From 009a4ed647eb4cd371db46a72914657ec23bddaf Mon Sep 17 00:00:00 2001 From: Eric Fried Date: Tue, 26 Sep 2023 14:49:17 -0500 Subject: [PATCH] Hive: Add mce-2.4 jobs --- .../hive/openshift-hive-mce-2.4.yaml | 209 ++++++++ .../openshift-hive-mce-2.4-postsubmits.yaml | 110 ++++ .../openshift-hive-mce-2.4-presubmits.yaml | 500 ++++++++++++++++++ 3 files changed, 819 insertions(+) create mode 100644 ci-operator/config/openshift/hive/openshift-hive-mce-2.4.yaml create mode 100644 ci-operator/jobs/openshift/hive/openshift-hive-mce-2.4-postsubmits.yaml create mode 100644 ci-operator/jobs/openshift/hive/openshift-hive-mce-2.4-presubmits.yaml diff --git a/ci-operator/config/openshift/hive/openshift-hive-mce-2.4.yaml b/ci-operator/config/openshift/hive/openshift-hive-mce-2.4.yaml new file mode 100644 index 0000000000000..14d1068dd995a --- /dev/null +++ b/ci-operator/config/openshift/hive/openshift-hive-mce-2.4.yaml @@ -0,0 +1,209 @@ +base_images: + base: + name: "4.14" + namespace: ocp + tag: base + openshift_release_rhel-8-release-golang-1.20-openshift-4.14: + name: release + namespace: openshift + tag: rhel-8-release-golang-1.20-openshift-4.14 +binary_build_commands: make build +build_root: + project_image: + dockerfile_path: build/build-image/Dockerfile +images: +- dockerfile_path: Dockerfile + from: base + inputs: + openshift_release_rhel-8-release-golang-1.20-openshift-4.14: + as: + - registry.ci.openshift.org/openshift/release:rhel-8-release-golang-1.20-openshift-4.14 + to: hive +promotion: + name: mce-2.4 + namespace: openshift +releases: + initial: + candidate: + product: ocp + stream: nightly + version: "4.14" + latest: + candidate: + product: ocp + stream: nightly + version: "4.14" +resources: + '*': + requests: + cpu: 100m + memory: 200Mi + unit: + requests: + cpu: 1000m + memory: 4Gi +tests: +- as: unit + commands: make test + container: + from: src + skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ +- as: verify + commands: make verify + container: + from: src + skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ +- as: coverage + commands: | + export CODECOV_TOKEN=$(cat /tmp/secret/CODECOV_TOKEN) + make coverage + container: + from: src + run_if_changed: \.go$ + secret: + mount_path: /tmp/secret + name: hive-codecov-token +- as: publish-coverage + commands: | + export CODECOV_TOKEN=$(cat /tmp/secret/CODECOV_TOKEN) + make coverage + container: + from: src + postsubmit: true + secret: + mount_path: /tmp/secret + name: hive-codecov-token +- as: e2e + cluster_claim: + architecture: amd64 + as: unused + cloud: aws + labels: + region: us-east-1 + owner: openshift-ci + product: ocp + timeout: 1h0m0s + version: "4.12" + skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ + steps: + test: + - as: test + cli: latest + commands: | + # Creds for the `ci` user in the cluster-control-plane cluster + export AWS_ACCESS_KEY_ID=$(cat /tmp/secret/hiveci-aws-creds/AWS_ACCESS_KEY_ID) + export AWS_SECRET_ACCESS_KEY=$(cat /tmp/secret/hiveci-aws-creds/AWS_SECRET_ACCESS_KEY) + # Override default location for pull secret + export PULL_SECRET_FILE=/tmp/secret/pull-secret/.dockerconfigjson + # Configure a unique cluster name based on timestamp and the PR number. + # We'll exceed the 21c cluster name cutoff at PR 1Mi or some + # time in July of 4147, whichever comes first. + export CLUSTER_NAME=$(printf "hiveci-%x-%x" $(date +%s) $PULL_NUMBER) + CLOUD=aws make test-e2e + credentials: + - mount_path: /tmp/secret/hiveci-aws-creds + name: hiveci-aws-creds + namespace: test-credentials + - mount_path: /tmp/secret/pull-secret + name: ci-pull-credentials + namespace: test-credentials + dependencies: + - env: HIVE_IMAGE + name: hive + - env: RELEASE_IMAGE + name: release:latest + from: src + grace_period: 15m0s + resources: + requests: + cpu: 100m + workflow: generic-claim +- as: e2e-pool + cluster_claim: + architecture: amd64 + as: unused + cloud: aws + labels: + region: us-east-1 + owner: openshift-ci + product: ocp + timeout: 1h0m0s + version: "4.12" + skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ + steps: + test: + - as: test + cli: latest + commands: | + # Creds for the `ci` user in the cluster-control-plane cluster + export AWS_ACCESS_KEY_ID=$(cat /tmp/secret/hiveci-aws-creds/AWS_ACCESS_KEY_ID) + export AWS_SECRET_ACCESS_KEY=$(cat /tmp/secret/hiveci-aws-creds/AWS_SECRET_ACCESS_KEY) + # Override default location for pull secret + export PULL_SECRET_FILE=/tmp/secret/pull-secret/.dockerconfigjson + # Configure a unique cluster name based on timestamp and the PR number. + # We'll exceed the 21c cluster name cutoff at PR 1Mi or some + # time in July of 4147, whichever comes first. + export CLUSTER_NAME=$(printf "hiveci-%x-%x" $(date +%s) $PULL_NUMBER) + # Disable managed DNS (on by default, and left on for the e2e test) + export USE_MANAGED_DNS=false + CLOUD=aws make test-e2e-pool + credentials: + - mount_path: /tmp/secret/hiveci-aws-creds + name: hiveci-aws-creds + namespace: test-credentials + - mount_path: /tmp/secret/pull-secret + name: ci-pull-credentials + namespace: test-credentials + dependencies: + - env: HIVE_IMAGE + name: hive + - env: RELEASE_IMAGE + name: release:latest + from: src + grace_period: 15m0s + resources: + requests: + cpu: 100m + workflow: generic-claim +- as: e2e-gcp + optional: true + run_if_changed: gcp + steps: + cluster_profile: gcp + test: + - as: test + cli: latest + commands: CLOUD=gcp make test-e2e + dependencies: + - env: HIVE_IMAGE + name: hive + - env: RELEASE_IMAGE + name: release:latest + from: src + resources: + requests: + cpu: 100m + workflow: ipi-gcp +- as: e2e-azure + optional: true + run_if_changed: azure + steps: + cluster_profile: azure4 + test: + - as: test + cli: latest + commands: CLOUD=azure make test-e2e + dependencies: + - env: HIVE_IMAGE + name: hive + - env: RELEASE_IMAGE + name: release:latest + from: src + resources: + requests: + cpu: 100m + workflow: ipi-azure +zz_generated_metadata: + branch: mce-2.4 + org: openshift + repo: hive diff --git a/ci-operator/jobs/openshift/hive/openshift-hive-mce-2.4-postsubmits.yaml b/ci-operator/jobs/openshift/hive/openshift-hive-mce-2.4-postsubmits.yaml new file mode 100644 index 0000000000000..c3a852b4e8a7e --- /dev/null +++ b/ci-operator/jobs/openshift/hive/openshift-hive-mce-2.4-postsubmits.yaml @@ -0,0 +1,110 @@ +postsubmits: + openshift/hive: + - agent: kubernetes + always_run: true + branches: + - ^mce-2\.4$ + cluster: build03 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/is-promotion: "true" + ci.openshift.io/generator: prowgen + job-release: "4.14" + max_concurrency: 1 + name: branch-ci-openshift-hive-mce-2.4-images + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --image-mirror-push-secret=/etc/push-secret/.dockerconfigjson + - --promote + - --report-credentials-file=/etc/report/credentials + - --target=[images] + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/push-secret + name: push-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: push-secret + secret: + secretName: registry-push-credentials-ci-central + - name: result-aggregator + secret: + secretName: result-aggregator + - agent: kubernetes + always_run: true + branches: + - ^mce-2\.4$ + cluster: build03 + decorate: true + decoration_config: + skip_cloning: true + labels: + ci.openshift.io/generator: prowgen + job-release: "4.14" + max_concurrency: 1 + name: branch-ci-openshift-hive-mce-2.4-publish-coverage + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/hive-codecov-token + - --target=publish-coverage + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/hive-codecov-token + name: hive-codecov-token + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: hive-codecov-token + secret: + secretName: hive-codecov-token + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator diff --git a/ci-operator/jobs/openshift/hive/openshift-hive-mce-2.4-presubmits.yaml b/ci-operator/jobs/openshift/hive/openshift-hive-mce-2.4-presubmits.yaml new file mode 100644 index 0000000000000..a15dcbab48f06 --- /dev/null +++ b/ci-operator/jobs/openshift/hive/openshift-hive-mce-2.4-presubmits.yaml @@ -0,0 +1,500 @@ +presubmits: + openshift/hive: + - agent: kubernetes + always_run: false + branches: + - ^mce-2\.4$ + - ^mce-2\.4- + cluster: build03 + context: ci/prow/coverage + decorate: true + decoration_config: + skip_cloning: true + labels: + ci.openshift.io/generator: prowgen + job-release: "4.14" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-hive-mce-2.4-coverage + rerun_command: /test coverage + run_if_changed: \.go$ + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/hive-codecov-token + - --target=coverage + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/hive-codecov-token + name: hive-codecov-token + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: hive-codecov-token + secret: + secretName: hive-codecov-token + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )coverage,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^mce-2\.4$ + - ^mce-2\.4- + cluster: build03 + context: ci/prow/e2e + decorate: true + decoration_config: + skip_cloning: true + labels: + ci.openshift.io/generator: prowgen + job-release: "4.14" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-hive-mce-2.4-e2e + rerun_command: /test e2e + skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --hive-kubeconfig=/secrets/hive-hive-credentials/kubeconfig + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/hive-hive-credentials + name: hive-hive-credentials + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: hive-hive-credentials + secret: + secretName: hive-hive-credentials + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^mce-2\.4$ + - ^mce-2\.4- + cluster: build03 + context: ci/prow/e2e-azure + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: azure4 + ci-operator.openshift.io/cloud-cluster-profile: azure4 + ci.openshift.io/generator: prowgen + job-release: "4.14" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-hive-mce-2.4-e2e-azure + optional: true + rerun_command: /test e2e-azure + run_if_changed: azure + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --secret-dir=/usr/local/e2e-azure-cluster-profile + - --target=e2e-azure + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /usr/local/e2e-azure-cluster-profile + name: cluster-profile + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: cluster-profile + secret: + secretName: cluster-secrets-azure4 + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-azure,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^mce-2\.4$ + - ^mce-2\.4- + cluster: build02 + context: ci/prow/e2e-gcp + decorate: true + decoration_config: + skip_cloning: true + labels: + ci-operator.openshift.io/cloud: gcp + ci-operator.openshift.io/cloud-cluster-profile: gcp + ci.openshift.io/generator: prowgen + job-release: "4.14" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-hive-mce-2.4-e2e-gcp + optional: true + rerun_command: /test e2e-gcp + run_if_changed: gcp + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --secret-dir=/usr/local/e2e-gcp-cluster-profile + - --target=e2e-gcp + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /usr/local/e2e-gcp-cluster-profile + name: cluster-profile + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: cluster-profile + projected: + sources: + - secret: + name: cluster-secrets-gcp + - configMap: + name: cluster-profile-gcp + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-gcp,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^mce-2\.4$ + - ^mce-2\.4- + cluster: build03 + context: ci/prow/e2e-pool + decorate: true + decoration_config: + skip_cloning: true + labels: + ci.openshift.io/generator: prowgen + job-release: "4.14" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-hive-mce-2.4-e2e-pool + rerun_command: /test e2e-pool + skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --hive-kubeconfig=/secrets/hive-hive-credentials/kubeconfig + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --secret-dir=/secrets/ci-pull-credentials + - --target=e2e-pool + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/ci-pull-credentials + name: ci-pull-credentials + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/hive-hive-credentials + name: hive-hive-credentials + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: ci-pull-credentials + secret: + secretName: ci-pull-credentials + - name: hive-hive-credentials + secret: + secretName: hive-hive-credentials + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )e2e-pool,?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^mce-2\.4$ + - ^mce-2\.4- + cluster: build03 + context: ci/prow/images + decorate: true + decoration_config: + skip_cloning: true + labels: + ci.openshift.io/generator: prowgen + job-release: "4.14" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-hive-mce-2.4-images + rerun_command: /test images + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=[images] + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )images,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^mce-2\.4$ + - ^mce-2\.4- + cluster: build03 + context: ci/prow/unit + decorate: true + decoration_config: + skip_cloning: true + labels: + ci.openshift.io/generator: prowgen + job-release: "4.14" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-hive-mce-2.4-unit + rerun_command: /test unit + skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=unit + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )unit,?($|\s.*) + - agent: kubernetes + always_run: false + branches: + - ^mce-2\.4$ + - ^mce-2\.4- + cluster: build03 + context: ci/prow/verify + decorate: true + decoration_config: + skip_cloning: true + labels: + ci.openshift.io/generator: prowgen + job-release: "4.14" + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-openshift-hive-mce-2.4-verify + rerun_command: /test verify + skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$ + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=verify + command: + - ci-operator + image: ci-operator:latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )verify,?($|\s.*)