@@ -2,9 +2,7 @@ apiVersion: tekton.dev/v1
2
2
kind : Pipeline
3
3
metadata :
4
4
name : collector-component-pipeline
5
-
6
5
spec :
7
-
8
6
finally :
9
7
- name : slack-notification
10
8
params :
13
11
- name : key-name
14
12
value : ' acs-konflux-notifications'
15
13
when :
16
- # Run when any task has Failed
14
+ # Run when any task has Failed
17
15
- input : $(tasks.status)
18
16
operator : in
19
17
values : ["Failed"]
26
24
- name : kind
27
25
value : task
28
26
resolver : bundles
29
-
30
27
- name : show-sbom
31
28
params :
32
29
- name : IMAGE_URL
40
37
- name : kind
41
38
value : task
42
39
resolver : bundles
43
-
44
40
- name : post-metric-end
45
41
params :
46
42
- name : AGGREGATE_TASKS_STATUS
54
50
- name : kind
55
51
value : task
56
52
resolver : bundles
57
-
58
53
params :
59
54
- description : Source Repository URL
60
55
name : git-url
@@ -71,13 +66,11 @@ spec:
71
66
name : output-tag-suffix
72
67
type : string
73
68
- default : .
74
- description : Path to the source code of an application's component from where
75
- to build image.
69
+ description : Path to the source code of an application's component from where to build image.
76
70
name : path-context
77
71
type : string
78
72
- default : Dockerfile
79
- description : Path to the Dockerfile inside the context specified by parameter
80
- path-context
73
+ description : Path to the Dockerfile inside the context specified by parameter path-context
81
74
name : dockerfile
82
75
type : string
83
76
- default : " false"
96
89
description : Build dependencies to be prefetched by Cachi2
97
90
name : prefetch-input
98
91
type : string
99
- - description : Image tag expiration time, time values could be something like
100
- 1h, 2d, 3w for hours, days, and weeks, respectively.
92
+ - description : Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
101
93
name : image-expires-after
102
94
type : string
103
95
- default : " true"
@@ -115,7 +107,6 @@ spec:
115
107
description : This sets the expiration time for intermediate OCI artifacts produced and used during builds after which they can be garbage collected.
116
108
name : oci-artifact-expires-after
117
109
type : string
118
-
119
110
results :
120
111
- description : " "
121
112
name : IMAGE_URL
@@ -129,21 +120,17 @@ spec:
129
120
- description : " "
130
121
name : CHAINS-GIT_COMMIT
131
122
value : $(tasks.clone-repository.results.commit)
132
-
133
123
workspaces :
134
124
- name : git-auth
135
-
136
125
tasks :
137
-
138
126
- name : post-metric-start
139
127
taskRef : *post-bigquery-metrics-ref
140
-
141
128
- name : init
142
129
params :
143
130
- name : image-url
144
- # We can't provide a StackRox-style tag because it is not known at this time (requires cloning source, etc.)
145
- # As a workaround, we still provide a unique tag that's based on a revision to this task to comply with its
146
- # expected input. We later actually add this tag on a built image with build-image-index-extra task.
131
+ # We can't provide a StackRox-style tag because it is not known at this time (requires cloning source, etc.)
132
+ # As a workaround, we still provide a unique tag that's based on a revision to this task to comply with its
133
+ # expected input. We later actually add this tag on a built image with build-image-index-extra task.
147
134
value : $(params.output-image-repo):konflux-$(params.revision)
148
135
- name : rebuild
149
136
value : $(params.rebuild)
@@ -156,7 +143,6 @@ spec:
156
143
- name : kind
157
144
value : task
158
145
resolver : bundles
159
-
160
146
- name : clone-repository
161
147
params :
162
148
- name : url
@@ -185,17 +171,16 @@ spec:
185
171
when :
186
172
- input : $(tasks.init.results.build)
187
173
operator : in
188
- values : [ "true" ]
174
+ values : ["true"]
189
175
workspaces :
190
176
- name : basic-auth
191
177
workspace : git-auth
192
-
193
178
- name : determine-image-expiration
194
179
params :
195
- - name : DEFAULT_IMAGE_EXPIRES_AFTER
196
- value : $(params.image-expires-after)
197
- - name : SOURCE_ARTIFACT
198
- value : $(tasks.clone-repository.results.SOURCE_ARTIFACT)
180
+ - name : DEFAULT_IMAGE_EXPIRES_AFTER
181
+ value : $(params.image-expires-after)
182
+ - name : SOURCE_ARTIFACT
183
+ value : $(tasks.clone-repository.results.SOURCE_ARTIFACT)
199
184
taskRef :
200
185
params :
201
186
- name : name
@@ -205,7 +190,6 @@ spec:
205
190
- name : kind
206
191
value : task
207
192
resolver : bundles
208
-
209
193
- name : determine-image-tag
210
194
params :
211
195
- name : TAG_SUFFIX
@@ -221,7 +205,6 @@ spec:
221
205
- name : kind
222
206
value : task
223
207
resolver : bundles
224
-
225
208
- name : prefetch-dependencies
226
209
params :
227
210
- name : input
@@ -234,22 +217,21 @@ spec:
234
217
value : $(params.oci-artifact-expires-after)
235
218
- name : ACTIVATION_KEY
236
219
value : subscription-manager-activation-key-prod
237
- # Required for the RPM prefetching support.
220
+ # Required for the RPM prefetching support.
238
221
- name : dev-package-managers
239
222
value : " true"
240
223
taskRef :
241
224
params :
242
225
- name : name
243
226
value : prefetch-dependencies-oci-ta
244
227
- name : bundle
245
- value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:a1ddc34bf0a169bb2e64a98caf9027b66af8fc66a3a60f71bb451ce36af6a399
228
+ value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:f10a4841e6f75fbb314b1d8cbf14f652499c1fe7f59e59aed59f7431c680aa17
246
229
- name : kind
247
230
value : task
248
231
resolver : bundles
249
232
workspaces :
250
233
- name : git-basic-auth
251
234
workspace : git-auth
252
-
253
235
- name : build-container-amd64
254
236
params :
255
237
- name : IMAGE
@@ -287,8 +269,7 @@ spec:
287
269
when :
288
270
- input : $(tasks.init.results.build)
289
271
operator : in
290
- values : [ "true" ]
291
-
272
+ values : ["true"]
292
273
- name : build-container-s390x
293
274
params :
294
275
- name : IMAGE
@@ -328,9 +309,8 @@ spec:
328
309
when :
329
310
- input : $(tasks.init.results.build)
330
311
operator : in
331
- values : [ "true" ]
312
+ values : ["true"]
332
313
timeout : 1h30m0s
333
-
334
314
- name : build-container-ppc64le
335
315
params :
336
316
- name : IMAGE
@@ -370,9 +350,8 @@ spec:
370
350
when :
371
351
- input : $(tasks.init.results.build)
372
352
operator : in
373
- values : [ "true" ]
353
+ values : ["true"]
374
354
timeout : 1h30m0s
375
-
376
355
- name : build-container-arm64
377
356
params :
378
357
- name : IMAGE
@@ -412,9 +391,8 @@ spec:
412
391
when :
413
392
- input : $(tasks.init.results.build)
414
393
operator : in
415
- values : [ "true" ]
394
+ values : ["true"]
416
395
timeout : 1h30m0s
417
-
418
396
- name : build-image-index
419
397
params :
420
398
- name : IMAGE
@@ -441,8 +419,7 @@ spec:
441
419
when :
442
420
- input : $(tasks.init.results.build)
443
421
operator : in
444
- values : [ "true" ]
445
-
422
+ values : ["true"]
446
423
- name : build-image-index-extra
447
424
matrix :
448
425
params :
@@ -474,8 +451,7 @@ spec:
474
451
when :
475
452
- input : $(tasks.init.results.build)
476
453
operator : in
477
- values : [ "true" ]
478
-
454
+ values : ["true"]
479
455
- name : build-source-image
480
456
params :
481
457
- name : BINARY_IMAGE
@@ -484,23 +460,24 @@ spec:
484
460
value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
485
461
- name : CACHI2_ARTIFACT
486
462
value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
463
+ - name : BINARY_IMAGE_DIGEST
464
+ value : $(tasks.build-image-index.results.IMAGE_DIGEST)
487
465
taskRef :
488
466
params :
489
467
- name : name
490
468
value : source-build-oci-ta
491
469
- name : bundle
492
- value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.2 @sha256:b424894fc8e806c12658daa565b835fd2d66e7f7608afc47529eb7b410f030d7
470
+ value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3 @sha256:b1eb49583b41872b27356fee20d5f0eb6ff7f5cdeacde7ffb39655f031104728
493
471
- name : kind
494
472
value : task
495
473
resolver : bundles
496
474
when :
497
475
- input : $(tasks.init.results.build)
498
476
operator : in
499
- values : [ "true" ]
477
+ values : ["true"]
500
478
- input : $(params.build-source-image)
501
479
operator : in
502
- values : [ "true" ]
503
-
480
+ values : ["true"]
504
481
- name : deprecated-base-image-check
505
482
params :
506
483
- name : IMAGE_URL
@@ -519,8 +496,7 @@ spec:
519
496
when :
520
497
- input : $(params.skip-checks)
521
498
operator : in
522
- values : [ "false" ]
523
-
499
+ values : ["false"]
524
500
- name : clair-scan
525
501
params :
526
502
- name : image-digest
@@ -539,8 +515,7 @@ spec:
539
515
when :
540
516
- input : $(params.skip-checks)
541
517
operator : in
542
- values : [ "false" ]
543
-
518
+ values : ["false"]
544
519
- name : ecosystem-cert-preflight-checks
545
520
params :
546
521
- name : image-url
@@ -550,15 +525,14 @@ spec:
550
525
- name : name
551
526
value : ecosystem-cert-preflight-checks
552
527
- name : bundle
553
- value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:ba7ed837f467904e7b38513174a707a9eec4009d009d6f272ff71d1250bc8854
528
+ value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:abbe195626eec925288df6425679559025d1be4af5ae70ca6dbbcb49ad3bf08b
554
529
- name : kind
555
530
value : task
556
531
resolver : bundles
557
532
when :
558
533
- input : $(params.skip-checks)
559
534
operator : in
560
535
values : ["false"]
561
-
562
536
- name : sast-shell-check
563
537
params :
564
538
- name : image-digest
@@ -581,8 +555,7 @@ spec:
581
555
when :
582
556
- input : $(params.skip-checks)
583
557
operator : in
584
- values : [ "false" ]
585
-
558
+ values : ["false"]
586
559
- name : sast-unicode-check
587
560
params :
588
561
- name : image-digest
@@ -605,8 +578,7 @@ spec:
605
578
when :
606
579
- input : $(params.skip-checks)
607
580
operator : in
608
- values : [ "false" ]
609
-
581
+ values : ["false"]
610
582
- name : sast-snyk-check
611
583
params :
612
584
- name : SOURCE_ARTIFACT
@@ -629,8 +601,7 @@ spec:
629
601
when :
630
602
- input : $(params.skip-checks)
631
603
operator : in
632
- values : [ "false" ]
633
-
604
+ values : ["false"]
634
605
- name : clamav-scan
635
606
params :
636
607
- name : image-digest
@@ -649,8 +620,7 @@ spec:
649
620
when :
650
621
- input : $(params.skip-checks)
651
622
operator : in
652
- values : [ "false" ]
653
-
623
+ values : ["false"]
654
624
- name : rpms-signature-scan
655
625
params :
656
626
- name : image-digest
@@ -670,7 +640,6 @@ spec:
670
640
- input : $(params.skip-checks)
671
641
operator : in
672
642
values : ["false"]
673
-
674
643
- name : push-dockerfile
675
644
params :
676
645
- name : IMAGE
0 commit comments