feat: onboard sigstore-a2a to Konflux with agent-card-validation stream

konflux-configs/base/project/kustomization.yaml

@@ -18,5 +18,6 @@ resources:
   - overlay/model-validation-operator
   - overlay/model-transparency
   - overlay/model-transparency-go
+  - overlay/sigstore-a2a
   - overlay/cli-stacks
   - overlay/rhtas-console

konflux-configs/base/project/overlay/sigstore-a2a/kustomization.yaml

@@ -0,0 +1,16 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - project.yaml
+  - template.yaml
+
+components:
+  - ../../base/ec
+  - ../../base/release-plan
+
+patches:
+  - target:
+      name: sigstore-a2a-template
+      kind: ProjectDevelopmentStreamTemplate
+    path: patch/sigstore-a2a.yaml

konflux-configs/base/project/overlay/sigstore-a2a/patch/sigstore-a2a.yaml

@@ -0,0 +1,42 @@
+- op: add
+  path: /spec/resources/-
+  value:
+    apiVersion: appstudio.redhat.com/v1alpha1
+    kind: Component
+    metadata:
+      annotations:
+        build.appstudio.openshift.io/pipeline: '{"name":"docker-build-oci-ta","bundle":"latest"}'
+        git-provider: github
+        git-provider-url: https://github.com
+        mintmaker.appstudio.redhat.com/disabled: "{{.mintmakerDisabled}}"
+      name: "sigstore-a2a{{.nameSuffix}}"
+    spec:
+      application: "{{.application}}{{.nameSuffix}}"
+      componentName: sigstore-a2a
+      source:
+        git:
+          url: https://github.com/securesign/sigstore-a2a
+          revision: "{{.branch}}"
+          dockerfileUrl: Containerfile.rh
+- op: add
+  path: /spec/resources/-
+  value:
+    apiVersion: appstudio.redhat.com/v1alpha1
+    kind: ImageRepository
+    metadata:
+      name: "sigstore-a2a{{.nameSuffix}}"
+      annotations:
+        image-controller.appstudio.redhat.com/update-component-image: 'true'
+      labels:
+        appstudio.redhat.com/application: "{{.application}}{{.nameSuffix}}"
+        appstudio.redhat.com/component: "sigstore-a2a{{.nameSuffix}}"
+    spec:
+      image:
+        name: rhtas-tenant/sigstore-a2a
+        visibility: public
+      notifications:
+        - config:
+            url: https://bombino.api.redhat.com/v1/sbom/quay/push
+          event: repo_push
+          method: webhook
+          title: SBOM-event-to-Bombino

konflux-configs/base/project/overlay/sigstore-a2a/project.yaml

@@ -0,0 +1,8 @@
+apiVersion: projctl.konflux.dev/v1beta1
+kind: Project
+metadata:
+  name: sigstore-a2a
+spec:
+  displayName: "Red Hat Trusted Artifact Signer sigstore-a2a"
+  description: |
+    sigstore-a2a - Keyless signing library for A2A Agent Cards using Sigstore and SLSA provenance.

konflux-configs/base/project/overlay/sigstore-a2a/template.yaml

@@ -0,0 +1,33 @@
+apiVersion: projctl.konflux.dev/v1beta1
+kind: ProjectDevelopmentStreamTemplate
+metadata:
+  name: sigstore-a2a-template
+  labels:
+    build.rhtas.com/ec: registry-rhtas
+    build.rhtas.com/type: component
+spec:
+  project: sigstore-a2a
+  variables:
+    - name: version
+      description: A version number for a new development stream
+    - name: branch
+      description: Git branch
+      defaultValue: "main"
+    - name: nameSuffix
+      description: A suffix which will be added to K8s resource name
+      defaultValue: "-{{hyphenize .version}}"
+    - name: application
+      description: The application name
+      defaultValue: "sigstore-a2a"
+    - name: mintmakerDisabled
+      description: Whether to disable mintmaker annotation on the Component
+      defaultValue: "false"
+  resources:
+    - apiVersion: appstudio.redhat.com/v1alpha1
+      kind: Application
+      metadata:
+        annotations:
+          application.thumbnail: "5"
+        name: "{{.application}}{{.nameSuffix}}"
+      spec:
+        displayName: "{{.application}} ({{.version}})"

konflux-configs/base/stream/agent-card-validation/base/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+resources:
+  - sigstore-a2a.yaml

konflux-configs/base/stream/agent-card-validation/base/sigstore-a2a.yaml

@@ -0,0 +1,15 @@
+apiVersion: projctl.konflux.dev/v1beta1
+kind: ProjectDevelopmentStream
+metadata:
+  name: sigstore-a2a
+spec:
+  project: sigstore-a2a
+  template:
+    name: sigstore-a2a-template
+    values:
+      - name: version
+        value: "main"
+      - name: branch
+        value: "main"
+      - name: nameSuffix
+        value: ""

konflux-configs/base/stream/agent-card-validation/overlay/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - main

konflux-configs/base/stream/agent-card-validation/overlay/main/kustomization.yaml

@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+nameSuffix: -main
+
+components:
+  - ../../base/
+
+configurations:
+  - kustomizeconfig.yaml

konflux-configs/base/stream/agent-card-validation/overlay/main/kustomizeconfig.yaml

@@ -0,0 +1,21 @@
+nameReference:
+- kind: Project
+  version: v1beta1
+  group: projctl.konflux.dev
+  fieldSpecs:
+  - path: spec/project
+    kind: ProjectDevelopmentStreamTemplate
+    group: projctl.konflux.dev
+    version: v1beta1
+  - path: spec/project
+    kind: ProjectDevelopmentStream
+    group: projctl.konflux.dev
+    version: v1beta1
+- kind: ProjectDevelopmentStreamTemplate
+  version: v1beta1
+  group: projctl.konflux.dev
+  fieldSpecs:
+  - path: spec/template/name
+    kind: ProjectDevelopmentStream
+    group: projctl.konflux.dev
+    version: v1beta1

konflux-configs/base/stream/kustomization.yaml

@@ -5,3 +5,4 @@ resources:
   - rhtas/overlay
   - policy-controller/overlay
   - model-validation/overlay
+  - agent-card-validation/overlay