Kueue downstream ci for s390x

ci-operator/config/openshift/kueue-operator/openshift-kueue-operator-release-1.4__libvirt-s390x.yaml

@@ -0,0 +1,110 @@
+base_images:
+  cli:
+    name: "4.22"
+    namespace: ocp
+    tag: cli
+  libvirt-installer:
+    name: "4.22"
+    namespace: ocp
+    tag: libvirt-installer
+  operator-sdk:
+    name: "4.17"
+    namespace: origin
+    tag: operator-sdk
+  upi-installer:
+    name: "4.22"
+    namespace: ocp
+    tag: upi-installer
+build_root:
+  from_repository: true
+images:
+  items:
+  - dockerfile_literal: |
+      FROM src
+      RUN wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64 && chmod +x /usr/local/bin/yq
+      RUN dnf install -y jq skopeo git && dnf clean all
+    from: src
+    to: kueue-operator-src
+  - dockerfile_literal: |
+      FROM src
+      COPY oc /usr/bin/oc
+      RUN ln -s /usr/bin/oc /usr/bin/kubectl
+      RUN wget -qO /usr/local/bin/jq https://github.com/jqlang/jq/releases/latest/download/jq-linux64 && chmod +x /usr/local/bin/jq
+      RUN dnf install -y skopeo git podman && dnf clean all
+    from: src
+    inputs:
+      cli:
+        paths:
+        - destination_dir: .
+          source_path: /usr/bin/oc
+    to: src-with-oc-and-kubectl
+operator:
+  bundles:
+  - as: kueue-bundle
+    context_dir: .
+    dockerfile_path: bundle.Dockerfile
+    skip_building_index: true
+  substitutions:
+  - pullspec: registry.redhat.io/kueue/kueue-rhel9-operator:latest
+    with: pipeline:kueue-operator
+  - pullspec: registry.redhat.io/kueue/kueue-rhel9:latest
+    with: pipeline:kueue-operand
+  - pullspec: registry.redhat.io/kueue/kueue-must-gather-rhel9:latest
+    with: pipeline:kueue-must-gather
+prowgen:
+  disable_sparse_checkout: true
+releases:
+  latest:
+    candidate:
+      architecture: multi
+      product: ocp
+      stream: nightly
+      version: "4.22"
+  s390x-latest:
+    candidate:
+      architecture: s390x
+      product: ocp
+      stream: nightly
+      version: "4.22"
+resources:
+  '*':
+    requests:
+      cpu: "4"
+      memory: 4Gi
+tests:
+- as: test-e2e-downstream-4-22
+  capabilities:
+  - intranet
+  cluster: build12
+  cron: '@daily'
+  reporter_config:
+    channel: '#forum-node-jira'
+    job_states_to_report:
+    - failure
+    - error
+    report_template: ':failed: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*.
+      <{{.Status.URL}}|View logs>'
+  steps:
+    cluster_profile: libvirt-s390x-vpn-oz
+    dependencies:
+      OPENSHIFT_INSTALL_TARGET: release:s390x-latest
+    env:
+      BRANCH: "4.22"
+      BUNDLE_COMPONENT: kueue-bundle-1-4
+      OPERAND_COMPONENT: kueue-operand-1-4
+      OPERATOR_COMPONENT: kueue-operator-1-4
+    post:
+    - chain: kueue-operator-post
+    - ref: ipi-conf-debug-kdump-gather-logs
+    - ref: gather-extra
+    - ref: gather-audit-logs
+    - ref: upi-libvirt-cleanup-post
+    test:
+    - ref: kueue-operator-libvirt-s390x-origin-cli-mirror
+    - chain: kueue-operator-test-e2e-downstream
+    workflow: kueue-operator-libvirt-s390x
+zz_generated_metadata:
+  branch: release-1.4
+  org: openshift
+  repo: kueue-operator
+  variant: libvirt-s390x

ci-operator/jobs/openshift/kueue-operator/openshift-kueue-operator-release-1.4-periodics.yaml

