[release-v1.16] Sync Konflux configurations (#1376)

Co-authored-by: serverless-qe <[email protected]>
openshift-knative · Dec 17, 2024 · f1bc15b · f1bc15b
1 parent e48e623
commit f1bc15b
Show file tree

Hide file tree

Showing 46 changed files with 166 additions and 44 deletions.
diff --git a/.tekton/docker-build.yaml b/.tekton/docker-build.yaml
@@ -429,6 +429,56 @@ spec:
       operator: in
       values:
       - "false"
+  - name: sast-shell-check
+    params:
+    - name: image-digest
+      value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+    - name: image-url
+      value: $(tasks.build-image-index.results.IMAGE_URL)
+    - name: SOURCE_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+    - name: CACHI2_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+    runAfter:
+    - build-image-index
+    taskRef:
+      params:
+      - name: name
+        value: sast-shell-check-oci-ta
+      - name: bundle
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:ac6a35e4143a68f841e363da3f21f2123de9f3acf76596f79ecb60c501eed408
+      - name: kind
+        value: task
+      resolver: bundles
+    when:
+    - input: $(params.skip-checks)
+      operator: in
+      values:
+      - "false"
+  - name: sast-unicode-check
+    params:
+    - name: image-url
+      value: $(tasks.build-image-index.results.IMAGE_URL)
+    - name: SOURCE_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+    - name: CACHI2_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+    runAfter:
+    - build-image-index
+    taskRef:
+      params:
+      - name: name
+        value: sast-shell-check-oci-ta
+      - name: bundle
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:ac6a35e4143a68f841e363da3f21f2123de9f3acf76596f79ecb60c501eed408
+      - name: kind
+        value: task
+      resolver: bundles
+    when:
+    - input: $(params.skip-checks)
+      operator: in
+      values:
+      - "false"
   - name: push-dockerfile
     params:
     - name: IMAGE

diff --git a/.tekton/docker-java-build.yaml b/.tekton/docker-java-build.yaml
@@ -507,6 +507,56 @@ spec:
       operator: in
       values:
       - "false"
+  - name: sast-shell-check
+    params:
+    - name: image-digest
+      value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+    - name: image-url
+      value: $(tasks.build-image-index.results.IMAGE_URL)
+    - name: SOURCE_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+    - name: CACHI2_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+    runAfter:
+    - build-image-index
+    taskRef:
+      params:
+      - name: name
+        value: sast-shell-check-oci-ta
+      - name: bundle
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:ac6a35e4143a68f841e363da3f21f2123de9f3acf76596f79ecb60c501eed408
+      - name: kind
+        value: task
+      resolver: bundles
+    when:
+    - input: $(params.skip-checks)
+      operator: in
+      values:
+      - "false"
+  - name: sast-unicode-check
+    params:
+    - name: image-url
+      value: $(tasks.build-image-index.results.IMAGE_URL)
+    - name: SOURCE_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+    - name: CACHI2_ARTIFACT
+      value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+    runAfter:
+    - build-image-index
+    taskRef:
+      params:
+      - name: name
+        value: sast-shell-check-oci-ta
+      - name: bundle
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:ac6a35e4143a68f841e363da3f21f2123de9f3acf76596f79ecb60c501eed408
+      - name: kind
+        value: task
+      resolver: bundles
+    when:
+    - input: $(params.skip-checks)
+      operator: in
+      values:
+      - "false"
   - name: push-dockerfile
     params:
     - name: IMAGE

diff --git a/.tekton/kn-ekb-dispatcher-116-pull-request.yaml b/.tekton/kn-ekb-dispatcher-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/static-images/dispatcher/hermetic/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-ekb-dispatcher-116-push.yaml b/.tekton/kn-ekb-dispatcher-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/static-images/dispatcher/hermetic/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-ekb-event-display-116-pull-request.yaml b/.tekton/kn-ekb-event-display-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/event_display/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-ekb-event-display-116-push.yaml b/.tekton/kn-ekb-event-display-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/event_display/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-ekb-heartbeats-116-pull-request.yaml b/.tekton/kn-ekb-heartbeats-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/heartbeats/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-ekb-heartbeats-116-push.yaml b/.tekton/kn-ekb-heartbeats-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/heartbeats/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-ekb-kafka-controller-116-pull-request.yaml b/.tekton/kn-ekb-kafka-controller-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/kafka-controller/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-ekb-kafka-controller-116-push.yaml b/.tekton/kn-ekb-kafka-controller-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/kafka-controller/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-ekb-migrate-116-pull-request.yaml b/.tekton/kn-ekb-migrate-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/migrate/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-ekb-migrate-116-push.yaml b/.tekton/kn-ekb-migrate-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/migrate/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-ekb-post-install-116-pull-request.yaml b/.tekton/kn-ekb-post-install-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-images/post-install/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-ekb-post-install-116-push.yaml b/.tekton/kn-ekb-post-install-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-images/post-install/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-ekb-receiver-116-pull-request.yaml b/.tekton/kn-ekb-receiver-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/static-images/receiver/hermetic/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-ekb-receiver-116-push.yaml b/.tekton/kn-ekb-receiver-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/static-images/receiver/hermetic/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-ekb-test-committed-offset-116-pull-request.yaml b/.tekton/kn-ekb-test-committed-offset-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-test-images/committed-offset/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic

diff --git a/.tekton/kn-ekb-test-committed-offset-116-push.yaml b/.tekton/kn-ekb-test-committed-offset-116-push.yaml
@@ -20,11 +20,11 @@ spec:
       value: openshift/ci-operator/knative-test-images/committed-offset/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic
@@ -35,6 +35,7 @@ spec:
       value: '{{revision}}'
     - name: additional-tags
       value:
+        - $(context.pipelineRun.uid)-{{revision}}
         - 1.36.0
         - latest
   pipelineRef:

diff --git a/.tekton/kn-ekb-test-consumer-group-lag-provider-test-116-pull-request.yaml b/.tekton/kn-ekb-test-consumer-group-lag-provider-test-116-pull-request.yaml
@@ -21,11 +21,11 @@ spec:
       value: openshift/ci-operator/knative-test-images/consumer-group-lag-provider-test/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.36.0
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi8/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi8/openjdk-21-runtime
+        - VERSION=1.36.0
     - name: git-url
       value: '{{source_url}}'
     - name: hermetic