[release-1.35] Sync Konflux configurations (#3565)

Co-authored-by: serverless-qe <[email protected]>

Author: serverless-qe

.tekton/bundle-build.yaml

@@ -1,7 +1,7 @@
 apiVersion: tekton.dev/v1
 kind: Pipeline
 metadata:
-  creationTimestamp:
+  creationTimestamp: null
   labels:
     pipelines.openshift.io/runtime: generic
     pipelines.openshift.io/strategy: docker
@@ -33,7 +33,8 @@ spec:
     - linux/arm64
     - linux/ppc64le
     - linux/s390x
-    description: List of platforms to build the container images on. The available set of values is determined by the configuration of the multi-platform-controller.
+    description: List of platforms to build the container images on. The available
+      set of values is determined by the configuration of the multi-platform-controller.
     name: build-platforms
     type: array
   - default: --all-projects --org=3e1a4cca-ebfb-495f-b64c-3cc960d566b4 --exclude=test*,vendor,third_party
@@ -45,7 +46,8 @@ spec:
     name: build-source-image
     type: string
   - default: "false"
-    description: 'Enable in-development package managers. WARNING: the behavior may change at any time without notice. Use at your own risk.'
+    description: 'Enable in-development package managers. WARNING: the behavior may
+      change at any time without notice. Use at your own risk.'
     name: prefetch-input-dev-package-managers
   - default: []
     description: Additional image tags
@@ -62,11 +64,13 @@ spec:
     name: output-image
     type: string
   - default: .
-    description: Path to the source code of an application's component from where to build image.
+    description: Path to the source code of an application's component from where
+      to build image.
     name: path-context
     type: string
   - default: Dockerfile
-    description: Path to the Dockerfile inside the context specified by parameter path-context
+    description: Path to the Dockerfile inside the context specified by parameter
+      path-context
     name: dockerfile
     type: string
   - default: "false"
@@ -86,7 +90,8 @@ spec:
     name: prefetch-input
     type: string
   - default: ""
-    description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
+    description: Image tag expiration time, time values could be something like 1h,
+      2d, 3w for hours, days, and weeks, respectively.
     name: image-expires-after
   - default: "true"
     description: Add built image into an OCI image index
@@ -100,6 +105,11 @@ spec:
     description: Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file
     name: build-args-file
     type: string
+  - default: "false"
+    description: Whether to enable privileged mode, should be used only with remote
+      VMs
+    name: privileged-nested
+    type: string
   results:
   - description: ""
     name: IMAGE_URL
@@ -259,6 +269,8 @@ spec:
       - $(params.build-args[*])
     - name: BUILD_ARGS_FILE
       value: $(params.build-args-file)
+    - name: PRIVILEGED_NESTED
+      value: $(params.privileged-nested)
     - name: SOURCE_ARTIFACT
       value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
     - name: CACHI2_ARTIFACT
@@ -452,6 +464,8 @@ spec:
       - "false"
   - name: sast-unicode-check
     params:
+    - name: image-digest
+      value: $(tasks.build-image-index.results.IMAGE_DIGEST)
     - name: image-url
       value: $(tasks.build-image-index.results.IMAGE_URL)
     - name: SOURCE_ARTIFACT

.tekton/docker-build.yaml

@@ -1,15 +1,15 @@
 apiVersion: tekton.dev/v1
 kind: Pipeline
 metadata:
-  creationTimestamp:
+  creationTimestamp: null
   labels:
     pipelines.openshift.io/runtime: fbc
     pipelines.openshift.io/strategy: fbc
     pipelines.openshift.io/used-by: build-cloud
   name: fbc-builder
 spec:
   description: |
-    This pipeline is ideal for building and verifying [file-based catalogs](https://konflux-ci.dev/docs/advanced-how-tos/building-olm.adoc#building-the-file-based-catalog).
+    This pipeline is ideal for building and verifying [file-based catalogs](https://konflux-ci.dev/docs/end-to-end/building-olm/#building-the-file-based-catalog).
 
     _Uses `buildah` to create a container image. Its build-time tests are limited to verifying the included catalog and do not scan the image.
     This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-fbc-builder?tab=tags)_
@@ -33,7 +33,8 @@ spec:
     - linux/arm64
     - linux/ppc64le
     - linux/s390x
-    description: List of platforms to build the container images on. The available set of values is determined by the configuration of the multi-platform-controller.
+    description: List of platforms to build the container images on. The available
+      set of values is determined by the configuration of the multi-platform-controller.
     name: build-platforms
     type: array
   - default: "true"
@@ -55,11 +56,13 @@ spec:
     name: output-image
     type: string
   - default: .
-    description: Path to the source code of an application's component from where to build image.
+    description: Path to the source code of an application's component from where
+      to build image.
     name: path-context
     type: string
   - default: Dockerfile
-    description: Path to the Dockerfile inside the context specified by parameter path-context
+    description: Path to the Dockerfile inside the context specified by parameter
+      path-context
     name: dockerfile
     type: string
   - default: "false"
@@ -79,7 +82,8 @@ spec:
     name: prefetch-input
     type: string
   - default: ""
-    description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
+    description: Image tag expiration time, time values could be something like 1h,
+      2d, 3w for hours, days, and weeks, respectively.
     name: image-expires-after
   - default: "true"
     description: Add built image into an OCI image index

.tekton/fbc-builder.yaml

@@ -54,8 +54,9 @@ spec:
             limits:
               memory: 4Gi
   pipelineRef:
-    name: docker-build
-  taskRunTemplate: {}
+    name: bundle-build
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-serverless-bundle-135
   workspaces:
     - name: git-auth
       secret:

.tekton/serverless-bundle-135-pull-request.yaml

@@ -53,8 +53,9 @@ spec:
             limits:
               memory: 4Gi
   pipelineRef:
-    name: docker-build
-  taskRunTemplate: {}
+    name: bundle-build
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-serverless-bundle-135
   workspaces:
     - name: git-auth
       secret:

.tekton/serverless-bundle-135-push.yaml

@@ -45,7 +45,8 @@ spec:
       value: '{{revision}}'
   pipelineRef:
     name: fbc-builder
-  taskRunTemplate: {}
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-serverless-index-135-fbc-414
   workspaces:
     - name: git-auth
       secret:

.tekton/serverless-index-135-fbc-414-pull-request.yaml

@@ -44,7 +44,8 @@ spec:
         - latest
   pipelineRef:
     name: fbc-builder
-  taskRunTemplate: {}
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-serverless-index-135-fbc-414
   workspaces:
     - name: git-auth
       secret:

.tekton/serverless-index-135-fbc-414-push.yaml

@@ -45,7 +45,8 @@ spec:
       value: '{{revision}}'
   pipelineRef:
     name: fbc-builder
-  taskRunTemplate: {}
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-serverless-index-135-fbc-415
   workspaces:
     - name: git-auth
       secret:

.tekton/serverless-index-135-fbc-415-pull-request.yaml

@@ -44,7 +44,8 @@ spec:
         - latest
   pipelineRef:
     name: fbc-builder
-  taskRunTemplate: {}
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-serverless-index-135-fbc-415
   workspaces:
     - name: git-auth
       secret:

.tekton/serverless-index-135-fbc-415-push.yaml

@@ -45,7 +45,8 @@ spec:
       value: '{{revision}}'
   pipelineRef:
     name: fbc-builder
-  taskRunTemplate: {}
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-serverless-index-135-fbc-416
   workspaces:
     - name: git-auth
       secret: