From d7a6d97f86cbdcb6e6b8d8fd5a5387990815cc29 Mon Sep 17 00:00:00 2001 From: Tom Martensen Date: Wed, 18 Feb 2026 15:25:41 +0100 Subject: [PATCH 1/5] test: wait-for-image for specific commit --- .tekton/create-custom-snapshot.yaml | 2 +- .tekton/operator-bundle-pipeline.yaml | 14 +++++++++++++- 2 files changed, 14 insertions(+), 2 deletions(-) diff --git a/.tekton/create-custom-snapshot.yaml b/.tekton/create-custom-snapshot.yaml index c90b1dacfaa5a..5260a386e62ca 100644 --- a/.tekton/create-custom-snapshot.yaml +++ b/.tekton/create-custom-snapshot.yaml @@ -175,7 +175,7 @@ spec: - name: name value: wait-for-image - name: bundle - value: quay.io/rhacs-eng/konflux-tasks:latest@sha256:728527ed22e3527c0b7fead4657d0e889d2506d32383351abdf93eb34b496a83 + value: quay.io/rhacs-eng/konflux-tasks:pr-87@sha256:20b626bf17a63f31bd19a17fa3a8943ec3b0c9892ebe0d25daf8c360fc3093ab - name: kind value: task resolver: bundles diff --git a/.tekton/operator-bundle-pipeline.yaml b/.tekton/operator-bundle-pipeline.yaml index 44f67310d2f19..df5e84fab6172 100644 --- a/.tekton/operator-bundle-pipeline.yaml +++ b/.tekton/operator-bundle-pipeline.yaml @@ -357,7 +357,7 @@ spec: - name: name value: wait-for-image - name: bundle - value: quay.io/rhacs-eng/konflux-tasks:latest@sha256:728527ed22e3527c0b7fead4657d0e889d2506d32383351abdf93eb34b496a83 + value: quay.io/rhacs-eng/konflux-tasks:pr-87@sha256:20b626bf17a63f31bd19a17fa3a8943ec3b0c9892ebe0d25daf8c360fc3093ab - name: kind value: task resolver: bundles @@ -376,6 +376,8 @@ spec: params: - name: IMAGE value: "$(params.scanner-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" + - name: ENABLE_GIT_REF_CHECK + value: false taskRef: *wait-for-image-ref # This timeout must be the same as the pipeline timeout in `scanner-retag.yaml` timeout: 40m @@ -384,6 +386,8 @@ spec: params: - name: IMAGE value: "$(params.scanner-db-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" + - name: ENABLE_GIT_REF_CHECK + value: false taskRef: *wait-for-image-ref # This timeout must be the same as the pipeline timeout in `scanner-db-retag.yaml` timeout: 40m @@ -392,6 +396,8 @@ spec: params: - name: IMAGE value: "$(params.scanner-slim-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" + - name: ENABLE_GIT_REF_CHECK + value: false taskRef: *wait-for-image-ref # This timeout must be the same as the pipeline timeout in `scanner-slim-retag.yaml` timeout: 40m @@ -400,6 +406,8 @@ spec: params: - name: IMAGE value: "$(params.scanner-db-slim-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" + - name: ENABLE_GIT_REF_CHECK + value: false taskRef: *wait-for-image-ref # This timeout must be the same as the pipeline timeout in `scanner-db-slim-retag.yaml` timeout: 40m @@ -424,6 +432,8 @@ spec: params: - name: IMAGE value: "$(params.collector-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" + - name: ENABLE_GIT_REF_CHECK + value: false taskRef: *wait-for-image-ref # This timeout must be the same as the pipeline timeout in `collector-retag.yaml` timeout: 40m @@ -432,6 +442,8 @@ spec: params: - name: IMAGE value: "$(params.fact-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" + - name: ENABLE_GIT_REF_CHECK + value: false taskRef: *wait-for-image-ref # This timeout must be the same as the pipeline timeout in `retag-fact.yaml` timeout: 40m From ddf77d756a5317615928e89974933acb1c01d2dc Mon Sep 17 00:00:00 2001 From: Tom Martensen Date: Wed, 18 Feb 2026 15:26:48 +0100 Subject: [PATCH 2/5] add comment --- .tekton/operator-bundle-pipeline.yaml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.tekton/operator-bundle-pipeline.yaml b/.tekton/operator-bundle-pipeline.yaml index df5e84fab6172..d716cd549c7e3 100644 --- a/.tekton/operator-bundle-pipeline.yaml +++ b/.tekton/operator-bundle-pipeline.yaml @@ -376,6 +376,7 @@ spec: params: - name: IMAGE value: "$(params.scanner-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" + # Disabling the git ref check as this image is built in a different repository from a different commit - name: ENABLE_GIT_REF_CHECK value: false taskRef: *wait-for-image-ref @@ -386,6 +387,7 @@ spec: params: - name: IMAGE value: "$(params.scanner-db-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" + # Disabling the git ref check as this image is built in a different repository from a different commit - name: ENABLE_GIT_REF_CHECK value: false taskRef: *wait-for-image-ref @@ -396,6 +398,7 @@ spec: params: - name: IMAGE value: "$(params.scanner-slim-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" + # Disabling the git ref check as this image is built in a different repository from a different commit - name: ENABLE_GIT_REF_CHECK value: false taskRef: *wait-for-image-ref @@ -406,6 +409,7 @@ spec: params: - name: IMAGE value: "$(params.scanner-db-slim-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" + # Disabling the git ref check as this image is built in a different repository from a different commit - name: ENABLE_GIT_REF_CHECK value: false taskRef: *wait-for-image-ref @@ -432,6 +436,7 @@ spec: params: - name: IMAGE value: "$(params.collector-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" + # Disabling the git ref check as this image is built in a different repository from a different commit - name: ENABLE_GIT_REF_CHECK value: false taskRef: *wait-for-image-ref @@ -442,6 +447,7 @@ spec: params: - name: IMAGE value: "$(params.fact-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" + # Disabling the git ref check as this image is built in a different repository from a different commit - name: ENABLE_GIT_REF_CHECK value: false taskRef: *wait-for-image-ref From 7da281595affd80895519dd598df3168e29b41b5 Mon Sep 17 00:00:00 2001 From: Tom Martensen Date: Wed, 18 Feb 2026 16:20:56 +0100 Subject: [PATCH 3/5] bump wait-for-image task definition --- .tekton/create-custom-snapshot.yaml | 2 +- .tekton/operator-bundle-pipeline.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/create-custom-snapshot.yaml b/.tekton/create-custom-snapshot.yaml index 5260a386e62ca..89c6f453187a7 100644 --- a/.tekton/create-custom-snapshot.yaml +++ b/.tekton/create-custom-snapshot.yaml @@ -175,7 +175,7 @@ spec: - name: name value: wait-for-image - name: bundle - value: quay.io/rhacs-eng/konflux-tasks:pr-87@sha256:20b626bf17a63f31bd19a17fa3a8943ec3b0c9892ebe0d25daf8c360fc3093ab + value: quay.io/rhacs-eng/konflux-tasks:pr-87@sha256:c77a322121f558579a71f6f2e70f1ff3bd4f9c10fcc3fc0104dca8fcf0237afa - name: kind value: task resolver: bundles diff --git a/.tekton/operator-bundle-pipeline.yaml b/.tekton/operator-bundle-pipeline.yaml index d716cd549c7e3..b3c19fe6000a3 100644 --- a/.tekton/operator-bundle-pipeline.yaml +++ b/.tekton/operator-bundle-pipeline.yaml @@ -357,7 +357,7 @@ spec: - name: name value: wait-for-image - name: bundle - value: quay.io/rhacs-eng/konflux-tasks:pr-87@sha256:20b626bf17a63f31bd19a17fa3a8943ec3b0c9892ebe0d25daf8c360fc3093ab + value: quay.io/rhacs-eng/konflux-tasks:pr-87@sha256:c77a322121f558579a71f6f2e70f1ff3bd4f9c10fcc3fc0104dca8fcf0237afa - name: kind value: task resolver: bundles From 866c4ee483fcb54f9d75caf78f47d0fece66a220 Mon Sep 17 00:00:00 2001 From: Tom Martensen Date: Thu, 19 Feb 2026 10:28:29 +0100 Subject: [PATCH 4/5] enable git ref check for scanner for proof of work --- .tekton/operator-bundle-pipeline.yaml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.tekton/operator-bundle-pipeline.yaml b/.tekton/operator-bundle-pipeline.yaml index b3c19fe6000a3..f62489754c031 100644 --- a/.tekton/operator-bundle-pipeline.yaml +++ b/.tekton/operator-bundle-pipeline.yaml @@ -376,9 +376,6 @@ spec: params: - name: IMAGE value: "$(params.scanner-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" - # Disabling the git ref check as this image is built in a different repository from a different commit - - name: ENABLE_GIT_REF_CHECK - value: false taskRef: *wait-for-image-ref # This timeout must be the same as the pipeline timeout in `scanner-retag.yaml` timeout: 40m From 98caa1ab417dfab96b89ad325818c2a4da742ee1 Mon Sep 17 00:00:00 2001 From: Tom Martensen Date: Thu, 19 Feb 2026 10:55:12 +0100 Subject: [PATCH 5/5] undo test proof change --- .tekton/operator-bundle-pipeline.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.tekton/operator-bundle-pipeline.yaml b/.tekton/operator-bundle-pipeline.yaml index f62489754c031..b3c19fe6000a3 100644 --- a/.tekton/operator-bundle-pipeline.yaml +++ b/.tekton/operator-bundle-pipeline.yaml @@ -376,6 +376,9 @@ spec: params: - name: IMAGE value: "$(params.scanner-image-build-repo):$(tasks.determine-image-tag.results.IMAGE_TAG)" + # Disabling the git ref check as this image is built in a different repository from a different commit + - name: ENABLE_GIT_REF_CHECK + value: false taskRef: *wait-for-image-ref # This timeout must be the same as the pipeline timeout in `scanner-retag.yaml` timeout: 40m