Signed containers with provenance and integration with simple-ros example.

pipelines/simple-ros-pipeline.yaml

@@ -0,0 +1,63 @@
+# A pipeline to build the simple ros test containers.
+---
+apiVersion: tekton.dev/v1beta1
+kind: Pipeline
+metadata:
+  name: simple-ros-pipeline
+  namespace: j7s-ci
+spec:
+  description: Build a image with a simple ros image.
+  workspaces:
+  - name: shared-data
+  - name: git-credentials
+  - name: cosign-credentials
+  tasks:
+  - name: ros-clone
+    workspaces:
+    - name: output
+      workspace: shared-data
+    - name: ssh-directory
+      workspace: git-credentials
+    params:
+    - name: url
+      value: ssh://git.jpace121.net:2222/tests/j7s-simple-ws
+    - name: branch
+      value: master
+    - name: repos-file
+      value: source.repos
+    taskRef:
+      name: j7s-ros-clone
+  - name: image-build
+    runAfter: ["ros-clone"]
+    workspaces:
+    - name: source
+      workspace: shared-data
+    - name: cosign-credentials
+      workspace: cosign-credentials
+    params:
+    - name: registry
+      value: 192.168.1.149:8443
+    - name: name
+      value: simple-ros
+    - name: version
+      value: 0.1
+    - name: containerfile
+      value: ./docker/Dockerfile
+    taskRef:
+      name: j7s-buildah
+  results:
+  - name: image-ARTIFACT_OUTPUTS
+    type: object
+    value:
+       uri: $(tasks.image-build.results.image-ARTIFACT_OUTPUTS.uri)
+       digest: $(tasks.image-build.results.image-ARTIFACT_OUTPUTS.digest)
+  - name: commit-ARTIFACT_INPUTS
+    type: object
+    value:
+       uri: $(tasks.ros-clone.results.workspace-git-commit-ARTIFACT_OUTPUTS.uri)
+       digest: $(tasks.ros-clone.results.workspace-git-commit-ARTIFACT_OUTPUTS.digest)
+  - name: vcs-exact-file-ARTIFACT_INPUTS
+    type: object
+    value:
+       uri: $(tasks.ros-clone.results.vcs-exact-file-ARTIFACT_OUTPUTS.uri)
+       digest: $(tasks.ros-clone.results.vcs-exact-file-ARTIFACT_OUTPUTS.digest)