Release/0.7

.konflux/profiles.toml

@@ -1,12 +1,12 @@
 [common]
 python_version = "3.12"
 platforms = ["x86_64", "aarch64"]
-bootstrap_packages = ["maturin", "pip", "uv"]
+bootstrap_packages = ["maturin", "uv", "pip"]
 
 [profiles.cpu]
 rhoai_index_url = "https://packages.redhat.com/api/pypi/public-rhai/rhoai/3.5/cpu-ubi9/simple/"
 output_suffix = ""
 tekton_files = [
-    ".tekton/lightspeed-stack-0-8-pull-request.yaml",
-    ".tekton/lightspeed-stack-0-8-push.yaml",
+    ".tekton/lightspeed-stack-0-7-pull-request.yaml",
+    ".tekton/lightspeed-stack-0-7-push.yaml",
 ]

.konflux/redhat.repo

@@ -11,6 +11,7 @@ metadata_expire = 86400
 enabled_metadata = 0
 sslclientkey = $SSL_CLIENT_KEY
 sslclientcert = $SSL_CLIENT_CERT
+excludepkgs=*.i686
 
 [rhel-9-for-$basearch-appstream-eus-rpms__9_DOT_6]
 name = Red Hat Enterprise Linux 9 for $basearch - AppStream - Extended Update Support (RPMs)
@@ -25,6 +26,7 @@ metadata_expire = 86400
 enabled_metadata = 0
 sslclientkey = $SSL_CLIENT_KEY
 sslclientcert = $SSL_CLIENT_CERT
+excludepkgs=*.i686
 
 [rhel-9-for-$basearch-baseos-eus-rpms__9_DOT_6]
 name = Red Hat Enterprise Linux 9 for $basearch - BaseOS - Extended Update Support (RPMs)
@@ -52,4 +54,4 @@ sslverifystatus = 1
 metadata_expire = 86400
 enabled_metadata = 0
 sslclientkey = $SSL_CLIENT_KEY
-sslclientcert = $SSL_CLIENT_CERT
+sslclientcert = $SSL_CLIENT_CERT

.tekton/integration-tests/pipeline/lightspeed-stack-integration-test.yaml

@@ -2,84 +2,66 @@
 apiVersion: tekton.dev/v1beta1
 kind: Pipeline
 metadata:
-  name: lightspeed-stack-0-8-integration-tests-pipeline
+  name: lightspeed-stack-0-7-integration-tests-pipeline
 spec:
   description: |
     This pipeline automates the process of running end-to-end tests for Lightspeed Stack
-    using a ROSA (Red Hat OpenShift Service on AWS cluster. The pipeline provisions
-    the ROSA cluster, installs the Lightspeed Stack, runs the tests, collects artifacts,
-    and finally deprovisions the ROSA cluster.
+    using an OpenShift CI HyperShift cluster. The pipeline provisions the cluster,
+    installs the Lightspeed Stack, runs the tests, and collects artifacts.
   params:
     - name: SNAPSHOT
       description: 'The JSON string representing the snapshot of the application under test (includes lightspeed-stack image).'
-      default: '{"components": [{"name":"lightspeed-stack-0-8", "containerImage": "quay.io/example/lightspeed-stack-0-8:latest"}]}'
+      default: '{"components": [{"name":"lightspeed-stack-0-7", "containerImage": "quay.io/example/lightspeed-stack-0-7:latest"}]}'
       type: string
     - name: llama-stack-image
       description: 'OGX runs from source on UBI (init container clones repo and installs deps). Parameter name kept for backwards compatibility.'
       default: 'run-from-source (UBI)'
       type: string
     - name: test-name
       description: 'The name of the test corresponding to a defined Konflux integration test.'
-      default: 'lightspeed-stack-0-8-e2e-tests'
+      default: 'lightspeed-stack-0-7-e2e-tests'
     - name: namespace
       description: 'Namespace to run tests in'
       default: 'lightspeed-stack'
+    - name: ocp-version
+      description: 'OpenShift minor version for the ephemeral HyperShift cluster.'
+      default: '4.19'
+      type: string
+    - name: compute-node-type
+      description: 'AWS instance type for the ephemeral HyperShift compute nodes.'
+      default: 'm5.xlarge'
+      type: string
+    - name: hosted-management-cluster
+      description: 'Hosted management cluster used to provision the ephemeral cluster.'
+      default: 'hosted-mgmt2'
+      type: string
   tasks:
-    - name: eaas-provision-space
+    - name: provision-cluster
       taskRef:
         resolver: git
         params:
           - name: url
-            value: https://github.com/konflux-ci/build-definitions.git
+            value: https://github.com/openshift/konflux-tasks
           - name: revision
             value: main
           - name: pathInRepo
-            value: task/eaas-provision-space/0.1/eaas-provision-space.yaml
+            value: tasks/provision-ephemeral-cluster/0.1/provision-ephemeral-cluster.yaml
       params:
-        - name: ownerKind
-          value: PipelineRun
         - name: ownerName
           value: $(context.pipelineRun.name)
         - name: ownerUid
           value: $(context.pipelineRun.uid)
-    - name: provision-cluster
-      runAfter:
-        - eaas-provision-space
-      taskSpec:
-        results:
-          - name: clusterName
-            value: "$(steps.create-cluster.results.clusterName)"
-        steps:
-          - name: pick-version
-            ref:
-              resolver: git
-              params:
-                - name: url
-                  value: https://github.com/konflux-ci/build-definitions.git
-                - name: revision
-                  value: main
-                - name: pathInRepo
-                  value: stepactions/eaas-get-latest-openshift-version-by-prefix/0.1/eaas-get-latest-openshift-version-by-prefix.yaml
-            params:
-              - name: prefix
-                value: "4.19."
-          - name: create-cluster
-            ref:
-              resolver: git
-              params:
-                - name: url
-                  value: https://github.com/konflux-ci/build-definitions.git
-                - name: revision
-                  value: main
-                - name: pathInRepo
-                  value: stepactions/eaas-create-ephemeral-cluster-hypershift-aws/0.1/eaas-create-ephemeral-cluster-hypershift-aws.yaml
-            params:
-              - name: eaasSpaceSecretRef
-                value: $(tasks.eaas-provision-space.results.secretRef)
-              - name: version
-                value: "$(steps.pick-version.results.version)"
-              - name: instanceType
-                value: "m5.large"
+        - name: workflow
+          value: hypershift-hostedcluster-workflow
+        - name: clusterProfile
+          value: aws-konflux-prod
+        - name: timeout
+          value: 1h
+        - name: releases
+          value: >-
+            {"latest":{"release":{"channel":"stable","version":"$(params.ocp-version)","architecture":"multi"}}}
+        - name: env
+          value: '{"COMPUTE_NODE_TYPE":"$(params.compute-node-type)","HOSTED_MANAGEMENT_CLUSTER":"$(params.hosted-management-cluster)"}'
     - name: get-stack-images
       description: Extract lightspeed-stack image and commit from SNAPSHOT (OGX runs from source in-pod)
       runAfter:
@@ -117,8 +99,8 @@ spec:
                 description: "commit sha to be used to store artifacts"
             script: |
               dnf -y install jq
-              echo -n "$(jq -r --arg n "lightspeed-stack-0-8" '.components[] | select(.name == $n) | .containerImage // ""' <<< "$SNAPSHOT")" > $(step.results.lightspeed-stack-image.path)
-              echo -n "$(jq -r --arg n "lightspeed-stack-0-8" '.components[] | select(.name == $n) | .source.git.revision // "latest"' <<< "$SNAPSHOT")" > $(step.results.commit.path)
+              echo -n "$(jq -r --arg n "lightspeed-stack-0-7" '.components[] | select(.name == $n) | .containerImage // ""' <<< "$SNAPSHOT")" > $(step.results.lightspeed-stack-image.path)
+              echo -n "$(jq -r --arg n "lightspeed-stack-0-7" '.components[] | select(.name == $n) | .source.git.revision // "latest"' <<< "$SNAPSHOT")" > $(step.results.commit.path)
     - name: echo-integration-params
       description: Echo all params passed to lightspeed-stack-integration-tests for verification before the test runs.
       runAfter:
@@ -180,10 +162,10 @@ spec:
           value: $(tasks.get-stack-images.results.commit)
         - name: namespace
           value: "$(params.namespace)"
-        - name: spaceRequestSecretName
-          value: $(tasks.eaas-provision-space.results.secretRef)
-        - name: clusterName
-          value: $(tasks.provision-cluster.results.clusterName)
+        - name: clusterCredentialsSecretRef
+          value: $(tasks.provision-cluster.results.secretRef)
+        - name: ocp-version
+          value: $(params.ocp-version)
       runAfter:
         - echo-integration-params
       taskSpec:
@@ -194,9 +176,9 @@ spec:
           - name: commit
           - name: namespace
             type: string
-          - name: spaceRequestSecretName
+          - name: clusterCredentialsSecretRef
             type: string
-          - name: clusterName
+          - name: ocp-version
             type: string
         results:
           - name: TEST_OUTPUT
@@ -217,25 +199,9 @@ spec:
             secret:
               secretName: redhat-registry-io-pull-secret
           - name: credentials
-            emptyDir: {}
+            secret:
+              secretName: $(params.clusterCredentialsSecretRef)
         steps:
-          - name: get-kubeconfig
-            ref:
-              resolver: git
-              params:
-                - name: url
-                  value: https://github.com/konflux-ci/build-definitions.git
-                - name: revision
-                  value: main
-                - name: pathInRepo
-                  value: stepactions/eaas-get-ephemeral-cluster-credentials/0.1/eaas-get-ephemeral-cluster-credentials.yaml
-            params:
-              - name: eaasSpaceSecretRef
-                value: $(params.spaceRequestSecretName)
-              - name: clusterName
-                value: "$(params.clusterName)"
-              - name: credentials
-                value: credentials
           - name: run-e2e-tests
             #onError: continue
             # Do not use onError: continue here unless a later step like
@@ -262,7 +228,7 @@ spec:
                 mountPath: /credentials
             env:
               - name: KUBECONFIG
-                value: "/credentials/$(steps.get-kubeconfig.results.kubeconfig)"
+                value: "/credentials/kubeconfig"
               - name: ARTIFACT_DIR
                 value: "/workspace/artifacts"
               - name: SUITE_ID
@@ -288,12 +254,12 @@ spec:
               echo "[e2e] 2/8 Installing deps (git, tar, jq, curl-minimal, python3, gettext for envsubst)..."
               microdnf -y install git tar jq curl-minimal python3 gettext
               echo "[e2e] 3/8 Downloading oc client..."
-              curl -sL -o oc.tar.gz https://mirror.openshift.com/pub/openshift-v4/x86_64/clients/ocp/latest-4.19/openshift-client-linux-amd64-rhel9.tar.gz
+              curl -sL -o oc.tar.gz https://mirror.openshift.com/pub/openshift-v4/x86_64/clients/ocp/latest-$(params.ocp-version)/openshift-client-linux-amd64-rhel9.tar.gz
               tar -xzf oc.tar.gz && chmod +x kubectl oc && mv oc kubectl /usr/local/bin/
               echo "[e2e] 4/8 SNAPSHOT (length ${#SNAPSHOT} chars; clone URL fixed — SNAPSHOT is main/upstream, not fork)..."
               # Fixed fork + branch: Konflux SNAPSHOT points at main repo/rev, not the PR/fork under test.
-              REPO_URL=$(jq -r '.components[] | select(.name == "lightspeed-stack-0-8") | .source.git.url // "https://github.com/lightspeed-core/lightspeed-stack.git"' <<< "$SNAPSHOT")
-              REPO_REV=$(jq -r '.components[] | select(.name == "lightspeed-stack-0-8") | .source.git.revision // "main"' <<< "$SNAPSHOT")
+              REPO_URL=$(jq -r '.components[] | select(.name == "lightspeed-stack-0-7") | .source.git.url // "https://github.com/lightspeed-core/lightspeed-stack.git"' <<< "$SNAPSHOT")
+              REPO_REV=$(jq -r '.components[] | select(.name == "lightspeed-stack-0-7") | .source.git.revision // "main"' <<< "$SNAPSHOT")
               echo "[e2e] 5/8 Clone $REPO_URL @ $REPO_REV"
               git clone -q "$REPO_URL" /workspace/lightspeed-stack
               cd /workspace/lightspeed-stack && git fetch origin "$REPO_REV" && git checkout -q "$REPO_REV"
@@ -319,7 +285,7 @@ spec:
           #     - name: credentials
           #       value: "credentials"
           #     - name: kubeconfig
-          #       value: "$(steps.get-kubeconfig.results.kubeconfig)"
+          #       value: "kubeconfig"
           #     - name: artifact-dir
           #       value: "/workspace/konflux-artifacts"
           # # validate that the cluster resources are available in another tekton step
@@ -359,4 +325,4 @@ spec:
           #       - name: revision
           #         value: main
           #       - name: pathInRepo
-          #         value: stepactions/fail-if-any-step-failed/0.1/fail-if-any-step-failed.yaml
+          #         value: stepactions/fail-if-any-step-failed/0.1/fail-if-any-step-failed.yaml