Skip to content

Commit 0258dac

Browse files
[release-v1.16] Update Konflux references
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
1 parent 48a7eb8 commit 0258dac

1 file changed

Lines changed: 46 additions & 46 deletions

File tree

.tekton/docker-build.yaml

Lines changed: 46 additions & 46 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
apiVersion: tekton.dev/v1
22
kind: Pipeline
33
metadata:
4-
creationTimestamp: null
4+
creationTimestamp:
55
labels:
66
pipelines.openshift.io/runtime: generic
77
pipelines.openshift.io/strategy: docker
@@ -13,28 +13,13 @@ spec:
1313
1414
_Uses `buildah` to create a multi-platform container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. This pipeline requires that the [multi platform controller](https://github.com/konflux-ci/multi-platform-controller) is deployed and configured on your Konflux instance. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.
1515
This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta?tab=tags)_
16-
finally:
17-
- name: show-sbom
18-
params:
19-
- name: IMAGE_URL
20-
value: $(tasks.build-image-index.results.IMAGE_URL)
21-
taskRef:
22-
params:
23-
- name: name
24-
value: show-sbom
25-
- name: bundle
26-
value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:beb0616db051952b4b861dd8c3e00fa1c0eccbd926feddf71194d3bb3ace9ce7
27-
- name: kind
28-
value: task
29-
resolver: bundles
3016
params:
3117
- default:
3218
- linux/x86_64
3319
- linux/arm64
3420
- linux/ppc64le
3521
- linux/s390x
36-
description: List of platforms to build the container images on. The available
37-
set of values is determined by the configuration of the multi-platform-controller.
22+
description: List of platforms to build the container images on. The available set of values is determined by the configuration of the multi-platform-controller.
3823
name: build-platforms
3924
type: array
4025
- default: --all-projects --org=3e1a4cca-ebfb-495f-b64c-3cc960d566b4 --exclude=test*,vendor,third_party
@@ -46,8 +31,7 @@ spec:
4631
name: build-source-image
4732
type: string
4833
- default: "false"
49-
description: 'Enable in-development package managers. WARNING: the behavior may
50-
change at any time without notice. Use at your own risk.'
34+
description: 'Enable in-development package managers. WARNING: the behavior may change at any time without notice. Use at your own risk.'
5135
name: prefetch-input-dev-package-managers
5236
- default: []
5337
description: Additional image tags
@@ -64,13 +48,11 @@ spec:
6448
name: output-image
6549
type: string
6650
- default: .
67-
description: Path to the source code of an application's component from where
68-
to build image.
51+
description: Path to the source code of an application's component from where to build image.
6952
name: path-context
7053
type: string
7154
- default: Dockerfile
72-
description: Path to the Dockerfile inside the context specified by parameter
73-
path-context
55+
description: Path to the Dockerfile inside the context specified by parameter path-context
7456
name: dockerfile
7557
type: string
7658
- default: "false"
@@ -90,8 +72,7 @@ spec:
9072
name: prefetch-input
9173
type: string
9274
- default: ""
93-
description: Image tag expiration time, time values could be something like 1h,
94-
2d, 3w for hours, days, and weeks, respectively.
75+
description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
9576
name: image-expires-after
9677
type: string
9778
- default: "true"
@@ -107,10 +88,25 @@ spec:
10788
name: build-args-file
10889
type: string
10990
- default: "false"
110-
description: Whether to enable privileged mode, should be used only with remote
111-
VMs
91+
description: Whether to enable privileged mode, should be used only with remote VMs
11292
name: privileged-nested
11393
type: string
94+
- name: source-date-epoch
95+
type: string
96+
default: ''
97+
description: Sets the image created time and the SOURCE_DATE_EPOCH build argument. On its own, it does not change file timestamps inside the layers (set rewrite-timestamp to "true" for that). Leave empty to keep the actual build time.
98+
- name: rewrite-timestamp
99+
type: string
100+
default: 'false'
101+
description: When "true", clamp file modification times in the image layers to at most source-date-epoch. Does nothing unless source-date-epoch is set.
102+
- name: omit-history
103+
type: string
104+
default: 'false'
105+
description: When "true", omit the build history (history timestamps, layer metadata, etc.) from the resulting image.
106+
- name: enable-package-registry-proxy
107+
default: 'true'
108+
description: Use the package registry proxy when prefetching dependencies
109+
type: string
114110
results:
115111
- description: ""
116112
name: IMAGE_URL
@@ -144,7 +140,7 @@ spec:
144140
- name: name
145141
value: sast-snyk-check-oci-ta
146142
- name: bundle
147-
value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9
143+
value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.5@sha256:b78e9c05c5126613eddee53f2f3534a9b86bfca17d903599f2fa465b7938e241
148144
- name: kind
149145
value: task
150146
resolver: bundles
@@ -165,14 +161,16 @@ spec:
165161
value: $(params.output-image).prefetch
166162
- name: ociArtifactExpiresAfter
167163
value: $(params.image-expires-after)
164+
- name: enable-package-registry-proxy
165+
value: $(params.enable-package-registry-proxy)
168166
runAfter:
169167
- clone-repository
170168
taskRef:
171169
params:
172170
- name: name
173171
value: prefetch-dependencies-oci-ta
174172
- name: bundle
175-
value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd
173+
value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.9.0@sha256:4486aaa69770d6b27c59c8df7d82e450d95dab2302aef9b8a345f2ac0fabbab0
176174
- name: kind
177175
value: task
178176
resolver: bundles
@@ -196,7 +194,7 @@ spec:
196194
- name: name
197195
value: apply-tags
198196
- name: bundle
199-
value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02
197+
value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:f89a59d4d043fd3c545a9cb5e89b53396f1e04017c6f68da1e50626715c2d423
200198
- name: kind
201199
value: task
202200
resolver: bundles
@@ -213,7 +211,7 @@ spec:
213211
- name: name
214212
value: init
215213
- name: bundle
216-
value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5
214+
value: quay.io/konflux-ci/tekton-catalog/task-init:0.4.3@sha256:4dbbfedc4edb21884fa2ad84521408d2fad090d4d34eb6c555992f8444eba40d
217215
- name: kind
218216
value: task
219217
resolver: bundles
@@ -234,7 +232,7 @@ spec:
234232
- name: name
235233
value: git-clone-oci-ta
236234
- name: bundle
237-
value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf
235+
value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.2.5@sha256:437e4a29b0674420af96e497b6492d0408e59b97f98a35b84d2d32016503c2a0
238236
- name: kind
239237
value: task
240238
resolver: bundles
@@ -280,14 +278,20 @@ spec:
280278
value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
281279
- name: IMAGE_APPEND_PLATFORM
282280
value: "true"
281+
- name: SOURCE_DATE_EPOCH
282+
value: $(params.source-date-epoch)
283+
- name: REWRITE_TIMESTAMP
284+
value: $(params.rewrite-timestamp)
285+
- name: OMIT_HISTORY
286+
value: $(params.omit-history)
283287
runAfter:
284288
- prefetch-dependencies
285289
taskRef:
286290
params:
287291
- name: name
288292
value: buildah-remote-oci-ta
289293
- name: bundle
290-
value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce
294+
value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.12.0@sha256:227cf5b487cd2221301ea2fccf2334f41c0f5b21edb04696609245520b2d2691
291295
- name: kind
292296
value: task
293297
resolver: bundles
@@ -300,10 +304,6 @@ spec:
300304
params:
301305
- name: IMAGE
302306
value: $(params.output-image)
303-
- name: COMMIT_SHA
304-
value: $(tasks.clone-repository.results.commit)
305-
- name: IMAGE_EXPIRES_AFTER
306-
value: $(params.image-expires-after)
307307
- name: ALWAYS_BUILD_INDEX
308308
value: $(params.build-image-index)
309309
- name: IMAGES
@@ -316,7 +316,7 @@ spec:
316316
- name: name
317317
value: build-image-index
318318
- name: bundle
319-
value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e
319+
value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3.1@sha256:714a86d454203804fe14e422b4ba8d775d9ec19e5b7922cedd55ef93a3bc9166
320320
- name: kind
321321
value: task
322322
resolver: bundles
@@ -342,7 +342,7 @@ spec:
342342
- name: name
343343
value: source-build-oci-ta
344344
- name: bundle
345-
value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d
345+
value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:c7ecd1e518007e31e19188333a17dd3558e222ce2e3b2a484a1e59ec069799cf
346346
- name: kind
347347
value: task
348348
resolver: bundles
@@ -368,7 +368,7 @@ spec:
368368
- name: name
369369
value: deprecated-image-check
370370
- name: bundle
371-
value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:c49732039f105de809840be396f83ead8c46f6a6948e1335b76d37e9eb469574
371+
value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872
372372
- name: kind
373373
value: task
374374
resolver: bundles
@@ -390,7 +390,7 @@ spec:
390390
- name: name
391391
value: clair-scan
392392
- name: bundle
393-
value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:076d5cde62b55bbfcdda2b4782392256bbda5ad38f839013b4330b3aba70a973
393+
value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3.2@sha256:f5b4415db9ac1fba3e11d993a617e0b275d1f0ed2fc669b12c400ed848c39174
394394
- name: kind
395395
value: task
396396
resolver: bundles
@@ -410,7 +410,7 @@ spec:
410410
- name: name
411411
value: ecosystem-cert-preflight-checks
412412
- name: bundle
413-
value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249
413+
value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:4619769705d4999e129b779d7699d89d33c47f7ab80d73ad6e3dcd8a6a4e43a7
414414
- name: kind
415415
value: task
416416
resolver: bundles
@@ -437,7 +437,7 @@ spec:
437437
- name: name
438438
value: clamav-scan
439439
- name: bundle
440-
value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:b0bd59748cda4a7abf311e4f448e6c1d00c6b6d8c0ecc1c2eb33e08dc0e0b802
440+
value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3.1@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217
441441
- name: kind
442442
value: task
443443
resolver: bundles
@@ -463,7 +463,7 @@ spec:
463463
- name: name
464464
value: sast-shell-check-oci-ta
465465
- name: bundle
466-
value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:bf7bdde00b7212f730c1356672290af6f38d070da2c8a316987b5c32fd49e0b9
466+
value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:beb05ae2fad733783b3b17e05871e0eaf527a07c904cf3fb2cb551025007eec1
467467
- name: kind
468468
value: task
469469
resolver: bundles
@@ -489,7 +489,7 @@ spec:
489489
- name: name
490490
value: sast-unicode-check-oci-ta
491491
- name: bundle
492-
value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3@sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651
492+
value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:d09f717cb84f0699a531773bc498745deef2c006a81918aa73b3be6d2f4778bd
493493
- name: kind
494494
value: task
495495
resolver: bundles
@@ -517,7 +517,7 @@ spec:
517517
- name: name
518518
value: push-dockerfile-oci-ta
519519
- name: bundle
520-
value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430
520+
value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3.1@sha256:ee041e2bdf5638faaca60baa171c3e13927097a0e69ed2172ccf1de5e5ee711a
521521
- name: kind
522522
value: task
523523
resolver: bundles

0 commit comments

Comments
 (0)