Skip to content

STOR-3001: Add TLS jobs for storage components under cluster storage operator #83039

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dfajmon wants to merge 1 commit into
base: main
Choose a base branch
from
Open

STOR-3001: Add TLS jobs for storage components under cluster storage operator #83039

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
124 changes: 124 additions & 0 deletions ...or/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-main.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -222,6 +222,130 @@ tests:
ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true"
HYPERSHIFT_AZURE_LOCATION: eastus
workflow: hypershift-azure-aks-e2e
- always_run: false
as: tls-scanner-aws-ebs
optional: true
steps:
cluster_profile: openshift-org-aws
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-aws
- always_run: false
as: tls-scanner-azure-disk-azure-file
optional: true
steps:
cluster_profile: openshift-org-azure
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-azure
- always_run: false
as: tls-scanner-gcp-pd
optional: true
steps:
cluster_profile: openshift-org-gcp
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-gcp
- always_run: false
as: tls-scanner-ibm-vpc-block
optional: true
steps:
cluster_profile: ibmcloud
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-ibmcloud
- always_run: false
as: tls-scanner-openstack-cinder-manila
optional: true
steps:
cluster_profile: openstack-vexxhost
env:
BASE_DOMAIN: shiftstack.devcluster.openshift.com
CONFIG_TYPE: minimal
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-openstack
- always_run: false
as: tls-scanner-powervs-block
optional: true
steps:
cluster_profile: powervs-6
env:
ARCH: ppc64le
BRANCH: "5.0"
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-powervs
- always_run: false
as: tls-scanner-vsphere
optional: true
steps:
cluster_profile: vsphere-elastic
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-vsphere
- always_run: false
as: tls-scanner-volumedatasourcevalidator
optional: true
steps:
cluster_profile: openshift-org-aws
env:
SCAN_NAMESPACE: openshift-cluster-storage-operator
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-aws
Comment on lines +225 to +348

@coderabbitai coderabbitai Bot Aug 6, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Generate the CI job outputs.

These new as entries add structural CI jobs. The PR contains only source configurations. Run make update and commit the generated metadata and Prow job changes. Do not hand-edit generated files.

  • ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-main.yaml#L225-L348: generate outputs for the main jobs.
  • ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-4.23.yaml#L225-L348: generate outputs for the 4.23 jobs.
  • ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.0.yaml#L226-L349: generate outputs for the 5.0 jobs.
  • ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.1.yaml#L225-L348: generate outputs for the 5.1 jobs.

As per coding guidelines, “run make update after changes to regenerate zz_generated_metadata and Prow jobs.”

📍 Affects 4 files
  • ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-main.yaml#L225-L348 (this comment)
  • ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-4.23.yaml#L225-L348
  • ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.0.yaml#L226-L349
  • ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.1.yaml#L225-L348
🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-main.yaml`
around lines 225 - 348, Run make update to generate and commit the required
zz_generated_metadata and Prow job outputs for the structural CI jobs in
ci-operator/config/openshift/cluster-storage-operator/openshift-cluster-storage-operator-main.yaml:225-348,
openshift-cluster-storage-operator-release-4.23.yaml:225-348,
openshift-cluster-storage-operator-release-5.0.yaml:226-349, and
openshift-cluster-storage-operator-release-5.1.yaml:225-348; do not hand-edit
generated files.

Source: Coding guidelines

- always_run: false
as: tls-scanner-vsphere-problem-detector
optional: true
Expand Down
124 changes: 124 additions & 0 deletions ...g/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-4.23.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -222,6 +222,130 @@ tests:
ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true"
HYPERSHIFT_AZURE_LOCATION: eastus
workflow: hypershift-azure-aks-e2e
- always_run: false
as: tls-scanner-aws-ebs
optional: true
steps:
cluster_profile: openshift-org-aws
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-aws
- always_run: false
as: tls-scanner-azure-disk-azure-file
optional: true
steps:
cluster_profile: openshift-org-azure
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-azure
- always_run: false
as: tls-scanner-gcp-pd
optional: true
steps:
cluster_profile: openshift-org-gcp
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-gcp
- always_run: false
as: tls-scanner-ibm-vpc-block
optional: true
steps:
cluster_profile: ibmcloud
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-ibmcloud
- always_run: false
as: tls-scanner-openstack-cinder-manila
optional: true
steps:
cluster_profile: openstack-vexxhost
env:
BASE_DOMAIN: shiftstack.devcluster.openshift.com
CONFIG_TYPE: minimal
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-openstack
- always_run: false
as: tls-scanner-powervs-block
optional: true
steps:
cluster_profile: powervs-6
env:
ARCH: ppc64le
BRANCH: "4.23"
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-powervs
- always_run: false
as: tls-scanner-vsphere
optional: true
steps:
cluster_profile: vsphere-elastic
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-vsphere
- always_run: false
as: tls-scanner-volumedatasourcevalidator
optional: true
steps:
cluster_profile: openshift-org-aws
env:
SCAN_NAMESPACE: openshift-cluster-storage-operator
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-aws
- always_run: false
as: tls-scanner-vsphere-problem-detector
optional: true
Expand Down
124 changes: 124 additions & 0 deletions ...ig/openshift/cluster-storage-operator/openshift-cluster-storage-operator-release-5.0.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -223,6 +223,130 @@ tests:
ENABLE_HYPERSHIFT_CERT_ROTATION_SCALE: "true"
HYPERSHIFT_AZURE_LOCATION: eastus
workflow: hypershift-azure-aks-e2e
- always_run: false
as: tls-scanner-aws-ebs
optional: true
steps:
cluster_profile: openshift-org-aws
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-aws
- always_run: false
as: tls-scanner-azure-disk-azure-file
optional: true
steps:
cluster_profile: openshift-org-azure
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-azure
- always_run: false
as: tls-scanner-gcp-pd
optional: true
steps:
cluster_profile: openshift-org-gcp
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-gcp
- always_run: false
as: tls-scanner-ibm-vpc-block
optional: true
steps:
cluster_profile: ibmcloud
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-ibmcloud
- always_run: false
as: tls-scanner-openstack-cinder-manila
optional: true
steps:
cluster_profile: openstack-vexxhost
env:
BASE_DOMAIN: shiftstack.devcluster.openshift.com
CONFIG_TYPE: minimal
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-openstack
- always_run: false
as: tls-scanner-powervs-block
optional: true
steps:
cluster_profile: powervs-6
env:
ARCH: ppc64le
BRANCH: "5.0"
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-powervs
- always_run: false
as: tls-scanner-vsphere
optional: true
steps:
cluster_profile: vsphere-elastic
env:
SCAN_NAMESPACE: openshift-cluster-csi-drivers
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-vsphere
- always_run: false
as: tls-scanner-volumedatasourcevalidator
optional: true
steps:
cluster_profile: openshift-org-aws
env:
SCAN_NAMESPACE: openshift-cluster-storage-operator
SCANNER_CPU: "1"
SCANNER_MEMORY: 1Gi
TLS_13_ENABLE_TLS_ADHERENCE: "true"
TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents
test:
- ref: tls-13
- ref: tls-scanner-run
workflow: ipi-aws
- always_run: false
as: tls-scanner-vsphere-problem-detector
optional: true
Expand Down
Loading