k8s.io/test-infra@v0.0.0-20240520184403-27c6b4c223d8/config/jobs/kubernetes-sigs/secrets-store-csi-driver/secrets-store-csi-driver-config.yaml (about)

     1  presubmits:
     2    kubernetes-sigs/secrets-store-csi-driver:
     3    - name: pull-secrets-store-csi-driver-lint
     4      cluster: eks-prow-build-cluster
     5      decorate: true
     6      decoration_config:
     7        timeout: 10m
     8      always_run: true
     9      path_alias: sigs.k8s.io/secrets-store-csi-driver
    10      branches:
    11      - ^main$
    12      - ^release-*
    13      labels:
    14      spec:
    15        containers:
    16        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231113-7213ea5323-1.25
    17          command:
    18            - runner.sh
    19          args:
    20            - make
    21            - test-style
    22          securityContext:
    23            privileged: true
    24          resources:
    25            requests:
    26              cpu: "4"
    27              memory: "8Gi"
    28            limits:
    29              cpu: "4"
    30              memory: "8Gi"
    31      annotations:
    32        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
    33        testgrid-tab-name: pr-secrets-store-csi-driver-lint
    34        description: "Run linting rules for Secrets Store CSI driver."
    35        testgrid-num-columns-recent: '30'
    36    - name: pull-secrets-store-csi-driver-unit
    37      cluster: eks-prow-build-cluster
    38      decorate: true
    39      decoration_config:
    40        timeout: 10m
    41      always_run: true
    42      path_alias: sigs.k8s.io/secrets-store-csi-driver
    43      branches:
    44      - ^main$
    45      - ^release-*
    46      labels:
    47      spec:
    48        containers:
    49        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231113-7213ea5323-1.25
    50          command:
    51            - runner.sh
    52          args:
    53            - make
    54            - test
    55          securityContext:
    56            privileged: true
    57          resources:
    58            requests:
    59              cpu: "4"
    60              memory: "8Gi"
    61            limits:
    62              cpu: "4"
    63              memory: "8Gi"
    64      annotations:
    65        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
    66        testgrid-tab-name: pr-secrets-store-csi-driver-unit
    67        description: "Run unit tests for Secrets Store CSI driver."
    68        testgrid-num-columns-recent: '30'
    69    - name: pull-secrets-store-csi-driver-sanity
    70      cluster: eks-prow-build-cluster
    71      decorate: true
    72      decoration_config:
    73        timeout: 10m
    74      always_run: true
    75      path_alias: sigs.k8s.io/secrets-store-csi-driver
    76      branches:
    77      - ^main$
    78      - ^release-*
    79      labels:
    80      spec:
    81        containers:
    82        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
    83          command:
    84            - runner.sh
    85          args:
    86            - make
    87            - sanity-test
    88          securityContext:
    89            privileged: true
    90          resources:
    91            requests:
    92              cpu: "4"
    93              memory: "8Gi"
    94            limits:
    95              cpu: "4"
    96              memory: "8Gi"
    97      annotations:
    98        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
    99        testgrid-tab-name: pr-secrets-store-csi-driver-sanity
   100        description: "Run sanity tests for Secrets Store CSI driver."
   101        testgrid-num-columns-recent: '30'
   102    - name: pull-secrets-store-csi-driver-image-scan
   103      cluster: eks-prow-build-cluster
   104      decorate: true
   105      decoration_config:
   106        timeout: 10m
   107      always_run: true
   108      optional: true
   109      path_alias: sigs.k8s.io/secrets-store-csi-driver
   110      branches:
   111      - ^main$
   112      - ^release-*
   113      labels:
   114        preset-dind-enabled: "true"
   115      spec:
   116        containers:
   117          - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   118            command:
   119              - runner.sh
   120            args:
   121              - bash
   122              - -c
   123              - >-
   124                make container image-scan
   125            # docker-in-docker needs privileged mode
   126            securityContext:
   127              privileged: true
   128            resources:
   129              requests:
   130                cpu: "4"
   131                memory: "8Gi"
   132              limits:
   133                cpu: "4"
   134                memory: "8Gi"
   135      annotations:
   136        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   137        testgrid-tab-name: pr-secrets-store-csi-driver-image-scan
   138        description: "Run vulnerability scans for Secrets Store CSI driver images."
