Valid request for a SIG so we can have kmods namespace created on openshift and have jenkins deployed automatically there, with duffy api key and ssh key mounted as openshift secreat (see https://sigs.centos.org/guide/ci).
Do you confirm it would work for you ? Maybe more that what you actually need but at least from there you can reach all architectures

FAS group created, creating automatically the kmods project/namespace in openshift.
Jenkins was also automatically deployed and is now running :
https://jenkins-kmods.apps.ocp.cloud.ci.centos.org/

You should be all set and request duffy nodes from within that env (see SIG guide for this)
Can you confirm you have all access than then we can close this ticket ?

Indeed, seems to be more than actually required, but at least according to my understanding the only (currently available) option to gain access to all architectures (x86_64, aarch64, and ppc64le) is using duffy.

As we currently use GitLab CI for everything related to the Kmods SIG: Is it possible to use duffy from within the GitLab CI running on gitlab.com? Would actually prefer incorporating the testing into the existing CI. Obviously this would require having the duffy api key and ssh key added as a CI/CD secret to gitlab.com/CentOS/kmods.

If that's not possible, we'll go for the option you described.

Edit: Seems like I was too slow to comment. Looking at the current setup right now.

well, one can setup duffy client , including on a dedicated runner at Gitlab side (or else) but the real problem would be to get access to the ppc64le, themselves not available directly and only through a site-to-site vpn tunnel to AWS VPC, in which ocp is running.

maybe (but to be investigated ?) running a dedicated gitlab-runner from within your ocp project and then tied to gitlab.com/CentOS/kmods would be the way to go ? (just a hint but should work, as dedicated gitlab-runner would then be able to reach all arches directly)

Thanks for all the information! I'll see what works best / is feasible to be implemented with a reasonable time frame.

Closing this issue now as it seems that I do have access to all expected resources. Thanks!