Skip to content

Commit bbca495

Browse files
ingvagabundingvagabund
authored
Merge pull request #420 from openshift/appstudio-kube-descheduler-operator-fbc-4-16
Red Hat Konflux update kube-descheduler-operator-fbc-4-16
2 parents 8b73043 + 463efea commit bbca495

File tree

2 files changed

+748
-0
lines changed

2 files changed

+748
-0
lines changed

‎.tekton/kube-descheduler-operator-fbc-4-16-pull-request.yaml

Lines changed: 376 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,376 @@
1+
apiVersion: tekton.dev/v1
2+
kind: PipelineRun
3+
metadata:
4+
annotations:
5+
build.appstudio.openshift.io/repo: https://github.com/openshift/cluster-kube-descheduler-operator?rev={{revision}}
6+
build.appstudio.redhat.com/commit_sha: '{{revision}}'
7+
build.appstudio.redhat.com/pull_request_number: '{{pull_request_number}}'
8+
build.appstudio.redhat.com/target_branch: '{{target_branch}}'
9+
pipelinesascode.tekton.dev/max-keep-runs: "3"
10+
pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch
11+
== "fbc-4.16" && ( "v4.16/***".pathChanged() || ".tekton/kube-descheduler-operator-fbc-4-16-pull-request.yaml".pathChanged()
12+
)
13+
creationTimestamp: null
14+
labels:
15+
appstudio.openshift.io/application: kube-descheduler-operator-fbc-4-16
16+
appstudio.openshift.io/component: kube-descheduler-operator-fbc-4-16
17+
pipelines.appstudio.openshift.io/type: build
18+
name: kube-descheduler-operator-fbc-4-16-on-pull-request
19+
namespace: kdo-workloads-tenant
20+
spec:
21+
params:
22+
- name: git-url
23+
value: '{{source_url}}'
24+
- name: revision
25+
value: '{{revision}}'
26+
- name: output-image
27+
value: quay.io/redhat-user-workloads/kdo-workloads-tenant/kube-descheduler-operator-fbc-4-16:on-pr-{{revision}}
28+
- name: image-expires-after
29+
value: 5d
30+
- name: dockerfile
31+
value: catalog.Dockerfile
32+
- name: path-context
33+
value: v4.16
34+
pipelineSpec:
35+
description: |
36+
This pipeline is ideal for building and verifying [file-based catalogs](https://konflux-ci.dev/docs/advanced-how-tos/building-olm.adoc#building-the-file-based-catalog).
37+
38+
_Uses `buildah` to create a container image. Its build-time tests are limited to verifying the included catalog and do not scan the image.
39+
This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-fbc-builder?tab=tags)_
40+
finally:
41+
- name: show-sbom
42+
params:
43+
- name: IMAGE_URL
44+
value: $(tasks.build-image-index.results.IMAGE_URL)
45+
taskRef:
46+
params:
47+
- name: name
48+
value: show-sbom
49+
- name: bundle
50+
value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:945a7c9066d3e0a95d3fddb7e8a6992e4d632a2a75d8f3a9bd2ff2fef0ec9aa0
51+
- name: kind
52+
value: task
53+
resolver: bundles
54+
- name: show-summary
55+
params:
56+
- name: pipelinerun-name
57+
value: $(context.pipelineRun.name)
58+
- name: git-url
59+
value: $(tasks.clone-repository.results.url)?rev=$(tasks.clone-repository.results.commit)
60+
- name: image-url
61+
value: $(params.output-image)
62+
- name: build-task-status
63+
value: $(tasks.build-image-index.status)
64+
taskRef:
65+
params:
66+
- name: name
67+
value: summary
68+
- name: bundle
69+
value: quay.io/konflux-ci/tekton-catalog/task-summary:0.2@sha256:870d9a04d9784840a90b7bf6817cd0d0c4edfcda04b1ba1868cae625a3c3bfcc
70+
- name: kind
71+
value: task
72+
resolver: bundles
73+
workspaces:
74+
- name: workspace
75+
workspace: workspace
76+
params:
77+
- description: Source Repository URL
78+
name: git-url
79+
type: string
80+
- default: ""
81+
description: Revision of the Source Repository
82+
name: revision
83+
type: string
84+
- description: Fully Qualified Output Image
85+
name: output-image
86+
type: string
87+
- default: .
88+
description: Path to the source code of an application's component from where
89+
to build image.
90+
name: path-context
91+
type: string
92+
- default: Dockerfile
93+
description: Path to the Dockerfile inside the context specified by parameter
94+
path-context
95+
name: dockerfile
96+
type: string
97+
- default: "false"
98+
description: Force rebuild image
99+
name: rebuild
100+
type: string
101+
- default: "false"
102+
description: Skip checks against built image
103+
name: skip-checks
104+
type: string
105+
- default: "true"
106+
description: Execute the build with network isolation
107+
name: hermetic
108+
type: string
109+
- default: ""
110+
description: Build dependencies to be prefetched by Cachi2
111+
name: prefetch-input
112+
type: string
113+
- default: ""
114+
description: Image tag expiration time, time values could be something like
115+
1h, 2d, 3w for hours, days, and weeks, respectively.
116+
name: image-expires-after
117+
- default: "false"
118+
description: Build a source image.
119+
name: build-source-image
120+
type: string
121+
- default: "false"
122+
description: Add built image into an OCI image index
123+
name: build-image-index
124+
type: string
125+
results:
126+
- description: ""
127+
name: IMAGE_URL
128+
value: $(tasks.build-image-index.results.IMAGE_URL)
129+
- description: ""
130+
name: IMAGE_DIGEST
131+
value: $(tasks.build-image-index.results.IMAGE_DIGEST)
132+
- description: ""
133+
name: CHAINS-GIT_URL
134+
value: $(tasks.clone-repository.results.url)
135+
- description: ""
136+
name: CHAINS-GIT_COMMIT
137+
value: $(tasks.clone-repository.results.commit)
138+
tasks:
139+
- name: init
140+
params:
141+
- name: image-url
142+
value: $(params.output-image)
143+
- name: rebuild
144+
value: $(params.rebuild)
145+
- name: skip-checks
146+
value: $(params.skip-checks)
147+
taskRef:
148+
params:
149+
- name: name
150+
value: init
151+
- name: bundle
152+
value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:0523b51c28375a3f222da91690e22eff11888ebc98a0c73c468af44762265c69
153+
- name: kind
154+
value: task
155+
resolver: bundles
156+
- name: clone-repository
157+
params:
158+
- name: url
159+
value: $(params.git-url)
160+
- name: revision
161+
value: $(params.revision)
162+
runAfter:
163+
- init
164+
taskRef:
165+
params:
166+
- name: name
167+
value: git-clone
168+
- name: bundle
169+
value: quay.io/konflux-ci/tekton-catalog/task-git-clone:0.1@sha256:d091a9e19567a4cbdc5acd57903c71ba71dc51d749a4ba7477e689608851e981
170+
- name: kind
171+
value: task
172+
resolver: bundles
173+
when:
174+
- input: $(tasks.init.results.build)
175+
operator: in
176+
values:
177+
- "true"
178+
workspaces:
179+
- name: output
180+
workspace: workspace
181+
- name: basic-auth
182+
workspace: git-auth
183+
- name: build-container
184+
params:
185+
- name: IMAGE
186+
value: $(params.output-image)
187+
- name: DOCKERFILE
188+
value: $(params.dockerfile)
189+
- name: CONTEXT
190+
value: $(params.path-context)
191+
- name: HERMETIC
192+
value: $(params.hermetic)
193+
- name: IMAGE_EXPIRES_AFTER
194+
value: $(params.image-expires-after)
195+
- name: COMMIT_SHA
196+
value: $(tasks.clone-repository.results.commit)
197+
runAfter:
198+
- clone-repository
199+
taskRef:
200+
params:
201+
- name: name
202+
value: buildah
203+
- name: bundle
204+
value: quay.io/konflux-ci/tekton-catalog/task-buildah:0.2@sha256:aebfe04c80f7fd937628fad760c095c6a0efacb048f2c98e5d5e7f2b0f134cf9
205+
- name: kind
206+
value: task
207+
resolver: bundles
208+
when:
209+
- input: $(tasks.init.results.build)
210+
operator: in
211+
values:
212+
- "true"
213+
workspaces:
214+
- name: source
215+
workspace: workspace
216+
- name: build-image-index
217+
params:
218+
- name: IMAGE
219+
value: $(params.output-image)
220+
- name: COMMIT_SHA
221+
value: $(tasks.clone-repository.results.commit)
222+
- name: IMAGE_EXPIRES_AFTER
223+
value: $(params.image-expires-after)
224+
- name: ALWAYS_BUILD_INDEX
225+
value: $(params.build-image-index)
226+
- name: IMAGES
227+
value:
228+
- $(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)
229+
runAfter:
230+
- build-container
231+
taskRef:
232+
params:
233+
- name: name
234+
value: build-image-index
235+
- name: bundle
236+
value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:a89c141c8d35b2e9d9904c92c9b128f7ccf36681adac7f7422b4537b8bb077e7
237+
- name: kind
238+
value: task
239+
resolver: bundles
240+
when:
241+
- input: $(tasks.init.results.build)
242+
operator: in
243+
values:
244+
- "true"
245+
- name: deprecated-base-image-check
246+
params:
247+
- name: IMAGE_URL
248+
value: $(tasks.build-image-index.results.IMAGE_URL)
249+
- name: IMAGE_DIGEST
250+
value: $(tasks.build-image-index.results.IMAGE_DIGEST)
251+
runAfter:
252+
- build-image-index
253+
taskRef:
254+
params:
255+
- name: name
256+
value: deprecated-image-check
257+
- name: bundle
258+
value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.4@sha256:5a1a165fa02270f0a947d8a2131ee9d8be0b8e9d34123828c2bef589e504ee84
259+
- name: kind
260+
value: task
261+
resolver: bundles
262+
when:
263+
- input: $(params.skip-checks)
264+
operator: in
265+
values:
266+
- "false"
267+
- name: apply-tags
268+
params:
269+
- name: IMAGE
270+
value: $(tasks.build-image-index.results.IMAGE_URL)
271+
runAfter:
272+
- build-image-index
273+
taskRef:
274+
params:
275+
- name: name
276+
value: apply-tags
277+
- name: bundle
278+
value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.1@sha256:87fd7fc0e937aad1a8db9b6e377d7e444f53394dafde512d68adbea6966a4702
279+
- name: kind
280+
value: task
281+
resolver: bundles
282+
- name: inspect-image
283+
params:
284+
- name: IMAGE_URL
285+
value: $(tasks.build-image-index.results.IMAGE_URL)
286+
- name: IMAGE_DIGEST
287+
value: $(tasks.build-image-index.results.IMAGE_DIGEST)
288+
runAfter:
289+
- build-image-index
290+
taskRef:
291+
params:
292+
- name: name
293+
value: inspect-image
294+
- name: bundle
295+
value: quay.io/konflux-ci/tekton-catalog/task-inspect-image:0.1@sha256:b4f8b61baf43ca503aae76078bb4cfe718ca21a5ab293d982978d6fd564bf1b6
296+
- name: kind
297+
value: task
298+
resolver: bundles
299+
when:
300+
- input: $(params.skip-checks)
301+
operator: in
302+
values:
303+
- "false"
304+
workspaces:
305+
- name: source
306+
workspace: workspace
307+
- name: fbc-validate
308+
params:
309+
- name: IMAGE_URL
310+
value: $(tasks.build-image-index.results.IMAGE_URL)
311+
- name: IMAGE_DIGEST
312+
value: $(tasks.build-image-index.results.IMAGE_DIGEST)
313+
- name: BASE_IMAGE
314+
value: $(tasks.inspect-image.results.BASE_IMAGE)
315+
runAfter:
316+
- inspect-image
317+
taskRef:
318+
params:
319+
- name: name
320+
value: fbc-validation
321+
- name: bundle
322+
value: quay.io/konflux-ci/tekton-catalog/task-fbc-validation:0.1@sha256:bf72968f8b36b92b4e8322f4208f20f07be1195be4551a7916d0b598c613ed4c
323+
- name: kind
324+
value: task
325+
resolver: bundles
326+
when:
327+
- input: $(params.skip-checks)
328+
operator: in
329+
values:
330+
- "false"
331+
workspaces:
332+
- name: workspace
333+
workspace: workspace
334+
- name: fbc-related-image-check
335+
runAfter:
336+
- fbc-validate
337+
taskRef:
338+
params:
339+
- name: name
340+
value: fbc-related-image-check
341+
- name: bundle
342+
value: quay.io/konflux-ci/tekton-catalog/task-fbc-related-image-check:0.1@sha256:17dc33ef07a8f87d1a8a2f6d4f496123e0db5d29bbe7ff7956462dc5d95c3170
343+
- name: kind
344+
value: task
345+
resolver: bundles
346+
when:
347+
- input: $(params.skip-checks)
348+
operator: in
349+
values:
350+
- "false"
351+
workspaces:
352+
- name: workspace
353+
workspace: workspace
354+
workspaces:
355+
- name: workspace
356+
- name: git-auth
357+
optional: true
358+
- name: netrc
359+
optional: true
360+
taskRunTemplate: {}
361+
workspaces:
362+
- name: workspace
363+
volumeClaimTemplate:
364+
metadata:
365+
creationTimestamp: null
366+
spec:
367+
accessModes:
368+
- ReadWriteOnce
369+
resources:
370+
requests:
371+
storage: 1Gi
372+
status: {}
373+
- name: git-auth
374+
secret:
375+
secretName: '{{ git_auth_secret }}'
376+
status: {}

0 commit comments

Comments
 (0)