   139        testgrid-num-columns-recent: '30'
   140    - name: pull-secrets-store-csi-driver-e2e-vault
   141      cluster: eks-prow-build-cluster
   142      decorate: true
   143      decoration_config:
   144        timeout: 25m
   145      always_run: true
   146      path_alias: sigs.k8s.io/secrets-store-csi-driver
   147      branches:
   148      - ^main$
   149      - ^release-*
   150      labels:
   151        # this is required because we want to run kind in docker
   152        preset-dind-enabled: "true"
   153        # this is required to make CNI installation to succeed for kind
   154        preset-kind-volume-mounts: "true"
   155      spec:
   156        containers:
   157        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   158          command:
   159            - runner.sh
   160          args:
   161            - bash
   162            - -c
   163            - >-
   164              make e2e-bootstrap e2e-helm-deploy e2e-vault
   165          securityContext:
   166            privileged: true
   167          resources:
   168            requests:
   169              cpu: "4"
   170              memory: "6Gi"
   171            limits:
   172              cpu: "4"
   173              memory: "6Gi"
   174      annotations:
   175        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   176        testgrid-tab-name: pr-secrets-store-csi-driver-e2e-vault
   177        description: "Run e2e test with vault provider for Secrets Store CSI driver."
   178        testgrid-num-columns-recent: '30'
   179    - name: pull-secrets-store-csi-driver-e2e-azure
   180      decorate: true
   181      decoration_config:
   182        timeout: 25m
   183      always_run: true
   184      path_alias: sigs.k8s.io/secrets-store-csi-driver
   185      branches:
   186      - ^main$
   187      - ^release-*
   188      labels:
   189        # this is required because we want to run kind in docker
   190        preset-dind-enabled: "true"
   191        # this is required to make CNI installation to succeed for kind
   192        preset-kind-volume-mounts: "true"
   193        # sets up the azure keyvault parameters used for testing
   194        preset-azure-secrets-store-creds: "true"
   195      spec:
   196        containers:
   197        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   198          command:
   199            - runner.sh
   200          args:
   201            - bash
   202            - -c
   203            - >-
   204              make e2e-bootstrap e2e-helm-deploy e2e-azure
   205          securityContext:
   206            privileged: true
   207          resources:
   208            requests:
   209              cpu: "4"
   210              memory: "4Gi"
   211      annotations:
   212        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   213        testgrid-tab-name: pr-secrets-store-csi-driver-e2e-azure
   214        description: "Run e2e test with azure provider for Secrets Store CSI driver."
   215        testgrid-num-columns-recent: '30'
   216    - name: pull-secrets-store-csi-driver-e2e-deploy-manifest-azure
   217      decorate: true
   218      decoration_config:
   219        timeout: 25m
   220      always_run: true
   221      optional: true
   222      path_alias: sigs.k8s.io/secrets-store-csi-driver
   223      branches:
   224      - ^main$
   225      labels:
   226        # this is required because we want to run kind in docker
   227        preset-dind-enabled: "true"
   228        # this is required to make CNI installation to succeed for kind
   229        preset-kind-volume-mounts: "true"
   230        # sets up the azure keyvault parameters used for testing
   231        preset-azure-secrets-store-creds: "true"
   232      spec:
   233        containers:
   234        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   235          command:
   236            - runner.sh
   237          args:
   238            - bash
   239            - -c
   240            - >-
   241              IS_YAML_TEST=true make e2e-bootstrap e2e-deploy-manifest e2e-azure
   242          securityContext:
   243            privileged: true
   244          resources:
   245            requests:
   246              cpu: "4"
   247              memory: "4Gi"
   248      annotations:
   249        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   250        testgrid-tab-name: pr-secrets-store-csi-driver-e2e-deploy-manifest-azure
   251        description: "Run e2e test using deploy manifest with azure provider for Secrets Store CSI driver."
   252        testgrid-num-columns-recent: '30'
   253    - name: pull-secrets-store-csi-driver-e2e-gcp
   254      decorate: true
   255      decoration_config:
   256        timeout: 25m
   257      always_run: true
   258      path_alias: sigs.k8s.io/secrets-store-csi-driver
   259      branches:
   260      - ^main$
   261      - ^release-*
   262      labels:
   263        # this is required because we want to run kind in docker
   264        preset-dind-enabled: "true"
   265        # this is required to make CNI installation to succeed for kind
   266        preset-kind-volume-mounts: "true"
   267      spec:
   268        serviceAccountName: secrets-store-csi-driver-gcp
   269        containers:
   270        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   271          command:
   272            - runner.sh
   273          args:
   274            - bash
   275            - -c
   276            - >-
   277              make e2e-bootstrap e2e-helm-deploy e2e-gcp
   278          securityContext:
   279            privileged: true
   280          resources:
   281            requests:
   282              cpu: "4"
   283              memory: "4Gi"
   284      annotations:
   285        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   286        testgrid-tab-name: pr-secrets-store-csi-driver-e2e-gcp
   287        description: "Run e2e test with gcp provider for Secrets Store CSI driver."
   288        testgrid-num-columns-recent: '30'
   289    - name: pull-secrets-store-csi-driver-e2e-aws
   290      cluster: eks-prow-build-cluster
   291      decorate: true
   292      decoration_config:
   293        timeout: 1h
   294      always_run: true
   295      optional: true
   296      path_alias: sigs.k8s.io/secrets-store-csi-driver
   297      branches:
   298      - ^main$
   299      - ^release-*
   300      labels:
   301        # this is required because we want to run kind in docker
   302        preset-dind-enabled: "true"
   303        # this is required to make CNI installation to succeed for kind
   304        preset-kind-volume-mounts: "true"
   305        # Sets up the aws parameters used for testing
   306        preset-aws-credential-aws-shared-testing: "true"
   307      spec:
   308        containers:
   309        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   310          command:
   311            - runner.sh
   312          args:
   313            - bash
   314            - -c
   315            - >-
   316              make setup-eks-cluster e2e-aws e2e-eks-cleanup
   317          securityContext:
   318            privileged: true
   319          resources:
   320            requests:
   321              cpu: "4"
   322              memory: "6Gi"
   323            limits:
   324              cpu: "4"
   325              memory: "6Gi"
   326      annotations:
   327        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   328        testgrid-tab-name: pr-secrets-store-csi-driver-e2e-aws
   329        description: "Run e2e test with aws provider for Secrets Store CSI driver."
   330        testgrid-num-columns-recent: '30'
   331    - name: pull-secrets-store-csi-driver-build
   332      cluster: eks-prow-build-cluster
   333      decorate: true
   334      decoration_config:
   335        timeout: 10m
   336      always_run: true
   337      path_alias: sigs.k8s.io/secrets-store-csi-driver
   338      branches:
   339      - ^main$
   340      - ^release-*
   341      labels:
   342      spec:
   343        containers:
   344        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   345          command:
   346            - runner.sh
   347          args:
   348            - bash
   349            - -c
   350            - >-
   351              make build build-windows
   352          securityContext:
   353            privileged: true
   354          resources:
   355            requests:
   356              cpu: "4"
   357              memory: "4Gi"
   358            limits:
   359              cpu: "4"
   360              memory: "4Gi"
   361      annotations:
   362        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   363        testgrid-tab-name: pr-secrets-store-csi-driver-build
   364        description: "Run make build build-windows for Secrets Store CSI driver."
   365        testgrid-num-columns-recent: '30'
   366    - name: pull-secrets-store-csi-driver-e2e-provider-k8s-1-26-14
   367      cluster: eks-prow-build-cluster
   368      decorate: true
   369      decoration_config:
   370        timeout: 25m
   371      always_run: true
   372      optional: false
   373      path_alias: sigs.k8s.io/secrets-store-csi-driver
   374      branches:
   375      - ^main$
   376      # e2e-provider is only available in release-1.* branches
   377      - ^release-1.*
   378      labels:
   379        # this is required because we want to run kind in docker
   380        preset-dind-enabled: "true"
   381        # this is required to make CNI installation to succeed for kind
   382        preset-kind-volume-mounts: "true"
   383      spec:
   384        containers:
   385        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   386          command:
   387            - runner.sh
   388          args:
   389            - bash
   390            - -c
   391            - >-
   392              ./test/scripts/e2e_provider.sh
   393          securityContext:
   394            privileged: true
   395          env:
   396          - name: KUBERNETES_VERSION
   397            value: "1.26.14"
   398          resources:
   399            requests:
   400              cpu: "4"
   401              memory: "4Gi"
   402            limits:
   403              cpu: "4"
   404              memory: "4Gi"
   405      annotations:
   406        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   407        testgrid-tab-name: pr-secrets-store-csi-driver-e2e-provider-k8s-1-26-14
   408        description: "Run e2e test with e2e-provider for Secrets Store CSI driver in Kubernetes 1.26.14"
   409        testgrid-num-columns-recent: '30'
   410    - name: pull-secrets-store-csi-driver-e2e-provider-k8s-1-27-11
   411      cluster: eks-prow-build-cluster
   412      decorate: true
   413      decoration_config:
   414        timeout: 25m
   415      always_run: true
   416      optional: false
   417      path_alias: sigs.k8s.io/secrets-store-csi-driver
   418      branches:
   419      - ^main$
   420      # e2e-provider is only available in release-1.* branches
   421      - ^release-1.*
   422      labels:
   423        # this is required because we want to run kind in docker
   424        preset-dind-enabled: "true"
   425        # this is required to make CNI installation to succeed for kind
   426        preset-kind-volume-mounts: "true"
   427      spec:
   428        containers:
   429        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   430          command:
   431            - runner.sh
   432          args:
   433            - bash
   434            - -c
   435            - >-
   436              ./test/scripts/e2e_provider.sh
   437          securityContext:
   438            privileged: true
   439          env:
   440          - name: KUBERNETES_VERSION
   441            value: "1.27.11"
   442          resources:
   443            requests:
   444              cpu: "4"
   445              memory: "4Gi"
   446            limits:
   447              cpu: "4"
   448              memory: "4Gi"
   449      annotations:
   450        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   451        testgrid-tab-name: pr-secrets-store-csi-driver-e2e-provider-k8s-1-27-11
   452        description: "Run e2e test with e2e-provider for Secrets Store CSI driver in Kubernetes 1.27.11"
   453        testgrid-num-columns-recent: '30'
   454    - name: pull-secrets-store-csi-driver-e2e-provider-k8s-1-28-7
   455      cluster: eks-prow-build-cluster
   456      decorate: true
   457      decoration_config:
   458        timeout: 25m
   459      always_run: true
   460      optional: false
   461      path_alias: sigs.k8s.io/secrets-store-csi-driver
   462      branches:
   463      - ^main$
   464      # e2e-provider is only available in release-1.* branches
   465      - ^release-1.*
   466      labels:
   467        # this is required because we want to run kind in docker
   468        preset-dind-enabled: "true"
   469        # this is required to make CNI installation to succeed for kind
   470        preset-kind-volume-mounts: "true"
   471      spec:
   472        containers:
   473        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   474          command:
   475            - runner.sh
   476          args:
   477            - bash
   478            - -c
   479            - >-
   480              ./test/scripts/e2e_provider.sh
   481          securityContext:
   482            privileged: true
   483          env:
   484          - name: KUBERNETES_VERSION
   485            value: "1.28.7"
   486          resources:
   487            requests:
   488              cpu: "4"
   489              memory: "4Gi"
   490            limits:
   491              cpu: "4"
   492              memory: "4Gi"
   493      annotations:
   494        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   495        testgrid-tab-name: pr-secrets-store-csi-driver-e2e-provider-k8s-1-28-7
   496        description: "Run e2e test with e2e-provider for Secrets Store CSI driver in Kubernetes 1.28.7"
   497        testgrid-num-columns-recent: '30'
   498    - name: pull-secrets-store-csi-driver-e2e-provider-k8s-1-29-2
   499      cluster: eks-prow-build-cluster
   500      decorate: true
   501      decoration_config:
   502        timeout: 25m
   503      always_run: true
   504      optional: false
   505      path_alias: sigs.k8s.io/secrets-store-csi-driver
   506      branches:
   507      - ^main$
   508      # e2e-provider is only available in release-1.* branches
   509      - ^release-1.*
   510      labels:
   511        # this is required because we want to run kind in docker
   512        preset-dind-enabled: "true"
   513        # this is required to make CNI installation to succeed for kind
   514        preset-kind-volume-mounts: "true"
   515      spec:
   516        containers:
   517        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   518          command:
   519            - runner.sh
   520          args:
   521            - bash
   522            - -c
   523            - >-
   524              ./test/scripts/e2e_provider.sh
   525          securityContext:
   526            privileged: true
   527          env:
   528          - name: KUBERNETES_VERSION
   529            value: "1.29.2"
   530          resources:
   531            requests:
   532              cpu: "4"
   533              memory: "4Gi"
   534            limits:
   535              cpu: "4"
   536              memory: "4Gi"
   537      annotations:
   538        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   539        testgrid-tab-name: pr-secrets-store-csi-driver-e2e-provider-k8s-1-29-2
   540        description: "Run e2e test with e2e-provider for Secrets Store CSI driver in Kubernetes 1.29.2"
   541        testgrid-num-columns-recent: '30'
   542    - name: pull-secrets-store-csi-driver-e2e-akeyless
   543      decorate: true
   544      decoration_config:
   545        timeout: 1h
   546      always_run: false
   547      optional: true
   548      path_alias: sigs.k8s.io/secrets-store-csi-driver
   549      branches:
   550      - ^main$
   551      - ^release-*
   552      labels:
   553        # this is required because we want to run kind in docker
   554        preset-dind-enabled: "true"
   555        # this is required to make CNI installation to succeed for kind
   556        preset-kind-volume-mounts: "true"
   557        # Sets up the akeyless parameters used for testing
   558        preset-akeyless-secrets-store-creds: "true"
   559      spec:
   560        containers:
   561        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   562          command:
   563            - runner.sh
   564          args:
   565            - bash
   566            - -c
   567            - >-
   568              make e2e-bootstrap e2e-helm-deploy e2e-akeyless
   569          securityContext:
   570            privileged: true
   571          resources:
   572            requests:
   573              cpu: "4"
   574              memory: "4Gi"
   575      annotations:
   576        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   577        testgrid-tab-name: pr-secrets-store-csi-driver-e2e-akeyless
   578        description: "Run e2e test with akeyless provider for Secrets Store CSI driver."
   579        testgrid-num-columns-recent: '30'
   580    - name: pull-secrets-store-csi-driver-e2e-conjur
   581      cluster: eks-prow-build-cluster
   582      decorate: true
   583      decoration_config:
   584        timeout: 15m
   585      always_run: false
   586      optional: true
   587      path_alias: sigs.k8s.io/secrets-store-csi-driver
   588      branches:
   589      - ^main$
   590      - ^release-*
   591      labels:
   592        # this is required because we want to run kind in docker
   593        preset-dind-enabled: "true"
   594        # this is required to make CNI installation to succeed for kind
   595        preset-kind-volume-mounts: "true"
   596      spec:
   597        containers:
   598        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   599          command:
   600            - runner.sh
   601          args:
   602            - bash
   603            - -c
   604            - >-
   605              make e2e-bootstrap e2e-helm-deploy e2e-conjur
   606          securityContext:
   607            privileged: true
   608          resources:
   609            requests:
   610              cpu: "4"
   611              memory: "6Gi"
   612            limits:
   613              cpu: "4"
   614              memory: "6Gi"
   615      annotations:
   616        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   617        testgrid-tab-name: pr-secrets-store-csi-driver-e2e-conjur
   618        description: "Run e2e test with conjur provider for Secrets Store CSI driver."
   619        testgrid-num-columns-recent: '30'
   620    - name: pull-secrets-store-csi-driver-e2e-windows
   621      decorate: true
   622      decoration_config:
   623        timeout: 90m
   624      always_run: true
   625      path_alias: sigs.k8s.io/secrets-store-csi-driver
   626      optional: false
   627      branches:
   628      - ^main$
   629      - ^release-*
   630      labels:
   631        preset-azure-cred: "true"
   632        preset-k8s-ssh: "true"
   633        preset-dind-enabled: "true"
   634        preset-azure-secrets-store-creds: "true"
   635      spec:
   636        containers:
   637        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   638          command:
   639            - runner.sh
   640          args:
   641            - bash
   642            - -c
   643            - >-
   644              ./test/scripts/run-e2e-windows.sh
   645          securityContext:
   646            privileged: true
   647          resources:
   648            requests:
   649              cpu: "4"
   650              memory: "4Gi"
   651          env:
   652            - name: TEST_WINDOWS
   653              value: "true"
   654      annotations:
   655        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-presubmit
   656        testgrid-tab-name: pr-secrets-store-csi-driver-e2e-windows
   657        description: "Run E2E tests on a AKS Windows cluster for Secrets Store CSI driver."
   658        testgrid-num-columns-recent: '30'
   659  
   660    # release jobs
   661    - name: release-secrets-store-csi-driver-e2e-aws
   662      cluster: eks-prow-build-cluster
   663      decorate: true
   664      decoration_config:
   665        timeout: 1h
   666      always_run: false
   667      run_if_changed: "^charts/.*"
   668      optional: true
   669      path_alias: sigs.k8s.io/secrets-store-csi-driver
   670      branches:
   671      - ^main$
   672      - ^release-*
   673      labels:
   674        # this is required because we want to run kind in docker
   675        preset-dind-enabled: "true"
   676        # this is required to make CNI installation to succeed for kind
   677        preset-kind-volume-mounts: "true"
   678        # sets up the aws parameters used for testing
   679        preset-aws-credential-aws-shared-testing: "true"
   680      spec:
   681        containers:
   682        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   683          command:
   684            - runner.sh
   685          args:
   686            - bash
   687            - -c
   688            - >-
   689              make setup-eks-cluster e2e-helm-deploy-release e2e-aws e2e-eks-cleanup
   690          securityContext:
   691            privileged: true
   692          env:
   693            - name: RELEASE
   694              value: "true"
   695          resources:
   696            requests:
   697              cpu: "4"
   698              memory: "6Gi"
   699            limits:
   700              cpu: "4"
   701              memory: "6Gi"
   702      annotations:
   703        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-release-signal
   704        testgrid-tab-name: release-secrets-store-csi-driver-e2e-aws
   705        description: "Run e2e test with aws provider for Secrets Store CSI driver release."
   706        testgrid-num-columns-recent: '30'
   707  
   708    - name: release-secrets-store-csi-driver-e2e-vault
   709      cluster: eks-prow-build-cluster
   710      decorate: true
   711      decoration_config:
   712        timeout: 25m
   713      always_run: false
   714      run_if_changed: "^charts/.*"
   715      path_alias: sigs.k8s.io/secrets-store-csi-driver
   716      branches:
   717      - ^main$
   718      - ^release-*
   719      labels:
   720        # this is required because we want to run kind in docker
   721        preset-dind-enabled: "true"
   722        # this is required to make CNI installation to succeed for kind
   723        preset-kind-volume-mounts: "true"
   724      spec:
   725        containers:
   726        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   727          command:
   728            - runner.sh
   729          args:
   730            - bash
   731            - -c
   732            - >-
   733              make e2e-bootstrap e2e-helm-deploy-release e2e-vault
   734          securityContext:
   735            privileged: true
   736          env:
   737            - name: RELEASE
   738              value: "true"
   739          resources:
   740            requests:
   741              cpu: "4"
   742              memory: "4Gi"
   743            limits:
   744              cpu: "4"
   745              memory: "4Gi"
   746      annotations:
   747        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-release-signal
   748        testgrid-tab-name: release-secrets-store-csi-driver-e2e-vault
   749        description: "Run e2e test with vault provider for Secrets Store CSI driver release."
   750        testgrid-num-columns-recent: '30'
   751    - name: release-secrets-store-csi-driver-e2e-azure
   752      decorate: true
   753      decoration_config:
   754        timeout: 25m
   755      always_run: false
   756      run_if_changed: "^charts/.*"
   757      path_alias: sigs.k8s.io/secrets-store-csi-driver
   758      branches:
   759      - ^main$
   760      - ^release-*
   761      labels:
   762        # this is required because we want to run kind in docker
   763        preset-dind-enabled: "true"
   764        # this is required to make CNI installation to succeed for kind
   765        preset-kind-volume-mounts: "true"
   766        # sets up the azure keyvault parameters used for testing
   767        preset-azure-secrets-store-creds: "true"
   768      spec:
   769        containers:
   770        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   771          command:
   772            - runner.sh
   773          args:
   774            - bash
   775            - -c
   776            - >-
   777              make e2e-bootstrap e2e-helm-deploy-release e2e-azure
   778          securityContext:
   779            privileged: true
   780          env:
   781            - name: RELEASE
   782              value: "true"
   783          resources:
   784            requests:
   785              cpu: "4"
   786              memory: "4Gi"
   787      annotations:
   788        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-release-signal
   789        testgrid-tab-name: release-secrets-store-csi-driver-e2e-azure
   790        description: "Run e2e test with azure provider for Secrets Store CSI driver release."
   791        testgrid-num-columns-recent: '30'
   792    - name: release-secrets-store-csi-driver-e2e-gcp
   793      decorate: true
   794      decoration_config:
   795        timeout: 25m
   796      always_run: false
   797      run_if_changed: "^charts/.*"
   798      path_alias: sigs.k8s.io/secrets-store-csi-driver
   799      branches:
   800      - ^main$
   801      - ^release-*
   802      labels:
   803        # this is required because we want to run kind in docker
   804        preset-dind-enabled: "true"
   805        # this is required to make CNI installation to succeed for kind
   806        preset-kind-volume-mounts: "true"
   807      spec:
   808        serviceAccountName: secrets-store-csi-driver-gcp
   809        containers:
   810        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   811          command:
   812            - runner.sh
   813          args:
   814            - bash
   815            - -c
   816            - >-
   817              make e2e-bootstrap e2e-helm-deploy-release e2e-gcp
   818          securityContext:
   819            privileged: true
   820          env:
   821            - name: RELEASE
   822              value: "true"
   823          resources:
   824            requests:
   825              cpu: "4"
   826              memory: "4Gi"
   827      annotations:
   828        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-release-signal
   829        testgrid-tab-name: release-secrets-store-csi-driver-e2e-gcp
   830        description: "Run e2e test with gcp provider for Secrets Store CSI driver release."
   831        testgrid-num-columns-recent: '30'
   832  
   833  postsubmits:
   834    kubernetes-sigs/secrets-store-csi-driver:
   835    - name: secrets-store-csi-driver-e2e-vault-postsubmit
   836      cluster: eks-prow-build-cluster
   837      decorate: true
   838      decoration_config:
   839        timeout: 25m
   840      always_run: true
   841      path_alias: sigs.k8s.io/secrets-store-csi-driver
   842      branches:
   843      - ^main$
   844      labels:
   845        # this is required because we want to run kind in docker
   846        preset-dind-enabled: "true"
   847        # this is required to make CNI installation to succeed for kind
   848        preset-kind-volume-mounts: "true"
   849      spec:
   850        containers:
   851        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   852          command:
   853            - runner.sh
   854          args:
   855            - bash
   856            - -c
   857            - >-
   858              make e2e-bootstrap e2e-helm-deploy e2e-vault
   859          securityContext:
   860            privileged: true
   861          resources:
   862            requests:
   863              cpu: "4"
   864              memory: "4Gi"
   865            limits:
   866              cpu: "4"
   867              memory: "4Gi"
   868      annotations:
   869        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-postsubmit
   870        testgrid-tab-name: secrets-store-csi-driver-e2e-vault-postsubmit
   871        description: "Run e2e test with vault provider for Secrets Store CSI driver postsubmit"
   872        testgrid-num-columns-recent: '30'
   873      rerun_auth_config:
   874        github_users:
   875        - aramase
   876        - ritazh
   877    - name: secrets-store-csi-driver-e2e-azure-postsubmit
   878      decorate: true
   879      decoration_config:
   880        timeout: 25m
   881      always_run: true
   882      path_alias: sigs.k8s.io/secrets-store-csi-driver
   883      branches:
   884      - ^main$
   885      labels:
   886        # this is required because we want to run kind in docker
   887        preset-dind-enabled: "true"
   888        # this is required to make CNI installation to succeed for kind
   889        preset-kind-volume-mounts: "true"
   890        # sets up the azure keyvault parameters used for testing
   891        preset-azure-secrets-store-creds: "true"
   892      spec:
   893        containers:
   894        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   895          command:
   896            - runner.sh
   897          args:
   898            - bash
   899            - -c
   900            - >-
   901              make e2e-bootstrap e2e-helm-deploy e2e-azure
   902          securityContext:
   903            privileged: true
   904          resources:
   905            requests:
   906              cpu: "4"
   907              memory: "4Gi"
   908      annotations:
   909        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-postsubmit
   910        testgrid-tab-name: secrets-store-csi-driver-e2e-azure-postsubmit
   911        description: "Run e2e test with azure provider for Secrets Store CSI driver postsubmit"
   912        testgrid-num-columns-recent: '30'
   913      rerun_auth_config:
   914        github_users:
   915        - aramase
   916        - ritazh
   917    - name: secrets-store-csi-driver-e2e-gcp-postsubmit
   918      decorate: true
   919      decoration_config:
   920        timeout: 25m
   921      always_run: true
   922      path_alias: sigs.k8s.io/secrets-store-csi-driver
   923      branches:
   924      - ^main$
   925      labels:
   926        # this is required because we want to run kind in docker
   927        preset-dind-enabled: "true"
   928        # this is required to make CNI installation to succeed for kind
   929        preset-kind-volume-mounts: "true"
   930      spec:
   931        serviceAccountName: secrets-store-csi-driver-gcp
   932        containers:
   933        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   934          command:
   935            - runner.sh
   936          args:
   937            - bash
   938            - -c
   939            - >-
   940              make e2e-bootstrap e2e-helm-deploy e2e-gcp
   941          securityContext:
   942            privileged: true
   943          resources:
   944            requests:
   945              cpu: "4"
   946              memory: "4Gi"
   947      annotations:
   948        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-postsubmit
   949        testgrid-tab-name: secrets-store-csi-driver-e2e-gcp-postsubmit
   950        description: "Run e2e test with gcp provider for Secrets Store CSI driver postsubmit"
   951        testgrid-num-columns-recent: '30'
   952      rerun_auth_config:
   953        github_users:
   954        - aramase
   955        - ritazh
   956    - name: secrets-store-csi-driver-e2e-aws-postsubmit
   957      cluster: eks-prow-build-cluster
   958      decorate: true
   959      decoration_config:
   960        timeout: 1h
   961      always_run: true
   962      path_alias: sigs.k8s.io/secrets-store-csi-driver
   963      branches:
   964      - ^main$
   965      labels:
   966        # this is required because we want to run kind in docker
   967        preset-dind-enabled: "true"
   968        # this is required to make CNI installation to succeed for kind
   969        preset-kind-volume-mounts: "true"
   970        # sets up the aws parameters used for testing
   971        preset-aws-credential-aws-shared-testing: "true"
   972      spec:
   973        containers:
   974        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
   975          command:
   976            - runner.sh
   977          args:
   978            - bash
   979            - -c
   980            - >-
   981              make setup-eks-cluster e2e-aws e2e-eks-cleanup
   982          securityContext:
   983            privileged: true
   984          resources:
   985            requests:
   986              cpu: "4"
   987              memory: "6Gi"
   988            limits:
   989              cpu: "4"
   990              memory: "6Gi"
   991      annotations:
   992        testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-postsubmit
   993        testgrid-tab-name: secrets-store-csi-driver-e2e-aws-postsubmit
   994        description: "Run e2e test with aws provider for Secrets Store CSI driver postsubmit"
   995        testgrid-num-columns-recent: '30'
   996      rerun_auth_config:
   997        github_users:
   998        - aramase
   999        - ritazh
  1000  
  1001  periodics:
  1002  - interval: 24h
  1003    name: periodic-secrets-store-csi-driver-image-scan
  1004    cluster: eks-prow-build-cluster
  1005    decorate: true
  1006    decoration_config:
  1007      timeout: 10m
  1008    labels:
  1009      preset-dind-enabled: "true"
  1010    extra_refs:
  1011    - org: kubernetes-sigs
  1012      repo: secrets-store-csi-driver
  1013      base_ref: main
  1014      path_alias: sigs.k8s.io/secrets-store-csi-driver
  1015    spec:
  1016      containers:
  1017        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
  1018          command:
  1019            - runner.sh
  1020          args:
  1021            - bash
  1022            - -c
  1023            - >-
  1024              make container image-scan
  1025          # docker-in-docker needs privileged mode
  1026          securityContext:
  1027            privileged: true
  1028          resources:
  1029            requests:
  1030              cpu: "4"
  1031              memory: "4Gi"
  1032            limits:
  1033              cpu: "4"
  1034              memory: "4Gi"
  1035    annotations:
  1036      testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-periodic
  1037      testgrid-tab-name: secrets-store-csi-driver-image-scan
  1038      testgrid-alert-email: kubernetes-secrets-store-csi-driver@googlegroups.com
  1039      description: "Run vulnerability scans for Secrets Store CSI driver images."
  1040      testgrid-num-columns-recent: '30'
  1041  - interval: 12h
  1042    name: periodic-secrets-store-csi-driver-upgrade-test-azure
  1043    decorate: true
  1044    decoration_config:
  1045      timeout: 30m
  1046    labels:
  1047      # this is required because we want to run kind in docker
  1048      preset-dind-enabled: "true"
  1049      # this is required to make CNI installation to succeed for kind
  1050      preset-kind-volume-mounts: "true"
  1051      # sets up the azure keyvault parameters used for testing
  1052      preset-azure-secrets-store-creds: "true"
  1053    extra_refs:
  1054    - org: kubernetes-sigs
  1055      repo: secrets-store-csi-driver
  1056      base_ref: main
  1057      path_alias: sigs.k8s.io/secrets-store-csi-driver
  1058    spec:
  1059      containers:
  1060        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
  1061          command:
  1062            - runner.sh
  1063          args:
  1064            - bash
  1065            - -c
  1066            - >-
  1067              make e2e-bootstrap e2e-helm-deploy-release e2e-azure && make e2e-helm-upgrade e2e-azure
  1068          # docker-in-docker needs privileged mode
  1069          securityContext:
  1070            privileged: true
  1071    annotations:
  1072      testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-periodic
  1073      testgrid-tab-name: secrets-store-csi-driver-upgrade-test-azure
  1074      testgrid-alert-email: kubernetes-secrets-store-csi-driver@googlegroups.com
  1075      description: "Run driver upgrade test with azure provider for Secrets Store CSI driver."
  1076      testgrid-num-columns-recent: '30'
  1077  - interval: 12h
  1078    name: periodic-secrets-store-csi-driver-inplace-upgrade-test-e2e-provider
  1079    cluster: eks-prow-build-cluster
  1080    decorate: true
  1081    decoration_config:
  1082      timeout: 30m
  1083    labels:
  1084      # this is required because we want to run kind in docker
  1085      preset-dind-enabled: "true"
  1086      # this is required to make CNI installation to succeed for kind
  1087      preset-kind-volume-mounts: "true"
  1088    extra_refs:
  1089    - org: kubernetes-sigs
  1090      repo: secrets-store-csi-driver
  1091      base_ref: main
  1092      path_alias: sigs.k8s.io/secrets-store-csi-driver
  1093    spec:
  1094      containers:
  1095        - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240515-17c6d50e24-master
  1096          command:
  1097            - runner.sh
  1098          args:
  1099            - bash
  1100            - -c
  1101            - >-
  1102              INPLACE_UPGRADE_TEST=true make e2e-bootstrap e2e-mock-provider-container e2e-helm-deploy-release e2e-provider-deploy e2e-provider && INPLACE_UPGRADE_TEST=true make e2e-helm-upgrade e2e-provider
  1103          # docker-in-docker needs privileged mode
  1104          securityContext:
  1105            privileged: true
  1106          resources:
  1107            requests:
  1108              cpu: "4"
  1109              memory: "4Gi"
  1110            limits:
  1111              cpu: "4"
  1112              memory: "4Gi"
  1113    annotations:
  1114      testgrid-dashboards: sig-auth-secrets-store-csi-driver, sig-auth-secrets-store-csi-driver-periodic
  1115      testgrid-tab-name: secrets-store-csi-driver-inplace-upgrade-test-e2e-provider
  1116      testgrid-alert-email: kubernetes-secrets-store-csi-driver@googlegroups.com
  1117      description: "Run driver in-place upgrade test with e2e provider for Secrets Store CSI driver."
  1118      testgrid-num-columns-recent: '30'