Merge pull request #263 from securesign/cac-rekor-apps

feat: add rekor, rekor-monitor and rekor-search applications

Author: osmman

konflux-configs/base/application/base/application/kustomization.yaml

@@ -0,0 +1,36 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+components:
+ - ../ec
+ - ../promote-to-candidate
+
+replacements:
+  - source:
+      kind: Application
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Component
+        fieldPaths:
+          - spec.application
+        options:
+          create: true
+      - select:
+          kind: IntegrationTestScenario
+        fieldPaths:
+          - spec.application
+        options:
+          create: true
+      - select:
+          kind: ReleasePlan
+        fieldPaths:
+          - spec.application
+        options:
+          create: true
+      - select:
+          kind: ImageRepository
+        fieldPaths:
+          - metadata.labels.[appstudio.redhat.com/application]
+        options:
+          create: true

konflux-configs/base/application/base/ec/ec.yaml

@@ -0,0 +1,17 @@
+apiVersion: appstudio.redhat.com/v1beta2
+kind: IntegrationTestScenario
+metadata:
+  annotations:
+    test.appstudio.openshift.io/kind: enterprise-contract
+  name: -enterprise-contract
+spec:
+  resolverRef:
+    params:
+      - name: url
+        value: https://github.com/konflux-ci/build-definitions
+      - name: revision
+        value: main
+      - name: pathInRepo
+        value: pipelines/enterprise-contract.yaml
+    resolver: git
+    resourceKind: pipeline

konflux-configs/base/application/base/ec/kustomization.yaml

@@ -0,0 +1,26 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+resources:
+  - ec.yaml
+
+replacements:
+  - source:
+      kind: Application
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: IntegrationTestScenario
+          name: -enterprise-contract
+        fieldPaths:
+          - spec.application
+        options:
+          create: true
+      - select:
+          kind: IntegrationTestScenario
+          name: -enterprise-contract
+        fieldPaths:
+          - metadata.name
+        options:
+          delimiter: "-"
+          index: 0

konflux-configs/base/application/base/promote-to-candidate/kustomization.yaml

@@ -0,0 +1,26 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+resources:
+  - releaseplan.yaml
+
+replacements:
+  - source:
+      kind: Application
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: ReleasePlan
+          name: promote-to-candidate-
+        fieldPaths:
+          - spec.application
+        options:
+          create: true
+      - select:
+          kind: ReleasePlan
+          name: promote-to-candidate-
+        fieldPaths:
+          - metadata.name
+        options:
+          delimiter: "-"
+          index: 3

konflux-configs/base/application/base/promote-to-candidate/releaseplan.yaml

@@ -0,0 +1,26 @@
+apiVersion: appstudio.redhat.com/v1alpha1
+kind: ReleasePlan
+metadata:
+  labels:
+    release.appstudio.openshift.io/auto-release: 'true'
+    release.appstudio.openshift.io/standing-attribution: 'true'
+  name: promote-to-candidate-
+spec:
+  tenantPipeline:
+    params:
+    - name: git-url
+      value: https://github.com/securesign/releases
+    - name: code-freeze
+      value: "false"
+    - name: type
+      value: "component"
+    serviceAccountName: rhtas-build-bot
+    pipelineRef:
+      resolver: git
+      params:
+        - name: url
+          value: "https://github.com/securesign/pipelines"
+        - name: revision
+          value: main
+        - name: pathInRepo
+          value: "pipelines/promote-to-candidate.yaml"

konflux-configs/base/application/kustomization.yaml

@@ -3,4 +3,7 @@ kind: Kustomization
 
 resources:
   - konflux/base
-  - pipelines/base
+  - pipelines/base  
+  - rekor/base
+  - rekor-monitor/base
+  - rekor-search/base

konflux-configs/base/application/rekor-monitor/base/application.yaml

@@ -0,0 +1,6 @@
+apiVersion: appstudio.redhat.com/v1alpha1
+kind: Application
+metadata:
+  name: rekor-monitor
+spec:
+  displayName: rekor-monitor (main)

konflux-configs/base/application/rekor-monitor/base/component.yaml

@@ -0,0 +1,15 @@
+apiVersion: appstudio.redhat.com/v1alpha1
+kind: Component
+metadata:
+  annotations:
+    build.appstudio.openshift.io/pipeline: '{"name":"docker-build-oci-ta","bundle":"latest"}'
+    git-provider: github
+    git-provider-url: https://github.com
+  name: rekor-monitor
+spec:
+  componentName: rekor-monitor
+  source:
+    git:
+      url: https://github.com/securesign/rekor-monitor
+      revision: main
+      dockerfileUrl: Dockerfile.rh

konflux-configs/base/application/rekor-monitor/base/imagerepository.yaml

@@ -0,0 +1,16 @@
+apiVersion: appstudio.redhat.com/v1alpha1
+kind: ImageRepository 
+metadata:
+  name: imagerepository-for-rekor-monitor-rekor-monitor
+  labels:
+    appstudio.redhat.com/component: rekor-monitor
+spec:
+  image:
+    name: rhtas-tenant/rekor-monitor
+    visibility: public
+  notifications:
+    - config:
+        url: https://bombino.api.redhat.com/v1/sbom/quay/push
+      event: repo_push
+      method: webhook
+      title: SBOM-event-to-Bombino

konflux-configs/base/application/rekor-monitor/base/kustomization.yaml

@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - application.yaml
+  - component.yaml
+  - imagerepository.yaml
+
+components:
+  - ../../base/application