mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2025-12-13 21:34:40 +03:00
d8b9288b27
* CI: Try a full ssh connection on hosts instead of only checking the port
If we only try the port, we can try to connect in the playbook which is
executed next even though the managed node has not yet completed it's
boot-up sequence ("System is booting up. Unprivileged users are not
permitted to log in yet. Please come back later. For technical details,
see pam_nologin(8).")
This does not account for python-less hosts, but we don't use those in
CI anyway (for now, at least).
* CI: Remove connection method override when creating VMs
This prevented wait_for_connection to work correctly by hijacking the
connection to localhost, thus bypassing the connection check.
---------
Co-authored-by: Max Gautier <mg@max.gautier.name>
154 lines
4.6 KiB
YAML
154 lines
4.6 KiB
YAML
---
|
|
.kubevirt:
|
|
extends: .job-moderated
|
|
interruptible: true
|
|
script:
|
|
- ansible-playbook tests/cloud_playbooks/create-kubevirt.yml
|
|
-e @"tests/files/${TESTCASE}.yml"
|
|
- ./tests/scripts/testcases_run.sh
|
|
variables:
|
|
ANSIBLE_TIMEOUT: "120"
|
|
tags:
|
|
- ffci
|
|
needs:
|
|
- pipeline-image
|
|
|
|
# TODO: generate testcases matrixes from the files in tests/files/
|
|
# this is needed to avoid the need for PR rebasing when a job was added or removed in the target branch
|
|
# (currently, a removed job in the target branch breaks the tests, because the
|
|
# pipeline definition is parsed by gitlab before the rebase.sh script)
|
|
# CI template for PRs
|
|
pr:
|
|
stage: deploy-part1
|
|
rules:
|
|
- if: $PR_LABELS =~ /.*ci-short.*/
|
|
when: manual
|
|
allow_failure: true
|
|
- if: $CI_COMMIT_BRANCH =~ /^pr-.*$/
|
|
when: on_success
|
|
- if: $CI_PIPELINE_SOURCE == "schedule" && $CI_PIPELINE_SCHEDULE_DESCRIPTION == "daily-ci"
|
|
when: on_success
|
|
- when: manual
|
|
allow_failure: true
|
|
extends: .kubevirt
|
|
parallel:
|
|
matrix:
|
|
- TESTCASE:
|
|
- almalinux9-crio
|
|
- almalinux9-kube-ovn
|
|
- debian11-calico-collection
|
|
- debian11-macvlan
|
|
- debian12-cilium
|
|
- debian13-cilium
|
|
- fedora39-kube-router
|
|
- openeuler24-calico
|
|
- rockylinux9-cilium
|
|
- ubuntu22-calico-all-in-one
|
|
- ubuntu22-calico-all-in-one-upgrade
|
|
- ubuntu24-calico-etcd-datastore
|
|
- ubuntu24-calico-all-in-one-hardening
|
|
- ubuntu24-cilium-sep
|
|
- ubuntu24-flannel-collection
|
|
- ubuntu24-kube-router-sep
|
|
- ubuntu24-kube-router-svc-proxy
|
|
- ubuntu24-ha-separate-etcd
|
|
- flatcar4081-calico
|
|
- fedora40-flannel-crio-collection-scale
|
|
|
|
# The ubuntu24-calico-all-in-one jobs are meant as early stages to prevent running the full CI if something is horribly broken
|
|
ubuntu24-calico-all-in-one:
|
|
stage: deploy-part1
|
|
extends: .kubevirt
|
|
variables:
|
|
TESTCASE: ubuntu24-calico-all-in-one
|
|
rules:
|
|
- if: $CI_COMMIT_BRANCH =~ /^pr-.*$/
|
|
when: on_success
|
|
- if: $CI_PIPELINE_SOURCE == "schedule" && $CI_PIPELINE_SCHEDULE_DESCRIPTION == "daily-ci"
|
|
when: on_success
|
|
- when: manual
|
|
allow_failure: true
|
|
|
|
pr_full:
|
|
extends: .kubevirt
|
|
stage: deploy-extended
|
|
rules:
|
|
- if: $PR_LABELS =~ /.*ci-full.*/
|
|
when: on_success
|
|
- if: $CI_PIPELINE_SOURCE == "schedule" && $CI_PIPELINE_SCHEDULE_DESCRIPTION == "daily-ci"
|
|
when: on_success
|
|
# Else run as manual
|
|
- when: manual
|
|
allow_failure: true
|
|
parallel:
|
|
matrix:
|
|
- TESTCASE:
|
|
- almalinux9-calico-ha-ebpf
|
|
- almalinux9-calico-nodelocaldns-secondary
|
|
- debian11-custom-cni
|
|
- debian11-kubelet-csr-approver
|
|
- debian12-custom-cni-helm
|
|
- fedora39-calico-swap-selinux
|
|
- fedora39-crio
|
|
- ubuntu24-calico-ha-wireguard
|
|
- ubuntu24-flannel-ha
|
|
- ubuntu24-flannel-ha-once
|
|
|
|
# Need an update of the container image to use schema v2
|
|
# update: quay.io/kubespray/vm-amazon-linux-2:latest
|
|
manual:
|
|
extends: pr_full
|
|
parallel:
|
|
matrix:
|
|
- TESTCASE:
|
|
- amazon-linux-2-all-in-one
|
|
rules:
|
|
- when: manual
|
|
allow_failure: true
|
|
|
|
pr_extended:
|
|
extends: .kubevirt
|
|
stage: deploy-extended
|
|
rules:
|
|
- if: $PR_LABELS =~ /.*(ci-extended|ci-full).*/
|
|
when: on_success
|
|
- if: $CI_PIPELINE_SOURCE == "schedule" && $CI_PIPELINE_SCHEDULE_DESCRIPTION == "daily-ci"
|
|
when: on_success
|
|
- when: manual
|
|
allow_failure: true
|
|
parallel:
|
|
matrix:
|
|
- TESTCASE:
|
|
- almalinux9-calico
|
|
- almalinux9-calico-remove-node
|
|
- almalinux9-docker
|
|
- debian11-docker
|
|
- debian12-calico
|
|
- debian12-docker
|
|
- debian13-calico
|
|
- rockylinux9-calico
|
|
- ubuntu22-all-in-one-docker
|
|
- ubuntu24-all-in-one-docker
|
|
- ubuntu24-calico-all-in-one
|
|
- ubuntu24-calico-etcd-kubeadm
|
|
- ubuntu24-flannel
|
|
|
|
# TODO: migrate to pr-full, fix the broken ones
|
|
periodic:
|
|
allow_failure: true
|
|
extends: .kubevirt
|
|
rules:
|
|
- if: $CI_PIPELINE_SOURCE == "schedule" && $CI_PIPELINE_SCHEDULE_DESCRIPTION == "daily-ci"
|
|
when: on_success
|
|
parallel:
|
|
matrix:
|
|
- TESTCASE:
|
|
- debian11-calico-upgrade
|
|
- debian11-calico-upgrade-once
|
|
- debian12-cilium-svc-proxy
|
|
- fedora39-calico-selinux
|
|
- fedora40-docker-calico
|
|
- ubuntu24-calico-etcd-kubeadm-upgrade-ha
|
|
- ubuntu24-calico-ha-recover
|
|
- ubuntu24-calico-ha-recover-noquorum
|