STONEBLD-2339

And stop pushing it to quay.io/redhat-appstudio.

Also, when pushing to konflux-ci/pull-request-builds, tag the image with
appstudio-utils-* rather than build-definitions-utils-* (consistency).

Signed-off-by: Adam Cmiel <[email protected]>

STONEBLD-2339

The script has some special logic for pushing bundles to
quay.io/redhat-appstudio-tekton-catalog. Make the special logic apply to
quay.io/konflux-ci/tekton-catalog as well.

Also rename MY_QUAY_USER to QUAY_NAMESPACE to better reflect the use
cases.

Signed-off-by: Adam Cmiel <[email protected]>

STONEBLD-2339

And stop pushing them to redhat-appstudio-tekton-catalog.

Note that redhat-appstudio-tekton-catalog-build-definitions-pull-secret
is no longer needed for the PR pipeline. The service account that runs
the pipeline has permissions to push to quay.io/konflux-ci already.

Signed-off-by: Adam Cmiel <[email protected]>

STONEBLD-2339

And DO NOT stop pushing them to redhat-appstudio-tekton-catalog. All
existing users have redhat-appstudio-tekton-catalog bundle references in
their PipelineRun files. If we stopped pushing the task bundles there,
users would stop getting updates.

Also update the build-acceptable-bundles task to include both the
redhat-appstudio-tekton-catalog and the konflux-ci/tekton-catalog bundle
references.

Signed-off-by: Adam Cmiel <[email protected]>

STONEBLD-2339

Push the data-acceptable-bundles image to konflux-ci/tekton-catalog.

And DO NOT stop pushing it to redhat-appstudio-tekton-catalog. All the
existing EnterpriseContractPolicies reference
redhat-appstudio-tekton-catalog. If we stopped pushing the
data-acceptable-bundles image there, the acceptable bundles data would
effectively stop getting updated until we manage to update every ECP.

Update the ECP in this repo to use the new location of the bundle image.

Signed-off-by: Adam Cmiel <[email protected]>

STONEBLD-2339

And keep checking redhat-appstudio-tekton-catalog as well. The pipeline
and task repos need to exist in both places.

Signed-off-by: Adam Cmiel <[email protected]>

STONEBLD-2339

Push to quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles.

Collect bundle data from both redhat-appstudio-tekton-catalog and
konflux-ci/tekton-catalog.

Signed-off-by: Adam Cmiel <[email protected]>

Signed-off-by: Adam Cmiel <[email protected]>

The appstudio-pipeline SA in the konflux-ci namespace does not have the
required permissions. The validation fails with

    Error from server (Forbidden): error when retrieving current configuration of:
    Resource: "tekton.dev/v1, Resource=tasks", GroupVersionKind: "tekton.dev/v1, Kind=Task"
    Name: "acs-deploy-check", Namespace: "konflux-ci"
    from server for: "task/acs-deploy-check/0.1/acs-deploy-check.yaml": tasks.tekton.dev "acs-deploy-check" is forbidden: User "system:serviceaccount:konflux-ci:appstudio-pipeline" cannot get resource "tasks" in API group "tekton.dev" in the namespace "konflux-ci"

Signed-off-by: Adam Cmiel <[email protected]>

Extract the metadata with jq/yq instead.

oc apply requires permissions that the CI shouldn't need.

Signed-off-by: Adam Cmiel <[email protected]>

Use the quay-push-secret-konflux-ci secret.

Signed-off-by: Adam Cmiel <[email protected]>