From b8421ea80711b2c71e2fcfc5265c07c7524db192 Mon Sep 17 00:00:00 2001 From: davdhacs <105243888+davdhacs@users.noreply.github.com> Date: Fri, 7 Aug 2026 10:11:03 -0600 Subject: [PATCH 1/5] stackrox: add OCP-on-AWS dual-stack e2e test jobs Add ci-operator variant ocp-aws-dualstack with 3 network modes: - ipv4-qa-e2e-tests: OCP on AWS, IPv4-only (baseline) - dual-qa-e2e-tests: OCP on AWS, dual-stack IPv4-primary - dual-ipv6-primary-qa-e2e-tests: OCP on AWS, dual-stack IPv6-primary Uses CLOUD_PROVIDER=aws and NETWORK_STACK env vars from the automation-flavors ocp-4 image. All jobs are optional, triggered via /test or /pj-rehearse. ROX-10856 Co-Authored-By: Claude Opus 4.6 (1M context) --- ...ox-stackrox-master__ocp-aws-dualstack.yaml | 54 +++++ .../stackrox-stackrox-master-presubmits.yaml | 225 ++++++++++++++++++ ...automation-flavors-ocp-4-e2e-workflow.yaml | 4 + 3 files changed, 283 insertions(+) create mode 100644 ci-operator/config/stackrox/stackrox/stackrox-stackrox-master__ocp-aws-dualstack.yaml diff --git a/ci-operator/config/stackrox/stackrox/stackrox-stackrox-master__ocp-aws-dualstack.yaml b/ci-operator/config/stackrox/stackrox/stackrox-stackrox-master__ocp-aws-dualstack.yaml new file mode 100644 index 0000000000000..ea6bd43fb8f24 --- /dev/null +++ b/ci-operator/config/stackrox/stackrox/stackrox-stackrox-master__ocp-aws-dualstack.yaml @@ -0,0 +1,54 @@ +base_images: + ocp-4: + name: automation-flavors + namespace: stackrox + tag: openshift-4-latest +build_root: + image_stream_tag: + name: apollo-ci + namespace: stackrox + tag: stackrox-ui-test-stable +resources: + '*': + requests: + cpu: 2000m + memory: 4000Mi +test_binary_build_commands: .openshift-ci/dispatch.sh test-binary-build-commands +tests: +- always_run: false + as: ipv4-qa-e2e-tests + optional: true + steps: + env: + CLOUD_PROVIDER: aws + COLLECTION_METHOD: core_bpf + OCP_VERSION: ocp/candidate-4.22 + TEST_SUITE: ocp-qa-e2e-tests + workflow: stackrox-automation-flavors-ocp-4-e2e +- always_run: false + as: dual-qa-e2e-tests + optional: true + steps: + env: + CLOUD_PROVIDER: aws + COLLECTION_METHOD: core_bpf + NETWORK_STACK: dual + OCP_VERSION: ocp/candidate-4.22 + TEST_SUITE: ocp-qa-e2e-tests + workflow: stackrox-automation-flavors-ocp-4-e2e +- always_run: false + as: dual-ipv6-primary-qa-e2e-tests + optional: true + steps: + env: + CLOUD_PROVIDER: aws + COLLECTION_METHOD: core_bpf + NETWORK_STACK: dual-ipv6-primary + OCP_VERSION: ocp/candidate-4.22 + TEST_SUITE: ocp-qa-e2e-tests + workflow: stackrox-automation-flavors-ocp-4-e2e +zz_generated_metadata: + branch: master + org: stackrox + repo: stackrox + variant: ocp-aws-dualstack diff --git a/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml b/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml index 58da62c254938..d2b51a4e322bc 100644 --- a/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml +++ b/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml @@ -6754,3 +6754,228 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )rosa-qa-e2e-tests,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + context: ci/prow/ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: ocp-aws-dualstack + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests + optional: true + rerun_command: /test ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=dual-ipv6-primary-qa-e2e-tests + - --variant=ocp-aws-dualstack + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + context: ci/prow/ocp-aws-dualstack-dual-qa-e2e-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: ocp-aws-dualstack + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-dual-qa-e2e-tests + optional: true + rerun_command: /test ocp-aws-dualstack-dual-qa-e2e-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=dual-qa-e2e-tests + - --variant=ocp-aws-dualstack + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )ocp-aws-dualstack-dual-qa-e2e-tests,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + context: ci/prow/ocp-aws-dualstack-ipv4-qa-e2e-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: ocp-aws-dualstack + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-ipv4-qa-e2e-tests + optional: true + rerun_command: /test ocp-aws-dualstack-ipv4-qa-e2e-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=ipv4-qa-e2e-tests + - --variant=ocp-aws-dualstack + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )ocp-aws-dualstack-ipv4-qa-e2e-tests,?($|\s.*) diff --git a/ci-operator/step-registry/stackrox/automation-flavors/ocp-4-e2e/stackrox-automation-flavors-ocp-4-e2e-workflow.yaml b/ci-operator/step-registry/stackrox/automation-flavors/ocp-4-e2e/stackrox-automation-flavors-ocp-4-e2e-workflow.yaml index 46bc0bde37675..69d9fb1534d1a 100644 --- a/ci-operator/step-registry/stackrox/automation-flavors/ocp-4-e2e/stackrox-automation-flavors-ocp-4-e2e-workflow.yaml +++ b/ci-operator/step-registry/stackrox/automation-flavors/ocp-4-e2e/stackrox-automation-flavors-ocp-4-e2e-workflow.yaml @@ -29,6 +29,10 @@ workflow: default: 'openshift-worker-node@acs-san-stackroxci.iam.gserviceaccount.com' - name: OS_IMAGE_STREAM default: '' + - name: CLOUD_PROVIDER + default: '' + - name: NETWORK_STACK + default: '' from: ocp-4 resources: requests: From a922711d429e026dbcf8530d2c39190737ce4122 Mon Sep 17 00:00:00 2001 From: davdhacs <105243888+davdhacs@users.noreply.github.com> Date: Fri, 7 Aug 2026 10:16:05 -0600 Subject: [PATCH 2/5] generated: add cluster assignment to ocp-aws-dualstack jobs Co-Authored-By: Claude Opus 4.6 (1M context) --- .../stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml b/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml index d2b51a4e322bc..164e152e50600 100644 --- a/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml +++ b/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml @@ -6759,6 +6759,7 @@ presubmits: branches: - ^master$ - ^master- + cluster: build01 context: ci/prow/ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests decorate: true decoration_config: @@ -6834,6 +6835,7 @@ presubmits: branches: - ^master$ - ^master- + cluster: build01 context: ci/prow/ocp-aws-dualstack-dual-qa-e2e-tests decorate: true decoration_config: @@ -6909,6 +6911,7 @@ presubmits: branches: - ^master$ - ^master- + cluster: build01 context: ci/prow/ocp-aws-dualstack-ipv4-qa-e2e-tests decorate: true decoration_config: From 432cc9c11adbc69d87e3064032d23d58395d2ded Mon Sep 17 00:00:00 2001 From: davdhacs <105243888+davdhacs@users.noreply.github.com> Date: Fri, 7 Aug 2026 10:24:34 -0600 Subject: [PATCH 3/5] generated: regenerate presubmits for ocp-aws-dualstack Co-Authored-By: Claude Opus 4.6 (1M context) --- .../stackrox-stackrox-master-presubmits.yaml | 456 +++++++++--------- 1 file changed, 228 insertions(+), 228 deletions(-) diff --git a/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml b/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml index 164e152e50600..d07d71715cb28 100644 --- a/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml +++ b/ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-master-presubmits.yaml @@ -4246,6 +4246,234 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )ocp-5-0-vm-scanning-e2e-tests,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build01 + context: ci/prow/ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: ocp-aws-dualstack + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests + optional: true + rerun_command: /test ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=dual-ipv6-primary-qa-e2e-tests + - --variant=ocp-aws-dualstack + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build01 + context: ci/prow/ocp-aws-dualstack-dual-qa-e2e-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: ocp-aws-dualstack + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-dual-qa-e2e-tests + optional: true + rerun_command: /test ocp-aws-dualstack-dual-qa-e2e-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=dual-qa-e2e-tests + - --variant=ocp-aws-dualstack + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )ocp-aws-dualstack-dual-qa-e2e-tests,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^master$ + - ^master- + cluster: build01 + context: ci/prow/ocp-aws-dualstack-ipv4-qa-e2e-tests + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/variant: ocp-aws-dualstack + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-ipv4-qa-e2e-tests + optional: true + rerun_command: /test ocp-aws-dualstack-ipv4-qa-e2e-tests + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=ipv4-qa-e2e-tests + - --variant=ocp-aws-dualstack + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )ocp-aws-dualstack-ipv4-qa-e2e-tests,?($|\s.*) - agent: kubernetes always_run: false branches: @@ -6754,231 +6982,3 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )rosa-qa-e2e-tests,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^master$ - - ^master- - cluster: build01 - context: ci/prow/ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/variant: ocp-aws-dualstack - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests - optional: true - rerun_command: /test ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --target=dual-ipv6-primary-qa-e2e-tests - - --variant=ocp-aws-dualstack - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )ocp-aws-dualstack-dual-ipv6-primary-qa-e2e-tests,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^master$ - - ^master- - cluster: build01 - context: ci/prow/ocp-aws-dualstack-dual-qa-e2e-tests - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/variant: ocp-aws-dualstack - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-dual-qa-e2e-tests - optional: true - rerun_command: /test ocp-aws-dualstack-dual-qa-e2e-tests - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --target=dual-qa-e2e-tests - - --variant=ocp-aws-dualstack - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )ocp-aws-dualstack-dual-qa-e2e-tests,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^master$ - - ^master- - cluster: build01 - context: ci/prow/ocp-aws-dualstack-ipv4-qa-e2e-tests - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/variant: ocp-aws-dualstack - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-stackrox-stackrox-master-ocp-aws-dualstack-ipv4-qa-e2e-tests - optional: true - rerun_command: /test ocp-aws-dualstack-ipv4-qa-e2e-tests - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --target=ipv4-qa-e2e-tests - - --variant=ocp-aws-dualstack - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )ocp-aws-dualstack-ipv4-qa-e2e-tests,?($|\s.*) From 33bc604638c6528520f9860d37093f5c7a09d6a9 Mon Sep 17 00:00:00 2001 From: davdhacs <105243888+davdhacs@users.noreply.github.com> Date: Fri, 7 Aug 2026 11:23:31 -0600 Subject: [PATCH 4/5] ci: trigger fresh rehearsal From 01338c0b44788a3a71e4bdaba50dc6268ccb5438 Mon Sep 17 00:00:00 2001 From: davdhacs <105243888+davdhacs@users.noreply.github.com> Date: Fri, 7 Aug 2026 12:03:32 -0600 Subject: [PATCH 5/5] ci: re-rehearse after AWS instance type fix