chore: Merge branch 'main' into run-integration-test-otel

Author: Techassi

publish-image-index-manifest/README.md

@@ -29,6 +29,6 @@ This action creates an image index manifest, publishes it, and signs it. It does
 ### Outputs
 
 - `image-index-uri`: The final image index URI, eg. `oci.stackable.tech/spd/kafka:3.4.1-stackable0.0.0-dev`.
-- `image-index-manifest-digest`: The digest (`sha256:...`) of the pushed image index manifest, used as input for SLSA provenance generation.
+- `image-index-manifest-digest`: The digest (`sha256:...`) of the pushed image index manifest.
 
 [publish-image-index-manifest]: ./action.yaml

publish-image-index-manifest/action.yaml

@@ -42,9 +42,7 @@ outputs:
     description: The Image Index URI.
     value: ${{ steps.create-index.outputs.IMAGE_INDEX_URI }}
   image-index-manifest-digest:
-    description: |
-      The digest (sha256:...) of the pushed image index manifest. Used as input
-      for SLSA provenance generation.
+    description: The digest (sha256:...) of the pushed image index manifest.
     value: ${{ steps.create-index.outputs.IMAGE_INDEX_MANIFEST_DIGEST }}
 runs:
   using: composite
@@ -99,8 +97,8 @@ runs:
         docker manifest create "$IMAGE_INDEX_URI" ${AMEND_OPTIONS[@]}
         docker manifest push "$IMAGE_INDEX_URI"
 
-        # Get the image index manifest digest and expose it as an output, so it
-        # can be fed into SLSA provenance generation.
+        # Get the image index manifest digest and expose it as an output, so
+        # callers can reference the pushed index by digest.
         DIGEST=$("$GITHUB_ACTION_PATH/../.scripts/actions/get_manifest_digest.sh" "$IMAGE_INDEX_URI")
         echo "IMAGE_INDEX_MANIFEST_DIGEST=$DIGEST" | tee -a "$GITHUB_OUTPUT"
 

send-slack-notification/README.md

@@ -28,7 +28,6 @@ jobs:
           build-result: ${{ needs.job_1.result }}
           publish-helm-chart-result: ${{ needs.job_3.result }}
           publish-manifests-result: ${{ needs.job_2.result }}
-          generate-provenance-result: ${{ needs.job_4.result }}
           slack-token: ${{ secrets.MY_SECRET }}
 ```
 
@@ -66,7 +65,6 @@ jobs:
 - `build-result` (optional, e.g. `success`)
 - `publish-manifests-result` (optional, e.g. `failure`)
 - `publish-helm-chart-result` (optional, e.g. `failure`)
-- `generate-provenance-result` (optional, e.g. `failure`)
 - `message-subject` (optional, defaults to `github.workflow` for `container-image-build` and
   `github.repository` for `integration-test`)
 

send-slack-notification/action.yaml

@@ -15,9 +15,6 @@ inputs:
   publish-helm-chart-result:
     description: The result of the publish helm chart job (if any)
     default: "N/A"
-  generate-provenance-result:
-    description: The result of the generate provenance job (if any)
-    default: "N/A"
   test-result:
     description: The result of an integration test
   test-health:
@@ -40,7 +37,6 @@ runs:
 
         PUBLISH_MANIFESTS_RESULT: ${{ inputs.publish-manifests-result }}
         PUBLISH_HELM_CHART_RESULT: ${{ inputs.publish-helm-chart-result }}
-        GENERATE_PROVENANCE_RESULT: ${{ inputs.generate-provenance-result }}
         BUILD_RESULT: ${{ inputs.build-result }}
 
         FAILED_TESTS: ${{ inputs.failed-tests }}
@@ -61,7 +57,6 @@ runs:
 
           echo "PUBLISH_MANIFESTS_RESULT=$PUBLISH_MANIFESTS_RESULT" | tee -a "$GITHUB_OUTPUT"
           echo "PUBLISH_HELM_CHART_RESULT=$PUBLISH_HELM_CHART_RESULT" | tee -a "$GITHUB_OUTPUT"
-          echo "GENERATE_PROVENANCE_RESULT=$GENERATE_PROVENANCE_RESULT" | tee -a "$GITHUB_OUTPUT"
           echo "BUILD_RESULT=$BUILD_RESULT" | tee -a "$GITHUB_OUTPUT"
         elif [ "$NOTIFICATION_TYPE" == "integration-test" ]; then
           [ -z "${TEST_RESULT:-}" ] && echo "The test-result input must be provided" && exit 1
@@ -98,7 +93,6 @@ runs:
       env:
         PUBLISH_MANIFESTS_RESULT: ${{ steps.valid_inputs.outputs.PUBLISH_MANIFESTS_RESULT }}
         PUBLISH_HELM_CHART_RESULT: ${{ steps.valid_inputs.outputs.PUBLISH_HELM_CHART_RESULT }}
-        GENERATE_PROVENANCE_RESULT: ${{ steps.valid_inputs.outputs.GENERATE_PROVENANCE_RESULT }}
         BUILD_RESULT: ${{ steps.valid_inputs.outputs.BUILD_RESULT }}
         FAILED_TESTS: ${{ steps.valid_inputs.outputs.FAILED_TESTS }}
         TEST_HEALTH: ${{ steps.valid_inputs.outputs.TEST_HEALTH }}
@@ -126,7 +120,7 @@ runs:
           fi
 
           # TODO (@Techassi): Also add success template
-          if [ "$PUBLISH_MANIFESTS_RESULT" = "failure" ] || [ "$PUBLISH_HELM_CHART_RESULT" = "failure" ] || [ "$GENERATE_PROVENANCE_RESULT" = "failure" ] || [ "$BUILD_RESULT" = "failure" ]; then
+          if [ "$PUBLISH_MANIFESTS_RESULT" = "failure" ] || [ "$PUBLISH_HELM_CHART_RESULT" = "failure" ] || [ "$BUILD_RESULT" = "failure" ]; then
             export MESSAGE_VERB=failed
             export MESSAGE_COLOR=aa0000
           else

send-slack-notification/templates/container-image-build/failure.tpl

@@ -14,9 +14,6 @@ attachments:
       - title: Build/Publish Helm Chart
         short: true
         value: "${PUBLISH_HELM_CHART_RESULT}"
-      - title: Generate Provenance
-        short: true
-        value: "${GENERATE_PROVENANCE_RESULT}"
     actions:
       - type: button
         text: Go to workflow run