Merge pull request #449 from securesign/konflux-sa-migration-backfill-redis

Konflux build pipeline service account migration

Author: tommyd450

.tekton/backfill-redis-pull-request.yaml

@@ -7,8 +7,11 @@ metadata:
     build.appstudio.redhat.com/pull_request_number: '{{pull_request_number}}'
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
-    pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch == "main" &&
-      ( "Dockerfile.backfill-redis.rh".pathChanged() || ".tekton/backfill-redis-pull-request.yaml".pathChanged() || "trigger-konflux-builds.txt".pathChanged() || "go.mod".pathChanged() || "go.sum".pathChanged() || "cmd/backfill-redis".pathChanged() || "pkg".pathChanged() || "Makefile".pathChanged() )
+    pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch
+      == "main" && ( "Dockerfile.backfill-redis.rh".pathChanged() || ".tekton/backfill-redis-pull-request.yaml".pathChanged()
+      || "trigger-konflux-builds.txt".pathChanged() || "go.mod".pathChanged() || "go.sum".pathChanged()
+      || "cmd/backfill-redis".pathChanged() || "pkg".pathChanged() || "Makefile".pathChanged()
+      )
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: rekor
@@ -35,32 +38,33 @@ spec:
   - name: hermetic
     value: "true"
   - name: prefetch-input
-    value: [{"path": ".", "type": "gomod"}, {"path": "./hack/tools", "type": "gomod"}]
+    value: '[{"path":".","type":"gomod"},{"path":"./hack/tools","type":"gomod"}]'
   - name: go_unit_test
-    value: true
+    value: "true"
   - name: go_base_image
     value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder:v1.23.4@sha256:5c6607f82aeb2cd3f71075d17555d4170b17927e8551967d2fd0e534b22b1c7b
-  taskRunSpecs:
-    - pipelineTaskName: prefetch-dependencies
-      stepSpecs:
-        - name: prefetch-dependencies
-          computeResources:
-            requests:
-              cpu: '3'
-              memory: 3Gi
-            limits:
-              cpu: '3'
-              memory: 3Gi
   pipelineRef:
-    resolver: git
     params:
-      - name: url
-        value: 'https://github.com/securesign/pipelines.git'
-      - name: revision
-        value: 'main'
-      - name: pathInRepo
-        value: 'pipelines/docker-build-oci-ta.yaml'
-  taskRunTemplate: {}
+    - name: url
+      value: https://github.com/securesign/pipelines.git
+    - name: revision
+      value: main
+    - name: pathInRepo
+      value: pipelines/docker-build-oci-ta.yaml
+    resolver: git
+  taskRunSpecs:
+  - pipelineTaskName: prefetch-dependencies
+    stepSpecs:
+    - computeResources:
+        limits:
+          cpu: "3"
+          memory: 3Gi
+        requests:
+          cpu: "3"
+          memory: 3Gi
+      name: prefetch-dependencies
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-backfill-redis
   workspaces:
   - name: git-auth
     secret:

.tekton/backfill-redis-push.yaml

@@ -2,13 +2,16 @@ apiVersion: tekton.dev/v1
 kind: PipelineRun
 metadata:
   annotations:
+    build.appstudio.openshift.io/build-nudge-files: controllers/constants/*
     build.appstudio.openshift.io/repo: https://github.com/securesign/rekor?rev={{revision}}
     build.appstudio.redhat.com/commit_sha: '{{revision}}'
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
-    pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch == "main"  &&
-      ( "Dockerfile.backfill-redis.rh".pathChanged() || ".tekton/backfill-redis-push.yaml".pathChanged() || "trigger-konflux-builds.txt".pathChanged() || "go.mod".pathChanged() || "go.sum".pathChanged() || "cmd/backfill-redis".pathChanged() || "pkg".pathChanged() || "Makefile".pathChanged() )
-    build.appstudio.openshift.io/build-nudge-files: "controllers/constants/*"
+    pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch
+      == "main"  && ( "Dockerfile.backfill-redis.rh".pathChanged() || ".tekton/backfill-redis-push.yaml".pathChanged()
+      || "trigger-konflux-builds.txt".pathChanged() || "go.mod".pathChanged() || "go.sum".pathChanged()
+      || "cmd/backfill-redis".pathChanged() || "pkg".pathChanged() || "Makefile".pathChanged()
+      )
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: rekor
@@ -33,32 +36,33 @@ spec:
   - name: hermetic
     value: "true"
   - name: prefetch-input
-    value: [{"path": ".", "type": "gomod"}, {"path": "./hack/tools", "type": "gomod"}]
+    value: '[{"path":".","type":"gomod"},{"path":"./hack/tools","type":"gomod"}]'
   - name: go_unit_test
-    value: true
+    value: "true"
   - name: go_base_image
     value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder:v1.23.4@sha256:5c6607f82aeb2cd3f71075d17555d4170b17927e8551967d2fd0e534b22b1c7b
-  taskRunSpecs:
-    - pipelineTaskName: prefetch-dependencies
-      stepSpecs:
-        - name: prefetch-dependencies
-          computeResources:
-            requests:
-              cpu: '3'
-              memory: 3Gi
-            limits:
-              cpu: '3'
-              memory: 3Gi
   pipelineRef:
-    resolver: git
     params:
-      - name: url
-        value: 'https://github.com/securesign/pipelines.git'
-      - name: revision
-        value: 'main'
-      - name: pathInRepo
-        value: 'pipelines/docker-build-oci-ta.yaml'
-  taskRunTemplate: {}
+    - name: url
+      value: https://github.com/securesign/pipelines.git
+    - name: revision
+      value: main
+    - name: pathInRepo
+      value: pipelines/docker-build-oci-ta.yaml
+    resolver: git
+  taskRunSpecs:
+  - pipelineTaskName: prefetch-dependencies
+    stepSpecs:
+    - computeResources:
+        limits:
+          cpu: "3"
+          memory: 3Gi
+        requests:
+          cpu: "3"
+          memory: 3Gi
+      name: prefetch-dependencies
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-backfill-redis
   workspaces:
   - name: git-auth
     secret: