + name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-rhcos4-stig + rerun_command: /test 4.16-e2e-aws-rhcos4-stig spec: containers: - args: @@ -1916,7 +1934,7 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-bsi-node + - --target=e2e-aws-rhcos4-stig - --variant=4.16 command: - ci-operator @@ -1965,35 +1983,32 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.16-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) - agent: kubernetes - always_run: false + always_run: true branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-cis + cluster: build06 + context: ci/prow/4.16-images decorate: true decoration_config: skip_cloning: true labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws + capability/arm64: arm64 ci-operator.openshift.io/variant: "4.16" ci.openshift.io/generator: prowgen job-release: "4.16" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-cis - rerun_command: /test 4.16-e2e-aws-ocp4-cis + name: pull-ci-ComplianceAsCode-content-master-4.16-images + rerun_command: /test 4.16-images spec: containers: - args: - --gcs-upload-secret=/secrets/gcs/service-account.json - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-cis + - --target=[images] - --variant=4.16 command: - ci-operator @@ -2004,12 +2019,6 @@ presubmits: requests: cpu: 10m volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - mountPath: /secrets/gcs name: gcs-credentials readOnly: true @@ -2024,15 +2033,6 @@ presubmits: readOnly: true serviceAccountName: ci-operator volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - name: manifest-tool-local-pusher secret: secretName: manifest-tool-local-pusher @@ -2042,26 +2042,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )4.16-images,?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-cis-node + context: ci/prow/4.17-e2e-aws-ocp4-bsi decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.17" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.17" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-cis-node - rerun_command: /test 4.16-e2e-aws-ocp4-cis-node + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-bsi + rerun_command: /test 4.17-e2e-aws-ocp4-bsi spec: containers: - args: @@ -2070,8 +2070,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-cis-node - - --variant=4.16 + - --target=e2e-aws-ocp4-bsi + - --variant=4.17 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -2119,26 +2119,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-e8 + context: ci/prow/4.17-e2e-aws-ocp4-bsi-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.17" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.17" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-e8 - rerun_command: /test 4.16-e2e-aws-ocp4-e8 + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-bsi-node + rerun_command: /test 4.17-e2e-aws-ocp4-bsi-node spec: containers: - args: @@ -2147,8 +2147,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-e8 - - --variant=4.16 + - --target=e2e-aws-ocp4-bsi-node + - --variant=4.17 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -2196,26 +2196,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-high + context: ci/prow/4.17-e2e-aws-ocp4-cis decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.17" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.17" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-high - rerun_command: /test 4.16-e2e-aws-ocp4-high + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-cis + rerun_command: /test 4.17-e2e-aws-ocp4-cis spec: containers: - args: @@ -2224,8 +2224,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-high - - --variant=4.16 + - --target=e2e-aws-ocp4-cis + - --variant=4.17 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -2273,26 +2273,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-high|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-high-node + context: ci/prow/4.17-e2e-aws-ocp4-cis-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.17" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.17" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-high-node - rerun_command: /test 4.16-e2e-aws-ocp4-high-node + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-cis-node + rerun_command: /test 4.17-e2e-aws-ocp4-cis-node spec: containers: - args: @@ -2301,8 +2301,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-high-node - - --variant=4.16 + - --target=e2e-aws-ocp4-cis-node + - --variant=4.17 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -2350,26 +2350,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-moderate + context: ci/prow/4.17-e2e-aws-ocp4-e8 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.17" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.17" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-moderate - rerun_command: /test 4.16-e2e-aws-ocp4-moderate + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-e8 + rerun_command: /test 4.17-e2e-aws-ocp4-e8 spec: containers: - args: @@ -2378,8 +2378,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-moderate - - --variant=4.16 + - --target=e2e-aws-ocp4-e8 + - --variant=4.17 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -2427,26 +2427,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-moderate-node + context: ci/prow/4.17-e2e-aws-ocp4-high decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.17" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.17" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-moderate-node - rerun_command: /test 4.16-e2e-aws-ocp4-moderate-node + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-high + rerun_command: /test 4.17-e2e-aws-ocp4-high spec: containers: - args: @@ -2455,8 +2455,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-moderate-node - - --variant=4.16 + - --target=e2e-aws-ocp4-high + - --variant=4.17 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -2504,26 +2504,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-high|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-pci-dss + context: ci/prow/4.17-e2e-aws-ocp4-high-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.17" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.17" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-pci-dss - rerun_command: /test 4.16-e2e-aws-ocp4-pci-dss + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-high-node + rerun_command: /test 4.17-e2e-aws-ocp4-high-node spec: containers: - args: @@ -2532,8 +2532,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss - - --variant=4.16 + - --target=e2e-aws-ocp4-high-node + - --variant=4.17 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -2581,26 +2581,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-pci-dss-4-0 + context: ci/prow/4.17-e2e-aws-ocp4-moderate decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.17" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.17" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-pci-dss-4-0 - rerun_command: /test 4.16-e2e-aws-ocp4-pci-dss-4-0 + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-moderate + rerun_command: /test 4.17-e2e-aws-ocp4-moderate spec: containers: - args: @@ -2609,9 +2609,2070 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-4-0 - - --variant=4.16 - command: + - --target=e2e-aws-ocp4-moderate + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.17-e2e-aws-ocp4-moderate-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.17" + ci.openshift.io/generator: prowgen + job-release: "4.17" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-moderate-node + rerun_command: /test 4.17-e2e-aws-ocp4-moderate-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-moderate-node + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.17-e2e-aws-ocp4-pci-dss + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.17" + ci.openshift.io/generator: prowgen + job-release: "4.17" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-pci-dss + rerun_command: /test 4.17-e2e-aws-ocp4-pci-dss + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.17-e2e-aws-ocp4-pci-dss-4-0 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.17" + ci.openshift.io/generator: prowgen + job-release: "4.17" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-pci-dss-4-0 + rerun_command: /test 4.17-e2e-aws-ocp4-pci-dss-4-0 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-4-0 + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.17-e2e-aws-ocp4-pci-dss-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.17" + ci.openshift.io/generator: prowgen + job-release: "4.17" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-pci-dss-node + rerun_command: /test 4.17-e2e-aws-ocp4-pci-dss-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-node + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.17-e2e-aws-ocp4-pci-dss-node-4-0 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.17" + ci.openshift.io/generator: prowgen + job-release: "4.17" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-pci-dss-node-4-0 + rerun_command: /test 4.17-e2e-aws-ocp4-pci-dss-node-4-0 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-node-4-0 + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.17-e2e-aws-ocp4-stig + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.17" + ci.openshift.io/generator: prowgen + job-release: "4.17" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-stig + rerun_command: /test 4.17-e2e-aws-ocp4-stig + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-stig + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.17-e2e-aws-ocp4-stig-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.17" + ci.openshift.io/generator: prowgen + job-release: "4.17" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-stig-node + rerun_command: /test 4.17-e2e-aws-ocp4-stig-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-stig-node + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.17-e2e-aws-rhcos4-bsi + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.17" + ci.openshift.io/generator: prowgen + job-release: "4.17" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-rhcos4-bsi + rerun_command: /test 4.17-e2e-aws-rhcos4-bsi + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-bsi + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.17-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.17-e2e-aws-rhcos4-e8 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.17" + ci.openshift.io/generator: prowgen + job-release: "4.17" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-rhcos4-e8 + rerun_command: /test 4.17-e2e-aws-rhcos4-e8 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-e8 + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.17-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.17-e2e-aws-rhcos4-high + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.17" + ci.openshift.io/generator: prowgen + job-release: "4.17" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-rhcos4-high + rerun_command: /test 4.17-e2e-aws-rhcos4-high + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-high + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.17-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.17-e2e-aws-rhcos4-moderate + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.17" + ci.openshift.io/generator: prowgen + job-release: "4.17" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-rhcos4-moderate + rerun_command: /test 4.17-e2e-aws-rhcos4-moderate + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-moderate + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.17-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.17-e2e-aws-rhcos4-stig + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.17" + ci.openshift.io/generator: prowgen + job-release: "4.17" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-rhcos4-stig + rerun_command: /test 4.17-e2e-aws-rhcos4-stig + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-stig + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.17-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^master$ + - ^master- + cluster: build06 + context: ci/prow/4.17-images + decorate: true + decoration_config: + skip_cloning: true + labels: + capability/arm64: arm64 + ci-operator.openshift.io/variant: "4.17" + ci.openshift.io/generator: prowgen + job-release: "4.17" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.17-images + rerun_command: /test 4.17-images + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=[images] + - --variant=4.17 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )4.17-images,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-bsi + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-bsi + rerun_command: /test 4.18-e2e-aws-ocp4-bsi + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-bsi + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-bsi-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-bsi-node + rerun_command: /test 4.18-e2e-aws-ocp4-bsi-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-bsi-node + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-cis + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-cis + rerun_command: /test 4.18-e2e-aws-ocp4-cis + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-cis + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-cis-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-cis-node + rerun_command: /test 4.18-e2e-aws-ocp4-cis-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-cis-node + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-e8 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-e8 + rerun_command: /test 4.18-e2e-aws-ocp4-e8 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-e8 + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-high + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-high + rerun_command: /test 4.18-e2e-aws-ocp4-high + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-high + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-high|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-high-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-high-node + rerun_command: /test 4.18-e2e-aws-ocp4-high-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-high-node + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-moderate + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-moderate + rerun_command: /test 4.18-e2e-aws-ocp4-moderate + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-moderate + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-moderate-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-moderate-node + rerun_command: /test 4.18-e2e-aws-ocp4-moderate-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-moderate-node + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-pci-dss + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-pci-dss + rerun_command: /test 4.18-e2e-aws-ocp4-pci-dss + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-pci-dss-4-0 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-pci-dss-4-0 + rerun_command: /test 4.18-e2e-aws-ocp4-pci-dss-4-0 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-4-0 + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-pci-dss-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-pci-dss-node + rerun_command: /test 4.18-e2e-aws-ocp4-pci-dss-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-node + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-pci-dss-node-4-0 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-pci-dss-node-4-0 + rerun_command: /test 4.18-e2e-aws-ocp4-pci-dss-node-4-0 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-node-4-0 + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.18-e2e-aws-ocp4-stig + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-stig + rerun_command: /test 4.18-e2e-aws-ocp4-stig + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-stig + - --variant=4.18 + command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest imagePullPolicy: Always @@ -2658,26 +4719,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-pci-dss-node + context: ci/prow/4.18-e2e-aws-ocp4-stig-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.18" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.18" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-pci-dss-node - rerun_command: /test 4.16-e2e-aws-ocp4-pci-dss-node + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-stig-node + rerun_command: /test 4.18-e2e-aws-ocp4-stig-node spec: containers: - args: @@ -2686,8 +4747,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-node - - --variant=4.16 + - --target=e2e-aws-ocp4-stig-node + - --variant=4.18 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -2735,26 +4796,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-pci-dss-node-4-0 + context: ci/prow/4.18-e2e-aws-rhcos4-bsi decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.18" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.18" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-pci-dss-node-4-0 - rerun_command: /test 4.16-e2e-aws-ocp4-pci-dss-node-4-0 + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-rhcos4-bsi + rerun_command: /test 4.18-e2e-aws-rhcos4-bsi spec: containers: - args: @@ -2763,8 +4824,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-node-4-0 - - --variant=4.16 + - --target=e2e-aws-rhcos4-bsi + - --variant=4.18 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -2812,26 +4873,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.18-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-stig + context: ci/prow/4.18-e2e-aws-rhcos4-e8 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.18" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.18" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-stig - rerun_command: /test 4.16-e2e-aws-ocp4-stig + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-rhcos4-e8 + rerun_command: /test 4.18-e2e-aws-rhcos4-e8 spec: containers: - args: @@ -2840,8 +4901,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-stig - - --variant=4.16 + - --target=e2e-aws-rhcos4-e8 + - --variant=4.18 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -2889,26 +4950,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.18-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-ocp4-stig-node + context: ci/prow/4.18-e2e-aws-rhcos4-high decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.18" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.18" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-ocp4-stig-node - rerun_command: /test 4.16-e2e-aws-ocp4-stig-node + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-rhcos4-high + rerun_command: /test 4.18-e2e-aws-rhcos4-high spec: containers: - args: @@ -2917,8 +4978,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-stig-node - - --variant=4.16 + - --target=e2e-aws-rhcos4-high + - --variant=4.18 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -2966,26 +5027,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.18-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-rhcos4-bsi + context: ci/prow/4.18-e2e-aws-rhcos4-moderate decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.18" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.18" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-rhcos4-bsi - rerun_command: /test 4.16-e2e-aws-rhcos4-bsi + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-rhcos4-moderate + rerun_command: /test 4.18-e2e-aws-rhcos4-moderate spec: containers: - args: @@ -2994,8 +5055,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-bsi - - --variant=4.16 + - --target=e2e-aws-rhcos4-moderate + - --variant=4.18 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -3043,26 +5104,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.18-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-rhcos4-e8 + context: ci/prow/4.18-e2e-aws-rhcos4-stig decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.18" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.18" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-rhcos4-e8 - rerun_command: /test 4.16-e2e-aws-rhcos4-e8 + name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-rhcos4-stig + rerun_command: /test 4.18-e2e-aws-rhcos4-stig spec: containers: - args: @@ -3071,8 +5132,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-e8 - - --variant=4.16 + - --target=e2e-aws-rhcos4-stig + - --variant=4.18 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -3120,26 +5181,85 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.18-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^master$ + - ^master- + cluster: build06 + context: ci/prow/4.18-images + decorate: true + decoration_config: + skip_cloning: true + labels: + capability/arm64: arm64 + ci-operator.openshift.io/variant: "4.18" + ci.openshift.io/generator: prowgen + job-release: "4.18" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.18-images + rerun_command: /test 4.18-images + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=[images] + - --variant=4.18 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )4.18-images,?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-rhcos4-high + context: ci/prow/4.19-e2e-aws-ocp4-bsi decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-rhcos4-high - rerun_command: /test 4.16-e2e-aws-rhcos4-high + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-bsi + rerun_command: /test 4.19-e2e-aws-ocp4-bsi spec: containers: - args: @@ -3148,8 +5268,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-high - - --variant=4.16 + - --target=e2e-aws-ocp4-bsi + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -3197,26 +5317,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-rhcos4-moderate + context: ci/prow/4.19-e2e-aws-ocp4-bsi-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-rhcos4-moderate - rerun_command: /test 4.16-e2e-aws-rhcos4-moderate + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-bsi-node + rerun_command: /test 4.19-e2e-aws-ocp4-bsi-node spec: containers: - args: @@ -3225,8 +5345,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-moderate - - --variant=4.16 + - --target=e2e-aws-ocp4-bsi-node + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -3274,26 +5394,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.16-e2e-aws-rhcos4-stig + context: ci/prow/4.19-e2e-aws-ocp4-cis decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-e2e-aws-rhcos4-stig - rerun_command: /test 4.16-e2e-aws-rhcos4-stig + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-cis + rerun_command: /test 4.19-e2e-aws-ocp4-cis spec: containers: - args: @@ -3302,8 +5422,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-stig - - --variant=4.16 + - --target=e2e-aws-ocp4-cis + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -3351,33 +5471,36 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.16-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) - agent: kubernetes - always_run: true + always_run: false branches: - ^master$ - ^master- - cluster: build06 - context: ci/prow/4.16-images + cluster: build11 + context: ci/prow/4.19-e2e-aws-ocp4-cis-node decorate: true decoration_config: skip_cloning: true labels: - capability/arm64: arm64 - ci-operator.openshift.io/variant: "4.16" + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.16" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.16-images - rerun_command: /test 4.16-images + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-cis-node + rerun_command: /test 4.19-e2e-aws-ocp4-cis-node spec: containers: - args: - --gcs-upload-secret=/secrets/gcs/service-account.json - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - - --target=[images] - - --variant=4.16 + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-cis-node + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -3387,6 +5510,12 @@ presubmits: requests: cpu: 10m volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true - mountPath: /secrets/gcs name: gcs-credentials readOnly: true @@ -3401,6 +5530,15 @@ presubmits: readOnly: true serviceAccountName: ci-operator volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials - name: manifest-tool-local-pusher secret: secretName: manifest-tool-local-pusher @@ -3410,26 +5548,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )4.16-images,?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-bsi + context: ci/prow/4.19-e2e-aws-ocp4-e8 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-bsi - rerun_command: /test 4.17-e2e-aws-ocp4-bsi + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-e8 + rerun_command: /test 4.19-e2e-aws-ocp4-e8 spec: containers: - args: @@ -3438,8 +5576,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-bsi - - --variant=4.17 + - --target=e2e-aws-ocp4-e8 + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -3487,26 +5625,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-bsi-node + context: ci/prow/4.19-e2e-aws-ocp4-high decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-bsi-node - rerun_command: /test 4.17-e2e-aws-ocp4-bsi-node + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-high + rerun_command: /test 4.19-e2e-aws-ocp4-high spec: containers: - args: @@ -3515,8 +5653,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-bsi-node - - --variant=4.17 + - --target=e2e-aws-ocp4-high + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -3564,26 +5702,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-high|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-cis + context: ci/prow/4.19-e2e-aws-ocp4-high-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-cis - rerun_command: /test 4.17-e2e-aws-ocp4-cis + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-high-node + rerun_command: /test 4.19-e2e-aws-ocp4-high-node spec: containers: - args: @@ -3592,8 +5730,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-cis - - --variant=4.17 + - --target=e2e-aws-ocp4-high-node + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -3641,26 +5779,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-cis-node + context: ci/prow/4.19-e2e-aws-ocp4-moderate decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-cis-node - rerun_command: /test 4.17-e2e-aws-ocp4-cis-node + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-moderate + rerun_command: /test 4.19-e2e-aws-ocp4-moderate spec: containers: - args: @@ -3669,8 +5807,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-cis-node - - --variant=4.17 + - --target=e2e-aws-ocp4-moderate + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -3718,26 +5856,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-e8 + context: ci/prow/4.19-e2e-aws-ocp4-moderate-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-e8 - rerun_command: /test 4.17-e2e-aws-ocp4-e8 + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-moderate-node + rerun_command: /test 4.19-e2e-aws-ocp4-moderate-node spec: containers: - args: @@ -3746,8 +5884,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-e8 - - --variant=4.17 + - --target=e2e-aws-ocp4-moderate-node + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -3795,26 +5933,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-high + context: ci/prow/4.19-e2e-aws-ocp4-pci-dss decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-high - rerun_command: /test 4.17-e2e-aws-ocp4-high + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-pci-dss + rerun_command: /test 4.19-e2e-aws-ocp4-pci-dss spec: containers: - args: @@ -3823,8 +5961,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-high - - --variant=4.17 + - --target=e2e-aws-ocp4-pci-dss + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -3872,26 +6010,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-high|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-high-node + context: ci/prow/4.19-e2e-aws-ocp4-pci-dss-4-0 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-high-node - rerun_command: /test 4.17-e2e-aws-ocp4-high-node + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-pci-dss-4-0 + rerun_command: /test 4.19-e2e-aws-ocp4-pci-dss-4-0 spec: containers: - args: @@ -3900,8 +6038,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-high-node - - --variant=4.17 + - --target=e2e-aws-ocp4-pci-dss-4-0 + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -3949,26 +6087,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-moderate + context: ci/prow/4.19-e2e-aws-ocp4-pci-dss-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-moderate - rerun_command: /test 4.17-e2e-aws-ocp4-moderate + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-pci-dss-node + rerun_command: /test 4.19-e2e-aws-ocp4-pci-dss-node spec: containers: - args: @@ -3977,8 +6115,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-moderate - - --variant=4.17 + - --target=e2e-aws-ocp4-pci-dss-node + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4026,26 +6164,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-moderate-node + context: ci/prow/4.19-e2e-aws-ocp4-pci-dss-node-4-0 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-moderate-node - rerun_command: /test 4.17-e2e-aws-ocp4-moderate-node + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-pci-dss-node-4-0 + rerun_command: /test 4.19-e2e-aws-ocp4-pci-dss-node-4-0 spec: containers: - args: @@ -4054,8 +6192,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-moderate-node - - --variant=4.17 + - --target=e2e-aws-ocp4-pci-dss-node-4-0 + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4103,26 +6241,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-pci-dss + context: ci/prow/4.19-e2e-aws-ocp4-stig decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-pci-dss - rerun_command: /test 4.17-e2e-aws-ocp4-pci-dss + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-stig + rerun_command: /test 4.19-e2e-aws-ocp4-stig spec: containers: - args: @@ -4131,8 +6269,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss - - --variant=4.17 + - --target=e2e-aws-ocp4-stig + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4180,26 +6318,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-pci-dss-4-0 + context: ci/prow/4.19-e2e-aws-ocp4-stig-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-pci-dss-4-0 - rerun_command: /test 4.17-e2e-aws-ocp4-pci-dss-4-0 + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-stig-node + rerun_command: /test 4.19-e2e-aws-ocp4-stig-node spec: containers: - args: @@ -4208,8 +6346,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-4-0 - - --variant=4.17 + - --target=e2e-aws-ocp4-stig-node + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4257,26 +6395,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-pci-dss-node + context: ci/prow/4.19-e2e-aws-rhcos4-bsi decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-pci-dss-node - rerun_command: /test 4.17-e2e-aws-ocp4-pci-dss-node + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-rhcos4-bsi + rerun_command: /test 4.19-e2e-aws-rhcos4-bsi spec: containers: - args: @@ -4285,8 +6423,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-node - - --variant=4.17 + - --target=e2e-aws-rhcos4-bsi + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4334,26 +6472,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-pci-dss-node-4-0 + context: ci/prow/4.19-e2e-aws-rhcos4-e8 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-pci-dss-node-4-0 - rerun_command: /test 4.17-e2e-aws-ocp4-pci-dss-node-4-0 + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-rhcos4-e8 + rerun_command: /test 4.19-e2e-aws-rhcos4-e8 spec: containers: - args: @@ -4362,8 +6500,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-node-4-0 - - --variant=4.17 + - --target=e2e-aws-rhcos4-e8 + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4411,26 +6549,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-stig + context: ci/prow/4.19-e2e-aws-rhcos4-high decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-stig - rerun_command: /test 4.17-e2e-aws-ocp4-stig + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-rhcos4-high + rerun_command: /test 4.19-e2e-aws-rhcos4-high spec: containers: - args: @@ -4439,8 +6577,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-stig - - --variant=4.17 + - --target=e2e-aws-rhcos4-high + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4488,26 +6626,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-ocp4-stig-node + context: ci/prow/4.19-e2e-aws-rhcos4-moderate decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-ocp4-stig-node - rerun_command: /test 4.17-e2e-aws-ocp4-stig-node + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-rhcos4-moderate + rerun_command: /test 4.19-e2e-aws-rhcos4-moderate spec: containers: - args: @@ -4516,8 +6654,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-stig-node - - --variant=4.17 + - --target=e2e-aws-rhcos4-moderate + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4565,26 +6703,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-rhcos4-bsi + context: ci/prow/4.19-e2e-aws-rhcos4-stig decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-rhcos4-bsi - rerun_command: /test 4.17-e2e-aws-rhcos4-bsi + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-rhcos4-stig + rerun_command: /test 4.19-e2e-aws-rhcos4-stig spec: containers: - args: @@ -4593,8 +6731,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-bsi - - --variant=4.17 + - --target=e2e-aws-rhcos4-stig + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4642,26 +6780,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-rhcos4-e8 + context: ci/prow/4.19-e2e-rosa-ocp4-cis-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-rhcos4-e8 - rerun_command: /test 4.17-e2e-aws-rhcos4-e8 + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-rosa-ocp4-cis-node + rerun_command: /test 4.19-e2e-rosa-ocp4-cis-node spec: containers: - args: @@ -4670,8 +6808,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-e8 - - --variant=4.17 + - --target=e2e-rosa-ocp4-cis-node + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4719,26 +6857,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-rosa-ocp4-cis-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- cluster: build11 - context: ci/prow/4.17-e2e-aws-rhcos4-high + context: ci/prow/4.19-e2e-rosa-ocp4-pci-dss-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-rhcos4-high - rerun_command: /test 4.17-e2e-aws-rhcos4-high + name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-rosa-ocp4-pci-dss-node + rerun_command: /test 4.19-e2e-rosa-ocp4-pci-dss-node spec: containers: - args: @@ -4747,8 +6885,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-high - - --variant=4.17 + - --target=e2e-rosa-ocp4-pci-dss-node + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4796,36 +6934,33 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.19-e2e-rosa-ocp4-pci-dss-node|remaining-required),?($|\s.*) - agent: kubernetes - always_run: false + always_run: true branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.17-e2e-aws-rhcos4-moderate + cluster: build06 + context: ci/prow/4.19-images decorate: true decoration_config: skip_cloning: true labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + capability/arm64: arm64 + ci-operator.openshift.io/variant: "4.19" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.19" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-rhcos4-moderate - rerun_command: /test 4.17-e2e-aws-rhcos4-moderate + name: pull-ci-ComplianceAsCode-content-master-4.19-images + rerun_command: /test 4.19-images spec: containers: - args: - --gcs-upload-secret=/secrets/gcs/service-account.json - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-moderate - - --variant=4.17 + - --target=[images] + - --variant=4.19 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4835,12 +6970,6 @@ presubmits: requests: cpu: 10m volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - mountPath: /secrets/gcs name: gcs-credentials readOnly: true @@ -4855,15 +6984,6 @@ presubmits: readOnly: true serviceAccountName: ci-operator volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - name: manifest-tool-local-pusher secret: secretName: manifest-tool-local-pusher @@ -4873,26 +6993,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )4.19-images,?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.17-e2e-aws-rhcos4-stig + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-bsi decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-e2e-aws-rhcos4-stig - rerun_command: /test 4.17-e2e-aws-rhcos4-stig + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-bsi + rerun_command: /test 4.20-e2e-aws-ocp4-bsi spec: containers: - args: @@ -4901,8 +7021,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-stig - - --variant=4.17 + - --target=e2e-aws-ocp4-bsi + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4950,33 +7070,36 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.17-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) - agent: kubernetes - always_run: true + always_run: false branches: - ^master$ - ^master- - cluster: build06 - context: ci/prow/4.17-images + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-bsi-node decorate: true decoration_config: skip_cloning: true labels: - capability/arm64: arm64 - ci-operator.openshift.io/variant: "4.17" + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.17" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.17-images - rerun_command: /test 4.17-images + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-bsi-node + rerun_command: /test 4.20-e2e-aws-ocp4-bsi-node spec: containers: - args: - --gcs-upload-secret=/secrets/gcs/service-account.json - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - - --target=[images] - - --variant=4.17 + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-bsi-node + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -4986,6 +7109,12 @@ presubmits: requests: cpu: 10m volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true - mountPath: /secrets/gcs name: gcs-credentials readOnly: true @@ -5000,6 +7129,15 @@ presubmits: readOnly: true serviceAccountName: ci-operator volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials - name: manifest-tool-local-pusher secret: secretName: manifest-tool-local-pusher @@ -5009,26 +7147,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )4.17-images,?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-bsi + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-cis decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-bsi - rerun_command: /test 4.18-e2e-aws-ocp4-bsi + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-cis + rerun_command: /test 4.20-e2e-aws-ocp4-cis spec: containers: - args: @@ -5037,8 +7175,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-bsi - - --variant=4.18 + - --target=e2e-aws-ocp4-cis + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -5086,26 +7224,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-bsi-node + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-cis-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-bsi-node - rerun_command: /test 4.18-e2e-aws-ocp4-bsi-node + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-cis-node + rerun_command: /test 4.20-e2e-aws-ocp4-cis-node spec: containers: - args: @@ -5114,8 +7252,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-bsi-node - - --variant=4.18 + - --target=e2e-aws-ocp4-cis-node + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -5163,26 +7301,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-cis + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-e8 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-cis - rerun_command: /test 4.18-e2e-aws-ocp4-cis + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-e8 + rerun_command: /test 4.20-e2e-aws-ocp4-e8 spec: containers: - args: @@ -5191,8 +7329,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-cis - - --variant=4.18 + - --target=e2e-aws-ocp4-e8 + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -5240,26 +7378,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-cis-node + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-high decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-cis-node - rerun_command: /test 4.18-e2e-aws-ocp4-cis-node + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-high + rerun_command: /test 4.20-e2e-aws-ocp4-high spec: containers: - args: @@ -5268,8 +7406,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-cis-node - - --variant=4.18 + - --target=e2e-aws-ocp4-high + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -5317,26 +7455,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-high|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-e8 + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-high-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-e8 - rerun_command: /test 4.18-e2e-aws-ocp4-e8 + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-high-node + rerun_command: /test 4.20-e2e-aws-ocp4-high-node spec: containers: - args: @@ -5345,8 +7483,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-e8 - - --variant=4.18 + - --target=e2e-aws-ocp4-high-node + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -5394,26 +7532,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-high + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-moderate decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-high - rerun_command: /test 4.18-e2e-aws-ocp4-high + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-moderate + rerun_command: /test 4.20-e2e-aws-ocp4-moderate spec: containers: - args: @@ -5422,8 +7560,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-high - - --variant=4.18 + - --target=e2e-aws-ocp4-moderate + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -5471,26 +7609,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-high|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-high-node + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-moderate-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-high-node - rerun_command: /test 4.18-e2e-aws-ocp4-high-node + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-moderate-node + rerun_command: /test 4.20-e2e-aws-ocp4-moderate-node spec: containers: - args: @@ -5499,8 +7637,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-high-node - - --variant=4.18 + - --target=e2e-aws-ocp4-moderate-node + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -5548,26 +7686,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-moderate + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-pci-dss decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-moderate - rerun_command: /test 4.18-e2e-aws-ocp4-moderate + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-pci-dss + rerun_command: /test 4.20-e2e-aws-ocp4-pci-dss spec: containers: - args: @@ -5576,8 +7714,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-moderate - - --variant=4.18 + - --target=e2e-aws-ocp4-pci-dss + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -5625,26 +7763,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-moderate-node + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-pci-dss-4-0 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-moderate-node - rerun_command: /test 4.18-e2e-aws-ocp4-moderate-node + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-pci-dss-4-0 + rerun_command: /test 4.20-e2e-aws-ocp4-pci-dss-4-0 spec: containers: - args: @@ -5653,8 +7791,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-moderate-node - - --variant=4.18 + - --target=e2e-aws-ocp4-pci-dss-4-0 + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -5702,26 +7840,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-pci-dss + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-pci-dss-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-pci-dss - rerun_command: /test 4.18-e2e-aws-ocp4-pci-dss + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-pci-dss-node + rerun_command: /test 4.20-e2e-aws-ocp4-pci-dss-node spec: containers: - args: @@ -5730,8 +7868,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss - - --variant=4.18 + - --target=e2e-aws-ocp4-pci-dss-node + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -5779,26 +7917,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-pci-dss-4-0 + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-pci-dss-node-4-0 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-pci-dss-4-0 - rerun_command: /test 4.18-e2e-aws-ocp4-pci-dss-4-0 + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-pci-dss-node-4-0 + rerun_command: /test 4.20-e2e-aws-ocp4-pci-dss-node-4-0 spec: containers: - args: @@ -5807,8 +7945,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-4-0 - - --variant=4.18 + - --target=e2e-aws-ocp4-pci-dss-node-4-0 + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -5856,26 +7994,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-pci-dss-node + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-stig decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-pci-dss-node - rerun_command: /test 4.18-e2e-aws-ocp4-pci-dss-node + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-stig + rerun_command: /test 4.20-e2e-aws-ocp4-stig spec: containers: - args: @@ -5884,8 +8022,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-node - - --variant=4.18 + - --target=e2e-aws-ocp4-stig + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -5933,26 +8071,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-pci-dss-node-4-0 + cluster: build09 + context: ci/prow/4.20-e2e-aws-ocp4-stig-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-pci-dss-node-4-0 - rerun_command: /test 4.18-e2e-aws-ocp4-pci-dss-node-4-0 + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-ocp4-stig-node + rerun_command: /test 4.20-e2e-aws-ocp4-stig-node spec: containers: - args: @@ -5961,8 +8099,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-pci-dss-node-4-0 - - --variant=4.18 + - --target=e2e-aws-ocp4-stig-node + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6010,26 +8148,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-stig + cluster: build09 + context: ci/prow/4.20-e2e-aws-rhcos4-bsi decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-stig - rerun_command: /test 4.18-e2e-aws-ocp4-stig + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-rhcos4-bsi + rerun_command: /test 4.20-e2e-aws-rhcos4-bsi spec: containers: - args: @@ -6037,9 +8175,9 @@ presubmits: - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-stig - - --variant=4.18 + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-bsi + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6087,26 +8225,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-ocp4-stig-node + cluster: build09 + context: ci/prow/4.20-e2e-aws-rhcos4-e8 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-ocp4-stig-node - rerun_command: /test 4.18-e2e-aws-ocp4-stig-node + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-rhcos4-e8 + rerun_command: /test 4.20-e2e-aws-rhcos4-e8 spec: containers: - args: @@ -6115,8 +8253,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-ocp4-stig-node - - --variant=4.18 + - --target=e2e-aws-rhcos4-e8 + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6164,26 +8302,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-rhcos4-bsi + cluster: build09 + context: ci/prow/4.20-e2e-aws-rhcos4-high decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-rhcos4-bsi - rerun_command: /test 4.18-e2e-aws-rhcos4-bsi + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-rhcos4-high + rerun_command: /test 4.20-e2e-aws-rhcos4-high spec: containers: - args: @@ -6192,8 +8330,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-bsi - - --variant=4.18 + - --target=e2e-aws-rhcos4-high + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6241,26 +8379,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-rhcos4-e8 + cluster: build09 + context: ci/prow/4.20-e2e-aws-rhcos4-moderate decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-rhcos4-e8 - rerun_command: /test 4.18-e2e-aws-rhcos4-e8 + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-rhcos4-moderate + rerun_command: /test 4.20-e2e-aws-rhcos4-moderate spec: containers: - args: @@ -6269,8 +8407,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-e8 - - --variant=4.18 + - --target=e2e-aws-rhcos4-moderate + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6318,26 +8456,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-rhcos4-high + cluster: build09 + context: ci/prow/4.20-e2e-aws-rhcos4-stig decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-rhcos4-high - rerun_command: /test 4.18-e2e-aws-rhcos4-high + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-aws-rhcos4-stig + rerun_command: /test 4.20-e2e-aws-rhcos4-stig spec: containers: - args: @@ -6346,8 +8484,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-high - - --variant=4.18 + - --target=e2e-aws-rhcos4-stig + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6395,26 +8533,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-rhcos4-moderate + cluster: build09 + context: ci/prow/4.20-e2e-rosa-ocp4-cis-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-rhcos4-moderate - rerun_command: /test 4.18-e2e-aws-rhcos4-moderate + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-rosa-ocp4-cis-node + rerun_command: /test 4.20-e2e-rosa-ocp4-cis-node spec: containers: - args: @@ -6423,8 +8561,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-moderate - - --variant=4.18 + - --target=e2e-rosa-ocp4-cis-node + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6472,26 +8610,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-rosa-ocp4-cis-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.18-e2e-aws-rhcos4-stig + cluster: build09 + context: ci/prow/4.20-e2e-rosa-ocp4-pci-dss-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-e2e-aws-rhcos4-stig - rerun_command: /test 4.18-e2e-aws-rhcos4-stig + name: pull-ci-ComplianceAsCode-content-master-4.20-e2e-rosa-ocp4-pci-dss-node + rerun_command: /test 4.20-e2e-rosa-ocp4-pci-dss-node spec: containers: - args: @@ -6500,8 +8638,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-rhcos4-stig - - --variant=4.18 + - --target=e2e-rosa-ocp4-pci-dss-node + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6549,25 +8687,25 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.18-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.20-e2e-rosa-ocp4-pci-dss-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: true branches: - ^master$ - ^master- - cluster: build06 - context: ci/prow/4.18-images + cluster: build09 + context: ci/prow/4.20-images decorate: true decoration_config: skip_cloning: true labels: capability/arm64: arm64 - ci-operator.openshift.io/variant: "4.18" + ci-operator.openshift.io/variant: "4.20" ci.openshift.io/generator: prowgen - job-release: "4.18" + job-release: "4.20" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.18-images - rerun_command: /test 4.18-images + name: pull-ci-ComplianceAsCode-content-master-4.20-images + rerun_command: /test 4.20-images spec: containers: - args: @@ -6575,7 +8713,7 @@ presubmits: - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - --report-credentials-file=/etc/report/credentials - --target=[images] - - --variant=4.18 + - --variant=4.20 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6608,26 +8746,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )4.18-images,?($|\s.*) + trigger: (?m)^/test( | .* )4.20-images,?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-bsi + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-bsi decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-bsi - rerun_command: /test 4.19-e2e-aws-ocp4-bsi + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-bsi + rerun_command: /test 4.21-e2e-aws-ocp4-bsi spec: containers: - args: @@ -6637,7 +8775,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-bsi - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6685,26 +8823,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-bsi|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-bsi-node + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-bsi-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-bsi-node - rerun_command: /test 4.19-e2e-aws-ocp4-bsi-node + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-bsi-node + rerun_command: /test 4.21-e2e-aws-ocp4-bsi-node spec: containers: - args: @@ -6714,7 +8852,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-bsi-node - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6762,26 +8900,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-bsi-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-cis + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-cis decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-cis - rerun_command: /test 4.19-e2e-aws-ocp4-cis + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-cis + rerun_command: /test 4.21-e2e-aws-ocp4-cis spec: containers: - args: @@ -6791,7 +8929,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-cis - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6839,26 +8977,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-cis-node + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-cis-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-cis-node - rerun_command: /test 4.19-e2e-aws-ocp4-cis-node + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-cis-node + rerun_command: /test 4.21-e2e-aws-ocp4-cis-node spec: containers: - args: @@ -6868,7 +9006,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-cis-node - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6916,26 +9054,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-e8 + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-e8 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-e8 - rerun_command: /test 4.19-e2e-aws-ocp4-e8 + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-e8 + rerun_command: /test 4.21-e2e-aws-ocp4-e8 spec: containers: - args: @@ -6945,7 +9083,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-e8 - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -6993,26 +9131,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-high + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-high decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-high - rerun_command: /test 4.19-e2e-aws-ocp4-high + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-high + rerun_command: /test 4.21-e2e-aws-ocp4-high spec: containers: - args: @@ -7022,7 +9160,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-high - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -7070,26 +9208,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-high|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-high|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-high-node + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-high-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-high-node - rerun_command: /test 4.19-e2e-aws-ocp4-high-node + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-high-node + rerun_command: /test 4.21-e2e-aws-ocp4-high-node spec: containers: - args: @@ -7099,7 +9237,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-high-node - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -7147,26 +9285,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-moderate + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-moderate decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-moderate - rerun_command: /test 4.19-e2e-aws-ocp4-moderate + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-moderate + rerun_command: /test 4.21-e2e-aws-ocp4-moderate spec: containers: - args: @@ -7176,7 +9314,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-moderate - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -7224,26 +9362,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-moderate-node + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-moderate-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-moderate-node - rerun_command: /test 4.19-e2e-aws-ocp4-moderate-node + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-moderate-node + rerun_command: /test 4.21-e2e-aws-ocp4-moderate-node spec: containers: - args: @@ -7253,7 +9391,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-moderate-node - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -7301,26 +9439,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-pci-dss + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-pci-dss decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-pci-dss - rerun_command: /test 4.19-e2e-aws-ocp4-pci-dss + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-pci-dss + rerun_command: /test 4.21-e2e-aws-ocp4-pci-dss spec: containers: - args: @@ -7330,7 +9468,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-pci-dss - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -7378,26 +9516,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-pci-dss-4-0 + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-pci-dss-4-0 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-pci-dss-4-0 - rerun_command: /test 4.19-e2e-aws-ocp4-pci-dss-4-0 + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-pci-dss-4-0 + rerun_command: /test 4.21-e2e-aws-ocp4-pci-dss-4-0 spec: containers: - args: @@ -7407,7 +9545,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-pci-dss-4-0 - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -7455,26 +9593,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-pci-dss-node + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-pci-dss-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-pci-dss-node - rerun_command: /test 4.19-e2e-aws-ocp4-pci-dss-node + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-pci-dss-node + rerun_command: /test 4.21-e2e-aws-ocp4-pci-dss-node spec: containers: - args: @@ -7484,7 +9622,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-pci-dss-node - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -7532,26 +9670,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-pci-dss-node-4-0 + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-pci-dss-node-4-0 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-pci-dss-node-4-0 - rerun_command: /test 4.19-e2e-aws-ocp4-pci-dss-node-4-0 + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-pci-dss-node-4-0 + rerun_command: /test 4.21-e2e-aws-ocp4-pci-dss-node-4-0 spec: containers: - args: @@ -7561,7 +9699,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-pci-dss-node-4-0 - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -7609,26 +9747,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-stig + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-stig decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-stig - rerun_command: /test 4.19-e2e-aws-ocp4-stig + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-stig + rerun_command: /test 4.21-e2e-aws-ocp4-stig spec: containers: - args: @@ -7638,7 +9776,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-stig - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -7686,26 +9824,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-ocp4-stig-node + cluster: build09 + context: ci/prow/4.21-e2e-aws-ocp4-stig-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-ocp4-stig-node - rerun_command: /test 4.19-e2e-aws-ocp4-stig-node + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-ocp4-stig-node + rerun_command: /test 4.21-e2e-aws-ocp4-stig-node spec: containers: - args: @@ -7715,7 +9853,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-ocp4-stig-node - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -7763,26 +9901,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-rhcos4-bsi + cluster: build09 + context: ci/prow/4.21-e2e-aws-rhcos4-bsi decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-rhcos4-bsi - rerun_command: /test 4.19-e2e-aws-rhcos4-bsi + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-rhcos4-bsi + rerun_command: /test 4.21-e2e-aws-rhcos4-bsi spec: containers: - args: @@ -7792,7 +9930,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-rhcos4-bsi - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -7840,26 +9978,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-rhcos4-bsi|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-rhcos4-e8 + cluster: build09 + context: ci/prow/4.21-e2e-aws-rhcos4-e8 decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-rhcos4-e8 - rerun_command: /test 4.19-e2e-aws-rhcos4-e8 + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-rhcos4-e8 + rerun_command: /test 4.21-e2e-aws-rhcos4-e8 spec: containers: - args: @@ -7869,7 +10007,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-rhcos4-e8 - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -7917,26 +10055,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-rhcos4-high + cluster: build09 + context: ci/prow/4.21-e2e-aws-rhcos4-high decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-rhcos4-high - rerun_command: /test 4.19-e2e-aws-rhcos4-high + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-rhcos4-high + rerun_command: /test 4.21-e2e-aws-rhcos4-high spec: containers: - args: @@ -7946,7 +10084,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-rhcos4-high - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -7994,26 +10132,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-rhcos4-moderate + cluster: build09 + context: ci/prow/4.21-e2e-aws-rhcos4-moderate decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-rhcos4-moderate - rerun_command: /test 4.19-e2e-aws-rhcos4-moderate + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-rhcos4-moderate + rerun_command: /test 4.21-e2e-aws-rhcos4-moderate spec: containers: - args: @@ -8023,7 +10161,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-rhcos4-moderate - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -8071,26 +10209,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-aws-rhcos4-stig + cluster: build09 + context: ci/prow/4.21-e2e-aws-rhcos4-stig decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-aws-rhcos4-stig - rerun_command: /test 4.19-e2e-aws-rhcos4-stig + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-aws-rhcos4-stig + rerun_command: /test 4.21-e2e-aws-rhcos4-stig spec: containers: - args: @@ -8100,7 +10238,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-rhcos4-stig - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -8148,26 +10286,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-rosa-ocp4-cis-node + cluster: build09 + context: ci/prow/4.21-e2e-rosa-ocp4-cis-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-rosa-ocp4-cis-node - rerun_command: /test 4.19-e2e-rosa-ocp4-cis-node + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-rosa-ocp4-cis-node + rerun_command: /test 4.21-e2e-rosa-ocp4-cis-node spec: containers: - args: @@ -8177,7 +10315,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-rosa-ocp4-cis-node - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -8225,26 +10363,26 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-rosa-ocp4-cis-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-rosa-ocp4-cis-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 - context: ci/prow/4.19-e2e-rosa-ocp4-pci-dss-node + cluster: build09 + context: ci/prow/4.21-e2e-rosa-ocp4-pci-dss-node decorate: true decoration_config: skip_cloning: true labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-e2e-rosa-ocp4-pci-dss-node - rerun_command: /test 4.19-e2e-rosa-ocp4-pci-dss-node + name: pull-ci-ComplianceAsCode-content-master-4.21-e2e-rosa-ocp4-pci-dss-node + rerun_command: /test 4.21-e2e-rosa-ocp4-pci-dss-node spec: containers: - args: @@ -8254,7 +10392,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-rosa-ocp4-pci-dss-node - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -8302,25 +10440,25 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(4.19-e2e-rosa-ocp4-pci-dss-node|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(4.21-e2e-rosa-ocp4-pci-dss-node|remaining-required),?($|\s.*) - agent: kubernetes always_run: true branches: - ^master$ - ^master- - cluster: build06 - context: ci/prow/4.19-images + cluster: build09 + context: ci/prow/4.21-images decorate: true decoration_config: skip_cloning: true labels: capability/arm64: arm64 - ci-operator.openshift.io/variant: "4.19" + ci-operator.openshift.io/variant: "4.21" ci.openshift.io/generator: prowgen - job-release: "4.19" + job-release: "4.21" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-ComplianceAsCode-content-master-4.19-images - rerun_command: /test 4.19-images + name: pull-ci-ComplianceAsCode-content-master-4.21-images + rerun_command: /test 4.21-images spec: containers: - args: @@ -8328,7 +10466,7 @@ presubmits: - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - --report-credentials-file=/etc/report/credentials - --target=[images] - - --variant=4.19 + - --variant=4.21 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -8361,13 +10499,13 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )4.19-images,?($|\s.*) + trigger: (?m)^/test( | .* )4.21-images,?($|\s.*) - agent: kubernetes always_run: false branches: - ^master$ - ^master- - cluster: build11 + cluster: build09 context: ci/prow/e2e-aws-ocp4-bsi decorate: true decoration_config: From a1ec5b78ad3a5ea427ad8d0ff834cda73f79824b Mon Sep 17 00:00:00 2001 From: Xiaojie Yuan Date: Fri, 16 Jan 2026 11:16:17 +0800 Subject: [PATCH 2/2] Add 4.12 jobs back --- ...ComplianceAsCode-content-master__4.12.yaml | 577 +++++++ ...lianceAsCode-content-master-periodics.yaml | 258 ++- ...ianceAsCode-content-master-presubmits.yaml | 1464 ++++++++++++++++- 3 files changed, 2233 insertions(+), 66 deletions(-) create mode 100644 ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.12.yaml diff --git a/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.12.yaml b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.12.yaml new file mode 100644 index 0000000000000..ff879ccd1d5f6 --- /dev/null +++ b/ci-operator/config/ComplianceAsCode/content/ComplianceAsCode-content-master__4.12.yaml @@ -0,0 +1,577 @@ +build_root: + image_stream_tag: + name: release + namespace: openshift + tag: rhel-9-release-golang-1.23-openshift-4.19 +images: +- additional_architectures: + - arm64 + dockerfile_path: Dockerfiles/ocp4_content + to: ocp4-content-ds +releases: + arm64-latest: + candidate: + architecture: arm64 + product: ocp + stream: nightly + version: "4.12" + initial: + integration: + name: "4.12" + namespace: ocp + latest: + candidate: + product: ocp + stream: ci + version: "4.12" +resources: + '*': + requests: + cpu: 200m + memory: 400Mi +tests: +- always_run: false + as: e2e-aws-rhcos4-e8 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export PROFILE=e8 + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-e8 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=e8 + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-moderate + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=moderate + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-moderate-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=moderate-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-cis + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=cis + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-cis-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=cis-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-moderate + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + pre: + - chain: ipi-aws-pre + - ref: fips-check + test: + - as: test + cli: latest + commands: | + export PROFILE=moderate + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-stig + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=stig + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-stig-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=stig-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss-4-0 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-4-0 + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-pci-dss-node-4-0 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + export PROFILE=pci-dss-node-4-0 + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-high + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + pre: + - chain: ipi-aws-pre + - ref: fips-check + test: + - as: test + cli: latest + commands: | + export PROFILE=high + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-rhcos4-stig + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + pre: + - chain: ipi-aws-pre + - ref: fips-check + test: + - as: test + cli: latest + commands: | + export PROFILE=stig + export PRODUCT=rhcos4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-high + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=high + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- always_run: false + as: e2e-aws-ocp4-high-node + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + FIPS_ENABLED: "true" + test: + - as: test + cli: latest + commands: | + export PROFILE=high-node + export PRODUCT=ocp4 + export CONTENT_DIRECTORY=$PWD + export component=ocp4-content-ds + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestProfileRemediations$ -profile="$PROFILE" -product="$PRODUCT" -content-image="$CONTENT_IMAGE" -content-directory=$CONTENT_DIRECTORY + dependencies: + - env: CONTENT_IMAGE + name: ocp4-content-ds + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-platform-compliance-weekly + cron: 0 19 * * 3,6 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-node-compliance-weekly + cron: 0 19 * * 3,6 + steps: + cluster_profile: quay-aws + env: + BASE_DOMAIN: quay.devcluster.openshift.com + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-platform-compliance-arm-weekly + cron: 0 19 * * 3,6 + steps: + cluster_profile: quay-aws + dependencies: + OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest + env: + BASE_DOMAIN: quay.devcluster.openshift.com + COMPUTE_ARCH: arm64 + CONTROL_ARCH: arm64 + FIPS_ENABLED: "true" + OCP_ARCH: arm64 + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestPlatformCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="platform" -content-directory="$CONTENT_DIRECTORY" + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +- as: e2e-aws-openshift-node-compliance-arm-weekly + cron: 0 19 * * 3,6 + steps: + cluster_profile: quay-aws + dependencies: + OPENSHIFT_INSTALL_RELEASE_IMAGE_OVERRIDE: release:arm64-latest + env: + BASE_DOMAIN: quay.devcluster.openshift.com + COMPUTE_ARCH: arm64 + CONTROL_ARCH: arm64 + FIPS_ENABLED: "true" + OCP_ARCH: arm64 + test: + - as: test + cli: latest + commands: | + set -x + export CONTENT_DIRECTORY=$PWD + git clone https://github.com/ComplianceAsCode/ocp4e2e.git ocp4e2e + pushd ocp4e2e; make install-jq + INSTALL_OPERATOR=${INSTALL_OPERATOR:-true} + PATH=$PATH:/tmp/bin go test -v -timeout 240m . -run=^TestNodeCompliance$ -install-operator=${INSTALL_OPERATOR} -test-type="node" -content-directory="$CONTENT_DIRECTORY" + from: src + resources: + requests: + cpu: 100m + workflow: ipi-aws +zz_generated_metadata: + branch: master + org: ComplianceAsCode + repo: content + variant: "4.12" diff --git a/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-periodics.yaml b/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-periodics.yaml index 5f94f1449efcf..c8ded224823ec 100644 --- a/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-periodics.yaml +++ b/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-periodics.yaml @@ -1,7 +1,7 @@ periodics: - agent: kubernetes - cluster: build07 - cron: 0 21 * * 3,6 + cluster: build10 + cron: 0 19 * * 3,6 decorate: true decoration_config: skip_cloning: true @@ -12,11 +12,11 @@ periodics: labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws - ci-operator.openshift.io/variant: "4.14" + ci-operator.openshift.io/variant: "4.12" ci.openshift.io/generator: prowgen - job-release: "4.14" + job-release: "4.12" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-ComplianceAsCode-content-master-4.14-e2e-aws-openshift-node-compliance-arm-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.12-e2e-aws-openshift-node-compliance-arm-weekly spec: containers: - args: @@ -26,7 +26,232 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-node-compliance-arm-weekly - - --variant=4.14 + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build10 + cron: 0 19 * * 3,6 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: master + org: ComplianceAsCode + repo: content + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-ComplianceAsCode-content-master-4.12-e2e-aws-openshift-node-compliance-weekly + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-openshift-node-compliance-weekly + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build10 + cron: 0 19 * * 3,6 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: master + org: ComplianceAsCode + repo: content + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-ComplianceAsCode-content-master-4.12-e2e-aws-openshift-platform-compliance-arm-weekly + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-openshift-platform-compliance-arm-weekly + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build10 + cron: 0 19 * * 3,6 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: master + org: ComplianceAsCode + repo: content + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-ComplianceAsCode-content-master-4.12-e2e-aws-openshift-platform-compliance-weekly + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-openshift-platform-compliance-weekly + - --variant=4.12 command: - ci-operator image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest @@ -91,8 +316,7 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.14" pj-rehearse.openshift.io/can-be-rehearsed: "true" -<<<<<<< HEAD - name: periodic-ci-ComplianceAsCode-content-master-4.14-e2e-aws-openshift-node-compliance-weekly + name: periodic-ci-ComplianceAsCode-content-master-4.14-e2e-aws-openshift-node-compliance-arm-weekly spec: containers: - args: @@ -101,7 +325,7 @@ periodics: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-aws-openshift-node-compliance-weekly + - --target=e2e-aws-openshift-node-compliance-arm-weekly - --variant=4.14 command: - ci-operator @@ -167,8 +391,6 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.14" pj-rehearse.openshift.io/can-be-rehearsed: "true" -======= ->>>>>>> 1d35ec5b18f (Add, delete and update content periodic jobs) name: periodic-ci-ComplianceAsCode-content-master-4.14-e2e-aws-openshift-platform-compliance-arm-weekly spec: containers: @@ -228,7 +450,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build10 cron: 0 23 * * 3,6 decorate: true decoration_config: @@ -528,7 +750,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build10 cron: 45 23 * * 3,6 decorate: true decoration_config: @@ -903,7 +1125,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build10 cron: 45 23 * * 3,6 decorate: true decoration_config: @@ -978,7 +1200,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build10 cron: 45 23 * * 3,6 decorate: true decoration_config: @@ -1053,7 +1275,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build10 cron: 45 23 * * 3,6 decorate: true decoration_config: @@ -1128,7 +1350,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build10 cron: 45 23 * * 3,6 decorate: true decoration_config: @@ -1203,7 +1425,7 @@ periodics: secret: secretName: result-aggregator - agent: kubernetes - cluster: build07 + cluster: build10 cron: 45 23 * * 3,6 decorate: true decoration_config: diff --git a/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-presubmits.yaml b/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-presubmits.yaml index 044f44b21b5dc..ca709b984146c 100644 --- a/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-presubmits.yaml +++ b/ci-operator/jobs/ComplianceAsCode/content/ComplianceAsCode-content-master-presubmits.yaml @@ -5,7 +5,1375 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 + context: ci/prow/4.12-e2e-aws-ocp4-cis + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-cis + rerun_command: /test 4.12-e2e-aws-ocp4-cis + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-cis + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-cis|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-ocp4-cis-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-cis-node + rerun_command: /test 4.12-e2e-aws-ocp4-cis-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-cis-node + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-cis-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-ocp4-e8 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-e8 + rerun_command: /test 4.12-e2e-aws-ocp4-e8 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-e8 + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-e8|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-ocp4-high + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-high + rerun_command: /test 4.12-e2e-aws-ocp4-high + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-high + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-high|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-ocp4-high-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-high-node + rerun_command: /test 4.12-e2e-aws-ocp4-high-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-high-node + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-high-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-ocp4-moderate + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-moderate + rerun_command: /test 4.12-e2e-aws-ocp4-moderate + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-moderate + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-moderate|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-ocp4-moderate-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-moderate-node + rerun_command: /test 4.12-e2e-aws-ocp4-moderate-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-moderate-node + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-moderate-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-ocp4-pci-dss + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-pci-dss + rerun_command: /test 4.12-e2e-aws-ocp4-pci-dss + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-pci-dss|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-ocp4-pci-dss-4-0 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-pci-dss-4-0 + rerun_command: /test 4.12-e2e-aws-ocp4-pci-dss-4-0 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-4-0 + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-pci-dss-4-0|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-ocp4-pci-dss-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-pci-dss-node + rerun_command: /test 4.12-e2e-aws-ocp4-pci-dss-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-node + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-pci-dss-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-ocp4-pci-dss-node-4-0 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-pci-dss-node-4-0 + rerun_command: /test 4.12-e2e-aws-ocp4-pci-dss-node-4-0 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-pci-dss-node-4-0 + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-pci-dss-node-4-0|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-ocp4-stig + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-stig + rerun_command: /test 4.12-e2e-aws-ocp4-stig + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-stig + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-stig|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-ocp4-stig-node + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-ocp4-stig-node + rerun_command: /test 4.12-e2e-aws-ocp4-stig-node + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ocp4-stig-node + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-ocp4-stig-node|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-rhcos4-e8 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-rhcos4-e8 + rerun_command: /test 4.12-e2e-aws-rhcos4-e8 + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-e8 + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-rhcos4-e8|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-rhcos4-high + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-rhcos4-high + rerun_command: /test 4.12-e2e-aws-rhcos4-high + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-high + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-rhcos4-high|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-rhcos4-moderate + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-rhcos4-moderate + rerun_command: /test 4.12-e2e-aws-rhcos4-moderate + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-moderate + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-rhcos4-moderate|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/4.12-e2e-aws-rhcos4-stig + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: quay-aws + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-e2e-aws-rhcos4-stig + rerun_command: /test 4.12-e2e-aws-rhcos4-stig + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-rhcos4-stig + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(4.12-e2e-aws-rhcos4-stig|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^master$ + - ^master- + cluster: build06 + context: ci/prow/4.12-images + decorate: true + decoration_config: + skip_cloning: true + labels: + capability/arm64: arm64 + ci-operator.openshift.io/variant: "4.12" + ci.openshift.io/generator: prowgen + job-release: "4.12" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-ComplianceAsCode-content-master-4.12-images + rerun_command: /test 4.12-images + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=[images] + - --variant=4.12 + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )4.12-images,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build11 context: ci/prow/4.14-e2e-aws-ocp4-bsi decorate: true decoration_config: @@ -6999,7 +8367,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-bsi decorate: true decoration_config: @@ -7076,7 +8444,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-bsi-node decorate: true decoration_config: @@ -7153,7 +8521,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-cis decorate: true decoration_config: @@ -7230,7 +8598,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-cis-node decorate: true decoration_config: @@ -7307,7 +8675,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-e8 decorate: true decoration_config: @@ -7384,7 +8752,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-high decorate: true decoration_config: @@ -7461,7 +8829,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-high-node decorate: true decoration_config: @@ -7538,7 +8906,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-moderate decorate: true decoration_config: @@ -7615,7 +8983,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-moderate-node decorate: true decoration_config: @@ -7692,7 +9060,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-pci-dss decorate: true decoration_config: @@ -7769,7 +9137,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-pci-dss-4-0 decorate: true decoration_config: @@ -7846,7 +9214,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-pci-dss-node decorate: true decoration_config: @@ -7923,7 +9291,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-pci-dss-node-4-0 decorate: true decoration_config: @@ -8000,7 +9368,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-stig decorate: true decoration_config: @@ -8077,7 +9445,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-ocp4-stig-node decorate: true decoration_config: @@ -8154,7 +9522,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-rhcos4-bsi decorate: true decoration_config: @@ -8231,7 +9599,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-rhcos4-e8 decorate: true decoration_config: @@ -8308,7 +9676,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-rhcos4-high decorate: true decoration_config: @@ -8385,7 +9753,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-rhcos4-moderate decorate: true decoration_config: @@ -8462,7 +9830,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-aws-rhcos4-stig decorate: true decoration_config: @@ -8539,7 +9907,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-rosa-ocp4-cis-node decorate: true decoration_config: @@ -8616,7 +9984,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.20-e2e-rosa-ocp4-pci-dss-node decorate: true decoration_config: @@ -8693,7 +10061,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build06 context: ci/prow/4.20-images decorate: true decoration_config: @@ -8752,7 +10120,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-bsi decorate: true decoration_config: @@ -8829,7 +10197,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-bsi-node decorate: true decoration_config: @@ -8906,7 +10274,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-cis decorate: true decoration_config: @@ -8983,7 +10351,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-cis-node decorate: true decoration_config: @@ -9060,7 +10428,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-e8 decorate: true decoration_config: @@ -9137,7 +10505,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-high decorate: true decoration_config: @@ -9214,7 +10582,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-high-node decorate: true decoration_config: @@ -9291,7 +10659,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-moderate decorate: true decoration_config: @@ -9368,7 +10736,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-moderate-node decorate: true decoration_config: @@ -9445,7 +10813,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-pci-dss decorate: true decoration_config: @@ -9522,7 +10890,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-pci-dss-4-0 decorate: true decoration_config: @@ -9599,7 +10967,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-pci-dss-node decorate: true decoration_config: @@ -9676,7 +11044,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-pci-dss-node-4-0 decorate: true decoration_config: @@ -9753,7 +11121,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-stig decorate: true decoration_config: @@ -9830,7 +11198,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-ocp4-stig-node decorate: true decoration_config: @@ -9907,7 +11275,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-rhcos4-bsi decorate: true decoration_config: @@ -9984,7 +11352,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-rhcos4-e8 decorate: true decoration_config: @@ -10061,7 +11429,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-rhcos4-high decorate: true decoration_config: @@ -10138,7 +11506,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-rhcos4-moderate decorate: true decoration_config: @@ -10215,7 +11583,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-aws-rhcos4-stig decorate: true decoration_config: @@ -10292,7 +11660,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-rosa-ocp4-cis-node decorate: true decoration_config: @@ -10369,7 +11737,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/4.21-e2e-rosa-ocp4-pci-dss-node decorate: true decoration_config: @@ -10446,7 +11814,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build06 context: ci/prow/4.21-images decorate: true decoration_config: @@ -10505,7 +11873,7 @@ presubmits: branches: - ^master$ - ^master- - cluster: build09 + cluster: build11 context: ci/prow/e2e-aws-ocp4-bsi decorate: true decoration_config: