From c43cfd8b9f60225a2d4461fd2b8e24d1018ef696 Mon Sep 17 00:00:00 2001 From: Raushan Singh Date: Thu, 7 May 2026 14:56:12 +0530 Subject: [PATCH 1/5] Add e2e-coverage optional job for zero-trust-workload-identity-manager - Build coverage-instrumented image from Dockerfile.coverage - Add e2e-coverage presubmit (optional, always_run) - Add publish-e2e-coverage postsubmit for baseline on main - Mount ztwim-codecov-token secret for Codecov upload --- ...-trust-workload-identity-manager-main.yaml | 117 ++++++++++++++++++ 1 file changed, 117 insertions(+) diff --git a/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml b/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml index 247b31a1f8e35..a1eef56c680af 100644 --- a/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml +++ b/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml @@ -14,6 +14,8 @@ images: items: - dockerfile_path: Dockerfile to: zero-trust-workload-identity-manager + - dockerfile_path: Dockerfile.coverage + to: zero-trust-workload-identity-manager-coverage operator: bundles: - as: zero-trust-workload-identity-manager-bundle @@ -79,6 +81,121 @@ tests: requests: cpu: 100m workflow: generic-claim +- as: e2e-coverage + cluster_claim: + architecture: amd64 + cloud: aws + owner: openshift-ci + product: ocp + timeout: 2h0m0s + version: "4.20" + optional: true + skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ + steps: + post: + - as: collect-coverage + best_effort: true + cli: latest + commands: hack/e2e-coverage.sh collect + credentials: + - mount_path: /var/run/secrets/codecov + name: ztwim-codecov-token + namespace: test-credentials + from: src + resources: + requests: + cpu: 100m + timeout: 15m0s + - chain: gather + test: + - as: install + cli: latest + commands: | + oc create namespace zero-trust-workload-identity-manager + operator-sdk run bundle --timeout=10m --security-context-config=restricted --install-mode=AllNamespaces -n zero-trust-workload-identity-manager "$OO_BUNDLE" --verbose + oc wait --for condition=Available -n zero-trust-workload-identity-manager deployment zero-trust-workload-identity-manager-controller-manager + dependencies: + - env: OO_BUNDLE + name: zero-trust-workload-identity-manager-bundle + from: operator-sdk + resources: + requests: + cpu: 100m + - as: setup-coverage + cli: latest + commands: hack/e2e-coverage.sh setup + dependencies: + - env: COVERAGE_IMAGE + name: zero-trust-workload-identity-manager-coverage + from: src + resources: + requests: + cpu: 100m + - as: test + cli: latest + commands: make test-e2e + from: src + resources: + requests: + cpu: 100m + workflow: generic-claim +- as: publish-e2e-coverage + cluster_claim: + architecture: amd64 + cloud: aws + owner: openshift-ci + product: ocp + timeout: 2h0m0s + version: "4.20" + postsubmit: true + steps: + post: + - as: collect-coverage + best_effort: true + cli: latest + commands: hack/e2e-coverage.sh collect + credentials: + - mount_path: /var/run/secrets/codecov + name: ztwim-codecov-token + namespace: test-credentials + from: src + resources: + requests: + cpu: 100m + timeout: 15m0s + - chain: gather + test: + - as: install + cli: latest + commands: | + oc create namespace zero-trust-workload-identity-manager + operator-sdk run bundle --timeout=10m --security-context-config=restricted --install-mode=AllNamespaces -n zero-trust-workload-identity-manager "$OO_BUNDLE" --verbose + oc wait --for condition=Available -n zero-trust-workload-identity-manager deployment zero-trust-workload-identity-manager-controller-manager + dependencies: + - env: OO_BUNDLE + name: zero-trust-workload-identity-manager-bundle + from: operator-sdk + resources: + requests: + cpu: 100m + - as: setup-coverage + cli: latest + commands: hack/e2e-coverage.sh setup + dependencies: + - env: COVERAGE_IMAGE + name: zero-trust-workload-identity-manager-coverage + from: src + resources: + requests: + cpu: 100m + - as: test + cli: latest + commands: make test-e2e + from: src + resources: + requests: + cpu: 100m + workflow: generic-claim - always_run: false as: e2e-operator-fips optional: true From 18a766e787720108f173213127a33d83b66ead6c Mon Sep 17 00:00:00 2001 From: Raushan Singh Date: Thu, 7 May 2026 16:15:05 +0530 Subject: [PATCH 2/5] Regenerate Prow job config --- ...oad-identity-manager-main-postsubmits.yaml | 83 +++++++++++++++++ ...load-identity-manager-main-presubmits.yaml | 89 ++++++++++++++++++- 2 files changed, 171 insertions(+), 1 deletion(-) create mode 100644 ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-postsubmits.yaml diff --git a/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-postsubmits.yaml b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-postsubmits.yaml new file mode 100644 index 0000000000000..5c9e7da502799 --- /dev/null +++ b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-postsubmits.yaml @@ -0,0 +1,83 @@ +postsubmits: + openshift/zero-trust-workload-identity-manager: + - agent: kubernetes + always_run: true + branches: + - ^main$ + cluster: build01 + decorate: true + labels: + ci.openshift.io/generator: prowgen + max_concurrency: 1 + name: branch-ci-openshift-zero-trust-workload-identity-manager-main-publish-e2e-coverage + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --hive-kubeconfig=/secrets/hive-hive-credentials/kubeconfig + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=publish-e2e-coverage + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/hive-hive-credentials + name: hive-hive-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: hive-hive-credentials + secret: + secretName: hive-hive-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator diff --git a/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml index 32d2c8d92f8be..93ad85b849eeb 100644 --- a/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml +++ b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml @@ -62,7 +62,94 @@ presubmits: branches: - ^main$ - ^main- - cluster: build03 + cluster: build08 + context: ci/prow/e2e-coverage + decorate: true + labels: + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-zero-trust-workload-identity-manager-main-e2e-coverage + optional: true + rerun_command: /test e2e-coverage + skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --hive-kubeconfig=/secrets/hive-hive-credentials/kubeconfig + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-coverage + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/hive-hive-credentials + name: hive-hive-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: hive-hive-credentials + secret: + secretName: hive-hive-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-coverage,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build08 context: ci/prow/e2e-operator decorate: true decoration_config: From c07a55b979745f7ae0bf5b1e544d807051b851a3 Mon Sep 17 00:00:00 2001 From: Raushan Singh Date: Thu, 7 May 2026 18:27:03 +0530 Subject: [PATCH 3/5] Merge coverage into e2e-operator job, remove separate e2e-coverage job --- ...-trust-workload-identity-manager-main.yaml | 33 ------------------- 1 file changed, 33 deletions(-) diff --git a/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml b/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml index a1eef56c680af..5c717a8ddc024 100644 --- a/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml +++ b/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml @@ -58,39 +58,6 @@ tests: timeout: 2h0m0s version: "4.20" skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ - steps: - test: - - as: install - cli: latest - commands: | - oc create namespace zero-trust-workload-identity-manager - operator-sdk run bundle --timeout=10m --security-context-config=restricted --install-mode=AllNamespaces -n zero-trust-workload-identity-manager "$OO_BUNDLE" --verbose - oc wait --for condition=Available -n zero-trust-workload-identity-manager deployment zero-trust-workload-identity-manager-controller-manager - dependencies: - - env: OO_BUNDLE - name: zero-trust-workload-identity-manager-bundle - from: operator-sdk - resources: - requests: - cpu: 100m - - as: test - cli: latest - commands: make test-e2e - from: src - resources: - requests: - cpu: 100m - workflow: generic-claim -- as: e2e-coverage - cluster_claim: - architecture: amd64 - cloud: aws - owner: openshift-ci - product: ocp - timeout: 2h0m0s - version: "4.20" - optional: true - skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ steps: post: - as: collect-coverage From 4755a54eb96c065fd21fa65c0bffd297c4c736e3 Mon Sep 17 00:00:00 2001 From: Raushan Singh Date: Thu, 7 May 2026 18:47:40 +0530 Subject: [PATCH 4/5] Regenerate Prow job config for ztwim --- ...load-identity-manager-main-presubmits.yaml | 87 ------------------- 1 file changed, 87 deletions(-) diff --git a/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml index 93ad85b849eeb..78bfd496045a5 100644 --- a/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml +++ b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml @@ -57,93 +57,6 