github.com/yrj2011/jx-test-infra@v0.0.0-20190529031832-7a2065ee98eb/config/jobs/kubernetes-security/generated-security-jobs.yaml (about)

     1  # Autogenerated by genjobs.go, do NOT edit!
     2  # see genjobs.go, which you can run with hack/update-config.sh
     3  presubmits:
     4    kubernetes-security/kubernetes:
     5    - agent: kubernetes
     6      always_run: true
     7      cluster: security
     8      context: pull-security-kubernetes-bazel-build
     9      labels:
    10        preset-bazel-scratch-dir: "true"
    11        preset-service-account: "true"
    12      max_concurrency: 0
    13      name: pull-security-kubernetes-bazel-build
    14      rerun_command: /test pull-security-kubernetes-bazel-build
    15      run_after_success:
    16      - agent: kubernetes
    17        always_run: false
    18        cluster: security
    19        context: pull-security-kubernetes-e2e-kubeadm-gce
    20        labels:
    21          preset-k8s-ssh: "true"
    22          preset-service-account: "true"
    23        max_concurrency: 8
    24        name: pull-security-kubernetes-e2e-kubeadm-gce
    25        rerun_command: /test pull-security-kubernetes-e2e-kubeadm-gce
    26        run_if_changed: ^(cmd/kubeadm|build/debs).*$
    27        skip_branches:
    28        - release-1.10
    29        - release-1.9
    30        - release-1.8
    31        skip_report: true
    32        spec:
    33          containers:
    34          - args:
    35            - --ssh=/etc/ssh-security/ssh-security
    36            - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
    37            - --upload=gs://kubernetes-security-prow/pr-logs
    38            - --timeout=75
    39            - --
    40            - --gcs-shared=gs://kubernetes-security-prow/bazel
    41            env:
    42            - name: SKIP_RELEASE_VALIDATION
    43              value: "true"
    44            image: gcr.io/k8s-testimages/e2e-kubeadm:v20180725-3b7f33973
    45            name: ""
    46            resources: {}
    47            volumeMounts:
    48            - mountPath: /etc/ssh-security
    49              name: ssh-security
    50          volumes:
    51          - name: ssh-security
    52            secret:
    53              defaultMode: 256
    54              secretName: ssh-security
    55        trigger: (?m)^/test pull-security-kubernetes-e2e-kubeadm-gce,?(\s+|$)
    56      run_if_changed: ""
    57      skip_branches:
    58      - release-1.10
    59      - release-1.9
    60      - release-1.8
    61      skip_report: false
    62      spec:
    63        containers:
    64        - args:
    65          - --ssh=/etc/ssh-security/ssh-security
    66          - --job=$(JOB_NAME)
    67          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
    68          - --service-account=/etc/service-account/service-account.json
    69          - --upload=gs://kubernetes-security-prow/pr-logs
    70          - --timeout=60
    71          - --
    72          - --build=//... -//vendor/...
    73          - --release=//build/release-tars
    74          - --gcs=gs://kubernetes-security-prow/ci/pull-security-kubernetes-bazel-build
    75          - --gcs-shared=gs://kubernetes-security-prow/bazel
    76          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
    77          name: ""
    78          resources:
    79            requests:
    80              memory: 6Gi
    81          securityContext:
    82            privileged: true
    83          volumeMounts:
    84          - mountPath: /etc/ssh-security
    85            name: ssh-security
    86        volumes:
    87        - name: ssh-security
    88          secret:
    89            defaultMode: 256
    90            secretName: ssh-security
    91      trigger: (?m)^/test( all| pull-security-kubernetes-bazel-build),?(\s+|$)
    92    - agent: kubernetes
    93      always_run: true
    94      branches:
    95      - release-1.10
    96      cluster: security
    97      context: pull-security-kubernetes-bazel-build
    98      labels:
    99        preset-bazel-scratch-dir: "true"
   100        preset-service-account: "true"
   101      max_concurrency: 0
   102      name: pull-security-kubernetes-bazel-build
   103      rerun_command: /test pull-security-kubernetes-bazel-build
   104      run_after_success:
   105      - agent: kubernetes
   106        always_run: false
   107        branches:
   108        - release-1.10
   109        cluster: security
   110        context: pull-security-kubernetes-e2e-kubeadm-gce
   111        labels:
   112          preset-k8s-ssh: "true"
   113          preset-service-account: "true"
   114        max_concurrency: 8
   115        name: pull-security-kubernetes-e2e-kubeadm-gce
   116        rerun_command: /test pull-security-kubernetes-e2e-kubeadm-gce
   117        run_if_changed: ^(cmd/kubeadm|build/debs).*$
   118        skip_report: true
   119        spec:
   120          containers:
   121          - args:
   122            - --ssh=/etc/ssh-security/ssh-security
   123            - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
   124            - --upload=gs://kubernetes-security-prow/pr-logs
   125            - --timeout=75
   126            - --
   127            - --gcs-shared=gs://kubernetes-security-prow/bazel
   128            env:
   129            - name: SKIP_RELEASE_VALIDATION
   130              value: "true"
   131            image: gcr.io/k8s-testimages/e2e-kubeadm:v20180725-3b7f33973
   132            name: ""
   133            resources: {}
   134            volumeMounts:
   135            - mountPath: /etc/ssh-security
   136              name: ssh-security
   137          volumes:
   138          - name: ssh-security
   139            secret:
   140              defaultMode: 256
   141              secretName: ssh-security
   142        trigger: (?m)^/test pull-security-kubernetes-e2e-kubeadm-gce,?(\s+|$)
   143      run_if_changed: ""
   144      skip_report: false
   145      spec:
   146        containers:
   147        - args:
   148          - --ssh=/etc/ssh-security/ssh-security
   149          - --job=$(JOB_NAME)
   150          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
   151          - --service-account=/etc/service-account/service-account.json
   152          - --upload=gs://kubernetes-security-prow/pr-logs
   153          - --timeout=60
   154          - --
   155          - --build=//... -//vendor/...
   156          - --release=//build/release-tars
   157          - --gcs=gs://kubernetes-security-prow/ci/pull-security-kubernetes-bazel-build
   158          - --gcs-shared=gs://kubernetes-security-prow/bazel
   159          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.10
   160          name: ""
   161          resources:
   162            requests:
   163              memory: 6Gi
   164          securityContext:
   165            privileged: true
   166          volumeMounts:
   167          - mountPath: /etc/ssh-security
   168            name: ssh-security
   169        volumes:
   170        - name: ssh-security
   171          secret:
   172            defaultMode: 256
   173            secretName: ssh-security
   174      trigger: (?m)^/test( all| pull-security-kubernetes-bazel-build),?(\s+|$)
   175    - agent: kubernetes
   176      always_run: true
   177      branches:
   178      - release-1.9
   179      cluster: security
   180      context: pull-security-kubernetes-bazel-build
   181      labels:
   182        preset-bazel-scratch-dir: "true"
   183        preset-service-account: "true"
   184      max_concurrency: 0
   185      name: pull-security-kubernetes-bazel-build
   186      rerun_command: /test pull-security-kubernetes-bazel-build
   187      run_after_success:
   188      - agent: kubernetes
   189        always_run: false
   190        branches:
   191        - release-1.9
   192        cluster: security
   193        context: pull-security-kubernetes-e2e-kubeadm-gce
   194        labels:
   195          preset-k8s-ssh: "true"
   196          preset-service-account: "true"
   197        max_concurrency: 8
   198        name: pull-security-kubernetes-e2e-kubeadm-gce
   199        rerun_command: /test pull-security-kubernetes-e2e-kubeadm-gce
   200        run_if_changed: ^(cmd/kubeadm|build/debs).*$
   201        skip_report: true
   202        spec:
   203          containers:
   204          - args:
   205            - --ssh=/etc/ssh-security/ssh-security
   206            - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
   207            - --upload=gs://kubernetes-security-prow/pr-logs
   208            - --timeout=75
   209            - --
   210            - --gcs-shared=gs://kubernetes-security-prow/bazel
   211            env:
   212            - name: SKIP_RELEASE_VALIDATION
   213              value: "true"
   214            image: gcr.io/k8s-testimages/e2e-kubeadm:v20180725-3b7f33973
   215            name: ""
   216            resources: {}
   217            volumeMounts:
   218            - mountPath: /etc/ssh-security
   219              name: ssh-security
   220          volumes:
   221          - name: ssh-security
   222            secret:
   223              defaultMode: 256
   224              secretName: ssh-security
   225        trigger: (?m)^/test pull-security-kubernetes-e2e-kubeadm-gce,?(\s+|$)
   226      run_if_changed: ""
   227      skip_report: false
   228      spec:
   229        containers:
   230        - args:
   231          - --ssh=/etc/ssh-security/ssh-security
   232          - --job=$(JOB_NAME)
   233          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
   234          - --service-account=/etc/service-account/service-account.json
   235          - --upload=gs://kubernetes-security-prow/pr-logs
   236          - --timeout=60
   237          - --
   238          - --build=//... -//vendor/...
   239          - --release=//build/release-tars
   240          - --gcs=gs://kubernetes-security-prow/ci/pull-security-kubernetes-bazel-build
   241          - --gcs-shared=gs://kubernetes-security-prow/bazel
   242          image: gcr.io/k8s-testimages/bazelbuild:v20180201-0184a54dc-0.8.1
   243          name: ""
   244          resources:
   245            requests:
   246              memory: 6Gi
   247          securityContext:
   248            privileged: true
   249          volumeMounts:
   250          - mountPath: /etc/ssh-security
   251            name: ssh-security
   252        volumes:
   253        - name: ssh-security
   254          secret:
   255            defaultMode: 256
   256            secretName: ssh-security
   257      trigger: (?m)^/test( all| pull-security-kubernetes-bazel-build),?(\s+|$)
   258    - agent: kubernetes
   259      always_run: true
   260      branches:
   261      - release-1.8
   262      cluster: security
   263      context: pull-security-kubernetes-bazel-build
   264      labels:
   265        preset-bazel-scratch-dir: "true"
   266        preset-service-account: "true"
   267      max_concurrency: 0
   268      name: pull-security-kubernetes-bazel-build
   269      rerun_command: /test pull-security-kubernetes-bazel-build
   270      run_after_success:
   271      - agent: kubernetes
   272        always_run: false
   273        branches:
   274        - release-1.8
   275        cluster: security
   276        context: pull-security-kubernetes-e2e-kubeadm-gce
   277        labels:
   278          preset-k8s-ssh: "true"
   279          preset-service-account: "true"
   280        max_concurrency: 8
   281        name: pull-security-kubernetes-e2e-kubeadm-gce
   282        rerun_command: /test pull-security-kubernetes-e2e-kubeadm-gce
   283        run_if_changed: ^(cmd/kubeadm|build/debs).*$
   284        skip_report: true
   285        spec:
   286          containers:
   287          - args:
   288            - --ssh=/etc/ssh-security/ssh-security
   289            - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
   290            - --upload=gs://kubernetes-security-prow/pr-logs
   291            - --timeout=75
   292            - --
   293            - --gcs-shared=gs://kubernetes-security-prow/bazel
   294            env:
   295            - name: SKIP_RELEASE_VALIDATION
   296              value: "true"
   297            image: gcr.io/k8s-testimages/e2e-kubeadm:v20180725-3b7f33973
   298            name: ""
   299            resources: {}
   300            volumeMounts:
   301            - mountPath: /etc/ssh-security
   302              name: ssh-security
   303          volumes:
   304          - name: ssh-security
   305            secret:
   306              defaultMode: 256
   307              secretName: ssh-security
   308        trigger: (?m)^/test pull-security-kubernetes-e2e-kubeadm-gce,?(\s+|$)
   309      run_if_changed: ""
   310      skip_report: false
   311      spec:
   312        containers:
   313        - args:
   314          - --ssh=/etc/ssh-security/ssh-security
   315          - --job=$(JOB_NAME)
   316          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
   317          - --service-account=/etc/service-account/service-account.json
   318          - --upload=gs://kubernetes-security-prow/pr-logs
   319          - --timeout=60
   320          - --
   321          - --build=//cmd/... //pkg/... //federation/... //plugin/... //third_party/...
   322            //examples/... //test/... //vendor/k8s.io/...
   323          - --release=//build/release-tars
   324          - --gcs=gs://kubernetes-security-prow/ci/pull-security-kubernetes-bazel-build
   325          - --gcs-shared=gs://kubernetes-security-prow/bazel
   326          image: gcr.io/k8s-testimages/bazelbuild:v20180201-0184a54dc-0.6.1
   327          name: ""
   328          resources:
   329            requests:
   330              memory: 6Gi
   331          securityContext:
   332            privileged: true
   333          volumeMounts:
   334          - mountPath: /etc/ssh-security
   335            name: ssh-security
   336        volumes:
   337        - name: ssh-security
   338          secret:
   339            defaultMode: 256
   340            secretName: ssh-security
   341      trigger: (?m)^/test( all| pull-security-kubernetes-bazel-build),?(\s+|$)
   342    - agent: kubernetes
   343      always_run: true
   344      cluster: security
   345      context: pull-security-kubernetes-bazel-test
   346      labels:
   347        preset-bazel-scratch-dir: "true"
   348        preset-service-account: "true"
   349      max_concurrency: 0
   350      name: pull-security-kubernetes-bazel-test
   351      rerun_command: /test pull-security-kubernetes-bazel-test
   352      run_if_changed: ""
   353      skip_branches:
   354      - release-1.10
   355      - release-1.9
   356      - release-1.8
   357      skip_report: false
   358      spec:
   359        containers:
   360        - args:
   361          - --ssh=/etc/ssh-security/ssh-security
   362          - --job=$(JOB_NAME)
   363          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
   364          - --service-account=/etc/service-account/service-account.json
   365          - --upload=gs://kubernetes-security-prow/pr-logs
   366          - --timeout=60
   367          - --
   368          - --test=//... -//build/... -//vendor/...
   369          - --manual-test=//hack:verify-all
   370          - --test-args=--config=unit
   371          - --test-args=--build_tag_filters=-e2e,-integration
   372          - --test-args=--test_tag_filters=-e2e,-integration
   373          - --test-args=--flaky_test_attempts=3
   374          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
   375          name: ""
   376          resources:
   377            requests:
   378              memory: 6Gi
   379          securityContext:
   380            privileged: true
   381          volumeMounts:
   382          - mountPath: /etc/ssh-security
   383            name: ssh-security
   384        volumes:
   385        - name: ssh-security
   386          secret:
   387            defaultMode: 256
   388            secretName: ssh-security
   389      trigger: (?m)^/test( all| pull-security-kubernetes-bazel-test),?(\s+|$)
   390    - agent: kubernetes
   391      always_run: true
   392      branches:
   393      - release-1.10
   394      cluster: security
   395      context: pull-security-kubernetes-bazel-test
   396      labels:
   397        preset-bazel-scratch-dir: "true"
   398        preset-service-account: "true"
   399      max_concurrency: 0
   400      name: pull-security-kubernetes-bazel-test
   401      rerun_command: /test pull-security-kubernetes-bazel-test
   402      run_if_changed: ""
   403      skip_report: false
   404      spec:
   405        containers:
   406        - args:
   407          - --ssh=/etc/ssh-security/ssh-security
   408          - --job=$(JOB_NAME)
   409          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
   410          - --service-account=/etc/service-account/service-account.json
   411          - --upload=gs://kubernetes-security-prow/pr-logs
   412          - --timeout=60
   413          - --
   414          - --test=//... -//build/... -//vendor/...
   415          - --manual-test=//hack:verify-all
   416          - --test-args=--config=unit
   417          - --test-args=--build_tag_filters=-e2e,-integration
   418          - --test-args=--test_tag_filters=-e2e,-integration
   419          - --test-args=--flaky_test_attempts=3
   420          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.10
   421          name: ""
   422          resources:
   423            requests:
   424              memory: 6Gi
   425          securityContext:
   426            privileged: true
   427          volumeMounts:
   428          - mountPath: /etc/ssh-security
   429            name: ssh-security
   430        volumes:
   431        - name: ssh-security
   432          secret:
   433            defaultMode: 256
   434            secretName: ssh-security
   435      trigger: (?m)^/test( all| pull-security-kubernetes-bazel-test),?(\s+|$)
   436    - agent: kubernetes
   437      always_run: true
   438      branches:
   439      - release-1.9
   440      cluster: security
   441      context: pull-security-kubernetes-bazel-test
   442      labels:
   443        preset-bazel-scratch-dir: "true"
   444        preset-service-account: "true"
   445      max_concurrency: 0
   446      name: pull-security-kubernetes-bazel-test
   447      rerun_command: /test pull-security-kubernetes-bazel-test
   448      run_if_changed: ""
   449      skip_report: false
   450      spec:
   451        containers:
   452        - args:
   453          - --ssh=/etc/ssh-security/ssh-security
   454          - --job=$(JOB_NAME)
   455          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
   456          - --service-account=/etc/service-account/service-account.json
   457          - --upload=gs://kubernetes-security-prow/pr-logs
   458          - --timeout=60
   459          - --
   460          - --test=//... -//build/... -//vendor/...
   461          - --manual-test=//hack:verify-all
   462          - --test-args=--build_tag_filters=-e2e,-integration
   463          - --test-args=--test_tag_filters=-e2e,-integration
   464          - --test-args=--flaky_test_attempts=3
   465          image: gcr.io/k8s-testimages/bazelbuild:v20180201-0184a54dc-0.8.1
   466          name: ""
   467          resources:
   468            requests:
   469              memory: 6Gi
   470          securityContext:
   471            privileged: true
   472          volumeMounts:
   473          - mountPath: /etc/ssh-security
   474            name: ssh-security
   475        volumes:
   476        - name: ssh-security
   477          secret:
   478            defaultMode: 256
   479            secretName: ssh-security
   480      trigger: (?m)^/test( all| pull-security-kubernetes-bazel-test),?(\s+|$)
   481    - agent: kubernetes
   482      always_run: true
   483      branches:
   484      - release-1.8
   485      cluster: security
   486      context: pull-security-kubernetes-bazel-test
   487      labels:
   488        preset-bazel-scratch-dir: "true"
   489        preset-service-account: "true"
   490      max_concurrency: 0
   491      name: pull-security-kubernetes-bazel-test
   492      rerun_command: /test pull-security-kubernetes-bazel-test
   493      run_if_changed: ""
   494      skip_report: false
   495      spec:
   496        containers:
   497        - args:
   498          - --ssh=/etc/ssh-security/ssh-security
   499          - --job=$(JOB_NAME)
   500          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
   501          - --service-account=/etc/service-account/service-account.json
   502          - --upload=gs://kubernetes-security-prow/pr-logs
   503          - --timeout=60
   504          - --
   505          - --test=//cmd/... //pkg/... //federation/... //plugin/... //third_party/... //hack/...
   506            //vendor/k8s.io/...
   507          - --manual-test=//hack:verify-all
   508          - --test-args=--test_tag_filters=-integration
   509          - --test-args=--flaky_test_attempts=3
   510          image: gcr.io/k8s-testimages/bazelbuild:v20180201-0184a54dc-0.6.1
   511          name: ""
   512          resources:
   513            requests:
   514              memory: 6Gi
   515          securityContext:
   516            privileged: true
   517          volumeMounts:
   518          - mountPath: /etc/ssh-security
   519            name: ssh-security
   520        volumes:
   521        - name: ssh-security
   522          secret:
   523            defaultMode: 256
   524            secretName: ssh-security
   525      trigger: (?m)^/test( all| pull-security-kubernetes-bazel-test),?(\s+|$)
   526    - agent: kubernetes
   527      always_run: false
   528      cluster: security
   529      context: pull-security-kubernetes-cross
   530      labels:
   531        preset-service-account: "true"
   532      max_concurrency: 0
   533      name: pull-security-kubernetes-cross
   534      rerun_command: /test pull-security-kubernetes-cross
   535      run_if_changed: ^(build\/|hack\/lib\/)|(Makefile)$
   536      skip_branches:
   537      - release-1.9
   538      - release-1.8
   539      skip_report: false
   540      spec:
   541        containers:
   542        - args:
   543          - --ssh=/etc/ssh-security/ssh-security
   544          - --job=$(JOB_NAME)
   545          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
   546          - --service-account=/etc/service-account/service-account.json
   547          - --upload=gs://kubernetes-security-prow/pr-logs
   548          - --timeout=90
   549          env:
   550          - name: DOCKER_IN_DOCKER_ENABLED
   551            value: "true"
   552          image: gcr.io/k8s-testimages/bootstrap:v20180510-809cd85b5
   553          name: ""
   554          resources:
   555            requests:
   556              cpu: "7"
   557              memory: 41Gi
   558          securityContext:
   559            privileged: true
   560          volumeMounts:
   561          - mountPath: /docker-graph
   562            name: docker-graph
   563          - mountPath: /etc/ssh-security
   564            name: ssh-security
   565        volumes:
   566        - emptyDir: {}
   567          name: docker-graph
   568        - name: ssh-security
   569          secret:
   570            defaultMode: 256
   571            secretName: ssh-security
   572      trigger: (?m)^/test pull-security-kubernetes-cross,?(\s+|$)
   573    - agent: kubernetes
   574      always_run: false
   575      branches:
   576      - release-1.8
   577      - release-1.9
   578      cluster: security
   579      context: pull-security-kubernetes-cross
   580      labels:
   581        preset-service-account: "true"
   582      max_concurrency: 0
   583      name: pull-security-kubernetes-cross
   584      rerun_command: /test pull-security-kubernetes-cross
   585      run_if_changed: ^(build\/|hack\/lib\/)|(Makefile)|(.*_(windows|linux|osx|unsupported)(_test)?\.go)$
   586      skip_report: false
   587      spec:
   588        containers:
   589        - args:
   590          - --ssh=/etc/ssh-security/ssh-security
   591          - --job=$(JOB_NAME)
   592          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
   593          - --service-account=/etc/service-account/service-account.json
   594          - --upload=gs://kubernetes-security-prow/pr-logs
   595          - --timeout=90
   596          env:
   597          - name: DOCKER_IN_DOCKER_ENABLED
   598            value: "true"
   599          image: gcr.io/k8s-testimages/bootstrap:v20180510-809cd85b5
   600          name: ""
   601          resources:
   602            requests:
   603              cpu: "7"
   604              memory: 41Gi
   605          securityContext:
   606            privileged: true
   607          volumeMounts:
   608          - mountPath: /docker-graph
   609            name: docker-graph
   610          - mountPath: /etc/ssh-security
   611            name: ssh-security
   612        volumes:
   613        - emptyDir: {}
   614          name: docker-graph
   615        - name: ssh-security
   616          secret:
   617            defaultMode: 256
   618            secretName: ssh-security
   619      trigger: (?m)^/test pull-security-kubernetes-cross,?(\s+|$)
   620    - agent: kubernetes
   621      always_run: false
   622      cluster: security
   623      context: pull-security-kubernetes-cross-prow
   624      labels:
   625        preset-service-account: "true"
   626      max_concurrency: 0
   627      name: pull-security-kubernetes-cross-prow
   628      rerun_command: /test pull-security-kubernetes-cross-prow
   629      run_if_changed: ""
   630      skip_report: false
   631      spec:
   632        containers:
   633        - args:
   634          - --ssh=/etc/ssh-security/ssh-security
   635          - --job=$(JOB_NAME)
   636          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
   637          - --service-account=/etc/service-account/service-account.json
   638          - --upload=gs://kubernetes-security-prow/pr-logs
   639          - --timeout=90
   640          env:
   641          - name: DOCKER_IN_DOCKER_ENABLED
   642            value: "true"
   643          image: gcr.io/k8s-testimages/bootstrap:latest
   644          imagePullPolicy: Always
   645          name: ""
   646          resources:
   647            requests:
   648              cpu: "7"
   649              memory: 41Gi
   650          securityContext:
   651            privileged: true
   652          volumeMounts:
   653          - mountPath: /docker-graph
   654            name: docker-graph
   655          - mountPath: /etc/ssh-security
   656            name: ssh-security
   657        volumes:
   658        - emptyDir: {}
   659          name: docker-graph
   660        - name: ssh-security
   661          secret:
   662            defaultMode: 256
   663            secretName: ssh-security
   664      trigger: (?m)^/test pull-security-kubernetes-cross-prow,?(\s+|$)
   665    - agent: kubernetes
   666      always_run: false
   667      cluster: security
   668      context: pull-security-kubernetes-dind-e2e
   669      labels:
   670        preset-bazel-scratch-dir: "true"
   671        preset-service-account: "true"
   672      max_concurrency: 0
   673      name: pull-security-kubernetes-dind-e2e
   674      rerun_command: /test pull-security-kubernetes-dind-e2e
   675      run_if_changed: ""
   676      skip_branches:
   677      - release-1.9
   678      - release-1.8
   679      skip_report: false
   680      spec:
   681        containers:
   682        - args:
   683          - --ssh=/etc/ssh-security/ssh-security
   684          - --job=$(JOB_NAME)
   685          - --root=/go/src
   686          - --repo=github.com/kubernetes-security/kubernetes=$(PULL_REFS)
   687          - --repo=k8s.io/test-infra=master
   688          - --service-account=/etc/service-account/service-account.json
   689          - --upload=gs://kubernetes-security-prow/pr-logs
   690          - --scenario=dindind_execute
   691          - --
   692          - kubetest
   693          - --
   694          - --build=dind
   695          - --deployment=dind
   696          - --ginkgo-focus=\[Conformance\]
   697          - --ginkgo-skip=(DNS)|(NodeSelector)
   698          - --up
   699          - --test
   700          - --down
   701          env:
   702          - name: DOCKER_IN_DOCKER_ENABLED
   703            value: "true"
   704          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
   705          name: ""
   706          resources:
   707            requests:
   708              memory: 6Gi
   709          securityContext:
   710            capabilities:
   711              add:
   712              - SYS_ADMIN
   713            privileged: true
   714          volumeMounts:
   715          - mountPath: /lib/modules
   716            name: modules
   717            readOnly: true
   718          - mountPath: /sys/fs/cgroup
   719            name: cgroup
   720          - mountPath: /docker-graph
   721            name: auto-generated-docker-graph-volume-mount
   722          - mountPath: /etc/ssh-security
   723            name: ssh-security
   724        volumes:
   725        - hostPath:
   726            path: /lib/modules
   727            type: Directory
   728          name: modules
   729        - hostPath:
   730            path: /sys/fs/cgroup
   731            type: Directory
   732          name: cgroup
   733        - emptyDir: {}
   734          name: auto-generated-docker-graph-volume-mount
   735        - name: ssh-security
   736          secret:
   737            defaultMode: 256
   738            secretName: ssh-security
   739      trigger: (?m)^/test pull-security-kubernetes-dind-e2e,?(\s+|$)
   740    - agent: kubernetes
   741      always_run: false
   742      branches:
   743      - master
   744      cluster: security
   745      context: pull-security-kubernetes-e2e-containerd-gce
   746      labels:
   747        preset-bazel-scratch-dir: "true"
   748        preset-k8s-ssh: "true"
   749        preset-service-account: "true"
   750      max_concurrency: 0
   751      name: pull-security-kubernetes-e2e-containerd-gce
   752      rerun_command: /test pull-security-kubernetes-e2e-containerd-gce
   753      run_if_changed: ""
   754      skip_report: false
   755      spec:
   756        containers:
   757        - args:
   758          - --ssh=/etc/ssh-security/ssh-security
   759          - --root=/go/src
   760          - --repo=github.com/kubernetes-security/kubernetes=$(PULL_REFS)
   761          - --repo=k8s.io/release
   762          - --repo=github.com/containerd/cri
   763          - --upload=gs://kubernetes-security-prow/pr-logs
   764          - --timeout=90
   765          - --
   766          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-containerd-gce
   767          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
   768          name: ""
   769          resources:
   770            requests:
   771              memory: 6Gi
   772          securityContext:
   773            privileged: true
   774          volumeMounts:
   775          - mountPath: /etc/ssh-security
   776            name: ssh-security
   777        volumes:
   778        - name: ssh-security
   779          secret:
   780            defaultMode: 256
   781            secretName: ssh-security
   782      trigger: (?m)^/test (containerd|pull-security-kubernetes-e2e-containerd-gce),?(\s+|$)
   783    - agent: kubernetes
   784      always_run: true
   785      cluster: security
   786      context: pull-security-kubernetes-e2e-gce
   787      labels:
   788        preset-bazel-scratch-dir: "true"
   789        preset-k8s-ssh: "true"
   790        preset-service-account: "true"
   791      max_concurrency: 0
   792      name: pull-security-kubernetes-e2e-gce
   793      rerun_command: /test pull-security-kubernetes-e2e-gce
   794      run_if_changed: ""
   795      skip_branches:
   796      - release-1.10
   797      - release-1.9
   798      - release-1.8
   799      skip_report: false
   800      spec:
   801        containers:
   802        - args:
   803          - --ssh=/etc/ssh-security/ssh-security
   804          - --root=/go/src
   805          - --repo=github.com/kubernetes-security/kubernetes=$(PULL_REFS)
   806          - --repo=k8s.io/release
   807          - --upload=gs://kubernetes-security-prow/pr-logs
   808          - --timeout=90
   809          - --
   810          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gce
   811          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
   812          name: ""
   813          resources:
   814            requests:
   815              memory: 6Gi
   816          securityContext:
   817            privileged: true
   818          volumeMounts:
   819          - mountPath: /etc/ssh-security
   820            name: ssh-security
   821        volumes:
   822        - name: ssh-security
   823          secret:
   824            defaultMode: 256
   825            secretName: ssh-security
   826      trigger: (?m)^/test (all|pull-security-kubernetes-e2e-gce),?(\s+|$)
   827    - agent: kubernetes
   828      always_run: true
   829      branches:
   830      - release-1.10
   831      cluster: security
   832      context: pull-security-kubernetes-e2e-gce
   833      labels:
   834        preset-bazel-scratch-dir: "true"
   835        preset-k8s-ssh: "true"
   836        preset-service-account: "true"
   837      max_concurrency: 0
   838      name: pull-security-kubernetes-e2e-gce
   839      rerun_command: /test pull-security-kubernetes-e2e-gce
   840      run_if_changed: ""
   841      skip_report: false
   842      spec:
   843        containers:
   844        - args:
   845          - --ssh=/etc/ssh-security/ssh-security
   846          - --root=/go/src
   847          - --repo=github.com/kubernetes-security/kubernetes=$(PULL_REFS)
   848          - --repo=k8s.io/release
   849          - --upload=gs://kubernetes-security-prow/pr-logs
   850          - --timeout=90
   851          - --
   852          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gce
   853          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.10
   854          name: ""
   855          resources:
   856            requests:
   857              memory: 6Gi
   858          securityContext:
   859            privileged: true
   860          volumeMounts:
   861          - mountPath: /etc/ssh-security
   862            name: ssh-security
   863        volumes:
   864        - name: ssh-security
   865          secret:
   866            defaultMode: 256
   867            secretName: ssh-security
   868      trigger: (?m)^/test (all|pull-security-kubernetes-e2e-gce),?(\s+|$)
   869    - agent: kubernetes
   870      always_run: true
   871      branches:
   872      - release-1.9
   873      cluster: security
   874      context: pull-security-kubernetes-e2e-gce
   875      labels:
   876        preset-bazel-scratch-dir: "true"
   877        preset-k8s-ssh: "true"
   878        preset-service-account: "true"
   879      max_concurrency: 0
   880      name: pull-security-kubernetes-e2e-gce
   881      rerun_command: /test pull-security-kubernetes-e2e-gce
   882      run_if_changed: ""
   883      skip_report: false
   884      spec:
   885        containers:
   886        - args:
   887          - --ssh=/etc/ssh-security/ssh-security
   888          - --root=/go/src
   889          - --repo=github.com/kubernetes-security/kubernetes=$(PULL_REFS)
   890          - --repo=k8s.io/release
   891          - --upload=gs://kubernetes-security-prow/pr-logs
   892          - --timeout=90
   893          - --
   894          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gce
   895          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.9
   896          name: ""
   897          resources:
   898            requests:
   899              memory: 6Gi
   900          securityContext:
   901            privileged: true
   902          volumeMounts:
   903          - mountPath: /etc/ssh-security
   904            name: ssh-security
   905        volumes:
   906        - name: ssh-security
   907          secret:
   908            defaultMode: 256
   909            secretName: ssh-security
   910      trigger: (?m)^/test (all|pull-security-kubernetes-e2e-gce),?(\s+|$)
   911    - agent: kubernetes
   912      always_run: true
   913      branches:
   914      - release-1.8
   915      cluster: security
   916      context: pull-security-kubernetes-e2e-gce
   917      labels:
   918        preset-bazel-scratch-dir: "true"
   919        preset-k8s-ssh: "true"
   920        preset-service-account: "true"
   921      max_concurrency: 0
   922      name: pull-security-kubernetes-e2e-gce
   923      rerun_command: /test pull-security-kubernetes-e2e-gce
   924      run_if_changed: ""
   925      skip_report: false
   926      spec:
   927        containers:
   928        - args:
   929          - --ssh=/etc/ssh-security/ssh-security
   930          - --root=/go/src
   931          - --repo=github.com/kubernetes-security/kubernetes=$(PULL_REFS)
   932          - --repo=k8s.io/release
   933          - --upload=gs://kubernetes-security-prow/pr-logs
   934          - --timeout=90
   935          - --
   936          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gce
   937          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.8
   938          name: ""
   939          resources:
   940            requests:
   941              memory: 6Gi
   942          securityContext:
   943            privileged: true
   944          volumeMounts:
   945          - mountPath: /etc/ssh-security
   946            name: ssh-security
   947        volumes:
   948        - name: ssh-security
   949          secret:
   950            defaultMode: 256
   951            secretName: ssh-security
   952      trigger: (?m)^/test (all|pull-security-kubernetes-e2e-gce),?(\s+|$)
   953    - agent: kubernetes
   954      always_run: true
   955      branches:
   956      - master
   957      cluster: security
   958      context: pull-security-kubernetes-e2e-gce-100-performance
   959      labels:
   960        preset-bazel-scratch-dir: "true"
   961        preset-k8s-ssh: "true"
   962        preset-service-account: "true"
   963      max_concurrency: 12
   964      name: pull-security-kubernetes-e2e-gce-100-performance
   965      rerun_command: /test pull-security-kubernetes-e2e-gce-100-performance
   966      run_if_changed: ""
   967      skip_report: false
   968      spec:
   969        containers:
   970        - args:
   971          - --ssh=/etc/ssh-security/ssh-security
   972          - --root=/go/src
   973          - --repo=github.com/kubernetes-security/kubernetes=$(PULL_REFS)
   974          - --repo=k8s.io/release
   975          - --upload=gs://kubernetes-security-prow/pr-logs
   976          - --timeout=120
   977          - --
   978          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gce-100-performance
   979          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
   980          name: ""
   981          resources:
   982            requests:
   983              memory: 6Gi
   984          securityContext:
   985            privileged: true
   986          volumeMounts:
   987          - mountPath: /etc/ssh-security
   988            name: ssh-security
   989        volumes:
   990        - name: ssh-security
   991          secret:
   992            defaultMode: 256
   993            secretName: ssh-security
   994      trigger: (?m)^/test (all|pull-security-kubernetes-e2e-gce-100-performance),?(\s+|$)
   995    - agent: kubernetes
   996      always_run: false
   997      branches:
   998      - master
   999      cluster: security
  1000      context: pull-security-kubernetes-e2e-gce-big-performance
  1001      labels:
  1002        preset-bazel-scratch-dir: "true"
  1003        preset-k8s-ssh: "true"
  1004        preset-service-account: "true"
  1005      max_concurrency: 1
  1006      name: pull-security-kubernetes-e2e-gce-big-performance
  1007      rerun_command: /test pull-security-kubernetes-e2e-gce-big-performance
  1008      run_if_changed: ""
  1009      skip_report: false
  1010      spec:
  1011        containers:
  1012        - args:
  1013          - --ssh=/etc/ssh-security/ssh-security
  1014          - --root=/go/src
  1015          - --repo=github.com/kubernetes-security/kubernetes=$(PULL_REFS)
  1016          - --repo=k8s.io/release
  1017          - --upload=gs://kubernetes-security-prow/pr-logs
  1018          - --timeout=270
  1019          - --
  1020          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gce-big-performance
  1021          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
  1022          name: ""
  1023          resources:
  1024            requests:
  1025              memory: 6Gi
  1026          securityContext:
  1027            privileged: true
  1028          volumeMounts:
  1029          - mountPath: /etc/ssh-security
  1030            name: ssh-security
  1031        volumes:
  1032        - name: ssh-security
  1033          secret:
  1034            defaultMode: 256
  1035            secretName: ssh-security
  1036      trigger: (?m)^/test pull-security-kubernetes-e2e-gce-big-performance,?(\s+|$)
  1037    - agent: kubernetes
  1038      always_run: true
  1039      cluster: security
  1040      context: pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1041      labels:
  1042        preset-bazel-scratch-dir: "true"
  1043        preset-k8s-ssh: "true"
  1044        preset-service-account: "true"
  1045      max_concurrency: 12
  1046      name: pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1047      rerun_command: /test pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1048      run_if_changed: ""
  1049      skip_branches:
  1050      - release-1.10
  1051      - release-1.9
  1052      - release-1.8
  1053      skip_report: false
  1054      spec:
  1055        containers:
  1056        - args:
  1057          - --ssh=/etc/ssh-security/ssh-security
  1058          - --root=/go/src
  1059          - --job=$(JOB_NAME)
  1060          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1061          - --repo=k8s.io/release
  1062          - --service-account=/etc/service-account/service-account.json
  1063          - --upload=gs://kubernetes-security-prow/pr-logs
  1064          - --timeout=90
  1065          - --
  1066          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1067          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
  1068          name: ""
  1069          resources:
  1070            requests:
  1071              memory: 6Gi
  1072          securityContext:
  1073            privileged: true
  1074          volumeMounts:
  1075          - mountPath: /etc/ssh-security
  1076            name: ssh-security
  1077        volumes:
  1078        - name: ssh-security
  1079          secret:
  1080            defaultMode: 256
  1081            secretName: ssh-security
  1082      trigger: (?m)^/test( all| pull-security-kubernetes-e2e-gce-device-plugin-gpu),?(\s+|$)
  1083    - agent: kubernetes
  1084      always_run: true
  1085      branches:
  1086      - release-1.10
  1087      cluster: security
  1088      context: pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1089      labels:
  1090        preset-bazel-scratch-dir: "true"
  1091        preset-k8s-ssh: "true"
  1092        preset-service-account: "true"
  1093      max_concurrency: 12
  1094      name: pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1095      rerun_command: /test pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1096      run_if_changed: ""
  1097      skip_report: false
  1098      spec:
  1099        containers:
  1100        - args:
  1101          - --ssh=/etc/ssh-security/ssh-security
  1102          - --root=/go/src
  1103          - --job=$(JOB_NAME)
  1104          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1105          - --repo=k8s.io/release
  1106          - --service-account=/etc/service-account/service-account.json
  1107          - --upload=gs://kubernetes-security-prow/pr-logs
  1108          - --timeout=90
  1109          - --
  1110          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1111          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.10
  1112          name: ""
  1113          resources:
  1114            requests:
  1115              memory: 6Gi
  1116          securityContext:
  1117            privileged: true
  1118          volumeMounts:
  1119          - mountPath: /etc/ssh-security
  1120            name: ssh-security
  1121        volumes:
  1122        - name: ssh-security
  1123          secret:
  1124            defaultMode: 256
  1125            secretName: ssh-security
  1126      trigger: (?m)^/test( all| pull-security-kubernetes-e2e-gce-device-plugin-gpu),?(\s+|$)
  1127    - agent: kubernetes
  1128      always_run: true
  1129      branches:
  1130      - release-1.9
  1131      cluster: security
  1132      context: pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1133      labels:
  1134        preset-bazel-scratch-dir: "true"
  1135        preset-k8s-ssh: "true"
  1136        preset-service-account: "true"
  1137      max_concurrency: 12
  1138      name: pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1139      rerun_command: /test pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1140      run_if_changed: ""
  1141      skip_report: false
  1142      spec:
  1143        containers:
  1144        - args:
  1145          - --ssh=/etc/ssh-security/ssh-security
  1146          - --root=/go/src
  1147          - --job=$(JOB_NAME)
  1148          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1149          - --repo=k8s.io/release
  1150          - --service-account=/etc/service-account/service-account.json
  1151          - --upload=gs://kubernetes-security-prow/pr-logs
  1152          - --timeout=90
  1153          - --
  1154          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1155          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.9
  1156          name: ""
  1157          resources:
  1158            requests:
  1159              memory: 6Gi
  1160          securityContext:
  1161            privileged: true
  1162          volumeMounts:
  1163          - mountPath: /etc/ssh-security
  1164            name: ssh-security
  1165        volumes:
  1166        - name: ssh-security
  1167          secret:
  1168            defaultMode: 256
  1169            secretName: ssh-security
  1170      trigger: (?m)^/test( all| pull-security-kubernetes-e2e-gce-device-plugin-gpu),?(\s+|$)
  1171    - agent: kubernetes
  1172      always_run: true
  1173      branches:
  1174      - release-1.8
  1175      cluster: security
  1176      context: pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1177      labels:
  1178        preset-bazel-scratch-dir: "true"
  1179        preset-k8s-ssh: "true"
  1180        preset-service-account: "true"
  1181      max_concurrency: 12
  1182      name: pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1183      rerun_command: /test pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1184      run_if_changed: ""
  1185      skip_report: false
  1186      spec:
  1187        containers:
  1188        - args:
  1189          - --ssh=/etc/ssh-security/ssh-security
  1190          - --root=/go/src
  1191          - --job=$(JOB_NAME)
  1192          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1193          - --repo=k8s.io/release
  1194          - --service-account=/etc/service-account/service-account.json
  1195          - --upload=gs://kubernetes-security-prow/pr-logs
  1196          - --timeout=90
  1197          - --
  1198          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gce-device-plugin-gpu
  1199          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.8
  1200          name: ""
  1201          resources:
  1202            requests:
  1203              memory: 6Gi
  1204          securityContext:
  1205            privileged: true
  1206          volumeMounts:
  1207          - mountPath: /etc/ssh-security
  1208            name: ssh-security
  1209        volumes:
  1210        - name: ssh-security
  1211          secret:
  1212            defaultMode: 256
  1213            secretName: ssh-security
  1214      trigger: (?m)^/test( all| pull-security-kubernetes-e2e-gce-device-plugin-gpu),?(\s+|$)
  1215    - agent: kubernetes
  1216      always_run: false
  1217      branches:
  1218      - master
  1219      cluster: security
  1220      context: pull-security-kubernetes-e2e-gce-large-performance
  1221      labels:
  1222        preset-bazel-scratch-dir: "true"
  1223        preset-k8s-ssh: "true"
  1224        preset-service-account: "true"
  1225      max_concurrency: 1
  1226      name: pull-security-kubernetes-e2e-gce-large-performance
  1227      rerun_command: /test pull-security-kubernetes-e2e-gce-large-performance
  1228      run_if_changed: ""
  1229      skip_report: false
  1230      spec:
  1231        containers:
  1232        - args:
  1233          - --ssh=/etc/ssh-security/ssh-security
  1234          - --root=/go/src
  1235          - --repo=github.com/kubernetes-security/kubernetes=$(PULL_REFS)
  1236          - --repo=k8s.io/release
  1237          - --upload=gs://kubernetes-security-prow/pr-logs
  1238          - --timeout=570
  1239          - --
  1240          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gce-large-performance
  1241          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
  1242          name: ""
  1243          resources:
  1244            requests:
  1245              memory: 6Gi
  1246          securityContext:
  1247            privileged: true
  1248          volumeMounts:
  1249          - mountPath: /etc/ssh-security
  1250            name: ssh-security
  1251        volumes:
  1252        - name: ssh-security
  1253          secret:
  1254            defaultMode: 256
  1255            secretName: ssh-security
  1256      trigger: (?m)^/test pull-security-kubernetes-e2e-gce-large-performance,?(\s+|$)
  1257    - agent: kubernetes
  1258      always_run: false
  1259      cluster: security
  1260      context: pull-security-kubernetes-e2e-gke
  1261      labels:
  1262        preset-bazel-scratch-dir: "true"
  1263        preset-k8s-ssh: "true"
  1264        preset-service-account: "true"
  1265      max_concurrency: 0
  1266      name: pull-security-kubernetes-e2e-gke
  1267      rerun_command: /test pull-security-kubernetes-e2e-gke
  1268      run_if_changed: ^(cluster/gce|cluster/addons).*$
  1269      skip_branches:
  1270      - release-1.10
  1271      - release-1.9
  1272      - release-1.8
  1273      skip_report: false
  1274      spec:
  1275        containers:
  1276        - args:
  1277          - --ssh=/etc/ssh-security/ssh-security
  1278          - --root=/go/src
  1279          - --repo=github.com/kubernetes-security/kubernetes=$(PULL_REFS)
  1280          - --repo=k8s.io/release
  1281          - --upload=gs://kubernetes-security-prow/pr-logs
  1282          - --timeout=90
  1283          - --
  1284          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gke
  1285          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
  1286          name: ""
  1287          resources:
  1288            requests:
  1289              memory: 6Gi
  1290          securityContext:
  1291            privileged: true
  1292          volumeMounts:
  1293          - mountPath: /etc/ssh-security
  1294            name: ssh-security
  1295        volumes:
  1296        - name: ssh-security
  1297          secret:
  1298            defaultMode: 256
  1299            secretName: ssh-security
  1300      trigger: (?m)^/test pull-security-kubernetes-e2e-gke,?(\s+|$)
  1301    - agent: kubernetes
  1302      always_run: false
  1303      branches:
  1304      - release-1.10
  1305      cluster: security
  1306      context: pull-security-kubernetes-e2e-gke
  1307      labels:
  1308        preset-bazel-scratch-dir: "true"
  1309        preset-k8s-ssh: "true"
  1310        preset-service-account: "true"
  1311      max_concurrency: 0
  1312      name: pull-security-kubernetes-e2e-gke
  1313      rerun_command: /test pull-security-kubernetes-e2e-gke
  1314      run_if_changed: ^(cluster/gce|cluster/addons).*$
  1315      skip_report: false
  1316      spec:
  1317        containers:
  1318        - args:
  1319          - --ssh=/etc/ssh-security/ssh-security
  1320          - --root=/go/src
  1321          - --repo=github.com/kubernetes-security/kubernetes=$(PULL_REFS)
  1322          - --repo=k8s.io/release
  1323          - --upload=gs://kubernetes-security-prow/pr-logs
  1324          - --timeout=90
  1325          - --
  1326          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gke
  1327          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.10
  1328          name: ""
  1329          resources:
  1330            requests:
  1331              memory: 6Gi
  1332          securityContext:
  1333            privileged: true
  1334          volumeMounts:
  1335          - mountPath: /etc/ssh-security
  1336            name: ssh-security
  1337        volumes:
  1338        - name: ssh-security
  1339          secret:
  1340            defaultMode: 256
  1341            secretName: ssh-security
  1342      trigger: (?m)^/test pull-security-kubernetes-e2e-gke,?(\s+|$)
  1343    - agent: kubernetes
  1344      always_run: false
  1345      branches:
  1346      - release-1.9
  1347      cluster: security
  1348      context: pull-security-kubernetes-e2e-gke
  1349      labels:
  1350        preset-bazel-scratch-dir: "true"
  1351        preset-k8s-ssh: "true"
  1352        preset-service-account: "true"
  1353      max_concurrency: 0
  1354      name: pull-security-kubernetes-e2e-gke
  1355      rerun_command: /test pull-security-kubernetes-e2e-gke
  1356      run_if_changed: ^(cluster/gce|cluster/addons).*$
  1357      skip_report: false
  1358      spec:
  1359        containers:
  1360        - args:
  1361          - --ssh=/etc/ssh-security/ssh-security
  1362          - --root=/go/src
  1363          - --repo=github.com/kubernetes-security/kubernetes=$(PULL_REFS)
  1364          - --repo=k8s.io/release
  1365          - --upload=gs://kubernetes-security-prow/pr-logs
  1366          - --timeout=90
  1367          - --
  1368          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gke
  1369          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.9
  1370          name: ""
  1371          resources:
  1372            requests:
  1373              memory: 6Gi
  1374          securityContext:
  1375            privileged: true
  1376          volumeMounts:
  1377          - mountPath: /etc/ssh-security
  1378            name: ssh-security
  1379        volumes:
  1380        - name: ssh-security
  1381          secret:
  1382            defaultMode: 256
  1383            secretName: ssh-security
  1384      trigger: (?m)^/test pull-security-kubernetes-e2e-gke,?(\s+|$)
  1385    - agent: kubernetes
  1386      always_run: false
  1387      branches:
  1388      - release-1.8
  1389      cluster: security
  1390      context: pull-security-kubernetes-e2e-gke
  1391      labels:
  1392        preset-bazel-scratch-dir: "true"
  1393        preset-k8s-ssh: "true"
  1394        preset-service-account: "true"
  1395      max_concurrency: 0
  1396      name: pull-security-kubernetes-e2e-gke
  1397      rerun_command: /test pull-security-kubernetes-e2e-gke
  1398      run_if_changed: ^(cluster/gce|cluster/addons).*$
  1399      skip_report: false
  1400      spec:
  1401        containers:
  1402        - args:
  1403          - --ssh=/etc/ssh-security/ssh-security
  1404          - --root=/go/src
  1405          - --repo=github.com/kubernetes-security/kubernetes=$(PULL_REFS)
  1406          - --repo=k8s.io/release
  1407          - --upload=gs://kubernetes-security-prow/pr-logs
  1408          - --timeout=90
  1409          - --
  1410          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gke
  1411          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.8
  1412          name: ""
  1413          resources:
  1414            requests:
  1415              memory: 6Gi
  1416          securityContext:
  1417            privileged: true
  1418          volumeMounts:
  1419          - mountPath: /etc/ssh-security
  1420            name: ssh-security
  1421        volumes:
  1422        - name: ssh-security
  1423          secret:
  1424            defaultMode: 256
  1425            secretName: ssh-security
  1426      trigger: (?m)^/test pull-security-kubernetes-e2e-gke,?(\s+|$)
  1427    - agent: kubernetes
  1428      always_run: false
  1429      cluster: security
  1430      context: pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1431      labels:
  1432        preset-bazel-scratch-dir: "true"
  1433        preset-k8s-ssh: "true"
  1434        preset-service-account: "true"
  1435      max_concurrency: 1
  1436      name: pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1437      rerun_command: /test pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1438      run_if_changed: ""
  1439      skip_branches:
  1440      - release-1.10
  1441      - release-1.9
  1442      - release-1.8
  1443      skip_report: false
  1444      spec:
  1445        containers:
  1446        - args:
  1447          - --ssh=/etc/ssh-security/ssh-security
  1448          - --root=/go/src
  1449          - --job=$(JOB_NAME)
  1450          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1451          - --repo=k8s.io/release
  1452          - --service-account=/etc/service-account/service-account.json
  1453          - --upload=gs://kubernetes-security-prow/pr-logs
  1454          - --timeout=90
  1455          - --
  1456          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1457          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
  1458          name: ""
  1459          resources:
  1460            requests:
  1461              memory: 6Gi
  1462          securityContext:
  1463            privileged: true
  1464          volumeMounts:
  1465          - mountPath: /etc/ssh-security
  1466            name: ssh-security
  1467        volumes:
  1468        - name: ssh-security
  1469          secret:
  1470            defaultMode: 256
  1471            secretName: ssh-security
  1472      trigger: (?m)^/test pull-security-kubernetes-e2e-gke-device-plugin-gpu,?(\s+|$)
  1473    - agent: kubernetes
  1474      always_run: false
  1475      branches:
  1476      - release-1.10
  1477      cluster: security
  1478      context: pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1479      labels:
  1480        preset-bazel-scratch-dir: "true"
  1481        preset-k8s-ssh: "true"
  1482        preset-service-account: "true"
  1483      max_concurrency: 1
  1484      name: pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1485      rerun_command: /test pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1486      run_if_changed: ""
  1487      skip_report: false
  1488      spec:
  1489        containers:
  1490        - args:
  1491          - --ssh=/etc/ssh-security/ssh-security
  1492          - --root=/go/src
  1493          - --job=$(JOB_NAME)
  1494          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1495          - --repo=k8s.io/release
  1496          - --service-account=/etc/service-account/service-account.json
  1497          - --upload=gs://kubernetes-security-prow/pr-logs
  1498          - --timeout=90
  1499          - --
  1500          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1501          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.10
  1502          name: ""
  1503          resources:
  1504            requests:
  1505              memory: 6Gi
  1506          securityContext:
  1507            privileged: true
  1508          volumeMounts:
  1509          - mountPath: /etc/ssh-security
  1510            name: ssh-security
  1511        volumes:
  1512        - name: ssh-security
  1513          secret:
  1514            defaultMode: 256
  1515            secretName: ssh-security
  1516      trigger: (?m)^/test pull-security-kubernetes-e2e-gke-device-plugin-gpu,?(\s+|$)
  1517    - agent: kubernetes
  1518      always_run: false
  1519      branches:
  1520      - release-1.9
  1521      cluster: security
  1522      context: pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1523      labels:
  1524        preset-bazel-scratch-dir: "true"
  1525        preset-k8s-ssh: "true"
  1526        preset-service-account: "true"
  1527      max_concurrency: 1
  1528      name: pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1529      rerun_command: /test pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1530      run_if_changed: ""
  1531      skip_report: false
  1532      spec:
  1533        containers:
  1534        - args:
  1535          - --ssh=/etc/ssh-security/ssh-security
  1536          - --root=/go/src
  1537          - --job=$(JOB_NAME)
  1538          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1539          - --repo=k8s.io/release
  1540          - --service-account=/etc/service-account/service-account.json
  1541          - --upload=gs://kubernetes-security-prow/pr-logs
  1542          - --timeout=90
  1543          - --
  1544          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1545          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.9
  1546          name: ""
  1547          resources:
  1548            requests:
  1549              memory: 6Gi
  1550          securityContext:
  1551            privileged: true
  1552          volumeMounts:
  1553          - mountPath: /etc/ssh-security
  1554            name: ssh-security
  1555        volumes:
  1556        - name: ssh-security
  1557          secret:
  1558            defaultMode: 256
  1559            secretName: ssh-security
  1560      trigger: (?m)^/test pull-security-kubernetes-e2e-gke-device-plugin-gpu,?(\s+|$)
  1561    - agent: kubernetes
  1562      always_run: false
  1563      branches:
  1564      - release-1.8
  1565      cluster: security
  1566      context: pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1567      labels:
  1568        preset-bazel-scratch-dir: "true"
  1569        preset-k8s-ssh: "true"
  1570        preset-service-account: "true"
  1571      max_concurrency: 1
  1572      name: pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1573      rerun_command: /test pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1574      run_if_changed: ""
  1575      skip_report: false
  1576      spec:
  1577        containers:
  1578        - args:
  1579          - --ssh=/etc/ssh-security/ssh-security
  1580          - --root=/go/src
  1581          - --job=$(JOB_NAME)
  1582          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1583          - --repo=k8s.io/release
  1584          - --service-account=/etc/service-account/service-account.json
  1585          - --upload=gs://kubernetes-security-prow/pr-logs
  1586          - --timeout=90
  1587          - --
  1588          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-gke-device-plugin-gpu
  1589          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.8
  1590          name: ""
  1591          resources:
  1592            requests:
  1593              memory: 6Gi
  1594          securityContext:
  1595            privileged: true
  1596          volumeMounts:
  1597          - mountPath: /etc/ssh-security
  1598            name: ssh-security
  1599        volumes:
  1600        - name: ssh-security
  1601          secret:
  1602            defaultMode: 256
  1603            secretName: ssh-security
  1604      trigger: (?m)^/test pull-security-kubernetes-e2e-gke-device-plugin-gpu,?(\s+|$)
  1605    - agent: kubernetes
  1606      always_run: true
  1607      cluster: security
  1608      context: pull-security-kubernetes-e2e-kops-aws
  1609      labels:
  1610        preset-aws-credential: "true"
  1611        preset-aws-ssh: "true"
  1612        preset-bazel-scratch-dir: "true"
  1613        preset-service-account: "true"
  1614      max_concurrency: 12
  1615      name: pull-security-kubernetes-e2e-kops-aws
  1616      rerun_command: /test pull-security-kubernetes-e2e-kops-aws
  1617      run_if_changed: ""
  1618      skip_branches:
  1619      - release-1.10
  1620      - release-1.9
  1621      - release-1.8
  1622      skip_report: false
  1623      spec:
  1624        containers:
  1625        - args:
  1626          - --ssh=/etc/ssh-security/ssh-security
  1627          - --root=/go/src
  1628          - --job=$(JOB_NAME)
  1629          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1630          - --repo=k8s.io/release
  1631          - --service-account=/etc/service-account/service-account.json
  1632          - --upload=gs://kubernetes-security-prow/pr-logs
  1633          - --timeout=75
  1634          - --
  1635          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-kops-aws
  1636          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
  1637          name: ""
  1638          resources:
  1639            requests:
  1640              memory: 6Gi
  1641          securityContext:
  1642            privileged: true
  1643          volumeMounts:
  1644          - mountPath: /etc/ssh-security
  1645            name: ssh-security
  1646        volumes:
  1647        - name: ssh-security
  1648          secret:
  1649            defaultMode: 256
  1650            secretName: ssh-security
  1651      trigger: (?m)^/test( all| pull-security-kubernetes-e2e-kops-aws),?(\s+|$)
  1652    - agent: kubernetes
  1653      always_run: true
  1654      branches:
  1655      - release-1.10
  1656      cluster: security
  1657      context: pull-security-kubernetes-e2e-kops-aws
  1658      labels:
  1659        preset-aws-credential: "true"
  1660        preset-aws-ssh: "true"
  1661        preset-bazel-scratch-dir: "true"
  1662        preset-service-account: "true"
  1663      max_concurrency: 12
  1664      name: pull-security-kubernetes-e2e-kops-aws
  1665      rerun_command: /test pull-security-kubernetes-e2e-kops-aws
  1666      run_if_changed: ""
  1667      skip_report: false
  1668      spec:
  1669        containers:
  1670        - args:
  1671          - --ssh=/etc/ssh-security/ssh-security
  1672          - --root=/go/src
  1673          - --job=$(JOB_NAME)
  1674          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1675          - --repo=k8s.io/release
  1676          - --service-account=/etc/service-account/service-account.json
  1677          - --upload=gs://kubernetes-security-prow/pr-logs
  1678          - --timeout=75
  1679          - --
  1680          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-kops-aws
  1681          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.10
  1682          name: ""
  1683          resources:
  1684            requests:
  1685              memory: 6Gi
  1686          securityContext:
  1687            privileged: true
  1688          volumeMounts:
  1689          - mountPath: /etc/ssh-security
  1690            name: ssh-security
  1691        volumes:
  1692        - name: ssh-security
  1693          secret:
  1694            defaultMode: 256
  1695            secretName: ssh-security
  1696      trigger: (?m)^/test( all| pull-security-kubernetes-e2e-kops-aws),?(\s+|$)
  1697    - agent: kubernetes
  1698      always_run: true
  1699      branches:
  1700      - release-1.9
  1701      cluster: security
  1702      context: pull-security-kubernetes-e2e-kops-aws
  1703      labels:
  1704        preset-aws-credential: "true"
  1705        preset-aws-ssh: "true"
  1706        preset-bazel-scratch-dir: "true"
  1707        preset-service-account: "true"
  1708      max_concurrency: 12
  1709      name: pull-security-kubernetes-e2e-kops-aws
  1710      rerun_command: /test pull-security-kubernetes-e2e-kops-aws
  1711      run_if_changed: ""
  1712      skip_report: false
  1713      spec:
  1714        containers:
  1715        - args:
  1716          - --ssh=/etc/ssh-security/ssh-security
  1717          - --root=/go/src
  1718          - --job=$(JOB_NAME)
  1719          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1720          - --repo=k8s.io/release
  1721          - --service-account=/etc/service-account/service-account.json
  1722          - --upload=gs://kubernetes-security-prow/pr-logs
  1723          - --timeout=75
  1724          - --
  1725          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-kops-aws
  1726          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.9
  1727          name: ""
  1728          resources:
  1729            requests:
  1730              memory: 6Gi
  1731          securityContext:
  1732            privileged: true
  1733          volumeMounts:
  1734          - mountPath: /etc/ssh-security
  1735            name: ssh-security
  1736        volumes:
  1737        - name: ssh-security
  1738          secret:
  1739            defaultMode: 256
  1740            secretName: ssh-security
  1741      trigger: (?m)^/test( all| pull-security-kubernetes-e2e-kops-aws),?(\s+|$)
  1742    - agent: kubernetes
  1743      always_run: true
  1744      branches:
  1745      - release-1.8
  1746      cluster: security
  1747      context: pull-security-kubernetes-e2e-kops-aws
  1748      labels:
  1749        preset-aws-credential: "true"
  1750        preset-aws-ssh: "true"
  1751        preset-bazel-scratch-dir: "true"
  1752        preset-service-account: "true"
  1753      max_concurrency: 12
  1754      name: pull-security-kubernetes-e2e-kops-aws
  1755      rerun_command: /test pull-security-kubernetes-e2e-kops-aws
  1756      run_if_changed: ""
  1757      skip_report: false
  1758      spec:
  1759        containers:
  1760        - args:
  1761          - --ssh=/etc/ssh-security/ssh-security
  1762          - --root=/go/src
  1763          - --job=$(JOB_NAME)
  1764          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1765          - --repo=k8s.io/release
  1766          - --service-account=/etc/service-account/service-account.json
  1767          - --upload=gs://kubernetes-security-prow/pr-logs
  1768          - --timeout=75
  1769          - --
  1770          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-e2e-kops-aws
  1771          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.8
  1772          name: ""
  1773          resources:
  1774            requests:
  1775              memory: 6Gi
  1776          securityContext:
  1777            privileged: true
  1778          volumeMounts:
  1779          - mountPath: /etc/ssh-security
  1780            name: ssh-security
  1781        volumes:
  1782        - name: ssh-security
  1783          secret:
  1784            defaultMode: 256
  1785            secretName: ssh-security
  1786      trigger: (?m)^/test( all| pull-security-kubernetes-e2e-kops-aws),?(\s+|$)
  1787    - agent: kubernetes
  1788      always_run: true
  1789      cluster: security
  1790      context: pull-security-kubernetes-integration
  1791      labels:
  1792        preset-service-account: "true"
  1793      max_concurrency: 0
  1794      name: pull-security-kubernetes-integration
  1795      rerun_command: /test pull-security-kubernetes-integration
  1796      run_if_changed: ""
  1797      skip_report: false
  1798      spec:
  1799        containers:
  1800        - args:
  1801          - --ssh=/etc/ssh-security/ssh-security
  1802          - --job=$(JOB_NAME)
  1803          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1804          - --service-account=/etc/service-account/service-account.json
  1805          - --upload=gs://kubernetes-security-prow/pr-logs
  1806          - --timeout=60
  1807          env:
  1808          - name: DOCKER_IN_DOCKER_ENABLED
  1809            value: "true"
  1810          image: gcr.io/k8s-testimages/bootstrap:v20180510-809cd85b5
  1811          name: ""
  1812          resources:
  1813            requests:
  1814              cpu: "4"
  1815          securityContext:
  1816            privileged: true
  1817          volumeMounts:
  1818          - mountPath: /docker-graph
  1819            name: docker-graph
  1820          - mountPath: /etc/ssh-security
  1821            name: ssh-security
  1822        volumes:
  1823        - emptyDir: {}
  1824          name: docker-graph
  1825        - name: ssh-security
  1826          secret:
  1827            defaultMode: 256
  1828            secretName: ssh-security
  1829      trigger: (?m)^/test( all| pull-security-kubernetes-integration),?(\s+|$)
  1830    - agent: kubernetes
  1831      always_run: false
  1832      cluster: security
  1833      context: pull-security-kubernetes-integration-prow
  1834      labels:
  1835        preset-service-account: "true"
  1836      max_concurrency: 0
  1837      name: pull-security-kubernetes-integration-prow
  1838      rerun_command: /test pull-security-kubernetes-integration-prow
  1839      run_if_changed: ""
  1840      skip_report: false
  1841      spec:
  1842        containers:
  1843        - args:
  1844          - --ssh=/etc/ssh-security/ssh-security
  1845          - --job=$(JOB_NAME)
  1846          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1847          - --service-account=/etc/service-account/service-account.json
  1848          - --upload=gs://kubernetes-security-prow/pr-logs
  1849          - --timeout=60
  1850          env:
  1851          - name: DOCKER_IN_DOCKER_ENABLED
  1852            value: "true"
  1853          image: gcr.io/k8s-testimages/bootstrap:latest
  1854          imagePullPolicy: Always
  1855          name: ""
  1856          resources:
  1857            requests:
  1858              cpu: "4"
  1859          securityContext:
  1860            privileged: true
  1861          volumeMounts:
  1862          - mountPath: /docker-graph
  1863            name: docker-graph
  1864          - mountPath: /etc/ssh-security
  1865            name: ssh-security
  1866        volumes:
  1867        - emptyDir: {}
  1868          name: docker-graph
  1869        - name: ssh-security
  1870          secret:
  1871            defaultMode: 256
  1872            secretName: ssh-security
  1873      trigger: (?m)^/test pull-security-kubernetes-integration-prow,?(\s+|$)
  1874    - agent: kubernetes
  1875      always_run: true
  1876      cluster: security
  1877      context: pull-security-kubernetes-kubemark-e2e-gce-big
  1878      labels:
  1879        preset-bazel-scratch-dir: "true"
  1880        preset-k8s-ssh: "true"
  1881        preset-service-account: "true"
  1882      max_concurrency: 12
  1883      name: pull-security-kubernetes-kubemark-e2e-gce-big
  1884      rerun_command: /test pull-security-kubernetes-kubemark-e2e-gce-big
  1885      run_if_changed: ""
  1886      skip_branches:
  1887      - release-1.10
  1888      - release-1.9
  1889      - release-1.8
  1890      skip_report: false
  1891      spec:
  1892        containers:
  1893        - args:
  1894          - --ssh=/etc/ssh-security/ssh-security
  1895          - --root=/go/src
  1896          - --job=$(JOB_NAME)
  1897          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1898          - --repo=k8s.io/release
  1899          - --service-account=/etc/service-account/service-account.json
  1900          - --upload=gs://kubernetes-security-prow/pr-logs
  1901          - --timeout=120
  1902          - --
  1903          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-kubemark-e2e-gce-big
  1904          env:
  1905          - name: DOCKER_IN_DOCKER_ENABLED
  1906            value: "true"
  1907          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
  1908          name: ""
  1909          resources:
  1910            requests:
  1911              memory: 6Gi
  1912          securityContext:
  1913            privileged: true
  1914          volumeMounts:
  1915          - mountPath: /docker-graph
  1916            name: docker-graph
  1917          - mountPath: /etc/ssh-security
  1918            name: ssh-security
  1919        volumes:
  1920        - emptyDir: {}
  1921          name: docker-graph
  1922        - name: ssh-security
  1923          secret:
  1924            defaultMode: 256
  1925            secretName: ssh-security
  1926      trigger: (?m)^/test (all|pull-security-kubernetes-kubemark-e2e-gce-big),?(\s+|$)
  1927    - agent: kubernetes
  1928      always_run: true
  1929      branches:
  1930      - release-1.10
  1931      cluster: security
  1932      context: pull-security-kubernetes-kubemark-e2e-gce-big
  1933      labels:
  1934        preset-bazel-scratch-dir: "true"
  1935        preset-k8s-ssh: "true"
  1936        preset-service-account: "true"
  1937      max_concurrency: 12
  1938      name: pull-security-kubernetes-kubemark-e2e-gce-big
  1939      rerun_command: /test pull-security-kubernetes-kubemark-e2e-gce-big
  1940      run_if_changed: ""
  1941      skip_report: false
  1942      spec:
  1943        containers:
  1944        - args:
  1945          - --ssh=/etc/ssh-security/ssh-security
  1946          - --root=/go/src
  1947          - --job=$(JOB_NAME)
  1948          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  1949          - --repo=k8s.io/release
  1950          - --service-account=/etc/service-account/service-account.json
  1951          - --upload=gs://kubernetes-security-prow/pr-logs
  1952          - --timeout=120
  1953          - --
  1954          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-kubemark-e2e-gce-big
  1955          env:
  1956          - name: DOCKER_IN_DOCKER_ENABLED
  1957            value: "true"
  1958          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.10
  1959          name: ""
  1960          resources:
  1961            requests:
  1962              memory: 6Gi
  1963          securityContext:
  1964            privileged: true
  1965          volumeMounts:
  1966          - mountPath: /docker-graph
  1967            name: docker-graph
  1968          - mountPath: /etc/ssh-security
  1969            name: ssh-security
  1970        volumes:
  1971        - emptyDir: {}
  1972          name: docker-graph
  1973        - name: ssh-security
  1974          secret:
  1975            defaultMode: 256
  1976            secretName: ssh-security
  1977      trigger: (?m)^/test (all|pull-security-kubernetes-kubemark-e2e-gce-big),?(\s+|$)
  1978    - agent: kubernetes
  1979      always_run: true
  1980      branches:
  1981      - release-1.9
  1982      cluster: security
  1983      context: pull-security-kubernetes-kubemark-e2e-gce-big
  1984      labels:
  1985        preset-bazel-scratch-dir: "true"
  1986        preset-k8s-ssh: "true"
  1987        preset-service-account: "true"
  1988      max_concurrency: 12
  1989      name: pull-security-kubernetes-kubemark-e2e-gce-big
  1990      rerun_command: /test pull-security-kubernetes-kubemark-e2e-gce-big
  1991      run_if_changed: ""
  1992      skip_report: false
  1993      spec:
  1994        containers:
  1995        - args:
  1996          - --ssh=/etc/ssh-security/ssh-security
  1997          - --root=/go/src
  1998          - --job=$(JOB_NAME)
  1999          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2000          - --repo=k8s.io/release
  2001          - --service-account=/etc/service-account/service-account.json
  2002          - --upload=gs://kubernetes-security-prow/pr-logs
  2003          - --timeout=120
  2004          - --
  2005          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-kubemark-e2e-gce-big
  2006          env:
  2007          - name: DOCKER_IN_DOCKER_ENABLED
  2008            value: "true"
  2009          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.9
  2010          name: ""
  2011          resources:
  2012            requests:
  2013              memory: 6Gi
  2014          securityContext:
  2015            privileged: true
  2016          volumeMounts:
  2017          - mountPath: /docker-graph
  2018            name: docker-graph
  2019          - mountPath: /etc/ssh-security
  2020            name: ssh-security
  2021        volumes:
  2022        - emptyDir: {}
  2023          name: docker-graph
  2024        - name: ssh-security
  2025          secret:
  2026            defaultMode: 256
  2027            secretName: ssh-security
  2028      trigger: (?m)^/test (all|pull-security-kubernetes-kubemark-e2e-gce-big),?(\s+|$)
  2029    - agent: kubernetes
  2030      always_run: false
  2031      branches:
  2032      - release-1.8
  2033      cluster: security
  2034      context: pull-security-kubernetes-kubemark-e2e-gce-big
  2035      labels:
  2036        preset-bazel-scratch-dir: "true"
  2037        preset-k8s-ssh: "true"
  2038        preset-service-account: "true"
  2039      max_concurrency: 12
  2040      name: pull-security-kubernetes-kubemark-e2e-gce-big
  2041      rerun_command: /test pull-security-kubernetes-kubemark-e2e-gce-big
  2042      run_if_changed: ""
  2043      skip_report: false
  2044      spec:
  2045        containers:
  2046        - args:
  2047          - --ssh=/etc/ssh-security/ssh-security
  2048          - --root=/go/src
  2049          - --job=$(JOB_NAME)
  2050          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2051          - --repo=k8s.io/release
  2052          - --service-account=/etc/service-account/service-account.json
  2053          - --upload=gs://kubernetes-security-prow/pr-logs
  2054          - --timeout=120
  2055          - --
  2056          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-kubemark-e2e-gce-big
  2057          env:
  2058          - name: DOCKER_IN_DOCKER_ENABLED
  2059            value: "true"
  2060          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.8
  2061          name: ""
  2062          resources:
  2063            requests:
  2064              memory: 6Gi
  2065          securityContext:
  2066            privileged: true
  2067          volumeMounts:
  2068          - mountPath: /docker-graph
  2069            name: docker-graph
  2070          - mountPath: /etc/ssh-security
  2071            name: ssh-security
  2072        volumes:
  2073        - emptyDir: {}
  2074          name: docker-graph
  2075        - name: ssh-security
  2076          secret:
  2077            defaultMode: 256
  2078            secretName: ssh-security
  2079      trigger: (?m)^/test pull-security-kubernetes-kubemark-e2e-gce-big,?(\s+|$)
  2080    - agent: kubernetes
  2081      always_run: false
  2082      branches:
  2083      - master
  2084      cluster: security
  2085      context: pull-security-kubernetes-kubemark-e2e-gce-scale
  2086      labels:
  2087        preset-bazel-scratch-dir: "true"
  2088        preset-k8s-ssh: "true"
  2089        preset-service-account: "true"
  2090      max_concurrency: 1
  2091      name: pull-security-kubernetes-kubemark-e2e-gce-scale
  2092      rerun_command: /test pull-security-kubernetes-kubemark-e2e-gce-scale
  2093      run_if_changed: ""
  2094      skip_report: false
  2095      spec:
  2096        containers:
  2097        - args:
  2098          - --ssh=/etc/ssh-security/ssh-security
  2099          - --root=/go/src
  2100          - --job=$(JOB_NAME)
  2101          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2102          - --repo=k8s.io/release
  2103          - --service-account=/etc/service-account/service-account.json
  2104          - --upload=gs://kubernetes-security-prow/pr-logs
  2105          - --timeout=1220
  2106          - --
  2107          - --stage=gs://kubernetes-security-prow/ci/pull-security-kubernetes-kubemark-e2e-gce-scale
  2108          env:
  2109          - name: DOCKER_IN_DOCKER_ENABLED
  2110            value: "true"
  2111          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
  2112          name: ""
  2113          resources:
  2114            requests:
  2115              memory: 6Gi
  2116          securityContext:
  2117            privileged: true
  2118          volumeMounts:
  2119          - mountPath: /docker-graph
  2120            name: docker-graph
  2121          - mountPath: /etc/ssh-security
  2122            name: ssh-security
  2123        volumes:
  2124        - emptyDir: {}
  2125          name: docker-graph
  2126        - name: ssh-security
  2127          secret:
  2128            defaultMode: 256
  2129            secretName: ssh-security
  2130      trigger: (?m)^/test pull-security-kubernetes-kubemark-e2e-gce-scale,?(\s+|$)
  2131    - agent: kubernetes
  2132      always_run: false
  2133      branches:
  2134      - master
  2135      cluster: security
  2136      context: pull-security-kubernetes-local-e2e
  2137      labels:
  2138        preset-k8s-ssh: "true"
  2139        preset-service-account: "true"
  2140      max_concurrency: 8
  2141      name: pull-security-kubernetes-local-e2e
  2142      rerun_command: /test pull-security-kubernetes-local-e2e
  2143      run_if_changed: (hyperkube|local-up-cluster)
  2144      skip_report: false
  2145      spec:
  2146        containers:
  2147        - args:
  2148          - --ssh=/etc/ssh-security/ssh-security
  2149          - --root=/go/src
  2150          - --job=$(JOB_NAME)
  2151          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2152          - --service-account=/etc/service-account/service-account.json
  2153          - --upload=gs://kubernetes-security-prow/pr-logs
  2154          - --timeout=140
  2155          env:
  2156          - name: DOCKER_IN_DOCKER_ENABLED
  2157            value: "true"
  2158          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
  2159          name: ""
  2160          resources: {}
  2161          securityContext:
  2162            privileged: true
  2163          volumeMounts:
  2164          - mountPath: /docker-graph
  2165            name: docker-graph
  2166          - mountPath: /etc/ssh-security
  2167            name: ssh-security
  2168        volumes:
  2169        - emptyDir: {}
  2170          name: docker-graph
  2171        - name: ssh-security
  2172          secret:
  2173            defaultMode: 256
  2174            secretName: ssh-security
  2175      trigger: (?m)^/test pull-security-kubernetes-local-e2e,?(\s+|$)
  2176    - agent: kubernetes
  2177      always_run: false
  2178      branches:
  2179      - master
  2180      cluster: security
  2181      context: pull-security-kubernetes-local-e2e-containerized
  2182      labels:
  2183        preset-k8s-ssh: "true"
  2184        preset-service-account: "true"
  2185      max_concurrency: 0
  2186      name: pull-security-kubernetes-local-e2e-containerized
  2187      rerun_command: /test pull-security-kubernetes-local-e2e-containerized
  2188      run_if_changed: ^(pkg|cmd)/kubelet.*$
  2189      skip_report: false
  2190      spec:
  2191        containers:
  2192        - args:
  2193          - --ssh=/etc/ssh-security/ssh-security
  2194          - --root=/go/src
  2195          - --job=$(JOB_NAME)
  2196          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2197          - --service-account=/etc/service-account/service-account.json
  2198          - --upload=gs://kubernetes-security-prow/pr-logs
  2199          - --timeout=140
  2200          env:
  2201          - name: DOCKERIZE_KUBELET
  2202            value: "true"
  2203          - name: DOCKER_IN_DOCKER_ENABLED
  2204            value: "true"
  2205          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
  2206          name: ""
  2207          resources: {}
  2208          securityContext:
  2209            privileged: true
  2210          volumeMounts:
  2211          - mountPath: /docker-graph
  2212            name: docker-graph
  2213          - mountPath: /etc/ssh-security
  2214            name: ssh-security
  2215        volumes:
  2216        - emptyDir: {}
  2217          name: docker-graph
  2218        - name: ssh-security
  2219          secret:
  2220            defaultMode: 256
  2221            secretName: ssh-security
  2222      trigger: (?m)^/test pull-security-kubernetes-local-e2e-containerized,?(\s+|$)
  2223    - agent: kubernetes
  2224      always_run: true
  2225      cluster: security
  2226      context: pull-security-kubernetes-node-e2e
  2227      labels:
  2228        preset-k8s-ssh: "true"
  2229        preset-service-account: "true"
  2230      max_concurrency: 12
  2231      name: pull-security-kubernetes-node-e2e
  2232      rerun_command: /test pull-security-kubernetes-node-e2e
  2233      run_if_changed: ""
  2234      skip_branches:
  2235      - release-1.10
  2236      - release-1.9
  2237      - release-1.8
  2238      skip_report: false
  2239      spec:
  2240        containers:
  2241        - args:
  2242          - --ssh=/etc/ssh-security/ssh-security
  2243          - --root=/go/src
  2244          - --job=$(JOB_NAME)
  2245          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2246          - --service-account=/etc/service-account/service-account.json
  2247          - --upload=gs://kubernetes-security-prow/pr-logs
  2248          - --timeout=90
  2249          - --
  2250          - --node-args=--image-config-file=/workspace/test-infra/jobs/e2e_node/image-config.yaml
  2251          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
  2252          name: ""
  2253          resources:
  2254            requests:
  2255              memory: 6Gi
  2256          volumeMounts:
  2257          - mountPath: /etc/ssh-security
  2258            name: ssh-security
  2259        volumes:
  2260        - name: ssh-security
  2261          secret:
  2262            defaultMode: 256
  2263            secretName: ssh-security
  2264      trigger: (?m)^/test( all| pull-security-kubernetes-node-e2e),?(\s+|$)
  2265    - agent: kubernetes
  2266      always_run: true
  2267      branches:
  2268      - release-1.10
  2269      cluster: security
  2270      context: pull-security-kubernetes-node-e2e
  2271      labels:
  2272        preset-k8s-ssh: "true"
  2273        preset-service-account: "true"
  2274      max_concurrency: 12
  2275      name: pull-security-kubernetes-node-e2e
  2276      rerun_command: /test pull-security-kubernetes-node-e2e
  2277      run_if_changed: ""
  2278      skip_report: false
  2279      spec:
  2280        containers:
  2281        - args:
  2282          - --ssh=/etc/ssh-security/ssh-security
  2283          - --root=/go/src
  2284          - --job=$(JOB_NAME)
  2285          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2286          - --service-account=/etc/service-account/service-account.json
  2287          - --upload=gs://kubernetes-security-prow/pr-logs
  2288          - --timeout=90
  2289          - --
  2290          - --node-args=--image-config-file=/workspace/test-infra/jobs/e2e_node/image-config.yaml
  2291          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.10
  2292          name: ""
  2293          resources:
  2294            requests:
  2295              memory: 6Gi
  2296          volumeMounts:
  2297          - mountPath: /etc/ssh-security
  2298            name: ssh-security
  2299        volumes:
  2300        - name: ssh-security
  2301          secret:
  2302            defaultMode: 256
  2303            secretName: ssh-security
  2304      trigger: (?m)^/test( all| pull-security-kubernetes-node-e2e),?(\s+|$)
  2305    - agent: kubernetes
  2306      always_run: true
  2307      branches:
  2308      - release-1.9
  2309      cluster: security
  2310      context: pull-security-kubernetes-node-e2e
  2311      labels:
  2312        preset-k8s-ssh: "true"
  2313        preset-service-account: "true"
  2314      max_concurrency: 12
  2315      name: pull-security-kubernetes-node-e2e
  2316      rerun_command: /test pull-security-kubernetes-node-e2e
  2317      run_if_changed: ""
  2318      skip_report: false
  2319      spec:
  2320        containers:
  2321        - args:
  2322          - --ssh=/etc/ssh-security/ssh-security
  2323          - --root=/go/src
  2324          - --job=$(JOB_NAME)
  2325          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2326          - --service-account=/etc/service-account/service-account.json
  2327          - --upload=gs://kubernetes-security-prow/pr-logs
  2328          - --timeout=90
  2329          - --
  2330          - --node-args=--image-config-file=/workspace/test-infra/jobs/e2e_node/image-config.yaml
  2331          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.9
  2332          name: ""
  2333          resources:
  2334            requests:
  2335              memory: 6Gi
  2336          volumeMounts:
  2337          - mountPath: /etc/ssh-security
  2338            name: ssh-security
  2339        volumes:
  2340        - name: ssh-security
  2341          secret:
  2342            defaultMode: 256
  2343            secretName: ssh-security
  2344      trigger: (?m)^/test( all| pull-security-kubernetes-node-e2e),?(\s+|$)
  2345    - agent: kubernetes
  2346      always_run: true
  2347      branches:
  2348      - release-1.8
  2349      cluster: security
  2350      context: pull-security-kubernetes-node-e2e
  2351      labels:
  2352        preset-k8s-ssh: "true"
  2353        preset-service-account: "true"
  2354      max_concurrency: 12
  2355      name: pull-security-kubernetes-node-e2e
  2356      rerun_command: /test pull-security-kubernetes-node-e2e
  2357      run_if_changed: ""
  2358      skip_report: false
  2359      spec:
  2360        containers:
  2361        - args:
  2362          - --ssh=/etc/ssh-security/ssh-security
  2363          - --root=/go/src
  2364          - --job=$(JOB_NAME)
  2365          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2366          - --service-account=/etc/service-account/service-account.json
  2367          - --upload=gs://kubernetes-security-prow/pr-logs
  2368          - --timeout=90
  2369          - --
  2370          - --node-args=--image-config-file=/workspace/test-infra/jobs/e2e_node/image-config.yaml
  2371          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-1.8
  2372          name: ""
  2373          resources:
  2374            requests:
  2375              memory: 6Gi
  2376          volumeMounts:
  2377          - mountPath: /etc/ssh-security
  2378            name: ssh-security
  2379        volumes:
  2380        - name: ssh-security
  2381          secret:
  2382            defaultMode: 256
  2383            secretName: ssh-security
  2384      trigger: (?m)^/test( all| pull-security-kubernetes-node-e2e),?(\s+|$)
  2385    - agent: kubernetes
  2386      always_run: false
  2387      branches:
  2388      - master
  2389      cluster: security
  2390      context: pull-security-kubernetes-node-e2e-containerd
  2391      labels:
  2392        preset-k8s-ssh: "true"
  2393        preset-service-account: "true"
  2394      max_concurrency: 12
  2395      name: pull-security-kubernetes-node-e2e-containerd
  2396      rerun_command: /test pull-security-kubernetes-node-e2e-containerd
  2397      run_if_changed: ""
  2398      skip_report: false
  2399      spec:
  2400        containers:
  2401        - args:
  2402          - --ssh=/etc/ssh-security/ssh-security
  2403          - --root=/go/src
  2404          - --job=$(JOB_NAME)
  2405          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2406          - --repo=github.com/containerd/cri
  2407          - --service-account=/etc/service-account/service-account.json
  2408          - --upload=gs://kubernetes-security-prow/pr-logs
  2409          - --timeout=90
  2410          - --
  2411          - --node-args=--image-config-file=/workspace/test-infra/jobs/e2e_node/containerd/cri-master/image-config.yaml
  2412          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
  2413          name: ""
  2414          resources:
  2415            requests:
  2416              memory: 6Gi
  2417          volumeMounts:
  2418          - mountPath: /etc/ssh-security
  2419            name: ssh-security
  2420        volumes:
  2421        - name: ssh-security
  2422          secret:
  2423            defaultMode: 256
  2424            secretName: ssh-security
  2425      trigger: (?m)^/test (containerd|pull-security-kubernetes-node-e2e-containerd),?(\s+|$)
  2426    - agent: kubernetes
  2427      always_run: true
  2428      cluster: security
  2429      context: pull-security-kubernetes-typecheck
  2430      labels:
  2431        preset-service-account: "true"
  2432      max_concurrency: 0
  2433      name: pull-security-kubernetes-typecheck
  2434      rerun_command: /test pull-security-kubernetes-typecheck
  2435      run_if_changed: ""
  2436      skip_branches:
  2437      - release-1.9
  2438      - release-1.8
  2439      skip_report: false
  2440      spec:
  2441        containers:
  2442        - args:
  2443          - --ssh=/etc/ssh-security/ssh-security
  2444          - --job=$(JOB_NAME)
  2445          - --root=/go/src
  2446          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2447          - --service-account=/etc/service-account/service-account.json
  2448          - --upload=gs://kubernetes-security-prow/pr-logs
  2449          - --timeout=75
  2450          image: gcr.io/k8s-testimages/kubekins-e2e:v20180725-795cceb4c-master
  2451          name: ""
  2452          resources: {}
  2453          volumeMounts:
  2454          - mountPath: /etc/ssh-security
  2455            name: ssh-security
  2456        volumes:
  2457        - name: ssh-security
  2458          secret:
  2459            defaultMode: 256
  2460            secretName: ssh-security
  2461      trigger: (?m)^/test( all| pull-security-kubernetes-typecheck),?(\s+|$)
  2462    - agent: kubernetes
  2463      always_run: true
  2464      cluster: security
  2465      context: pull-security-kubernetes-verify
  2466      labels:
  2467        preset-service-account: "true"
  2468      max_concurrency: 0
  2469      name: pull-security-kubernetes-verify
  2470      rerun_command: /test pull-security-kubernetes-verify
  2471      run_if_changed: ""
  2472      skip_report: false
  2473      spec:
  2474        containers:
  2475        - args:
  2476          - --ssh=/etc/ssh-security/ssh-security
  2477          - --job=$(JOB_NAME)
  2478          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2479          - --service-account=/etc/service-account/service-account.json
  2480          - --upload=gs://kubernetes-security-prow/pr-logs
  2481          - --timeout=75
  2482          env:
  2483          - name: DOCKER_IN_DOCKER_ENABLED
  2484            value: "true"
  2485          image: gcr.io/k8s-testimages/bootstrap:v20180510-809cd85b5
  2486          name: ""
  2487          resources:
  2488            requests:
  2489              cpu: "4"
  2490          securityContext:
  2491            privileged: true
  2492          volumeMounts:
  2493          - mountPath: /docker-graph
  2494            name: docker-graph
  2495          - mountPath: /etc/ssh-security
  2496            name: ssh-security
  2497        volumes:
  2498        - emptyDir: {}
  2499          name: docker-graph
  2500        - name: ssh-security
  2501          secret:
  2502            defaultMode: 256
  2503            secretName: ssh-security
  2504      trigger: (?m)^/test( all| pull-security-kubernetes-verify),?(\s+|$)
  2505    - agent: kubernetes
  2506      always_run: false
  2507      cluster: security
  2508      context: pull-security-kubernetes-verify-prow
  2509      labels:
  2510        preset-service-account: "true"
  2511      max_concurrency: 0
  2512      name: pull-security-kubernetes-verify-prow
  2513      rerun_command: /test pull-security-kubernetes-verify-prow
  2514      run_if_changed: ""
  2515      skip_report: false
  2516      spec:
  2517        containers:
  2518        - args:
  2519          - --ssh=/etc/ssh-security/ssh-security
  2520          - --job=$(JOB_NAME)
  2521          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2522          - --service-account=/etc/service-account/service-account.json
  2523          - --upload=gs://kubernetes-security-prow/pr-logs
  2524          - --timeout=75
  2525          env:
  2526          - name: DOCKER_IN_DOCKER_ENABLED
  2527            value: "true"
  2528          image: gcr.io/k8s-testimages/bootstrap:latest
  2529          imagePullPolicy: Always
  2530          name: ""
  2531          resources:
  2532            requests:
  2533              cpu: "4"
  2534          securityContext:
  2535            privileged: true
  2536          volumeMounts:
  2537          - mountPath: /docker-graph
  2538            name: docker-graph
  2539          - mountPath: /etc/ssh-security
  2540            name: ssh-security
  2541        volumes:
  2542        - emptyDir: {}
  2543          name: docker-graph
  2544        - name: ssh-security
  2545          secret:
  2546            defaultMode: 256
  2547            secretName: ssh-security
  2548      trigger: (?m)^/test pull-security-kubernetes-verify-prow,?(\s+|$)
  2549    - agent: kubernetes
  2550      always_run: false
  2551      cluster: security
  2552      context: pull-security-kubernetes-bazel-build-canary
  2553      labels:
  2554        preset-bazel-scratch-dir: "true"
  2555        preset-service-account: "true"
  2556      max_concurrency: 0
  2557      name: pull-security-kubernetes-bazel-build-canary
  2558      rerun_command: /test pull-security-kubernetes-bazel-build-canary
  2559      run_if_changed: ""
  2560      skip_report: false
  2561      spec:
  2562        containers:
  2563        - args:
  2564          - --ssh=/etc/ssh-security/ssh-security
  2565          - --job=$(JOB_NAME)
  2566          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2567          - --service-account=/etc/service-account/service-account.json
  2568          - --upload=gs://kubernetes-security-prow/pr-logs
  2569          - --scenario=kubernetes_bazel
  2570          - --timeout=60
  2571          - --
  2572          - --build=//... -//vendor/...
  2573          - --release=//build/release-tars
  2574          - --gcs=gs://kubernetes-security-prow/ci/pull-security-kubernetes-bazel-build-canary
  2575          - --gcs-shared=gs://kubernetes-security-prow/bazel
  2576          image: gcr.io/k8s-testimages/kubekins-e2e@sha256:02fe7ded2e8e477e52f3c82eab5fb6632ad7cd09612e2d7c5944d143974f3685
  2577          imagePullPolicy: Always
  2578          name: ""
  2579          resources:
  2580            requests:
  2581              memory: 6Gi
  2582          securityContext:
  2583            privileged: true
  2584          volumeMounts:
  2585          - mountPath: /etc/ssh-security
  2586            name: ssh-security
  2587        volumes:
  2588        - name: ssh-security
  2589          secret:
  2590            defaultMode: 256
  2591            secretName: ssh-security
  2592      trigger: (?m)^/test pull-security-kubernetes-bazel-build-canary,?(\s+|$)
  2593    - agent: kubernetes
  2594      always_run: false
  2595      cluster: security
  2596      context: pull-security-kubernetes-bazel-test-canary
  2597      labels:
  2598        preset-bazel-scratch-dir: "true"
  2599        preset-service-account: "true"
  2600      max_concurrency: 0
  2601      name: pull-security-kubernetes-bazel-test-canary
  2602      rerun_command: /test pull-security-kubernetes-bazel-test-canary
  2603      run_if_changed: ""
  2604      skip_report: false
  2605      spec:
  2606        containers:
  2607        - args:
  2608          - --ssh=/etc/ssh-security/ssh-security
  2609          - --job=$(JOB_NAME)
  2610          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2611          - --service-account=/etc/service-account/service-account.json
  2612          - --upload=gs://kubernetes-security-prow/pr-logs
  2613          - --scenario=kubernetes_execute_bazel
  2614          - --timeout=60
  2615          - --
  2616          - make
  2617          - bazel-test
  2618          image: gcr.io/k8s-testimages/kubekins-e2e@sha256:02fe7ded2e8e477e52f3c82eab5fb6632ad7cd09612e2d7c5944d143974f3685
  2619          imagePullPolicy: Always
  2620          name: ""
  2621          resources:
  2622            requests:
  2623              memory: 6Gi
  2624          securityContext:
  2625            privileged: true
  2626          volumeMounts:
  2627          - mountPath: /etc/ssh-security
  2628            name: ssh-security
  2629        volumes:
  2630        - name: ssh-security
  2631          secret:
  2632            defaultMode: 256
  2633            secretName: ssh-security
  2634      trigger: (?m)^/test pull-security-kubernetes-bazel-test-canary,?(\s+|$)
  2635    - agent: kubernetes
  2636      always_run: false
  2637      cluster: security
  2638      context: pull-security-kubernetes-bazel-test-integration-canary
  2639      labels:
  2640        preset-bazel-scratch-dir: "true"
  2641        preset-service-account: "true"
  2642      max_concurrency: 0
  2643      name: pull-security-kubernetes-bazel-test-integration-canary
  2644      rerun_command: /test pull-security-kubernetes-bazel-test-integration-canary
  2645      run_if_changed: ""
  2646      skip_report: false
  2647      spec:
  2648        containers:
  2649        - args:
  2650          - --ssh=/etc/ssh-security/ssh-security
  2651          - --job=$(JOB_NAME)
  2652          - --repo=github.com/kubernetes-security/$(REPO_NAME)=$(PULL_REFS)
  2653          - --service-account=/etc/service-account/service-account.json
  2654          - --upload=gs://kubernetes-security-prow/pr-logs
  2655          - --scenario=kubernetes_execute_bazel
  2656          - --
  2657          - --test=//test/integration/...
  2658          - --test-args=--config=integration
  2659          - --timeout=60
  2660          image: gcr.io/k8s-testimages/kubekins-e2e:latest-experimental
  2661          imagePullPolicy: Always
  2662          name: ""
  2663          resources:
  2664            requests:
  2665              memory: 6Gi
  2666          securityContext:
  2667            privileged: true
  2668          volumeMounts:
  2669          - mountPath: /etc/ssh-security
  2670            name: ssh-security
  2671        volumes:
  2672        - name: ssh-security
  2673          secret:
  2674            defaultMode: 256
  2675            secretName: ssh-security
  2676      trigger: (?m)^/test pull-security-kubernetes-bazel-test-integration-canary,?(\s+|$)