stackrox · porridge · Apr 21, 2026 · Mar 4, 2026 · Mar 4, 2026 · Apr 1, 2026
@@ -29,7 +29,14 @@ quay.io/rhacs-eng/qa-multi-arch:nginx-204a9a8e65061b10b92ad361dd6f406248404fe60e
 quay.io/rhacs-eng/qa-multi-arch:nginx-1-15-4-alpine
 quay.io/rhacs-eng/qa-multi-arch:nginx-1-17-1
 quay.io/rhacs-eng/qa-multi-arch:nginx-1-19-alpine
+quay.io/rhacs-eng/qa-multi-arch:nginx-1.12
+quay.io/rhacs-eng/qa-multi-arch:nginx-1.12@sha256:72daaf46f11cc753c4eab981cbf869919bd1fee3d2170a2adeac12400f494728
 quay.io/rhacs-eng/qa-multi-arch:nginx-1.21.1
+
+# gcr.io images (filtered out on non-GKE clusters by scripts/ci/lib.sh:image_prefetcher_start_set)
+us.gcr.io/acs-san-stackroxci/qa-multi-arch:nginx-1.12
+us.gcr.io/acs-san-stackroxci/qa/registry-image:0.3
+
 quay.io/rhacs-eng/qa-multi-arch:nginx-2.0.3
 quay.io/rhacs-eng/qa-multi-arch:nginx-3.21-1
 quay.io/rhacs-eng/qa-multi-arch:nginx-latest

diff --git a/scripts/ci/gke.sh b/scripts/ci/gke.sh
@@ -140,7 +140,7 @@ create_cluster() {
     POD_SECURITY_POLICIES="${POD_SECURITY_POLICIES:-false}"
     GKE_RELEASE_CHANNEL="${GKE_RELEASE_CHANNEL:-stable}"
     MACHINE_TYPE="${MACHINE_TYPE:-e2-standard-4}"
-    DISK_SIZE_GB=${DISK_SIZE_GB:-80}
+    DISK_SIZE_GB=${DISK_SIZE_GB:-200}
 
     echo "Creating ${NUM_NODES} node cluster with image type \"${GCP_IMAGE_TYPE}\" and ${DISK_SIZE_GB}GB disks."
 

diff --git a/scripts/ci/jobs/aks_qa_e2e_tests.py b/scripts/ci/jobs/aks_qa_e2e_tests.py
@@ -9,6 +9,7 @@
 
 # set required test parameters
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "aks"
 
 os.environ["ROX_RISK_REPROCESSING_INTERVAL"] = "15s"
 os.environ["ROX_SENSOR_CONNECTION_RETRY_MAX_INTERVAL"] = "30s"

diff --git a/scripts/ci/jobs/aro_qa_e2e_tests.py b/scripts/ci/jobs/aro_qa_e2e_tests.py
@@ -9,6 +9,7 @@
 
 # set required test parameters
 os.environ["ORCHESTRATOR_FLAVOR"] = "openshift"
+os.environ["KUBERNETES_PROVIDER"] = "ocp"
 os.environ["DEPLOY_STACKROX_VIA_OPERATOR"] = "true"
 
 os.environ["ROX_RISK_REPROCESSING_INTERVAL"] = "15s"

diff --git a/scripts/ci/jobs/eks_qa_e2e_tests.py b/scripts/ci/jobs/eks_qa_e2e_tests.py
@@ -9,6 +9,7 @@
 
 # set required test parameters
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "eks"
 
 os.environ["ROX_RISK_REPROCESSING_INTERVAL"] = "15s"
 os.environ["ROX_SENSOR_CONNECTION_RETRY_MAX_INTERVAL"] = "30s"

diff --git a/scripts/ci/jobs/gke_external_pg_17_qa_e2e_tests.py b/scripts/ci/jobs/gke_external_pg_17_qa_e2e_tests.py
@@ -12,6 +12,7 @@
 
 # set test parameters
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "gke"
 os.environ["POSTGRES_VERSION"] = "17"
 os.environ["BYODB_TEST"] = "true"
 

diff --git a/scripts/ci/jobs/gke_nongroovy_compatibility_tests.py b/scripts/ci/jobs/gke_nongroovy_compatibility_tests.py
@@ -12,6 +12,7 @@
 
 # set required test parameters
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "gke"
 os.environ["SCANNER_V4_DB_STORAGE_CLASS"] = "stackrox-gke-ssd"
 
 # Run supported central and sensor version tuples against QaE2eGoCompatibilityTest (nongroovy compatibility tests)

diff --git a/scripts/ci/jobs/gke_nongroovy_e2e_tests.py b/scripts/ci/jobs/gke_nongroovy_e2e_tests.py
@@ -12,6 +12,7 @@
 
 # set required test parameters
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "gke"
 os.environ["SCANNER_V4_DB_STORAGE_CLASS"] = "faster"
 
 # delegated scanning support in the secured cluster

diff --git a/scripts/ci/jobs/gke_operator_e2e_tests.py b/scripts/ci/jobs/gke_operator_e2e_tests.py
@@ -11,6 +11,7 @@
 from post_tests import PostClusterTest, FinalPost
 
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "gke"
 
 ClusterTestRunner(
     cluster=GKECluster("operator-e2e-test", num_nodes=4),

diff --git a/scripts/ci/jobs/gke_qa_e2e_tests.py b/scripts/ci/jobs/gke_qa_e2e_tests.py
@@ -9,6 +9,7 @@
 
 # set test parameters
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "gke"
 os.environ["GCP_IMAGE_TYPE"] = "cos_containerd"
 os.environ["OUTPUT_FORMAT"] = "helm"
 

diff --git a/scripts/ci/jobs/gke_race_condition_qa_e2e_tests.py b/scripts/ci/jobs/gke_race_condition_qa_e2e_tests.py
@@ -9,6 +9,7 @@
 
 # set test parameters
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "gke"
 os.environ["GCP_IMAGE_TYPE"] = "cos_containerd"
 os.environ["SCANNER_V4_DB_STORAGE_CLASS"] = "faster"
 

diff --git a/scripts/ci/jobs/gke_scale_tests.py b/scripts/ci/jobs/gke_scale_tests.py
@@ -12,6 +12,7 @@
 
 os.environ["COMPARISON_METRICS"] = "scale-test/gke"
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "gke"
 os.environ["OUTPUT_FORMAT"] = "helm"
 os.environ["STORAGE"] = "pvc"
 os.environ["STORAGE_CLASS"] = "faster"

diff --git a/scripts/ci/jobs/gke_scanner_v4_install_tests.py b/scripts/ci/jobs/gke_scanner_v4_install_tests.py
@@ -11,6 +11,7 @@
 from post_tests import PostClusterTest, FinalPost
 
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "gke"
 os.environ["STORE_METRICS"] = "true"
 os.environ["ROX_BASELINE_GENERATION_DURATION"] = "5m"
 os.environ["ROX_SCANNER_V4"] = "true"

diff --git a/scripts/ci/jobs/gke_sensor_integration_tests.py b/scripts/ci/jobs/gke_sensor_integration_tests.py
@@ -11,6 +11,7 @@
 
 # set required test parameters
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "gke"
 os.environ["SCANNER_V4_DB_STORAGE_CLASS"] = "faster"
 
 ClusterTestRunner(

diff --git a/scripts/ci/jobs/gke_ui_e2e_tests.py b/scripts/ci/jobs/gke_ui_e2e_tests.py
@@ -12,6 +12,7 @@
 
 # set required test parameters
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "gke"
 
 # Override test env defaults here:
 # (for defaults see: tests/e2e/lib.sh export_test_environment())

diff --git a/scripts/ci/jobs/gke_upgrade_tests.py b/scripts/ci/jobs/gke_upgrade_tests.py
@@ -11,6 +11,7 @@
 from post_tests import PostClusterTest, FinalPost
 
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "gke"
 os.environ["SCANNER_V4_DB_STORAGE_CLASS"] = "faster"
 
 ClusterTestRunner(

diff --git a/scripts/ci/jobs/gke_version_compatibility_tests.py b/scripts/ci/jobs/gke_version_compatibility_tests.py
@@ -12,6 +12,7 @@
 
 # set required test parameters
 os.environ["ORCHESTRATOR_FLAVOR"] = "k8s"
+os.environ["KUBERNETES_PROVIDER"] = "gke"
 os.environ["SCANNER_V4_DB_STORAGE_CLASS"] = "stackrox-gke-ssd"
 
 # Run supported central and sensor version tuples against QaE2eTestCompatibility (groovy compatibility tests)

diff --git a/scripts/ci/jobs/ibmcloudz_qa_e2e_tests.py b/scripts/ci/jobs/ibmcloudz_qa_e2e_tests.py
@@ -12,6 +12,7 @@
 os.environ["DEPLOY_STACKROX_VIA_OPERATOR"] = "true"
 os.environ["LOAD_BALANCER"] = "route"
 os.environ["ORCHESTRATOR_FLAVOR"] = "openshift"
+os.environ["KUBERNETES_PROVIDER"] = "ocp"
 os.environ["USE_MIDSTREAM_IMAGES"] = "true"
 os.environ["REMOTE_CLUSTER_ARCH"] = "s390x"
 os.environ["ROX_RISK_REPROCESSING_INTERVAL"] = "15s"

diff --git a/scripts/ci/jobs/ocp_compliance_e2e_tests.py b/scripts/ci/jobs/ocp_compliance_e2e_tests.py
@@ -14,6 +14,7 @@
 os.environ["DEPLOY_STACKROX_VIA_OPERATOR"] = "true"
 os.environ["INSTALL_COMPLIANCE_OPERATOR"] = "true"
 os.environ["ORCHESTRATOR_FLAVOR"] = "openshift"
+os.environ["KUBERNETES_PROVIDER"] = "ocp"
 os.environ["ROX_COMPLIANCE_ENHANCEMENTS"] = "true"
 
 ClusterTestRunner(

diff --git a/scripts/ci/jobs/ocp_nongroovy_e2e_tests.py b/scripts/ci/jobs/ocp_nongroovy_e2e_tests.py
@@ -13,6 +13,7 @@
 # set required test parameters
 os.environ["DEPLOY_STACKROX_VIA_OPERATOR"] = "true"
 os.environ["ORCHESTRATOR_FLAVOR"] = "openshift"
+os.environ["KUBERNETES_PROVIDER"] = "ocp"
 
 # delegated scanning support in the secured cluster
 os.environ["SENSOR_SCANNER_SUPPORT"] = "true"

diff --git a/scripts/ci/jobs/ocp_operator_e2e_tests.py b/scripts/ci/jobs/ocp_operator_e2e_tests.py
@@ -11,6 +11,7 @@
 from post_tests import PostClusterTest, FinalPost
 
 os.environ["ORCHESTRATOR_FLAVOR"] = "openshift"
+os.environ["KUBERNETES_PROVIDER"] = "ocp"
 
 ClusterTestRunner(
     cluster=AutomationFlavorsCluster(),

diff --git a/scripts/ci/jobs/ocp_qa_e2e_tests.py b/scripts/ci/jobs/ocp_qa_e2e_tests.py
@@ -11,6 +11,7 @@
 # set required test parameters
 os.environ["DEPLOY_STACKROX_VIA_OPERATOR"] = "true"
 os.environ["ORCHESTRATOR_FLAVOR"] = "openshift"
+os.environ["KUBERNETES_PROVIDER"] = "ocp"
 # Workload identities are only set up for `openshift-4` infra clusters.
 if 'openshift-4' in os.environ.get('CLUSTER_FLAVOR_VARIANT', ''):
     os.environ["SETUP_WORKLOAD_IDENTITIES"] = "true"

diff --git a/scripts/ci/jobs/ocp_scanner_v4_install_tests.py b/scripts/ci/jobs/ocp_scanner_v4_install_tests.py
@@ -12,6 +12,7 @@
 from post_tests import PostClusterTest, FinalPost
 
 os.environ["ORCHESTRATOR_FLAVOR"] = "openshift"
+os.environ["KUBERNETES_PROVIDER"] = "ocp"
 os.environ["STORE_METRICS"] = "true"
 os.environ["ROX_BASELINE_GENERATION_DURATION"] = "5m"
 os.environ["ROX_SCANNER_V4"] = "true"

diff --git a/scripts/ci/jobs/ocp_sensor_integration_tests.py b/scripts/ci/jobs/ocp_sensor_integration_tests.py
@@ -11,6 +11,7 @@
 
 # set required test parameters
 os.environ["ORCHESTRATOR_FLAVOR"] = "openshift"
+os.environ["KUBERNETES_PROVIDER"] = "ocp"
 os.environ["ROX_RISK_REPROCESSING_INTERVAL"] = "15s"
 os.environ["ROX_SENSOR_CONNECTION_RETRY_MAX_INTERVAL"] = "30s"
 

diff --git a/scripts/ci/jobs/ocp_ui_e2e_tests.py b/scripts/ci/jobs/ocp_ui_e2e_tests.py
@@ -14,6 +14,7 @@
 os.environ["DEPLOY_STACKROX_VIA_OPERATOR"] = "true"
 os.environ["INSTALL_COMPLIANCE_OPERATOR"] = "true"
 os.environ["ORCHESTRATOR_FLAVOR"] = "openshift"
+os.environ["KUBERNETES_PROVIDER"] = "ocp"
 
 ClusterTestRunner(
     cluster=AutomationFlavorsCluster(),

diff --git a/scripts/ci/jobs/osd_aws_qa_e2e_tests.py b/scripts/ci/jobs/osd_aws_qa_e2e_tests.py
@@ -10,6 +10,7 @@
 # set required test parameters
 os.environ["DEPLOY_STACKROX_VIA_OPERATOR"] = "true"
 os.environ["ORCHESTRATOR_FLAVOR"] = "openshift"
+os.environ["KUBERNETES_PROVIDER"] = "ocp"
 
 os.environ["ROX_RISK_REPROCESSING_INTERVAL"] = "15s"
 os.environ["ROX_SENSOR_CONNECTION_RETRY_MAX_INTERVAL"] = "30s"

diff --git a/scripts/ci/jobs/osd_gcp_qa_e2e_tests.py b/scripts/ci/jobs/osd_gcp_qa_e2e_tests.py
@@ -10,6 +10,7 @@
 # set required test parameters
 os.environ["DEPLOY_STACKROX_VIA_OPERATOR"] = "true"
 os.environ["ORCHESTRATOR_FLAVOR"] = "openshift"
+os.environ["KUBERNETES_PROVIDER"] = "ocp"
 
 os.environ["ROX_RISK_REPROCESSING_INTERVAL"] = "15s"
 os.environ["ROX_SENSOR_CONNECTION_RETRY_MAX_INTERVAL"] = "30s"

diff --git a/scripts/ci/jobs/powervs_qa_e2e_tests.py b/scripts/ci/jobs/powervs_qa_e2e_tests.py
@@ -12,6 +12,7 @@
 os.environ["DEPLOY_STACKROX_VIA_OPERATOR"] = "true"
 os.environ["LOAD_BALANCER"] = "route"
 os.environ["ORCHESTRATOR_FLAVOR"] = "openshift"
+os.environ["KUBERNETES_PROVIDER"] = "ocp"
 os.environ["USE_MIDSTREAM_IMAGES"] = "true"
 os.environ["REMOTE_CLUSTER_ARCH"] = "ppc64le"
 os.environ["COLLECTION_METHOD"] = "ebpf"

diff --git a/scripts/ci/jobs/rosa_qa_e2e_tests.py b/scripts/ci/jobs/rosa_qa_e2e_tests.py
@@ -11,6 +11,7 @@
 os.environ["DEPLOY_STACKROX_VIA_OPERATOR"] = "true"
 os.environ["LOAD_BALANCER"] = "route"
 os.environ["ORCHESTRATOR_FLAVOR"] = "openshift"
+os.environ["KUBERNETES_PROVIDER"] = "ocp"
 os.environ["ROX_RISK_REPROCESSING_INTERVAL"] = "15s"
 os.environ["ROX_SENSOR_CONNECTION_RETRY_MAX_INTERVAL"] = "30s"
 if "-hcp-" in os.environ["JOB_NAME"]:

diff --git a/scripts/ci/lib.sh b/scripts/ci/lib.sh
@@ -694,20 +694,28 @@ image_prefetcher_start_set() {
     local manifest
     manifest=$(mktemp)
 
-    case "${ORCHESTRATOR_FLAVOR}" in
-    k8s)
+    local kubelet_image_creds
+    case "${KUBERNETES_PROVIDER}" in
+    gke)
         flavor=vanilla
+        kubelet_image_creds=GKE
         ;;
-    openshift)
+    eks|aks)
+        flavor=vanilla
+        kubelet_image_creds="" # i.e. disabled
+        ;;
+    ocp)
         flavor=ocp
+        kubelet_image_creds="" # i.e. disabled
         ;;
     *)
-        die "unsupported ORCHESTRATOR: ${ORCHESTRATOR_FLAVOR}"
+        die "unsupported KUBERNETES_PROVIDER: ${KUBERNETES_PROVIDER}"
         ;;
     esac
 
     # daemonset, etc
     ${image_prefetcher_deploy_bin} \
+        --use-kubelet-image-credential-integration="${kubelet_image_creds}" \
         --version="${image_prefetcher_version}" \
         --k8s-flavor="$flavor" \
         --secret=stackrox \
@@ -719,6 +727,16 @@ image_prefetcher_start_set() {
     local image_list
     image_list=$(mktemp)
     populate_prefetcher_image_list "$name" "${image_list}"
+
+    # Filter out gcr.io images on non-GKE clusters (they require GKE-specific credentials)
+    if [[ "${KUBERNETES_PROVIDER}" != "gke" ]]; then
+        local filtered_image_list
+        filtered_image_list=$(mktemp)
+        info "Filtering out *.gcr.io images for non-GKE cluster"
+        grep -v -E '^([^/]+\.)?gcr\.io/' "${image_list}" > "${filtered_image_list}" || true
+        mv "${filtered_image_list}" "${image_list}"
+    fi
+
     echo "---" >> "$manifest"
     kubectl create --dry-run=client -o yaml configmap "$name" --from-file="images.txt=$image_list" >> "$manifest"
 

@@ -4,7 +4,7 @@ go 1.25
 
 require (
 	github.com/jstemmer/go-junit-report/v2 v2.1.0
-	github.com/stackrox/image-prefetcher/deploy v0.4.3
+	github.com/stackrox/image-prefetcher/deploy v0.5.0
 	github.com/stackrox/prometheus-metric-parser v0.0.0-20240718111853-be492d554cd5
 )