openshift-cluster-network-operator-master.yaml

base_images:
  dev-scripts:
    name: test
    namespace: ocp-kni
    tag: dev-scripts
  golangci-lint:
    name: golangci-lint
    namespace: ci
    tag: latest
  hypershift-operator:
    name: hypershift-operator
    namespace: hypershift
    tag: latest
  hypershift-tests:
    name: hypershift-tests
    namespace: hypershift
    tag: latest
  tests-private:
    name: tests-private
    namespace: ci
    tag: latest
binary_build_commands: hack/build-go.sh
build_root:
  from_repository: true
images:
  items:
  - dockerfile_path: Dockerfile
    to: cluster-network-operator
promotion:
  to:
  - name: "5.0"
    namespace: ocp
releases:
  initial:
    integration:
      name: "5.0"
      namespace: ocp
  latest:
    integration:
      include_built_images: true
      name: "5.0"
      namespace: ocp
resources:
  '*':
    requests:
      cpu: 100m
      memory: 200Mi
tests:
- as: unit
  commands: hack/test-go.sh
  container:
    from: src
- as: verify
  commands: hack/verify-style.sh
  container:
    from: src
- as: e2e-gcp-ovn-upgrade
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: openshift-org-gcp
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-upgrade-gcp-ovn
- always_run: true
  as: e2e-aws-ovn-upgrade-ipsec
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-aws-ovn-upgrade-ipsec
- always_run: false
  as: e2e-ovn-step-registry
  optional: true
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-aws-ovn
- as: e2e-aws-ovn-upgrade
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
      FAIL_ON_CORE_DUMP: "true"
      TEST_TYPE: upgrade-conformance
    observers:
      enable:
      - observers-resource-watch
    workflow: openshift-upgrade-aws-ovn
- always_run: false
  as: e2e-ovn-hybrid-step-registry
  optional: true
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-aws-ovn-hybrid
- as: e2e-ovn-ipsec-step-registry
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-aws-ovn-ipsec
- as: e2e-aws-ovn-serial
  shard_count: 2
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-aws-ovn-serial
- always_run: false
  as: e2e-aws-ovn-serial-ipsec
  optional: true
  shard_count: 2
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-aws-ovn-serial-ipsec
- as: e2e-metal-ipi-ovn-ipv6
  capabilities:
  - intranet
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: equinix-ocp-metal
    env:
      DEVSCRIPTS_CONFIG: |
        IP_STACK=v6
        NETWORK_TYPE=OVNKubernetes
      EXTRA_MG_ARGS: --host-network
    workflow: baremetalds-e2e
- as: e2e-metal-ipi-ovn-ipv6-ipsec
  capabilities:
  - intranet
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: equinix-ocp-metal
    env:
      DEVSCRIPTS_CONFIG: |
        IP_STACK=v6
        NETWORK_TYPE=OVNKubernetes
      EXTRA_MG_ARGS: --host-network
    workflow: baremetalds-e2e-ovn-ipsec
- as: e2e-aws-ovn-windows
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: openshift-org-aws
    env:
      CUSTOM_VXLAN_PORT: "true"
    test:
    - ref: windows-e2e-operator-test
    workflow: ipi-aws-ovn-hybrid
- always_run: false
  as: e2e-vsphere-ovn
  optional: true
  steps:
    cluster_profile: vsphere-elastic
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-vsphere-ovn
- always_run: false
  as: e2e-vsphere-ovn-dualstack
  optional: true
  steps:
    cluster_profile: vsphere-elastic
    env:
      EXTRA_MG_ARGS: --host-network
      TEST_SKIPS: Services Secondary IP Family \[LinuxOnly\] should function for pod-Service\|
        Services Secondary IP Family \[LinuxOnly\] should function for node-Service\|
        Services Secondary IP Family \[LinuxOnly\] should function for endpoint-Service\|
        Services Secondary IP Family \[LinuxOnly\] should function for service endpoints
        using hostNetwork\| should have ipv4 and ipv6 internal node ip
    workflow: openshift-e2e-vsphere-ovn-dualstack
- always_run: false
  as: e2e-vsphere-ovn-dualstack-primaryv6
  optional: true
  steps:
    cluster_profile: vsphere-elastic
    env:
      EXTRA_MG_ARGS: --host-network
      IP_FAMILIES: DualStackIPv6Primary
    workflow: openshift-e2e-vsphere-ovn-dualstack
- always_run: false
  as: e2e-azure-ovn
  optional: true
  steps:
    cluster_profile: openshift-org-azure
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-azure-ovn
- always_run: false
  as: e2e-azure-ovn-dualstack
  optional: true
  steps:
    cluster_profile: openshift-org-azure
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-azure-ovn-dualstack
- always_run: false
  as: e2e-azure-ovn-manual-oidc
  optional: true
  steps:
    cluster_profile: openshift-org-azure
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-azure-manual-oidc-workload-identity
- as: e2e-azure-ovn-upgrade
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: openshift-org-azure
    env:
      FAIL_ON_CORE_DUMP: "true"
      TEST_TYPE: upgrade-conformance
    observers:
      enable:
      - observers-resource-watch
    workflow: openshift-upgrade-azure-ovn
- as: e2e-gcp-ovn
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: openshift-org-gcp
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-gcp-ovn
- always_run: false
  as: e2e-gcp-ovn-techpreview
  steps:
    cluster_profile: openshift-org-gcp
    env:
      EXTRA_MG_ARGS: --host-network
      FEATURE_SET: TechPreviewNoUpgrade
    workflow: openshift-e2e-gcp-ovn
- as: e2e-aws-ovn-rhcos10-techpreview
  optional: true
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
      FEATURE_SET: TechPreviewNoUpgrade
      OS_IMAGE_STREAM: rhel-10
    workflow: openshift-e2e-aws-ovn
- always_run: false
  as: e2e-aws-ovn-techpreview-serial
  optional: true
  shard_count: 2
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
      FEATURE_SET: TechPreviewNoUpgrade
    workflow: openshift-e2e-aws-ovn-serial
- always_run: false
  as: e2e-vsphere-ovn-windows
  optional: true
  steps:
    cluster_profile: vsphere-elastic
    env:
      EXTRA_MG_ARGS: --host-network
    test:
    - ref: windows-e2e-operator-test
    workflow: ipi-vsphere-ovn-hybrid-custom-vxlan-port
- always_run: false
  as: e2e-openstack-ovn
  optional: true
  steps:
    cluster_profile: openstack-vexxhost
    env:
      BASE_DOMAIN: shiftstack.devcluster.openshift.com
      CONFIG_TYPE: minimal
      EXTRA_MG_ARGS: --host-network
      NETWORK_TYPE: OVNKubernetes
      TEST_SUITE: openshift/conformance/parallel
    workflow: openshift-e2e-openstack-ipi
- as: e2e-aws-ovn-clusternetwork-cidr-expansion
  cron: 0 3 * * 0,2,4,6
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-aws-cidr-expansion
- as: e2e-aws-ovn-subnet-configs
  cron: 0 3 * * 0,2,4,6
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: ovn-subnet-configs
- always_run: false
  as: e2e-aws-ovn-single-node
  optional: true
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-aws-single-node
- as: e2e-aws-ovn-hypershift-conformance
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: hypershift-aws
    workflow: hypershift-aws-conformance
- as: lint
  commands: |
    export GOCACHE=/tmp/
    export GOLANGCI_LINT_CACHE=/tmp/.cache
    export GOPROXY=https://proxy.golang.org
    golangci-lint run --verbose --print-resources-usage --modules-download-mode=vendor --timeout=5m0s
  container:
    clone: true
    from: golangci-lint
- always_run: false
  as: e2e-network-mtu-migration-ovn-ipv4
  optional: true
  steps:
    cluster_profile: openshift-org-gcp
    env:
      EXTRA_MG_ARGS: --host-network
      MTU_DECREASE: "400"
      MTU_INCREASE: "200"
    test:
    - chain: network-mtu-migration-decrease
    - chain: network-mtu-migration-increase
    - ref: openshift-e2e-test
    workflow: openshift-e2e-gcp-ovn
- always_run: false
  as: e2e-network-mtu-migration-ovn-ipv6
  capabilities:
  - intranet
  optional: true
  steps:
    cluster_profile: equinix-ocp-metal
    env:
      EXTRA_MG_ARGS: --host-network
      MTU_DECREASE: "100"
      MTU_INCREASE: "50"
    test:
    - chain: network-mtu-migration-decrease
    - chain: network-mtu-migration-increase
    - chain: baremetalds-ipi-test
    workflow: baremetalds-e2e-ovn-ipv6
- always_run: false
  as: e2e-aws-ovn-shared-to-local-gateway-mode-migration
  optional: true
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
    workflow: openshift-e2e-aws-ovn-shared-to-local-gateway-mode-migration
- always_run: false
  as: e2e-aws-ovn-local-to-shared-gateway-mode-migration
  optional: true
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
      GATEWAY_MODE: local
    workflow: openshift-e2e-aws-ovn-local-to-shared-gateway-mode-migration
- always_run: false
  as: e2e-aws-hypershift-ovn-kubevirt
  optional: true
  steps:
    cluster_profile: openshift-org-aws
    workflow: hypershift-kubevirt-conformance
- always_run: false
  as: qe-perfscale-aws-ovn-medium-cluster-density
  optional: true
  steps:
    cluster_profile: aws-perfscale
    env:
      BASE_DOMAIN: perfscale.devcluster.openshift.com
      COMPUTE_NODE_REPLICAS: "120"
      COMPUTE_NODE_TYPE: m5.xlarge
      EXTRA_MG_ARGS: --host-network
      SIZE_VARIANT: large
    post:
    - chain: ipi-aws-post
    pre:
    - chain: ipi-aws-pre
    - chain: create-infra-move-ingress-monitoring-registry
    workflow: openshift-qe-cluster-density-v2
- always_run: false
  as: qe-perfscale-aws-ovn-small-cluster-density
  optional: true
  steps:
    cluster_profile: aws-perfscale-qe
    env:
      BASE_DOMAIN: qe.devcluster.openshift.com
      COMPUTE_NODE_REPLICAS: "24"
      COMPUTE_NODE_TYPE: m5.xlarge
      EXTRA_MG_ARGS: --host-network
    post:
    - chain: ipi-aws-post
    pre:
    - chain: ipi-aws-pre
    - chain: create-infra-move-ingress-monitoring-registry
    workflow: openshift-qe-cluster-density-v2
- always_run: false
  as: qe-perfscale-aws-ovn-medium-node-density-cni
  optional: true
  steps:
    cluster_profile: aws-perfscale
    env:
      BASE_DOMAIN: perfscale.devcluster.openshift.com
      COMPUTE_NODE_REPLICAS: "120"
      COMPUTE_NODE_TYPE: m5.xlarge
      EXTRA_MG_ARGS: --host-network
      SIZE_VARIANT: large
    post:
    - chain: ipi-aws-post
    pre:
    - chain: ipi-aws-pre
    - chain: create-infra-move-ingress-monitoring-registry
    workflow: openshift-qe-node-density-cni
- always_run: false
  as: qe-perfscale-aws-ovn-small-node-density-cni
  optional: true
  steps:
    cluster_profile: aws-perfscale-qe
    env:
      BASE_DOMAIN: qe.devcluster.openshift.com
      COMPUTE_NODE_REPLICAS: "24"
      COMPUTE_NODE_TYPE: m5.xlarge
      EXTRA_MG_ARGS: --host-network
    post:
    - chain: ipi-aws-post
    pre:
    - chain: ipi-aws-pre
    - chain: create-infra-move-ingress-monitoring-registry
    workflow: openshift-qe-node-density-cni
- always_run: false
  as: frrk8s-e2e
  capabilities:
  - intranet
  optional: true
  run_if_changed: ^bindata\/network\/frr-k8s.*$
  steps:
    cluster_profile: equinix-ocp-metal
    env:
      DEVSCRIPTS_CONFIG: |
        IP_STACK=v4
        NETWORK_TYPE=OVNKubernetes
      E2E_TESTS_CONFIG: |
        IP_STACK=v4
        BGP_TYPE=frr-k8s-cno
        RUN_FRR_K8S_TESTS=true
      EXTRA_MG_ARGS: --host-network
    workflow: baremetalds-metallb-e2e
- as: security
  optional: true
  steps:
    env:
      ALL_PROJECTS: "true"
      PROJECT_NAME: cluster-network-operator
      SNYK_CODE_ADDITIONAL_ARGS: --severity-threshold=high
      SNYK_PRE_EXECUTION_HOOK_CMD: rm -rf vendor
    workflow: openshift-ci-security
- as: hypershift-e2e-aks
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: hypershift-aks
    env:
      AUTH_THROUGH_CERTS: "true"
      ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true"
      HYPERSHIFT_AZURE_LOCATION: centralus
    workflow: hypershift-azure-aks-e2e
- as: verify-deps
  steps:
    env:
      CHECK_MOD_LIST: "false"
    test:
    - ref: go-verify-deps
- as: e2e-metal-ipi-ovn-dualstack-bgp
  capabilities:
  - intranet
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: equinix-ocp-metal
    workflow: baremetalds-e2e-ovn-bgp-dualstack
- as: e2e-metal-ipi-ovn-dualstack-bgp-local-gw
  capabilities:
  - intranet
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: equinix-ocp-metal
    workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw
- always_run: false
  as: e2e-metal-ipi-ovn-dualstack-bgp-local-gw-techpreview
  capabilities:
  - intranet
  optional: true
  steps:
    cluster_profile: equinix-ocp-metal
    env:
      FEATURE_SET: TechPreviewNoUpgrade
    workflow: baremetalds-e2e-ovn-bgp-dualstack-local-gw
- as: e2e-aws-ovn-fdp-qe
  skip_if_only_changed: ^(docs|\.vscode)/|\.md$|^(\.gitignore|\.gitattributes|\.golangci\.yaml|OWNERS|OWNERS_ALIASES|LICENSE|sample-.*\.yaml)$
  steps:
    cluster_profile: openshift-org-aws
    env:
      EXTRA_MG_ARGS: --host-network
      PARALLEL: "1"
      TEST_TIMEOUT: "60"
    test:
    - chain: openshift-e2e-test-network-qe
    workflow: openshift-e2e-aws-ovn
zz_generated_metadata:
  branch: master
  org: openshift
  repo: cluster-network-operator