no-jira: add AWS dualstack e2e private periodic tests for 5.0 and 5.1 by tthvo · Pull Request #83136 · openshift/release

tthvo · 2026-08-07T23:54:21Z

Copy all AWS dualstack private periodic tests from 4.22 to 5.0 and 5.1 amd64-nightly configs, promoting them from TechPreview to GA.

Summary by CodeRabbit

Adds AWS dual-stack periodic tests to the OpenShift 5.0 and 5.1 amd64-nightly CI configurations.
Covers BYO-subnet, disconnected private STS, HTTPS proxy STS, shared-VPC PHZ, and GovCloud private scenarios.
Includes IPv4-primary destructive and IPv6-primary minimal-permission variants.
Promotes the four AWS STS tests from TechPreview to GA.

openshift-ci-robot · 2026-08-07T23:54:24Z

@tthvo: This pull request explicitly references no jira issue.

Details

In response to this:

Copy 4 AWS dualstack private periodic tests from 4.22 to 5.0 and 5.1 amd64-nightly configs, promoting them from TechPreview to GA.

Tests added:

aws-ipi-disc-priv-sts-fips-dualstack-ipv4-f28-destructive

aws-ipi-disc-priv-sts-fips-dualstack-ipv6-mini-perm-f7

aws-ipi-https-proxy-sts-dualstack-ipv4-f28-destructive

aws-ipi-https-proxy-sts-dualstack-ipv6-mini-perm-f7

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

coderabbitai · 2026-08-07T23:54:54Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: eb42cc23-fdbb-4567-bee2-ade75acd7b98

📥 Commits

Reviewing files that changed from the base of the PR and between d024bab and 47238ee.

⛔ Files ignored due to path filters (2)

ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.0-periodics.yaml is excluded by !ci-operator/jobs/**
ci-operator/jobs/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.1-periodics.yaml is excluded by !ci-operator/jobs/**

📒 Files selected for processing (2)

ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.0__amd64-nightly.yaml
ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.1__amd64-nightly.yaml

Walkthrough

Release 5.0 and 5.1 nightly configurations add scheduled dual-stack AWS jobs. The jobs cover BYO subnets, disconnected private STS, HTTPS proxy STS, shared-VPC PHZ, and AWS GovCloud private FIPS scenarios.

Changes

Dual-stack AWS nightly testing

Layer / File(s)	Summary
BYO-subnet test jobs `ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.*__amd64-nightly.yaml`	Adds IPv4-primary destructive and IPv6-primary minimal-permission dual-stack AWS BYO-subnet jobs.
Disconnected private STS jobs `ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.*__amd64-nightly.yaml`	Adds FIPS jobs with disconnected filters, permissions, manifest extraction, and STS workflow settings.
Proxy and shared-VPC PHZ jobs `ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.*__amd64-nightly.yaml`	Adds HTTPS proxy STS and shared-VPC PHZ dual-stack jobs with applicable workflow settings.
GovCloud private FIPS jobs `ci-operator/config/openshift/openshift-tests-private/openshift-openshift-tests-private-release-5.*__amd64-nightly.yaml`	Adds dual-stack AWS GovCloud private jobs for destructive and minimal-permission testing.

Estimated code review effort: 3 (Moderate) | ~15–30 minutes

Suggested reviewers: jadhaj, sgoveas, sadasu

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The commit changes only CI YAML records. No Ginkgo title constructs or dynamic values were added, and the new job identifiers are static scenario names.
Test Structure And Quality	✅ Passed	The diff changes only four YAML configuration/generated-job files and adds schedules that reference existing workflows; it introduces no Ginkgo It blocks or test implementation to assess.
Microshift Test Compatibility	✅ Passed	The PR changes only nightly/job YAML and adds no Ginkgo test declarations or Go test code; it schedules existing test chains, so this check is not applicable.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	The PR adds only YAML periodic job entries and changes no Ginkgo It/Describe/Context/When declarations or test code; this SNO compatibility check is inapplicable.
Topology-Aware Scheduling Compatibility	✅ Passed	The diff changes only ci-operator test and Prow job YAML; added blocks set workflows, schedules, and test variables, with no operator/controller manifests or topology scheduling constraints.
Ote Binary Stdout Contract	✅ Passed	HEAD^..HEAD changes only four YAML config/job files; added content defines scheduled workflows and contains no Go source or process-level stdout writes.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	The PR changes only ci-operator YAML and adds scheduled jobs that call existing e2e chains; no Ginkgo test declarations or test implementation files were added.
No-Weak-Crypto	✅ Passed	The PR changes only AWS test and generated Prow YAML schedules; added lines contain no MD5, SHA1, DES, RC4, 3DES, Blowfish, ECB, crypto code, or secret/token comparisons.
Container-Privileges	✅ Passed	The HEAD^→HEAD diff adds test and job scheduling fields only; all four changed YAML files contain no privileged:true, hostPID, hostNetwork, hostIPC, SYS_ADMIN, allowPrivilegeEscalation, or root set...
No-Sensitive-Data-In-Logs	✅ Passed	The commit adds CI YAML schedules and generated job metadata only; it adds no logging statements or secret, token, password, PII, or customer-data output.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: adding AWS dual-stack private periodic tests to the 5.0 and 5.1 configurations.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

_{Comment @coderabbitai help to get the list of available commands.}

tthvo · 2026-08-08T00:59:40Z

/test core-valid

tthvo · 2026-08-12T18:16:53Z

/cc @sadasu

tthvo · 2026-08-12T18:22:16Z

/retitle no-jira: add AWS dualstack e2e private periodic tests for 5.0 and 5.1

Copy 4 AWS dualstack private periodic tests from 4.22 to 5.0 and 5.1 amd64-nightly configs, promoting them from TechPreview to GA. Tests added: - aws-ipi-disc-priv-sts-fips-dualstack-ipv4-f28-destructive - aws-ipi-disc-priv-sts-fips-dualstack-ipv6-mini-perm-f7 - aws-ipi-https-proxy-sts-dualstack-ipv4-f28-destructive - aws-ipi-https-proxy-sts-dualstack-ipv6-mini-perm-f7

Copy 6 AWS dualstack private periodic tests from 4.22 to 5.0 and 5.1 amd64-nightly configs, promoting them from TechPreview to GA. Tests added: - aws-ipi-byo-subnets-dualstack-ipv4-f28-destructive - aws-ipi-byo-subnets-dualstack-ipv6-mini-perm-f7 - aws-ipi-shared-vpc-phz-dualstack-ipv4-f28-destructive - aws-ipi-shared-vpc-phz-dualstack-ipv6-mini-perm-f7 - aws-usgov-ipi-private-fips-dualstack-ipv4-f28-destructive - aws-usgov-ipi-private-fips-dualstack-ipv6-mini-perm-f7

coderabbitai · 2026-08-12T18:26:50Z

Note

GitHub couldn't provide a complete incremental comparison for this pull request, so CodeRabbit is performing a full review instead. This review may take a little longer.

openshift-merge-bot · 2026-08-12T18:29:54Z

[REHEARSALNOTIFIER]
@tthvo: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name	Repo	Type	Reason
periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-ipi-disc-priv-sts-fips-dualstack-ipv6-mini-perm-f7	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.1-amd64-nightly-aws-ipi-disc-priv-sts-fips-dualstack-ipv4-f28-destructive	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-usgov-ipi-private-fips-dualstack-ipv6-mini-perm-f7	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-ipi-byo-subnets-dualstack-ipv4-f28-destructive	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-ipi-https-proxy-sts-dualstack-ipv6-mini-perm-f7	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-ipi-https-proxy-sts-dualstack-ipv4-f28-destructive	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.1-amd64-nightly-aws-ipi-shared-vpc-phz-dualstack-ipv6-mini-perm-f7	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-ipi-byo-subnets-dualstack-ipv6-mini-perm-f7	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.1-amd64-nightly-aws-ipi-shared-vpc-phz-dualstack-ipv4-f28-destructive	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.1-amd64-nightly-aws-ipi-byo-subnets-dualstack-ipv6-mini-perm-f7	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.1-amd64-nightly-aws-usgov-ipi-private-fips-dualstack-ipv6-mini-perm-f7	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.1-amd64-nightly-aws-ipi-disc-priv-sts-fips-dualstack-ipv6-mini-perm-f7	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-ipi-shared-vpc-phz-dualstack-ipv6-mini-perm-f7	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-usgov-ipi-private-fips-dualstack-ipv4-f28-destructive	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.1-amd64-nightly-aws-usgov-ipi-private-fips-dualstack-ipv4-f28-destructive	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.1-amd64-nightly-aws-ipi-byo-subnets-dualstack-ipv4-f28-destructive	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-ipi-shared-vpc-phz-dualstack-ipv4-f28-destructive	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.1-amd64-nightly-aws-ipi-https-proxy-sts-dualstack-ipv4-f28-destructive	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.1-amd64-nightly-aws-ipi-https-proxy-sts-dualstack-ipv6-mini-perm-f7	N/A	periodic	Periodic changed
periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-ipi-disc-priv-sts-fips-dualstack-ipv4-f28-destructive	N/A	periodic	Periodic changed

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

tthvo · 2026-08-12T18:37:56Z

/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-ipi-disc-priv-sts-fips-dualstack-ipv6-mini-perm-f7

tthvo · 2026-08-12T18:38:14Z

/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-usgov-ipi-private-fips-dualstack-ipv4-f28-destructive

tthvo · 2026-08-12T18:38:41Z

/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-5.1-amd64-nightly-aws-ipi-byo-subnets-dualstack-ipv6-mini-perm-f7

openshift-merge-bot · 2026-08-12T18:38:44Z

@tthvo: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

openshift-merge-bot · 2026-08-12T18:38:53Z

@tthvo, pj-rehearse: unable prepare a candidate for rehearsal; rehearsals will not be run. This could be due to a branch that needs to be rebased. ERROR:

couldn't checkout base SHA 76784810a98f21a071b2a2c0db8ccd4eb3b5ef86: error checking out "76784810a98f21a071b2a2c0db8ccd4eb3b5ef86": exit status 128 fatal: unable to read tree (76784810a98f21a071b2a2c0db8ccd4eb3b5ef86)

openshift-merge-bot · 2026-08-12T18:38:55Z

@tthvo: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

openshift-merge-bot · 2026-08-12T18:39:05Z

@tthvo, pj-rehearse: unable prepare a candidate for rehearsal; rehearsals will not be run. This could be due to a branch that needs to be rebased. ERROR:

couldn't checkout base SHA f72b5351bb99182ec7a8d4876ec64257a2376cd2: error checking out "f72b5351bb99182ec7a8d4876ec64257a2376cd2": exit status 128 fatal: unable to read tree (f72b5351bb99182ec7a8d4876ec64257a2376cd2)

openshift-merge-bot · 2026-08-12T18:39:07Z

@tthvo: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

tthvo · 2026-08-12T18:46:22Z

/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-ipi-disc-priv-sts-fips-dualstack-ipv6-mini-perm-f7

openshift-merge-bot · 2026-08-12T18:47:38Z

@tthvo: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

tthvo · 2026-08-12T18:47:48Z

/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-usgov-ipi-private-fips-dualstack-ipv4-f28-destructive

openshift-merge-bot · 2026-08-12T18:49:07Z

@tthvo: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

tthvo · 2026-08-12T18:50:06Z

/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-usgov-ipi-private-fips-dualstack-ipv6-mini-perm-f7

openshift-merge-bot · 2026-08-12T18:50:10Z

@tthvo: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

openshift-ci · 2026-08-12T20:40:27Z

@tthvo: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/rehearse/periodic-ci-openshift-openshift-tests-private-release-5.1-amd64-nightly-aws-ipi-byo-subnets-dualstack-ipv6-mini-perm-f7	`47238ee`	link	unknown	`/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-5.1-amd64-nightly-aws-ipi-byo-subnets-dualstack-ipv6-mini-perm-f7`
ci/rehearse/periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-ipi-disc-priv-sts-fips-dualstack-ipv6-mini-perm-f7	`47238ee`	link	unknown	`/pj-rehearse periodic-ci-openshift-openshift-tests-private-release-5.0-amd64-nightly-aws-ipi-disc-priv-sts-fips-dualstack-ipv6-mini-perm-f7`

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

pruan-rht · 2026-08-13T19:33:03Z

/lgtm
/approve

openshift-ci · 2026-08-13T19:33:36Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: pruan-rht, tthvo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~ci-operator/config/openshift/openshift-tests-private/OWNERS~~ [pruan-rht]
~~ci-operator/jobs/openshift/openshift-tests-private/OWNERS~~ [pruan-rht]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

tthvo · 2026-08-13T19:58:39Z

/pj-rehearse ack

5.0 runs as expected, while 5.1 has unrelated image-build issues. This is just a copy from 4.22 with feature gate promoted to Default GA.

openshift-merge-bot · 2026-08-13T19:58:42Z

@tthvo: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Aug 7, 2026

openshift-ci Bot requested review from jadhaj and sgoveas August 7, 2026 23:55

This was referenced Aug 8, 2026

stackrox: full OCP e2e suite on AWS dual-stack IPv6-primary #83132

Open

OCPQE-30425: Add metal SNO IPv6 http-proxy jobs for 4.18-5.0 #83261

Open

openshift-ci Bot requested a review from sadasu August 12, 2026 18:16

openshift-ci Bot changed the title ~~no-jira: add AWS STS dualstack e2e periodic tests for 5.0 and 5.1~~ no-jira: add AWS dualstack e2e private periodic tests for 5.0 and 5.1 Aug 12, 2026

tthvo added 2 commits August 12, 2026 11:26

tthvo force-pushed the private-dualstack-aws branch from 37a8c61 to 47238ee Compare August 12, 2026 18:26

openshift-ci Bot assigned pruan-rht Aug 13, 2026

openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Aug 13, 2026

openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Aug 13, 2026

openshift-merge-bot Bot added the rehearsals-ack Signifies that rehearsal jobs have been acknowledged label Aug 13, 2026

openshift-merge-bot Bot merged commit 60dafcb into openshift:main Aug 13, 2026
16 of 18 checks passed

tthvo deleted the private-dualstack-aws branch August 13, 2026 20:32

coderabbitai Bot mentioned this pull request Aug 13, 2026

[DNM]dualstack AWS debug cluster #79562

Draft

Uh oh!

Conversation

tthvo commented Aug 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

openshift-ci-robot commented Aug 7, 2026

Uh oh!

coderabbitai Bot commented Aug 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Uh oh!

tthvo commented Aug 8, 2026

Uh oh!

tthvo commented Aug 12, 2026

Uh oh!

tthvo commented Aug 12, 2026

Uh oh!

coderabbitai Bot commented Aug 12, 2026

Uh oh!

openshift-merge-bot Bot commented Aug 12, 2026

Uh oh!

tthvo commented Aug 12, 2026

Uh oh!

tthvo commented Aug 12, 2026

Uh oh!

tthvo commented Aug 12, 2026

Uh oh!

openshift-merge-bot Bot commented Aug 12, 2026

Uh oh!

openshift-merge-bot Bot commented Aug 12, 2026

Uh oh!

openshift-merge-bot Bot commented Aug 12, 2026

Uh oh!

openshift-merge-bot Bot commented Aug 12, 2026

Uh oh!

openshift-merge-bot Bot commented Aug 12, 2026

Uh oh!

tthvo commented Aug 12, 2026

Uh oh!

openshift-merge-bot Bot commented Aug 12, 2026

Uh oh!

tthvo commented Aug 12, 2026

Uh oh!

openshift-merge-bot Bot commented Aug 12, 2026

Uh oh!

tthvo commented Aug 12, 2026

Uh oh!

openshift-merge-bot Bot commented Aug 12, 2026

Uh oh!

openshift-ci Bot commented Aug 12, 2026

Uh oh!

pruan-rht commented Aug 13, 2026

Uh oh!

openshift-ci Bot commented Aug 13, 2026

Uh oh!

tthvo commented Aug 13, 2026

Uh oh!

openshift-merge-bot Bot commented Aug 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

tthvo commented Aug 7, 2026 •

edited

Loading

coderabbitai Bot commented Aug 7, 2026 •

edited

Loading