Preload cert-manager images for e2e tests

Author: nojnhuh

scripts/ci-conformance.sh

@@ -38,6 +38,8 @@ source "${REPO_ROOT}/hack/ensure-go.sh"
 source "${REPO_ROOT}/hack/ensure-tags.sh"
 # shellcheck source=hack/util.sh
 source "${REPO_ROOT}/hack/util.sh"
+# shellcheck source=./scripts/ci-e2e-lib.sh
+source "${REPO_ROOT}/scripts/ci-e2e-lib.sh"
 
 # Verify the required Environment Variables are present.
 capz::util::ensure_azure_envs
@@ -95,6 +97,11 @@ capz::ci-conformance::cleanup() {
 
 trap capz::ci-conformance::cleanup EXIT
 
+# pre-pull all the images that will be used in the e2e, thus making the actual test run
+# less sensible to the network speed. This includes:
+# - cert-manager images
+kind:prepullAdditionalImages
+
 if [[ "${WINDOWS}" == "true" ]]; then
   make test-windows-upstream
 else

scripts/ci-e2e-lib.sh

@@ -0,0 +1,44 @@
+#!/bin/bash
+
+# Copyright 2025 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# kind:prepullAdditionalImages pre-pull all the additional (not Kindest/node) images that will be used in the e2e, thus making
+# the actual test run less sensible to the network speed.
+kind:prepullAdditionalImages () {
+  # Pulling cert manager images so we can pre-load in kind nodes
+  kind::prepullImage "quay.io/jetstack/cert-manager-cainjector:v1.19.1"
+  kind::prepullImage "quay.io/jetstack/cert-manager-webhook:v1.19.1"
+  kind::prepullImage "quay.io/jetstack/cert-manager-controller:v1.19.1"
+
+  # Pull all images defined in DOCKER_PRELOAD_IMAGES.
+  for IMAGE in $(grep DOCKER_PRELOAD_IMAGES: < "$E2E_CONF_FILE" | sed -E 's/.*\[(.*)\].*/\1/' | tr ',' ' '); do
+    kind::prepullImage "${IMAGE}"
+  done
+}
+
+# kind:prepullImage pre-pull a docker image if no already present locally.
+# The result will be available in the retVal value which is accessible from the caller.
+kind::prepullImage () {
+  local image=$1
+  image="${image//+/_}"
+
+  retVal=0
+  if [[ "$(docker images -q "$image" 2> /dev/null)" == "" ]]; then
+    echo "+ Pulling $image"
+    docker pull "$image" || retVal=$?
+  else
+    echo "+ image $image already present in the system, skipping pre-pull"
+  fi
+}

scripts/ci-e2e.sh

@@ -35,6 +35,8 @@ source "${REPO_ROOT}/hack/ensure-go.sh"
 source "${REPO_ROOT}/hack/ensure-tags.sh"
 # shellcheck source=hack/util.sh
 source "${REPO_ROOT}/hack/util.sh"
+# shellcheck source=./scripts/ci-e2e-lib.sh
+source "${REPO_ROOT}/scripts/ci-e2e-lib.sh"
 
 # Verify the required Environment Variables are present.
 capz::util::ensure_azure_envs
@@ -81,6 +83,11 @@ capz::ci-e2e::cleanup() {
     make test-e2e-run-cleanup || true
 }
 
+# pre-pull all the images that will be used in the e2e, thus making the actual test run
+# less sensible to the network speed. This includes:
+# - cert-manager images
+kind:prepullAdditionalImages
+
 trap capz::ci-e2e::cleanup EXIT
 # Image is configured as `${CONTROLLER_IMG}-${ARCH}:${TAG}` where `CONTROLLER_IMG` is defaulted to `${REGISTRY}/${IMAGE_NAME}`.
 if [[ "${BUILD_MANAGER_IMAGE}" == "false" ]]; then

test/e2e/config/azure-dev.yaml

@@ -11,6 +11,12 @@ images:
     loadBehavior: tryLoad
   - name: registry.k8s.io/cluster-api-helm/cluster-api-helm-controller:v0.4.1
     loadBehavior: tryLoad
+  - name: quay.io/jetstack/cert-manager-cainjector:v1.19.1
+    loadBehavior: tryLoad
+  - name: quay.io/jetstack/cert-manager-webhook:v1.19.1
+    loadBehavior: tryLoad
+  - name: quay.io/jetstack/cert-manager-controller:v1.19.1
+    loadBehavior: tryLoad
 
 providers:
   - name: cluster-api