Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Start pushing all images to quay.io/konflux-ci #1041

Merged
merged 11 commits into from
Jun 4, 2024

Conversation

chmeliik
Copy link
Contributor

@chmeliik chmeliik commented May 27, 2024

STONEBLD-2339

All the images published from this repo will now be pushed to quay.io/konflux-ci/*. Some will continue getting pushed to their old location.

Old (continues getting updates?) New
redhat-appstudio-tekton-catalog/task-* konflux-ci/tekton-catalog/task-*
redhat-appstudio-tekton-catalog/pipeline-* konflux-ci/tekton-catalog/pipeline-*
redhat-appstudio-tekton-catalog/data-acceptable-bundles konflux-ci/tekton-catalog/data-acceptable-bundles
redhat-appstudio-tekton-catalog/pull-request-builds konflux-ci/pull-request-builds:(task|pipeline)-*
redhat-appstudio/appstudio-utils konflux-ci/appstudio-utils
redhat-appstudio/pull-request-builds:build-definitions-utils-* konflux-ci/pull-request-builds:appstudio-utils-*

Also, data-acceptable-bundles will now contain bundle references for both redhat-appstudio-tekton-catalog/task-* and konflux-ci/tekton-catalog/task-*.

The full list of repos that we need created in https://quay.io/konflux-ci:

click me
tekton-catalog/task-acs-deploy-check
tekton-catalog/task-acs-image-check
tekton-catalog/task-acs-image-scan
tekton-catalog/task-apply-tags
tekton-catalog/task-buildah
tekton-catalog/task-buildah-10gb
tekton-catalog/task-buildah-20gb
tekton-catalog/task-buildah-24gb
tekton-catalog/task-buildah-6gb
tekton-catalog/task-buildah-8gb
tekton-catalog/task-buildah-oci-ta
tekton-catalog/task-buildah-remote
tekton-catalog/task-buildah-rhtap
tekton-catalog/task-build-image-manifest
tekton-catalog/task-clair-scan
tekton-catalog/task-clamav-scan
tekton-catalog/task-deprecated-image-check
tekton-catalog/task-download-sbom-from-url-in-attestation
tekton-catalog/task-ecosystem-cert-preflight-checks
tekton-catalog/task-fbc-related-image-check
tekton-catalog/task-fbc-validation
tekton-catalog/task-gather-deploy-images
tekton-catalog/task-generate-odcs-compose
tekton-catalog/task-git-clone
tekton-catalog/task-git-clone-oci-ta
tekton-catalog/task-init
tekton-catalog/task-inspect-image
tekton-catalog/task-prefetch-dependencies
tekton-catalog/task-prefetch-dependencies-oci-ta
tekton-catalog/task-provision-env-with-ephemeral-namespace
tekton-catalog/task-rpm-ostree
tekton-catalog/task-s2i-java
tekton-catalog/task-s2i-nodejs
tekton-catalog/task-sast-snyk-check
tekton-catalog/task-sast-snyk-check-oci-ta
tekton-catalog/task-sbom-json-check
tekton-catalog/task-show-sbom
tekton-catalog/task-show-sbom-rhdh
tekton-catalog/task-slack-webhook-notification
tekton-catalog/task-source-build
tekton-catalog/task-source-build-oci-ta
tekton-catalog/task-summary
tekton-catalog/task-tkn-bundle
tekton-catalog/task-update-deployment
tekton-catalog/task-update-infra-deployments
tekton-catalog/task-upload-sbom-to-trustification
tekton-catalog/task-verify-enterprise-contract
tekton-catalog/task-verify-signed-rpms

tekton-catalog/pipeline-docker-build
tekton-catalog/pipeline-docker-build-oci-ta
tekton-catalog/pipeline-enterprise-contract
tekton-catalog/pipeline-enterprise-contract-everything
tekton-catalog/pipeline-enterprise-contract-slsa3
tekton-catalog/pipeline-fbc-builder
tekton-catalog/pipeline-java-builder
tekton-catalog/pipeline-nodejs-builder
tekton-catalog/pipeline-tekton-bundle-builder
tekton-catalog/pipeline-core-services-docker-build

tekton-catalog/data-acceptable-bundles

appstudio-utils

pull-request-builds

See the individual commits for more details.

@chmeliik chmeliik force-pushed the quay-io-konflux-ci branch 3 times, most recently from 00633c2 to b86522c Compare May 27, 2024 14:52
@chmeliik
Copy link
Contributor Author

chmeliik commented May 28, 2024

Attempted to test as much of it as I could in chmeliik#3

It pushes the task bundles to https://quay.io/acmiel-rhtap and https://quay.io/acmiel-test (pretend that they are redhat-appstudio-tekton-catalog and konflux-ci)

Checked

Pipeline bundles in org X correctly contain task bundles from org X

$ tkn bundle list quay.io/acmiel-rhtap/pipeline-docker-build:devel -o json | jq '.spec.tasks[].taskRef.params[] | select(.name == "bundle").value' -r
quay.io/acmiel-rhtap/task-init:0.2@sha256:683a0c782fe8dd9c9d9a01214f704f63855ded3165c50a55b7a0d9426360110b
quay.io/acmiel-rhtap/task-git-clone:0.1@sha256:8e6c1699823fc1c9157fe353c66f593fd9d7634c05a940a5040799642c08dff3
...
$ tkn bundle list quay.io/acmiel-test/tekton-catalog/pipeline-docker-build:devel -o json | jq '.spec.tasks[].taskRef.params[] | select(.name == "bundle").value' -r
quay.io/acmiel-test/tekton-catalog/task-init:0.2@sha256:4f704bcd12ba5d03d793cfec3c16e972eb2d01d3e2dff99cd17166653f223bf7
quay.io/acmiel-test/tekton-catalog/task-git-clone:0.1@sha256:5fe30d6c1e9b6d3eff4e5949a49144c30dfe4591d62f1f50da2734a62ae3dcbe
...

Bundles released to org X have a different sha than those released to org Y, but the digest of the layer inside the bundle is the same

$ skopeo inspect --raw docker://quay.io/acmiel-rhtap/task-init@sha256:683a0c782fe8dd9c9d9a01214f704f63855ded3165c50a55b7a0d9426360110b | jq '.layers[0].digest'
"sha256:dae6b844df0ad991e50c88feb7f02514148895a55df27b2e82aa950d43e364f5"

$ skopeo inspect --raw docker://quay.io/acmiel-test/tekton-catalog/task-init@sha256:4f704bcd12ba5d03d793cfec3c16e972eb2d01d3e2dff99cd17166653f223bf7 | jq '.layers[0].digest'
"sha256:dae6b844df0ad991e50c88feb7f02514148895a55df27b2e82aa950d43e364f5"

(the mismatch of the overall bundle digest is caused by a different created timestamp in the config)

The data-acceptable-bundles image contains bundle refs for both orgs

bundles by task name
acs-deploy-check:
  - oci://quay.io/acmiel-rhtap/task-acs-deploy-check:0.1@sha256:cf92778607fa7fd93346beb9bb873c1eda6290d06fff645247de4c52fce51f6d
  - oci://quay.io/acmiel-test/tekton-catalog/task-acs-deploy-check:0.1@sha256:9fa016043fdb435179d1363c9b9d25c485e9e24d9ee3138a985cec0a9f05f185
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-acs-deploy-check:0.1@sha256:27a9e017a73289d19ed084fad19a094060112ec47ddeccb5fa21a3b7424eb325
acs-image-check:
  - oci://quay.io/acmiel-rhtap/task-acs-image-check:0.1@sha256:4ff5139daede2cc2d1a931edfd7a04c9a476ea2ce703310e715470190d823776
  - oci://quay.io/acmiel-test/tekton-catalog/task-acs-image-check:0.1@sha256:a9faf3ca802825a9712d94e9f881db56ee4cadaafd4d5ae9be6b975594e17843
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-acs-image-check:0.1@sha256:6d9d2bca90066dad8bfd306b3e099c49686c56daa12512db547177256c0d7596
acs-image-scan:
  - oci://quay.io/acmiel-rhtap/task-acs-image-scan:0.1@sha256:7cbe5038315d878450db2495043e7625c27771196c29a2bdc9718b1db1130b0a
  - oci://quay.io/acmiel-test/tekton-catalog/task-acs-image-scan:0.1@sha256:bc93d863ee9c6b57033b3de42b71efd1a41f142196bc5b315742ac167979efd1
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-acs-image-scan:0.1@sha256:803fbb6a1a4204ebb8b411cb8386ff1c3faabd33fa2f0d400aa8dfc939d4c9ce
apply-tags:
  - oci://quay.io/acmiel-rhtap/task-apply-tags:0.1@sha256:295582cd5784f3c2ceaa88e1605454bd77eea77a62abf200b7ead7ade639cd32
  - oci://quay.io/acmiel-test/tekton-catalog/task-apply-tags:0.1@sha256:fd4a3a3c1762aeaa758ad09c040a4260b8d29eeee1127927a67e08360ae90f43
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-apply-tags:0.1@sha256:29add9a49a2281a3755a9b580d2b9c5cb110231b14cccf8ade2fd7895a9b4b4a
build-image-manifest:
  - oci://quay.io/acmiel-rhtap/task-build-image-manifest:0.1@sha256:71bd3570dada78371f2cd06f893f63047a3f93c23d6cf8372cb992054ca25617
  - oci://quay.io/acmiel-test/tekton-catalog/task-build-image-manifest:0.1@sha256:e09a6644e09f0ad055cc34986ab5cb50132b9ea1d84769e1d83e4dda49aba85b
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-build-image-manifest:0.1@sha256:e064b63b2311d23d6bf6538347cb4eb18c980d61883f48149bc9c728f76b276c
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-build-image-manifest:0.1@sha256:4f8da0144ac88fb8139d3f60c40b64db02a5bf8bdd3f500f22389de80c7807c8
buildah:
  - oci://quay.io/acmiel-rhtap/task-buildah:0.1@sha256:7e0756b11e37f6e733d100e0fd7081b813eeaa7a6104637c0e80e9557c1948f0
  - oci://quay.io/acmiel-test/tekton-catalog/task-buildah:0.1@sha256:a1ebe8b5a95f59aa4346ab5104e62543562c2e6b291c27aafb08166350a6bdaf
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah:0.1@sha256:7cd80204a133c96ccc72bb8d6be0caeaf5014924e679d3686560c8e54cb87d24
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah:0.1@sha256:2cd38c43cd0fea1d1989bb3babc43068548242a7c8d83459d956ebc5334300ed
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah:0.1@sha256:13447a7b6a20e51875124c3510a4b6e86119f7b3ba89e2c997e0befefefb65f4
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah:0.1@sha256:7e5f19d3aa233b9becf90d1ca01697486dc1acb1f1d6d2a0b8d1a1cc07c66249
buildah-10gb:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-10gb:0.1@sha256:7e0ad7a7a395545b41b2794515996793875aba50e1b38fd0ae03feeea90dd564
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-10gb:0.1@sha256:fa1d658f3f255544d35a9b5b9edc9746f1f3468edaafb2b7ce9c038d7266fb62
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-10gb:0.1@sha256:d252b2df547bfb4e5ade297c790df2f0fc6ecccd0b451c23f7015ff0b20d84ea
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-10gb:0.1@sha256:ef499ca518db2ee807bace63f2d9f9147be5a8712d55c4ed67345ba3f7081786
buildah-20gb:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-20gb:0.1@sha256:0a2dff3ac1eb0ace737e4fb55878323123786fe25187a102a903ec6ee9383166
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-20gb:0.1@sha256:0e5ad1f4632ea77c110e79396b15d2f4b19a2e086e506036e5bf7340fda75336
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-20gb:0.1@sha256:38ec004140711cc3e77633bfc6a159b03f8435be690435683ea3b626a8992aae
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-20gb:0.1@sha256:17414876bc68bea13eddb2d94581c9491c0716625991d2f83ccd1fcd35f7c95a
buildah-24gb:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-24gb:0.1@sha256:962cfbc4ebbd95eff02706c7fcec4acd16faabc320dbce57a2694f0c418f96e8
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-24gb:0.1@sha256:69bf207633717bdb80a58aeb7ff2fb6aaeaaa3a94c5c19c4af71dfa62e2a8097
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-24gb:0.1@sha256:f874bb5d96554e56aa7af49bf41278f59bfc4f7d7a2129cf60519fd4af3efacb
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-24gb:0.1@sha256:7ed3c8f508244241fcddddcdc0d69b6e3ebb234bf4d8f068e874f7ca4a31b5a4
buildah-6gb:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-6gb:0.1@sha256:d2370b94bc84ef675d8d604db403b47fade89d02b9e500b7ede30eb90031018b
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-6gb:0.1@sha256:9876aa9ab7c7266d8620ebd8d3774f67592777d66e8262da18f2cd70d85596de
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-6gb:0.1@sha256:fbe82d3fb0ccc513629e6e0189b49e8ccdf02d07fd5ce9628a88f3ee4fb8cf74
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-6gb:0.1@sha256:35c6d90d3345aa31d7cee1865fc50942889b643926b3641ec93fd136ed34f62e
buildah-8gb:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-8gb:0.1@sha256:e19d69c26dfb8317d208ab9ce8e16443fa026f2fa379a043f24d865ea470c33d
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-8gb:0.1@sha256:ce1de12068743600f8aa92f38e90390ce2abee8466185a2dfc321b0872c17302
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-8gb:0.1@sha256:a088a4f35723e9fa72d0ad08c390bc5534aa9f487101fe0fdcf53cec8d4e8a5f
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-8gb:0.1@sha256:e3c5aecec9379b1aeb1f404f60669bb7c02ca1a809a9a6d602b8257e864fc98c
buildah-oci-ta:
  - oci://quay.io/acmiel-rhtap/task-buildah-oci-ta:0.1@sha256:33f67b7b27ef7e5627cf57aec16bd36f7b258c2d194d540518b26ea1efeff614
  - oci://quay.io/acmiel-test/tekton-catalog/task-buildah-oci-ta:0.1@sha256:ad68cf21f2883a3ced9ceb9deff8a9de4189a8782978ef78ae93826f804c4e3e
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-oci-ta:0.1@sha256:692e8882c1b10d0fa6b1dc5b8191c8b01cda22e04403026bcd6168e393df9597
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-oci-ta:0.1@sha256:b13edbf39ce204fd647ea8aedf688bf07c755bc09e5e7867bd2894976e1759b1
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-oci-ta:0.1@sha256:4fe8b5f597759bce6c71979dec50e07e5831c493f10d7c9035c61a2b87cfa9eb
buildah-remote:
  - oci://quay.io/acmiel-rhtap/task-buildah-remote:0.1@sha256:ee3c4a919e99ac96045bcb45d88c069e78a1d41e8899ff0489d0352ac0ee5b15
  - oci://quay.io/acmiel-test/tekton-catalog/task-buildah-remote:0.1@sha256:f7bc04d15d482602807ee29fbce14569055cc8b595d6be025e2c59a27b21df36
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-remote:0.1@sha256:86f1b469437557bb3595699f9c67b628248fc46da35de76acea5830265860b91
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-remote:0.1@sha256:a75001715eca643305f3d6c19e9e4c1d598003f0f0c0bc8148c7d90f0b19f2f0
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-remote:0.1@sha256:803093ffa3719510e5fad5072a3d43968a38f29922a19f4cb559f10a7902525b
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-remote:0.1@sha256:a0f8aee7e1791905be6cd3c2e36c60e23ed58de159afca44059921e74dc61567
buildah-rhtap:
  - oci://quay.io/acmiel-rhtap/task-buildah-rhtap:0.1@sha256:22d4075cb6ca4a90c8be12a1d9b1ab57b55308ddd196862fbf4fb34261493d9b
  - oci://quay.io/acmiel-test/tekton-catalog/task-buildah-rhtap:0.1@sha256:a78435fa60d967a990e0eaca20da59b97182840129765c243a181e3014542ee0
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-rhtap:0.1@sha256:4431096003308b2afa60ac489315877dd5631da5af6f696bbc682df328eb1457
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-buildah-rhtap:0.1@sha256:b733a0d053e68db5eda048b016efed61a9d49134b0e7996b55e7327fe9561158
clair-scan:
  - oci://quay.io/acmiel-rhtap/task-clair-scan:0.1@sha256:f5aa5fe320aa4ed3488599ae358d83c02921bc4c7829659938d97c3d1671c7b9
  - oci://quay.io/acmiel-test/tekton-catalog/task-clair-scan:0.1@sha256:8ad106677c78b3d66cf5fa5180522000eabe7b208b8d012b3508948eed162e28
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-clair-scan:0.1@sha256:44d0df70080e082e72d2694b14130ff512e5e7f2611190161a9b016b4df9fb22
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-clair-scan:0.1@sha256:a6107f78e5fa9e087992f11d788701e4241d9875b153def796fb3bf257c3b7fd
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-clair-scan:0.1@sha256:bc8fc4c8a8ac6a563afb37406497eb4c30f80df5a238d159d56e6faa6e4ce988
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-clair-scan:0.1@sha256:c703ded1a7cc731b357785a1a3da1c924adcf3bf89aadfb7cf0a97e85cf06e62
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-clair-scan:0.1@sha256:1455df3ae446fd2205e6e3457310acbf2eb9754e08f1ee9e43520fd76689c495
clamav-scan:
  - oci://quay.io/acmiel-rhtap/task-clamav-scan:0.1@sha256:4d9d60605ae4b6f3cef393192e23217e5f89839b751e81835feca6eb31e84026
  - oci://quay.io/acmiel-test/tekton-catalog/task-clamav-scan:0.1@sha256:e3dd35c1959e2025decd5415f5bd5b4f0d35d9d6d11c15ffa685b342a5acd4e2
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-clamav-scan:0.1@sha256:5dbe6c646c3502ddc7fbe6016b8584bed6ce3ab7028b0c405ebaabc7e6e9e64c
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-clamav-scan:0.1@sha256:6ba32717bd837ca0d5714b518cc4530e1f1d5bef137df54c02b0c2151b9d217e
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-clamav-scan:0.1@sha256:e6c1e821dc0d2558b2ee46cd14a53ae79d48218d689caa1a2fa671fbf3a06019
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-clamav-scan:0.1@sha256:fbdd8b4ca9235f73d630d5a71c71d1042bbe7971eefba081dea827b6ee489c19
cleanup-build-directories:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-cleanup-build-directories:0.1@sha256:210a761586251e1db8fb31cb56e1182a7e6e478092efd63e796121b217c01c46
configure-build:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-configure-build:0.1@sha256:81ac1aca1901c3385cbc8c500b3a69f4a12485e295cb7003fab1f068632cf9b4
configure-build-no-shared:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-configure-build-no-shared:0.1@sha256:bad106ff77a7a932de04006512052ee8e7b31becdd95ad84fded98e6100c2234
conftest-clair:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-conftest-clair:0.1@sha256:afd12c004c1e4f0a86f117fc1fee85ab19c9f090e281e2e0db0c0c14adecff35
deprecated-image-check:
  - oci://quay.io/acmiel-rhtap/task-deprecated-image-check:0.1@sha256:c278ed129ee8858983424eb181aacbfdf2c42f2fae7694492c05f4786157d803
  - oci://quay.io/acmiel-rhtap/task-deprecated-image-check:0.2@sha256:43af7d1c9419d93def1aca8ceb756bd7a5c9d745c907fb51a27714606aeabd5b
  - oci://quay.io/acmiel-rhtap/task-deprecated-image-check:0.3@sha256:a33d5f0c7d2b8014bcb06dc81f144ae5121db74bb4ff1f003c25349694be3b7a
  - oci://quay.io/acmiel-rhtap/task-deprecated-image-check:0.4@sha256:1a7dac7fec02e959c835fd6553431c02b0d3b2852a0e0ec911537fe6c04e9e39
  - oci://quay.io/acmiel-test/tekton-catalog/task-deprecated-image-check:0.1@sha256:7568594dfa78c56bfe540cd98469d87855046135a0ed04dc3bd66c1c1daa516a
  - oci://quay.io/acmiel-test/tekton-catalog/task-deprecated-image-check:0.2@sha256:d8837134818891e0325e81d9b74812bc4a0ecfbb31ad3e4c379d6ad196fb1394
  - oci://quay.io/acmiel-test/tekton-catalog/task-deprecated-image-check:0.3@sha256:8a6c9b84a25300ed47d62de78f827859ef6a0a6da9d3b6c10ac07a0ab0d26e30
  - oci://quay.io/acmiel-test/tekton-catalog/task-deprecated-image-check:0.4@sha256:fb78b301042bcbe969814ae79aef5a97e577112077894bd533460c3a69bc9195
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.1@sha256:0e3622fcf073d1a8cbd646078ea2e3baf2057cbe5485aea545709bc2011bdd70
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.1@sha256:e9c591dc7f42f91369440137be11b4d22805668a8a719b16ce18e4a84f198b76
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.1@sha256:d79a6f69a1d64a1907c92065564f73d65818f3aca4c6e2176264341c214039e7
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.1@sha256:77749447cae19baa8e6d7f67704eb8fefcd7b4bfc7c71ae55df480261adaed41
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.2@sha256:dca2c68ed8a95a43ea1f7a15ab91542e353937801d330b04eaa5592b425a0495
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.2@sha256:887f21d49d4eb1610f2c6695bde95084ce5fc4ab0a1d0703a978f9b45c9aa188
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.2@sha256:a22f8af3a935c24687d5cbc1e586de04001e73bcda0e0683c9a5c2a26dad29ea
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.2@sha256:da1305905b3342cfc3cab53e38d8d267c7a4e36a19cd16c2ba2dd6dc46fd4b27
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.3@sha256:29113c9f778fd5cf9332a1ad91a90f6e3483f36355d7fd909affcc13612bf2ce
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.3@sha256:cd3f2b5590c67a11c44be7f9e774445b58aadc05df6a0889f86ea12f46b2d344
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.3@sha256:49d81910542f31c45c352a7a90d95c778ff20997d7b7b068eaf2483f58c1c36a
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.3@sha256:ae1fcb32b1aeac846e1a41019b2e735b9c25c27752496f17744d869860c80ff1
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.4@sha256:3793fbf59e7dadff9d1f7e7ea4cc430c69a2de620b20c7fd69d71bdd5f6c4a60
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.4@sha256:6b1b325de0af29b6e9a0696f4d2b669a1e6a046941726cc97c5e42785aad870c
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.4@sha256:2ca01e72abad1fbd415099796759a565730ee0cf5bc39450c2cbf35908e553cd
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.4@sha256:e9efe99e12d6e69b31b86e8e0bf4b4da4d7bae8fbd325662cf282fb04d4eb7de
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.4@sha256:735d80c26b81ab8a5a99635a0049e8c63f702f9525b59f37dc411cab9f786370
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check:0.4@sha256:dd1b8b5b2652b24dc823aa83ebbf5e7ad52ade3cf6c7fa4993b8d0f9e0761189
download-sbom-from-url-in-attestation:
  - oci://quay.io/acmiel-rhtap/task-download-sbom-from-url-in-attestation:0.1@sha256:ba8fff7b035aeeab133298181c619eb79931ed0dbcb690329052d8f3d6b2ade6
  - oci://quay.io/acmiel-test/tekton-catalog/task-download-sbom-from-url-in-attestation:0.1@sha256:6e9a4bac7763bcc9f4836c62023c1c09d1435c3a6dbc981c0214865bd470bf9a
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-download-sbom-from-url-in-attestation:0.1@sha256:121b468daef696080bf392ef64a677143848737e890111a45577e656a8a41140
ecosystem-cert-preflight-checks:
  - oci://quay.io/acmiel-rhtap/task-ecosystem-cert-preflight-checks:0.1@sha256:b17bb1bec2a2580536e3fe9cfa47a38851733c0544a24a7839b33e3e6aa4f0de
  - oci://quay.io/acmiel-test/tekton-catalog/task-ecosystem-cert-preflight-checks:0.1@sha256:0bc7e7160875b2870a06792c2033bac61ec06baddaa2295f5372be3cdff89a71
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-ecosystem-cert-preflight-checks:0.1@sha256:b6c1276b983d7ec6f8cf250056e904887f519bb6e54d538525f6314b681bd728
fbc-related-image-check:
  - oci://quay.io/acmiel-rhtap/task-fbc-related-image-check:0.1@sha256:963fc5b498a95afb09ea6b3205c04222c8f0806aca77198c98485195f8558a2d
  - oci://quay.io/acmiel-test/tekton-catalog/task-fbc-related-image-check:0.1@sha256:c4ce457226349a0e33e72b8eb2aed39a6d5de2741a8cef356fc214130eee041b
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-fbc-related-image-check:0.1@sha256:0686e642a2c6d6ef4a893bc0f83454aac8a5a322b6385f6038451c0741ad7c64
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-fbc-related-image-check:0.1@sha256:fb654dfa758a58cf386c3d3067b195e3d7e4de86be5e67ac5b77bfbc020baaeb
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-fbc-related-image-check:0.1@sha256:8f35ac7d89dc590042d097ebaf36f7c58ef5cfb667b64c56cc6af3acbc24c5c6
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-fbc-related-image-check:0.1@sha256:233ec060016adc3eea593b0118d8351a674098e573df8082ba8d918667ffcb8d
fbc-validation:
  - oci://quay.io/acmiel-rhtap/task-fbc-validation:0.1@sha256:152fa470c62eb25f6545a2f921ba164c227c03c2baa282f763eeefbd055e7467
  - oci://quay.io/acmiel-test/tekton-catalog/task-fbc-validation:0.1@sha256:c224ae1357bab472b6acd9fe7e9529ecb8cdfd6d052271facbbd0309cdb2c346
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-fbc-validation:0.1@sha256:f6a9dc0edcd1c2ad0058bb7dedc48b20069e2dc0032e9bded426c1909442b734
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-fbc-validation:0.1@sha256:6c5db680a4d42a6cdefa8d6aed4b6c197473a1205be4bd278d2b4496d85f79e6
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-fbc-validation:0.1@sha256:80862d529eb04ff36d680e6a9cd1d62526332fbfc6e1b00c877d50fa47c66114
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-fbc-validation:0.1@sha256:bad3d47b8ece044bc1c2bf3c934f4fd65bc3bd68d816ed1f7c7157521bd4c0ca
gather-deploy-images:
  - oci://quay.io/acmiel-rhtap/task-gather-deploy-images:0.1@sha256:7dad6bbe66f80b2adf23852b1b266d9493a7ff1bd747b65d766c256b1b6f25da
  - oci://quay.io/acmiel-test/tekton-catalog/task-gather-deploy-images:0.1@sha256:9940889702b49bf0924e2a2a26dcb2faa954f1a47be706a4118892693a41294a
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-gather-deploy-images:0.1@sha256:c811011888d4b71c487c59eec221ec3f7bacce7ab762993e4141efaf3854cedd
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-gather-deploy-images:0.1@sha256:904daa14adf6446ebe8e196230f80e1b3b5b002f9f939cb0562b5e384070ce7f
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-gather-deploy-images:0.1@sha256:9468abaad11d58e52501e8acb2fbbe8145698570d3c6b3ff5e9d24849bba15c5
generate-odcs-compose:
  - oci://quay.io/acmiel-rhtap/task-generate-odcs-compose:0.1@sha256:15b4f119177a4165e6db21abf869c44cf43c720b760e5b90ed29eadb6f6bb8d1
  - oci://quay.io/acmiel-test/tekton-catalog/task-generate-odcs-compose:0.1@sha256:78adbb101be2c227eb0e37e78354eb81e4febe2f1f2b7a702fe708d7d72e1f97
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-generate-odcs-compose:0.1@sha256:5517a5b5eb0029beddea08740d57beb649a517368fb57644b9b2bf0ebef81275
get-clair-scan:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-get-clair-scan:0.1@sha256:f5259b6194f73e43f8f1d8ec8f7cd7466209fbf8aaf8b8ac4cf653fc54fc6b3b
git-clone:
  - oci://quay.io/acmiel-rhtap/task-git-clone:0.1@sha256:1bdacde4acf46f0b0e698a4b596dc0d0982b5dec1df5ebac6e01dfa7be22994b
  - oci://quay.io/acmiel-test/tekton-catalog/task-git-clone:0.1@sha256:4726ca98cfb13033d4bfbc5d1284ffa34a1c6b6b2d47046cf16cde08c9f50fa9
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-git-clone:0.1@sha256:729ed7f3b7a3da2658c80655039989a66da207b91036893409bd1305e69a655f
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-git-clone:0.1@sha256:30709df067659a407968154fd39e99763823d8ecfc6b5cd00a55b68818ec94ba
git-clone-oci-ta:
  - oci://quay.io/acmiel-rhtap/task-git-clone-oci-ta:0.1@sha256:2765fd45732ea089c12100c82783622dce730d84ab364dabf4a4c3ee7a919910
  - oci://quay.io/acmiel-test/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:b615490ccb6b26322cc7a5ff1dc86c8c92aa85641cac2d1cd94148c244aeb6b2
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-git-clone-oci-ta:0.1@sha256:e3490635200600da4a6b2997b0cf8e65e012155e7795824aa36d858a890ad31f
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-git-clone-oci-ta:0.1@sha256:c18dc89b0c35f425a5dd10aa48a7e5177deb6addcc06db99646df17fcdde5a2d
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-git-clone-oci-ta:0.1@sha256:09f285d6239c36f86296b17e9b0fbff8e23dffe247a1012e47876ee081752732
hacbs-test-evaluation:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-hacbs-test-evaluation:0.1@sha256:b80e94aef1440f5e7f002d4d9d928ea6c890d005d2468d9a2bff1ead7606c265
init:
  - oci://quay.io/acmiel-rhtap/task-init:0.1@sha256:af3b30df6fd89ac6644a73e039c36e041d509991334d575d0325168bf21dc956
  - oci://quay.io/acmiel-rhtap/task-init:0.2@sha256:8cfaf3d2c2a98aee949fa5e2fc63fe54f0ff239e7541df8c119cad53a3616180
  - oci://quay.io/acmiel-test/tekton-catalog/task-init:0.1@sha256:4e239b8ae679cbda68e63e4df83b3dbeb1ab07a5d973fe5cd47bc2760f9a495f
  - oci://quay.io/acmiel-test/tekton-catalog/task-init:0.2@sha256:30fdf16e1ece077cc99ea52e235d20dc6539f5e12ae305f9e9dce9024be44aef
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-init:0.1@sha256:b46d189ad3fe12b1048592a1e62c6be92005cb8ce496be89bd26c180e451fc3f
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-init:0.1@sha256:344b220456b61e99cea8f5fb6076e117b0b5e63d467fe3771dc6a1edce960cfd
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-init:0.2@sha256:686109bd8088258f73211618824aee5d3cf9e370f65fa3e85d361790a54260ef
inspect-image:
  - oci://quay.io/acmiel-rhtap/task-inspect-image:0.1@sha256:99d0ed89a2f53e359f921862782b47308d1f7d9d84b28706193e3e483c551760
  - oci://quay.io/acmiel-test/tekton-catalog/task-inspect-image:0.1@sha256:9d23b2b8b33d818c0af39c88debe0bb71bbd8accfbe6303ee670fe210b4a20fe
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-inspect-image:0.1@sha256:dd1b6273ad4171dd8055af7e4fb6fe5e92b808badb2845726e9704ea3d04ccf2
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-inspect-image:0.1@sha256:919438843ea5368ec0c41c6b5f92363add4423118f9cd6ccf16bf23160fabc90
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-inspect-image:0.1@sha256:d7cd123001b607b13f8d6b4be84a6565d0f066d2059dd829ae1ba9613bbc070a
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-inspect-image:0.1@sha256:268632262685fe84400c9b346fe589f96b1930321334660d234037fc25f97806
label-check:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-label-check:0.1@sha256:0c0739fdda24cd1e3587bbab9b07d4493efc21884baac7723f4b446e95bf1fd3
prefetch-dependencies:
  - oci://quay.io/acmiel-rhtap/task-prefetch-dependencies:0.1@sha256:6b60888f4a388b620789cc797aec40abe6ed0cd801835102a2e89a87ce465b62
  - oci://quay.io/acmiel-test/tekton-catalog/task-prefetch-dependencies:0.1@sha256:5492d935be00fc555c4329951434d33e8991a19caeff83a63f40ac0c65621de5
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-prefetch-dependencies:0.1@sha256:9aec3ae9f0f50a05abdc739faf4cbc82832cff16c77ac74e1d54072a882c0503
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-prefetch-dependencies:0.1@sha256:0285e38b5b88552ef3d760db83e6a0ce91d8d308b48890885f51b13571a4e057
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-prefetch-dependencies:0.1@sha256:c6fdbf404dc61bf8cf8bec5fc4d7fb15f37ba62f1684de0c68bfbad5723c0052
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-prefetch-dependencies:0.1@sha256:6687b3a54a8cbfbb5c2904d447bbb3d48d5739c5e201f6ddf0c4b471a7e35e27
prefetch-dependencies-oci-ta:
  - oci://quay.io/acmiel-rhtap/task-prefetch-dependencies-oci-ta:0.1@sha256:c3607d8916516f1e41a3da0cd79ce99fee2ef4e019114131400a95ed4ee9eea8
  - oci://quay.io/acmiel-test/tekton-catalog/task-prefetch-dependencies-oci-ta:0.1@sha256:c5b554a76669c45d296b5b43bec805b9a37d7441f758440574eb8e6bcc600221
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-prefetch-dependencies-oci-ta:0.1@sha256:b3851f03527abfedd169dfdd0123c55c161b6695133760c85e2e58e6df5043c8
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-prefetch-dependencies-oci-ta:0.1@sha256:33429a09de4fbeb39fd5140073a7481f43506c6a7479555153dda5c11126c5a7
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-prefetch-dependencies-oci-ta:0.1@sha256:fe351ee58ed07d7455b32a01dddecf7512dc56506b6260c17fa9a1b4513d02dc
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-prefetch-dependencies-oci-ta:0.1@sha256:591f890cc97885457c7460cf142850628770f37d4e1a801fec2c78d004e324ec
provision-env-with-ephemeral-namespace:
  - oci://quay.io/acmiel-rhtap/task-provision-env-with-ephemeral-namespace:0.1@sha256:44a429caccf75dcedc40770ea13d497b39b9705c83bbb71b3762e0ddd8723843
  - oci://quay.io/acmiel-test/tekton-catalog/task-provision-env-with-ephemeral-namespace:0.1@sha256:1677d738e14f315ede9d0cd1b4d622a0412fc508610f615e98389ab767d39868
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-provision-env-with-ephemeral-namespace:0.1@sha256:bbaf289b345ce4d55572e2d0bfb15729458d3a295e2bf7d8479a6e067ee6d679
rpm-ostree:
  - oci://quay.io/acmiel-rhtap/task-rpm-ostree:0.1@sha256:17dc5779b571812a17188b7645fe9b14a841baa640d195636e4edb474de2eb29
  - oci://quay.io/acmiel-test/tekton-catalog/task-rpm-ostree:0.1@sha256:fc954fdd9eb761c603aed1256c1aa0378c6aaf3ce087bd70f67cfea18a725acf
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-rpm-ostree:0.1@sha256:631ca5decadd324147335440e9bf9985ab944df1cbdae117a42dbf7e8ccd35fd
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-rpm-ostree:0.1@sha256:67594ced8ab79831921d74adaa416afb2d81d576f0f4075aa5a564bd1f11512f
s2i-java:
  - oci://quay.io/acmiel-rhtap/task-s2i-java:0.1@sha256:d4d773fce84e659d8925040d5008805a9448bd3a2a776bf35fb2a771383884da
  - oci://quay.io/acmiel-test/tekton-catalog/task-s2i-java:0.1@sha256:f8f1f93b174850a66be0214b900267041e6a543a1f9434e69f1a94c421cc4af2
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-s2i-java:0.1@sha256:83e5e4383f9c359e3d47944b53ab1d0b99f797fdf3fcc63de671e936b5082cd6
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-s2i-java:0.1@sha256:d68e5540cefbe211cf00ff1339da21197d1ab274abfbf1fc21e745f2ea19d209
s2i-nodejs:
  - oci://quay.io/acmiel-rhtap/task-s2i-nodejs:0.1@sha256:df105a3ea97df9a92059f9b32044b14d635150757bc9e236294374d880a6d898
  - oci://quay.io/acmiel-test/tekton-catalog/task-s2i-nodejs:0.1@sha256:8318600704bc43fdced3d9885c0cb49297cd4b801e1925c35b598b9f4e072cae
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-s2i-nodejs:0.1@sha256:9dc3df4bb559f9dacbe14c0de802b091b81b30fae29ad580b374f47e3f8b318d
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-s2i-nodejs:0.1@sha256:8216279fabe3b4c704109241a365f97f99257e916dd2f7f5f5f2a8e0f6ee98c1
sanity-inspect-image:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sanity-inspect-image:0.1@sha256:b9ad0ed56be21c9e3c8e2e636275f92d887e57681c718cd36f117eb6fa547824
sanity-label-check:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sanity-label-check:0.1@sha256:dd49667be76c81264a7fb28e3b43f72c527507e5691720c6262575255cb60689
sast-go:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sast-go:0.1@sha256:fb3ee7e051c11ff688e5c4d7ed682dacd013d7c37c204869a3fcff9d03da200d
sast-java-sec-check:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sast-java-sec-check:0.1@sha256:75d28da4b817885309bb8f71682e75cf9fbb2d4f0ed7988a94b4aa29dd458bd5
sast-snyk-check:
  - oci://quay.io/acmiel-rhtap/task-sast-snyk-check:0.1@sha256:df0665622845b670daa91748efa4722e8ce94b2083fafc00f0e15c1a259d6899
  - oci://quay.io/acmiel-test/tekton-catalog/task-sast-snyk-check:0.1@sha256:933c90a05a9ef8d0184959e63b7e6811d34a756736898a18f136586ce6f17441
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sast-snyk-check:0.1@sha256:242acc527a06a11fac9dd6524467f62f3a086c186c5f885973e5780a04d4289c
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sast-snyk-check:0.1@sha256:b3d2d07394ff983d5f2578c294cd8c4e9428fecc801495feeb929d932c10f740
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sast-snyk-check:0.1@sha256:1d77f84075af5d7649a689a2695f2a8ee19aef3df4e4fc3bd4cfdd0ccda402c8
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sast-snyk-check:0.1@sha256:fa722fdf4b82e5e856a2a43227262762c40070746d97c2b36c130870802ed0e3
sast-snyk-check-oci-ta:
  - oci://quay.io/acmiel-rhtap/task-sast-snyk-check-oci-ta:0.1@sha256:e10963a266c24642b3074befa6f59ab8827ed75d830155954b21dade5d32f1b3
  - oci://quay.io/acmiel-test/tekton-catalog/task-sast-snyk-check-oci-ta:0.1@sha256:84ec71ef48cd953d9f30094f469ef9fbf68845ba0bc373af446a3ff5dddfa668
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sast-snyk-check-oci-ta:0.1@sha256:f52736be6b2ffe6d22d400eb8ff3a4ec165eabf6ae071b48f1e1013d0d179b71
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sast-snyk-check-oci-ta:0.1@sha256:9ec1e2dea3dad0af7f84858eb5b177f1a7244a2bf71e625a429d44ff5a9359ce
sbom-json-check:
  - oci://quay.io/acmiel-rhtap/task-sbom-json-check:0.1@sha256:90bf0a333feb3e161c2745d11e75e9788c44458ed0fcc128f692cc38e29d46d3
  - oci://quay.io/acmiel-test/tekton-catalog/task-sbom-json-check:0.1@sha256:8a10796b57ca5c8bf1c0cf918008b1bbec50abc0640c3f84e98de63563573342
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sbom-json-check:0.1@sha256:f9cc253c3a07594bfb51e09c78b46598591cb353e19b16ef514f8312a8b0bada
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sbom-json-check:0.1@sha256:dbd467a0507cff1981d3c98f683339feaab1b387c5b5fbf1ff957e9be2e27027
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sbom-json-check:0.1@sha256:e68efb23e98d580522ef4763da42434a31c28059502c8244be143ff2b20e657d
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-sbom-json-check:0.1@sha256:83441b9688d6921c832e7424c446fdfd4e62ee844dfe4000b97fa2f1726ecd42
show-sbom:
  - oci://quay.io/acmiel-rhtap/task-show-sbom:0.1@sha256:41487bef5cdecfe2d0a05dff66359d88bb8506fa1a80188d7d48359f1e5c4b1f
  - oci://quay.io/acmiel-test/tekton-catalog/task-show-sbom:0.1@sha256:afcafe62cc027d70815c43ffe977c7029aaf3996f663d34db93a6e8f3a39c4c0
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-show-sbom:0.1@sha256:1f1504c5d8b135864111a993ac6f9ab1212907fa0c609223714cdd7bd825e2ca
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-show-sbom:0.1@sha256:1f90faefa39c2e4965793c1d8321e7d5d99a6c941276a9094a4e0d483a598fca
show-sbom-rhdh:
  - oci://quay.io/acmiel-rhtap/task-show-sbom-rhdh:0.1@sha256:0831cdbc66a1ddc64df050fd849340ae81214260b306bc586e353da28481d224
  - oci://quay.io/acmiel-test/tekton-catalog/task-show-sbom-rhdh:0.1@sha256:a2ac54a055779b8063e42e131863456e0c4f0958696ccfa65593af754f94de26
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-show-sbom-rhdh:0.1@sha256:b9be5584d3d9d7ade254f2b4d0bf9a3d1938f226e803d2644ab0b67c3c33ec6a
slack-webhook-notification:
  - oci://quay.io/acmiel-rhtap/task-slack-webhook-notification:0.1@sha256:bac56fe324df36bf49472b82e3e92430664d9adb5a36d79c31a304bb5ae40497
  - oci://quay.io/acmiel-test/tekton-catalog/task-slack-webhook-notification:0.1@sha256:4bc661d7342b3dee95573e9e9cf986e3ecfcc859625b5bac510ce434875476a9
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-slack-webhook-notification:0.1@sha256:3fec4fc12bad3c694645adf00a454e7c0efca271a1ad4c431c1f2c7171185140
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-slack-webhook-notification:0.1@sha256:3e22352fd1050a82c5e629762a1704b46fd3e86a6aa01f6404e6c5ac55323443
source-build:
  - oci://quay.io/acmiel-rhtap/task-source-build:0.1@sha256:d866e57158f438cca97d6a27d83e825c83d65b1532759d3a061ebcbb823d6b31
  - oci://quay.io/acmiel-test/tekton-catalog/task-source-build:0.1@sha256:c3d8f6123c411d47c049353f1b928135933495a257853b38a263a743772a9f03
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-source-build:0.1@sha256:1a976a35adee9163e455d0c5aee5d9bf9cb3c6a770656ae347558f8c54977709
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-source-build:0.1@sha256:1f62eaf64a188fcf61f808ad78a15ebf9a8f7f51c644266ad195718b6a2dd372
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-source-build:0.1@sha256:2d39df1d3aa17fad022ded5721bd12f4ed78d27040c9cd22395ebd3a2cdaf465
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-source-build:0.1@sha256:90dc9c66eb0123b5e5ff8a1b8c3891e91f0e952899e427eeca79b635fe81a348
source-build-oci-ta:
  - oci://quay.io/acmiel-rhtap/task-source-build-oci-ta:0.1@sha256:520bcb6d677b8505f70db9cbb7c0c44aa966734959912b7212b24bd2098ce90a
  - oci://quay.io/acmiel-test/tekton-catalog/task-source-build-oci-ta:0.1@sha256:027317402e1b9131daed420b14f55acac897792cf47d42cb5353fd5204e68cea
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-source-build-oci-ta:0.1@sha256:a5b5370cef18ca4dc78855c7bd8dc8cb94b92b73d4bed07a2fa41c26d1f36773
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-source-build-oci-ta:0.1@sha256:ae12b84e22d77cc1112c03b2182dcc14bb7da6a9fdbebab00be57c725d0ef4cf
summary:
  - oci://quay.io/acmiel-rhtap/task-summary:0.1@sha256:2dfc0cb8f1517ca6b5c955fc561e6f51aaeb465dab12ecf7ad6d4f273f758f8b
  - oci://quay.io/acmiel-rhtap/task-summary:0.2@sha256:dcda7aa2be4bb069e1906fc3d6d964343272c37cfece6ac0b539ed55046dcce7
  - oci://quay.io/acmiel-test/tekton-catalog/task-summary:0.1@sha256:8cb7fd57148b32a4167178cf9169a7e49b762034f888ea66d6a8fc3d584ec87b
  - oci://quay.io/acmiel-test/tekton-catalog/task-summary:0.2@sha256:c5c099c5f07c284f6fda511a68059e758f3835d0b8717d31ed2da74b95d20a40
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-summary:0.1@sha256:b0a88232e631c7dafe02a1a3201b4b4f2e03fa7f2dc19f2c8b8b1825fa600adc
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-summary:0.1@sha256:cf875c77e3beb3381969f9e540f1f540b7d28a62b30431b196f5b4d9ef293ecc
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-summary:0.2@sha256:c718319bd57c4f0ab1843cf98d813d0a26a73e0c8ce66218079c3c865508b0fb
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-summary:0.2@sha256:bdf58a8a6bf10482fff841ce6c78c54e87d306bc6aae9515821c436d26daff35
tkn-bundle:
  - oci://quay.io/acmiel-rhtap/task-tkn-bundle:0.1@sha256:e54ac288ae28c55d4f21a36fec958bff7349c887ed81493544de4d7a8116296b
  - oci://quay.io/acmiel-test/tekton-catalog/task-tkn-bundle:0.1@sha256:659d3edd2487f0d0aa2bb058d05c24059f0496735edbc45d78ffd7e35be2dd1a
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-tkn-bundle:0.1@sha256:82fa2140c6ad3dffd5a670cac79589cda5273140ac5e83bd7b4b8ab291997259
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-tkn-bundle:0.1@sha256:bc764be90174b52e4b3af60b64f2aaa9f4e43d8bfa309b29aaa5a9ca8efbbdeb
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-tkn-bundle:0.1@sha256:5604112b21ba2cc5d24c0e100fc8c1ecf64e648d1d45519e482eba6d081d39ca
update-deployment:
  - oci://quay.io/acmiel-rhtap/task-update-deployment:0.1@sha256:3a7d01a20db1d8257dd8c0054e12ed74edd6b8224fb10260408abc266ba56831
  - oci://quay.io/acmiel-test/tekton-catalog/task-update-deployment:0.1@sha256:240a6c2784c8758c5fb07ca4ad67fe4b8f86fa901c3219c7994184c06e880e0f
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-update-deployment:0.1@sha256:ea1d1e3e03ecd71cf988e238dbede47ea45fb101385383dcb8c8066f125685f5
update-infra-deployments:
  - oci://quay.io/acmiel-rhtap/task-update-infra-deployments:0.1@sha256:d2f93f8cbd775c55bec147793f2efbb047abbbd61229cfd31ea1a8ca0a78de3a
  - oci://quay.io/acmiel-test/tekton-catalog/task-update-infra-deployments:0.1@sha256:d68a2f6aa563c50b486cfa95021e19372e4267820fc6ac176b731e48c735ce7a
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-update-infra-deployments:0.1@sha256:c26ff9955cb87b47fe36d386aa24fc94996825bb6f6c7f6ff6f72857ebd4c1cb
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-update-infra-deployments:0.1@sha256:e7c86bded402215305a08ae1a44c4907d455147f67637122b981701be4b1c72e
upload-sbom-to-trustification:
  - oci://quay.io/acmiel-rhtap/task-upload-sbom-to-trustification:0.1@sha256:83147a9ca0e47b62ed52c89f44af38fd1a730139c33a593667114d3b9e4707f1
  - oci://quay.io/acmiel-test/tekton-catalog/task-upload-sbom-to-trustification:0.1@sha256:9259e56c42c046e7d008bdf46e7397f9a667b24362b4cef776da2e247a25e4f6
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-upload-sbom-to-trustification:0.1@sha256:91c034ef61969c2c017324406e264fac2449a26454fe65611278d0b3d4fae886
utils-task:
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-utils-task:0.1@sha256:ae74f2593d5b8f4366ca6a6753e63a3817810a3fce921e0cfe90b65713f7fd2c
verify-enterprise-contract:
  - oci://quay.io/acmiel-rhtap/task-verify-enterprise-contract:0.1@sha256:00b843a4fbf9e44b230004d0459ac11c6838370a40be6c85f6cfad208348d22f
  - oci://quay.io/acmiel-test/tekton-catalog/task-verify-enterprise-contract:0.1@sha256:93ae0ba03790ddaa3fda6db829d12208d6258f012ddd5a16ecaa7187ec77328b
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-verify-enterprise-contract:0.1@sha256:f83f0d96a10de1dec20249ac8373a9c9d1fd1d6277ffff514457b3b2dfc83506
verify-signed-rpms:
  - oci://quay.io/acmiel-rhtap/task-verify-signed-rpms:0.1@sha256:cfa4564170f50af9ba6b0cc2839dd6d3eaad3442abaefa0e1e5deb6758862e10
  - oci://quay.io/acmiel-test/tekton-catalog/task-verify-signed-rpms:0.1@sha256:06d9233be6b0655e94a88d7a23286efcec71fe07e6cc24acd8c993425c60359e
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-verify-signed-rpms:0.1@sha256:2f23673b6d6fb0000f395ae32d2ffa9464824695a0ad7c426f42d6d6eefbfaca
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-verify-signed-rpms:0.1@sha256:9c3bf67c3eac4de04f1191c340aae9f11686d846246f8f9601d14c74ce06641a
  - oci://quay.io/redhat-appstudio-tekton-catalog/task-verify-signed-rpms:0.1@sha256:03576f5f334534f62c15807dcab8fb3cdb0294d1549113d6a4d53410fabeda5e

Note: I didn't rebuild the tasks generated from kustomization.yaml, that's why those are not included

Note2: the redhat-appstudio-tekton-catalog refs are included because I first had to copy the data-acceptable-bundles image to my orgs. The CI takes the existing image and merges it with the new task refs. (⚠️ Note to self: need to copy the data-acceptable-bundles image to konflux-ci/tekton-catalog just before merging)

The data-acceptable-bundles image content is the same in both orgs

$ skopeo inspect --raw docker://quay.io/acmiel-test/tekton-catalog/data-acceptable-bundles:latest | jq '.layers[0].digest'
"sha256:5e27050dbc0999fa71776f24e43702e1937f09fc049bd04c9e896a7cb682a77e"

$ skopeo inspect --raw docker://quay.io/acmiel-rhtap/data-acceptable-bundles:latest | jq '.layers[0].digest'
"sha256:5e27050dbc0999fa71776f24e43702e1937f09fc049bd04c9e896a7cb682a77e"

@chmeliik chmeliik force-pushed the quay-io-konflux-ci branch 2 times, most recently from 3bf6002 to e20ec5e Compare May 29, 2024 08:59
chmeliik added a commit to chmeliik/infra-deployments that referenced this pull request May 29, 2024
STONEBLD-2339

After konflux-ci/build-definitions#1041, the
build-definitions pipelines will need push access to quay.io/konflux-ci.

Run the pipelines in the konflux-ci namespace, where the
appstudio-pipeline service account has quay.io/konflux-ci push access by
default.

Also add redhat-appstudio-tekton-catalog-build-definitions-pull-secret
to the konflux-ci namespace. It is needed for push access to
quay.io/redhat-appstudio-tekton-catalog. Previously, the secret lived in
the tekton-ci namespace (but wasn't defined anywhere).

Signed-off-by: Adam Cmiel <[email protected]>
chmeliik added a commit to chmeliik/infra-deployments that referenced this pull request May 29, 2024
STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>
chmeliik added a commit to chmeliik/infra-deployments that referenced this pull request May 29, 2024
STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>
@chmeliik
Copy link
Contributor Author

Changes required to run the pipelines in the konflux-ci namespace: redhat-appstudio/infra-deployments#3804

chmeliik added a commit to chmeliik/infra-deployments that referenced this pull request May 29, 2024
STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>
@chmeliik chmeliik marked this pull request as ready for review May 29, 2024 15:01
rhtap-qe-bots-2 pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request May 29, 2024
STONEBLD-2339

After konflux-ci/build-definitions#1041, the
build-definitions pipelines will need push access to quay.io/konflux-ci.

Run the pipelines in the konflux-ci namespace, where the
appstudio-pipeline service account has quay.io/konflux-ci push access by
default.

Also add redhat-appstudio-tekton-catalog-build-definitions-pull-secret
to the konflux-ci namespace. It is needed for push access to
quay.io/redhat-appstudio-tekton-catalog. Previously, the secret lived in
the tekton-ci namespace (but wasn't defined anywhere).

Signed-off-by: Adam Cmiel <[email protected]>
rhtap-qe-bots-2 pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request May 29, 2024
STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>
redhat-appstudio-qe-bot pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request May 29, 2024
STONEBLD-2339

After konflux-ci/build-definitions#1041, the
build-definitions pipelines will need push access to quay.io/konflux-ci.

Run the pipelines in the konflux-ci namespace, where the
appstudio-pipeline service account has quay.io/konflux-ci push access by
default.

Also add redhat-appstudio-tekton-catalog-build-definitions-pull-secret
to the konflux-ci namespace. It is needed for push access to
quay.io/redhat-appstudio-tekton-catalog. Previously, the secret lived in
the tekton-ci namespace (but wasn't defined anywhere).

Signed-off-by: Adam Cmiel <[email protected]>
redhat-appstudio-qe-bot pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request May 29, 2024
STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>
chmeliik added a commit to chmeliik/infra-deployments that referenced this pull request May 30, 2024
STONEBLD-2339

After konflux-ci/build-definitions#1041, the
build-definitions pipelines will need push access to quay.io/konflux-ci.

Run the pipelines in the konflux-ci namespace, where the
appstudio-pipeline service account has quay.io/konflux-ci push access by
default.

Also add redhat-appstudio-tekton-catalog-build-definitions-pull-secret
to the konflux-ci namespace. It is needed for push access to
quay.io/redhat-appstudio-tekton-catalog. Previously, the secret lived in
the tekton-ci namespace (but wasn't defined anywhere).

Signed-off-by: Adam Cmiel <[email protected]>
chmeliik added a commit to chmeliik/infra-deployments that referenced this pull request May 30, 2024
STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>
chmeliik added a commit to chmeliik/infra-deployments that referenced this pull request May 30, 2024
STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>
rhtap-qe-bots pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request May 30, 2024
STONEBLD-2339

After konflux-ci/build-definitions#1041, the
build-definitions pipelines will need push access to quay.io/konflux-ci.

Run the pipelines in the konflux-ci namespace, where the
appstudio-pipeline service account has quay.io/konflux-ci push access by
default.

Also add redhat-appstudio-tekton-catalog-build-definitions-pull-secret
to the konflux-ci namespace. It is needed for push access to
quay.io/redhat-appstudio-tekton-catalog. Previously, the secret lived in
the tekton-ci namespace (but wasn't defined anywhere).

Signed-off-by: Adam Cmiel <[email protected]>
rhtap-qe-bots pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request May 30, 2024
STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>
redhat-appstudio-qe-bot pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request May 30, 2024
STONEBLD-2339

After konflux-ci/build-definitions#1041, the
build-definitions pipelines will need push access to quay.io/konflux-ci.

Run the pipelines in the konflux-ci namespace, where the
appstudio-pipeline service account has quay.io/konflux-ci push access by
default.

Also add redhat-appstudio-tekton-catalog-build-definitions-pull-secret
to the konflux-ci namespace. It is needed for push access to
quay.io/redhat-appstudio-tekton-catalog. Previously, the secret lived in
the tekton-ci namespace (but wasn't defined anywhere).

Signed-off-by: Adam Cmiel <[email protected]>
redhat-appstudio-qe-bot pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request May 30, 2024
STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>
.tekton/push.yaml Outdated Show resolved Hide resolved
echo -n "${QUAY_NAMESPACES:-'redhat-appstudio-tekton-catalog konflux-ci/tekton-catalog'}"
)

INPUT_IMAGE=${INPUT_IMAGE:-quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So this image is a bit unusual. We don't build it from scratch every time. Instead, this image gets incremental updates, which means the existing data matters.

When we have a new location for this image, we should "seed" it with some relevant data so it contains the full set of expected data. There are different ways of doing this.

  1. Change the input image to always be the existing one from redhat-appstudio-tekton-catalog. As a follow up PR, we can switch to the new location.
  2. Copy the existing image from redhat-appstudio-tekton-catalog to konflux-ci just before merging this PR.

Thinking about this further, there's still room for deviation between the two images. An alternative is to simply add a skopeo copy command at the end of the script to copy the image from redhat-appstudio-tekton-catalog to konflux-ci. At some point in the future, we just update the script to just maintain the konflux-ci one.

WDYT?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy the existing image from redhat-appstudio-tekton-catalog to konflux-ci just before merging this PR.

👍 This was the plan

Thinking about this further, there's still room for deviation between the two images. An alternative is to simply add a skopeo copy command at the end of the script to copy the image from redhat-appstudio-tekton-catalog to konflux-ci. At some point in the future, we just update the script to just maintain the konflux-ci one.

Good point. I don't think I can skopeo copy at the end of the script (the credentials for pushing to redhat-appstudio-tekton-catalog are in a separate secret, tkn bundle push didn't like multiple quay.io/... auths in a single file). But I can probably skopeo copy in a separate step in the pipeline

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just to note that this script is not part of the CI, we call it as needed when we miss an update to make sure to include it, so we can merge it as is.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh, TBH I didn't realize that we were talking about this script. The same applies to .tekton/scripts/build-acceptable-bundles.sh, so I updated the push pipeline to just skopeo copy the bundle from redhat-appstudio-tekton-catalog to konflux-ci/tekton-catalog

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

echo -n "${QUAY_NAMESPACES:-'redhat-appstudio-tekton-catalog konflux-ci/tekton-catalog'}"
)

INPUT_IMAGE=${INPUT_IMAGE:-quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just to note that this script is not part of the CI, we call it as needed when we miss an update to make sure to include it, so we can merge it as is.

STONEBLD-2339

And stop pushing them to redhat-appstudio-tekton-catalog.

Note that redhat-appstudio-tekton-catalog-build-definitions-pull-secret
is no longer needed for the PR pipeline. The service account that runs
the pipeline has permissions to push to quay.io/konflux-ci already.

Signed-off-by: Adam Cmiel <[email protected]>
STONEBLD-2339

And DO NOT stop pushing them to redhat-appstudio-tekton-catalog. All
existing users have redhat-appstudio-tekton-catalog bundle references in
their PipelineRun files. If we stopped pushing the task bundles there,
users would stop getting updates.

Also update the build-acceptable-bundles task to include both the
redhat-appstudio-tekton-catalog and the konflux-ci/tekton-catalog bundle
references.

Signed-off-by: Adam Cmiel <[email protected]>
STONEBLD-2339

Push the data-acceptable-bundles image to konflux-ci/tekton-catalog.

And DO NOT stop pushing it to redhat-appstudio-tekton-catalog. All the
existing EnterpriseContractPolicies reference
redhat-appstudio-tekton-catalog. If we stopped pushing the
data-acceptable-bundles image there, the acceptable bundles data would
effectively stop getting updated until we manage to update every ECP.

Update the ECP in this repo to use the new location of the bundle image.

Signed-off-by: Adam Cmiel <[email protected]>
STONEBLD-2339

And keep checking redhat-appstudio-tekton-catalog as well. The pipeline
and task repos need to exist in both places.

Signed-off-by: Adam Cmiel <[email protected]>
STONEBLD-2339

Push to quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles.

Collect bundle data from both redhat-appstudio-tekton-catalog and
konflux-ci/tekton-catalog.

Signed-off-by: Adam Cmiel <[email protected]>
redhat-appstudio-qe-bot pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request Jun 3, 2024
STONEBLD-2339

After konflux-ci/build-definitions#1041, the
build-definitions pipelines will need push access to quay.io/konflux-ci.

Run the pipelines in the konflux-ci namespace, where the
appstudio-pipeline service account has quay.io/konflux-ci push access by
default.

Also add redhat-appstudio-tekton-catalog-build-definitions-pull-secret
to the konflux-ci namespace. It is needed for push access to
quay.io/redhat-appstudio-tekton-catalog. Previously, the secret lived in
the tekton-ci namespace (but wasn't defined anywhere).

Signed-off-by: Adam Cmiel <[email protected]>
redhat-appstudio-qe-bot pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request Jun 3, 2024
STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>
rhtap-qe-bots-2 pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request Jun 3, 2024
STONEBLD-2339

After konflux-ci/build-definitions#1041, the
build-definitions pipelines will need push access to quay.io/konflux-ci.

Run the pipelines in the konflux-ci namespace, where the
appstudio-pipeline service account has quay.io/konflux-ci push access by
default.

Also add redhat-appstudio-tekton-catalog-build-definitions-pull-secret
to the konflux-ci namespace. It is needed for push access to
quay.io/redhat-appstudio-tekton-catalog. Previously, the secret lived in
the tekton-ci namespace (but wasn't defined anywhere).

Signed-off-by: Adam Cmiel <[email protected]>
rhtap-qe-bots-2 pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request Jun 3, 2024
STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>
chmeliik added a commit to chmeliik/infra-deployments that referenced this pull request Jun 4, 2024
STONEBLD-2339

After konflux-ci/build-definitions#1041, the
build-definitions pipelines will need push access to quay.io/konflux-ci.

Run the pipelines in the konflux-ci namespace, where the
appstudio-pipeline service account has quay.io/konflux-ci push access by
default.

Also add redhat-appstudio-tekton-catalog-build-definitions-pull-secret
to the konflux-ci namespace. It is needed for push access to
quay.io/redhat-appstudio-tekton-catalog. Previously, the secret lived in
the tekton-ci namespace (but wasn't defined anywhere).

Signed-off-by: Adam Cmiel <[email protected]>
chmeliik added a commit to chmeliik/infra-deployments that referenced this pull request Jun 4, 2024
STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>
rhtap-qe-bots-2 pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request Jun 4, 2024
STONEBLD-2339

After konflux-ci/build-definitions#1041, the
build-definitions pipelines will need push access to quay.io/konflux-ci.

Run the pipelines in the konflux-ci namespace, where the
appstudio-pipeline service account has quay.io/konflux-ci push access by
default.

Also add redhat-appstudio-tekton-catalog-build-definitions-pull-secret
to the konflux-ci namespace. It is needed for push access to
quay.io/redhat-appstudio-tekton-catalog. Previously, the secret lived in
the tekton-ci namespace (but wasn't defined anywhere).

Signed-off-by: Adam Cmiel <[email protected]>
rhtap-qe-bots-2 pushed a commit to redhat-appstudio-qe/infra-deployments that referenced this pull request Jun 4, 2024
STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>
chmeliik added a commit to redhat-appstudio/infra-deployments that referenced this pull request Jun 4, 2024
* Run build-definitions CI in konflux-ci namespace

STONEBLD-2339

After konflux-ci/build-definitions#1041, the
build-definitions pipelines will need push access to quay.io/konflux-ci.

Run the pipelines in the konflux-ci namespace, where the
appstudio-pipeline service account has quay.io/konflux-ci push access by
default.

Also add redhat-appstudio-tekton-catalog-build-definitions-pull-secret
to the konflux-ci namespace. It is needed for push access to
quay.io/redhat-appstudio-tekton-catalog. Previously, the secret lived in
the tekton-ci namespace (but wasn't defined anywhere).

Signed-off-by: Adam Cmiel <[email protected]>

* Prune konflux-ci/pull-request-builds

STONEBLD-2339

And stop pruning redhat-appstudio-tekton-catalog/pull-request-builds.
After konflux-ci/build-definitions#1041, nothing
will be pushed there anymore.

Signed-off-by: Adam Cmiel <[email protected]>

---------

Signed-off-by: Adam Cmiel <[email protected]>
@chmeliik chmeliik force-pushed the quay-io-konflux-ci branch 4 times, most recently from f50b548 to 91dd52c Compare June 4, 2024 14:45
The appstudio-pipeline SA in the konflux-ci namespace does not have the
required permissions. The validation fails with

    Error from server (Forbidden): error when retrieving current configuration of:
    Resource: "tekton.dev/v1, Resource=tasks", GroupVersionKind: "tekton.dev/v1, Kind=Task"
    Name: "acs-deploy-check", Namespace: "konflux-ci"
    from server for: "task/acs-deploy-check/0.1/acs-deploy-check.yaml": tasks.tekton.dev "acs-deploy-check" is forbidden: User "system:serviceaccount:konflux-ci:appstudio-pipeline" cannot get resource "tasks" in API group "tekton.dev" in the namespace "konflux-ci"

Signed-off-by: Adam Cmiel <[email protected]>
Extract the metadata with jq/yq instead.

oc apply requires permissions that the CI shouldn't need.

Signed-off-by: Adam Cmiel <[email protected]>
Use the quay-push-secret-konflux-ci secret.

Signed-off-by: Adam Cmiel <[email protected]>
@chmeliik chmeliik added this pull request to the merge queue Jun 4, 2024
@chmeliik
Copy link
Contributor Author

chmeliik commented Jun 4, 2024

⚠️ Note to self: need to copy the data-acceptable-bundles image to konflux-ci/tekton-catalog just before merging)

Did that: https://quay.io/repository/konflux-ci/tekton-catalog/data-acceptable-bundles?tab=tags

Merged via the queue into konflux-ci:main with commit 6c7207d Jun 4, 2024
2 checks passed
@chmeliik chmeliik deleted the quay-io-konflux-ci branch June 4, 2024 15:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants