From 98d84981a2109611f25854e228de8280c126ef4a Mon Sep 17 00:00:00 2001 From: Francisco Herrera Date: Fri, 3 Jul 2026 16:01:37 +0200 Subject: [PATCH] Istio: restructure Istio midstream fork jobs Signed-off-by: Francisco Herrera --- .../openshift-service-mesh-istio-master.yaml | 167 +++++--- ...shift-service-mesh-istio-release-1.24.yaml | 70 +--- ...shift-service-mesh-istio-release-1.26.yaml | 86 +--- ...shift-service-mesh-istio-release-1.27.yaml | 86 +--- ...shift-service-mesh-istio-release-1.28.yaml | 110 +---- ...shift-service-mesh-istio-release-1.30.yaml | 110 +---- ...service-mesh-istio-master-postsubmits.yaml | 392 ++++++++++++++++++ ...-service-mesh-istio-master-presubmits.yaml | 163 +++----- ...ce-mesh-istio-release-1.24-presubmits.yaml | 161 +------ ...ce-mesh-istio-release-1.26-presubmits.yaml | 102 +---- ...ce-mesh-istio-release-1.27-presubmits.yaml | 102 +---- ...ce-mesh-istio-release-1.28-presubmits.yaml | 184 +------- ...ce-mesh-istio-release-1.30-presubmits.yaml | 184 +------- core-services/pipeline-controller/config.yaml | 10 + 14 files changed, 698 insertions(+), 1229 deletions(-) create mode 100644 ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-master-postsubmits.yaml diff --git a/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-master.yaml b/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-master.yaml index b62cc48f458ff..664c9f4cd95d8 100644 --- a/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-master.yaml +++ b/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-master.yaml @@ -66,73 +66,27 @@ tests: XDG_CACHE_HOME="/tmp/cache" container: from: src -- as: unit-and-gencheck +- as: istio-integration-pilot + postsubmit: true steps: cluster_profile: ossm-aws env: BASE_DOMAIN: servicemesh.devcluster.openshift.com + INSTALLATION_METHOD: helm MAISTRA_BUILDER_IMAGE: quay-proxy.ci.openshift.org/openshift/ci:ci_maistra-builder_upstream-master MAISTRA_NAMESPACE: maistra-e2e-test MAISTRA_SC_POD: maistra-e2e-test-sc-pod + REPORT_TO_REPORT_PORTAL: "true" + TEST_FILE_NAME: junit.xml + TEST_SUITE: pilot + TEST_SUITE_DESC: Istio Integration pilot test: - - as: copy-src - cli: latest - commands: | - # SRC_PATH does end with /. : the content of the source directory is copied into dest directory - oc cp ./. "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":/work/ - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 20m0s - - as: gencheck - cli: latest - commands: | - oc rsh -n "${MAISTRA_NAMESPACE}" "${MAISTRA_SC_POD}" \ - bash -c "\ - export BUILD_WITH_CONTAINER=0 && \ - export GOBIN='/gobin' && \ - export GOCACHE='/tmp/cache' && \ - export GOMODCACHE='/tmp/cache' && \ - export XDG_CACHE_HOME='/tmp/cache' && \ - export ARTIFACTS='${ARTIFACT_DIR}' && \ - cd /work && \ - entrypoint \ - make gen-check" - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 1h0m0s - - as: unit - cli: latest - commands: | - oc rsh -n "${MAISTRA_NAMESPACE}" "${MAISTRA_SC_POD}" \ - bash -c "\ - export BUILD_WITH_CONTAINER=0 && \ - cd /work && \ - entrypoint \ - make -e T=-v build racetest binaries-test" - oc cp "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":"${ARTIFACT_DIR}"/. "${ARTIFACT_DIR}" - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 3h0m0s + - ref: servicemesh-sail-operator-copy-src + - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-hypershift -- as: istio-integration-pilot +- always_run: false + as: istio-integration-pilot-retest + optional: true steps: cluster_profile: ossm-aws env: @@ -150,6 +104,26 @@ tests: - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-hypershift - as: istio-integration-telemetry + postsubmit: true + steps: + cluster_profile: ossm-aws + env: + BASE_DOMAIN: servicemesh.devcluster.openshift.com + INSTALLATION_METHOD: helm + MAISTRA_BUILDER_IMAGE: quay-proxy.ci.openshift.org/openshift/ci:ci_maistra-builder_upstream-master + MAISTRA_NAMESPACE: maistra-e2e-test + MAISTRA_SC_POD: maistra-e2e-test-sc-pod + REPORT_TO_REPORT_PORTAL: "true" + TEST_FILE_NAME: junit.xml + TEST_SUITE: telemetry + TEST_SUITE_DESC: Istio Integration telemetry + test: + - ref: servicemesh-sail-operator-copy-src + - ref: servicemesh-istio-int-tests + workflow: servicemesh-istio-e2e-hypershift +- always_run: false + as: istio-integration-telemetry-retest + optional: true steps: cluster_profile: ossm-aws env: @@ -167,6 +141,26 @@ tests: - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-hypershift - as: istio-integration-security + postsubmit: true + steps: + cluster_profile: ossm-aws + env: + BASE_DOMAIN: servicemesh.devcluster.openshift.com + INSTALLATION_METHOD: helm + MAISTRA_BUILDER_IMAGE: quay-proxy.ci.openshift.org/openshift/ci:ci_maistra-builder_upstream-master + MAISTRA_NAMESPACE: maistra-e2e-test + MAISTRA_SC_POD: maistra-e2e-test-sc-pod + REPORT_TO_REPORT_PORTAL: "true" + TEST_FILE_NAME: junit.xml + TEST_SUITE: security + TEST_SUITE_DESC: Istio Integration security + test: + - ref: servicemesh-sail-operator-copy-src + - ref: servicemesh-istio-int-tests + workflow: servicemesh-istio-e2e-hypershift +- always_run: false + as: istio-integration-security-retest + optional: true steps: cluster_profile: ossm-aws env: @@ -184,6 +178,27 @@ tests: - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-hypershift - as: istio-integration-ambient + postsubmit: true + steps: + cluster_profile: ossm-aws + env: + AMBIENT: "true" + BASE_DOMAIN: servicemesh.devcluster.openshift.com + INSTALLATION_METHOD: helm + MAISTRA_BUILDER_IMAGE: quay-proxy.ci.openshift.org/openshift/ci:ci_maistra-builder_upstream-master + MAISTRA_NAMESPACE: maistra-e2e-test + MAISTRA_SC_POD: maistra-e2e-test-sc-pod + REPORT_TO_REPORT_PORTAL: "true" + TEST_FILE_NAME: junit.xml + TEST_SUITE: ambient + TEST_SUITE_DESC: Istio Integration ambient + test: + - ref: servicemesh-sail-operator-copy-src + - ref: servicemesh-istio-int-tests + workflow: servicemesh-istio-e2e-hypershift +- always_run: false + as: istio-integration-ambient-retest + optional: true steps: cluster_profile: ossm-aws env: @@ -202,6 +217,26 @@ tests: - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-hypershift - as: istio-integration-helm + postsubmit: true + steps: + cluster_profile: ossm-aws + env: + BASE_DOMAIN: servicemesh.devcluster.openshift.com + INSTALLATION_METHOD: helm + MAISTRA_BUILDER_IMAGE: quay-proxy.ci.openshift.org/openshift/ci:ci_maistra-builder_upstream-master + MAISTRA_NAMESPACE: maistra-e2e-test + MAISTRA_SC_POD: maistra-e2e-test-sc-pod + REPORT_TO_REPORT_PORTAL: "true" + TEST_FILE_NAME: junit.xml + TEST_SUITE: helm + TEST_SUITE_DESC: Istio Integration helm + test: + - ref: servicemesh-sail-operator-copy-src + - ref: servicemesh-istio-int-tests + workflow: servicemesh-istio-e2e-hypershift +- always_run: false + as: istio-integration-helm-retest + optional: true steps: cluster_profile: ossm-aws env: @@ -218,7 +253,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-hypershift -- as: istio-integration-sail-pilot +- always_run: false + as: istio-integration-sail-pilot + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -237,7 +274,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-hypershift -- as: istio-integration-sail-telemetry +- always_run: false + as: istio-integration-sail-telemetry + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -256,7 +295,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-hypershift -- as: istio-integration-sail-security +- always_run: false + as: istio-integration-sail-security + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -275,7 +316,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-hypershift -- as: istio-integration-sail-ambient +- always_run: false + as: istio-integration-sail-ambient + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: diff --git a/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.24.yaml b/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.24.yaml index 5efed500f1392..57d7599581d92 100644 --- a/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.24.yaml +++ b/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.24.yaml @@ -34,61 +34,9 @@ tests: XDG_CACHE_HOME="/tmp/cache" container: from: src -- as: gencheck - commands: | - make gen-check \ - ARTIFACTS="${ARTIFACT_DIR:-}" \ - BUILD_WITH_CONTAINER="0" \ - GOBIN="/gobin" \ - GOCACHE="/tmp/cache" \ - GOMODCACHE="/tmp/cache" \ - XDG_CACHE_HOME="/tmp/cache" - container: - from: src -- as: unit - steps: - cluster_profile: ossm-aws - env: - BASE_DOMAIN: servicemesh.devcluster.openshift.com - MAISTRA_BUILDER_IMAGE: registry.istio.io/testing/build-tools:release-1.24-f9fb31e097a085fca3995f19f051cb8f8a396837 - MAISTRA_NAMESPACE: maistra-e2e-test - MAISTRA_SC_POD: maistra-e2e-test-sc-pod - test: - - as: copy-src - cli: latest - commands: | - # SRC_PATH does end with /. : the content of the source directory is copied into dest directory - oc cp ./. "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":/work/ - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 20m0s - - as: unit - cli: latest - commands: | - oc rsh -n "${MAISTRA_NAMESPACE}" "${MAISTRA_SC_POD}" \ - bash -c "\ - export BUILD_WITH_CONTAINER=0 && \ - cd /work && \ - entrypoint \ - make -e T=-v build racetest binaries-test" - oc cp "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":"${ARTIFACT_DIR}"/. "${ARTIFACT_DIR}" - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 3h0m0s - workflow: servicemesh-istio-e2e-profile -- as: integ-helm +- always_run: false + as: integ-helm + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -105,7 +53,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-security +- always_run: false + as: integ-security + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -123,7 +73,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-pilot +- always_run: false + as: integ-pilot + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -140,7 +92,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-telemetry +- always_run: false + as: integ-telemetry + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: diff --git a/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.26.yaml b/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.26.yaml index dd097a5852bd7..ea4642a652bd7 100644 --- a/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.26.yaml +++ b/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.26.yaml @@ -34,73 +34,9 @@ tests: XDG_CACHE_HOME="/tmp/cache" container: from: src -- as: unit-and-gencheck - steps: - cluster_profile: ossm-aws - env: - BASE_DOMAIN: servicemesh.devcluster.openshift.com - MAISTRA_BUILDER_IMAGE: registry.istio.io/testing/build-tools:release-1.26-512a1e34a2bc63dd3c54ddcba27df1bcf95e7360 - MAISTRA_NAMESPACE: maistra-e2e-test - MAISTRA_SC_POD: maistra-e2e-test-sc-pod - test: - - as: copy-src - cli: latest - commands: | - # SRC_PATH does end with /. : the content of the source directory is copied into dest directory - oc cp ./. "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":/work/ - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 20m0s - - as: gencheck - cli: latest - commands: | - oc rsh -n "${MAISTRA_NAMESPACE}" "${MAISTRA_SC_POD}" \ - bash -c "\ - export BUILD_WITH_CONTAINER=0 && \ - export GOBIN='/gobin' && \ - export GOCACHE='/tmp/cache' && \ - export GOMODCACHE='/tmp/cache' && \ - export XDG_CACHE_HOME='/tmp/cache' && \ - export ARTIFACTS='${ARTIFACT_DIR}' && \ - cd /work && \ - entrypoint \ - make gen-check" - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 1h0m0s - - as: unit - cli: latest - commands: | - oc rsh -n "${MAISTRA_NAMESPACE}" "${MAISTRA_SC_POD}" \ - bash -c "\ - export BUILD_WITH_CONTAINER=0 && \ - cd /work && \ - entrypoint \ - make -e T=-v build racetest binaries-test" - oc cp "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":"${ARTIFACT_DIR}"/. "${ARTIFACT_DIR}" - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 3h0m0s - workflow: servicemesh-istio-e2e-profile -- as: integ-helm +- always_run: false + as: integ-helm + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -117,7 +53,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-security +- always_run: false + as: integ-security + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -135,7 +73,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-pilot +- always_run: false + as: integ-pilot + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -152,7 +92,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-telemetry +- always_run: false + as: integ-telemetry + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -169,7 +111,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-ambient +- always_run: false + as: integ-ambient + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: diff --git a/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.27.yaml b/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.27.yaml index e193edf34849c..34987472da806 100644 --- a/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.27.yaml +++ b/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.27.yaml @@ -34,73 +34,9 @@ tests: XDG_CACHE_HOME="/tmp/cache" container: from: src -- as: unit-and-gencheck - steps: - cluster_profile: ossm-aws - env: - BASE_DOMAIN: servicemesh.devcluster.openshift.com - MAISTRA_BUILDER_IMAGE: registry.istio.io/testing/build-tools:release-1.27-7464103ed8bdbef724dc2527199ede06ec3820a5 - MAISTRA_NAMESPACE: maistra-e2e-test - MAISTRA_SC_POD: maistra-e2e-test-sc-pod - test: - - as: copy-src - cli: latest - commands: | - # SRC_PATH does end with /. : the content of the source directory is copied into dest directory - oc cp ./. "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":/work/ - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 20m0s - - as: gencheck - cli: latest - commands: | - oc rsh -n "${MAISTRA_NAMESPACE}" "${MAISTRA_SC_POD}" \ - bash -c "\ - export BUILD_WITH_CONTAINER=0 && \ - export GOBIN='/gobin' && \ - export GOCACHE='/tmp/cache' && \ - export GOMODCACHE='/tmp/cache' && \ - export XDG_CACHE_HOME='/tmp/cache' && \ - export ARTIFACTS='${ARTIFACT_DIR}' && \ - cd /work && \ - entrypoint \ - make gen-check" - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 1h0m0s - - as: unit - cli: latest - commands: | - oc rsh -n "${MAISTRA_NAMESPACE}" "${MAISTRA_SC_POD}" \ - bash -c "\ - export BUILD_WITH_CONTAINER=0 && \ - cd /work && \ - entrypoint \ - make -e T=-v build racetest binaries-test" - oc cp "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":"${ARTIFACT_DIR}"/. "${ARTIFACT_DIR}" - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 3h0m0s - workflow: servicemesh-istio-e2e-profile -- as: integ-helm +- always_run: false + as: integ-helm + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -117,7 +53,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-security +- always_run: false + as: integ-security + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -135,7 +73,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-pilot +- always_run: false + as: integ-pilot + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -152,7 +92,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-telemetry +- always_run: false + as: integ-telemetry + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -169,7 +111,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-ambient +- always_run: false + as: integ-ambient + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: diff --git a/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.28.yaml b/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.28.yaml index 3c7ef171efd47..5bfc45e520713 100644 --- a/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.28.yaml +++ b/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.28.yaml @@ -34,97 +34,9 @@ tests: XDG_CACHE_HOME="/tmp/cache" container: from: src -- as: unit - steps: - cluster_profile: ossm-aws - env: - BASE_DOMAIN: servicemesh.devcluster.openshift.com - MAISTRA_BUILDER_IMAGE: quay.io/maistra-dev/maistra-builder:3.3 - MAISTRA_NAMESPACE: maistra-e2e-test - MAISTRA_SC_POD: maistra-e2e-test-sc-pod - test: - - as: copy-src - cli: latest - commands: | - # SRC_PATH does end with /. : the content of the source directory is copied into dest directory - oc cp ./. "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":/work/ - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 20m0s - - as: unit - cli: latest - commands: | - oc rsh -n "${MAISTRA_NAMESPACE}" "${MAISTRA_SC_POD}" \ - bash -c "\ - export BUILD_WITH_CONTAINER=0 && \ - cd /work && \ - entrypoint \ - make -e T=-v build racetest binaries-test" - oc cp "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":"${ARTIFACT_DIR}"/. "${ARTIFACT_DIR}" - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 3h0m0s - workflow: servicemesh-istio-e2e-profile -- as: gencheck - steps: - cluster_profile: ossm-aws - env: - BASE_DOMAIN: servicemesh.devcluster.openshift.com - MAISTRA_BUILDER_IMAGE: registry.istio.io/testing/build-tools:release-1.28-2cff97d3b27d82d78c5d4e468a467f520cf2fbf3 - MAISTRA_NAMESPACE: maistra-e2e-test - MAISTRA_SC_POD: maistra-e2e-test-sc-pod - test: - - as: copy-src - cli: latest - commands: | - # SRC_PATH does end with /. : the content of the source directory is copied into dest directory - oc cp ./. "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":/work/ - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 20m0s - - as: gencheck - cli: latest - commands: | - oc rsh -n "${MAISTRA_NAMESPACE}" "${MAISTRA_SC_POD}" \ - bash -c "\ - export BUILD_WITH_CONTAINER=0 && \ - export GOBIN='/gobin' && \ - export GOCACHE='/tmp/cache' && \ - export GOMODCACHE='/tmp/cache' && \ - export XDG_CACHE_HOME='/tmp/cache' && \ - export ARTIFACTS='${ARTIFACT_DIR}' && \ - cd /work && \ - entrypoint \ - make gen-check" - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 1h0m0s - workflow: servicemesh-istio-e2e-profile -- as: integ-helm +- always_run: false + as: integ-helm + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -141,7 +53,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-security +- always_run: false + as: integ-security + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -159,7 +73,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-pilot +- always_run: false + as: integ-pilot + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -176,7 +92,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-telemetry +- always_run: false + as: integ-telemetry + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -193,7 +111,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-ambient +- always_run: false + as: integ-ambient + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: diff --git a/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.30.yaml b/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.30.yaml index de4609549eed9..bd51e0a7fc006 100644 --- a/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.30.yaml +++ b/ci-operator/config/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.30.yaml @@ -34,97 +34,9 @@ tests: XDG_CACHE_HOME="/tmp/cache" container: from: src -- as: unit - steps: - cluster_profile: ossm-aws - env: - BASE_DOMAIN: servicemesh.devcluster.openshift.com - MAISTRA_BUILDER_IMAGE: quay.io/maistra-dev/maistra-builder:3.4 - MAISTRA_NAMESPACE: maistra-e2e-test - MAISTRA_SC_POD: maistra-e2e-test-sc-pod - test: - - as: copy-src - cli: latest - commands: | - # SRC_PATH does end with /. : the content of the source directory is copied into dest directory - oc cp ./. "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":/work/ - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 20m0s - - as: unit - cli: latest - commands: | - oc rsh -n "${MAISTRA_NAMESPACE}" "${MAISTRA_SC_POD}" \ - bash -c "\ - export BUILD_WITH_CONTAINER=0 && \ - cd /work && \ - entrypoint \ - make -e T=-v build racetest binaries-test" - oc cp "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":"${ARTIFACT_DIR}"/. "${ARTIFACT_DIR}" - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 3h0m0s - workflow: servicemesh-istio-e2e-profile -- as: gencheck - steps: - cluster_profile: ossm-aws - env: - BASE_DOMAIN: servicemesh.devcluster.openshift.com - MAISTRA_BUILDER_IMAGE: registry.istio.io/testing/build-tools:release-1.30-817db1b7909fb411f9c6d357b831b658285c26fb - MAISTRA_NAMESPACE: maistra-e2e-test - MAISTRA_SC_POD: maistra-e2e-test-sc-pod - test: - - as: copy-src - cli: latest - commands: | - # SRC_PATH does end with /. : the content of the source directory is copied into dest directory - oc cp ./. "${MAISTRA_NAMESPACE}"/"${MAISTRA_SC_POD}":/work/ - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 20m0s - - as: gencheck - cli: latest - commands: | - oc rsh -n "${MAISTRA_NAMESPACE}" "${MAISTRA_SC_POD}" \ - bash -c "\ - export BUILD_WITH_CONTAINER=0 && \ - export GOBIN='/gobin' && \ - export GOCACHE='/tmp/cache' && \ - export GOMODCACHE='/tmp/cache' && \ - export XDG_CACHE_HOME='/tmp/cache' && \ - export ARTIFACTS='${ARTIFACT_DIR}' && \ - cd /work && \ - entrypoint \ - make gen-check" - env: - - name: MAISTRA_NAMESPACE - - name: MAISTRA_SC_POD - from: src - resources: - requests: - cpu: 100m - memory: 100Mi - timeout: 1h0m0s - workflow: servicemesh-istio-e2e-profile -- as: integ-helm +- always_run: false + as: integ-helm + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -141,7 +53,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-security +- always_run: false + as: integ-security + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -159,7 +73,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-pilot +- always_run: false + as: integ-pilot + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -176,7 +92,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-telemetry +- always_run: false + as: integ-telemetry + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: @@ -193,7 +111,9 @@ tests: - ref: servicemesh-sail-operator-copy-src - ref: servicemesh-istio-int-tests workflow: servicemesh-istio-e2e-profile -- as: integ-ambient +- always_run: false + as: integ-ambient + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) steps: cluster_profile: ossm-aws env: diff --git a/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-master-postsubmits.yaml b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-master-postsubmits.yaml new file mode 100644 index 0000000000000..d0c5879ce3943 --- /dev/null +++ b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-master-postsubmits.yaml @@ -0,0 +1,392 @@ +postsubmits: + openshift-service-mesh/istio: + - agent: kubernetes + always_run: true + branches: + - ^master$ + cluster: build07 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: ossm-aws + ci.openshift.io/generator: prowgen + max_concurrency: 1 + name: branch-ci-openshift-service-mesh-istio-master-istio-integration-ambient + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=istio-integration-ambient + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + - agent: kubernetes + always_run: true + branches: + - ^master$ + cluster: build07 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: ossm-aws + ci.openshift.io/generator: prowgen + max_concurrency: 1 + name: branch-ci-openshift-service-mesh-istio-master-istio-integration-helm + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=istio-integration-helm + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + - agent: kubernetes + always_run: true + branches: + - ^master$ + cluster: build07 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: ossm-aws + ci.openshift.io/generator: prowgen + max_concurrency: 1 + name: branch-ci-openshift-service-mesh-istio-master-istio-integration-pilot + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=istio-integration-pilot + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + - agent: kubernetes + always_run: true + branches: + - ^master$ + cluster: build07 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: ossm-aws + ci.openshift.io/generator: prowgen + max_concurrency: 1 + name: branch-ci-openshift-service-mesh-istio-master-istio-integration-security + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=istio-integration-security + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + - agent: kubernetes + always_run: true + branches: + - ^master$ + cluster: build07 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: aws + ci-operator.openshift.io/cloud-cluster-profile: ossm-aws + ci.openshift.io/generator: prowgen + max_concurrency: 1 + name: branch-ci-openshift-service-mesh-istio-master-istio-integration-telemetry + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=istio-integration-telemetry + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator diff --git a/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-master-presubmits.yaml b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-master-presubmits.yaml index aa04c15f09ad1..ae3787ad8758a 100644 --- a/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-master-presubmits.yaml +++ b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-master-presubmits.yaml @@ -1,12 +1,12 @@ presubmits: openshift-service-mesh/istio: - agent: kubernetes - always_run: true + always_run: false branches: - ^master$ - ^master- cluster: build06 - context: ci/prow/istio-integration-ambient + context: ci/prow/istio-integration-ambient-retest decorate: true decoration_config: skip_cloning: true @@ -15,8 +15,9 @@ presubmits: ci-operator.openshift.io/cloud-cluster-profile: ossm-aws ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-master-istio-integration-ambient - rerun_command: /test istio-integration-ambient + name: pull-ci-openshift-service-mesh-istio-master-istio-integration-ambient-retest + optional: true + rerun_command: /test istio-integration-ambient-retest spec: containers: - args: @@ -25,7 +26,7 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=istio-integration-ambient + - --target=istio-integration-ambient-retest command: - ci-operator env: @@ -81,14 +82,14 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )istio-integration-ambient,?($|\s.*) + trigger: (?m)^/test( | .* )istio-integration-ambient-retest,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false branches: - ^master$ - ^master- cluster: build06 - context: ci/prow/istio-integration-helm + context: ci/prow/istio-integration-helm-retest decorate: true decoration_config: skip_cloning: true @@ -97,8 +98,9 @@ presubmits: ci-operator.openshift.io/cloud-cluster-profile: ossm-aws ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-master-istio-integration-helm - rerun_command: /test istio-integration-helm + name: pull-ci-openshift-service-mesh-istio-master-istio-integration-helm-retest + optional: true + rerun_command: /test istio-integration-helm-retest spec: containers: - args: @@ -107,7 +109,7 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=istio-integration-helm + - --target=istio-integration-helm-retest command: - ci-operator env: @@ -163,14 +165,14 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )istio-integration-helm,?($|\s.*) + trigger: (?m)^/test( | .* )istio-integration-helm-retest,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false branches: - ^master$ - ^master- cluster: build06 - context: ci/prow/istio-integration-pilot + context: ci/prow/istio-integration-pilot-retest decorate: true decoration_config: skip_cloning: true @@ -179,8 +181,9 @@ presubmits: ci-operator.openshift.io/cloud-cluster-profile: ossm-aws ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-master-istio-integration-pilot - rerun_command: /test istio-integration-pilot + name: pull-ci-openshift-service-mesh-istio-master-istio-integration-pilot-retest + optional: true + rerun_command: /test istio-integration-pilot-retest spec: containers: - args: @@ -189,7 +192,7 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=istio-integration-pilot + - --target=istio-integration-pilot-retest command: - ci-operator env: @@ -245,9 +248,11 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )istio-integration-pilot,?($|\s.*) + trigger: (?m)^/test( | .* )istio-integration-pilot-retest,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^master$ - ^master- @@ -329,7 +334,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )istio-integration-sail-ambient,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^master$ - ^master- @@ -411,7 +418,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )istio-integration-sail-pilot,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^master$ - ^master- @@ -493,7 +502,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )istio-integration-sail-security,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^master$ - ^master- @@ -575,12 +586,12 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )istio-integration-sail-telemetry,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false branches: - ^master$ - ^master- cluster: build06 - context: ci/prow/istio-integration-security + context: ci/prow/istio-integration-security-retest decorate: true decoration_config: skip_cloning: true @@ -589,8 +600,9 @@ presubmits: ci-operator.openshift.io/cloud-cluster-profile: ossm-aws ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-master-istio-integration-security - rerun_command: /test istio-integration-security + name: pull-ci-openshift-service-mesh-istio-master-istio-integration-security-retest + optional: true + rerun_command: /test istio-integration-security-retest spec: containers: - args: @@ -599,7 +611,7 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=istio-integration-security + - --target=istio-integration-security-retest command: - ci-operator env: @@ -655,14 +667,14 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )istio-integration-security,?($|\s.*) + trigger: (?m)^/test( | .* )istio-integration-security-retest,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false branches: - ^master$ - ^master- cluster: build06 - context: ci/prow/istio-integration-telemetry + context: ci/prow/istio-integration-telemetry-retest decorate: true decoration_config: skip_cloning: true @@ -671,8 +683,9 @@ presubmits: ci-operator.openshift.io/cloud-cluster-profile: ossm-aws ci.openshift.io/generator: prowgen pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-master-istio-integration-telemetry - rerun_command: /test istio-integration-telemetry + name: pull-ci-openshift-service-mesh-istio-master-istio-integration-telemetry-retest + optional: true + rerun_command: /test istio-integration-telemetry-retest spec: containers: - args: @@ -681,7 +694,7 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=istio-integration-telemetry + - --target=istio-integration-telemetry-retest command: - ci-operator env: @@ -737,7 +750,7 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )istio-integration-telemetry,?($|\s.*) + trigger: (?m)^/test( | .* )istio-integration-telemetry-retest,?($|\s.*) - agent: kubernetes always_run: true branches: @@ -801,85 +814,3 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )lint,?($|\s.*) - - agent: kubernetes - always_run: true - branches: - - ^master$ - - ^master- - cluster: build06 - context: ci/prow/unit-and-gencheck - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: ossm-aws - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-master-unit-and-gencheck - rerun_command: /test unit-and-gencheck - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=unit-and-gencheck - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )unit-and-gencheck,?($|\s.*) diff --git a/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.24-presubmits.yaml b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.24-presubmits.yaml index ab1770e0f7003..b4b377206d6f3 100644 --- a/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.24-presubmits.yaml +++ b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.24-presubmits.yaml @@ -1,70 +1,9 @@ presubmits: openshift-service-mesh/istio: - agent: kubernetes - always_run: true - branches: - - ^release-1\.24$ - - ^release-1\.24- - cluster: build03 - context: ci/prow/gencheck - decorate: true - decoration_config: - skip_cloning: true - labels: - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-release-1.24-gencheck - rerun_command: /test gencheck - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --report-credentials-file=/etc/report/credentials - - --target=gencheck - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )gencheck,?($|\s.*) - - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.24$ - ^release-1\.24- @@ -146,7 +85,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-helm,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.24$ - ^release-1\.24- @@ -228,7 +169,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-pilot,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.24$ - ^release-1\.24- @@ -310,7 +253,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-security,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.24$ - ^release-1\.24- @@ -454,85 +399,3 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )lint,?($|\s.*) - - agent: kubernetes - always_run: true - branches: - - ^release-1\.24$ - - ^release-1\.24- - cluster: build03 - context: ci/prow/unit - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: ossm-aws - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-release-1.24-unit - rerun_command: /test unit - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=unit - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )unit,?($|\s.*) diff --git a/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.26-presubmits.yaml b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.26-presubmits.yaml index 418ec4c937ffe..628e074b7d686 100644 --- a/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.26-presubmits.yaml +++ b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.26-presubmits.yaml @@ -1,7 +1,9 @@ presubmits: openshift-service-mesh/istio: - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.26$ - ^release-1\.26- @@ -83,7 +85,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-ambient,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.26$ - ^release-1\.26- @@ -165,7 +169,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-helm,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.26$ - ^release-1\.26- @@ -247,7 +253,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-pilot,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.26$ - ^release-1\.26- @@ -329,7 +337,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-security,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.26$ - ^release-1\.26- @@ -473,85 +483,3 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )lint,?($|\s.*) - - agent: kubernetes - always_run: true - branches: - - ^release-1\.26$ - - ^release-1\.26- - cluster: build03 - context: ci/prow/unit-and-gencheck - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: ossm-aws - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-release-1.26-unit-and-gencheck - rerun_command: /test unit-and-gencheck - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=unit-and-gencheck - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )unit-and-gencheck,?($|\s.*) diff --git a/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.27-presubmits.yaml b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.27-presubmits.yaml index 86a8e898b237c..a55a0759f0643 100644 --- a/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.27-presubmits.yaml +++ b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.27-presubmits.yaml @@ -1,7 +1,9 @@ presubmits: openshift-service-mesh/istio: - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.27$ - ^release-1\.27- @@ -83,7 +85,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-ambient,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.27$ - ^release-1\.27- @@ -165,7 +169,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-helm,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.27$ - ^release-1\.27- @@ -247,7 +253,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-pilot,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.27$ - ^release-1\.27- @@ -329,7 +337,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-security,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.27$ - ^release-1\.27- @@ -473,85 +483,3 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )lint,?($|\s.*) - - agent: kubernetes - always_run: true - branches: - - ^release-1\.27$ - - ^release-1\.27- - cluster: build03 - context: ci/prow/unit-and-gencheck - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: ossm-aws - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-release-1.27-unit-and-gencheck - rerun_command: /test unit-and-gencheck - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=unit-and-gencheck - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )unit-and-gencheck,?($|\s.*) diff --git a/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.28-presubmits.yaml b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.28-presubmits.yaml index 99875f890824c..db348887c5ff9 100644 --- a/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.28-presubmits.yaml +++ b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.28-presubmits.yaml @@ -1,89 +1,9 @@ presubmits: openshift-service-mesh/istio: - agent: kubernetes - always_run: true - branches: - - ^release-1\.28$ - - ^release-1\.28- - cluster: build03 - context: ci/prow/gencheck - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: ossm-aws - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-release-1.28-gencheck - rerun_command: /test gencheck - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=gencheck - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )gencheck,?($|\s.*) - - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.28$ - ^release-1\.28- @@ -165,7 +85,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-ambient,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.28$ - ^release-1\.28- @@ -247,7 +169,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-helm,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.28$ - ^release-1\.28- @@ -329,7 +253,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-pilot,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.28$ - ^release-1\.28- @@ -411,7 +337,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-security,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.28$ - ^release-1\.28- @@ -555,85 +483,3 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )lint,?($|\s.*) - - agent: kubernetes - always_run: true - branches: - - ^release-1\.28$ - - ^release-1\.28- - cluster: build03 - context: ci/prow/unit - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: ossm-aws - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-release-1.28-unit - rerun_command: /test unit - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=unit - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )unit,?($|\s.*) diff --git a/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.30-presubmits.yaml b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.30-presubmits.yaml index 026715d7d8cd1..317887e387fee 100644 --- a/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.30-presubmits.yaml +++ b/ci-operator/jobs/openshift-service-mesh/istio/openshift-service-mesh-istio-release-1.30-presubmits.yaml @@ -1,89 +1,9 @@ presubmits: openshift-service-mesh/istio: - agent: kubernetes - always_run: true - branches: - - ^release-1\.30$ - - ^release-1\.30- - cluster: build03 - context: ci/prow/gencheck - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: ossm-aws - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-release-1.30-gencheck - rerun_command: /test gencheck - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=gencheck - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )gencheck,?($|\s.*) - - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.30$ - ^release-1\.30- @@ -165,7 +85,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-ambient,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.30$ - ^release-1\.30- @@ -247,7 +169,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-helm,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.30$ - ^release-1\.30- @@ -329,7 +253,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-pilot,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.30$ - ^release-1\.30- @@ -411,7 +337,9 @@ presubmits: secretName: result-aggregator trigger: (?m)^/test( | .* )integ-security,?($|\s.*) - agent: kubernetes - always_run: true + always_run: false + annotations: + pipeline_skip_if_only_changed: (^(docs|\.github|\.claude|\.cursor)/)|(\.md$)|((^|/)OWNERS$)|(^\.gitignore$)|(^LICENSE$) branches: - ^release-1\.30$ - ^release-1\.30- @@ -555,85 +483,3 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )lint,?($|\s.*) - - agent: kubernetes - always_run: true - branches: - - ^release-1\.30$ - - ^release-1\.30- - cluster: build03 - context: ci/prow/unit - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: aws - ci-operator.openshift.io/cloud-cluster-profile: ossm-aws - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-service-mesh-istio-release-1.30-unit - rerun_command: /test unit - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=unit - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )unit,?($|\s.*) diff --git a/core-services/pipeline-controller/config.yaml b/core-services/pipeline-controller/config.yaml index a4c51ea80fb16..31941ce13f853 100644 --- a/core-services/pipeline-controller/config.yaml +++ b/core-services/pipeline-controller/config.yaml @@ -15,6 +15,16 @@ orgs: - main - org: openshift-service-mesh repos: + - name: istio + mode: + trigger: auto + branches: + - master + - release-1.24 + - release-1.26 + - release-1.27 + - release-1.28 + - release-1.30 - name: sail-operator mode: trigger: auto