INTEROP-8979: Wire Slack webhook into firewatch-report-issues step

ci-operator/config/RedHatQE/firewatch/RedHatQE-firewatch-main__slack-webhook-test.yaml

@@ -0,0 +1,50 @@
+base_images:
+  cli:
+    name: "4.21"
+    namespace: ocp
+    tag: cli
+releases:
+  latest:
+    candidate:
+      product: ocp
+      stream: nightly
+      version: "4.21"
+resources:
+  '*':
+    requests:
+      cpu: 200m
+      memory: 400Mi
+tests:
+- as: slack-webhook-test
+  cron: 0 23 31 2 *
+  steps:
+    cluster_profile: aws-cspi-qe
+    env:
+      BASE_DOMAIN: cspilp.interop.ccitredhat.com
+      FIREWATCH_CONFIG: |
+        {
+          "failure_rules": [
+            {"step": "*", "failure_type": "all", "classification": "Test", "jira_project": "INTEROP", "slack_user": "mpruitt@redhat.com"}
+          ]
+        }
+      FIREWATCH_DEFAULT_JIRA_ASSIGNEE: mpruitt@redhat.com
+      FIREWATCH_DEFAULT_JIRA_PROJECT: INTEROP
+    post:
+    - ref: firewatch-report-issues
+    pre:
+    - ref: ipi-conf
+    - ref: ipi-conf-aws
+    - chain: ipi-install
+    test:
+    - as: fail-to-trigger-webhook
+      commands: exit 1
+      from: cli
+      resources:
+        requests:
+          cpu: 100m
+          memory: 100Mi
+zz_generated_metadata:
+  branch: main
+  org: RedHatQE
+  repo: firewatch
+  variant: slack-webhook-test

ci-operator/config/openshift/ci-tools/openshift-ci-tools-main.yaml

@@ -941,7 +941,6 @@ tests:
         field: gsm-e2e-test-sa-key
         group: test-credentials
         mount_path: /tmp/gcp-creds
-        namespace: ""
       - bundle: hive-hive-credentials
         mount_path: /tmp/hive
         namespace: test-credentials
@@ -1197,7 +1196,6 @@ tests:
         field: api-token
         group: snyk-credentials
         mount_path: /snyk-credentials
-        namespace: ""
       env:
       - default: ci-tools
         name: PROJECT_NAME

ci-operator/jobs/RedHatQE/firewatch/RedHatQE-firewatch-main-periodics.yaml

@@ -0,0 +1,84 @@
+periodics:
+- agent: kubernetes
+  cluster: build10
+  cron: 0 23 31 2 *
+  decorate: true
+  decoration_config:
+    skip_cloning: true
+  extra_refs:
+  - base_ref: main
+    org: RedHatQE
+    repo: firewatch
+  labels:
+    ci-operator.openshift.io/cloud: aws
+    ci-operator.openshift.io/cloud-cluster-profile: aws-cspi-qe
+    ci-operator.openshift.io/variant: slack-webhook-test
+    ci.openshift.io/generator: prowgen
+    job-release: "4.21"
+    pj-rehearse.openshift.io/can-be-rehearsed: "true"
+  name: periodic-ci-RedHatQE-firewatch-main-slack-webhook-test-slack-webhook-test
+  spec:
+    containers:
+    - args:
+      - --gcs-upload-secret=/secrets/gcs/service-account.json
+      - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+      - --lease-server-credentials-file=/etc/boskos/credentials
+      - --report-credentials-file=/etc/report/credentials
+      - --secret-dir=/secrets/ci-pull-credentials
+      - --target=slack-webhook-test
+      - --variant=slack-webhook-test
+      command:
+      - ci-operator
+      env:
+      - name: HTTP_SERVER_IP
+        valueFrom:
+          fieldRef:
+            fieldPath: status.podIP
+      image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
+      imagePullPolicy: Always
+      name: ""
+      ports:
+      - containerPort: 8080
+        name: http
+      resources:
+        requests:
+          cpu: 10m
+      volumeMounts:
+      - mountPath: /etc/boskos
+        name: boskos
+        readOnly: true
+      - mountPath: /secrets/ci-pull-credentials
+        name: ci-pull-credentials
+        readOnly: true
+      - mountPath: /secrets/gcs
+        name: gcs-credentials
+        readOnly: true
+      - mountPath: /secrets/manifest-tool
+        name: manifest-tool-local-pusher
+        readOnly: true
+      - mountPath: /etc/pull-secret
+        name: pull-secret
+        readOnly: true
+      - mountPath: /etc/report
+        name: result-aggregator
+        readOnly: true
+    serviceAccountName: ci-operator
+    volumes:
+    - name: boskos
+      secret:
+        items:
+        - key: credentials
+          path: credentials
+        secretName: boskos-credentials
+    - name: ci-pull-credentials
+      secret:
+        secretName: ci-pull-credentials
+    - name: manifest-tool-local-pusher
+      secret:
+        secretName: manifest-tool-local-pusher
+    - name: pull-secret
+      secret:
+        secretName: registry-pull-credentials
+    - name: result-aggregator
+      secret:
+        secretName: result-aggregator

ci-operator/step-registry/cluster-profiles/cluster-profiles-config.yaml

@@ -1073,6 +1073,7 @@
         - web-terminal-operator
     - org: RedHatQE
       repos:
+        - firewatch
         - interop-testing
     - org: rh-messaging-qe
       repos:

ci-operator/step-registry/firewatch/report-issues/firewatch-report-issues-commands.sh

@@ -42,6 +42,12 @@ if [ -f "${SHARED_DIR}/${FIREWATCH_JIRA_ADDITIONAL_LABELS_FILE}" ]; then
     report_command+=" --additional-labels-file=${SHARED_DIR}/${FIREWATCH_JIRA_ADDITIONAL_LABELS_FILE}"
 fi
 
+if [ -f /tmp/secrets/slack/slack_rule_notification_webhook_url ]; then
+    SLACK_WEBHOOK_URL=$(cat /tmp/secrets/slack/slack_rule_notification_webhook_url)
+    SLACK_WEBHOOK_URL="${SLACK_WEBHOOK_URL%"${SLACK_WEBHOOK_URL##*[![:space:]]}"}"
+    export SLACK_WEBHOOK_URL
+fi
+
 echo $report_command
 
 eval "$report_command"

ci-operator/step-registry/firewatch/report-issues/firewatch-report-issues-ref.yaml

@@ -12,6 +12,9 @@ ref:
     - namespace: test-credentials
       name: firewatch-tool-private-deck-credentials
       mount_path: /tmp/secrets/private-deck
+    - namespace: test-credentials
+      name: firewatch-slack-notify-webhook-url
+      mount_path: /tmp/secrets/slack
   resources:
     requests:
       cpu: 10m
@@ -74,6 +77,9 @@ ref:
   - name: FIREWATCH_CONFIG_FILE_PATH
     default: ""
     documentation: The URL/file path of the Firewatch configuration (json file).
+  - name: SLACK_WEBHOOK_URL
+    default: ""
+    documentation: Slack incoming webhook URL. When set, firewatch posts notifications on issue creation and duplicate detection.
 
   documentation: |-
     Please see the CSPI-QE repository for more documentation on this tool: https://github.com/CSPI-QE/firewatch

cluster-profile-set-details.json

@@ -0,0 +1,19 @@
+{
+  "openshift-org-aws": [
+    "aws",
+    "aws-2",
+    "aws-3",
+    "aws-4",
+    "aws-5"
+  ],
+  "openshift-org-azure": [
+    "azure-2",
+    "azure4"
+  ],
+  "openshift-org-gcp": [
+    "gcp",
+    "gcp-arm64",
+    "gcp-openshift-gce-devel-ci-2",
+    "gcp-3"
+  ]
+}

core-services/prow/02_config/openshift-eng/olm-team-ai-helpers/_pluginconfig.yaml

@@ -1,10 +1,9 @@
 approve:
-- lgtm_acts_as_approve: true
-  repos:
-  - openshift-eng/olm-team-ai-helpers
+- repos:
+  - osac-project/osac-templates
   require_self_approval: false
 external_plugins:
-  openshift-eng/olm-team-ai-helpers:
+  osac-project/osac-templates:
   - endpoint: http://refresh
     events:
     - issue_comment
@@ -44,10 +43,10 @@ external_plugins:
     name: multi-pr-prow-plugin
 lgtm:
 - repos:
-  - openshift-eng/olm-team-ai-helpers
+  - osac-project/osac-templates
   review_acts_as_lgtm: true
 plugins:
-  openshift-eng/olm-team-ai-helpers:
+  osac-project/osac-templates:
     plugins:
     - assign
     - blunderbuss
@@ -76,8 +75,6 @@ plugins:
     - approve
 triggers:
 - repos:
-  - openshift-eng/olm-team-ai-helpers
-  trigger_github_workflows: true
+  - osac-project/osac-templates
   trusted_apps:
-  - dependabot
   - openshift-merge-bot

core-services/prow/02_config/openshift-eng/openshift-tests-extension/_pluginconfig.yaml

@@ -1,6 +1,5 @@
 approve:
-- lgtm_acts_as_approve: true
-  repos:
+- repos:
   - openshift-eng/openshift-tests-extension
   require_self_approval: false
 external_plugins:

core-services/prow/02_config/openshift-eng/ota-tools/_pluginconfig.yaml

@@ -1,9 +1,9 @@
 approve:
 - repos:
-  - openshift-eng/ota-tools
+  - smg247/ai-pr-timeline
   require_self_approval: false
 external_plugins:
-  openshift-eng/ota-tools:
+  smg247/ai-pr-timeline:
   - endpoint: http://refresh
     events:
     - issue_comment
@@ -43,10 +43,10 @@ external_plugins:
     name: multi-pr-prow-plugin
 lgtm:
 - repos:
-  - openshift-eng/ota-tools
+  - smg247/ai-pr-timeline
   review_acts_as_lgtm: true
 plugins:
-  openshift-eng/ota-tools:
+  smg247/ai-pr-timeline:
     plugins:
     - assign
     - blunderbuss
@@ -75,6 +75,6 @@ plugins:
     - approve
 triggers:
 - repos:
-  - openshift-eng/ota-tools
+  - smg247/ai-pr-timeline
   trusted_apps:
   - openshift-merge-bot

core-services/prow/02_config/openshift-online/aws-nuke-cf/_pluginconfig.yaml

@@ -1,10 +1,9 @@
 approve:
-- lgtm_acts_as_approve: true
-  repos:
-  - openshift-online/aws-nuke-cf
-  require_self_approval: true
+- repos:
+  - osac-project/fulfillment-cli
+  require_self_approval: false
 external_plugins:
-  openshift-online/aws-nuke-cf:
+  osac-project/fulfillment-cli:
   - endpoint: http://refresh
     events:
     - issue_comment
@@ -44,10 +43,10 @@ external_plugins:
     name: multi-pr-prow-plugin
 lgtm:
 - repos:
-  - openshift-online/aws-nuke-cf
+  - osac-project/fulfillment-cli
   review_acts_as_lgtm: true
 plugins:
-  openshift-online/aws-nuke-cf:
+  osac-project/fulfillment-cli:
     plugins:
     - assign
     - blunderbuss
@@ -76,6 +75,6 @@ plugins:
     - approve
 triggers:
 - repos:
-  - openshift-online/aws-nuke-cf
+  - osac-project/fulfillment-cli
   trusted_apps:
   - openshift-merge-bot

core-services/prow/02_config/openshift-priv/ansible-ocp-networking-migration-rollback/_pluginconfig.yaml

@@ -1,5 +1,8 @@
-triggers:
+approve:
 - repos:
   - openshift-priv/ansible-ocp-networking-migration-rollback
-  trusted_apps:
-  - openshift-merge-bot
+  require_self_approval: false
+lgtm:
+- repos:
+  - openshift-priv/ansible-ocp-networking-migration-rollback
+  review_acts_as_lgtm: true

core-services/prow/02_config/openshift-priv/community.okd/_pluginconfig.yaml

@@ -1,5 +1,8 @@
-triggers:
+approve:
 - repos:
   - openshift-priv/community.okd
-  trusted_apps:
-  - openshift-merge-bot
+  require_self_approval: false
+lgtm:
+- repos:
+  - openshift-priv/community.okd
+  review_acts_as_lgtm: true

core-services/prow/02_config/openshift-priv/installer-aro/_pluginconfig.yaml

@@ -1,5 +1,8 @@
-triggers:
+approve:
 - repos:
   - openshift-priv/installer-aro
-  trusted_apps:
-  - openshift-merge-bot
+  require_self_approval: false
+lgtm:
+- repos:
+  - openshift-priv/installer-aro
+  review_acts_as_lgtm: true

core-services/prow/02_config/openshift-priv/kueue-operator/_pluginconfig.yaml

@@ -1,5 +1,8 @@
-triggers:
+approve:
 - repos:
   - openshift-priv/kueue-operator
-  trusted_apps:
-  - openshift-merge-bot
+  require_self_approval: false
+lgtm:
+- repos:
+  - openshift-priv/kueue-operator
+  review_acts_as_lgtm: true

core-services/prow/02_config/openshift-priv/lightspeed-service/_pluginconfig.yaml

@@ -1,5 +1,8 @@
-triggers:
+approve:
 - repos:
   - openshift-priv/lightspeed-service
-  trusted_apps:
-  - openshift-merge-bot
+  require_self_approval: false
+lgtm:
+- repos:
+  - openshift-priv/lightspeed-service
+  review_acts_as_lgtm: true

core-services/prow/02_config/openshift-priv/lvm-driver/_pluginconfig.yaml

@@ -1,5 +1,4 @@
-triggers:
+approve:
 - repos:
   - openshift-priv/lvm-driver
-  trusted_apps:
-  - openshift-merge-bot
+  require_self_approval: false