[release-v1.16] Sync Konflux configurations

Author: serverless-qe

.konflux/applications/serverless-operator-136/components/kn-backstage-plugins-eventmesh-116.yaml

@@ -3,11 +3,17 @@ kind: Component
 metadata:
   annotations:
     build.appstudio.openshift.io/pipeline: '{"name":"docker-build","bundle":"latest"}'
+    build.appstudio.openshift.io/request: configure-pac-no-mr
   name: kn-backstage-plugins-eventmesh-116
 spec:
   componentName: kn-backstage-plugins-eventmesh-116
   application: serverless-operator-136
 
+  build-nudges-ref:
+    
+    - "serverless-bundle-136"
+    
+  
   source:
     git:
       url: https://github.com/openshift-knative/backstage-plugins.git

.konflux/applications/serverless-operator-136/components/kn-backstage-plugins-migrate-116.yaml

@@ -3,11 +3,17 @@ kind: Component
 metadata:
   annotations:
     build.appstudio.openshift.io/pipeline: '{"name":"docker-build","bundle":"latest"}'
+    build.appstudio.openshift.io/request: configure-pac-no-mr
   name: kn-backstage-plugins-migrate-116
 spec:
   componentName: kn-backstage-plugins-migrate-116
   application: serverless-operator-136
 
+  build-nudges-ref:
+    
+    - "serverless-bundle-136"
+    
+  
   source:
     git:
       url: https://github.com/openshift-knative/backstage-plugins.git

.konflux/applications/serverless-operator-136/components/kn-backstage-plugins-test-eventshub-116.yaml

@@ -3,11 +3,17 @@ kind: Component
 metadata:
   annotations:
     build.appstudio.openshift.io/pipeline: '{"name":"docker-build","bundle":"latest"}'
+    build.appstudio.openshift.io/request: configure-pac-no-mr
   name: kn-backstage-plugins-test-eventshub-116
 spec:
   componentName: kn-backstage-plugins-test-eventshub-116
   application: serverless-operator-136
 
+  build-nudges-ref:
+    
+    - "serverless-bundle-136"
+    
+  
   source:
     git:
       url: https://github.com/openshift-knative/backstage-plugins.git

.konflux/applications/serverless-operator-136/tests/ec-test.yaml

@@ -1,13 +1,13 @@
 apiVersion: appstudio.redhat.com/v1beta2
 kind: IntegrationTestScenario
 metadata:
-  name: serverless-operator-136-enterprise-contract
+  name: serverless-operator-136-ec
 spec:
   params: 
     - name: POLICY_CONFIGURATION
       value: rhtap-releng-tenant/registry-standard-stage
     - name: TIMEOUT
-      value: "45m0s"
+      value: "120m"
   application: serverless-operator-136
   contexts:
     - description: Application testing

.konflux/applications/serverless-operator-136/tests/override-snapshot-ec-test.yaml

@@ -0,0 +1,23 @@
+apiVersion: appstudio.redhat.com/v1beta2
+kind: IntegrationTestScenario
+metadata:
+  name: serverless-operator-136-ec-override-snapshot
+spec:
+  params: 
+    - name: POLICY_CONFIGURATION
+      value: rhtap-releng-tenant/registry-ocp-serverless-prod
+    - name: TIMEOUT
+      value: "120m"
+  application: serverless-operator-136
+  contexts:
+    - description: Override Snapshot testing
+      name: override
+  resolverRef:
+    params:
+      - name: url
+        value: 'https://github.com/redhat-appstudio/build-definitions'
+      - name: revision
+        value: main
+      - name: pathInRepo
+        value: pipelines/enterprise-contract.yaml
+    resolver: git

.tekton/docker-build.yaml

@@ -138,7 +138,7 @@ spec:
       - name: name
         value: sast-snyk-check-oci-ta
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.2@sha256:22ca2db8d94c689dba03d2c257733743cd118759d7af9a68fb08f54a27fd8460
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta@sha256:af93b35e6e71a6ff7f3785ad8d8497b11204a5c0c33ab1a78b44f9d43f49c7a5
       - name: kind
         value: task
       resolver: bundles
@@ -356,7 +356,7 @@ spec:
       - name: name
         value: deprecated-image-check
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.4@sha256:5a1a165fa02270f0a947d8a2131ee9d8be0b8e9d34123828c2bef589e504ee84
+        value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check@sha256:650330fde0773f73f6bac77ae573031c44c79165d9503b0d5ec1db3e6ef981d7
       - name: kind
         value: task
       resolver: bundles
@@ -378,7 +378,7 @@ spec:
       - name: name
         value: clair-scan
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:0a5421111e7092740398691d5bd7c125cc0896f29531d19414bb5724ae41692a
+        value: quay.io/konflux-ci/tekton-catalog/task-clair-scan@sha256:907f11c67b0330480cbf85c23b1085acc5a049ab90af980169251860a3d97ef7
       - name: kind
         value: task
       resolver: bundles
@@ -420,7 +420,57 @@ spec:
       - name: name
         value: clamav-scan
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.1@sha256:b4f450f1447b166da671f1d5819ab5a1485083e5c27ab91f7d8b7a2ff994c8c2
+        value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan@sha256:c12e7a774bb07ad2796c01071b0dc0f199111b0ee99c45b55fa599e23b200bae
+      - name: kind
+        value: task
+      resolver: bundles
+    when:
+    - input: $(params.skip-checks)
+      operator: in
+      values:
+      - "false"
+  - name: sast-shell-check
+    params:
+    - name: image-digest
+      value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+    - name: image-url
+      value: $(tasks.build-image-index.results.IMAGE_URL)
+    - name: SOURCE_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+    - name: CACHI2_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+    runAfter:
+    - build-image-index
+    taskRef:
+      params:
+      - name: name
+        value: sast-shell-check-oci-ta
+      - name: bundle
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta@sha256:7553ec6925d0586b286502669b8e31a39dc73501f657426bac99019ac598d6ab
+      - name: kind
+        value: task
+      resolver: bundles
+    when:
+    - input: $(params.skip-checks)
+      operator: in
+      values:
+      - "false"
+  - name: sast-unicode-check
+    params:
+    - name: image-url
+      value: $(tasks.build-image-index.results.IMAGE_URL)
+    - name: SOURCE_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+    - name: CACHI2_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+    runAfter:
+    - build-image-index
+    taskRef:
+      params:
+      - name: name
+        value: sast-shell-check-oci-ta
+      - name: bundle
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta@sha256:7553ec6925d0586b286502669b8e31a39dc73501f657426bac99019ac598d6ab
       - name: kind
         value: task
       resolver: bundles

.tekton/kn-backstage-plugins-eventmesh-116-pull-request.yaml

@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/eventmesh/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

.tekton/kn-backstage-plugins-eventmesh-116-push.yaml

@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/eventmesh/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

.tekton/kn-backstage-plugins-migrate-116-pull-request.yaml

@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/migrate/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

.tekton/kn-backstage-plugins-migrate-116-push.yaml

@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/migrate/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef: