Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
51 changes: 51 additions & 0 deletions ci-operator/config/openshift/os/openshift-os-master__okd-scos.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,51 @@
base_images:
ocp_builder_stream9:
name: builder
namespace: ocp
tag: stream9
images:
- build_args:
- name: OPENSHIFT_CI
value: "1"
dockerfile_path: Containerfile
to: stream-coreos
- build_args:
- name: VARIANT
value: okd-c9s
dockerfile_path: extensions/Dockerfile
inputs:
ocp_builder_stream9:
as:
- registry.access.redhat.com/ubi9/ubi:latest
stream-coreos:
as:
- registry.ci.openshift.org/rhcos-devel/rhel-coreos:latest
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this will build the okd node image on top of rhel-coreos, which is unwanted.
We should use the c9s base image but we don't publish it to registry.ci as of now.
We can change that though

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AIUI according to https://docs.ci.openshift.org/docs/architecture/images/#ci-images, the extensions will be built on top of the previously built stream-coreos image which is substituted for the registry.ci.openshift.org/rhcos-devel/rhel-coreos:latest. This is similar to what is done for rhel-coreos

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jbtrystram this is now ready to go. Do you have any other concerns before approval?

Copy link
Copy Markdown
Contributor Author

@Prashanth684 Prashanth684 Mar 8, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this will build the okd node image on top of rhel-coreos, which is unwanted.

The default in the Containerfile of the os repo is a c9s base image (quay.io/openshift-release-dev/ocp-v4.0-art-dev:c9s-coreos) - and that is used to build the stream-coreos image which is then used to build the extensions. hope this makes it clear.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should probably use the same default in both TBH, but no need to block on that.

to: stream-coreos-extensions
promotion:
to:
- name: scos-4.19
namespace: origin
releases:
latest:
integration:
include_built_images: true
name: scos-4.19
namespace: origin
resources:
'*':
requests:
cpu: 100m
memory: 200Mi
tests:
- always_run: false
as: e2e-aws-ovn
optional: true
skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$
steps:
cluster_profile: aws
workflow: openshift-e2e-aws
zz_generated_metadata:
branch: master
org: openshift
repo: os
variant: okd-scos
62 changes: 62 additions & 0 deletions ci-operator/jobs/openshift/os/openshift-os-master-postsubmits.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -60,3 +60,65 @@ postsubmits:
- name: result-aggregator
secret:
secretName: result-aggregator
- agent: kubernetes
always_run: true
branches:
- ^master$
cluster: build11
decorate: true
decoration_config:
skip_cloning: true
labels:
ci-operator.openshift.io/is-promotion: "true"
ci-operator.openshift.io/variant: okd-scos
ci.openshift.io/generator: prowgen
max_concurrency: 1
name: branch-ci-openshift-os-master-okd-scos-images
spec:
containers:
- args:
- --gcs-upload-secret=/secrets/gcs/service-account.json
- --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
- --image-mirror-push-secret=/etc/push-secret/.dockerconfigjson
- --promote
- --report-credentials-file=/etc/report/credentials
- --target=[images]
- --variant=okd-scos
command:
- ci-operator
image: ci-operator:latest
imagePullPolicy: Always
name: ""
resources:
requests:
cpu: 10m
volumeMounts:
- mountPath: /secrets/gcs
name: gcs-credentials
readOnly: true
- mountPath: /secrets/manifest-tool
name: manifest-tool-local-pusher
readOnly: true
- mountPath: /etc/pull-secret
name: pull-secret
readOnly: true
- mountPath: /etc/push-secret
name: push-secret
readOnly: true
- mountPath: /etc/report
name: result-aggregator
readOnly: true
serviceAccountName: ci-operator
volumes:
- name: manifest-tool-local-pusher
secret:
secretName: manifest-tool-local-pusher
- name: pull-secret
secret:
secretName: registry-pull-credentials
- name: push-secret
secret:
secretName: registry-push-credentials-ci-central
- name: result-aggregator
secret:
secretName: result-aggregator
136 changes: 136 additions & 0 deletions ci-operator/jobs/openshift/os/openshift-os-master-presubmits.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -133,6 +133,142 @@ presubmits:
secret:
secretName: result-aggregator
trigger: (?m)^/test( | .* )images,?($|\s.*)
- agent: kubernetes
always_run: false
branches:
- ^master$
- ^master-
cluster: build01
context: ci/prow/okd-scos-e2e-aws-ovn
decorate: true
decoration_config:
skip_cloning: true
labels:
ci-operator.openshift.io/cloud: aws
ci-operator.openshift.io/cloud-cluster-profile: aws
ci-operator.openshift.io/variant: okd-scos
ci.openshift.io/generator: prowgen
pj-rehearse.openshift.io/can-be-rehearsed: "true"
name: pull-ci-openshift-os-master-okd-scos-e2e-aws-ovn
optional: true
rerun_command: /test okd-scos-e2e-aws-ovn
skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|PROJECT|LICENSE)$
spec:
containers:
- args:
- --gcs-upload-secret=/secrets/gcs/service-account.json
- --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
- --lease-server-credentials-file=/etc/boskos/credentials
- --report-credentials-file=/etc/report/credentials
- --secret-dir=/secrets/ci-pull-credentials
- --target=e2e-aws-ovn
- --variant=okd-scos
command:
- ci-operator
image: ci-operator:latest
imagePullPolicy: Always
name: ""
resources:
requests:
cpu: 10m
volumeMounts:
- mountPath: /etc/boskos
name: boskos
readOnly: true
- mountPath: /secrets/ci-pull-credentials
name: ci-pull-credentials
readOnly: true
- mountPath: /secrets/gcs
name: gcs-credentials
readOnly: true
- mountPath: /secrets/manifest-tool
name: manifest-tool-local-pusher
readOnly: true
- mountPath: /etc/pull-secret
name: pull-secret
readOnly: true
- mountPath: /etc/report
name: result-aggregator
readOnly: true
serviceAccountName: ci-operator
volumes:
- name: boskos
secret:
items:
- key: credentials
path: credentials
secretName: boskos-credentials
- name: ci-pull-credentials
secret:
secretName: ci-pull-credentials
- name: manifest-tool-local-pusher
secret:
secretName: manifest-tool-local-pusher
- name: pull-secret
secret:
secretName: registry-pull-credentials
- name: result-aggregator
secret:
secretName: result-aggregator
trigger: (?m)^/test( | .* )okd-scos-e2e-aws-ovn,?($|\s.*)
- agent: kubernetes
always_run: true
branches:
- ^master$
- ^master-
cluster: build02
context: ci/prow/okd-scos-images
decorate: true
decoration_config:
skip_cloning: true
labels:
ci-operator.openshift.io/variant: okd-scos
ci.openshift.io/generator: prowgen
pj-rehearse.openshift.io/can-be-rehearsed: "true"
name: pull-ci-openshift-os-master-okd-scos-images
rerun_command: /test okd-scos-images
spec:
containers:
- args:
- --gcs-upload-secret=/secrets/gcs/service-account.json
- --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
- --report-credentials-file=/etc/report/credentials
- --target=[images]
- --target=[release:latest]
- --variant=okd-scos
command:
- ci-operator
image: ci-operator:latest
imagePullPolicy: Always
name: ""
resources:
requests:
cpu: 10m
volumeMounts:
- mountPath: /secrets/gcs
name: gcs-credentials
readOnly: true
- mountPath: /secrets/manifest-tool
name: manifest-tool-local-pusher
readOnly: true
- mountPath: /etc/pull-secret
name: pull-secret
readOnly: true
- mountPath: /etc/report
name: result-aggregator
readOnly: true
serviceAccountName: ci-operator
volumes:
- name: manifest-tool-local-pusher
secret:
secretName: manifest-tool-local-pusher
- name: pull-secret
secret:
secretName: registry-pull-credentials
- name: result-aggregator
secret:
secretName: result-aggregator
trigger: (?m)^/test( | .* )okd-scos-images,?($|\s.*)
- agent: kubernetes
always_run: false
branches:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -183,6 +183,8 @@ registry.ci.openshift.org/origin/scos-4.19:prometheus-operator quay.io/openshift
registry.ci.openshift.org/origin/scos-4.19:prometheus-operator-admission-webhook quay.io/openshift/origin-prometheus-operator-admission-webhook:4.19 quay.io/openshift/origin-prometheus-operator-admission-webhook:4.19.0 quay.io/openshift/origin-prometheus-operator-admission-webhook:latest
registry.ci.openshift.org/origin/scos-4.19:route-controller-manager quay.io/openshift/origin-route-controller-manager:4.19 quay.io/openshift/origin-route-controller-manager:4.19.0 quay.io/openshift/origin-route-controller-manager:latest
registry.ci.openshift.org/origin/scos-4.19:service-ca-operator quay.io/openshift/origin-service-ca-operator:4.19 quay.io/openshift/origin-service-ca-operator:4.19.0 quay.io/openshift/origin-service-ca-operator:latest
registry.ci.openshift.org/origin/scos-4.19:stream-coreos quay.io/openshift/origin-stream-coreos:4.19 quay.io/openshift/origin-stream-coreos:4.19.0 quay.io/openshift/origin-stream-coreos:latest
registry.ci.openshift.org/origin/scos-4.19:stream-coreos-extensions quay.io/openshift/origin-stream-coreos-extensions:4.19 quay.io/openshift/origin-stream-coreos-extensions:4.19.0 quay.io/openshift/origin-stream-coreos-extensions:latest
registry.ci.openshift.org/origin/scos-4.19:telemeter quay.io/openshift/origin-telemeter:4.19 quay.io/openshift/origin-telemeter:4.19.0 quay.io/openshift/origin-telemeter:latest
registry.ci.openshift.org/origin/scos-4.19:tests quay.io/openshift/origin-tests:4.19 quay.io/openshift/origin-tests:4.19.0 quay.io/openshift/origin-tests:latest
registry.ci.openshift.org/origin/scos-4.19:thanos quay.io/openshift/origin-thanos:4.19 quay.io/openshift/origin-thanos:4.19.0 quay.io/openshift/origin-thanos:latest
Expand Down