metadata: annotations: prow.k8s.io/context: ci/prow/e2e-aws-openshift-node-compliance prow.k8s.io/job: pull-ci-ComplianceAsCode-content-master-e2e-aws-openshift-node-compliance creationTimestamp: "2026-08-07T12:19:07Z" generation: 11 labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: quay-aws ci.openshift.io/generator: prowgen created-by-prow: "true" event-GUID: 2b05fa40-925a-11f1-8c99-bd104fc27dd3 pj-rehearse.openshift.io/can-be-rehearsed: "true" prow.k8s.io/build-id: "2085702277351346176" prow.k8s.io/context: e2e-aws-openshift-node-compliance prow.k8s.io/id: 5c5b8c54-67fa-4aeb-b870-8b4c06b1c859 prow.k8s.io/is-optional: "true" prow.k8s.io/job: pull-ci-ComplianceAsCode-content-master-e2e-aws-openshift-node prow.k8s.io/refs.base_ref: master prow.k8s.io/refs.org: ComplianceAsCode prow.k8s.io/refs.pull: "14920" prow.k8s.io/refs.repo: content prow.k8s.io/type: presubmit name: 5c5b8c54-67fa-4aeb-b870-8b4c06b1c859 namespace: ci resourceVersion: "7981455259" uid: ca406d81-7d21-4915-9731-3bab7283775a spec: agent: kubernetes cluster: build11 context: ci/prow/e2e-aws-openshift-node-compliance decoration_config: censor_secrets: true censoring_options: minimum_secret_length: 6 gcs_configuration: bucket: test-platform-results compress_file_types: - txt - log - json - tar - html - yaml default_org: openshift default_repo: origin mediaTypes: log: text/plain path_strategy: single gcs_credentials_secret: gce-sa-credentials-gcs-publisher grace_period: 1h0m0s resources: clonerefs: limits: memory: 3Gi requests: cpu: 100m memory: 500Mi initupload: limits: memory: 200Mi requests: cpu: 100m memory: 50Mi place_entrypoint: limits: memory: 100Mi requests: cpu: 100m memory: 25Mi sidecar: limits: memory: 2Gi requests: cpu: 100m memory: 250Mi sparse_checkout_files: - Dockerfiles/ocp4_content timeout: 8h0m0s utility_images: clonerefs: us-docker.pkg.dev/k8s-infra-prow/images/clonerefs:v20260729-7f8580d8d entrypoint: us-docker.pkg.dev/k8s-infra-prow/images/entrypoint:v20260729-7f8580d8d initupload: us-docker.pkg.dev/k8s-infra-prow/images/initupload:v20260729-7f8580d8d sidecar: us-docker.pkg.dev/k8s-infra-prow/images/sidecar:v20260729-7f8580d8d job: pull-ci-ComplianceAsCode-content-master-e2e-aws-openshift-node-compliance namespace: ci pod_spec: containers: - args: - --gcs-upload-secret=/secrets/gcs/service-account.json - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-aws-openshift-node-compliance command: - ci-operator env: - name: HTTP_SERVER_IP valueFrom: fieldRef: fieldPath: status.podIP image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest imagePullPolicy: Always name: "" ports: - containerPort: 8080 name: http resources: requests: cpu: 10m volumeMounts: - mountPath: /etc/boskos name: boskos readOnly: true - mountPath: /secrets/ci-pull-credentials name: ci-pull-credentials readOnly: true - mountPath: /secrets/gcs name: gcs-credentials readOnly: true - mountPath: /secrets/manifest-tool name: manifest-tool-local-pusher readOnly: true - mountPath: /etc/pull-secret name: pull-secret readOnly: true - mountPath: /etc/report name: result-aggregator readOnly: true serviceAccountName: ci-operator volumes: - name: boskos secret: items: - key: credentials path: credentials secretName: boskos-credentials - name: ci-pull-credentials secret: secretName: ci-pull-credentials - name: manifest-tool-local-pusher secret: secretName: manifest-tool-local-pusher - name: pull-secret secret: secretName: registry-pull-credentials - name: result-aggregator secret: secretName: result-aggregator prowjob_defaults: tenant_id: GlobalDefaultID refs: base_link: https://github.com/ComplianceAsCode/content/commit/1db748a2df08cf7f0e59be64d4335775f66b3fc5 base_ref: master base_sha: 1db748a2df08cf7f0e59be64d4335775f66b3fc5 org: ComplianceAsCode pulls: - author: taimurhafeez author_link: https://github.com/taimurhafeez commit_link: https://github.com/ComplianceAsCode/content/pull/14920/commits/34e48c22af2802defc5574d39b462f908040e902 head_ref: CMP-4435-Add-Manual-rule-restrict-namespace-admin-access-to-migration-tools-ocp-virt-1-10 link: https://github.com/ComplianceAsCode/content/pull/14920 number: 14920 sha: 34e48c22af2802defc5574d39b462f908040e902 title: 'CMP-4435: Add manual rule kubevirt-restrict-migration-tools-access for CIS OCP-Virt 1.10' repo: content repo_link: https://github.com/ComplianceAsCode/content sparse_checkout_files: - Dockerfiles/ocp4_content report: true rerun_command: /test e2e-aws-openshift-node-compliance type: presubmit status: build_id: "2085702277351346176" completionTime: "2026-08-07T15:24:28Z" description: Job failed. pendingTime: "2026-08-07T12:19:08Z" pod_name: 5c5b8c54-67fa-4aeb-b870-8b4c06b1c859 prev_report_states: gcsk8sreporter: failure gcsreporter: failure github-reporter: failure startTime: "2026-08-07T12:19:07Z" state: failure url: https://prow.ci.openshift.org/view/gs/test-platform-results/pr-logs/pull/ComplianceAsCode_content/14920/pull-ci-ComplianceAsCode-content-master-e2e-aws-openshift-node-compliance/2085702277351346176