Use opm in tekton pipelines

Author: dsimansk

pkg/konfluxgen/fbc-builder.yaml

@@ -30,6 +30,14 @@ spec:
     description: Additional image tags
     name: additional-tags
     type: array
+  - default: []
+    description: Array of opm command arguments
+    name: opm-args
+    type: array
+  - default: ""
+    description: OPM output path
+    name: opm-output-path
+    type: string
   - description: Source Repository URL
     name: git-url
     type: string
@@ -115,6 +123,32 @@ spec:
       - name: kind
         value: task
       resolver: bundles
+  - name: run-opm-command
+    params:
+    - name: OPM_ARGS
+      value:
+      - $(params.opm-args[*])
+    - name: OPM_OUTPUT_PATH
+      value: $(params.opm-output-path)
+    - name: SOURCE_ARTIFACT
+      value: $(tasks.clone-repository.results.SOURCE_ARTIFACT)
+    - name: ociStorage
+      value: $(params.output-image).opm
+    - name: ociArtifactExpiresAfter
+      value: $(params.image-expires-after)
+    - name: IDMS_PATH
+      value: ""
+    runAfter:
+    - clone-repository
+    taskRef:
+      params:
+      - name: name
+        value: run-opm-command-oci-ta
+      - name: bundle
+        value: quay.io/konflux-ci/tekton-catalog/task-run-opm-command-oci-ta:0.1@sha256:c79858b867713e44927438f6193c49004bf40bfd9248682f20c5a83ea2a9d2f1
+      - name: kind
+        value: task
+      resolver: bundles
   - name: init
     params:
     - name: enable-cache-proxy
@@ -152,31 +186,6 @@ spec:
     workspaces:
     - name: basic-auth
       workspace: git-auth
-  - name: run-opm-command
-    params:
-    - name: SOURCE_ARTIFACT
-      value: $(tasks.clone-repository.results.SOURCE_ARTIFACT)
-    - name: ociStorage
-      value: $(params.output-image).opm
-    - name: ociArtifactExpiresAfter
-      value: $(params.image-expires-after)
-    - name: OPM_ARGS
-      value: []
-    - name: OPM_OUTPUT_PATH
-      value: ""
-    - name: IDMS_PATH
-      value: ""
-    runAfter:
-    - clone-repository
-    taskRef:
-      params:
-      - name: name
-        value: run-opm-command-oci-ta
-      - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-run-opm-command-oci-ta:0.1@sha256:c79858b867713e44927438f6193c49004bf40bfd9248682f20c5a83ea2a9d2f1
-      - name: kind
-        value: task
-      resolver: bundles
   - name: prefetch-dependencies
     params:
     - name: input

pkg/konfluxgen/konfluxgen.go

@@ -100,9 +100,11 @@ type Config struct {
 	Excludes       []string
 	ExcludesImages []string
 
-	FBCImages   []string
-	JavaImages  []string
-	BundleImage string
+	FBCImages     []string
+	OpmArgs       []string
+	OpmOutputPath string
+	JavaImages    []string
+	BundleImage   string
 
 	ResourcesOutputPathSkipRemove bool
 	ResourcesOutputPath           string
@@ -381,6 +383,8 @@ func Generate(cfg Config) error {
 				DockerfilePath: dockerfilePath,
 
 				PipelineRunAnnotations: cfg.PipelineRunAnnotationsFunc(c.ReleaseBuildConfiguration, ib),
+				OpmArgs:                cfg.OpmArgs,
+				OpmOutputPath:          cfg.OpmOutputPath,
 			}
 
 			// TODO REVIEW: Remove special case once all hermetic builds are moved to docker-java-build pipeline With actual hermetic builds
@@ -686,6 +690,9 @@ type DockerfileApplicationConfig struct {
 
 	DockerfilePath string
 
+	OpmArgs       []string
+	OpmOutputPath string
+
 	PipelineRunAnnotations map[string]string
 }
 

pkg/konfluxgen/kustomize/kustomize-fbc-builder/kustomization.yaml

@@ -4,6 +4,9 @@ kind: Kustomization
 resources:
   - ../fbc-builder.yaml
 patches:
+  - path: patch_opm_params.patch.yaml
+    target:
+      kind: Pipeline
   - path: ../patch_additional_tags.patch.yaml
     target:
       kind: Pipeline

pkg/konfluxgen/kustomize/kustomize-fbc-builder/patch_opm_params.patch.yaml

@@ -0,0 +1,22 @@
+apiVersion: tekton.dev/v1
+kind: Pipeline
+metadata:
+  name: fbc-builder
+spec:
+  params:
+    - name: opm-args
+      description: Array of opm command arguments
+      type: array
+      default: []
+    - name: opm-output-path
+      description: OPM output path
+      type: string
+      default: ""
+  tasks:
+    - name: run-opm-command
+      params:
+        - name: OPM_ARGS
+          value:
+            - $(params.opm-args[*])
+        - name: OPM_OUTPUT_PATH
+          value: $(params.opm-output-path)

pkg/konfluxgen/pipeline-run.template.yaml

@@ -74,6 +74,17 @@ spec:
     - name: prefetch-input-dev-package-managers
       value: '{{{ .PrefetchDeps.DevPackageManagers }}}'
     {{{- end }}}
+    {{{- if gt (len .OpmArgs) 0 }}}
+    - name: opm-args
+      value:
+      {{{- range $arg := .OpmArgs }}}
+        - {{{ $arg }}}
+      {{{- end }}}
+    {{{- end }}}
+    {{{- if .OpmOutputPath }}}
+    - name: opm-output-path
+      value: {{{ .OpmOutputPath }}}
+    {{{- end }}}
   {{{- if or (eq .Pipeline "docker-build") (eq .Pipeline "docker-java-build") (eq .Pipeline "bundle-build")}}}
   taskRunSpecs:
     - pipelineTaskName: sast-shell-check

pkg/prowgen/prowgen_konflux.go

@@ -574,6 +574,8 @@ func generateFBCApplications(soMetadata *project.Metadata, openshiftRelease Repo
 					" files.all.exists(x, x.matches('^.tekton/'))"+
 					" )", ocpVersion)
 			},
+			OpmArgs:       []string{"alpha", "render", "basic", fmt.Sprintf("\"/olm-catalog/serverless-operator-index/v%s/catalog-template.yaml\"", ocpVersion), "--migrate-level=bundle-object-to-csv-metadata"},
+			OpmOutputPath: fmt.Sprintf("\"/olm-catalog/serverless-operator-index/v%s/catalog/serverless-operator/catalog.yaml\"", ocpVersion),
 			AdditionalComponentConfigs: []konfluxgen.TemplateConfig{
 				{
 					ReleaseBuildConfiguration: cioperatorapi.ReleaseBuildConfiguration{