Skip to content

[TEST/WIP] Add Y-stream skew periodic job for HyperShift 5.0 Azure AKS#80800

Open
weliang1 wants to merge 1 commit into
openshift:mainfrom
weliang1:add-y-stream-skew-job
Open

[TEST/WIP] Add Y-stream skew periodic job for HyperShift 5.0 Azure AKS#80800
weliang1 wants to merge 1 commit into
openshift:mainfrom
weliang1:add-y-stream-skew-job

Conversation

@weliang1

@weliang1 weliang1 commented Jun 19, 2026

Copy link
Copy Markdown
Contributor

⚠️ TEST PR - FOR /pj-rehearse TESTING ONLY

This PR adds periodic job configuration for testing Y-stream version skew in HyperShift 5.0 on Azure AKS.

Purpose: Test the job configuration using /pj-rehearse before merging.

Job Configuration

Job name: periodic-ci-openshift-hypershift-release-5.0-periodics-hcm-azure-e2e-aks-y-stream-skew
Test: e2e-aks-y-stream-skew
Schedule: Daily at 1:00 PM UTC (cron: 0 13 * * *)
Platform: Azure AKS
Workflow: hypershift-azure-aks-e2e
Cluster profile: hypershift-aks

What This Job Tests

  1. Creates cluster at 4.22 on Azure AKS
  2. Upgrades control plane to 5.0
  3. Upgrades only 1 NodePool to 5.0
  4. Leaves other NodePools at 4.22
  5. Validates cluster functionality with Y-stream skew (N-1 version support)

Files Modified

  • ci-operator/config/openshift/hypershift/openshift-hypershift-release-5.0__periodics-hcm-azure.yaml

    • Added test configuration: e2e-aks-y-stream-skew
    • Dependencies: OCP_IMAGE_PREVIOUS (4.22), OCP_IMAGE_LATEST (5.0)
    • Environment: Azure AKS with certificate-based auth
  • ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-5.0-periodics.yaml

    • Added periodic job definition
    • TESTING: Points to weliang1:weliang/add-y-stream-skew-test branch
    • TODO: Update to openshift:release-5.0 after testing

Testing Plan

  1. ✅ PR created in openshift/release
  2. ⏳ Use /pj-rehearse periodic-ci-openshift-hypershift-release-5.0-periodics-hcm-azure-e2e-aks-y-stream-skew
  3. ⏳ Verify test runs successfully on Azure AKS
  4. ⏳ Update extra_refs to point to openshift:release-5.0
  5. ⏳ Merge hypershift PR Remove knative-build #8786
  6. ⏳ Update this PR and merge

Dependencies

Hypershift PR: openshift/hypershift#8786

  • Contains the test implementation (test/e2e/y_stream_skew_test.go)
  • Branch: weliang1:weliang/add-y-stream-skew-test

Based On

Template job: periodic-ci-openshift-hypershift-release-5.0-periodics-hcm-azure-e2e-aks-upgrade-minor

Key differences:

  • Test: e2e-aks-upgrade-minore2e-aks-y-stream-skew
  • Behavior: Full upgrade → Partial upgrade with Y-stream skew
  • Schedule: 11:00 AM → 1:00 PM (avoid resource contention)

How to Test

Use /pj-rehearse to run the job:

/pj-rehearse periodic-ci-openshift-hypershift-release-5.0-periodics-hcm-azure-e2e-aks-y-stream-skew

This will:

  • Run the test on real Azure AKS infrastructure
  • Use the code from hypershift PR Remove knative-build #8786
  • Validate the full E2E workflow

Note: This is a TEST PR. After /pj-rehearse succeeds, will update to production config.

Summary by CodeRabbit

This PR adds a new periodic CI job for HyperShift 5.0 that validates Y-stream version skew between control plane and worker nodes on Azure AKS.

Changes:

The PR modifies two files in the OpenShift release repository's HyperShift configuration:

  1. ci-operator/config/openshift/hypershift/openshift-hypershift-release-5.0__periodics-hcm-azure.yaml - Added a new test definition:

    • Test name: e2e-aks-y-stream-skew
    • Schedule: Daily at 1:00 PM UTC (0 13 * * *)
    • Uses the hypershift-azure-aks-e2e workflow on the hypershift-aks cluster profile
    • Configures certificate-based authentication (AUTH_THROUGH_CERTS: "true")
    • Sets test execution to the TestYStreamSkew test case
    • Specifies Azure region as centralus
    • Depends on two OpenShift releases: OCP_IMAGE_PREVIOUS (4.22) and OCP_IMAGE_LATEST (5.0)
  2. ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-5.0-periodics.yaml - Generated Prow job definition for the new test with the name periodic-ci-openshift-hypershift-release-5.0-periodics-hcm-azure-e2e-aks-y-stream-skew

Purpose:

The test validates that HyperShift's control plane at version 5.0 can successfully manage NodePools running version 4.22, ensuring N-1 version compatibility and cluster stability across version boundaries.

Testing Status:

This is a TEST PR using the weliang1:weliang/add-y-stream-skew-test branch (unmerged hypershift PR #8786) and is designated for validation with /pj-rehearse before production deployment. After successful testing, the configuration will be updated to point to the official openshift:release-5.0 branch.

This is a TEST PR to validate the Y-stream skew test implementation
using /pj-rehearse.

Adds new periodic CI job to test Y-stream version skew between
HyperShift control plane and data plane (NodePools).

Job configuration:
- Test: e2e-aks-y-stream-skew
- Schedule: Daily at 1:00 PM UTC
- Platform: Azure AKS
- Versions: 4.22 → 5.0 (control plane + 1 NodePool)

The test validates that HyperShift control plane can operate at 5.0
while managing NodePools at 4.22, supporting N-1 version skew.

**Testing Configuration:**
- Points to unmerged branch: weliang1:weliang/add-y-stream-skew-test
- After testing, will update to: openshift:release-5.0

Depends on: openshift/hypershift#8786

Signed-off-by: weliang1 <weliang@redhat.com>
@coderabbitai

coderabbitai Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: fce3fd75-b02d-41d3-a65d-8e622c8189ec

📥 Commits

Reviewing files that changed from the base of the PR and between 3736154 and e86e467.

⛔ Files ignored due to path filters (1)
  • ci-operator/jobs/openshift/hypershift/openshift-hypershift-release-5.0-periodics.yaml is excluded by !ci-operator/jobs/**
📒 Files selected for processing (1)
  • ci-operator/config/openshift/hypershift/openshift-hypershift-release-5.0__periodics-hcm-azure.yaml

Walkthrough

A new periodic e2e job e2e-aks-y-stream-skew is added to the HyperShift release-5.0 Azure periodics config. It runs daily at 13:00 UTC using the hypershift-azure-aks-e2e workflow, depends on release:latest and release:initial-minor, and targets the ^TestYStreamSkew$ test in the centralus region with certificate-based auth.

Changes

AKS Y-stream Skew Periodic Job

Layer / File(s) Summary
New e2e-aks-y-stream-skew periodic entry
ci-operator/config/openshift/hypershift/openshift-hypershift-release-5.0__periodics-hcm-azure.yaml
Adds a daily periodic job entry with cron 0 13 * * *, the hypershift-azure-aks-e2e workflow, hypershift-aks cluster profile, AUTH_THROUGH_CERTS: "true", OCP_IMAGE_LATEST/OCP_IMAGE_PREVIOUS release dependencies, and CI_TESTS_RUN: ^TestYStreamSkew$ targeting centralus.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 15
✅ Passed checks (15 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: adding a new Y-stream skew periodic job for HyperShift 5.0 on Azure AKS, which is clearly reflected in the configuration additions.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed This PR modifies only YAML CI/CD configuration files (openshift-hypershift-release-5.0__periodics-hcm-azure.yaml). It contains no Ginkgo test code. The actual test implementation exists in hypershi...
Test Structure And Quality ✅ Passed PR contains only CI/CD configuration YAML and infrastructure files, no Ginkgo test code to review. Check is not applicable to this PR.
Microshift Test Compatibility ✅ Passed This PR adds only CI configuration (YAML files), not new Ginkgo e2e tests. The check applies to "new Ginkgo e2e tests" but this PR contains no Go test code or test definitions.
Single Node Openshift (Sno) Test Compatibility ✅ Passed This PR contains only CI/CD configuration (YAML), not new Ginkgo test code. The actual test (TestYStreamSkew) is in the openshift/hypershift repo and not subject to this check scope.
Topology-Aware Scheduling Compatibility ✅ Passed PR adds only CI job configuration files (ci-operator config and Prow job definitions) with no deployment manifests, operator code, or pod scheduling constraints. Check does not apply.
Ote Binary Stdout Contract ✅ Passed PR modifies only CI configuration YAML files in openshift/release; test implementation code is in separate openshift/hypershift repo. No executable code or stdout writes present.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed No new Ginkgo e2e test code files are added in this PR. This is a CI configuration-only PR in openshift/release. Actual test implementation (TestYStreamSkew) is in separate hypershift PR #8786.
No-Weak-Crypto ✅ Passed PR only adds YAML CI job configurations with no cryptographic implementations, weak algorithms, custom crypto, or insecure secret comparisons detected.
Container-Privileges ✅ Passed The modified files are CI configuration files (ci-operator config and Prowjobs definitions), not Kubernetes Pod/Deployment manifests. They contain no container security settings like privileged: tr...
No-Sensitive-Data-In-Logs ✅ Passed No sensitive data (passwords, tokens, API keys, PII, etc.) found embedded in configuration. All credentials handled via secure Kubernetes secret mounts and mount paths, not literal values.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci

openshift-ci Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: weliang1
Once this PR has been reviewed and has the lgtm label, please assign devguyio for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot requested review from bryan-cox and sdminonne June 19, 2026 18:51
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

[REHEARSALNOTIFIER]
@weliang1: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
periodic-ci-openshift-hypershift-release-5.0-periodics-hcm-azure-e2e-aks-y-stream-skew N/A periodic Periodic changed

Prior to this PR being merged, you will need to either run and acknowledge or opt to skip these rehearsals.

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@weliang1: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-ci

openshift-ci Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor

@weliang1: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/generated-config e86e467 link true /test generated-config

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

@weliang1, pj-rehearse: unable to set up jobs ERROR:

ci-operator config file weliang1-hypershift-weliang/add-y-stream-skew-test__periodics-hcm-azure.yaml was not found

If the problem persists, please contact Test Platform.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant