Conversation
Add job definitions using crc-cloud-ocp-4-20-1-3xl as base image Closes: OSPRH-21881
|
This change depends on a change that failed to merge. Change #693 is needed. |
|
recheck |
|
The label selected for the CRC image is listed in https://softwarefactory-project.io/zuul/t/rdoproject.org/labels. For some reason CRC fails to start. Taking openstack-k8s-operators/ci-framework#3517 as reference. |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/1def9d7ce463498599369f9d0321a444 ✔️ stf-crc-ocp_418-local_build SUCCESS in 42m 40s |
elfiesmelfie
left a comment
There was a problem hiding this comment.
Minor update for the nodeset name
|
recheck |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/3cda66a5b5df4bb290957f50ecd53773 ✔️ stf-crc-ocp_418-local_build SUCCESS in 42m 12s |
Directly use centos-9-medium-crc-cloud-ocp-4-20-1-3xl instead of defining our own nodeset https://github.com/openstack-k8s-operators/ci-framework/blob/main/zuul.d/nodeset.yaml
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/5ca8e74a661a413a9f5a4f77e1cd8db1 ✔️ stf-crc-ocp_418-local_build SUCCESS in 41m 15s |
|
recheck |
This reverts commit 7b75b19.
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/c405b24f52df4ff1a39b37dcfc476a60 ✔️ stf-crc-ocp_418-local_build SUCCESS in 42m 28s |
This reverts commit d65e61d.
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/deb25ea24b1045fdb4f71d940c4d3e67 ✔️ stf-crc-ocp_418-local_build SUCCESS in 41m 40s |
|
recheck |
1 similar comment
|
recheck |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/9c55cb37ac424dbc98b0401c9772ba54 ✔️ stf-crc-ocp_418-local_build SUCCESS in 45m 09s |
We no longer use crc extracted images, we now use crc cloud images Update the naming accordingly
|
Running only local build jobs to make it consume less resources while we figure out what is missing from the OCP 4.20 jobs. |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/fc945384f63744738328ea40794a597e ✔️ stf-crc-ocp_418-local_build SUCCESS in 41m 23s |
|
recheck |
|
Deployed an OCP 4.20.5 environment with STF using local builds (as the job currently being inspected). The environment took a bit longer than usual to come up, but all the services reconciled and got to a healthy state. In the job, though, I can see it is failing early with the following error |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/890f47b1df444870a1b0ca3112ac694c ✔️ stf-crc-ocp_418-local_build SUCCESS in 42m 54s |
|
recheck |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/cece464a722e48b7a25909810bb71a14 ✔️ stf-crc-ocp_418-local_build SUCCESS in 40m 40s |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/5e8ab5d5989f4e03b4743e980e08eed9 ✔️ stf-crc-ocp_418-nightly_bundles-index_deploy SUCCESS in 36m 59s |
a979a13 to
c620116
Compare
c620116 to
bcb5cda
Compare
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/7dad26fed0a742d7a0fda5271dbd4834 ✔️ stf-crc-ocp_418-nightly_bundles-index_deploy SUCCESS in 40m 51s |
|
recheck |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/199413edf53048329ec0da50b56db66d ✔️ stf-crc-ocp_418-nightly_bundles-index_deploy SUCCESS in 41m 10s |
|
recheck |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/c8fcc1b1640244cfbfa235753c643c8b ✔️ stf-crc-ocp_418-nightly_bundles-index_deploy SUCCESS in 37m 09s |
|
recheck |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/21e7c09852a0490d9897073ed99c9ba5 ❌ stf-crc-ocp_418-nightly_bundles-index_deploy POST_FAILURE in 39m 13s |
|
recheck |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/627652038026492bbb5c371812cda19a ❌ stf-crc-ocp_418-nightly_bundles-index_deploy POST_FAILURE in 33m 40s |
|
recheck |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/807c3439a53d40ab8ef76cc2a140eba6 ❌ stf-crc-ocp_418-nightly_bundles-index_deploy NODE_FAILURE Node request 100-0008117332 failed in 0s |
|
recheck |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/065e714c59fd404291c7b88774f3e594 ❌ stf-crc-ocp_418-local_build NODE_FAILURE Node request 100-0008118560 failed in 0s |
|
recheck |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/b5db6650b4ff4b7992e79f9361722d59 ❌ stf-crc-ocp_418-local_build NODE_FAILURE Node request 100-0008118595 failed in 0s |
|
recheck |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/c5d2403061344e81b0bfb4e267c33107 ❌ stf-crc-ocp_418-local_build NODE_FAILURE Node request 100-0008118826 failed in 0s |
|
recheck |
* Update ansible-core in CI (#662) Updates the ansible-core version to 2.17.6 to fix several vulnerabilities existing in the current version (ansible-core==2.15.9). By default, Python3.9 is available in Centos 9 Stream. Unfortunately, newer versions of ansible-core are not available for Python3.9, so this change also updates our CI to install and consume Python 3.12. Also use kubernetes.core 5.0.0 in CI, we are already building STO with this version. Related commit a2ec384 * Fix CI readme Jobs now run on OCP 4.16 and OCP 4.18. And we were missing the nighly bundles + index deploy jobs index description * Fix Ansible-Core vulnerable to content protections bypass (#664) A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks. Affected versions >= 2.17.0b1, < 2.17.7rc1 Patched version 2.17.7rc1 * Use operator-sdk v1.39.2 (#666) Using a newer operator-sdk will make dependency management a lot easier for downstream hermetic build systems, like the ones used downstream. It also lets us do away with using different versions for bundle generation and deployment in our CI. * Close stdin on workflow operator-sdk generate bundle calls An open stdin makes operator-sdk assume it's supposed to take input from stdin, when we actually want it to look at the working directory. There is no way to avoid this using command-line flags, so we need to explicitly close the stdin pipe in all calls to it. * Bundle changes for Konflux support (#669) * Use full pullspecs for related images Renovate, used by Konflux for updating dependency references, works better with full container