diff --git a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.12__amd64-nightly.yaml b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.12__amd64-nightly.yaml index 8134f240d4133..bc5aa27c089e0 100644 --- a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.12__amd64-nightly.yaml +++ b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.12__amd64-nightly.yaml @@ -614,6 +614,7 @@ tests: CATALOG_SOURCE_NAME: security-profiles-operator FILTERS_ADDITIONAL: "" FIPS_ENABLED: "true" + MULTISTAGE_PARAM_OVERRIDE_INDEX_IMAGE: quay.io/redhat-user-workloads/ocp-isc-tenant/security-profiles-operator-fbc-4-12@sha256:a2b92d70d0fb3ec8e43260cc68b7e00b7c389c6694fc84f222c8374fbbc715df TEST_FILTERS: ~HyperShiftMGMT&;~DEPRECATED& TEST_PARALLEL: "3" TEST_SCENARIOS: Security_Profiles_Operator|Node_Audit_Logging diff --git a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13__amd64-nightly.yaml b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13__amd64-nightly.yaml index 9595cb7b17049..20354d9694e68 100644 --- a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13__amd64-nightly.yaml +++ b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13__amd64-nightly.yaml @@ -859,22 +859,26 @@ tests: - ref: openshift-extended-test - ref: openshift-e2e-test-qe-report workflow: cucushift-installer-rehearse-azure-ipi-fullyprivate-proxy -- as: azure-ipi-fullyprivate-proxy-f60-security-profiles - cron: 2 17 25 1,3,5,7,9,11 * +- as: azure-ipi-f60-security-profiles + cron: 17 13 18 1,3,5,7,9,11 * steps: cluster_profile: azure-qe env: BASE_DOMAIN: qe.azure.devcluster.openshift.com CATALOG_SOURCE_NAME: security-profiles-operator + E2E_RUN_TAGS: '@spo' FILTERS_ADDITIONAL: "" + FIPS_ENABLED: "true" + MULTISTAGE_PARAM_OVERRIDE_INDEX_IMAGE: quay.io/redhat-user-workloads/ocp-isc-tenant/security-profiles-operator-fbc-4-13@sha256:5e6ebbdbbdd2277a2d517a67e30269a6e55826c3ec75db9f10b14e247216bf1d TEST_FILTERS: ~HyperShiftMGMT&;~DEPRECATED& TEST_PARALLEL: "3" TEST_SCENARIOS: Security_Profiles_Operator|Node_Audit_Logging test: - ref: file-integrity-konflux-catalogsource - ref: openshift-extended-test + - ref: openshift-extended-web-tests - ref: openshift-e2e-test-qe-report - workflow: cucushift-installer-rehearse-azure-ipi-fullyprivate-proxy + workflow: cucushift-installer-rehearse-azure-ipi - as: baremetalds-ipi-ovn-ipv4-fips-f60 capabilities: - intranet diff --git a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16__amd64-nightly.yaml b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16__amd64-nightly.yaml index d3d19abf0326a..1a1865073c6b8 100644 --- a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16__amd64-nightly.yaml +++ b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16__amd64-nightly.yaml @@ -1520,17 +1520,17 @@ tests: - ref: openshift-extended-web-tests - ref: openshift-e2e-test-qe-report workflow: cucushift-installer-rehearse-azure-stack-ipi-proxy -- as: azure-stack-ipi-proxy-fips-f28-security-profiles - cluster: build01 - cron: 56 13 26 * * +- as: azure-ipi-f28-security-profiles + cron: 41 19 5 * * steps: - cluster_profile: azurestack-qe + cluster_profile: azure-qe env: + BASE_DOMAIN: qe.azure.devcluster.openshift.com CATALOG_SOURCE_NAME: security-profiles-operator E2E_RUN_TAGS: '@spo' - EXTRACT_MANIFEST_INCLUDED: "true" FILTERS_ADDITIONAL: "" FIPS_ENABLED: "true" + MULTISTAGE_PARAM_OVERRIDE_INDEX_IMAGE: quay.io/redhat-user-workloads/ocp-isc-tenant/security-profiles-operator-fbc-4-16@sha256:301f6157c8f96e83fc79b8cb5aae3fdf5658266a6cace317c47af4fa7d4d062b TEST_FILTERS: ~HyperShiftMGMT&;~DEPRECATED& TEST_PARALLEL: "3" TEST_SCENARIOS: Security_Profiles_Operator|Node_Audit_Logging @@ -1539,7 +1539,7 @@ tests: - ref: openshift-extended-test - ref: openshift-extended-web-tests - ref: openshift-e2e-test-qe-report - workflow: cucushift-installer-rehearse-azure-stack-ipi-proxy + workflow: cucushift-installer-rehearse-azure-ipi - as: azure-stack-ipi-proxy-fips-f28 cluster: build01 cron: 29 11 18 * * diff --git a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13-periodics.yaml b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13-periodics.yaml index 7c633689f8e9b..13433c4c8f778 100644 --- a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13-periodics.yaml +++ b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13-periodics.yaml @@ -8919,7 +8919,7 @@ periodics: secretName: result-aggregator - agent: kubernetes cluster: build10 - cron: 33 21 22 1,3,5,7,9,11 * + cron: 17 13 18 1,3,5,7,9,11 * decorate: true decoration_config: skip_cloning: true @@ -8934,7 +8934,7 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.13" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-openshift-openshift-tests-private-release-4.13-amd64-nightly-azure-ipi-fullyprivate-proxy-f60-compliance + name: periodic-ci-openshift-openshift-tests-private-release-4.13-amd64-nightly-azure-ipi-f60-security-profiles spec: containers: - args: @@ -8944,7 +8944,7 @@ periodics: - --oauth-token-path=/usr/local/github-credentials/oauth - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=azure-ipi-fullyprivate-proxy-f60-compliance + - --target=azure-ipi-f60-security-profiles - --variant=amd64-nightly command: - ci-operator @@ -9001,7 +9001,7 @@ periodics: secretName: result-aggregator - agent: kubernetes cluster: build10 - cron: 3 14 14 1,3,5,7,9,11 * + cron: 33 21 22 1,3,5,7,9,11 * decorate: true decoration_config: skip_cloning: true @@ -9016,7 +9016,7 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.13" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-openshift-openshift-tests-private-release-4.13-amd64-nightly-azure-ipi-fullyprivate-proxy-f60-compliance-destructive + name: periodic-ci-openshift-openshift-tests-private-release-4.13-amd64-nightly-azure-ipi-fullyprivate-proxy-f60-compliance spec: containers: - args: @@ -9026,7 +9026,7 @@ periodics: - --oauth-token-path=/usr/local/github-credentials/oauth - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=azure-ipi-fullyprivate-proxy-f60-compliance-destructive + - --target=azure-ipi-fullyprivate-proxy-f60-compliance - --variant=amd64-nightly command: - ci-operator @@ -9083,7 +9083,7 @@ periodics: secretName: result-aggregator - agent: kubernetes cluster: build10 - cron: 2 17 25 1,3,5,7,9,11 * + cron: 3 14 14 1,3,5,7,9,11 * decorate: true decoration_config: skip_cloning: true @@ -9098,7 +9098,7 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.13" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-openshift-openshift-tests-private-release-4.13-amd64-nightly-azure-ipi-fullyprivate-proxy-f60-security-profiles + name: periodic-ci-openshift-openshift-tests-private-release-4.13-amd64-nightly-azure-ipi-fullyprivate-proxy-f60-compliance-destructive spec: containers: - args: @@ -9108,7 +9108,7 @@ periodics: - --oauth-token-path=/usr/local/github-credentials/oauth - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=azure-ipi-fullyprivate-proxy-f60-security-profiles + - --target=azure-ipi-fullyprivate-proxy-f60-compliance-destructive - --variant=amd64-nightly command: - ci-operator diff --git a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16-periodics.yaml b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16-periodics.yaml index 23b47779dc678..3ad0fd57b4fdc 100644 --- a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16-periodics.yaml +++ b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16-periodics.yaml @@ -15776,6 +15776,88 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build10 + cron: 41 19 5 * * + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.16 + org: openshift + repo: openshift-tests-private + labels: + ci-operator.openshift.io/cloud: azure4 + ci-operator.openshift.io/cloud-cluster-profile: azure-qe + ci-operator.openshift.io/variant: amd64-nightly + ci.openshift.io/generator: prowgen + job-release: "4.16" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-openshift-tests-private-release-4.16-amd64-nightly-azure-ipi-f28-security-profiles + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --oauth-token-path=/usr/local/github-credentials/oauth + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=azure-ipi-f28-security-profiles + - --variant=amd64-nightly + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /usr/local/github-credentials + name: github-credentials-openshift-ci-robot-private-git-cloner + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: github-credentials-openshift-ci-robot-private-git-cloner + secret: + secretName: github-credentials-openshift-ci-robot-private-git-cloner + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build10 cron: 55 16 2,16 * * @@ -17609,89 +17691,6 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator -- agent: kubernetes - cluster: build01 - cron: 56 13 26 * * - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: release-4.16 - org: openshift - repo: openshift-tests-private - labels: - ci-operator.openshift.io/cloud: azurestack - ci-operator.openshift.io/cloud-cluster-profile: azurestack-qe - ci-operator.openshift.io/cluster: build01 - ci-operator.openshift.io/variant: amd64-nightly - ci.openshift.io/generator: prowgen - job-release: "4.16" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-openshift-openshift-tests-private-release-4.16-amd64-nightly-azure-stack-ipi-proxy-fips-f28-security-profiles - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --oauth-token-path=/usr/local/github-credentials/oauth - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=azure-stack-ipi-proxy-fips-f28-security-profiles - - --variant=amd64-nightly - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /usr/local/github-credentials - name: github-credentials-openshift-ci-robot-private-git-cloner - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: github-credentials-openshift-ci-robot-private-git-cloner - secret: - secretName: github-credentials-openshift-ci-robot-private-git-cloner - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - agent: kubernetes cluster: build01 cron: 0 6 14 1,3,5,7,9,11 *