From 10a346ee570a24cbc0cfd054c43933b78b5b7abc Mon Sep 17 00:00:00 2001 From: davdhacs <105243888+davdhacs@users.noreply.github.com> Date: Wed, 12 Aug 2026 07:58:34 -0600 Subject: [PATCH] stackrox: add IPv6 e2e test configs for OCP dual-stack and EKS IPv6 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Add ci-operator configs for: - OCP 4.22 AWS dual-stack IPv6-primary - OCP 5.0 AWS dual-stack - EKS IPv6 Update step registry to pass CLOUD_PROVIDER and NETWORK_STACK env vars to the create and e2e-test steps. Presubmit jobs YAML intentionally omitted — let prowgen generate it. Generated with AI assistance. --- ...ox-stackrox-fix-ipv6-deploy__eks-ipv6.yaml | 30 + ...ix-ipv6-deploy__ocp-5-0-aws-dualstack.yaml | 42 ++ ...ox-fix-ipv6-deploy__ocp-aws-dual-ipv6.yaml | 72 +++ ...x-stackrox-fix-ipv6-deploy-presubmits.yaml | 610 ++++++++++++++++++ ...x-automation-flavors-eks-e2e-workflow.yaml | 3 + ...automation-flavors-ocp-4-e2e-workflow.yaml | 4 + .../stackrox-stackrox-e2e-test-ref.yaml | 4 + 7 files changed, 765 insertions(+) create mode 100644 ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy__eks-ipv6.yaml create mode 100644 ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy__ocp-5-0-aws-dualstack.yaml create mode 100644 ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy__ocp-aws-dual-ipv6.yaml create mode 100644 ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy-presubmits.yaml diff --git a/ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy__eks-ipv6.yaml b/ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy__eks-ipv6.yaml new file mode 100644 index 0000000000000..c382d780a3d57 --- /dev/null +++ b/ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy__eks-ipv6.yaml @@ -0,0 +1,30 @@ +base_images: + eks: + name: automation-flavors + namespace: stackrox + tag: eks-latest +build_root: + image_stream_tag: + name: apollo-ci + namespace: stackrox + tag: stackrox-ui-test-stable +resources: + '*': + requests: + cpu: 2000m + memory: 4000Mi +test_binary_build_commands: .openshift-ci/dispatch.sh test-binary-build-commands +tests: +- always_run: false + as: qa-e2e-tests + optional: true + steps: + env: + NETWORK_STACK: ipv6 + TEST_SUITE: eks-qa-e2e-tests + workflow: stackrox-automation-flavors-eks-e2e +zz_generated_metadata: + branch: fix-ipv6-deploy + org: stackrox + repo: stackrox + variant: eks-ipv6 diff --git a/ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy__ocp-5-0-aws-dualstack.yaml b/ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy__ocp-5-0-aws-dualstack.yaml new file mode 100644 index 0000000000000..b37b5d8449c11 --- /dev/null +++ b/ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy__ocp-5-0-aws-dualstack.yaml @@ -0,0 +1,42 @@ +base_images: + ocp-4: + name: automation-flavors + namespace: stackrox + tag: openshift-4-latest +build_root: + image_stream_tag: + name: apollo-ci + namespace: stackrox + tag: stackrox-ui-test-stable +resources: + '*': + requests: + cpu: 2000m + memory: 4000Mi +test_binary_build_commands: .openshift-ci/dispatch.sh test-binary-build-commands +tests: +- always_run: false + as: dual-qa-e2e-tests + optional: true + steps: + env: + CLOUD_PROVIDER: aws + NETWORK_STACK: dual + OCP_VERSION: ocp-dev-preview/candidate-5.0 + TEST_SUITE: ocp-qa-e2e-tests + workflow: stackrox-automation-flavors-ocp-4-e2e +- always_run: false + as: dual-ipv6-primary-qa-e2e-tests + optional: true + steps: + env: + CLOUD_PROVIDER: aws + NETWORK_STACK: dual-ipv6-primary + OCP_VERSION: ocp-dev-preview/candidate-5.0 + TEST_SUITE: ocp-qa-e2e-tests + workflow: stackrox-automation-flavors-ocp-4-e2e +zz_generated_metadata: + branch: fix-ipv6-deploy + org: stackrox + repo: stackrox + variant: ocp-5-0-aws-dualstack diff --git a/ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy__ocp-aws-dual-ipv6.yaml b/ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy__ocp-aws-dual-ipv6.yaml new file mode 100644 index 0000000000000..bb1f29610375d --- /dev/null +++ b/ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy__ocp-aws-dual-ipv6.yaml @@ -0,0 +1,72 @@ +base_images: + ocp-4: + name: automation-flavors + namespace: stackrox + tag: openshift-4-latest +build_root: + image_stream_tag: + name: apollo-ci + namespace: stackrox + tag: stackrox-ui-test-stable +resources: + '*': + requests: + cpu: 2000m + memory: 4000Mi +test_binary_build_commands: .openshift-ci/dispatch.sh test-binary-build-commands +tests: +- always_run: false + as: qa-e2e-tests + optional: true + steps: + env: + CLOUD_PROVIDER: aws + NETWORK_STACK: dual-ipv6-primary + OCP_VERSION: ocp/candidate-4.22 + TEST_SUITE: ocp-qa-e2e-tests + workflow: stackrox-automation-flavors-ocp-4-e2e +- always_run: false + as: nongroovy-e2e-tests + optional: true + steps: + env: + CLOUD_PROVIDER: aws + NETWORK_STACK: dual-ipv6-primary + OCP_VERSION: ocp/candidate-4.22 + TEST_SUITE: ocp-nongroovy-e2e-tests + workflow: stackrox-automation-flavors-ocp-4-e2e +- always_run: false + as: operator-e2e-tests + optional: true + steps: + env: + CLOUD_PROVIDER: aws + NETWORK_STACK: dual-ipv6-primary + OCP_VERSION: ocp/candidate-4.22 + TEST_SUITE: ocp-operator-e2e-tests + workflow: stackrox-automation-flavors-ocp-4-e2e +- always_run: false + as: compliance-e2e-tests + optional: true + steps: + env: + CLOUD_PROVIDER: aws + NETWORK_STACK: dual-ipv6-primary + OCP_VERSION: ocp/candidate-4.22 + TEST_SUITE: ocp-compliance-e2e-tests + workflow: stackrox-automation-flavors-ocp-4-e2e +- always_run: false + as: scanner-v4-install-tests + optional: true + steps: + env: + CLOUD_PROVIDER: aws + NETWORK_STACK: dual-ipv6-primary + OCP_VERSION: ocp/candidate-4.22 + TEST_SUITE: ocp-scanner-v4-install-tests + workflow: stackrox-automation-flavors-ocp-4-e2e +zz_generated_metadata: + branch: fix-ipv6-deploy + org: stackrox + repo: stackrox + variant: ocp-aws-dual-ipv6 diff --git a/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy-presubmits.yaml b/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy-presubmits.yaml new file mode 100644 index 0000000000000..6ba1b30903d6e --- /dev/null +++ b/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-fix-ipv6-deploy-presubmits.yaml @@ -0,0 +1,610 @@ +presubmits: + stackrox/stackrox: + - agent: kubernetes + always_run: false + branches: + - ^fix-ipv6-deploy$ + - ^fix-ipv6-deploy- + cluster: build01 + context: ci/prow/eks-ipv6-qa-e2e-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: eks-ipv6 + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-fix-ipv6-deploy-eks-ipv6-qa-e2e-tests + optional: true + rerun_command: /test eks-ipv6-qa-e2e-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=qa-e2e-tests + - --variant=eks-ipv6 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )eks-ipv6-qa-e2e-tests,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^fix-ipv6-deploy$ + - ^fix-ipv6-deploy- + cluster: build01 + context: ci/prow/ocp-5-0-aws-dualstack-dual-ipv6-primary-qa-e2e-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: ocp-5-0-aws-dualstack + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-fix-ipv6-deploy-ocp-5-0-aws-dualstack-dual-ipv6-primary-qa-e2e-tests + optional: true + rerun_command: /test ocp-5-0-aws-dualstack-dual-ipv6-primary-qa-e2e-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=dual-ipv6-primary-qa-e2e-tests + - --variant=ocp-5-0-aws-dualstack + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )ocp-5-0-aws-dualstack-dual-ipv6-primary-qa-e2e-tests,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^fix-ipv6-deploy$ + - ^fix-ipv6-deploy- + cluster: build01 + context: ci/prow/ocp-5-0-aws-dualstack-dual-qa-e2e-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: ocp-5-0-aws-dualstack + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-fix-ipv6-deploy-ocp-5-0-aws-dualstack-dual-qa-e2e-tests + optional: true + rerun_command: /test ocp-5-0-aws-dualstack-dual-qa-e2e-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=dual-qa-e2e-tests + - --variant=ocp-5-0-aws-dualstack + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )ocp-5-0-aws-dualstack-dual-qa-e2e-tests,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^fix-ipv6-deploy$ + - ^fix-ipv6-deploy- + cluster: build01 + context: ci/prow/ocp-aws-dual-ipv6-compliance-e2e-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: ocp-aws-dual-ipv6 + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-fix-ipv6-deploy-ocp-aws-dual-ipv6-compliance-e2e-tests + optional: true + rerun_command: /test ocp-aws-dual-ipv6-compliance-e2e-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=compliance-e2e-tests + - --variant=ocp-aws-dual-ipv6 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )ocp-aws-dual-ipv6-compliance-e2e-tests,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^fix-ipv6-deploy$ + - ^fix-ipv6-deploy- + cluster: build01 + context: ci/prow/ocp-aws-dual-ipv6-nongroovy-e2e-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: ocp-aws-dual-ipv6 + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-fix-ipv6-deploy-ocp-aws-dual-ipv6-nongroovy-e2e-tests + optional: true + rerun_command: /test ocp-aws-dual-ipv6-nongroovy-e2e-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=nongroovy-e2e-tests + - --variant=ocp-aws-dual-ipv6 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )ocp-aws-dual-ipv6-nongroovy-e2e-tests,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^fix-ipv6-deploy$ + - ^fix-ipv6-deploy- + cluster: build01 + context: ci/prow/ocp-aws-dual-ipv6-operator-e2e-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: ocp-aws-dual-ipv6 + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-fix-ipv6-deploy-ocp-aws-dual-ipv6-operator-e2e-tests + optional: true + rerun_command: /test ocp-aws-dual-ipv6-operator-e2e-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=operator-e2e-tests + - --variant=ocp-aws-dual-ipv6 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )ocp-aws-dual-ipv6-operator-e2e-tests,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^fix-ipv6-deploy$ + - ^fix-ipv6-deploy- + cluster: build01 + context: ci/prow/ocp-aws-dual-ipv6-qa-e2e-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: ocp-aws-dual-ipv6 + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-fix-ipv6-deploy-ocp-aws-dual-ipv6-qa-e2e-tests + optional: true + rerun_command: /test ocp-aws-dual-ipv6-qa-e2e-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=qa-e2e-tests + - --variant=ocp-aws-dual-ipv6 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )ocp-aws-dual-ipv6-qa-e2e-tests,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^fix-ipv6-deploy$ + - ^fix-ipv6-deploy- + cluster: build01 + context: ci/prow/ocp-aws-dual-ipv6-scanner-v4-install-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: ocp-aws-dual-ipv6 + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-fix-ipv6-deploy-ocp-aws-dual-ipv6-scanner-v4-install-tests + optional: true + rerun_command: /test ocp-aws-dual-ipv6-scanner-v4-install-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=scanner-v4-install-tests + - --variant=ocp-aws-dual-ipv6 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )ocp-aws-dual-ipv6-scanner-v4-install-tests,?($|\s.*) diff --git a/ci-operator/step-registry/stackrox/automation-flavors/eks-e2e/stackrox-automation-flavors-eks-e2e-workflow.yaml b/ci-operator/step-registry/stackrox/automation-flavors/eks-e2e/stackrox-automation-flavors-eks-e2e-workflow.yaml index 7e3cdbec4c06b..1aa81157b1324 100644 --- a/ci-operator/step-registry/stackrox/automation-flavors/eks-e2e/stackrox-automation-flavors-eks-e2e-workflow.yaml +++ b/ci-operator/step-registry/stackrox/automation-flavors/eks-e2e/stackrox-automation-flavors-eks-e2e-workflow.yaml @@ -11,6 +11,9 @@ workflow: - mount_path: /tmp/vault/stackrox-automation-flavors name: stackrox-automation-flavors namespace: test-credentials + env: + - name: NETWORK_STACK + default: '' from: eks resources: requests: diff --git a/ci-operator/step-registry/stackrox/automation-flavors/ocp-4-e2e/stackrox-automation-flavors-ocp-4-e2e-workflow.yaml b/ci-operator/step-registry/stackrox/automation-flavors/ocp-4-e2e/stackrox-automation-flavors-ocp-4-e2e-workflow.yaml index 46bc0bde37675..69d9fb1534d1a 100644 --- a/ci-operator/step-registry/stackrox/automation-flavors/ocp-4-e2e/stackrox-automation-flavors-ocp-4-e2e-workflow.yaml +++ b/ci-operator/step-registry/stackrox/automation-flavors/ocp-4-e2e/stackrox-automation-flavors-ocp-4-e2e-workflow.yaml @@ -29,6 +29,10 @@ workflow: default: 'openshift-worker-node@acs-san-stackroxci.iam.gserviceaccount.com' - name: OS_IMAGE_STREAM default: '' + - name: CLOUD_PROVIDER + default: '' + - name: NETWORK_STACK + default: '' from: ocp-4 resources: requests: diff --git a/ci-operator/step-registry/stackrox/stackrox/e2e-test/stackrox-stackrox-e2e-test-ref.yaml b/ci-operator/step-registry/stackrox/stackrox/e2e-test/stackrox-stackrox-e2e-test-ref.yaml index 62192b2415e58..81b91a1a835b5 100644 --- a/ci-operator/step-registry/stackrox/stackrox/e2e-test/stackrox-stackrox-e2e-test-ref.yaml +++ b/ci-operator/step-registry/stackrox/stackrox/e2e-test/stackrox-stackrox-e2e-test-ref.yaml @@ -22,6 +22,10 @@ ref: default: '' - name: QA_TEST_TARGET default: '' + - name: CLOUD_PROVIDER + default: '' + - name: NETWORK_STACK + default: '' # TODO: We should remove this option after scanner v2 is removed - name: ROX_SCANNER_V4 default: "false"