stackrox: full OCP e2e suite on AWS dual-stack IPv6-primary - #83132
stackrox: full OCP e2e suite on AWS dual-stack IPv6-primary#83132davdhacs wants to merge 8 commits into
Conversation
Run qa, nongroovy, operator, compliance, and scanner-v4 e2e tests on OCP 4.22 with AWS dual-stack IPv6-primary networking. Uses CLOUD_PROVIDER=aws and NETWORK_STACK=dual-ipv6-primary from the automation-flavors ocp-4 image. ROX-10856 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
Important Review skippedReview was skipped due to path filters ⛔ Files ignored due to path filters (1)
CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including ⚙️ Run configurationConfiguration used: Repository YAML (base), Central YAML (inherited) Review profile: CHILL Plan: Pro Plus Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
WalkthroughThe change adds network variable defaults to StackRox cluster creation and defines CI build and test workflows for the ChangesStackRox dual-stack CI
Estimated code review effort: 2 (Simple) | ~10 minutes Possibly related PRs
Suggested labels: 🚥 Pre-merge checks | ✅ 15✅ Passed checks (15 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: davdhacs The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
/pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dual-ipv6-qa-e2e-tests |
|
@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
/pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dual-ipv6-nongroovy-e2e-tests |
|
@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
/pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dual-ipv6-operator-e2e-tests |
|
/pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dual-ipv6-compliance-e2e-tests |
|
/pj-rehearse pull-ci-stackrox-stackrox-master-ocp-aws-dual-ipv6-scanner-v4-install-tests |
|
@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
2 similar comments
|
@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
Use the stackrox branch with the prefetcher metrics LoadBalancer fix so rehearsals can test IPv6-primary without the CLB timeout. Switch back to master before merging. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Point the ocp-aws-dual-ipv6 config to the stackrox branch that has the prefetcher LoadBalancer fix. Branch-specific presubmits file. Switch back to master before merging. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In
`@ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-prefetcher__ocp-aws-dual-ipv6.yaml`:
- Line 73: Change the stackrox-stackrox-fix-ipv6-prefetcher test branch from
fix-ipv6-prefetcher back to master in zz_generated_metadata.branch, then run
make update and verify the generated CI metadata and Prow jobs consistently
reference master.
🪄 Autofix
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository YAML (base), Central YAML (inherited)
Review profile: CHILL
Plan: Pro Plus
Run ID: a8d7c27e-aed7-46ec-affb-f75d775a0c7b
⛔ Files ignored due to path filters (1)
ci-operator/jobs/stackrox/stackrox/stackrox-stackrox-fix-ipv6-prefetcher-presubmits.yamlis excluded by!ci-operator/jobs/**
📒 Files selected for processing (1)
ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-prefetcher__ocp-aws-dual-ipv6.yaml
| TEST_SUITE: ocp-scanner-v4-install-tests | ||
| workflow: stackrox-automation-flavors-ocp-4-e2e | ||
| zz_generated_metadata: | ||
| branch: fix-ipv6-prefetcher |
There was a problem hiding this comment.
🎯 Functional Correctness | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
file="ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-prefetcher__ocp-aws-dual-ipv6.yaml"
echo "== file exists =="
git ls-files --error-unmatch "$file" || true
echo "== relevant lines =="
cat -n "$file" | sed -n '1,140p'
echo "== nearby branch occurrences =="
rg -n "fix-ipv6-prefetcher|zz_generated_metadata|cluster-profile|job|branch:" "$file" || true
echo "== git diff status for file =="
git diff -- "$file" | sed -n '1,220p'Repository: openshift/release
Length of output: 2954
Switch the test branch back to master before merge.
fix-ipv6-prefetcher is a temporary branch for rehearsal. If this value remains, the merged CI configuration will continue testing that branch instead of StackRox master.
After changing zz_generated_metadata.branch, run make update and verify generated CI metadata and Prow jobs are consistent.
Proposed change
- branch: fix-ipv6-prefetcher
+ branch: master📝 Committable suggestion
‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.
| branch: fix-ipv6-prefetcher | |
| branch: master |
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In
`@ci-operator/config/stackrox/stackrox/stackrox-stackrox-fix-ipv6-prefetcher__ocp-aws-dual-ipv6.yaml`
at line 73, Change the stackrox-stackrox-fix-ipv6-prefetcher test branch from
fix-ipv6-prefetcher back to master in zz_generated_metadata.branch, then run
make update and verify the generated CI metadata and Prow jobs consistently
reference master.
Sources: Coding guidelines, Learnings
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
/pj-rehearse pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-aws-dual-ipv6-qa-e2e-tests |
|
@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
/pj-rehearse pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-aws-dual-ipv6-qa-e2e-tests |
|
@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
Add OCP 5.0 dual-stack and IPv6-primary e2e tests pointing to the fix-ipv6-prefetcher branch to validate NLB ingress + prefetcher fixes on both 4.22 and 5.0. Generated with AI assistance.
Jobs must be sorted by name for the generated-config check to pass. Move ocp-5-0-aws-dualstack jobs before ocp-aws-dual-ipv6 jobs. Generated with AI assistance.
|
[REHEARSALNOTIFIER]
A total of 163 jobs have been affected by this change. The above listing is non-exhaustive and limited to 25 jobs. A full list of affected jobs can be found here Interacting with pj-rehearseComment: Once you are satisfied with the results of the rehearsals, comment: |
|
/test ocp-aws-dual-ipv6-qa-e2e-tests |
|
@davdhacs: The specified target(s) for The following commands are available to trigger optional jobs: Use DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
/test ocp-5-0-aws-dualstack-dual-ipv6-primary-qa-e2e-tests |
|
@davdhacs: The specified target(s) for The following commands are available to trigger optional jobs: Use DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
/test ocp-5-0-aws-dualstack-dual-qa-e2e-tests |
|
@davdhacs: The specified target(s) for The following commands are available to trigger optional jobs: Use DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
/pj-rehearse pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-aws-dual-ipv6-qa-e2e-tests pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-5-0-aws-dualstack-dual-ipv6-primary-qa-e2e-tests pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-5-0-aws-dualstack-dual-qa-e2e-tests |
|
@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
/pj-rehearse pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-aws-dual-ipv6-qa-e2e-tests pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-5-0-aws-dualstack-dual-ipv6-primary-qa-e2e-tests pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-5-0-aws-dualstack-dual-qa-e2e-tests |
|
@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
/pj-rehearse pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-aws-dual-ipv6-qa-e2e-tests pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-5-0-aws-dualstack-dual-ipv6-primary-qa-e2e-tests pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-5-0-aws-dualstack-dual-qa-e2e-tests |
|
@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
/pj-rehearse pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-aws-dual-ipv6-qa-e2e-tests pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-5-0-aws-dualstack-dual-ipv6-primary-qa-e2e-tests pull-ci-stackrox-stackrox-fix-ipv6-prefetcher-ocp-5-0-aws-dualstack-dual-qa-e2e-tests |
|
@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
@davdhacs: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
/uncc
Run the full ACS e2e test suite (qa, nongroovy, operator, compliance, scanner-v4) on OCP 4.22 with AWS dual-stack IPv6-primary networking to validate ACS compatibility.
Uses
CLOUD_PROVIDER=awsandNETWORK_STACK=dual-ipv6-primaryfrom the automation-flavorsocp-4image (openshift-4-latest).All jobs are optional, triggered via
/pj-rehearse.ROX-10856
Summary by CodeRabbit
stackroxrepository on OCP 4.22 and OCP 5.0 AWS clusters.CLOUD_PROVIDERandNETWORK_STACKsettings.fix-ipv6-prefetcherbranch to validate NLB ingress and prefetcher fixes. Switch the configuration back tomasterbefore merging.