Hive: Add mce-2.4 jobs

ci-operator/config/openshift/hive/openshift-hive-mce-2.4.yaml

@@ -0,0 +1,209 @@
+base_images:
+  base:
+    name: "4.14"
+    namespace: ocp
+    tag: base
+  openshift_release_rhel-8-release-golang-1.20-openshift-4.14:
+    name: release
+    namespace: openshift
+    tag: rhel-8-release-golang-1.20-openshift-4.14
+binary_build_commands: make build
+build_root:
+  project_image:
+    dockerfile_path: build/build-image/Dockerfile
+images:
+- dockerfile_path: Dockerfile
+  from: base
+  inputs:
+    openshift_release_rhel-8-release-golang-1.20-openshift-4.14:
+      as:
+      - registry.ci.openshift.org/openshift/release:rhel-8-release-golang-1.20-openshift-4.14
+  to: hive
+promotion:
+  name: mce-2.4
+  namespace: openshift
+releases:
+  initial:
+    candidate:
+      product: ocp
+      stream: nightly
+      version: "4.14"
+  latest:
+    candidate:
+      product: ocp
+      stream: nightly
+      version: "4.14"
+resources:
+  '*':
+    requests:
+      cpu: 100m
+      memory: 200Mi
+  unit:
+    requests:
+      cpu: 1000m
+      memory: 4Gi
+tests:
+- as: unit
+  commands: make test
+  container:
+    from: src
+  skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$
+- as: verify
+  commands: make verify
+  container:
+    from: src
+  skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$
+- as: coverage
+  commands: |
+    export CODECOV_TOKEN=$(cat /tmp/secret/CODECOV_TOKEN)
+    make coverage
+  container:
+    from: src
+  run_if_changed: \.go$
+  secret:
+    mount_path: /tmp/secret
+    name: hive-codecov-token
+- as: publish-coverage
+  commands: |
+    export CODECOV_TOKEN=$(cat /tmp/secret/CODECOV_TOKEN)
+    make coverage
+  container:
+    from: src
+  postsubmit: true
+  secret:
+    mount_path: /tmp/secret
+    name: hive-codecov-token
+- as: e2e
+  cluster_claim:
+    architecture: amd64
+    as: unused
+    cloud: aws
+    labels:
+      region: us-east-1
+    owner: openshift-ci
+    product: ocp
+    timeout: 1h0m0s
+    version: "4.12"
+  skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$
+  steps:
+    test:
+    - as: test
+      cli: latest
+      commands: |
+        # Creds for the `ci` user in the cluster-control-plane cluster
+        export AWS_ACCESS_KEY_ID=$(cat /tmp/secret/hiveci-aws-creds/AWS_ACCESS_KEY_ID)
+        export AWS_SECRET_ACCESS_KEY=$(cat /tmp/secret/hiveci-aws-creds/AWS_SECRET_ACCESS_KEY)
+        # Override default location for pull secret
+        export PULL_SECRET_FILE=/tmp/secret/pull-secret/.dockerconfigjson
+        # Configure a unique cluster name based on timestamp and the PR number.
+        # We'll exceed the 21c cluster name cutoff at PR 1Mi or some
+        # time in July of 4147, whichever comes first.
+        export CLUSTER_NAME=$(printf "hiveci-%x-%x" $(date +%s) $PULL_NUMBER)
+        CLOUD=aws make test-e2e
+      credentials:
+      - mount_path: /tmp/secret/hiveci-aws-creds
+        name: hiveci-aws-creds
+        namespace: test-credentials
+      - mount_path: /tmp/secret/pull-secret
+        name: ci-pull-credentials
+        namespace: test-credentials
+      dependencies:
+      - env: HIVE_IMAGE
+        name: hive
+      - env: RELEASE_IMAGE
+        name: release:latest
+      from: src
+      grace_period: 15m0s
+      resources:
+        requests:
+          cpu: 100m
+    workflow: generic-claim
+- as: e2e-pool
+  cluster_claim:
+    architecture: amd64
+    as: unused
+    cloud: aws
+    labels:
+      region: us-east-1
+    owner: openshift-ci
+    product: ocp
+    timeout: 1h0m0s
+    version: "4.12"
+  skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$
+  steps:
+    test:
+    - as: test
+      cli: latest
+      commands: |
+        # Creds for the `ci` user in the cluster-control-plane cluster
+        export AWS_ACCESS_KEY_ID=$(cat /tmp/secret/hiveci-aws-creds/AWS_ACCESS_KEY_ID)
+        export AWS_SECRET_ACCESS_KEY=$(cat /tmp/secret/hiveci-aws-creds/AWS_SECRET_ACCESS_KEY)
+        # Override default location for pull secret
+        export PULL_SECRET_FILE=/tmp/secret/pull-secret/.dockerconfigjson
+        # Configure a unique cluster name based on timestamp and the PR number.
+        # We'll exceed the 21c cluster name cutoff at PR 1Mi or some
+        # time in July of 4147, whichever comes first.
+        export CLUSTER_NAME=$(printf "hiveci-%x-%x" $(date +%s) $PULL_NUMBER)
+        # Disable managed DNS (on by default, and left on for the e2e test)
+        export USE_MANAGED_DNS=false
+        CLOUD=aws make test-e2e-pool
+      credentials:
+      - mount_path: /tmp/secret/hiveci-aws-creds
+        name: hiveci-aws-creds
+        namespace: test-credentials
+      - mount_path: /tmp/secret/pull-secret
+        name: ci-pull-credentials
+        namespace: test-credentials
+      dependencies:
+      - env: HIVE_IMAGE
+        name: hive
+      - env: RELEASE_IMAGE
+        name: release:latest
+      from: src
+      grace_period: 15m0s
+      resources:
+        requests:
+          cpu: 100m
+    workflow: generic-claim
+- as: e2e-gcp
+  optional: true
+  run_if_changed: gcp
+  steps:
+    cluster_profile: gcp
+    test:
+    - as: test
+      cli: latest
+      commands: CLOUD=gcp make test-e2e
+      dependencies:
+      - env: HIVE_IMAGE
+        name: hive
+      - env: RELEASE_IMAGE
+        name: release:latest
+      from: src
+      resources:
+        requests:
+          cpu: 100m
+    workflow: ipi-gcp
+- as: e2e-azure
+  optional: true
+  run_if_changed: azure
+  steps:
+    cluster_profile: azure4
+    test:
+    - as: test
+      cli: latest
+      commands: CLOUD=azure make test-e2e
+      dependencies:
+      - env: HIVE_IMAGE
+        name: hive
+      - env: RELEASE_IMAGE
+        name: release:latest
+      from: src
+      resources:
+        requests:
+          cpu: 100m
+    workflow: ipi-azure
+zz_generated_metadata:
+  branch: mce-2.4
+  org: openshift
+  repo: hive

ci-operator/jobs/openshift/hive/openshift-hive-mce-2.4-postsubmits.yaml

@@ -0,0 +1,110 @@
+postsubmits:
+  openshift/hive:
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^mce-2\.4$
+    cluster: build03
+    decorate: true
+    decoration_config:
+      skip_cloning: true
+    labels:
+      ci-operator.openshift.io/is-promotion: "true"
+      ci.openshift.io/generator: prowgen
+      job-release: "4.14"
+    max_concurrency: 1
+    name: branch-ci-openshift-hive-mce-2.4-images
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --image-mirror-push-secret=/etc/push-secret/.dockerconfigjson
+        - --promote
+        - --report-credentials-file=/etc/report/credentials
+        - --target=[images]
+        command:
+        - ci-operator
+        image: ci-operator:latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/push-secret
+          name: push-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: push-secret
+        secret:
+          secretName: registry-push-credentials-ci-central
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^mce-2\.4$
+    cluster: build03
+    decorate: true
+    decoration_config:
+      skip_cloning: true
+    labels:
+      ci.openshift.io/generator: prowgen
+      job-release: "4.14"
+    max_concurrency: 1
+    name: branch-ci-openshift-hive-mce-2.4-publish-coverage
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --report-credentials-file=/etc/report/credentials
+        - --secret-dir=/secrets/hive-codecov-token
+        - --target=publish-coverage
+        command:
+        - ci-operator
+        image: ci-operator:latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /secrets/hive-codecov-token
+          name: hive-codecov-token
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: hive-codecov-token
+        secret:
+          secretName: hive-codecov-token
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator