From 7051d3cd9d95c04439cf01ef8da478127f16b07c Mon Sep 17 00:00:00 2001 From: HughNhan Date: Mon, 6 Jul 2026 09:51:55 -0400 Subject: [PATCH 01/14] t push --force-with-lease origin metal-telco-x86-nightlyAdd nightly periodic for metal-telco-x86 regulus-jetlag --- ...cale-ci-main__metal-telco-x86-nightly.yaml | 46 +++++++++++++++++++ 1 file changed, 46 insertions(+) create mode 100644 ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml diff --git a/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml new file mode 100644 index 0000000000000..551b1b8cc8ea8 --- /dev/null +++ b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml @@ -0,0 +1,46 @@ +base_images: + cerberus: + name: cerberus + namespace: chaos + tag: cerberus-prow + ocp-qe-perfscale-ci: + name: ocp-qe-perfscale-ci + namespace: ci + tag: latest +build_root: + image_stream_tag: + name: ci-tools-build-root + namespace: ci + tag: latest +releases: + latest: + candidate: + product: ocp + stream: nightly + version: "4.22" +resources: + '*': + limits: + memory: 4Gi + requests: + cpu: 100m + memory: 200Mi +tests: +- as: regulus-jetlag + capabilities: + - intranet + cron: 0 17 * * 0 + restrict_network_access: false + steps: + cluster_profile: metal-perfscale-jetlag + env: + CRUCIBLE: "true" + test: + - ref: openshift-qe-installer-bm-regulus + workflow: openshift-qe-installer-bm-deploy + timeout: 8h0m0s +zz_generated_metadata: + branch: main + org: openshift-eng + repo: ocp-qe-perfscale-ci + variant: metal-telco-x86-nightly From 14edcd228c3299c4a786f288effd3a29a354bb58 Mon Sep 17 00:00:00 2001 From: HughNhan Date: Thu, 16 Jul 2026 23:03:24 -0400 Subject: [PATCH 02/14] Add Elasticsearch credentials support to regulus step - Mount ocp-perfscale-prod-es-creds secret in regulus ref.yaml - Read ES_USERNAME, ES_PASSWORD, ES_HOST from mounted secret - Pass all ES variables to Regulus lab.config --- .../openshift-qe-installer-bm-regulus-commands.sh | 14 +++++++++++++- .../openshift-qe-installer-bm-regulus-ref.yaml | 4 ++++ 2 files changed, 17 insertions(+), 1 deletion(-) diff --git a/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh b/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh index 31f126b95c73a..939816fbc12a7 100644 --- a/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh +++ b/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh @@ -159,7 +159,15 @@ install-regulus() { install-regulus # ───────────────────────────────────────────────────────────────────────────── -# Generate Regulus lab.config +# Read ES credentials from mounted secret (optional - will be empty if not present) +# ───────────────────────────────────────────────────────────────────────────── +ES_PASSWORD=$(cat "/secret/perfscale-prod/password" 2>/dev/null || echo "") +ES_USERNAME=$(cat "/secret/perfscale-prod/username" 2>/dev/null || echo "") +ES_HOST=$(cat "/secret/perfscale-prod/host" 2>/dev/null || echo "") +ES_PROTOCOL="https" # Always https in Prow environment + +# ───────────────────────────────────────────────────────────────────────────── +# Generate Regulus lab.config # ───────────────────────────────────────────────────────────────────────────── vars=( KUBECONFIG @@ -183,6 +191,10 @@ vars=( TREX_SRIOV_INTERFACE_2 TREX_DPDK_NIC_MODEL REM_DPDK_CONFIG + ES_PROTOCOL + ES_HOST + ES_USERNAME + ES_PASSWORD ) if [ -e /tmp/lab.config ]; then diff --git a/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-ref.yaml b/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-ref.yaml index d5be2a506328a..6c48f01515691 100644 --- a/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-ref.yaml +++ b/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-ref.yaml @@ -105,4 +105,8 @@ ref: default: "false" documentation: |- Automatic initialize Trex. Else user must config Trex DPDK. + credentials: + - namespace: test-credentials + name: ocp-perfscale-prod-es-creds + mount_path: /secret/perfscale-prod From 4dfee003a9ab1f5c47287e55a553e1d55274afdd Mon Sep 17 00:00:00 2001 From: reg-agent Date: Fri, 24 Jul 2026 14:43:22 -0400 Subject: [PATCH 03/14] add Orion support for Regulus --- .../openshift-qe/orion/regulus/OWNERS | 1 + .../openshift-qe-orion-regulus-commands.sh | 93 +++++++++++++++++++ .../openshift-qe-orion-regulus-ref.yaml | 51 ++++++++++ 3 files changed, 145 insertions(+) create mode 120000 ci-operator/step-registry/openshift-qe/orion/regulus/OWNERS create mode 100755 ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh create mode 100644 ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.yaml diff --git a/ci-operator/step-registry/openshift-qe/orion/regulus/OWNERS b/ci-operator/step-registry/openshift-qe/orion/regulus/OWNERS new file mode 120000 index 0000000000000..8c272259fbba9 --- /dev/null +++ b/ci-operator/step-registry/openshift-qe/orion/regulus/OWNERS @@ -0,0 +1 @@ +../../OWNERS \ No newline at end of file diff --git a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh new file mode 100755 index 0000000000000..cd5df8800e3c8 --- /dev/null +++ b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh @@ -0,0 +1,93 @@ +#!/bin/bash +# Orion Regulus - Dynamic fingerprint-based regression detection for Regulus tests +# +# This step clones the Regulus repo and uses its ORION/analyze-batch.py directly. +# The ORION directory is the single source of truth for the batch analysis logic. +# +# Workflow: +# 1. Set up Python virtualenv +# 2. Clone and install Orion (cloud-bulldozer/orion CLI tool) +# 3. Clone Regulus repo (use ORION/ subdirectory) +# 4. Install ORION dependencies +# 5. Run prow-entry.sh (bridges Prow env vars to analyze-batch.py) +# +set -o nounset +set -o pipefail + +MAX_RETRIES=5 + +echo "==================================" +echo "Orion Regulus - Dynamic Regression Detection" +echo "==================================" +echo "" + +python3 --version +pushd /tmp + +# ── Set up Python virtual environment ───────────────────────────────────────── +echo "Setting up Python virtual environment..." +python3 -m venv ./venv_orion_regulus +source ./venv_orion_regulus/bin/activate + +# ── Clone and install Orion CLI ─────────────────────────────────────────────── +if [[ "$ORION_TAG" == "latest" ]]; then + LATEST_TAG=$(git ls-remote --tags "${ORION_REPO}" | awk -F'refs/tags/' '{print $2}' | grep -v '\^{}' | sort -V | tail -n1) +else + LATEST_TAG="$ORION_TAG" +fi + +echo "Cloning Orion from ${ORION_REPO} (tag: ${LATEST_TAG})..." +for attempt in $(seq 1 "$MAX_RETRIES"); do + rm -rf orion + if git clone -q --branch "$LATEST_TAG" "$ORION_REPO" --depth 1; then + echo "Successfully cloned Orion" + break + fi + if [[ "$attempt" -eq "$MAX_RETRIES" ]]; then + echo "ERROR: git clone orion failed after $MAX_RETRIES attempts" >&2 + exit 1 + fi + echo "git clone failed (attempt $attempt/$MAX_RETRIES), retrying in 10s..." >&2 + sleep 10 +done + +pushd orion +pip install -q --retries "$MAX_RETRIES" -r requirements.txt +pip install -q --retries "$MAX_RETRIES" . +popd + +# ── Clone Regulus repo ────────────────────────────────────────────── +echo "Cloning Regulus from ${REGULUS_REPO} (branch: ${REGULUS_BRANCH})..." +for attempt in $(seq 1 "$MAX_RETRIES"); do + rm -rf regulus + if git clone -q --branch "${REGULUS_BRANCH}" "${REGULUS_REPO}" --depth 1 regulus; then + echo "Successfully cloned Regulus" + break + fi + if [[ "$attempt" -eq "$MAX_RETRIES" ]]; then + echo "ERROR: git clone Regulus failed after $MAX_RETRIES attempts" >&2 + exit 1 + fi + echo "git clone failed (attempt $attempt/$MAX_RETRIES), retrying in 10s..." >&2 + sleep 10 +done + +# ── Install ORION dependencies ──────────────────────────────────── +pushd regulus/ORION +pip install -q --retries "$MAX_RETRIES" requests pyyaml +echo "✅ Dependencies installed" + +# ── Run prow-entry.sh ───────────────────────────────────────────────────────── +echo "" +echo "==================================" +echo "Running Orion Regulus Analysis" +echo "==================================" +echo "" + +./scripts/prow-entry.sh +analysis_exit_status=$? + +popd +popd + +exit $analysis_exit_status diff --git a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.yaml b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.yaml new file mode 100644 index 0000000000000..de803b9a9b276 --- /dev/null +++ b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.yaml @@ -0,0 +1,51 @@ +ref: + as: openshift-qe-orion-regulus + from_image: + namespace: ci + name: ocp-qe-perfscale-ci + tag: latest + cli: latest + env: + - name: REGULUS_REPO + default: "https://github.com/redhat-performance/regulus.git" + documentation: Regulus repo to clone (uses ORION/ subdirectory) + - name: REGULUS_BRANCH + default: "cpt" + documentation: Branch/tag of Regulus repo to use + - name: ORION_REPO + default: "https://github.com/cloud-bulldozer/orion.git" + documentation: Orion repo to clone + - name: ORION_TAG + default: "latest" + documentation: Branch/tag of orion + - name: BATCH_ID + default: "" + documentation: Specific batch ID to analyze. If empty, auto-discovers latest batch + - name: MATCH + default: "" + documentation: Filter to specific tests within batch (e.g., "threads=128") + - name: IGNORE + default: "" + documentation: Fields to exclude from fingerprint for cross-version analysis (e.g., "rcos kernel") + - name: ES_BENCHMARK_INDEX + default: "regulus-results-*" + documentation: Elasticsearch index pattern containing Regulus benchmark results + - name: LOOKBACK + default: "90d" + documentation: Lookback period for historical data (e.g., 90d, 1y) + - name: DEBUG + default: "false" + documentation: Enable debug output in analyze-batch.py + commands: openshift-qe-orion-regulus-commands.sh + timeout: 6h + credentials: + - namespace: test-credentials + name: ocp-perfscale-prod-es-creds + mount_path: /secret/perfscale-prod + resources: + requests: + cpu: 100m + memory: 100Mi + documentation: >- + This step runs Orion change point detection on regulus benchmark results + From fbf83baad86a98491d949d3d73ceafbb99e81218 Mon Sep 17 00:00:00 2001 From: reg-agent Date: Fri, 24 Jul 2026 15:40:41 -0400 Subject: [PATCH 04/14] add regulus-jetlag-orion-only job --- ...-perfscale-ci-main__metal-telco-x86-nightly.yaml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml index 551b1b8cc8ea8..dde1b72d6d7f5 100644 --- a/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml +++ b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml @@ -37,8 +37,21 @@ tests: CRUCIBLE: "true" test: - ref: openshift-qe-installer-bm-regulus + - ref: openshift-qe-orion-regulus workflow: openshift-qe-installer-bm-deploy timeout: 8h0m0s +- as: regulus-jetlag-orion-only + always_run: false + capabilities: + - intranet + restrict_network_access: false + steps: + cluster_profile: metal-perfscale-jetlag + env: + RUN_ORION: "true" + test: + - ref: openshift-qe-orion-regulus + timeout: 1h0m0s zz_generated_metadata: branch: main org: openshift-eng From e190f416824b8edfca78500f5218ba64c42f78a0 Mon Sep 17 00:00:00 2001 From: reg-agent Date: Fri, 24 Jul 2026 17:20:48 -0400 Subject: [PATCH 05/14] Remove RUN_ORION from regulus-jetlag-orion-only --- ...cale-ci-main__metal-telco-x86-nightly.yaml | 6 +- ...ng-ocp-qe-perfscale-ci-main-periodics.yaml | 85 ++ ...g-ocp-qe-perfscale-ci-main-presubmits.yaml | 936 +----------------- 3 files changed, 98 insertions(+), 929 deletions(-) diff --git a/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml index dde1b72d6d7f5..3181c678823a7 100644 --- a/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml +++ b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml @@ -40,15 +40,13 @@ tests: - ref: openshift-qe-orion-regulus workflow: openshift-qe-installer-bm-deploy timeout: 8h0m0s -- as: regulus-jetlag-orion-only - always_run: false +- always_run: false + as: regulus-jetlag-orion-only capabilities: - intranet restrict_network_access: false steps: cluster_profile: metal-perfscale-jetlag - env: - RUN_ORION: "true" test: - ref: openshift-qe-orion-regulus timeout: 1h0m0s diff --git a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-periodics.yaml b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-periodics.yaml index 8024b088db152..95f0c260a5cf0 100644 --- a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-periodics.yaml +++ b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-periodics.yaml @@ -2966,3 +2966,88 @@ periodics: - name: result-aggregator secret: secretName: result-aggregator +- agent: kubernetes + cluster: build10 + cron: 0 17 * * 0 + decorate: true + decoration_config: + skip_cloning: true + timeout: 8h0m0s + extra_refs: + - base_ref: main + org: openshift-eng + repo: ocp-qe-perfscale-ci + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: metal-perfscale-jetlag + ci-operator.openshift.io/cloud-cluster-profile: metal-perfscale-jetlag + ci-operator.openshift.io/variant: metal-telco-x86-nightly + ci.openshift.io/generator: prowgen + job-release: "4.22" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: periodic-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-nightly-regulus-jetlag + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=regulus-jetlag + - --variant=metal-telco-x86-nightly + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator diff --git a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml index 09c9f1b6a423d..e4e4d3a202f3b 100644 --- a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml +++ b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml @@ -3668,741 +3668,6 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )(gcp-5.0-nightly-x86-node-density-heavy-etcd-fips-24nodes|remaining-required),?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build13 - context: ci/prow/gcp-5.1-nightly-x86-control-plane-24nodes - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: gcp - ci-operator.openshift.io/cloud-cluster-profile: gcp-qe - ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 - ci.openshift.io/generator: prowgen - job-release: "5.1" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-control-plane-24nodes - reporter_config: - slack: - channel: '#ocp-qe-scale-ci-results' - job_states_to_report: - - success - - failure - - error - report_template: '{{if eq .Status.State "success"}} :white_check_mark: Job - *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> - :white_check_mark: {{else}} :warning: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. - <{{.Status.URL}}|View logs> :warning: {{end}}' - rerun_command: /test gcp-5.1-nightly-x86-control-plane-24nodes - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=control-plane-24nodes - - --variant=gcp-5.1-nightly-x86 - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-control-plane-24nodes|remaining-required),?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build13 - context: ci/prow/gcp-5.1-nightly-x86-control-plane-etcd-fips-120nodes - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: gcp - ci-operator.openshift.io/cloud-cluster-profile: gcp-qe - ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 - ci.openshift.io/generator: prowgen - job-release: "5.1" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-control-plane-etcd-fips-120nodes - rerun_command: /test gcp-5.1-nightly-x86-control-plane-etcd-fips-120nodes - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=control-plane-etcd-fips-120nodes - - --variant=gcp-5.1-nightly-x86 - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-control-plane-etcd-fips-120nodes|remaining-required),?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build13 - context: ci/prow/gcp-5.1-nightly-x86-control-plane-etcd-fips-24nodes - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: gcp - ci-operator.openshift.io/cloud-cluster-profile: gcp-qe - ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 - ci.openshift.io/generator: prowgen - job-release: "5.1" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-control-plane-etcd-fips-24nodes - reporter_config: - slack: - channel: '#ocp-qe-scale-ci-results' - job_states_to_report: - - success - - failure - - error - report_template: '{{if eq .Status.State "success"}} :white_check_mark: Job - *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> - :white_check_mark: {{else}} :warning: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. - <{{.Status.URL}}|View logs> :warning: {{end}}' - rerun_command: /test gcp-5.1-nightly-x86-control-plane-etcd-fips-24nodes - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=control-plane-etcd-fips-24nodes - - --variant=gcp-5.1-nightly-x86 - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-control-plane-etcd-fips-24nodes|remaining-required),?