metadata: annotations: pipeline_skip_if_only_changed: ^docs/|\.md$|^(?:.*/)?(?:\.gitignore|OWNERS|OWNERS_ALIASES|LICENSE)$|^test/extended|^pkg/controller/bootimage/ami\.go$ prow.k8s.io/context: ci/prow/e2e-hypershift prow.k8s.io/job: pull-ci-openshift-machine-config-operator-release-5.0-e2e-hypershift creationTimestamp: "2026-09-09T14:23:02Z" generation: 11 labels: ci-operator.openshift.io/cloud: hypershift-aws ci-operator.openshift.io/cloud-cluster-profile: hypershift-aws ci.openshift.io/generator: prowgen created-by-prow: "true" event-GUID: e5c13f70-ac59-11f1-924a-3517f5cf495b pj-rehearse.openshift.io/can-be-rehearsed: "true" prow.k8s.io/build-id: "2097697771493527552" prow.k8s.io/context: e2e-hypershift prow.k8s.io/id: 94999678-4d80-4b0c-ae7e-b98b3e811f13 prow.k8s.io/is-optional: "false" prow.k8s.io/job: pull-ci-openshift-machine-config-operator-release-5.0-e2e-hyper prow.k8s.io/refs.base_ref: release-5.0 prow.k8s.io/refs.org: openshift prow.k8s.io/refs.pull: "6514" prow.k8s.io/refs.repo: machine-config-operator prow.k8s.io/retest: "true" prow.k8s.io/type: presubmit name: 94999678-4d80-4b0c-ae7e-b98b3e811f13 namespace: ci resourceVersion: "8166705789" uid: 1ce455b3-27df-4d63-89b2-80b5575c45bb spec: agent: kubernetes cluster: build10 context: ci/prow/e2e-hypershift decoration_config: censor_secrets: true censoring_options: minimum_secret_length: 6 gcs_configuration: bucket: test-platform-results compress_file_types: - txt - log - json - tar - html - yaml default_org: openshift default_repo: origin mediaTypes: log: text/plain path_strategy: single gcs_credentials_secret: gce-sa-credentials-gcs-publisher grace_period: 1h0m0s resources: clonerefs: limits: memory: 3Gi requests: cpu: 100m memory: 500Mi initupload: limits: memory: 200Mi requests: cpu: 100m memory: 50Mi place_entrypoint: limits: memory: 100Mi requests: cpu: 100m memory: 25Mi sidecar: limits: memory: 2Gi requests: cpu: 100m memory: 250Mi sparse_checkout_files: - .ci-operator.yaml - Dockerfile.rhel7 timeout: 24h0m0s utility_images: clonerefs: us-docker.pkg.dev/k8s-infra-prow/images/clonerefs:v20260902-ffc57790b entrypoint: us-docker.pkg.dev/k8s-infra-prow/images/entrypoint:v20260902-ffc57790b initupload: us-docker.pkg.dev/k8s-infra-prow/images/initupload:v20260902-ffc57790b sidecar: us-docker.pkg.dev/k8s-infra-prow/images/sidecar:v20260902-ffc57790b job: pull-ci-openshift-machine-config-operator-release-5.0-e2e-hypershift namespace: ci pod_spec: containers: - args: - --gcs-upload-secret=/secrets/gcs/service-account.json - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=e2e-hypershift command: - ci-operator env: - name: HTTP_SERVER_IP valueFrom: fieldRef: fieldPath: status.podIP image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest imagePullPolicy: Always name: "" ports: - containerPort: 8080 name: http resources: requests: cpu: 10m volumeMounts: - mountPath: /etc/boskos name: boskos readOnly: true - mountPath: /secrets/ci-pull-credentials name: ci-pull-credentials readOnly: true - mountPath: /secrets/gcs name: gcs-credentials readOnly: true - mountPath: /secrets/manifest-tool name: manifest-tool-local-pusher readOnly: true - mountPath: /etc/pull-secret name: pull-secret readOnly: true - mountPath: /etc/report name: result-aggregator readOnly: true serviceAccountName: ci-operator volumes: - name: boskos secret: items: - key: credentials path: credentials secretName: boskos-credentials - name: ci-pull-credentials secret: secretName: ci-pull-credentials - name: manifest-tool-local-pusher secret: secretName: manifest-tool-local-pusher - name: pull-secret secret: secretName: registry-pull-credentials - name: result-aggregator secret: secretName: result-aggregator prowjob_defaults: tenant_id: GlobalDefaultID refs: base_link: https://github.com/openshift/machine-config-operator/commit/3400a9c1429cce50d3a097f11e1a770e028e30d4 base_ref: release-5.0 base_sha: 3400a9c1429cce50d3a097f11e1a770e028e30d4 org: openshift pulls: - author: openshift-cherrypick-robot author_link: https://github.com/openshift-cherrypick-robot commit_link: https://github.com/openshift/machine-config-operator/pull/6514/commits/9ad8a9f2156b9719585f2d6669b47920c8af8635 head_ref: cherry-pick-6470-to-release-5.0 link: https://github.com/openshift/machine-config-operator/pull/6514 number: 6514 sha: 9ad8a9f2156b9719585f2d6669b47920c8af8635 title: '[release-5.0] OCPBUGS-121942: Replace wildcard permissions with explicit verbs in MachineConfigServer ClusterRole' repo: machine-config-operator repo_link: https://github.com/openshift/machine-config-operator sparse_checkout_files: - .ci-operator.yaml - Dockerfile.rhel7 report: true rerun_command: /test e2e-hypershift type: presubmit status: build_id: "2097697771493527552" completionTime: "2026-09-09T16:35:57Z" description: Job failed. pendingTime: "2026-09-09T14:44:56Z" pod_name: 94999678-4d80-4b0c-ae7e-b98b3e811f13 prev_report_states: gcsk8sreporter: failure gcsreporter: failure github-reporter: failure startTime: "2026-09-09T14:23:02Z" state: failure url: https://prow.ci.openshift.org/view/gs/test-platform-results/pr-logs/pull/openshift_machine-config-operator/6514/pull-ci-openshift-machine-config-operator-release-5.0-e2e-hypershift/2097697771493527552