Merge pull request #96 from securesign/konflux-sa-migration-tuf-tool

Konflux build pipeline service account migration

Author: tommyd450

.tekton/tuf-tool-pull-request.yaml

@@ -7,8 +7,12 @@ metadata:
     build.appstudio.redhat.com/pull_request_number: '{{pull_request_number}}'
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
-    pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch == "develop" &&
-      ( "Dockerfile.rh".pathChanged() || ".tekton/tuf-tool-pull-request.yaml".pathChanged() || "deny.toml".pathChanged() || "Cargo.toml".pathChanged() || "Cargo.lock".pathChanged() || "tough/***".pathChanged() || "tuftool/***".pathChanged() || "Makefile".pathChanged() || "trigger-konflux-builds.txt".pathChanged() || "rpms.lock.yaml".pathChanged() )
+    pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch
+      == "develop" && ( "Dockerfile.rh".pathChanged() || ".tekton/tuf-tool-pull-request.yaml".pathChanged()
+      || "deny.toml".pathChanged() || "Cargo.toml".pathChanged() || "Cargo.lock".pathChanged()
+      || "tough/***".pathChanged() || "tuftool/***".pathChanged() || "Makefile".pathChanged()
+      || "trigger-konflux-builds.txt".pathChanged() || "rpms.lock.yaml".pathChanged()
+      )
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: tough
@@ -34,18 +38,19 @@ spec:
     value: '[{"type": "cargo", "path": "."}, {"type": "rpm", "path": "."}]'
   - name: hermetic
     value: "true"
-  - name: dev-package-managers 
+  - name: dev-package-managers
     value: "true"
   pipelineRef:
-    resolver: git
     params:
-      - name: url
-        value: 'https://github.com/securesign/pipelines.git'
-      - name: revision
-        value: 'main'
-      - name: pathInRepo
-        value: 'pipelines/docker-build-oci-ta.yaml'
-  taskRunTemplate: {}
+    - name: url
+      value: https://github.com/securesign/pipelines.git
+    - name: revision
+      value: main
+    - name: pathInRepo
+      value: pipelines/docker-build-oci-ta.yaml
+    resolver: git
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-tuf-tool
   workspaces:
   - name: git-auth
     secret:

.tekton/tuf-tool-push.yaml

@@ -6,8 +6,12 @@ metadata:
     build.appstudio.redhat.com/commit_sha: '{{revision}}'
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
-    pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch == "develop" &&
-      ( "Dockerfile.rh".pathChanged() || ".tekton/tuf-tool-push.yaml".pathChanged() || "deny.toml".pathChanged() || "Cargo.toml".pathChanged() || "Cargo.lock".pathChanged() || "tough/***".pathChanged() || "tuftool/***".pathChanged() || "Makefile".pathChanged() || "trigger-konflux-builds.txt".pathChanged() || "rpms.lock.yaml".pathChanged() )
+    pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch
+      == "develop" && ( "Dockerfile.rh".pathChanged() || ".tekton/tuf-tool-push.yaml".pathChanged()
+      || "deny.toml".pathChanged() || "Cargo.toml".pathChanged() || "Cargo.lock".pathChanged()
+      || "tough/***".pathChanged() || "tuftool/***".pathChanged() || "Makefile".pathChanged()
+      || "trigger-konflux-builds.txt".pathChanged() || "rpms.lock.yaml".pathChanged()
+      )
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: tough
@@ -31,18 +35,19 @@ spec:
     value: '[{"type": "cargo", "path": "."}, {"type": "rpm", "path": "."}]'
   - name: hermetic
     value: "true"
-  - name: dev-package-managers 
+  - name: dev-package-managers
     value: "true"
   pipelineRef:
-    resolver: git
     params:
-      - name: url
-        value: 'https://github.com/securesign/pipelines.git'
-      - name: revision
-        value: 'main'
-      - name: pathInRepo
-        value: 'pipelines/docker-build-oci-ta.yaml'
-  taskRunTemplate: {}
+    - name: url
+      value: https://github.com/securesign/pipelines.git
+    - name: revision
+      value: main
+    - name: pathInRepo
+      value: pipelines/docker-build-oci-ta.yaml
+    resolver: git
+  taskRunTemplate:
+    serviceAccountName: build-pipeline-tuf-tool
   workspaces:
   - name: git-auth
     secret: