From 4008f82a36fc247e183ba93dd62e3145758fd218 Mon Sep 17 00:00:00 2001 From: jubittajohn Date: Wed, 29 Jul 2026 13:58:09 -0400 Subject: [PATCH] feat(oauth-apiserver): authenticate to build farm registry in verify step The verify-openapi-spec check pulls binaries from the CI release image on build farm registries, which aren't covered by the cluster profile pull secret. Add `oc registry login` before `make verify` so the job can pull from CI-internal registries. Signed-off-by: jubittajohn --- .../oauth-apiserver/openshift-oauth-apiserver-master.yaml | 4 ++++ .../openshift-oauth-apiserver-release-4.23.yaml | 4 ++++ .../openshift-oauth-apiserver-release-5.0.yaml | 4 ++++ .../openshift-oauth-apiserver-release-5.1.yaml | 4 ++++ 4 files changed, 16 insertions(+) diff --git a/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-master.yaml b/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-master.yaml index 619e8dc7da88d..95c126478ce08 100644 --- a/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-master.yaml +++ b/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-master.yaml @@ -48,7 +48,11 @@ tests: test: - as: verify commands: | + oc registry login make verify -k --warn-undefined-variables + env: + - default: /tmp/registry-auth.json + name: REGISTRY_AUTH_FILE from: oauth-apiserver-bin-with-oc resources: requests: diff --git a/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-release-4.23.yaml b/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-release-4.23.yaml index f0ece388f96af..97591d9830384 100644 --- a/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-release-4.23.yaml +++ b/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-release-4.23.yaml @@ -48,7 +48,11 @@ tests: test: - as: verify commands: | + oc registry login make verify -k --warn-undefined-variables + env: + - default: /tmp/registry-auth.json + name: REGISTRY_AUTH_FILE from: oauth-apiserver-bin-with-oc resources: requests: diff --git a/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-release-5.0.yaml b/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-release-5.0.yaml index ffc302cc3725d..fbee577587a04 100644 --- a/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-release-5.0.yaml +++ b/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-release-5.0.yaml @@ -49,7 +49,11 @@ tests: test: - as: verify commands: | + oc registry login make verify -k --warn-undefined-variables + env: + - default: /tmp/registry-auth.json + name: REGISTRY_AUTH_FILE from: oauth-apiserver-bin-with-oc resources: requests: diff --git a/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-release-5.1.yaml b/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-release-5.1.yaml index 660598bc7b8c0..9dabd3e8abccb 100644 --- a/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-release-5.1.yaml +++ b/ci-operator/config/openshift/oauth-apiserver/openshift-oauth-apiserver-release-5.1.yaml @@ -48,7 +48,11 @@ tests: test: - as: verify commands: | + oc registry login make verify -k --warn-undefined-variables + env: + - default: /tmp/registry-auth.json + name: REGISTRY_AUTH_FILE from: oauth-apiserver-bin-with-oc resources: requests: