ci: test OCP 4.12 XPN workaround for Terraform SA race - #83406
Conversation
openshift-ci
Bot
added
the
do-not-merge/work-in-progress
|
Skipping CI for Draft Pull Request. |
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Repository YAML (base), Central YAML (inherited) Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (1)
🚧 Files skipped from review as they are similar to previous changes (1)
WalkthroughThe StackRox OCP 4.12 CI configuration now uses the ChangesStackRox CI configuration
Estimated code review effort: 1 (Trivial) | ~3 minutes Mergeability Score: ⚪ Minimal · up to This PR updates OCP 4.12 CI configuration to exercise the Terraform service-account workaround; no actionable merge-blocking risk is identified at the current head, subject to the repository's do-not-merge rehearsal controls. Possibly related PRs
Suggested labels: 🚥 Pre-merge checks | ✅ 15✅ Passed checks (15 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
openshift-ci
Bot
added
the
approved
|
/test all |
Temporary change to test the automation-flavors XPN workaround that bypasses the terraform-provider-google service account race condition. Changes: - Use openshift-4-latest image tag (contains the XPN workaround) - Set SKIP_TERRAFORM_SA_CREATION=true for all 4.12 jobs This PR is for rehearsal testing only — do not merge.
1ccd624 to
c8d353d
Compare
|
Note GitHub couldn't provide a complete incremental comparison for this pull request, so CodeRabbit is performing a full review instead. This review may take a little longer. |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: davdhacs The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
/test all |
Use double quotes and alphabetical order for SKIP_TERRAFORM_SA_CREATION to match the output of `make ci-operator-config`. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
/test all |
|
[REHEARSALNOTIFIER]
A total of 156 jobs have been affected by this change. The above listing is non-exhaustive and limited to 25 jobs. A full list of affected jobs can be found here Interacting with pj-rehearseComment: Once you are satisfied with the results of the rehearsals, comment: |
|
/pj-rehearse pull-ci-stackrox-stackrox-master-ocp-4-12-qa-e2e-tests pull-ci-stackrox-stackrox-master-ocp-4-12-nongroovy-e2e-tests pull-ci-stackrox-stackrox-master-ocp-4-12-operator-e2e-tests pull-ci-stackrox-stackrox-master-ocp-4-12-compliance-e2e-tests pull-ci-stackrox-stackrox-master-ocp-4-12-scanner-v4-install-tests pull-ci-stackrox-stackrox-master-ocp-4-12-ui-e2e-tests |
|
@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
@davdhacs: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
|
/pj-rehearse pull-ci-stackrox-stackrox-master-ocp-4-12-qa-e2e-tests pull-ci-stackrox-stackrox-master-ocp-4-12-nongroovy-e2e-tests pull-ci-stackrox-stackrox-master-ocp-4-12-operator-e2e-tests pull-ci-stackrox-stackrox-master-ocp-4-12-compliance-e2e-tests pull-ci-stackrox-stackrox-master-ocp-4-12-scanner-v4-install-tests pull-ci-stackrox-stackrox-master-ocp-4-12-ui-e2e-tests pull-ci-stackrox-stackrox-master-ocp-4-22-qa-e2e-tests pull-ci-stackrox-stackrox-master-ocp-4-22-nongroovy-e2e-tests pull-ci-stackrox-stackrox-master-ocp-4-22-operator-e2e-tests |
|
@davdhacs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
1 participant
DO NOT MERGE — rehearsal test only.
Tests the automation-flavors XPN workaround (stackrox/automation-flavors#362) that bypasses the terraform-provider-google service account race condition (OCPBUGS-42014) on OCP 4.12.
Changes:
openshift-4-latestimage tag (contains the XPN workaround + bootstrap SA cache warming)SKIP_TERRAFORM_SA_CREATION=truefor all 4.12 jobsThe workaround:
networkProjectID = projectIDwith TechPreview to trigger the installer's XPN code pathResult from simulate testing: 0 Terraform SA failures, first-attempt success, 31 min provisioning (vs ~30% failure rate and 90-min timeouts previously).
Summary by CodeRabbit
StackRox OpenShift 4.12 CI jobs now use
openshift-4-latestand setSKIP_TERRAFORM_SA_CREATION="true". The OCP 4 e2e workflow passes this setting to test the Terraform Google provider service-account race-condition workaround in XPN environments. This configuration is for rehearsal testing only and must not be merged.