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build13 - context: ci/prow/gcp-5.1-nightly-x86-control-plane-ipsec-3nodes - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: gcp - ci-operator.openshift.io/cloud-cluster-profile: gcp-qe - ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 - ci.openshift.io/generator: prowgen - job-release: "5.1" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-control-plane-ipsec-3nodes - rerun_command: /test gcp-5.1-nightly-x86-control-plane-ipsec-3nodes - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=control-plane-ipsec-3nodes - - --variant=gcp-5.1-nightly-x86 - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-control-plane-ipsec-3nodes|remaining-required),?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build13 - context: ci/prow/gcp-5.1-nightly-x86-data-path-9nodes - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: gcp - ci-operator.openshift.io/cloud-cluster-profile: gcp-qe - ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 - ci.openshift.io/generator: prowgen - job-release: "5.1" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-data-path-9nodes - reporter_config: - slack: - channel: '#ocp-qe-scale-ci-results' - job_states_to_report: - - success - - failure - - error - report_template: '{{if eq .Status.State "success"}} :white_check_mark: Job - *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> - :white_check_mark: {{else}} :warning: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. - <{{.Status.URL}}|View logs> :warning: {{end}}' - rerun_command: /test gcp-5.1-nightly-x86-data-path-9nodes - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=data-path-9nodes - - --variant=gcp-5.1-nightly-x86 - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-data-path-9nodes|remaining-required),?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build13 - context: ci/prow/gcp-5.1-nightly-x86-node-density-cni-24nodes - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: gcp - ci-operator.openshift.io/cloud-cluster-profile: gcp-qe - ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 - ci.openshift.io/generator: prowgen - job-release: "5.1" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-node-density-cni-24nodes - rerun_command: /test gcp-5.1-nightly-x86-node-density-cni-24nodes - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=node-density-cni-24nodes - - --variant=gcp-5.1-nightly-x86 - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-node-density-cni-24nodes|remaining-required),?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build13 - context: ci/prow/gcp-5.1-nightly-x86-node-density-heavy-24nodes - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: gcp - ci-operator.openshift.io/cloud-cluster-profile: gcp-qe - ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 - ci.openshift.io/generator: prowgen - job-release: "5.1" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-node-density-heavy-24nodes - reporter_config: - slack: - channel: '#ocp-qe-scale-ci-results' - job_states_to_report: - - success - - failure - - error - report_template: '{{if eq .Status.State "success"}} :white_check_mark: Job - *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> - :white_check_mark: {{else}} :warning: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. - <{{.Status.URL}}|View logs> :warning: {{end}}' - rerun_command: /test gcp-5.1-nightly-x86-node-density-heavy-24nodes - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=node-density-heavy-24nodes - - --variant=gcp-5.1-nightly-x86 - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-node-density-heavy-24nodes|remaining-required),?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build13 - context: ci/prow/gcp-5.1-nightly-x86-node-density-heavy-etcd-fips-24nodes - decorate: true - decoration_config: - skip_cloning: true - labels: - ci-operator.openshift.io/cloud: gcp - ci-operator.openshift.io/cloud-cluster-profile: gcp-qe - ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 - ci.openshift.io/generator: prowgen - job-release: "5.1" - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-node-density-heavy-etcd-fips-24nodes - reporter_config: - slack: - channel: '#ocp-qe-scale-ci-results' - job_states_to_report: - - success - - failure - - error - report_template: '{{if eq .Status.State "success"}} :white_check_mark: Job - *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> - :white_check_mark: {{else}} :warning: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. - <{{.Status.URL}}|View logs> :warning: {{end}}' - rerun_command: /test gcp-5.1-nightly-x86-node-density-heavy-etcd-fips-24nodes - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=node-density-heavy-etcd-fips-24nodes - - --variant=gcp-5.1-nightly-x86 - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-node-density-heavy-etcd-fips-24nodes|remaining-required),?($|\s.*) - agent: kubernetes always_run: true branches: @@ -4459,102 +3724,6 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )images,?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build11 - context: ci/prow/metal-rhoso-selfsched-x86-rhoso-self-sched - decorate: true - decoration_config: - skip_cloning: true - labels: - capability/intranet: intranet - ci-operator.openshift.io/cloud: metal-perfscale-osp-selfsched - ci-operator.openshift.io/cloud-cluster-profile: metal-perfscale-osp-selfsched - ci-operator.openshift.io/variant: metal-rhoso-selfsched-x86 - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-rhoso-selfsched-x86-rhoso-self-sched - reporter_config: - slack: - channel: '#forum-rhos-scale' - job_states_to_report: - - success - - failure - - error - report_template: '{{if eq .Status.State "success"}} :white_check_mark: Job - *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> - :white_check_mark: {{else}} :warning: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. - <{{.Status.URL}}|View logs> :warning: {{end}}' - rerun_command: /test metal-rhoso-selfsched-x86-rhoso-self-sched - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=rhoso-self-sched - - --variant=metal-rhoso-selfsched-x86 - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )(metal-rhoso-selfsched-x86-rhoso-self-sched|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: @@ -4997,104 +4166,21 @@ presubmits: - ^main$ - ^main- cluster: build11 - context: ci/prow/microshift-metal-selfsched-4.22-candidate-x86-deploy - decorate: true - decoration_config: - skip_cloning: true - labels: - capability/intranet: intranet - ci-operator.openshift.io/cloud: metal-perfscale-selfsched - ci-operator.openshift.io/cloud-cluster-profile: metal-perfscale-selfsched - ci-operator.openshift.io/variant: microshift-metal-selfsched-4.22-candidate-x86 - ci.openshift.io/generator: prowgen - pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-microshift-metal-selfsched-4.22-candidate-x86-deploy - rerun_command: /test microshift-metal-selfsched-4.22-candidate-x86-deploy - spec: - containers: - - args: - - --gcs-upload-secret=/secrets/gcs/service-account.json - - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - - --lease-server-credentials-file=/etc/boskos/credentials - - --report-credentials-file=/etc/report/credentials - - --secret-dir=/secrets/ci-pull-credentials - - --target=deploy - - --variant=microshift-metal-selfsched-4.22-candidate-x86 - command: - - ci-operator - env: - - name: HTTP_SERVER_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest - imagePullPolicy: Always - name: "" - ports: - - containerPort: 8080 - name: http - resources: - requests: - cpu: 10m - volumeMounts: - - mountPath: /etc/boskos - name: boskos - readOnly: true - - mountPath: /secrets/ci-pull-credentials - name: ci-pull-credentials - readOnly: true - - mountPath: /secrets/gcs - name: gcs-credentials - readOnly: true - - mountPath: /secrets/manifest-tool - name: manifest-tool-local-pusher - readOnly: true - - mountPath: /etc/pull-secret - name: pull-secret - readOnly: true - - mountPath: /etc/report - name: result-aggregator - readOnly: true - serviceAccountName: ci-operator - volumes: - - name: boskos - secret: - items: - - key: credentials - path: credentials - secretName: boskos-credentials - - name: ci-pull-credentials - secret: - secretName: ci-pull-credentials - - name: manifest-tool-local-pusher - secret: - secretName: manifest-tool-local-pusher - - name: pull-secret - secret: - secretName: registry-pull-credentials - - name: result-aggregator - secret: - secretName: result-aggregator - trigger: (?m)^/test( | .