Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -1,8 +1,3 @@
base_images:
nested-podman:
name: nested-podman
namespace: ci
tag: latest
build_root:
project_image:
dockerfile_literal: |
Expand All @@ -13,20 +8,6 @@ images:
items:
- dockerfile_path: Containerfile
to: lightspeed-agentic-sandbox
- dockerfile_literal: |
FROM nested-podman
COPY src/ /opt/app-root/src
WORKDIR /opt/app-root/src/lightspeed-agentic-sandbox
USER root
RUN dnf install -y python3.12 python3.12-pip && dnf clean all
RUN pip3.12 install --no-cache-dir uv==0.9.24
from: nested-podman
inputs:
src:
paths:
- destination_dir: src
source_path: /go/src/github.com/openshift/lightspeed-agentic-sandbox
to: e2e-podman
promotion:
to:
- namespace: ols
Expand Down Expand Up @@ -55,90 +36,6 @@ tests:
container:
from: src
skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$
- as: e2e-claude
capabilities:
- nested-podman
nested_podman: true
skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$
steps:
test:
- as: e2e
commands: |
set -euo pipefail
podman login --tls-verify=false -u unused -p "$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" "$(echo "$IMAGE" | cut -d/ -f1)"
export GOOGLE_APPLICATION_CREDENTIALS=/var/run/vertex/token
mkdir -p "${HOME}/.config/gcloud"
cp /var/run/vertex/token "${HOME}/.config/gcloud/application_default_credentials.json"
export CLAUDE_CODE_USE_VERTEX=1
export ANTHROPIC_VERTEX_PROJECT_ID="$(python3.12 -c "import json;print(json.load(open('/var/run/vertex/token'))['project_id'])")"
export E2E_ARGS="--junitxml=${ARTIFACT_DIR}/junit_e2e.xml --tb=short"
bash scripts/e2e-containers.sh claude
credentials:
- mount_path: /var/run/vertex
name: vertex-apitoken
namespace: test-credentials
dependencies:
- env: IMAGE
name: lightspeed-agentic-sandbox
from: e2e-podman
nested_podman: true
resources:
requests:
cpu: 100m
- as: e2e-gemini
capabilities:
- nested-podman
nested_podman: true
skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$
steps:
test:
- as: e2e
commands: |
set -euo pipefail
podman login --tls-verify=false -u unused -p "$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" "$(echo "$IMAGE" | cut -d/ -f1)"
export GOOGLE_APPLICATION_CREDENTIALS=/var/run/vertex/token
mkdir -p "${HOME}/.config/gcloud"
cp /var/run/vertex/token "${HOME}/.config/gcloud/application_default_credentials.json"
export E2E_ARGS="--junitxml=${ARTIFACT_DIR}/junit_e2e.xml --tb=short"
bash scripts/e2e-containers.sh gemini
credentials:
- mount_path: /var/run/vertex
name: vertex-apitoken
namespace: test-credentials
dependencies:
- env: IMAGE
name: lightspeed-agentic-sandbox
from: e2e-podman
nested_podman: true
resources:
requests:
cpu: 100m
- as: e2e-openai
capabilities:
- nested-podman
nested_podman: true
skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$
steps:
test:
- as: e2e
commands: |
set -euo pipefail
podman login --tls-verify=false -u unused -p "$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" "$(echo "$IMAGE" | cut -d/ -f1)"
export OPENAI_API_KEY="$(cat /var/run/openai/token)"
export E2E_ARGS="--junitxml=${ARTIFACT_DIR}/junit_e2e.xml --tb=short"
bash scripts/e2e-containers.sh openai
credentials:
- mount_path: /var/run/openai
name: openai-apitoken
namespace: test-credentials
dependencies:
- env: IMAGE
name: lightspeed-agentic-sandbox
from: e2e-podman
nested_podman: true
resources:
requests:
cpu: 100m
zz_generated_metadata:
branch: main
org: openshift
Expand Down
Original file line number Diff line number Diff line change
@@ -1,254 +1,5 @@
presubmits:
openshift/lightspeed-agentic-sandbox:
- agent: kubernetes
always_run: false
branches:
- ^main$
- ^main-
cluster: build06
context: ci/prow/e2e-claude
decorate: true
decoration_config:
sparse_checkout_files:
- Containerfile
labels:
capability/nested-podman: nested-podman
ci.openshift.io/generator: prowgen
pj-rehearse.openshift.io/can-be-rehearsed: "true"
name: pull-ci-openshift-lightspeed-agentic-sandbox-main-e2e-claude
rerun_command: /test e2e-claude
skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$
spec:
containers:
- args:
- --gcs-upload-secret=/secrets/gcs/service-account.json
- --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
- --lease-server-credentials-file=/etc/boskos/credentials
- --report-credentials-file=/etc/report/credentials
- --secret-dir=/secrets/ci-pull-credentials
- --target=e2e-claude
command:
- ci-operator
env:
- name: HTTP_SERVER_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
imagePullPolicy: Always
name: ""
ports:
- containerPort: 8080
name: http
resources:
requests:
cpu: 10m
volumeMounts:
- mountPath: /etc/boskos
name: boskos
readOnly: true
- mountPath: /secrets/ci-pull-credentials
name: ci-pull-credentials
readOnly: true
- mountPath: /secrets/gcs
name: gcs-credentials
readOnly: true
- mountPath: /secrets/manifest-tool
name: manifest-tool-local-pusher
readOnly: true
- mountPath: /etc/pull-secret
name: pull-secret
readOnly: true
- mountPath: /etc/report
name: result-aggregator
readOnly: true
serviceAccountName: ci-operator
volumes:
- name: boskos
secret:
items:
- key: credentials
path: credentials
secretName: boskos-credentials
- name: ci-pull-credentials
secret:
secretName: ci-pull-credentials
- name: manifest-tool-local-pusher
secret:
secretName: manifest-tool-local-pusher
- name: pull-secret
secret:
secretName: registry-pull-credentials
- name: result-aggregator
secret:
secretName: result-aggregator
trigger: (?m)^/test( | .* )e2e-claude,?($|\s.*)
- agent: kubernetes
always_run: false
branches:
- ^main$
- ^main-
cluster: build06
context: ci/prow/e2e-gemini
decorate: true
decoration_config:
sparse_checkout_files:
- Containerfile
labels:
capability/nested-podman: nested-podman
ci.openshift.io/generator: prowgen
pj-rehearse.openshift.io/can-be-rehearsed: "true"
name: pull-ci-openshift-lightspeed-agentic-sandbox-main-e2e-gemini
rerun_command: /test e2e-gemini
skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$
spec:
containers:
- args:
- --gcs-upload-secret=/secrets/gcs/service-account.json
- --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
- --lease-server-credentials-file=/etc/boskos/credentials
- --report-credentials-file=/etc/report/credentials
- --secret-dir=/secrets/ci-pull-credentials
- --target=e2e-gemini
command:
- ci-operator
env:
- name: HTTP_SERVER_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
imagePullPolicy: Always
name: ""
ports:
- containerPort: 8080
name: http
resources:
requests:
cpu: 10m
volumeMounts:
- mountPath: /etc/boskos
name: boskos
readOnly: true
- mountPath: /secrets/ci-pull-credentials
name: ci-pull-credentials
readOnly: true
- mountPath: /secrets/gcs
name: gcs-credentials
readOnly: true
- mountPath: /secrets/manifest-tool
name: manifest-tool-local-pusher
readOnly: true
- mountPath: /etc/pull-secret
name: pull-secret
readOnly: true
- mountPath: /etc/report
name: result-aggregator
readOnly: true
serviceAccountName: ci-operator
volumes:
- name: boskos
secret:
items:
- key: credentials
path: credentials
secretName: boskos-credentials
- name: ci-pull-credentials
secret:
secretName: ci-pull-credentials
- name: manifest-tool-local-pusher
secret:
secretName: manifest-tool-local-pusher
- name: pull-secret
secret:
secretName: registry-pull-credentials
- name: result-aggregator
secret:
secretName: result-aggregator
trigger: (?m)^/test( | .* )e2e-gemini,?($|\s.*)
- agent: kubernetes
always_run: false
branches:
- ^main$
- ^main-
cluster: build06
context: ci/prow/e2e-openai
decorate: true
decoration_config:
sparse_checkout_files:
- Containerfile
labels:
capability/nested-podman: nested-podman
ci.openshift.io/generator: prowgen
pj-rehearse.openshift.io/can-be-rehearsed: "true"
name: pull-ci-openshift-lightspeed-agentic-sandbox-main-e2e-openai
rerun_command: /test e2e-openai
skip_if_only_changed: ^docs/|\.md$|^\.ols/|^evals/|^(?:.*/)?(?:\.gitignore|OWNERS|LICENSE)$
spec:
containers:
- args:
- --gcs-upload-secret=/secrets/gcs/service-account.json
- --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
- --lease-server-credentials-file=/etc/boskos/credentials
- --report-credentials-file=/etc/report/credentials
- --secret-dir=/secrets/ci-pull-credentials
- --target=e2e-openai
command:
- ci-operator
env:
- name: HTTP_SERVER_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
imagePullPolicy: Always
name: ""
ports:
- containerPort: 8080
name: http
resources:
requests:
cpu: 10m
volumeMounts:
- mountPath: /etc/boskos
name: boskos
readOnly: true
- mountPath: /secrets/ci-pull-credentials
name: ci-pull-credentials
readOnly: true
- mountPath: /secrets/gcs
name: gcs-credentials
readOnly: true
- mountPath: /secrets/manifest-tool
name: manifest-tool-local-pusher
readOnly: true
- mountPath: /etc/pull-secret
name: pull-secret
readOnly: true
- mountPath: /etc/report
name: result-aggregator
readOnly: true
serviceAccountName: ci-operator
volumes:
- name: boskos
secret:
items:
- key: credentials
path: credentials
secretName: boskos-credentials
- name: ci-pull-credentials
secret:
secretName: ci-pull-credentials
- name: manifest-tool-local-pusher
secret:
secretName: manifest-tool-local-pusher
- name: pull-secret
secret:
secretName: registry-pull-credentials
- name: result-aggregator
secret:
secretName: result-aggregator
trigger: (?m)^/test( | .* )e2e-openai,?($|\s.*)
- agent: kubernetes
always_run: true
branches:
Expand Down