[osmman]

Summary

Adds a prepare-release-branch pipeline that creates or updates release-X.Y branches from a combined Snapshot, triggered manually via a Release.

• pipelines/prepare-release-branch.yaml — pipeline resolving the two tasks from this repo
• tasks/prepare-release/prepare-release-branch-parse.yaml — extracts branch, suffix, release version and repo list from the Release/Snapshot
• tasks/prepare-release/prepare-release-branch.yaml — fans out per-repo (matrix) to create/update the release branch
• konflux-configs/base/application/base/prepare-release-branch/ — ReleasePlan prepare-release-branch bound to the empty rhtas-release Application (manual trigger, auto-release: 'false'), wired into the application kustomization

🤖 Generated with Claude Code

Resolve: https://redhat.atlassian.net/browse/SECURESIGN-5962

[github-actions]

Configuration Diff

7 document(s) impacted:

+ 2 added
- 0 removed
! 5 modified

Diff

@@ spec.template.values @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStream/rhtas-tenant/policy-controller-operator-v1-0
! - one list entry removed:
- - name: policyControllerOperatorDeploymentName
-   value: policy-controller-manager

@@ spec.template.values @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStream/rhtas-tenant/policy-controller-v1-0
! - one list entry removed:
- - name: policyControllerOperatorDeploymentName
-   value: policy-controller-manager

@@ spec.resources @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/pco-fbc-template
! - one list entry removed:
- - apiVersion: appstudio.redhat.com/v1beta2
-   kind: IntegrationTestScenario
-   metadata:
-     name: {{.application}}{{.nameSuffix}}-v4-19-upgrade-fips
-     labels:
-       test.appstudio.openshift.io/optional: "true"
-   spec:
-     application: {{.application}}{{.nameSuffix}}
-     contexts:
-     - name: component_{{.application}}{{.nameSuffix}}-v4-19
-       description: "execute the FIPS upgrade integration test when component {{.application}}{{.nameSuffix}}-v4-19 updates"
-     params:
-     - name: OCP_VERSION
-       value: 4.19
-     - name: FIPS_ENABLED
-       value: "true"
-     - name: CLUSTER_PLATFORM
-       value: openshift
-     resolverRef:
-       params:
-       - name: url
-         value: "https://github.com/securesign/pipelines.git"
-       - name: revision
-         value: main
-       - name: pathInRepo
-         value: pipelines/integration-test/pco-operator-upgrade.yaml
-       resolver: git
-       resourceKind: pipelinerun

@@ spec.variables.policyControllerOperatorDeploymentName.defaultValue @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/pco-fbc-template
! ± value change
- policy-controller-operator
+ policy-controller-manager

@@ spec.resources @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/rhtas-fbc-template
! - one list entry removed:
- - apiVersion: appstudio.redhat.com/v1beta2
-   kind: IntegrationTestScenario
-   metadata:
-     name: {{.application}}{{.nameSuffix}}-v4-19-upgrade-fips
-     labels:
-       test.appstudio.openshift.io/optional: "true"
-   spec:
-     application: {{.application}}{{.nameSuffix}}
-     contexts:
-     - name: component_{{.application}}{{.nameSuffix}}-v4-19
-       description: "execute the FIPS upgrade integration test when component {{.application}}{{.nameSuffix}}-v4-19 updates"
-     params:
-     - name: OCP_VERSION
-       value: 4.19
-     - name: FIPS_ENABLED
-       value: "true"
-     - name: CLUSTER_PLATFORM
-       value: openshift
-     resolverRef:
-       params:
-       - name: url
-         value: "https://github.com/securesign/pipelines.git"
-       - name: revision
-         value: main
-       - name: pathInRepo
-         value: pipelines/integration-test/operator-upgrade.yaml
-       resolver: git
-       resourceKind: pipelinerun

@@ (root level) @@
# appstudio.redhat.com/v1alpha1/Application/rhtas-tenant/rhtas-release
! + one document added:
+   ---
+   apiVersion: appstudio.redhat.com/v1alpha1
+   kind: Application
+   metadata:
+     name: rhtas-release
+     namespace: rhtas-tenant
+   spec:
+     displayName: "RHTAS release vehicle"

@@ (root level) @@
# appstudio.redhat.com/v1alpha1/ReleasePlan/rhtas-tenant/prepare-release-stream
! + one document added:
+   ---
+   apiVersion: appstudio.redhat.com/v1alpha1
+   kind: ReleasePlan
+   metadata:
+     name: prepare-release-stream
+     namespace: rhtas-tenant
+     labels:
+       release.appstudio.openshift.io/auto-release: "false"
+   spec:
+     application: rhtas-release
+     tenantPipeline:
+       pipelineRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines"
+         - name: revision
+           value: tturek/prepare-release
+         - name: pathInRepo
+           value: pipelines/prepare-release-stream.yaml
+         resolver: git
+       serviceAccountName: konflux-bot-0

---

_{📦 Artifacts: base-output.yaml, head-output.yaml, dyff-output.txt}

[osmman]

This PR functionality will be reworked after #530. The reason is that it will centralise some versioning values which impact will be removing its behavior from prepare-release-branch.

Modified version will create one PR to securesign/pipeline repository to bump version on all repositories in snapshot.