[ISV-3647] Verify cert project is not archived (#458)

* [ISV-3647] Verify cert project is not archived

Author: jedinym

ansible/roles/operator-pipeline/templates/openshift/pipelines/operator-hosted-pipeline.yml

@@ -273,18 +273,20 @@ spec:
         - name: results
           workspace: results
 
-    - name: verify-project-distribution
+    - name: verify-project
       runAfter:
         - get-cert-project-related-data
       taskRef:
-        name: verify-project-distribution
+        name: verify-project
       params:
         - name: pipeline_image
           value: "$(params.pipeline_image)"
         - name: project_distribution
           value: "$(tasks.get-cert-project-related-data.results.operator_distribution)"
         - name: organization
           value: "$(tasks.get-organization.results.organization)"
+        - name: project_status
+          value: "$(tasks.get-cert-project-related-data.results.project_status)"
 
     # Merge user's registry tokens with service account credentials
     # used elsewhere by this pipeline.
@@ -512,7 +514,7 @@ spec:
         - yaml-lint
         - verify-pinned-digest
         - verify-changed-directories
-        - verify-project-distribution
+        - verify-project
       taskRef:
         name: dockerfile-creation
       params:

ansible/roles/operator-pipeline/templates/openshift/tasks/get-cert-project-related-data.yml

@@ -33,6 +33,8 @@ spec:
       description: Current Certification status of the cert Project
     - name: github_usernames
       description: List of GitHub accounts with permissions allowing operator submission
+    - name: project_status
+      description: Status of the cert project - either archived or active
   workspaces:
     - name: source
     - name: results
@@ -89,6 +91,7 @@ spec:
         get_from_cp repository_name '.container.repository_name' | tee $(results.repo_name.path)
         get_from_cp org_id '.org_id' | tee $(results.org_id.path)
         get_from_cp operator_distribution '.operator_distribution' | tee $(results.operator_distribution.path)
+        get_from_cp project_status '.project_status' | tee $(results.project_status.path)
 
         # Exception, where function cannot be applied-
         # github usernames have the newline symbol changed to space

ansible/roles/operator-pipeline/templates/openshift/tasks/verify-project-distribution.yml renamed to ansible/roles/operator-pipeline/templates/openshift/tasks/verify-project.yml

@@ -2,22 +2,42 @@
 apiVersion: tekton.dev/v1beta1
 kind: Task
 metadata:
-  name: verify-project-distribution
+  name: verify-project
 spec:
   description: >-
-    This task verifies that project with correct distribution method is used.
+    This task verifies that project is not archived and the correct distribution
+    method is used.
   params:
     - name: pipeline_image
       description: The common pipeline image.
 
     - name: organization
       description: |
-        Organization defined in the project config.yaml - either certified-operator or redhat-marketplace
+        Organization defined in the project config.yaml - either
+        certified-operator or redhat-marketplace
 
     - name: project_distribution
       description: |
         Certification project distribution method.
+
+    - name: project_status
+      description: |
+        Certification project status - either archived or active
   steps:
+    - name: verify-project-not-archived
+      image: "$(params.pipeline_image)"
+      env:
+        - name: PROJECT_STATUS
+          value: $(params.project_status)
+      script: |
+        #!/urs/bin/env bash
+        set -xe -o pipefail
+
+        if [ "${PROJECT_STATUS}" = "archived" ]; then
+          echo "This project is archived."
+          exit 1
+        fi
+
     - name: verify-project-distribution
       image: "$(params.pipeline_image)"
       env: