From 74b2b1f8a35cffa663048ad04d130ffedd463505 Mon Sep 17 00:00:00 2001 From: Jakob Naucke Date: Thu, 20 Aug 2026 11:46:02 +0200 Subject: [PATCH 1/2] trusted-execution-clusters: Adjust for multistage Use the appropriate build arg. Signed-off-by: Jakob Naucke --- ...ed-execution-clusters-operator-main__azure.yaml | 14 +++++++++++--- ...xecution-clusters-operator-main-presubmits.yaml | 6 ------ 2 files changed, 11 insertions(+), 9 deletions(-) diff --git a/ci-operator/config/trusted-execution-clusters/operator/trusted-execution-clusters-operator-main__azure.yaml b/ci-operator/config/trusted-execution-clusters/operator/trusted-execution-clusters-operator-main__azure.yaml index 3f076807168fe..dbf1195d11cde 100644 --- a/ci-operator/config/trusted-execution-clusters/operator/trusted-execution-clusters-operator-main__azure.yaml +++ b/ci-operator/config/trusted-execution-clusters/operator/trusted-execution-clusters-operator-main__azure.yaml @@ -23,24 +23,32 @@ images: source_path: /usr/bin/oc to: azure-test-image - build_args: + - name: build_target + value: operator - name: build_type value: release dockerfile_path: Containerfile to: operator - build_args: + - name: build_target + value: compute-pcrs - name: build_type value: release - dockerfile_path: compute-pcrs/Containerfile + dockerfile_path: Containerfile to: compute-pcrs - build_args: + - name: build_target + value: register-server - name: build_type value: release - dockerfile_path: register-server/Containerfile + dockerfile_path: Containerfile to: register-server - build_args: + - name: build_target + value: attestation-key-register - name: build_type value: release - dockerfile_path: attestation-key-register/Containerfile + dockerfile_path: Containerfile to: attestation-key-register releases: latest: diff --git a/ci-operator/jobs/trusted-execution-clusters/operator/trusted-execution-clusters-operator-main-presubmits.yaml b/ci-operator/jobs/trusted-execution-clusters/operator/trusted-execution-clusters-operator-main-presubmits.yaml index 16a4413bac253..7d6b962f94141 100644 --- a/ci-operator/jobs/trusted-execution-clusters/operator/trusted-execution-clusters-operator-main-presubmits.yaml +++ b/ci-operator/jobs/trusted-execution-clusters/operator/trusted-execution-clusters-operator-main-presubmits.yaml @@ -11,9 +11,6 @@ presubmits: decoration_config: sparse_checkout_files: - Containerfile - - attestation-key-register/Containerfile - - compute-pcrs/Containerfile - - register-server/Containerfile labels: ci-operator.openshift.io/variant: azure ci.openshift.io/generator: prowgen @@ -73,9 +70,6 @@ presubmits: decoration_config: sparse_checkout_files: - Containerfile - - attestation-key-register/Containerfile - - compute-pcrs/Containerfile - - register-server/Containerfile labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws From 1b618997242e90d11d490be496a9fde6e995117b Mon Sep 17 00:00:00 2001 From: Jakob Naucke Date: Thu, 30 Jul 2026 12:00:50 +0200 Subject: [PATCH 2/2] trusted-execution-clusters: Enable full suite Following up on #79393. Debug first. Signed-off-by: Jakob Naucke --- ...ers-ref-azure-integration-test-commands.sh | 20 ++++++++++++++----- 1 file changed, 15 insertions(+), 5 deletions(-) diff --git a/ci-operator/step-registry/trusted-execution-clusters/ref/azure-integration-test/trusted-execution-clusters-ref-azure-integration-test-commands.sh b/ci-operator/step-registry/trusted-execution-clusters/ref/azure-integration-test/trusted-execution-clusters-ref-azure-integration-test-commands.sh index eb38cad963f47..c912df2c0528b 100755 --- a/ci-operator/step-registry/trusted-execution-clusters/ref/azure-integration-test/trusted-execution-clusters-ref-azure-integration-test-commands.sh +++ b/ci-operator/step-registry/trusted-execution-clusters/ref/azure-integration-test/trusted-execution-clusters-ref-azure-integration-test-commands.sh @@ -16,7 +16,8 @@ export AZURE_SUBSCRIPTION_ID TEST_IMAGE TEST_NAMESPACE_PREFIX export VIRT_PROVIDER=azure export PLATFORM=openshift -export TEST_TIMEOUT_MULTIPLIER=2 +# Lowest timeout is 1 minute, allow for one read timeout (5 minutes) retry +export TEST_TIMEOUT_MULTIPLIER=6 az login --service-principal \ -u "$(cat /tmp/secrets/azure/client-id)" \ @@ -25,11 +26,20 @@ az login --service-principal \ eval "$(ssh-agent -s)" +# git remote add test https://github.com/Jakob-Naucke/trusted-cluster-operator +# git fetch test +# git switch dbg-dns + +# export REGISTRY=quay.io/jnaucke +# export TAG=20260819-85dcabf +export INTEGRATION_TEST_THREADS=2 + echo "[INFO] Install cert-manager" CRT_MGR_VERSION=$(go list -m -f '{{.Version}}' github.com/cert-manager/cert-manager) oc apply -f "https://github.com/cert-manager/cert-manager/releases/download/${CRT_MGR_VERSION}/cert-manager.yaml" -# TODO stabilize tests enough to be able to add more -echo "[INFO] Running basic attestation test..." -sed -i '/^attestation-tests:/{n;s/$/ test_attestation/}' Makefile -make attestation-tests +echo "[INFO] Running integration tests until failure..." +while make integration-tests +do : +done +exit 1