Skip to content

CNTRLPLANE-3561: Migrate OCP-42866 AWS infrastructure creation test#80161

Open
mehabhalodiya wants to merge 1 commit into
openshift:mainfrom
mehabhalodiya:migrate_OCP42866
Open

CNTRLPLANE-3561: Migrate OCP-42866 AWS infrastructure creation test#80161
mehabhalodiya wants to merge 1 commit into
openshift:mainfrom
mehabhalodiya:migrate_OCP42866

Conversation

@mehabhalodiya

@mehabhalodiya mehabhalodiya commented Jun 5, 2026

Copy link
Copy Markdown
Contributor

OCPSTRAT-2317: Migrate OCP-42866 AWS infrastructure creation test

Add step-registry components and CI job to test AWS infrastructure
creation as a separate step, supporting migration of test OCP-42866
from openshift-tests-private to openshift/hypershift.

This change creates a new e2e-aws-infra-separate workflow that:

  1. Creates AWS infrastructure (VPC, subnets, NAT, security groups, Route53) separately
  2. Creates IAM resources (roles, policies, instance profiles) separately
  3. Creates HostedCluster using pre-created infrastructure (BYOI pattern)
  4. Runs e2e tests to validate the infrastructure
  5. Cleans up all resources

This workflow leverages native hypershift CLI commands:

  • hypershift create infra aws
  • hypershift create iam aws
  • hypershift create cluster aws --infra-json --iam-json

New step-registry components:

  • hypershift-aws-create-infra: Provision AWS infrastructure
  • hypershift-aws-create-iam: Create IAM resources
  • hypershift-aws-create-cluster-byoi: Create cluster with existing infra
  • hypershift-aws-destroy-infra: Cleanup infrastructure
  • hypershift-aws-destroy-infra-separate: Cleanup chain
  • hypershift-aws-e2e-infra-separate: Complete workflow

New CI job:

  • e2e-aws-infra-separate: Tests infrastructure creation as separate step

This pattern enables validation of infrastructure provisioning independently from cluster creation, addressing the test coverage gap identified in OCPSTRAT-2317 Phase 2.

Summary by CodeRabbit

This PR updates OpenShift CI configuration (openshift/release) to add a dedicated HyperShift workflow and step-registry components that validate AWS infrastructure provisioning separately from HostedCluster creation. It enables running the OCP-42866 infra creation test as a standalone CI flow (BYOI pattern) so infrastructure can be provisioned, validated, and torn down independently of cluster creation.

What changed (practical impact)

  • CI job/config: adds an optional e2e-aws-infra-separate test entry to ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml that targets the hypershift-aws profile and runs the hypershift-aws-e2e-infra-separate workflow.
  • New composed workflow: ci-operator/step-registry/hypershift/aws/e2e-infra-separate/hypershift-aws-e2e-infra-separate-workflow.yaml implements a 3-tier nested management pattern (root → ephemeral nested management → guest HostedCluster) and sequences pre/infra/iam/cluster/test/post steps to:
    • create AWS network/DNS resources via hypershift create infra aws,
    • create IAM roles/policies/instance profiles via hypershift create iam aws,
    • create a HostedCluster using the produced infra/iam JSON artifacts via hypershift create cluster aws --infra-json --iam-json (BYOI),
    • run e2e tests (hypershift-aws-run-e2e-nested),
    • and perform teardown (dump, destroy HostedCluster, destroy infra).
  • Step-registry components: adds scripts, refs, metadata and OWNERS for the new steps:
    • hypershift-aws-create-infra (creates VPC, subnets, NAT, SGs, Route53, outputs ${SHARED_DIR}/aws_infra_output.json and infra-id)
    • hypershift-aws-create-iam (creates IAM artifacts, outputs ${SHARED_DIR}/aws_iam_output.json)
    • hypershift-aws-create-cluster-byoi (creates HostedCluster from infra/iam JSON, waits for Available and version rollout, writes nested_kubeconfig and JUnit artifacts)
    • hypershift-aws-destroy-infra and hypershift-aws-destroy-infra-separate (destroy infra and cleanup chain)
    • hypershift-aws-e2e-infra-separate (the composed workflow entry)
  • Metadata/ownership: adds metadata.json and OWNERS for each new step/ref/chain to register owners and reviewers.
  • Runtime wiring: steps use the hypershift-operator CLI image, mount AWS and pull credentials where required, declare timeouts, resource requests, documented env vars, and shared inputs/outputs (infra JSON, iam JSON, infra-id, cluster-name, nested_kubeconfig, JUnit artifacts).

