Skip to content

chore: onboard OCP v5.0 FBC components - #616

Merged
petrpinkas merged 3 commits into
mainfrom
add-ocp-v5.0
Sep 10, 2026
Merged

petrpinkas merged 3 commits into
mainfrom
add-ocp-v5.0

Conversation

@bot-securesign-pr-manager

Copy link
Copy Markdown
Contributor

Automated Konflux onboarding for v5.0 FBC components
(Component + IntegrationTestScenarios + ImageRepository, wired into the overlays).

Merge this before the companion securesign/fbc PR so the build
service accounts exist when the Tekton PipelineRuns first fire.

@github-actions

github-actions Bot commented Sep 10, 2026 •

Copy link
Copy Markdown

Configuration Diff

3 document(s) impacted:

+ 0 added
- 0 removed
! 3 modified
Diff
@@ spec.resources @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/mvo-fbc-template
! + two list entries added:
+   - apiVersion: appstudio.redhat.com/v1alpha1
+     kind: Component
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0
+       annotations:
+         build.appstudio.openshift.io/pipeline: "{\"name\":\"fbc-builder\",\"bundle\":\"latest\"}"
+         build.appstudio.openshift.io/status: "{\"pac\":{\"state\":\"enabled\",\"merge-url\":\"https://github.com/securesign/fbc/pull/97\",\"configuration-time\":\"Thu,27 Mar 2025 12:35:34 UTC\"},\"message\":\"done\"}"
+         mintmaker.appstudio.redhat.com/disabled: {{.mintmakerDisabled}}
+     spec:
+       source:
+         git:
+           url: "https://github.com/securesign/fbc"
+           context: v5.0/{{.operator}}
+           dockerfileUrl: catalog.Dockerfile
+           revision: {{.branch}}
+       application: {{.application}}{{.nameSuffix}}
+       componentName: {{.application}}{{.nameSuffix}}-v5-0
+   - apiVersion: appstudio.redhat.com/v1alpha1
+     kind: ImageRepository
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0
+       annotations:
+         image-controller.appstudio.redhat.com/update-component-image: "true"
+       labels:
+         appstudio.redhat.com/application: {{.application}}{{.nameSuffix}}
+         appstudio.redhat.com/component: {{.application}}{{.nameSuffix}}-v5-0
+     spec:
+       image:
+         name: rhtas-tenant/{{.application}}-v5-0
+         visibility: public
+       notifications:
+       - config:
+           url: "https://bombino.api.redhat.com/v1/sbom/quay/push"
+         event: repo_push
+         method: webhook
+         title: SBOM-event-to-Bombino

@@ spec.resources @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/pco-fbc-template
! + four list entries added:
+   - apiVersion: appstudio.redhat.com/v1alpha1
+     kind: Component
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0
+       annotations:
+         build.appstudio.openshift.io/pipeline: "{\"name\":\"fbc-builder\",\"bundle\":\"latest\"}"
+         build.appstudio.openshift.io/status: "{\"pac\":{\"state\":\"enabled\",\"merge-url\":\"https://github.com/securesign/fbc/pull/97\",\"configuration-time\":\"Thu,27 Mar 2025 12:35:34 UTC\"},\"message\":\"done\"}"
+         mintmaker.appstudio.redhat.com/disabled: {{.mintmakerDisabled}}
+     spec:
+       source:
+         git:
+           url: "https://github.com/securesign/fbc"
+           context: v5.0/{{.operator}}
+           dockerfileUrl: catalog.Dockerfile
+           revision: {{.branch}}
+       application: {{.application}}{{.nameSuffix}}
+       componentName: {{.application}}{{.nameSuffix}}-v5-0
+   - apiVersion: appstudio.redhat.com/v1beta2
+     kind: IntegrationTestScenario
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0-e2e
+       labels:
+         test.appstudio.openshift.io/optional: "true"
+     spec:
+       application: {{.application}}{{.nameSuffix}}
+       contexts:
+       - name: disabled
+         description: "execute the integration test when component {{.application}}{{.nameSuffix}}-v5-0 updates"
+       params:
+       - name: OCP_VERSION
+         value: 5.0
+       - name: POLICY_CONTROLLER_OPERATOR_DEPLOYMENT_NAME
+         value: {{.policyControllerOperatorDeploymentName}}
+       resolverRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines.git"
+         - name: revision
+           value: main
+         - name: pathInRepo
+           value: pipelines/integration-test/policy-controller-fbc-e2e.yaml
+         resolver: git
+         resourceKind: pipelinerun
+   - apiVersion: appstudio.redhat.com/v1beta2
+     kind: IntegrationTestScenario
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0-upgrade
+       labels:
+         test.appstudio.openshift.io/optional: "true"
+     spec:
+       application: {{.application}}{{.nameSuffix}}
+       contexts:
+       - name: disabled
+         description: "execute the upgrade integration test when component {{.application}}{{.nameSuffix}}-v5-0 updates"
+       params:
+       - name: OCP_VERSION
+         value: 5.0
+       resolverRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines.git"
+         - name: revision
+           value: main
+         - name: pathInRepo
+           value: pipelines/integration-test/pco-operator-upgrade.yaml
+         resolver: git
+         resourceKind: pipelinerun
+   - apiVersion: appstudio.redhat.com/v1alpha1
+     kind: ImageRepository
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0
+       annotations:
+         image-controller.appstudio.redhat.com/update-component-image: "true"
+       labels:
+         appstudio.redhat.com/application: {{.application}}{{.nameSuffix}}
+         appstudio.redhat.com/component: {{.application}}{{.nameSuffix}}-v5-0
+     spec:
+       image:
+         name: rhtas-tenant/{{.application}}-v5-0
+         visibility: public
+       notifications:
+       - config:
+           url: "https://bombino.api.redhat.com/v1/sbom/quay/push"
+         event: repo_push
+         method: webhook
+         title: SBOM-event-to-Bombino

@@ spec.resources @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/rhtas-fbc-template
! + five list entries added:
+   - apiVersion: appstudio.redhat.com/v1alpha1
+     kind: Component
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0
+       annotations:
+         build.appstudio.openshift.io/pipeline: "{\"name\":\"fbc-builder\",\"bundle\":\"latest\"}"
+         build.appstudio.openshift.io/status: "{\"pac\":{\"state\":\"enabled\",\"merge-url\":\"https://github.com/securesign/fbc/pull/97\",\"configuration-time\":\"Thu,27 Mar 2025 12:35:34 UTC\"},\"message\":\"done\"}"
+         mintmaker.appstudio.redhat.com/disabled: {{.mintmakerDisabled}}
+     spec:
+       source:
+         git:
+           url: "https://github.com/securesign/fbc"
+           context: v5.0/{{.operator}}
+           dockerfileUrl: catalog.Dockerfile
+           revision: {{.branch}}
+       application: {{.application}}{{.nameSuffix}}
+       componentName: {{.application}}{{.nameSuffix}}-v5-0
+   - apiVersion: appstudio.redhat.com/v1beta2
+     kind: IntegrationTestScenario
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0-e2e
+       labels:
+         test.appstudio.openshift.io/optional: "true"
+     spec:
+       application: {{.application}}{{.nameSuffix}}
+       contexts:
+       - name: disabled
+         description: "execute the integration test when component {{.application}}{{.nameSuffix}}-v5-0 updates"
+       params:
+       - name: OCP_VERSION
+         value: 5.0
+       resolverRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines.git"
+         - name: revision
+           value: main
+         - name: pathInRepo
+           value: pipelines/integration-test/rhtas-fbc-e2e.yaml
+         resolver: git
+         resourceKind: pipelinerun
+   - apiVersion: appstudio.redhat.com/v1beta2
+     kind: IntegrationTestScenario
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0-e2e-fips
+       labels:
+         test.appstudio.openshift.io/optional: "true"
+     spec:
+       application: {{.application}}{{.nameSuffix}}
+       contexts:
+       - name: disabled
+         description: "execute the integration test when component {{.application}}{{.nameSuffix}}-v5-0 updates"
+       params:
+       - name: OCP_VERSION
+         value: 5.0
+       - name: FIPS_ENABLED
+         value: "true"
+       - name: CLUSTER_PLATFORM
+         value: openshift
+       resolverRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines.git"
+         - name: revision
+           value: main
+         - name: pathInRepo
+           value: pipelines/integration-test/rhtas-fbc-e2e.yaml
+         resolver: git
+         resourceKind: pipelinerun
+   - apiVersion: appstudio.redhat.com/v1beta2
+     kind: IntegrationTestScenario
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0-upgrade
+       labels:
+         test.appstudio.openshift.io/optional: "true"
+     spec:
+       application: {{.application}}{{.nameSuffix}}
+       contexts:
+       - name: disabled
+         description: "execute the integration test when component {{.application}}{{.nameSuffix}}-v5-0 updates"
+       params:
+       - name: OCP_VERSION
+         value: 5.0
+       resolverRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines.git"
+         - name: revision
+           value: main
+         - name: pathInRepo
+           value: pipelines/integration-test/operator-upgrade.yaml
+         resolver: git
+         resourceKind: pipelinerun
+   - apiVersion: appstudio.redhat.com/v1beta2
+     kind: IntegrationTestScenario
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-v5-0-e2e-olmv1
+       labels:
+         test.appstudio.openshift.io/optional: "true"
+     spec:
+       application: {{.application}}{{.nameSuffix}}
+       contexts:
+       - name: disabled
+         description: "execute the integration test when component {{.application}}{{.nameSuffix}}-v5-0 updates"
+       params:
+       - name: OCP_VERSION
+         value: 5.0
+       - name: OLMv1
+         value: "true"
+       resolverRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines.git"
+         - name: revision
+           value: main
+         - name: pathInRepo
+           value: pipelines/integration-test/rhtas-fbc-e2e.yaml
+         resolver: git
+         resourceKind: pipelinerun

📦 Artifacts: base-output.yaml, head-output.yaml, dyff-output.txt

red-hat-konflux Bot and others added 2 commits September 10, 2026 16:43
…r digest to d235f60

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@petrpinkas
petrpinkas merged commit f4dd780 into main Sep 10, 2026
10 checks passed
@petrpinkas
petrpinkas deleted the add-ocp-v5.0 branch September 10, 2026 15:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant