mirror-gui: add catalog-sync ci-operator variant and daily promotion

ci-operator/config/openshift/mirror-gui/openshift-mirror-gui-main__catalog-sync.yaml

@@ -0,0 +1,58 @@
+build_root:
+  project_image:
+    dockerfile_path: .ci-operator/build-root/Dockerfile
+images:
+  items:
+  - dockerfile_path: Dockerfile
+    to: mirror-gui
+releases:
+  initial:
+    integration:
+      name: "5.0"
+      namespace: ocp
+  latest:
+    integration:
+      include_built_images: true
+      name: "5.0"
+      namespace: ocp
+resources:
+  '*':
+    limits:
+      memory: 4Gi
+    requests:
+      cpu: 100m
+      memory: 200Mi
+tests:
+- as: catalog-sync-verify
+  steps:
+    test:
+    - as: catalog-sync-verify
+      commands: |
+        set -euo pipefail
+        export PULL_SECRET_PATH=/var/run/secrets/ci-pull-credentials/.dockerconfigjson
+        export CATALOG_DATA_DIR=/tmp/catalog-data
+        export MAX_PARALLEL_JOBS=3
+        cd /app
+        ./sync-catalogs.sh
+        echo "--- Verification ---"
+        cat /tmp/catalog-data/catalog-index.json
+        CATALOG_COUNT=$(jq -r 'if (.catalogs | type) == "array" then (.catalogs | length) else 0 end' /tmp/catalog-data/catalog-index.json)
+        echo "Synced catalog entries: $CATALOG_COUNT"
+        if [ "$CATALOG_COUNT" -lt 1 ]; then
+          echo "ERROR: No catalogs synced"
+          exit 1
+        fi
+      credentials:
+      - mount_path: /var/run/secrets/ci-pull-credentials
+        name: ci-pull-credentials
+        namespace: ci
+      from: mirror-gui
+      resources:
+        requests:
+          cpu: 100m
+          memory: 200Mi
+zz_generated_metadata:
+  branch: main
+  org: openshift
+  repo: mirror-gui
+  variant: catalog-sync

ci-operator/jobs/openshift/mirror-gui/openshift-mirror-gui-main-presubmits.yaml

@@ -130,6 +130,147 @@ presubmits:
         secret:
           secretName: result-aggregator
     trigger: (?m)^/test( | .* )catalog-integrity,?($|\s.*)
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^main$
+    - ^main-
+    cluster: build06
+    context: ci/prow/catalog-sync-catalog-sync-verify
+    decorate: true
+    decoration_config:
+      sparse_checkout_files:
+      - Dockerfile
+    labels:
+      ci-operator.openshift.io/variant: catalog-sync
+      ci.openshift.io/generator: prowgen
+      pj-rehearse.openshift.io/can-be-rehearsed: "true"
+    name: pull-ci-openshift-mirror-gui-main-catalog-sync-catalog-sync-verify
+    rerun_command: /test catalog-sync-catalog-sync-verify
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --lease-server-credentials-file=/etc/boskos/credentials
+        - --report-credentials-file=/etc/report/credentials
+        - --secret-dir=/secrets/ci-pull-credentials
+        - --target=catalog-sync-verify
+        - --variant=catalog-sync
+        command:
+        - ci-operator
+        env:
+        - name: HTTP_SERVER_IP
+          valueFrom:
+            fieldRef:
+              fieldPath: status.podIP
+        image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
+        imagePullPolicy: Always
+        name: ""
+        ports:
+        - containerPort: 8080
+          name: http
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /etc/boskos
+          name: boskos
+          readOnly: true
+        - mountPath: /secrets/ci-pull-credentials
+          name: ci-pull-credentials
+          readOnly: true
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /secrets/manifest-tool
+          name: manifest-tool-local-pusher
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: boskos
+        secret:
+          items:
+          - key: credentials
+            path: credentials
+          secretName: boskos-credentials
+      - name: ci-pull-credentials
+        secret:
+          secretName: ci-pull-credentials
+      - name: manifest-tool-local-pusher
+        secret:
+          secretName: manifest-tool-local-pusher
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
+    trigger: (?m)^/test( | .* )catalog-sync-catalog-sync-verify,?($|\s.*)
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^main$
+    - ^main-
+    cluster: build06
+    context: ci/prow/catalog-sync-images
+    decorate: true
+    decoration_config:
+      sparse_checkout_files:
+      - Dockerfile
+    labels:
+      ci-operator.openshift.io/variant: catalog-sync
+      ci.openshift.io/generator: prowgen
+      pj-rehearse.openshift.io/can-be-rehearsed: "true"
+    name: pull-ci-openshift-mirror-gui-main-catalog-sync-images
+    rerun_command: /test catalog-sync-images
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --report-credentials-file=/etc/report/credentials
+        - --target=[images]
+        - --variant=catalog-sync
+        command:
+        - ci-operator
+        image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /secrets/manifest-tool
+          name: manifest-tool-local-pusher
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: manifest-tool-local-pusher
+        secret:
+          secretName: manifest-tool-local-pusher
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
+    trigger: (?m)^/test( | .* )catalog-sync-images,?($|\s.*)
   - agent: kubernetes
     always_run: true
     branches: