Uploaded image for project: 'Red Hat Workload Availability'
  1. Red Hat Workload Availability
  2. RHWA-425

Reconfigure Build Pipeline in Konflux

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Unresolved
    • Icon: Major Major
    • rhwa-4.21-0
    • None
    • rhwa
    • None

      Konflux supports many build pipelines https://konflux.pages.redhat.com/docs/users/installing/enabling-builds.html#available-pipelines, and we have been using the docker-build pipeline for our non-FBC components and docker-build-oci-ta for FBC components.

      Required Changes

      fbc changes

      Move from docker-build-oci-ta to fbc-builder, since we the new one is ideal for FBC builds.

      non-fbc changes

      Given the optional build pipelines, we should transition from the docker-build pipeline to the docker-build-oci-ta pipeline for non-fbc components, since the oci-ta (in short) addresses significant architectural challenges related to scalability, resource contention (PVC quotas), and Enterprise Contract (EC) security enforcement.
      Moreover (in long), the oci-ta pipelines leverage trusted artifacts. It also optionally creates a source image and runs some build-time tests. This pipeline requires that the multi platform controller is deployed and configured on your Konflux instance. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the trusted_task.trusted policy as long as all data used to build the artifact is generated from trusted tasks. This pipeline is pushed as a Tekton bundle to quay.io

      After we switch to docker-build-oci-ta pipeline, we can aim for docker-build-multi-platform-oci-ta, which allows us to continue using one platform until we complete the switch to multiple platforms (RHWA-372 & ECOPROJECT-716), and see more at https://konflux.pages.redhat.com/docs/users/getting-started/multi-platform-builds.html).

      How?

      More reference at https://konflux.pages.redhat.com/docs/users/building/customizing-the-build.html#_bring_your_own_quay_repository_to_the_build_pipeline 

              oraz@redhat.com Or Raz
              oraz@redhat.com Or Raz
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: