From 1df1301cb67bdb8a6259bfaea6a51b97cc926eba Mon Sep 17 00:00:00 2001 From: Patrick Dillon Date: Tue, 31 Mar 2026 10:38:26 -0400 Subject: [PATCH 1/2] Add jobs for feature promotion of AWS Dual Stack --- .../openshift-release-main__nightly-4.22.yaml | 22 + .../openshift-release-main__nightly-4.23.yaml | 22 + .../openshift-release-main__nightly-5.0.yaml | 22 + .../openshift-release-main-periodics.yaml | 504 ++++++++++++++++++ 4 files changed, 570 insertions(+) diff --git a/ci-operator/config/openshift/release/openshift-release-main__nightly-4.22.yaml b/ci-operator/config/openshift/release/openshift-release-main__nightly-4.22.yaml index 91276054dc607..09179452161eb 100644 --- a/ci-operator/config/openshift/release/openshift-release-main__nightly-4.22.yaml +++ b/ci-operator/config/openshift/release/openshift-release-main__nightly-4.22.yaml @@ -863,6 +863,28 @@ tests: enable: - observers-resource-watch workflow: openshift-e2e-aws-proxy +- as: e2e-aws-ovn-installer-dualstack-ipv4-primary-techpreview + interval: 24h + steps: + cluster_profile: openshift-org-aws + env: + FEATURE_SET: TechPreviewNoUpgrade + IP_FAMILY: DualStackIPv4Primary + observers: + enable: + - observers-resource-watch + workflow: openshift-e2e-aws +- as: e2e-aws-ovn-installer-dualstack-ipv6-primary-techpreview + interval: 24h + steps: + cluster_profile: openshift-org-aws + env: + FEATURE_SET: TechPreviewNoUpgrade + IP_FAMILY: DualStackIPv6Primary + observers: + enable: + - observers-resource-watch + workflow: openshift-e2e-aws - as: e2e-vsphere-ovn-techpreview cron: 10 8 * * 1 steps: diff --git a/ci-operator/config/openshift/release/openshift-release-main__nightly-4.23.yaml b/ci-operator/config/openshift/release/openshift-release-main__nightly-4.23.yaml index 36ed4f1c3924d..c379ebfa0c2b1 100644 --- a/ci-operator/config/openshift/release/openshift-release-main__nightly-4.23.yaml +++ b/ci-operator/config/openshift/release/openshift-release-main__nightly-4.23.yaml @@ -831,6 +831,28 @@ tests: enable: - observers-resource-watch workflow: openshift-e2e-aws-proxy +- as: e2e-aws-ovn-installer-dualstack-ipv4-primary-techpreview + interval: 24h + steps: + cluster_profile: openshift-org-aws + env: + FEATURE_SET: TechPreviewNoUpgrade + IP_FAMILY: DualStackIPv4Primary + observers: + enable: + - observers-resource-watch + workflow: openshift-e2e-aws +- as: e2e-aws-ovn-installer-dualstack-ipv6-primary-techpreview + interval: 24h + steps: + cluster_profile: openshift-org-aws + env: + FEATURE_SET: TechPreviewNoUpgrade + IP_FAMILY: DualStackIPv6Primary + observers: + enable: + - observers-resource-watch + workflow: openshift-e2e-aws - as: e2e-vsphere-ovn-techpreview cron: 10 8 * * 1 steps: diff --git a/ci-operator/config/openshift/release/openshift-release-main__nightly-5.0.yaml b/ci-operator/config/openshift/release/openshift-release-main__nightly-5.0.yaml index 8cda0aebd3fed..a8b74956ea879 100644 --- a/ci-operator/config/openshift/release/openshift-release-main__nightly-5.0.yaml +++ b/ci-operator/config/openshift/release/openshift-release-main__nightly-5.0.yaml @@ -831,6 +831,28 @@ tests: enable: - observers-resource-watch workflow: openshift-e2e-aws-proxy +- as: e2e-aws-ovn-installer-dualstack-ipv4-primary-techpreview + interval: 24h + steps: + cluster_profile: openshift-org-aws + env: + FEATURE_SET: TechPreviewNoUpgrade + IP_FAMILY: DualStackIPv4Primary + observers: + enable: + - observers-resource-watch + workflow: openshift-e2e-aws +- as: e2e-aws-ovn-installer-dualstack-ipv6-primary-techpreview + interval: 24h + steps: + cluster_profile: openshift-org-aws + env: + FEATURE_SET: TechPreviewNoUpgrade + IP_FAMILY: DualStackIPv6Primary + observers: + enable: + - observers-resource-watch + workflow: openshift-e2e-aws - as: e2e-vsphere-ovn-techpreview cron: 4 12 * * 0 steps: diff --git a/ci-operator/jobs/openshift/release/openshift-release-main-periodics.yaml b/ci-operator/jobs/openshift/release/openshift-release-main-periodics.yaml index 1fdbcf40d4592..0c296243d1d49 100644 --- a/ci-operator/jobs/openshift/release/openshift-release-main-periodics.yaml +++ b/ci-operator/jobs/openshift/release/openshift-release-main-periodics.yaml @@ -211325,6 +211325,174 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build09 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: main + org: openshift + repo: release + interval: 24h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws + ci-operator.openshift.io/variant: nightly-4.22 + ci.openshift.io/generator: prowgen + ci.openshift.io/no-builds: "true" + job-release: "4.22" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-installer-dualstack-ipv4-primary-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ovn-installer-dualstack-ipv4-primary-techpreview + - --variant=nightly-4.22 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build09 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: main + org: openshift + repo: release + interval: 24h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws + ci-operator.openshift.io/variant: nightly-4.22 + ci.openshift.io/generator: prowgen + ci.openshift.io/no-builds: "true" + job-release: "4.22" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-installer-dualstack-ipv6-primary-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ovn-installer-dualstack-ipv6-primary-techpreview + - --variant=nightly-4.22 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build09 decorate: true @@ -234488,6 +234656,174 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build09 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: main + org: openshift + repo: release + interval: 24h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws + ci-operator.openshift.io/variant: nightly-4.23 + ci.openshift.io/generator: prowgen + ci.openshift.io/no-builds: "true" + job-release: "4.23" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-release-main-nightly-4.23-e2e-aws-ovn-installer-dualstack-ipv4-primary-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ovn-installer-dualstack-ipv4-primary-techpreview + - --variant=nightly-4.23 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build09 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: main + org: openshift + repo: release + interval: 24h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws + ci-operator.openshift.io/variant: nightly-4.23 + ci.openshift.io/generator: prowgen + ci.openshift.io/no-builds: "true" + job-release: "4.23" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-release-main-nightly-4.23-e2e-aws-ovn-installer-dualstack-ipv6-primary-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ovn-installer-dualstack-ipv6-primary-techpreview + - --variant=nightly-4.23 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build09 decorate: true @@ -269387,6 +269723,174 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build09 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: main + org: openshift + repo: release + interval: 24h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws + ci-operator.openshift.io/variant: nightly-5.0 + ci.openshift.io/generator: prowgen + ci.openshift.io/no-builds: "true" + job-release: "5.0" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-installer-dualstack-ipv4-primary-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ovn-installer-dualstack-ipv4-primary-techpreview + - --variant=nightly-5.0 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator +- agent: kubernetes + cluster: build09 + decorate: true + decoration_config: + skip_cloning: true + extra_refs: + - base_ref: main + org: openshift + repo: release + interval: 24h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws + ci-operator.openshift.io/variant: nightly-5.0 + ci.openshift.io/generator: prowgen + ci.openshift.io/no-builds: "true" + job-release: "5.0" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-installer-dualstack-ipv6-primary-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-ovn-installer-dualstack-ipv6-primary-techpreview + - --variant=nightly-5.0 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build09 decorate: true From c26cf9842fbc2f9b0740f21109afe03302f65262 Mon Sep 17 00:00:00 2001 From: Patrick Dillon Date: Wed, 8 Apr 2026 10:27:40 -0400 Subject: [PATCH 2/2] AWS DualStack: skip Granular Checks The test fails because it compares the hostname to the FQDN of the node name. This is an upstream test, which is known issue and skipped in upstream tests: https://github.com/kubernetes/kubernetes/issues/121018 https://github.com/kubernetes/kubernetes/issues/123255 --- .../release/openshift-release-main__nightly-4.22.yaml | 6 ++++++ .../release/openshift-release-main__nightly-4.23.yaml | 6 ++++++ .../release/openshift-release-main__nightly-5.0.yaml | 6 ++++++ 3 files changed, 18 insertions(+) diff --git a/ci-operator/config/openshift/release/openshift-release-main__nightly-4.22.yaml b/ci-operator/config/openshift/release/openshift-release-main__nightly-4.22.yaml index 09179452161eb..88f6931fdf23d 100644 --- a/ci-operator/config/openshift/release/openshift-release-main__nightly-4.22.yaml +++ b/ci-operator/config/openshift/release/openshift-release-main__nightly-4.22.yaml @@ -870,6 +870,9 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade IP_FAMILY: DualStackIPv4Primary + TEST_SKIPS: '\[sig-network\] \[Feature:IPv6DualStack\] Granular Checks: Services + Secondary IP Family \[LinuxOnly\] should function for service endpoints using + hostNetwork' observers: enable: - observers-resource-watch @@ -881,6 +884,9 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade IP_FAMILY: DualStackIPv6Primary + TEST_SKIPS: '\[sig-network\] \[Feature:IPv6DualStack\] Granular Checks: Services + Secondary IP Family \[LinuxOnly\] should function for service endpoints using + hostNetwork' observers: enable: - observers-resource-watch diff --git a/ci-operator/config/openshift/release/openshift-release-main__nightly-4.23.yaml b/ci-operator/config/openshift/release/openshift-release-main__nightly-4.23.yaml index c379ebfa0c2b1..8626c5c212748 100644 --- a/ci-operator/config/openshift/release/openshift-release-main__nightly-4.23.yaml +++ b/ci-operator/config/openshift/release/openshift-release-main__nightly-4.23.yaml @@ -838,6 +838,9 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade IP_FAMILY: DualStackIPv4Primary + TEST_SKIPS: '\[sig-network\] \[Feature:IPv6DualStack\] Granular Checks: Services + Secondary IP Family \[LinuxOnly\] should function for service endpoints using + hostNetwork' observers: enable: - observers-resource-watch @@ -849,6 +852,9 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade IP_FAMILY: DualStackIPv6Primary + TEST_SKIPS: '\[sig-network\] \[Feature:IPv6DualStack\] Granular Checks: Services + Secondary IP Family \[LinuxOnly\] should function for service endpoints using + hostNetwork' observers: enable: - observers-resource-watch diff --git a/ci-operator/config/openshift/release/openshift-release-main__nightly-5.0.yaml b/ci-operator/config/openshift/release/openshift-release-main__nightly-5.0.yaml index a8b74956ea879..8eaf09b634485 100644 --- a/ci-operator/config/openshift/release/openshift-release-main__nightly-5.0.yaml +++ b/ci-operator/config/openshift/release/openshift-release-main__nightly-5.0.yaml @@ -838,6 +838,9 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade IP_FAMILY: DualStackIPv4Primary + TEST_SKIPS: '\[sig-network\] \[Feature:IPv6DualStack\] Granular Checks: Services + Secondary IP Family \[LinuxOnly\] should function for service endpoints using + hostNetwork' observers: enable: - observers-resource-watch @@ -849,6 +852,9 @@ tests: env: FEATURE_SET: TechPreviewNoUpgrade IP_FAMILY: DualStackIPv6Primary + TEST_SKIPS: '\[sig-network\] \[Feature:IPv6DualStack\] Granular Checks: Services + Secondary IP Family \[LinuxOnly\] should function for service endpoints using + hostNetwork' observers: enable: - observers-resource-watch