Skip to content

Add model transparency go to z-stream#457

Merged
sampras343 merged 1 commit into
mainfrom
sachin/mv-go-stream
Mar 23, 2026
Merged

Add model transparency go to z-stream#457
sampras343 merged 1 commit into
mainfrom
sachin/mv-go-stream

Conversation

@sampras343
Copy link
Copy Markdown
Member

No description provided.

Signed-off-by: Sachin Sampras M <sampras343@gmail.com>
@github-actions
Copy link
Copy Markdown

Configuration Diff

9 document(s) impacted:

+ 4 added
- 5 removed
! 0 modified
Diff
@@ (root level) @@
# appstudio.redhat.com/v1alpha1/Application/rhtas-tenant/model-transparency-go
! - one document removed:
- ---
- apiVersion: appstudio.redhat.com/v1alpha1
- kind: Application
- metadata:
-   name: model-transparency-go
-   namespace: rhtas-tenant
- spec:
-   displayName: "model-transparency-go (main)"

@@ (root level) @@
# appstudio.redhat.com/v1alpha1/Component/rhtas-tenant/model-transparency-go
! - one document removed:
- ---
- apiVersion: appstudio.redhat.com/v1alpha1
- kind: Component
- metadata:
-   name: model-transparency-go
-   namespace: rhtas-tenant
-   annotations:
-     build.appstudio.openshift.io/pipeline: "{\"name\":\"docker-build-oci-ta\",\"bundle\":\"latest\"}"
-     git-provider: github
-     git-provider-url: "https://github.com"
- spec:
-   source:
-     git:
-       url: "https://github.com/securesign/model-transparency-go"
-       dockerfileUrl: Containerfile.model-transparency-go.rh
-       revision: main
-   application: model-transparency-go
-   componentName: model-transparency-go

@@ (root level) @@
# appstudio.redhat.com/v1alpha1/ImageRepository/rhtas-tenant/model-transparency-go
! - one document removed:
- ---
- apiVersion: appstudio.redhat.com/v1alpha1
- kind: ImageRepository
- metadata:
-   name: model-transparency-go
-   namespace: rhtas-tenant
-   labels:
-     appstudio.redhat.com/application: model-transparency-go
-     appstudio.redhat.com/component: model-transparency-go
- spec:
-   image:
-     name: rhtas-tenant/model-transparency-go
-     visibility: public
-   notifications:
-   - config:
-       url: "https://bombino.api.redhat.com/v1/sbom/quay/push"
-     event: repo_push
-     method: webhook
-     title: SBOM-event-to-Bombino

@@ (root level) @@
# appstudio.redhat.com/v1alpha1/ReleasePlan/rhtas-tenant/promote-to-candidate-model-transparency-go
! - one document removed:
- ---
- apiVersion: appstudio.redhat.com/v1alpha1
- kind: ReleasePlan
- metadata:
-   name: promote-to-candidate-model-transparency-go
-   namespace: rhtas-tenant
-   labels:
-     release.appstudio.openshift.io/auto-release: "true"
-     release.appstudio.openshift.io/standing-attribution: "true"
- spec:
-   application: model-transparency-go
-   tenantPipeline:
-     params:
-     - name: git-url
-       value: "https://github.com/securesign/releases"
-     - name: code-freeze
-       value: "false"
-     - name: type
-       value: component
-     - name: file-name
-       value: model-transparency-go.json
-     - name: revision
-       value: RHTAS-build-bot_candidate-images-main
-     pipelineRef:
-       params:
-       - name: url
-         value: "https://github.com/securesign/pipelines"
-       - name: revision
-         value: main
-       - name: pathInRepo
-         value: pipelines/promote-to-candidate.yaml
-       resolver: git
-     serviceAccountName: rhtas-build-bot

@@ (root level) @@
# appstudio.redhat.com/v1beta2/IntegrationTestScenario/rhtas-tenant/model-transparency-go-enterprise-contract
! - one document removed:
- ---
- apiVersion: appstudio.redhat.com/v1beta2
- kind: IntegrationTestScenario
- metadata:
-   name: model-transparency-go-enterprise-contract
-   namespace: rhtas-tenant
-   annotations:
-     test.appstudio.openshift.io/kind: enterprise-contract
- spec:
-   application: model-transparency-go
-   resolverRef:
-     params:
-     - name: url
-       value: "https://github.com/konflux-ci/build-definitions"
-     - name: revision
-       value: main
-     - name: pathInRepo
-       value: pipelines/enterprise-contract.yaml
-     resolver: git
-     resourceKind: pipeline

@@ (root level) @@
# projctl.konflux.dev/v1beta1/Project/rhtas-tenant/model-transparency-go
! + one document added:
+   ---
+   apiVersion: projctl.konflux.dev/v1beta1
+   kind: Project
+   metadata:
+     name: model-transparency-go
+     namespace: rhtas-tenant
+   spec:
+     description: |
+       Model Transparency Go - Go implementation of model transparency for verifiable supply-chain metadata.
+       
+     displayName: "Red Hat Trusted Artifact Signer Model Transparency Go"

@@ (root level) @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStream/rhtas-tenant/model-transparency-go-main
! + one document added:
+   ---
+   apiVersion: projctl.konflux.dev/v1beta1
+   kind: ProjectDevelopmentStream
+   metadata:
+     name: model-transparency-go-main
+     namespace: rhtas-tenant
+   spec:
+     project: model-transparency-go
+     template:
+       name: model-transparency-go-template
+       values:
+       - name: version
+         value: main
+       - name: branch
+         value: main
+       - name: nameSuffix
+         value:

@@ (root level) @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStream/rhtas-tenant/model-transparency-go-tech-preview
! + one document added:
+   ---
+   apiVersion: projctl.konflux.dev/v1beta1
+   kind: ProjectDevelopmentStream
+   metadata:
+     name: model-transparency-go-tech-preview
+     namespace: rhtas-tenant
+   spec:
+     project: model-transparency-go
+     template:
+       name: model-transparency-go-template
+       values:
+       - name: version
+         value: tech-preview
+       - name: branch
+         value: tech-preview
+       - name: mintmakerDisabled
+         value: "false"

@@ (root level) @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/model-transparency-go-template
! + one document added:
+   ---
+   apiVersion: projctl.konflux.dev/v1beta1
+   kind: ProjectDevelopmentStreamTemplate
+   metadata:
+     name: model-transparency-go-template
+     namespace: rhtas-tenant
+     labels:
+       build.rhtas.com/ec: registry-rhtas
+       build.rhtas.com/type: component
+   spec:
+     resources:
+     - apiVersion: appstudio.redhat.com/v1alpha1
+       kind: Application
+       metadata:
+         name: {{.application}}{{.nameSuffix}}
+         annotations:
+           application.thumbnail: 5
+       spec:
+         displayName: "{{.application}} ({{.version}})"
+     - apiVersion: appstudio.redhat.com/v1beta2
+       kind: IntegrationTestScenario
+       metadata:
+         name: {{.application}}{{.nameSuffix}}-enterprise-contract
+         annotations:
+           test.appstudio.openshift.io/kind: enterprise-contract
+       spec:
+         application: {{.application}}{{.nameSuffix}}
+         params:
+         - name: POLICY_CONFIGURATION
+           value: rhtap-releng-tenant/registry-rhtas
+         resolverRef:
+           params:
+           - name: url
+             value: "https://github.com/konflux-ci/build-definitions"
+           - name: revision
+             value: main
+           - name: pathInRepo
+             value: pipelines/enterprise-contract.yaml
+           resolver: git
+           resourceKind: pipeline
+     - apiVersion: appstudio.redhat.com/v1alpha1
+       kind: ReleasePlan
+       metadata:
+         name: promote-to-candidate-{{.application}}{{.nameSuffix}}
+         labels:
+           release.appstudio.openshift.io/auto-release: "true"
+           release.appstudio.openshift.io/standing-attribution: "true"
+       spec:
+         application: {{.application}}{{.nameSuffix}}
+         tenantPipeline:
+           params:
+           - name: git-url
+             value: "https://github.com/securesign/releases"
+           - name: revision
+             value: RHTAS-build-bot_candidate-images-{{.version}}
+           - name: code-freeze
+             value: "false"
+           - name: type
+             value: component
+           pipelineRef:
+             params:
+             - name: url
+               value: "https://github.com/securesign/pipelines"
+             - name: revision
+               value: main
+             - name: pathInRepo
+               value: pipelines/promote-to-candidate.yaml
+             resolver: git
+           serviceAccountName: rhtas-build-bot
+     - apiVersion: appstudio.redhat.com/v1alpha1
+       kind: Component
+       metadata:
+         name: model-transparency-go{{.nameSuffix}}
+         annotations:
+           build.appstudio.openshift.io/pipeline: "{\"name\":\"docker-build-oci-ta\",\"bundle\":\"latest\"}"
+           git-provider: github
+           git-provider-url: "https://github.com"
+           mintmaker.appstudio.redhat.com/disabled: {{.mintmakerDisabled}}
+       spec:
+         source:
+           git:
+             url: "https://github.com/securesign/model-transparency-go"
+             dockerfileUrl: Containerfile.model-transparency-go.rh
+             revision: {{.branch}}
+         application: {{.application}}{{.nameSuffix}}
+         componentName: model-transparency-go
+         build-nudges-ref:
+         - model-validation-operator{{.nameSuffix}}
+     - apiVersion: appstudio.redhat.com/v1alpha1
+       kind: ImageRepository
+       metadata:
+         name: model-transparency-go{{.nameSuffix}}
+         annotations:
+           image-controller.appstudio.redhat.com/update-component-image: "true"
+         labels:
+           appstudio.redhat.com/application: {{.application}}{{.nameSuffix}}
+           appstudio.redhat.com/component: model-transparency-go{{.nameSuffix}}
+       spec:
+         image:
+           name: rhtas-tenant/model-transparency-go
+           visibility: public
+         notifications:
+         - config:
+             url: "https://bombino.api.redhat.com/v1/sbom/quay/push"
+           event: repo_push
+           method: webhook
+           title: SBOM-event-to-Bombino
+     project: model-transparency-go
+     variables:
+     - name: version
+       description: "A version number for a new development stream"
+     - name: branch
+       defaultValue: main
+       description: "Git branch"
+     - name: nameSuffix
+       defaultValue: "-{{hyphenize .version}}"
+       description: "A suffix which will be added to K8s resource name"
+     - name: application
+       defaultValue: model-transparency-go
+       description: "The application name"
+     - name: mintmakerDisabled
+       defaultValue: "false"
+       description: "Whether to disable mintmaker annotation on the Component"

📦 Artifacts: base-output.yaml, head-output.yaml, dyff-output.txt

@sampras343 sampras343 merged commit 7c475cb into main Mar 23, 2026
4 checks passed
@sampras343 sampras343 deleted the sachin/mv-go-stream branch March 23, 2026 17:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants