Bug 1919453: [release-4.6] configure tests to pull images from mirror

[rvanderp3]

The intention of this PR is to enable some tests in the openshift/conformance/parallel suite which are not subject to the mirror configuration in /etc/containers/registries.conf to use a mirror as the source of their required images.

Note: The pattern in this PR could be applied to other suites as well.

This is needed due to docker.io rate limiting causing CI on some platforms on 4.6 to be in permafail. To use the feature in this PR:

• Prior to running openshift-tests, export TEST_IMAGE_MIRROR_REGISTRY=<pull-through-cache-host>:<port>
• Configure a pull-through cache for docker.io with a certificate signed by a well-known CA on a bastion that is only reachable by the nodes executing e2e tests. For example:

podman run -d -p 5000:5000 -v /home/admin/registry_storage:/var/lib/registry:Z -v /home/admin/registry_certs:/certs:Z --restart always --name registry-docker.io -e REGISTRY_HTTP_ADDR=0.0.0.0:5000 -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/domain.crt -e REGISTRY_HTTP_TLS_KEY=/certs/domain.key -e REGISTRY_PROXY_REMOTEURL="https://registry-1.docker.io" -e REGISTRY_PROXY_USERNAME=<optional user name> -e REGISTRY_PROXY_PASSWORD=<optional password> registry:2

To enable resources which can take advantage of the mirror registry, apply a machine-config which configures the pull-through cache as a docker.io registry mirror. This will allow, over the course of a day or so(based on pull-rate exhaustion), for all required images to be pulled and cached.

This PR is an alternate to solution to that proposed in #26256

[openshift-ci]

@rvanderp3: No Bugzilla bug is referenced in the title of this pull request.
To reference a bug, add 'Bug XXX:' to the title of this pull request and request another bug refresh with /bugzilla refresh.

In response to this:

[wip] configure tests to pull images from mirror

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[openshift-ci]

@rvanderp3: No Bugzilla bug is referenced in the title of this pull request.
To reference a bug, add 'Bug XXX:' to the title of this pull request and request another bug refresh with /bugzilla refresh.

In response to this:

[release-4.6] configure tests to pull images from mirror

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[openshift-ci]

@rvanderp3: No Bugzilla bug is referenced in the title of this pull request.
To reference a bug, add 'Bug XXX:' to the title of this pull request and request another bug refresh with /bugzilla refresh.

In response to this:

[release-4.6] configure tests to pull images from mirror

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[openshift-ci]

@rvanderp3: No Bugzilla bug is referenced in the title of this pull request.
To reference a bug, add 'Bug XXX:' to the title of this pull request and request another bug refresh with /bugzilla refresh.

In response to this:

[wip] configure tests to pull images from mirror

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[rvanderp3]

/bugzilla refresh

[openshift-ci]

@rvanderp3: An error was encountered querying GitHub for users with public email (bandrade@redhat.com) for bug 1919453 on the Bugzilla server at https://bugzilla.redhat.com. No known errors were detected, please see the full error message for details.

Full error message.

Post "http://ghproxy/graphql": dial tcp 172.30.229.2:80: i/o timeout

Please contact an administrator to resolve this issue, then request a bug refresh with /bugzilla refresh.

In response to this:

[release-4.6] Bug 1919453: configure tests to pull images from mirror

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[openshift-ci]

@rvanderp3: This pull request references Bugzilla bug 1919453, which is valid.

6 validation(s) were run on this bug

• bug is open, matching expected state (open)
• bug target release (4.6.z) matches configured target release for branch (4.6.z)
• bug is in the state POST, which is one of the valid states (NEW, ASSIGNED, ON_DEV, POST, POST)
• dependent bug Bugzilla bug 1816812 is in the state CLOSED (ERRATA), which is one of the valid states (VERIFIED, RELEASE_PENDING, CLOSED (ERRATA), CLOSED (CURRENTRELEASE))
• dependent Bugzilla bug 1816812 targets the "4.7.0" release, which is one of the valid target releases: 4.7.0, 4.7.z
• bug has dependents

No GitHub users were found matching the public email listed for the QA contact in Bugzilla (bandrade@redhat.com), skipping review request.

In response to this:

/bugzilla refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[rvanderp3]

/cc @bparees

[bparees]

/approve

[rvanderp3]

/hold

A possible regression in e2e-aws/e2e-gcp needs to be addressed. Will remove hold once done.

[openshift-ci]

@rvanderp3: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-agnostic-cmd	379aa4e	link	false	/test e2e-agnostic-cmd

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[jcpowermac]

/lgtm

[rvanderp3]

/hold cancel

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: bparees, jcpowermac, rvanderp3

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• test/extended/OWNERS [bparees]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@rvanderp3: All pull requests linked via external trackers have merged:

• openshift/origin#26729

Bugzilla bug 1919453 has been moved to the MODIFIED state.

In response to this:

Bug 1919453: [release-4.6] configure tests to pull images from mirror

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.