[jkopriva]

Move the Ansible component to docker-build-oci-ta so its Konflux build configuration continues to resolve. SECURESIGN-6110

Assisted-by: Codex

[qodo-for-securesign]

PR Summary by Qodo

Remove legacy docker-build pipeline and migrate Ansible to OCI TA

⚙️ Configuration changes 🕐 10-20 Minutes

---

AI Description

• Remove the legacy docker-build pipeline, its PR and push runs, and Konflux resources.
• Point the Ansible component at docker-build-oci-ta so its build configuration continues to
 resolve.
• Remove the retired component’s Enterprise Contract test context.

Diagram

graph TD
  PC["OCI TA Component"] --> RUNS["PR and Push Runs"] --> PIPE["OCI TA Pipeline"] --> REPO[("Pipeline Image Repo")]
  ANS["Ansible Component"] --> PIPE
  PC --> EC["Enterprise Contract"]
  PC --> REPO

Loading

High-Level Assessment

Retiring the unused legacy pipeline and moving Ansible to the existing OCI TA pipeline is the direct approach. Keeping both pipelines would preserve a redundant build path without addressing the removed configuration reference.

Files changed (4) +2 / -46

Other (4) +2 / -46

component.yamlRemove the legacy Konflux build component +0/-20

Remove the legacy Konflux build component

• Removes the docker-build Component definition while retaining the OCI TA, multi-platform, and FBC components.

konflux-configs/base/application/pipelines/base/component.yaml

ec.yamlRemove the legacy Enterprise Contract context +0/-2

Remove the legacy Enterprise Contract context

• Drops the docker-build component context from the pipelines integration test scenario. The OCI TA contexts remain.

konflux-configs/base/application/pipelines/base/ec.yaml

imagerepository.yamlRemove the legacy image repository +0/-22

Remove the legacy image repository

• Removes the Konflux ImageRepository for docker-build while retaining repositories for the supported components.

konflux-configs/base/application/pipelines/base/imagerepository.yaml

collection.yamlSelect the OCI TA pipeline for Ansible +2/-2

Select the OCI TA pipeline for Ansible

• Changes the artifact-signer-ansible Component annotation from docker-build to docker-build-oci-ta so its Konflux build configuration resolves after the legacy pipeline is removed.

konflux-configs/base/project/overlay/ansible/patch/collection.yaml

[qodo-for-securesign]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

---

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

---

Powered by Qodo

[github-actions]

Configuration Diff

4 document(s) impacted:

+ 0 added
- 2 removed
! 2 modified

Diff

@@ spec.contexts @@
# appstudio.redhat.com/v1beta2/IntegrationTestScenario/rhtas-tenant/pipelines-enterprise-contract
! - one list entry removed:
- - name: component_docker-build
-   description: "execute the integration test when component docker-build updates"

@@ spec.resources.appstudio.redhat.com/v1alpha1/Component/artifact-signer-ansible{{.nameSuffix}}.metadata.annotations.build.appstudio.openshift.io/pipeline @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/ansible-template
! ± value change
- {"name":"docker-build","bundle":"latest"}
+ {"name":"docker-build-oci-ta","bundle":"latest"}

@@ (root level) @@
# appstudio.redhat.com/v1alpha1/Component/rhtas-tenant/docker-build
! - one document removed:
- ---
- apiVersion: appstudio.redhat.com/v1alpha1
- kind: Component
- metadata:
-   name: docker-build
-   namespace: rhtas-tenant
-   annotations:
-     build.appstudio.openshift.io/pipeline: "{\"name\":\"docker-build\",\"bundle\":\"latest\"}"
-     build.appstudio.openshift.io/status: "{\"pac\":{\"state\":\"enabled\",\"merge-url\":\"https://github.com/securesign/pipelines/pull/2\",\"configuration-time\":\"Thu, 21 Nov 2024 16:50:06 UTC\"},\"message\":\"done\"}"
-     git-provider: github
-     git-provider-url: "https://github.com"
- spec:
-   source:
-     git:
-       url: "https://github.com/securesign/pipelines"
-       dockerfileUrl: pipeline-tests/Dockerfile
-       revision: main
-   application: pipelines
-   componentName: docker-build

@@ (root level) @@
# appstudio.redhat.com/v1alpha1/ImageRepository/rhtas-tenant/konflux-docker-build
! - one document removed:
- ---
- apiVersion: appstudio.redhat.com/v1alpha1
- kind: ImageRepository
- metadata:
-   name: konflux-docker-build
-   namespace: rhtas-tenant
-   annotations:
-     image-controller.appstudio.redhat.com/update-component-image: "true"
-   labels:
-     appstudio.redhat.com/application: pipelines
-     appstudio.redhat.com/component: docker-build
- spec:
-   image:
-     name: rhtas-tenant/docker-build
-     visibility: public
-   notifications:
-   - config:
-       url: "https://bombino.api.redhat.com/v1/sbom/quay/push"
-     event: repo_push
-     method: webhook
-     title: SBOM-event-to-Bombino

---

_{📦 Artifacts: base-output.yaml, head-output.yaml, dyff-output.txt}