Add bpfman and bpfman-operator to openshift-ci (#57708)

Signed-off-by: Mohamed Mahmoud <[email protected]>

ci-operator/config/openshift/bpfman-operator/OWNERS

@@ -0,0 +1,19 @@
+# DO NOT EDIT; this file is auto-generated using https://github.com/openshift/ci-tools.
+# Fetched from https://github.com/openshift/bpfman-operator root OWNERS
+# If the repo had OWNERS_ALIASES then the aliases were expanded
+# Logins who are not members of 'openshift' organization were filtered out
+# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md
+
+approvers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
+options: {}
+reviewers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234

ci-operator/config/openshift/bpfman-operator/openshift-bpfman-operator-main.yaml

@@ -0,0 +1,93 @@
+base_images:
+  bpfman:
+    name: "4.18"
+    namespace: ocp
+    tag: bpfman
+  kube-rbac-proxy:
+    name: "4.18"
+    namespace: ocp
+    tag: kube-rbac-proxy
+  ocp_builder_rhel-9-base-openshift-4.18:
+    name: builder
+    namespace: ocp
+    tag: rhel-9-base-openshift-4.18
+  ocp_builder_rhel-9-golang-1.22-openshift-4.18:
+    name: builder
+    namespace: ocp
+    tag: rhel-9-golang-1.22-openshift-4.18
+  operator-sdk:
+    name: "4.18"
+    namespace: origin
+    tag: operator-sdk
+build_root:
+  from_repository: true
+images:
+- dockerfile_path: Containerfile.bpfman-operator.openshift
+  inputs:
+    ocp_builder_rhel-9-base-openshift-4.18:
+      as:
+      - registry.ci.openshift.org/ocp/builder:rhel-9-base-openshift-4.18
+    ocp_builder_rhel-9-golang-1.22-openshift-4.18:
+      as:
+      - registry.ci.openshift.org/ocp/builder:rhel-9-golang-1.22-openshift-4.18
+  to: bpfman-operator
+- dockerfile_path: Containerfile.bpfman-agent.openshift
+  inputs:
+    ocp_builder_rhel-9-base-openshift-4.18:
+      as:
+      - registry.ci.openshift.org/ocp/builder:rhel-9-base-openshift-4.18
+    ocp_builder_rhel-9-golang-1.22-openshift-4.18:
+      as:
+      - registry.ci.openshift.org/ocp/builder:rhel-9-golang-1.22-openshift-4.18
+  to: bpfman-agent
+- dockerfile_path: Containerfile.bundle.openshift
+  to: bpfman-operator-bundle
+operator:
+  bundles:
+  - as: operatorbundle
+    dockerfile_path: Containerfile.bundle.openshift
+    skip_building_index: true
+  substitutions:
+  - pullspec: quay.io/openshift/origin-bpfman:4.18
+    with: pipeline:bpfman
+  - pullspec: quay.io/openshift/origin-bpfman-operator:4.18
+    with: pipeline:bpfman-operator
+  - pullspec: quay.io/openshift/origin-bpfman-agent:4.18
+    with: pipeline:bpfman-agent
+  - pullspec: quay.io/openshift/origin-kube-rbac-proxy:4.17
+    with: pipeline:kube-rbac-proxy
+promotion:
+  to:
+  - name: bpfman-4.18
+    namespace: origin
+  - name: "4.18"
+    namespace: ocp
+releases:
+  initial:
+    integration:
+      name: "4.18"
+      namespace: ocp
+  latest:
+    integration:
+      include_built_images: true
+      name: "4.18"
+      namespace: ocp
+resources:
+  '*':
+    limits:
+      memory: 4Gi
+    requests:
+      cpu: 100m
+      memory: 200Mi
+tests:
+- as: security
+  optional: true
+  steps:
+    env:
+      PROJECT_NAME: bpfman-operator
+      SNYK_CODE_ADDITIONAL_ARGS: --severity-threshold=high --policy-path=.snyk
+    workflow: openshift-ci-security
+zz_generated_metadata:
+  branch: main
+  org: openshift
+  repo: bpfman-operator

ci-operator/config/openshift/bpfman/OWNERS

@@ -0,0 +1,19 @@
+# DO NOT EDIT; this file is auto-generated using https://github.com/openshift/ci-tools.
+# Fetched from https://github.com/openshift/bpfman root OWNERS
+# If the repo had OWNERS_ALIASES then the aliases were expanded
+# Logins who are not members of 'openshift' organization were filtered out
+# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md
+
+approvers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
+options: {}
+reviewers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234

ci-operator/config/openshift/bpfman/openshift-bpfman-main.yaml

@@ -0,0 +1,49 @@
+base_images:
+  ocp_builder_rhel-9-base-openshift-4.18:
+    name: builder
+    namespace: ocp
+    tag: rhel-9-base-openshift-4.18
+build_root:
+  from_repository: true
+images:
+- dockerfile_path: Containerfile.bpfman.openshift
+  inputs:
+    ocp_builder_rhel-9-base-openshift-4.18:
+      as:
+      - registry.ci.openshift.org/ocp/builder:rhel-9-base-openshift-4.18
+  to: bpfman
+promotion:
+  to:
+  - name: bpfman-4.18
+    namespace: origin
+  - name: "4.18"
+    namespace: ocp
+releases:
+  initial:
+    integration:
+      name: "4.18"
+      namespace: ocp
+  latest:
+    integration:
+      include_built_images: true
+      name: "4.18"
+      namespace: ocp
+resources:
+  '*':
+    limits:
+      memory: 4Gi
+    requests:
+      cpu: 100m
+      memory: 200Mi
+tests:
+- as: security
+  optional: true
+  steps:
+    env:
+      PROJECT_NAME: bpfman
+      SNYK_CODE_ADDITIONAL_ARGS: --severity-threshold=high --policy-path=.snyk
+    workflow: openshift-ci-security
+zz_generated_metadata:
+  branch: main
+  org: openshift
+  repo: bpfman

ci-operator/jobs/openshift/bpfman-operator/OWNERS

@@ -0,0 +1,20 @@
+# DO NOT EDIT; this file is auto-generated using https://github.com/openshift/ci-tools.
+# Fetched from https://github.com/openshift/bpfman root OWNERS
+# If the repo had OWNERS_ALIASES then the aliases were expanded
+# Logins who are not members of 'openshift' organization were filtered out
+# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md
+
+approvers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
+options: {}
+reviewers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
+

ci-operator/jobs/openshift/bpfman-operator/openshift-bpfman-operator-main-postsubmits.yaml

@@ -0,0 +1,60 @@
+postsubmits:
+  openshift/bpfman-operator:
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^main$
+    cluster: build03
+    decorate: true
+    labels:
+      ci-operator.openshift.io/is-promotion: "true"
+      ci.openshift.io/generator: prowgen
+    max_concurrency: 1
+    name: branch-ci-openshift-bpfman-operator-main-images
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --image-mirror-push-secret=/etc/push-secret/.dockerconfigjson
+        - --promote
+        - --report-credentials-file=/etc/report/credentials
+        - --target=[images]
+        command:
+        - ci-operator
+        image: ci-operator:latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /secrets/manifest-tool
+          name: manifest-tool-local-pusher
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/push-secret
+          name: push-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: manifest-tool-local-pusher
+        secret:
+          secretName: manifest-tool-local-pusher
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: push-secret
+        secret:
+          secretName: registry-push-credentials-ci-central
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator