@@ -2,6 +2,8 @@ apiVersion: tekton.dev/v1
22kind : Pipeline
33metadata :
44 name : build-fbc-pipeline-ynanavat
5+ labels :
6+ build.appstudio.redhat.com/pipeline : build
57spec :
68 finally :
79 - name : show-sbom
7880 description : Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file
7981 name : build-args-file
8082 type : string
81- - default : ["linux/x86_64", "linux/arm64", "linux/ppc64le", "linux/s390x" ]
83+ - default : ["linux/x86_64"]
8284 description : List of platforms to build the container images on. The available set of values is determined by the configuration of the multi-platform-controller.
8385 name : build-platforms
8486 type : array
@@ -173,85 +175,85 @@ spec:
173175 workspace : git-auth
174176 - name : netrc
175177 workspace : netrc
176- # - name: build-container
177- # matrix:
178- # params:
179- # - name: PLATFORM
180- # value:
181- # - $(params.build-platforms)
182- # params:
183- # - name: IMAGE
184- # value: $(params.output-image)
185- # - name: DOCKERFILE
186- # value: $(params.dockerfile)
187- # - name: CONTEXT
188- # value: $(params.path-context)
189- # - name: HERMETIC
190- # value: $(params.hermetic)
191- # - name: PREFETCH_INPUT
192- # value: $(params.prefetch-input)
193- # - name: IMAGE_EXPIRES_AFTER
194- # value: $(params.image-expires-after)
195- # - name: COMMIT_SHA
196- # value: $(tasks.clone-repository.results.commit)
197- # - name: BUILD_ARGS
198- # value:
199- # - $(params.build-args[*])
200- # - "COMMIT=tasks.clone-repository.results.commit"
201- # - "OPM_IMAGE=$(params.opm-image)"
202- # - name: BUILD_ARGS_FILE
203- # value: $(params.build-args-file)
204- # - name: SOURCE_ARTIFACT
205- # value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
206- # - name: CACHI2_ARTIFACT
207- # value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
208- # - name: IMAGE_APPEND_PLATFORM
209- # value: "true"
210- # runAfter:
211- # - prefetch-dependencies
212- # taskRef:
213- # params:
214- # - name: name
215- # value: buildah-remote-oci-ta
216- # - name: bundle
217- # value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:68a4491169a193c1ae92cbf78cc6ff4ba57b8aeffc48846da09c5cc674a1a7fe
218- # - name: kind
219- # value: task
220- # resolver: bundles
221- # when:
222- # - input: $(tasks.init.results.build)
223- # operator: in
224- # values:
225- # - "true"
226- # - name: build-image-index
227- # params:
228- # - name: IMAGE
229- # value: $(params.output-image)
230- # - name: COMMIT_SHA
231- # value: $(tasks.clone-repository.results.commit)
232- # - name: IMAGE_EXPIRES_AFTER
233- # value: $(params.image-expires-after)
234- # - name: ALWAYS_BUILD_INDEX
235- # value: "true"
236- # - name: IMAGES
237- # value:
238- # - $(tasks.build-container.results.IMAGE_REF[*])
239- # runAfter:
240- # - build-container
241- # taskRef:
242- # params:
243- # - name: name
244- # value: build-image-index
245- # - name: bundle
246- # value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:0c2270d1b24fcbaa6fe82b6d045b715a5f24f55d099a10f65297671e2ee421e6
247- # - name: kind
248- # value: task
249- # resolver: bundles
250- # when:
251- # - input: $(tasks.init.results.build)
252- # operator: in
253- # values:
254- # - "true"
178+ - name : build-container
179+ matrix :
180+ params :
181+ - name : PLATFORM
182+ value :
183+ - $(params.build-platforms)
184+ params :
185+ - name : IMAGE
186+ value : $(params.output-image)
187+ - name : DOCKERFILE
188+ value : $(params.dockerfile)
189+ - name : CONTEXT
190+ value : $(params.path-context)
191+ - name : HERMETIC
192+ value : $(params.hermetic)
193+ - name : PREFETCH_INPUT
194+ value : $(params.prefetch-input)
195+ - name : IMAGE_EXPIRES_AFTER
196+ value : $(params.image-expires-after)
197+ - name : COMMIT_SHA
198+ value : $(tasks.clone-repository.results.commit)
199+ - name : BUILD_ARGS
200+ value :
201+ - $(params.build-args[*])
202+ - " COMMIT=tasks.clone-repository.results.commit"
203+ - " OPM_IMAGE=$(params.opm-image)"
204+ - name : BUILD_ARGS_FILE
205+ value : $(params.build-args-file)
206+ - name : SOURCE_ARTIFACT
207+ value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
208+ - name : CACHI2_ARTIFACT
209+ value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
210+ - name : IMAGE_APPEND_PLATFORM
211+ value : " true"
212+ runAfter :
213+ - prefetch-dependencies
214+ taskRef :
215+ params :
216+ - name : name
217+ value : buildah-remote-oci-ta
218+ - name : bundle
219+ value : quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:68a4491169a193c1ae92cbf78cc6ff4ba57b8aeffc48846da09c5cc674a1a7fe
220+ - name : kind
221+ value : task
222+ resolver : bundles
223+ when :
224+ - input : $(tasks.init.results.build)
225+ operator : in
226+ values :
227+ - " true"
228+ - name : build-image-index
229+ params :
230+ - name : IMAGE
231+ value : $(params.output-image)
232+ - name : COMMIT_SHA
233+ value : $(tasks.clone-repository.results.commit)
234+ - name : IMAGE_EXPIRES_AFTER
235+ value : $(params.image-expires-after)
236+ - name : ALWAYS_BUILD_INDEX
237+ value : " true"
238+ - name : IMAGES
239+ value :
240+ - $(tasks.build-container.results.IMAGE_REF[*])
241+ runAfter :
242+ - build-container
243+ taskRef :
244+ params :
245+ - name : name
246+ value : build-image-index
247+ - name : bundle
248+ value : quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:0c2270d1b24fcbaa6fe82b6d045b715a5f24f55d099a10f65297671e2ee421e6
249+ - name : kind
250+ value : task
251+ resolver : bundles
252+ when :
253+ - input : $(tasks.init.results.build)
254+ operator : in
255+ values :
256+ - " true"
255257 - name : fbc-fips-check-oci-ta
256258 params :
257259 - name : image-digest
@@ -282,88 +284,88 @@ spec:
282284 operator : in
283285 values :
284286 - " false"
285- # - name: deprecated-base-image-check
286- # params:
287- # - name: IMAGE_URL
288- # value: $(tasks.build-image-index.results.IMAGE_URL)
289- # - name: IMAGE_DIGEST
290- # value: $(tasks.build-image-index.results.IMAGE_DIGEST)
291- # runAfter:
292- # - build-container
293- # taskRef:
294- # params:
295- # - name: name
296- # value: deprecated-image-check
297- # - name: bundle
298- # value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:ced089bd8d86f95ee70f6ee1a6941d677f1c66c3b8f02fa60f9309c6c32e1929
299- # - name: kind
300- # value: task
301- # resolver: bundles
302- # when:
303- # - input: $(params.skip-checks)
304- # operator: in
305- # values:
306- # - "false"
307- # - name: apply-tags
308- # params:
309- # - name: IMAGE
310- # value: $(tasks.build-image-index.results.IMAGE_URL)
311- # runAfter:
312- # - build-container
313- # taskRef:
314- # params:
315- # - name: name
316- # value: apply-tags
317- # - name: bundle
318- # value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.1@sha256:5e5f290359fd34ae4cc77cbbba6ef8c9907d752572d6dc2a00f5a4c504eb48bb
319- # - name: kind
320- # value: task
321- # resolver: bundles
322- # - name: push-dockerfile
323- # params:
324- # - name: IMAGE
325- # value: $(tasks.build-image-index.results.IMAGE_URL)
326- # - name: IMAGE_DIGEST
327- # value: $(tasks.build-image-index.results.IMAGE_DIGEST)
328- # - name: DOCKERFILE
329- # value: $(params.dockerfile)
330- # - name: CONTEXT
331- # value: $(params.path-context)
332- # - name: SOURCE_ARTIFACT
333- # value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
334- # runAfter:
335- # - build-image-index
336- # taskRef:
337- # params:
338- # - name: name
339- # value: push-dockerfile-oci-ta
340- # - name: bundle
341- # value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:443e665458bd44f029c8e44e8d4c44e4faa8c533f129014ccb3c4c51fd89bbfc
342- # - name: kind
343- # value: task
344- # resolver: bundles
345- # - name: validate-fbc
346- # params:
347- # - name: IMAGE_URL
348- # value: $(tasks.build-image-index.results.IMAGE_URL)
349- # - name: IMAGE_DIGEST
350- # value: $(tasks.build-image-index.results.IMAGE_DIGEST)
351- # runAfter:
352- # - build-image-index
353- # taskRef:
354- # params:
355- # - name: name
356- # value: validate-fbc
357- # - name: bundle
358- # value: quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.1@sha256:e088585f64d347f441f617b7b59b823b4412d2529d9ce53aa0eae50a92d5db6a
359- # - name: kind
360- # value: task
361- # resolver: bundles
362- # when:
363- # - input: $(params.skip-checks)
364- # operator: in
365- # values:
366- # - "false"
287+ - name : deprecated-base-image-check
288+ params :
289+ - name : IMAGE_URL
290+ value : $(tasks.build-image-index.results.IMAGE_URL)
291+ - name : IMAGE_DIGEST
292+ value : $(tasks.build-image-index.results.IMAGE_DIGEST)
293+ runAfter :
294+ - build-container
295+ taskRef :
296+ params :
297+ - name : name
298+ value : deprecated-image-check
299+ - name : bundle
300+ value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:ced089bd8d86f95ee70f6ee1a6941d677f1c66c3b8f02fa60f9309c6c32e1929
301+ - name : kind
302+ value : task
303+ resolver : bundles
304+ when :
305+ - input : $(params.skip-checks)
306+ operator : in
307+ values :
308+ - " false"
309+ - name : apply-tags
310+ params :
311+ - name : IMAGE
312+ value : $(tasks.build-image-index.results.IMAGE_URL)
313+ runAfter :
314+ - build-container
315+ taskRef :
316+ params :
317+ - name : name
318+ value : apply-tags
319+ - name : bundle
320+ value : quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.1@sha256:5e5f290359fd34ae4cc77cbbba6ef8c9907d752572d6dc2a00f5a4c504eb48bb
321+ - name : kind
322+ value : task
323+ resolver : bundles
324+ - name : push-dockerfile
325+ params :
326+ - name : IMAGE
327+ value : $(tasks.build-image-index.results.IMAGE_URL)
328+ - name : IMAGE_DIGEST
329+ value : $(tasks.build-image-index.results.IMAGE_DIGEST)
330+ - name : DOCKERFILE
331+ value : $(params.dockerfile)
332+ - name : CONTEXT
333+ value : $(params.path-context)
334+ - name : SOURCE_ARTIFACT
335+ value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
336+ runAfter :
337+ - build-image-index
338+ taskRef :
339+ params :
340+ - name : name
341+ value : push-dockerfile-oci-ta
342+ - name : bundle
343+ value : quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:443e665458bd44f029c8e44e8d4c44e4faa8c533f129014ccb3c4c51fd89bbfc
344+ - name : kind
345+ value : task
346+ resolver : bundles
347+ - name : validate-fbc
348+ params :
349+ - name : IMAGE_URL
350+ value : $(tasks.build-image-index.results.IMAGE_URL)
351+ - name : IMAGE_DIGEST
352+ value : $(tasks.build-image-index.results.IMAGE_DIGEST)
353+ runAfter :
354+ - build-image-index
355+ taskRef :
356+ params :
357+ - name : name
358+ value : validate-fbc
359+ - name : bundle
360+ value : quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.1@sha256:e088585f64d347f441f617b7b59b823b4412d2529d9ce53aa0eae50a92d5db6a
361+ - name : kind
362+ value : task
363+ resolver : bundles
364+ when :
365+ - input : $(params.skip-checks)
366+ operator : in
367+ values :
368+ - " false"
367369 workspaces :
368370 - name : workspace
369371 - name : git-auth
0 commit comments