Skip to content

chore: onboard OCP v5.0 FBC components - #615

Closed
bot-securesign-pr-manager[bot] wants to merge 1 commit into
mainfrom
add-ocp-v5.0
Closed

bot-securesign-pr-manager[bot] wants to merge 1 commit into
mainfrom
add-ocp-v5.0

Conversation

@bot-securesign-pr-manager

Copy link
Copy Markdown
Contributor

Automated Konflux onboarding for v5.0 FBC components
(Component + IntegrationTestScenarios + ImageRepository, wired into the overlays).

Merge this before the companion securesign/fbc PR so the build
service accounts exist when the Tekton PipelineRuns first fire.

@osmman osmman closed this Sep 10, 2026
@osmman
osmman deleted the add-ocp-v5.0 branch September 10, 2026 12:12
@github-actions

Copy link
Copy Markdown

Configuration Diff

3 document(s) impacted:

+ 0 added
- 0 removed
! 3 modified
Diff
@@ spec.resources @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/mvo-fbc-template
! + two list entries added:
+   - apiVersion: appstudio.redhat.com/v1alpha1
+     kind: Component
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0
+       annotations:
+         build.appstudio.openshift.io/pipeline: "{\"name\":\"fbc-builder\",\"bundle\":\"latest\"}"
+         build.appstudio.openshift.io/status: "{\"pac\":{\"state\":\"enabled\",\"merge-url\":\"https://github.com/securesign/fbc/pull/97\",\"configuration-time\":\"Thu,27 Mar 2025 12:35:34 UTC\"},\"message\":\"done\"}"
+         mintmaker.appstudio.redhat.com/disabled: {{.mintmakerDisabled}}
+     spec:
+       source:
+         git:
+           url: "https://github.com/securesign/fbc"
+           context: v5.0/{{.operator}}
+           dockerfileUrl: catalog.Dockerfile
+           revision: {{.branch}}
+       application: {{.application}}{{.nameSuffix}}
+       componentName: {{.application}}{{.nameSuffix}}-v5-0
+   - apiVersion: appstudio.redhat.com/v1alpha1
+     kind: ImageRepository
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0
+       annotations:
+         image-controller.appstudio.redhat.com/update-component-image: "true"
+       labels:
+         appstudio.redhat.com/application: {{.application}}{{.nameSuffix}}
+         appstudio.redhat.com/component: {{.application}}{{.nameSuffix}}-v5-0
+     spec:
+       image:
+         name: rhtas-tenant/{{.application}}-v5-0
+         visibility: public
+       notifications:
+       - config:
+           url: "https://bombino.api.redhat.com/v1/sbom/quay/push"
+         event: repo_push
+         method: webhook
+         title: SBOM-event-to-Bombino

@@ spec.resources @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/pco-fbc-template
! + four list entries added:
+   - apiVersion: appstudio.redhat.com/v1alpha1
+     kind: Component
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0
+       annotations:
+         build.appstudio.openshift.io/pipeline: "{\"name\":\"fbc-builder\",\"bundle\":\"latest\"}"
+         build.appstudio.openshift.io/status: "{\"pac\":{\"state\":\"enabled\",\"merge-url\":\"https://github.com/securesign/fbc/pull/97\",\"configuration-time\":\"Thu,27 Mar 2025 12:35:34 UTC\"},\"message\":\"done\"}"
+         mintmaker.appstudio.redhat.com/disabled: {{.mintmakerDisabled}}
+     spec:
+       source:
+         git:
+           url: "https://github.com/securesign/fbc"
+           context: v5.0/{{.operator}}
+           dockerfileUrl: catalog.Dockerfile
+           revision: {{.branch}}
+       application: {{.application}}{{.nameSuffix}}
+       componentName: {{.application}}{{.nameSuffix}}-v5-0
+   - apiVersion: appstudio.redhat.com/v1beta2
+     kind: IntegrationTestScenario
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0-e2e
+       labels:
+         test.appstudio.openshift.io/optional: "true"
+     spec:
+       application: {{.application}}{{.nameSuffix}}
+       contexts:
+       - name: disabled
+         description: "execute the integration test when component {{.application}}{{.nameSuffix}}-v5-0 updates"
+       params:
+       - name: OCP_VERSION
+         value: 5.0
+       - name: POLICY_CONTROLLER_OPERATOR_DEPLOYMENT_NAME
+         value: {{.policyControllerOperatorDeploymentName}}
+       resolverRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines.git"
+         - name: revision
+           value: main
+         - name: pathInRepo
+           value: pipelines/integration-test/policy-controller-fbc-e2e.yaml
+         resolver: git
+         resourceKind: pipelinerun
+   - apiVersion: appstudio.redhat.com/v1beta2
+     kind: IntegrationTestScenario
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0-upgrade
+       labels:
+         test.appstudio.openshift.io/optional: "true"
+     spec:
+       application: {{.application}}{{.nameSuffix}}
+       contexts:
+       - name: disabled
+         description: "execute the upgrade integration test when component {{.application}}{{.nameSuffix}}-v5-0 updates"
+       params:
+       - name: OCP_VERSION
+         value: 5.0
+       resolverRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines.git"
+         - name: revision
+           value: main
+         - name: pathInRepo
+           value: pipelines/integration-test/pco-operator-upgrade.yaml
+         resolver: git
+         resourceKind: pipelinerun
+   - apiVersion: appstudio.redhat.com/v1alpha1
+     kind: ImageRepository
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0
+       annotations:
+         image-controller.appstudio.redhat.com/update-component-image: "true"
+       labels:
+         appstudio.redhat.com/application: {{.application}}{{.nameSuffix}}
+         appstudio.redhat.com/component: {{.application}}{{.nameSuffix}}-v5-0
+     spec:
+       image:
+         name: rhtas-tenant/{{.application}}-v5-0
+         visibility: public
+       notifications:
+       - config:
+           url: "https://bombino.api.redhat.com/v1/sbom/quay/push"
+         event: repo_push
+         method: webhook
+         title: SBOM-event-to-Bombino

@@ spec.resources @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/rhtas-fbc-template
! + five list entries added:
+   - apiVersion: appstudio.redhat.com/v1alpha1
+     kind: Component
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0
+       annotations:
+         build.appstudio.openshift.io/pipeline: "{\"name\":\"fbc-builder\",\"bundle\":\"latest\"}"
+         build.appstudio.openshift.io/status: "{\"pac\":{\"state\":\"enabled\",\"merge-url\":\"https://github.com/securesign/fbc/pull/97\",\"configuration-time\":\"Thu,27 Mar 2025 12:35:34 UTC\"},\"message\":\"done\"}"
+         mintmaker.appstudio.redhat.com/disabled: {{.mintmakerDisabled}}
+     spec:
+       source:
+         git:
+           url: "https://github.com/securesign/fbc"
+           context: v5.0/{{.operator}}
+           dockerfileUrl: catalog.Dockerfile
+           revision: {{.branch}}
+       application: {{.application}}{{.nameSuffix}}
+       componentName: {{.application}}{{.nameSuffix}}-v5-0
+   - apiVersion: appstudio.redhat.com/v1beta2
+     kind: IntegrationTestScenario
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0-e2e
+       labels:
+         test.appstudio.openshift.io/optional: "true"
+     spec:
+       application: {{.application}}{{.nameSuffix}}
+       contexts:
+       - name: disabled
+         description: "execute the integration test when component {{.application}}{{.nameSuffix}}-v5-0 updates"
+       params:
+       - name: OCP_VERSION
+         value: 5.0
+       resolverRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines.git"
+         - name: revision
+           value: main
+         - name: pathInRepo
+           value: pipelines/integration-test/rhtas-fbc-e2e.yaml
+         resolver: git
+         resourceKind: pipelinerun
+   - apiVersion: appstudio.redhat.com/v1beta2
+     kind: IntegrationTestScenario
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0-e2e-fips
+       labels:
+         test.appstudio.openshift.io/optional: "true"
+     spec:
+       application: {{.application}}{{.nameSuffix}}
+       contexts:
+       - name: disabled
+         description: "execute the integration test when component {{.application}}{{.nameSuffix}}-v5-0 updates"
+       params:
+       - name: OCP_VERSION
+         value: 5.0
+       - name: FIPS_ENABLED
+         value: "true"
+       - name: CLUSTER_PLATFORM
+         value: openshift
+       resolverRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines.git"
+         - name: revision
+           value: main
+         - name: pathInRepo
+           value: pipelines/integration-test/rhtas-fbc-e2e.yaml
+         resolver: git
+         resourceKind: pipelinerun
+   - apiVersion: appstudio.redhat.com/v1beta2
+     kind: IntegrationTestScenario
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0-upgrade
+       labels:
+         test.appstudio.openshift.io/optional: "true"
+     spec:
+       application: {{.application}}{{.nameSuffix}}
+       contexts:
+       - name: disabled
+         description: "execute the integration test when component {{.application}}{{.nameSuffix}}-v5-0 updates"
+       params:
+       - name: OCP_VERSION
+         value: 5.0
+       resolverRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines.git"
+         - name: revision
+           value: main
+         - name: pathInRepo
+           value: pipelines/integration-test/operator-upgrade.yaml
+         resolver: git
+         resourceKind: pipelinerun
+   - apiVersion: appstudio.redhat.com/v1beta2
+     kind: IntegrationTestScenario
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0-e2e-olmv1
+       labels:
+         test.appstudio.openshift.io/optional: "true"
+     spec:
+       application: {{.application}}{{.nameSuffix}}
+       contexts:
+       - name: disabled
+         description: "execute the integration test when component {{.application}}{{.nameSuffix}}-v5-0 updates"
+       params:
+       - name: OCP_VERSION
+         value: 5.0
+       - name: OLMv1
+         value: "true"
+       resolverRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines.git"
+         - name: revision
+           value: main
+         - name: pathInRepo
+           value: pipelines/integration-test/rhtas-fbc-e2e.yaml
+         resolver: git
+         resourceKind: pipelinerun

📦 Artifacts: base-output.yaml, head-output.yaml, dyff-output.txt

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant