From 6da11e583867b8b58ba2ee934db3d8baa073ddab Mon Sep 17 00:00:00 2001
From: jubittajohn <jujohn@redhat.com>
Date: Wed, 29 Jul 2026 13:35:17 -0400
Subject: [PATCH] feat(openshift-apiserver): authenticate to build farm
 registry and mount ci-pull-credentials in verify step

Signed-off-by: jubittajohn <jujohn@redhat.com>
---
 .../openshift-openshift-apiserver-main.yaml            | 10 ++++++++++
 .../openshift-openshift-apiserver-release-4.23.yaml    | 10 ++++++++++
 .../openshift-openshift-apiserver-release-5.0.yaml     | 10 ++++++++++
 .../openshift-openshift-apiserver-release-5.1.yaml     | 10 ++++++++++
 4 files changed, 40 insertions(+)

diff --git a/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-main.yaml b/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-main.yaml
index 8b8a3edb2ac8d..f9ffd549d9a2a 100644
--- a/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-main.yaml
+++ b/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-main.yaml
@@ -48,7 +48,17 @@ tests:
     test:
     - as: verify
       commands: |
+        cp /var/run/secrets/ci-pull-credentials/.dockerconfigjson "${REGISTRY_AUTH_FILE}"
+        oc registry login --to="${REGISTRY_AUTH_FILE}"
+        export OPENSHIFT_RELEASE="${RELEASE_IMAGE_LATEST}"
         make verify -k --warn-undefined-variables
+      credentials:
+      - mount_path: /var/run/secrets/ci-pull-credentials
+        name: ci-pull-credentials
+        namespace: ci
+      env:
+      - default: /tmp/registry-auth.json
+        name: REGISTRY_AUTH_FILE
       from: bin-with-oc
       resources:
         requests:
diff --git a/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-release-4.23.yaml b/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-release-4.23.yaml
index 490cf335c0bb2..0f71443dd16c3 100644
--- a/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-release-4.23.yaml
+++ b/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-release-4.23.yaml
@@ -48,7 +48,17 @@ tests:
     test:
     - as: verify
       commands: |
+        cp /var/run/secrets/ci-pull-credentials/.dockerconfigjson "${REGISTRY_AUTH_FILE}"
+        oc registry login --to="${REGISTRY_AUTH_FILE}"
+        export OPENSHIFT_RELEASE="${RELEASE_IMAGE_LATEST}"
         make verify -k --warn-undefined-variables
+      credentials:
+      - mount_path: /var/run/secrets/ci-pull-credentials
+        name: ci-pull-credentials
+        namespace: ci
+      env:
+      - default: /tmp/registry-auth.json
+        name: REGISTRY_AUTH_FILE
       from: bin-with-oc
       resources:
         requests:
diff --git a/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-release-5.0.yaml b/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-release-5.0.yaml
index c7c585b6e3400..724705c88c065 100644
--- a/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-release-5.0.yaml
+++ b/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-release-5.0.yaml
@@ -49,7 +49,17 @@ tests:
     test:
     - as: verify
       commands: |
+        cp /var/run/secrets/ci-pull-credentials/.dockerconfigjson "${REGISTRY_AUTH_FILE}"
+        oc registry login --to="${REGISTRY_AUTH_FILE}"
+        export OPENSHIFT_RELEASE="${RELEASE_IMAGE_LATEST}"
         make verify -k --warn-undefined-variables
+      credentials:
+      - mount_path: /var/run/secrets/ci-pull-credentials
+        name: ci-pull-credentials
+        namespace: ci
+      env:
+      - default: /tmp/registry-auth.json
+        name: REGISTRY_AUTH_FILE
       from: bin-with-oc
       resources:
         requests:
diff --git a/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-release-5.1.yaml b/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-release-5.1.yaml
index c5ab47d8be799..30ef80eb55830 100644
--- a/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-release-5.1.yaml
+++ b/ci-operator/config/openshift/openshift-apiserver/openshift-openshift-apiserver-release-5.1.yaml
@@ -48,7 +48,17 @@ tests:
     test:
     - as: verify
       commands: |
+        cp /var/run/secrets/ci-pull-credentials/.dockerconfigjson "${REGISTRY_AUTH_FILE}"
+        oc registry login --to="${REGISTRY_AUTH_FILE}"
+        export OPENSHIFT_RELEASE="${RELEASE_IMAGE_LATEST}"
         make verify -k --warn-undefined-variables
+      credentials:
+      - mount_path: /var/run/secrets/ci-pull-credentials
+        name: ci-pull-credentials
+        namespace: ci
+      env:
+      - default: /tmp/registry-auth.json
+        name: REGISTRY_AUTH_FILE
       from: bin-with-oc
       resources:
         requests: