From c3a7427442602c56d3141bd3e2005163a23edfa8 Mon Sep 17 00:00:00 2001 From: Bryce Palmer Date: Tue, 16 Jun 2026 14:21:43 -0400 Subject: [PATCH] cluster-authentication-operator: add periodic TPNU job for external oidc tests Signed-off-by: Bryce Palmer --- ...ation-operator-release-5.0__periodics.yaml | 24 +++ ...cation-operator-release-5.0-periodics.yaml | 176 ++++++++++++++++++ 2 files changed, 200 insertions(+) diff --git a/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-5.0__periodics.yaml b/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-5.0__periodics.yaml index 672dfbe96a966..47a1e543d745a 100644 --- a/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-5.0__periodics.yaml +++ b/ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-5.0__periodics.yaml @@ -46,6 +46,18 @@ tests: reverting to IntegratedOAuth TEST_SUITE: openshift/auth/external-oidc workflow: openshift-e2e-aws +- as: e2e-aws-external-oidc-configure-techpreview + interval: 168h + steps: + cluster_profile: openshift-org-aws + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWith\|\[OCPFeatureGate:ExternalOIDC\] + reverting to IntegratedOAuth + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-aws - as: e2e-azure-external-oidc-configure interval: 168h steps: @@ -145,6 +157,18 @@ tests: external IdP is configured TEST_SUITE: openshift/auth/external-oidc workflow: openshift-e2e-aws +- as: e2e-aws-external-oidc-revertoauth-techpreview + interval: 168h + steps: + cluster_profile: openshift-org-aws + env: + FEATURE_SET: TechPreviewNoUpgrade + OPENSHIFT_SKIP_EXTERNAL_TESTS: "True" + TEST_ARGS: --disable-monitor=legacy-cvo-invariants,legacy-test-framework-invariants + TEST_SKIPS: \[OCPFeatureGate:ExternalOIDCWith\|\[OCPFeatureGate:ExternalOIDC\] + external IdP is configured + TEST_SUITE: openshift/auth/external-oidc + workflow: openshift-e2e-aws - as: e2e-azure-external-oidc-revertoauth interval: 168h steps: diff --git a/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-5.0-periodics.yaml b/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-5.0-periodics.yaml index 7f607a836911b..633ae09682349 100644 --- a/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-5.0-periodics.yaml +++ b/ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-5.0-periodics.yaml @@ -87,6 +87,94 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build07 + decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile.rhel7 + extra_refs: + - base_ref: release-5.0 + org: openshift + repo: cluster-authentication-operator + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile.rhel7 + interval: 168h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "5.0" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-5.0-periodics-e2e-aws-external-oidc-configure-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-external-oidc-configure-techpreview + - --variant=periodics + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build07 decorate: true @@ -175,6 +263,94 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build07 + decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile.rhel7 + extra_refs: + - base_ref: release-5.0 + org: openshift + repo: cluster-authentication-operator + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile.rhel7 + interval: 168h + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws + ci-operator.openshift.io/variant: periodics + ci.openshift.io/generator: prowgen + job-release: "5.0" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-cluster-authentication-operator-release-5.0-periodics-e2e-aws-external-oidc-revertoauth-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-aws-external-oidc-revertoauth-techpreview + - --variant=periodics + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator - agent: kubernetes cluster: build07 decorate: true