Release trustee-operator in OCP 4.17

Signed-off-by: Leonardo Milleri <lmilleri@redhat.com>

.tekton/trustee-fbc-4-17-pull-request.yaml

@@ -0,0 +1,57 @@
+apiVersion: tekton.dev/v1
+kind: PipelineRun
+metadata:
+  annotations:
+    build.appstudio.openshift.io/repo: https://github.com/openshift/trustee-fbc?rev={{revision}}
+    build.appstudio.redhat.com/commit_sha: '{{revision}}'
+    build.appstudio.redhat.com/pull_request_number: '{{pull_request_number}}'
+    build.appstudio.redhat.com/target_branch: '{{target_branch}}'
+    pipelinesascode.tekton.dev/max-keep-runs: "3"
+    pipelinesascode.tekton.dev/on-cel-expression:
+      event == "pull_request" &&
+      target_branch == "main" &&
+      files.all.exists(path, path.matches('.tekton/pipeline.yaml$|.tekton/trustee-fbc-4-17-.*.yaml$|v4.17/Dockerfile$|v4.17/.*/catalog.json$'))
+  creationTimestamp: null
+  labels:
+    appstudio.openshift.io/application: trustee-fbc-4-17
+    appstudio.openshift.io/component: trustee-fbc-4-17
+    pipelines.appstudio.openshift.io/type: build
+  name: trustee-fbc-4-17-on-pull-request
+  namespace: ose-osc-tenant
+spec:
+  params:
+  - name: git-url
+    value: '{{source_url}}'
+  - name: revision
+    value: '{{revision}}'
+  - name: output-image
+    value: quay.io/redhat-user-workloads/ose-osc-tenant/trustee-fbc-4-17:on-pr-{{revision}}
+  - name: image-expires-after
+    value: 5d
+  - name: path-context
+    value: v4.17
+  - name: dockerfile
+    value: v4.17/Dockerfile
+  - name: build-platforms
+    value:
+      - linux/x86_64
+      - linux/s390x
+  pipelineRef:
+    name: build-pipeline
+  taskRunTemplate: {}
+  workspaces:
+  - name: workspace
+    volumeClaimTemplate:
+      metadata:
+        creationTimestamp: null
+      spec:
+        accessModes:
+        - ReadWriteOnce
+        resources:
+          requests:
+            storage: 1Gi
+      status: {}
+  - name: git-auth
+    secret:
+      secretName: '{{ git_auth_secret }}'
+status: {}

.tekton/trustee-fbc-4-17-push.yaml

@@ -0,0 +1,54 @@
+apiVersion: tekton.dev/v1
+kind: PipelineRun
+metadata:
+  annotations:
+    build.appstudio.openshift.io/repo: https://github.com/openshift/trustee-fbc?rev={{revision}}
+    build.appstudio.redhat.com/commit_sha: '{{revision}}'
+    build.appstudio.redhat.com/target_branch: '{{target_branch}}'
+    pipelinesascode.tekton.dev/max-keep-runs: "3"
+    pipelinesascode.tekton.dev/on-cel-expression:
+      event == "push" &&
+      target_branch == "main" &&
+      files.all.exists(path, path.matches('.tekton/pipeline.yaml$|.tekton/trustee-fbc-4-17-.*.yaml$|v4.17/Dockerfile$|v4.17/.*/catalog.json$'))
+  creationTimestamp: null
+  labels:
+    appstudio.openshift.io/application: trustee-fbc-4-17
+    appstudio.openshift.io/component: trustee-fbc-4-17
+    pipelines.appstudio.openshift.io/type: build
+  name: trustee-fbc-4-17-on-push
+  namespace: ose-osc-tenant
+spec:
+  params:
+  - name: git-url
+    value: '{{source_url}}'
+  - name: revision
+    value: '{{revision}}'
+  - name: output-image
+    value: quay.io/redhat-user-workloads/ose-osc-tenant/trustee-fbc-4-17:{{revision}}
+  - name: path-context
+    value: v4.17
+  - name: dockerfile
+    value: v4.17/Dockerfile
+  - name: build-platforms
+    value:
+      - linux/x86_64
+      - linux/s390x
+  pipelineRef:
+    name: build-pipeline
+  taskRunTemplate: {}
+  workspaces:
+  - name: workspace
+    volumeClaimTemplate:
+      metadata:
+        creationTimestamp: null
+      spec:
+        accessModes:
+        - ReadWriteOnce
+        resources:
+          requests:
+            storage: 1Gi
+      status: {}
+  - name: git-auth
+    secret:
+      secretName: '{{ git_auth_secret }}'
+status: {}

v4.17/Dockerfile

@@ -0,0 +1,15 @@
+# The base image is expected to contain
+# /bin/opm (with a serve subcommand) and /bin/grpc_health_probe
+FROM registry.redhat.io/openshift4/ose-operator-registry-rhel9:v4.17
+
+# Configure the entrypoint and command
+ENTRYPOINT ["/bin/opm"]
+CMD ["serve", "/configs", "--cache-dir=/tmp/cache"]
+
+# Copy declarative config root into image at /configs and pre-populate serve cache
+COPY catalog/ /configs
+RUN ["/bin/opm", "serve", "/configs", "--cache-dir=/tmp/cache", "--cache-only"]
+
+# Set DC-specific label for the location of the DC root directory
+# in the image
+LABEL operators.operatorframework.io.index.configs.v1=/configs

v4.17/catalog-template.json

@@ -0,0 +1,24 @@
+{
+    "entries": [
+        {
+            "defaultChannel": "stable",
+            "name": "trustee-operator",
+            "schema": "olm.package"
+        },
+        {
+            "entries": [
+                {
+                    "name": "trustee-operator.v0.1.0"
+                }
+            ],
+            "name": "stable",
+            "package": "trustee-operator",
+            "schema": "olm.channel"
+        },
+        {
+            "image": "registry.redhat.io/confidential-compute-attestation-tech-preview/trustee-operator-bundle@sha256:6ac8c6158f093acd2ff7edd39f1e28788b78f91ee83bb36763d21990276034a0",
+            "schema": "olm.bundle"
+        }
+    ],
+    "schema": "olm.template.basic"
+}