Merge branch 'master' into add-local-image-registry

.githooks/components.sh

@@ -10,6 +10,7 @@ components=( \
 	["vendor"]="vendor","cnf-tests","ztp","go.mod","go.sum" \
 	["cnf-tests"]="cnf-tests" \
 	["oot-driver"]="tools/oot-driver" \
-	["owners"]="OWNERS","OWNERS_ALIASES"
+	["owners"]="OWNERS","OWNERS_ALIASES" \
+	["docs"]="README.md"
 )
 

README.md

@@ -79,6 +79,21 @@ RPMS_NODE_ROLE is optional and defaults to `node-role.kubernetes.io/worker`.
 A dockerized version of CNF tests is available at [quay.io/openshift-kni/cnf-tests](https://quay.io/openshift-kni/cnf-tests).
 For more details on how to use it, please check the [corresponding docs](cnf-tests/README.md).
 
-### Example RAN profile
+### Zero-Touch Provisioning for RAN
 
-An example RAN profile is provided in [feature-configs/cn-ran-overlays](feature-configs/cn-ran-overlays)
+Zero-touch provisioning enables a gitops-based flow for deploying and configuring OpenShift for RAN applications.
+
+For an overview, see [ztp/gitops-subscriptions/argocd/README.md](ztp/gitops-subscriptions/argocd/README.md)
+
+## Release Branching
+
+This repository follows the same version numbering and release branching schedule as OpenShift: https://docs.ci.openshift.org/docs/architecture/branching/
+
+### Branching
+
+1. Create a new 'release-x.y' branch and push it into Git
+2. Advance the CI configuration in openshift/release to create new lanes for the release branch and move the master along to the next release version number
+   - Example: https://github.com/openshift/release/pull/26172
+3. Pin all midstream branches to the new release branch, and create new midstream branches for the next release
+   - [cnf-tests](https://code.engineering.redhat.com/gerrit/admin/repos/cnf-tests)
+   - [ztp-site-generate](https://code.engineering.redhat.com/gerrit/admin/repos/ztp-site-generate)

cnf-tests/Dockerfile

@@ -1,12 +1,12 @@
-FROM golang:1.16 AS builder
+FROM registry.ci.openshift.org/openshift/release:golang-1.17 AS builder
 WORKDIR /go/src/github.com/openshift-kni/cnf-features-deploy
 COPY . .
 RUN make test-bin
 RUN git rev-list -1 HEAD > ./cnf-tests/bin/cnftests-sha.txt
 
 FROM quay.io/openshift/origin-oc-rpms:4.8 AS oc
 
-FROM golang:1.16 AS builder-stresser
+FROM registry.ci.openshift.org/openshift/release:golang-1.17 AS builder-stresser
 ENV PKG_NAME=github.com/openshift-kni/cnf-features-deploy
 ENV PKG_PATH=/go/src/$PKG_NAME
 ENV TESTER_PATH=$PKG_PATH/cnf-tests/pod-utils/stresser
@@ -18,7 +18,7 @@ WORKDIR $TESTER_PATH
 
 RUN go build -mod=vendor -o /stresser
 
-FROM golang:1.16 AS builder-sctptester
+FROM registry.ci.openshift.org/openshift/release:golang-1.17 AS builder-sctptester
 ENV PKG_NAME=github.com/openshift-kni/cnf-features-deploy
 ENV PKG_PATH=/go/src/$PKG_NAME
 ENV TESTER_PATH=$PKG_PATH/cnf-tests/pod-utils/sctptester
@@ -31,7 +31,7 @@ WORKDIR $TESTER_PATH
 RUN go build -mod=vendor -o /sctptest
 
 # build latency-test's runner binaries
-FROM golang:1.16 AS builder-latency-test-runners
+FROM registry.ci.openshift.org/openshift/release:golang-1.17 AS builder-latency-test-runners
 
 ENV PKG_NAME=github.com/openshift-kni/cnf-features-deploy
 ENV PKG_PATH=/go/src/$PKG_NAME

cnf-tests/Dockerfile.openshift

@@ -1,5 +1,5 @@
 # This dockerfile is specific to building the OpenShift CNF tests image
-FROM openshift/origin-release:golang-1.16 as builder
+FROM registry.ci.openshift.org/openshift/release:golang-1.17 as builder
 
 # Add everything
 ENV PKG_NAME=github.com/openshift-kni/cnf-features-deploy
@@ -15,7 +15,7 @@ RUN git rev-list -1 HEAD > ./cnf-tests/bin/cnftests-sha.txt
 FROM quay.io/openshift/origin-oc-rpms:4.8 as oc 
 
 # This dockerfile is specific to building the OpenShift CNF stresser image
-FROM openshift/origin-release:golang-1.16 as builder-stresser
+FROM registry.ci.openshift.org/openshift/release:golang-1.17 as builder-stresser
 
 # Add everything
 ENV PKG_NAME=github.com/openshift-kni/cnf-features-deploy
@@ -30,7 +30,7 @@ WORKDIR $STRESSER_PATH
 RUN go build -mod=vendor -o /stresser
 
 # This dockerfile is specific to building the OpenShift CNF sctp tester image
-FROM openshift/origin-release:golang-1.16 as builder-sctptester
+FROM registry.ci.openshift.org/openshift/release:golang-1.17 as builder-sctptester
 
 # Add everything
 ENV PKG_NAME=github.com/openshift-kni/cnf-features-deploy
@@ -45,7 +45,7 @@ WORKDIR $TESTER_PATH
 RUN go build -mod=vendor -o /sctptest
 
 # build latency-test's runner binaries
-FROM openshift/origin-release:golang-1.16 AS builder-latency-test-runners
+FROM registry.ci.openshift.org/openshift/release:golang-1.17 AS builder-latency-test-runners
 
 ENV PKG_NAME=github.com/openshift-kni/cnf-features-deploy
 ENV PKG_PATH=/go/src/$PKG_NAME
@@ -61,7 +61,7 @@ RUN go build -mod=vendor -o /oslat-runner oslat-runner/main.go && \
     go build -mod=vendor -o /hwlatdetect-runner hwlatdetect-runner/main.go
 
 # build builder-latency-test-tools binaries
-FROM openshift/origin-release:golang-1.16 as builder-latency-test-tools
+FROM registry.ci.openshift.org/openshift/release:golang-1.17 as builder-latency-test-tools
 
 ENV RT_TESTS_URL=https://git.kernel.org/pub/scm/utils/rt-tests/rt-tests.git/snapshot
 ENV RT_TESTS_PKG=rt-tests-2.0

cnf-tests/TESTLIST.md

@@ -144,6 +144,7 @@ The cnf tests instrument each different feature required by CNF. Following, a de
 | [performance] CPU Management Verification that IRQ load balance can be disabled per POD  should disable IRQ balance for CPU where POD is running | Checks that the runtime will disable the IRQ load balancing for CPUs used by the guaranteed pod, when the pod has the specific runtime class and annotation | 
 | [performance] CPU Management when pod runs with the CPU load balancing runtime class  should disable CPU load balancing for CPU's used by the pod | Checks that the runtime will disable the CPU load balancing for the guaranteed pod with the specific runtime class and annotation | 
 | [performance] CPU Management when reserved CPUs specified should run infra containers on reserved CPUs | Checks that infra containers runs on top of reserved CPUs | 
+| [performance] CPU Management when strict NUMA aligment is requested should reject pods which request integral CPUs not aligned with machine SMT level | Verifies that once strict NUMA aligment is requested the CPU manager reject pods that requested number of CPUs not aligned with machine SMT level | 
 | [performance] Create second performance profiles on a cluster  Verifies that cluster can have multiple profiles | Verifies that multiple performance profiles can be applied to the cluster. | 
 | [performance] KubeletConfig experimental annotation should override system-reserved memory | Verifies that it possible to override system-reserved memory via experimental annotation | 
 | [performance] Latency Test with the cyclictest image should succeed | Run the cyclictest with parameters specified via environment variables and validated that the maximum latency between a thread's intended wake-up time and the time at which it actually wakes up is below the value specified under the CYCLICTEST_MAXIMUM_LATENCY environment variable | 
@@ -234,6 +235,7 @@ The cnf tests instrument each different feature required by CNF. Following, a de
 | metallb Testing Update AddressPool should have created, update and finally delete addresspool correctly | Verifies a metallb AdressPool can be created, updated and deleted | 
 | metallb Testing create/delete Multiple AddressPools should have created, merged and deleted resources correctly | Verifies multiple metallb AdressPools can be created, merged and deleted | 
 | metallb Validate AddressPool Webhook Should recognize overlapping addresses in two AddressPools | Verifies AddressPool Webhook recognizes overlapping addresses in two AddressPools | 
+| metallb Validate BGPPeer Webhook Should allow multiple BGPPeers with the same router-id | Verifies BGPPeer Webhook allows multiple BGPPeers with the same router-id | 
 | metallb Validate BGPPeer Webhook Should reject invalid BGPPeer IP address | Verifies BGPPeer Webhook rejects invalid BGPPeer IP address | 
 | metallb Validate BGPPeer Webhook Should reject invalid Keepalive time | Verifies BGPPeer Webhook rejects invalid Keepalive time | 
 | metallb with BFD profile should render the configmap properly Test two bfd profiles | Verifies metallb with BFD profile renders the configmap properly, testing two bfd profiles | 

cnf-tests/docgen/e2e.json

@@ -30,6 +30,7 @@
     "[rfe_id:27363][performance] CPU Management Verification that IRQ load balance can be disabled per POD [test_id:36364] should disable IRQ balance for CPU where POD is running": "Checks that the runtime will disable the IRQ load balancing for CPUs used by the guaranteed pod, when the pod has the specific runtime class and annotation",
     "[rfe_id:27363][performance] CPU Management when pod runs with the CPU load balancing runtime class [test_id:32646] should disable CPU load balancing for CPU's used by the pod": "Checks that the runtime will disable the CPU load balancing for the guaranteed pod with the specific runtime class and annotation",
     "[rfe_id:27363][performance] CPU Management when reserved CPUs specified should run infra containers on reserved CPUs": "Checks that infra containers runs on top of reserved CPUs",
+    "[rfe_id:27363][performance] CPU Management when strict NUMA aligment is requested should reject pods which request integral CPUs not aligned with machine SMT level": "Verifies that once strict NUMA aligment is requested the CPU manager reject pods that requested number of CPUs not aligned with machine SMT level",
     "[rfe_id:27368][performance] Additional kernel arguments added from perfomance profile [test_id:28611][crit:high][vendor:[email protected]][level:acceptance] Should set additional kernel arguments on the machine": "Verifies that when specifying additional kernel arguments to the profile, those are added on the node.",
     "[rfe_id:27368][performance] Create second performance profiles on a cluster [test_id:32364] Verifies that cluster can have multiple profiles": "Verifies that multiple performance profiles can be applied to the cluster.",
     "[rfe_id:27368][performance] KubeletConfig experimental annotation should override system-reserved memory": "Verifies that it possible to override system-reserved memory via experimental annotation",
@@ -124,6 +125,7 @@
     "metallb Testing Update AddressPool should have created, update and finally delete addresspool correctly": "Verifies a metallb AdressPool can be created, updated and deleted",
     "metallb Testing create/delete Multiple AddressPools should have created, merged and deleted resources correctly": "Verifies multiple metallb AdressPools can be created, merged and deleted",
     "metallb Validate AddressPool Webhook Should recognize overlapping addresses in two AddressPools": "Verifies AddressPool Webhook recognizes overlapping addresses in two AddressPools",
+    "metallb Validate BGPPeer Webhook Should allow multiple BGPPeers with the same router-id": "Verifies BGPPeer Webhook allows multiple BGPPeers with the same router-id",
     "metallb Validate BGPPeer Webhook Should reject invalid BGPPeer IP address": "Verifies BGPPeer Webhook rejects invalid BGPPeer IP address",
     "metallb Validate BGPPeer Webhook Should reject invalid Keepalive time": "Verifies BGPPeer Webhook rejects invalid Keepalive time",
     "metallb with BFD profile should render the configmap properly Test two bfd profiles": "Verifies metallb with BFD profile renders the configmap properly, testing two bfd profiles",

cnf-tests/pod-utils/oslat-runner/main.go

@@ -31,8 +31,13 @@ func main() {
 		klog.Fatalf("the amount of requested CPUs less than 2, the oslat requires at least 2 CPUs to run")
 	}
 
