Skip to content

Run the required lifecycle task in 4.x FBC builds - #86

Open
dfarrell07 wants to merge 1 commit into
stolostron:mainfrom
dfarrell07:fix/fbc-required-lifecycle
Open

dfarrell07 wants to merge 1 commit into
stolostron:mainfrom
dfarrell07:fix/fbc-required-lifecycle

Conversation

@dfarrell07

@dfarrell07 dfarrell07 commented Oct 12, 2026 •

Copy link
Copy Markdown
Collaborator

Conforma has required fbc-inject-lifecycle-oci-ta for FBC builds since 2026-10-01 (required tasks), so 4.x catalogs built without it fail release policy.

  • Adds the task between clone-repository and run-opm-command in all seven 4.16–4.22 push/PR pairs, and forwards its SOURCE_ARTIFACT. This matches upstream fbc-builder and the 5.0 pipelines in Add OCP 5.0 Konflux build pipelines #82. On OCP 4.x the task leaves the catalog unchanged.
  • Pins the current task digest, which has no trust expiry. Other task pins are unchanged.

All 14 files get the identical change. No catalog content changes. Merging triggers new 4.x push builds; no Release is created.

Validation

  • make test and yamllint pass.
  • An earlier head with the same task wiring passed all seven Konflux PR builds, and the operator checks passed. The 4.16–4.21 builds were then released to stage with no policy violations.

https://claude.ai/code/session_01PpBn9SK2BzQUomRsrCFni7

@openshift-ci

openshift-ci Bot commented Oct 12, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dfarrell07

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Conforma has required fbc-inject-lifecycle-oci-ta for FBC builds since
2026-10-01, so 4.x catalogs built without it fail release policy. Add
it between clone-repository and run-opm-command in the 4.16-4.22 push
and pull-request pipelines and forward its SOURCE_ARTIFACT, matching
upstream fbc-builder and the 5.0 pipelines. On OCP 4.x the task leaves
the catalog unchanged.

Pin the current task digest, which has no trust expiry. Other task
pins are unchanged.

Claude-Session: https://claude.ai/code/session_01PpBn9SK2BzQUomRsrCFni7
Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
@dfarrell07
dfarrell07 force-pushed the fix/fbc-required-lifecycle branch from 7c963da to 3f67ec6 Compare October 15, 2026 19:12
@dfarrell07 dfarrell07 changed the title Run required lifecycle task in active FBC builds Run the required lifecycle task in 4.x FBC builds Oct 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant