diff --git a/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml b/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml index 247b31a1f8e35..62a74abd2e869 100644 --- a/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml +++ b/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml @@ -14,6 +14,8 @@ images: items: - dockerfile_path: Dockerfile to: zero-trust-workload-identity-manager + - dockerfile_path: Dockerfile.coverage + to: zero-trust-workload-identity-manager-coverage operator: bundles: - as: zero-trust-workload-identity-manager-bundle @@ -145,6 +147,120 @@ tests: requests: cpu: 100m workflow: optional-operators-ci-operator-sdk-aws +- always_run: false + as: operator-e2e-coverage + cluster_claim: + architecture: amd64 + cloud: aws + owner: openshift-ci + product: ocp + timeout: 2h0m0s + version: "4.20" + steps: + post: + - as: collect-coverage + best_effort: true + cli: latest + commands: hack/e2e-coverage.sh collect + credentials: + - mount_path: /var/run/secrets/codecov + name: ztwim-codecov-token + namespace: test-credentials + from: src + resources: + requests: + cpu: 100m + timeout: 15m0s + - chain: gather + test: + - as: install + cli: latest + commands: | + oc create namespace zero-trust-workload-identity-manager + operator-sdk run bundle --timeout=10m --security-context-config=restricted --install-mode=AllNamespaces -n zero-trust-workload-identity-manager "$OO_BUNDLE" --verbose + oc wait --for condition=Available -n zero-trust-workload-identity-manager deployment zero-trust-workload-identity-manager-controller-manager + dependencies: + - env: OO_BUNDLE + name: zero-trust-workload-identity-manager-bundle + from: operator-sdk + resources: + requests: + cpu: 100m + - as: setup-coverage + cli: latest + commands: hack/e2e-coverage.sh setup + dependencies: + - env: COVERAGE_IMAGE + name: zero-trust-workload-identity-manager-coverage + from: src + resources: + requests: + cpu: 100m + - as: test + cli: latest + commands: make test-e2e + from: src + resources: + requests: + cpu: 100m + workflow: generic-claim +- as: publish-e2e-coverage + cluster_claim: + architecture: amd64 + cloud: aws + owner: openshift-ci + product: ocp + timeout: 2h0m0s + version: "4.20" + postsubmit: true + steps: + post: + - as: collect-coverage + best_effort: true + cli: latest + commands: hack/e2e-coverage.sh collect + credentials: + - mount_path: /var/run/secrets/codecov + name: ztwim-codecov-token + namespace: test-credentials + from: src + resources: + requests: + cpu: 100m + timeout: 15m0s + - chain: gather + test: + - as: install + cli: latest + commands: | + oc create namespace zero-trust-workload-identity-manager + operator-sdk run bundle --timeout=10m --security-context-config=restricted --install-mode=AllNamespaces -n zero-trust-workload-identity-manager "$OO_BUNDLE" --verbose + oc wait --for condition=Available -n zero-trust-workload-identity-manager deployment zero-trust-workload-identity-manager-controller-manager + dependencies: + - env: OO_BUNDLE + name: zero-trust-workload-identity-manager-bundle + from: operator-sdk + resources: + requests: + cpu: 100m + - as: setup-coverage + cli: latest + commands: hack/e2e-coverage.sh setup + dependencies: + - env: COVERAGE_IMAGE + name: zero-trust-workload-identity-manager-coverage + from: src + resources: + requests: + cpu: 100m + - as: test + cli: latest + commands: make test-e2e + from: src + resources: + requests: + cpu: 100m + workflow: generic-claim zz_generated_metadata: branch: main org: openshift diff --git a/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-postsubmits.yaml b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-postsubmits.yaml new file mode 100644 index 0000000000000..1973e47aaea19 --- /dev/null +++ b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-postsubmits.yaml @@ -0,0 +1,88 @@ +postsubmits: + openshift/zero-trust-workload-identity-manager: + - agent: kubernetes + always_run: true + branches: + - ^main$ + cluster: build01 + decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile + - Dockerfile.coverage + labels: + ci.openshift.io/generator: prowgen + max_concurrency: 1 + name: branch-ci-openshift-zero-trust-workload-identity-manager-main-publish-e2e-coverage + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --hive-kubeconfig=/secrets/hive-hive-credentials/kubeconfig + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=publish-e2e-coverage + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/hive-hive-credentials + name: hive-hive-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: hive-hive-credentials + secret: + secretName: hive-hive-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator diff --git a/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml index 32d2c8d92f8be..594e903419544 100644 --- a/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml +++ b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml @@ -12,6 +12,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" @@ -69,6 +70,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" @@ -159,6 +161,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws @@ -244,6 +247,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws @@ -329,6 +333,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws @@ -414,6 +419,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" @@ -459,6 +465,96 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )images,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build03 + context: ci/prow/operator-e2e-coverage + decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile + - Dockerfile.coverage + labels: + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-zero-trust-workload-identity-manager-main-operator-e2e-coverage + rerun_command: /test operator-e2e-coverage + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --hive-kubeconfig=/secrets/hive-hive-credentials/kubeconfig + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=operator-e2e-coverage + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/hive-hive-credentials + name: hive-hive-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: hive-hive-credentials + secret: + secretName: hive-hive-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(operator-e2e-coverage|remaining-required),?($|\s.*) - agent: kubernetes always_run: true branches: @@ -471,6 +567,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" @@ -536,6 +633,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" diff --git a/core-services/pipeline-controller/lgtm-config.yaml b/core-services/pipeline-controller/lgtm-config.yaml index d5f4f58f36bc2..acb92e9bbd03d 100644 --- a/core-services/pipeline-controller/lgtm-config.yaml +++ b/core-services/pipeline-controller/lgtm-config.yaml @@ -39,6 +39,9 @@ orgs: - route-override-cni - whereabouts-cni - hypershift + - name: zero-trust-workload-identity-manager + branches: + - main - org: openshift-priv repos: - api