ci: Only use the Ubuntu TDX machine in the CI

We've been hitting issues with the CentOS 9 Stream machine, which Intel
doesn't have cycles to debug.

After raising this up in the Confidential Containers community meeting
we got the green light from Red Hat (Ariel Adam) to just disable the CI
based on CentOS 9 Stream for now.

Signed-off-by: Fabiano Fidêncio <fabiano@fidencio.org>
This commit is contained in:
Fabiano Fidêncio 2025-02-10 12:50:16 +01:00
parent eb1cf792de
commit 23cb5bb6c2
2 changed files with 4 additions and 16 deletions

View File

@ -21,5 +21,4 @@ self-hosted-runner:
- sev-snp - sev-snp
- s390x - s390x
- s390x-large - s390x-large
- tdx-no-attestation - tdx
- tdx-attestation

View File

@ -36,15 +36,7 @@ jobs:
- nydus - nydus
pull-type: pull-type:
- guest-pull - guest-pull
k8s-test-host-type: runs-on: tdx
- baremetal-attestation
- baremetal-no-attestation
include:
- k8s-test-host-type: baremetal-attestation
machine: tdx-attestation
- k8s-test-host-type: baremetal-no-attestation
machine: tdx-no-attestation
runs-on: ${{ matrix.machine }}
env: env:
DOCKER_REGISTRY: ${{ inputs.registry }} DOCKER_REGISTRY: ${{ inputs.registry }}
DOCKER_REPO: ${{ inputs.repo }} DOCKER_REPO: ${{ inputs.repo }}
@ -54,7 +46,7 @@ jobs:
KUBERNETES: "vanilla" KUBERNETES: "vanilla"
USING_NFD: "true" USING_NFD: "true"
KBS: "true" KBS: "true"
K8S_TEST_HOST_TYPE: ${{ matrix.k8s-test-host-type }} K8S_TEST_HOST_TYPE: "baremetal"
KBS_INGRESS: "nodeport" KBS_INGRESS: "nodeport"
SNAPSHOTTER: ${{ matrix.snapshotter }} SNAPSHOTTER: ${{ matrix.snapshotter }}
PULL_TYPE: ${{ matrix.pull-type }} PULL_TYPE: ${{ matrix.pull-type }}
@ -83,17 +75,14 @@ jobs:
run: bash tests/integration/kubernetes/gha-run.sh deploy-kata-tdx run: bash tests/integration/kubernetes/gha-run.sh deploy-kata-tdx
- name: Uninstall previous `kbs-client` - name: Uninstall previous `kbs-client`
if: ${{ matrix.machine != 'tdx-no-attestation' }}
timeout-minutes: 10 timeout-minutes: 10
run: bash tests/integration/kubernetes/gha-run.sh uninstall-kbs-client run: bash tests/integration/kubernetes/gha-run.sh uninstall-kbs-client
- name: Deploy CoCo KBS - name: Deploy CoCo KBS
if: ${{ matrix.machine != 'tdx-no-attestation' }}
timeout-minutes: 10 timeout-minutes: 10
run: bash tests/integration/kubernetes/gha-run.sh deploy-coco-kbs run: bash tests/integration/kubernetes/gha-run.sh deploy-coco-kbs
- name: Install `kbs-client` - name: Install `kbs-client`
if: ${{ matrix.machine != 'tdx-no-attestation' }}
timeout-minutes: 10 timeout-minutes: 10
run: bash tests/integration/kubernetes/gha-run.sh install-kbs-client run: bash tests/integration/kubernetes/gha-run.sh install-kbs-client
@ -114,7 +103,7 @@ jobs:
run: bash tests/integration/kubernetes/gha-run.sh cleanup-snapshotter run: bash tests/integration/kubernetes/gha-run.sh cleanup-snapshotter
- name: Delete CoCo KBS - name: Delete CoCo KBS
if: ${{ always() && matrix.machine != 'tdx-no-attestation' }} if: always()
run: bash tests/integration/kubernetes/gha-run.sh delete-coco-kbs run: bash tests/integration/kubernetes/gha-run.sh delete-coco-kbs
- name: Delete CSI driver - name: Delete CSI driver