-
Notifications
You must be signed in to change notification settings - Fork 32
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Build and release EC images together. #2211
base: main
Are you sure you want to change the base?
Conversation
The sast-snyk-check Task does not provide an `image-digest` parameter. Instead, users are expected to profide image references that include the digest via the `image-url` parameter. Signed-off-by: Luiz Carvalho <[email protected]>
This is recommended by Tekton and fixes a violation found by tektor[1]. [1] https://github.com/lcarva/tektor Signed-off-by: Luiz Carvalho <[email protected]>
This commit changes the build process so the Tekton bundle is built in the same build pipeline that builds the CLI image. This has the main advantage of creating a close relationship between the two images. The bundle image, for example, references the CLI image by digest. It also simplifies the build process. As such, the build pipeline for the bundle is removed. Ref: EC-911 Signed-off-by: Luiz Carvalho <[email protected]>
This commit changes the tenant release pipeline so it understands that both the CLI and the bundle images are built within the same build Pipeline. It also removes the need to use different release Pipelines for each image. Signed-off-by: Luiz Carvalho <[email protected]>
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #2211 +/- ##
=======================================
Coverage 71.19% 71.19%
=======================================
Files 88 88
Lines 7520 7520
=======================================
Hits 5354 5354
Misses 2166 2166
Flags with carried forward coverage won't be shown. Click here to find out more. |
Looks good. Looking forward to tomorrow's demo/walkthrough. |
# TODO: Can't use Konflux's git-clone Task because that requires a security context not provided | ||
# to the ServiceAccount running this pipeline (securityContext.runAsUser: 0). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pointer to an issue to get this resolved upstream?
- name: url | ||
value: https://github.com/lcarva/release-service-bundles.git | ||
value: https://github.com/lcarva/build-definitions.git |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Perhaps we can keep that version of the git-clone task in this repository instead?
Ref. EC-911
See commit messages for more information.