Merge pull request 'fix: rbac and cabundle' (#14) from fix/ca-bundle into main

charts/notification/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.11
+version: 0.1.13
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

common/templates/_pipeline.yaml

@@ -136,7 +136,7 @@ spec:
   - name: ephemeral-namespace
     params:
     - name: VERSION
-      value: "4.11"
+      value: "4.17"
     - name: SCRIPT
       value: |
         echo "${SHELL}"
@@ -144,6 +144,16 @@ spec:
         oc new-project goghvideo-test-${RANDOMID} >/dev/null
         oc label namespace goghvideo-test-${RANDOMID} app=goghvideo-test
 
+        oc create -f - <<EOF
+        apiVersion: v1
+        data: {}
+        kind: ConfigMap
+        metadata:
+          labels:
+            config.openshift.io/inject-trusted-cabundle: "true"
+          name: config-trusted-cabundle
+        EOF
+
         x=0; until [[ -n $(oc -n goghvideo-test-${RANDOMID} get secret/goghvideo-openshift-builder-pull-secret 2>/dev/null) || $x -eq 10 ]]; do echo "Waiting for secret replication" && sleep 10 && ((x++)); done
         if [[ "${x}" -eq 10 ]]; then exit 1; fi
 

common/templates/_task-openshift-client.yaml

@@ -18,7 +18,7 @@ spec:
     description: The OpenShift CLI arguments to run
     name: SCRIPT
     type: string
-  - default: "4.7"
+  - default: "4.17"
     description: The OpenShift Version to use
     name: VERSION
     type: string

common/templates/_task-s2i-go.yaml

@@ -13,7 +13,7 @@ spec:
   description: s2i-go task clones a Git repository and builds and pushes a container
     image using S2I and a Go builder image.
   params:
-  - default: "1.22"
+  - default: "1.23"
     description: The tag of go imagestream for go version
     name: VERSION
     type: string
@@ -64,7 +64,7 @@ spec:
       cat /env-vars/env-file
 
       s2i build $(params.PATH_CONTEXT) quay01.ipa.endofday.com/goghvideo/golang:$(params.VERSION) \
-      --as-dockerfile /gen-source/Dockerfile.gen --environment-file /env-vars/env-file
+       --assemble-user 0 --as-dockerfile /gen-source/Dockerfile.gen --environment-file /env-vars/env-file
 
       echo "Outputting Generated /gen-source/Dockerfile.gen file"
       cat /gen-source/Dockerfile.gen

custom-rbac.yaml

@@ -27,6 +27,14 @@ rules:
       - tekton.dev
     resources: ["pipelineruns"]
     verbs: ["list", "get", "create", "update", "delete", "watch"]
-
+  - apiGroups: ["project.openshift.io"]
+    resources: ["*"]
+    verbs: ["*"]
+  - apiGroups: ["*"]
+    resources: ["namespaces"]
+    verbs: ["*"]
+  - apiGroups: ["keda.sh"]
+    resources: ["scaledjobs","triggerauthentications"]
+    verbs: ["*"]
   # Add any other resources you need access to (modify the apiGroups/resources as required)