ci(k3d): backport per-job k3d review/QA pipeline to 10-0-stable

João Alexandre Cunharequested to merge
backport-k3d-ci/10-0 into 10-0-stable

What does this MR do?

Backports the per-job k3d review/QA CI pipeline to 10-0-stable, bringing this branch to master's final k3d state. It consolidates the five master MRs (!4967 (merged), !4984 (merged), !4982 (merged), !4983 (merged), !4985 (merged)) into a single change rather than cherry-picking each:

  • Replaces the single-version k3d PoC (LIMIT_TO=k3d135) with the parallel:matrix child-pipeline structure:
    • k3d — v1.33 / v1.34 / v1.35 (v1.35 K3D_PRIMARY auto-runs on MR/default; v1.33/v1.34 manual)
    • k3d_arm64 — v1.35 ARM64 (manual on MR/default, auto on nightly/stable)
    • k3d_nginx — manual NGINX-ingress sanity check (single version)
  • Adds k3d-templates + k3d-version-pipeline[-arm64] child pipelines; renames k3d-review-apps → k3d-templates.
  • Removes the vcluster/EKS trigger jobs, scripts, and environment configs; keeps a single GKE nightly (gke.135.amd64 → gke.amd64).
  • Applies the DOCKERHUB_PREFIX drift in k3d.sh and drops the now-unused vcluster networking branch in autodevops.sh.
  • Defines RUBY_IMAGE_DEBIAN (= ${DOCKERHUB_PREFIX}/ruby:${RUBY_VERSION}), the image the arm64 k3d jobs use (the .specs builder image has no ARM variant). Without it the arm64 jobs fell back to GitLab.com's default ruby:3.1 image and failed at bundle on the lockfile's BUNDLED WITH 4.0.10.

Networking: Gateway API (Envoy) is the default. The HTTP-mode Gateway API chart fix is already present on 10-0-stable (merged via !4984 (merged)), so this MR contains no chart/product code changes — it is CI-only.

k3s version matrix: matches master (v1.33 / v1.34 / v1.35); this branch already targeted the same Kubernetes minors, so there is no per-branch divergence.

Related issues

Related to #6421

Author checklist

For general guidance, please follow our Contributing guide.

Required

For anything in this list which will not be completed, please provide a reason in the MR discussion.

  • Merge Request Title and Description are up to date, accurate, and descriptive.
  • MR targeting the appropriate branch (10-0-stable).
  • MR has a green pipeline.
  • Documentation created/updated.
  • Tests added/updated, and test plan for scenarios not covered by automated tests.
  • Equivalent MR/issue for omnibus-gitlab opened.

Test plan

  • k3d v1.35 (primary) review_specs_k3d deploys via helm upgrade --install --wait and specs pass against the nip.io URL over Gateway API.
  • qa_k3d (parallel:5) green; qa_k3d_manual_full_suite runnable on demand.
  • Manually trigger k3d v1.33 / v1.34 and k3d_arm64; confirm green.
  • k3d_nginx manual job succeeds (NGINX fallback path).
  • No vcluster/EKS jobs remain in the rendered pipeline.

Reviewers checklist

🤖 Generated with Claude Code

Edited by João Alexandre Cunha

Merge request reports