From 0ae6d72616d18ede5b12e58566ff6aeea4bd3f81 Mon Sep 17 00:00:00 2001 From: Sachin Sampras M Date: Mon, 23 Mar 2026 16:22:54 +0000 Subject: [PATCH] add model transparency go to z-stream Signed-off-by: Sachin Sampras M --- .../base/application/kustomization.yaml | 1 - .../base/application.yaml | 6 --- .../model-transparency-go/base/component.yaml | 15 ------- .../base/imagerepository.yaml | 16 ------- .../base/kustomization.yaml | 16 ------- .../base/patch/releaseplan.yaml | 17 ------- .../base/project/kustomization.yaml | 1 + .../model-transparency-go/kustomization.yaml | 16 +++++++ .../patch/model-transparency-go.yaml | 44 +++++++++++++++++++ .../model-transparency-go/project.yaml | 8 ++++ .../model-transparency-go/template.yaml | 33 ++++++++++++++ .../model-validation/base/kustomization.yaml | 1 + .../base/model-transparency-go.yaml | 15 +++++++ 13 files changed, 118 insertions(+), 71 deletions(-) delete mode 100644 konflux-configs/base/application/model-transparency-go/base/application.yaml delete mode 100644 konflux-configs/base/application/model-transparency-go/base/component.yaml delete mode 100644 konflux-configs/base/application/model-transparency-go/base/imagerepository.yaml delete mode 100644 konflux-configs/base/application/model-transparency-go/base/kustomization.yaml delete mode 100644 konflux-configs/base/application/model-transparency-go/base/patch/releaseplan.yaml create mode 100644 konflux-configs/base/project/overlay/model-transparency-go/kustomization.yaml create mode 100644 konflux-configs/base/project/overlay/model-transparency-go/patch/model-transparency-go.yaml create mode 100644 konflux-configs/base/project/overlay/model-transparency-go/project.yaml create mode 100644 konflux-configs/base/project/overlay/model-transparency-go/template.yaml create mode 100644 konflux-configs/base/stream/model-validation/base/model-transparency-go.yaml diff --git a/konflux-configs/base/application/kustomization.yaml b/konflux-configs/base/application/kustomization.yaml index 12e8588b..49a1cf2d 100644 --- a/konflux-configs/base/application/kustomization.yaml +++ b/konflux-configs/base/application/kustomization.yaml @@ -6,5 +6,4 @@ resources: - konflux/base - pipelines/base # RHTAS components - - model-transparency-go/base - rhtas-console/base diff --git a/konflux-configs/base/application/model-transparency-go/base/application.yaml b/konflux-configs/base/application/model-transparency-go/base/application.yaml deleted file mode 100644 index e1fabc8a..00000000 --- a/konflux-configs/base/application/model-transparency-go/base/application.yaml +++ /dev/null @@ -1,6 +0,0 @@ -apiVersion: appstudio.redhat.com/v1alpha1 -kind: Application -metadata: - name: model-transparency-go -spec: - displayName: model-transparency-go (main) diff --git a/konflux-configs/base/application/model-transparency-go/base/component.yaml b/konflux-configs/base/application/model-transparency-go/base/component.yaml deleted file mode 100644 index 2e18a9b5..00000000 --- a/konflux-configs/base/application/model-transparency-go/base/component.yaml +++ /dev/null @@ -1,15 +0,0 @@ -apiVersion: appstudio.redhat.com/v1alpha1 -kind: Component -metadata: - annotations: - build.appstudio.openshift.io/pipeline: '{"name":"docker-build-oci-ta","bundle":"latest"}' - git-provider: github - git-provider-url: https://github.com - name: model-transparency-go -spec: - componentName: model-transparency-go - source: - git: - url: https://github.com/securesign/model-transparency-go - revision: main - dockerfileUrl: Containerfile.model-transparency-go.rh diff --git a/konflux-configs/base/application/model-transparency-go/base/imagerepository.yaml b/konflux-configs/base/application/model-transparency-go/base/imagerepository.yaml deleted file mode 100644 index 802fd4c6..00000000 --- a/konflux-configs/base/application/model-transparency-go/base/imagerepository.yaml +++ /dev/null @@ -1,16 +0,0 @@ -apiVersion: appstudio.redhat.com/v1alpha1 -kind: ImageRepository -metadata: - name: model-transparency-go - labels: - appstudio.redhat.com/component: model-transparency-go -spec: - image: - name: rhtas-tenant/model-transparency-go - visibility: public - notifications: - - config: - url: https://bombino.api.redhat.com/v1/sbom/quay/push - event: repo_push - method: webhook - title: SBOM-event-to-Bombino diff --git a/konflux-configs/base/application/model-transparency-go/base/kustomization.yaml b/konflux-configs/base/application/model-transparency-go/base/kustomization.yaml deleted file mode 100644 index 97dddf2a..00000000 --- a/konflux-configs/base/application/model-transparency-go/base/kustomization.yaml +++ /dev/null @@ -1,16 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization - -resources: - - application.yaml - - component.yaml - - imagerepository.yaml - -components: - - ../../base/application - -patches: - - path: patch/releaseplan.yaml - target: - kind: ReleasePlan - name: promote-to-candidate-model-transparency-go diff --git a/konflux-configs/base/application/model-transparency-go/base/patch/releaseplan.yaml b/konflux-configs/base/application/model-transparency-go/base/patch/releaseplan.yaml deleted file mode 100644 index 3b01cd7b..00000000 --- a/konflux-configs/base/application/model-transparency-go/base/patch/releaseplan.yaml +++ /dev/null @@ -1,17 +0,0 @@ -apiVersion: appstudio.redhat.com/v1alpha1 -kind: ReleasePlan -metadata: - name: promote-to-candidate-model-transparency-go -spec: - tenantPipeline: - params: - - name: git-url - value: https://github.com/securesign/releases - - name: code-freeze - value: "false" - - name: type - value: "component" - - name: file-name - value: "model-transparency-go.json" - - name: revision - value: "RHTAS-build-bot_candidate-images-main" diff --git a/konflux-configs/base/project/kustomization.yaml b/konflux-configs/base/project/kustomization.yaml index 7d30d59a..2e45815e 100644 --- a/konflux-configs/base/project/kustomization.yaml +++ b/konflux-configs/base/project/kustomization.yaml @@ -17,4 +17,5 @@ resources: - overlay/policy-controller-operator - overlay/model-validation-operator - overlay/model-transparency + - overlay/model-transparency-go - overlay/cli-stacks diff --git a/konflux-configs/base/project/overlay/model-transparency-go/kustomization.yaml b/konflux-configs/base/project/overlay/model-transparency-go/kustomization.yaml new file mode 100644 index 00000000..f782c84b --- /dev/null +++ b/konflux-configs/base/project/overlay/model-transparency-go/kustomization.yaml @@ -0,0 +1,16 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - project.yaml + - template.yaml + +components: + - ../../base/ec + - ../../base/release-plan + +patches: + - target: + name: model-transparency-go-template + kind: ProjectDevelopmentStreamTemplate + path: patch/model-transparency-go.yaml diff --git a/konflux-configs/base/project/overlay/model-transparency-go/patch/model-transparency-go.yaml b/konflux-configs/base/project/overlay/model-transparency-go/patch/model-transparency-go.yaml new file mode 100644 index 00000000..7b18456a --- /dev/null +++ b/konflux-configs/base/project/overlay/model-transparency-go/patch/model-transparency-go.yaml @@ -0,0 +1,44 @@ +- op: add + path: /spec/resources/- + value: + apiVersion: appstudio.redhat.com/v1alpha1 + kind: Component + metadata: + annotations: + build.appstudio.openshift.io/pipeline: '{"name":"docker-build-oci-ta","bundle":"latest"}' + git-provider: github + git-provider-url: https://github.com + mintmaker.appstudio.redhat.com/disabled: "{{.mintmakerDisabled}}" + name: "model-transparency-go{{.nameSuffix}}" + spec: + application: "{{.application}}{{.nameSuffix}}" + componentName: model-transparency-go + build-nudges-ref: + - "model-validation-operator{{.nameSuffix}}" + source: + git: + url: https://github.com/securesign/model-transparency-go + revision: "{{.branch}}" + dockerfileUrl: Containerfile.model-transparency-go.rh +- op: add + path: /spec/resources/- + value: + apiVersion: appstudio.redhat.com/v1alpha1 + kind: ImageRepository + metadata: + name: "model-transparency-go{{.nameSuffix}}" + annotations: + image-controller.appstudio.redhat.com/update-component-image: 'true' + labels: + appstudio.redhat.com/application: "{{.application}}{{.nameSuffix}}" + appstudio.redhat.com/component: "model-transparency-go{{.nameSuffix}}" + spec: + image: + name: rhtas-tenant/model-transparency-go + visibility: public + notifications: + - config: + url: https://bombino.api.redhat.com/v1/sbom/quay/push + event: repo_push + method: webhook + title: SBOM-event-to-Bombino diff --git a/konflux-configs/base/project/overlay/model-transparency-go/project.yaml b/konflux-configs/base/project/overlay/model-transparency-go/project.yaml new file mode 100644 index 00000000..696d3833 --- /dev/null +++ b/konflux-configs/base/project/overlay/model-transparency-go/project.yaml @@ -0,0 +1,8 @@ +apiVersion: projctl.konflux.dev/v1beta1 +kind: Project +metadata: + name: model-transparency-go +spec: + displayName: "Red Hat Trusted Artifact Signer Model Transparency Go" + description: | + Model Transparency Go - Go implementation of model transparency for verifiable supply-chain metadata. diff --git a/konflux-configs/base/project/overlay/model-transparency-go/template.yaml b/konflux-configs/base/project/overlay/model-transparency-go/template.yaml new file mode 100644 index 00000000..fa56a217 --- /dev/null +++ b/konflux-configs/base/project/overlay/model-transparency-go/template.yaml @@ -0,0 +1,33 @@ +apiVersion: projctl.konflux.dev/v1beta1 +kind: ProjectDevelopmentStreamTemplate +metadata: + name: model-transparency-go-template + labels: + build.rhtas.com/ec: registry-rhtas + build.rhtas.com/type: component +spec: + project: model-transparency-go + variables: + - name: version + description: A version number for a new development stream + - name: branch + description: Git branch + defaultValue: "main" + - name: nameSuffix + description: A suffix which will be added to K8s resource name + defaultValue: "-{{hyphenize .version}}" + - name: application + description: The application name + defaultValue: "model-transparency-go" + - name: mintmakerDisabled + description: Whether to disable mintmaker annotation on the Component + defaultValue: "false" + resources: + - apiVersion: appstudio.redhat.com/v1alpha1 + kind: Application + metadata: + annotations: + application.thumbnail: "5" + name: "{{.application}}{{.nameSuffix}}" + spec: + displayName: "{{.application}} ({{.version}})" diff --git a/konflux-configs/base/stream/model-validation/base/kustomization.yaml b/konflux-configs/base/stream/model-validation/base/kustomization.yaml index 5a9b83a3..cac8b36c 100644 --- a/konflux-configs/base/stream/model-validation/base/kustomization.yaml +++ b/konflux-configs/base/stream/model-validation/base/kustomization.yaml @@ -3,4 +3,5 @@ kind: Component resources: - model-transparency.yaml + - model-transparency-go.yaml - model-validation-operator.yaml diff --git a/konflux-configs/base/stream/model-validation/base/model-transparency-go.yaml b/konflux-configs/base/stream/model-validation/base/model-transparency-go.yaml new file mode 100644 index 00000000..fbd3e4af --- /dev/null +++ b/konflux-configs/base/stream/model-validation/base/model-transparency-go.yaml @@ -0,0 +1,15 @@ +apiVersion: projctl.konflux.dev/v1beta1 +kind: ProjectDevelopmentStream +metadata: + name: model-transparency-go +spec: + project: model-transparency-go + template: + name: model-transparency-go-template + values: + - name: version + value: "main" + - name: branch + value: "main" + - name: nameSuffix + value: ""