{ "apiVersion": "v1", "items": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "happy-path-ulbp/snapshot-sample-kvax-d499148-hdqst", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "happy-path-managed/results/01940dc7-b245-459f-938e-e536fd660b73/records/202b193e-7edf-4d95-b4d9-ffe08f14adc1", "results.tekton.dev/result": "happy-path-managed/results/01940dc7-b245-459f-938e-e536fd660b73", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:46:17Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:47:59Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-kvax", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "0", "release.appstudio.openshift.io/name": "snapshot-sample-kvax-d499148-hdqst", "release.appstudio.openshift.io/namespace": "happy-path-ulbp", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "e2e", "tekton.dev/pipelineRun": "managed-l7r6j", "tekton.dev/pipelineRunUID": "01940dc7-b245-459f-938e-e536fd660b73", "tekton.dev/pipelineTask": "collect-data", "tekton.dev/task": "collect-data" }, "name": "managed-l7r6j-collect-data", "namespace": "happy-path-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-l7r6j", "uid": "01940dc7-b245-459f-938e-e536fd660b73" } ], "resourceVersion": "21061", "uid": "202b193e-7edf-4d95-b4d9-ffe08f14adc1" }, "spec": { "params": [ { "name": "release", "value": "happy-path-ulbp/snapshot-sample-kvax-d499148-hdqst" }, { "name": "releasePlan", "value": "happy-path-ulbp/source-releaseplan" }, { "name": "releasePlanAdmission", "value": "happy-path-managed/demo" }, { "name": "releaseServiceConfig", "value": "release-service/release-service-config" }, { "name": "snapshot", "value": "happy-path-ulbp/snapshot-sample-kvax" }, { "name": "subdirectory", "value": "01940dc7-b245-459f-938e-e536fd660b73" }, { "name": "ociStorage", "value": "quay.io/konflux-ci/release-service-trusted-artifacts" }, { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "trustedArtifactsDebug", "value": "" }, { "name": "taskGitUrl", "value": "https://github.com/konflux-ci/release-service-catalog" }, { "name": "taskGitRevision", "value": "development" } ], "serviceAccountName": "release-service-account", "taskRef": { "params": [ { "name": "url", "value": "https://github.com/konflux-ci/release-service-catalog" }, { "name": "revision", "value": "development" }, { "name": "pathInRepo", "value": "tasks/managed/collect-data/collect-data.yaml" } ], "resolver": "git" }, "timeout": "1h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:46:54Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:46:54Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-l7r6j-collect-data-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" }, "refSource": { "digest": { "sha1": "c75c0f66835029d3275318de9803bf62d341dab7" }, "entryPoint": "tasks/managed/collect-data/collect-data.yaml", "uri": "git+https://github.com/konflux-ci/release-service-catalog" } }, "results": [ { "name": "data", "type": "string", "value": "01940dc7-b245-459f-938e-e536fd660b73/data.json" }, { "name": "release", "type": "string", "value": "01940dc7-b245-459f-938e-e536fd660b73/release.json" }, { "name": "releasePipelineMetadata", "type": "string", "value": "{\"org\":\"konflux-ci\",\"repo\":\"release-service-catalog\",\"revision\":\"development\",\"pathinrepo\":\"pipelines/managed/e2e/e2e.yaml\",\"sha\":\"c75c0f66835029d3275318de9803bf62d341dab7\"}" }, { "name": "releasePlan", "type": "string", "value": "01940dc7-b245-459f-938e-e536fd660b73/release_plan.json" }, { "name": "releasePlanAdmission", "type": "string", "value": "01940dc7-b245-459f-938e-e536fd660b73/release_plan_admission.json" }, { "name": "releaseServiceConfig", "type": "string", "value": "01940dc7-b245-459f-938e-e536fd660b73/release_service_config.json" }, { "name": "resultsDir", "type": "string", "value": "01940dc7-b245-459f-938e-e536fd660b73/results" }, { "name": "singleComponentMode", "type": "string", "value": "false" }, { "name": "snapshotBuildId", "type": "string", "value": "" }, { "name": "snapshotName", "type": "string", "value": "snapshot-sample-kvax" }, { "name": "snapshotNamespace", "type": "string", "value": "happy-path-ulbp" }, { "name": "snapshotSpec", "type": "string", "value": "01940dc7-b245-459f-938e-e536fd660b73/snapshot_spec.json" }, { "name": "subdirectory", "type": "string", "value": "01940dc7-b245-459f-938e-e536fd660b73" }, { "name": "sourceDataArtifact", "type": "string", "value": "oci:quay.io/konflux-ci/release-service-trusted-artifacts@sha256:4166b305f72d7fe317b95c2e8867534b57de7aab7d1a525b3a942d5dd8e2c5c5" } ], "startTime": "2026-10-06T07:46:17Z", "steps": [ { "container": "step-collect-data", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:64d026ac5696c92318dcca62e20bb9d5e31150c15289d29d4a08b05e5245c3ff", "name": "collect-data", "provenance": {}, "terminated": { "containerID": "containerd://fb8385ae1f8dcd3580da3c430b85d3d9ca097bc7901bd3edff07e66ec55d7958", "exitCode": 0, "finishedAt": "2026-10-06T07:46:51Z", "message": "[{\"key\":\"data\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/data.json\",\"type\":1},{\"key\":\"release\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/release.json\",\"type\":1},{\"key\":\"releasePipelineMetadata\",\"value\":\"{\\\"org\\\":\\\"konflux-ci\\\",\\\"repo\\\":\\\"release-service-catalog\\\",\\\"revision\\\":\\\"development\\\",\\\"pathinrepo\\\":\\\"pipelines/managed/e2e/e2e.yaml\\\",\\\"sha\\\":\\\"c75c0f66835029d3275318de9803bf62d341dab7\\\"}\",\"type\":1},{\"key\":\"releasePlan\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/release_plan.json\",\"type\":1},{\"key\":\"releasePlanAdmission\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/release_plan_admission.json\",\"type\":1},{\"key\":\"releaseServiceConfig\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/release_service_config.json\",\"type\":1},{\"key\":\"resultsDir\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/results\",\"type\":1},{\"key\":\"singleComponentMode\",\"value\":\"false\",\"type\":1},{\"key\":\"snapshotBuildId\",\"value\":\"\",\"type\":1},{\"key\":\"snapshotName\",\"value\":\"snapshot-sample-kvax\",\"type\":1},{\"key\":\"snapshotNamespace\",\"value\":\"happy-path-ulbp\",\"type\":1},{\"key\":\"snapshotSpec\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/snapshot_spec.json\",\"type\":1},{\"key\":\"subdirectory\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:46:50Z" }, "terminationReason": "Completed" }, { "container": "step-create-trusted-artifact", "imageID": "quay.io/konflux-ci/build-trusted-artifacts@sha256:9bd32f6bafb517b309e11a2d89365052b4ab3f1c9c23c4ffd45aff6f03960476", "name": "create-trusted-artifact", "provenance": {}, "terminated": { "containerID": "containerd://c041cbf48352f0ddce2f4e8b49e4d72e4a5a7ddc57ef4d83b37a32652893ffb8", "exitCode": 0, "finishedAt": "2026-10-06T07:46:53Z", "message": "[{\"key\":\"data\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/data.json\",\"type\":1},{\"key\":\"release\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/release.json\",\"type\":1},{\"key\":\"releasePipelineMetadata\",\"value\":\"{\\\"org\\\":\\\"konflux-ci\\\",\\\"repo\\\":\\\"release-service-catalog\\\",\\\"revision\\\":\\\"development\\\",\\\"pathinrepo\\\":\\\"pipelines/managed/e2e/e2e.yaml\\\",\\\"sha\\\":\\\"c75c0f66835029d3275318de9803bf62d341dab7\\\"}\",\"type\":1},{\"key\":\"releasePlan\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/release_plan.json\",\"type\":1},{\"key\":\"releasePlanAdmission\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/release_plan_admission.json\",\"type\":1},{\"key\":\"releaseServiceConfig\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/release_service_config.json\",\"type\":1},{\"key\":\"resultsDir\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/results\",\"type\":1},{\"key\":\"singleComponentMode\",\"value\":\"false\",\"type\":1},{\"key\":\"snapshotBuildId\",\"value\":\"\",\"type\":1},{\"key\":\"snapshotName\",\"value\":\"snapshot-sample-kvax\",\"type\":1},{\"key\":\"snapshotNamespace\",\"value\":\"happy-path-ulbp\",\"type\":1},{\"key\":\"snapshotSpec\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73/snapshot_spec.json\",\"type\":1},{\"key\":\"sourceDataArtifact\",\"value\":\"oci:quay.io/konflux-ci/release-service-trusted-artifacts@sha256:4166b305f72d7fe317b95c2e8867534b57de7aab7d1a525b3a942d5dd8e2c5c5\",\"type\":1},{\"key\":\"subdirectory\",\"value\":\"01940dc7-b245-459f-938e-e536fd660b73\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:46:52Z" }, "terminationReason": "Completed" } ], "taskSpec": { "description": "Tekton task to collect the information added to the data field of the release resources.\n\nThe purpose of this task is to collect all the data and supply it to the other task in the pipeline by creating\na json file called `data.json` in the workspace.\n\nThis task also stores the passed resources as json files in a workspace.\n\nThe parameters to this task are lowercase instead of camelCase because they are passed from the operator, and the\noperator passes them as lowercase.\n\nA task result is returned for each resource with the relative path to the stored JSON for it in the workspace.\n\nFinally, the task checks that the keys from the correct resource (a key that should come from the\nReleasePlanAdmission should not be present in the Release data section).", "params": [ { "description": "The namespaced name of the Release", "name": "release", "type": "string" }, { "description": "The namespaced name of the ReleasePlan", "name": "releasePlan", "type": "string" }, { "description": "The namespaced name of the ReleasePlanAdmission", "name": "releasePlanAdmission", "type": "string" }, { "description": "The namespaced name of the ReleaseServiceConfig", "name": "releaseServiceConfig", "type": "string" }, { "description": "The namespaced name of the Snapshot", "name": "snapshot", "type": "string" }, { "default": "", "description": "Subdirectory inside the workspace to be used", "name": "subdirectory", "type": "string" }, { "default": "empty", "description": "The OCI repository where the Trusted Artifacts are stored", "name": "ociStorage", "type": "string" }, { "default": "", "description": "oras options to pass to Trusted Artifacts calls", "name": "orasOptions", "type": "string" }, { "default": "1d", "description": "Expiration date for the trusted artifacts created in the OCI repository. An empty string means the artifacts do not expire", "name": "ociArtifactExpiresAfter", "type": "string" }, { "default": "", "description": "Flag to enable debug logging in trusted artifacts. Set to a non-empty string to enable", "name": "trustedArtifactsDebug", "type": "string" }, { "default": "/var/workdir/release", "description": "The location where data will be stored", "name": "dataDir", "type": "string" }, { "description": "The url to the git repo where the release-service-catalog tasks and stepactions to be used are stored", "name": "taskGitUrl", "type": "string" }, { "description": "The revision in the taskGitUrl repo to be used", "name": "taskGitRevision", "type": "string" }, { "default": "trusted-ca", "description": "The name of the ConfigMap to read CA bundle data from", "name": "caTrustConfigMapName", "type": "string" }, { "default": "ca-bundle.crt", "description": "The name of the key in the ConfigMap that contains the CA bundle data", "name": "caTrustConfigMapKey", "type": "string" }, { "default": "/mnt/trusted-ca/ca-bundle.crt", "description": "Path to CA certificate bundle for TLS verification with self-signed certificates", "name": "caCertPath", "type": "string" } ], "results": [ { "description": "The relative path in the workspace to the stored release json", "name": "release", "type": "string" }, { "description": "The relative path in the workspace to the stored releasePlan json", "name": "releasePlan", "type": "string" }, { "description": "The relative path in the workspace to the stored releasePlanAdmission json", "name": "releasePlanAdmission", "type": "string" }, { "description": "The relative path in the workspace to the stored releaseServiceConfig json", "name": "releaseServiceConfig", "type": "string" }, { "description": "The relative path in the workspace to the stored snapshotSpec json", "name": "snapshotSpec", "type": "string" }, { "description": "The relative path in the workspace to the stored data json", "name": "data", "type": "string" }, { "description": "The relative path in the workspace to the results directory", "name": "resultsDir", "type": "string" }, { "description": "single component mode", "name": "singleComponentMode", "type": "string" }, { "description": "name of Snapshot resource", "name": "snapshotName", "type": "string" }, { "description": "namespace where Snapshot is located", "name": "snapshotNamespace", "type": "string" }, { "description": "Build Id where Snapshot originated", "name": "snapshotBuildId", "type": "string" }, { "description": "json object containing git resolver metadata about the running release pipeline", "name": "releasePipelineMetadata", "type": "string" }, { "description": "Produced trusted data artifact", "name": "sourceDataArtifact", "type": "string" }, { "description": "Subdirectory inside the workspace to be used", "name": "subdirectory", "type": "string" } ], "stepTemplate": { "computeResources": {}, "env": [ { "name": "IMAGE_EXPIRES_AFTER", "value": "1d" }, { "name": "ORAS_OPTIONS" }, { "name": "DEBUG" } ], "securityContext": { "runAsUser": 1001 }, "volumeMounts": [ { "mountPath": "/var/workdir", "name": "workdir" }, { "mountPath": "/mnt/trusted-ca", "name": "trusted-ca", "readOnly": true } ] }, "steps": [ { "command": [ "python3", "-m", "collect_data" ], "computeResources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "128Mi" } }, "env": [ { "name": "RELEASE", "value": "happy-path-ulbp/snapshot-sample-kvax-d499148-hdqst" }, { "name": "RELEASE_PLAN", "value": "happy-path-ulbp/source-releaseplan" }, { "name": "RELEASE_PLAN_ADMISSION", "value": "happy-path-managed/demo" }, { "name": "RELEASE_SERVICE_CONFIG", "value": "release-service/release-service-config" }, { "name": "SNAPSHOT", "value": "happy-path-ulbp/snapshot-sample-kvax" }, { "name": "PARAM_SUBDIRECTORY", "value": "01940dc7-b245-459f-938e-e536fd660b73" }, { "name": "PARAM_DATA_DIR", "value": "/var/workdir/release" }, { "name": "RESULT_RELEASE", "value": "/tekton/results/release" }, { "name": "RESULT_RELEASE_PLAN", "value": "/tekton/results/releasePlan" }, { "name": "RESULT_RELEASE_PLAN_ADMISSION", "value": "/tekton/results/releasePlanAdmission" }, { "name": "RESULT_RELEASE_SERVICE_CONFIG", "value": "/tekton/results/releaseServiceConfig" }, { "name": "RESULT_SNAPSHOT_SPEC", "value": "/tekton/results/snapshotSpec" }, { "name": "RESULT_DATA", "value": "/tekton/results/data" }, { "name": "RESULT_RESULTS_DIR", "value": "/tekton/results/resultsDir" }, { "name": "RESULT_SINGLE_COMPONENT_MODE", "value": "/tekton/results/singleComponentMode" }, { "name": "RESULT_SNAPSHOT_NAME", "value": "/tekton/results/snapshotName" }, { "name": "RESULT_SNAPSHOT_NAMESPACE", "value": "/tekton/results/snapshotNamespace" }, { "name": "RESULT_SNAPSHOT_BUILD_ID", "value": "/tekton/results/snapshotBuildId" }, { "name": "RESULT_RELEASE_PIPELINE_METADATA", "value": "/tekton/results/releasePipelineMetadata" }, { "name": "RESULT_SUBDIRECTORY", "value": "/tekton/results/subdirectory" }, { "name": "CA_CERT_PATH", "value": "/mnt/trusted-ca/ca-bundle.crt" } ], "image": "quay.io/konflux-ci/release-service-utils@sha256:64d026ac5696c92318dcca62e20bb9d5e31150c15289d29d4a08b05e5245c3ff", "name": "collect-data" }, { "args": [ "create", "--store", "quay.io/konflux-ci/release-service-trusted-artifacts", "/tekton/results/sourceDataArtifact=/var/workdir/release" ], "computeResources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "env": [ { "name": "HOME", "value": "/tekton/home" }, { "name": "ORAS_OPTIONS" }, { "name": "CA_FILE", "value": "/mnt/trusted-ca/ca-bundle.crt" } ], "image": "quay.io/konflux-ci/build-trusted-artifacts@sha256:9bd32f6bafb517b309e11a2d89365052b4ab3f1c9c23c4ffd45aff6f03960476", "name": "create-trusted-artifact" } ], "volumes": [ { "emptyDir": {}, "name": "workdir" }, { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "happy-path-ulbp/snapshot-sample-kvax-d499148-hdqst", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "happy-path-managed/results/01940dc7-b245-459f-938e-e536fd660b73/records/82e50609-980c-406c-a837-8b0fdbaf5bd0", "results.tekton.dev/result": "happy-path-managed/results/01940dc7-b245-459f-938e-e536fd660b73", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:46:54Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:47:59Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-kvax", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "0", "release.appstudio.openshift.io/name": "snapshot-sample-kvax-d499148-hdqst", "release.appstudio.openshift.io/namespace": "happy-path-ulbp", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "e2e", "tekton.dev/pipelineRun": "managed-l7r6j", "tekton.dev/pipelineRunUID": "01940dc7-b245-459f-938e-e536fd660b73", "tekton.dev/pipelineTask": "collect-signing-params", "tekton.dev/task": "collect-signing-params" }, "name": "managed-l7r6j-collect-signing-params", "namespace": "happy-path-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-l7r6j", "uid": "01940dc7-b245-459f-938e-e536fd660b73" } ], "resourceVersion": "21062", "uid": "82e50609-980c-406c-a837-8b0fdbaf5bd0" }, "spec": { "serviceAccountName": "release-service-account", "taskRef": { "params": [ { "name": "url", "value": "https://github.com/konflux-ci/release-service-catalog" }, { "name": "revision", "value": "development" }, { "name": "pathInRepo", "value": "tasks/managed/collect-signing-params/collect-signing-params.yaml" } ], "resolver": "git" }, "timeout": "1h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:47:21Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:47:21Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-l7r6j-collect-signing-params-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" }, "refSource": { "digest": { "sha1": "c75c0f66835029d3275318de9803bf62d341dab7" }, "entryPoint": "tasks/managed/collect-signing-params/collect-signing-params.yaml", "uri": "git+https://github.com/konflux-ci/release-service-catalog" } }, "results": [ { "name": "buildIdentityRegexp", "type": "string", "value": "" }, { "name": "defaultOIDCIssuer", "type": "string", "value": "" }, { "name": "enableKeylessSigning", "type": "string", "value": "false" }, { "name": "fulcioExternalUrl", "type": "string", "value": "" }, { "name": "fulcioUrl", "type": "string", "value": "" }, { "name": "rekorExternalUrl", "type": "string", "value": "" }, { "name": "rekorUrl", "type": "string", "value": "" }, { "name": "tektonChainsIdentity", "type": "string", "value": "" }, { "name": "tufExternalUrl", "type": "string", "value": "" }, { "name": "tufUrl", "type": "string", "value": "" } ], "startTime": "2026-10-06T07:46:54Z", "steps": [ { "container": "step-collect-signing-params", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:d84bb7da0988c3cbce65ed714beddda4694b9e3201af56a135ac5843a05abe1e", "name": "collect-signing-params", "provenance": {}, "terminated": { "containerID": "containerd://d018c3e1ed49311935ce0feae92a63b170c37c443dd768c58f5812206ba4b1bc", "exitCode": 0, "finishedAt": "2026-10-06T07:47:21Z", "message": "[{\"key\":\"buildIdentityRegexp\",\"value\":\"\",\"type\":1},{\"key\":\"defaultOIDCIssuer\",\"value\":\"\",\"type\":1},{\"key\":\"enableKeylessSigning\",\"value\":\"false\",\"type\":1},{\"key\":\"fulcioExternalUrl\",\"value\":\"\",\"type\":1},{\"key\":\"fulcioUrl\",\"value\":\"\",\"type\":1},{\"key\":\"rekorExternalUrl\",\"value\":\"\",\"type\":1},{\"key\":\"rekorUrl\",\"value\":\"\",\"type\":1},{\"key\":\"tektonChainsIdentity\",\"value\":\"\",\"type\":1},{\"key\":\"tufExternalUrl\",\"value\":\"\",\"type\":1},{\"key\":\"tufUrl\",\"value\":\"\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:47:18Z" }, "terminationReason": "Completed" } ], "taskSpec": { "description": "Tekton task to collect Konflux configuration parameters related to\nkeyless signing using cosign. The task attempts to read the \"cluster-config\"\nConfigMap in the \"konflux-info\" namespace to extract signing parameters.\n\nIn case the ConfigMap is not found, the task will output empty strings for all parameters,\nallowing the pipeline to continue without signing parameters.", "params": [ { "default": "cluster-config", "description": "The name of the ConfigMap to read signing parameters from", "name": "configMapName", "type": "string" }, { "default": "konflux-info", "description": "The namespace where the ConfigMap is located", "name": "configMapNamespace", "type": "string" }, { "default": "trusted-ca", "description": "The name of the ConfigMap to read CA bundle data from", "name": "caTrustConfigMapName", "type": "string" }, { "default": "ca-bundle.crt", "description": "The name of the key in the ConfigMap that contains the CA bundle data", "name": "caTrustConfigMapKey", "type": "string" } ], "results": [ { "description": "A flag indicating whether keyless signing should be enabled, based on the presence of signing parameters.\n", "name": "enableKeylessSigning", "type": "string" }, { "description": "A default OIDC issuer URL to be used for signing.\n", "name": "defaultOIDCIssuer", "type": "string" }, { "description": "The external URL of the Rekor transparency log.\n", "name": "rekorExternalUrl", "type": "string" }, { "description": "The internal URL of the Rekor transparency log.\n", "name": "rekorUrl", "type": "string" }, { "description": "The external URL of the Fulcio certificate authority.\n", "name": "fulcioExternalUrl", "type": "string" }, { "description": "The URL of the Fulcio certificate authority.\n", "name": "fulcioUrl", "type": "string" }, { "description": "The external URL of the TUF repository.\n", "name": "tufExternalUrl", "type": "string" }, { "description": "The URL of the TUF repository.\n", "name": "tufUrl", "type": "string" }, { "description": "A regular expression to extract build identity from the OIDC token claims, if applicable.\n", "name": "buildIdentityRegexp", "type": "string" }, { "description": "The identity used in the certificate, generated by fulcio.\n", "name": "tektonChainsIdentity", "type": "string" } ], "stepTemplate": { "computeResources": {}, "securityContext": { "runAsUser": 1001 }, "volumeMounts": [ { "mountPath": "/mnt/trusted-ca", "name": "trusted-ca", "readOnly": true } ] }, "steps": [ { "args": [ "--config-map-name", "cluster-config", "--config-map-namespace", "konflux-info" ], "command": [ "python3", "-m", "release_service_utils.tasks.managed.collect_signing_params" ], "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "env": [ { "name": "RESULT_ENABLE_KEYLESS_SIGNING", "value": "/tekton/results/enableKeylessSigning" }, { "name": "RESULT_DEFAULT_OIDC_ISSUER", "value": "/tekton/results/defaultOIDCIssuer" }, { "name": "RESULT_REKOR_EXTERNAL_URL", "value": "/tekton/results/rekorExternalUrl" }, { "name": "RESULT_REKOR_URL", "value": "/tekton/results/rekorUrl" }, { "name": "RESULT_FULCIO_EXTERNAL_URL", "value": "/tekton/results/fulcioExternalUrl" }, { "name": "RESULT_FULCIO_URL", "value": "/tekton/results/fulcioUrl" }, { "name": "RESULT_TUF_EXTERNAL_URL", "value": "/tekton/results/tufExternalUrl" }, { "name": "RESULT_TUF_URL", "value": "/tekton/results/tufUrl" }, { "name": "RESULT_BUILD_IDENTITY_REGEXP", "value": "/tekton/results/buildIdentityRegexp" }, { "name": "RESULT_TEKTON_CHAINS_IDENTITY", "value": "/tekton/results/tektonChainsIdentity" } ], "image": "quay.io/konflux-ci/release-service-utils@sha256:d84bb7da0988c3cbce65ed714beddda4694b9e3201af56a135ac5843a05abe1e", "name": "collect-signing-params" } ], "volumes": [ { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "happy-path-ulbp/snapshot-sample-kvax-d499148-hdqst", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "happy-path-managed/results/01940dc7-b245-459f-938e-e536fd660b73/records/32d7249d-cbca-4925-ad8d-58f02ed1f021", "results.tekton.dev/result": "happy-path-managed/results/01940dc7-b245-459f-938e-e536fd660b73", "results.tekton.dev/stored": "true", "tekton.dev/displayName": "Verify Conforma in Konflux", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:47:21Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:47:59Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "app.kubernetes.io/version": "0.1", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-kvax", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "0", "release.appstudio.openshift.io/name": "snapshot-sample-kvax-d499148-hdqst", "release.appstudio.openshift.io/namespace": "happy-path-ulbp", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "e2e", "tekton.dev/pipelineRun": "managed-l7r6j", "tekton.dev/pipelineRunUID": "01940dc7-b245-459f-938e-e536fd660b73", "tekton.dev/pipelineTask": "verify-conforma", "tekton.dev/task": "verify-conforma-konflux-ta" }, "name": "managed-l7r6j-verify-conforma", "namespace": "happy-path-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-l7r6j", "uid": "01940dc7-b245-459f-938e-e536fd660b73" } ], "resourceVersion": "21063", "uid": "32d7249d-cbca-4925-ad8d-58f02ed1f021" }, "spec": { "params": [ { "name": "SNAPSHOT_FILENAME", "value": "01940dc7-b245-459f-938e-e536fd660b73/snapshot_spec.json" }, { "name": "SSL_CERT_DIR", "value": "/var/run/secrets/kubernetes.io/serviceaccount" }, { "name": "POLICY_CONFIGURATION", "value": "{\"description\":\"Red Hat's enterprise requirements\",\"sources\":[{\"name\":\"Default\",\"policy\":[\"oci::quay.io/conforma/release-policy:latest@sha256:2df9ba13162aded3e3eda3165530e68871fe6ac095c9b3d77b9dd711a51006eb\"],\"data\":[\"github.com/konflux-ci/konflux-operator-trusted-sources//data?ref=02d9af8ee540d66401c32c5e257a3195470e956b\"],\"config\":{\"exclude\":[\"step_image_registries\",\"tasks.required_tasks_found:prefetch-dependencies\"],\"include\":[\"@slsa3\"]}}],\"publicKey\":\"k8s://happy-path-managed/cosign-public-key\"}" }, { "name": "STRICT", "value": "true" }, { "name": "IGNORE_REKOR", "value": "true" }, { "name": "EXTRA_RULE_DATA", "value": "pipeline_intention=release" }, { "name": "SOURCE_DATA_ARTIFACT", "value": "oci:quay.io/konflux-ci/release-service-trusted-artifacts@sha256:4166b305f72d7fe317b95c2e8867534b57de7aab7d1a525b3a942d5dd8e2c5c5" }, { "name": "TRUSTED_ARTIFACTS_DEBUG", "value": "" }, { "name": "CERTIFICATE_IDENTITY", "value": "" }, { "name": "CERTIFICATE_OIDC_ISSUER", "value": "" }, { "name": "TUF_MIRROR", "value": "" }, { "name": "REKOR_HOST", "value": "" } ], "retries": 2, "serviceAccountName": "release-service-account", "taskRef": { "params": [ { "name": "url", "value": "https://github.com/conforma/tekton-catalog" }, { "name": "revision", "value": "0004edc302b83067034bffbd17677299900273f9" }, { "name": "pathInRepo", "value": "tasks/verify-conforma-konflux-ta/0.1/verify-conforma-konflux-ta.yaml" } ], "resolver": "git" }, "timeout": "4h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:47:45Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:47:45Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-l7r6j-verify-conforma-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" }, "refSource": { "digest": { "sha1": "0004edc302b83067034bffbd17677299900273f9" }, "entryPoint": "tasks/verify-conforma-konflux-ta/0.1/verify-conforma-konflux-ta.yaml", "uri": "git+https://github.com/conforma/tekton-catalog" } }, "results": [ { "name": "TEST_OUTPUT", "type": "string", "value": "{\"timestamp\":\"1791272864\",\"namespace\":\"\",\"successes\":22,\"failures\":0,\"warnings\":0,\"result\":\"SUCCESS\"}\n" }, { "name": "VSA_GENERATED", "type": "string", "value": "false" } ], "startTime": "2026-10-06T07:47:21Z", "steps": [ { "container": "step-use-trusted-artifact", "imageID": "quay.io/konflux-ci/build-trusted-artifacts@sha256:9bd32f6bafb517b309e11a2d89365052b4ab3f1c9c23c4ffd45aff6f03960476", "name": "use-trusted-artifact", "provenance": {}, "terminated": { "containerID": "containerd://0f3d8879afac807b7b68ecd753cb6631fad487a2af2fcd454c883c1963c22c0b", "exitCode": 0, "finishedAt": "2026-10-06T07:47:37Z", "reason": "Completed", "startedAt": "2026-10-06T07:47:36Z" }, "terminationReason": "Completed" }, { "container": "step-initialize-tuf", "imageID": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "name": "initialize-tuf", "provenance": {}, "terminated": { "containerID": "containerd://8093fa109c0795a6435f07643df6465a0fb6f0aff236caf1f366b4ab9b876580", "exitCode": 0, "finishedAt": "2026-10-06T07:47:37Z", "reason": "Completed", "startedAt": "2026-10-06T07:47:37Z" }, "terminationReason": "Completed" }, { "container": "step-reduce", "imageID": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "name": "reduce", "provenance": {}, "terminated": { "containerID": "containerd://3301e41bbeb03129f17822009062ee91ff7f00ca45d7e7252aac366ef29d7e70", "exitCode": 0, "finishedAt": "2026-10-06T07:47:37Z", "reason": "Completed", "startedAt": "2026-10-06T07:47:37Z" }, "terminationReason": "Completed" }, { "container": "step-pin-policy-bundle", "imageID": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "name": "pin-policy-bundle", "provenance": {}, "terminated": { "containerID": "containerd://8015d3ad5cc929dd62876b51cfba14a7e07b8bc0cfd8000c0351b4e1ab3d99dd", "exitCode": 0, "finishedAt": "2026-10-06T07:47:37Z", "reason": "Completed", "startedAt": "2026-10-06T07:47:37Z" }, "terminationReason": "Completed" }, { "container": "step-validate", "imageID": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "name": "validate", "provenance": {}, "terminated": { "containerID": "containerd://aee8b129f4208e88c7506b317795a5130ebda705f76aed51de20bd6db0cc4917", "exitCode": 0, "finishedAt": "2026-10-06T07:47:44Z", "message": "[{\"key\":\"TEST_OUTPUT\",\"value\":\"{\\\"timestamp\\\":\\\"1791272864\\\",\\\"namespace\\\":\\\"\\\",\\\"successes\\\":22,\\\"failures\\\":0,\\\"warnings\\\":0,\\\"result\\\":\\\"SUCCESS\\\"}\\n\",\"type\":1},{\"key\":\"VSA_GENERATED\",\"value\":\"false\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:47:38Z" }, "terminationReason": "Completed" }, { "container": "step-report-json", "imageID": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "name": "report-json", "provenance": {}, "terminated": { "containerID": "containerd://77fbaa8c514417abd5fd2925b71d70e557d69c7f5684a15476a41fd264ade26a", "exitCode": 0, "finishedAt": "2026-10-06T07:47:44Z", "message": "[{\"key\":\"TEST_OUTPUT\",\"value\":\"{\\\"timestamp\\\":\\\"1791272864\\\",\\\"namespace\\\":\\\"\\\",\\\"successes\\\":22,\\\"failures\\\":0,\\\"warnings\\\":0,\\\"result\\\":\\\"SUCCESS\\\"}\\n\",\"type\":1},{\"key\":\"VSA_GENERATED\",\"value\":\"false\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:47:44Z" }, "terminationReason": "Completed" }, { "container": "step-summary", "imageID": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "name": "summary", "provenance": {}, "terminated": { "containerID": "containerd://2023443784cd65b62bbcfb03d56ed9a46bfd3c0843e03c092a5811cd4b716dce", "exitCode": 0, "finishedAt": "2026-10-06T07:47:44Z", "message": "[{\"key\":\"TEST_OUTPUT\",\"value\":\"{\\\"timestamp\\\":\\\"1791272864\\\",\\\"namespace\\\":\\\"\\\",\\\"successes\\\":22,\\\"failures\\\":0,\\\"warnings\\\":0,\\\"result\\\":\\\"SUCCESS\\\"}\\n\",\"type\":1},{\"key\":\"VSA_GENERATED\",\"value\":\"false\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:47:44Z" }, "terminationReason": "Completed" }, { "container": "step-version", "imageID": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "name": "version", "provenance": {}, "terminated": { "containerID": "containerd://b7bc6a04490479de8e2ad234bc1e0a93d6e678ae1b1055aa0388384234d73f4a", "exitCode": 0, "finishedAt": "2026-10-06T07:47:44Z", "message": "[{\"key\":\"TEST_OUTPUT\",\"value\":\"{\\\"timestamp\\\":\\\"1791272864\\\",\\\"namespace\\\":\\\"\\\",\\\"successes\\\":22,\\\"failures\\\":0,\\\"warnings\\\":0,\\\"result\\\":\\\"SUCCESS\\\"}\\n\",\"type\":1},{\"key\":\"VSA_GENERATED\",\"value\":\"false\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:47:44Z" }, "terminationReason": "Completed" }, { "container": "step-show-config", "imageID": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "name": "show-config", "provenance": {}, "terminated": { "containerID": "containerd://dfd63fafd301fe20b90805dad0828d8bd44186c2eca389c8ce7be180f669b5ba", "exitCode": 0, "finishedAt": "2026-10-06T07:47:44Z", "message": "[{\"key\":\"TEST_OUTPUT\",\"value\":\"{\\\"timestamp\\\":\\\"1791272864\\\",\\\"namespace\\\":\\\"\\\",\\\"successes\\\":22,\\\"failures\\\":0,\\\"warnings\\\":0,\\\"result\\\":\\\"SUCCESS\\\"}\\n\",\"type\":1},{\"key\":\"VSA_GENERATED\",\"value\":\"false\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:47:44Z" }, "terminationReason": "Completed" }, { "container": "step-detailed-report", "imageID": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "name": "detailed-report", "provenance": {}, "terminated": { "containerID": "containerd://7af31434cde02a611836e94d6be788fc1b712c9d077e94452a63facd22f13c32", "exitCode": 0, "finishedAt": "2026-10-06T07:47:45Z", "message": "[{\"key\":\"TEST_OUTPUT\",\"value\":\"{\\\"timestamp\\\":\\\"1791272864\\\",\\\"namespace\\\":\\\"\\\",\\\"successes\\\":22,\\\"failures\\\":0,\\\"warnings\\\":0,\\\"result\\\":\\\"SUCCESS\\\"}\\n\",\"type\":1},{\"key\":\"VSA_GENERATED\",\"value\":\"false\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:47:45Z" }, "terminationReason": "Completed" }, { "container": "step-assert", "imageID": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "name": "assert", "provenance": {}, "terminated": { "containerID": "containerd://f3dc74c0827838ab2ae5e51ab3bf2600d845bd7b033250a0caaff91337b0540d", "exitCode": 0, "finishedAt": "2026-10-06T07:47:45Z", "message": "[{\"key\":\"TEST_OUTPUT\",\"value\":\"{\\\"timestamp\\\":\\\"1791272864\\\",\\\"namespace\\\":\\\"\\\",\\\"successes\\\":22,\\\"failures\\\":0,\\\"warnings\\\":0,\\\"result\\\":\\\"SUCCESS\\\"}\\n\",\"type\":1},{\"key\":\"VSA_GENERATED\",\"value\":\"false\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:47:45Z" }, "terminationReason": "Completed" }, { "container": "step-create-trusted-artifact", "imageID": "quay.io/konflux-ci/build-trusted-artifacts@sha256:9bd32f6bafb517b309e11a2d89365052b4ab3f1c9c23c4ffd45aff6f03960476", "name": "create-trusted-artifact", "provenance": {}, "terminated": { "containerID": "containerd://a8360faff59dbc8d9403462c0b776af6e62869aad222187ffe647b4aebb78fa3", "exitCode": 0, "finishedAt": "2026-10-06T07:47:45Z", "reason": "Completed", "startedAt": "2026-10-06T07:47:45Z" }, "terminationReason": "Skipped" } ], "taskSpec": { "description": "Verify the Conforma policy is met", "params": [ { "description": "The filename of the `Snapshot` that is located within the trusted artifact\n", "name": "SNAPSHOT_FILENAME", "type": "string" }, { "description": "Trusted Artifact to use to obtain the Snapshot to validate.\n", "name": "SOURCE_DATA_ARTIFACT", "type": "string" }, { "default": "enterprise-contract-service/default", "description": "Name of the policy configuration (EnterpriseContractPolicy\nresource) to use. `namespace/name` or `name` syntax supported. If\nnamespace is omitted the namespace where the task runs is used.\nYou can also specify a policy configuration using a git url, e.g.\n`github.com/conforma/config//slsa3`.\n", "name": "POLICY_CONFIGURATION", "type": "string" }, { "default": "", "description": "Public key used to verify traditional long-lived signatures. Must be a valid k8s cosign reference, e.g. k8s://my-space/my-secret where my-secret contains the expected cosign.pub attribute. Required for traditional signing key verification. Will be ignored if any of CERTIFICATE_IDENTITY, CERTIFICATE_IDENTITY_REGEXP, CERTIFICATE_OIDC_ISSUER, or CERTIFICATE_OIDC_ISSUER_REGEXP are provided.", "name": "PUBLIC_KEY", "type": "string" }, { "default": "", "description": "Rekor host for transparency log lookups", "name": "REKOR_HOST", "type": "string" }, { "default": "", "description": "Expected identity in the signing certificate for keyless verification. This should be the email or URI that was used when signing. You should provide both CERTIFICATE_OIDC_ISSUER and CERTIFICATE_IDENTITY for keyless verification. The PUBLIC_KEY param will be ignored if this is provided.", "name": "CERTIFICATE_IDENTITY", "type": "string" }, { "default": "", "description": "Expected OIDC issuer in the signing certificate for keyless verification. This should match the issuer that provided the identity token used for signing. You should provide both CERTIFICATE_OIDC_ISSUER and CERTIFICATE_IDENTITY for keyless verification. The PUBLIC_KEY param will be ignored if this is provided.", "name": "CERTIFICATE_OIDC_ISSUER", "type": "string" }, { "default": "", "description": "Similar to CERTIFICATE_IDENTITY but the value is a regexp that will be matched. Note that CERTIFICATE_IDENTITY takes precedence over this if both are present.", "name": "CERTIFICATE_IDENTITY_REGEXP", "type": "string" }, { "default": "", "description": "Similar to CERTIFICATE_OIDC_ISSUER but a regexp that will be matched. Note that CERTIFICATE_OIDC_ISSUER takes precedence over this if both are present.", "name": "CERTIFICATE_OIDC_ISSUER_REGEXP", "type": "string" }, { "default": "false", "description": "Skip Rekor transparency log checks during validation. Compatible with traditional signing secret signature checks only. If any of the CERTIFICATE_* keyless verification params are present, this value is disregarded and Rekor transparency log checks are included.", "name": "IGNORE_REKOR", "type": "string" }, { "default": "", "description": "TUF mirror URL. Provide a value when NOT using public sigstore deployment.", "name": "TUF_MIRROR", "type": "string" }, { "default": "", "description": "Path to a directory containing SSL certs to be used when communicating\nwith external services. This is useful when using the integrated registry\nand a local instance of Rekor on a development cluster which may use\ncertificates issued by a not-commonly trusted root CA. In such cases,\n`/var/run/secrets/kubernetes.io/serviceaccount` is a good value. Multiple\npaths can be provided by using the `:` separator.\n", "name": "SSL_CERT_DIR", "type": "string" }, { "default": "trusted-ca", "description": "The name of the ConfigMap to read CA bundle data from.", "name": "CA_TRUST_CONFIGMAP_NAME", "type": "string" }, { "default": "ca-bundle.crt", "description": "The name of the key in the ConfigMap that contains the CA bundle data.", "name": "CA_TRUST_CONFIG_MAP_KEY", "type": "string" }, { "default": "true", "description": "Include rule titles and descriptions in the output. Set to `\"false\"` to disable it.", "name": "INFO", "type": "string" }, { "default": "true", "description": "Fail the task if policy fails. Set to `\"false\"` to disable it.", "name": "STRICT", "type": "string" }, { "default": "/tekton/home", "description": "Value for the HOME environment variable.", "name": "HOMEDIR", "type": "string" }, { "default": "now", "description": "Run policy checks with the provided time.", "name": "EFFECTIVE_TIME", "type": "string" }, { "default": "false", "description": "Allow setting EFFECTIVE_TIME to a date in the past.", "name": "ALLOW_PAST_EFFECTIVE_TIME", "type": "string" }, { "default": "", "description": "Merge additional Rego variables into the policy data. Use syntax \"key=value,key2=value2...\"", "name": "EXTRA_RULE_DATA", "type": "string" }, { "default": "sha256:0d3ab4efb94bd8ee361bda3146cae0c509c41d597431af658ce2570112efe469", "description": "Optional OCI digest to pin the release policy bundle. When provided, the policy configuration is resolved and the reference oci::quay.io/conforma/release-policy:konflux is replaced with oci::quay.io/conforma/release-policy@\u003cdigest\u003e. Accepts a full digest (sha256:abc123...) or just the hex hash (abc123...).", "name": "POLICY_BUNDLE_DIGEST", "type": "string" }, { "default": "4", "description": "Number of parallel workers to use for policy evaluation.\n", "name": "WORKERS", "type": "string" }, { "default": "", "description": "Use the OPA evaluator instead of the default conftest evaluator. Set to \"1\" to enable.", "name": "EC_USE_OPA", "type": "string" }, { "default": "false", "description": "Reduce the Snapshot to only the component whose build caused the Snapshot to be created", "name": "SINGLE_COMPONENT", "type": "string" }, { "default": "unknown", "description": "Name, including kind, of the Kubernetes resource to query for labels when single component mode is enabled, e.g. pr/somepipeline.\n", "name": "SINGLE_COMPONENT_CUSTOM_RESOURCE", "type": "string" }, { "default": "", "description": "Kubernetes namespace where the SINGLE_COMPONENT_NAME is found. Only used when single component mode is enabled.\n", "name": "SINGLE_COMPONENT_CUSTOM_RESOURCE_NS", "type": "string" }, { "default": "", "description": "oras options to pass to Trusted Artifacts calls", "name": "ORAS_OPTIONS", "type": "string" }, { "default": "", "description": "Flag to enable debug logging in trusted artifacts. Set to a non-empty string to enable.", "name": "TRUSTED_ARTIFACTS_DEBUG", "type": "string" }, { "default": "/var/workdir/conforma", "description": "Directory to use to extract trusted artifact archive.", "name": "TRUSTED_ARTIFACTS_EXTRACT_DIR", "type": "string" }, { "default": "1s", "description": "Base duration for exponential backoff calculation (e.g., \"1s\", \"500ms\")", "name": "RETRY_DURATION", "type": "string" }, { "default": "2.0", "description": "Exponential backoff multiplier (e.g., \"2.0\", \"1.5\")", "name": "RETRY_FACTOR", "type": "string" }, { "default": "0.1", "description": "Randomness factor for backoff calculation (0.0-1.0, e.g., \"0.1\", \"0.2\")", "name": "RETRY_JITTER", "type": "string" }, { "default": "3", "description": "Maximum number of retry attempts", "name": "RETRY_MAX_RETRY", "type": "string" }, { "default": "3s", "description": "Maximum wait time between retries (e.g., \"3s\", \"10s\")", "name": "RETRY_MAX_WAIT", "type": "string" }, { "default": "false", "description": "Enable VSA generation", "name": "ENABLE_VSA", "type": "string" }, { "default": "dsse", "description": "Attestation format: dsse (signed envelope) or predicate (raw JSON)", "name": "ATTESTATION_FORMAT", "type": "string" }, { "default": "", "description": "Signing key for format=dsse (k8s:// or file:// URL)", "name": "VSA_SIGNING_KEY", "type": "string" }, { "default": "local@/var/workdir/conforma/vsa", "description": "VSA upload destination", "name": "VSA_UPLOAD", "type": "string" }, { "default": "", "description": "OCI storage URL for trusted artifacts", "name": "ociStorage", "type": "string" } ], "results": [ { "description": "Short summary of the policy evaluation for each image", "name": "TEST_OUTPUT", "type": "string" }, { "description": "Whether VSAs were generated (true/false)", "name": "VSA_GENERATED", "type": "string" }, { "description": "Trusted Artifact URI containing VSA files", "name": "sourceDataArtifact", "type": "string" } ], "stepTemplate": { "computeResources": {}, "env": [ { "name": "ORAS_OPTIONS" }, { "name": "DEBUG" }, { "name": "HOME", "value": "/tekton/home" } ], "securityContext": { "runAsUser": 1001 }, "volumeMounts": [ { "mountPath": "/var/workdir", "name": "workdir" }, { "mountPath": "/mnt/trusted-ca", "name": "trusted-ca", "readOnly": true } ] }, "steps": [ { "args": [ "use", "oci:quay.io/konflux-ci/release-service-trusted-artifacts@sha256:4166b305f72d7fe317b95c2e8867534b57de7aab7d1a525b3a942d5dd8e2c5c5=/var/workdir/conforma" ], "computeResources": {}, "env": [ { "name": "CA_FILE", "value": "/mnt/trusted-ca/ca-bundle.crt" } ], "image": "quay.io/konflux-ci/build-trusted-artifacts@sha256:9bd32f6bafb517b309e11a2d89365052b4ab3f1c9c23c4ffd45aff6f03960476", "name": "use-trusted-artifact" }, { "computeResources": {}, "env": [ { "name": "TUF_MIRROR" } ], "image": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "imagePullPolicy": "IfNotPresent", "name": "initialize-tuf", "script": "set -euo pipefail\n\nif [[ -z \"${TUF_MIRROR:-}\" ]]; then\n echo 'TUF_MIRROR parameter not provided. Skipping TUF root initialization.'\n exit\nfi\n\necho 'Initializing TUF root...'\nec sigstore initialize --mirror \"${TUF_MIRROR}\" --root \"${TUF_MIRROR}/root.json\"\necho 'Done!'" }, { "command": [ "reduce-snapshot.sh" ], "computeResources": {}, "env": [ { "name": "SNAPSHOT", "value": "/var/workdir/conforma/01940dc7-b245-459f-938e-e536fd660b73/snapshot_spec.json" }, { "name": "SINGLE_COMPONENT", "value": "false" }, { "name": "CUSTOM_RESOURCE", "value": "unknown" }, { "name": "CUSTOM_RESOURCE_NAMESPACE" }, { "name": "SNAPSHOT_PATH", "value": "/tekton/home/snapshot.json" } ], "image": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "imagePullPolicy": "IfNotPresent", "name": "reduce", "onError": "continue" }, { "command": [ "pin-konflux-policy-bundle.sh" ], "computeResources": {}, "env": [ { "name": "POLICY_CONFIGURATION", "value": "{\"description\":\"Red Hat's enterprise requirements\",\"sources\":[{\"name\":\"Default\",\"policy\":[\"oci::quay.io/conforma/release-policy:latest@sha256:2df9ba13162aded3e3eda3165530e68871fe6ac095c9b3d77b9dd711a51006eb\"],\"data\":[\"github.com/konflux-ci/konflux-operator-trusted-sources//data?ref=02d9af8ee540d66401c32c5e257a3195470e956b\"],\"config\":{\"exclude\":[\"step_image_registries\",\"tasks.required_tasks_found:prefetch-dependencies\"],\"include\":[\"@slsa3\"]}}],\"publicKey\":\"k8s://happy-path-managed/cosign-public-key\"}" }, { "name": "POLICY_BUNDLE_DIGEST", "value": "sha256:0d3ab4efb94bd8ee361bda3146cae0c509c41d597431af658ce2570112efe469" } ], "image": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "imagePullPolicy": "IfNotPresent", "name": "pin-policy-bundle", "onError": "continue" }, { "computeResources": { "limits": { "memory": "2Gi" }, "requests": { "cpu": "250m", "memory": "2Gi" } }, "env": [ { "name": "POLICY_CONFIGURATION", "value": "{\"description\":\"Red Hat's enterprise requirements\",\"sources\":[{\"name\":\"Default\",\"policy\":[\"oci::quay.io/conforma/release-policy:latest@sha256:2df9ba13162aded3e3eda3165530e68871fe6ac095c9b3d77b9dd711a51006eb\"],\"data\":[\"github.com/konflux-ci/konflux-operator-trusted-sources//data?ref=02d9af8ee540d66401c32c5e257a3195470e956b\"],\"config\":{\"exclude\":[\"step_image_registries\",\"tasks.required_tasks_found:prefetch-dependencies\"],\"include\":[\"@slsa3\"]}}],\"publicKey\":\"k8s://happy-path-managed/cosign-public-key\"}" }, { "name": "PUBLIC_KEY" }, { "name": "CERTIFICATE_IDENTITY" }, { "name": "CERTIFICATE_OIDC_ISSUER" }, { "name": "CERTIFICATE_IDENTITY_REGEXP" }, { "name": "CERTIFICATE_OIDC_ISSUER_REGEXP" }, { "name": "REKOR_HOST" }, { "name": "IGNORE_REKOR", "value": "true" }, { "name": "WORKERS", "value": "4" }, { "name": "INFO", "value": "true" }, { "name": "EFFECTIVE_TIME", "value": "now" }, { "name": "ALLOW_PAST_EFFECTIVE_TIME", "value": "false" }, { "name": "EXTRA_RULE_DATA", "value": "pipeline_intention=release" }, { "name": "RETRY_MAX_WAIT", "value": "3s" }, { "name": "RETRY_MAX_RETRY", "value": "3" }, { "name": "RETRY_DURATION", "value": "1s" }, { "name": "RETRY_FACTOR", "value": "2.0" }, { "name": "RETRY_JITTER", "value": "0.1" }, { "name": "ENABLE_VSA", "value": "false" }, { "name": "ATTESTATION_FORMAT", "value": "dsse" }, { "name": "VSA_SIGNING_KEY" }, { "name": "VSA_UPLOAD", "value": "local@/var/workdir/conforma/vsa" }, { "name": "EC_USE_OPA" }, { "name": "HOMEDIR", "value": "/tekton/home" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs:/system/etc/security/cacerts:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "imagePullPolicy": "IfNotPresent", "name": "validate", "onError": "continue", "script": "#!/bin/bash\nset -euo pipefail\n\nif [ -f \"/mnt/trusted-ca/ca-bundle.crt\" ]; then\n export SSL_CERT_FILE=\"/mnt/trusted-ca/ca-bundle.crt\"\nfi\n\n# Use policy override file if pin-policy-bundle produced one\nif [[ -f \"${HOMEDIR}/policy-with-pinned-bundle.yaml\" ]]; then\n POLICY_CONFIGURATION=\"${HOMEDIR}/policy-with-pinned-bundle.yaml\"\nfi\n\ncmd_args=(\n validate\n image\n --images=\"${HOMEDIR}/snapshot.json\"\n --policy=\"${POLICY_CONFIGURATION}\"\n)\n\n# To keep bash logic as thin as possible we deliberately don't sanitize\n# these params. If something is wrong or missing let Conforma handle it.\n\nif [ -n \"${CERTIFICATE_IDENTITY}\" ] || \\\n [ -n \"${CERTIFICATE_OIDC_ISSUER}\" ] || \\\n [ -n \"${CERTIFICATE_IDENTITY_REGEXP}\" ] || \\\n [ -n \"${CERTIFICATE_OIDC_ISSUER_REGEXP}\" ]; then\n # If *any* of the above are non-empty assume the intention is to\n # try keyless verification\n\n if [ -n \"${CERTIFICATE_IDENTITY}\" ]; then\n cmd_args+=(\n --certificate-identity=\"${CERTIFICATE_IDENTITY}\"\n )\n elif [ -n \"${CERTIFICATE_IDENTITY_REGEXP}\" ]; then\n cmd_args+=(\n --certificate-identity-regexp=\"${CERTIFICATE_IDENTITY_REGEXP}\"\n )\n fi\n\n if [ -n \"${CERTIFICATE_OIDC_ISSUER}\" ]; then\n cmd_args+=(\n --certificate-oidc-issuer=\"${CERTIFICATE_OIDC_ISSUER}\"\n )\n elif [ -n \"${CERTIFICATE_OIDC_ISSUER_REGEXP}\" ]; then\n cmd_args+=(\n --certificate-oidc-issuer-regexp=\"${CERTIFICATE_OIDC_ISSUER_REGEXP}\"\n )\n fi\n\n # Force --ignore-rekor to false since we need rekor\n cmd_args+=(\n --ignore-rekor=false\n )\nelse\n # Assume traditional signing secret verification\n cmd_args+=(\n --public-key=\"${PUBLIC_KEY}\"\n --ignore-rekor=\"${IGNORE_REKOR}\"\n )\nfi\n\ncmd_args+=(\n --rekor-url=\"${REKOR_HOST}\"\n --workers=\"${WORKERS}\"\n --info=\"${INFO}\"\n --timeout=0\n --strict=false\n --show-successes=true\n --show-policy-docs-link=true\n --effective-time=\"${EFFECTIVE_TIME}\"\n --allow-past-effective-time=\"${ALLOW_PAST_EFFECTIVE_TIME}\"\n --extra-rule-data=\"${EXTRA_RULE_DATA}\"\n --retry-max-wait=\"${RETRY_MAX_WAIT}\"\n --retry-max-retry=\"${RETRY_MAX_RETRY}\"\n --retry-duration=\"${RETRY_DURATION}\"\n --retry-factor=\"${RETRY_FACTOR}\"\n --retry-jitter=\"${RETRY_JITTER}\"\n --output=\"text=${HOMEDIR}/text-report.txt?show-successes=false\"\n --output=\"json=${HOMEDIR}/report-json.json\"\n --output=\"appstudio=/tekton/results/TEST_OUTPUT\"\n)\n\n# Add VSA arguments if enabled\nif [[ \"${ENABLE_VSA}\" == \"true\" ]]; then\n cmd_args+=(\n --vsa=\"true\"\n --attestation-format=\"${ATTESTATION_FORMAT}\"\n )\n\n\n if [[ \"${ATTESTATION_FORMAT}\" == \"dsse\" ]]; then\n if [[ -z \"${VSA_SIGNING_KEY}\" ]]; then\n echo \"ERROR: VSA_SIGNING_KEY required for format=dsse\" \u003e\u00262\n exit 1\n fi\n cmd_args+=(\n --vsa-signing-key=\"${VSA_SIGNING_KEY}\"\n --vsa-upload=\"${VSA_UPLOAD}\"\n --vsa-expiration=0\n )\n fi\n\n # ec requires --attestation-output-dir to be under /tmp or cwd.\n # Write there first, then copy to the workdir so\n # create-trusted-artifact includes them in the archive.\n VSA_TMP_DIR=\"/tmp/vsa-output\"\n mkdir -p \"$VSA_TMP_DIR\"\n cmd_args+=(\n --attestation-output-dir=\"$VSA_TMP_DIR\"\n )\n\n echo -n \"true\" \u003e /tekton/results/VSA_GENERATED\nelse\n echo -n \"false\" \u003e /tekton/results/VSA_GENERATED\nfi\n\n# Execute Conforma with constructed arguments\nec \"${cmd_args[@]}\"\n\n# Copy VSA output from /tmp to workdir for trusted artifact archival\nif [[ \"${ENABLE_VSA}\" == \"true\" ]]; then\n # Extract local path from VSA_UPLOAD for output directory\n # VSA_UPLOAD format is \"local@/path/to/dir\"\n # Fixme: Because of -o pipefail this will fail the whole task when the grep doesn't match\n VSA_LOCAL_PATH=$(echo \"${VSA_UPLOAD}\" | grep -oE '^local@[^ ]+' | sed 's/^local@//' | head -n1 || true)\n if [[ -n \"$VSA_LOCAL_PATH\" \u0026\u0026 -d \"/tmp/vsa-output\" ]]; then\n mkdir -p \"$VSA_LOCAL_PATH\"\n cp -r /tmp/vsa-output/* \"$VSA_LOCAL_PATH\"/ 2\u003e/dev/null || true\n # Include raw JSON report for downstream SLSA VSA generation\n cp \"${HOMEDIR}/report-json.json\" \"$VSA_LOCAL_PATH\"/ 2\u003e/dev/null || true\n fi\nfi\n" }, { "args": [ "jq . /tekton/home/report-json.json | awk '{gsub(/^ +/, \"\"); acc += length; if (acc \u003e= 8000) { printf \"\\n\"; acc=length } printf $0 }'" ], "command": [ "sh", "-c" ], "computeResources": {}, "image": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "imagePullPolicy": "IfNotPresent", "name": "report-json", "onError": "continue" }, { "args": [ ".", "/tekton/results/TEST_OUTPUT" ], "command": [ "jq" ], "computeResources": {}, "image": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "imagePullPolicy": "IfNotPresent", "name": "summary", "onError": "continue" }, { "args": [ "version" ], "command": [ "ec" ], "computeResources": {}, "image": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "imagePullPolicy": "IfNotPresent", "name": "version" }, { "args": [ "{policy: .policy, key: .key, \"effective-time\": .[\"effective-time\"]}", "/tekton/home/report-json.json" ], "command": [ "jq" ], "computeResources": {}, "image": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "imagePullPolicy": "IfNotPresent", "name": "show-config" }, { "args": [ "/tekton/home/text-report.txt" ], "command": [ "cat" ], "computeResources": {}, "image": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "imagePullPolicy": "IfNotPresent", "name": "detailed-report", "onError": "continue" }, { "args": [ "--argjson", "strict", "true", "-e", ".result == \"SUCCESS\" or .result == \"WARNING\" or ($strict | not)\n", "/tekton/results/TEST_OUTPUT" ], "command": [ "jq" ], "computeResources": {}, "image": "quay.io/conforma/cli@sha256:6c6343486b739836c448277c00b1ec3c291e4ad10fd2b1767ff3984e89a43ad1", "imagePullPolicy": "IfNotPresent", "name": "assert" }, { "args": [ "create", "--store", "", "/tekton/results/sourceDataArtifact=/var/workdir/conforma" ], "computeResources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "env": [ { "name": "HOME", "value": "/tekton/home" }, { "name": "ORAS_OPTIONS" }, { "name": "CA_FILE", "value": "/mnt/trusted-ca/ca-bundle.crt" } ], "image": "quay.io/konflux-ci/build-trusted-artifacts@sha256:9bd32f6bafb517b309e11a2d89365052b4ab3f1c9c23c4ffd45aff6f03960476", "name": "create-trusted-artifact", "when": [ { "input": "false", "operator": "in", "values": [ "true" ] }, { "operator": "notin", "values": [ "", "empty" ] } ] } ], "volumes": [ { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "emptyDir": {}, "name": "workdir" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-oom-x2fd/snapshot-sample-0c4r-d499148-p79j9", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-oom-managed/results/eed579f1-d728-483f-bc23-aa74287a9a94/records/d0c27813-a9c5-45f8-9e24-99060f8bae80", "results.tekton.dev/result": "retry-oom-managed/results/eed579f1-d728-483f-bc23-aa74287a9a94", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:48:06Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:48:38Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-0c4r", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "1", "release.appstudio.openshift.io/name": "snapshot-sample-0c4r-d499148-p79j9", "release.appstudio.openshift.io/namespace": "retry-oom-x2fd", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-5snnj", "tekton.dev/pipelineRunUID": "eed579f1-d728-483f-bc23-aa74287a9a94", "tekton.dev/pipelineTask": "collect-data" }, "name": "managed-5snnj-collect-data", "namespace": "retry-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-5snnj", "uid": "eed579f1-d728-483f-bc23-aa74287a9a94" } ], "resourceVersion": "21883", "uid": "d0c27813-a9c5-45f8-9e24-99060f8bae80" }, "spec": { "params": [ { "name": "releasePlanAdmission", "value": "retry-oom-managed/demo" } ], "serviceAccountName": "release-service-account", "taskSpec": { "params": [ { "name": "releasePlanAdmission", "type": "string" } ], "results": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nDATA=$(get-resource releasePlanAdmission \"retry-oom-managed/demo\" |\n jq '.spec.data // {}')\n\nFAIL_MODE=$(jq -r '.failMode // \"none\"' \u003c\u003c\u003c\"${DATA}\")\nFAIL_ON_TASK=$(jq -r '.failOnTask // \"task-01\"' \u003c\u003c\u003c\"${DATA}\")\n\nprintf '%s' \"${FAIL_MODE}\" \u003e \"$(results.failMode.path)\"\nprintf '%s' \"${FAIL_ON_TASK}\" \u003e \"$(results.failOnTask.path)\"\n" } ] }, "timeout": "1h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:48:12Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:48:12Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-5snnj-collect-data-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "failMode", "type": "string", "value": "oom" }, { "name": "failOnTask", "type": "string", "value": "task-01" } ], "startTime": "2026-10-06T07:48:06Z", "steps": [ { "container": "step-collect-data", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "provenance": {}, "terminated": { "containerID": "containerd://1d089839d447932920574475659149bf6648042a4fdd8f75f9cf862516957bd9", "exitCode": 0, "finishedAt": "2026-10-06T07:48:12Z", "message": "[{\"key\":\"failMode\",\"value\":\"oom\",\"type\":1},{\"key\":\"failOnTask\",\"value\":\"task-01\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:48:11Z" }, "terminationReason": "Completed" } ], "taskSpec": { "params": [ { "name": "releasePlanAdmission", "type": "string" } ], "results": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nDATA=$(get-resource releasePlanAdmission \"retry-oom-managed/demo\" |\n jq '.spec.data // {}')\n\nFAIL_MODE=$(jq -r '.failMode // \"none\"' \u003c\u003c\u003c\"${DATA}\")\nFAIL_ON_TASK=$(jq -r '.failOnTask // \"task-01\"' \u003c\u003c\u003c\"${DATA}\")\n\nprintf '%s' \"${FAIL_MODE}\" \u003e \"/tekton/results/failMode\"\nprintf '%s' \"${FAIL_ON_TASK}\" \u003e \"/tekton/results/failOnTask\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-oom-x2fd/snapshot-sample-0c4r-d499148-p79j9", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-oom-managed/results/eed579f1-d728-483f-bc23-aa74287a9a94/records/f37ad6db-fe71-48da-b085-e109e9938c07", "results.tekton.dev/result": "retry-oom-managed/results/eed579f1-d728-483f-bc23-aa74287a9a94", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:48:22Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:48:38Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-0c4r", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "1", "release.appstudio.openshift.io/name": "snapshot-sample-0c4r-d499148-p79j9", "release.appstudio.openshift.io/namespace": "retry-oom-x2fd", "tekton.dev/memberOf": "finally", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-5snnj", "tekton.dev/pipelineRunUID": "eed579f1-d728-483f-bc23-aa74287a9a94", "tekton.dev/pipelineTask": "finalize" }, "name": "managed-5snnj-finalize", "namespace": "retry-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-5snnj", "uid": "eed579f1-d728-483f-bc23-aa74287a9a94" } ], "resourceVersion": "21884", "uid": "f37ad6db-fe71-48da-b085-e109e9938c07" }, "spec": { "serviceAccountName": "release-service-account", "taskSpec": { "steps": [ { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "finalize-step-01", "script": "#!/usr/bin/env bash\necho \"finalize: complete\"\n" } ] }, "timeout": "1h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:48:27Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:48:27Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-5snnj-finalize-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "startTime": "2026-10-06T07:48:22Z", "steps": [ { "container": "step-finalize-step-01", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "finalize-step-01", "provenance": {}, "terminated": { "containerID": "containerd://ef8a390250637ceeabc2d48acd17b6d7b4d1737de57e8e67f0be085a8b8c144f", "exitCode": 0, "finishedAt": "2026-10-06T07:48:27Z", "reason": "Completed", "startedAt": "2026-10-06T07:48:27Z" }, "terminationReason": "Completed" } ], "taskSpec": { "steps": [ { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "finalize-step-01", "script": "#!/usr/bin/env bash\necho \"finalize: complete\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-oom-x2fd/snapshot-sample-0c4r-d499148-p79j9", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-oom-managed/results/eed579f1-d728-483f-bc23-aa74287a9a94/records/0c5767a4-795f-4c21-8b39-bd4f1a12b3e0", "results.tekton.dev/result": "retry-oom-managed/results/eed579f1-d728-483f-bc23-aa74287a9a94", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:48:12Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:48:38Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-0c4r", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "1", "release.appstudio.openshift.io/name": "snapshot-sample-0c4r-d499148-p79j9", "release.appstudio.openshift.io/namespace": "retry-oom-x2fd", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-5snnj", "tekton.dev/pipelineRunUID": "eed579f1-d728-483f-bc23-aa74287a9a94", "tekton.dev/pipelineTask": "task-01" }, "name": "managed-5snnj-task-01", "namespace": "retry-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-5snnj", "uid": "eed579f1-d728-483f-bc23-aa74287a9a94" } ], "resourceVersion": "21886", "uid": "0c5767a4-795f-4c21-8b39-bd4f1a12b3e0" }, "spec": { "params": [ { "name": "failMode", "value": "oom" }, { "name": "failOnTask", "value": "task-01" } ], "serviceAccountName": "release-service-account", "stepSpecs": [ { "computeResources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "128Mi" } }, "name": "task-01-step-01" } ], "taskSpec": { "params": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-01", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nFAIL_MODE=\"$(params.failMode)\"\nFAIL_ON_TASK=\"$(params.failOnTask)\"\n\n# Only inject failures into the selected task.\n[[ \"${FAIL_ON_TASK}\" == \"task-01\" ]] || exit 0\n\necho \"task-01-step-01: failMode=${FAIL_MODE}\"\n\ncase \"${FAIL_MODE}\" in\n error)\n exit 1\n ;;\n oom)\n # Trigger OOM only when the task is still running with the\n # original memory limit. After retry mitigation the limit\n # should be increased and this path should no longer OOM.\n LIMIT=\"max\"\n [[ -r /sys/fs/cgroup/memory.max ]] \u0026\u0026 read -r LIMIT \u003c /sys/fs/cgroup/memory.max\n\n THRESHOLD=104857600 # 100 Mi\n\n if [[ \"${LIMIT}\" != \"max\" ]] \u0026\u0026 (( LIMIT \u003c THRESHOLD )); then\n echo \"limit ${LIMIT} \u003c ${THRESHOLD}: triggering OOMKill\"\n\n X=$(dd if=/dev/zero bs=1M count=150 status=none | tr '\\0' 'a')\n echo \"${#X}\"\n else\n echo \"limit ${LIMIT} sufficient\"\n fi\n ;;\n task-timeout)\n # Sleep longer than the task timeout. Which is set to 1 minute.\n sleep 90\n ;;\n none)\n ;;\n *)\n echo \"unknown fail mode: ${FAIL_MODE}\" \u003e\u00262\n exit 1\n ;;\nesac\n" }, { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-02", "script": "#!/usr/bin/env bash\necho \"task-01-step-02: complete\"\n" } ] }, "timeout": "1m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:48:17Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:48:17Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-5snnj-task-01-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "startTime": "2026-10-06T07:48:12Z", "steps": [ { "container": "step-task-01-step-01", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-01", "provenance": {}, "terminated": { "containerID": "containerd://d8ec997d39a3bb435d1ce2e3358a8707ecea528a77a2566b5de59defd1caac4a", "exitCode": 0, "finishedAt": "2026-10-06T07:48:16Z", "reason": "Completed", "startedAt": "2026-10-06T07:48:16Z" }, "terminationReason": "Completed" }, { "container": "step-task-01-step-02", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-02", "provenance": {}, "terminated": { "containerID": "containerd://2184c5b97ce7e5972923918d35040dccabbc7c42b69579eb8161601147e03450", "exitCode": 0, "finishedAt": "2026-10-06T07:48:17Z", "reason": "Completed", "startedAt": "2026-10-06T07:48:17Z" }, "terminationReason": "Completed" } ], "taskSpec": { "params": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-01", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nFAIL_MODE=\"oom\"\nFAIL_ON_TASK=\"task-01\"\n\n# Only inject failures into the selected task.\n[[ \"${FAIL_ON_TASK}\" == \"task-01\" ]] || exit 0\n\necho \"task-01-step-01: failMode=${FAIL_MODE}\"\n\ncase \"${FAIL_MODE}\" in\n error)\n exit 1\n ;;\n oom)\n # Trigger OOM only when the task is still running with the\n # original memory limit. After retry mitigation the limit\n # should be increased and this path should no longer OOM.\n LIMIT=\"max\"\n [[ -r /sys/fs/cgroup/memory.max ]] \u0026\u0026 read -r LIMIT \u003c /sys/fs/cgroup/memory.max\n\n THRESHOLD=104857600 # 100 Mi\n\n if [[ \"${LIMIT}\" != \"max\" ]] \u0026\u0026 (( LIMIT \u003c THRESHOLD )); then\n echo \"limit ${LIMIT} \u003c ${THRESHOLD}: triggering OOMKill\"\n\n X=$(dd if=/dev/zero bs=1M count=150 status=none | tr '\\0' 'a')\n echo \"${#X}\"\n else\n echo \"limit ${LIMIT} sufficient\"\n fi\n ;;\n task-timeout)\n # Sleep longer than the task timeout. Which is set to 1 minute.\n sleep 90\n ;;\n none)\n ;;\n *)\n echo \"unknown fail mode: ${FAIL_MODE}\" \u003e\u00262\n exit 1\n ;;\nesac\n" }, { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-02", "script": "#!/usr/bin/env bash\necho \"task-01-step-02: complete\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-oom-x2fd/snapshot-sample-0c4r-d499148-p79j9", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-oom-managed/results/eed579f1-d728-483f-bc23-aa74287a9a94/records/7a3e86d6-5a94-4c1e-94bc-85fb2b991a38", "results.tekton.dev/result": "retry-oom-managed/results/eed579f1-d728-483f-bc23-aa74287a9a94", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:48:17Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:48:38Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-0c4r", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "1", "release.appstudio.openshift.io/name": "snapshot-sample-0c4r-d499148-p79j9", "release.appstudio.openshift.io/namespace": "retry-oom-x2fd", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-5snnj", "tekton.dev/pipelineRunUID": "eed579f1-d728-483f-bc23-aa74287a9a94", "tekton.dev/pipelineTask": "task-02" }, "name": "managed-5snnj-task-02", "namespace": "retry-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-5snnj", "uid": "eed579f1-d728-483f-bc23-aa74287a9a94" } ], "resourceVersion": "21892", "uid": "7a3e86d6-5a94-4c1e-94bc-85fb2b991a38" }, "spec": { "params": [ { "name": "failMode", "value": "oom" }, { "name": "failOnTask", "value": "task-01" } ], "serviceAccountName": "release-service-account", "taskSpec": { "params": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "stepTemplate": { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c" }, "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-02-step-01", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nFAIL_MODE=\"$(params.failMode)\"\nFAIL_ON_TASK=\"$(params.failOnTask)\"\n\n# pipeline-timeout always runs from task-02 regardless of failOnTask.\nif [[ \"${FAIL_ON_TASK}\" != \"task-02\" \u0026\u0026 \"${FAIL_MODE}\" != \"pipeline-timeout\" ]]; then\n echo \"task-02: complete\"\n exit 0\nfi\n\necho \"task-02-step-01: failMode=${FAIL_MODE}\"\n\ncase \"${FAIL_MODE}\" in\n pipeline-timeout)\n # Sleep past the pipeline level pipeline/tasks timeout. This is used to verify\n # that retry mitigation updates both pipeline and tasks timeouts\n # and allows the pipelineRun to complete on retry.\n echo \"task-02-step-01: sleeping 120s\"\n sleep 120\n ;;\n error)\n exit 1\n ;;\n oom)\n # Trigger OOM only when the task is still running with the\n # original memory limit. After retry mitigation the limit\n # should be increased and this path should no longer OOM.\n LIMIT=\"max\"\n [[ -r /sys/fs/cgroup/memory.max ]] \u0026\u0026 read -r LIMIT \u003c /sys/fs/cgroup/memory.max\n\n THRESHOLD=104857600 # 100 Mi\n\n if [[ \"${LIMIT}\" != \"max\" ]] \u0026\u0026 (( LIMIT \u003c THRESHOLD )); then\n echo \"limit ${LIMIT} \u003c ${THRESHOLD}: triggering OOMKill\"\n X=$(dd if=/dev/zero bs=1M count=150 status=none | tr '\\0' 'a')\n echo \"${#X}\"\n else\n echo \"limit ${LIMIT} sufficient\"\n fi\n ;;\n oom-always)\n # Always trigger an OOMKill regardless of the memory limit.\n # This is used to verify that retry mitigation cannot fix\n # the failure even after resource requests/limits are increased.\n \n X=$(dd if=/dev/zero bs=1M count=2048 status=none | tr '\\0' 'a')\n echo \"${#X}\"\n ;;\n none)\n ;;\n *)\n echo \"unknown fail mode: ${FAIL_MODE}\" \u003e\u00262\n exit 1\n ;;\nesac\n" }, { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-02-step-02", "script": "#!/usr/bin/env bash\necho \"task-02-step-02: complete\"\n" } ] }, "timeout": "1h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:48:22Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:48:22Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-5snnj-task-02-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "startTime": "2026-10-06T07:48:17Z", "steps": [ { "container": "step-task-02-step-01", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-02-step-01", "provenance": {}, "terminated": { "containerID": "containerd://5fdcfcd820a41deff4811340d37b7f77fbdf1d403d1be814676f8b2f46bd3b33", "exitCode": 0, "finishedAt": "2026-10-06T07:48:22Z", "reason": "Completed", "startedAt": "2026-10-06T07:48:22Z" }, "terminationReason": "Completed" }, { "container": "step-task-02-step-02", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-02-step-02", "provenance": {}, "terminated": { "containerID": "containerd://ce44cc8dbd2eff1d30c1a4ce493ac119327bf77a3f216c12c63187aa6c1534fd", "exitCode": 0, "finishedAt": "2026-10-06T07:48:22Z", "reason": "Completed", "startedAt": "2026-10-06T07:48:22Z" }, "terminationReason": "Completed" } ], "taskSpec": { "params": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "stepTemplate": { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c" }, "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-02-step-01", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nFAIL_MODE=\"oom\"\nFAIL_ON_TASK=\"task-01\"\n\n# pipeline-timeout always runs from task-02 regardless of failOnTask.\nif [[ \"${FAIL_ON_TASK}\" != \"task-02\" \u0026\u0026 \"${FAIL_MODE}\" != \"pipeline-timeout\" ]]; then\n echo \"task-02: complete\"\n exit 0\nfi\n\necho \"task-02-step-01: failMode=${FAIL_MODE}\"\n\ncase \"${FAIL_MODE}\" in\n pipeline-timeout)\n # Sleep past the pipeline level pipeline/tasks timeout. This is used to verify\n # that retry mitigation updates both pipeline and tasks timeouts\n # and allows the pipelineRun to complete on retry.\n echo \"task-02-step-01: sleeping 120s\"\n sleep 120\n ;;\n error)\n exit 1\n ;;\n oom)\n # Trigger OOM only when the task is still running with the\n # original memory limit. After retry mitigation the limit\n # should be increased and this path should no longer OOM.\n LIMIT=\"max\"\n [[ -r /sys/fs/cgroup/memory.max ]] \u0026\u0026 read -r LIMIT \u003c /sys/fs/cgroup/memory.max\n\n THRESHOLD=104857600 # 100 Mi\n\n if [[ \"${LIMIT}\" != \"max\" ]] \u0026\u0026 (( LIMIT \u003c THRESHOLD )); then\n echo \"limit ${LIMIT} \u003c ${THRESHOLD}: triggering OOMKill\"\n X=$(dd if=/dev/zero bs=1M count=150 status=none | tr '\\0' 'a')\n echo \"${#X}\"\n else\n echo \"limit ${LIMIT} sufficient\"\n fi\n ;;\n oom-always)\n # Always trigger an OOMKill regardless of the memory limit.\n # This is used to verify that retry mitigation cannot fix\n # the failure even after resource requests/limits are increased.\n \n X=$(dd if=/dev/zero bs=1M count=2048 status=none | tr '\\0' 'a')\n echo \"${#X}\"\n ;;\n none)\n ;;\n *)\n echo \"unknown fail mode: ${FAIL_MODE}\" \u003e\u00262\n exit 1\n ;;\nesac\n" }, { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-02-step-02", "script": "#!/usr/bin/env bash\necho \"task-02-step-02: complete\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-oom-x2fd/snapshot-sample-0c4r-d499148-p79j9", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-oom-managed/results/f7a250cf-4dc1-49d6-b2e7-2d95f54901f6/records/0fd7a278-b076-4299-a7d8-151878e85705", "results.tekton.dev/result": "retry-oom-managed/results/f7a250cf-4dc1-49d6-b2e7-2d95f54901f6", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:47:53Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:48:38Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-0c4r", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "0", "release.appstudio.openshift.io/name": "snapshot-sample-0c4r-d499148-p79j9", "release.appstudio.openshift.io/namespace": "retry-oom-x2fd", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-pshnh", "tekton.dev/pipelineRunUID": "f7a250cf-4dc1-49d6-b2e7-2d95f54901f6", "tekton.dev/pipelineTask": "collect-data" }, "name": "managed-pshnh-collect-data", "namespace": "retry-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-pshnh", "uid": "f7a250cf-4dc1-49d6-b2e7-2d95f54901f6" } ], "resourceVersion": "21896", "uid": "0fd7a278-b076-4299-a7d8-151878e85705" }, "spec": { "params": [ { "name": "releasePlanAdmission", "value": "retry-oom-managed/demo" } ], "serviceAccountName": "release-service-account", "taskSpec": { "params": [ { "name": "releasePlanAdmission", "type": "string" } ], "results": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nDATA=$(get-resource releasePlanAdmission \"retry-oom-managed/demo\" |\n jq '.spec.data // {}')\n\nFAIL_MODE=$(jq -r '.failMode // \"none\"' \u003c\u003c\u003c\"${DATA}\")\nFAIL_ON_TASK=$(jq -r '.failOnTask // \"task-01\"' \u003c\u003c\u003c\"${DATA}\")\n\nprintf '%s' \"${FAIL_MODE}\" \u003e \"$(results.failMode.path)\"\nprintf '%s' \"${FAIL_ON_TASK}\" \u003e \"$(results.failOnTask.path)\"\n" } ] }, "timeout": "1h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:47:57Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:47:57Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-pshnh-collect-data-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "failMode", "type": "string", "value": "oom" }, { "name": "failOnTask", "type": "string", "value": "task-01" } ], "startTime": "2026-10-06T07:47:53Z", "steps": [ { "container": "step-collect-data", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "provenance": {}, "terminated": { "containerID": "containerd://e216dd531c86ee7541d20fdf8481a1d718ecf315df3ab2b9026d375dfeb48ece", "exitCode": 0, "finishedAt": "2026-10-06T07:47:57Z", "message": "[{\"key\":\"failMode\",\"value\":\"oom\",\"type\":1},{\"key\":\"failOnTask\",\"value\":\"task-01\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:47:56Z" }, "terminationReason": "Completed" } ], "taskSpec": { "params": [ { "name": "releasePlanAdmission", "type": "string" } ], "results": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nDATA=$(get-resource releasePlanAdmission \"retry-oom-managed/demo\" |\n jq '.spec.data // {}')\n\nFAIL_MODE=$(jq -r '.failMode // \"none\"' \u003c\u003c\u003c\"${DATA}\")\nFAIL_ON_TASK=$(jq -r '.failOnTask // \"task-01\"' \u003c\u003c\u003c\"${DATA}\")\n\nprintf '%s' \"${FAIL_MODE}\" \u003e \"/tekton/results/failMode\"\nprintf '%s' \"${FAIL_ON_TASK}\" \u003e \"/tekton/results/failOnTask\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-oom-x2fd/snapshot-sample-0c4r-d499148-p79j9", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-oom-managed/results/f7a250cf-4dc1-49d6-b2e7-2d95f54901f6/records/0da56db2-0227-470d-8d74-f74e3a057ce5", "results.tekton.dev/result": "retry-oom-managed/results/f7a250cf-4dc1-49d6-b2e7-2d95f54901f6", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:48:02Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:48:38Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-0c4r", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "0", "release.appstudio.openshift.io/name": "snapshot-sample-0c4r-d499148-p79j9", "release.appstudio.openshift.io/namespace": "retry-oom-x2fd", "tekton.dev/memberOf": "finally", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-pshnh", "tekton.dev/pipelineRunUID": "f7a250cf-4dc1-49d6-b2e7-2d95f54901f6", "tekton.dev/pipelineTask": "finalize" }, "name": "managed-pshnh-finalize", "namespace": "retry-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-pshnh", "uid": "f7a250cf-4dc1-49d6-b2e7-2d95f54901f6" } ], "resourceVersion": "21897", "uid": "0da56db2-0227-470d-8d74-f74e3a057ce5" }, "spec": { "serviceAccountName": "release-service-account", "taskSpec": { "steps": [ { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "finalize-step-01", "script": "#!/usr/bin/env bash\necho \"finalize: complete\"\n" } ] }, "timeout": "1h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:48:06Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:48:06Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-pshnh-finalize-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "startTime": "2026-10-06T07:48:02Z", "steps": [ { "container": "step-finalize-step-01", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "finalize-step-01", "provenance": {}, "terminated": { "containerID": "containerd://6af5aa03d7c5b027f4d9aafbf9a8fa09f333eca396cad37d1f2801ba957056a6", "exitCode": 0, "finishedAt": "2026-10-06T07:48:05Z", "reason": "Completed", "startedAt": "2026-10-06T07:48:05Z" }, "terminationReason": "Completed" } ], "taskSpec": { "steps": [ { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "finalize-step-01", "script": "#!/usr/bin/env bash\necho \"finalize: complete\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-oom-x2fd/snapshot-sample-0c4r-d499148-p79j9", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-oom-managed/results/f7a250cf-4dc1-49d6-b2e7-2d95f54901f6/records/93264a7f-b4ed-4e31-9896-7000805d7990", "results.tekton.dev/result": "retry-oom-managed/results/f7a250cf-4dc1-49d6-b2e7-2d95f54901f6", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:47:57Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:48:38Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-0c4r", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "0", "release.appstudio.openshift.io/name": "snapshot-sample-0c4r-d499148-p79j9", "release.appstudio.openshift.io/namespace": "retry-oom-x2fd", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-pshnh", "tekton.dev/pipelineRunUID": "f7a250cf-4dc1-49d6-b2e7-2d95f54901f6", "tekton.dev/pipelineTask": "task-01" }, "name": "managed-pshnh-task-01", "namespace": "retry-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-pshnh", "uid": "f7a250cf-4dc1-49d6-b2e7-2d95f54901f6" } ], "resourceVersion": "21900", "uid": "93264a7f-b4ed-4e31-9896-7000805d7990" }, "spec": { "params": [ { "name": "failMode", "value": "oom" }, { "name": "failOnTask", "value": "task-01" } ], "serviceAccountName": "release-service-account", "taskSpec": { "params": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-01", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nFAIL_MODE=\"$(params.failMode)\"\nFAIL_ON_TASK=\"$(params.failOnTask)\"\n\n# Only inject failures into the selected task.\n[[ \"${FAIL_ON_TASK}\" == \"task-01\" ]] || exit 0\n\necho \"task-01-step-01: failMode=${FAIL_MODE}\"\n\ncase \"${FAIL_MODE}\" in\n error)\n exit 1\n ;;\n oom)\n # Trigger OOM only when the task is still running with the\n # original memory limit. After retry mitigation the limit\n # should be increased and this path should no longer OOM.\n LIMIT=\"max\"\n [[ -r /sys/fs/cgroup/memory.max ]] \u0026\u0026 read -r LIMIT \u003c /sys/fs/cgroup/memory.max\n\n THRESHOLD=104857600 # 100 Mi\n\n if [[ \"${LIMIT}\" != \"max\" ]] \u0026\u0026 (( LIMIT \u003c THRESHOLD )); then\n echo \"limit ${LIMIT} \u003c ${THRESHOLD}: triggering OOMKill\"\n\n X=$(dd if=/dev/zero bs=1M count=150 status=none | tr '\\0' 'a')\n echo \"${#X}\"\n else\n echo \"limit ${LIMIT} sufficient\"\n fi\n ;;\n task-timeout)\n # Sleep longer than the task timeout. Which is set to 1 minute.\n sleep 90\n ;;\n none)\n ;;\n *)\n echo \"unknown fail mode: ${FAIL_MODE}\" \u003e\u00262\n exit 1\n ;;\nesac\n" }, { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-02", "script": "#!/usr/bin/env bash\necho \"task-01-step-02: complete\"\n" } ] }, "timeout": "1m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:48:02Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:48:02Z", "message": "\"step-task-01-step-01\" exited with code 137: OOMKilled", "reason": "StepOOM", "status": "False", "type": "Succeeded" } ], "podName": "managed-pshnh-task-01-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "startTime": "2026-10-06T07:47:57Z", "steps": [ { "container": "step-task-01-step-01", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-01", "provenance": {}, "terminated": { "containerID": "containerd://6ce2643f9e6bf90f59b2d0469e2db9368bb89659f40997af49f35e1607da5a7e", "exitCode": 137, "finishedAt": "2026-10-06T07:48:02Z", "reason": "OOMKilled", "startedAt": "2026-10-06T07:47:59Z" } }, { "container": "step-task-01-step-02", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-02", "provenance": {}, "running": { "startedAt": "2026-10-06T07:48:00Z" } } ], "taskSpec": { "params": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-01", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nFAIL_MODE=\"oom\"\nFAIL_ON_TASK=\"task-01\"\n\n# Only inject failures into the selected task.\n[[ \"${FAIL_ON_TASK}\" == \"task-01\" ]] || exit 0\n\necho \"task-01-step-01: failMode=${FAIL_MODE}\"\n\ncase \"${FAIL_MODE}\" in\n error)\n exit 1\n ;;\n oom)\n # Trigger OOM only when the task is still running with the\n # original memory limit. After retry mitigation the limit\n # should be increased and this path should no longer OOM.\n LIMIT=\"max\"\n [[ -r /sys/fs/cgroup/memory.max ]] \u0026\u0026 read -r LIMIT \u003c /sys/fs/cgroup/memory.max\n\n THRESHOLD=104857600 # 100 Mi\n\n if [[ \"${LIMIT}\" != \"max\" ]] \u0026\u0026 (( LIMIT \u003c THRESHOLD )); then\n echo \"limit ${LIMIT} \u003c ${THRESHOLD}: triggering OOMKill\"\n\n X=$(dd if=/dev/zero bs=1M count=150 status=none | tr '\\0' 'a')\n echo \"${#X}\"\n else\n echo \"limit ${LIMIT} sufficient\"\n fi\n ;;\n task-timeout)\n # Sleep longer than the task timeout. Which is set to 1 minute.\n sleep 90\n ;;\n none)\n ;;\n *)\n echo \"unknown fail mode: ${FAIL_MODE}\" \u003e\u00262\n exit 1\n ;;\nesac\n" }, { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-02", "script": "#!/usr/bin/env bash\necho \"task-01-step-02: complete\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-taskrunspecs-oom-qbob/snapshot-sample-ksmm-d499148-zf8hs", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-taskrunspecs-oom-managed/results/25d4c491-f169-4b81-bc98-e01ce3a51129/records/7410967a-e196-49ef-aaf6-be6473cf083a", "results.tekton.dev/result": "retry-taskrunspecs-oom-managed/results/25d4c491-f169-4b81-bc98-e01ce3a51129", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:49:10Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:49:39Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-ksmm", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "2", "release.appstudio.openshift.io/name": "snapshot-sample-ksmm-d499148-zf8hs", "release.appstudio.openshift.io/namespace": "retry-taskrunspecs-oom-qbob", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-n8nlq", "tekton.dev/pipelineRunUID": "25d4c491-f169-4b81-bc98-e01ce3a51129", "tekton.dev/pipelineTask": "collect-data" }, "name": "managed-n8nlq-collect-data", "namespace": "retry-taskrunspecs-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-n8nlq", "uid": "25d4c491-f169-4b81-bc98-e01ce3a51129" } ], "resourceVersion": "23782", "uid": "7410967a-e196-49ef-aaf6-be6473cf083a" }, "spec": { "params": [ { "name": "releasePlanAdmission", "value": "retry-taskrunspecs-oom-managed/demo" } ], "serviceAccountName": "release-service-account", "taskSpec": { "params": [ { "name": "releasePlanAdmission", "type": "string" } ], "results": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nDATA=$(get-resource releasePlanAdmission \"retry-taskrunspecs-oom-managed/demo\" |\n jq '.spec.data // {}')\n\nFAIL_MODE=$(jq -r '.failMode // \"none\"' \u003c\u003c\u003c\"${DATA}\")\nFAIL_ON_TASK=$(jq -r '.failOnTask // \"task-01\"' \u003c\u003c\u003c\"${DATA}\")\n\nprintf '%s' \"${FAIL_MODE}\" \u003e \"$(results.failMode.path)\"\nprintf '%s' \"${FAIL_ON_TASK}\" \u003e \"$(results.failOnTask.path)\"\n" } ] }, "timeout": "1h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:49:15Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:49:15Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-n8nlq-collect-data-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "failMode", "type": "string", "value": "oom" }, { "name": "failOnTask", "type": "string", "value": "task-01" } ], "startTime": "2026-10-06T07:49:10Z", "steps": [ { "container": "step-collect-data", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "provenance": {}, "terminated": { "containerID": "containerd://675a46813ff11a687b6572035578d3e089b58c80698b85a4fbee48cdf06551f5", "exitCode": 0, "finishedAt": "2026-10-06T07:49:14Z", "message": "[{\"key\":\"failMode\",\"value\":\"oom\",\"type\":1},{\"key\":\"failOnTask\",\"value\":\"task-01\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:49:14Z" }, "terminationReason": "Completed" } ], "taskSpec": { "params": [ { "name": "releasePlanAdmission", "type": "string" } ], "results": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nDATA=$(get-resource releasePlanAdmission \"retry-taskrunspecs-oom-managed/demo\" |\n jq '.spec.data // {}')\n\nFAIL_MODE=$(jq -r '.failMode // \"none\"' \u003c\u003c\u003c\"${DATA}\")\nFAIL_ON_TASK=$(jq -r '.failOnTask // \"task-01\"' \u003c\u003c\u003c\"${DATA}\")\n\nprintf '%s' \"${FAIL_MODE}\" \u003e \"/tekton/results/failMode\"\nprintf '%s' \"${FAIL_ON_TASK}\" \u003e \"/tekton/results/failOnTask\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-taskrunspecs-oom-qbob/snapshot-sample-ksmm-d499148-zf8hs", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-taskrunspecs-oom-managed/results/aa380f0c-fe43-40b7-8d9b-e802c2d2a42b/records/14a5b965-738f-46da-b6b4-5f3ffb35159b", "results.tekton.dev/result": "retry-taskrunspecs-oom-managed/results/aa380f0c-fe43-40b7-8d9b-e802c2d2a42b", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:48:44Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:49:39Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-ksmm", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "0", "release.appstudio.openshift.io/name": "snapshot-sample-ksmm-d499148-zf8hs", "release.appstudio.openshift.io/namespace": "retry-taskrunspecs-oom-qbob", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-pn74n", "tekton.dev/pipelineRunUID": "aa380f0c-fe43-40b7-8d9b-e802c2d2a42b", "tekton.dev/pipelineTask": "collect-data" }, "name": "managed-pn74n-collect-data", "namespace": "retry-taskrunspecs-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-pn74n", "uid": "aa380f0c-fe43-40b7-8d9b-e802c2d2a42b" } ], "resourceVersion": "23425", "uid": "14a5b965-738f-46da-b6b4-5f3ffb35159b" }, "spec": { "params": [ { "name": "releasePlanAdmission", "value": "retry-taskrunspecs-oom-managed/demo" } ], "serviceAccountName": "release-service-account", "taskSpec": { "params": [ { "name": "releasePlanAdmission", "type": "string" } ], "results": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nDATA=$(get-resource releasePlanAdmission \"retry-taskrunspecs-oom-managed/demo\" |\n jq '.spec.data // {}')\n\nFAIL_MODE=$(jq -r '.failMode // \"none\"' \u003c\u003c\u003c\"${DATA}\")\nFAIL_ON_TASK=$(jq -r '.failOnTask // \"task-01\"' \u003c\u003c\u003c\"${DATA}\")\n\nprintf '%s' \"${FAIL_MODE}\" \u003e \"$(results.failMode.path)\"\nprintf '%s' \"${FAIL_ON_TASK}\" \u003e \"$(results.failOnTask.path)\"\n" } ] }, "timeout": "1h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:48:49Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:48:49Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-pn74n-collect-data-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "failMode", "type": "string", "value": "oom" }, { "name": "failOnTask", "type": "string", "value": "task-01" } ], "startTime": "2026-10-06T07:48:44Z", "steps": [ { "container": "step-collect-data", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "provenance": {}, "terminated": { "containerID": "containerd://af7604d77871a708fada8f5d7cbdf111271d577d46105113f75290fa263cd9dd", "exitCode": 0, "finishedAt": "2026-10-06T07:48:48Z", "message": "[{\"key\":\"failMode\",\"value\":\"oom\",\"type\":1},{\"key\":\"failOnTask\",\"value\":\"task-01\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:48:48Z" }, "terminationReason": "Completed" } ], "taskSpec": { "params": [ { "name": "releasePlanAdmission", "type": "string" } ], "results": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nDATA=$(get-resource releasePlanAdmission \"retry-taskrunspecs-oom-managed/demo\" |\n jq '.spec.data // {}')\n\nFAIL_MODE=$(jq -r '.failMode // \"none\"' \u003c\u003c\u003c\"${DATA}\")\nFAIL_ON_TASK=$(jq -r '.failOnTask // \"task-01\"' \u003c\u003c\u003c\"${DATA}\")\n\nprintf '%s' \"${FAIL_MODE}\" \u003e \"/tekton/results/failMode\"\nprintf '%s' \"${FAIL_ON_TASK}\" \u003e \"/tekton/results/failOnTask\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-taskrunspecs-oom-qbob/snapshot-sample-ksmm-d499148-zf8hs", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-taskrunspecs-oom-managed/results/aa380f0c-fe43-40b7-8d9b-e802c2d2a42b/records/a777d839-b5aa-45de-8a43-16a9e23d8d96", "results.tekton.dev/result": "retry-taskrunspecs-oom-managed/results/aa380f0c-fe43-40b7-8d9b-e802c2d2a42b", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:48:53Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:49:39Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-ksmm", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "0", "release.appstudio.openshift.io/name": "snapshot-sample-ksmm-d499148-zf8hs", "release.appstudio.openshift.io/namespace": "retry-taskrunspecs-oom-qbob", "tekton.dev/memberOf": "finally", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-pn74n", "tekton.dev/pipelineRunUID": "aa380f0c-fe43-40b7-8d9b-e802c2d2a42b", "tekton.dev/pipelineTask": "finalize" }, "name": "managed-pn74n-finalize", "namespace": "retry-taskrunspecs-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-pn74n", "uid": "aa380f0c-fe43-40b7-8d9b-e802c2d2a42b" } ], "resourceVersion": "23432", "uid": "a777d839-b5aa-45de-8a43-16a9e23d8d96" }, "spec": { "serviceAccountName": "release-service-account", "taskSpec": { "steps": [ { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "finalize-step-01", "script": "#!/usr/bin/env bash\necho \"finalize: complete\"\n" } ] }, "timeout": "1h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:48:57Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:48:57Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-pn74n-finalize-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "startTime": "2026-10-06T07:48:53Z", "steps": [ { "container": "step-finalize-step-01", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "finalize-step-01", "provenance": {}, "terminated": { "containerID": "containerd://e8f33674d588c840c31c743fd965092f82c6a0058236ba4faeb76e5a7f115bab", "exitCode": 0, "finishedAt": "2026-10-06T07:48:56Z", "reason": "Completed", "startedAt": "2026-10-06T07:48:56Z" }, "terminationReason": "Completed" } ], "taskSpec": { "steps": [ { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "finalize-step-01", "script": "#!/usr/bin/env bash\necho \"finalize: complete\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-taskrunspecs-oom-qbob/snapshot-sample-ksmm-d499148-zf8hs", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-taskrunspecs-oom-managed/results/aa380f0c-fe43-40b7-8d9b-e802c2d2a42b/records/02865c8f-df11-4ab7-a3b8-9735f475f2aa", "results.tekton.dev/result": "retry-taskrunspecs-oom-managed/results/aa380f0c-fe43-40b7-8d9b-e802c2d2a42b", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:48:49Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:49:39Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-ksmm", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "0", "release.appstudio.openshift.io/name": "snapshot-sample-ksmm-d499148-zf8hs", "release.appstudio.openshift.io/namespace": "retry-taskrunspecs-oom-qbob", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-pn74n", "tekton.dev/pipelineRunUID": "aa380f0c-fe43-40b7-8d9b-e802c2d2a42b", "tekton.dev/pipelineTask": "task-01" }, "name": "managed-pn74n-task-01", "namespace": "retry-taskrunspecs-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-pn74n", "uid": "aa380f0c-fe43-40b7-8d9b-e802c2d2a42b" } ], "resourceVersion": "23433", "uid": "02865c8f-df11-4ab7-a3b8-9735f475f2aa" }, "spec": { "params": [ { "name": "failMode", "value": "oom" }, { "name": "failOnTask", "value": "task-01" } ], "serviceAccountName": "release-service-account", "stepSpecs": [ { "computeResources": { "limits": { "memory": "40Mi" }, "requests": { "memory": "40Mi" } }, "name": "task-01-step-01" } ], "taskSpec": { "params": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-01", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nFAIL_MODE=\"$(params.failMode)\"\nFAIL_ON_TASK=\"$(params.failOnTask)\"\n\n# Only inject failures into the selected task.\n[[ \"${FAIL_ON_TASK}\" == \"task-01\" ]] || exit 0\n\necho \"task-01-step-01: failMode=${FAIL_MODE}\"\n\ncase \"${FAIL_MODE}\" in\n error)\n exit 1\n ;;\n oom)\n # Trigger OOM only when the task is still running with the\n # original memory limit. After retry mitigation the limit\n # should be increased and this path should no longer OOM.\n LIMIT=\"max\"\n [[ -r /sys/fs/cgroup/memory.max ]] \u0026\u0026 read -r LIMIT \u003c /sys/fs/cgroup/memory.max\n\n THRESHOLD=104857600 # 100 Mi\n\n if [[ \"${LIMIT}\" != \"max\" ]] \u0026\u0026 (( LIMIT \u003c THRESHOLD )); then\n echo \"limit ${LIMIT} \u003c ${THRESHOLD}: triggering OOMKill\"\n\n X=$(dd if=/dev/zero bs=1M count=150 status=none | tr '\\0' 'a')\n echo \"${#X}\"\n else\n echo \"limit ${LIMIT} sufficient\"\n fi\n ;;\n task-timeout)\n # Sleep longer than the task timeout. Which is set to 1 minute.\n sleep 90\n ;;\n none)\n ;;\n *)\n echo \"unknown fail mode: ${FAIL_MODE}\" \u003e\u00262\n exit 1\n ;;\nesac\n" }, { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-02", "script": "#!/usr/bin/env bash\necho \"task-01-step-02: complete\"\n" } ] }, "timeout": "1m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:48:53Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:48:53Z", "message": "\"step-task-01-step-01\" exited with code 137: OOMKilled", "reason": "StepOOM", "status": "False", "type": "Succeeded" } ], "podName": "managed-pn74n-task-01-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "startTime": "2026-10-06T07:48:49Z", "steps": [ { "container": "step-task-01-step-01", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-01", "provenance": {}, "terminated": { "containerID": "containerd://f65d73b43e35d20ac3e87d9ecae99b24631b1bcc9170963f60c0c6d107902bd8", "exitCode": 137, "finishedAt": "2026-10-06T07:48:52Z", "reason": "OOMKilled", "startedAt": "2026-10-06T07:48:51Z" } }, { "container": "step-task-01-step-02", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-02", "provenance": {}, "running": { "startedAt": "2026-10-06T07:48:51Z" } } ], "taskSpec": { "params": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-01", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nFAIL_MODE=\"oom\"\nFAIL_ON_TASK=\"task-01\"\n\n# Only inject failures into the selected task.\n[[ \"${FAIL_ON_TASK}\" == \"task-01\" ]] || exit 0\n\necho \"task-01-step-01: failMode=${FAIL_MODE}\"\n\ncase \"${FAIL_MODE}\" in\n error)\n exit 1\n ;;\n oom)\n # Trigger OOM only when the task is still running with the\n # original memory limit. After retry mitigation the limit\n # should be increased and this path should no longer OOM.\n LIMIT=\"max\"\n [[ -r /sys/fs/cgroup/memory.max ]] \u0026\u0026 read -r LIMIT \u003c /sys/fs/cgroup/memory.max\n\n THRESHOLD=104857600 # 100 Mi\n\n if [[ \"${LIMIT}\" != \"max\" ]] \u0026\u0026 (( LIMIT \u003c THRESHOLD )); then\n echo \"limit ${LIMIT} \u003c ${THRESHOLD}: triggering OOMKill\"\n\n X=$(dd if=/dev/zero bs=1M count=150 status=none | tr '\\0' 'a')\n echo \"${#X}\"\n else\n echo \"limit ${LIMIT} sufficient\"\n fi\n ;;\n task-timeout)\n # Sleep longer than the task timeout. Which is set to 1 minute.\n sleep 90\n ;;\n none)\n ;;\n *)\n echo \"unknown fail mode: ${FAIL_MODE}\" \u003e\u00262\n exit 1\n ;;\nesac\n" }, { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-02", "script": "#!/usr/bin/env bash\necho \"task-01-step-02: complete\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-taskrunspecs-oom-qbob/snapshot-sample-ksmm-d499148-zf8hs", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-taskrunspecs-oom-managed/results/5ae879f6-60ed-4a22-980f-e0f95705f585/records/e007de70-33b0-40dc-b332-0e33261b06c4", "results.tekton.dev/result": "retry-taskrunspecs-oom-managed/results/5ae879f6-60ed-4a22-980f-e0f95705f585", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:48:57Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:49:39Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-ksmm", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "1", "release.appstudio.openshift.io/name": "snapshot-sample-ksmm-d499148-zf8hs", "release.appstudio.openshift.io/namespace": "retry-taskrunspecs-oom-qbob", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-ppkgz", "tekton.dev/pipelineRunUID": "5ae879f6-60ed-4a22-980f-e0f95705f585", "tekton.dev/pipelineTask": "collect-data" }, "name": "managed-ppkgz-collect-data", "namespace": "retry-taskrunspecs-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-ppkgz", "uid": "5ae879f6-60ed-4a22-980f-e0f95705f585" } ], "resourceVersion": "23436", "uid": "e007de70-33b0-40dc-b332-0e33261b06c4" }, "spec": { "params": [ { "name": "releasePlanAdmission", "value": "retry-taskrunspecs-oom-managed/demo" } ], "serviceAccountName": "release-service-account", "taskSpec": { "params": [ { "name": "releasePlanAdmission", "type": "string" } ], "results": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nDATA=$(get-resource releasePlanAdmission \"retry-taskrunspecs-oom-managed/demo\" |\n jq '.spec.data // {}')\n\nFAIL_MODE=$(jq -r '.failMode // \"none\"' \u003c\u003c\u003c\"${DATA}\")\nFAIL_ON_TASK=$(jq -r '.failOnTask // \"task-01\"' \u003c\u003c\u003c\"${DATA}\")\n\nprintf '%s' \"${FAIL_MODE}\" \u003e \"$(results.failMode.path)\"\nprintf '%s' \"${FAIL_ON_TASK}\" \u003e \"$(results.failOnTask.path)\"\n" } ] }, "timeout": "1h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:49:02Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:49:02Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-ppkgz-collect-data-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "failMode", "type": "string", "value": "oom" }, { "name": "failOnTask", "type": "string", "value": "task-01" } ], "startTime": "2026-10-06T07:48:57Z", "steps": [ { "container": "step-collect-data", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "provenance": {}, "terminated": { "containerID": "containerd://4ef061420900667997f421463cf889dc8bff00e75c4c944b5174170269b3a7f2", "exitCode": 0, "finishedAt": "2026-10-06T07:49:01Z", "message": "[{\"key\":\"failMode\",\"value\":\"oom\",\"type\":1},{\"key\":\"failOnTask\",\"value\":\"task-01\",\"type\":1}]", "reason": "Completed", "startedAt": "2026-10-06T07:49:01Z" }, "terminationReason": "Completed" } ], "taskSpec": { "params": [ { "name": "releasePlanAdmission", "type": "string" } ], "results": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "collect-data", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nDATA=$(get-resource releasePlanAdmission \"retry-taskrunspecs-oom-managed/demo\" |\n jq '.spec.data // {}')\n\nFAIL_MODE=$(jq -r '.failMode // \"none\"' \u003c\u003c\u003c\"${DATA}\")\nFAIL_ON_TASK=$(jq -r '.failOnTask // \"task-01\"' \u003c\u003c\u003c\"${DATA}\")\n\nprintf '%s' \"${FAIL_MODE}\" \u003e \"/tekton/results/failMode\"\nprintf '%s' \"${FAIL_ON_TASK}\" \u003e \"/tekton/results/failOnTask\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-taskrunspecs-oom-qbob/snapshot-sample-ksmm-d499148-zf8hs", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-taskrunspecs-oom-managed/results/5ae879f6-60ed-4a22-980f-e0f95705f585/records/a16f6dc7-d6c1-428c-a30e-d1b7486129b2", "results.tekton.dev/result": "retry-taskrunspecs-oom-managed/results/5ae879f6-60ed-4a22-980f-e0f95705f585", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:49:06Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:49:39Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-ksmm", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "1", "release.appstudio.openshift.io/name": "snapshot-sample-ksmm-d499148-zf8hs", "release.appstudio.openshift.io/namespace": "retry-taskrunspecs-oom-qbob", "tekton.dev/memberOf": "finally", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-ppkgz", "tekton.dev/pipelineRunUID": "5ae879f6-60ed-4a22-980f-e0f95705f585", "tekton.dev/pipelineTask": "finalize" }, "name": "managed-ppkgz-finalize", "namespace": "retry-taskrunspecs-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-ppkgz", "uid": "5ae879f6-60ed-4a22-980f-e0f95705f585" } ], "resourceVersion": "23439", "uid": "a16f6dc7-d6c1-428c-a30e-d1b7486129b2" }, "spec": { "serviceAccountName": "release-service-account", "taskSpec": { "steps": [ { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "finalize-step-01", "script": "#!/usr/bin/env bash\necho \"finalize: complete\"\n" } ] }, "timeout": "1h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:49:10Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:49:10Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "managed-ppkgz-finalize-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "startTime": "2026-10-06T07:49:06Z", "steps": [ { "container": "step-finalize-step-01", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "finalize-step-01", "provenance": {}, "terminated": { "containerID": "containerd://8db446f9107a30203d72938b39a7b45256ef3168fb265e977bf3dd7b9f398d2f", "exitCode": 0, "finishedAt": "2026-10-06T07:49:09Z", "reason": "Completed", "startedAt": "2026-10-06T07:49:09Z" }, "terminationReason": "Completed" } ], "taskSpec": { "steps": [ { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "finalize-step-01", "script": "#!/usr/bin/env bash\necho \"finalize: complete\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "retry-taskrunspecs-oom-qbob/snapshot-sample-ksmm-d499148-zf8hs", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "retry-taskrunspecs-oom-managed/results/5ae879f6-60ed-4a22-980f-e0f95705f585/records/49b17d99-d116-4482-866f-721db005e19d", "results.tekton.dev/result": "retry-taskrunspecs-oom-managed/results/5ae879f6-60ed-4a22-980f-e0f95705f585", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-10-06T07:49:02Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:49:39Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-ksmm", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/attempt": "1", "release.appstudio.openshift.io/name": "snapshot-sample-ksmm-d499148-zf8hs", "release.appstudio.openshift.io/namespace": "retry-taskrunspecs-oom-qbob", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "retry-e2e-managed", "tekton.dev/pipelineRun": "managed-ppkgz", "tekton.dev/pipelineRunUID": "5ae879f6-60ed-4a22-980f-e0f95705f585", "tekton.dev/pipelineTask": "task-01" }, "name": "managed-ppkgz-task-01", "namespace": "retry-taskrunspecs-oom-managed", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "managed-ppkgz", "uid": "5ae879f6-60ed-4a22-980f-e0f95705f585" } ], "resourceVersion": "23442", "uid": "49b17d99-d116-4482-866f-721db005e19d" }, "spec": { "params": [ { "name": "failMode", "value": "oom" }, { "name": "failOnTask", "value": "task-01" } ], "serviceAccountName": "release-service-account", "stepSpecs": [ { "computeResources": { "limits": { "memory": "80Mi" }, "requests": { "memory": "80Mi" } }, "name": "task-01-step-01" } ], "taskSpec": { "params": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-01", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nFAIL_MODE=\"$(params.failMode)\"\nFAIL_ON_TASK=\"$(params.failOnTask)\"\n\n# Only inject failures into the selected task.\n[[ \"${FAIL_ON_TASK}\" == \"task-01\" ]] || exit 0\n\necho \"task-01-step-01: failMode=${FAIL_MODE}\"\n\ncase \"${FAIL_MODE}\" in\n error)\n exit 1\n ;;\n oom)\n # Trigger OOM only when the task is still running with the\n # original memory limit. After retry mitigation the limit\n # should be increased and this path should no longer OOM.\n LIMIT=\"max\"\n [[ -r /sys/fs/cgroup/memory.max ]] \u0026\u0026 read -r LIMIT \u003c /sys/fs/cgroup/memory.max\n\n THRESHOLD=104857600 # 100 Mi\n\n if [[ \"${LIMIT}\" != \"max\" ]] \u0026\u0026 (( LIMIT \u003c THRESHOLD )); then\n echo \"limit ${LIMIT} \u003c ${THRESHOLD}: triggering OOMKill\"\n\n X=$(dd if=/dev/zero bs=1M count=150 status=none | tr '\\0' 'a')\n echo \"${#X}\"\n else\n echo \"limit ${LIMIT} sufficient\"\n fi\n ;;\n task-timeout)\n # Sleep longer than the task timeout. Which is set to 1 minute.\n sleep 90\n ;;\n none)\n ;;\n *)\n echo \"unknown fail mode: ${FAIL_MODE}\" \u003e\u00262\n exit 1\n ;;\nesac\n" }, { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-02", "script": "#!/usr/bin/env bash\necho \"task-01-step-02: complete\"\n" } ] }, "timeout": "1m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:49:06Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:49:06Z", "message": "\"step-task-01-step-01\" exited with code 137: OOMKilled", "reason": "StepOOM", "status": "False", "type": "Succeeded" } ], "podName": "managed-ppkgz-task-01-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "startTime": "2026-10-06T07:49:02Z", "steps": [ { "container": "step-task-01-step-01", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-01", "provenance": {}, "terminated": { "containerID": "containerd://62cfeae0df1ce981c68a1558918b2916879d447ef89e8ec0f33ecf37c536febb", "exitCode": 137, "finishedAt": "2026-10-06T07:49:06Z", "reason": "OOMKilled", "startedAt": "2026-10-06T07:49:04Z" } }, { "container": "step-task-01-step-02", "imageID": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-02", "provenance": {}, "running": { "startedAt": "2026-10-06T07:49:04Z" } } ], "taskSpec": { "params": [ { "name": "failMode", "type": "string" }, { "name": "failOnTask", "type": "string" } ], "steps": [ { "computeResources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-01", "script": "#!/usr/bin/env bash\nset -euo pipefail\n\nFAIL_MODE=\"oom\"\nFAIL_ON_TASK=\"task-01\"\n\n# Only inject failures into the selected task.\n[[ \"${FAIL_ON_TASK}\" == \"task-01\" ]] || exit 0\n\necho \"task-01-step-01: failMode=${FAIL_MODE}\"\n\ncase \"${FAIL_MODE}\" in\n error)\n exit 1\n ;;\n oom)\n # Trigger OOM only when the task is still running with the\n # original memory limit. After retry mitigation the limit\n # should be increased and this path should no longer OOM.\n LIMIT=\"max\"\n [[ -r /sys/fs/cgroup/memory.max ]] \u0026\u0026 read -r LIMIT \u003c /sys/fs/cgroup/memory.max\n\n THRESHOLD=104857600 # 100 Mi\n\n if [[ \"${LIMIT}\" != \"max\" ]] \u0026\u0026 (( LIMIT \u003c THRESHOLD )); then\n echo \"limit ${LIMIT} \u003c ${THRESHOLD}: triggering OOMKill\"\n\n X=$(dd if=/dev/zero bs=1M count=150 status=none | tr '\\0' 'a')\n echo \"${#X}\"\n else\n echo \"limit ${LIMIT} sufficient\"\n fi\n ;;\n task-timeout)\n # Sleep longer than the task timeout. Which is set to 1 minute.\n sleep 90\n ;;\n none)\n ;;\n *)\n echo \"unknown fail mode: ${FAIL_MODE}\" \u003e\u00262\n exit 1\n ;;\nesac\n" }, { "computeResources": { "limits": { "memory": "32Mi" }, "requests": { "cpu": "50m", "memory": "32Mi" } }, "image": "quay.io/konflux-ci/release-service-utils@sha256:850118bc6eda4ca3f98ef1e53109164f64a0945a6ac0942f908b7e106f50775c", "name": "task-01-step-02", "script": "#!/usr/bin/env bash\necho \"task-01-step-02: complete\"\n" } ] } } }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "tenant-dev-iqs5/snapshot-sample-5a48-d499148-s52l5", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "pac.test.appstudio.openshift.io/sha": "d49914874789147eb2de9bb6a12cd5d150bfff92", "pac.test.appstudio.openshift.io/url-repository": "https://github.com/redhat-appstudio-qe/dc-metro-map-release", "pipeline.tekton.dev/release": "70f7308", "results.tekton.dev/childReadyForDeletion": "true", "results.tekton.dev/record": "tenant-dev-iqs5/results/03739eff-e578-4bb0-905f-dc428075cd7d/records/b9ce431a-8eb7-425b-b402-77332439f3a9", "results.tekton.dev/result": "tenant-dev-iqs5/results/03739eff-e578-4bb0-905f-dc428075cd7d", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "e2e" }, "creationTimestamp": "2026-10-06T07:48:34Z", "deletionGracePeriodSeconds": 0, "deletionTimestamp": "2026-10-06T07:48:49Z", "finalizers": [ "results.tekton.dev/taskrun" ], "generation": 2, "labels": { "app.kubernetes.io/managed-by": "tekton-pipelines", "app.kubernetes.io/version": "0.1", "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-5a48", "pipelines.appstudio.openshift.io/type": "tenant", "release.appstudio.openshift.io/name": "snapshot-sample-5a48-d499148-s52l5", "release.appstudio.openshift.io/namespace": "tenant-dev-iqs5", "tekton.dev/memberOf": "tasks", "tekton.dev/pipeline": "simple-pipeline", "tekton.dev/pipelineRun": "tenant-dxln7", "tekton.dev/pipelineRunUID": "03739eff-e578-4bb0-905f-dc428075cd7d", "tekton.dev/pipelineTask": "hello-world" }, "name": "tenant-dxln7-hello-world", "namespace": "tenant-dev-iqs5", "ownerReferences": [ { "apiVersion": "tekton.dev/v1", "blockOwnerDeletion": true, "controller": true, "kind": "PipelineRun", "name": "tenant-dxln7", "uid": "03739eff-e578-4bb0-905f-dc428075cd7d" } ], "resourceVersion": "22448", "uid": "b9ce431a-8eb7-425b-b402-77332439f3a9" }, "spec": { "params": [ { "name": "MESSAGE", "value": "hello world" } ], "serviceAccountName": "tenant-service-account", "taskSpec": { "params": [ { "name": "MESSAGE", "type": "string" } ], "steps": [ { "computeResources": {}, "image": "registry.access.redhat.com/ubi9/ubi:9.4-1214", "name": "echo-message", "script": "#!/usr/bin/env sh\n\necho $(params.MESSAGE) \n" } ] }, "timeout": "1h0m0s" }, "status": { "artifacts": {}, "completionTime": "2026-10-06T07:48:40Z", "conditions": [ { "lastTransitionTime": "2026-10-06T07:48:40Z", "message": "All Steps have completed executing", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "podName": "tenant-dxln7-hello-world-pod", "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "sendCloudEventsForRuns": true, "verificationNoMatchPolicy": "ignore" } }, "startTime": "2026-10-06T07:48:34Z", "steps": [ { "container": "step-echo-message", "imageID": "registry.access.redhat.com/ubi9/ubi@sha256:9460515b85f2a75278f2043438583c1c377c44bf100178bb653a6c8658304ac7", "name": "echo-message", "provenance": {}, "terminated": { "containerID": "containerd://e515d254ec3bfd28a3e3e7f912d4cbd6890ffbc8234cd41058d492663a187f18", "exitCode": 0, "finishedAt": "2026-10-06T07:48:40Z", "reason": "Completed", "startedAt": "2026-10-06T07:48:40Z" }, "terminationReason": "Completed" } ], "taskSpec": { "params": [ { "name": "MESSAGE", "type": "string" } ], "steps": [ { "computeResources": {}, "image": "registry.access.redhat.com/ubi9/ubi:9.4-1214", "name": "echo-message", "script": "#!/usr/bin/env sh\n\necho hello world \n" } ] } } } ], "kind": "List", "metadata": { "resourceVersion": "" } }