Skip to content

Modify CI jobs to include application credentials installations#339

Open
morenod wants to merge 1 commit intoopenstack-k8s-operators:mainfrom
morenod:watcher_operator_appcred
Open

Modify CI jobs to include application credentials installations#339
morenod wants to merge 1 commit intoopenstack-k8s-operators:mainfrom
morenod:watcher_operator_appcred

Conversation

@morenod
Copy link
Contributor

@morenod morenod commented Feb 9, 2026

This PR adds comprehensive Application Credentials (AC) testing to the CI pipeline while minimizing the number of new jobs required.

Modified CI Jobs
watcher-operator-validation-master: Now tests Application Credentials

Documentation
Added new Continuous Integration section to README.md referencing
detailed CI documentation.

Created ci/README.md with a comprehensive matrix table showing all CI
jobs and their configurations (OpenStack version, OCP version,
notifications, Application Credentials, NFS backend).

Coverage Strategy
This approach ensures we test all critical combinations with minimal job overhead:

Master OpenStack: Tested with AC and notifications enabled
Epoxy OpenStack: Tested without AC and notifications
Different OCP versions: Covered through the epoxy-ocp4-16 job
Kuttl tests: Already include AC rotation testing

Assisted-By: claude
Signed-off-by: morenod <dsanzmor@redhat.com>

@openshift-ci openshift-ci bot requested review from amoralej and cescgina February 9, 2026 12:45
@softwarefactory-project-zuul
Copy link

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/88873985cf374f93b41e587ce8ad517d

openstack-meta-content-provider-master FAILURE in 19m 34s
⚠️ watcher-operator-validation-master SKIPPED Skipped due to failed job openstack-meta-content-provider-master
⚠️ watcher-operator-validation-appcred SKIPPED Skipped due to failed job openstack-meta-content-provider-master
✔️ openstack-meta-content-provider-epoxy SUCCESS in 2h 24m 06s
✔️ watcher-operator-validation-epoxy SUCCESS in 1h 49m 50s
✔️ watcher-operator-validation-epoxy-ocp4-16 SUCCESS in 2h 02m 03s
✔️ noop SUCCESS in 0s
⚠️ watcher-operator-kuttl SKIPPED Skipped due to failed job openstack-meta-content-provider-master

@morenod morenod force-pushed the watcher_operator_appcred branch 3 times, most recently from 872cdf9 to 525eeaf Compare February 10, 2026 11:14
@softwarefactory-project-zuul
Copy link

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/769018796f004f18aa6a60c1f923ce9c

openstack-meta-content-provider-master NODE_FAILURE Node request 100-0008160421 failed in 0s
⚠️ watcher-operator-validation-master SKIPPED Skipped due to failed job openstack-meta-content-provider-master
⚠️ watcher-operator-validation-appcred SKIPPED Skipped due to failed job openstack-meta-content-provider-master
openstack-meta-content-provider-epoxy NODE_FAILURE Node request 100-0008160422 failed in 0s
⚠️ watcher-operator-validation-epoxy SKIPPED Skipped due to failed job openstack-meta-content-provider-epoxy
⚠️ watcher-operator-validation-epoxy-ocp4-16 SKIPPED Skipped due to failed job openstack-meta-content-provider-epoxy
✔️ noop SUCCESS in 0s
⚠️ watcher-operator-kuttl SKIPPED Skipped due to failed job openstack-meta-content-provider-master

@morenod
Copy link
Contributor Author

morenod commented Feb 10, 2026

recheck

@softwarefactory-project-zuul
Copy link

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/e1448f23cef54cdc86d81e8540e05654

openstack-meta-content-provider-master NODE_FAILURE Node request 100-0008160423 failed in 0s
⚠️ watcher-operator-validation-master SKIPPED Skipped due to failed job openstack-meta-content-provider-master
⚠️ watcher-operator-validation-appcred SKIPPED Skipped due to failed job openstack-meta-content-provider-master
openstack-meta-content-provider-epoxy NODE_FAILURE Node request 100-0008160424 failed in 0s
⚠️ watcher-operator-validation-epoxy SKIPPED Skipped due to failed job openstack-meta-content-provider-epoxy
⚠️ watcher-operator-validation-epoxy-ocp4-16 SKIPPED Skipped due to failed job openstack-meta-content-provider-epoxy
✔️ noop SUCCESS in 0s
⚠️ watcher-operator-kuttl SKIPPED Skipped due to failed job openstack-meta-content-provider-master

@morenod
Copy link
Contributor Author

morenod commented Feb 10, 2026

recheck

@softwarefactory-project-zuul
Copy link

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/98f4139b27ec423f8fd013058a2a1eef

openstack-meta-content-provider-master NODE_FAILURE Node request 100-0008160526 failed in 0s
⚠️ watcher-operator-validation-master SKIPPED Skipped due to failed job openstack-meta-content-provider-master
⚠️ watcher-operator-validation-appcred SKIPPED Skipped due to failed job openstack-meta-content-provider-master
openstack-meta-content-provider-epoxy NODE_FAILURE Node request 100-0008160527 failed in 0s
⚠️ watcher-operator-validation-epoxy SKIPPED Skipped due to failed job openstack-meta-content-provider-epoxy
⚠️ watcher-operator-validation-epoxy-ocp4-16 SKIPPED Skipped due to failed job openstack-meta-content-provider-epoxy
✔️ noop SUCCESS in 0s
⚠️ watcher-operator-kuttl SKIPPED Skipped due to failed job openstack-meta-content-provider-master

@morenod
Copy link
Contributor Author

morenod commented Feb 10, 2026

recheck

@softwarefactory-project-zuul
Copy link

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/81e0772711214007a086539de2b310f8

openstack-meta-content-provider-master NODE_FAILURE Node request 100-0008160603 failed in 0s
⚠️ watcher-operator-validation-master SKIPPED Skipped due to failed job openstack-meta-content-provider-master
⚠️ watcher-operator-validation-appcred SKIPPED Skipped due to failed job openstack-meta-content-provider-master
openstack-meta-content-provider-epoxy NODE_FAILURE Node request 100-0008160604 failed in 0s
⚠️ watcher-operator-validation-epoxy SKIPPED Skipped due to failed job openstack-meta-content-provider-epoxy
⚠️ watcher-operator-validation-epoxy-ocp4-16 SKIPPED Skipped due to failed job openstack-meta-content-provider-epoxy
✔️ noop SUCCESS in 0s
⚠️ watcher-operator-kuttl SKIPPED Skipped due to failed job openstack-meta-content-provider-master

@morenod
Copy link
Contributor Author

morenod commented Feb 10, 2026

recheck

@softwarefactory-project-zuul
Copy link

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/85ebe1dec50e42b68b52c081e9535a71

openstack-meta-content-provider-master FAILURE in 17m 02s
⚠️ watcher-operator-validation-master SKIPPED Skipped due to failed job openstack-meta-content-provider-master
⚠️ watcher-operator-validation-appcred SKIPPED Skipped due to failed job openstack-meta-content-provider-master
✔️ openstack-meta-content-provider-epoxy SUCCESS in 2h 11m 04s
watcher-operator-validation-epoxy FAILURE in 25m 58s
✔️ watcher-operator-validation-epoxy-ocp4-16 SUCCESS in 1h 46m 40s
✔️ noop SUCCESS in 0s
⚠️ watcher-operator-kuttl SKIPPED Skipped due to failed job openstack-meta-content-provider-master

@morenod
Copy link
Contributor Author

morenod commented Feb 11, 2026

recheck

@softwarefactory-project-zuul
Copy link

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/fdd6fb6e7fcc4194aa9ab0e3e859b803

✔️ openstack-meta-content-provider-master SUCCESS in 2h 37m 59s
✔️ watcher-operator-validation-master SUCCESS in 1h 58m 43s
✔️ watcher-operator-validation-appcred SUCCESS in 1h 54m 40s
✔️ openstack-meta-content-provider-epoxy SUCCESS in 2h 19m 12s
✔️ watcher-operator-validation-epoxy SUCCESS in 1h 55m 30s
watcher-operator-validation-epoxy-ocp4-16 FAILURE in 25m 19s
✔️ noop SUCCESS in 0s
✔️ watcher-operator-kuttl SUCCESS in 46m 40s

@morenod morenod force-pushed the watcher_operator_appcred branch 2 times, most recently from 4bbf39b to d0572bc Compare February 11, 2026 14:42
@morenod
Copy link
Contributor Author

morenod commented Feb 12, 2026

Master Job appcreds passing:

@morenod morenod force-pushed the watcher_operator_appcred branch 2 times, most recently from 2dc5980 to ca6292e Compare February 12, 2026 12:12
.zuul.yaml Outdated
It will test current-podified control plane EDPM deployment with openstack watcher
master content. It deploys watcher using TLSe, and creates the certificates to use.
Neither Nova nor Cinder notifications are not enabled on this job.
No dedicated RabbitMQ notifications broker is enabled on this job. This job validates
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this is wrong, watcher-operator-validation-epoxy is not validating deployment with AC.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed

.zuul.yaml Outdated
watcher-operator-validation qualification with OCP 4.16
watcher-operator-validation qualification with OCP 4.16.
No dedicated RabbitMQ notifications broker is enabled on this job. This job validates
Watcher deployment with Application Credentials authentication.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also wrong comment.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed

ci/README.md Outdated
| Job Name | OpenStack Version | OCP Version | Notifications | App Credentials | NFS Backend |
|----------|-------------------|-------------|---------------|-----------------|-------------|
| `watcher-operator-validation-master` | master | 4.18 | ✅ Yes | ✅ Yes | ✅ Yes |
| `watcher-operator-validation-epoxy` | antelop (all) - epoxy (watcher) | 4.18 | ❌ No | ❌ No | ❌ No |
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The right OpenStack version name is antelope.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed

ci/README.md Outdated
|----------|-------------------|-------------|---------------|-----------------|-------------|
| `watcher-operator-validation-master` | master | 4.18 | ✅ Yes | ✅ Yes | ✅ Yes |
| `watcher-operator-validation-epoxy` | antelop (all) - epoxy (watcher) | 4.18 | ❌ No | ❌ No | ❌ No |
| `watcher-operator-validation-epoxy-ocp4-16` | antelop (all) - epoxy (watcher) | 4.16 | ❌ No | ❌ No | ❌ No |
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ditto

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed

@morenod morenod force-pushed the watcher_operator_appcred branch 3 times, most recently from fed0dec to 21dfa39 Compare February 18, 2026 11:09
@softwarefactory-project-zuul
Copy link

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/17e5b4191ffc4e888f67c553b27c8783

✔️ openstack-meta-content-provider-master SUCCESS in 1h 23m 26s
watcher-operator-validation-master FAILURE in 32m 47s
✔️ openstack-meta-content-provider-epoxy SUCCESS in 2h 34m 53s
watcher-operator-validation-epoxy FAILURE in 1h 43m 39s
✔️ watcher-operator-validation-epoxy-ocp4-16 SUCCESS in 2h 12m 21s
✔️ noop SUCCESS in 0s
✔️ watcher-operator-kuttl SUCCESS in 46m 10s

@morenod morenod force-pushed the watcher_operator_appcred branch from 21dfa39 to 45f3366 Compare February 18, 2026 14:38
Copy link
Collaborator

@SeanMooney SeanMooney left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this looks good to me too thanks for addign the ci readme

@openshift-ci
Copy link

openshift-ci bot commented Feb 18, 2026

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Modified CI Jobs
watcher-operator-validation-master: Now tests Application Credentials

Documentation
Added new Continuous Integration section to README.md referencing
detailed CI documentation.

Created ci/README.md with a comprehensive matrix table showing all CI
jobs and their configurations (OpenStack version, OCP version,
notifications, Application Credentials, NFS backend).

Coverage Strategy
This approach ensures we test all critical combinations with minimal job overhead:

Master OpenStack: Tested with AC and notifications enabled
Epoxy OpenStack: Tested without AC and notifications
Different OCP versions: Covered through the epoxy-ocp4-16 job
Kuttl tests: Already include AC rotation testing

Assisted-By: claude
Signed-off-by: morenod <dsanzmor@redhat.com>
@morenod morenod force-pushed the watcher_operator_appcred branch from 45f3366 to b81fb4c Compare February 18, 2026 15:59
@openshift-ci openshift-ci bot removed the lgtm label Feb 18, 2026
@openshift-ci
Copy link

openshift-ci bot commented Feb 18, 2026

New changes are detected. LGTM label has been removed.

@morenod
Copy link
Contributor Author

morenod commented Feb 18, 2026

recheck

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

Comments