DRA canary: invert the kubelet version filter

Logic error: instead of excluding tests with a certain minimum
version number, they were included...

Author: pohly

config/jobs/kubernetes/sig-node/dra-canary.yaml

@@ -262,10 +262,9 @@ presubmits:
           # We need support for disabling tests which need a recent kubelet.
           # If a test is labeled with `KubeletMinVersion:1.34`, then it cannot run
           # when the deployed kubelet is 1.32. This is enforced by
-          # generating `KubeletMinVersion: isSubsetOf { 1.33, 1.34 }`, i.e.
-          # not including the actual kubelet version and anything older
-          # in an allow list.
-          kubelet_label_filter="&& KubeletMinVersion: isSubsetOf { $( for v in $(seq $((previous_minor + 1)) $((minor - 1))); do echo "1.$v, "; done)1.$minor }"
+          # generating `! KubeletMinVersion: containsAny { 1.33, 1.34 }`, i.e.
+          # including all unsupportd kubelet versions in a deny list.
+          kubelet_label_filter=" && ! KubeletMinVersion: containsAny { $( for v in $(seq $((previous_minor + 1)) $((minor - 1))); do echo "1.$v, "; done)1.$minor }"
 
           KUBECONFIG=${HOME}/.kube/config ${ginkgo} run --nodes=8 --timeout=24h --silence-skips --force-newlines --no-color --label-filter="DRA && Feature: isSubsetOf { OffByDefault, DynamicResourceAllocation }$kubelet_label_filter && !Alpha && !Flaky && !Slow" ${e2e_test} -- -provider=local -report-dir="${ARTIFACTS}" -report-complete-ginkgo -report-complete-junit &
           GINKGO_E2E_PID=$!
@@ -370,10 +369,9 @@ presubmits:
           # We need support for disabling tests which need a recent kubelet.
           # If a test is labeled with `KubeletMinVersion:1.34`, then it cannot run
           # when the deployed kubelet is 1.32. This is enforced by
-          # generating `KubeletMinVersion: isSubsetOf { 1.33, 1.34 }`, i.e.
-          # not including the actual kubelet version and anything older
-          # in an allow list.
-          kubelet_label_filter="&& KubeletMinVersion: isSubsetOf { $( for v in $(seq $((previous_minor + 1)) $((minor - 1))); do echo "1.$v, "; done)1.$minor }"
+          # generating `! KubeletMinVersion: containsAny { 1.33, 1.34 }`, i.e.
+          # including all unsupportd kubelet versions in a deny list.
+          kubelet_label_filter=" && ! KubeletMinVersion: containsAny { $( for v in $(seq $((previous_minor + 1)) $((minor - 1))); do echo "1.$v, "; done)1.$minor }"
 
           KUBECONFIG=${HOME}/.kube/config ${ginkgo} run --nodes=8 --timeout=24h --silence-skips --force-newlines --no-color --label-filter="DRA && Feature: isSubsetOf { OffByDefault, DynamicResourceAllocation }$kubelet_label_filter && !Alpha && !Flaky && !Slow" ${e2e_test} -- -provider=local -report-dir="${ARTIFACTS}" -report-complete-ginkgo -report-complete-junit &
           GINKGO_E2E_PID=$!

config/jobs/kubernetes/sig-node/dra.jinja

@@ -210,10 +210,9 @@ presubmits:
           # We need support for disabling tests which need a recent kubelet.
           # If a test is labeled with `KubeletMinVersion:1.34`, then it cannot run
           # when the deployed kubelet is 1.32. This is enforced by
-          # generating `KubeletMinVersion: isSubsetOf { 1.33, 1.34 }`, i.e.
-          # not including the actual kubelet version and anything older
-          # in an allow list.
-          kubelet_label_filter="&& KubeletMinVersion: isSubsetOf { $( for v in $(seq $((previous_minor + 1)) $((minor - 1))); do echo "1.$v, "; done)1.$minor }"
+          # generating `! KubeletMinVersion: containsAny { 1.33, 1.34 }`, i.e.
+          # including all unsupportd kubelet versions in a deny list.
+          kubelet_label_filter=" && ! KubeletMinVersion: containsAny { $( for v in $(seq $((previous_minor + 1)) $((minor - 1))); do echo "1.$v, "; done)1.$minor }"
           {%- endif %}
 
           KUBECONFIG=${HOME}/.kube/config ${ginkgo} run --nodes=8 --timeout=24h --silence-skips --force-newlines --no-color --label-filter="DRA && Feature: isSubsetOf { OffByDefault, DynamicResourceAllocation } {%- if kubelet_skew|int > 0 %}$kubelet_label_filter{%- endif %} {%- if not all_features %} && !Alpha {%- endif %} && !Flaky {%- if not ci %} && !Slow {%- endif %}" ${e2e_test} -- -provider=local -report-dir="${ARTIFACTS}" -report-complete-ginkgo -report-complete-junit &