diff --git a/ci-operator/config/openshift/jobset-operator/openshift-jobset-operator-release-4.21.yaml b/ci-operator/config/openshift/jobset-operator/openshift-jobset-operator-release-4.21.yaml index 5f635df73fd84..da5f467976737 100644 --- a/ci-operator/config/openshift/jobset-operator/openshift-jobset-operator-release-4.21.yaml +++ b/ci-operator/config/openshift/jobset-operator/openshift-jobset-operator-release-4.21.yaml @@ -1,6 +1,6 @@ base_images: kubernetes-sigs-jobset: - name: "4.21" + name: 0.11.0 namespace: ocp tag: kubernetes-sigs-jobset build_root: diff --git a/ci-operator/config/openshift/kubernetes-sigs-jobset/openshift-kubernetes-sigs-jobset-release-0.11.0.yaml b/ci-operator/config/openshift/kubernetes-sigs-jobset/openshift-kubernetes-sigs-jobset-release-0.11.0.yaml new file mode 100644 index 0000000000000..3817bbb77cf88 --- /dev/null +++ b/ci-operator/config/openshift/kubernetes-sigs-jobset/openshift-kubernetes-sigs-jobset-release-0.11.0.yaml @@ -0,0 +1,49 @@ +build_root: + from_repository: true +images: +- dockerfile_path: Dockerfile.ci + to: kubernetes-sigs-jobset +promotion: + to: + - name: 0.11.0 + namespace: ocp +resources: + '*': + limits: + memory: 4Gi + requests: + cpu: 100m + memory: 200Mi +tag_specification: + name: "4.21" + namespace: ocp +tests: +- as: verify + commands: HOME=$( mktemp -d ) GOLANGCI_LINT_CACHE=/tmp/.cache GOCACHE=/tmp/ GOFLAGS='-mod=readonly' + make -f Makefile-ocp.mk verify verify-ocp + container: + from: src +- as: test-integration + commands: GOFLAGS='-mod=readonly' make test-integration + container: + from: src +- as: test + commands: GOFLAGS='-mod=readonly' make test + container: + from: src +- as: fips-image-scan-kubernetes-sigs-jobset + skip_if_only_changed: ^\.tekton/|\.md$|^(LICENSE|OWNERS)$ + steps: + dependencies: + SCAN_IMAGE: kubernetes-sigs-jobset + test: + - ref: fips-check-image-scan +- as: security + optional: true + skip_if_only_changed: ^\.tekton/|\.md$|^(LICENSE|OWNERS)$ + steps: + workflow: openshift-ci-security +zz_generated_metadata: + branch: release-0.11.0 + org: openshift + repo: kubernetes-sigs-jobset diff --git a/ci-operator/jobs/openshift/kubernetes-sigs-jobset/openshift-kubernetes-sigs-jobset-release-0.11.0-postsubmits.yaml b/ci-operator/jobs/openshift/kubernetes-sigs-jobset/openshift-kubernetes-sigs-jobset-release-0.11.0-postsubmits.yaml new file mode 100644 index 0000000000000..2451ee8d8f1db --- /dev/null +++ b/ci-operator/jobs/openshift/kubernetes-sigs-jobset/openshift-kubernetes-sigs-jobset-release-0.11.0-postsubmits.yaml @@ -0,0 +1,60 @@ +postsubmits: + openshift/kubernetes-sigs-jobset: + - agent: kubernetes + always_run: true + branches: + - ^release-0\.11\.0$ + cluster: build01 + decorate: true + labels: + ci-operator.openshift.io/is-promotion: "true" + ci.openshift.io/generator: prowgen + max_concurrency: 1 + name: branch-ci-openshift-kubernetes-sigs-jobset-release-0.11.0-images + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --image-mirror-push-secret=/etc/push-secret/.dockerconfigjson + - --promote + - --report-credentials-file=/etc/report/credentials + - --target=[images] + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/push-secret + name: push-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: push-secret + secret: + secretName: registry-push-credentials-ci-central + - name: result-aggregator + secret: + secretName: result-aggregator diff --git a/ci-operator/jobs/openshift/kubernetes-sigs-jobset/openshift-kubernetes-sigs-jobset-release-0.11.0-presubmits.yaml b/ci-operator/jobs/openshift/kubernetes-sigs-jobset/openshift-kubernetes-sigs-jobset-release-0.11.0-presubmits.yaml new file mode 100644 index 0000000000000..7e8d1cc9d41d8 --- /dev/null +++ b/ci-operator/jobs/openshift/kubernetes-sigs-jobset/openshift-kubernetes-sigs-jobset-release-0.11.0-presubmits.yaml @@ -0,0 +1,324 @@ +presubmits: + openshift/kubernetes-sigs-jobset: + - agent: kubernetes + always_run: false + branches: + - ^release-0\.11\.0$ + - ^release-0\.11\.0- + cluster: build01 + context: ci/prow/fips-image-scan-kubernetes-sigs-jobset + decorate: true + labels: + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-kubernetes-sigs-jobset-release-0.11.0-fips-image-scan-kubernetes-sigs-jobset + rerun_command: /test fips-image-scan-kubernetes-sigs-jobset + skip_if_only_changed: ^\.tekton/|\.md$|^(LICENSE|OWNERS)$ + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=fips-image-scan-kubernetes-sigs-jobset + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )fips-image-scan-kubernetes-sigs-jobset,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^release-0\.11\.0$ + - ^release-0\.11\.0- + cluster: build01 + context: ci/prow/images + decorate: true + labels: + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-kubernetes-sigs-jobset-release-0.11.0-images + rerun_command: /test images + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=[images] + - --target=[release:latest] + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )images,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^release-0\.11\.0$ + - ^release-0\.11\.0- + cluster: build01 + context: ci/prow/security + decorate: true + labels: + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-kubernetes-sigs-jobset-release-0.11.0-security + optional: true + rerun_command: /test security + skip_if_only_changed: ^\.tekton/|\.md$|^(LICENSE|OWNERS)$ + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=security + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )security,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^release-0\.11\.0$ + - ^release-0\.11\.0- + cluster: build01 + context: ci/prow/test + decorate: true + labels: + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-kubernetes-sigs-jobset-release-0.11.0-test + rerun_command: /test test + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=test + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )test,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^release-0\.11\.0$ + - ^release-0\.11\.0- + cluster: build01 + context: ci/prow/test-integration + decorate: true + labels: + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-kubernetes-sigs-jobset-release-0.11.0-test-integration + rerun_command: /test test-integration + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=test-integration + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )test-integration,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^release-0\.11\.0$ + - ^release-0\.11\.0- + cluster: build01 + context: ci/prow/verify + decorate: true + labels: + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-kubernetes-sigs-jobset-release-0.11.0-verify + rerun_command: /test verify + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=verify + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )verify,?($|\s.*)