metadata:
  annotations:
    description: Periodically rebuilds k8s local volume provisioner images to pickup
      latest OS updates and fixes.
    prow.k8s.io/context: ""
    prow.k8s.io/job: ci-local-csi-driver-v0.5-images
  creationTimestamp: "2025-03-30T03:00:05Z"
  generation: 7
  labels:
    app: local-csi-driver
    created-by-prow: "true"
    prow.k8s.io/build-id: "1906179594474491904"
    prow.k8s.io/context: ""
    prow.k8s.io/id: 2fcf2332-335b-4872-ac4e-99dd197c191a
    prow.k8s.io/job: ci-local-csi-driver-v0.5-images
    prow.k8s.io/refs.base_ref: v0.5
    prow.k8s.io/refs.org: scylladb
    prow.k8s.io/refs.repo: local-csi-driver
    prow.k8s.io/type: periodic
  name: 2fcf2332-335b-4872-ac4e-99dd197c191a
  namespace: prow-workspace
  resourceVersion: "612830164"
  uid: 50aed41e-0be2-47bc-b243-acbd1ddffbcc
spec:
  agent: kubernetes
  cluster: default
  decoration_config:
    gcs_configuration:
      bucket: gs://scylla-operator-prow
      path_strategy: explicit
    gcs_credentials_secret: gcs-credentials
    github_api_endpoints:
    - http://ghproxy.prow.svc
    - https://api.github.com
    github_app_id: "112385"
    github_app_private_key_secret:
      key: cert
      name: github-token
    grace_period: 15m0s
    resources:
      clonerefs:
        requests:
          cpu: 100m
      initupload:
        requests:
          cpu: 100m
      place_entrypoint:
        requests:
          cpu: 100m
      sidecar:
        requests:
          cpu: 100m
    timeout: 1h0m0s
    utility_images:
      clonerefs: us-docker.pkg.dev/k8s-infra-prow/images/clonerefs:v20240802-66b115076
      entrypoint: us-docker.pkg.dev/k8s-infra-prow/images/entrypoint:v20240802-66b115076
      initupload: us-docker.pkg.dev/k8s-infra-prow/images/initupload:v20240802-66b115076
      sidecar: us-docker.pkg.dev/k8s-infra-prow/images/sidecar:v20240802-66b115076
  extra_refs:
  - base_ref: v0.5
    org: scylladb
    path_alias: github.com/scylladb/local-csi-driver
    repo: local-csi-driver
    workdir: true
  job: ci-local-csi-driver-v0.5-images
  max_concurrency: 1
  namespace: prow-workspace
  pod_spec:
    containers:
    - args:
      - "trap 'touch /tmp/shared/setup.finished' EXIT\n\nGIT_REVISION=\"$( git rev-parse
        HEAD | tee \"${GIT_REVISION_FILE}\" )\"\nexport GIT_REVISION\n\njob_name=\"$(
        yq -n 'env(JOB_SPEC) as $job_spec | $job_spec.job' )\"\n\narchitectures=(
        \"amd64\" \"arm64\" )\nfor arch in \"${architectures[@]}\"; do\n  cat <<EOF
        | \\\nyq 'env(JOB_SPEC) as $job_spec | with(.spec.decoration_config; . = $job_spec.decoration_config
        | ... style=\"\") | with(.spec.extra_refs; . = $job_spec.extra_refs | .[0].base_sha
        = strenv(GIT_REVISION) | ... style = \"\" ) | with(.metadata.labels; . = .
        + ($job_spec.extra_refs[0] | pick([\"org\", \"repo\", \"base_ref\"]) | (.[]
        | key) |= \"prow.k8s.io/refs.\" + .))' - | \\\nkubectl -n=\"${NAMESPACE}\"
        create -f=-\napiVersion: prow.k8s.io/v1\nkind: ProwJob\nmetadata:\n  name:
        \"${NAME}-${arch}\"\n  annotations:\n    prow.k8s.io/context: \"\"\n    prow.k8s.io/job:
        \"${job_name}-${arch}\"\n  labels:\n    app: local-csi-driver\n    prow.k8s.io/context:
        \"\"\n    prow.k8s.io/job: \"${job_name}-${arch}\"\n    prow.k8s.io/type:
        periodic\nspec:\n  agent: kubernetes\n  cluster: default\n  job: \"${job_name}-${arch}\"\n
        \ max_concurrency: 1\n  namespace: \"${NAMESPACE}\"\n  pod_spec:\n    containers:\n
        \   - name: images\n      image: quay.io/scylladb/scylla-operator-images:buildah\n
        \     imagePullPolicy: Always\n      command:\n      - /usr/bin/bash\n      -
        -euExo\n      - pipefail\n      - -O\n      - inherit_errexit\n      - -c\n
        \     args:\n      - |\n        # Make sure the revision matches.\n        [[
        \"\\$( git rev-parse HEAD )\" == \"${GIT_REVISION}\" ]]\n\n        image_tag=\"0.5\"\n
        \       image_org_ref=\"quay.io/scylladb\"\n\n        digestfile=\"\\$( mktemp
        )\"\n        image_names=( \"local-csi-driver\"{,\"-tests\"} )\n        for
        image_name in \"\\${image_names[@]}\"; do\n          image_ref=\"\\${image_org_ref}/\\${image_name}:\\${image_tag}-${BUILD_ID}-${arch}\"\n
        \         \n          time buildah build --squash --format=docker \\\n          --platform=\"linux/${arch}\"
        \\\n          --label=\"org.opencontainers.image.revision=${GIT_REVISION}\"
        \\\n          --file=\"./images/\\${image_name}/Dockerfile\" \\\n          --tag=\"\\${image_ref}\"
        .\n  \n          buildah push --digestfile=\"\\${digestfile}\" \"\\${image_ref}\"\n
        \         echo '' | cat \"\\${digestfile}\" -\n          buildah push --digestfile=\"\\${digestfile}\"
        \"\\${image_ref}\" \"docker://\\${image_org_ref}/\\${image_name}:\\${image_tag}-\\$(
        date '+%Y-%m-%d-%H%M%S' )-${BUILD_ID}-${arch}\"\n          echo '' | cat \"\\${digestfile}\"
        -\n        done\n      env:\n      - name: REGISTRY_AUTH_FILE\n        value:
        /var/run/secrets/quay-ci-creds/auth.json\n      resources:\n        requests:\n
        \         cpu: 1\n        limits:\n          cpu: 3\n      securityContext:\n
        \       privileged: true\n        runAsUser: 1000\n      volumeMounts:\n      -
        name: buildah-storage\n        mountPath: /usr/lib/containers/storage\n      -
        name: quay-ci-creds\n        mountPath: /var/run/secrets/quay-ci-creds\n        readOnly:
        true\n    nodeSelector:\n      kubernetes.io/os: linux\n      kubernetes.io/arch:
        \"${arch}\"\n    tolerations:\n    - key: kubernetes.io/arch\n      operator:
        Equal\n      value: \"${arch}\"\n      effect: NoSchedule\n    volumes:\n
        \   - name: buildah-storage\n      emptyDir: {}\n    - name: quay-ci-creds\n
        \     secret:\n        secretName: quay-scylladb-prod-publisher-creds\n        items:\n
        \       - key: auth.json\n          path: auth.json\n  type: periodic\nstatus:\n
        \ # Set state to schedule the ProwJob.\n  state: triggered\n  # Set startTime
        to avoid being garbage collected immediately.          \n  startTime: \"$(
        date -u '+%Y-%m-%dT%H:%M:%SZ' )\"\nEOF\ndone\n\nfor arch in \"${architectures[@]}\";
        do\n  kubectl -n=\"${NAMESPACE}\" wait --timeout=1h --for=jsonpath='{.status.completionTime}'
        prowjob.prow.k8s.io/\"${NAME}-${arch}\"\n  [[ $( kubectl -n=\"${NAMESPACE}\"
        get --template='{{ .status.state }}' prowjob.prow.k8s.io/\"${NAME}-${arch}\"
        ) == \"success\" ]]\ndone\n"
      command:
      - /usr/bin/bash
      - -euExo
      - pipefail
      - -O
      - inherit_errexit
      - -c
      env:
      - name: NAME
        valueFrom:
          fieldRef:
            fieldPath: metadata.name
      - name: NAMESPACE
        valueFrom:
          fieldRef:
            fieldPath: metadata.namespace
      - name: GIT_REVISION_FILE
        value: /tmp/shared/git_revision
      image: quay.io/scylladb/scylla-operator-images:kube-tools
      imagePullPolicy: Always
      name: setup
      resources:
        limits:
          cpu: "1"
        requests:
          cpu: 100m
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        seccompProfile:
          type: RuntimeDefault
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount/
        name: kube-api-access
      - mountPath: /tmp/shared
        name: shared-data
    - args:
      - "echo \"Waiting for git revision file to propagate...\"\nuntil [[ -f \"${GIT_REVISION_FILE}\"
        || -f /tmp/shared/setup.finished ]]; do sleep 60; done\nif [[ ! -f \"${GIT_REVISION_FILE}\"
        ]]; then\n  echo \"Setup failed. Exiting.\"\n  exit 1\nfi\necho \"Git revision
        file propagated.\"\n\nimage_tag=\"0.5\"\nimage_org_ref=\"quay.io/scylladb\"\n\ngit_revision=\"$(
        cat \"${GIT_REVISION_FILE}\" )\"\n\nimage_names=( \"local-csi-driver\"{,\"-tests\"}
        )\nfor image_name in \"${image_names[@]}\"; do\n  image_ref=\"${image_org_ref}/${image_name}:${image_tag}\"\n\n
        \ buildah manifest create --annotation=\"org.opencontainers.image.revision=${git_revision}\"
        \"${image_ref}\"\n  \n  architectures=( \"amd64\" \"arm64\" )\n  for ARCH
        in \"${architectures[@]}\"; do\n    export ARCH\n  \n    IMAGE_REF_ARCH=\"${image_ref}-${BUILD_ID}-${ARCH}\"\n
        \   export IMAGE_REF_ARCH\n  \n    ERR_LOG=\"$( mktemp )\"\n    export ERR_LOG\n
        \   timeout 45m bash -xc 'until buildah pull --arch=\"${ARCH}\" \"${IMAGE_REF_ARCH}\"
        2>>\"${ERR_LOG}\"; do sleep 60; done' || ( cat \"${ERR_LOG}\" && exit 2 )\n
        \ \n    # Verify architecture.\n    [[ $( buildah inspect --type=image --format='{{
        .OCIv1.Architecture }}' \"${IMAGE_REF_ARCH}\" ) == \"${ARCH}\" ]]\n  \n    #
        Verify revision.\n    [[ $( buildah inspect --type=image --format='{{ index
        .OCIv1.Config.Labels \"org.opencontainers.image.revision\" }}' \"${IMAGE_REF_ARCH}\"
        ) == \"${git_revision}\" ]]\n  \n    buildah manifest add \"${image_ref}\"
        \"${IMAGE_REF_ARCH}\"\n  done\n\n  digestfile=\"$( mktemp )\"\n  buildah manifest
        push --digestfile=\"${digestfile}\" \"${image_ref}\"\n  echo '' | cat \"${digestfile}\"
        -\n  buildah manifest push --digestfile=\"${digestfile}\" \"${image_ref}\"
        \"docker://${image_ref}-$( date '+%Y-%m-%d-%H%M%S' )\"\n  echo '' | cat \"${digestfile}\"
        -\n  REGISTRY_AUTH_FILE=\"${DOCKERHUB_REGISTRY_AUTH_FILE}\" buildah manifest
        push --all --digestfile=\"${digestfile}\" \"${image_ref}\" \"docker://docker.io/scylladb/${image_name}:${image_tag}\"\n
        \ echo '' | cat \"${digestfile}\" -\ndone\n"
      command:
      - /usr/bin/bash
      - -euExo
      - pipefail
      - -O
      - inherit_errexit
      - -c
      env:
      - name: GIT_REVISION_FILE
        value: /tmp/shared/git_revision
      - name: REGISTRY_AUTH_FILE
        value: /var/run/secrets/quay-ci-creds/auth.json
      - name: DOCKERHUB_REGISTRY_AUTH_FILE
        value: /var/run/secrets/dockerhub-ci-creds/auth.json
      image: quay.io/scylladb/scylla-operator-images:buildah
      imagePullPolicy: Always
      name: manifests
      resources:
        limits:
          cpu: "1"
        requests:
          cpu: "1"
      securityContext:
        privileged: true
        runAsUser: 1000
      volumeMounts:
      - mountPath: /tmp/shared
        name: shared-data
      - mountPath: /usr/lib/containers/storage
        name: buildah-storage
      - mountPath: /var/run/secrets/quay-ci-creds
        name: quay-ci-creds
        readOnly: true
      - mountPath: /var/run/secrets/dockerhub-ci-creds
        name: dockerhub-ci-creds
        readOnly: true
    serviceAccountName: prowjob-creator
    volumes:
    - emptyDir: {}
      name: buildah-storage
    - name: quay-ci-creds
      secret:
        items:
        - key: auth.json
          path: auth.json
        secretName: quay-scylladb-prod-publisher-creds
    - name: dockerhub-ci-creds
      secret:
        items:
        - key: auth.json
          path: auth.json
        secretName: dockerhub-scylladb-prod-publisher-creds
    - emptyDir: {}
      name: shared-data
    - name: kube-api-access
      projected:
        defaultMode: 400
        sources:
        - serviceAccountToken:
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
  prowjob_defaults:
    tenant_id: GlobalDefaultID
  report: true
  type: periodic
status:
  build_id: "1906179594474491904"
  completionTime: "2025-03-30T03:21:28Z"
  description: Job succeeded.
  pendingTime: "2025-03-30T03:00:05Z"
  pod_name: 2fcf2332-335b-4872-ac4e-99dd197c191a
  prev_report_states:
    gcsk8sreporter: success
    gcsreporter: success
  startTime: "2025-03-30T03:00:05Z"
  state: success
  url: https://prow.scylla-operator.scylladb.com/view/gs/scylla-operator-prow/logs/ci-local-csi-driver-v0.5-images/1906179594474491904