UPSTREAM: <carry>: Add OpenShift tooling, images, configs and docs

Author: bertinatto

hack/make-rules/test.sh

@@ -52,7 +52,8 @@ kube::test::find_go_packages() {
             -e '^k8s.io/kubernetes/test/e2e$' \
             -e '^k8s.io/kubernetes/test/e2e_node(/.*)?$' \
             -e '^k8s.io/kubernetes/test/e2e_kubeadm(/.*)?$' \
-            -e '^k8s.io/.*/test/integration(/.*)?$'
+            -e '^k8s.io/.*/test/integration(/.*)?$' \
+            -e '^k8s.io/kubernetes/openshift-hack/e2e(/.*)?$'
   )
 }
 

openshift-hack/e2e/annotate/rules.go

@@ -11,17 +11,21 @@ var (
 		"[Disabled:Alpha]": {
 			`\[Feature:StorageVersionAPI\]`,
 			`\[Feature:InPlacePodVerticalScaling\]`,
-			`\[Feature:RecoverVolumeExpansionFailure\]`,
-			`\[Feature:WatchList\]`,
 			`\[Feature:ServiceCIDRs\]`,
 			`\[Feature:ClusterTrustBundle\]`,
 			`\[Feature:SELinuxMount\]`,
 			`\[FeatureGate:SELinuxMount\]`,
-			`\[Feature:RelaxedEnvironmentVariableValidation\]`,
 			`\[Feature:UserNamespacesPodSecurityStandards\]`,
 			`\[Feature:UserNamespacesSupport\]`, // disabled Beta
 			`\[Feature:DynamicResourceAllocation\]`,
 			`\[Feature:VolumeAttributesClass\]`, // disabled Beta
+			// 4.19
+			`\[Feature:PodLevelResources\]`,
+			`\[Feature:SchedulerAsyncPreemption\]`,
+			`\[Feature:RelaxedDNSSearchValidation\]`,
+			`\[Feature:PodLogsQuerySplitStreams\]`,
+			`\[Feature:PodLifecycleSleepActionAllowZero\]`,
+			`\[Feature:volumegroupsnapshot\]`,
 		},
 		// tests for features that are not implemented in openshift
 		"[Disabled:Unimplemented]": {
@@ -162,7 +166,24 @@ var (
 			`\[sig-cli\] Kubectl client Kubectl prune with applyset should apply and prune objects`,                    // TODO(workloads): alpha feature in k8s 1.27. It's failing with `error: unknown flag: --applyset`. Needs investigation
 
 			// https://issues.redhat.com/browse/OCPBUGS-17194
+			// https://redhat-internal.slack.com/archives/C07V32J0YKF/p1732908903851389
 			`\[sig-node\] ImageCredentialProvider \[Feature:KubeletCredentialProviders\] should be able to create pod with image credentials fetched from external credential provider`,
+
+			// https://issues.redhat.com/browse/OCPBUGS-45214
+			// Even though this feature is not GA in k/k, it will be GA in OCP 4.19, so we should fix it and unskip this test
+			`\[Feature:volumegroupsnapshot\] VolumeGroupSnapshottable should create snapshots for multiple volumes in a pod`,
+
+			// https://issues.redhat.com/browse/OCPBUGS-45220
+			`\[sig-api-machinery\] API Streaming`,
+
+			// https://redhat-internal.slack.com/archives/C07V32J0YKF/p1732906882980939
+			`\[sig-network\] Services should implement NodePort and HealthCheckNodePort correctly when ExternalTrafficPolicy changes`,
+
+			// https://redhat-internal.slack.com/archives/C07V32J0YKF/p1732906393041609
+			`\[sig-cli\] Kubectl Port forwarding Shutdown client connection while the remote stream is writing data to the port-forward connection port-forward should keep working after detect broken connection`,
+
+			// https://redhat-internal.slack.com/archives/C07V32J0YKF/p1732907788156959
+			`\[sig-node\] PodRejectionStatus Kubelet should reject pod when the node didn't have enough resource`,
 		},
 		// tests that may work, but we don't support them
 		"[Disabled:Unsupported]": {

staging/src/k8s.io/code-generator/examples/hack/verify-codegen.sh

@@ -43,6 +43,8 @@ else
   exit 1
 fi
 
+GOFLAGS=-mod=readonly
+
 # smoke test
 echo "Smoke testing examples by compiling..."
 pushd "${SCRIPT_ROOT}"

staging/src/k8s.io/code-generator/kube_codegen.sh

@@ -27,6 +27,8 @@ set -o pipefail
 
 KUBE_CODEGEN_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
 
+GOFLAGS=-mod=readonly
+
 function kube::codegen::internal::findz() {
     # We use `find` rather than `git ls-files` because sometimes external
     # projects use this across repos.  This is an imperfect wrapper of find,