From 53b4c1b15eeb95f2c8581bf09aac686138fca8c8 Mon Sep 17 00:00:00 2001 From: chaoyang Date: Mon, 16 Dec 2024 09:42:03 +0800 Subject: [PATCH] Add filestore-csi for gcp workload identity test --- ...s-private-release-4.18__multi-nightly.yaml | 6 ++- ...-tests-private-release-4.18-periodics.yaml | 4 +- .../filestore-csi/OWNERS | 8 ++++ ...ntity-filestore-csi-workflow.metadata.json | 15 +++++++ ...kload-identity-filestore-csi-workflow.yaml | 16 +++++++ .../filestore-csi/deprovision/OWNERS | 8 ++++ ...estore-csi-deprovision-chain.metadata.json | 15 +++++++ ...ntity-filestore-csi-deprovision-chain.yaml | 9 ++++ .../filestore-csi/provision/OWNERS | 8 ++++ ...ilestore-csi-provision-chain.metadata.json | 15 +++++++ ...dentity-filestore-csi-provision-chain.yaml | 42 +++++++++++++++++++ 11 files changed, 142 insertions(+), 4 deletions(-) create mode 100644 ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/OWNERS create mode 100644 ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-workflow.metadata.json create mode 100644 ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-workflow.yaml create mode 100644 ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/deprovision/OWNERS create mode 100644 ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/deprovision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-deprovision-chain.metadata.json create mode 100644 ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/deprovision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-deprovision-chain.yaml create mode 100644 ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/provision/OWNERS create mode 100644 ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/provision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-provision-chain.metadata.json create mode 100644 ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/provision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-provision-chain.yaml diff --git a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.18__multi-nightly.yaml b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.18__multi-nightly.yaml index 69bd39883d2e..d52cf5ae88f1 100644 --- a/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.18__multi-nightly.yaml +++ b/ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.18__multi-nightly.yaml @@ -1655,17 +1655,19 @@ tests: test: - chain: openshift-e2e-test-qe-destructive workflow: cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity -- as: gcp-ipi-proxy-oidc-arm-f28 +- as: gcp-ipi-proxy-oidc-filestore-csi-arm-f28 cron: 44 8 27 * * steps: cluster_profile: gcp-qe + dependency_overrides: + OO_INDEX: quay.io/openshift-qe-optional-operators/aosqe-index:v4.18 env: COMPUTE_NODE_TYPE: t2a-standard-4 EXTRACT_MANIFEST_INCLUDED: "true" OCP_ARCH: arm64 test: - chain: openshift-e2e-test-qe - workflow: cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity + workflow: cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi - as: gcp-ipi-proxy-private-amd-f28-destructive cron: 23 9 17 * * steps: diff --git a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.18-periodics.yaml b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.18-periodics.yaml index 3bfce3b04891..7a4169adbcf7 100644 --- a/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.18-periodics.yaml +++ b/ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-4.18-periodics.yaml @@ -75892,7 +75892,7 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.18" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-openshift-openshift-tests-private-release-4.18-multi-nightly-gcp-ipi-proxy-oidc-arm-f28 + name: periodic-ci-openshift-openshift-tests-private-release-4.18-multi-nightly-gcp-ipi-proxy-oidc-filestore-csi-arm-f28 spec: containers: - args: @@ -75902,7 +75902,7 @@ periodics: - --oauth-token-path=/usr/local/github-credentials/oauth - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=gcp-ipi-proxy-oidc-arm-f28 + - --target=gcp-ipi-proxy-oidc-filestore-csi-arm-f28 - --variant=multi-nightly command: - ci-operator diff --git a/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/OWNERS b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/OWNERS new file mode 100644 index 000000000000..8c6e11a76df2 --- /dev/null +++ b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/OWNERS @@ -0,0 +1,8 @@ +approvers: +- jianlinliu +- gpei +- jianli-wei +reviewers: +- jianlinliu +- gpei +- jianli-wei diff --git a/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-workflow.metadata.json b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-workflow.metadata.json new file mode 100644 index 000000000000..9b18964a56b3 --- /dev/null +++ b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-workflow.metadata.json @@ -0,0 +1,15 @@ +{ + "path": "cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-workflow.yaml", + "owners": { + "approvers": [ + "jianlinliu", + "gpei", + "jianli-wei" + ], + "reviewers": [ + "jianlinliu", + "gpei", + "jianli-wei" + ] + } +} \ No newline at end of file diff --git a/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-workflow.yaml b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-workflow.yaml new file mode 100644 index 000000000000..63cadae192e5 --- /dev/null +++ b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-workflow.yaml @@ -0,0 +1,16 @@ +workflow: + as: cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi + steps: + pre: + - chain: cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-provision + post: + - chain: cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-deprovision + documentation: |- + The IPI workflow provides provision- and deprovision- steps that provision and + deprovision an OpenShift disconnected cluster (behind proxy) with a default + configurationon GCP, allowing job authors to inject their own end-to-end test logic. + + All modifications to this workflow should be done by modifying the + `cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-{provision,deprovision}` + chains to allow other workflows to mimic and extend this base workflow without + a need to backport changes. diff --git a/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/deprovision/OWNERS b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/deprovision/OWNERS new file mode 100644 index 000000000000..8c6e11a76df2 --- /dev/null +++ b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/deprovision/OWNERS @@ -0,0 +1,8 @@ +approvers: +- jianlinliu +- gpei +- jianli-wei +reviewers: +- jianlinliu +- gpei +- jianli-wei diff --git a/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/deprovision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-deprovision-chain.metadata.json b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/deprovision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-deprovision-chain.metadata.json new file mode 100644 index 000000000000..5d955fff301e --- /dev/null +++ b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/deprovision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-deprovision-chain.metadata.json @@ -0,0 +1,15 @@ +{ + "path": "cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/deprovision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-deprovision-chain.yaml", + "owners": { + "approvers": [ + "jianlinliu", + "gpei", + "jianli-wei" + ], + "reviewers": [ + "jianlinliu", + "gpei", + "jianli-wei" + ] + } +} \ No newline at end of file diff --git a/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/deprovision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-deprovision-chain.yaml b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/deprovision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-deprovision-chain.yaml new file mode 100644 index 000000000000..6518d08c2163 --- /dev/null +++ b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/deprovision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-deprovision-chain.yaml @@ -0,0 +1,9 @@ +chain: + as: cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-deprovision + steps: + - ref: ipi-conf-gcp-filestore-workload-identity-federation-cleanup + - chain: cucushift-installer-rehearse-gcp-ipi-proxy-deprovision + - ref: ipi-conf-gcp-oidc-creds-deprovision + documentation: |- + This chain deprovisions all the components created by the + cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-provision chain. diff --git a/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/provision/OWNERS b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/provision/OWNERS new file mode 100644 index 000000000000..8c6e11a76df2 --- /dev/null +++ b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/provision/OWNERS @@ -0,0 +1,8 @@ +approvers: +- jianlinliu +- gpei +- jianli-wei +reviewers: +- jianlinliu +- gpei +- jianli-wei diff --git a/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/provision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-provision-chain.metadata.json b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/provision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-provision-chain.metadata.json new file mode 100644 index 000000000000..2c5ed31991f9 --- /dev/null +++ b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/provision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-provision-chain.metadata.json @@ -0,0 +1,15 @@ +{ + "path": "cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/provision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-provision-chain.yaml", + "owners": { + "approvers": [ + "jianlinliu", + "gpei", + "jianli-wei" + ], + "reviewers": [ + "jianlinliu", + "gpei", + "jianli-wei" + ] + } +} \ No newline at end of file diff --git a/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/provision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-provision-chain.yaml b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/provision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-provision-chain.yaml new file mode 100644 index 000000000000..29cbeba4a71b --- /dev/null +++ b/ci-operator/step-registry/cucushift/installer/rehearse/gcp/ipi/proxy/cco-manual-workload-identity/filestore-csi/provision/cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-provision-chain.yaml @@ -0,0 +1,42 @@ +chain: + as: cucushift-installer-rehearse-gcp-ipi-proxy-cco-manual-workload-identity-filestore-csi-provision + steps: + - ref: gcp-provision-vpc + - ref: ignition-bastionhost + - ref: gcp-provision-bastionhost + - chain: ipi-conf-gcp + - ref: ipi-conf-proxy + - ref: ipi-conf-manual-creds + - ref: ipi-conf-gcp-oidc-creds-provision + - ref: ipi-conf-manual-creds-remove-unnecessary-creds + - chain: ipi-install + - ref: enable-qe-catalogsource + - chain: cucushift-installer-check + - ref: cucushift-installer-check-gcp-credentials-mode + - ref: ipi-conf-gcp-filestore-workload-identity-federation + - ref: optional-operators-subscribe + - ref: storage-create-csi-gcp-filestore + - ref: storage-conf-wait-for-csi-driver + env: + - name: RESTRICTED_NETWORK + default: "yes" + - name: CLUSTERCSIDRIVER + default: filestore.csi.storage.gke.io + - name: TEST_CSI_DRIVER_MANIFEST + default: manifest-gcp-filestore.yaml + - name: TRUECONDITIONS + default: GCPFILESTOREDriverControllerServiceControllerAvailable GCPFILESTOREDriverNodeServiceControllerAvailable + - name: OO_PACKAGE + default: gcp-filestore-csi-driver-operator + - name: OO_CHANNEL + default: stable + - name: OO_INSTALL_NAMESPACE + default: openshift-cluster-csi-drivers + - name: OO_TARGET_NAMESPACES + default: '!all' + - name: EVAL_CONFIG_ENVVARS + default: "yes" + - name: OO_CONFIG_ENVVARS + default: POOL_ID=$(cat ${SHARED_DIR}/gcp-filestore-pool-id),PROVIDER_ID=$(cat ${SHARED_DIR}/gcp-filestore-provider-id),SERVICE_ACCOUNT_EMAIL=$(cat ${SHARED_DIR}/gcp-filestore-service-account-email),PROJECT_NUMBER=$(cat ${SHARED_DIR}/gcp-filestore-project-number) + documentation: |- + Launch an IPI disconnected cluster (behind proxy) using Workload Identity on GCP for QE e2e tests.