@@ -1,4 +1,96 @@
 periodics:
+- agent: kubernetes
+  cluster: build12
+  cron: 53 3 * * *
+  decorate: true
+  decoration_config: {}
+  extra_refs:
+  - base_ref: release-1.4
+    org: openshift
+    repo: kueue-operator
+  labels:
+    capability/intranet: intranet
+    ci-operator.openshift.io/cloud: libvirt-s390x-vpn-oz
+    ci-operator.openshift.io/cloud-cluster-profile: libvirt-s390x-vpn-oz
+    ci-operator.openshift.io/cluster: build12
+    ci-operator.openshift.io/variant: libvirt-s390x
+    ci.openshift.io/generator: prowgen
+    job-release: "4.22"
+    pj-rehearse.openshift.io/can-be-rehearsed: "true"
+  name: periodic-ci-openshift-kueue-operator-release-1.4-libvirt-s390x-test-e2e-downstream-4-22
+  reporter_config:
+    slack:
+      channel: '#forum-node-jira'
+      job_states_to_report:
+      - failure
+      - error
+      report_template: ':failed: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*.
+        <{{.Status.URL}}|View logs>'
+  spec:
+    containers:
+    - args:
+      - --gcs-upload-secret=/secrets/gcs/service-account.json
+      - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+      - --lease-server-credentials-file=/etc/boskos/credentials
+      - --report-credentials-file=/etc/report/credentials
+      - --secret-dir=/secrets/ci-pull-credentials
+      - --target=test-e2e-downstream-4-22
+      - --variant=libvirt-s390x
+      command:
+      - ci-operator
+      env:
+      - name: HTTP_SERVER_IP
+        valueFrom:
+          fieldRef:
+            fieldPath: status.podIP
+      image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
+      imagePullPolicy: Always
+      name: ""
+      ports:
+      - containerPort: 8080
+        name: http
+      resources:
+        requests:
+          cpu: 10m
+      volumeMounts:
+      - mountPath: /etc/boskos
+        name: boskos
+        readOnly: true
+      - mountPath: /secrets/ci-pull-credentials
+        name: ci-pull-credentials
+        readOnly: true
+      - mountPath: /secrets/gcs
+        name: gcs-credentials
+        readOnly: true
+      - mountPath: /secrets/manifest-tool
+        name: manifest-tool-local-pusher
+        readOnly: true
+      - mountPath: /etc/pull-secret
+        name: pull-secret
+        readOnly: true
+      - mountPath: /etc/report
+        name: result-aggregator
+        readOnly: true
+    serviceAccountName: ci-operator
+    volumes:
+    - name: boskos
+      secret:
+        items:
+        - key: credentials
+          path: credentials
+        secretName: boskos-credentials
+    - name: ci-pull-credentials
+      secret:
+        secretName: ci-pull-credentials
+    - name: manifest-tool-local-pusher
+      secret:
+        secretName: manifest-tool-local-pusher
+    - name: pull-secret
+      secret:
+        secretName: registry-pull-credentials
+    - name: result-aggregator
+      secret:
+        secretName: result-aggregator
 - agent: kubernetes
   cluster: build06
   cron: 0 1 1,15 * *

ci-operator/jobs/openshift/kueue-operator/openshift-kueue-operator-release-1.4-presubmits.yaml

