From 19eb2893005ba6688953dd47cefa065de2fcf3ef Mon Sep 17 00:00:00 2001 From: chiragkyal Date: Wed, 19 Aug 2026 12:58:44 +0530 Subject: [PATCH] ci: run TLS profile e2e tests in tls-scanner job Add a test-tls-profile step to the tls-scanner job that runs the Feature:TLSProfile e2e suite on the standalone AWS cluster. The tls-13 step already enables the TLSAdherence feature gate and stabilizes the cluster before this step runs, and AfterAll restores the original apiserver state so tls-scanner-run is unaffected. Exclude Feature:TLSProfile from the e2e-operator-tech-preview job to prevent the suite from being scheduled on HyperShift, where apiserver/cluster is immutable and the tests would always skip. Signed-off-by: chiragkyal --- .../openshift-cert-manager-operator-master.yaml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/ci-operator/config/openshift/cert-manager-operator/openshift-cert-manager-operator-master.yaml b/ci-operator/config/openshift/cert-manager-operator/openshift-cert-manager-operator-master.yaml index 00bf9ce03bbb3..25eb9e7b5152a 100644 --- a/ci-operator/config/openshift/cert-manager-operator/openshift-cert-manager-operator-master.yaml +++ b/ci-operator/config/openshift/cert-manager-operator/openshift-cert-manager-operator-master.yaml @@ -268,7 +268,7 @@ tests: - as: test cli: latest commands: | - E2E_GINKGO_LABEL_FILTER='(Platform: isSubsetOf {Generic} || TechPreview) && !TechPreview:Inverted' make test-e2e + E2E_GINKGO_LABEL_FILTER='(Platform: isSubsetOf {Generic} || TechPreview) && !TechPreview:Inverted && !Feature:TLSProfile' make test-e2e from: src resources: requests: @@ -554,6 +554,14 @@ tests: requests: cpu: 100m - ref: tls-13 + - as: test-tls-profile + cli: latest + commands: E2E_GINKGO_LABEL_FILTER='Feature:TLSProfile' make test-e2e + from: src + resources: + requests: + cpu: 100m + memory: 250Mi - ref: tls-scanner-run workflow: optional-operators-ci-operator-sdk-aws zz_generated_metadata: