diff --git a/konflux-configs/base/application/base/application/kustomization.yaml b/konflux-configs/base/application/base/application/kustomization.yaml new file mode 100644 index 00000000..25d89f21 --- /dev/null +++ b/konflux-configs/base/application/base/application/kustomization.yaml @@ -0,0 +1,36 @@ +apiVersion: kustomize.config.k8s.io/v1alpha1 +kind: Component + +components: + - ../ec + - ../promote-to-candidate + +replacements: + - source: + kind: Application + fieldPath: metadata.name + targets: + - select: + kind: Component + fieldPaths: + - spec.application + options: + create: true + - select: + kind: IntegrationTestScenario + fieldPaths: + - spec.application + options: + create: true + - select: + kind: ReleasePlan + fieldPaths: + - spec.application + options: + create: true + - select: + kind: ImageRepository + fieldPaths: + - metadata.labels.[appstudio.redhat.com/application] + options: + create: true diff --git a/konflux-configs/base/application/base/ec/ec.yaml b/konflux-configs/base/application/base/ec/ec.yaml new file mode 100644 index 00000000..7a377a17 --- /dev/null +++ b/konflux-configs/base/application/base/ec/ec.yaml @@ -0,0 +1,17 @@ +apiVersion: appstudio.redhat.com/v1beta2 +kind: IntegrationTestScenario +metadata: + annotations: + test.appstudio.openshift.io/kind: enterprise-contract + name: -enterprise-contract +spec: + resolverRef: + params: + - name: url + value: https://github.com/konflux-ci/build-definitions + - name: revision + value: main + - name: pathInRepo + value: pipelines/enterprise-contract.yaml + resolver: git + resourceKind: pipeline diff --git a/konflux-configs/base/application/base/ec/kustomization.yaml b/konflux-configs/base/application/base/ec/kustomization.yaml new file mode 100644 index 00000000..a5233dae --- /dev/null +++ b/konflux-configs/base/application/base/ec/kustomization.yaml @@ -0,0 +1,26 @@ +apiVersion: kustomize.config.k8s.io/v1alpha1 +kind: Component + +resources: + - ec.yaml + +replacements: + - source: + kind: Application + fieldPath: metadata.name + targets: + - select: + kind: IntegrationTestScenario + name: -enterprise-contract + fieldPaths: + - spec.application + options: + create: true + - select: + kind: IntegrationTestScenario + name: -enterprise-contract + fieldPaths: + - metadata.name + options: + delimiter: "-" + index: 0 \ No newline at end of file diff --git a/konflux-configs/base/application/base/promote-to-candidate/kustomization.yaml b/konflux-configs/base/application/base/promote-to-candidate/kustomization.yaml new file mode 100644 index 00000000..4ec35866 --- /dev/null +++ b/konflux-configs/base/application/base/promote-to-candidate/kustomization.yaml @@ -0,0 +1,26 @@ +apiVersion: kustomize.config.k8s.io/v1alpha1 +kind: Component + +resources: + - releaseplan.yaml + +replacements: + - source: + kind: Application + fieldPath: metadata.name + targets: + - select: + kind: ReleasePlan + name: promote-to-candidate- + fieldPaths: + - spec.application + options: + create: true + - select: + kind: ReleasePlan + name: promote-to-candidate- + fieldPaths: + - metadata.name + options: + delimiter: "-" + index: 3 diff --git a/konflux-configs/base/application/base/promote-to-candidate/releaseplan.yaml b/konflux-configs/base/application/base/promote-to-candidate/releaseplan.yaml new file mode 100644 index 00000000..5e7babf8 --- /dev/null +++ b/konflux-configs/base/application/base/promote-to-candidate/releaseplan.yaml @@ -0,0 +1,26 @@ +apiVersion: appstudio.redhat.com/v1alpha1 +kind: ReleasePlan +metadata: + labels: + release.appstudio.openshift.io/auto-release: 'true' + release.appstudio.openshift.io/standing-attribution: 'true' + name: promote-to-candidate- +spec: + tenantPipeline: + params: + - name: git-url + value: https://github.com/securesign/releases + - name: code-freeze + value: "false" + - name: type + value: "component" + serviceAccountName: rhtas-build-bot + pipelineRef: + resolver: git + params: + - name: url + value: "https://github.com/securesign/pipelines" + - name: revision + value: main + - name: pathInRepo + value: "pipelines/promote-to-candidate.yaml" diff --git a/konflux-configs/base/application/kustomization.yaml b/konflux-configs/base/application/kustomization.yaml index 83808253..3fd0d0d5 100644 --- a/konflux-configs/base/application/kustomization.yaml +++ b/konflux-configs/base/application/kustomization.yaml @@ -3,4 +3,7 @@ kind: Kustomization resources: - konflux/base - - pipelines/base + - pipelines/base + - rekor/base + - rekor-monitor/base + - rekor-search/base diff --git a/konflux-configs/base/application/rekor-monitor/base/application.yaml b/konflux-configs/base/application/rekor-monitor/base/application.yaml new file mode 100644 index 00000000..678f830c --- /dev/null +++ b/konflux-configs/base/application/rekor-monitor/base/application.yaml @@ -0,0 +1,6 @@ +apiVersion: appstudio.redhat.com/v1alpha1 +kind: Application +metadata: + name: rekor-monitor +spec: + displayName: rekor-monitor (main) diff --git a/konflux-configs/base/application/rekor-monitor/base/component.yaml b/konflux-configs/base/application/rekor-monitor/base/component.yaml new file mode 100644 index 00000000..c9f08d90 --- /dev/null +++ b/konflux-configs/base/application/rekor-monitor/base/component.yaml @@ -0,0 +1,15 @@ +apiVersion: appstudio.redhat.com/v1alpha1 +kind: Component +metadata: + annotations: + build.appstudio.openshift.io/pipeline: '{"name":"docker-build-oci-ta","bundle":"latest"}' + git-provider: github + git-provider-url: https://github.com + name: rekor-monitor +spec: + componentName: rekor-monitor + source: + git: + url: https://github.com/securesign/rekor-monitor + revision: main + dockerfileUrl: Dockerfile.rh diff --git a/konflux-configs/base/application/rekor-monitor/base/imagerepository.yaml b/konflux-configs/base/application/rekor-monitor/base/imagerepository.yaml new file mode 100644 index 00000000..10b807d9 --- /dev/null +++ b/konflux-configs/base/application/rekor-monitor/base/imagerepository.yaml @@ -0,0 +1,16 @@ +apiVersion: appstudio.redhat.com/v1alpha1 +kind: ImageRepository +metadata: + name: imagerepository-for-rekor-monitor-rekor-monitor + labels: + appstudio.redhat.com/component: rekor-monitor +spec: + image: + name: rhtas-tenant/rekor-monitor + visibility: public + notifications: + - config: + url: https://bombino.api.redhat.com/v1/sbom/quay/push + event: repo_push + method: webhook + title: SBOM-event-to-Bombino diff --git a/konflux-configs/base/application/rekor-monitor/base/kustomization.yaml b/konflux-configs/base/application/rekor-monitor/base/kustomization.yaml new file mode 100644 index 00000000..4d67d24e --- /dev/null +++ b/konflux-configs/base/application/rekor-monitor/base/kustomization.yaml @@ -0,0 +1,10 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - application.yaml + - component.yaml + - imagerepository.yaml + +components: + - ../../base/application diff --git a/konflux-configs/base/application/rekor-search/base/application.yaml b/konflux-configs/base/application/rekor-search/base/application.yaml new file mode 100644 index 00000000..bef07489 --- /dev/null +++ b/konflux-configs/base/application/rekor-search/base/application.yaml @@ -0,0 +1,6 @@ +apiVersion: appstudio.redhat.com/v1alpha1 +kind: Application +metadata: + name: rekor-search +spec: + displayName: rekor-search (main) diff --git a/konflux-configs/base/application/rekor-search/base/component.yaml b/konflux-configs/base/application/rekor-search/base/component.yaml new file mode 100644 index 00000000..8eb4cb8e --- /dev/null +++ b/konflux-configs/base/application/rekor-search/base/component.yaml @@ -0,0 +1,15 @@ +apiVersion: appstudio.redhat.com/v1alpha1 +kind: Component +metadata: + annotations: + build.appstudio.openshift.io/pipeline: '{"name":"docker-build-oci-ta","bundle":"latest"}' + git-provider: github + git-provider-url: https://github.com + name: rekor-search +spec: + componentName: rekor-search + source: + git: + url: https://github.com/securesign/rekor-search-ui + revision: main + dockerfileUrl: Dockerfile diff --git a/konflux-configs/base/application/rekor-search/base/imagerepository.yaml b/konflux-configs/base/application/rekor-search/base/imagerepository.yaml new file mode 100644 index 00000000..2f7d3676 --- /dev/null +++ b/konflux-configs/base/application/rekor-search/base/imagerepository.yaml @@ -0,0 +1,16 @@ +apiVersion: appstudio.redhat.com/v1alpha1 +kind: ImageRepository +metadata: + name: imagerepository-for-rekor-search-rekor-search + labels: + appstudio.redhat.com/component: rekor-search +spec: + image: + name: rhtas-tenant/rekor-search + visibility: public + notifications: + - config: + url: https://bombino.api.redhat.com/v1/sbom/quay/push + event: repo_push + method: webhook + title: SBOM-event-to-Bombino diff --git a/konflux-configs/base/application/rekor-search/base/kustomization.yaml b/konflux-configs/base/application/rekor-search/base/kustomization.yaml new file mode 100644 index 00000000..4d67d24e --- /dev/null +++ b/konflux-configs/base/application/rekor-search/base/kustomization.yaml @@ -0,0 +1,10 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - application.yaml + - component.yaml + - imagerepository.yaml + +components: + - ../../base/application diff --git a/konflux-configs/base/application/rekor/base/application.yaml b/konflux-configs/base/application/rekor/base/application.yaml new file mode 100644 index 00000000..934267f3 --- /dev/null +++ b/konflux-configs/base/application/rekor/base/application.yaml @@ -0,0 +1,6 @@ +apiVersion: appstudio.redhat.com/v1alpha1 +kind: Application +metadata: + name: rekor +spec: + displayName: rekor (main) diff --git a/konflux-configs/base/application/rekor/base/component.yaml b/konflux-configs/base/application/rekor/base/component.yaml new file mode 100644 index 00000000..2f4c1728 --- /dev/null +++ b/konflux-configs/base/application/rekor/base/component.yaml @@ -0,0 +1,58 @@ +--- + +apiVersion: appstudio.redhat.com/v1alpha1 +kind: Component +metadata: + annotations: + build.appstudio.openshift.io/pipeline: '{"name":"docker-build-oci-ta","bundle":"latest"}' + git-provider: github + git-provider-url: https://github.com + name: backfill-redis +spec: + componentName: backfill-redis + source: + git: + context: ./ + url: https://github.com/securesign/rekor + revision: main + dockerfileUrl: Dockerfile.backfill-redis.rh + +--- + +apiVersion: appstudio.redhat.com/v1alpha1 +kind: Component +metadata: + annotations: + build.appstudio.openshift.io/pipeline: '{"name":"docker-build-oci-ta","bundle":"latest"}' + git-provider: github + git-provider-url: https://github.com + name: rekor-cli +spec: + componentName: rekor-cli + source: + git: + context: ./ + url: https://github.com/securesign/rekor + revision: main + dockerfileUrl: Dockerfile.rekor-cli.rh + +--- + +apiVersion: appstudio.redhat.com/v1alpha1 +kind: Component +metadata: + annotations: + build.appstudio.openshift.io/pipeline: '{"name":"docker-build-oci-ta","bundle":"latest"}' + git-provider: github + git-provider-url: https://github.com + name: rekor-server +spec: + componentName: rekor-server + source: + git: + context: ./ + url: https://github.com/securesign/rekor + revision: main + dockerfileUrl: Dockerfile.rekor-server.rh + +--- diff --git a/konflux-configs/base/application/rekor/base/imagerepository.yaml b/konflux-configs/base/application/rekor/base/imagerepository.yaml new file mode 100644 index 00000000..55e581d7 --- /dev/null +++ b/konflux-configs/base/application/rekor/base/imagerepository.yaml @@ -0,0 +1,58 @@ +--- + +apiVersion: appstudio.redhat.com/v1alpha1 +kind: ImageRepository +metadata: + name: imagerepository-for-rekor-backfill-redis + labels: + appstudio.redhat.com/component: backfill-redis +spec: + image: + name: rhtas-tenant/backfill-redis + visibility: public + notifications: + - config: + url: https://bombino.api.redhat.com/v1/sbom/quay/push + event: repo_push + method: webhook + title: SBOM-event-to-Bombino + +--- + +apiVersion: appstudio.redhat.com/v1alpha1 +kind: ImageRepository +metadata: + name: imagerepository-for-rekor-rekor-cli + labels: + appstudio.redhat.com/component: rekor-cli +spec: + image: + name: rhtas-tenant/rekor-cli + visibility: public + notifications: + - config: + url: https://bombino.api.redhat.com/v1/sbom/quay/push + event: repo_push + method: webhook + title: SBOM-event-to-Bombino + +--- + +apiVersion: appstudio.redhat.com/v1alpha1 +kind: ImageRepository +metadata: + name: imagerepository-for-rekor-rekor-server + labels: + appstudio.redhat.com/component: rekor-server +spec: + image: + name: rhtas-tenant/rekor-server + visibility: public + notifications: + - config: + url: https://bombino.api.redhat.com/v1/sbom/quay/push + event: repo_push + method: webhook + title: SBOM-event-to-Bombino + +--- diff --git a/konflux-configs/base/application/rekor/base/kustomization.yaml b/konflux-configs/base/application/rekor/base/kustomization.yaml new file mode 100644 index 00000000..4d67d24e --- /dev/null +++ b/konflux-configs/base/application/rekor/base/kustomization.yaml @@ -0,0 +1,10 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - application.yaml + - component.yaml + - imagerepository.yaml + +components: + - ../../base/application diff --git a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/kustomization.yaml b/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/kustomization.yaml index c8066120..79b76e75 100644 --- a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/kustomization.yaml +++ b/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/kustomization.yaml @@ -4,10 +4,7 @@ resources: - timestamp-authority - segment-backup-job - scaffold - - rekor-search - - rekor - fulcio - cli - certificate-transparency-go - - rekor-monitor - policy-controller diff --git a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor-monitor/kustomization.yaml b/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor-monitor/kustomization.yaml deleted file mode 100644 index ba4d769c..00000000 --- a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor-monitor/kustomization.yaml +++ /dev/null @@ -1,9 +0,0 @@ -resources: -- ../../../components/base - -nameSuffix: rekor-monitor - -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -patches: -- path: patch.yaml diff --git a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor-monitor/patch.yaml b/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor-monitor/patch.yaml deleted file mode 100644 index 1093b1fe..00000000 --- a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor-monitor/patch.yaml +++ /dev/null @@ -1,10 +0,0 @@ -apiVersion: appstudio.redhat.com/v1alpha1 -kind: ReleasePlan -metadata: - labels: - release.appstudio.openshift.io/auto-release: 'true' - release.appstudio.openshift.io/standing-attribution: 'true' - name: promote-to-candidate- - namespace: rhtas-tenant -spec: - application: rekor-monitor diff --git a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor-search/kustomization.yaml b/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor-search/kustomization.yaml deleted file mode 100644 index b41ab1fe..00000000 --- a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor-search/kustomization.yaml +++ /dev/null @@ -1,9 +0,0 @@ -resources: -- ../../../components/base - -nameSuffix: rekor-search - -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -patches: -- path: patch.yaml diff --git a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor-search/patch.yaml b/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor-search/patch.yaml deleted file mode 100644 index 85dfcb4c..00000000 --- a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor-search/patch.yaml +++ /dev/null @@ -1,10 +0,0 @@ -apiVersion: appstudio.redhat.com/v1alpha1 -kind: ReleasePlan -metadata: - labels: - release.appstudio.openshift.io/auto-release: 'true' - release.appstudio.openshift.io/standing-attribution: 'true' - name: promote-to-candidate- - namespace: rhtas-tenant -spec: - application: rekor-search diff --git a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor/kustomization.yaml b/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor/kustomization.yaml deleted file mode 100644 index 4bcc14f5..00000000 --- a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor/kustomization.yaml +++ /dev/null @@ -1,9 +0,0 @@ -resources: -- ../../../components/base - -nameSuffix: rekor - -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -patches: -- path: patch.yaml diff --git a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor/patch.yaml b/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor/patch.yaml deleted file mode 100644 index 0a18edec..00000000 --- a/konflux-configs/base/release-plan/promote-to-candidate/components/overlays/rekor/patch.yaml +++ /dev/null @@ -1,10 +0,0 @@ -apiVersion: appstudio.redhat.com/v1alpha1 -kind: ReleasePlan -metadata: - labels: - release.appstudio.openshift.io/auto-release: 'true' - release.appstudio.openshift.io/standing-attribution: 'true' - name: promote-to-candidate- - namespace: rhtas-tenant -spec: - application: rekor