Red Hat Konflux update gatekeeper-operator-bundle-3-17

[red-hat-konflux]

Pipelines as Code configuration proposal

To start the PipelineRun, add a new comment with content /ok-to-test

For more detailed information about running a PipelineRun, please refer to Pipelines as Code documentation Running the PipelineRun

To customize the proposed PipelineRuns after merge, please refer to Build Pipeline customization

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign dhaiducek for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[dhaiducek]

Waiting for updates from:

• Handle bundle annotations manually #128

[mprahl]

@dhaiducek okay, I just rebased this PR. 🤞

[dhaiducek]

This PR is waiting on https://issues.redhat.com/browse/KFLUXBUGS-1638 to be resolved so we can tell Konflux that it's a bundle image that doesn't require additional checks.

In the meantime I need to figure out how to wire up the bundle so that it either is referencing Konflux's accepted image registries rather than quay.io and reference a digest. (Or determine whether it's acceptable to exclude either or both rules.)

[dhaiducek]

Okay, this PR is ready to go. The Enterprise Contract failure is because we're using a scratch image for the bundle, but that's a false positive that should be resolved by the Konflux bug I noted previously.

[dhaiducek]

For now, the bundle is pointing to the 3.17 images from the registry--it'll be a future TODO to set up the necessary nudges and image redirects to get everything to build properly.

[mprahl]

We don't have access to the internet during downstream builds and we shouldn't use any binaries not compiled during the build or available in an official Red Hat image.

[mprahl]

We may have to write a Python script instead if yq isn't available in the UBI image.

[dhaiducek]

/retest

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dhaiducek]

Enterprise Contract is complaining that the task references were getting stale and I was getting lost on what was me and what came from Konflux. Plus I probably shouldn't be mucking with the default PR anyway since I'm not the author. I have these changes locally and will reset this pipeline, merge it (even though it'll probably fail initially), and then pile on my changes in a new PR to get it to green.

PR to reset pipeline:

• Red Hat Konflux update gatekeeper-operator-bundle-3-17 #132

PR to update the repo for Konflux:

• Refactor the bundle build #133