Skip to content

fix: update nudge chain for cli-stack architecture#534

Merged
osmman merged 1 commit into
mainfrom
fix/update-nudge-chain
Jun 25, 2026
Merged

fix: update nudge chain for cli-stack architecture#534
osmman merged 1 commit into
mainfrom
fix/update-nudge-chain

Conversation

@sampras343

Copy link
Copy Markdown
Member

Summary

Client-server now consumes cli-stack images instead of component images directly. Update the nudge chain from:

component → [cli-stack, client-server]  (old)

to:

component → cli-stack → client-server  (new)

Changes

Removed client-server from component nudges (7 files):

  • tas-tools/cosign.yaml, gitsign.yaml, rekor-cli.yaml, fetch-tsa.yaml, update-tree.yaml
  • create-tree/create-tree.yaml
  • tough/tuf-tool.yaml

Added client-server to cli-stack nudges (6 files):

  • cli-stacks/cosign-cli-stack.yaml, gitsign-cli-stack.yaml, rekor-cli-stack.yaml
  • cli-stacks/fetch-tsa-certs-cli-stack.yaml, trillian-cli-stack.yaml, tuftool-cli-stack.yaml

This ensures the correct build order: component rebuilds → nudges cli-stack → cli-stack rebuilds → nudges client-server → client-server rebuilds with updated cli-stack digests.

Test plan

  • Verify nudge chain triggers correctly: component rebuild → cli-stack rebuild → client-server rebuild
  • No direct component → client-server nudges remain for tools that go through cli-stacks

Client-server now consumes cli-stack images instead of component
images directly. Update the nudge chain from:
  component → [cli-stack, client-server]
to:
  component → cli-stack → client-server

Remove client-server from component nudges (cosign, gitsign, rekor-cli,
fetch-tsa-certs, updatetree, createtree, tuf-tool) and add it to
cli-stack nudges (cosign, gitsign, rekor, fetch-tsa-certs, trillian,
tuftool) so rebuilds cascade correctly.

Signed-off-by: Sachin Sampras M <sampras343@gmail.com>
@github-actions

Copy link
Copy Markdown

Configuration Diff

13 document(s) impacted:

+ 0 added
- 0 removed
! 13 modified
Diff
@@ spec.resources.appstudio.redhat.com/v1alpha1/Component/gitsign-cli-stack{{.nameSuffix}}.spec @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/cli-stacks-template
! + one map entry added:
+   build-nudges-ref:
+   - client-server{{.nameSuffix}}

@@ spec.resources.appstudio.redhat.com/v1alpha1/Component/cosign-cli-stack{{.nameSuffix}}.spec @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/cli-stacks-template
! + one map entry added:
+   build-nudges-ref:
+   - client-server{{.nameSuffix}}

@@ spec.resources.appstudio.redhat.com/v1alpha1/Component/rekor-cli-stack{{.nameSuffix}}.spec @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/cli-stacks-template
! + one map entry added:
+   build-nudges-ref:
+   - client-server{{.nameSuffix}}

@@ spec.resources.appstudio.redhat.com/v1alpha1/Component/trillian-cli-stack{{.nameSuffix}}.spec @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/cli-stacks-template
! + one map entry added:
+   build-nudges-ref:
+   - client-server{{.nameSuffix}}

@@ spec.resources.appstudio.redhat.com/v1alpha1/Component/fetch-tsa-certs-cli-stack{{.nameSuffix}}.spec @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/cli-stacks-template
! + one map entry added:
+   build-nudges-ref:
+   - client-server{{.nameSuffix}}

@@ spec.resources.appstudio.redhat.com/v1alpha1/Component/tuftool-cli-stack{{.nameSuffix}}.spec @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/cli-stacks-template
! + one map entry added:
+   build-nudges-ref:
+   - client-server{{.nameSuffix}}

@@ spec.resources.Component.spec.build-nudges-ref @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/create-tree-template
! - one list entry removed:
- - client-server{{.nameSuffix}}

@@ spec.resources.appstudio.redhat.com/v1alpha1/Component/cosign{{.nameSuffix}}.spec.build-nudges-ref @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/tas-tools-template
! - one list entry removed:
- - client-server{{.nameSuffix}}

@@ spec.resources.appstudio.redhat.com/v1alpha1/Component/fetch-tsa-certs{{.nameSuffix}}.spec.build-nudges-ref @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/tas-tools-template
! - one list entry removed:
- - client-server{{.nameSuffix}}

@@ spec.resources.appstudio.redhat.com/v1alpha1/Component/gitsign{{.nameSuffix}}.spec.build-nudges-ref @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/tas-tools-template
! - one list entry removed:
- - client-server{{.nameSuffix}}

@@ spec.resources.appstudio.redhat.com/v1alpha1/Component/updatetree{{.nameSuffix}}.spec.build-nudges-ref @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/tas-tools-template
! - one list entry removed:
- - client-server{{.nameSuffix}}

@@ spec.resources.appstudio.redhat.com/v1alpha1/Component/rekor-cli{{.nameSuffix}}.spec.build-nudges-ref @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/tas-tools-template
! - one list entry removed:
- - client-server{{.nameSuffix}}

@@ spec.resources.appstudio.redhat.com/v1alpha1/Component/tuf-tool{{.nameSuffix}}.spec.build-nudges-ref @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/tough-template
! - one list entry removed:
- - client-server{{.nameSuffix}}

📦 Artifacts: base-output.yaml, head-output.yaml, dyff-output.txt

@osmman osmman merged commit f273dbb into main Jun 25, 2026
4 checks passed
@osmman osmman deleted the fix/update-nudge-chain branch June 25, 2026 12:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants