diff --git a/config/jobs/kubernetes/sig-auth/signed-kubelet-server-certs.yaml b/config/jobs/kubernetes/sig-auth/signed-kubelet-server-certs.yaml new file mode 100644 index 000000000000..ab898eebd5ff --- /dev/null +++ b/config/jobs/kubernetes/sig-auth/signed-kubelet-server-certs.yaml @@ -0,0 +1,47 @@ +periodics: +- interval: 6h + name: ci-kubernetes-e2e-kind-signed-kubelet-certs + cluster: k8s-infra-prow-build + annotations: + testgrid-dashboards: sig-auth-kubelet-serving-certs + description: Runs conformance tests on a cluster with kubelet serving certificates signed by the CP against a latest kubernetes master cluster created with sigs.k8s.io/kind + labels: + preset-dind-enabled: "true" + decorate: true + decoration_config: + timeout: 60m + extra_refs: + - org: kubernetes + repo: kubernetes + base_ref: master + path_alias: k8s.io/kubernetes + workdir: true + - org: kubernetes + repo: test-infra + base_ref: master + path_alias: k8s.io/test-infra + spec: + containers: + - image: gcr.io/k8s-staging-test-infra/krte:v20250717-57d1ca3de9-master + command: + - wrapper.sh + - bash + - -c + - curl -sSL https://kind.sigs.k8s.io/dl/latest/linux-amd64.tgz | tar xvfz - -C "${PATH%%:*}/" && $GOPATH/src/k8s.io/test-infra/experiment/kubelet-serving-certificates/e2e-k8s.sh + env: + - name: LABEL_FILTER + value: "Feature: isEmpty && !Slow && !Disruptive && !Flaky" + - name: PARALLEL + value: "true" + # we need privileged mode in order to do docker in docker + securityContext: + privileged: true + resources: + limits: + memory: 9Gi + cpu: 7 + requests: + # these are both a bit below peak usage during build + # this is mostly for building kubernetes + memory: 9Gi + cpu: 7 diff --git a/config/testgrids/kubernetes/sig-auth/config.yaml b/config/testgrids/kubernetes/sig-auth/config.yaml index 6c864891525b..95db750637ef 100644 --- a/config/testgrids/kubernetes/sig-auth/config.yaml +++ b/config/testgrids/kubernetes/sig-auth/config.yaml @@ -22,6 +22,7 @@ dashboards: - name: sig-auth-secrets-store-sync-controller - name: sig-auth-secrets-store-sync-controller-periodic - name: sig-auth-secrets-store-sync-controller-presubmit +- name: sig-auth-kubelet-serving-certs dashboard_groups: - name: sig-auth @@ -36,3 +37,4 @@ dashboard_groups: - sig-auth-secrets-store-sync-controller - sig-auth-secrets-store-sync-controller-periodic - sig-auth-secrets-store-sync-controller-presubmit + - sig-auth-kubelet-serving-certs