Promoting clc-ui-e2e test image

ci-operator/config/stolostron/clc-ui-e2e/.config.prowgen

@@ -0,0 +1,2 @@
+private: true
+expose: true

ci-operator/config/stolostron/clc-ui-e2e/OWNERS

@@ -0,0 +1,9 @@
+approvers:
+- ascerra
+- dtthuynh
+- vboulos
+options: {}
+reviewers:
+- ascerra
+- dtthuynh
+- vboulos

ci-operator/config/stolostron/clc-ui-e2e/stolostron-clc-ui-e2e-release-2.7.yaml

@@ -0,0 +1,20 @@
+build_root:
+  image_stream_tag:
+    name: release
+    namespace: openshift
+    tag: golang-1.17
+images:
+- dockerfile_path: Dockerfile.interops
+  to: clc-ui-e2e
+promotion:
+  name: "2.7"
+  namespace: acm-qe
+resources:
+  '*':
+    requests:
+      cpu: 100m
+      memory: 200Mi
+zz_generated_metadata:
+  branch: release-2.7
+  org: stolostron
+  repo: clc-ui-e2e

ci-operator/jobs/stolostron/clc-ui-e2e/OWNERS

@@ -0,0 +1,9 @@
+approvers:
+- ascerra
+- dtthuynh
+- vboulos
+options: {}
+reviewers:
+- ascerra
+- dtthuynh
+- vboulos

ci-operator/jobs/stolostron/clc-ui-e2e/stolostron-clc-ui-e2e-release-2.7-postsubmits.yaml

@@ -0,0 +1,63 @@
+postsubmits:
+  stolostron/clc-ui-e2e:
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^release-2\.7$
+    cluster: build01
+    decorate: true
+    decoration_config:
+      skip_cloning: true
+    labels:
+      ci-operator.openshift.io/is-promotion: "true"
+      ci.openshift.io/generator: prowgen
+    max_concurrency: 1
+    name: branch-ci-stolostron-clc-ui-e2e-release-2.7-images
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --image-mirror-push-secret=/etc/push-secret/.dockerconfigjson
+        - --oauth-token-path=/usr/local/github-credentials/oauth
+        - --promote
+        - --report-credentials-file=/etc/report/credentials
+        - --target=[images]
+        command:
+        - ci-operator
+        image: ci-operator:latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /usr/local/github-credentials
+          name: github-credentials-openshift-ci-robot-private-git-cloner
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/push-secret
+          name: push-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: github-credentials-openshift-ci-robot-private-git-cloner
+        secret:
+          secretName: github-credentials-openshift-ci-robot-private-git-cloner
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: push-secret
+        secret:
+          secretName: registry-push-credentials-ci-central
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator

ci-operator/jobs/stolostron/clc-ui-e2e/stolostron-clc-ui-e2e-release-2.7-presubmits.yaml

@@ -0,0 +1,58 @@
+presubmits:
+  stolostron/clc-ui-e2e:
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^release-2\.7$
+    - ^release-2\.7-
+    cluster: build01
+    context: ci/prow/images
+    decorate: true
+    decoration_config:
+      skip_cloning: true
+    labels:
+      ci.openshift.io/generator: prowgen
+      pj-rehearse.openshift.io/can-be-rehearsed: "true"
+    name: pull-ci-stolostron-clc-ui-e2e-release-2.7-images
+    rerun_command: /test images
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --oauth-token-path=/usr/local/github-credentials/oauth
+        - --report-credentials-file=/etc/report/credentials
+        - --target=[images]
+        command:
+        - ci-operator
+        image: ci-operator:latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /usr/local/github-credentials
+          name: github-credentials-openshift-ci-robot-private-git-cloner
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: github-credentials-openshift-ci-robot-private-git-cloner
+        secret:
+          secretName: github-credentials-openshift-ci-robot-private-git-cloner
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
+    trigger: (?m)^/test( | .* )images,?($|\s.*)

clusters/app.ci/registry-access/acm-qe/OWNERS

@@ -0,0 +1,4 @@
+approvers:
+- ascerra
+- dtthuynh
+- vboulos

clusters/app.ci/registry-access/acm-qe/admin_acm-qe.yaml

@@ -0,0 +1,24 @@
+---
+# this is the Namespace in which your images live
+apiVersion: v1
+kind: Namespace
+metadata:
+  annotations:
+    openshift.io/description: Published Images for acm-qe
+    openshift.io/display-name: acm-qe
+  name: acm-qe
+---
+# this grants all authenticated users rights to pull images
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: acm-qe-image-puller-binding
+  namespace: acm-qe
+roleRef:
+  kind: ClusterRole
+  apiGroup: rbac.authorization.k8s.io
+  name: system:image-puller
+subjects:
+  - apiGroup: rbac.authorization.k8s.io
+    kind: Group
+    name: system:authenticated # this is the set of all authenticated users