Skip to content

Conversation

kurlov
Copy link
Member

@kurlov kurlov commented Jul 22, 2025

We can no longer rely on pipelineruns CR to fetch image references. Snapshots are more reliable.
One caveat comparing Konflux UI is that snapshots contains images with digests and no tags, so I added "name" value as well to show which digest belongs to which OCP version.

OK example:

./scripts/get-built-images.sh 0980bc57029612d0c51484bff4dd00ff84d784eb master
Operator catalog images for commit 0980bc57029612d0c51484bff4dd00ff84d784eb:
operator-index-ocp-v4-12: quay.io/rhacs-eng/stackrox-operator-index@sha256:0280d4db28bbfde3b684f1f40922f95b7e00a5184d705dbee7670e1431a3a6e8
operator-index-ocp-v4-13: quay.io/rhacs-eng/stackrox-operator-index@sha256:f32511fdbe8fa71e072dab977730c03a5536498e9dfc05063fc9b018d7abb1dd
operator-index-ocp-v4-14: quay.io/rhacs-eng/stackrox-operator-index@sha256:a19e1ffd360ad5f3d1d93afc20e290a318bef65d5b02117860836c099686d6c8
operator-index-ocp-v4-15: quay.io/rhacs-eng/stackrox-operator-index@sha256:c9b3058e00045da4617c3f4c894b93ddc033237bf133d0ed29f99d8822c628fc
operator-index-ocp-v4-16: quay.io/rhacs-eng/stackrox-operator-index@sha256:92ff20dbf7a2441e6145f1eff15de779e695cabf3b886196586e2cd8369046fc
operator-index-ocp-v4-17: quay.io/rhacs-eng/stackrox-operator-index@sha256:69b90118e7b4c793c0a99bfd92ac20c4e1560f69c9b8bb13f27f06588334f087
operator-index-ocp-v4-18: quay.io/rhacs-eng/stackrox-operator-index@sha256:1e10597dda32a6ab7a6aa0e081fe2a56cdf81911135e50ba3573f0a9017cd010
operator-index-ocp-v4-19: quay.io/rhacs-eng/stackrox-operator-index@sha256:a855909c0204f0792b634f23a0b9182623e3e6ed8a9fbc069ed490ebd5a836c8

Error example:

./scripts/get-built-images.sh fd7c68e7ee5c76509ad0433696e702b89b786dfb master
Operator catalog images for commit fd7c68e7ee5c76509ad0433696e702b89b786dfb:
./scripts/get-built-images.sh: line 29: build_images: Error: No Snapshot CRs found for the commit. Use Konflux UI to get built images instead: https://konflux-ui.apps.stone-prd-rh01.pg1f.p1.openshiftapps.com/ns/rh-acs-tenant/applications.

@kurlov kurlov requested a review from porridge July 22, 2025 09:32
Copy link
Contributor

Caution

There are some errors in your PipelineRun template.

PipelineRun Error
unknown `Object 'Kind' is missing in '

The fbc-fips-check-oci-ta task pulls index images as specified in the catalog, which means from the production registry (registry.redhat.io/advanced-cluster-security/).

This ImageDigestMirrorSet allows the task to also pull our unreleased images from quay.io instead of registry.redhat.io.

'| | quay-proxy |no kind "ImageDigestMirrorSet" is registered for version "operator.openshift.io/v1alpha1" in scheme "k8s.io/client-go/kubernetes/scheme/register.go:83"` |

@kurlov kurlov requested review from msugakov and tommartensen July 22, 2025 09:32
@kurlov kurlov requested a review from msugakov July 23, 2025 14:52
@kurlov kurlov requested a review from msugakov July 24, 2025 22:56
porridge
porridge previously approved these changes Jul 29, 2025
@kurlov kurlov enabled auto-merge (squash) July 29, 2025 08:44
@kurlov kurlov merged commit e337e66 into master Jul 29, 2025
17 checks passed
@kurlov kurlov deleted the akurlov/ROX-30141-use-snapshots-for-get-built-images-script branch July 29, 2025 10:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants