fix: 🐛 pipeline task fixes validated by run11 success #163

Merged
goern merged 0 commits from refs/pull/163/head into main 2026-05-26 00:15:13 +00:00
goern commented 2026-05-26 00:14:33 +00:00 (Migrated from codeberg.org)

Summary

Task bugs found during first real end-to-end pipeline run. Fixed iteratively across runs 3-11 until release-tools-publish-v101-run11 succeeded completely.

build-image

  • Store image in workspace PVC (.buildah/) so push-by-digest task can access it across pod boundaries (each task runs in its own pod with empty local storage)
  • Pass --storage-driver to all buildah queries to hit the same store
  • Check buildah images without name filter (name-based lookup exits non-zero on unknown reference, killing script under set -e)

push-image-by-digest

  • Use localhost/ prefix when referencing the built image (buildah stores with localhost/ prefix)
  • Use workspace .buildah/ store root to match build-image task

cosign-sign-image-by-digest

  • Remove curl install — curl-minimal is pre-installed in ubi9-minimal; full curl conflicts with it
  • Drop the dead dnf fallback (ubi9-minimal has microdnf only)

cosign-attach-sbom

  • Install only tar gzip, not curl (same curl-minimal conflict)
  • Drop dead dnf fallback

Verified

release-tools-publish-v101-run11 succeeded:
fetch → resolve → build → push → cosign-sign → attach-sbom → promote-tag

codeberg.org/operate-first/release-tools:v1.0.1 is published and signed.

Closes forgejo-mcp-aps

## Summary Task bugs found during first real end-to-end pipeline run. Fixed iteratively across runs 3-11 until `release-tools-publish-v101-run11` succeeded completely. ### build-image - Store image in workspace PVC (`.buildah/`) so `push-by-digest` task can access it across pod boundaries (each task runs in its own pod with empty local storage) - Pass `--storage-driver` to all `buildah` queries to hit the same store - Check `buildah images` without name filter (name-based lookup exits non-zero on unknown reference, killing script under `set -e`) ### push-image-by-digest - Use `localhost/` prefix when referencing the built image (buildah stores with `localhost/` prefix) - Use workspace `.buildah/` store root to match build-image task ### cosign-sign-image-by-digest - Remove `curl` install — `curl-minimal` is pre-installed in ubi9-minimal; full `curl` conflicts with it - Drop the dead `dnf` fallback (ubi9-minimal has `microdnf` only) ### cosign-attach-sbom - Install only `tar gzip`, not `curl` (same curl-minimal conflict) - Drop dead `dnf` fallback ## Verified `release-tools-publish-v101-run11` succeeded: `fetch → resolve → build → push → cosign-sign → attach-sbom → promote-tag` ✓ `codeberg.org/operate-first/release-tools:v1.0.1` is published and signed. Closes forgejo-mcp-aps
op1st-gitops commented 2026-05-26 00:14:40 +00:00 (Migrated from codeberg.org)

op1st Pipelines as Code/on-pull-request-hv6x9 is running.

Starting Pipelinerun on-pull-request-hv6x9 in namespace op1st-pipelines

You can monitor the execution using the op1st Pipelines as Code PipelineRun viewer or through the command line by
using the tkn CLI with the following command:

tkn pr logs -n op1st-pipelines on-pull-request-hv6x9 -f

op1st Pipelines as Code/on-pull-request-hv6x9 is running. Starting Pipelinerun <b>[on-pull-request-hv6x9](https://console-openshift-console.apps.nostromo.erdgeschoss.b4mad.emea.operate-first.cloud/k8s/ns/op1st-pipelines/tekton.dev~v1~PipelineRun/on-pull-request-hv6x9)</b> in namespace <b>op1st-pipelines</b> You can monitor the execution using the [op1st Pipelines as Code](https://console-openshift-console.apps.nostromo.erdgeschoss.b4mad.emea.operate-first.cloud/k8s/ns/op1st-pipelines/tekton.dev~v1~PipelineRun/on-pull-request-hv6x9) PipelineRun viewer or through the command line by using the [tkn](https://tekton.dev/docs/cli/#installation) CLI with the following command: <code>tkn pr logs -n op1st-pipelines on-pull-request-hv6x9 -f</code>
op1st-gitops commented 2026-05-26 00:14:40 +00:00 (Migrated from codeberg.org)

op1st Pipelines as Code/code-scans- has failed.
There was an error creating the PipelineRun: code-scans-

cannot use the API on the provider platform to create a in_progress status:

op1st Pipelines as Code/code-scans- has <b>failed</b>. There was an error creating the PipelineRun: <b>code-scans-</b> cannot use the API on the provider platform to create a in_progress status:
op1st-gitops commented 2026-05-26 00:15:17 +00:00 (Migrated from codeberg.org)

op1st Pipelines as Code/on-pull-request-hv6x9


Task Statuses:

StatusDurationName
Succeeded 15 seconds

fetch-source

Failed 20 seconds

build-and-test


Failure snippet:

task build-and-test has the status "TaskRunCancelled":
TaskRun "on-pull-request-hv6x9-build-and-test" was cancelled. TaskRun cancelled as the PipelineRun it belongs to has been cancelled.
op1st Pipelines as Code/on-pull-request-hv6x9 <ul> <li><b>Namespace</b>: <a href="https://detailurl.setting.custom-console-url-namespace.is.not.configured">op1st-pipelines</a></li> <li><b>PipelineRun:</b> <a href="https://console-openshift-console.apps.nostromo.erdgeschoss.b4mad.emea.operate-first.cloud/k8s/ns/op1st-pipelines/tekton.dev~v1~PipelineRun/on-pull-request-hv6x9">on-pull-request-hv6x9</a></li> </ul> <hr> <h4>Task Statuses:</h4> <table> <tr><th>Status</th><th>Duration</th><th>Name</th></tr> <tr> <td>Succeeded</td> <td>15 seconds</td><td> [fetch-source](https://console-openshift-console.apps.nostromo.erdgeschoss.b4mad.emea.operate-first.cloud/k8s/ns/op1st-pipelines/tekton.dev~v1~PipelineRun/on-pull-request-hv6x9/logs/fetch-source) </td></tr> <tr> <td>Failed</td> <td>20 seconds</td><td> [build-and-test](https://console-openshift-console.apps.nostromo.erdgeschoss.b4mad.emea.operate-first.cloud/k8s/ns/op1st-pipelines/tekton.dev~v1~PipelineRun/on-pull-request-hv6x9/logs/build-and-test) </td></tr> </table> <hr> <h4>Failure snippet:</h4> task <b>build-and-test</b> has the status <b>"TaskRunCancelled"</b>: <pre>TaskRun "on-pull-request-hv6x9-build-and-test" was cancelled. TaskRun cancelled as the PipelineRun it belongs to has been cancelled.</pre>
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
agentic-forges/forgejo-mcp!163
No description provided.