From f0a7178368cca75d8c2cbd5fa747edecec4dcdc1 Mon Sep 17 00:00:00 2001 From: Xiaojie Yuan Date: Tue, 10 Feb 2026 17:27:44 +0800 Subject: [PATCH 1/4] Add debug job --- ...s-private-release-4.13__amd64-nightly.yaml | 12 +- ...s-private-release-4.16__amd64-nightly.yaml | 12 +- ...-tests-private-release-4.13-periodics.yaml | 164 ++++++++--------- ...-tests-private-release-4.16-periodics.yaml | 165 +++++++++--------- 4 files changed, 177 insertions(+), 176 deletions(-) diff --git a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13__amd64-nightly.yaml b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13__amd64-nightly.yaml index 9595cb7b17049..00d33cc997f21 100644 --- a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13__amd64-nightly.yaml +++ b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13__amd64-nightly.yaml @@ -859,14 +859,16 @@ tests: - ref: openshift-extended-test - ref: openshift-e2e-test-qe-report workflow: cucushift-installer-rehearse-azure-ipi-fullyprivate-proxy -- as: azure-ipi-fullyprivate-proxy-f60-security-profiles - cron: 2 17 25 1,3,5,7,9,11 * +- as: aws-ipi-proxy-fips-f60-security-profiles + cron: 42 6 13 2,4,6,8,10,12 * steps: - cluster_profile: azure-qe + cluster_profile: aws-qe env: - BASE_DOMAIN: qe.azure.devcluster.openshift.com + BASE_DOMAIN: qe.devcluster.openshift.com CATALOG_SOURCE_NAME: security-profiles-operator FILTERS_ADDITIONAL: "" + FIPS_ENABLED: "true" + MULTISTAGE_PARAM_OVERRIDE_INDEX_IMAGE: quay.io/redhat-user-workloads/ocp-isc-tenant/security-profiles-operator-fbc-4-13@sha256:5e6ebbdbbdd2277a2d517a67e30269a6e55826c3ec75db9f10b14e247216bf1d TEST_FILTERS: ~HyperShiftMGMT&;~DEPRECATED& TEST_PARALLEL: "3" TEST_SCENARIOS: Security_Profiles_Operator|Node_Audit_Logging @@ -874,7 +876,7 @@ tests: - ref: file-integrity-konflux-catalogsource - ref: openshift-extended-test - ref: openshift-e2e-test-qe-report - workflow: cucushift-installer-rehearse-azure-ipi-fullyprivate-proxy + workflow: cucushift-installer-rehearse-aws-ipi-proxy - as: baremetalds-ipi-ovn-ipv4-fips-f60 capabilities: - intranet diff --git a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16__amd64-nightly.yaml b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16__amd64-nightly.yaml index d3d19abf0326a..1a1865073c6b8 100644 --- a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16__amd64-nightly.yaml +++ b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16__amd64-nightly.yaml @@ -1520,17 +1520,17 @@ tests: - ref: openshift-extended-web-tests - ref: openshift-e2e-test-qe-report workflow: cucushift-installer-rehearse-azure-stack-ipi-proxy -- as: azure-stack-ipi-proxy-fips-f28-security-profiles - cluster: build01 - cron: 56 13 26 * * +- as: azure-ipi-f28-security-profiles + cron: 41 19 5 * * steps: - cluster_profile: azurestack-qe + cluster_profile: azure-qe env: + BASE_DOMAIN: qe.azure.devcluster.openshift.com CATALOG_SOURCE_NAME: security-profiles-operator E2E_RUN_TAGS: '@spo' - EXTRACT_MANIFEST_INCLUDED: "true" FILTERS_ADDITIONAL: "" FIPS_ENABLED: "true" + MULTISTAGE_PARAM_OVERRIDE_INDEX_IMAGE: quay.io/redhat-user-workloads/ocp-isc-tenant/security-profiles-operator-fbc-4-16@sha256:301f6157c8f96e83fc79b8cb5aae3fdf5658266a6cace317c47af4fa7d4d062b TEST_FILTERS: ~HyperShiftMGMT&;~DEPRECATED& TEST_PARALLEL: "3" TEST_SCENARIOS: Security_Profiles_Operator|Node_Audit_Logging @@ -1539,7 +1539,7 @@ tests: - ref: openshift-extended-test - ref: openshift-extended-web-tests - ref: openshift-e2e-test-qe-report - workflow: cucushift-installer-rehearse-azure-stack-ipi-proxy + workflow: cucushift-installer-rehearse-azure-ipi - as: azure-stack-ipi-proxy-fips-f28 cluster: build01 cron: 29 11 18 * * diff --git a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13-periodics.yaml b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13-periodics.yaml index 7c633689f8e9b..4d408417510c9 100644 --- a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13-periodics.yaml +++ b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13-periodics.yaml @@ -6774,6 +6774,88 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build10 + cron: 42 6 13 2,4,6,8,10,12 * + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.13 + org: openshift + repo: openshift-tests-private + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: aws-qe + ci-operator.openshift.io/variant: amd64-nightly + ci.openshift.io/generator: prowgen + job-release: "4.13" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-openshift-tests-private-release-4.13-amd64-nightly-aws-ipi-proxy-fips-f60-security-profiles + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --oauth-token-path=/usr/local/github-credentials/oauth + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=aws-ipi-proxy-fips-f60-security-profiles + - --variant=amd64-nightly + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /usr/local/github-credentials + name: github-credentials-openshift-ci-robot-private-git-cloner + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: github-credentials-openshift-ci-robot-private-git-cloner + secret: + secretName: github-credentials-openshift-ci-robot-private-git-cloner + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build10 cron: 8 8 29 2 * @@ -9081,88 +9163,6 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator -- agent: kubernetes - cluster: build10 - cron: 2 17 25 1,3,5,7,9,11 * - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: release-4.13 - org: openshift - repo: openshift-tests-private - labels: - ci-operator.openshift.io/cloud: azure4 - ci-operator.openshift.io/cloud-cluster-profile: azure-qe - ci-operator.openshift.io/variant: amd64-nightly - ci.openshift.io/generator: prowgen - job-release: "4.13" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-openshift-openshift-tests-private-release-4.13-amd64-nightly-azure-ipi-fullyprivate-proxy-f60-security-profiles - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --oauth-token-path=/usr/local/github-credentials/oauth - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=azure-ipi-fullyprivate-proxy-f60-security-profiles - - --variant=amd64-nightly - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /usr/local/github-credentials - name: github-credentials-openshift-ci-robot-private-git-cloner - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: github-credentials-openshift-ci-robot-private-git-cloner - secret: - secretName: github-credentials-openshift-ci-robot-private-git-cloner - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - agent: kubernetes cluster: build10 cron: 8 8 29 2 * diff --git a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16-periodics.yaml b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16-periodics.yaml index 23b47779dc678..3ad0fd57b4fdc 100644 --- a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16-periodics.yaml +++ b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.16-periodics.yaml @@ -15776,6 +15776,88 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build10 + cron: 41 19 5 * * + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.16 + org: openshift + repo: openshift-tests-private + labels: + ci-operator.openshift.io/cloud: azure4 + ci-operator.openshift.io/cloud-cluster-profile: azure-qe + ci-operator.openshift.io/variant: amd64-nightly + ci.openshift.io/generator: prowgen + job-release: "4.16" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-openshift-tests-private-release-4.16-amd64-nightly-azure-ipi-f28-security-profiles + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --oauth-token-path=/usr/local/github-credentials/oauth + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=azure-ipi-f28-security-profiles + - --variant=amd64-nightly + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /usr/local/github-credentials + name: github-credentials-openshift-ci-robot-private-git-cloner + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: github-credentials-openshift-ci-robot-private-git-cloner + secret: + secretName: github-credentials-openshift-ci-robot-private-git-cloner + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build10 cron: 55 16 2,16 * * @@ -17609,89 +17691,6 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator -- agent: kubernetes - cluster: build01 - cron: 56 13 26 * * - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: release-4.16 - org: openshift - repo: openshift-tests-private - labels: - ci-operator.openshift.io/cloud: azurestack - ci-operator.openshift.io/cloud-cluster-profile: azurestack-qe - ci-operator.openshift.io/cluster: build01 - ci-operator.openshift.io/variant: amd64-nightly - ci.openshift.io/generator: prowgen - job-release: "4.16" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-openshift-openshift-tests-private-release-4.16-amd64-nightly-azure-stack-ipi-proxy-fips-f28-security-profiles - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --oauth-token-path=/usr/local/github-credentials/oauth - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=azure-stack-ipi-proxy-fips-f28-security-profiles - - --variant=amd64-nightly - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /usr/local/github-credentials - name: github-credentials-openshift-ci-robot-private-git-cloner - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: github-credentials-openshift-ci-robot-private-git-cloner - secret: - secretName: github-credentials-openshift-ci-robot-private-git-cloner - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - agent: kubernetes cluster: build01 cron: 0 6 14 1,3,5,7,9,11 * From 140f14881866250b0c23c0a3fc4576cc36c8842f Mon Sep 17 00:00:00 2001 From: Xiaojie Yuan Date: Tue, 10 Feb 2026 21:39:03 +0800 Subject: [PATCH 2/4] Update test jobs for 4.13 --- ...s-private-release-4.13__amd64-nightly.yaml | 12 +- ...-tests-private-release-4.13-periodics.yaml | 164 +++++++++--------- 2 files changed, 89 insertions(+), 87 deletions(-) diff --git a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13__amd64-nightly.yaml b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13__amd64-nightly.yaml index 00d33cc997f21..20354d9694e68 100644 --- a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13__amd64-nightly.yaml +++ b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13__amd64-nightly.yaml @@ -859,13 +859,14 @@ tests: - ref: openshift-extended-test - ref: openshift-e2e-test-qe-report workflow: cucushift-installer-rehearse-azure-ipi-fullyprivate-proxy -- as: aws-ipi-proxy-fips-f60-security-profiles - cron: 42 6 13 2,4,6,8,10,12 * +- as: azure-ipi-f60-security-profiles + cron: 17 13 18 1,3,5,7,9,11 * steps: - cluster_profile: aws-qe + cluster_profile: azure-qe env: - BASE_DOMAIN: qe.devcluster.openshift.com + BASE_DOMAIN: qe.azure.devcluster.openshift.com CATALOG_SOURCE_NAME: security-profiles-operator + E2E_RUN_TAGS: '@spo' FILTERS_ADDITIONAL: "" FIPS_ENABLED: "true" MULTISTAGE_PARAM_OVERRIDE_INDEX_IMAGE: quay.io/redhat-user-workloads/ocp-isc-tenant/security-profiles-operator-fbc-4-13@sha256:5e6ebbdbbdd2277a2d517a67e30269a6e55826c3ec75db9f10b14e247216bf1d @@ -875,8 +876,9 @@ tests: test: - ref: file-integrity-konflux-catalogsource - ref: openshift-extended-test + - ref: openshift-extended-web-tests - ref: openshift-e2e-test-qe-report - workflow: cucushift-installer-rehearse-aws-ipi-proxy + workflow: cucushift-installer-rehearse-azure-ipi - as: baremetalds-ipi-ovn-ipv4-fips-f60 capabilities: - intranet diff --git a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13-periodics.yaml b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13-periodics.yaml index 4d408417510c9..13433c4c8f778 100644 --- a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13-periodics.yaml +++ b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.13-periodics.yaml @@ -6774,88 +6774,6 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator -- agent: kubernetes - cluster: build10 - cron: 42 6 13 2,4,6,8,10,12 * - decorate: true - decoration_config: - skip_cloning: true - extra_refs: - - base_ref: release-4.13 - org: openshift - repo: openshift-tests-private - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: aws-qe - ci-operator.openshift.io/variant: amd64-nightly - ci.openshift.io/generator: prowgen - job-release: "4.13" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-openshift-openshift-tests-private-release-4.13-amd64-nightly-aws-ipi-proxy-fips-f60-security-profiles - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --oauth-token-path=/usr/local/github-credentials/oauth - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=aws-ipi-proxy-fips-f60-security-profiles - - --variant=amd64-nightly - command: - - ci-operator - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /usr/local/github-credentials - name: github-credentials-openshift-ci-robot-private-git-cloner - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: github-credentials-openshift-ci-robot-private-git-cloner - secret: - secretName: github-credentials-openshift-ci-robot-private-git-cloner - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - agent: kubernetes cluster: build10 cron: 8 8 29 2 * @@ -8999,6 +8917,88 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build10 + cron: 17 13 18 1,3,5,7,9,11 * + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: release-4.13 + org: openshift + repo: openshift-tests-private + labels: + ci-operator.openshift.io/cloud: azure4 + ci-operator.openshift.io/cloud-cluster-profile: azure-qe + ci-operator.openshift.io/variant: amd64-nightly + ci.openshift.io/generator: prowgen + job-release: "4.13" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-openshift-tests-private-release-4.13-amd64-nightly-azure-ipi-f60-security-profiles + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --oauth-token-path=/usr/local/github-credentials/oauth + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=azure-ipi-f60-security-profiles + - --variant=amd64-nightly + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /usr/local/github-credentials + name: github-credentials-openshift-ci-robot-private-git-cloner + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: github-credentials-openshift-ci-robot-private-git-cloner + secret: + secretName: github-credentials-openshift-ci-robot-private-git-cloner + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build10 cron: 33 21 22 1,3,5,7,9,11 * From 469cb52fbdbd6e538bad0cfaea1fd09dc43fe2c4 Mon Sep 17 00:00:00 2001 From: Xiaojie Yuan Date: Tue, 10 Feb 2026 21:45:46 +0800 Subject: [PATCH 3/4] Update index image for 4.12 --- ...hift-openshift-tests-private-release-4.12__amd64-nightly.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.12__amd64-nightly.yaml b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.12__amd64-nightly.yaml index 8134f240d4133..c98bee893a90e 100644 --- a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.12__amd64-nightly.yaml +++ b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.12__amd64-nightly.yaml @@ -614,6 +614,7 @@ tests: CATALOG_SOURCE_NAME: security-profiles-operator FILTERS_ADDITIONAL: "" FIPS_ENABLED: "true" + MULTISTAGE_PARAM_OVERRIDE_INDEX_IMAGE: security-profiles-operator-fbc-4-12-20260210-130805-000 - quay.io/redhat-user-workloads/ocp-isc-tenant/security-profiles-operator-fbc-4-12@sha256:a2b92d70d0fb3ec8e43260cc68b7e00b7c389c6694fc84f222c8374fbbc715df TEST_FILTERS: ~HyperShiftMGMT&;~DEPRECATED& TEST_PARALLEL: "3" TEST_SCENARIOS: Security_Profiles_Operator|Node_Audit_Logging From 4719f644a34e0e39e2061946004d46ef8ca96ffd Mon Sep 17 00:00:00 2001 From: Xiaojie Yuan Date: Tue, 10 Feb 2026 21:53:33 +0800 Subject: [PATCH 4/4] update --- ...ift-openshift-tests-private-release-4.12__amd64-nightly.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.12__amd64-nightly.yaml b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.12__amd64-nightly.yaml index c98bee893a90e..bc5aa27c089e0 100644 --- a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.12__amd64-nightly.yaml +++ b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.12__amd64-nightly.yaml @@ -614,7 +614,7 @@ tests: CATALOG_SOURCE_NAME: security-profiles-operator FILTERS_ADDITIONAL: "" FIPS_ENABLED: "true" - MULTISTAGE_PARAM_OVERRIDE_INDEX_IMAGE: security-profiles-operator-fbc-4-12-20260210-130805-000 - quay.io/redhat-user-workloads/ocp-isc-tenant/security-profiles-operator-fbc-4-12@sha256:a2b92d70d0fb3ec8e43260cc68b7e00b7c389c6694fc84f222c8374fbbc715df + MULTISTAGE_PARAM_OVERRIDE_INDEX_IMAGE: quay.io/redhat-user-workloads/ocp-isc-tenant/security-profiles-operator-fbc-4-12@sha256:a2b92d70d0fb3ec8e43260cc68b7e00b7c389c6694fc84f222c8374fbbc715df TEST_FILTERS: ~HyperShiftMGMT&;~DEPRECATED& TEST_PARALLEL: "3" TEST_SCENARIOS: Security_Profiles_Operator|Node_Audit_Logging