Uploaded image for project: 'Red Hat OpenShift Control Planes'
  1. Red Hat OpenShift Control Planes
  2. CNTRLPLANE-2770

Update Konflux Tekton pipeline task references (CI infrastructure)

XMLWordPrintable

    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • None

      Summary

      Update Konflux CI pipeline Tekton task references in the hypershift-oadp-plugin repository. This updates 20 task bundle digests/versions across both pull-request and push pipeline definitions.

      Dependency Information

      _ _Type*: CI infrastructure (Tekton task bundles)
      _ _Location*: .tekton/oadp-hypershift-oadp-plugin-main-pull-request.yaml, .tekton/oadp-hypershift-oadp-plugin-main-push.yaml
      _ _Source*: quay.io/konflux-ci/tekton-catalog/ task bundles
      _ _PR*: PR #98

      Changes

      Tasks with version bumps (breaking changes possible)

      Task Old Version New Version Migration Notes
      task-init 0.2 0.3 Removes image-url, rebuild, skip-checks params and build result. Done automatically.
      task-buildah-remote-oci-ta 0.4 0.8 Backwards-compatible. Base image changed to konflux-ci/task-runner, buildah bumped 1.41.5 to 1.42.2.
      task-build-image-index 0.1 0.2 Validates platform image format consistency. Requires same BUILDAH_FORMAT across pipeline.
      task-apply-tags 0.2 0.3 See migration docs.
      task-clair-scan 0.2 0.3 See migration docs.
      task-clamav-scan 0.2 0.3 See migration docs.
      task-sast-unicode-check-oci-ta 0.3 0.4 See migration docs.

      Tasks with digest-only updates (no version change)

      task-show-sbom, task-git-clone-oci-ta, task-prefetch-dependencies-oci-ta, task-deprecated-image-check, task-ecosystem-cert-preflight-checks, task-sast-snyk-check-oci-ta, task-sast-coverity-check-oci-ta, task-coverity-availability-check, task-sast-shell-check-oci-ta, task-source-build-oci-ta, task-push-dockerfile-oci-ta, task-rpms-signature-scan, task-generate-labels

      Structural pipeline changes

      • Removed rebuild pipeline parameter and its propagation to task inputs
      • Removed conditional when gates on init.results.build from several tasks (clone-repository, buildah-remote, build-image-index, source-build)
      • Added matrix-based parameterization for multi-platform parallel execution on clair-scan, ecosystem-cert-preflight-checks, and clamav-scan

      Testing

      Verify the PR passes Konflux CI checks (trigger with /ok-to-test)

      Confirm pipeline runs successfully for both pull-request and push triggers

      Validate multi-platform build behavior with the new matrix parameters

      Check that removal of rebuild param does not affect existing workflows

              jparrill@redhat.com Juan Manuel Parrilla Madrid
              jparrill@redhat.com Juan Manuel Parrilla Madrid
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: