From 2c8de2a973c662626fc06625831ac42249e425cc Mon Sep 17 00:00:00 2001 From: Daniel Fajmon Date: Wed, 29 Jul 2026 16:47:19 +0200 Subject: [PATCH] STOR-3001: add TLS scanner for vsphere problem detector move the tls scanner to cso repo as we need it there for testing --- ...enshift-cluster-storage-operator-main.yaml | 19 +++++ ...cluster-storage-operator-release-4.23.yaml | 19 +++++ ...-cluster-storage-operator-release-5.0.yaml | 19 +++++ ...-cluster-storage-operator-release-5.1.yaml | 19 +++++ ...enshift-vsphere-problem-detector-main.yaml | 19 ----- ...vsphere-problem-detector-release-4.23.yaml | 19 ----- ...-vsphere-problem-detector-release-5.0.yaml | 19 ----- ...-vsphere-problem-detector-release-5.1.yaml | 19 ----- ...ster-storage-operator-main-presubmits.yaml | 85 +++++++++++++++++++ ...rage-operator-release-4.23-presubmits.yaml | 85 +++++++++++++++++++ ...orage-operator-release-5.0-presubmits.yaml | 85 +++++++++++++++++++ ...orage-operator-release-5.1-presubmits.yaml | 85 +++++++++++++++++++ ...here-problem-detector-main-presubmits.yaml | 85 ------------------- ...blem-detector-release-4.23-presubmits.yaml | 85 ------------------- ...oblem-detector-release-5.0-presubmits.yaml | 85 ------------------- ...oblem-detector-release-5.1-presubmits.yaml | 85 ------------------- 16 files changed, 416 insertions(+), 416 deletions(-) diff --git a/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-main.yaml b/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-main.yaml index 8da77bb9229ea..8e7a81e783d60 100644 --- a/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-main.yaml +++ b/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-main.yaml @@ -7,6 +7,10 @@ base_images: name: hypershift-tests namespace: hypershift tag: latest + tls-scanner-tool: + name: tls-scanner + namespace: tls-scanner + tag: tls-scanner-tool build_root: from_repository: true images: @@ -218,6 +222,21 @@ tests: ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" HYPERSHIFT_AZURE_LOCATION: eastus workflow: hypershift-azure-aks-e2e +- always_run: false + as: tls-scanner-vsphere-problem-detector + optional: true + steps: + cluster_profile: vsphere-elastic + env: + SCAN_NAMESPACE: openshift-cluster-storage-operator + SCANNER_CPU: "1" + SCANNER_MEMORY: 1Gi + TLS_13_ENABLE_TLS_ADHERENCE: "true" + TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents + test: + - ref: tls-13 + - ref: tls-scanner-run + workflow: ipi-vsphere zz_generated_metadata: branch: main org: openshift diff --git a/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-4.23.yaml b/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-4.23.yaml index 725ec70fac6a1..e8de136fa18d8 100644 --- a/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-4.23.yaml +++ b/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-4.23.yaml @@ -7,6 +7,10 @@ base_images: name: hypershift-tests namespace: hypershift tag: latest + tls-scanner-tool: + name: tls-scanner + namespace: tls-scanner + tag: tls-scanner-tool build_root: from_repository: true images: @@ -218,6 +222,21 @@ tests: ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" HYPERSHIFT_AZURE_LOCATION: eastus workflow: hypershift-azure-aks-e2e +- always_run: false + as: tls-scanner-vsphere-problem-detector + optional: true + steps: + cluster_profile: vsphere-elastic + env: + SCAN_NAMESPACE: openshift-cluster-storage-operator + SCANNER_CPU: "1" + SCANNER_MEMORY: 1Gi + TLS_13_ENABLE_TLS_ADHERENCE: "true" + TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents + test: + - ref: tls-13 + - ref: tls-scanner-run + workflow: ipi-vsphere zz_generated_metadata: branch: release-4.23 org: openshift diff --git a/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.0.yaml b/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.0.yaml index 06de6717663dc..e2c212908be4d 100644 --- a/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.0.yaml +++ b/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.0.yaml @@ -7,6 +7,10 @@ base_images: name: hypershift-tests namespace: hypershift tag: latest + tls-scanner-tool: + name: tls-scanner + namespace: tls-scanner + tag: tls-scanner-tool build_root: from_repository: true images: @@ -219,6 +223,21 @@ tests: ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" HYPERSHIFT_AZURE_LOCATION: eastus workflow: hypershift-azure-aks-e2e +- always_run: false + as: tls-scanner-vsphere-problem-detector + optional: true + steps: + cluster_profile: vsphere-elastic + env: + SCAN_NAMESPACE: openshift-cluster-storage-operator + SCANNER_CPU: "1" + SCANNER_MEMORY: 1Gi + TLS_13_ENABLE_TLS_ADHERENCE: "true" + TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents + test: + - ref: tls-13 + - ref: tls-scanner-run + workflow: ipi-vsphere zz_generated_metadata: branch: release-5.0 org: openshift diff --git a/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.1.yaml b/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.1.yaml index 09645bbd0ed9e..5f0b486f4afa1 100644 --- a/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.1.yaml +++ b/ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.1.yaml @@ -7,6 +7,10 @@ base_images: name: hypershift-tests namespace: hypershift tag: latest + tls-scanner-tool: + name: tls-scanner + namespace: tls-scanner + tag: tls-scanner-tool build_root: from_repository: true images: @@ -218,6 +222,21 @@ tests: ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true" HYPERSHIFT_AZURE_LOCATION: eastus workflow: hypershift-azure-aks-e2e +- always_run: false + as: tls-scanner-vsphere-problem-detector + optional: true + steps: + cluster_profile: vsphere-elastic + env: + SCAN_NAMESPACE: openshift-cluster-storage-operator + SCANNER_CPU: "1" + SCANNER_MEMORY: 1Gi + TLS_13_ENABLE_TLS_ADHERENCE: "true" + TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents + test: + - ref: tls-13 + - ref: tls-scanner-run + workflow: ipi-vsphere zz_generated_metadata: branch: release-5.1 org: openshift diff --git a/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-main.yaml b/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-main.yaml index 4d701c2554728..693bea8fdb72b 100644 --- a/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-main.yaml +++ b/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-main.yaml @@ -7,10 +7,6 @@ base_images: name: tests-private namespace: ci tag: "4.22" - tls-scanner-tool: - name: tls-scanner - namespace: tls-scanner - tag: tls-scanner-tool binary_build_commands: make build_root: from_repository: true @@ -84,21 +80,6 @@ tests: env: PROJECT_NAME: vsphere-problem-detector workflow: openshift-ci-security -- always_run: false - as: tls-scanner-vsphere-problem-detector - optional: true - steps: - cluster_profile: vsphere-elastic - env: - SCAN_NAMESPACE: openshift-cluster-storage-operator - SCANNER_CPU: "1" - SCANNER_MEMORY: 1Gi - TLS_13_ENABLE_TLS_ADHERENCE: "true" - TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents - test: - - ref: tls-13 - - ref: tls-scanner-run - workflow: ipi-vsphere zz_generated_metadata: branch: main org: openshift diff --git a/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-4.23.yaml b/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-4.23.yaml index 55bda7b55e490..90c63d15b28c6 100644 --- a/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-4.23.yaml +++ b/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-4.23.yaml @@ -7,10 +7,6 @@ base_images: name: tests-private namespace: ci tag: "4.22" - tls-scanner-tool: - name: tls-scanner - namespace: tls-scanner - tag: tls-scanner-tool binary_build_commands: make build_root: from_repository: true @@ -84,21 +80,6 @@ tests: env: PROJECT_NAME: vsphere-problem-detector workflow: openshift-ci-security -- always_run: false - as: tls-scanner-vsphere-problem-detector - optional: true - steps: - cluster_profile: vsphere-elastic - env: - SCAN_NAMESPACE: openshift-cluster-storage-operator - SCANNER_CPU: "1" - SCANNER_MEMORY: 1Gi - TLS_13_ENABLE_TLS_ADHERENCE: "true" - TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents - test: - - ref: tls-13 - - ref: tls-scanner-run - workflow: ipi-vsphere zz_generated_metadata: branch: release-4.23 org: openshift diff --git a/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.0.yaml b/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.0.yaml index 32e3792e3d3e9..c491c51caa14a 100644 --- a/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.0.yaml +++ b/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.0.yaml @@ -7,10 +7,6 @@ base_images: name: tests-private namespace: ci tag: "4.22" - tls-scanner-tool: - name: tls-scanner - namespace: tls-scanner - tag: tls-scanner-tool binary_build_commands: make build_root: from_repository: true @@ -85,21 +81,6 @@ tests: env: PROJECT_NAME: vsphere-problem-detector workflow: openshift-ci-security -- always_run: false - as: tls-scanner-vsphere-problem-detector - optional: true - steps: - cluster_profile: vsphere-elastic - env: - SCAN_NAMESPACE: openshift-cluster-storage-operator - SCANNER_CPU: "1" - SCANNER_MEMORY: 1Gi - TLS_13_ENABLE_TLS_ADHERENCE: "true" - TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents - test: - - ref: tls-13 - - ref: tls-scanner-run - workflow: ipi-vsphere zz_generated_metadata: branch: release-5.0 org: openshift diff --git a/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.1.yaml b/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.1.yaml index c0cb4c749f3fc..83eb706ff319d 100644 --- a/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.1.yaml +++ b/ci-operator/config/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.1.yaml @@ -7,10 +7,6 @@ base_images: name: tests-private namespace: ci tag: "4.22" - tls-scanner-tool: - name: tls-scanner - namespace: tls-scanner - tag: tls-scanner-tool binary_build_commands: make build_root: from_repository: true @@ -84,21 +80,6 @@ tests: env: PROJECT_NAME: vsphere-problem-detector workflow: openshift-ci-security -- always_run: false - as: tls-scanner-vsphere-problem-detector - optional: true - steps: - cluster_profile: vsphere-elastic - env: - SCAN_NAMESPACE: openshift-cluster-storage-operator - SCANNER_CPU: "1" - SCANNER_MEMORY: 1Gi - TLS_13_ENABLE_TLS_ADHERENCE: "true" - TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents - test: - - ref: tls-13 - - ref: tls-scanner-run - workflow: ipi-vsphere zz_generated_metadata: branch: release-5.1 org: openshift diff --git a/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-main-presubmits.yaml b/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-main-presubmits.yaml index a49103da52010..a3d06659cfa8f 100644 --- a/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-main-presubmits.yaml +++ b/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-main-presubmits.yaml @@ -2064,6 +2064,91 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )security,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: vsphere02 + context: ci/prow/tls-scanner-vsphere-problem-detector + decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile + labels: + ci-operator.openshift.io/cloud: vsphere + ci-operator.openshift.io/cloud-cluster-profile: vsphere-elastic + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-cluster-storage-operator-main-tls-scanner-vsphere-problem-detector + optional: true + rerun_command: /test tls-scanner-vsphere-problem-detector + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=tls-scanner-vsphere-problem-detector + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )tls-scanner-vsphere-problem-detector,?($|\s.*) - agent: kubernetes always_run: true branches: diff --git a/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-4.23-presubmits.yaml b/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-4.23-presubmits.yaml index 0d50e50328be3..f66a7b37aafb7 100644 --- a/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-4.23-presubmits.yaml +++ b/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-4.23-presubmits.yaml @@ -1919,6 +1919,91 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )security,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^release-4\.23$ + - ^release-4\.23- + cluster: vsphere02 + context: ci/prow/tls-scanner-vsphere-problem-detector + decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile + labels: + ci-operator.openshift.io/cloud: vsphere + ci-operator.openshift.io/cloud-cluster-profile: vsphere-elastic + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-cluster-storage-operator-release-4.23-tls-scanner-vsphere-problem-detector + optional: true + rerun_command: /test tls-scanner-vsphere-problem-detector + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=tls-scanner-vsphere-problem-detector + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )tls-scanner-vsphere-problem-detector,?($|\s.*) - agent: kubernetes always_run: true branches: diff --git a/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.0-presubmits.yaml b/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.0-presubmits.yaml index b99e615036efe..81f6c1d8693ae 100644 --- a/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.0-presubmits.yaml +++ b/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.0-presubmits.yaml @@ -1918,6 +1918,91 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )security,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^release-5\.0$ + - ^release-5\.0- + cluster: vsphere02 + context: ci/prow/tls-scanner-vsphere-problem-detector + decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile + labels: + ci-operator.openshift.io/cloud: vsphere + ci-operator.openshift.io/cloud-cluster-profile: vsphere-elastic + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-cluster-storage-operator-release-5.0-tls-scanner-vsphere-problem-detector + optional: true + rerun_command: /test tls-scanner-vsphere-problem-detector + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=tls-scanner-vsphere-problem-detector + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )tls-scanner-vsphere-problem-detector,?($|\s.*) - agent: kubernetes always_run: true branches: diff --git a/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.1-presubmits.yaml b/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.1-presubmits.yaml index 93cd5b11dffa0..25d994256387e 100644 --- a/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.1-presubmits.yaml +++ b/ci-operator/jobs/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.1-presubmits.yaml @@ -1919,6 +1919,91 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )security,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^release-5\.1$ + - ^release-5\.1- + cluster: vsphere02 + context: ci/prow/tls-scanner-vsphere-problem-detector + decorate: true + decoration_config: + sparse_checkout_files: + - .ci-operator.yaml + - Dockerfile + labels: + ci-operator.openshift.io/cloud: vsphere + ci-operator.openshift.io/cloud-cluster-profile: vsphere-elastic + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-cluster-storage-operator-release-5.1-tls-scanner-vsphere-problem-detector + optional: true + rerun_command: /test tls-scanner-vsphere-problem-detector + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=tls-scanner-vsphere-problem-detector + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )tls-scanner-vsphere-problem-detector,?($|\s.*) - agent: kubernetes always_run: true branches: diff --git a/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-main-presubmits.yaml b/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-main-presubmits.yaml index 40300cff08fbb..d96d949896f7a 100644 --- a/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-main-presubmits.yaml +++ b/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-main-presubmits.yaml @@ -625,91 +625,6 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )security,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: vsphere02 - context: ci/prow/tls-scanner-vsphere-problem-detector - decorate: true - decoration_config: - sparse_checkout_files: - - .ci-operator.yaml - - Dockerfile - labels: - ci-operator.openshift.io/cloud: vsphere - ci-operator.openshift.io/cloud-cluster-profile: vsphere-elastic - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-vsphere-problem-detector-main-tls-scanner-vsphere-problem-detector - optional: true - rerun_command: /test tls-scanner-vsphere-problem-detector - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=tls-scanner-vsphere-problem-detector - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )tls-scanner-vsphere-problem-detector,?($|\s.*) - agent: kubernetes always_run: true branches: diff --git a/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-4.23-presubmits.yaml b/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-4.23-presubmits.yaml index 3aaa77d348af4..f5a21a5fc20aa 100644 --- a/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-4.23-presubmits.yaml +++ b/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-4.23-presubmits.yaml @@ -480,91 +480,6 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )security,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^release-4\.23$ - - ^release-4\.23- - cluster: vsphere02 - context: ci/prow/tls-scanner-vsphere-problem-detector - decorate: true - decoration_config: - sparse_checkout_files: - - .ci-operator.yaml - - Dockerfile - labels: - ci-operator.openshift.io/cloud: vsphere - ci-operator.openshift.io/cloud-cluster-profile: vsphere-elastic - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-vsphere-problem-detector-release-4.23-tls-scanner-vsphere-problem-detector - optional: true - rerun_command: /test tls-scanner-vsphere-problem-detector - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=tls-scanner-vsphere-problem-detector - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )tls-scanner-vsphere-problem-detector,?($|\s.*) - agent: kubernetes always_run: true branches: diff --git a/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.0-presubmits.yaml b/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.0-presubmits.yaml index 284b1e85e3c1b..9aa3f1b26ea3c 100644 --- a/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.0-presubmits.yaml +++ b/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.0-presubmits.yaml @@ -479,91 +479,6 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )security,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^release-5\.0$ - - ^release-5\.0- - cluster: vsphere02 - context: ci/prow/tls-scanner-vsphere-problem-detector - decorate: true - decoration_config: - sparse_checkout_files: - - .ci-operator.yaml - - Dockerfile - labels: - ci-operator.openshift.io/cloud: vsphere - ci-operator.openshift.io/cloud-cluster-profile: vsphere-elastic - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-vsphere-problem-detector-release-5.0-tls-scanner-vsphere-problem-detector - optional: true - rerun_command: /test tls-scanner-vsphere-problem-detector - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=tls-scanner-vsphere-problem-detector - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )tls-scanner-vsphere-problem-detector,?($|\s.*) - agent: kubernetes always_run: true branches: diff --git a/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.1-presubmits.yaml b/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.1-presubmits.yaml index ef32af8d59185..0f658f277a2f3 100644 --- a/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.1-presubmits.yaml +++ b/ci-operator/jobs/openshift/vsphere-problem-detector/openshift-vsphere-problem-detector-release-5.1-presubmits.yaml @@ -480,91 +480,6 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )security,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^release-5\.1$ - - ^release-5\.1- - cluster: vsphere02 - context: ci/prow/tls-scanner-vsphere-problem-detector - decorate: true - decoration_config: - sparse_checkout_files: - - .ci-operator.yaml - - Dockerfile - labels: - ci-operator.openshift.io/cloud: vsphere - ci-operator.openshift.io/cloud-cluster-profile: vsphere-elastic - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-vsphere-problem-detector-release-5.1-tls-scanner-vsphere-problem-detector - optional: true - rerun_command: /test tls-scanner-vsphere-problem-detector - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=tls-scanner-vsphere-problem-detector - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )tls-scanner-vsphere-problem-detector,?($|\s.*) - agent: kubernetes always_run: true branches: