medik8s: centralize workload image and mirror for disconnected - #82523
Merged
openshift-merge-bot[bot] merged 1 commit intoJul 28, 2026
Merged
Conversation
openshift-ci
Bot
added
the
approved
Contributor
WalkthroughThe medik8s test setup shares a centralized workload image, exports it in test jobs, mirrors it for disconnected environments, and applies an ImageTagMirrorSet for cluster pulls. ChangesMedik8s workload image flow
Estimated code review effort: 2 (Simple) | ~10 minutes Suggested labels: Suggested reviewers: Sequence Diagram(s)sequenceDiagram
participant medik8s-lib.sh
participant SHARED_DIR
participant TestJob
participant oc-mirror
participant Cluster
medik8s-lib.sh->>SHARED_DIR: Write workload_image
TestJob->>SHARED_DIR: Read workload_image
TestJob->>oc-mirror: Add WORKLOAD_IMAGE to mirror configuration
oc-mirror->>Cluster: Apply generated mirror mappings
Cluster->>Cluster: Apply medik8s-workload-image ImageTagMirrorSet
🚥 Pre-merge checks | ✅ 15✅ Passed checks (15 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
ugreener
force-pushed
the
fix/mirror-ubi-for-disconnected-tests
branch
3 times, most recently
from
July 28, 2026 06:06
1056293 to
e151a5f
Compare
ugreener
changed the title
ugreener
force-pushed
the
fix/mirror-ubi-for-disconnected-tests
branch
from
July 28, 2026 06:30
e151a5f to
5634855
Compare
ugreener
changed the title
The medik8s E2E destructive tests create workload pods using registry.access.redhat.com/ubi9/ubi-minimal to verify pod eviction after node remediation. On disconnected clusters this registry is unreachable. Changes: - medik8s-lib: write workload image to SHARED_DIR/workload_image (single source of truth for all environments) - Connected config (4.22-konflux): export WORKLOAD_IMAGE from SHARED_DIR in all 14 e2e-test steps; add medik8s-lib ref to SBR-EFS job that was using individual steps instead of the medik8s-setup chain - Disconnected config (4.22-disconnected): export WORKLOAD_IMAGE from SHARED_DIR in both e2e-test steps (already present) - Disconnected catalogsource step: add additionalImages for ubi-minimal in oc-mirror config; create ImageTagMirrorSet so CRI-O redirects pulls to the bastion mirror (kueue-operator pattern) To change the workload image: edit ONE line in medik8s-lib-commands.sh and (for disconnected) the additionalImages entry. Both are in this repo, same PR. Companion PR: medik8s/system-tests#60 Co-Authored-By: Claude <noreply@anthropic.com>
ugreener
force-pushed
the
fix/mirror-ubi-for-disconnected-tests
branch
from
July 28, 2026 06:43
5634855 to
ceaaca4
Compare
Contributor
|
[REHEARSALNOTIFIER]
Interacting with pj-rehearseComment: Once you are satisfied with the results of the rehearsals, comment: |
Contributor
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: razo7, ugreener The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
ugreener
changed the title
Contributor
Author
|
/pj-rehearse ack |
Contributor
|
@ugreener: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
openshift-merge-bot
Bot
added
the
rehearsals-ack
openshift-merge-bot
Bot
merged commit Jul 28, 2026
6be15ef
into
openshift:main
2 of 16 checks passed
mrniranjan
pushed a commit
to mrniranjan/release
that referenced
this pull request
Jul 28, 2026
…shift#82523) The medik8s E2E destructive tests create workload pods using registry.access.redhat.com/ubi9/ubi-minimal to verify pod eviction after node remediation. On disconnected clusters this registry is unreachable. Changes: - medik8s-lib: write workload image to SHARED_DIR/workload_image (single source of truth for all environments) - Connected config (4.22-konflux): export WORKLOAD_IMAGE from SHARED_DIR in all 14 e2e-test steps; add medik8s-lib ref to SBR-EFS job that was using individual steps instead of the medik8s-setup chain - Disconnected config (4.22-disconnected): export WORKLOAD_IMAGE from SHARED_DIR in both e2e-test steps (already present) - Disconnected catalogsource step: add additionalImages for ubi-minimal in oc-mirror config; create ImageTagMirrorSet so CRI-O redirects pulls to the bastion mirror (kueue-operator pattern) To change the workload image: edit ONE line in medik8s-lib-commands.sh and (for disconnected) the additionalImages entry. Both are in this repo, same PR. Companion PR: medik8s/system-tests#60 Co-authored-by: Claude <noreply@anthropic.com>
enxebre
pushed a commit
to enxebre/release
that referenced
this pull request
Jul 29, 2026
…shift#82523) The medik8s E2E destructive tests create workload pods using registry.access.redhat.com/ubi9/ubi-minimal to verify pod eviction after node remediation. On disconnected clusters this registry is unreachable. Changes: - medik8s-lib: write workload image to SHARED_DIR/workload_image (single source of truth for all environments) - Connected config (4.22-konflux): export WORKLOAD_IMAGE from SHARED_DIR in all 14 e2e-test steps; add medik8s-lib ref to SBR-EFS job that was using individual steps instead of the medik8s-setup chain - Disconnected config (4.22-disconnected): export WORKLOAD_IMAGE from SHARED_DIR in both e2e-test steps (already present) - Disconnected catalogsource step: add additionalImages for ubi-minimal in oc-mirror config; create ImageTagMirrorSet so CRI-O redirects pulls to the bastion mirror (kueue-operator pattern) To change the workload image: edit ONE line in medik8s-lib-commands.sh and (for disconnected) the additionalImages entry. Both are in this repo, same PR. Companion PR: medik8s/system-tests#60 Co-authored-by: Claude <noreply@anthropic.com>
amogh-redhat
pushed a commit
to amogh-redhat/release
that referenced
this pull request
Aug 5, 2026
![openshift-prow[bot]](https://github.githubassets.com/images/gravatars/gravatar-user-420.png){kind=avatar}
…shift#82523) The medik8s E2E destructive tests create workload pods using registry.access.redhat.com/ubi9/ubi-minimal to verify pod eviction after node remediation. On disconnected clusters this registry is unreachable. Changes: - medik8s-lib: write workload image to SHARED_DIR/workload_image (single source of truth for all environments) - Connected config (4.22-konflux): export WORKLOAD_IMAGE from SHARED_DIR in all 14 e2e-test steps; add medik8s-lib ref to SBR-EFS job that was using individual steps instead of the medik8s-setup chain - Disconnected config (4.22-disconnected): export WORKLOAD_IMAGE from SHARED_DIR in both e2e-test steps (already present) - Disconnected catalogsource step: add additionalImages for ubi-minimal in oc-mirror config; create ImageTagMirrorSet so CRI-O redirects pulls to the bastion mirror (kueue-operator pattern) To change the workload image: edit ONE line in medik8s-lib-commands.sh and (for disconnected) the additionalImages entry. Both are in this repo, same PR. Companion PR: medik8s/system-tests#60 Co-authored-by: Claude <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Centralize the workload image used by medik8s E2E destructive tests into a single source of truth (
medik8s-libstep), and mirror it for disconnected clusters. This fixes disconnected FAR CI failures whereopenshift/tools:latestwas unavailable (Cluster Samples Operator is Removed on air-gapped clusters).Changes
registry.access.redhat.com/ubi9/ubi-minimal:latesttoSHARED_DIR/workload_image(single source of truth for all environments)4.22-konflux.yaml): All 14 e2e-test steps exportWORKLOAD_IMAGEfrom the SHARED_DIR file; addmedik8s-libref to SBR-EFS weekly job (was missing it)4.22-disconnected.yaml): Both e2e-test steps exportWORKLOAD_IMAGEfrom the SHARED_DIR fileadditionalImagesforubi9/ubi-minimalto oc-mirror config; create explicitImageTagMirrorSetso CRI-O redirects pulls to the bastion mirror (follows the kueue-operator pattern)To change the workload image in the future: edit ONE line in
medik8s-lib-commands.shand theadditionalImagesentry in the disconnected catalogsource step. Both in this repo, one PR.Companion PR: medik8s/system-tests#60