Enable hermetic builds

Signed-off-by: zhujian <[email protected]>

.tekton/addon-manager-mce-28-pull-request.yaml

@@ -17,6 +17,8 @@ metadata:
   namespace: crt-redhat-acm-tenant
 spec:
   params:
+  - name: hermetic
+    value: "true"
   - name: git-url
     value: '{{source_url}}'
   - name: revision
@@ -90,7 +92,7 @@ spec:
     - default: ""
       description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
       name: image-expires-after
-    - default: "false"
+    - default: "true"
       description: Build a source image.
       name: build-source-image
       type: string

.tekton/addon-manager-mce-28-push.yaml

@@ -16,6 +16,8 @@ metadata:
   namespace: crt-redhat-acm-tenant
 spec:
   params:
+  - name: hermetic
+    value: "true"
   - name: git-url
     value: '{{source_url}}'
   - name: revision
@@ -87,7 +89,7 @@ spec:
     - default: ""
       description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
       name: image-expires-after
-    - default: "false"
+    - default: "true"
       description: Build a source image.
       name: build-source-image
       type: string

.tekton/placement-mce-28-pull-request.yaml

@@ -17,6 +17,8 @@ metadata:
   namespace: crt-redhat-acm-tenant
 spec:
   params:
+  - name: hermetic
+    value: "true"
   - name: git-url
     value: '{{source_url}}'
   - name: revision
@@ -90,7 +92,7 @@ spec:
     - default: ""
       description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
       name: image-expires-after
-    - default: "false"
+    - default: "true"
       description: Build a source image.
       name: build-source-image
       type: string

.tekton/placement-mce-28-push.yaml

@@ -16,6 +16,8 @@ metadata:
   namespace: crt-redhat-acm-tenant
 spec:
   params:
+  - name: hermetic
+    value: "true"
   - name: git-url
     value: '{{source_url}}'
   - name: revision
@@ -87,7 +89,7 @@ spec:
     - default: ""
       description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
       name: image-expires-after
-    - default: "false"
+    - default: "true"
       description: Build a source image.
       name: build-source-image
       type: string

.tekton/registration-mce-28-pull-request.yaml

@@ -17,6 +17,8 @@ metadata:
   namespace: crt-redhat-acm-tenant
 spec:
   params:
+  - name: hermetic
+    value: "true"
   - name: git-url
     value: '{{source_url}}'
   - name: revision
@@ -90,7 +92,7 @@ spec:
     - default: ""
       description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
       name: image-expires-after
-    - default: "false"
+    - default: "true"
       description: Build a source image.
       name: build-source-image
       type: string

.tekton/registration-mce-28-push.yaml

@@ -16,6 +16,8 @@ metadata:
   namespace: crt-redhat-acm-tenant
 spec:
   params:
+  - name: hermetic
+    value: "true"
   - name: git-url
     value: '{{source_url}}'
   - name: revision
@@ -87,7 +89,7 @@ spec:
     - default: ""
       description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
       name: image-expires-after
-    - default: "false"
+    - default: "true"
       description: Build a source image.
       name: build-source-image
       type: string

.tekton/registration-operator-mce-28-pull-request.yaml

@@ -17,6 +17,8 @@ metadata:
   namespace: crt-redhat-acm-tenant
 spec:
   params:
+  - name: hermetic
+    value: "true"
   - name: git-url
     value: '{{source_url}}'
   - name: revision
@@ -90,7 +92,7 @@ spec:
     - default: ""
       description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
       name: image-expires-after
-    - default: "false"
+    - default: "true"
       description: Build a source image.
       name: build-source-image
       type: string

.tekton/registration-operator-mce-28-push.yaml

@@ -16,6 +16,8 @@ metadata:
   namespace: crt-redhat-acm-tenant
 spec:
   params:
+  - name: hermetic
+    value: "true"
   - name: git-url
     value: '{{source_url}}'
   - name: revision
@@ -87,7 +89,7 @@ spec:
     - default: ""
       description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
       name: image-expires-after
-    - default: "false"
+    - default: "true"
       description: Build a source image.
       name: build-source-image
       type: string

.tekton/work-mce-28-pull-request.yaml

@@ -17,6 +17,8 @@ metadata:
   namespace: crt-redhat-acm-tenant
 spec:
   params:
+  - name: hermetic
+    value: "true"
   - name: git-url
     value: '{{source_url}}'
   - name: revision
@@ -90,7 +92,7 @@ spec:
     - default: ""
       description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
       name: image-expires-after
-    - default: "false"
+    - default: "true"
       description: Build a source image.
       name: build-source-image
       type: string

.tekton/work-mce-28-push.yaml

@@ -16,6 +16,8 @@ metadata:
   namespace: crt-redhat-acm-tenant
 spec:
   params:
+  - name: hermetic
+    value: "true"
   - name: git-url
     value: '{{source_url}}'
   - name: revision
@@ -87,7 +89,7 @@ spec:
     - default: ""
       description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
       name: image-expires-after
-    - default: "false"
+    - default: "true"
       description: Build a source image.
       name: build-source-image
       type: string

build/Dockerfile.addon.rhtap

@@ -11,6 +11,16 @@ RUN GOOS=${OS} \
     make build --warn-undefined-variables
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
+
+LABEL \
+      name="multicluster-engine/addon-manager-rhel9" \
+      summary="addon-manager" \
+      description="addon-manager" \
+      io.k8s.description="addon-manager" \
+      io.k8s.display-name="addon-manager" \
+      com.redhat.component="multicluster-engine-addon-manager-container" \
+      io.openshift.tags="data,images"
+
 ENV USER_UID=10001
 COPY --from=builder /go/src/open-cluster-management.io/ocm/addon /
 

build/Dockerfile.placement.rhtap

@@ -11,6 +11,16 @@ RUN GOOS=${OS} \
     make build --warn-undefined-variables
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
+
+LABEL \
+      name="multicluster-engine/placement-rhel9" \
+      summary="placement" \
+      description="placement" \
+      io.k8s.description="placement" \
+      io.k8s.display-name="placement" \
+      com.redhat.component="multicluster-engine-placement-container" \
+      io.openshift.tags="data,images"
+
 ENV USER_UID=10001
 
 COPY --from=builder /go/src/open-cluster-management.io/ocm/placement /

build/Dockerfile.registration-operator.rhtap

@@ -11,6 +11,16 @@ RUN GOOS=${OS} \
     make build --warn-undefined-variables
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
+
+LABEL \
+      name="multicluster-engine/registration-operator-rhel9" \
+      summary="registration-operator" \
+      description="registration-operator" \
+      io.k8s.description="registration-operator" \
+      io.k8s.display-name="registration-operator" \
+      com.redhat.component="multicluster-engine-registration-operator-container" \
+      io.openshift.tags="data,images"
+
 ENV USER_UID=10001
 
 COPY --from=builder /go/src/open-cluster-management.io/ocm/registration-operator /

build/Dockerfile.registration.rhtap

@@ -11,6 +11,16 @@ RUN GOOS=${OS} \
     make build --warn-undefined-variables
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
+
+LABEL \
+      name="multicluster-engine/registration-rhel9" \
+      summary="registration" \
+      description="registration" \
+      io.k8s.description="registration" \
+      io.k8s.display-name="registration" \
+      com.redhat.component="multicluster-engine-registration-container" \
+      io.openshift.tags="data,images"
+
 ENV USER_UID=10001
 
 COPY --from=builder /go/src/open-cluster-management.io/ocm/registration /

build/Dockerfile.work.rhtap

@@ -11,6 +11,16 @@ RUN GOOS=${OS} \
     make build --warn-undefined-variables
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
+
+LABEL \
+      name="multicluster-engine/work-rhel9" \
+      summary="work" \
+      description="work" \
+      io.k8s.description="work" \
+      io.k8s.display-name="work" \
+      com.redhat.component="multicluster-engine-work-container" \
+      io.openshift.tags="data,images"
+
 ENV USER_UID=10001
 
 COPY --from=builder /go/src/open-cluster-management.io/ocm/work /