* )(microshift-metal-selfsched-4.22-candidate-x86-deploy|remaining-required),?($|\s.*) - - agent: kubernetes - always_run: false - branches: - - ^main$ - - ^main- - cluster: build11 - context: ci/prow/microshift-metal-selfsched-4.22-candidate-x86-node-density + context: ci/prow/metal-telco-x86-nightly-regulus-jetlag-orion-only decorate: true decoration_config: skip_cloning: true + timeout: 1h0m0s labels: capability/intranet: intranet - ci-operator.openshift.io/cloud: metal-perfscale-selfsched - ci-operator.openshift.io/cloud-cluster-profile: metal-perfscale-selfsched - ci-operator.openshift.io/variant: microshift-metal-selfsched-4.22-candidate-x86 + ci-operator.openshift.io/cloud: metal-perfscale-jetlag + ci-operator.openshift.io/cloud-cluster-profile: metal-perfscale-jetlag + ci-operator.openshift.io/variant: metal-telco-x86-nightly ci.openshift.io/generator: prowgen + job-release: "4.22" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-microshift-metal-selfsched-4.22-candidate-x86-node-density - rerun_command: /test microshift-metal-selfsched-4.22-candidate-x86-node-density + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-nightly-regulus-jetlag-orion-only + rerun_command: /test metal-telco-x86-nightly-regulus-jetlag-orion-only spec: containers: - args: @@ -5103,8 +4189,8 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=node-density - - --variant=microshift-metal-selfsched-4.22-candidate-x86 + - --target=regulus-jetlag-orion-only + - --variant=metal-telco-x86-nightly command: - ci-operator env: @@ -5160,4 +4246,4 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(microshift-metal-selfsched-4.22-candidate-x86-node-density|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(metal-telco-x86-nightly-regulus-jetlag-orion-only|remaining-required),?($|\s.*) From 7e5bcb22b56c8c746e4b03de68ef9747d0775f81 Mon Sep 17 00:00:00 2001 From: reg-agent Date: Fri, 24 Jul 2026 17:55:47 -0400 Subject: [PATCH 06/14] Fix orion-regulus: use python/virtualenv matching existing orion steps --- .../orion/regulus/openshift-qe-orion-regulus-commands.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh index cd5df8800e3c8..1716fc1933b90 100755 --- a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh +++ b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh @@ -21,12 +21,12 @@ echo "Orion Regulus - Dynamic Regression Detection" echo "==================================" echo "" -python3 --version +python --version pushd /tmp # ── Set up Python virtual environment ───────────────────────────────────────── echo "Setting up Python virtual environment..." -python3 -m venv ./venv_orion_regulus +python -m virtualenv ./venv_orion_regulus source ./venv_orion_regulus/bin/activate # ── Clone and install Orion CLI ─────────────────────────────────────────────── From bbf6c15f49929952834fe3b5e82bd065d11b5e58 Mon Sep 17 00:00:00 2001 From: reg-agent Date: Mon, 27 Jul 2026 13:04:02 -0400 Subject: [PATCH 07/14] Add regulus-jetlag-without-deploy job, fix ES_USER naming - Add regulus-jetlag-without-deploy test job for rehearsing against existing cluster - Rename ES_USERNAME to ES_USER in bm-regulus-commands.sh - Add orion-regulus step metadata --- ...cale-ci-main__metal-telco-x86-nightly.yaml | 13 +++ ...g-ocp-qe-perfscale-ci-main-presubmits.yaml | 87 +++++++++++++++++++ ...nshift-qe-installer-bm-regulus-commands.sh | 4 +- ...enshift-qe-orion-regulus-ref.metadata.json | 11 +++ 4 files changed, 113 insertions(+), 2 deletions(-) create mode 100644 ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.metadata.json diff --git a/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml index 3181c678823a7..9e99a05eb46ae 100644 --- a/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml +++ b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml @@ -40,6 +40,19 @@ tests: - ref: openshift-qe-orion-regulus workflow: openshift-qe-installer-bm-deploy timeout: 8h0m0s +- always_run: false + as: regulus-jetlag-without-deploy + capabilities: + - intranet + restrict_network_access: false + steps: + cluster_profile: metal-perfscale-jetlag + test: + - ref: openshift-qe-installer-bm-load-kubeconfig + - ref: openshift-qe-cluster-health + - ref: openshift-qe-installer-bm-regulus + - ref: openshift-qe-orion-regulus + timeout: 6h0m0s - always_run: false as: regulus-jetlag-orion-only capabilities: diff --git a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml index e4e4d3a202f3b..fbebb5af96599 100644 --- a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml +++ b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml @@ -4247,3 +4247,90 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )(metal-telco-x86-nightly-regulus-jetlag-orion-only|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build11 + context: ci/prow/metal-telco-x86-nightly-regulus-jetlag-without-deploy + decorate: true + decoration_config: + skip_cloning: true + timeout: 6h0m0s + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: metal-perfscale-jetlag + ci-operator.openshift.io/cloud-cluster-profile: metal-perfscale-jetlag + ci-operator.openshift.io/variant: metal-telco-x86-nightly + ci.openshift.io/generator: prowgen + job-release: "4.22" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-nightly-regulus-jetlag-without-deploy + rerun_command: /test metal-telco-x86-nightly-regulus-jetlag-without-deploy + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=regulus-jetlag-without-deploy + - --variant=metal-telco-x86-nightly + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(metal-telco-x86-nightly-regulus-jetlag-without-deploy|remaining-required),?($|\s.*) diff --git a/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh b/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh index 939816fbc12a7..14a3c79b34d92 100644 --- a/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh +++ b/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh @@ -162,7 +162,7 @@ install-regulus # Read ES credentials from mounted secret (optional - will be empty if not present) # ───────────────────────────────────────────────────────────────────────────── ES_PASSWORD=$(cat "/secret/perfscale-prod/password" 2>/dev/null || echo "") -ES_USERNAME=$(cat "/secret/perfscale-prod/username" 2>/dev/null || echo "") +ES_USER=$(cat "/secret/perfscale-prod/username" 2>/dev/null || echo "") ES_HOST=$(cat "/secret/perfscale-prod/host" 2>/dev/null || echo "") ES_PROTOCOL="https" # Always https in Prow environment @@ -193,7 +193,7 @@ vars=( REM_DPDK_CONFIG ES_PROTOCOL ES_HOST - ES_USERNAME + ES_USER ES_PASSWORD ) diff --git a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.metadata.json b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.metadata.json new file mode 100644 index 0000000000000..1657633cd60d7 --- /dev/null +++ b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.metadata.json @@ -0,0 +1,11 @@ +{ + "path": "openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.yaml", + "owners": { + "approvers": [ + "perfscale-ocp-approvers" + ], + "reviewers": [ + "perfscale-ocp-reviewers" + ] + } +} \ No newline at end of file From b8ec692e1de4712e459239056c969539bf3afb0d Mon Sep 17 00:00:00 2001 From: reg-agent Date: Mon, 27 Jul 2026 19:04:35 -0400 Subject: [PATCH 08/14] Fix shellcheck warnings in bm-regulus and orion-regulus commands - Export ES vars in bm-regulus to satisfy SC2034 (used via indirect expansion) - Add || exit/true to pushd/popd in orion-regulus to satisfy SC2164 --- .../openshift-qe-installer-bm-regulus-commands.sh | 8 ++++---- .../regulus/openshift-qe-orion-regulus-commands.sh | 12 ++++++------ 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh b/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh index 14a3c79b34d92..a20fb1caa7ad9 100644 --- a/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh +++ b/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh @@ -161,10 +161,10 @@ install-regulus # ───────────────────────────────────────────────────────────────────────────── # Read ES credentials from mounted secret (optional - will be empty if not present) # ───────────────────────────────────────────────────────────────────────────── -ES_PASSWORD=$(cat "/secret/perfscale-prod/password" 2>/dev/null || echo "") -ES_USER=$(cat "/secret/perfscale-prod/username" 2>/dev/null || echo "") -ES_HOST=$(cat "/secret/perfscale-prod/host" 2>/dev/null || echo "") -ES_PROTOCOL="https" # Always https in Prow environment +export ES_PASSWORD=$(cat "/secret/perfscale-prod/password" 2>/dev/null || echo "") +export ES_USER=$(cat "/secret/perfscale-prod/username" 2>/dev/null || echo "") +export ES_HOST=$(cat "/secret/perfscale-prod/host" 2>/dev/null || echo "") +export ES_PROTOCOL="https" # ───────────────────────────────────────────────────────────────────────────── # Generate Regulus lab.config diff --git a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh index 1716fc1933b90..7e8ab3cba9483 100755 --- a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh +++ b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh @@ -22,7 +22,7 @@ echo "==================================" echo "" python --version -pushd /tmp +pushd /tmp || exit 1 # ── Set up Python virtual environment ───────────────────────────────────────── echo "Setting up Python virtual environment..." @@ -51,10 +51,10 @@ for attempt in $(seq 1 "$MAX_RETRIES"); do sleep 10 done -pushd orion +pushd orion || exit 1 pip install -q --retries "$MAX_RETRIES" -r requirements.txt pip install -q --retries "$MAX_RETRIES" . -popd +popd || exit 1 # ── Clone Regulus repo ────────────────────────────────────────────── echo "Cloning Regulus from ${REGULUS_REPO} (branch: ${REGULUS_BRANCH})..." @@ -73,7 +73,7 @@ for attempt in $(seq 1 "$MAX_RETRIES"); do done # ── Install ORION dependencies ──────────────────────────────────── -pushd regulus/ORION +pushd regulus/ORION || exit 1 pip install -q --retries "$MAX_RETRIES" requests pyyaml echo "✅ Dependencies installed" @@ -87,7 +87,7 @@ echo "" ./scripts/prow-entry.sh analysis_exit_status=$? -popd -popd +popd || true +popd || true exit $analysis_exit_status From f650b6978164989e5b08a072b989585f82350094 Mon Sep 17 00:00:00 2001 From: reg-agent Date: Mon, 27 Jul 2026 20:28:43 -0400 Subject: [PATCH 09/14] Fix SC2155: declare and assign ES vars separately --- .../openshift-qe-installer-bm-regulus-commands.sh | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh b/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh index a20fb1caa7ad9..20454314a25c7 100644 --- a/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh +++ b/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh @@ -161,10 +161,11 @@ install-regulus # ───────────────────────────────────────────────────────────────────────────── # Read ES credentials from mounted secret (optional - will be empty if not present) # ───────────────────────────────────────────────────────────────────────────── -export ES_PASSWORD=$(cat "/secret/perfscale-prod/password" 2>/dev/null || echo "") -export ES_USER=$(cat "/secret/perfscale-prod/username" 2>/dev/null || echo "") -export ES_HOST=$(cat "/secret/perfscale-prod/host" 2>/dev/null || echo "") -export ES_PROTOCOL="https" +ES_PASSWORD=$(cat "/secret/perfscale-prod/password" 2>/dev/null || echo "") +ES_USER=$(cat "/secret/perfscale-prod/username" 2>/dev/null || echo "") +ES_HOST=$(cat "/secret/perfscale-prod/host" 2>/dev/null || echo "") +ES_PROTOCOL="https" +export ES_PASSWORD ES_USER ES_HOST ES_PROTOCOL # ───────────────────────────────────────────────────────────────────────────── # Generate Regulus lab.config From 612f6d3b520bf815c0c06a96967e1a1cdcdab701 Mon Sep 17 00:00:00 2001 From: reg-agent Date: Wed, 29 Jul 2026 11:46:19 -0400 Subject: [PATCH 10/14] IGNORE rcos and kernel by default --- .../orion/regulus/openshift-qe-orion-regulus-ref.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.yaml b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.yaml index de803b9a9b276..fb54cc435a076 100644 --- a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.yaml +++ b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.yaml @@ -25,7 +25,7 @@ ref: default: "" documentation: Filter to specific tests within batch (e.g., "threads=128") - name: IGNORE - default: "" + default: "rcos kernel" documentation: Fields to exclude from fingerprint for cross-version analysis (e.g., "rcos kernel") - name: ES_BENCHMARK_INDEX default: "regulus-results-*" From 215329fbf5430544417b378a8d2b1f36b2077caa Mon Sep 17 00:00:00 2001 From: reg-agent Date: Wed, 29 Jul 2026 13:25:32 -0400 Subject: [PATCH 11/14] Rename metal-telco-x86-nightly variant to metal-telco-x86-regulus The variant name better reflects the workload (Regulus network tests) rather than implying a nightly schedule when the job runs weekly. Co-Authored-By: Claude Opus 4.6 --- ...ale-ci-main__metal-telco-x86-regulus.yaml} | 2 +- ...ng-ocp-qe-perfscale-ci-main-periodics.yaml | 6 ++--- ...g-ocp-qe-perfscale-ci-main-presubmits.yaml | 24 +++++++++---------- 3 files changed, 16 insertions(+), 16 deletions(-) rename ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/{openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml => openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-regulus.yaml} (97%) diff --git a/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-regulus.yaml similarity index 97% rename from ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml rename to ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-regulus.yaml index 9e99a05eb46ae..a00293c164067 100644 --- a/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-nightly.yaml +++ b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-regulus.yaml @@ -67,4 +67,4 @@ zz_generated_metadata: branch: main org: openshift-eng repo: ocp-qe-perfscale-ci - variant: metal-telco-x86-nightly + variant: metal-telco-x86-regulus diff --git a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-periodics.yaml b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-periodics.yaml index 95f0c260a5cf0..f62478bd27ce5 100644 --- a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-periodics.yaml +++ b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-periodics.yaml @@ -2981,11 +2981,11 @@ periodics: capability/intranet: intranet ci-operator.openshift.io/cloud: metal-perfscale-jetlag ci-operator.openshift.io/cloud-cluster-profile: metal-perfscale-jetlag - ci-operator.openshift.io/variant: metal-telco-x86-nightly + ci-operator.openshift.io/variant: metal-telco-x86-regulus ci.openshift.io/generator: prowgen job-release: "4.22" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-nightly-regulus-jetlag + name: periodic-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-regulus-regulus-jetlag spec: containers: - args: @@ -2995,7 +2995,7 @@ periodics: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=regulus-jetlag - - --variant=metal-telco-x86-nightly + - --variant=metal-telco-x86-regulus command: - ci-operator env: diff --git a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml index fbebb5af96599..3d2864fb5dbdd 100644 --- a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml +++ b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml @@ -4166,7 +4166,7 @@ presubmits: - ^main$ - ^main- cluster: build11 - context: ci/prow/metal-telco-x86-nightly-regulus-jetlag-orion-only + context: ci/prow/metal-telco-x86-regulus-regulus-jetlag-orion-only decorate: true decoration_config: skip_cloning: true @@ -4175,12 +4175,12 @@ presubmits: capability/intranet: intranet ci-operator.openshift.io/cloud: metal-perfscale-jetlag ci-operator.openshift.io/cloud-cluster-profile: metal-perfscale-jetlag - ci-operator.openshift.io/variant: metal-telco-x86-nightly + ci-operator.openshift.io/variant: metal-telco-x86-regulus ci.openshift.io/generator: prowgen job-release: "4.22" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-nightly-regulus-jetlag-orion-only - rerun_command: /test metal-telco-x86-nightly-regulus-jetlag-orion-only + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-regulus-regulus-jetlag-orion-only + rerun_command: /test metal-telco-x86-regulus-regulus-jetlag-orion-only spec: containers: - args: @@ -4190,7 +4190,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=regulus-jetlag-orion-only - - --variant=metal-telco-x86-nightly + - --variant=metal-telco-x86-regulus command: - ci-operator env: @@ -4246,14 +4246,14 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(metal-telco-x86-nightly-regulus-jetlag-orion-only|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(metal-telco-x86-regulus-regulus-jetlag-orion-only|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^main$ - ^main- cluster: build11 - context: ci/prow/metal-telco-x86-nightly-regulus-jetlag-without-deploy + context: ci/prow/metal-telco-x86-regulus-regulus-jetlag-without-deploy decorate: true decoration_config: skip_cloning: true @@ -4262,12 +4262,12 @@ presubmits: capability/intranet: intranet ci-operator.openshift.io/cloud: metal-perfscale-jetlag ci-operator.openshift.io/cloud-cluster-profile: metal-perfscale-jetlag - ci-operator.openshift.io/variant: metal-telco-x86-nightly + ci-operator.openshift.io/variant: metal-telco-x86-regulus ci.openshift.io/generator: prowgen job-release: "4.22" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-nightly-regulus-jetlag-without-deploy - rerun_command: /test metal-telco-x86-nightly-regulus-jetlag-without-deploy + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-regulus-regulus-jetlag-without-deploy + rerun_command: /test metal-telco-x86-regulus-regulus-jetlag-without-deploy spec: containers: - args: @@ -4277,7 +4277,7 @@ presubmits: - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=regulus-jetlag-without-deploy - - --variant=metal-telco-x86-nightly + - --variant=metal-telco-x86-regulus command: - ci-operator env: @@ -4333,4 +4333,4 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(metal-telco-x86-nightly-regulus-jetlag-without-deploy|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(metal-telco-x86-regulus-regulus-jetlag-without-deploy|remaining-required),?($|\s.*) From 1b4ab6e3a31907ad9b0e20285d660fbc545b0b9f Mon Sep 17 00:00:00 2001 From: reg-agent Date: Tue, 18 Aug 2026 11:54:00 -0400 Subject: [PATCH 12/14] Rename job names to avoid double-regulus; use requirements.txt for deps - Shorten job as: names (jetlag, jetlag-no-deploy, orion-only) since the variant already contains "regulus" - Use pip install -r requirements.txt instead of inline package list Co-Authored-By: Claude Opus 4.6 --- ...cale-ci-main__metal-telco-x86-regulus.yaml | 6 +- ...ng-ocp-qe-perfscale-ci-main-periodics.yaml | 4 +- ...g-ocp-qe-perfscale-ci-main-presubmits.yaml | 1025 ++++++++++++++++- .../openshift-qe-orion-regulus-commands.sh | 3 +- 4 files changed, 1020 insertions(+), 18 deletions(-) diff --git a/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-regulus.yaml b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-regulus.yaml index a00293c164067..5bfc12c4afffa 100644 --- a/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-regulus.yaml +++ b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-regulus.yaml @@ -26,7 +26,7 @@ resources: cpu: 100m memory: 200Mi tests: -- as: regulus-jetlag +- as: jetlag capabilities: - intranet cron: 0 17 * * 0 @@ -41,7 +41,7 @@ tests: workflow: openshift-qe-installer-bm-deploy timeout: 8h0m0s - always_run: false - as: regulus-jetlag-without-deploy + as: jetlag-no-deploy capabilities: - intranet restrict_network_access: false @@ -54,7 +54,7 @@ tests: - ref: openshift-qe-orion-regulus timeout: 6h0m0s - always_run: false - as: regulus-jetlag-orion-only + as: orion-only capabilities: - intranet restrict_network_access: false diff --git a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-periodics.yaml b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-periodics.yaml index f62478bd27ce5..269265348aba0 100644 --- a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-periodics.yaml +++ b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-periodics.yaml @@ -2985,7 +2985,7 @@ periodics: ci.openshift.io/generator: prowgen job-release: "4.22" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: periodic-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-regulus-regulus-jetlag + name: periodic-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-regulus-jetlag spec: containers: - args: @@ -2994,7 +2994,7 @@ periodics: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=regulus-jetlag + - --target=jetlag - --variant=metal-telco-x86-regulus command: - ci-operator diff --git a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml index 3d2864fb5dbdd..406e2fc689d23 100644 --- a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml +++ b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml @@ -3668,6 +3668,741 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )(gcp-5.0-nightly-x86-node-density-heavy-etcd-fips-24nodes|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build13 + context: ci/prow/gcp-5.1-nightly-x86-control-plane-24nodes + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: gcp + ci-operator.openshift.io/cloud-cluster-profile: gcp-qe + ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 + ci.openshift.io/generator: prowgen + job-release: "5.1" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-control-plane-24nodes + reporter_config: + slack: + channel: '#ocp-qe-scale-ci-results' + job_states_to_report: + - success + - failure + - error + report_template: '{{if eq .Status.State "success"}} :white_check_mark: Job + *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> + :white_check_mark: {{else}} :warning: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. + <{{.Status.URL}}|View logs> :warning: {{end}}' + rerun_command: /test gcp-5.1-nightly-x86-control-plane-24nodes + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=control-plane-24nodes + - --variant=gcp-5.1-nightly-x86 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-control-plane-24nodes|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build13 + context: ci/prow/gcp-5.1-nightly-x86-control-plane-etcd-fips-120nodes + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: gcp + ci-operator.openshift.io/cloud-cluster-profile: gcp-qe + ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 + ci.openshift.io/generator: prowgen + job-release: "5.1" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-control-plane-etcd-fips-120nodes + rerun_command: /test gcp-5.1-nightly-x86-control-plane-etcd-fips-120nodes + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=control-plane-etcd-fips-120nodes + - --variant=gcp-5.1-nightly-x86 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-control-plane-etcd-fips-120nodes|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build13 + context: ci/prow/gcp-5.1-nightly-x86-control-plane-etcd-fips-24nodes + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: gcp + ci-operator.openshift.io/cloud-cluster-profile: gcp-qe + ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 + ci.openshift.io/generator: prowgen + job-release: "5.1" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-control-plane-etcd-fips-24nodes + reporter_config: + slack: + channel: '#ocp-qe-scale-ci-results' + job_states_to_report: + - success + - failure + - error + report_template: '{{if eq .Status.State "success"}} :white_check_mark: Job + *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> + :white_check_mark: {{else}} :warning: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. + <{{.Status.URL}}|View logs> :warning: {{end}}' + rerun_command: /test gcp-5.1-nightly-x86-control-plane-etcd-fips-24nodes + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=control-plane-etcd-fips-24nodes + - --variant=gcp-5.1-nightly-x86 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-control-plane-etcd-fips-24nodes|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build13 + context: ci/prow/gcp-5.1-nightly-x86-control-plane-ipsec-3nodes + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: gcp + ci-operator.openshift.io/cloud-cluster-profile: gcp-qe + ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 + ci.openshift.io/generator: prowgen + job-release: "5.1" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-control-plane-ipsec-3nodes + rerun_command: /test gcp-5.1-nightly-x86-control-plane-ipsec-3nodes + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=control-plane-ipsec-3nodes + - --variant=gcp-5.1-nightly-x86 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-control-plane-ipsec-3nodes|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build13 + context: ci/prow/gcp-5.1-nightly-x86-data-path-9nodes + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: gcp + ci-operator.openshift.io/cloud-cluster-profile: gcp-qe + ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 + ci.openshift.io/generator: prowgen + job-release: "5.1" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-data-path-9nodes + reporter_config: + slack: + channel: '#ocp-qe-scale-ci-results' + job_states_to_report: + - success + - failure + - error + report_template: '{{if eq .Status.State "success"}} :white_check_mark: Job + *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> + :white_check_mark: {{else}} :warning: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. + <{{.Status.URL}}|View logs> :warning: {{end}}' + rerun_command: /test gcp-5.1-nightly-x86-data-path-9nodes + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=data-path-9nodes + - --variant=gcp-5.1-nightly-x86 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-data-path-9nodes|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build13 + context: ci/prow/gcp-5.1-nightly-x86-node-density-cni-24nodes + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: gcp + ci-operator.openshift.io/cloud-cluster-profile: gcp-qe + ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 + ci.openshift.io/generator: prowgen + job-release: "5.1" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-node-density-cni-24nodes + rerun_command: /test gcp-5.1-nightly-x86-node-density-cni-24nodes + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=node-density-cni-24nodes + - --variant=gcp-5.1-nightly-x86 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-node-density-cni-24nodes|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build13 + context: ci/prow/gcp-5.1-nightly-x86-node-density-heavy-24nodes + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: gcp + ci-operator.openshift.io/cloud-cluster-profile: gcp-qe + ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 + ci.openshift.io/generator: prowgen + job-release: "5.1" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-node-density-heavy-24nodes + reporter_config: + slack: + channel: '#ocp-qe-scale-ci-results' + job_states_to_report: + - success + - failure + - error + report_template: '{{if eq .Status.State "success"}} :white_check_mark: Job + *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> + :white_check_mark: {{else}} :warning: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. + <{{.Status.URL}}|View logs> :warning: {{end}}' + rerun_command: /test gcp-5.1-nightly-x86-node-density-heavy-24nodes + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=node-density-heavy-24nodes + - --variant=gcp-5.1-nightly-x86 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-node-density-heavy-24nodes|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build13 + context: ci/prow/gcp-5.1-nightly-x86-node-density-heavy-etcd-fips-24nodes + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: gcp + ci-operator.openshift.io/cloud-cluster-profile: gcp-qe + ci-operator.openshift.io/variant: gcp-5.1-nightly-x86 + ci.openshift.io/generator: prowgen + job-release: "5.1" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-gcp-5.1-nightly-x86-node-density-heavy-etcd-fips-24nodes + reporter_config: + slack: + channel: '#ocp-qe-scale-ci-results' + job_states_to_report: + - success + - failure + - error + report_template: '{{if eq .Status.State "success"}} :white_check_mark: Job + *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> + :white_check_mark: {{else}} :warning: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. + <{{.Status.URL}}|View logs> :warning: {{end}}' + rerun_command: /test gcp-5.1-nightly-x86-node-density-heavy-etcd-fips-24nodes + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=node-density-heavy-etcd-fips-24nodes + - --variant=gcp-5.1-nightly-x86 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(gcp-5.1-nightly-x86-node-density-heavy-etcd-fips-24nodes|remaining-required),?($|\s.*) - agent: kubernetes always_run: true branches: @@ -3724,6 +4459,102 @@ presubmits: secret: secretName: result-aggregator trigger: (?m)^/test( | .* )images,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build11 + context: ci/prow/metal-rhoso-selfsched-x86-rhoso-self-sched + decorate: true + decoration_config: + skip_cloning: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: metal-perfscale-osp-selfsched + ci-operator.openshift.io/cloud-cluster-profile: metal-perfscale-osp-selfsched + ci-operator.openshift.io/variant: metal-rhoso-selfsched-x86 + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-rhoso-selfsched-x86-rhoso-self-sched + reporter_config: + slack: + channel: '#forum-rhos-scale' + job_states_to_report: + - success + - failure + - error + report_template: '{{if eq .Status.State "success"}} :white_check_mark: Job + *{{.Spec.Job}}* ended with *{{.Status.State}}*. <{{.Status.URL}}|View logs> + :white_check_mark: {{else}} :warning: Job *{{.Spec.Job}}* ended with *{{.Status.State}}*. + <{{.Status.URL}}|View logs> :warning: {{end}}' + rerun_command: /test metal-rhoso-selfsched-x86-rhoso-self-sched + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=rhoso-self-sched + - --variant=metal-rhoso-selfsched-x86 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(metal-rhoso-selfsched-x86-rhoso-self-sched|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: @@ -4166,11 +4997,11 @@ presubmits: - ^main$ - ^main- cluster: build11 - context: ci/prow/metal-telco-x86-regulus-regulus-jetlag-orion-only + context: ci/prow/metal-telco-x86-regulus-jetlag-no-deploy decorate: true decoration_config: skip_cloning: true - timeout: 1h0m0s + timeout: 6h0m0s labels: capability/intranet: intranet ci-operator.openshift.io/cloud: metal-perfscale-jetlag @@ -4179,8 +5010,8 @@ presubmits: ci.openshift.io/generator: prowgen job-release: "4.22" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-regulus-regulus-jetlag-orion-only - rerun_command: /test metal-telco-x86-regulus-regulus-jetlag-orion-only + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-regulus-jetlag-no-deploy + rerun_command: /test metal-telco-x86-regulus-jetlag-no-deploy spec: containers: - args: @@ -4189,7 +5020,7 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=regulus-jetlag-orion-only + - --target=jetlag-no-deploy - --variant=metal-telco-x86-regulus command: - ci-operator @@ -4246,18 +5077,18 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(metal-telco-x86-regulus-regulus-jetlag-orion-only|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(metal-telco-x86-regulus-jetlag-no-deploy|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: - ^main$ - ^main- cluster: build11 - context: ci/prow/metal-telco-x86-regulus-regulus-jetlag-without-deploy + context: ci/prow/metal-telco-x86-regulus-orion-only decorate: true decoration_config: skip_cloning: true - timeout: 6h0m0s + timeout: 1h0m0s labels: capability/intranet: intranet ci-operator.openshift.io/cloud: metal-perfscale-jetlag @@ -4266,8 +5097,8 @@ presubmits: ci.openshift.io/generator: prowgen job-release: "4.22" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-regulus-regulus-jetlag-without-deploy - rerun_command: /test metal-telco-x86-regulus-regulus-jetlag-without-deploy + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-regulus-orion-only + rerun_command: /test metal-telco-x86-regulus-orion-only spec: containers: - args: @@ -4276,7 +5107,7 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=regulus-jetlag-without-deploy + - --target=orion-only - --variant=metal-telco-x86-regulus command: - ci-operator @@ -4333,4 +5164,174 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(metal-telco-x86-regulus-regulus-jetlag-without-deploy|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(metal-telco-x86-regulus-orion-only|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build11 + context: ci/prow/microshift-metal-selfsched-4.22-candidate-x86-deploy + decorate: true + decoration_config: + skip_cloning: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: metal-perfscale-selfsched + ci-operator.openshift.io/cloud-cluster-profile: metal-perfscale-selfsched + ci-operator.openshift.io/variant: microshift-metal-selfsched-4.22-candidate-x86 + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-microshift-metal-selfsched-4.22-candidate-x86-deploy + rerun_command: /test microshift-metal-selfsched-4.22-candidate-x86-deploy + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=deploy + - --variant=microshift-metal-selfsched-4.22-candidate-x86 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(microshift-metal-selfsched-4.22-candidate-x86-deploy|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build11 + context: ci/prow/microshift-metal-selfsched-4.22-candidate-x86-node-density + decorate: true + decoration_config: + skip_cloning: true + labels: + capability/intranet: intranet + ci-operator.openshift.io/cloud: metal-perfscale-selfsched + ci-operator.openshift.io/cloud-cluster-profile: metal-perfscale-selfsched + ci-operator.openshift.io/variant: microshift-metal-selfsched-4.22-candidate-x86 + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-microshift-metal-selfsched-4.22-candidate-x86-node-density + rerun_command: /test microshift-metal-selfsched-4.22-candidate-x86-node-density + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=node-density + - --variant=microshift-metal-selfsched-4.22-candidate-x86 + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(microshift-metal-selfsched-4.22-candidate-x86-node-density|remaining-required),?($|\s.*) diff --git a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh index 7e8ab3cba9483..7dc3285aeaf07 100755 --- a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh +++ b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh @@ -74,7 +74,8 @@ done # ── Install ORION dependencies ──────────────────────────────────── pushd regulus/ORION || exit 1 -pip install -q --retries "$MAX_RETRIES" requests pyyaml +# Orion CLI already installed above; this covers ORION/ script deps (requests, pyyaml) +pip install -q --retries "$MAX_RETRIES" -r requirements.txt echo "✅ Dependencies installed" # ── Run prow-entry.sh ───────────────────────────────────────────────────────── From 42151dee7012cd27d1e1eb4fb976c43f8038e1ef Mon Sep 17 00:00:00 2001 From: reg-agent Date: Wed, 19 Aug 2026 10:57:20 -0400 Subject: [PATCH 13/14] Rename jetlag-no-deploy to no-jetlag, add set -e, protect credentials from tracing MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Rename job as: jetlag-no-deploy → no-jetlag - Add set -o errexit to orion-regulus step; wrap prow-entry.sh in if/else to preserve exit status capture - Disable set -x tracing around credential reads and lab.config generation in bm-regulus step to prevent leaking secrets in CI logs - Set umask 077 for lab.config (mode 600) - Use pip install -r requirements.txt instead of inline package list Co-Authored-By: Claude Opus 4.6 --- ...-qe-perfscale-ci-main__metal-telco-x86-regulus.yaml | 2 +- ...nshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml | 10 +++++----- .../openshift-qe-installer-bm-regulus-commands.sh | 9 +++++++++ .../regulus/openshift-qe-orion-regulus-commands.sh | 8 ++++++-- 4 files changed, 21 insertions(+), 8 deletions(-) diff --git a/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-regulus.yaml b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-regulus.yaml index 5bfc12c4afffa..1e4d591934028 100644 --- a/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-regulus.yaml +++ b/ci-operator/config/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main__metal-telco-x86-regulus.yaml @@ -41,7 +41,7 @@ tests: workflow: openshift-qe-installer-bm-deploy timeout: 8h0m0s - always_run: false - as: jetlag-no-deploy + as: no-jetlag capabilities: - intranet restrict_network_access: false diff --git a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml index 406e2fc689d23..69bed6de75ac9 100644 --- a/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml +++ b/ci-operator/jobs/openshift-eng/ocp-qe-perfscale-ci/openshift-eng-ocp-qe-perfscale-ci-main-presubmits.yaml @@ -4997,7 +4997,7 @@ presubmits: - ^main$ - ^main- cluster: build11 - context: ci/prow/metal-telco-x86-regulus-jetlag-no-deploy + context: ci/prow/metal-telco-x86-regulus-no-jetlag decorate: true decoration_config: skip_cloning: true @@ -5010,8 +5010,8 @@ presubmits: ci.openshift.io/generator: prowgen job-release: "4.22" pj-rehearse.openshift.io/can-be-rehearsed: "true" - name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-regulus-jetlag-no-deploy - rerun_command: /test metal-telco-x86-regulus-jetlag-no-deploy + name: pull-ci-openshift-eng-ocp-qe-perfscale-ci-main-metal-telco-x86-regulus-no-jetlag + rerun_command: /test metal-telco-x86-regulus-no-jetlag spec: containers: - args: @@ -5020,7 +5020,7 @@ presubmits: - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - - --target=jetlag-no-deploy + - --target=no-jetlag - --variant=metal-telco-x86-regulus command: - ci-operator @@ -5077,7 +5077,7 @@ presubmits: - name: result-aggregator secret: secretName: result-aggregator - trigger: (?m)^/test( | .* )(metal-telco-x86-regulus-jetlag-no-deploy|remaining-required),?($|\s.*) + trigger: (?m)^/test( | .* )(metal-telco-x86-regulus-no-jetlag|remaining-required),?($|\s.*) - agent: kubernetes always_run: false branches: diff --git a/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh b/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh index 20454314a25c7..823cf3b6d4837 100644 --- a/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh +++ b/ci-operator/step-registry/openshift-qe/installer/bm/regulus/openshift-qe-installer-bm-regulus-commands.sh @@ -160,12 +160,16 @@ install-regulus # ───────────────────────────────────────────────────────────────────────────── # Read ES credentials from mounted secret (optional - will be empty if not present) +# Disable tracing to avoid exposing credentials in CI logs # ───────────────────────────────────────────────────────────────────────────── +[[ $- == *x* ]] && _WAS_TRACING=true || _WAS_TRACING=false +set +x ES_PASSWORD=$(cat "/secret/perfscale-prod/password" 2>/dev/null || echo "") ES_USER=$(cat "/secret/perfscale-prod/username" 2>/dev/null || echo "") ES_HOST=$(cat "/secret/perfscale-prod/host" 2>/dev/null || echo "") ES_PROTOCOL="https" export ES_PASSWORD ES_USER ES_HOST ES_PROTOCOL +$_WAS_TRACING && set -x # ───────────────────────────────────────────────────────────────────────────── # Generate Regulus lab.config @@ -202,6 +206,10 @@ if [ -e /tmp/lab.config ]; then rm /tmp/lab.config fi +# Disable tracing during lab.config generation (contains credentials) +[[ $- == *x* ]] && _WAS_TRACING=true || _WAS_TRACING=false +set +x +umask 077 cat > /tmp/lab.config <> /tmp/lab.config done +$_WAS_TRACING && set -x # ─────────────────────────────────────────────────────────────────────────── # Launch Regulus (tests are listed in regulus_repo/jobs.config) diff --git a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh index 7dc3285aeaf07..811335d4fccfb 100755 --- a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh +++ b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-commands.sh @@ -11,6 +11,7 @@ # 4. Install ORION dependencies # 5. Run prow-entry.sh (bridges Prow env vars to analyze-batch.py) # +set -o errexit set -o nounset set -o pipefail @@ -85,8 +86,11 @@ echo "Running Orion Regulus Analysis" echo "==================================" echo "" -./scripts/prow-entry.sh -analysis_exit_status=$? +if ./scripts/prow-entry.sh; then + analysis_exit_status=0 +else + analysis_exit_status=$? +fi popd || true popd || true From 6e00886703feca8c2472eeb7656b6c1976e35633 Mon Sep 17 00:00:00 2001 From: reg-agent Date: Wed, 19 Aug 2026 12:27:37 -0400 Subject: [PATCH 14/14] Change LOOKBACK default from 90d to 15 (sample count) Sample count is better suited for weekly jobs where a time-based lookback of 15d would yield only ~2 samples. Co-Authored-By: Claude Opus 4.6 --- .../orion/regulus/openshift-qe-orion-regulus-ref.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.yaml b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.yaml index fb54cc435a076..0dd238ff8771c 100644 --- a/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.yaml +++ b/ci-operator/step-registry/openshift-qe/orion/regulus/openshift-qe-orion-regulus-ref.yaml @@ -31,8 +31,8 @@ ref: default: "regulus-results-*" documentation: Elasticsearch index pattern containing Regulus benchmark results - name: LOOKBACK - default: "90d" - documentation: Lookback period for historical data (e.g., 90d, 1y) + default: "15" + documentation: Lookback for historical data. Plain integer for sample count (e.g., 15), or duration string (e.g., 90d, 30d2h) - name: DEBUG default: "false" documentation: Enable debug output in analyze-batch.py