@@ -2,9 +2,7 @@ apiVersion: tekton.dev/v1
2
2
kind : Pipeline
3
3
metadata :
4
4
name : collector-component-pipeline
5
-
6
5
spec :
7
-
8
6
finally :
9
7
- name : slack-notification
10
8
params :
13
11
- name : key-name
14
12
value : ' acs-konflux-notifications'
15
13
when :
16
- # Run when any task has Failed
14
+ # Run when any task has Failed
17
15
- input : $(tasks.status)
18
16
operator : in
19
17
values : ["Failed"]
26
24
- name : kind
27
25
value : task
28
26
resolver : bundles
29
-
30
27
- name : show-sbom
31
28
params :
32
29
- name : IMAGE_URL
40
37
- name : kind
41
38
value : task
42
39
resolver : bundles
43
-
44
40
- name : post-metric-end
45
41
params :
46
42
- name : AGGREGATE_TASKS_STATUS
54
50
- name : kind
55
51
value : task
56
52
resolver : bundles
57
-
58
53
params :
59
54
- description : Source Repository URL
60
55
name : git-url
@@ -71,13 +66,11 @@ spec:
71
66
name : output-tag-suffix
72
67
type : string
73
68
- default : .
74
- description : Path to the source code of an application's component from where
75
- to build image.
69
+ description : Path to the source code of an application's component from where to build image.
76
70
name : path-context
77
71
type : string
78
72
- default : Dockerfile
79
- description : Path to the Dockerfile inside the context specified by parameter
80
- path-context
73
+ description : Path to the Dockerfile inside the context specified by parameter path-context
81
74
name : dockerfile
82
75
type : string
83
76
- default : " false"
96
89
description : Build dependencies to be prefetched by Cachi2
97
90
name : prefetch-input
98
91
type : string
99
- - description : Image tag expiration time, time values could be something like
100
- 1h, 2d, 3w for hours, days, and weeks, respectively.
92
+ - description : Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
101
93
name : image-expires-after
102
94
type : string
103
95
- default : " true"
@@ -115,7 +107,6 @@ spec:
115
107
description : This sets the expiration time for intermediate OCI artifacts produced and used during builds after which they can be garbage collected.
116
108
name : oci-artifact-expires-after
117
109
type : string
118
-
119
110
results :
120
111
- description : " "
121
112
name : IMAGE_URL
@@ -129,21 +120,17 @@ spec:
129
120
- description : " "
130
121
name : CHAINS-GIT_COMMIT
131
122
value : $(tasks.clone-repository.results.commit)
132
-
133
123
workspaces :
134
124
- name : git-auth
135
-
136
125
tasks :
137
-
138
126
- name : post-metric-start
139
127
taskRef : *post-bigquery-metrics-ref
140
-
141
128
- name : init
142
129
params :
143
130
- name : image-url
144
- # We can't provide a StackRox-style tag because it is not known at this time (requires cloning source, etc.)
145
- # As a workaround, we still provide a unique tag that's based on a revision to this task to comply with its
146
- # expected input. We later actually add this tag on a built image with build-image-index-extra task.
131
+ # We can't provide a StackRox-style tag because it is not known at this time (requires cloning source, etc.)
132
+ # As a workaround, we still provide a unique tag that's based on a revision to this task to comply with its
133
+ # expected input. We later actually add this tag on a built image with build-image-index-extra task.
147
134
value : $(params.output-image-repo):konflux-$(params.revision)
148
135
- name : rebuild
149
136
value : $(params.rebuild)
@@ -156,7 +143,6 @@ spec:
156
143
- name : kind
157
144
value : task
158
145
resolver : bundles
159
-
160
146
- name : clone-repository
161
147
params :
162
148
- name : url
@@ -185,17 +171,16 @@ spec:
185
171
when :
186
172
- input : $(tasks.init.results.build)
187
173
operator : in
188
- values : [ "true" ]
174
+ values : ["true"]
189
175
workspaces :
190
176
- name : basic-auth
191
177
workspace : git-auth
192
-
193
178
- name : determine-image-expiration
194
179
params :
195
- - name : DEFAULT_IMAGE_EXPIRES_AFTER
196
- value : $(params.image-expires-after)
197
- - name : SOURCE_ARTIFACT
198
- value : $(tasks.clone-repository.results.SOURCE_ARTIFACT)
180
+ - name : DEFAULT_IMAGE_EXPIRES_AFTER
181
+ value : $(params.image-expires-after)
182
+ - name : SOURCE_ARTIFACT
183
+ value : $(tasks.clone-repository.results.SOURCE_ARTIFACT)
199
184
taskRef :
200
185
params :
201
186
- name : name
@@ -205,7 +190,6 @@ spec:
205
190
- name : kind
206
191
value : task
207
192
resolver : bundles
208
-
209
193
- name : determine-image-tag
210
194
params :
211
195
- name : TAG_SUFFIX
@@ -221,7 +205,6 @@ spec:
221
205
- name : kind
222
206
value : task
223
207
resolver : bundles
224
-
225
208
- name : prefetch-dependencies
226
209
params :
227
210
- name : input
@@ -234,22 +217,21 @@ spec:
234
217
value : $(params.oci-artifact-expires-after)
235
218
- name : ACTIVATION_KEY
236
219
value : subscription-manager-activation-key-prod
237
- # Required for the RPM prefetching support.
220
+ # Required for the RPM prefetching support.
238
221
- name : dev-package-managers
239
222
value : " true"
240
223
taskRef :
241
224
params :
242
225
- name : name
243
226
value : prefetch-dependencies-oci-ta
244
227
- name : bundle
245
- value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:a1ddc34bf0a169bb2e64a98caf9027b66af8fc66a3a60f71bb451ce36af6a399
228
+ value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:f10a4841e6f75fbb314b1d8cbf14f652499c1fe7f59e59aed59f7431c680aa17
246
229
- name : kind
247
230
value : task
248
231
resolver : bundles
249
232
workspaces :
250
233
- name : git-basic-auth
251
234
workspace : git-auth
252
-
253
235
- name : build-container-amd64
254
236
params :
255
237
- name : IMAGE
@@ -287,8 +269,7 @@ spec:
287
269
when :
288
270
- input : $(tasks.init.results.build)
289
271
operator : in
290
- values : [ "true" ]
291
-
272
+ values : ["true"]
292
273
- name : build-container-s390x
293
274
params :
294
275
- name : IMAGE
@@ -328,9 +309,8 @@ spec:
328
309
when :
329
310
- input : $(tasks.init.results.build)
330
311
operator : in
331
- values : [ "true" ]
312
+ values : ["true"]
332
313
timeout : 1h30m0s
333
-
334
314
- name : build-container-ppc64le
335
315
params :
336
316
- name : IMAGE
@@ -370,9 +350,8 @@ spec:
370
350
when :
371
351
- input : $(tasks.init.results.build)
372
352
operator : in
373
- values : [ "true" ]
353
+ values : ["true"]
374
354
timeout : 1h30m0s
375
-
376
355
- name : build-container-arm64
377
356
params :
378
357
- name : IMAGE
@@ -412,9 +391,8 @@ spec:
412
391
when :
413
392
- input : $(tasks.init.results.build)
414
393
operator : in
415
- values : [ "true" ]
394
+ values : ["true"]
416
395
timeout : 1h30m0s
417
-
418
396
- name : build-image-index
419
397
params :
420
398
- name : IMAGE
@@ -441,8 +419,7 @@ spec:
441
419
when :
442
420
- input : $(tasks.init.results.build)
443
421
operator : in
444
- values : [ "true" ]
445
-
422
+ values : ["true"]
446
423
- name : build-image-index-extra
447
424
params :
448
425
- name : IMAGE
@@ -469,8 +446,7 @@ spec:
469
446
when :
470
447
- input : $(tasks.init.results.build)
471
448
operator : in
472
- values : [ "true" ]
473
-
449
+ values : ["true"]
474
450
- name : build-source-image
475
451
params :
476
452
- name : BINARY_IMAGE
@@ -479,23 +455,24 @@ spec:
479
455
value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
480
456
- name : CACHI2_ARTIFACT
481
457
value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
458
+ - name : BINARY_IMAGE_DIGEST
459
+ value : $(tasks.build-image-index.results.IMAGE_DIGEST)
482
460
taskRef :
483
461
params :
484
462
- name : name
485
463
value : source-build-oci-ta
486
464
- name : bundle
487
- value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.2 @sha256:b424894fc8e806c12658daa565b835fd2d66e7f7608afc47529eb7b410f030d7
465
+ value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3 @sha256:b1eb49583b41872b27356fee20d5f0eb6ff7f5cdeacde7ffb39655f031104728
488
466
- name : kind
489
467
value : task
490
468
resolver : bundles
491
469
when :
492
470
- input : $(tasks.init.results.build)
493
471
operator : in
494
- values : [ "true" ]
472
+ values : ["true"]
495
473
- input : $(params.build-source-image)
496
474
operator : in
497
- values : [ "true" ]
498
-
475
+ values : ["true"]
499
476
- name : deprecated-base-image-check
500
477
params :
501
478
- name : IMAGE_URL
@@ -514,8 +491,7 @@ spec:
514
491
when :
515
492
- input : $(params.skip-checks)
516
493
operator : in
517
- values : [ "false" ]
518
-
494
+ values : ["false"]
519
495
- name : clair-scan
520
496
params :
521
497
- name : image-digest
@@ -534,8 +510,7 @@ spec:
534
510
when :
535
511
- input : $(params.skip-checks)
536
512
operator : in
537
- values : [ "false" ]
538
-
513
+ values : ["false"]
539
514
- name : ecosystem-cert-preflight-checks
540
515
params :
541
516
- name : image-url
@@ -545,15 +520,14 @@ spec:
545
520
- name : name
546
521
value : ecosystem-cert-preflight-checks
547
522
- name : bundle
548
- value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:ba7ed837f467904e7b38513174a707a9eec4009d009d6f272ff71d1250bc8854
523
+ value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:abbe195626eec925288df6425679559025d1be4af5ae70ca6dbbcb49ad3bf08b
549
524
- name : kind
550
525
value : task
551
526
resolver : bundles
552
527
when :
553
528
- input : $(params.skip-checks)
554
529
operator : in
555
530
values : ["false"]
556
-
557
531
- name : sast-shell-check
558
532
params :
559
533
- name : image-digest
@@ -576,8 +550,7 @@ spec:
576
550
when :
577
551
- input : $(params.skip-checks)
578
552
operator : in
579
- values : [ "false" ]
580
-
553
+ values : ["false"]
581
554
- name : sast-unicode-check
582
555
params :
583
556
- name : image-digest
@@ -600,8 +573,7 @@ spec:
600
573
when :
601
574
- input : $(params.skip-checks)
602
575
operator : in
603
- values : [ "false" ]
604
-
576
+ values : ["false"]
605
577
- name : sast-snyk-check
606
578
params :
607
579
- name : SOURCE_ARTIFACT
@@ -624,8 +596,7 @@ spec:
624
596
when :
625
597
- input : $(params.skip-checks)
626
598
operator : in
627
- values : [ "false" ]
628
-
599
+ values : ["false"]
629
600
- name : clamav-scan
630
601
params :
631
602
- name : image-digest
@@ -644,8 +615,7 @@ spec:
644
615
when :
645
616
- input : $(params.skip-checks)
646
617
operator : in
647
- values : [ "false" ]
648
-
618
+ values : ["false"]
649
619
- name : rpms-signature-scan
650
620
params :
651
621
- name : image-digest
@@ -665,7 +635,6 @@ spec:
665
635
- input : $(params.skip-checks)
666
636
operator : in
667
637
values : ["false"]
668
-
669
638
- name : push-dockerfile
670
639
params :
671
640
- name : IMAGE
0 commit comments