metadata: annotations: pipeline_run_if_changed: ^(vendor/github.com/openshift/library-go/pkg/operator/encryption)|^(test/e2e-encryption-kms)|^(test/library/encryption) prow.k8s.io/context: ci/rehearse/openshift/cluster-openshift-apiserver-operator/release-5.2/e2e-aws-operator-encryption-kms-2 prow.k8s.io/job: rehearse-85287-pull-ci-openshift-cluster-openshift-apiserver-operator-release-5.2-e2e-aws-operator-encryption-kms-2 creationTimestamp: "2026-09-17T13:46:36Z" generation: 5 labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws ci.openshift.io/generator: prowgen ci.openshift.io/rehearse: "85287" ci.openshift.io/rehearse.context: e2e-aws-operator-encryption-kms-2 created-by-prow: "true" pj-rehearse.openshift.io/can-be-rehearsed: "true" pj-rehearse.openshift.io/source-type: changedRegistryContent prow.k8s.io/build-id: "2100582192970207232" prow.k8s.io/context: rele prow.k8s.io/id: 25252751-8720-4d26-8c52-759d5d614f1d prow.k8s.io/job: rehearse-85287-pull-ci-openshift-cluster-openshift-apiserver-op prow.k8s.io/refs.base_ref: main prow.k8s.io/refs.org: openshift prow.k8s.io/refs.pull: "85287" prow.k8s.io/refs.repo: release prow.k8s.io/type: presubmit name: 25252751-8720-4d26-8c52-759d5d614f1d namespace: ci resourceVersion: "8212472569" uid: d7c5072e-4217-4625-9c83-39b255ea65ea spec: agent: kubernetes cluster: build05 context: ci/rehearse/openshift/cluster-openshift-apiserver-operator/release-5.2/e2e-aws-operator-encryption-kms-2 decoration_config: censor_secrets: true censoring_options: minimum_secret_length: 6 gcs_configuration: bucket: test-platform-results-public compress_file_types: - txt - log - json - tar - html - yaml default_org: openshift default_repo: origin job_url_prefix: https://prow.ci.openshift.org/view/ mediaTypes: log: text/plain path_strategy: single gcs_credentials_secret: gce-sa-credentials-gcs-publisher grace_period: 1h0m0s resources: clonerefs: limits: memory: 3Gi requests: cpu: 100m memory: 500Mi initupload: limits: memory: 200Mi requests: cpu: 100m memory: 50Mi place_entrypoint: limits: memory: 100Mi requests: cpu: 100m memory: 25Mi sidecar: limits: memory: 2Gi requests: cpu: 100m memory: 250Mi timeout: 8h0m0s utility_images: clonerefs: us-docker.pkg.dev/k8s-infra-prow/images/clonerefs:v20260908-104d452f4 entrypoint: us-docker.pkg.dev/k8s-infra-prow/images/entrypoint:v20260908-104d452f4 initupload: us-docker.pkg.dev/k8s-infra-prow/images/initupload:v20260908-104d452f4 sidecar: us-docker.pkg.dev/k8s-infra-prow/images/sidecar:v20260908-104d452f4 extra_refs: - base_ref: release-5.2 org: openshift repo: cluster-openshift-apiserver-operator sparse_checkout_files: - .ci-operator.yaml - Dockerfile workdir: true job: rehearse-85287-pull-ci-openshift-cluster-openshift-apiserver-operator-release-5.2-e2e-aws-operator-encryption-kms-2 namespace: ci pod_spec: containers: - args: - --enable-secrets-store-csi-driver=true - --gcs-upload-secret=/secrets/gcs/service-account.json - --gsm-config=/etc/gsm-config/gsm-config.yaml - --gsm-credentials-file=/etc/gsm-credentials/key.json - --gsm-project-config=/etc/gsm-config/gsm-project-config.yaml - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-operator-encryption-kms-2 command: - ci-operator env: - name: HTTP_SERVER_IP valueFrom: fieldRef: fieldPath: status.podIP - name: CONFIG_SPEC_GCS_URL value: gs://test-platform-results-public/pj-rehearse/configs/openshift/release/85287/7804bec388ddb17cae901a25414ca07b2572c3a3/pull-ci-openshift-cluster-openshift-apiserver-operator-release-5.2-e2e-aws-operator-encryption-kms-2 image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest imagePullPolicy: Always name: "" ports: - containerPort: 8080 name: http resources: requests: cpu: 10m volumeMounts: - mountPath: /etc/boskos name: boskos readOnly: true - mountPath: /secrets/ci-pull-credentials name: ci-pull-credentials readOnly: true - mountPath: /secrets/gcs name: gcs-credentials readOnly: true - mountPath: /etc/gsm-config name: gsm-config readOnly: true - mountPath: /etc/gsm-credentials name: gsm-sa-key readOnly: true - mountPath: /secrets/manifest-tool name: manifest-tool-local-pusher readOnly: true - mountPath: /etc/pull-secret name: pull-secret readOnly: true - mountPath: /etc/report name: result-aggregator readOnly: true serviceAccountName: ci-operator volumes: - name: boskos secret: items: - key: credentials path: credentials secretName: boskos-credentials - name: ci-pull-credentials secret: secretName: ci-pull-credentials - configMap: name: gsm-config name: gsm-config - csi: driver: secrets-store.csi.k8s.io readOnly: true volumeAttributes: secretProviderClass: ci-operator-sa-key-spc name: gsm-sa-key - name: manifest-tool-local-pusher secret: secretName: manifest-tool-local-pusher - name: pull-secret secret: secretName: registry-pull-credentials - name: result-aggregator secret: secretName: result-aggregator prowjob_defaults: tenant_id: GlobalDefaultID refs: base_ref: main base_sha: bfc1cf7b6c43a5c7b81b1e0ab835c6e62fd8557f org: openshift pulls: - author: tjungblu link: https://github.com/openshift/release/pull/85287 number: 85287 sha: 7804bec388ddb17cae901a25414ca07b2572c3a3 title: 'NO-JIRA: add vault operator CRD' repo: release report: true rerun_command: /pj-rehearse pull-ci-openshift-cluster-openshift-apiserver-operator-release-5.2-e2e-aws-operator-encryption-kms-2 type: presubmit status: build_id: "2100582192970207232" completionTime: "2026-09-17T13:46:36Z" description: 'Pod can not be created: create pod ci/25252751-8720-4d26-8c52-759d5d614f1d in cluster build05: Unauthorized' prev_report_states: gcsreporter: error github-reporter: error startTime: "2026-09-17T13:46:36Z" state: error