@@ -192,6 +192,120 @@ presubmits:
         secret:
           secretName: result-aggregator
     trigger: (?m)^/test( | .* )images,?($|\s.*)
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^release-1\.4$
+    - ^release-1\.4-
+    cluster: build07
+    context: ci/prow/libvirt-s390x-ci-bundle-kueue-bundle
+    decorate: true
+    decoration_config: {}
+    labels:
+      ci-operator.openshift.io/variant: libvirt-s390x
+      ci.openshift.io/generator: prowgen
+      job-release: "4.22"
+      pj-rehearse.openshift.io/can-be-rehearsed: "true"
+    name: pull-ci-openshift-kueue-operator-release-1.4-libvirt-s390x-ci-bundle-kueue-bundle
+    rerun_command: /test libvirt-s390x-ci-bundle-kueue-bundle
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --report-credentials-file=/etc/report/credentials
+        - --target=kueue-bundle
+        - --variant=libvirt-s390x
+        command:
+        - ci-operator
+        image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /secrets/manifest-tool
+          name: manifest-tool-local-pusher
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: manifest-tool-local-pusher
+        secret:
+          secretName: manifest-tool-local-pusher
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
+    trigger: (?m)^/test( | .* )libvirt-s390x-ci-bundle-kueue-bundle,?($|\s.*)
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^release-1\.4$
+    - ^release-1\.4-
+    cluster: build07
+    context: ci/prow/libvirt-s390x-images
+    decorate: true
+    decoration_config: {}
+    labels:
+      ci-operator.openshift.io/variant: libvirt-s390x
+      ci.openshift.io/generator: prowgen
+      job-release: "4.22"
+      pj-rehearse.openshift.io/can-be-rehearsed: "true"
+    name: pull-ci-openshift-kueue-operator-release-1.4-libvirt-s390x-images
+    rerun_command: /test libvirt-s390x-images
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --report-credentials-file=/etc/report/credentials
+        - --target=[images]
+        - --variant=libvirt-s390x
+        command:
+        - ci-operator
+        image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /secrets/manifest-tool
+          name: manifest-tool-local-pusher
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: manifest-tool-local-pusher
+        secret:
+          secretName: manifest-tool-local-pusher
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
+    trigger: (?m)^/test( | .* )libvirt-s390x-images,?($|\s.*)
   - agent: kubernetes
     always_run: true
     branches:

ci-operator/step-registry/kueue-operator/libvirt-s390x/OWNERS

@@ -0,0 +1,13 @@
+approvers:
+- cpmeadors
+- kannon92
+- mrunalp
+- rphillips
+- sohankunkerkar
+options: {}
+reviewers:
+- cpmeadors
+- kannon92
+- mrunalp
+- rphillips
+- sohankunkerkar

ci-operator/step-registry/kueue-operator/libvirt-s390x/kueue-operator-libvirt-s390x-workflow.metadata.json

@@ -0,0 +1,19 @@
+{
+	"path": "kueue-operator/libvirt-s390x/kueue-operator-libvirt-s390x-workflow.yaml",
+	"owners": {
+		"approvers": [
+			"cpmeadors",
+			"kannon92",
+			"mrunalp",
+			"rphillips",
+			"sohankunkerkar"
+		],
+		"reviewers": [
+			"cpmeadors",
+			"kannon92",
+			"mrunalp",
+			"rphillips",
+			"sohankunkerkar"
+		]
+	}
+}

ci-operator/step-registry/kueue-operator/libvirt-s390x/kueue-operator-libvirt-s390x-workflow.yaml

@@ -0,0 +1,30 @@
+workflow:
+  as: kueue-operator-libvirt-s390x
+  documentation: |-
+    Provisions an ephemeral s390x OpenShift cluster on remote IBM Z libvirt hypervisors
+    (same pre/post path as openshift-e2e-libvirt-vpn), then runs Kueue operator test steps
+    from the ci-operator job configuration.
+
+    Requires cluster_profile libvirt-s390x-vpn, capability/intranet, and Prow cluster
+    build12. Hypervisor hostnames and network layout come from Boskos (LEASED_RESOURCE)
+    and the cluster profile leases secret—not from workflow env.
+
+    Kueue operator install and e2e steps remain on the job test: chain.
+  steps:
+    allow_best_effort_post_steps: true
+    pre:
+    - ref: upi-libvirt-cleanup-pre
+    - chain: upi-conf-libvirt
+    - ref: ipi-debug-missing-static-pod-controller-degraded
+    - ref: ipi-conf-etcd-on-ramfs
+    - chain: upi-install-libvirt
+    post:
+    - ref: ipi-conf-debug-kdump-gather-logs
+    - chain: gather
+    - ref: upi-libvirt-cleanup-post
+    env:
+      ARCH: s390x
+      ETCD_DISK_SPEED: slow
+      USE_EXTERNAL_DNS: "true"
+      DOMAIN_MEMORY: "65536" 
+      DOMAIN_VCPUS: "16"