diff --git a/ci-operator/config/openshift/lightspeed-agentic-sandbox/openshift-lightspeed-agentic-sandbox-main.yaml b/ci-operator/config/openshift/lightspeed-agentic-sandbox/openshift-lightspeed-agentic-sandbox-main.yaml index 8aba6be827909..8f6dc9a073da2 100644 --- a/ci-operator/config/openshift/lightspeed-agentic-sandbox/openshift-lightspeed-agentic-sandbox-main.yaml +++ b/ci-operator/config/openshift/lightspeed-agentic-sandbox/openshift-lightspeed-agentic-sandbox-main.yaml @@ -1,8 +1,3 @@ -base_images: - nested-podman: - name: nested-podman - namespace: ci - tag: latest build_root: project_image: dockerfile_literal: | @@ -13,20 +8,6 @@ images: items: - dockerfile_path: Containerfile to: lightspeed-agentic-sandbox - - dockerfile_literal: | - FROM nested-podman - COPY src/ /opt/app-root/src - WORKDIR /opt/app-root/src/lightspeed-agentic-sandbox - USER root - RUN dnf install -y python3.12 python3.12-pip && dnf clean all - RUN pip3.12 install --no-cache-dir uv==0.9.24 - from: nested-podman - inputs: - src: - paths: - - destination_dir: src - source_path: /go/src/github.com/openshift/lightspeed-agentic-sandbox - to: e2e-podman promotion: to: - namespace: ols @@ -55,90 +36,6 @@ tests: container: from: src skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$ -- as: e2e-claude - capabilities: - - nested-podman - nested_podman: true - skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$ - steps: - test: - - as: e2e - commands: | - set -euo pipefail - podman login --tls-verify=false -u unused -p "$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" "$(echo "$IMAGE" | cut -d/ -f1)" - export GOOGLE_APPLICATION_CREDENTIALS=/var/run/vertex/token - mkdir -p "${HOME}/.config/gcloud" - cp /var/run/vertex/token "${HOME}/.config/gcloud/application_default_credentials.json" - export CLAUDE_CODE_USE_VERTEX=1 - export ANTHROPIC_VERTEX_PROJECT_ID="$(python3.12 -c "import json;print(json.load(open('/var/run/vertex/token'))['project_id'])")" - export E2E_ARGS="--junitxml=${ARTIFACT_DIR}/junit_e2e.xml --tb=short" - bash scripts/e2e-containers.sh claude - credentials: - - mount_path: /var/run/vertex - name: vertex-apitoken - namespace: test-credentials - dependencies: - - env: IMAGE - name: lightspeed-agentic-sandbox - from: e2e-podman - nested_podman: true - resources: - requests: - cpu: 100m -- as: e2e-gemini - capabilities: - - nested-podman - nested_podman: true - skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$ - steps: - test: - - as: e2e - commands: | - set -euo pipefail - podman login --tls-verify=false -u unused -p "$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" "$(echo "$IMAGE" | cut -d/ -f1)" - export GOOGLE_APPLICATION_CREDENTIALS=/var/run/vertex/token - mkdir -p "${HOME}/.config/gcloud" - cp /var/run/vertex/token "${HOME}/.config/gcloud/application_default_credentials.json" - export E2E_ARGS="--junitxml=${ARTIFACT_DIR}/junit_e2e.xml --tb=short" - bash scripts/e2e-containers.sh gemini - credentials: - - mount_path: /var/run/vertex - name: vertex-apitoken - namespace: test-credentials - dependencies: - - env: IMAGE - name: lightspeed-agentic-sandbox - from: e2e-podman - nested_podman: true - resources: - requests: - cpu: 100m -- as: e2e-openai - capabilities: - - nested-podman - nested_podman: true - skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$ - steps: - test: - - as: e2e - commands: | - set -euo pipefail - podman login --tls-verify=false -u unused -p "$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" "$(echo "$IMAGE" | cut -d/ -f1)" - export OPENAI_API_KEY="$(cat /var/run/openai/token)" - export E2E_ARGS="--junitxml=${ARTIFACT_DIR}/junit_e2e.xml --tb=short" - bash scripts/e2e-containers.sh openai - credentials: - - mount_path: /var/run/openai - name: openai-apitoken - namespace: test-credentials - dependencies: - - env: IMAGE - name: lightspeed-agentic-sandbox - from: e2e-podman - nested_podman: true - resources: - requests: - cpu: 100m zz_generated_metadata: branch: main org: openshift diff --git a/ci-operator/jobs/openshift/lightspeed-agentic-sandbox/openshift-lightspeed-agentic-sandbox-main-presubmits.yaml b/ci-operator/jobs/openshift/lightspeed-agentic-sandbox/openshift-lightspeed-agentic-sandbox-main-presubmits.yaml index 321994e12c9e2..cece3dc25d72e 100644 --- a/ci-operator/jobs/openshift/lightspeed-agentic-sandbox/openshift-lightspeed-agentic-sandbox-main-presubmits.yaml +++ b/ci-operator/jobs/openshift/lightspeed-agentic-sandbox/openshift-lightspeed-agentic-sandbox-main-presubmits.yaml @@ -1,254 +1,5 @@ presubmits: openshift/lightspeed-agentic-sandbox: - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build06 - context: ci/prow/e2e-claude - decorate: true - decoration_config: - sparse_checkout_files: - - Containerfile - labels: - capability/nested-podman: nested-podman - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-lightspeed-agentic-sandbox-main-e2e-claude - rerun_command: /test e2e-claude - skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$ - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-claude - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )e2e-claude,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build06 - context: ci/prow/e2e-gemini - decorate: true - decoration_config: - sparse_checkout_files: - - Containerfile - labels: - capability/nested-podman: nested-podman - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-lightspeed-agentic-sandbox-main-e2e-gemini - rerun_command: /test e2e-gemini - skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$ - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-gemini - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )e2e-gemini,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build06 - context: ci/prow/e2e-openai - decorate: true - decoration_config: - sparse_checkout_files: - - Containerfile - labels: - capability/nested-podman: nested-podman - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-lightspeed-agentic-sandbox-main-e2e-openai - rerun_command: /test e2e-openai - skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$ - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=e2e-openai - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )e2e-openai,?($|\s.*) - agent: kubernetes always_run: true branches: