DPTP-4267: Migrate periodic-buildxx-upgrade jobs (#76682)

Author: liangxia

ci-operator/jobs/infra-periodics.yaml

@@ -1,6 +1,6 @@
 periodics:
 - agent: kubernetes
-  cluster: build01
+  cluster: core-ci
   cron: 30 1 * * 1-5
   decorate: true
   labels:
@@ -20,6 +20,7 @@ periodics:
       - adm
       - upgrade
       - --to-latest
+      - --kubeconfig=/etc/build-farm-credentials/sa.config-updater.build01.config
       command:
       - /usr/bin/oc
       image: quay-proxy.ci.openshift.org/openshift/ci:ocp_4.17_cli
@@ -28,9 +29,16 @@ periodics:
       resources:
         requests:
           cpu: 500m
-    serviceAccountName: upgrader
+      volumeMounts:
+      - mountPath: /etc/build-farm-credentials
+        name: build-farm-credentials
+        readOnly: true
+    volumes:
+    - name: build-farm-credentials
+      secret:
+        secretName: config-updater
 - agent: kubernetes
-  cluster: build02
+  cluster: core-ci
   cron: 30 3 * * 1-5
   decorate: true
   labels:
@@ -50,6 +58,7 @@ periodics:
       - adm
       - upgrade
       - --to-latest
+      - --kubeconfig=/etc/build-farm-credentials/sa.config-updater.build03.config
       command:
       - /usr/bin/oc
       image: quay-proxy.ci.openshift.org/openshift/ci:ocp_4.17_cli
@@ -58,9 +67,16 @@ periodics:
       resources:
         requests:
           cpu: 500m
-    serviceAccountName: upgrader
+      volumeMounts:
+      - mountPath: /etc/build-farm-credentials
+        name: build-farm-credentials
+        readOnly: true
+    volumes:
+    - name: build-farm-credentials
+      secret:
+        secretName: config-updater
 - agent: kubernetes
-  cluster: build04
+  cluster: core-ci
   cron: 30 4 * * 1-5
   decorate: true
   labels:
@@ -80,6 +96,7 @@ periodics:
       - adm
       - upgrade
       - --to-latest
+      - --kubeconfig=/etc/build-farm-credentials/sa.config-updater.build04.config
       command:
       - /usr/bin/oc
       image: quay-proxy.ci.openshift.org/openshift/ci:ocp_4.17_cli
@@ -88,9 +105,16 @@ periodics:
       resources:
         requests:
           cpu: 500m
-    serviceAccountName: upgrader
+      volumeMounts:
+      - mountPath: /etc/build-farm-credentials
+        name: build-farm-credentials
+        readOnly: true
+    volumes:
+    - name: build-farm-credentials
+      secret:
+        secretName: config-updater
 - agent: kubernetes
-  cluster: build05
+  cluster: core-ci
   cron: 30 5 * * 1-5
   decorate: true
   labels:
@@ -110,6 +134,7 @@ periodics:
       - adm
       - upgrade
       - --to-latest
+      - --kubeconfig=/etc/build-farm-credentials/sa.config-updater.build05.config
       command:
       - /usr/bin/oc
       image: quay-proxy.ci.openshift.org/openshift/ci:ocp_4.17_cli
@@ -118,9 +143,16 @@ periodics:
       resources:
         requests:
           cpu: 500m
-    serviceAccountName: upgrader
+      volumeMounts:
+      - mountPath: /etc/build-farm-credentials
+        name: build-farm-credentials
+        readOnly: true
+    volumes:
+    - name: build-farm-credentials
+      secret:
+        secretName: config-updater
 - agent: kubernetes
-  cluster: build06
+  cluster: core-ci
   cron: 30 6 * * 1-5
   decorate: true
   labels:
@@ -140,6 +172,7 @@ periodics:
       - adm
       - upgrade
       - --to-latest
+      - --kubeconfig=/etc/build-farm-credentials/sa.config-updater.build06.config
       command:
       - /usr/bin/oc
       image: quay-proxy.ci.openshift.org/openshift/ci:ocp_4.17_cli
@@ -148,9 +181,16 @@ periodics:
       resources:
         requests:
           cpu: 500m
-    serviceAccountName: upgrader
+      volumeMounts:
+      - mountPath: /etc/build-farm-credentials
+        name: build-farm-credentials
+        readOnly: true
+    volumes:
+    - name: build-farm-credentials
+      secret:
+        secretName: config-updater
 - agent: kubernetes
-  cluster: build07
+  cluster: core-ci
   cron: 30 7 * * 1-5
   decorate: true
   labels:
@@ -170,6 +210,7 @@ periodics:
       - adm
       - upgrade
       - --to-latest
+      - --kubeconfig=/etc/build-farm-credentials/sa.config-updater.build07.config
       command:
       - /usr/bin/oc
       image: quay-proxy.ci.openshift.org/openshift/ci:ocp_4.17_cli
@@ -178,9 +219,16 @@ periodics:
       resources:
         requests:
           cpu: 500m
-    serviceAccountName: upgrader
+      volumeMounts:
+      - mountPath: /etc/build-farm-credentials
+        name: build-farm-credentials
+        readOnly: true
+    volumes:
+    - name: build-farm-credentials
+      secret:
+        secretName: config-updater
 - agent: kubernetes
-  cluster: build08
+  cluster: core-ci
   cron: 30 8 * * 1-5
   decorate: true
   labels:
@@ -200,6 +248,7 @@ periodics:
       - adm
       - upgrade
       - --to-latest
+      - --kubeconfig=/etc/build-farm-credentials/sa.config-updater.build08.config
       command:
       - /usr/bin/oc
       image: quay-proxy.ci.openshift.org/openshift/ci:ocp_4.17_cli
@@ -208,9 +257,16 @@ periodics:
       resources:
         requests:
           cpu: 500m
-    serviceAccountName: upgrader
+      volumeMounts:
+      - mountPath: /etc/build-farm-credentials
+        name: build-farm-credentials
+        readOnly: true
+    volumes:
+    - name: build-farm-credentials
+      secret:
+        secretName: config-updater
 - agent: kubernetes
-  cluster: build09
+  cluster: core-ci
   cron: 30 9 * * 1-5
   decorate: true
   labels:
@@ -230,6 +286,7 @@ periodics:
       - adm
       - upgrade
       - --to-latest
+      - --kubeconfig=/etc/build-farm-credentials/sa.config-updater.build09.config
       command:
       - /usr/bin/oc
       image: quay-proxy.ci.openshift.org/openshift/ci:ocp_4.17_cli
@@ -238,9 +295,16 @@ periodics:
       resources:
         requests:
           cpu: 500m
-    serviceAccountName: upgrader
+      volumeMounts:
+      - mountPath: /etc/build-farm-credentials
+        name: build-farm-credentials
+        readOnly: true
+    volumes:
+    - name: build-farm-credentials
+      secret:
+        secretName: config-updater
 - agent: kubernetes
-  cluster: build10
+  cluster: core-ci
   cron: 30 10 * * 1-5
   decorate: true
   labels:
@@ -260,6 +324,7 @@ periodics:
       - adm
       - upgrade
       - --to-latest
+      - --kubeconfig=/etc/build-farm-credentials/sa.config-updater.build10.config
       command:
       - /usr/bin/oc
       image: quay-proxy.ci.openshift.org/openshift/ci:ocp_4.17_cli
@@ -268,9 +333,16 @@ periodics:
       resources:
         requests:
           cpu: 500m
-    serviceAccountName: upgrader
+      volumeMounts:
+      - mountPath: /etc/build-farm-credentials
+        name: build-farm-credentials
+        readOnly: true
+    volumes:
+    - name: build-farm-credentials
+      secret:
+        secretName: config-updater
 - agent: kubernetes
-  cluster: build11
+  cluster: core-ci
   cron: 30 11 * * 1-5
   decorate: true
   labels:
@@ -290,6 +362,7 @@ periodics:
       - adm
       - upgrade
       - --to-latest
+      - --kubeconfig=/etc/build-farm-credentials/sa.config-updater.build11.config
       command:
       - /usr/bin/oc
       image: quay-proxy.ci.openshift.org/openshift/ci:ocp_4.17_cli
@@ -298,9 +371,16 @@ periodics:
       resources:
         requests:
           cpu: 500m
-    serviceAccountName: upgrader
+      volumeMounts:
+      - mountPath: /etc/build-farm-credentials
+        name: build-farm-credentials
+        readOnly: true
+    volumes:
+    - name: build-farm-credentials
+      secret:
+        secretName: config-updater
 - agent: kubernetes
-  cluster: hosted-mgmt
+  cluster: core-ci
   cron: 30 0 * * 1-5
   decorate: true
   labels:
@@ -320,6 +400,7 @@ periodics:
       - adm
       - upgrade
       - --to-latest
+      - --kubeconfig=/etc/build-farm-credentials/sa.config-updater.hosted-mgmt.config
       command:
       - /usr/bin/oc
       image: quay-proxy.ci.openshift.org/openshift/ci:ocp_4.17_cli
@@ -328,7 +409,14 @@ periodics:
       resources:
         requests:
           cpu: 500m
-    serviceAccountName: upgrader
+      volumeMounts:
+      - mountPath: /etc/build-farm-credentials
+        name: build-farm-credentials
+        readOnly: true
+    volumes:
+    - name: build-farm-credentials
+      secret:
+        secretName: config-updater
 - agent: kubernetes
   cluster: app.ci
   cron: 0 5 * * 1-5

clusters/_cluster-install/build01.yaml

@@ -16,7 +16,6 @@ onboard:
   passthrough:
     exclude:
     - "**/supplemental-ci-images/**"
-    - "**/upgrader-sa.yaml"
   openshiftMonitoring:
     patches:
     - matches:

clusters/_cluster-install/build02.yaml

@@ -49,7 +49,6 @@ onboard:
   passthrough:
     exclude:
     - "**/supplemental-ci-images/**"
-    - "**/upgrader-sa.yaml"
   openshiftMonitoring:
     patches:
     - matches:

clusters/build-clusters/build01/README.md

@@ -186,18 +186,18 @@ Upgrading inside the same minor version of `build01` is automated by [periodic-b
 
 ### Upgrading between minor versions
 
-Modify channel configuration, e.g., from OCP 4.3 to 4.4:
+Modify channel configuration, e.g., from OCP 4.19 to 4.20:
 
 ```
-oc --as system:admin --context build01 patch clusterversion version --type json -p '[{"op": "add", "path": "/spec/channel", "value": "candidate-4.4"}]'
+oc --as system:admin --context build01 adm upgrade channel candidate-4.20
 ```
 
 ### Run the upgrade command
 
-For example, upgrade to 4.5.4
+For example, upgrade to 4.20.16
 
 ```
-oc --as system:admin --context build01 adm upgrade --to=4.5.4
+oc --as system:admin --context build01 adm upgrade --to=4.20.16
 ```
 
 ## Destroy the cluster