OSASINFRA-3627: [CI] Dummy job to test reach against machines behind Red Hat VPN

ci-operator/config/shiftstack/ci/shiftstack-ci-release-4.18.yaml

@@ -43,6 +43,11 @@ resources:
       cpu: 100m
       memory: 200Mi
 tests:
+- as: openshift-e2e-openstack-dummy
+  minimum_interval: 144h
+  steps:
+    cluster_profile: openstack-vh-mecha-central
+    workflow: openshift-e2e-openstack-dummy
 - as: e2e-openstack-fips
   minimum_interval: 56h
   steps:

ci-operator/jobs/shiftstack/ci/shiftstack-ci-release-4.18-periodics.yaml

@@ -1567,6 +1567,85 @@ periodics:
     - name: result-aggregator
       secret:
         secretName: result-aggregator
+- agent: kubernetes
+  cluster: build05
+  decorate: true
+  decoration_config:
+    skip_cloning: true
+  extra_refs:
+  - base_ref: release-4.18
+    org: shiftstack
+    repo: ci
+  labels:
+    ci-operator.openshift.io/cloud: openstack-vh-mecha-central
+    ci-operator.openshift.io/cloud-cluster-profile: openstack-vh-mecha-central
+    ci.openshift.io/generator: prowgen
+    job-release: "4.18"
+    pj-rehearse.openshift.io/can-be-rehearsed: "true"
+  minimum_interval: 144h
+  name: periodic-ci-shiftstack-ci-release-4.18-openshift-e2e-openstack-dummy
+  spec:
+    containers:
+    - args:
+      - --gcs-upload-secret=/secrets/gcs/service-account.json
+      - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+      - --lease-server-credentials-file=/etc/boskos/credentials
+      - --report-credentials-file=/etc/report/credentials
+      - --secret-dir=/secrets/ci-pull-credentials
+      - --secret-dir=/usr/local/openshift-e2e-openstack-dummy-cluster-profile
+      - --target=openshift-e2e-openstack-dummy
+      command:
+      - ci-operator
+      image: ci-operator:latest
+      imagePullPolicy: Always
+      name: ""
+      resources:
+        requests:
+          cpu: 10m
+      volumeMounts:
+      - mountPath: /etc/boskos
+        name: boskos
+        readOnly: true
+      - mountPath: /secrets/ci-pull-credentials
+        name: ci-pull-credentials
+        readOnly: true
+      - mountPath: /usr/local/openshift-e2e-openstack-dummy-cluster-profile
+        name: cluster-profile
+      - mountPath: /secrets/gcs
+        name: gcs-credentials
+        readOnly: true
+      - mountPath: /secrets/manifest-tool
+        name: manifest-tool-local-pusher
+        readOnly: true
+      - mountPath: /etc/pull-secret
+        name: pull-secret
+        readOnly: true
+      - mountPath: /etc/report
+        name: result-aggregator
+        readOnly: true
+    serviceAccountName: ci-operator
+    volumes:
+    - name: boskos
+      secret:
+        items:
+        - key: credentials
+          path: credentials
+        secretName: boskos-credentials
+    - name: ci-pull-credentials
+      secret:
+        secretName: ci-pull-credentials
+    - name: cluster-profile
+      secret:
+        secretName: cluster-secrets-openstack-vh-mecha-central
+    - name: manifest-tool-local-pusher
+      secret:
+        secretName: manifest-tool-local-pusher
+    - name: pull-secret
+      secret:
+        secretName: registry-pull-credentials
+    - name: result-aggregator
+      secret:
+        secretName: result-aggregator
 - agent: kubernetes
   cluster: build03
   decorate: true

ci-operator/step-registry/openshift/e2e/openstack/dummy/OWNERS

@@ -0,0 +1 @@
+../OWNERS

ci-operator/step-registry/openshift/e2e/openstack/dummy/openshift-e2e-openstack-dummy-commands.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+
+set -o nounset
+set -o errexit
+set -o pipefail
+
+# For disconnected or otherwise unreachable environments, we want to
+# have steps use an HTTP(S) proxy to reach the API server. This proxy
+# configuration file should export HTTP_PROXY, HTTPS_PROXY, and NO_PROXY
+# environment variables, as well as their lowercase equivalents (note
+# that libcurl doesn't recognize the uppercase variables).
+if test -f "${SHARED_DIR}/proxy-conf.sh"
+then
+	# shellcheck disable=SC1090
+	source "${SHARED_DIR}/proxy-conf.sh"
+fi
+
+# Curl to titan20
+curl http://titan20.lab.eng.tlv2.redhat.com:3128

ci-operator/step-registry/openshift/e2e/openstack/dummy/openshift-e2e-openstack-dummy-ref.metadata.json

@@ -0,0 +1,11 @@
+{
+	"path": "openshift/e2e/openstack/dummy/openshift-e2e-openstack-dummy-ref.yaml",
+	"owners": {
+		"approvers": [
+			"openstack-approvers"
+		],
+		"reviewers": [
+			"openstack-reviewers"
+		]
+	}
+}

ci-operator/step-registry/openshift/e2e/openstack/dummy/openshift-e2e-openstack-dummy-ref.yaml

@@ -0,0 +1,10 @@
+ref:
+  as: openshift-e2e-openstack-dummy
+  from: cli
+  commands: openshift-e2e-openstack-dummy-commands.sh
+  resources:
+    requests:
+      cpu: 10m
+      memory: 100Mi
+  documentation: |-
+    The openshift-e2e-openstack-dummy ref executes a dummy curl to titan20.lab.eng.tlv2.redhat.com for testing reachable

ci-operator/step-registry/openshift/e2e/openstack/dummy/openshift-e2e-openstack-dummy-workflow.metadata.json

@@ -0,0 +1,11 @@
+{
+	"path": "openshift/e2e/openstack/dummy/openshift-e2e-openstack-dummy-workflow.yaml",
+	"owners": {
+		"approvers": [
+			"openstack-approvers"
+		],
+		"reviewers": [
+			"openstack-reviewers"
+		]
+	}
+}

ci-operator/step-registry/openshift/e2e/openstack/dummy/openshift-e2e-openstack-dummy-workflow.yaml

@@ -0,0 +1,7 @@
+workflow:
+  as: openshift-e2e-openstack-dummy
+  steps:
+    test:
+    - ref: openshift-e2e-openstack-dummy
+  documentation: |-
+    The openshift-e2e-openstack-dummy workflow executes a dummy curl to titan20.lab.eng.tlv2.redhat.com for testing reachable

clusters/build-clusters/build05/assets/dns.yaml

@@ -30,3 +30,10 @@ spec:
         upstreams:
           - 10.1.170.91
           - 10.1.170.93
+    - name: intranet-prod-int-ams2
+      zones:
+        - lab.eng.tlv2.redhat.com
+      forwardPlugin:
+        policy: Sequential
+        upstreams:
+          - 10.47.242.10