Why this matters

  • Enables independent validation of AWS infrastructure provisioning (BYOI) using HyperShift CLI primitives, improving CI coverage and fidelity for infra-only testing.
  • Supports migrating the OCP-42866 AWS infra creation test into the hypershift repository and the OCPSTRAT-2317 Phase 2 objective by separating infra provisioning from cluster lifecycle in CI.
  • Preserves artifact coordination and teardown semantics so infra artifacts and guest cluster kubeconfigs are produced and cleaned up reliably in CI.

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Jun 5, 2026
@openshift-ci-robot

openshift-ci-robot commented Jun 5, 2026

Copy link
Copy Markdown
Contributor

@mehabhalodiya: This pull request references OCPSTRAT-2317 which is a valid jira issue.

Details

In response to this:

OCPSTRAT-2317: Migrate OCP-42866 AWS infrastructure creation test

Add step-registry components and CI job to test AWS infrastructure
creation as a separate step, supporting migration of test OCP-42866
from openshift-tests-private to openshift/hypershift.

This change creates a new e2e-aws-infra-separate workflow that:

  1. Creates AWS infrastructure (VPC, subnets, NAT, security groups, Route53) separately
  2. Creates IAM resources (roles, policies, instance profiles) separately
  3. Creates HostedCluster using pre-created infrastructure (BYOI pattern)
  4. Runs e2e tests to validate the infrastructure
  5. Cleans up all resources

This workflow leverages native hypershift CLI commands:

  • hypershift create infra aws
  • hypershift create iam aws
  • hypershift create cluster aws --infra-json --iam-json

New step-registry components:

  • hypershift-aws-create-infra: Provision AWS infrastructure
  • hypershift-aws-create-iam: Create IAM resources
  • hypershift-aws-create-cluster-byoi: Create cluster with existing infra
  • hypershift-aws-destroy-infra: Cleanup infrastructure
  • hypershift-aws-destroy-infra-separate: Cleanup chain
  • hypershift-aws-e2e-infra-separate: Complete workflow

New CI job:

  • e2e-aws-infra-separate: Tests infrastructure creation as separate step

This pattern enables validation of infrastructure provisioning independently from cluster creation, addressing the test coverage gap identified in OCPSTRAT-2317 Phase 2.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@coderabbitai

coderabbitai Bot commented Jun 5, 2026

Copy link
Copy Markdown
Contributor

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: c3889b4c-625b-4895-bc8d-51bc78f08c56

📥 Commits

Reviewing files that changed from the base of the PR and between de7bc7f and 71b7e25.

⛔ Files ignored due to path filters (1)
  • ci-operator/jobs/openshift/hypershift/openshift-hypershift-main-presubmits.yaml is excluded by !ci-operator/jobs/**
📒 Files selected for processing (23)
  • ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-ref.yaml
  • ci-operator/step-registry/hypershift/aws/create-iam/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-ref.yaml
  • ci-operator/step-registry/hypershift/aws/create-infra/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-ref.yaml
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/OWNERS
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/hypershift-aws-destroy-infra-separate-chain.metadata.json
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/hypershift-aws-destroy-infra-separate-chain.yaml
  • ci-operator/step-registry/hypershift/aws/destroy-infra/OWNERS
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-commands.sh
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-ref.yaml
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/OWNERS
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/hypershift-aws-e2e-infra-separate-workflow.metadata.json
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/hypershift-aws-e2e-infra-separate-workflow.yaml
✅ Files skipped from review due to trivial changes (7)
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-iam/OWNERS
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/hypershift-aws-e2e-infra-separate-workflow.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/hypershift-aws-destroy-infra-separate-chain.metadata.json
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-ref.metadata.json
🚧 Files skipped from review as they are similar to previous changes (12)
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-ref.yaml
  • ci-operator/step-registry/hypershift/aws/create-infra/OWNERS
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/OWNERS
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/hypershift-aws-destroy-infra-separate-chain.yaml
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/destroy-infra/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-commands.sh
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-ref.yaml
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/hypershift-aws-e2e-infra-separate-workflow.yaml
  • ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml

Walkthrough

Adds CI step-registry entries, scripts, workflow, metadata, and config to provision AWS infra and IAM separately, create a HostedCluster from those artifacts (BYOI), run HyperShift AWS e2e, and tear down infra in a separate cleanup chain.

Changes

HyperShift AWS e2e with separate infrastructure provisioning

Layer / File(s) Summary
AWS infrastructure provisioning
ci-operator/step-registry/hypershift/aws/create-infra/...
Adds hypershift-aws-create-infra step, script to run hypershift create infra aws, deterministic infra-id/cluster-name, and shared outputs ${SHARED_DIR}/aws_infra_output.json and ${SHARED_DIR}/infra-id.
AWS IAM resource creation
ci-operator/step-registry/hypershift/aws/create-iam/...
Adds hypershift-aws-create-iam step, script to validate infra output, extract Route53 zone IDs, run hypershift create iam aws, and write ${SHARED_DIR}/aws_iam_output.json.
Guest cluster provisioning with pre-created infra/IAM
ci-operator/step-registry/hypershift/aws/create-cluster-byoi/...
Adds hypershift-aws-create-cluster-byoi step and script to validate inputs, run hypershift create cluster aws with the infra/IAM artifacts, wait for HostedCluster Available and version rollout, emit nested kubeconfig and JUnit results, plus OWNERS/metadata.
Test entry and e2e workflow
ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml, ci-operator/step-registry/hypershift/aws/e2e-infra-separate/...
Registers e2e-aws-infra-separate and adds the hypershift-aws-e2e-infra-separate workflow that sequences infra → IAM → BYOI create → e2e → separate teardown.
Infrastructure and cluster teardown orchestration
ci-operator/step-registry/hypershift/aws/destroy-infra/..., .../destroy-infra-separate/...
Adds destroy commands, step refs, and a chain hypershift-aws-destroy-infra-separate to dump artifacts, destroy HostedCluster, then destroy the separately-created AWS infra and clean outputs.

Estimated code review effort:
🎯 4 (Complex) | ⏱️ ~45 minutes

  • Suggested labels:
    rehearsals-ack, ok-to-test

  • Suggested reviewers:

  • devguyio

  • bryan-cox

  • csrwng

  • jparrill


Important

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

❌ Failed checks (1 error)

Check name Status Explanation Resolution
No-Sensitive-Data-In-Logs ❌ Error Scripts cat JSON files with sensitive AWS infrastructure data: create-iam outputs IAM role ARNs; create-infra outputs VPC/subnet/security group and Route53 zone IDs. Remove cat statements from create-iam-commands.sh (line 79) and create-infra-commands.sh (line 43) that output sensitive infrastructure identifiers.
✅ Passed checks (14 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately summarizes the main change: migrating an AWS infrastructure creation test (OCP-42866) by introducing a new e2e-aws-infra-separate workflow with supporting step-registry components.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed PR adds only CI/CD infrastructure (YAML, bash scripts, metadata JSON). No Ginkgo test definitions are introduced. Test name references are static and deterministic.
Test Structure And Quality ✅ Passed PR contains no Ginkgo test code to review. Changes are CI infrastructure: YAML workflows, Bash scripts, and metadata files for HyperShift AWS infrastructure testing.
Microshift Test Compatibility ✅ Passed This PR adds only CI infrastructure (YAML, Bash scripts, configs) — no Ginkgo e2e tests. The check applies only when new tests (It(), Describe(), etc.) are added.
Single Node Openshift (Sno) Test Compatibility ✅ Passed No new Ginkgo e2e tests added—only CI/CD configuration (YAML, bash, metadata) files that orchestrate existing tests.
Topology-Aware Scheduling Compatibility ✅ Passed PR adds CI test infrastructure (step-registry YAML and bash scripts) with no deployment manifests, operator code, or scheduling constraints. The check is not applicable to CI configuration files.
Ote Binary Stdout Contract ✅ Passed PR adds only shell scripts and CI YAML configuration; no Go code or OTE binaries introduced that could violate stdout JSON contract.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed This PR adds CI infrastructure (step-registry components, workflows, shell scripts) but does not introduce any new Ginkgo e2e tests. The check is not applicable.
No-Weak-Crypto ✅ Passed No weak crypto detected. Only SHA256 (strong) used for ID generation. No MD5, SHA1, DES, RC4, 3DES, Blowfish, ECB, custom crypto, or insecure comparisons found.
Container-Privileges ✅ Passed No privileged container configurations detected. Step-registry entries lack privileged: true, hostPID/Network/IPC, SYS_ADMIN, or allowPrivilegeEscalation settings.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci openshift-ci Bot requested review from bryan-cox and devguyio June 5, 2026 15:41
@openshift-ci

openshift-ci Bot commented Jun 5, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: mehabhalodiya
Once this PR has been reviewed and has the lgtm label, please assign bryan-cox for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@mehabhalodiya

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-hypershift-main-e2e-aws-infra-separate

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@mehabhalodiya: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@mehabhalodiya mehabhalodiya changed the title OCPSTRAT-2317: Migrate OCP-42866 AWS infrastructure creation test ]CNTRLPLANE-3561: Migrate OCP-42866 AWS infrastructure creation test Jun 5, 2026
@openshift-ci-robot

openshift-ci-robot commented Jun 5, 2026

Copy link
Copy Markdown
Contributor

@mehabhalodiya: This pull request references CNTRLPLANE-3561 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the task to target the "5.0.0" version, but no target version was set.

Details

In response to this:

OCPSTRAT-2317: Migrate OCP-42866 AWS infrastructure creation test

Add step-registry components and CI job to test AWS infrastructure
creation as a separate step, supporting migration of test OCP-42866
from openshift-tests-private to openshift/hypershift.

This change creates a new e2e-aws-infra-separate workflow that:

  1. Creates AWS infrastructure (VPC, subnets, NAT, security groups, Route53) separately
  2. Creates IAM resources (roles, policies, instance profiles) separately
  3. Creates HostedCluster using pre-created infrastructure (BYOI pattern)
  4. Runs e2e tests to validate the infrastructure
  5. Cleans up all resources

This workflow leverages native hypershift CLI commands:

  • hypershift create infra aws
  • hypershift create iam aws
  • hypershift create cluster aws --infra-json --iam-json

New step-registry components:

  • hypershift-aws-create-infra: Provision AWS infrastructure
  • hypershift-aws-create-iam: Create IAM resources
  • hypershift-aws-create-cluster-byoi: Create cluster with existing infra
  • hypershift-aws-destroy-infra: Cleanup infrastructure
  • hypershift-aws-destroy-infra-separate: Cleanup chain
  • hypershift-aws-e2e-infra-separate: Complete workflow

New CI job:

  • e2e-aws-infra-separate: Tests infrastructure creation as separate step

This pattern enables validation of infrastructure provisioning independently from cluster creation, addressing the test coverage gap identified in OCPSTRAT-2317 Phase 2.

Summary by CodeRabbit

This PR introduces a new e2e test workflow for HyperShift that validates AWS infrastructure creation as a separate, independent step. It adds six new step-registry components and one new CI test job to support the BYOI (Bring Your Own Infrastructure) pattern, enabling the migration of test OCP-42866 from openshift-tests-private to the openshift/hypershift repository.

What's being added:

The changes decompose the AWS cluster provisioning process into discrete phases:

  • Infrastructure provisioning (hypershift-aws-create-infra): Creates VPC, subnets, NAT gateway, security groups, and Route53 zones independently via hypershift create infra aws
  • IAM resource creation (hypershift-aws-create-iam): Creates AWS IAM roles, policies, and instance profiles using the infrastructure output from the previous step
  • Cluster creation with pre-built infrastructure (hypershift-aws-create-cluster-byoi): Launches a HostedCluster using the previously provisioned infrastructure and IAM resources, validating the "bring your own infrastructure" pattern
  • Cleanup (hypershift-aws-destroy-infra-separate): A chain that destroys the HostedCluster, then tears down the separately-created infrastructure in proper order

A new workflow file (hypershift-aws-e2e-infra-separate-workflow.yaml) orchestrates these steps, using a 3-tier nested cluster pattern (root → ephemeral nested management → guest HostedCluster) and running e2e tests against the provisioned infrastructure.

Finally, the PR registers this workflow as a new CI test job (e2e-aws-infra-separate) in the HyperShift main repository configuration, making it available for automated testing in the OpenShift CI infrastructure.

Impact:

This enables validation of infrastructure provisioning independently from cluster creation, addressing a test coverage gap and supporting the OCPSTRAT-2317 Phase 2 objectives for infrastructure resiliency testing.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@mehabhalodiya mehabhalodiya changed the title ]CNTRLPLANE-3561: Migrate OCP-42866 AWS infrastructure creation test CNTRLPLANE-3561: Migrate OCP-42866 AWS infrastructure creation test Jun 5, 2026

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🧹 Nitpick comments (2)
ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-commands.sh (1)

3-3: ⚡ Quick win

Disable default -x in this step script.

Line 3 uses set -exuo pipefail; for step-registry scripts in this repo, default tracing should be off.

Suggested patch
-set -exuo pipefail
+set -euo pipefail

As per coding guidelines: Step-registry scripts should default to set -euo pipefail without -x (tracing) unless actively debugging; enable -x only when necessary and disable it around sensitive operations.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-commands.sh`
at line 3, The script currently enables shell tracing via the "set -exuo
pipefail" line; update this to remove the -x flag so the step defaults to "set
-euo pipefail" (disable tracing by default) and, if tracing is ever needed,
enable -x only temporarily around debugging blocks. Locate the "set -exuo
pipefail" invocation in the hypershift-aws-create-iam-commands.sh script and
change it to omit -x, keeping -euo pipefail intact to preserve strict error
handling.
ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-commands.sh (1)

3-3: ⚡ Quick win

Remove default xtrace in step-registry scripts.

Line 3 enables -x by default; this repo’s step-registry guidance expects set -euo pipefail unless actively debugging.

Suggested patch
-set -exuo pipefail
+set -euo pipefail

As per coding guidelines: Step-registry scripts should default to set -euo pipefail without -x (tracing) unless actively debugging; enable -x only when necessary and disable it around sensitive operations.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-commands.sh`
at line 3, The top-level shell options invocation currently enables xtrace;
remove the xtrace flag so the script defaults to
error/undefined-variable/pipefail behavior only. Locate the set invocation at
the top of hypershift-aws-create-infra-commands.sh that includes the -x flag and
change it to use only the e, u and pipefail options; if you need tracing for
debugging, enable xtrace temporarily during the debug session or around
non-sensitive blocks and disable it before handling secrets.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In
`@ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-commands.sh`:
- Around line 13-26: The script reads INFRA_ID and extracts PUBLIC_ZONE_ID,
PRIVATE_ZONE_ID and LOCAL_ZONE_ID without validating inputs which can produce
"null" or empty values and cause destructive IAM calls; update the logic to
first verify the infra-id file exists before assigning INFRA_ID, then validate
that PUBLIC_ZONE_ID and PRIVATE_ZONE_ID are non-empty and not "null" (and
optionally that LOCAL_ZONE_ID is either non-empty or set to an empty string) and
if any required value is missing print an explicit error and exit 1 before
proceeding to IAM creation; reference the variables INFRA_ID, INFRA_JSON,
PUBLIC_ZONE_ID, PRIVATE_ZONE_ID and LOCAL_ZONE_ID when adding the checks so the
failure occurs early and prevents building the IAM command with invalid inputs.

---

Nitpick comments:
In
`@ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-commands.sh`:
- Line 3: The script currently enables shell tracing via the "set -exuo
pipefail" line; update this to remove the -x flag so the step defaults to "set
-euo pipefail" (disable tracing by default) and, if tracing is ever needed,
enable -x only temporarily around debugging blocks. Locate the "set -exuo
pipefail" invocation in the hypershift-aws-create-iam-commands.sh script and
change it to omit -x, keeping -euo pipefail intact to preserve strict error
handling.

In
`@ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-commands.sh`:
- Line 3: The top-level shell options invocation currently enables xtrace;
remove the xtrace flag so the script defaults to
error/undefined-variable/pipefail behavior only. Locate the set invocation at
the top of hypershift-aws-create-infra-commands.sh that includes the -x flag and
change it to use only the e, u and pipefail options; if you need tracing for
debugging, enable xtrace temporarily during the debug session or around
non-sensitive blocks and disable it before handling secrets.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: d2d7163f-3ac7-4863-a0e7-db8ad8896af4

📥 Commits

Reviewing files that changed from the base of the PR and between 37eebc5 and da10b0c.

⛔ Files ignored due to path filters (1)
  • ci-operator/jobs/openshift/hypershift/openshift-hypershift-main-presubmits.yaml is excluded by !ci-operator/jobs/**
📒 Files selected for processing (11)
  • ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-ref.yaml
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-ref.yaml
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-ref.yaml
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/hypershift-aws-destroy-infra-separate-chain.yaml
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-commands.sh
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-ref.yaml
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/hypershift-aws-e2e-infra-separate-workflow.yaml

@mehabhalodiya

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-hypershift-main-e2e-aws-infra-separate

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@mehabhalodiya: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 8

🧹 Nitpick comments (1)
ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-commands.sh (1)

75-75: 💤 Low value

Check exit code directly instead of using $?.

Consider checking the timeout command's exit code directly for better readability.

♻️ Suggested refactor
-if [[ $? -ne 0 ]]; then
+if ! timeout 25m bash -c '
+  until [[ "$(oc get -n clusters hostedcluster/${CLUSTER_NAME} -o jsonpath='"'"'{.status.version.history[?(@.state!="")].state}'"'"')" = "Completed" ]]; do
+    sleep 15
+  done
+'; then
   cat << EOF > ${ARTIFACT_DIR}/junit_hosted_cluster.xml

Note: This would require restructuring to move the timeout check inline with the if statement.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-commands.sh`
at line 75, The current conditional uses the shell special variable `$?` after
running `timeout`, which reduces clarity; instead, restructure the logic to test
`timeout`'s exit status directly by running `timeout` in the `if`/`if !`
statement (e.g., `if ! timeout ...; then` or `if timeout ...; then`) so you
don't rely on `$?` afterward—locate the `timeout` invocation and the surrounding
`if [[ $? -ne 0 ]]; then` check and replace them with a direct `if` test against
the `timeout` command's result to handle the timeout/failure branch immediately.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In
`@ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-commands.sh`:
- Line 17: CLUSTER_NAME assignment uses unquoted ${SHARED_DIR} in command
substitution which can cause word splitting; update the CLUSTER_NAME assignment
(the line that sets CLUSTER_NAME) to quote the variable expansion inside the
command substitution so the cat command receives a single path (i.e., use "$(cat
"${SHARED_DIR}/cluster-name")"), ensuring any spaces or special chars in
SHARED_DIR are handled safely.
- Line 92: The redirection target uses an unquoted variable (${ARTIFACT_DIR})
which can cause word-splitting if ARTIFACT_DIR contains spaces; update the
here-doc redirection in the script (the cat << EOF line that creates
junit_hosted_cluster.xml) to quote the expansion, e.g. redirect to
"${ARTIFACT_DIR}/junit_hosted_cluster.xml" so the filename is treated as a
single token.
- Around line 61-64: The shell commands use unquoted variable expansions which
can cause word-splitting; update the oc wait invocation and the hypershift
kubeconfig command to quote expansions for CLUSTER_NAME and the output path
(e.g., use "--name=\"${CLUSTER_NAME}\"" and redirect to
"\"${SHARED_DIR}/nested_kubeconfig\"" or quote the whole argument) so oc wait
--for=condition=Available --namespace=clusters hostedcluster/${CLUSTER_NAME} and
bin/hypershift create kubeconfig --namespace=clusters --name=${CLUSTER_NAME}
>${SHARED_DIR}/nested_kubeconfig become variants that quote ${CLUSTER_NAME} and
${SHARED_DIR}/nested_kubeconfig to prevent word splitting and globbing.
- Around line 76-84: The JUnit file generation uses unquoted variable expansions
which can cause word-splitting; update the redirection and the OC command
expansions to be quoted: change the redirect target to use
"${ARTIFACT_DIR}/junit_hosted_cluster.xml" and quote the cluster name in the
embedded OC calls (hostedcluster/"${CLUSTER_NAME}" or otherwise wrap
${CLUSTER_NAME} in quotes) in the here-doc that writes junit_hosted_cluster.xml
so the ARTIFACT_DIR and CLUSTER_NAME expansions are protected from splitting;
ensure you update both occurrences of the oc get -n clusters
hostedcluster/${CLUSTER_NAME} lines.

In
`@ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-commands.sh`:
- Line 16: The CLUSTER_NAME assignment uses an unquoted expansion of PROW_JOB_ID
which can cause word splitting/globbing; update the assignment that builds
CLUSTER_NAME (the line using PROW_JOB_ID | sha256sum | cut -c-20) to quote the
variable expansion (i.e., use "$PROW_JOB_ID") so the pipeline (sha256sum and
cut) always receives the intended single argument.
- Line 8: The assignment to HC_REGION uses an unquoted fallback expansion which
can cause word splitting/globbing; update the assignment to quote the expansion
so either HC_REGION="${HYPERSHIFT_AWS_REGION:-$LEASED_RESOURCE}" or
HC_REGION=${HYPERSHIFT_AWS_REGION:-"$LEASED_RESOURCE"} (ensure the final value
is quoted) to prevent splitting, referencing the HC_REGION variable and the
HYPERSHIFT_AWS_REGION/LEASED_RESOURCE expansions.

In
`@ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-commands.sh`:
- Around line 20-21: The shell snippet reading INFRA_ID and CLUSTER_NAME uses
unquoted ${SHARED_DIR} expansions which can cause word-splitting; update the
command substitutions in the INFRA_ID and CLUSTER_NAME assignments (the lines
referencing INFRA_ID and CLUSTER_NAME) to quote the directory variable (e.g.,
use "$(cat "${SHARED_DIR}/infra-id")" and "$(cat "${SHARED_DIR}/cluster-name"
2>/dev/null || echo '')") so the path is treated as a single token and preserves
whitespace or glob characters.
- Line 7: The HC_REGION assignment uses an unquoted fallback $LEASED_RESOURCE
which can cause word splitting or globbing; update the assignment for variable
HC_REGION to quote the expansions (reference HC_REGION, HYPERSHIFT_AWS_REGION,
and LEASED_RESOURCE) so the fallback value is used as a single string and is
safe from splitting/globbing.

---

Nitpick comments:
In
`@ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-commands.sh`:
- Line 75: The current conditional uses the shell special variable `$?` after
running `timeout`, which reduces clarity; instead, restructure the logic to test
`timeout`'s exit status directly by running `timeout` in the `if`/`if !`
statement (e.g., `if ! timeout ...; then` or `if timeout ...; then`) so you
don't rely on `$?` afterward—locate the `timeout` invocation and the surrounding
`if [[ $? -ne 0 ]]; then` check and replace them with a direct `if` test against
the `timeout` command's result to handle the timeout/failure branch immediately.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 618449be-7e7e-4a77-b0dd-d3bbb4e9187e

📥 Commits

Reviewing files that changed from the base of the PR and between da10b0c and 708b776.

⛔ Files ignored due to path filters (1)
  • ci-operator/jobs/openshift/hypershift/openshift-hypershift-main-presubmits.yaml is excluded by !ci-operator/jobs/**
📒 Files selected for processing (23)
  • ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-ref.yaml
  • ci-operator/step-registry/hypershift/aws/create-iam/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-ref.yaml
  • ci-operator/step-registry/hypershift/aws/create-infra/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-ref.yaml
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/OWNERS
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/hypershift-aws-destroy-infra-separate-chain.metadata.json
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/hypershift-aws-destroy-infra-separate-chain.yaml
  • ci-operator/step-registry/hypershift/aws/destroy-infra/OWNERS
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-commands.sh
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-ref.yaml
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/OWNERS
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/hypershift-aws-e2e-infra-separate-workflow.metadata.json
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/hypershift-aws-e2e-infra-separate-workflow.yaml
✅ Files skipped from review due to trivial changes (9)
  • ci-operator/step-registry/hypershift/aws/create-iam/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-infra/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/OWNERS
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/OWNERS
  • ci-operator/step-registry/hypershift/aws/destroy-infra/OWNERS
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-ref.metadata.json
🚧 Files skipped from review as they are similar to previous changes (7)
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-ref.yaml
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/hypershift-aws-e2e-infra-separate-workflow.yaml
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/hypershift-aws-destroy-infra-separate-chain.yaml
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-ref.yaml
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-ref.yaml
  • ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-commands.sh

@mehabhalodiya mehabhalodiya force-pushed the migrate_OCP42866 branch 2 times, most recently from 8db8524 to de7bc7f Compare June 8, 2026 13:07
@mehabhalodiya

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-hypershift-main-e2e-aws-infra-separate

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@mehabhalodiya: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@mehabhalodiya

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-hypershift-main-e2e-aws-infra-separate

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@mehabhalodiya: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In
`@ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-commands.sh`:
- Line 3: The script enables tracing with "set -exuo pipefail" but must
temporarily disable tracing around sensitive operations: wrap the kubeconfig
creation block (the command(s) that write or export kubeconfig) with "set +x"
before and "set -x" after, and do the same around the cluster condition
fetch/print commands (the commands that query cluster conditions/URLs and print
them); ensure you only disable tracing for the minimal command sequences and
restore "set -x" immediately afterward so tracing remains enabled elsewhere.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: ee5e52be-fda2-4c19-9a02-aebb5ba083cf

📥 Commits

Reviewing files that changed from the base of the PR and between 8db8524 and de7bc7f.

⛔ Files ignored due to path filters (1)
  • ci-operator/jobs/openshift/hypershift/openshift-hypershift-main-presubmits.yaml is excluded by !ci-operator/jobs/**
📒 Files selected for processing (23)
  • ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-ref.yaml
  • ci-operator/step-registry/hypershift/aws/create-iam/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-ref.yaml
  • ci-operator/step-registry/hypershift/aws/create-infra/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-commands.sh
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-ref.yaml
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/OWNERS
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/hypershift-aws-destroy-infra-separate-chain.metadata.json
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/hypershift-aws-destroy-infra-separate-chain.yaml
  • ci-operator/step-registry/hypershift/aws/destroy-infra/OWNERS
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-commands.sh
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-ref.yaml
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/OWNERS
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/hypershift-aws-e2e-infra-separate-workflow.metadata.json
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/hypershift-aws-e2e-infra-separate-workflow.yaml
✅ Files skipped from review due to trivial changes (10)
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-infra/OWNERS
  • ci-operator/step-registry/hypershift/aws/create-iam/OWNERS
  • ci-operator/step-registry/hypershift/aws/destroy-infra/OWNERS
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/OWNERS
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/hypershift-aws-e2e-infra-separate-workflow.metadata.json
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-ref.metadata.json
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/hypershift-aws-destroy-infra-separate-chain.metadata.json
🚧 Files skipped from review as they are similar to previous changes (11)
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-ref.yaml
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/OWNERS
  • ci-operator/step-registry/hypershift/aws/e2e-infra-separate/hypershift-aws-e2e-infra-separate-workflow.yaml
  • ci-operator/config/openshift/hypershift/openshift-hypershift-main.yaml
  • ci-operator/step-registry/hypershift/aws/create-cluster-byoi/hypershift-aws-create-cluster-byoi-ref.yaml
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-ref.yaml
  • ci-operator/step-registry/hypershift/aws/create-infra/hypershift-aws-create-infra-commands.sh
  • ci-operator/step-registry/hypershift/aws/destroy-infra-separate/hypershift-aws-destroy-infra-separate-chain.yaml
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-commands.sh
  • ci-operator/step-registry/hypershift/aws/destroy-infra/hypershift-aws-destroy-infra-ref.yaml
  • ci-operator/step-registry/hypershift/aws/create-iam/hypershift-aws-create-iam-commands.sh

@mehabhalodiya

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-hypershift-main-e2e-aws-infra-separate

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@mehabhalodiya: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

Add step-registry components and CI job to test AWS infrastructure
creation as a separate step, supporting migration of test OCP-42866
from openshift-tests-private to openshift/hypershift.

Signed-off-by: mehabhalodiya <mehabhalodiya@gmail.com>
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

[REHEARSALNOTIFIER]
@mehabhalodiya: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-openshift-hypershift-main-e2e-aws-infra-separate openshift/hypershift presubmit Presubmit changed
Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@mehabhalodiya

Copy link
Copy Markdown
Contributor Author

/pj-rehearse pull-ci-openshift-hypershift-main-e2e-aws-infra-separate

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@mehabhalodiya: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-ci

openshift-ci Bot commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

@mehabhalodiya: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

jira/valid-reference Indicates that this PR references a valid Jira ticket of any type.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants