Konflux Re-org Tas-Components

konflux-configs/base/project/kustomization.yaml

@@ -3,7 +3,10 @@ kind: Kustomization
 
 resources:
   - overlay/ansible
+  - overlay/rekor-monitor
   - overlay/rhtas-fbc
   - overlay/rhtas-operator
+  - overlay/segment-backup-job
   - overlay/tas-tools
+  - overlay/tas-components
   - overlay/tough

konflux-configs/base/project/overlay/rekor-monitor/kustomization.yaml

@@ -0,0 +1,16 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - project.yaml
+  - template.yaml
+
+components:
+  - ../../base/ec
+  - ../../base/release-plan
+
+patches:
+  - target:
+      name: rekor-monitor-template
+      kind: ProjectDevelopmentStreamTemplate
+    path: patch/rekor-monitor.yaml

konflux-configs/base/project/overlay/rekor-monitor/patch/rekor-monitor.yaml

@@ -0,0 +1,42 @@
+- op: add
+  path: /spec/resources/-
+  value:
+    apiVersion: appstudio.redhat.com/v1alpha1
+    kind: Component
+    metadata:
+      annotations:
+        build.appstudio.openshift.io/pipeline: '{"name":"docker-build-oci-ta","bundle":"latest"}'
+        git-provider: github
+        git-provider-url: https://github.com
+        mintmaker.appstudio.redhat.com/disabled: "{{.mintmakerDisabled}}"
+      name: "rekor-monitor{{.nameSuffix}}"
+    spec:
+      application: "{{.application}}{{.nameSuffix}}"
+      componentName: "rekor-monitor"
+      source:
+        git:
+          url: https://github.com/securesign/rekor-monitor
+          revision: "{{.branch}}"
+          dockerfileUrl: Dockerfile.rekor-monitor.rh
+- op: add
+  path: /spec/resources/-
+  value:
+    apiVersion: appstudio.redhat.com/v1alpha1
+    kind: ImageRepository
+    metadata:
+      name: "rekor-monitor{{.nameSuffix}}"
+      annotations:
+        image-controller.appstudio.redhat.com/update-component-image: 'true'
+      labels:
+        appstudio.redhat.com/application: "{{.application}}{{.nameSuffix}}"
+        appstudio.redhat.com/component: "rekor-monitor{{.nameSuffix}}"
+    spec:
+      image:
+        name: rhtas-tenant/rekor-monitor
+        visibility: public
+      notifications:
+        - config:
+            url: https://bombino.api.redhat.com/v1/sbom/quay/push
+          event: repo_push
+          method: webhook
+          title: SBOM-event-to-Bombino

konflux-configs/base/project/overlay/rekor-monitor/project.yaml

@@ -0,0 +1,8 @@
+apiVersion: projctl.konflux.dev/v1beta1
+kind: Project
+metadata:
+  name: rekor-monitor
+spec:
+  displayName: "Red Hat Trusted Artifact Signer Rekor Monitor"
+  description: |
+    Rekor transparency log monitoring

konflux-configs/base/project/overlay/rekor-monitor/template.yaml

@@ -0,0 +1,33 @@
+apiVersion: projctl.konflux.dev/v1beta1
+kind: ProjectDevelopmentStreamTemplate
+metadata:
+  name: rekor-monitor-template
+  labels:
+    build.rhtas.com/ec: registry-rhtas
+    build.rhtas.com/type: component
+spec:
+  project: rekor-monitor
+  variables:
+    - name: version
+      description: A version number for a new development stream
+    - name: branch
+      description: Git branch
+      defaultValue: "main"
+    - name: nameSuffix
+      description: A suffix which will be added to K8s resource name
+      defaultValue: "-{{hyphenize .version}}"
+    - name: application
+      description: The application name
+      defaultValue: "rekor-monitor"
+    - name: mintmakerDisabled
+      description: Whether to disable mintmaker annotation on the Component
+      defaultValue: "false"
+  resources:
+    - apiVersion: appstudio.redhat.com/v1alpha1
+      kind: Application
+      metadata:
+        annotations:
+          application.thumbnail: "5"
+        name: "{{.application}}{{.nameSuffix}}"
+      spec:
+        displayName: "{{.application}} ({{.version}})"

konflux-configs/base/project/overlay/segment-backup-job/kustomization.yaml

@@ -0,0 +1,16 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - project.yaml
+  - template.yaml
+
+components:
+  - ../../base/ec
+  - ../../base/release-plan
+
+patches:
+  - target:
+      name: segment-backup-job-template
+      kind: ProjectDevelopmentStreamTemplate
+    path: patch/segment-backup-job.yaml

konflux-configs/base/project/overlay/segment-backup-job/patch/segment-backup-job.yaml

@@ -0,0 +1,42 @@
+- op: add
+  path: /spec/resources/-
+  value:
+    apiVersion: appstudio.redhat.com/v1alpha1
+    kind: Component
+    metadata:
+      annotations:
+        build.appstudio.openshift.io/pipeline: '{"name":"docker-build-oci-ta","bundle":"latest"}'
+        git-provider: github
+        git-provider-url: https://github.com
+        mintmaker.appstudio.redhat.com/disabled: "{{.mintmakerDisabled}}"
+      name: "segment-backup-job{{.nameSuffix}}"
+    spec:
+      application: "{{.application}}{{.nameSuffix}}"
+      componentName: "segment-backup-job"
+      source:
+        git:
+          url: https://github.com/securesign/segment-backup-job
+          revision: "{{.branch}}"
+          dockerfileUrl: Dockerfile.segment-backup-job.rh
+- op: add
+  path: /spec/resources/-
+  value:
+    apiVersion: appstudio.redhat.com/v1alpha1
+    kind: ImageRepository
+    metadata:
+      name: "segment-backup-job{{.nameSuffix}}"
+      annotations:
+        image-controller.appstudio.redhat.com/update-component-image: 'true'
+      labels:
+        appstudio.redhat.com/application: "{{.application}}{{.nameSuffix}}"
+        appstudio.redhat.com/component: "segment-backup-job{{.nameSuffix}}"
+    spec:
+      image:
+        name: rhtas-tenant/segment-backup-job
+        visibility: public
+      notifications:
+        - config:
+            url: https://bombino.api.redhat.com/v1/sbom/quay/push
+          event: repo_push
+          method: webhook
+          title: SBOM-event-to-Bombino

konflux-configs/base/project/overlay/segment-backup-job/project.yaml

@@ -0,0 +1,8 @@
+apiVersion: projctl.konflux.dev/v1beta1
+kind: Project
+metadata:
+  name: segment-backup-job
+spec:
+  displayName: "Red Hat Trusted Artifact Signer Segment Backup Job"
+  description: |
+    Segment backup job for TAS (deprecated in 1.4+)

konflux-configs/base/project/overlay/segment-backup-job/template.yaml

@@ -0,0 +1,33 @@
+apiVersion: projctl.konflux.dev/v1beta1
+kind: ProjectDevelopmentStreamTemplate
+metadata:
+  name: segment-backup-job-template
+  labels:
+    build.rhtas.com/ec: registry-rhtas
+    build.rhtas.com/type: component
+spec:
+  project: segment-backup-job
+  variables:
+    - name: version
+      description: A version number for a new development stream
+    - name: branch
+      description: Git branch
+      defaultValue: "main"
+    - name: nameSuffix
+      description: A suffix which will be added to K8s resource name
+      defaultValue: "-{{hyphenize .version}}"
+    - name: application
+      description: The application name
+      defaultValue: "segment-backup-job"
+    - name: mintmakerDisabled
+      description: Whether to disable mintmaker annotation on the Component
+      defaultValue: "false"
+  resources:
+    - apiVersion: appstudio.redhat.com/v1alpha1
+      kind: Application
+      metadata:
+        annotations:
+          application.thumbnail: "5"
+        name: "{{.application}}{{.nameSuffix}}"
+      spec:
+        displayName: "{{.application}} ({{.version}})"

konflux-configs/base/project/overlay/tas-components/kustomization.yaml

@@ -0,0 +1,52 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - project.yaml
+  - template.yaml
+
+components:
+  - ../../base/ec
+  - ../../base/release-plan
+
+patches:
+  - target:
+      name: tas-components-template
+      kind: ProjectDevelopmentStreamTemplate
+    path: patch/trillian-database.yaml
+  - target:
+      name: tas-components-template
+      kind: ProjectDevelopmentStreamTemplate
+    path: patch/backfill-redis.yaml
+  - target:
+      name: tas-components-template
+      kind: ProjectDevelopmentStreamTemplate
+    path: patch/certificate-transparency-go.yaml
+  - target:
+      name: tas-components-template
+      kind: ProjectDevelopmentStreamTemplate
+    path: patch/fulcio-server.yaml
+  - target:
+      name: tas-components-template
+      kind: ProjectDevelopmentStreamTemplate
+    path: patch/rekor-search.yaml
+  - target:
+      name: tas-components-template
+      kind: ProjectDevelopmentStreamTemplate
+    path: patch/rekor-server.yaml
+  - target:
+      name: tas-components-template
+      kind: ProjectDevelopmentStreamTemplate
+    path: patch/timestamp-authority.yaml
+  - target:
+      name: tas-components-template
+      kind: ProjectDevelopmentStreamTemplate
+    path: patch/trillian-logserver.yaml
+  - target:
+      name: tas-components-template
+      kind: ProjectDevelopmentStreamTemplate
+    path: patch/trillian-logsigner.yaml
+  - target:
+      name: tas-components-template
+      kind: ProjectDevelopmentStreamTemplate
+    path: patch/redis.yaml

konflux-configs/base/project/overlay/tas-components/patch/backfill-redis.yaml

@@ -0,0 +1,42 @@
+- op: add
+  path: /spec/resources/-
+  value:
+    apiVersion: appstudio.redhat.com/v1alpha1
+    kind: Component
+    metadata:
+      annotations:
+        build.appstudio.openshift.io/pipeline: '{"name":"docker-build-oci-ta","bundle":"latest"}'
+        git-provider: github
+        git-provider-url: https://github.com
+        mintmaker.appstudio.redhat.com/disabled: "{{.mintmakerDisabled}}"
+      name: "backfill-redis{{.nameSuffix}}"
+    spec:
+      application: "{{.application}}{{.nameSuffix}}"
+      componentName: "backfill-redis"
+      source:
+        git:
+          url: https://github.com/securesign/rekor
+          revision: "{{.branch}}"
+          dockerfileUrl: Dockerfile.backfill-redis.rh
+- op: add
+  path: /spec/resources/-
+  value:
+    apiVersion: appstudio.redhat.com/v1alpha1
+    kind: ImageRepository 
+    metadata:
+      name: "backfill-redis{{.nameSuffix}}"
+      annotations:
+        image-controller.appstudio.redhat.com/update-component-image: 'true'
+      labels:
+        appstudio.redhat.com/application: "{{.application}}{{.nameSuffix}}"
+        appstudio.redhat.com/component: "backfill-redis{{.nameSuffix}}"
+    spec:
+      image:
+        name: rhtas-tenant/backfill-redis
+        visibility: public
+      notifications:
+        - config:
+            url: https://bombino.api.redhat.com/v1/sbom/quay/push
+          event: repo_push
+          method: webhook
+          title: SBOM-event-to-Bombino

konflux-configs/base/project/overlay/tas-components/patch/certificate-transparency-go.yaml

@@ -0,0 +1,42 @@
+- op: add
+  path: /spec/resources/-
+  value:
+    apiVersion: appstudio.redhat.com/v1alpha1
+    kind: Component
+    metadata:
+      annotations:
+        build.appstudio.openshift.io/pipeline: '{"name":"docker-build-oci-ta","bundle":"latest"}'
+        git-provider: github
+        git-provider-url: https://github.com
+        mintmaker.appstudio.redhat.com/disabled: "{{.mintmakerDisabled}}"
+      name: "certificate-transparency-go{{.nameSuffix}}"
+    spec:
+      application: "{{.application}}{{.nameSuffix}}"
+      componentName: "certificate-transparency-go"
+      source:
+        git:
+          url: https://github.com/securesign/certificate-transparency-go
+          revision: "{{.branch}}"
+          dockerfileUrl: Dockerfile.rh
+- op: add
+  path: /spec/resources/-
+  value:
+    apiVersion: appstudio.redhat.com/v1alpha1
+    kind: ImageRepository 
+    metadata:
+      name: "certificate-transparency-go{{.nameSuffix}}"
+      annotations:
+        image-controller.appstudio.redhat.com/update-component-image: 'true'
+      labels:
+        appstudio.redhat.com/application: "{{.application}}{{.nameSuffix}}"
+        appstudio.redhat.com/component: "certificate-transparency-go{{.nameSuffix}}"
+    spec:
+      image:
+        name: rhtas-tenant/certificate-transparency-go
+        visibility: public
+      notifications:
+        - config:
+            url: https://bombino.api.redhat.com/v1/sbom/quay/push
+          event: repo_push
+          method: webhook
+          title: SBOM-event-to-Bombino