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )ci-bundle-zero-trust-workload-identity-manager-bundle,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build08 - context: ci/prow/e2e-coverage - decorate: true - labels: - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-zero-trust-workload-identity-manager-main-e2e-coverage - optional: true - rerun_command: /test e2e-coverage - skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --hive-kubeconfig=/secrets/hive-hive-credentials/kubeconfig - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-coverage - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/hive-hive-credentials - name: hive-hive-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: hive-hive-credentials - secret: - secretName: hive-hive-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )e2e-coverage,?($|\s.*) - agent: kubernetes always_run: false branches: From 00196aedc6e564398499116da8b364f9dc897dcb Mon Sep 17 00:00:00 2001 From: Raushan Singh Date: Wed, 8 Jul 2026 14:12:18 +0530 Subject: [PATCH 5/5] + run e2e coverage as separate job --- ...-trust-workload-identity-manager-main.yaml | 164 +++++++++++------- ...oad-identity-manager-main-postsubmits.yaml | 5 + ...load-identity-manager-main-presubmits.yaml | 100 ++++++++++- .../pipeline-controller/lgtm-config.yaml | 3 + 4 files changed, 205 insertions(+), 67 deletions(-) diff --git a/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml b/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml index 5c717a8ddc024..62a74abd2e869 100644 --- a/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml +++ b/ci-operator/config/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main.yaml @@ -58,6 +58,104 @@ tests: timeout: 2h0m0s version: "4.20" skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ + steps: + test: + - as: install + cli: latest + commands: | + oc create namespace zero-trust-workload-identity-manager + operator-sdk run bundle --timeout=10m --security-context-config=restricted --install-mode=AllNamespaces -n zero-trust-workload-identity-manager "$OO_BUNDLE" --verbose + oc wait --for condition=Available -n zero-trust-workload-identity-manager deployment zero-trust-workload-identity-manager-controller-manager + dependencies: + - env: OO_BUNDLE + name: zero-trust-workload-identity-manager-bundle + from: operator-sdk + resources: + requests: + cpu: 100m + - as: test + cli: latest + commands: make test-e2e + from: src + resources: + requests: + cpu: 100m + workflow: generic-claim +- always_run: false + as: e2e-operator-fips + optional: true + steps: + cluster_profile: openshift-org-aws + dependencies: + OO_BUNDLE: zero-trust-workload-identity-manager-bundle + env: + FIPS_ENABLED: "true" + OO_INSTALL_MODE: AllNamespaces + OO_INSTALL_NAMESPACE: zero-trust-workload-identity-manager + OO_SECURITY_CONTEXT: restricted + test: + - as: test + cli: latest + commands: make test-e2e + from: src + resources: + requests: + cpu: 100m + workflow: optional-operators-ci-operator-sdk-aws +- always_run: false + as: e2e-operator-rhcos10-fips + optional: true + steps: + cluster_profile: openshift-org-aws + dependencies: + OO_BUNDLE: zero-trust-workload-identity-manager-bundle + env: + FEATURE_SET: TechPreviewNoUpgrade + FIPS_ENABLED: "true" + OO_INSTALL_MODE: AllNamespaces + OO_INSTALL_NAMESPACE: zero-trust-workload-identity-manager + OO_SECURITY_CONTEXT: restricted + OSSTREAM: rhel-10 + test: + - as: test + cli: latest + commands: make test-e2e + from: src + resources: + requests: + cpu: 100m + workflow: optional-operators-ci-operator-sdk-aws +- always_run: false + as: e2e-operator-rhcos10 + optional: true + steps: + cluster_profile: openshift-org-aws + dependencies: + OO_BUNDLE: zero-trust-workload-identity-manager-bundle + env: + FEATURE_SET: TechPreviewNoUpgrade + OO_INSTALL_MODE: AllNamespaces + OO_INSTALL_NAMESPACE: zero-trust-workload-identity-manager + OO_SECURITY_CONTEXT: restricted + OSSTREAM: rhel-10 + test: + - as: test + cli: latest + commands: make test-e2e + from: src + resources: + requests: + cpu: 100m + workflow: optional-operators-ci-operator-sdk-aws +- always_run: false + as: operator-e2e-coverage + cluster_claim: + architecture: amd64 + cloud: aws + owner: openshift-ci + product: ocp + timeout: 2h0m0s + version: "4.20" steps: post: - as: collect-coverage @@ -163,72 +261,6 @@ tests: requests: cpu: 100m workflow: generic-claim -- always_run: false - as: e2e-operator-fips - optional: true - steps: - cluster_profile: openshift-org-aws - dependencies: - OO_BUNDLE: zero-trust-workload-identity-manager-bundle - env: - FIPS_ENABLED: "true" - OO_INSTALL_MODE: AllNamespaces - OO_INSTALL_NAMESPACE: zero-trust-workload-identity-manager - OO_SECURITY_CONTEXT: restricted - test: - - as: test - cli: latest - commands: make test-e2e - from: src - resources: - requests: - cpu: 100m - workflow: optional-operators-ci-operator-sdk-aws -- always_run: false - as: e2e-operator-rhcos10-fips - optional: true - steps: - cluster_profile: openshift-org-aws - dependencies: - OO_BUNDLE: zero-trust-workload-identity-manager-bundle - env: - FEATURE_SET: TechPreviewNoUpgrade - FIPS_ENABLED: "true" - OO_INSTALL_MODE: AllNamespaces - OO_INSTALL_NAMESPACE: zero-trust-workload-identity-manager - OO_SECURITY_CONTEXT: restricted - OSSTREAM: rhel-10 - test: - - as: test - cli: latest - commands: make test-e2e - from: src - resources: - requests: - cpu: 100m - workflow: optional-operators-ci-operator-sdk-aws -- always_run: false - as: e2e-operator-rhcos10 - optional: true - steps: - cluster_profile: openshift-org-aws - dependencies: - OO_BUNDLE: zero-trust-workload-identity-manager-bundle - env: - FEATURE_SET: TechPreviewNoUpgrade - OO_INSTALL_MODE: AllNamespaces - OO_INSTALL_NAMESPACE: zero-trust-workload-identity-manager - OO_SECURITY_CONTEXT: restricted - OSSTREAM: rhel-10 - test: - - as: test - cli: latest - commands: make test-e2e - from: src - resources: - requests: - cpu: 100m - workflow: optional-operators-ci-operator-sdk-aws zz_generated_metadata: branch: main org: openshift diff --git a/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-postsubmits.yaml b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-postsubmits.yaml index 5c9e7da502799..1973e47aaea19 100644 --- a/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-postsubmits.yaml +++ b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-postsubmits.yaml @@ -6,6 +6,11 @@ postsubmits: - ^main$ cluster: build01 decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile + - Dockerfile.coverage labels: ci.openshift.io/generator: prowgen max_concurrency: 1 diff --git a/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml index 78bfd496045a5..594e903419544 100644 --- a/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml +++ b/ci-operator/jobs/openshift/zero-trust-workload-identity-manager/openshift-zero-trust-workload-identity-manager-main-presubmits.yaml @@ -12,6 +12,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" @@ -62,13 +63,14 @@ presubmits: branches: - ^main$ - ^main- - cluster: build08 + cluster: build03 context: ci/prow/e2e-operator decorate: true decoration_config: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" @@ -159,6 +161,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws @@ -244,6 +247,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws @@ -329,6 +333,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws @@ -414,6 +419,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" @@ -459,6 +465,96 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )images,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build03 + context: ci/prow/operator-e2e-coverage + decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile + - Dockerfile.coverage + labels: + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-zero-trust-workload-identity-manager-main-operator-e2e-coverage + rerun_command: /test operator-e2e-coverage + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --hive-kubeconfig=/secrets/hive-hive-credentials/kubeconfig + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=operator-e2e-coverage + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/hive-hive-credentials + name: hive-hive-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: hive-hive-credentials + secret: + secretName: hive-hive-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(operator-e2e-coverage|remaining-required),?($|\s.*) - agent: kubernetes always_run: true branches: @@ -471,6 +567,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" @@ -536,6 +633,7 @@ presubmits: sparse_checkout_files: - .ci-operator.yaml - Dockerfile + - Dockerfile.coverage labels: ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" diff --git a/core-services/pipeline-controller/lgtm-config.yaml b/core-services/pipeline-controller/lgtm-config.yaml index d5f4f58f36bc2..acb92e9bbd03d 100644 --- a/core-services/pipeline-controller/lgtm-config.yaml +++ b/core-services/pipeline-controller/lgtm-config.yaml @@ -39,6 +39,9 @@ orgs: - route-override-cni - whereabouts-cni - hypershift + - name: zero-trust-workload-identity-manager + branches: + - main - org: openshift-priv repos: - api