From 80d161f552b51fd3ca614a72dbd6963ffc4ad628 Mon Sep 17 00:00:00 2001 From: konflux Date: Wed, 30 Apr 2025 05:26:59 +0000 Subject: [PATCH] Konflux build pipeline service account migration for provisioning-frontend Signed-off-by: konflux --- .../provisioning-frontend-pull-request.yaml | 67 ++++++++++--------- .tekton/provisioning-frontend-push.yaml | 67 ++++++++++--------- 2 files changed, 68 insertions(+), 66 deletions(-) diff --git a/.tekton/provisioning-frontend-pull-request.yaml b/.tekton/provisioning-frontend-pull-request.yaml index 43f98706..8c6b4259 100644 --- a/.tekton/provisioning-frontend-pull-request.yaml +++ b/.tekton/provisioning-frontend-pull-request.yaml @@ -312,52 +312,52 @@ spec: workspace: workspace - name: sast-shell-check params: - - name: image-digest - value: $(tasks.build-image-index.results.IMAGE_DIGEST) - - name: image-url - value: $(tasks.build-image-index.results.IMAGE_URL) + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) runAfter: - - build-image-index + - build-image-index taskRef: params: - - name: name - value: sast-shell-check - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check:0.1@sha256:1b3d68c33a92dfc3da3975581cae80c99c8d1995cab519ae98c6331b5677ded0 - - name: kind - value: task + - name: name + value: sast-shell-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check:0.1@sha256:1b3d68c33a92dfc3da3975581cae80c99c8d1995cab519ae98c6331b5677ded0 + - name: kind + value: task resolver: bundles when: - - input: $(params.skip-checks) - operator: in - values: - - "false" + - input: $(params.skip-checks) + operator: in + values: + - "false" workspaces: - - name: workspace - workspace: workspace + - name: workspace + workspace: workspace - name: sast-unicode-check params: - - name: image-url - value: $(tasks.build-image-index.results.IMAGE_URL) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) runAfter: - - build-image-index + - build-image-index taskRef: params: - - name: name - value: sast-unicode-check - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check:0.1@sha256:b1a9af196a79baa75632ef494eb6db987f57e870d882d47f5b495e1441c01e3b - - name: kind - value: task + - name: name + value: sast-unicode-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check:0.1@sha256:b1a9af196a79baa75632ef494eb6db987f57e870d882d47f5b495e1441c01e3b + - name: kind + value: task resolver: bundles when: - - input: $(params.skip-checks) - operator: in - values: - - "false" + - input: $(params.skip-checks) + operator: in + values: + - "false" workspaces: - - name: workspace - workspace: workspace + - name: workspace + workspace: workspace - name: deprecated-base-image-check params: - name: IMAGE_URL @@ -536,7 +536,8 @@ spec: optional: true - name: netrc optional: true - taskRunTemplate: {} + taskRunTemplate: + serviceAccountName: build-pipeline-provisioning-frontend workspaces: - name: workspace volumeClaimTemplate: diff --git a/.tekton/provisioning-frontend-push.yaml b/.tekton/provisioning-frontend-push.yaml index 40989352..4191288d 100644 --- a/.tekton/provisioning-frontend-push.yaml +++ b/.tekton/provisioning-frontend-push.yaml @@ -309,52 +309,52 @@ spec: workspace: workspace - name: sast-shell-check params: - - name: image-digest - value: $(tasks.build-image-index.results.IMAGE_DIGEST) - - name: image-url - value: $(tasks.build-image-index.results.IMAGE_URL) + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) runAfter: - - build-image-index + - build-image-index taskRef: params: - - name: name - value: sast-shell-check - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check:0.1@sha256:1b3d68c33a92dfc3da3975581cae80c99c8d1995cab519ae98c6331b5677ded0 - - name: kind - value: task + - name: name + value: sast-shell-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check:0.1@sha256:1b3d68c33a92dfc3da3975581cae80c99c8d1995cab519ae98c6331b5677ded0 + - name: kind + value: task resolver: bundles when: - - input: $(params.skip-checks) - operator: in - values: - - "false" + - input: $(params.skip-checks) + operator: in + values: + - "false" workspaces: - - name: workspace - workspace: workspace + - name: workspace + workspace: workspace - name: sast-unicode-check params: - - name: image-url - value: $(tasks.build-image-index.results.IMAGE_URL) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) runAfter: - - build-image-index + - build-image-index taskRef: params: - - name: name - value: sast-unicode-check - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check:0.1@sha256:b1a9af196a79baa75632ef494eb6db987f57e870d882d47f5b495e1441c01e3b - - name: kind - value: task + - name: name + value: sast-unicode-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check:0.1@sha256:b1a9af196a79baa75632ef494eb6db987f57e870d882d47f5b495e1441c01e3b + - name: kind + value: task resolver: bundles when: - - input: $(params.skip-checks) - operator: in - values: - - "false" + - input: $(params.skip-checks) + operator: in + values: + - "false" workspaces: - - name: workspace - workspace: workspace + - name: workspace + workspace: workspace - name: deprecated-base-image-check params: - name: IMAGE_URL @@ -533,7 +533,8 @@ spec: optional: true - name: netrc optional: true - taskRunTemplate: {} + taskRunTemplate: + serviceAccountName: build-pipeline-provisioning-frontend workspaces: - name: workspace volumeClaimTemplate: