metadata: annotations: prow.k8s.io/context: ci/rehearse/openshift/cert-manager-operator/master/tls-scanner prow.k8s.io/job: rehearse-82715-pull-ci-openshift-cert-manager-operator-master-tls-scanner creationTimestamp: "2026-07-31T11:20:46Z" generation: 11 labels: ci-operator.openshift.io/cloud: aws ci-operator.openshift.io/cloud-cluster-profile: openshift-org-aws ci.openshift.io/generator: prowgen ci.openshift.io/rehearse: "82715" ci.openshift.io/rehearse.context: tls-scanner created-by-prow: "true" job-release: "4.22" pj-rehearse.openshift.io/can-be-rehearsed: "true" pj-rehearse.openshift.io/source-type: changedPresubmit prow.k8s.io/build-id: "2083150875903135744" prow.k8s.io/context: tls-scanner prow.k8s.io/id: f9486b60-75e3-474b-9af3-ff11b10b3001 prow.k8s.io/job: rehearse-82715-pull-ci-openshift-cert-manager-operator-master-t prow.k8s.io/refs.base_ref: main prow.k8s.io/refs.org: openshift prow.k8s.io/refs.pull: "82715" prow.k8s.io/refs.repo: release prow.k8s.io/type: presubmit name: f9486b60-75e3-474b-9af3-ff11b10b3001 namespace: ci resourceVersion: "7941190126" uid: 4b1b34f7-85ba-4228-8d4a-9135f1e70b89 spec: agent: kubernetes cluster: build10 context: ci/rehearse/openshift/cert-manager-operator/master/tls-scanner decoration_config: censor_secrets: true censoring_options: minimum_secret_length: 6 gcs_configuration: bucket: test-platform-results compress_file_types: - txt - log - json - tar - html - yaml default_org: openshift default_repo: origin job_url_prefix: https://prow.ci.openshift.org/view/ mediaTypes: log: text/plain path_strategy: single gcs_credentials_secret: gce-sa-credentials-gcs-publisher grace_period: 1h0m0s resources: clonerefs: limits: memory: 3Gi requests: cpu: 100m memory: 500Mi initupload: limits: memory: 200Mi requests: cpu: 100m memory: 50Mi place_entrypoint: limits: memory: 100Mi requests: cpu: 100m memory: 25Mi sidecar: limits: memory: 2Gi requests: cpu: 100m memory: 250Mi timeout: 8h0m0s utility_images: clonerefs: us-docker.pkg.dev/k8s-infra-prow/images/clonerefs:v20260729-7f8580d8d entrypoint: us-docker.pkg.dev/k8s-infra-prow/images/entrypoint:v20260729-7f8580d8d initupload: us-docker.pkg.dev/k8s-infra-prow/images/initupload:v20260729-7f8580d8d sidecar: us-docker.pkg.dev/k8s-infra-prow/images/sidecar:v20260729-7f8580d8d extra_refs: - base_ref: master org: openshift repo: cert-manager-operator sparse_checkout_files: - .ci-operator.yaml - images/ci/Dockerfile - images/ci/Dockerfile.coverage - images/ci/certmanager.Dockerfile - images/ci/istiocsr.Dockerfile - images/ci/trustmanager.Dockerfile workdir: true job: rehearse-82715-pull-ci-openshift-cert-manager-operator-master-tls-scanner namespace: ci pod_spec: containers: - args: - --gcs-upload-secret=/secrets/gcs/service-account.json - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson - --lease-server-credentials-file=/etc/boskos/credentials - --report-credentials-file=/etc/report/credentials - --secret-dir=/secrets/ci-pull-credentials - --target=tls-scanner command: - ci-operator env: - name: HTTP_SERVER_IP valueFrom: fieldRef: fieldPath: status.podIP - name: CONFIG_SPEC_GCS_URL value: gs://test-platform-results/pj-rehearse/configs/openshift/release/82715/ed976da9130097dbbb08b76d300c1ed0d329ee52/pull-ci-openshift-cert-manager-operator-master-tls-scanner image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest imagePullPolicy: Always name: "" ports: - containerPort: 8080 name: http resources: requests: cpu: 10m volumeMounts: - mountPath: /etc/boskos name: boskos readOnly: true - mountPath: /secrets/ci-pull-credentials name: ci-pull-credentials readOnly: true - mountPath: /secrets/gcs name: gcs-credentials readOnly: true - mountPath: /secrets/manifest-tool name: manifest-tool-local-pusher readOnly: true - mountPath: /etc/pull-secret name: pull-secret readOnly: true - mountPath: /etc/report name: result-aggregator readOnly: true serviceAccountName: ci-operator volumes: - name: boskos secret: items: - key: credentials path: credentials secretName: boskos-credentials - name: ci-pull-credentials secret: secretName: ci-pull-credentials - name: manifest-tool-local-pusher secret: secretName: manifest-tool-local-pusher - name: pull-secret secret: secretName: registry-pull-credentials - name: result-aggregator secret: secretName: result-aggregator prowjob_defaults: tenant_id: GlobalDefaultID refs: base_ref: main base_sha: fd4d655c3388f94381e7891ce187372bd41361c1 org: openshift pulls: - author: arun717 link: https://github.com/openshift/release/pull/82715 number: 82715 sha: ed976da9130097dbbb08b76d300c1ed0d329ee52 title: Add optional TLS scanner CI job for cert-manager-operator repo: release report: true rerun_command: /pj-rehearse pull-ci-openshift-cert-manager-operator-master-tls-scanner type: presubmit status: build_id: "2083150875903135744" completionTime: "2026-07-31T13:56:58Z" description: Job failed. pendingTime: "2026-07-31T11:20:46Z" pod_name: f9486b60-75e3-474b-9af3-ff11b10b3001 prev_report_states: gcsk8sreporter: failure gcsreporter: failure github-reporter: failure startTime: "2026-07-31T11:20:46Z" state: failure url: https://prow.ci.openshift.org/view/gs/test-platform-results/pr-logs/pull/openshift_release/82715/rehearse-82715-pull-ci-openshift-cert-manager-operator-master-tls-scanner/2083150875903135744