Skip to content

Commit 47e3ab1

Browse files
jcapiitaojcapiitao
committed
.tekton: add specific renovate pipelines
We have to add specific pipelines for Renovate when it pushes directly to branch without creating a PR i.e when automergeType="branch" is set. In thoses pipelines: - we trigger them only on push and when the branch begins with "renovate/" - we label the generated snapshot to not release them [1] - we set an expiration date for the generated images [1] konflux-ci/integration-service#1192
1 parent c0eacec commit 47e3ab1

File tree

4 files changed

+262
-0
lines changed

4 files changed

+262
-0
lines changed

‎.tekton/coreos-assembler-renovate-push.yaml

Lines changed: 64 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,64 @@
1+
apiVersion: tekton.dev/v1
2+
kind: PipelineRun
3+
metadata:
4+
annotations:
5+
build.appstudio.openshift.io/repo: https://github.com/coreos/coreos-assembler?rev={{revision}}
6+
build.appstudio.redhat.com/commit_sha: '{{revision}}'
7+
build.appstudio.redhat.com/target_branch: '{{target_branch}}'
8+
pipelinesascode.tekton.dev/cancel-in-progress: "false"
9+
pipelinesascode.tekton.dev/max-keep-runs: "3"
10+
pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch
11+
== "main" && ! "./tests/containers/***".pathChanged() && target_branch.startsWith("renovate/")
12+
creationTimestamp: null
13+
labels:
14+
appstudio.openshift.io/application: coreos-assembler
15+
appstudio.openshift.io/component: coreos-assembler
16+
pipelines.appstudio.openshift.io/type: build
17+
release.appstudio.openshift.io/auto-release: "false"
18+
name: coreos-assembler-renovate-on-push
19+
namespace: coreos-tenant
20+
spec:
21+
params:
22+
- name: git-url
23+
value: '{{source_url}}'
24+
- name: revision
25+
value: '{{revision}}'
26+
- name: output-image
27+
value: quay.io/redhat-user-workloads/coreos-tenant/coreos-assembler:{{revision}}
28+
- name: image-expires-after
29+
value: 5d
30+
- name: build-platforms
31+
value:
32+
- linux/x86_64
33+
- name: dockerfile
34+
value: Dockerfile
35+
- name: path-context
36+
value: .
37+
- name: skip-checks
38+
value: true
39+
- name: hermetic
40+
value: false
41+
#- name: prefetch-input
42+
# value: '[{"type": "rpm", "path": "ci/hermetic"}, {"path": "ci/hermetic", "type": "generic"}]'
43+
# Note: to be removed once rpm fully supported
44+
# https://github.com/hermetoproject/hermeto?tab=readme-ov-file#package-managers
45+
#- name: dev-package-managers
46+
# value: true
47+
#- name: build-args
48+
# value: ["NO_NETWORK=1"]
49+
pipelineRef:
50+
params:
51+
- name: bundle
52+
value: quay.io/jcapitao/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta@sha256:a3993688715cba973af5e7fba95bc91f92673e8491f2524853736161974334fb
53+
- name: name
54+
value: docker-build-multi-platform-oci-ta
55+
- name: kind
56+
value: pipeline
57+
resolver: bundles
58+
taskRunTemplate:
59+
serviceAccountName: build-pipeline-coreos-assembler
60+
workspaces:
61+
- name: git-auth
62+
secret:
63+
secretName: '{{ git_auth_secret }}'
64+
status: {}

‎.tekton/kola-nfs-renovate-push.yaml

Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
apiVersion: tekton.dev/v1
2+
kind: PipelineRun
3+
metadata:
4+
annotations:
5+
build.appstudio.openshift.io/repo: https://github.com/coreos/coreos-assembler?rev={{revision}}
6+
build.appstudio.redhat.com/commit_sha: '{{revision}}'
7+
build.appstudio.redhat.com/target_branch: '{{target_branch}}'
8+
pipelinesascode.tekton.dev/cancel-in-progress: "false"
9+
pipelinesascode.tekton.dev/max-keep-runs: "3"
10+
pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch
11+
== "main" &&
12+
("tests/containers/nfs/***".pathChanged() ||
13+
"rpms.lock.yaml".pathChanged() ||
14+
"ci/hermetic/artifacts.lock.yaml".pathChanged()
15+
) && target_branch.startsWith("renovate/")
16+
creationTimestamp: null
17+
labels:
18+
appstudio.openshift.io/application: coreos-assembler
19+
appstudio.openshift.io/component: kola-nfs
20+
pipelines.appstudio.openshift.io/type: build
21+
release.appstudio.openshift.io/auto-release: "false"
22+
name: kola-nfs-renovate-on-push
23+
namespace: coreos-tenant
24+
spec:
25+
params:
26+
- name: git-url
27+
value: '{{source_url}}'
28+
- name: revision
29+
value: '{{revision}}'
30+
- name: output-image
31+
value: quay.io/redhat-user-workloads/coreos-tenant/kola-nfs:{{revision}}
32+
- name: image-expires-after
33+
value: 5d
34+
- name: build-platforms
35+
value:
36+
- linux/x86_64
37+
- name: dockerfile
38+
value: Containerfile
39+
- name: path-context
40+
value: tests/containers/nfs
41+
- name: skip-checks
42+
value: true
43+
- name: hermetic
44+
value: false
45+
#- name: prefetch-input
46+
# value: '[{"type": "rpm", "path": "ci/hermetic"}]'
47+
# Note: to be removed once rpm fully supported
48+
# https://github.com/hermetoproject/hermeto?tab=readme-ov-file#package-managers
49+
- name: dev-package-managers
50+
value: true
51+
pipelineRef:
52+
params:
53+
- name: bundle
54+
value: quay.io/jcapitao/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta@sha256:a3993688715cba973af5e7fba95bc91f92673e8491f2524853736161974334fb
55+
- name: name
56+
value: docker-build-multi-platform-oci-ta
57+
- name: kind
58+
value: pipeline
59+
resolver: bundles
60+
taskRunTemplate:
61+
serviceAccountName: build-pipeline-kola-nfs
62+
workspaces:
63+
- name: git-auth
64+
secret:
65+
secretName: '{{ git_auth_secret }}'
66+
status: {}

‎.tekton/kola-tang-renovate-push.yaml

Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
apiVersion: tekton.dev/v1
2+
kind: PipelineRun
3+
metadata:
4+
annotations:
5+
build.appstudio.openshift.io/repo: https://github.com/coreos/coreos-assembler?rev={{revision}}
6+
build.appstudio.redhat.com/commit_sha: '{{revision}}'
7+
build.appstudio.redhat.com/target_branch: '{{target_branch}}'
8+
pipelinesascode.tekton.dev/cancel-in-progress: "false"
9+
pipelinesascode.tekton.dev/max-keep-runs: "3"
10+
pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch
11+
== "main" &&
12+
("tests/containers/tang/***".pathChanged() ||
13+
"rpms.lock.yaml".pathChanged() ||
14+
"ci/hermetic/artifacts.lock.yaml".pathChanged()
15+
) && target_branch.startsWith("renovate/")
16+
creationTimestamp: null
17+
labels:
18+
appstudio.openshift.io/application: coreos-assembler
19+
appstudio.openshift.io/component: kola-tang
20+
pipelines.appstudio.openshift.io/type: build
21+
release.appstudio.openshift.io/auto-release: "false"
22+
name: kola-tang-renovate-on-push
23+
namespace: coreos-tenant
24+
spec:
25+
params:
26+
- name: git-url
27+
value: '{{source_url}}'
28+
- name: revision
29+
value: '{{revision}}'
30+
- name: output-image
31+
value: quay.io/redhat-user-workloads/coreos-tenant/kola-tang:{{revision}}
32+
- name: image-expires-after
33+
value: 5d
34+
- name: build-platforms
35+
value:
36+
- linux/x86_64
37+
- name: dockerfile
38+
value: ./tests/containers/tang/Containerfile
39+
- name: path-context
40+
value: .
41+
- name: skip-checks
42+
value: true
43+
- name: hermetic
44+
value: false
45+
#- name: prefetch-input
46+
# value: '[{"type": "rpm", "path": "ci/hermetic"}]'
47+
# Note: to be removed once rpm fully supported
48+
# https://github.com/hermetoproject/hermeto?tab=readme-ov-file#package-managers
49+
- name: dev-package-managers
50+
value: true
51+
pipelineRef:
52+
params:
53+
- name: bundle
54+
value: quay.io/jcapitao/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta@sha256:a3993688715cba973af5e7fba95bc91f92673e8491f2524853736161974334fb
55+
- name: name
56+
value: docker-build-multi-platform-oci-ta
57+
- name: kind
58+
value: pipeline
59+
resolver: bundles
60+
taskRunTemplate:
61+
serviceAccountName: build-pipeline-kola-tang
62+
workspaces:
63+
- name: git-auth
64+
secret:
65+
secretName: '{{ git_auth_secret }}'
66+
status: {}

‎.tekton/kola-targetcli-renovate-push.yaml

Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
apiVersion: tekton.dev/v1
2+
kind: PipelineRun
3+
metadata:
4+
annotations:
5+
build.appstudio.openshift.io/repo: https://github.com/coreos/coreos-assembler?rev={{revision}}
6+
build.appstudio.redhat.com/commit_sha: '{{revision}}'
7+
build.appstudio.redhat.com/target_branch: '{{target_branch}}'
8+
pipelinesascode.tekton.dev/cancel-in-progress: "false"
9+
pipelinesascode.tekton.dev/max-keep-runs: "3"
10+
pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch
11+
== "main" &&
12+
("tests/containers/targetcli/***".pathChanged() ||
13+
"rpms.lock.yaml".pathChanged() ||
14+
"ci/hermetic/artifacts.lock.yaml".pathChanged()
15+
) && target_branch.startsWith("renovate/")
16+
creationTimestamp: null
17+
labels:
18+
appstudio.openshift.io/application: coreos-assembler
19+
appstudio.openshift.io/component: kola-targetcli
20+
pipelines.appstudio.openshift.io/type: build
21+
release.appstudio.openshift.io/auto-release: "false"
22+
name: kola-targetcli-renovate-on-push
23+
namespace: coreos-tenant
24+
spec:
25+
params:
26+
- name: git-url
27+
value: '{{source_url}}'
28+
- name: revision
29+
value: '{{revision}}'
30+
- name: output-image
31+
value: quay.io/redhat-user-workloads/coreos-tenant/kola-targetcli:{{revision}}
32+
- name: image-expires-after
33+
value: 5d
34+
- name: build-platforms
35+
value:
36+
- linux/x86_64
37+
- name: dockerfile
38+
value: ./tests/containers/targetcli/Containerfile
39+
- name: path-context
40+
value: .
41+
- name: skip-checks
42+
value: true
43+
- name: hermetic
44+
value: false
45+
#- name: prefetch-input
46+
# value: '[{"type": "rpm", "path": "ci/hermetic"}]'
47+
# Note: to be removed once rpm fully supported
48+
# https://github.com/hermetoproject/hermeto?tab=readme-ov-file#package-managers
49+
- name: dev-package-managers
50+
value: true
51+
pipelineRef:
52+
params:
53+
- name: bundle
54+
value: quay.io/jcapitao/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta@sha256:a3993688715cba973af5e7fba95bc91f92673e8491f2524853736161974334fb
55+
- name: name
56+
value: docker-build-multi-platform-oci-ta
57+
- name: kind
58+
value: pipeline
59+
resolver: bundles
60+
taskRunTemplate:
61+
serviceAccountName: build-pipeline-kola-targetcli
62+
workspaces:
63+
- name: git-auth
64+
secret:
65+
secretName: '{{ git_auth_secret }}'
66+
status: {}

0 commit comments

Comments
 (0)