From e9ff88fb114ce70bddc89c6e9704f184971761f9 Mon Sep 17 00:00:00 2001 From: zhaozhanqi Date: Sun, 11 Jan 2026 20:30:58 -0500 Subject: [PATCH] Add OVN BGP NoOverlay workflow for baremetal clusters This PR adds a new workflow 'baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay' based on the existing 'baremetalds-e2e-ovn-bgp-dualstack-local-gw' workflow with the following key differences: 1. Sets up FRR route reflector container on the packet server before cluster installation 2. Creates network operator manifest with NoOverlay transport configuration 3. Configures FRRConfiguration to peer with external route reflector 4. Adds RouteAdvertisements manifest for PodNetwork 5. Reorders pre-steps to run baremetalds-e2e-ovn-bgp-pre before baremetalds-ofcir-pre New components: - baremetalds-e2e-ovn-bgp-conf-no-overlay ref step - baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay workflow Network operator configuration: - defaultNetworkTransport: NoOverlay - routing: Unmanaged - outboundSNAT: Enabled - additionalRoutingCapabilities: FRR - routeAdvertisements: Enabled Co-Authored-By: Claude Signed-off-by: zhaozhanqi --- ...-priv-cluster-network-operator-master.yaml | 12 ++ .../origin/openshift-priv-origin-main.yaml | 16 ++ .../openshift-priv-ovn-kubernetes-master.yaml | 12 ++ ...shift-cluster-network-operator-master.yaml | 12 ++ .../origin/openshift-origin-main.yaml | 16 ++ .../openshift-ovn-kubernetes-master.yaml | 12 ++ ...er-network-operator-master-presubmits.yaml | 166 +++++++++++++++++ ...openshift-priv-origin-main-presubmits.yaml | 168 +++++++++++++++++ ...priv-ovn-kubernetes-master-presubmits.yaml | 168 +++++++++++++++++ ...er-network-operator-master-presubmits.yaml | 146 +++++++++++++++ .../openshift-origin-main-presubmits.yaml | 148 +++++++++++++++ ...hift-ovn-kubernetes-master-presubmits.yaml | 150 ++++++++++++++++ .../bgp/dualstack-local-gw-no-overlay/OWNERS | 5 + ...local-gw-no-overlay-workflow.metadata.json | 11 ++ ...ualstack-local-gw-no-overlay-workflow.yaml | 42 +++++ .../e2e/ovn/bgp/dualstack-no-overlay/OWNERS | 5 + ...ualstack-no-overlay-workflow.metadata.json | 11 ++ ...ovn-bgp-dualstack-no-overlay-workflow.yaml | 34 ++++ .../baremetalds/e2e/ovn/bgp/no-overlay/OWNERS | 6 + ...metalds-e2e-ovn-bgp-no-overlay-commands.sh | 170 ++++++++++++++++++ ...s-e2e-ovn-bgp-no-overlay-ref.metadata.json | 11 ++ ...aremetalds-e2e-ovn-bgp-no-overlay-ref.yaml | 15 ++ 22 files changed, 1336 insertions(+) create mode 100644 ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-local-gw-no-overlay/OWNERS create mode 100644 ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-local-gw-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay-workflow.metadata.json create mode 100644 ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-local-gw-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay-workflow.yaml create mode 100644 ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-no-overlay/OWNERS create mode 100644 ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-no-overlay-workflow.metadata.json create mode 100644 ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-no-overlay-workflow.yaml create mode 100644 ci-operator/step-registry/baremetalds/e2e/ovn/bgp/no-overlay/OWNERS create mode 100644 ci-operator/step-registry/baremetalds/e2e/ovn/bgp/no-overlay/baremetalds-e2e-ovn-bgp-no-overlay-commands.sh create mode 100644 ci-operator/step-registry/baremetalds/e2e/ovn/bgp/no-overlay/baremetalds-e2e-ovn-bgp-no-overlay-ref.metadata.json create mode 100644 ci-operator/step-registry/baremetalds/e2e/ovn/bgp/no-overlay/baremetalds-e2e-ovn-bgp-no-overlay-ref.yaml diff --git a/ci-operator/config/openshift-priv/cluster-network-operator/openshift-priv-cluster-network-operator-master.yaml b/ci-operator/config/openshift-priv/cluster-network-operator/openshift-priv-cluster-network-operator-master.yaml index da573dd6d3297..b1f954123f6fd 100644 --- a/ci-operator/config/openshift-priv/cluster-network-operator/openshift-priv-cluster-network-operator-master.yaml +++ b/ci-operator/config/openshift-priv/cluster-network-operator/openshift-priv-cluster-network-operator-master.yaml @@ -458,6 +458,18 @@ tests: steps: cluster_profile: equinix-ocp-metal workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw +- as: e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + capabilities: + - intranet + steps: + cluster_profile: equinix-ocp-metal + workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay +- as: e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + capabilities: + - intranet + steps: + cluster_profile: equinix-ocp-metal + workflow: baremetalds-e2e-ovn-bgp-dualstack-no-overlay zz_generated_metadata: branch: master org: openshift-priv diff --git a/ci-operator/config/openshift-priv/origin/openshift-priv-origin-main.yaml b/ci-operator/config/openshift-priv/origin/openshift-priv-origin-main.yaml index f953793f4b06e..a9552f0674acf 100644 --- a/ci-operator/config/openshift-priv/origin/openshift-priv-origin-main.yaml +++ b/ci-operator/config/openshift-priv/origin/openshift-priv-origin-main.yaml @@ -557,6 +557,22 @@ tests: steps: cluster_profile: equinix-ocp-metal workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw +- always_run: false + as: e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + capabilities: + - intranet + optional: true + steps: + cluster_profile: equinix-ocp-metal + workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay +- always_run: false + as: e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + capabilities: + - intranet + optional: true + steps: + cluster_profile: equinix-ocp-metal + workflow: baremetalds-e2e-ovn-bgp-dualstack-no-overlay - always_run: false as: e2e-metal-ovn-single-node-live-iso optional: true diff --git a/ci-operator/config/openshift-priv/ovn-kubernetes/openshift-priv-ovn-kubernetes-master.yaml b/ci-operator/config/openshift-priv/ovn-kubernetes/openshift-priv-ovn-kubernetes-master.yaml index 115fa808c2e9f..93efe675f9cc0 100644 --- a/ci-operator/config/openshift-priv/ovn-kubernetes/openshift-priv-ovn-kubernetes-master.yaml +++ b/ci-operator/config/openshift-priv/ovn-kubernetes/openshift-priv-ovn-kubernetes-master.yaml @@ -306,6 +306,18 @@ tests: steps: cluster_profile: equinix-ocp-metal workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw +- as: e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + capabilities: + - intranet + steps: + cluster_profile: equinix-ocp-metal + workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay +- as: e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + capabilities: + - intranet + steps: + cluster_profile: equinix-ocp-metal + workflow: baremetalds-e2e-ovn-bgp-dualstack-no-overlay - as: e2e-aws-ovn-hypershift steps: cluster_profile: hypershift diff --git a/ci-operator/config/openshift/cluster-network-operator/openshift-cluster-network-operator-master.yaml b/ci-operator/config/openshift/cluster-network-operator/openshift-cluster-network-operator-master.yaml index ebba395387578..567befbb85742 100644 --- a/ci-operator/config/openshift/cluster-network-operator/openshift-cluster-network-operator-master.yaml +++ b/ci-operator/config/openshift/cluster-network-operator/openshift-cluster-network-operator-master.yaml @@ -471,6 +471,18 @@ tests: steps: cluster_profile: equinix-ocp-metal workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw +- as: e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + capabilities: + - intranet + steps: + cluster_profile: equinix-ocp-metal + workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay +- as: e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + capabilities: + - intranet + steps: + cluster_profile: equinix-ocp-metal + workflow: baremetalds-e2e-ovn-bgp-dualstack-no-overlay zz_generated_metadata: branch: master org: openshift diff --git a/ci-operator/config/openshift/origin/openshift-origin-main.yaml b/ci-operator/config/openshift/origin/openshift-origin-main.yaml index b26eade18b41e..f1e8ea1495ee1 100644 --- a/ci-operator/config/openshift/origin/openshift-origin-main.yaml +++ b/ci-operator/config/openshift/origin/openshift-origin-main.yaml @@ -556,6 +556,22 @@ tests: steps: cluster_profile: equinix-ocp-metal workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw +- always_run: false + as: e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + capabilities: + - intranet + optional: true + steps: + cluster_profile: equinix-ocp-metal + workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay +- always_run: false + as: e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + capabilities: + - intranet + optional: true + steps: + cluster_profile: equinix-ocp-metal + workflow: baremetalds-e2e-ovn-bgp-dualstack-no-overlay - always_run: false as: e2e-metal-ovn-single-node-live-iso optional: true diff --git a/ci-operator/config/openshift/ovn-kubernetes/openshift-ovn-kubernetes-master.yaml b/ci-operator/config/openshift/ovn-kubernetes/openshift-ovn-kubernetes-master.yaml index 072c850af2fed..ddc7a16e564ee 100644 --- a/ci-operator/config/openshift/ovn-kubernetes/openshift-ovn-kubernetes-master.yaml +++ b/ci-operator/config/openshift/ovn-kubernetes/openshift-ovn-kubernetes-master.yaml @@ -327,6 +327,18 @@ tests: steps: cluster_profile: equinix-ocp-metal workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw +- as: e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + capabilities: + - intranet + steps: + cluster_profile: equinix-ocp-metal + workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay +- as: e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + capabilities: + - intranet + steps: + cluster_profile: equinix-ocp-metal + workflow: baremetalds-e2e-ovn-bgp-dualstack-no-overlay - as: e2e-aws-ovn-hypershift steps: cluster_profile: hypershift diff --git a/ci-operator/jobs/openshift-priv/cluster-network-operator/openshift-priv-cluster-network-operator-master-presubmits.yaml b/ci-operator/jobs/openshift-priv/cluster-network-operator/openshift-priv-cluster-network-operator-master-presubmits.yaml index 0d1fe4119af87..b9fc0287322db 100644 --- a/ci-operator/jobs/openshift-priv/cluster-network-operator/openshift-priv-cluster-network-operator-master-presubmits.yaml +++ b/ci-operator/jobs/openshift-priv/cluster-network-operator/openshift-priv-cluster-network-operator-master-presubmits.yaml @@ -1822,6 +1822,89 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + decorate: true + decoration_config: + oauth_token_secret: + key: oauth + name: github-credentials-openshift-ci-robot-private-git-cloner + hidden: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-priv-cluster-network-operator-master-e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + path_alias: github.com/openshift/cluster-network-operator + rerun_command: /test e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --oauth-token-path=/usr/local/github-credentials/oauth + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /usr/local/github-credentials + name: github-credentials-openshift-ci-robot-private-git-cloner + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview,?($|\s.*) - agent: kubernetes always_run: true branches: @@ -1905,6 +1988,89 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-local-gw,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^master$ + - ^master- + cluster: build11 + context: ci/prow/e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + decorate: true + decoration_config: + oauth_token_secret: + key: oauth + name: github-credentials-openshift-ci-robot-private-git-cloner + hidden: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-priv-cluster-network-operator-master-e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + path_alias: github.com/openshift/cluster-network-operator + rerun_command: /test e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --oauth-token-path=/usr/local/github-credentials/oauth + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /usr/local/github-credentials + name: github-credentials-openshift-ci-robot-private-git-cloner + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview,?($|\s.*) - agent: kubernetes always_run: true branches: diff --git a/ci-operator/jobs/openshift-priv/origin/openshift-priv-origin-main-presubmits.yaml b/ci-operator/jobs/openshift-priv/origin/openshift-priv-origin-main-presubmits.yaml index 2f141b254c360..61e73fcfeab42 100644 --- a/ci-operator/jobs/openshift-priv/origin/openshift-priv-origin-main-presubmits.yaml +++ b/ci-operator/jobs/openshift-priv/origin/openshift-priv-origin-main-presubmits.yaml @@ -4911,6 +4911,90 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build03 + context: ci/prow/e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + decorate: true + decoration_config: + oauth_token_secret: + key: oauth + name: github-credentials-openshift-ci-robot-private-git-cloner + hidden: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-priv-origin-main-e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + optional: true + path_alias: github.com/openshift/origin + rerun_command: /test e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --oauth-token-path=/usr/local/github-credentials/oauth + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /usr/local/github-credentials + name: github-credentials-openshift-ci-robot-private-git-cloner + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview,?($|\s.*) - agent: kubernetes always_run: false branches: @@ -4995,6 +5079,90 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-local-gw,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build03 + context: ci/prow/e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + decorate: true + decoration_config: + oauth_token_secret: + key: oauth + name: github-credentials-openshift-ci-robot-private-git-cloner + hidden: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-priv-origin-main-e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + optional: true + path_alias: github.com/openshift/origin + rerun_command: /test e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --oauth-token-path=/usr/local/github-credentials/oauth + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /usr/local/github-credentials + name: github-credentials-openshift-ci-robot-private-git-cloner + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview,?($|\s.*) - agent: kubernetes always_run: false branches: diff --git a/ci-operator/jobs/openshift-priv/ovn-kubernetes/openshift-priv-ovn-kubernetes-master-presubmits.yaml b/ci-operator/jobs/openshift-priv/ovn-kubernetes/openshift-priv-ovn-kubernetes-master-presubmits.yaml index 2d5b7137b5051..29b927200200d 100644 --- a/ci-operator/jobs/openshift-priv/ovn-kubernetes/openshift-priv-ovn-kubernetes-master-presubmits.yaml +++ b/ci-operator/jobs/openshift-priv/ovn-kubernetes/openshift-priv-ovn-kubernetes-master-presubmits.yaml @@ -2173,6 +2173,90 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^master$ + - ^master- + cluster: build07 + context: ci/prow/e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + decorate: true + decoration_config: + skip_cloning: true + hidden: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-priv-ovn-kubernetes-master-e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + path_alias: github.com/openshift/ovn-kubernetes + rerun_command: /test e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --oauth-token-path=/usr/local/github-credentials/oauth + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /usr/local/github-credentials + name: github-credentials-openshift-ci-robot-private-git-cloner + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: github-credentials-openshift-ci-robot-private-git-cloner + secret: + secretName: github-credentials-openshift-ci-robot-private-git-cloner + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview,?($|\s.*) - agent: kubernetes always_run: true branches: @@ -2257,6 +2341,90 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-local-gw,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^master$ + - ^master- + cluster: build07 + context: ci/prow/e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + decorate: true + decoration_config: + skip_cloning: true + hidden: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-priv-ovn-kubernetes-master-e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + path_alias: github.com/openshift/ovn-kubernetes + rerun_command: /test e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --oauth-token-path=/usr/local/github-credentials/oauth + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /usr/local/github-credentials + name: github-credentials-openshift-ci-robot-private-git-cloner + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: github-credentials-openshift-ci-robot-private-git-cloner + secret: + secretName: github-credentials-openshift-ci-robot-private-git-cloner + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview,?($|\s.*) - agent: kubernetes always_run: false branches: diff --git a/ci-operator/jobs/openshift/cluster-network-operator/openshift-cluster-network-operator-master-presubmits.yaml b/ci-operator/jobs/openshift/cluster-network-operator/openshift-cluster-network-operator-master-presubmits.yaml index ce14a70fed83f..4b0687ebbe814 100644 --- a/ci-operator/jobs/openshift/cluster-network-operator/openshift-cluster-network-operator-master-presubmits.yaml +++ b/ci-operator/jobs/openshift/cluster-network-operator/openshift-cluster-network-operator-master-presubmits.yaml @@ -1888,6 +1888,79 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^master$ + - ^master- + cluster: build05 + context: ci/prow/e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + decorate: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-cluster-network-operator-master-e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + rerun_command: /test e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview,?($|\s.*) - agent: kubernetes always_run: true branches: @@ -1961,6 +2034,79 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-local-gw,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^master$ + - ^master- + cluster: build05 + context: ci/prow/e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + decorate: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-cluster-network-operator-master-e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + rerun_command: /test e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview,?($|\s.*) - agent: kubernetes always_run: true branches: diff --git a/ci-operator/jobs/openshift/origin/openshift-origin-main-presubmits.yaml b/ci-operator/jobs/openshift/origin/openshift-origin-main-presubmits.yaml index 2765a017fcdc2..460848112bd37 100644 --- a/ci-operator/jobs/openshift/origin/openshift-origin-main-presubmits.yaml +++ b/ci-operator/jobs/openshift/origin/openshift-origin-main-presubmits.yaml @@ -4321,6 +4321,80 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build06 + context: ci/prow/e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + decorate: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-origin-main-e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + optional: true + rerun_command: /test e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview,?($|\s.*) - agent: kubernetes always_run: false branches: @@ -4395,6 +4469,80 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-local-gw,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build06 + context: ci/prow/e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + decorate: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-origin-main-e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + optional: true + rerun_command: /test e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview,?($|\s.*) - agent: kubernetes always_run: false branches: diff --git a/ci-operator/jobs/openshift/ovn-kubernetes/openshift-ovn-kubernetes-master-presubmits.yaml b/ci-operator/jobs/openshift/ovn-kubernetes/openshift-ovn-kubernetes-master-presubmits.yaml index c669d44ca8449..642cb2540062b 100644 --- a/ci-operator/jobs/openshift/ovn-kubernetes/openshift-ovn-kubernetes-master-presubmits.yaml +++ b/ci-operator/jobs/openshift/ovn-kubernetes/openshift-ovn-kubernetes-master-presubmits.yaml @@ -2217,6 +2217,81 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^master$ + - ^master- + cluster: build10 + context: ci/prow/e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + decorate: true + decoration_config: + skip_cloning: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-ovn-kubernetes-master-e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + rerun_command: /test e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview,?($|\s.*) - agent: kubernetes always_run: true branches: @@ -2292,6 +2367,81 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-local-gw,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^master$ + - ^master- + cluster: build10 + context: ci/prow/e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + decorate: true + decoration_config: + skip_cloning: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: equinix-ocp-metal + ci-operator.openshift.io/cloud-cluster-profile: equinix-ocp-metal + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-ovn-kubernetes-master-e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + rerun_command: /test e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-metal-ipi-ovn-dualstack-bgp-no-overlay-techpreview,?($|\s.*) - agent: kubernetes always_run: false branches: diff --git a/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-local-gw-no-overlay/OWNERS b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-local-gw-no-overlay/OWNERS new file mode 100644 index 0000000000000..e590b75a0840e --- /dev/null +++ b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-local-gw-no-overlay/OWNERS @@ -0,0 +1,5 @@ +approvers: +- core-networking-approvers +reviewers: +- core-networking-reviewers + diff --git a/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-local-gw-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay-workflow.metadata.json b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-local-gw-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay-workflow.metadata.json new file mode 100644 index 0000000000000..67f6dc88117eb --- /dev/null +++ b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-local-gw-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay-workflow.metadata.json @@ -0,0 +1,11 @@ +{ + "path": "baremetalds/e2e/ovn/bgp/dualstack-local-gw-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay-workflow.yaml", + "owners": { + "approvers": [ + "core-networking-approvers" + ], + "reviewers": [ + "core-networking-reviewers" + ] + } +} \ No newline at end of file diff --git a/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-local-gw-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay-workflow.yaml b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-local-gw-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay-workflow.yaml new file mode 100644 index 0000000000000..3bf79a24cb77b --- /dev/null +++ b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-local-gw-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay-workflow.yaml @@ -0,0 +1,42 @@ +workflow: + as: baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay + steps: + cluster_profile: equinix-ocp-metal + env: + DEVSCRIPTS_CONFIG: | + IP_STACK=v4v6 + FEATURE_SET=TechPreviewNoUpgrade + # https://issues.redhat.com/browse/OCPBUGS-52194 + DHCP_LEASE_EXPIRY=0 + EXTRA_MG_ARGS: --host-network + EXTRA_NETWORK_CONFIG: | + EXTRA_NETWORK_NAMES="extranet" + EXTRANET_NETWORK_SUBNET_V4='192.168.221.0/24' + EXTRANET_NETWORK_SUBNET_V6='fd2e:6f44:5dd8:ca56::/120' + KONFLUX_TARGET_OPERATORS: nmstate + TEST_SKIPS: Services should fallback to local terminating endpoints when there + are no ready endpoints with externalTrafficPolicy=Local\|CPU Partitioning + cluster platform workloads should be annotated correctly for Deployments\|egressip\|EgressIP\|EgressService\|blocking ICMP needs frag\|Multicast + pre: + - ref: baremetalds-devscripts-conf-featureset + - ref: baremetalds-devscripts-conf-extranetwork + - ref: baremetalds-e2e-ovn-bgp-no-overlay + - chain: baremetalds-ofcir-pre + - ref: baremetalds-e2e-ovn-bgp-pre + - ref: ovn-shared-to-local-gateway-mode-migration + - ref: deploy-konflux-operator + - ref: baremetalds-e2e-ovn-debug-enable-console + test: + - chain: baremetalds-ipi-test + post: + - ref: baremetalds-e2e-ovn-debug-console-gather + - chain: baremetalds-ofcir-post + documentation: |- + This workflow executes the common end-to-end test suite on a cluster provisioned by running dev-scripts + on a packet server with both IPv4 and IPv6 enabled with the cluster configured with NoOverlay network transport, + Unmanaged routing, FRR provider, and BGP in local gateway mode. Additionally it configures an additional + machine network and installs kubernetes-nmstate operator to be used with VRF-Lite test cases. + This workflow differs from baremetalds-e2e-ovn-bgp-dualstack-local-gw by creating a NoOverlay network + operator manifest before cluster installation, and applying baremetalds-e2e-ovn-bgp-pre before + baremetalds-ofcir-pre. + diff --git a/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-no-overlay/OWNERS b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-no-overlay/OWNERS new file mode 100644 index 0000000000000..e590b75a0840e --- /dev/null +++ b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-no-overlay/OWNERS @@ -0,0 +1,5 @@ +approvers: +- core-networking-approvers +reviewers: +- core-networking-reviewers + diff --git a/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-no-overlay-workflow.metadata.json b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-no-overlay-workflow.metadata.json new file mode 100644 index 0000000000000..92e3a01d43a60 --- /dev/null +++ b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-no-overlay-workflow.metadata.json @@ -0,0 +1,11 @@ +{ + "path": "baremetalds/e2e/ovn/bgp/dualstack-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-no-overlay-workflow.yaml", + "owners": { + "approvers": [ + "core-networking-approvers" + ], + "reviewers": [ + "core-networking-reviewers" + ] + } +} \ No newline at end of file diff --git a/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-no-overlay-workflow.yaml b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-no-overlay-workflow.yaml new file mode 100644 index 0000000000000..2ca2b2b8db2e6 --- /dev/null +++ b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/dualstack-no-overlay/baremetalds-e2e-ovn-bgp-dualstack-no-overlay-workflow.yaml @@ -0,0 +1,34 @@ +workflow: + as: baremetalds-e2e-ovn-bgp-dualstack-no-overlay + steps: + cluster_profile: equinix-ocp-metal + env: + DEVSCRIPTS_CONFIG: | + IP_STACK=v4v6 + FEATURE_SET=TechPreviewNoUpgrade + # https://issues.redhat.com/browse/OCPBUGS-52194 + DHCP_LEASE_EXPIRY=0 + EXTRA_MG_ARGS: --host-network + TEST_SKIPS: Services should fallback to local terminating endpoints when there + are no ready endpoints with externalTrafficPolicy=Local\|CPU Partitioning + cluster platform workloads should be annotated correctly for Deployments\|egressip\|EgressIP\|EgressService\|blocking ICMP needs frag\|Multicast + pre: + - ref: baremetalds-devscripts-conf-featureset + - ref: baremetalds-e2e-ovn-bgp-no-overlay + - chain: baremetalds-ofcir-pre + - ref: baremetalds-e2e-ovn-bgp-pre + - ref: baremetalds-e2e-ovn-debug-enable-console + test: + - chain: baremetalds-ipi-test + post: + - ref: baremetalds-e2e-ovn-debug-console-gather + - chain: baremetalds-ofcir-post + documentation: |- + This workflow executes the common end-to-end test suite on a cluster provisioned by running dev-scripts + on a packet server with both IPv4 and IPv6 enabled with the cluster configured with NoOverlay network transport, + Unmanaged routing, FRR provider, and BGP in shared gateway mode. + This workflow differs from baremetalds-e2e-ovn-bgp-dualstack by creating a NoOverlay network operator + manifest before cluster installation, and from baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay + by using shared gateway mode instead of local gateway mode (without extra network and nmstate operator). + + diff --git a/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/no-overlay/OWNERS b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/no-overlay/OWNERS new file mode 100644 index 0000000000000..f36717f93b4dd --- /dev/null +++ b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/no-overlay/OWNERS @@ -0,0 +1,6 @@ +approvers: +- core-networking-approvers +reviewers: +- core-networking-reviewers + + diff --git a/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/no-overlay/baremetalds-e2e-ovn-bgp-no-overlay-commands.sh b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/no-overlay/baremetalds-e2e-ovn-bgp-no-overlay-commands.sh new file mode 100644 index 0000000000000..4c3a2384bbc7d --- /dev/null +++ b/ci-operator/step-registry/baremetalds/e2e/ovn/bgp/no-overlay/baremetalds-e2e-ovn-bgp-no-overlay-commands.sh @@ -0,0 +1,170 @@ +#!/bin/bash + +set -o nounset +set -o errexit +set -o pipefail + +# Fetch packet basic configuration +# shellcheck source=/dev/null +source "${SHARED_DIR}/packet-conf.sh" + +echo "Setting up FRR route reflector container on remote server..." + +ssh "${SSHOPTS[@]}" "root@${IP}" bash -x << 'EOFSETUP' +set -o nounset +set -o errexit +set -o pipefail + +# Create configuration directory and FRR config +mkdir -p ~/frr-no-overlay + +cat > ~/frr-no-overlay/frr.conf <<'EOFFRR' +frr defaults traditional +hostname rr-container +log stdout informational + +router bgp 64512 + bgp router-id 192.168.111.1 + bgp cluster-id 192.168.111.1 + no bgp ebgp-requires-policy + no bgp default ipv4-unicast + bgp graceful-restart preserve-fw-state + neighbor NODES peer-group + neighbor NODES remote-as 64512 + bgp listen range 192.168.111.0/24 peer-group NODES + address-family ipv4 unicast + neighbor NODES activate + neighbor NODES route-reflector-client + exit-address-family +exit + +line vty +EOFFRR + +echo "FRR configuration created at ~/frr-no-overlay/frr.conf" +cat ~/frr-no-overlay/frr.conf + +cat > ~/frr-no-overlay/daemons <<'EOFDAEMONS' +bgpd=yes +ospfd=no +ospf6d=no +ripd=no +ripngd=no +isisd=no +pimd=no +pim6d=no +ldpd=no +nhrpd=no +eigrpd=no +babeld=no +sharpd=no +pbrd=no +bfdd=no +fabricd=no +vrrpd=no +pathd=no + +vtysh_enable=yes +zebra_options=" -A 127.0.0.1 -s 90000000" +bgpd_options=" -A 127.0.0.1" + +# Maximum number of FDs +MAX_FDS=1024 +EOFDAEMONS +echo "Daemons configuration created at ~/frr-no-overlay/daemons" +cat ~/frr-no-overlay/daemons + +# Open firewall port for BGP +echo "Opening firewall port 179 for BGP..." +sudo firewall-cmd --zone=libvirt --add-port=179/tcp --permanent || true +sudo firewall-cmd --zone=libvirt --add-port=179/tcp || true + +# Run the FRR route reflector container +echo "Starting FRR route reflector container..." +sudo podman rm -f frr || true +sudo podman run -d --name frr \ + --network host \ + --cap-add NET_ADMIN \ + --cap-add NET_RAW \ + --cap-add SYS_ADMIN \ + -v ~/frr-no-overlay/frr.conf:/etc/frr/frr.conf:ro,Z \ + quay.io/frrouting/frr:10.2.1 \ + /usr/lib/frr/bgpd -n -Z -S -f /etc/frr/frr.conf + +# Verify the container is running +sleep 5 +sudo podman ps | grep frr +echo "FRR route reflector container is running" +EOFSETUP + +echo "Creating network operator manifest with NoOverlay transport..." + +# Write the network operator configuration to a manifest file +# This will be picked up by dev-scripts during cluster installation +cat > "${SHARED_DIR}/manifest_network-operator-no-overlay.yaml" < "${SHARED_DIR}/manifest_frr-configuration-no-overlay.yaml" < "${SHARED_DIR}/manifest_route-advertisements-no-overlay.yaml" <