[release-v1.16] Sync Konflux configurations

openshift-knative · Jan 10, 2025 · 75a233b · 75a233b
1 parent cb97e61
commit 75a233b
Show file tree

Hide file tree

Showing 59 changed files with 162 additions and 61 deletions.
diff --git a/.konflux/applications/serverless-operator-136/tests/ec-test.yaml b/.konflux/applications/serverless-operator-136/tests/ec-test.yaml
@@ -1,7 +1,7 @@
 apiVersion: appstudio.redhat.com/v1beta2
 kind: IntegrationTestScenario
 metadata:
-  name: serverless-operator-136-enterprise-contract
+  name: serverless-operator-136-ec
 spec:
   params: 
     - name: POLICY_CONFIGURATION

diff --git a/.konflux/applications/serverless-operator-136/tests/override-snapshot-ec-test.yaml b/.konflux/applications/serverless-operator-136/tests/override-snapshot-ec-test.yaml
@@ -0,0 +1,23 @@
+apiVersion: appstudio.redhat.com/v1beta2
+kind: IntegrationTestScenario
+metadata:
+  name: serverless-operator-136-ec-override-snapshot
+spec:
+  params: 
+    - name: POLICY_CONFIGURATION
+      value: rhtap-releng-tenant/registry-ocp-serverless-prod
+    - name: TIMEOUT
+      value: "120m"
+  application: serverless-operator-136
+  contexts:
+    - description: Override Snapshot testing
+      name: override
+  resolverRef:
+    params:
+      - name: url
+        value: 'https://github.com/redhat-appstudio/build-definitions'
+      - name: revision
+        value: main
+      - name: pathInRepo
+        value: pipelines/enterprise-contract.yaml
+    resolver: git
diff --git a/.tekton/docker-build.yaml b/.tekton/docker-build.yaml
@@ -138,7 +138,7 @@ spec:
       - name: name
         value: sast-snyk-check-oci-ta
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.3@sha256:65a213322ea7c64159e37071d369d74b6378b23403150e29537865cada90f022
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta@sha256:af93b35e6e71a6ff7f3785ad8d8497b11204a5c0c33ab1a78b44f9d43f49c7a5
       - name: kind
         value: task
       resolver: bundles
@@ -356,7 +356,7 @@ spec:
       - name: name
         value: deprecated-image-check
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.4@sha256:5a1a165fa02270f0a947d8a2131ee9d8be0b8e9d34123828c2bef589e504ee84
+        value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check@sha256:650330fde0773f73f6bac77ae573031c44c79165d9503b0d5ec1db3e6ef981d7
       - name: kind
         value: task
       resolver: bundles
@@ -378,7 +378,7 @@ spec:
       - name: name
         value: clair-scan
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:0a5421111e7092740398691d5bd7c125cc0896f29531d19414bb5724ae41692a
+        value: quay.io/konflux-ci/tekton-catalog/task-clair-scan@sha256:907f11c67b0330480cbf85c23b1085acc5a049ab90af980169251860a3d97ef7
       - name: kind
         value: task
       resolver: bundles
@@ -420,7 +420,57 @@ spec:
       - name: name
         value: clamav-scan
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.1@sha256:b4f450f1447b166da671f1d5819ab5a1485083e5c27ab91f7d8b7a2ff994c8c2
+        value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan@sha256:c12e7a774bb07ad2796c01071b0dc0f199111b0ee99c45b55fa599e23b200bae
+      - name: kind
+        value: task
+      resolver: bundles
+    when:
+    - input: $(params.skip-checks)
+      operator: in
+      values:
+      - "false"
+  - name: sast-shell-check
+    params:
+    - name: image-digest
+      value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+    - name: image-url
+      value: $(tasks.build-image-index.results.IMAGE_URL)
+    - name: SOURCE_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+    - name: CACHI2_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+    runAfter:
+    - build-image-index
+    taskRef:
+      params:
+      - name: name
+        value: sast-shell-check-oci-ta
+      - name: bundle
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta@sha256:7553ec6925d0586b286502669b8e31a39dc73501f657426bac99019ac598d6ab
+      - name: kind
+        value: task
+      resolver: bundles
+    when:
+    - input: $(params.skip-checks)
+      operator: in
+      values:
+      - "false"
+  - name: sast-unicode-check
+    params:
+    - name: image-url
+      value: $(tasks.build-image-index.results.IMAGE_URL)
+    - name: SOURCE_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+    - name: CACHI2_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+    runAfter:
+    - build-image-index
+    taskRef:
+      params:
+      - name: name
+        value: sast-shell-check-oci-ta
+      - name: bundle
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta@sha256:7553ec6925d0586b286502669b8e31a39dc73501f657426bac99019ac598d6ab
       - name: kind
         value: task
       resolver: bundles

diff --git a/.tekton/kn-serving-activator-116-pull-request.yaml b/.tekton/kn-serving-activator-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/activator/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-serving-activator-116-push.yaml b/.tekton/kn-serving-activator-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/activator/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-serving-autoscaler-116-pull-request.yaml b/.tekton/kn-serving-autoscaler-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/autoscaler/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-serving-autoscaler-116-push.yaml b/.tekton/kn-serving-autoscaler-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/autoscaler/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-serving-autoscaler-hpa-116-pull-request.yaml b/.tekton/kn-serving-autoscaler-hpa-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/autoscaler-hpa/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-serving-autoscaler-hpa-116-push.yaml b/.tekton/kn-serving-autoscaler-hpa-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/autoscaler-hpa/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-serving-cleanup-116-pull-request.yaml b/.tekton/kn-serving-cleanup-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/cleanup/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-serving-cleanup-116-push.yaml b/.tekton/kn-serving-cleanup-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/cleanup/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-serving-controller-116-pull-request.yaml b/.tekton/kn-serving-controller-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/controller/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-serving-controller-116-push.yaml b/.tekton/kn-serving-controller-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/controller/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-serving-default-domain-116-pull-request.yaml b/.tekton/kn-serving-default-domain-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/default-domain/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-serving-default-domain-116-push.yaml b/.tekton/kn-serving-default-domain-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/default-domain/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-serving-queue-116-pull-request.yaml b/.tekton/kn-serving-queue-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/queue/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-serving-queue-116-push.yaml b/.tekton/kn-serving-queue-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/queue/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-serving-storage-version-migration-116-pull-request.yaml b/.tekton/kn-serving-storage-version-migration-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/migrate/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-serving-storage-version-migration-116-push.yaml b/.tekton/kn-serving-storage-version-migration-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/migrate/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef: