enable hermetic builds and update containerfile labels

Signed-off-by: Anand Kumar Singh <[email protected]>

Author: anandrkskd

.tekton/gitops-operator-pull-request.yaml

@@ -28,6 +28,10 @@ spec:
     value: 5d
   - name: dockerfile
     value: Containerfile.plugin
+  - name: hermetic
+    value: true
+  - name: prefetch-input
+    value: '{"type": "gomod", "path": "."}'
   pipelineSpec:
     finally:
     - name: show-sbom
@@ -228,6 +232,8 @@ spec:
         - $(params.build-args[*])
       - name: BUILD_ARGS_FILE
         value: $(params.build-args-file)
+      - name: TARGET_VERSION
+        value: '{{target_branch}}'
       runAfter:
       - prefetch-dependencies
       taskRef:

.tekton/gitops-operator-push.yaml

@@ -25,6 +25,10 @@ spec:
     value: quay.io/redhat-user-workloads/rh-openshift-gitops-tenant/openshift-gitops-operator/gitops-operator:{{revision}}
   - name: dockerfile
     value: Containerfile.plugin
+  - name: hermetic
+    value: true
+  - name: prefetch-input
+    value: '{"type": "gomod", "path": "."}'
   pipelineSpec:
     finally:
     - name: show-sbom
@@ -220,6 +224,8 @@ spec:
         value: $(params.image-expires-after)
       - name: COMMIT_SHA
         value: $(tasks.clone-repository.results.commit)
+      - name: TARGET_VERSION
+        value: '{{target_branch}}'
       - name: BUILD_ARGS
         value:
         - $(params.build-args[*])

Containerfile.plugin

@@ -50,13 +50,13 @@ ENTRYPOINT [ "/usr/local/bin/manager" ]
 
 LABEL \
     name="openshift-gitops-1/gitops-rhel8-operator" \
-    version=${CI_CONTAINER_VERSION} \
+    version=${TARGET_VERSION} \
     License="Apache 2.0" \
     com.redhat.component="openshift-gitops-operator-container" \
     com.redhat.delivery.appregistry="false" \
     release=${CI_CONTAINER_RELEASE} \
     upstream-version=${CI_UPSTREAM_VERSION} \
-    upstream-vcs-ref="${CI_GITOPS_OPERATOR_UPSTREAM_COMMIT}" \
+    upstream-vcs-ref="${COMMIT_SHA}" \
     upstream-vcs-type="git" \
     summary="Openshift GitOps Operator Dockerfile Template" \
     maintainer="William Tam <[email protected]>"  \