From 6448c9ac3f8ba23cdede2c5e64db7b414e9d2414 Mon Sep 17 00:00:00 2001
From: Andrey Lebedev <alebedev@redhat.com>
Date: Mon, 27 Apr 2026 18:21:06 +0200
Subject: [PATCH] Konflux: Move `mirrorSetYaml` result to workspace to avoid
 termination message truncation

The `fetch-config-files` task stores mirror set data in Tekton results
which are passed via the container termination message (4096 byte limit).
The termination message is also used by Tekton for internal metadata
(step timing, result type markers), further reducing the usable space
to ~3072 bytes. With growing mirror entries, the combined results
exceeded this limit, causing truncation and silently breaking downstream
task variable resolution.

Move `mirrorSetYaml` to the `shared-data` workspace so it is written to
a PVC file instead of a Tekton result. The `serializedMirrorSetYaml` and
`scorecardConfigImages` results remain as Tekton results since they are
consumed by remote step action refs.
---
 .tekton/pipelines/deploy-fbc-operator.yaml | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

diff --git a/.tekton/pipelines/deploy-fbc-operator.yaml b/.tekton/pipelines/deploy-fbc-operator.yaml
index c506bb69..db9dc9e8 100644
--- a/.tekton/pipelines/deploy-fbc-operator.yaml
+++ b/.tekton/pipelines/deploy-fbc-operator.yaml
@@ -9,6 +9,8 @@ spec:
     The deploy-fbc-operator pipeline automates the provisioning of a EaaS Hypershift cluster and the deployment of an operator from a given FBC (File-Based Catalog) fragment.
     It automates the process of retrieving an unreleased bundle from the FBC, selecting an appropriate OpenShift version and architecture for cluster provisioning,
     installing the operator, and gathering cluster artifacts.
+  workspaces:
+    - name: shared-data
   params:
     - description: |
         Spec section of an ApplicationSnapshot resource. Not all fields of the
@@ -117,10 +119,12 @@ spec:
         - input: $(tasks.parse-metadata.results.test-event-type)
           operator: in
           values: ["pull_request", "ok-to-test-comment", "retest-all-comment"]
+      workspaces:
+        - name: shared-data
       taskSpec:
+        workspaces:
+          - name: shared-data
         results:
-          - name: mirrorSetYaml
-            description: "Contents of the image mirror set yaml file"
           - name: serializedMirrorSetYaml
             description: "A serialized string of an ImageDigestMirrorSet YAML, where each mirror entry is formatted with escaped newlines to preserve structure in a single-line format"
           - name: scorecardConfigImages
@@ -206,7 +210,8 @@ spec:
                 exit 1
               fi
 
-              echo -n "$mirror_set_yaml" > "$(results.mirrorSetYaml.path)"
+              echo "Image mirror set: $mirror_set_yaml"
+              echo -n "$mirror_set_yaml" > "$(workspaces.shared-data.path)/mirrorSetYaml"
 
               serialized_mirror_set=$(serialize_image_mirrors_yaml "${mirror_set_yaml}")
               echo "Serialized image mirror set: $serialized_mirror_set"
@@ -239,7 +244,11 @@ spec:
         - input: $(tasks.parse-metadata.results.test-event-type)
           operator: in
           values: ["pull_request", "ok-to-test-comment", "retest-all-comment"]
+      workspaces:
+        - name: shared-data
       taskSpec:
+        workspaces:
+          - name: shared-data
         results:
           - name: unreleasedBundle
             description: "Unreleased bundle image (may be mirrored)"
@@ -282,13 +291,13 @@ spec:
             env:
               - name: BUNDLE_IMAGE
                 value: "$(steps.get-unreleased-bundle.results.unreleasedBundle)"
-              - name: MIRROR_SET_YAML
-                value: "$(tasks.fetch-config-files.results.mirrorSetYaml)"
             script: |
               #!/usr/bin/env bash
               set -euo pipefail
               . /utils.sh
 
+              MIRROR_SET_YAML=$(cat "$(workspaces.shared-data.path)/mirrorSetYaml")
+
               replaced_image=""
 
               if [[ -z "${BUNDLE_IMAGE}" || "${BUNDLE_IMAGE}" == "null" ]]; then