-	mainThreadCPUSet := cpuset.NewCPUSet(selfCPUs.ToSlice()[0])
-	updatedSelfCPUs := selfCPUs.Difference(mainThreadCPUSet)
+	mainThreadCPUs := selfCPUs.ToSlice()[0]
+	siblings, err := node.GetCPUSiblings(mainThreadCPUs)
+	if err != nil {
+		klog.Fatalf("failed to get main thread CPU siblings: %v", err)
+	}
+	cpusForLatencyTest := selfCPUs.Difference(cpuset.NewCPUSet(siblings...))
+	mainThreadCPUSet := cpuset.NewCPUSet(mainThreadCPUs)
 
 	err = node.PrintInformation()
 	if err != nil {
@@ -46,7 +51,7 @@ func main() {
 	oslatArgs := []string{
 		"--duration", *runtime,
 		"--rtprio", *rtPriority,
-		"--cpu-list", updatedSelfCPUs.String(),
+		"--cpu-list", cpusForLatencyTest.String(),
 		"--cpu-main-thread", mainThreadCPUSet.String(),
 	}
 

cnf-tests/pod-utils/pkg/node/node.go

@@ -12,6 +12,7 @@ import (
 	"golang.org/x/sys/unix"
 )
 
+// GetSelfCPUs returns CPUs allowed to use by the current process
 func GetSelfCPUs() (*cpuset.CPUSet, error) {
 	cmd := exec.Command("/bin/sh", "-c", "grep Cpus_allowed_list /proc/self/status | cut -f2")
 	out, err := cmd.CombinedOutput()
@@ -28,6 +29,7 @@ func GetSelfCPUs() (*cpuset.CPUSet, error) {
 	return &cpus, nil
 }
 
+// PrintInformation prints debug information
 func PrintInformation() error {
 	out, err := ioutil.ReadFile("/proc/cmdline")
 	if err != nil {
@@ -44,3 +46,19 @@ func PrintInformation() error {
 	klog.Infof("Environment information: kernel version %s", uname.Release)
 	return nil
 }
+
+// GetCPUSiblings returns the IDs of the CPU siblings
+func GetCPUSiblings(cpu int) ([]int, error) {
+	siblingThreadFile := fmt.Sprintf("/sys/devices/system/cpu/cpu%d/topology/thread_siblings_list", cpu)
+	out, err := ioutil.ReadFile(siblingThreadFile)
+	if err != nil {
+		return nil, fmt.Errorf("failed to read file %q: err: %v", siblingThreadFile, err)
+	}
+
+	cpus, err := cpuset.Parse(string(out))
+	if err != nil {
+		return nil, fmt.Errorf("failed to parse cpuset; err: %v", err)
+	}
+
+	return cpus.ToSlice(), nil
+}

cnf-tests/testsuites/configsuite/test_suite_test.go

@@ -1,3 +1,4 @@
+//go:build !unittests
 // +build !unittests
 
 package setup_test

cnf-tests/testsuites/e2esuite/fec/fec.go

@@ -14,8 +14,7 @@ import (
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	runtimeClient "sigs.k8s.io/controller-runtime/pkg/client"
 
-	sriovfecv2 "github.com/smart-edge-open/openshift-operator/sriov-fec/api/v2"
-
+	sriovfecv2 "github.com/openshift-kni/cnf-features-deploy/cnf-tests/testsuites/pkg/apis/sriov-fec/api/v2"
 	"github.com/openshift-kni/cnf-features-deploy/cnf-tests/testsuites/pkg/client"
 	"github.com/openshift-kni/cnf-features-deploy/cnf-tests/testsuites/pkg/discovery"
 	"github.com/openshift-kni/cnf-features-deploy/cnf-tests/testsuites/pkg/namespaces"

cnf-tests/testsuites/e2esuite/gatekeeper/gatekeeper.go

@@ -827,6 +827,10 @@ var _ = Describe("gatekeeper", func() {
 			err = client.Get(context.Background(), gkConfigKey, gkConfig)
 			Expect(err).ToNot(HaveOccurred())
 
+			if gkConfig.Spec.Webhook == nil {
+				gkConfig.Spec.Webhook = &gkopv1alpha.WebhookConfig{}
+			}
+
 			gkConfig.Spec.Webhook.NamespaceSelector = &metav1.LabelSelector{
 				MatchLabels: map[string]string{"mutate": "enabled"},
 			}

cnf-tests/testsuites/e2esuite/test_suite_test.go

@@ -1,3 +1,4 @@
+//go:build !unittests
 // +build !unittests
 
 package test_test

cnf-tests/testsuites/pkg/client/clients.go

@@ -4,6 +4,7 @@ import (
 	"os"
 
 	gkopv1alpha "github.com/gatekeeper/gatekeeper-operator/api/v1alpha1"
+	"github.com/golang/glog"
 	sriovk8sv1 "github.com/k8snetworkplumbingwg/network-attachment-definition-client/pkg/apis/k8s.cni.cncf.io/v1"
 	sriovv1 "github.com/k8snetworkplumbingwg/sriov-network-operator/api/v1"
 	constraints "github.com/open-policy-agent/frameworks/constraint/pkg/apis/templates/v1beta1"
@@ -22,13 +23,9 @@ import (
 	mcov1 "github.com/openshift/machine-config-operator/pkg/apis/machineconfiguration.openshift.io/v1"
 	clientmachineconfigv1 "github.com/openshift/machine-config-operator/pkg/generated/clientset/versioned/typed/machineconfiguration.openshift.io/v1"
 	ptpv1 "github.com/openshift/ptp-operator/pkg/client/clientset/versioned/typed/ptp/v1"
-	fpgav1 "github.com/smart-edge-open/openshift-operator/N3000/api/v1"
-	fecv1 "github.com/smart-edge-open/openshift-operator/sriov-fec/api/v2"
-
-	"github.com/golang/glog"
 	apiext "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
 	"k8s.io/apimachinery/pkg/runtime"
-	discovery "k8s.io/client-go/discovery"
+	"k8s.io/client-go/discovery"
 	"k8s.io/client-go/kubernetes/scheme"
 	appsv1client "k8s.io/client-go/kubernetes/typed/apps/v1"
 	corev1client "k8s.io/client-go/kubernetes/typed/core/v1"
@@ -37,6 +34,9 @@ import (
 	"k8s.io/client-go/rest"
 	"k8s.io/client-go/tools/clientcmd"
 	"sigs.k8s.io/controller-runtime/pkg/client"
+
+	fpgav1 "github.com/openshift-kni/cnf-features-deploy/cnf-tests/testsuites/pkg/apis/N3000/api/v1"
+	fecv1 "github.com/openshift-kni/cnf-features-deploy/cnf-tests/testsuites/pkg/apis/sriov-fec/api/v2"
 )
 
 // Client defines the client set that will be used for testing

cnf-tests/testsuites/pkg/utils/reporter.go

@@ -3,26 +3,25 @@ package utils
 import (
 	"os"
 
-	sriovNamespaces "github.com/k8snetworkplumbingwg/sriov-network-operator/test/util/namespaces"
-	perfUtils "github.com/openshift-kni/performance-addon-operators/functests/utils"
-	ptpUtils "github.com/openshift/ptp-operator/test/utils"
-	"k8s.io/apimachinery/pkg/runtime"
-
-	"github.com/openshift-kni/cnf-features-deploy/cnf-tests/testsuites/pkg/k8sreporter"
-	"github.com/openshift-kni/cnf-features-deploy/cnf-tests/testsuites/pkg/namespaces"
-
 	gkopv1alpha "github.com/gatekeeper/gatekeeper-operator/api/v1alpha1"
 	sriovv1 "github.com/k8snetworkplumbingwg/sriov-network-operator/api/v1"
+	sriovNamespaces "github.com/k8snetworkplumbingwg/sriov-network-operator/test/util/namespaces"
 	gkv1alpha "github.com/open-policy-agent/gatekeeper/apis/mutations/v1alpha1"
 	performancev2 "github.com/openshift-kni/performance-addon-operators/api/v2"
+	perfUtils "github.com/openshift-kni/performance-addon-operators/functests/utils"
 	srov1beta1 "github.com/openshift-psap/special-resource-operator/api/v1beta1"
 	ocpbuildv1 "github.com/openshift/api/build/v1"
 	ocpv1 "github.com/openshift/api/config/v1"
 	nfdv1 "github.com/openshift/cluster-nfd-operator/api/v1"
 	mcfgv1 "github.com/openshift/machine-config-operator/pkg/apis/machineconfiguration.openshift.io/v1"
 	ptpv1 "github.com/openshift/ptp-operator/api/v1"
-	n3000v1 "github.com/smart-edge-open/openshift-operator/N3000/api/v1"
-	sriovfecv2 "github.com/smart-edge-open/openshift-operator/sriov-fec/api/v2"
+	ptpUtils "github.com/openshift/ptp-operator/test/utils"
+	"k8s.io/apimachinery/pkg/runtime"
+
+	n3000v1 "github.com/openshift-kni/cnf-features-deploy/cnf-tests/testsuites/pkg/apis/N3000/api/v1"
+	sriovfecv2 "github.com/openshift-kni/cnf-features-deploy/cnf-tests/testsuites/pkg/apis/sriov-fec/api/v2"
+	"github.com/openshift-kni/cnf-features-deploy/cnf-tests/testsuites/pkg/k8sreporter"
+	"github.com/openshift-kni/cnf-features-deploy/cnf-tests/testsuites/pkg/namespaces"
 )
 
 // NewReporter creates a specific reporter for CNF tests

cnf-tests/testsuites/validationsuite/test_suite_test.go

@@ -1,3 +1,4 @@
+//go:build !unittests
 // +build !unittests
 
 package validation_test

cnf-tests/tools.go

@@ -1,4 +1,6 @@
+//go:build tools
 // +build tools
+
 // Place any runtime dependencies as imports in this file.
 // Go modules will be forced to download and install them.
 package tools

feature-configs/5g-ref-nw/profile-base/du-general/ptp/ptpconfig-grandmaster.yaml

@@ -36,7 +36,7 @@ spec:
       # Port Data Set
       #
       logAnnounceInterval -3
-      logSyncInterval -4
+      logSyncInterval 0
       logMinDelayReqInterval -4
       logMinPdelayReqInterval -4
       announceReceiptTimeout 3

feature-configs/5g-ref-nw/profile-base/du-general/ptp/ptpconfig-slave.yaml

@@ -7,7 +7,7 @@ spec:
   profile:
   - name: "slave"
     interface: "ens1f0"
-    ptp4lOpts: "-2 -s --summary_interval -4"
+    ptp4lOpts: "-2 -s --summary_interval 0"
     phc2sysOpts: "-a -r -n 24"
     ptp4lConf: |
       [global]
@@ -33,7 +33,7 @@ spec:
       # Port Data Set
       #
       logAnnounceInterval -3
-      logSyncInterval -4
+      logSyncInterval 0
       logMinDelayReqInterval -4
       logMinPdelayReqInterval -4
       announceReceiptTimeout 3

feature-configs/ci/sro/nfd-subscription.yaml

@@ -5,6 +5,6 @@ metadata:
   namespace: openshift-nfd
 spec:
   channel: "stable"
-  name: node-feature-discovery-operator
+  name: nfd
   source: ci-index
   sourceNamespace: openshift-marketplace

feature-configs/cn-ran-overlays/ran-profile-gcp/cluster-config/ci/sro/nfd-subscription.yaml

@@ -5,6 +5,6 @@ metadata:
   namespace: openshift-nfd
 spec:
   channel: "stable"
-  name: node-feature-discovery-operator
+  name: nfd
   source: ci-index
   sourceNamespace: openshift-marketplace