Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

migrate secrets-store-csi-driver jobs to community cluster #30667

Closed
wants to merge 1 commit into from
Closed

migrate secrets-store-csi-driver jobs to community cluster #30667

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
117 changes: 85 additions & 32 deletions config/jobs/kubernetes-sigs/secrets-store-csi-driver/secrets-store-csi-driver-config.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -138,6 +138,7 @@ presubmits:
description: "Run vulnerability scans for Secrets Store CSI driver images."
testgrid-num-columns-recent: '30'
- name: pull-secrets-store-csi-driver-e2e-vault
cluster: eks-prow-build-cluster
decorate: true
decoration_config:
timeout: 25m
Expand All @@ -163,6 +164,13 @@ presubmits:
make e2e-bootstrap e2e-helm-deploy e2e-vault
securityContext:
privileged: true
resources:
limits:
cpu: 4
memory: 6Gi
requests:
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
testgrid-tab-name: pr-secrets-store-csi-driver-e2e-vault
Expand Down Expand Up @@ -367,18 +375,19 @@ presubmits:
securityContext:
privileged: true
resources:
requests:
cpu: "4"
memory: "6Gi"
limits:
cpu: "4"
memory: "6Gi"
cpu: 4
memory: 6Gi
requests:
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
testgrid-tab-name: pr-secrets-store-csi-driver-e2e-aws
description: "Run e2e test with aws provider for Secrets Store CSI driver."
testgrid-num-columns-recent: '30'
- name: pull-secrets-store-csi-driver-build
cluster: eks-prow-build-cluster
decorate: true
decoration_config:
timeout: 10m
Expand All @@ -400,6 +409,13 @@ presubmits:
make build build-windows
securityContext:
privileged: true
resources:
limits:
cpu: 4
memory: 6Gi
requests:
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
testgrid-tab-name: pr-secrets-store-csi-driver-build
Expand Down Expand Up @@ -437,9 +453,12 @@ presubmits:
- name: KUBERNETES_VERSION
value: "1.24.7"
resources:
limits:
cpu: 4
memory: 6Gi
requests:
cpu: "4"
memory: "4Gi"
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
testgrid-tab-name: pr-secrets-store-csi-driver-e2e-provider-k8s-1-24-7
Expand Down Expand Up @@ -477,9 +496,12 @@ presubmits:
- name: KUBERNETES_VERSION
value: "1.25.3"
resources:
limits:
cpu: 4
memory: 6Gi
requests:
cpu: "4"
memory: "4Gi"
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
testgrid-tab-name: pr-secrets-store-csi-driver-e2e-provider-k8s-1-25-3
Expand Down Expand Up @@ -517,9 +539,12 @@ presubmits:
- name: KUBERNETES_VERSION
value: "1.26.0"
resources:
limits:
cpu: 4
memory: 6Gi
requests:
cpu: "4"
memory: "4Gi"
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
testgrid-tab-name: pr-secrets-store-csi-driver-e2e-provider-k8s-1-26-0
Expand Down Expand Up @@ -557,9 +582,12 @@ presubmits:
- name: KUBERNETES_VERSION
value: "1.27.1"
resources:
limits:
cpu: 4
memory: 6Gi
requests:
cpu: "4"
memory: "4Gi"
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
testgrid-tab-name: pr-secrets-store-csi-driver-e2e-provider-k8s-1-27-0
Expand Down Expand Up @@ -640,19 +668,20 @@ presubmits:
- name: RELEASE
value: "true"
resources:
requests:
cpu: "4"
memory: "6Gi"
limits:
cpu: "4"
memory: "6Gi"
cpu: 4
memory: 6Gi
requests:
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-release-signal
testgrid-tab-name: release-secrets-store-csi-driver-e2e-aws
description: "Run e2e test with aws provider for Secrets Store CSI driver release."
testgrid-num-columns-recent: '30'

- name: release-secrets-store-csi-driver-e2e-vault
cluster: eks-prow-build-cluster
decorate: true
decoration_config:
timeout: 25m
Expand Down Expand Up @@ -683,12 +712,12 @@ presubmits:
- name: RELEASE
value: "true"
resources:
requests:
cpu: "4"
memory: "4Gi"
limits:
cpu: "4"
memory: "4Gi"
cpu: 4
memory: 6Gi
requests:
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-release-signal
testgrid-tab-name: release-secrets-store-csi-driver-e2e-vault
Expand Down Expand Up @@ -779,6 +808,7 @@ presubmits:
postsubmits:
kubernetes-sigs/secrets-store-csi-driver:
- name: secrets-store-csi-driver-e2e-vault-postsubmit
cluster: eks-prow-build-cluster
decorate: true
decoration_config:
timeout: 25m
Expand All @@ -804,9 +834,12 @@ postsubmits:
securityContext:
privileged: true
resources:
limits:
cpu: 4
memory: 6Gi
requests:
cpu: "4"
memory: "4Gi"
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-postsubmit
testgrid-tab-name: secrets-store-csi-driver-e2e-vault-postsubmit
Expand Down Expand Up @@ -857,6 +890,7 @@ postsubmits:
- aramase
- ritazh
- name: secrets-store-csi-driver-e2e-gcp-postsubmit
cluster: eks-prow-build-cluster
Copy link
Member

@aramase aramase Jan 16, 2024 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The gcp jobs are configured to use workload identity with the prow cluster for accessing secrets manager used in CI. Moving it to the eks prow cluster would break this job?

cc @tam7t

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/hold

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@aramase @tam7t is that done via the service account?

decorate: true
decoration_config:
timeout: 25m
Expand All @@ -883,9 +917,12 @@ postsubmits:
securityContext:
privileged: true
resources:
limits:
cpu: 4
memory: 6Gi
requests:
cpu: "4"
memory: "4Gi"
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-postsubmit
testgrid-tab-name: secrets-store-csi-driver-e2e-gcp-postsubmit
Expand Down Expand Up @@ -924,12 +961,12 @@ postsubmits:
securityContext:
privileged: true
resources:
requests:
cpu: "4"
memory: "6Gi"
limits:
cpu: "4"
memory: "6Gi"
cpu: 4
memory: 6Gi
requests:
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-postsubmit
testgrid-tab-name: secrets-store-csi-driver-e2e-aws-postsubmit
Expand All @@ -943,6 +980,7 @@ postsubmits:
periodics:
- interval: 24h
name: periodic-secrets-store-csi-driver-image-scan
cluster: eks-prow-build-cluster
decorate: true
decoration_config:
timeout: 10m
Expand All @@ -966,6 +1004,13 @@ periodics:
# docker-in-docker needs privileged mode
securityContext:
privileged: true
resources:
limits:
cpu: 4
memory: 6Gi
requests:
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-periodic
testgrid-tab-name: secrets-store-csi-driver-image-scan
Expand Down Expand Up @@ -1010,6 +1055,7 @@ periodics:
testgrid-num-columns-recent: '30'
- interval: 12h
name: periodic-secrets-store-csi-driver-inplace-upgrade-test-e2e-provider
cluster: eks-prow-build-cluster
decorate: true
decoration_config:
timeout: 30m
Expand All @@ -1036,6 +1082,13 @@ periodics:
# docker-in-docker needs privileged mode
securityContext:
privileged: true
resources:
limits:
cpu: 4
memory: 6Gi
requests:
cpu: 4
memory: 6Gi
annotations:
testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-periodic
testgrid-tab-name: secrets-store-csi-driver-inplace-upgrade-test-e2e-provider
Expand Down