{ "apiVersion": "v1", "items": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "operator-sdk/primary-resource": "ex-registry-sh-72f9faa1/snapshot-sample-72f9faa1-pvwps", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/record": "ex-registry-sh-managed-72f9faa1/results/6d951ec5-f987-40ee-9737-7f93524f5e31/records/f73cfd68-fb64-4092-a8fe-92429429276a", "results.tekton.dev/result": "ex-registry-sh-managed-72f9faa1/results/6d951ec5-f987-40ee-9737-7f93524f5e31", "results.tekton.dev/stored": "false", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-08-19T00:58:30Z", "finalizers": [ "results.tekton.dev/taskrun", "chains.tekton.dev/taskrun" ], "generation": 1, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-72f9faa1", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "0", "release.appstudio.openshift.io/name": "snapshot-sample-72f9faa1-pvwps", "release.appstudio.openshift.io/namespace": "ex-registry-sh-72f9faa1", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "push-to-external-registry", "tekton.dev/pipelineRun": "managed-hrxbv", "tekton.dev/pipelineRunUID": "6d951ec5-f987-40ee-9737-7f93524f5e31", "tekton.dev/pipelineTask": "verify-access-to-resources", "tekton.dev/task": "verify-access-to-resources" }, "name": "managed-hrxbv-verify-access-to-resources", "namespace": "ex-registry-sh-managed-72f9faa1", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-hrxbv", "uid": "6d951ec5-f987-40ee-9737-7f93524f5e31" } ], "resourceVersion": "9648", "uid": "f73cfd68-fb64-4092-a8fe-92429429276a" }, "spec": { "params": [ { "name": "release", "value": "ex-registry-sh-72f9faa1/snapshot-sample-72f9faa1-pvwps" }, { "name": "releasePlan", "value": "ex-registry-sh-72f9faa1/source-releaseplan" }, { "name": "releasePlanAdmission", "value": "ex-registry-sh-managed-72f9faa1/demo" }, { "name": "releaseServiceConfig", "value": "release-service/release-service-config" }, { "name": "snapshot", "value": "ex-registry-sh-72f9faa1/snapshot-sample-72f9faa1" }, { "name": "requireInternalServices", "value": "false" } ], "serviceAccountName": "release-service-account", "taskRef": { "params": [ { "name": "url", "value": "https://github.com/elenagerman/release-service-catalog" }, { "name": "revision", "value": "b8532729aec407de5bd34fea72b624001ac5b1fb" }, { "name": "pathInRepo", "value": "tasks/managed/verify-access-to-resources/verify-access-to-resources.yaml" } ], "resolver": "git" }, "timeout": "3h50m0s" }, "status": { "conditions": [ { "lastTransitionTime": "2026-08-19T00:58:44Z", "message": "pod status \"Ready\":\"False\"; message: \"containers with unready status: [step-verify-access-to-resources]\"", "reason": "Pending", "status": "Unknown", "type": "Succeeded" } ], "podName": "managed-hrxbv-verify-access-to-resources-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" }, "refSource": { "digest": { "sha1": "b8532729aec407de5bd34fea72b624001ac5b1fb" }, "entryPoint": "tasks/managed/verify-access-to-resources/verify-access-to-resources.yaml", "uri": "git+https://github.com/elenagerman/release-service-catalog" } }, "startTime": "2026-08-19T00:58:30Z", "steps": [ { "container": "step-verify-access-to-resources", "name": "verify-access-to-resources", "provenance": {}, "waiting": { "reason": "PodInitializing" } } ], "taskSpec": { "description": "This Tekton task is used to verify access to various resources in the pipelines. It ensures that the necessary\nresources, such as the release, release plan, release plan admission, release service config and snapshot,\nare available and accessible. Additionally, it checks if internal requests can be created if\n`requireInternalServices` is set to `true`.", "params": [ { "description": "Namespace/name of the Release", "name": "release", "type": "string" }, { "description": "Namespace/name of the ReleasePlan", "name": "releasePlan", "type": "string" }, { "description": "Namespace/name of the ReleasePlanAdmission", "name": "releasePlanAdmission", "type": "string" }, { "description": "Namespace/name of the ReleaseServiceConfig", "name": "releaseServiceConfig", "type": "string" }, { "description": "Namespace/name of the Snapshot", "name": "snapshot", "type": "string" }, { "default": "false", "description": "Whether internal services are required", "name": "requireInternalServices", "type": "string" }, { "default": "trusted-ca", "description": "The name of the ConfigMap to read CA bundle data from", "name": "caTrustConfigMapName", "type": "string" }, { "default": "ca-bundle.crt", "description": "The name of the key in the ConfigMap that contains the CA bundle data", "name": "caTrustConfigMapKey", "type": "string" } ], "stepTemplate": { "computeResources": {}, "securityContext": { "runAsUser": 1001 }, "volumeMounts": [ { "mountPath": "/mnt/trusted-ca", "name": "trusted-ca", "readOnly": true } ] }, "steps": [ { "computeResources": { "limits": { "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "100Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:5546fa78d3c88d7b6a2e8cff8902f7757f00541d0bbaf113b9f293133894afa3", "name": "verify-access-to-resources", "script": "#!/usr/bin/env bash\n\nORIGIN_NAMESPACE=\"$(cut -f1 -d/ \u003c\u003c\u003c \"ex-registry-sh-72f9faa1/snapshot-sample-72f9faa1-pvwps\")\"\nTARGET_NAMESPACE=\"$(cut -f1 -d/ \u003c\u003c\u003c \"ex-registry-sh-managed-72f9faa1/demo\")\"\nRSC_NAMESPACE=\"$(cut -f1 -d/ \u003c\u003c\u003c \"release-service/release-service-config\")\"\n\nRELEASE_NAME=\"$(cut -f2 -d/ \u003c\u003c\u003c \"ex-registry-sh-72f9faa1/snapshot-sample-72f9faa1-pvwps\")\"\nRELEASEPLAN_NAME=\"$(cut -f2 -d/ \u003c\u003c\u003c \"ex-registry-sh-72f9faa1/source-releaseplan\")\"\nRELEASEPLANADMISSION_NAME=\"$(cut -f2 -d/ \u003c\u003c\u003c \"ex-registry-sh-managed-72f9faa1/demo\")\"\nRELEASESERVICECONFIG_NAME=\"$(cut -f2 -d/ \u003c\u003c\u003c \"release-service/release-service-config\")\"\nSNAPSHOT_NAME=\"$(cut -f2 -d/ \u003c\u003c\u003c \"ex-registry-sh-72f9faa1/snapshot-sample-72f9faa1\")\"\n\nCAN_I_READ_RELEASES=\"$(kubectl auth can-i get release/\"${RELEASE_NAME}\" -n \"${ORIGIN_NAMESPACE}\")\"\nCAN_I_READ_RELEASEPLANS=\"$(kubectl auth can-i get releaseplan/\"${RELEASEPLAN_NAME}\"\\\n -n \"${ORIGIN_NAMESPACE}\")\"\nCAN_I_READ_RELEASEPLANADMISSIONS=\"$(kubectl auth can-i get\\\n releaseplanadmission/\"${RELEASEPLANADMISSION_NAME}\" -n \"${TARGET_NAMESPACE}\")\"\nCAN_I_READ_RELEASESERVICECONFIG=\"$(kubectl auth can-i get\\\n releaseserviceconfig/\"${RELEASESERVICECONFIG_NAME}\" -n \"${RSC_NAMESPACE}\")\"\nCAN_I_READ_SNAPSHOTS=\"$(kubectl auth can-i get snapshot/\"${SNAPSHOT_NAME}\" -n \"${ORIGIN_NAMESPACE}\")\"\n\nif [ \"false\" = \"true\" ]; then\n CAN_I_CREATE_INTERNALREQUESTS=\"$(kubectl auth can-i create internalrequest -n \"${TARGET_NAMESPACE}\")\"\nelse\n CAN_I_CREATE_INTERNALREQUESTS=\"skipped\"\nfi\n\necho \"\"\necho \"CAN_I_READ_RELEASES? ${CAN_I_READ_RELEASES}\"\necho \"CAN_I_READ_RELEASEPLANS? ${CAN_I_READ_RELEASEPLANS}\"\necho \"CAN_I_READ_RELEASEPLANADMISSIONS? ${CAN_I_READ_RELEASEPLANADMISSIONS}\"\necho \"CAN_I_READ_RELEASESERVICECONFIG? ${CAN_I_READ_RELEASESERVICECONFIG}\"\necho \"CAN_I_READ_SNAPSHOTS? ${CAN_I_READ_SNAPSHOTS}\"\necho \"\"\necho \"CAN_I_CREATE_INTERNALREQUESTS? ${CAN_I_CREATE_INTERNALREQUESTS}\"\necho \"\"\n\nif [ \"${CAN_I_READ_RELEASES}\" = \"no\" ] ||\\\n [ \"${CAN_I_READ_RELEASEPLANS}\" = \"no\" ] ||\\\n [ \"${CAN_I_READ_RELEASEPLANADMISSIONS}\" = \"no\" ] ||\\\n [ \"${CAN_I_READ_RELEASESERVICECONFIG}\" = \"no\" ] ||\\\n [ \"${CAN_I_READ_SNAPSHOTS}\" = \"no\" ] ||\\\n [ \"${CAN_I_CREATE_INTERNALREQUESTS}\" = \"no\" ] ; then\n echo \"Error: Cannot read or create required Release resources!\"\n echo \"\"\n echo \"This indicates that your workspace is not correctly setup\"\n echo \"Please reach out to a workspace administrator\"\n exit 1\nfi\n\necho \"Access to Release resources verified\"\n" } ], "volumes": [ { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } } ], "kind": "List", "metadata": { "resourceVersion": "" } }