diff --git a/ci-operator/config/rh-ecosystem-edge/ibm-ci/OWNERS b/ci-operator/config/rh-ecosystem-edge/ibm-ci/OWNERS new file mode 100644 index 0000000000000..f5438c361e7cc --- /dev/null +++ b/ci-operator/config/rh-ecosystem-edge/ibm-ci/OWNERS @@ -0,0 +1,13 @@ +# DO NOT EDIT; this file is auto-generated using https://github.com/openshift/ci-tools. +# Fetched from https://github.com/rh-ecosystem-edge/ibm-ci root OWNERS +# If the repo had OWNERS_ALIASES then the aliases were expanded +# Logins who are not members of 'openshift' organization were filtered out +# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md + +approvers: +- aopincar +- onaim500 +options: {} +reviewers: +- aopincar +- onaim500 diff --git a/ci-operator/config/rh-ecosystem-edge/ibm-ci/rh-ecosystem-edge-ibm-ci-main.yaml b/ci-operator/config/rh-ecosystem-edge/ibm-ci/rh-ecosystem-edge-ibm-ci-main.yaml new file mode 100644 index 0000000000000..1c761b29b01f3 --- /dev/null +++ b/ci-operator/config/rh-ecosystem-edge/ibm-ci/rh-ecosystem-edge-ibm-ci-main.yaml @@ -0,0 +1,29 @@ +build_root: + image_stream_tag: + name: release + namespace: openshift + tag: rhel-8-release-golang-1.22-openshift-4.17 +images: + items: + - dockerfile_path: Containerfile + to: ibm-ci +resources: + '*': + limits: + memory: 4Gi + requests: + cpu: 100m + memory: 200Mi +tests: +- always_run: false + as: deploy-spyre-operator + capabilities: + - intranet + restrict_network_access: false + steps: + test: + - ref: ibm-ci-deploy +zz_generated_metadata: + branch: main + org: rh-ecosystem-edge + repo: ibm-ci diff --git a/ci-operator/jobs/rh-ecosystem-edge/ibm-ci/OWNERS b/ci-operator/jobs/rh-ecosystem-edge/ibm-ci/OWNERS new file mode 100644 index 0000000000000..f5438c361e7cc --- /dev/null +++ b/ci-operator/jobs/rh-ecosystem-edge/ibm-ci/OWNERS @@ -0,0 +1,13 @@ +# DO NOT EDIT; this file is auto-generated using https://github.com/openshift/ci-tools. +# Fetched from https://github.com/rh-ecosystem-edge/ibm-ci root OWNERS +# If the repo had OWNERS_ALIASES then the aliases were expanded +# Logins who are not members of 'openshift' organization were filtered out +# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md + +approvers: +- aopincar +- onaim500 +options: {} +reviewers: +- aopincar +- onaim500 diff --git a/ci-operator/jobs/rh-ecosystem-edge/ibm-ci/rh-ecosystem-edge-ibm-ci-main-presubmits.yaml b/ci-operator/jobs/rh-ecosystem-edge/ibm-ci/rh-ecosystem-edge-ibm-ci-main-presubmits.yaml new file mode 100644 index 0000000000000..c979ab01e4f04 --- /dev/null +++ b/ci-operator/jobs/rh-ecosystem-edge/ibm-ci/rh-ecosystem-edge-ibm-ci-main-presubmits.yaml @@ -0,0 +1,133 @@ +presubmits: + rh-ecosystem-edge/ibm-ci: + - agent: kubernetes + always_run: false + branches: + - ^main$ + - ^main- + cluster: build10 + context: ci/prow/deploy-spyre-operator + decorate: true + decoration_config: + sparse_checkout_files: + - Containerfile + labels: + capability/intranet: intranet + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-rh-ecosystem-edge-ibm-ci-main-deploy-spyre-operator + rerun_command: /test deploy-spyre-operator + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --lease-server-credentials-file=/etc/boskos/credentials + - --report-credentials-file=/etc/report/credentials + - --target=deploy-spyre-operator + command: + - ci-operator + env: + - name: HTTP_SERVER_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + ports: + - containerPort: 8080 + name: http + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /etc/boskos + name: boskos + readOnly: true + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: boskos + secret: + items: + - key: credentials + path: credentials + secretName: boskos-credentials + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )(deploy-spyre-operator|remaining-required),?($|\s.*) + - agent: kubernetes + always_run: true + branches: + - ^main$ + - ^main- + cluster: build01 + context: ci/prow/images + decorate: true + decoration_config: + sparse_checkout_files: + - Containerfile + labels: + ci.openshift.io/generator: prowgen + pj-rehearse.openshift.io/can-be-rehearsed: "true" + name: pull-ci-rh-ecosystem-edge-ibm-ci-main-images + rerun_command: /test images + spec: + containers: + - args: + - --gcs-upload-secret=/secrets/gcs/service-account.json + - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson + - --report-credentials-file=/etc/report/credentials + - --target=[images] + command: + - ci-operator + image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest + imagePullPolicy: Always + name: "" + resources: + requests: + cpu: 10m + volumeMounts: + - mountPath: /secrets/gcs + name: gcs-credentials + readOnly: true + - mountPath: /secrets/manifest-tool + name: manifest-tool-local-pusher + readOnly: true + - mountPath: /etc/pull-secret + name: pull-secret + readOnly: true + - mountPath: /etc/report + name: result-aggregator + readOnly: true + serviceAccountName: ci-operator + volumes: + - name: manifest-tool-local-pusher + secret: + secretName: manifest-tool-local-pusher + - name: pull-secret + secret: + secretName: registry-pull-credentials + - name: result-aggregator + secret: + secretName: result-aggregator + trigger: (?m)^/test( | .* )images,?($|\s.*) diff --git a/ci-operator/step-registry/ibm-ci/OWNERS b/ci-operator/step-registry/ibm-ci/OWNERS new file mode 100644 index 0000000000000..f5438c361e7cc --- /dev/null +++ b/ci-operator/step-registry/ibm-ci/OWNERS @@ -0,0 +1,13 @@ +# DO NOT EDIT; this file is auto-generated using https://github.com/openshift/ci-tools. +# Fetched from https://github.com/rh-ecosystem-edge/ibm-ci root OWNERS +# If the repo had OWNERS_ALIASES then the aliases were expanded +# Logins who are not members of 'openshift' organization were filtered out +# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md + +approvers: +- aopincar +- onaim500 +options: {} +reviewers: +- aopincar +- onaim500 diff --git a/ci-operator/step-registry/ibm-ci/deploy/OWNERS b/ci-operator/step-registry/ibm-ci/deploy/OWNERS new file mode 100644 index 0000000000000..f5438c361e7cc --- /dev/null +++ b/ci-operator/step-registry/ibm-ci/deploy/OWNERS @@ -0,0 +1,13 @@ +# DO NOT EDIT; this file is auto-generated using https://github.com/openshift/ci-tools. +# Fetched from https://github.com/rh-ecosystem-edge/ibm-ci root OWNERS +# If the repo had OWNERS_ALIASES then the aliases were expanded +# Logins who are not members of 'openshift' organization were filtered out +# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md + +approvers: +- aopincar +- onaim500 +options: {} +reviewers: +- aopincar +- onaim500 diff --git a/ci-operator/step-registry/ibm-ci/deploy/ibm-ci-deploy-commands.sh b/ci-operator/step-registry/ibm-ci/deploy/ibm-ci-deploy-commands.sh new file mode 100644 index 0000000000000..de9690692b505 --- /dev/null +++ b/ci-operator/step-registry/ibm-ci/deploy/ibm-ci-deploy-commands.sh @@ -0,0 +1,30 @@ +#!/bin/bash +set -euo pipefail + +# Setup SSH from Vault secret (base64-encoded private key) +cat /var/run/ibm-ci/private-key | base64 -d > /tmp/id_rsa +echo "" >> /tmp/id_rsa +chmod 600 /tmp/id_rsa + +# Setup pull secret from Vault +cp /var/run/ibm-ci/pull-secret /tmp/pull-secret.json + +# Configure pull secret path in Ansible group vars +echo 'ocp_pull_secret_file: "/tmp/pull-secret.json"' >> ansible/group_vars/all.yml + +# Generate Ansible inventory with SSH options for CI environment +mkdir -p ansible/inventory +cat > ansible/inventory/hosts.yml <