feat(quay): add e2e Playwright job with OIDC, LDAP, and Mailpit

ci-operator/config/quay/quay/quay-quay-master.yaml

@@ -10,23 +10,15 @@ build_root:
     tag: rhel-9-release-golang-1.23-openshift-4.18
 images:
   items:
-  - dockerfile_path: Dockerfile
-    to: quay-server
   - dockerfile_literal: |
-      FROM src
-      RUN dnf module enable -y nodejs:20 && \
-          dnf install -y nodejs \
-          alsa-lib atk at-spi2-atk cups-libs libdrm libXcomposite \
-          libXdamage libXrandr mesa-libgbm pango nss nss-util nspr \
-          libxkbcommon libXfixes libXcursor libXext libXi libXtst \
-          libwayland-client && \
-          dnf clean all
-      WORKDIR /go/src/github.com/quay/quay/web
-      RUN npm ci
-      ENV PLAYWRIGHT_BROWSERS_PATH=/opt/playwright
-      RUN npx playwright install chromium
-    from: src
-    to: quay-playwright-runner
+      FROM registry.access.redhat.com/ubi9/nodejs-22:latest
+      USER root
+      RUN dnf install -y --setopt=install_weak_deps=0 --nodocs \
+          nss nspr atk at-spi2-atk at-spi2-core alsa-lib cups-libs \
+          libdrm libxcb libxkbcommon libX11 libXcomposite libXdamage \
+          libXext libXfixes libXrandr mesa-libgbm pango cairo git \
+        && dnf clean all
+    to: playwright-base
 releases:
   latest:
     candidate:
@@ -43,30 +35,35 @@ resources:
       memory: 200Mi
 tests:
 - always_run: false
-  as: playwright-e2e
+  as: e2e
   steps:
     cluster_profile: aws-quay-qe
-    dependencies:
-      QUAY_CI_IMAGE: pipeline:quay-server
     env:
       BASE_DOMAIN: quayqe.devcluster.openshift.com
       COMPUTE_NODE_TYPE: m5.2xlarge
       QUAY_EXTRA_CONFIG: |
         FEATURE_REPO_MIRROR: true
         FEATURE_USER_METADATA: true
         FEATURE_IMMUTABLE_TAGS: true
+        FEATURE_MAILING: true
+        MAIL_SERVER: mailpit.quay-enterprise.svc
+        MAIL_PORT: 1025
+        MAIL_USE_TLS: false
+        MAIL_USE_AUTH: false
+        MAIL_DEFAULT_SENDER: noreply@quay.io
         SUPER_USERS:
           - admin
         GLOBAL_READONLY_SUPER_USERS:
           - readonly
-      QUAY_OPERATOR_CHANNEL: stable-3.16
+      QUAY_OPERATOR_CHANNEL: stable-3.17
       QUAY_OPERATOR_SOURCE: redhat-operators
     test:
+    - ref: quay-deploy-test-services
+    - ref: quay-tests-enable-quay-catalogsource
     - ref: quay-tests-deploy-quay-aws-s3
-    - ref: quay-tests-deploy-quay-custom-image
-    - ref: quay-tests-test-quay-playwright
+    - ref: quay-test-playwright
     workflow: cucushift-installer-rehearse-aws-ipi
-  timeout: 4h0m0s
+  timeout: 5h0m0s
 zz_generated_metadata:
   branch: master
   org: quay

ci-operator/jobs/quay/quay/quay-quay-master-presubmits.yaml

@@ -1,38 +1,56 @@
 presubmits:
   quay/quay:
   - agent: kubernetes
-    always_run: true
+    always_run: false
     branches:
     - ^master$
     - ^master-
-    cluster: build03
-    context: ci/prow/images
+    cluster: build01
+    context: ci/prow/e2e
     decorate: true
     decoration_config:
-      sparse_checkout_files:
-      - Dockerfile
+      skip_cloning: true
+      timeout: 5h0m0s
     labels:
+      ci-operator.openshift.io/cloud: aws
+      ci-operator.openshift.io/cloud-cluster-profile: aws-quay-qe
       ci.openshift.io/generator: prowgen
       job-release: "4.18"
       pj-rehearse.openshift.io/can-be-rehearsed: "true"
-    name: pull-ci-quay-quay-master-images
-    rerun_command: /test images
+    name: pull-ci-quay-quay-master-e2e
+    rerun_command: /test e2e
     spec:
       containers:
       - args:
         - --gcs-upload-secret=/secrets/gcs/service-account.json
         - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --lease-server-credentials-file=/etc/boskos/credentials
         - --report-credentials-file=/etc/report/credentials
-        - --target=[images]
+        - --secret-dir=/secrets/ci-pull-credentials
+        - --target=e2e
         command:
         - ci-operator
+        env:
+        - name: HTTP_SERVER_IP
+          valueFrom:
+            fieldRef:
+              fieldPath: status.podIP
         image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
         imagePullPolicy: Always
         name: ""
+        ports:
+        - containerPort: 8080
+          name: http
         resources:
           requests:
             cpu: 10m
         volumeMounts:
+        - mountPath: /etc/boskos
+          name: boskos
+          readOnly: true
+        - mountPath: /secrets/ci-pull-credentials
+          name: ci-pull-credentials
+          readOnly: true
         - mountPath: /secrets/gcs
           name: gcs-credentials
           readOnly: true
@@ -47,6 +65,15 @@ presubmits:
           readOnly: true
       serviceAccountName: ci-operator
       volumes:
+      - name: boskos
+        secret:
+          items:
+          - key: credentials
+            path: credentials
+          secretName: boskos-credentials
+      - name: ci-pull-credentials
+        secret:
+          secretName: ci-pull-credentials
       - name: manifest-tool-local-pusher
         secret:
           secretName: manifest-tool-local-pusher
@@ -56,59 +83,39 @@ presubmits:
       - name: result-aggregator
         secret:
           secretName: result-aggregator
-    trigger: (?m)^/test( | .* )images,?($|\s.*)
+    trigger: (?m)^/test( | .* )(e2e|remaining-required),?($|\s.*)
   - agent: kubernetes
-    always_run: false
+    always_run: true
     branches:
     - ^master$
     - ^master-
-    cluster: build01
-    context: ci/prow/playwright-e2e
+    cluster: build03
+    context: ci/prow/images
     decorate: true
     decoration_config:
-      sparse_checkout_files:
-      - Dockerfile
-      timeout: 4h0m0s
+      skip_cloning: true
     labels:
-      ci-operator.openshift.io/cloud: aws
-      ci-operator.openshift.io/cloud-cluster-profile: aws-quay-qe
       ci.openshift.io/generator: prowgen
       job-release: "4.18"
       pj-rehearse.openshift.io/can-be-rehearsed: "true"
-    name: pull-ci-quay-quay-master-playwright-e2e
-    rerun_command: /test playwright-e2e
+    name: pull-ci-quay-quay-master-images
+    rerun_command: /test images
     spec:
       containers:
       - args:
         - --gcs-upload-secret=/secrets/gcs/service-account.json
         - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
-        - --lease-server-credentials-file=/etc/boskos/credentials
         - --report-credentials-file=/etc/report/credentials
-        - --secret-dir=/secrets/ci-pull-credentials
-        - --target=playwright-e2e
+        - --target=[images]
         command:
         - ci-operator
-        env:
-        - name: HTTP_SERVER_IP
-          valueFrom:
-            fieldRef:
-              fieldPath: status.podIP
         image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
         imagePullPolicy: Always
         name: ""
-        ports:
-        - containerPort: 8080
-          name: http
         resources:
           requests:
             cpu: 10m
         volumeMounts:
-        - mountPath: /etc/boskos
-          name: boskos
-          readOnly: true
-        - mountPath: /secrets/ci-pull-credentials
-          name: ci-pull-credentials
-          readOnly: true
         - mountPath: /secrets/gcs
           name: gcs-credentials
           readOnly: true
@@ -123,15 +130,6 @@ presubmits:
           readOnly: true
       serviceAccountName: ci-operator
       volumes:
-      - name: boskos
-        secret:
-          items:
-          - key: credentials
-            path: credentials
-          secretName: boskos-credentials
-      - name: ci-pull-credentials
-        secret:
-          secretName: ci-pull-credentials
       - name: manifest-tool-local-pusher
         secret:
           secretName: manifest-tool-local-pusher
@@ -141,4 +139,4 @@ presubmits:
       - name: result-aggregator
         secret:
           secretName: result-aggregator
-    trigger: (?m)^/test( | .* )(playwright-e2e|remaining-required),?($|\s.*)
+    trigger: (?m)^/test( | .* )images,?($|\s.*)