Skip to content

feat(tkn): overhaul Tekton tasks with operation param, secrets, and G…#98

Merged
ppitonak merged 1 commit into
mainfrom
tkn_tasks
Jun 15, 2026
Merged

feat(tkn): overhaul Tekton tasks with operation param, secrets, and G…#98
ppitonak merged 1 commit into
mainfrom
tkn_tasks

Conversation

@ppitonak

Copy link
Copy Markdown
Collaborator

…CP support

Add GCP Tekton task (rhelai-gcp) for importing RHEL AI images to GCP.

BREAKING CHANGE: Tekton task parameters have been renamed and restructured:

  • raw-image-path renamed to image-path
  • ami-name renamed to image-name
  • replicate-to-regions renamed to replicate
  • share-with-account-ids removed
  • credentials workspace removed — credentials are now provided via K8S secrets referenced by secret-aws-credentials, secret-az-credentials, or secret-gcp-credentials params
  • Azure env vars renamed to match cloud-importer CLI expectations (AZURE_CLIENT_ID -> ARM_CLIENT_ID, etc.)

New parameters added to all tasks:

  • operation (create/destroy) to support destroy from the same task
  • force-destroy and keep-state for destroy operations
  • tags for tagging images
  • secret-*-credentials for K8S secret-based credential injection

@adrianriobo adrianriobo left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGMT, did not check I mainly read commit and quick check, all seems good

@ppitonak ppitonak force-pushed the tkn_tasks branch 3 times, most recently from 784c94c to 1bbdbfd Compare June 12, 2026 11:40
@ppitonak

Copy link
Copy Markdown
Collaborator Author

I tested destroy with AWS and it worked fine.

Comment thread tkn/rhelai-azure.yaml
Comment thread tkn/rhelai-gcp.yaml Outdated
annotations:
tekton.dev/pipelines.minVersion: "0.44.x"
tekton.dev/categories: infrastructure
tekton.dev/tags: infrastructure, aws, rhelai

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: infrastructure, gcp, rhelai

Comment thread tkn/rhelai-gcp.yaml Outdated
description: destroy even if there is a lock
default: "false"
- name: keep-state
description: keep the Pulumi state in the S3 backend after successful destroy

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: in the GCS backend

Comment thread tkn/template/rhelai-azure.yaml Outdated
description: destroy even if there is a lock
default: "false"
- name: keep-state
description: keep the Pulumi state in the S3 backend after successful destroy

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: in the Azure Blob backend

Comment thread tkn/template/rhelai-gcp.yaml Outdated
description: destroy even if there is a lock
default: "false"
- name: keep-state
description: keep the Pulumi state in the S3 backend after successful destroy

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: in the GCS backend

Comment thread tkn/template/snc-azure.yaml Outdated
description: destroy even if there is a lock
default: "false"
- name: keep-state
description: keep the Pulumi state in the S3 backend after successful destroy

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: in the Azure Blob backend

Comment thread tkn/rhelai-azure.yaml Outdated
description: destroy even if there is a lock
default: "false"
- name: keep-state
description: keep the Pulumi state in the S3 backend after successful destroy

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: in the Azure Blob backend

Comment thread tkn/snc-azure.yaml Outdated
description: destroy even if there is a lock
default: "false"
- name: keep-state
description: keep the Pulumi state in the S3 backend after successful destroy

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: in the Azure Blob backend

@XiyangDong XiyangDong left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving with a bunch of nitpicks

…CP support

Add GCP Tekton task (rhelai-gcp) for importing RHEL AI images to GCP.

BREAKING CHANGE: Tekton task parameters have been renamed and restructured:
- `raw-image-path` renamed to `image-path`
- `ami-name` renamed to `image-name`
- `replicate-to-regions` renamed to `replicate`
- `share-with-account-ids` removed
- `credentials` workspace removed — credentials are now provided via
  K8S secrets referenced by `secret-aws-credentials`, `secret-az-credentials`,
  or `secret-gcp-credentials` params
- Azure env vars renamed to match cloud-importer CLI expectations
  (AZURE_CLIENT_ID -> ARM_CLIENT_ID, etc.)

New parameters added to all tasks:
- `operation` (create/destroy) to support destroy from the same task
- `force-destroy` and `keep-state` for destroy operations
- `tags` for tagging images
- `secret-*-credentials` for K8S secret-based credential injection

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Pavol Pitonak <ppitonak@redhat.com>
@ppitonak

Copy link
Copy Markdown
Collaborator Author

All issues addressed.

@ppitonak ppitonak merged commit b958c5b into main Jun 15, 2026
5 checks passed
@ppitonak ppitonak deleted the tkn_tasks branch June 15, 2026 11:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants