add-release-pipelines

[JasonPowr]

This PR contains a "release pipeline" which is designed to take care of the release process for us, the idea being that we on-board the securesign/releases repository and control the release via pull requests, i.e we could run staging pipelines on pull requests to the securesign/releases repository and when merged we could run the actual release. The pipelines can be controlled by configuring the params passed in through the on-pull, and on-push tekton files like shown below.

Params

  params:
  - name: git-url
    value: '{{source_url}}'
  - name: revision
    value: '{{revision}}'
  - name: env       #Environment the pipeline will release too stage/prod
    value: stage
  - name: releases
    value: |
      - type: component     #Type of release should be component/fbc
        run: false   #whether or not to apply the release resources to the cluster
        releasePlanDir: pipeline-tests/sample-release/v1.0/stable/releasePlans
        releaseDir: pipeline-tests/sample-release/v1.0/stable/releases
      - type: fbc
        run: false
        releasePlanDir: pipeline-tests/sample-release/v1.0/stable/releasePlans/FBCs
        releaseDir: pipeline-tests/sample-release/v1.0/stable/releases/FBCs

The pipeline itself works by first applying all the files passed in through the releasePlanDir param, then moves on to apply files in the releaseDir, then continues to monitor the progress of the release until it passes or fails.

In order to generate staging resources for each release CR the label

release.rhtas.stage/releasePlanAdmission: rhtas-staging

needs to be applied to each releasePlan, this allows the pipeline to replace the actual prod RPA with the staging one

[JasonPowr]

Current pipeline failure can be ignored, only failing due to how each task is configured

  params:
    - name: url
      value: https://github.com/securesign/pipelines.git
    - name: revision
      value: main
    - name: pathInRepo
      value: tasks/process-release-plans.yaml

[osmman]

lgtm, but my knowledge of Konflux and release process is not good