Skip to content

stackrox: add OCP-on-AWS dual-stack IPv4/IPv6 e2e tests - #83114

Open
davdhacs wants to merge 5 commits into
openshift:mainfrom
davdhacs:davdhacs/ocp-aws-dualstack-tests
Open

stackrox: add OCP-on-AWS dual-stack IPv4/IPv6 e2e tests#83114
davdhacs wants to merge 5 commits into
openshift:mainfrom
davdhacs:davdhacs/ocp-aws-dualstack-tests

Conversation

@davdhacs

@davdhacs davdhacs commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

/uncc

Add OCP-on-AWS e2e test jobs for IPv4/IPv6 dual-stack networking validation (ROX-10856). Three modes:

  • ipv4-qa-e2e-tests: IPv4-only baseline on AWS
  • dual-qa-e2e-tests: dual-stack IPv4-primary
  • dual-ipv6-primary-qa-e2e-tests: dual-stack IPv6-primary

Uses CLOUD_PROVIDER=aws and NETWORK_STACK env vars from the automation-flavors ocp-4 image (openshift-4-latest tag, stackrox/automation-flavors#358).

All three modes validated via simulate — clusters install successfully on AWS with dual-stack networking.

ROX-10856

Summary by CodeRabbit

Adds optional OCP-on-AWS end-to-end CI jobs for stackrox master. The jobs validate IPv4-only, dual-stack IPv4-primary, and dual-stack IPv6-primary networking on OCP 4.22.

The CI configuration passes CLOUD_PROVIDER=aws and the selected NETWORK_STACK to the OCP 4 automation workflow. All three network modes support /test and /pj-rehearse execution.

Add ci-operator variant ocp-aws-dualstack with 3 network modes:
- ipv4-qa-e2e-tests: OCP on AWS, IPv4-only (baseline)
- dual-qa-e2e-tests: OCP on AWS, dual-stack IPv4-primary
- dual-ipv6-primary-qa-e2e-tests: OCP on AWS, dual-stack IPv6-primary

Uses CLOUD_PROVIDER=aws and NETWORK_STACK env vars from the
automation-flavors ocp-4 image. All jobs are optional, triggered
via /test or /pj-rehearse.

ROX-10856

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)
  • ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml is excluded by !ci-operator/jobs/**

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: ca72b7d6-9593-4293-9445-250d092e33e3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Walkthrough

The PR adds the Stackrox master AWS dual-stack CI configuration. It defines build settings and three optional OCP 4.22 E2E network variants. It also adds empty-default network variables to the OCP 4 E2E workflow pre-step.

Changes

Stackrox dual-stack CI

Layer / File(s) Summary
Stackrox AWS dual-stack CI configuration
ci-operator/config/stackrox/stackrox/stackrox-stackrox-master__ocp-aws-dualstack.yaml
Adds image sources, build resources, binary build commands, repository metadata, and optional IPv4, dual-stack, and IPv6-primary E2E workflows.
OCP 4 E2E network settings
ci-operator/step-registry/stackrox/automation-flavors/ocp-4-e2e/stackrox-automation-flavors-ocp-4-e2e-workflow.yaml
Adds empty-default CLOUD_PROVIDER and NETWORK_STACK variables to the ocp-4-create pre-step.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

  • openshift/release#82242: Adds related dual-stack IPv6-primary E2E test configurations and network settings for CI workflows.
🚥 Pre-merge checks | ✅ 15
✅ Passed checks (15 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the main change: adding OCP-on-AWS dual-stack IPv4 and IPv6 end-to-end tests.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed The patch changes only CI YAML and generated Prow job names; it adds no Ginkgo It, Describe, Context, or When titles, and no dynamic test-title values are present.
Test Structure And Quality ✅ Passed The commit changes only three YAML CI configuration/job files; it adds no Ginkgo test code or It blocks, so these Ginkgo quality checks do not apply.
Microshift Test Compatibility ✅ Passed The PR changes only ci-operator YAML configuration and generated presubmit jobs; it adds no Ginkgo e2e test or MicroShift-incompatible API usage.
Single Node Openshift (Sno) Test Compatibility ✅ Passed The pull request changes only three YAML CI configuration files; the diff adds no Ginkgo declarations or e2e test implementation requiring SNO compatibility review.
Topology-Aware Scheduling Compatibility ✅ Passed The diff only adds CI job/workflow YAML and environment variables; it introduces no affinity, topology spread, node selector, toleration, replica, or PDB scheduling constraints.
Ote Binary Stdout Contract ✅ Passed The PR changes only YAML CI configuration and generated Prow jobs; no OTE binary source, main, suite setup, or process-level stdout writes were added.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed The diff adds only CI YAML, generated presubmits, and workflow environment defaults; it adds no Ginkgo test declarations or test source to assess.
No-Weak-Crypto ✅ Passed The three changed files add only CI YAML, environment variables, job wiring, and credential mounts; no MD5, SHA1, DES, RC4, Blowfish, ECB, custom crypto, or secret comparisons appear.
Container-Privileges ✅ Passed Changed YAML contains no privileged, hostPID, hostNetwork, hostIPC, SYS_ADMIN, allowPrivilegeEscalation, or explicit root settings.
No-Sensitive-Data-In-Logs ✅ Passed The PR adds no sensitive logging. New content only passes static AWS/network values; existing echoes print OCP_VERSION, and referenced steps do not print credentials or tokens.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@openshift-ci

openshift-ci Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: davdhacs

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Aug 7, 2026
davdhacs and others added 2 commits August 7, 2026 10:16
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@davdhacs

davdhacs commented Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-ipv4-qa-e2e-tests

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@davdhacs

davdhacs commented Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-ipv4-qa-e2e-tests

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@davdhacs

davdhacs commented Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-ipv4-qa-e2e-tests

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

[REHEARSALNOTIFIER]
@davdhacs: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests stackrox/stackrox presubmit Presubmit changed
pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-dual-qa-e2e-tests stackrox/stackrox presubmit Presubmit changed
pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-ipv4-qa-e2e-tests stackrox/stackrox presubmit Presubmit changed
pull-ci-stackrox-stackrox-master-ocp-4-12-qa-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-4-12-scanner-v4-install-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-4-12-operator-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-4-12-ui-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-4-12-compliance-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-4-12-nongroovy-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-stable-scanner-v4-install-qa-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-stable-scanner-v4-install-scanner-v4-install-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-stable-scanner-v4-install-operator-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-stable-scanner-v4-install-ui-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-stable-scanner-v4-install-compliance-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-stable-scanner-v4-install-nongroovy-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-4-22-qa-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-4-22-scanner-v4-install-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-4-22-operator-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-4-22-ui-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-4-22-fips-qa-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-4-22-compliance-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-4-22-nongroovy-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-4-22-vm-scanning-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-dev-preview-qa-e2e-tests stackrox/stackrox presubmit Registry content changed
pull-ci-stackrox-stackrox-master-ocp-dev-preview-scanner-v4-install-tests stackrox/stackrox presubmit Registry content changed

A total of 159 jobs have been affected by this change. The above listing is non-exhaustive and limited to 25 jobs.

A full list of affected jobs can be found here

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@davdhacs

davdhacs commented Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-ipv4-qa-e2e-tests

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@davdhacs

davdhacs commented Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-dual-qa-e2e-tests

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@davdhacs

davdhacs commented Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-ci

openshift-ci Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

@davdhacs: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/rehearse/stackrox/stackrox/master/ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests 01338c0 link unknown /pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests
ci/rehearse/stackrox/stackrox/master/ocp-aws-dualstack-dual-qa-e2e-tests 01338c0 link unknown /pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-dual-qa-e2e-tests
ci/rehearse/stackrox/stackrox/master/ocp-aws-dualstack-ipv4-qa-e2e-tests 01338c0 link unknown /pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-ipv4-qa-e2e-tests

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant