CNTRLPLANE-3942: add AuthenticationComponentProxy 5.0 periodics

[ehearne-redhat]

This PR adds periodic tests for AuthenticationComponentProxy e2e tests. These tests are ran from openshift/origin and will test functionality behind AuthenticationComponentProxy feature gate.

These periodics are targeting 5.0 and required for this feature to promote to GA. The tests are ran across 8 platforms which include:

• AWS
• Azure
• GCP
• VSphere
• Baremetal IPv4
• Baremetal IPv6
• Baremetal Dualstack
• Single Node OpenShift (SNO)

These periodics will run tests from openshift/origin#31446 and future PR once merged

Summary by CodeRabbit

• Adds periodic AuthenticationComponentProxy end-to-end jobs for the OpenShift 5.0 release.
• Runs the feature-gated tests with TechPreviewNoUpgrade across AWS, Azure, GCP, vSphere, bare metal IPv4/IPv6/dual-stack, and AWS SNO platforms.
• Configures platform-specific networking and test arguments, including a custom vSphere schedule, supporting promotion of the feature to GA.

[openshift-ci-robot]

@ehearne-redhat: This pull request references CNTRLPLANE-3942 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "5.0.0" version, but no target version was set.

Details

In response to this:

This PR adds periodic tests for AuthenticationComponentProxy e2e tests. These tests are ran from openshift/origin and will test functionality behind AuthenticationComponentProxy feature gate.

These periodics are targeting 5.0 and required for this feature to promote to GA. The tests are ran across 8 platforms which include:

• AWS
• Azure
• GCP
• VSphere
• Baremetal IPv4
• Baremetal IPv6
• Baremetal Dualstack
• Single Node OpenShift (SNO)

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: ehearne-redhat
Once this PR has been reviewed and has the lgtm label, please assign bertinatto for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• ci-operator/config/openshift/cluster-authentication-operator/OWNERS
• ci-operator/jobs/openshift/cluster-authentication-operator/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-merge-bot]

@ehearne-redhat: pj-rehearse could not automatically process this event because the request waited in queue for longer than 5 minutes. Use /pj-rehearse to trigger rehearsals manually.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 514a5a11-18a1-418f-8ded-7c3183438f57

📥 Commits

Reviewing files that changed from the base of the PR and between cf97f90 and 6ca170f.

⛔ Files ignored due to path filters (1)

• ci-operator/jobs/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-5.0-periodics.yaml is excluded by !ci-operator/jobs/**

📒 Files selected for processing (1)

• ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-5.0__periodics.yaml

---

Walkthrough

Adds release 5.0 periodic component-proxy jobs for AWS, Azure, GCP, vSphere, AWS single-node, and metal OVN IPv4/IPv6/Dualstack profiles.

Changes

Component-proxy periodic coverage

Layer / File(s)	Summary
Periodic job matrix ci-operator/config/openshift/cluster-authentication-operator/openshift-cluster-authentication-operator-release-5.0__periodics.yaml	Adds component-proxy periodic jobs across cloud, vSphere, AWS single-node, and metal OVN profiles with TechPreviewNoUpgrade, monitor exclusions, network settings, and a vSphere cron schedule.

Estimated code review effort: 3 (Moderate) | ~15–30 minutes

Suggested reviewers: coleenquadros

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the change: adding AuthenticationComponentProxy 5.0 periodic tests.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	New periodic/job names are static strings; no dynamic data or unstable Ginkgo-style test titles were added.
Test Structure And Quality	✅ Passed	PR only changes CI periodic/job YAML; no Ginkgo specs, fixtures, assertions, or cluster-interaction code were modified, so this check is not applicable.
Microshift Test Compatibility	✅ Passed	PR only adds ci-operator periodic job configs for an existing test suite; no new Ginkgo test code or MicroShift-unsupported API usage was introduced.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PASS: The PR only adds CI job config; the SNO variant uses openshift-e2e-aws-single-node, and the diff contains no new Ginkgo code or multi-node-only logic.
Topology-Aware Scheduling Compatibility	✅ Passed	Only ci-operator periodic test configs changed; no deployment manifests, operator code, or scheduling constraints were introduced.
Ote Binary Stdout Contract	✅ Passed	Only periodic/job YAML files changed; no process-level code or stdout writes were introduced, so the stdout contract isn’t affected.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	Config-only change: no new Ginkgo bodies, no hardcoded IPv4/public hosts, and bare-metal jobs explicitly set IP_STACK for v4/v6/dualstack.
No-Weak-Crypto	✅ Passed	The new component-proxy periodics only add test configuration; no MD5/SHA1/DES/RC4/3DES/Blowfish/ECB, custom crypto, or secret/token comparisons appear.
Container-Privileges	✅ Passed	The added component-proxy periodic jobs only set test env/workflow fields; no privileged, hostPID/Network/IPC, SYS_ADMIN, root, or allowPrivilegeEscalation settings appear.
No-Sensitive-Data-In-Logs	✅ Passed	Changed YAML adds CI periodic jobs only; no log statements or secret/PII-bearing values are present.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

@ehearne-redhat: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[ehearne-redhat]

Closing as not required to promote to GA.