add release-1.6-presubmit jobs

config/jobs/kubernetes-sigs/cluster-api/cluster-api-presubmits-release-1-6.yaml

@@ -0,0 +1,342 @@
+presubmits:
+  kubernetes-sigs/cluster-api:
+    - name: pull-cluster-api-build-release-1-6
+      decorate: true
+      decoration_config:
+        gcs_credentials_secret: "" # Use workload identity for uploading artifacts
+      path_alias: sigs.k8s.io/cluster-api
+      always_run: true
+      branches:
+        # The script this job runs is not in all branches.
+        - ^release-1.6$
+      spec:
+        serviceAccountName: prowjob-default-sa
+        containers:
+          - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231117-8a628a317a-1.28
+            command:
+              - runner.sh
+              - ./scripts/ci-build.sh
+      annotations:
+        testgrid-dashboards: sig-cluster-lifecycle-cluster-api-1.6
+        testgrid-tab-name: capi-pr-build-release-1-6
+    - name: pull-cluster-api-apidiff-release-1-6
+      decorate: true
+      decoration_config:
+        gcs_credentials_secret: "" # Use workload identity for uploading artifacts
+      path_alias: sigs.k8s.io/cluster-api
+      optional: true
+      branches:
+        # The script this job runs is not in all branches.
+        - ^release-1.6$
+      run_if_changed: '^((api|bootstrap|cmd|config|controllers|controlplane|errors|exp|feature|hack|internal|scripts|test|util|webhooks|version)/|main\.go|go\.mod|go\.sum|Dockerfile|Makefile)'
+      spec:
+        serviceAccountName: prowjob-default-sa
+        containers:
+          - command:
+              - runner.sh
+              - ./scripts/ci-apidiff.sh
+            image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231117-8a628a317a-1.28
+      annotations:
+        testgrid-dashboards: sig-cluster-lifecycle-cluster-api-1.6
+        testgrid-tab-name: capi-pr-apidiff-release-1-6
+    - name: pull-cluster-api-verify-release-1-6
+      decorate: true
+      decoration_config:
+        gcs_credentials_secret: "" # Use workload identity for uploading artifacts
+      path_alias: sigs.k8s.io/cluster-api
+      always_run: true
+      labels:
+        preset-dind-enabled: "true"
+      branches:
+        # The script this job runs is not in all branches.
+        - ^release-1.6$
+      spec:
+        serviceAccountName: prowjob-default-sa
+        containers:
+          - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231117-8a628a317a-1.28
+            command:
+              - "runner.sh"
+              - ./scripts/ci-verify.sh
+            resources:
+              requests:
+                cpu: 7300m
+            securityContext:
+              privileged: true
+      annotations:
+        testgrid-dashboards: sig-cluster-lifecycle-cluster-api-1.6
+        testgrid-tab-name: capi-pr-verify-release-1-6
+    - name: pull-cluster-api-test-release-1-6
+      decorate: true
+      decoration_config:
+        gcs_credentials_secret: "" # Use workload identity for uploading artifacts
+      path_alias: sigs.k8s.io/cluster-api
+      branches:
+        # The script this job runs is not in all branches.
+        - ^release-1.6$
+      run_if_changed: '^((api|bootstrap|cmd|config|controllers|controlplane|errors|exp|feature|hack|internal|scripts|test|util|webhooks|version)/|main\.go|go\.mod|go\.sum|Dockerfile|Makefile)'
+      spec:
+        serviceAccountName: prowjob-default-sa
+        containers:
+          - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231117-8a628a317a-1.28
+            args:
+              - runner.sh
+              - ./scripts/ci-test.sh
+            resources:
+              requests:
+                cpu: 7300m
+      annotations:
+        testgrid-dashboards: sig-cluster-lifecycle-cluster-api-1.6
+        testgrid-tab-name: capi-pr-test-release-1-6
+    - name: pull-cluster-api-test-mink8s-release-1-6
+      decorate: true
+      decoration_config:
+        gcs_credentials_secret: "" # Use workload identity for uploading artifacts
+      path_alias: sigs.k8s.io/cluster-api
+      always_run: false
+      branches:
+        # The script this job runs is not in all branches.
+        - ^release-1.6$
+      spec:
+        serviceAccountName: prowjob-default-sa
+        containers:
+          - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231117-8a628a317a-1.28
+            args:
+              - runner.sh
+              - ./scripts/ci-test.sh
+            env:
+              # This value determines the minimum Kubernetes
+              # supported version for Cluster API management cluster
+              # and can be found by referring to [Supported Kubernetes Version](https://cluster-api.sigs.k8s.io/reference/versions.html#supported-kubernetes-versions)
+              # docs (look for minimum supported k8s version for management cluster, i.e N-3).
+              #
+              # To check the latest available envtest in Kubebuilder for the minor version we determined above, please
+              # refer to https://github.com/kubernetes-sigs/kubebuilder/tree/tools-releases.
+              - name: KUBEBUILDER_ENVTEST_KUBERNETES_VERSION
+                value: "1.25.0"
+            resources:
+              requests:
+                cpu: 7300m
+      annotations:
+        testgrid-dashboards: sig-cluster-lifecycle-cluster-api-1.6
+        testgrid-tab-name: capi-pr-test-mink8s-release-1-6
+    - name: pull-cluster-api-e2e-mink8s-release-1-6
+      labels:
+        preset-dind-enabled: "true"
+        preset-kind-volume-mounts: "true"
+      decorate: true
+      decoration_config:
+        gcs_credentials_secret: "" # Use workload identity for uploading artifacts
+      path_alias: sigs.k8s.io/cluster-api
+      always_run: false
+      branches:
+        # The script this job runs is not in all branches.
+        - ^release-1.6$
+      spec:
+        serviceAccountName: prowjob-default-sa
+        containers:
+          - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231117-8a628a317a-1.28
+            args:
+              - runner.sh
+              - ./scripts/ci-e2e.sh
+            env:
+              - name: GINKGO_SKIP
+                value: "\\[Conformance\\] \\[K8s-Upgrade\\]|\\[IPv6\\]|\\[Scale\\]"
+              # This value determines the minimum Kubernetes
+              # supported version for Cluster API management cluster
+              # and can be found by referring to [Supported Kubernetes Version](https://cluster-api.sigs.k8s.io/reference/versions.html#supported-kubernetes-versions)
+              # docs (look for minimum supported k8s version for management cluster, i.e N-3).
+              - name: KUBERNETES_VERSION_MANAGEMENT
+                value: "v1.25.11@sha256:227fa11ce74ea76a0474eeefb84cb75d8dad1b08638371ecf0e86259b35be0c8"
+            # we need privileged mode in order to do docker in docker
+            securityContext:
+              privileged: true
+            resources:
+              requests:
+                cpu: 7300m
+      annotations:
+        testgrid-dashboards: sig-cluster-lifecycle-cluster-api-1.6
+        testgrid-tab-name: capi-pr-e2e-mink8s-release-1-6
+    - name: pull-cluster-api-e2e-release-1-6
+      labels:
+        preset-dind-enabled: "true"
+        preset-kind-volume-mounts: "true"
+      decorate: true
+      decoration_config:
+        gcs_credentials_secret: "" # Use workload identity for uploading artifacts
+      branches:
+        # The script this job runs is not in all branches.
+        - ^release-1.6$
+      path_alias: sigs.k8s.io/cluster-api
+      run_if_changed: '^((api|bootstrap|cmd|config|controllers|controlplane|errors|exp|feature|hack|internal|scripts|test|util|webhooks|version)/|main\.go|go\.mod|go\.sum|Dockerfile|Makefile)'
+      spec:
+        serviceAccountName: prowjob-default-sa
+        containers:
+          - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231117-8a628a317a-1.28
+            args:
+              - runner.sh
+              - "./scripts/ci-e2e.sh"
+            env:
+              - name: GINKGO_FOCUS
+                value: "\\[PR-Blocking\\]"
+            # we need privileged mode in order to do docker in docker
+            securityContext:
+              privileged: true
+            resources:
+              requests:
+                cpu: 7300m
+      annotations:
+        testgrid-dashboards: sig-cluster-lifecycle-cluster-api-1.6
+        testgrid-tab-name: capi-pr-e2e-release-1-6
+    - name: pull-cluster-api-e2e-full-dualstack-and-ipv6-release-1-6
+      labels:
+        preset-dind-enabled: "true"
+        preset-kind-volume-mounts: "true"
+      decorate: true
+      decoration_config:
+        gcs_credentials_secret: "" # Use workload identity for uploading artifacts
+      always_run: false
+      branches:
+        # The script this job runs is not in all branches.
+        - ^release-1.6$
+      path_alias: sigs.k8s.io/cluster-api
+      spec:
+        serviceAccountName: prowjob-default-sa
+        containers:
+          - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231117-8a628a317a-1.28
+            args:
+              - runner.sh
+              - "./scripts/ci-e2e.sh"
+            env:
+              # enable IPV6 in bootstrap image
+              - name: "DOCKER_IN_DOCKER_IPV6_ENABLED"
+                value: "true"
+              # Since the PR-Blocking tests are run as part of the cluster-api-e2e job
+              # and the upgrade tests are being run as part of the periodic upgrade jobs.
+              # This jobs ends up running all the other tests in the E2E suite
+              - name: GINKGO_SKIP
+                value: "\\[PR-Blocking\\] \\[Conformance\\] \\[K8s-Upgrade\\]|\\[Scale\\]"
+            # we need privileged mode in order to do docker in docker
+            securityContext:
+              privileged: true
+            resources:
+              requests:
+                cpu: 7300m
+      annotations:
+        testgrid-dashboards: sig-cluster-lifecycle-cluster-api-1.6
+        testgrid-tab-name: capi-pr-e2e-full-dualstack-and-ipv6-release-1-6
+    - name: pull-cluster-api-e2e-full-release-1-6
+      labels:
+        preset-dind-enabled: "true"
+        preset-kind-volume-mounts: "true"
+      decorate: true
+      decoration_config:
+        gcs_credentials_secret: "" # Use workload identity for uploading artifacts
+      always_run: false
+      branches:
+        # The script this job runs is not in all branches.
+        - ^release-1.6$
+      path_alias: sigs.k8s.io/cluster-api
+      spec:
+        serviceAccountName: prowjob-default-sa
+        containers:
+          - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231117-8a628a317a-1.28
+            args:
+              - runner.sh
+              - "./scripts/ci-e2e.sh"
+            env:
+              # Since the PR-Blocking tests are run as part of the cluster-api-e2e job
+              # and the upgrade tests are being run as part of the periodic upgrade jobs.
+              # This jobs ends up running all the other tests in the E2E suite
+              - name: GINKGO_SKIP
+                value: "\\[PR-Blocking\\] \\[Conformance\\] \\[K8s-Upgrade\\]|\\[IPv6\\]|\\[Scale\\]"
+            # we need privileged mode in order to do docker in docker
+            securityContext:
+              privileged: true
+            resources:
+              requests:
+                cpu: 7300m
+      annotations:
+        testgrid-dashboards: sig-cluster-lifecycle-cluster-api-1.6
+        testgrid-tab-name: capi-pr-e2e-full-release-1-6
+    - name: pull-cluster-api-e2e-workload-upgrade-1-28-latest-release-1-6
+      labels:
+        preset-dind-enabled: "true"
+        preset-kind-volume-mounts: "true"
+      decorate: true
+      decoration_config:
+        gcs_credentials_secret: "" # Use workload identity for uploading artifacts
+      always_run: false
+      branches:
+        # The script this job runs is not in all branches.
+        - ^release-1.6$
+      path_alias: sigs.k8s.io/cluster-api
+      extra_refs:
+        - org: kubernetes
+          repo: kubernetes
+          base_ref: master
+          path_alias: k8s.io/kubernetes
+      spec:
+        serviceAccountName: prowjob-default-sa
+        containers:
+          - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231117-8a628a317a-1.28
+            args:
+              - runner.sh
+              - "./scripts/ci-e2e.sh"
+            env:
+              - name: ALWAYS_BUILD_KIND_IMAGES
+                value: "true"
+              - name: KUBERNETES_VERSION_UPGRADE_FROM
+                value: "stable-1.28"
+              - name: KUBERNETES_VERSION_UPGRADE_TO
+                value: "ci/latest-1.29"
+              - name: ETCD_VERSION_UPGRADE_TO
+                value: "3.5.9-0"
+              - name: COREDNS_VERSION_UPGRADE_TO
+                value: "v1.10.1"
+              - name: GINKGO_FOCUS
+                value: "\\[K8s-Upgrade\\]"
+            # we need privileged mode in order to do docker in docker
+            securityContext:
+              privileged: true
+            resources:
+              requests:
+                cpu: 7300m
+      annotations:
+        testgrid-dashboards: sig-cluster-lifecycle-cluster-api-1.6
+        testgrid-tab-name: capi-pr-e2e-release-1-6-1-28-latest
+    # This job is experimental for now. Please do not duplicate it to release branches.
+    - name: pull-cluster-api-e2e-scale-release-1-6-experimental
+      labels:
+        preset-dind-enabled: "true"
+        preset-kind-volume-mounts: "true"
+        preset-service-account: "true"
+        preset-aws-ssh: "true"
+        preset-aws-credential: "true"
+      decorate: true
+      optional: true
+      always_run: false
+      branches:
+        # The script this job runs is not in all branches.
+        - ^release-1.6$
+      path_alias: sigs.k8s.io/cluster-api
+      spec:
+        serviceAccountName: prowjob-default-sa
+        containers:
+          - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231117-8a628a317a-1.28
+            args:
+              - runner.sh
+              - "./scripts/ci-e2e.sh"
+            env:
+              - name: BOSKOS_HOST
+                value: "boskos.test-pods.svc.cluster.local"
+              - name: GINKGO_FOCUS
+                value: "\\[Scale\\]"
+            # we need privileged mode in order to do docker in docker
+            securityContext:
+              privileged: true
+            resources:
+              requests:
+                cpu: 7300m
+      annotations:
+        testgrid-dashboards: sig-cluster-lifecycle-cluster-api-1.6
+        testgrid-tab-name: capi-pr-e2e-scale-release-1-6-experimental