pullspecs rather than separate repository URLs and tags. This lets us inject pullspecs pinned by digest, which don't quite follow the repo:tag syntax. * Don't set update graph metadata in CSV This was originally added for the benefit of downstream builds, but those are moving to file-based catalog fragments which don't need update graph metadata to be embedded in the bundle. * Refactor pullspec building to make it more readable * Use /tmp instead of the base_dir to fetch CSV files * Update selector to get builder-dockercfg secret name (#674) Fix the step to properly gather the builder-dockercfg secret name. This is required to correctly set up the auth when building the index image * Use sto/sgo_bundle_image_path_internal for the index (#675) sto_bundle_image_path and sg_bundle_image_path variable names are used already by some parts of the automation and there is an overlap * Refactor steps for getting bundles info for local builds * Drop when clause for "Generate default package names" step We already check the condition holds for the entire block * Bump requests from 2.32.0 to 2.32.4 in /build/stf-run-ci (#672) Bumps [requests](https://github.com/psf/requests) from 2.32.0 to 2.32.4. - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.0...v2.32.4) --- updated-dependencies: - dependency-name: requests dependency-version: 2.32.4 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Victoria Martinez de la Cruz <victoria@redhat.com> * Set permissions explicitly to actions job (#676) Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> * bundle gen: allow passing in pre-generated bundle version (#678) This improves our support for generating bundles as part of multistage container builds, as a single pre-generated bundle version can be fed into the generated bundle and into the bundle container labels. RELDEL-7554 * Use crc-cloud image for OCP 4.18 jobs (#680) coreos-crc-extracted-2-48-0-3xl is deprecated, the replacement for it is crc-cloud-ocp-4-18-1-3xl Available images are in https://review.rdoproject.org/zuul/labels * Add support for deploy from catalog Add __deploy_from_catalog and __stf_catalog_index_image_path options to stf-run-ci. This new option allows to create a CatalogSource using a pre-built index image and deploy STF from it. This is particularly useful to test package metadata issues that would be invisible when testing bundles but very apparent when installing from the actual catalog. Closes: OSPRH-19028 * Update ansible-lint-ignore and fix linting issues We had some pre-existing linting issues that reappeared when renaming create_catalog.yml to create_index_image.yml. Update ansible-lint-ignore to supress these warnings. Also fixes create_catalog.yml linting issue (missing empty line at EOF) * Update olm.maxOpenShiftVersion to 4.18 olm.maxOpenShiftVersion in STO should be 4.18 instead of 4.16 This wrongly set config is preventing STF users to easily perform upgrades to the latest OCP supported version Closes-Bug: OSPRH-18670 * [zuul] Add PR jobs to the periodic lines Since there is less development in STF now, we don't run the PR jobs as often. Running the jobs reqularly helps to find issues that crop up due to changing deps, etc and make sure the jobs still work. This change adds the jobs from the github-check pipeline into the periodic line, ensuring that they run regularly. * Use include_tasks instead of include_role * Drop name from include_tasks * Use catalogSource name and namespace for subscriptions Update setup_stf to use infrawatch_operators and namespace variables instead of hardwiring them. We have some logic that could go away now that we can select to deploy from a specific catalogsource. Precisely, infrawatch_catalog_source_manifest param. This was being used to pass a catalogsource manifest and deploy from it. * Drop "Set default InfraWatch OperatorSource manifest" This step is not longer useful since we can deploy from catalog by passing a pre-built index image or by using the default (which corresponds to the default in use here) * Clean up setup and deploy logic * Fix typo in catalog name for infrawatch_operators * Add jobs for deploy_from_catalog (#685) Add two jobs to test the deploy_from_catalog option By default, it will use the index image in https://quay.io/repository/infrawatch-operators/infrawatch-catalog Test deploying from the two latest supported OCP versions Closes: https://issues.redhat.com/browse/OSPRH-19031 * Enable all check jobs * Update ansible-lint pinned version (#688) Bump ansible-lint to 25.2.0 * Update ansible-lint-ignore with new linting issues ansible-lint 25.2.0 introduces new linting rules that we are not following. Add them to the ignore list. * Pin to ansible 12.0.0 * Fix stf-run-ci mutually exclusive deployment flags (#686) Fail when two or more of the non compatible deployment options are set. To make the check simpler, convert them to integers (where true becomes 1 and false becomes 0) and check if their sum is greater than 1. Closes-Bug: OSPRH-20165 * Use openshift-ansible-operator 4.20 in STO (#695) Partially-Closes: OSPRH-21875 * Bump the major supported OCP version for STO to OCP 4.20 (#693) * Bump the major supported OCP version for STO to OCP 4.20 * Drop OCP 4.16 from Dockerfile * Add OCP 4.20 jobs (#694) Add job definitions using crc-cloud-ocp-4-20-1-3xl as base image * Update nodesets name to stf-crc_cloud-ocpX.Y We no longer use crc extracted images, we now use crc cloud images Update the naming accordingly * Drop OCP 4.16 jobs Closes: OSPRH-21881 Closes: OSPRH-21882 * Fix typo in build/stf-run-ci/README.md (#698) --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: migarcia <migarcia@redhat.com> Co-authored-by: Emma Foley <elfiesmelfie@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Co-authored-by: Emma Foley <efoley@redhat.com> Co-authored-by: Alex Yefimov <126113326+ayefimov-1@users.noreply.github.com>
Add job definitions using crc-cloud-ocp-4-20-1-3xl as base image
Closes: OSPRH-21881