Update IPsec CI lane configuration for component readiness

As per changes in openshift/origin#29437 for IPsec E2E
tests, each IPsec mode Full and External must be tested with two different CI
lanes, so this commit replaces existing e2e-aws-ovn-ipsec-serial CI lane with
e2e-aws-ovn-ipsec-full-mode and e2e-aws-ovn-ipsec-external-mode CI lanes.

This commit also makes both jobs mandatory and periodic jobs which helps
to make IPsec eligible for component readiness.

Signed-off-by: Periyasamy Palanisamy <[email protected]>

Author: pperiyasamy

ci-operator/config/openshift-priv/cluster-network-operator/openshift-priv-cluster-network-operator-master.yaml

@@ -114,15 +114,19 @@ tests:
     env:
       EXTRA_MG_ARGS: --host-network
     workflow: openshift-e2e-aws-ovn-serial
-- always_run: false
-  as: e2e-aws-ovn-ipsec-serial
-  optional: true
+- as: e2e-aws-ovn-ipsec-full-mode
+  steps:
+    cluster_profile: aws
+    env:
+      EXTRA_MG_ARGS: --host-network
+    workflow: openshift-e2e-aws-ovn-ipsec-serial
+- as: e2e-aws-ovn-ipsec-external-mode
   steps:
     cluster_profile: aws
     env:
       EXTRA_MG_ARGS: --host-network
+      IPSEC_MODE: External
     workflow: openshift-e2e-aws-ovn-ipsec-serial
-  timeout: 6h0m0s
 - as: e2e-metal-ipi-ovn-ipv6
   cluster: build05
   steps:

ci-operator/config/openshift-priv/cluster-network-operator/openshift-priv-cluster-network-operator-release-4.19.yaml

@@ -115,15 +115,19 @@ tests:
     env:
       EXTRA_MG_ARGS: --host-network
     workflow: openshift-e2e-aws-ovn-serial
-- always_run: false
-  as: e2e-aws-ovn-ipsec-serial
-  optional: true
+- as: e2e-aws-ovn-ipsec-full-mode
+  steps:
+    cluster_profile: aws
+    env:
+      EXTRA_MG_ARGS: --host-network
+    workflow: openshift-e2e-aws-ovn-ipsec-serial
+- as: e2e-aws-ovn-ipsec-external-mode
   steps:
     cluster_profile: aws
     env:
       EXTRA_MG_ARGS: --host-network
+      IPSEC_MODE: External
     workflow: openshift-e2e-aws-ovn-ipsec-serial
-  timeout: 6h0m0s
 - as: e2e-metal-ipi-ovn-ipv6
   cluster: build05
   steps:

ci-operator/config/openshift-priv/cluster-network-operator/openshift-priv-cluster-network-operator-release-4.20.yaml

@@ -114,15 +114,19 @@ tests:
     env:
       EXTRA_MG_ARGS: --host-network
     workflow: openshift-e2e-aws-ovn-serial
-- always_run: false
-  as: e2e-aws-ovn-ipsec-serial
-  optional: true
+- as: e2e-aws-ovn-ipsec-full-mode
+  steps:
+    cluster_profile: aws
+    env:
+      EXTRA_MG_ARGS: --host-network
+    workflow: openshift-e2e-aws-ovn-ipsec-serial
+- as: e2e-aws-ovn-ipsec-external-mode
   steps:
     cluster_profile: aws
     env:
       EXTRA_MG_ARGS: --host-network
+      IPSEC_MODE: External
     workflow: openshift-e2e-aws-ovn-ipsec-serial
-  timeout: 6h0m0s
 - as: e2e-metal-ipi-ovn-ipv6
   cluster: build05
   steps:

ci-operator/config/openshift-priv/origin/openshift-priv-origin-main.yaml

@@ -324,15 +324,19 @@ tests:
       COMPUTE_NODE_TYPE: c5n.metal
       FEATURE_SET: TechPreviewNoUpgrade
     workflow: openshift-e2e-aws-ovn-virt
-- always_run: false
-  as: e2e-aws-ovn-ipsec-serial
-  optional: true
+- as: e2e-aws-ovn-ipsec-full-mode
   steps:
     cluster_profile: aws-2
     env:
       BASE_DOMAIN: aws-2.ci.openshift.org
     workflow: openshift-e2e-aws-ovn-ipsec-serial
-  timeout: 6h0m0s
+- as: e2e-aws-ovn-ipsec-external-mode
+  steps:
+    cluster_profile: aws-2
+    env:
+      BASE_DOMAIN: aws-2.ci.openshift.org
+      IPSEC_MODE: External
+    workflow: openshift-e2e-aws-ovn-ipsec-serial
 - as: e2e-aws-csi
   optional: true
   skip_if_only_changed: ^(?:docs|\.github)/|\.md$|^(?:\.gitignore|OWNERS|OWNERS_ALIASES|PROJECT|LICENSE)$

ci-operator/config/openshift-priv/origin/openshift-priv-origin-release-4.19.yaml

@@ -325,15 +325,19 @@ tests:
       COMPUTE_NODE_TYPE: c5n.metal
       FEATURE_SET: TechPreviewNoUpgrade
     workflow: openshift-e2e-aws-ovn-virt
-- always_run: false
-  as: e2e-aws-ovn-ipsec-serial
-  optional: true
+- as: e2e-aws-ovn-ipsec-full-mode
   steps:
     cluster_profile: aws-2
     env:
       BASE_DOMAIN: aws-2.ci.openshift.org
     workflow: openshift-e2e-aws-ovn-ipsec-serial
-  timeout: 6h0m0s
+- as: e2e-aws-ovn-ipsec-external-mode
+  steps:
+    cluster_profile: aws-2
+    env:
+      BASE_DOMAIN: aws-2.ci.openshift.org
+      IPSEC_MODE: External
+    workflow: openshift-e2e-aws-ovn-ipsec-serial
 - as: e2e-aws-csi
   optional: true
   skip_if_only_changed: ^(?:docs|\.github)/|\.md$|^(?:\.gitignore|OWNERS|OWNERS_ALIASES|PROJECT|LICENSE)$

ci-operator/config/openshift-priv/origin/openshift-priv-origin-release-4.20.yaml

@@ -324,15 +324,19 @@ tests:
       COMPUTE_NODE_TYPE: c5n.metal
       FEATURE_SET: TechPreviewNoUpgrade
     workflow: openshift-e2e-aws-ovn-virt
-- always_run: false
-  as: e2e-aws-ovn-ipsec-serial
-  optional: true
+- as: e2e-aws-ovn-ipsec-full-mode
   steps:
     cluster_profile: aws-2
     env:
       BASE_DOMAIN: aws-2.ci.openshift.org
     workflow: openshift-e2e-aws-ovn-ipsec-serial
-  timeout: 6h0m0s
+- as: e2e-aws-ovn-ipsec-external-mode
+  steps:
+    cluster_profile: aws-2
+    env:
+      BASE_DOMAIN: aws-2.ci.openshift.org
+      IPSEC_MODE: External
+    workflow: openshift-e2e-aws-ovn-ipsec-serial
 - as: e2e-aws-csi
   optional: true
   skip_if_only_changed: ^(?:docs|\.github)/|\.md$|^(?:\.gitignore|OWNERS|OWNERS_ALIASES|PROJECT|LICENSE)$

ci-operator/config/openshift/cluster-network-operator/openshift-cluster-network-operator-master.yaml

@@ -113,15 +113,19 @@ tests:
     env:
       EXTRA_MG_ARGS: --host-network
     workflow: openshift-e2e-aws-ovn-serial
-- always_run: false
-  as: e2e-aws-ovn-ipsec-serial
-  optional: true
+- as: e2e-aws-ovn-ipsec-full-mode
+  steps:
+    cluster_profile: aws
+    env:
+      EXTRA_MG_ARGS: --host-network
+    workflow: openshift-e2e-aws-ovn-ipsec-serial
+- as: e2e-aws-ovn-ipsec-external-mode
   steps:
     cluster_profile: aws
     env:
       EXTRA_MG_ARGS: --host-network
+      IPSEC_MODE: External
     workflow: openshift-e2e-aws-ovn-ipsec-serial
-  timeout: 6h0m0s
 - as: e2e-metal-ipi-ovn-ipv6
   cluster: build05
   steps:

ci-operator/config/openshift/cluster-network-operator/openshift-cluster-network-operator-release-4.19.yaml

@@ -114,15 +114,19 @@ tests:
     env:
       EXTRA_MG_ARGS: --host-network
     workflow: openshift-e2e-aws-ovn-serial
-- always_run: false
-  as: e2e-aws-ovn-ipsec-serial
-  optional: true
+- as: e2e-aws-ovn-ipsec-full-mode
+  steps:
+    cluster_profile: aws
+    env:
+      EXTRA_MG_ARGS: --host-network
+    workflow: openshift-e2e-aws-ovn-ipsec-serial
+- as: e2e-aws-ovn-ipsec-external-mode
   steps:
     cluster_profile: aws
     env:
       EXTRA_MG_ARGS: --host-network
+      IPSEC_MODE: External
     workflow: openshift-e2e-aws-ovn-ipsec-serial
-  timeout: 6h0m0s
 - as: e2e-metal-ipi-ovn-ipv6
   cluster: build05
   steps:

ci-operator/config/openshift/cluster-network-operator/openshift-cluster-network-operator-release-4.20.yaml

@@ -113,13 +113,18 @@ tests:
     env:
       EXTRA_MG_ARGS: --host-network
     workflow: openshift-e2e-aws-ovn-serial
-- always_run: false
-  as: e2e-aws-ovn-ipsec-serial
-  optional: true
+- as: e2e-aws-ovn-ipsec-full-mode
+  steps:
+    cluster_profile: aws
+    env:
+      EXTRA_MG_ARGS: --host-network
+    workflow: openshift-e2e-aws-ovn-ipsec-serial
+- as: e2e-aws-ovn-ipsec-external-mode
   steps:
     cluster_profile: aws
     env:
       EXTRA_MG_ARGS: --host-network
+      IPSEC_MODE: External
     workflow: openshift-e2e-aws-ovn-ipsec-serial
   timeout: 6h0m0s
 - as: e2e-metal-ipi-ovn-ipv6

ci-operator/config/openshift/origin/openshift-origin-main.yaml

@@ -323,15 +323,19 @@ tests:
       COMPUTE_NODE_TYPE: c5n.metal
       FEATURE_SET: TechPreviewNoUpgrade
     workflow: openshift-e2e-aws-ovn-virt
-- always_run: false
-  as: e2e-aws-ovn-ipsec-serial
-  optional: true
+- as: e2e-aws-ovn-ipsec-full-mode
   steps:
     cluster_profile: aws-2
     env:
       BASE_DOMAIN: aws-2.ci.openshift.org
     workflow: openshift-e2e-aws-ovn-ipsec-serial
-  timeout: 6h0m0s
+- as: e2e-aws-ovn-ipsec-external-mode
+  steps:
+    cluster_profile: aws-2
+    env:
+      BASE_DOMAIN: aws-2.ci.openshift.org
+      IPSEC_MODE: External
+    workflow: openshift-e2e-aws-ovn-ipsec-serial
 - as: e2e-aws-csi
   optional: true
   skip_if_only_changed: ^(?:docs|\.github)/|\.md$|^(?:\.gitignore|OWNERS|OWNERS_ALIASES|PROJECT|LICENSE)$

ci-operator/config/openshift/origin/openshift-origin-release-4.19.yaml

@@ -324,15 +324,19 @@ tests:
       COMPUTE_NODE_TYPE: c5n.metal
       FEATURE_SET: TechPreviewNoUpgrade
     workflow: openshift-e2e-aws-ovn-virt
-- always_run: false
-  as: e2e-aws-ovn-ipsec-serial
-  optional: true
+- as: e2e-aws-ovn-ipsec-full-mode
   steps:
     cluster_profile: aws-2
     env:
       BASE_DOMAIN: aws-2.ci.openshift.org
     workflow: openshift-e2e-aws-ovn-ipsec-serial
-  timeout: 6h0m0s
+- as: e2e-aws-ovn-ipsec-external-mode
+  steps:
+    cluster_profile: aws-2
+    env:
+      BASE_DOMAIN: aws-2.ci.openshift.org
+      IPSEC_MODE: External
+    workflow: openshift-e2e-aws-ovn-ipsec-serial
 - as: e2e-aws-csi
   optional: true
   skip_if_only_changed: ^(?:docs|\.github)/|\.md$|^(?:\.gitignore|OWNERS|OWNERS_ALIASES|PROJECT|LICENSE)$

ci-operator/config/openshift/origin/openshift-origin-release-4.20.yaml

@@ -323,15 +323,19 @@ tests:
       COMPUTE_NODE_TYPE: c5n.metal
       FEATURE_SET: TechPreviewNoUpgrade
     workflow: openshift-e2e-aws-ovn-virt
-- always_run: false
-  as: e2e-aws-ovn-ipsec-serial
-  optional: true
+- as: e2e-aws-ovn-ipsec-full-mode
   steps:
     cluster_profile: aws-2
     env:
       BASE_DOMAIN: aws-2.ci.openshift.org
     workflow: openshift-e2e-aws-ovn-ipsec-serial
-  timeout: 6h0m0s
+- as: e2e-aws-ovn-ipsec-external-mode
+  steps:
+    cluster_profile: aws-2
+    env:
+      BASE_DOMAIN: aws-2.ci.openshift.org
+      IPSEC_MODE: External
+    workflow: openshift-e2e-aws-ovn-ipsec-serial
 - as: e2e-aws-csi
   optional: true
   skip_if_only_changed: ^(?:docs|\.github)/|\.md$|^(?:\.gitignore|OWNERS|OWNERS_ALIASES|PROJECT|LICENSE)$