diff --git a/.tekton/acs-mcp-server-pull-request.yaml b/.tekton/acs-mcp-server-pull-request.yaml deleted file mode 100644 index 0af8e15..0000000 --- a/.tekton/acs-mcp-server-pull-request.yaml +++ /dev/null @@ -1,72 +0,0 @@ -apiVersion: tekton.dev/v1 -kind: PipelineRun -metadata: - annotations: - build.appstudio.openshift.io/repo: https://github.com/stackrox/stackrox-mcp?rev={{revision}} - build.appstudio.redhat.com/commit_sha: '{{revision}}' - build.appstudio.redhat.com/pull_request_number: '{{pull_request_number}}' - build.appstudio.redhat.com/target_branch: '{{target_branch}}' - pipelinesascode.tekton.dev/cancel-in-progress: "true" - pipelinesascode.tekton.dev/max-keep-runs: "10" - pipelinesascode.tekton.dev/on-label: "[]" - # - body.action != "ready_for_review" prevents double-triggering when a draft PR is marked ready for review. - # - trigger only for PRs on main and release branches. - # - support triggering by label: "konflux-build" - pipelinesascode.tekton.dev/on-cel-expression: | - ( - event == "pull_request" && body.action != "ready_for_review" && ( - target_branch == "main" || - target_branch.startsWith("release-") || - ( - has(body.pull_request) && - has(body.pull_request.labels) && - body.pull_request.labels.exists(l, l.name == "konflux-build") - ) - ) - ) - labels: - appstudio.openshift.io/application: agentic-cluster-security-suite - appstudio.openshift.io/component: acs-mcp-server - pipelines.appstudio.openshift.io/type: build - name: acs-mcp-server-on-pull-request - namespace: rh-acs-tenant -spec: - params: - - name: git-url - value: '{{source_url}}' - - name: revision - value: '{{revision}}' - - name: output-image-repo - value: quay.io/rhacs-eng/release-acs-mcp-server - - name: image-expires-after - value: 5d - - name: dockerfile - value: konflux.Dockerfile - - name: hermetic - value: 'true' - - name: prefetch-input - value: | - [ - { "type": "gomod", "path": "." }, - { "type": "rpm", "path": "." } - ] - - name: clone-depth - value: '0' - - name: clone-fetch-tags - value: 'true' - - pipelineRef: - name: basic-component-pipeline - - taskRunTemplate: - serviceAccountName: build-pipeline-acs-mcp-server - - timeouts: - tasks: 1h - finally: 10m - pipeline: 1h10m - - workspaces: - - name: git-auth - secret: - secretName: '{{ git_auth_secret }}' diff --git a/.tekton/acs-mcp-server-push.yaml b/.tekton/acs-mcp-server-push.yaml deleted file mode 100644 index 8d92756..0000000 --- a/.tekton/acs-mcp-server-push.yaml +++ /dev/null @@ -1,86 +0,0 @@ -apiVersion: tekton.dev/v1 -kind: PipelineRun -metadata: - annotations: - build.appstudio.openshift.io/repo: https://github.com/stackrox/stackrox-mcp?rev={{revision}} - build.appstudio.redhat.com/commit_sha: '{{revision}}' - build.appstudio.redhat.com/pull_request_number: '{{pull_request_number}}' - build.appstudio.redhat.com/target_branch: '{{target_branch}}' - pipelinesascode.tekton.dev/max-keep-runs: "10" - pipelinesascode.tekton.dev/on-label: "[]" - # For push trigger: - # - trigger on commit push on main or release branch. - # - trigger on tag pushes. - # For PR triggers: - # - body.action != "ready_for_review" prevents double-triggering when a draft PR is marked ready for review. - # - trigger only for PRs on release branches. - # - support triggering by label: "konflux-build" - pipelinesascode.tekton.dev/on-cel-expression: | - ( - event == "push" && target_branch.matches("^(main|release-.*|refs/tags/.*)$") - ) || ( - event == "pull_request" && body.action != "ready_for_review" && ( - target_branch.startsWith("release-") || - ( - has(body.pull_request) && - has(body.pull_request.labels) && - body.pull_request.labels.exists(l, l.name == "konflux-build") - ) - ) - ) - labels: - appstudio.openshift.io/application: agentic-cluster-security-suite - appstudio.openshift.io/component: acs-mcp-server - pipelines.appstudio.openshift.io/type: build - name: acs-mcp-server-on-push - namespace: rh-acs-tenant -spec: - params: - - name: git-url - value: '{{source_url}}' - - name: revision - value: '{{revision}}' - - name: output-image-repo - value: quay.io/rhacs-eng/release-acs-mcp-server - - name: dockerfile - value: konflux.Dockerfile - - name: hermetic - value: 'true' - - name: prefetch-input - value: | - [ - { "type": "gomod", "path": "." }, - { "type": "rpm", "path": "." } - ] - - name: build-source-image - value: 'true' - - name: build-image-index - value: 'true' - - name: image-expires-after - value: '13w' - - name: clone-depth - value: '0' - - name: clone-fetch-tags - value: 'true' - - name: build-platforms - value: - - linux/amd64 - - linux/arm64 - - linux/ppc64le - - linux/s390x - - pipelineRef: - name: basic-component-pipeline - - taskRunTemplate: - serviceAccountName: build-pipeline-acs-mcp-server - - timeouts: - tasks: 1h - finally: 10m - pipeline: 1h10m - - workspaces: - - name: git-auth - secret: - secretName: '{{ git_auth_secret }}'